@mneme-ai/core 2.19.29 → 2.19.31

package/dist/soul_embalming/soul_embalming.test.js

@@ -0,0 +1,171 @@
+import { describe, it, expect } from "vitest";
+import { emptyCrypt, embalmSoul, restoreLatestSoul, restoreSoulAt, verifyCrypt, computeCryptStats, formatCryptLine, SOUL_EMBALMING_TUNABLES, } from "./index.js";
+const SECRET = "soul-test-secret-997744";
+function mkSoul(agentId, ts, goal = "x") {
+    return {
+        v: 1,
+        agentId,
+        vendorAtEmbalm: "claude",
+        currentGoal: goal,
+        decisionHistory: [{ summary: "decided x", ts, outcome: "merged" }],
+        mentalModel: { fact: "y" },
+        currentBiases: { focus: 0.7, fatigue: 0.2 },
+        lastToolCalls: [{ toolName: "mneme.ask", ok: true, ts }],
+        embalmedAtMs: ts,
+    };
+}
+describe("v2.19.30 SOUL EMBALMING · core", () => {
+    it("emptyCrypt has 0 records + correct agent id + default ring size", () => {
+        const c = emptyCrypt("agent-A");
+        expect(c.records.length).toBe(0);
+        expect(c.agentId).toBe("agent-A");
+        expect(c.ringBufferSize).toBe(SOUL_EMBALMING_TUNABLES.DEFAULT_RING_BUFFER_SIZE);
+    });
+    it("embalmSoul appends + HMAC-chains to predecessor", () => {
+        let c = emptyCrypt("a");
+        c = embalmSoul({ crypt: c, soul: mkSoul("a", 1), secret: SECRET });
+        c = embalmSoul({ crypt: c, soul: mkSoul("a", 2), secret: SECRET });
+        expect(c.records.length).toBe(2);
+        expect(c.records[1].prevSig).toBe(c.records[0].sig);
+        expect(verifyCrypt(c, SECRET)).toBe(true);
+    });
+    it("DEFENSIVE: soul with mismatched agentId is rejected (returns crypt unchanged)", () => {
+        const c0 = emptyCrypt("a");
+        const c1 = embalmSoul({ crypt: c0, soul: mkSoul("WRONG-AGENT", 1), secret: SECRET });
+        expect(c1.records.length).toBe(0);
+    });
+    it("DEFENSIVE: soul missing agentId is rejected", () => {
+        const c0 = emptyCrypt("a");
+        const malformed = { ...mkSoul("a", 1), agentId: "" };
+        const c1 = embalmSoul({ crypt: c0, soul: malformed, secret: SECRET });
+        expect(c1.records.length).toBe(0);
+    });
+    it("ring buffer evicts oldest when exceeded", () => {
+        let c = emptyCrypt("a", 3); // tiny ring for test
+        for (let i = 0; i < 5; i++) {
+            c = embalmSoul({ crypt: c, soul: mkSoul("a", i), secret: SECRET });
+        }
+        expect(c.records.length).toBe(3);
+        expect(c.records[0].soul.embalmedAtMs).toBe(2); // oldest 3 evicted; indices 2,3,4 remain
+        expect(c.records[2].soul.embalmedAtMs).toBe(4);
+    });
+    it("decisionHistory + lastToolCalls capped to defaults (no unbounded growth)", () => {
+        const big = {
+            ...mkSoul("a", 1),
+            decisionHistory: Array.from({ length: 500 }, (_, i) => ({ summary: `d${i}`, ts: i, outcome: "merged" })),
+            lastToolCalls: Array.from({ length: 100 }, (_, i) => ({ toolName: `t${i}`, ok: true, ts: i })),
+        };
+        const c = embalmSoul({ crypt: emptyCrypt("a"), soul: big, secret: SECRET });
+        expect(c.records[0].soul.decisionHistory.length).toBe(SOUL_EMBALMING_TUNABLES.DEFAULT_DECISION_HISTORY_LIMIT);
+        expect(c.records[0].soul.lastToolCalls.length).toBe(SOUL_EMBALMING_TUNABLES.DEFAULT_TOOL_CALL_LIMIT);
+    });
+});
+describe("v2.19.30 SOUL EMBALMING · restore (ban recovery)", () => {
+    it("restoreLatestSoul returns most recent + ban-recovery scenario verified", () => {
+        let c = emptyCrypt("agent-claude");
+        c = embalmSoul({ crypt: c, soul: mkSoul("agent-claude", 1000, "refactor auth.ts"), secret: SECRET });
+        c = embalmSoul({ crypt: c, soul: mkSoul("agent-claude", 5000, "refactor auth.ts → split into 3 files"), secret: SECRET });
+        const restored = restoreLatestSoul({ crypt: c, secret: SECRET });
+        expect(restored).not.toBeNull();
+        expect(restored.currentGoal).toContain("split into 3 files");
+        // The "new agent" (Codex/Gemini) receives this soul and continues without rollback.
+    });
+    it("restoreLatestSoul on empty crypt → null (defensive)", () => {
+        expect(restoreLatestSoul({ crypt: emptyCrypt("a"), secret: SECRET })).toBeNull();
+    });
+    it("restoreSoulAt supports negative index (-1 = newest)", () => {
+        let c = emptyCrypt("a");
+        c = embalmSoul({ crypt: c, soul: mkSoul("a", 1), secret: SECRET });
+        c = embalmSoul({ crypt: c, soul: mkSoul("a", 2), secret: SECRET });
+        expect(restoreSoulAt({ crypt: c, index: -1, secret: SECRET }).embalmedAtMs).toBe(2);
+        expect(restoreSoulAt({ crypt: c, index: 0, secret: SECRET }).embalmedAtMs).toBe(1);
+    });
+    it("out-of-range index → null", () => {
+        let c = emptyCrypt("a");
+        c = embalmSoul({ crypt: c, soul: mkSoul("a", 1), secret: SECRET });
+        expect(restoreSoulAt({ crypt: c, index: 99, secret: SECRET })).toBeNull();
+    });
+    it("tampered crypt → restoreLatestSoul returns null (fail-safe)", () => {
+        let c = emptyCrypt("a");
+        c = embalmSoul({ crypt: c, soul: mkSoul("a", 1), secret: SECRET });
+        const tampered = {
+            ...c,
+            records: c.records.map((r) => ({ ...r, soul: { ...r.soul, currentGoal: "INJECTED" } })),
+        };
+        expect(restoreLatestSoul({ crypt: tampered, secret: SECRET })).toBeNull();
+    });
+});
+describe("v2.19.30 SOUL EMBALMING · verifyCrypt", () => {
+    it("verifies untampered chain (10 souls)", () => {
+        let c = emptyCrypt("a");
+        for (let i = 0; i < 10; i++)
+            c = embalmSoul({ crypt: c, soul: mkSoul("a", i), secret: SECRET });
+        expect(verifyCrypt(c, SECRET)).toBe(true);
+    });
+    it("detects tamper at any step", () => {
+        let c = emptyCrypt("a");
+        for (let i = 0; i < 5; i++)
+            c = embalmSoul({ crypt: c, soul: mkSoul("a", i), secret: SECRET });
+        const tampered = {
+            ...c,
+            records: c.records.map((r, i) => i === 2 ? { ...r, soul: { ...r.soul, vendorAtEmbalm: "EVIL" } } : r),
+        };
+        expect(verifyCrypt(tampered, SECRET)).toBe(false);
+    });
+    it("MEASURED 100% determinism: same souls + secret → same sig (30 trials)", () => {
+        const make = () => {
+            let c = emptyCrypt("a");
+            c = embalmSoul({ crypt: c, soul: mkSoul("a", 1), secret: SECRET });
+            return c;
+        };
+        const first = make().records[0].sig;
+        let allEqual = true;
+        for (let i = 0; i < 30; i++) {
+            if (make().records[0].sig !== first) {
+                allEqual = false;
+                break;
+            }
+        }
+        expect(allEqual).toBe(true);
+    });
+});
+describe("v2.19.30 SOUL EMBALMING · stats + formatter", () => {
+    it("computeCryptStats reports totals + capacity + span", () => {
+        let c = emptyCrypt("a", 10);
+        c = embalmSoul({ crypt: c, soul: mkSoul("a", 0), secret: SECRET });
+        c = embalmSoul({ crypt: c, soul: mkSoul("a", 86400_000), secret: SECRET }); // 1 day later
+        const s = computeCryptStats(c);
+        expect(s.totalRecords).toBe(2);
+        expect(s.capacityUsed).toBeCloseTo(0.2, 5);
+        expect(s.spanMs).toBe(86400_000);
+    });
+    it("empty crypt stats → all zero / null (defensive)", () => {
+        const s = computeCryptStats(emptyCrypt("a"));
+        expect(s.totalRecords).toBe(0);
+        expect(s.oldestEmbalmedAtMs).toBeNull();
+    });
+    it("formatCryptLine renders one-line digest", () => {
+        const c = emptyCrypt("agent-claude");
+        expect(formatCryptLine(computeCryptStats(c))).toContain("CRYPT agent-claude");
+    });
+});
+describe("v2.19.30 SOUL EMBALMING · 24/7 resilience", () => {
+    it("MEASURED never crashes on 1000 random embalms + restores", () => {
+        let c = emptyCrypt("a", 100);
+        let crashed = false;
+        try {
+            for (let i = 0; i < 1000; i++) {
+                c = embalmSoul({ crypt: c, soul: mkSoul("a", i, `goal_${i}`), secret: SECRET });
+                restoreLatestSoul({ crypt: c, secret: SECRET });
+                restoreSoulAt({ crypt: c, index: i % 5, secret: SECRET });
+            }
+        }
+        catch {
+            crashed = true;
+        }
+        expect(crashed).toBe(false);
+        expect(verifyCrypt(c, SECRET)).toBe(true);
+        expect(c.records.length).toBe(100); // ring buffer enforced
+    });
+});
+//# sourceMappingURL=soul_embalming.test.js.map

package/dist/soul_embalming/soul_embalming.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"soul_embalming.test.js","sourceRoot":"","sources":["../../src/soul_embalming/soul_embalming.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,UAAU,EACV,UAAU,EACV,iBAAiB,EACjB,aAAa,EACb,WAAW,EACX,iBAAiB,EACjB,eAAe,EACf,uBAAuB,GAGxB,MAAM,YAAY,CAAC;AAEpB,MAAM,MAAM,GAAG,yBAAyB,CAAC;AAEzC,SAAS,MAAM,CAAC,OAAe,EAAE,EAAU,EAAE,IAAI,GAAG,GAAG;IACrD,OAAO;QACL,CAAC,EAAE,CAAC;QACJ,OAAO;QACP,cAAc,EAAE,QAAQ;QACxB,WAAW,EAAE,IAAI;QACjB,eAAe,EAAE,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;QAClE,WAAW,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE;QAC1B,aAAa,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE;QAC3C,aAAa,EAAE,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QACxD,YAAY,EAAE,EAAE;KACjB,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC9C,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,CAAC,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;QAChC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,wBAAwB,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,IAAI,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC,GAAG,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACnE,CAAC,GAAG,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACnE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,GAAG,CAAC,CAAC;QACtD,MAAM,CAAC,WAAW,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,GAAG,EAAE;QACvF,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAC3B,MAAM,EAAE,GAAG,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACrF,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAC3B,MAAM,SAAS,GAAG,EAAE,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QACrD,MAAM,EAAE,GAAG,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,IAAI,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,qBAAqB;QACjD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,CAAC,GAAG,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,yCAAyC;QAC1F,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,MAAM,GAAG,GAAc;YACrB,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;YACjB,eAAe,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,QAAiB,EAAE,CAAC,CAAC;YACjH,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;SAC/F,CAAC;QACF,MAAM,CAAC,GAAG,UAAU,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5E,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,8BAA8B,CAAC,CAAC;QAC/G,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,uBAAuB,CAAC,CAAC;IACxG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,kDAAkD,EAAE,GAAG,EAAE;IAChE,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,IAAI,CAAC,GAAG,UAAU,CAAC,cAAc,CAAC,CAAC;QACnC,CAAC,GAAG,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,cAAc,EAAE,IAAI,EAAE,kBAAkB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACrG,CAAC,GAAG,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,cAAc,EAAE,IAAI,EAAE,uCAAuC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1H,MAAM,QAAQ,GAAG,iBAAiB,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACjE,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,CAAC,QAAS,CAAC,WAAW,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QAC9D,oFAAoF;IACtF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,IAAI,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC,GAAG,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACnE,CAAC,GAAG,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACnE,MAAM,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAE,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrF,MAAM,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAE,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,IAAI,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC,GAAG,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACnE,MAAM,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,IAAI,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC,GAAG,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACnE,MAAM,QAAQ,GAAc;YAC1B,GAAG,CAAC;YACJ,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;SACxF,CAAC;QACF,MAAM,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC5E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uCAAuC,EAAE,GAAG,EAAE;IACrD,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,IAAI,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QACxB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;YAAE,CAAC,GAAG,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAChG,MAAM,CAAC,WAAW,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,IAAI,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QACxB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;YAAE,CAAC,GAAG,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/F,MAAM,QAAQ,GAAc;YAC1B,GAAG,CAAC;YACJ,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;SACtG,CAAC;QACF,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,MAAM,IAAI,GAAG,GAAG,EAAE;YAChB,IAAI,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;YACxB,CAAC,GAAG,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YACnE,OAAO,CAAC,CAAC;QACX,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,IAAI,EAAE,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,GAAG,CAAC;QACrC,IAAI,QAAQ,GAAG,IAAI,CAAC;QACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,IAAI,IAAI,EAAE,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,GAAG,KAAK,KAAK,EAAE,CAAC;gBAAC,QAAQ,GAAG,KAAK,CAAC;gBAAC,MAAM;YAAC,CAAC;QACpE,CAAC;QACD,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,6CAA6C,EAAE,GAAG,EAAE;IAC3D,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,IAAI,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC5B,CAAC,GAAG,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACnE,CAAC,GAAG,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,cAAc;QAC1F,MAAM,CAAC,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,CAAC,GAAG,iBAAiB,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7C,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,CAAC,GAAG,UAAU,CAAC,cAAc,CAAC,CAAC;QACrC,MAAM,CAAC,eAAe,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,2CAA2C,EAAE,GAAG,EAAE;IACzD,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,IAAI,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC7B,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC;YACH,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC9B,CAAC,GAAG,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;gBAChF,iBAAiB,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;gBAChD,aAAa,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;QACD,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5B,MAAM,CAAC,WAAW,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,uBAAuB;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/synapse_sync/index.d.ts

@@ -0,0 +1,142 @@
+/**
+ * v2.19.31 — MNEME CROSS-DEVICE SYNAPSE SYNC (Phase D of SYNAPSE GENESIS)
+ *
+ *   "บั๊กใหญ่มาก — ไม่สามารถ sync brain ข้าม device ได้. ต้องทำให้ใช้
+ *    ได้ ผมถึงบอกว่าคุณต้องเทสเยอะๆ ว่ามัน sync brain ได้จริงๆ ข้าม mobile
+ *    + computer + notebook"
+ *                                          — user mandate, 2026-05-17
+ *
+ *   Diagnosis: v2.19.29 SYNAPSE GENESIS learned weights locally. v2.19.30
+ *   SOUL EMBALMING preserved them across BAN. Neither handles the third
+ *   axis: the user works on mobile, laptop, and desktop. Each grows its
+ *   own synapse store. Without a merge protocol, every device re-learns
+ *   the same lessons from scratch and the brain never unifies.
+ *
+ *   The protocol must be:
+ *     - CRDT (commutative, associative, idempotent) so merge order
+ *       doesn't matter (mobile→laptop ≡ laptop→mobile)
+ *     - "Last-strongest-wins" per synapse key — the device that has
+ *       observed a synapse most strongly / most recently provides the
+ *       canonical weight, BUT permanent=true is sticky (once any device
+ *       has crystallised a synapse, the merged result is permanent too)
+ *     - Cumulative observationCount — total reinforcement across all
+ *       devices, never lose evidence
+ *     - HMAC-signed export envelopes — receivers verify before merging
+ *     - Vendor-neutral — transport is caller-supplied (git branch via
+ *       DIASPORA, HTTP bridge, USB stick, QR-code chain via BEACON,
+ *       whatever the user prefers)
+ *
+ *   Composes onto:
+ *     - v2.19.29 Phase A HEBBIAN (SynapseWeight / SynapseStore types)
+ *     - v2.19.30 SOUL EMBALMING (HMAC chain pattern)
+ *     - v1.72   DIASPORA (transport — caller wires git/HTTP/QR)
+ *
+ * Honest scope:
+ *   - PURE FUNCTION merge. Never throws.
+ *   - HMAC-signed envelopes — forged exports auto-dropped.
+ *   - Deterministic: same inputs → same merged store + same provenance map.
+ *   - Defensive: empty exports, single-device, NaN weights, key collisions
+ *     handled silently. 24/7 safe.
+ *   - "permanent OR" semantics — never demotes a permanent synapse.
+ */
+import type { SynapseStore } from "../synapse_genesis/index.js";
+declare const PROTOCOL_VERSION: 1;
+export interface DeviceSynapseExport {
+    v: typeof PROTOCOL_VERSION;
+    /** Stable, user-supplied device id (e.g. "macbook-pro-2026" or hash thereof). */
+    deviceId: string;
+    /** ms since epoch when the export was packaged. */
+    exportedAtMs: number;
+    store: SynapseStore;
+    /** HMAC over the canonical export body (everything above except sig). */
+    sig: string;
+}
+export interface MergeProvenance {
+    /** Composite synapse key. */
+    key: string;
+    /** deviceId whose weight + lastObservedAtMs won. */
+    winnerDeviceId: string;
+    /** All contributing devices (deviceId → contributing weight). */
+    contributors: Array<{
+        deviceId: string;
+        weight: number;
+        observationCount: number;
+        lastObservedAtMs: number;
+        permanent: boolean;
+    }>;
+    /** Final merged values. */
+    mergedWeight: number;
+    mergedObservationCount: number;
+    mergedPermanent: boolean;
+    mergedLastObservedAtMs: number;
+}
+export interface MergedSynapseResult {
+    v: typeof PROTOCOL_VERSION;
+    store: SynapseStore;
+    /** Per-key trace of which device contributed what — auditable. */
+    provenance: MergeProvenance[];
+    /** Devices that participated in the merge (after dedup). */
+    participatingDevices: string[];
+    /** Devices that were dropped because of bad signature / shape. */
+    rejectedDevices: string[];
+}
+/**
+ * Package a local store for cross-device transport.
+ * The envelope is HMAC-signed so receivers can detect tampering.
+ */
+export declare function exportForSync(input: {
+    deviceId: string;
+    store: SynapseStore;
+    nowMs?: number;
+    secret?: string;
+}): DeviceSynapseExport;
+/** Verify an export envelope's HMAC. Returns false on forged / tampered envelopes. */
+export declare function verifySyncExport(envelope: DeviceSynapseExport, secret?: string): boolean;
+/**
+ * Merge N device exports into one canonical synapse store.
+ *
+ * Verifies each envelope's HMAC first; bad envelopes go into `rejectedDevices`
+ * and contribute nothing. Duplicate deviceIds: last-export-wins (most recent
+ * exportedAtMs).
+ *
+ * The merged store gets a freshly-recomputed signature with the local secret
+ * (so it can re-export). Caller (daemon) typically writes the merged store
+ * back to disk as the new local synapse_genesis state.
+ */
+export declare function mergeSynapseStores(input: {
+    exports: DeviceSynapseExport[];
+    secret?: string;
+    /** Optional explicit synapse_genesis secret for the OUTPUT store sig. */
+    storeSecret?: string;
+}): MergedSynapseResult;
+/**
+ * DIASPORA-shape adapter: serialize an export envelope to a JSON path the
+ * caller's transport (git branch `diaspora/synapse-<deviceId>`, HTTP PUT,
+ * QR-chain, USB stick) can carry. Returns the canonical bytes + the
+ * recommended file path; the caller's chosen transport actually moves it.
+ */
+export declare function packForDiaspora(envelope: DeviceSynapseExport): {
+    path: string;
+    bytes: string;
+    branchHint: string;
+};
+/**
+ * DIASPORA-shape unpack: read JSON bytes a caller fetched via their
+ * transport and return the typed envelope. Returns null on parse failure.
+ */
+export declare function unpackFromDiaspora(bytes: string): DeviceSynapseExport | null;
+export interface CrossDeviceSyncStats {
+    participatingDevices: number;
+    rejectedDevices: number;
+    totalSynapses: number;
+    permanentSynapses: number;
+    multiDeviceSynapses: number;
+    unifiedObservations: number;
+}
+export declare function computeSyncStats(result: MergedSynapseResult): CrossDeviceSyncStats;
+export declare function formatSyncStatsLine(s: CrossDeviceSyncStats): string;
+export declare const SYNAPSE_SYNC_TUNABLES: Readonly<{
+    PROTOCOL_VERSION: 1;
+}>;
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/synapse_sync/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/synapse_sync/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAiB,MAAM,6BAA6B,CAAC;AAE/E,QAAA,MAAM,gBAAgB,EAAG,CAAU,CAAC;AAEpC,MAAM,WAAW,mBAAmB;IAClC,CAAC,EAAE,OAAO,gBAAgB,CAAC;IAC3B,iFAAiF;IACjF,QAAQ,EAAE,MAAM,CAAC;IACjB,mDAAmD;IACnD,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,YAAY,CAAC;IACpB,yEAAyE;IACzE,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,eAAe;IAC9B,6BAA6B;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,oDAAoD;IACpD,cAAc,EAAE,MAAM,CAAC;IACvB,iEAAiE;IACjE,YAAY,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAClI,2BAA2B;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,eAAe,EAAE,OAAO,CAAC;IACzB,sBAAsB,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,mBAAmB;IAClC,CAAC,EAAE,OAAO,gBAAgB,CAAC;IAC3B,KAAK,EAAE,YAAY,CAAC;IACpB,kEAAkE;IAClE,UAAU,EAAE,eAAe,EAAE,CAAC;IAC9B,4DAA4D;IAC5D,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,kEAAkE;IAClE,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAsBD;;;GAGG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,YAAY,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,mBAAmB,CAWtB;AAED,sFAAsF;AACtF,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,mBAAmB,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CASxF;AA+ED;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE;IACxC,OAAO,EAAE,mBAAmB,EAAE,CAAC;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yEAAyE;IACzE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GAAG,mBAAmB,CAoFtB;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,mBAAmB,GAAG;IAC9D,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;CACpB,CAaA;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI,CAM5E;AAED,MAAM,WAAW,oBAAoB;IACnC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,mBAAmB,GAAG,oBAAoB,CAiBlF;AAED,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,oBAAoB,GAAG,MAAM,CAEnE;AAED,eAAO,MAAM,qBAAqB;;EAEhC,CAAC"}

package/dist/synapse_sync/index.js

@@ -0,0 +1,323 @@
+/**
+ * v2.19.31 — MNEME CROSS-DEVICE SYNAPSE SYNC (Phase D of SYNAPSE GENESIS)
+ *
+ *   "บั๊กใหญ่มาก — ไม่สามารถ sync brain ข้าม device ได้. ต้องทำให้ใช้
+ *    ได้ ผมถึงบอกว่าคุณต้องเทสเยอะๆ ว่ามัน sync brain ได้จริงๆ ข้าม mobile
+ *    + computer + notebook"
+ *                                          — user mandate, 2026-05-17
+ *
+ *   Diagnosis: v2.19.29 SYNAPSE GENESIS learned weights locally. v2.19.30
+ *   SOUL EMBALMING preserved them across BAN. Neither handles the third
+ *   axis: the user works on mobile, laptop, and desktop. Each grows its
+ *   own synapse store. Without a merge protocol, every device re-learns
+ *   the same lessons from scratch and the brain never unifies.
+ *
+ *   The protocol must be:
+ *     - CRDT (commutative, associative, idempotent) so merge order
+ *       doesn't matter (mobile→laptop ≡ laptop→mobile)
+ *     - "Last-strongest-wins" per synapse key — the device that has
+ *       observed a synapse most strongly / most recently provides the
+ *       canonical weight, BUT permanent=true is sticky (once any device
+ *       has crystallised a synapse, the merged result is permanent too)
+ *     - Cumulative observationCount — total reinforcement across all
+ *       devices, never lose evidence
+ *     - HMAC-signed export envelopes — receivers verify before merging
+ *     - Vendor-neutral — transport is caller-supplied (git branch via
+ *       DIASPORA, HTTP bridge, USB stick, QR-code chain via BEACON,
+ *       whatever the user prefers)
+ *
+ *   Composes onto:
+ *     - v2.19.29 Phase A HEBBIAN (SynapseWeight / SynapseStore types)
+ *     - v2.19.30 SOUL EMBALMING (HMAC chain pattern)
+ *     - v1.72   DIASPORA (transport — caller wires git/HTTP/QR)
+ *
+ * Honest scope:
+ *   - PURE FUNCTION merge. Never throws.
+ *   - HMAC-signed envelopes — forged exports auto-dropped.
+ *   - Deterministic: same inputs → same merged store + same provenance map.
+ *   - Defensive: empty exports, single-device, NaN weights, key collisions
+ *     handled silently. 24/7 safe.
+ *   - "permanent OR" semantics — never demotes a permanent synapse.
+ */
+import { createHmac, timingSafeEqual } from "node:crypto";
+const PROTOCOL_VERSION = 1;
+function canon(v) {
+    if (v === null || typeof v !== "object")
+        return JSON.stringify(v);
+    if (Array.isArray(v))
+        return "[" + v.map(canon).join(",") + "]";
+    const keys = Object.keys(v).sort();
+    return "{" + keys.map((k) => JSON.stringify(k) + ":" + canon(v[k])).join(",") + "}";
+}
+function defaultSecret() {
+    return process.env["MNEME_SYNAPSE_SYNC_SECRET"] || `mneme-synapse-sync-v${PROTOCOL_VERSION}`;
+}
+function hmacHex(body, secret) {
+    return createHmac("sha256", secret).update(canon(body)).digest("hex");
+}
+function safeEqHex(a, b) {
+    try {
+        return timingSafeEqual(Buffer.from(a, "hex"), Buffer.from(b, "hex"));
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Package a local store for cross-device transport.
+ * The envelope is HMAC-signed so receivers can detect tampering.
+ */
+export function exportForSync(input) {
+    const sec = input.secret ?? defaultSecret();
+    const exportedAtMs = input.nowMs ?? Date.now();
+    const body = {
+        v: PROTOCOL_VERSION,
+        deviceId: input.deviceId,
+        exportedAtMs,
+        store: input.store,
+    };
+    const sig = hmacHex(body, sec);
+    return { ...body, sig };
+}
+/** Verify an export envelope's HMAC. Returns false on forged / tampered envelopes. */
+export function verifySyncExport(envelope, secret) {
+    if (!envelope || typeof envelope !== "object")
+        return false;
+    if (envelope.v !== PROTOCOL_VERSION)
+        return false;
+    if (typeof envelope.deviceId !== "string" || envelope.deviceId.length === 0)
+        return false;
+    if (typeof envelope.exportedAtMs !== "number" || !Number.isFinite(envelope.exportedAtMs))
+        return false;
+    if (!envelope.store || typeof envelope.store !== "object")
+        return false;
+    const sec = secret ?? defaultSecret();
+    const { sig, ...body } = envelope;
+    return safeEqHex(hmacHex(body, sec), sig);
+}
+/**
+ * CRDT merge rule applied per synapse-key across devices:
+ *
+ *   weight:               max( device.weight )          — "strongest wins"
+ *   lastObservedAtMs:     max( device.lastObservedAtMs ) — "most recent wins"
+ *   observationCount:     sum( device.observationCount ) — cumulative evidence
+ *   permanent:            OR( device.permanent )         — sticky / monotone
+ *   permanentSinceWeight: min(>0) of device.permanentSinceWeight  — first to crystallise
+ *
+ * Winner deviceId is the one whose (weight, lastObservedAtMs) pair lexicographically
+ * sorts highest — deterministic tie-break by deviceId ascending.
+ *
+ * Commutativity proof (sketch): max / sum / OR / min-over-positives are all
+ * commutative and associative; tie-break by deviceId is a total order, so
+ * mergeOrder doesn't matter.
+ */
+function mergeWeightsAcrossDevices(input) {
+    const first = input[0];
+    const key = first.weight.key;
+    let mergedWeight = -Infinity;
+    let mergedLastMs = -Infinity;
+    let mergedObs = 0;
+    let mergedPermanent = false;
+    let mergedPermanentSinceWeight = 0;
+    // Winner tracking (deterministic tie-break)
+    let winnerDeviceId = first.deviceId;
+    let winnerWeight = -Infinity;
+    let winnerLastMs = -Infinity;
+    for (const { deviceId, weight: w } of input) {
+        if (Number.isFinite(w.weight) && w.weight > mergedWeight)
+            mergedWeight = w.weight;
+        if (Number.isFinite(w.lastObservedAtMs) && w.lastObservedAtMs > mergedLastMs)
+            mergedLastMs = w.lastObservedAtMs;
+        mergedObs += Math.max(0, w.observationCount | 0);
+        if (w.permanent)
+            mergedPermanent = true;
+        if (w.permanentSinceWeight > 0) {
+            mergedPermanentSinceWeight = mergedPermanentSinceWeight === 0
+                ? w.permanentSinceWeight
+                : Math.min(mergedPermanentSinceWeight, w.permanentSinceWeight);
+        }
+        // Winner: highest weight, tie-break by latest ts, then by deviceId asc.
+        const wWeight = Number.isFinite(w.weight) ? w.weight : -Infinity;
+        const wLast = Number.isFinite(w.lastObservedAtMs) ? w.lastObservedAtMs : -Infinity;
+        if (wWeight > winnerWeight ||
+            (wWeight === winnerWeight && wLast > winnerLastMs) ||
+            (wWeight === winnerWeight && wLast === winnerLastMs && deviceId < winnerDeviceId)) {
+            winnerDeviceId = deviceId;
+            winnerWeight = wWeight;
+            winnerLastMs = wLast;
+        }
+    }
+    // Clamp -Infinity guards (single-device empty case)
+    if (mergedWeight === -Infinity)
+        mergedWeight = 0;
+    if (mergedLastMs === -Infinity)
+        mergedLastMs = 0;
+    return {
+        key,
+        winnerDeviceId,
+        // Sort contributors by deviceId for deterministic output (commutativity).
+        contributors: input.map((x) => ({
+            deviceId: x.deviceId,
+            weight: x.weight.weight,
+            observationCount: x.weight.observationCount,
+            lastObservedAtMs: x.weight.lastObservedAtMs,
+            permanent: x.weight.permanent,
+        })).sort((a, b) => a.deviceId.localeCompare(b.deviceId)),
+        mergedWeight,
+        mergedObservationCount: mergedObs,
+        mergedPermanent,
+        mergedLastObservedAtMs: mergedLastMs,
+    };
+}
+/**
+ * Merge N device exports into one canonical synapse store.
+ *
+ * Verifies each envelope's HMAC first; bad envelopes go into `rejectedDevices`
+ * and contribute nothing. Duplicate deviceIds: last-export-wins (most recent
+ * exportedAtMs).
+ *
+ * The merged store gets a freshly-recomputed signature with the local secret
+ * (so it can re-export). Caller (daemon) typically writes the merged store
+ * back to disk as the new local synapse_genesis state.
+ */
+export function mergeSynapseStores(input) {
+    const sec = input.secret ?? defaultSecret();
+    const storeSec = input.storeSecret
+        ?? process.env["MNEME_SYNAPSE_GENESIS_SECRET"]
+        ?? "mneme-synapse-genesis-v1";
+    const verifiedByDevice = new Map();
+    const rejected = [];
+    for (const env of input.exports ?? []) {
+        if (!verifySyncExport(env, sec)) {
+            if (env?.deviceId && typeof env.deviceId === "string")
+                rejected.push(env.deviceId);
+            continue;
+        }
+        const existing = verifiedByDevice.get(env.deviceId);
+        if (!existing || env.exportedAtMs > existing.exportedAtMs) {
+            verifiedByDevice.set(env.deviceId, env);
+        }
+    }
+    const participatingDevices = Array.from(verifiedByDevice.keys()).sort();
+    // Bucket weights by key
+    const byKey = new Map();
+    for (const [deviceId, env] of verifiedByDevice) {
+        for (const w of env.store?.weights ?? []) {
+            if (!w || typeof w.key !== "string")
+                continue;
+            const list = byKey.get(w.key) ?? [];
+            list.push({ deviceId, weight: w });
+            byKey.set(w.key, list);
+        }
+    }
+    const provenance = [];
+    const mergedWeights = [];
+    // Deterministic output order: sort keys lex
+    for (const key of Array.from(byKey.keys()).sort()) {
+        const bucket = byKey.get(key);
+        const prov = mergeWeightsAcrossDevices(bucket);
+        provenance.push(prov);
+        const exemplar = bucket[0].weight;
+        // permanentSinceWeight: min positive across contributors (first to crystallise)
+        let permSince = 0;
+        for (const c of bucket) {
+            if (c.weight.permanentSinceWeight > 0) {
+                permSince = permSince === 0 ? c.weight.permanentSinceWeight : Math.min(permSince, c.weight.permanentSinceWeight);
+            }
+        }
+        mergedWeights.push({
+            key,
+            eventPattern: exemplar.eventPattern,
+            toolName: exemplar.toolName,
+            weight: prov.mergedWeight,
+            observationCount: prov.mergedObservationCount,
+            lastObservedAtMs: prov.mergedLastObservedAtMs,
+            permanentSinceWeight: permSince,
+            permanent: prov.mergedPermanent,
+        });
+    }
+    // lastDecayedAtMs: max across participating stores
+    let lastDecayedAtMs = null;
+    for (const env of verifiedByDevice.values()) {
+        const t = env.store?.lastDecayedAtMs;
+        if (typeof t === "number" && Number.isFinite(t)) {
+            lastDecayedAtMs = lastDecayedAtMs === null ? t : Math.max(lastDecayedAtMs, t);
+        }
+    }
+    const baseStore = {
+        v: 1,
+        weights: mergedWeights,
+        lastDecayedAtMs,
+    };
+    const storeSig = createHmac("sha256", storeSec).update(canon(baseStore)).digest("hex");
+    const store = { ...baseStore, sig: storeSig };
+    return {
+        v: PROTOCOL_VERSION,
+        store,
+        provenance,
+        participatingDevices,
+        rejectedDevices: Array.from(new Set(rejected)).sort(),
+    };
+}
+/**
+ * DIASPORA-shape adapter: serialize an export envelope to a JSON path the
+ * caller's transport (git branch `diaspora/synapse-<deviceId>`, HTTP PUT,
+ * QR-chain, USB stick) can carry. Returns the canonical bytes + the
+ * recommended file path; the caller's chosen transport actually moves it.
+ */
+export function packForDiaspora(envelope) {
+    // Sanitise: keep only [a-zA-Z0-9_-], then collapse runs of dots/slashes/etc.
+    // Two-stage scrub catches path traversal (..), shell metachars, and unicode.
+    const safeId = envelope.deviceId
+        .replace(/[^a-zA-Z0-9_-]/g, "_") // any non-alphanumeric → _
+        .replace(/_+/g, "_") // collapse runs
+        .replace(/^[_-]+|[_-]+$/g, "") // trim edges
+        .slice(0, 64) || "device";
+    return {
+        path: `.mneme/diaspora/synapse-${safeId}.json`,
+        bytes: JSON.stringify(envelope),
+        branchHint: `diaspora/synapse-${safeId}`,
+    };
+}
+/**
+ * DIASPORA-shape unpack: read JSON bytes a caller fetched via their
+ * transport and return the typed envelope. Returns null on parse failure.
+ */
+export function unpackFromDiaspora(bytes) {
+    try {
+        const obj = JSON.parse(bytes);
+        if (obj && typeof obj === "object" && obj.v === PROTOCOL_VERSION)
+            return obj;
+        return null;
+    }
+    catch {
+        return null;
+    }
+}
+export function computeSyncStats(result) {
+    let permanent = 0;
+    let multiDevice = 0;
+    let observations = 0;
+    for (const p of result.provenance) {
+        if (p.mergedPermanent)
+            permanent++;
+        if (p.contributors.length > 1)
+            multiDevice++;
+        observations += p.mergedObservationCount;
+    }
+    return {
+        participatingDevices: result.participatingDevices.length,
+        rejectedDevices: result.rejectedDevices.length,
+        totalSynapses: result.store.weights.length,
+        permanentSynapses: permanent,
+        multiDeviceSynapses: multiDevice,
+        unifiedObservations: observations,
+    };
+}
+export function formatSyncStatsLine(s) {
+    return `🧬 SYNC ${s.participatingDevices}dev · ${s.totalSynapses} synapses · ${s.multiDeviceSynapses} multi-dev · ${s.permanentSynapses} perm · ${s.unifiedObservations} obs · ${s.rejectedDevices} rejected`;
+}
+export const SYNAPSE_SYNC_TUNABLES = Object.freeze({
+    PROTOCOL_VERSION,
+});
+//# sourceMappingURL=index.js.map