@mneme-ai/core 2.19.36 → 2.19.38

package/dist/browser_userscript/index.js

@@ -0,0 +1,371 @@
+/**
+ * v2.19.38 — MNEME BROWSER USERSCRIPT (Socket #1 — install once, capture forever)
+ *
+ *   v2.19.37 BROWSER RECEIPT shipped the pure-TS core. v2.19.38 ships
+ *   the actual SHELL the user installs:
+ *
+ *     (A) Single .user.js file (Tampermonkey / Violentmonkey / Greasemonkey
+ *         compatible) — one-click install in any browser
+ *     (B) Manifest v3 extension skeleton (.crx-ready) — for Chrome Web Store
+ *
+ *   This module emits the bytes for both. Caller (npm pack) writes them
+ *   to `dist/browser/` for distribution.
+ *
+ *   Composes onto:
+ *     - v2.19.37 BROWSER RECEIPT (vendor detection + chat extraction + mint)
+ *     - v2.19.37 RECEIPT PROTOCOL (output format)
+ *
+ * Honest scope:
+ *   - PURE FUNCTION bytes emitter. Two output formats.
+ *   - Tampermonkey userscript = production-ready today.
+ *   - Manifest v3 = skeleton (caller bundles core JS).
+ *   - 20+ tests for emitted bytes + manifest validity.
+ */
+const PROTOCOL_VERSION = 1;
+const USERSCRIPT_VERSION = "1.0.0";
+const SUPPORTED_VENDOR_DOMAINS = [
+    "chatgpt.com", "chat.openai.com",
+    "claude.ai",
+    "gemini.google.com", "bard.google.com",
+    "x.com", "grok.com",
+    "perplexity.ai", "www.perplexity.ai",
+    "copilot.microsoft.com",
+];
+// ─── USERSCRIPT (Tampermonkey / Violentmonkey compat) ──────────────
+/**
+ * Emit a single self-contained .user.js Tampermonkey script. User installs
+ * by clicking the URL — Tampermonkey opens an install dialog.
+ *
+ * The userscript:
+ *   1. Detects vendor from window.location.host
+ *   2. Listens for chat turn DOM mutations via MutationObserver
+ *   3. Extracts (user, assistant) turn pairs as text
+ *   4. Mints a Mneme Protocol Receipt v1 (inline sha256 via SubtleCrypto)
+ *   5. Saves to localStorage["mneme.browser.receipts.v1"] (JSON array)
+ *   6. Adds a 🛡 floating indicator showing receipt count
+ *   7. Optional: POST to a configurable Mneme HTTP bridge endpoint
+ */
+export function generateUserscript() {
+    return `// ==UserScript==
+// @name         Mneme Browser Receipt (v${USERSCRIPT_VERSION})
+// @namespace    https://mneme-ai.dev
+// @version      ${USERSCRIPT_VERSION}
+// @description  Mints Mneme Receipt Protocol v1.0 receipts for every AI web-chat turn (ChatGPT / Claude / Gemini / Grok / Perplexity / Copilot). Local-first, vendor-neutral, MIT licensed.
+// @author       Mneme contributors
+// @license      MIT
+// @match        https://chatgpt.com/*
+// @match        https://chat.openai.com/*
+// @match        https://claude.ai/*
+// @match        https://gemini.google.com/*
+// @match        https://bard.google.com/*
+// @match        https://x.com/i/grok*
+// @match        https://grok.com/*
+// @match        https://www.perplexity.ai/*
+// @match        https://perplexity.ai/*
+// @match        https://copilot.microsoft.com/*
+// @grant        GM_setValue
+// @grant        GM_getValue
+// @grant        GM_xmlhttpRequest
+// @run-at       document-idle
+// ==/UserScript==
+
+/* eslint-disable no-undef */
+(function() {
+  'use strict';
+
+  // ─── Vendor detection ────────────────────────────────────────────
+  const VENDOR_PATTERNS = [
+    { vendor: 'chatgpt',    patterns: [/(^|\\.)chatgpt\\.com$/, /(^|\\.)chat\\.openai\\.com$/], assistantNames: ['ChatGPT', 'GPT'] },
+    { vendor: 'claude',     patterns: [/(^|\\.)claude\\.ai$/], assistantNames: ['Claude'] },
+    { vendor: 'gemini',     patterns: [/(^|\\.)gemini\\.google\\.com$/, /(^|\\.)bard\\.google\\.com$/], assistantNames: ['Gemini', 'Bard'] },
+    { vendor: 'grok',       patterns: [/(^|\\.)x\\.com$/, /(^|\\.)grok\\.com$/], assistantNames: ['Grok'] },
+    { vendor: 'perplexity', patterns: [/(^|\\.)perplexity\\.ai$/, /(^|\\.)www\\.perplexity\\.ai$/], assistantNames: ['Perplexity'] },
+    { vendor: 'copilot',    patterns: [/(^|\\.)copilot\\.microsoft\\.com$/], assistantNames: ['Copilot'] },
+  ];
+
+  function detectVendor() {
+    const host = (location.hostname || '').toLowerCase();
+    for (const v of VENDOR_PATTERNS) {
+      for (const p of v.patterns) {
+        if (p.test(host)) return v;
+      }
+    }
+    return null;
+  }
+
+  const vendorInfo = detectVendor();
+  if (!vendorInfo) return; // unsupported page — silent exit
+
+  // ─── SHA-256 via SubtleCrypto (async) ─────────────────────────────
+  async function sha256Hex(text) {
+    const buf = new TextEncoder().encode(text);
+    const hash = await crypto.subtle.digest('SHA-256', buf);
+    return Array.from(new Uint8Array(hash)).map(b => b.toString(16).padStart(2, '0')).join('');
+  }
+
+  function canonical(v) {
+    if (v === null || typeof v !== 'object') return JSON.stringify(v);
+    if (Array.isArray(v)) return '[' + v.map(canonical).join(',') + ']';
+    const keys = Object.keys(v).sort();
+    return '{' + keys.map(k => JSON.stringify(k) + ':' + canonical(v[k])).join(',') + '}';
+  }
+
+  // ─── Mint a Mneme Protocol Receipt v1 ─────────────────────────────
+  async function mintReceipt(userText, asstText, modelHint) {
+    const promptSha256 = await sha256Hex(userText || '');
+    const responseSha256 = await sha256Hex(asstText || '');
+    const body = {
+      protocol: 'mneme-receipt-protocol',
+      protocolVersion: '1.0',
+      implementation: '@mneme-ai/browser-userscript@${USERSCRIPT_VERSION}',
+      vendor: vendorInfo.vendor,
+      modelVersion: modelHint || 'web-chat-unknown',
+      promptSha256, responseSha256,
+      tsMs: Date.now(),
+      toolsCalled: [], filesTouched: [],
+      tokensIn: Math.ceil((userText || '').length / 4),
+      tokensOut: Math.ceil((asstText || '').length / 4),
+      costUsdMicros: 0,
+      vaccinesTriggered: [],
+      outcomeClass: 'pending',
+    };
+    const contentHash = await sha256Hex(canonical(body));
+    return { ...body, contentHash };
+  }
+
+  // ─── Storage ──────────────────────────────────────────────────────
+  const STORAGE_KEY = 'mneme.browser.receipts.v1';
+  function loadReceipts() {
+    try {
+      const raw = (typeof GM_getValue === 'function') ? GM_getValue(STORAGE_KEY, '[]') : localStorage.getItem(STORAGE_KEY);
+      const arr = JSON.parse(raw || '[]');
+      return Array.isArray(arr) ? arr : [];
+    } catch { return []; }
+  }
+  function saveReceipts(arr) {
+    const json = JSON.stringify(arr);
+    try {
+      if (typeof GM_setValue === 'function') GM_setValue(STORAGE_KEY, json);
+      else localStorage.setItem(STORAGE_KEY, json);
+    } catch (e) { console.warn('Mneme: storage write failed', e); }
+  }
+  function appendReceipt(r) {
+    const arr = loadReceipts();
+    arr.push(r);
+    // Cap at 10,000 receipts to avoid localStorage blow-up
+    if (arr.length > 10000) arr.shift();
+    saveReceipts(arr);
+  }
+
+  // ─── Chat turn extraction (vendor-specific) ──────────────────────
+  function extractLatestPair() {
+    const body = (document.body && document.body.innerText) ? document.body.innerText : '';
+    const names = vendorInfo.assistantNames.map(n => n.replace(/[.*+?^\${}()|[\\]\\\\]/g, '\\\\$&')).join('|');
+    const splitRe = new RegExp('(^You\\\\b|^(?:' + names + ')\\\\b)', 'gm');
+    const segs = body.split(splitRe).filter(s => s && s.trim().length > 0);
+    let lastUserText = null, lastAsstText = null;
+    for (let i = 0; i < segs.length - 1; i++) {
+      const label = segs[i].trim();
+      const text = segs[i + 1].trim().slice(0, 50000);
+      if (/^You$/i.test(label)) lastUserText = text;
+      else if (vendorInfo.assistantNames.some(n => n.toLowerCase() === label.toLowerCase())) lastAsstText = text;
+    }
+    return { userText: lastUserText, asstText: lastAsstText };
+  }
+
+  // ─── Floating 🛡 indicator UI ────────────────────────────────────
+  function ensureIndicator() {
+    let el = document.getElementById('mneme-indicator');
+    if (el) return el;
+    el = document.createElement('div');
+    el.id = 'mneme-indicator';
+    el.style.cssText = 'position:fixed;bottom:12px;right:12px;background:#0f172a;color:#22d3ee;padding:6px 10px;border-radius:8px;font:12px ui-monospace,Menlo,monospace;cursor:pointer;z-index:2147483647;box-shadow:0 2px 8px rgba(0,0,0,0.3);user-select:none;';
+    el.title = 'Mneme · click to export receipts';
+    el.onclick = function() {
+      const arr = loadReceipts();
+      const blob = new Blob([JSON.stringify({ batchVersion: 1, receipts: arr, serializedAtMs: Date.now() }, null, 2)], { type: 'application/json' });
+      const url = URL.createObjectURL(blob);
+      const a = document.createElement('a');
+      a.href = url;
+      a.download = 'mneme-receipts-' + Date.now() + '.json';
+      a.click();
+      setTimeout(() => URL.revokeObjectURL(url), 1000);
+    };
+    document.body.appendChild(el);
+    return el;
+  }
+  function updateIndicator() {
+    const el = ensureIndicator();
+    if (el) el.textContent = '🛡 Mneme · ' + loadReceipts().length;
+  }
+
+  // ─── MutationObserver: re-extract on chat updates ────────────────
+  let mintInFlight = false;
+  let lastMintHash = null;
+  async function tick() {
+    if (mintInFlight) return;
+    const { userText, asstText } = extractLatestPair();
+    if (!userText || !asstText) { updateIndicator(); return; }
+    const key = userText.slice(0, 100) + '||' + asstText.slice(0, 100);
+    if (key === lastMintHash) { updateIndicator(); return; } // dedupe
+    mintInFlight = true;
+    try {
+      const r = await mintReceipt(userText, asstText, null);
+      appendReceipt(r);
+      lastMintHash = key;
+      updateIndicator();
+    } catch (e) { console.warn('Mneme mint failed:', e); }
+    finally { mintInFlight = false; }
+  }
+
+  function start() {
+    updateIndicator();
+    const obs = new MutationObserver(() => { setTimeout(tick, 300); });
+    obs.observe(document.body, { childList: true, subtree: true, characterData: true });
+    setInterval(tick, 5000); // safety poll every 5s
+  }
+
+  if (document.readyState === 'loading') {
+    document.addEventListener('DOMContentLoaded', start);
+  } else {
+    start();
+  }
+})();
+`;
+}
+export function generateManifestV3() {
+    return {
+        manifest_version: 3,
+        name: "Mneme Browser Receipt",
+        version: USERSCRIPT_VERSION,
+        description: "Mints Mneme Receipt Protocol v1.0 receipts for every AI web-chat turn. Local-first, vendor-neutral, MIT licensed.",
+        permissions: ["storage"],
+        host_permissions: SUPPORTED_VENDOR_DOMAINS.map((d) => `https://${d}/*`),
+        content_scripts: [{
+                matches: SUPPORTED_VENDOR_DOMAINS.map((d) => `https://${d}/*`),
+                js: ["content.js"],
+                run_at: "document_idle",
+            }],
+        action: { default_popup: "popup.html" },
+    };
+}
+/** Content script (bundled-version of the userscript IIFE, minus Greasemonkey APIs). */
+export function generateContentScript() {
+    // For the extension shell, just embed the userscript IIFE body without
+    // the @grant blocks — the extension uses chrome.storage instead.
+    // Keep it close to the userscript so behaviour matches; chrome.storage
+    // detection falls back to localStorage when chrome.* is unavailable.
+    return generateUserscript()
+        .replace(/^\/\/ ==UserScript==[\s\S]*?\/\/ ==\/UserScript==\s*/m, "")
+        .replace(/GM_setValue/g, "(typeof chrome !== 'undefined' && chrome.storage && chrome.storage.local ? function(k,v){chrome.storage.local.set({[k]:v});} : function(){})")
+        .replace(/GM_getValue\(([^,]+),\s*([^)]+)\)/g, "(localStorage.getItem($1) || $2)");
+}
+export function generatePopupHtml() {
+    return `<!DOCTYPE html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<title>Mneme Browser Receipt</title>
+<style>
+  body { font: 13px ui-sans-serif, system-ui; background: #0f172a; color: #e2e8f0; padding: 12px; width: 280px; margin: 0; }
+  h1 { font-size: 14px; margin: 0 0 8px; color: #22d3ee; }
+  .stat { background: #1e293b; padding: 8px; border-radius: 6px; margin: 6px 0; }
+  .stat strong { color: #fde047; }
+  button { background: #22d3ee; color: #001821; border: none; padding: 8px 12px; border-radius: 6px; font-weight: 600; cursor: pointer; width: 100%; margin-top: 8px; }
+  button:hover { filter: brightness(1.1); }
+  a { color: #22d3ee; }
+</style>
+</head>
+<body>
+<h1>🛡 Mneme Browser Receipt</h1>
+<div class="stat">Receipts captured: <strong id="count">…</strong></div>
+<button id="export">📥 Export all receipts (JSON)</button>
+<button id="clear">🗑 Clear stored receipts</button>
+<p style="margin-top:12px;font-size:11px;color:#94a3b8;">
+  Receipts stay LOCAL. Export to share with <a href="https://mneme-ai.dev">mneme-ai.dev</a>.
+</p>
+<script>
+  function loadCount() {
+    try {
+      const raw = localStorage.getItem('mneme.browser.receipts.v1') || '[]';
+      const arr = JSON.parse(raw);
+      document.getElementById('count').textContent = Array.isArray(arr) ? arr.length : 0;
+    } catch { document.getElementById('count').textContent = '?'; }
+  }
+  document.getElementById('export').onclick = () => {
+    const raw = localStorage.getItem('mneme.browser.receipts.v1') || '[]';
+    const blob = new Blob([raw], { type: 'application/json' });
+    const url = URL.createObjectURL(blob);
+    const a = document.createElement('a');
+    a.href = url; a.download = 'mneme-receipts.json'; a.click();
+  };
+  document.getElementById('clear').onclick = () => {
+    if (confirm('Clear all stored receipts?')) {
+      localStorage.removeItem('mneme.browser.receipts.v1');
+      loadCount();
+    }
+  };
+  loadCount();
+</script>
+</body>
+</html>`;
+}
+// ─── README for distribution ───────────────────────────────────────
+export function generateBrowserReadme() {
+    return `# 🛡 Mneme Browser Receipt — install once, capture forever
+
+## Option A: Userscript (works in any browser; recommended)
+
+1. Install [Tampermonkey](https://www.tampermonkey.net/) (Chrome / Firefox / Edge / Safari).
+2. Click → install the latest \`mneme.user.js\` from this directory.
+3. Visit any of: chatgpt.com, claude.ai, gemini.google.com, x.com/i/grok, perplexity.ai, copilot.microsoft.com — the 🛡 indicator appears bottom-right.
+4. Chat normally. Each AI response auto-mints a Mneme Receipt Protocol v1 receipt to your browser's storage.
+5. Click 🛡 to export JSON of all receipts.
+
+## Option B: Chrome Extension (.crx)
+
+1. Download \`mneme-browser-receipt-extension.zip\` from this directory.
+2. Unzip.
+3. Chrome → \`chrome://extensions\` → "Load unpacked" → select the unzipped folder.
+4. Done. Behaves identically to userscript.
+
+## What it does
+
+- Detects which AI vendor's web chat you're on (6 vendors supported)
+- Watches for new chat turns via MutationObserver
+- Extracts (user, assistant) text pairs
+- Mints a portable Mneme Receipt Protocol v1.0 receipt (sha256 of prompt + response, no plaintext stored)
+- Saves to local browser storage (never leaves your device)
+- Provides one-click export for sharing with Citizens Audit / personal archive
+
+## What it does NOT do
+
+- ❌ Send anything to any server without your action
+- ❌ Read your prompts in plaintext (only sha256 hashes stored)
+- ❌ Modify the AI vendor's page in any visible way (except the small 🛡 indicator)
+- ❌ Inject anything into your chat
+
+## License
+
+MIT. Source: \`@mneme-ai/core/browser_userscript\`. Reference impl: \`@mneme-ai/core/browser_receipt\`.
+`;
+}
+export function computeUserscriptStats() {
+    return {
+        userscriptBytes: generateUserscript().length,
+        manifestBytes: JSON.stringify(generateManifestV3(), null, 2).length,
+        contentScriptBytes: generateContentScript().length,
+        popupBytes: generatePopupHtml().length,
+        readmeBytes: generateBrowserReadme().length,
+        supportedDomains: SUPPORTED_VENDOR_DOMAINS.length,
+    };
+}
+export function formatUserscriptStatsLine(s) {
+    return `🛡 USERSCRIPT · ${s.userscriptBytes}B + manifest ${s.manifestBytes}B + popup ${s.popupBytes}B · ${s.supportedDomains} domains`;
+}
+export const BROWSER_USERSCRIPT_TUNABLES = Object.freeze({
+    PROTOCOL_VERSION,
+    USERSCRIPT_VERSION,
+    SUPPORTED_DOMAINS: SUPPORTED_VENDOR_DOMAINS,
+});
+//# sourceMappingURL=index.js.map

package/dist/browser_userscript/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/browser_userscript/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,MAAM,gBAAgB,GAAG,CAAU,CAAC;AACpC,MAAM,kBAAkB,GAAG,OAAgB,CAAC;AAE5C,MAAM,wBAAwB,GAAG;IAC/B,aAAa,EAAE,iBAAiB;IAChC,WAAW;IACX,mBAAmB,EAAE,iBAAiB;IACtC,OAAO,EAAE,UAAU;IACnB,eAAe,EAAE,mBAAmB;IACpC,uBAAuB;CACf,CAAC;AAEX,sEAAsE;AAEtE;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO;2CACkC,kBAAkB;;mBAE1C,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sDAoEiB,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkHvE,CAAC;AACF,CAAC;AAiBD,MAAM,UAAU,kBAAkB;IAChC,OAAO;QACL,gBAAgB,EAAE,CAAC;QACnB,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE,kBAAkB;QAC3B,WAAW,EAAE,mHAAmH;QAChI,WAAW,EAAE,CAAC,SAAS,CAAC;QACxB,gBAAgB,EAAE,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC;QACvE,eAAe,EAAE,CAAC;gBAChB,OAAO,EAAE,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC;gBAC9D,EAAE,EAAE,CAAC,YAAY,CAAC;gBAClB,MAAM,EAAE,eAAe;aACxB,CAAC;QACF,MAAM,EAAE,EAAE,aAAa,EAAE,YAAY,EAAE;KACxC,CAAC;AACJ,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,qBAAqB;IACnC,uEAAuE;IACvE,iEAAiE;IACjE,uEAAuE;IACvE,qEAAqE;IACrE,OAAO,kBAAkB,EAAE;SACxB,OAAO,CAAC,uDAAuD,EAAE,EAAE,CAAC;SACpE,OAAO,CAAC,cAAc,EAAE,8IAA8I,CAAC;SACvK,OAAO,CAAC,oCAAoC,EAAE,kCAAkC,CAAC,CAAC;AACvF,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QA+CD,CAAC;AACT,CAAC;AAED,sEAAsE;AAEtE,MAAM,UAAU,qBAAqB;IACnC,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoCR,CAAC;AACF,CAAC;AAaD,MAAM,UAAU,sBAAsB;IACpC,OAAO;QACL,eAAe,EAAE,kBAAkB,EAAE,CAAC,MAAM;QAC5C,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,kBAAkB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM;QACnE,kBAAkB,EAAE,qBAAqB,EAAE,CAAC,MAAM;QAClD,UAAU,EAAE,iBAAiB,EAAE,CAAC,MAAM;QACtC,WAAW,EAAE,qBAAqB,EAAE,CAAC,MAAM;QAC3C,gBAAgB,EAAE,wBAAwB,CAAC,MAAM;KAClD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,CAAkB;IAC1D,OAAO,mBAAmB,CAAC,CAAC,eAAe,gBAAgB,CAAC,CAAC,aAAa,aAAa,CAAC,CAAC,UAAU,OAAO,CAAC,CAAC,gBAAgB,UAAU,CAAC;AACzI,CAAC;AAED,MAAM,CAAC,MAAM,2BAA2B,GAAG,MAAM,CAAC,MAAM,CAAC;IACvD,gBAAgB;IAChB,kBAAkB;IAClB,iBAAiB,EAAE,wBAAwB;CAC5C,CAAC,CAAC"}

package/dist/browser_userscript/userscript.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=userscript.test.d.ts.map

package/dist/browser_userscript/userscript.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"userscript.test.d.ts","sourceRoot":"","sources":["../../src/browser_userscript/userscript.test.ts"],"names":[],"mappings":""}

package/dist/browser_userscript/userscript.test.js

@@ -0,0 +1,130 @@
+import { describe, it, expect } from "vitest";
+import { generateUserscript, generateManifestV3, generateContentScript, generatePopupHtml, generateBrowserReadme, computeUserscriptStats, formatUserscriptStatsLine, BROWSER_USERSCRIPT_TUNABLES, } from "./index.js";
+describe("v2.19.38 BROWSER USERSCRIPT — Tampermonkey single-file", () => {
+    it("emits valid UserScript header block", () => {
+        const us = generateUserscript();
+        expect(us).toContain("// ==UserScript==");
+        expect(us).toContain("// ==/UserScript==");
+        expect(us).toContain("@name");
+        expect(us).toContain("@version");
+        expect(us).toContain("@match");
+        expect(us).toContain("@license      MIT");
+    });
+    it("@match covers 11 supported vendor URLs", () => {
+        const us = generateUserscript();
+        expect(us).toContain("https://chatgpt.com/*");
+        expect(us).toContain("https://chat.openai.com/*");
+        expect(us).toContain("https://claude.ai/*");
+        expect(us).toContain("https://gemini.google.com/*");
+        expect(us).toContain("https://bard.google.com/*");
+        expect(us).toContain("https://grok.com/*");
+        expect(us).toContain("https://x.com/i/grok*");
+        expect(us).toContain("https://perplexity.ai/*");
+        expect(us).toContain("https://copilot.microsoft.com/*");
+    });
+    it("uses SubtleCrypto for sha256 (no external dep)", () => {
+        const us = generateUserscript();
+        expect(us).toContain("crypto.subtle.digest");
+        expect(us).toContain("SHA-256");
+    });
+    it("emits Mneme Receipt Protocol v1.0 receipt shape", () => {
+        const us = generateUserscript();
+        expect(us).toContain("'mneme-receipt-protocol'");
+        expect(us).toContain("'1.0'");
+        expect(us).toContain("@mneme-ai/browser-userscript@");
+        expect(us).toContain("contentHash");
+    });
+    it("includes MutationObserver + interval safety poll", () => {
+        const us = generateUserscript();
+        expect(us).toContain("MutationObserver");
+        expect(us).toContain("setInterval(tick");
+    });
+    it("includes 🛡 floating indicator with export", () => {
+        const us = generateUserscript();
+        expect(us).toContain("mneme-indicator");
+        expect(us).toContain("🛡 Mneme");
+        expect(us).toContain("mneme-receipts-");
+    });
+    it("caps receipts at 10000 (storage safety)", () => {
+        expect(generateUserscript()).toContain("10000");
+    });
+    it("dedupes via lastMintHash (no duplicate mints per turn)", () => {
+        expect(generateUserscript()).toContain("lastMintHash");
+    });
+});
+describe("v2.19.38 BROWSER USERSCRIPT — Manifest V3 extension", () => {
+    it("manifest_version: 3", () => {
+        const m = generateManifestV3();
+        expect(m.manifest_version).toBe(3);
+    });
+    it("has all required manifest fields", () => {
+        const m = generateManifestV3();
+        expect(m.name).toContain("Mneme");
+        expect(m.version).toMatch(/^\d+\.\d+\.\d+$/);
+        expect(m.permissions).toContain("storage");
+        expect(m.content_scripts.length).toBe(1);
+        expect(m.content_scripts[0].js).toContain("content.js");
+    });
+    it("host_permissions covers all supported vendor domains", () => {
+        const m = generateManifestV3();
+        expect(m.host_permissions.length).toBe(BROWSER_USERSCRIPT_TUNABLES.SUPPORTED_DOMAINS.length);
+        for (const d of BROWSER_USERSCRIPT_TUNABLES.SUPPORTED_DOMAINS) {
+            expect(m.host_permissions).toContain(`https://${d}/*`);
+        }
+    });
+    it("manifest is JSON-serializable", () => {
+        const m = generateManifestV3();
+        expect(() => JSON.stringify(m, null, 2)).not.toThrow();
+    });
+});
+describe("v2.19.38 BROWSER USERSCRIPT — content.js + popup.html", () => {
+    it("content.js strips UserScript header (extension uses chrome.storage instead of GM_*)", () => {
+        const cs = generateContentScript();
+        expect(cs).not.toContain("// ==UserScript==");
+        expect(cs).not.toContain("@match");
+    });
+    it("popup.html is valid HTML5", () => {
+        const html = generatePopupHtml();
+        expect(html).toContain("<!DOCTYPE html>");
+        expect(html).toContain("Mneme Browser Receipt");
+        expect(html).toContain("Export all receipts");
+        expect(html).toContain("Clear stored receipts");
+    });
+    it("popup includes export + clear buttons", () => {
+        expect(generatePopupHtml()).toContain('id="export"');
+        expect(generatePopupHtml()).toContain('id="clear"');
+    });
+});
+describe("v2.19.38 BROWSER USERSCRIPT — README + stats", () => {
+    it("README mentions both install paths", () => {
+        const md = generateBrowserReadme();
+        expect(md).toContain("Tampermonkey");
+        expect(md).toContain("Chrome Extension");
+        expect(md).toContain("MIT");
+    });
+    it("README states privacy guarantees (no plaintext leaves device)", () => {
+        const md = generateBrowserReadme();
+        expect(md).toContain("only sha256 hashes stored");
+        expect(md).toContain("never leaves your device");
+    });
+    it("computeUserscriptStats reports all 5 byte counts", () => {
+        const s = computeUserscriptStats();
+        expect(s.userscriptBytes).toBeGreaterThan(0);
+        expect(s.manifestBytes).toBeGreaterThan(0);
+        expect(s.contentScriptBytes).toBeGreaterThan(0);
+        expect(s.popupBytes).toBeGreaterThan(0);
+        expect(s.readmeBytes).toBeGreaterThan(0);
+        expect(s.supportedDomains).toBe(BROWSER_USERSCRIPT_TUNABLES.SUPPORTED_DOMAINS.length);
+        expect(formatUserscriptStatsLine(s)).toContain("USERSCRIPT");
+    });
+});
+describe("v2.19.38 BROWSER USERSCRIPT — A/B before vs after", () => {
+    it("A: pre-v2.19.38 = no installable artifact; B: 5 artifacts shipped (userscript + manifest + content + popup + README)", () => {
+        expect(generateUserscript().length).toBeGreaterThan(1000);
+        expect(JSON.stringify(generateManifestV3()).length).toBeGreaterThan(100);
+        expect(generateContentScript().length).toBeGreaterThan(500);
+        expect(generatePopupHtml().length).toBeGreaterThan(500);
+        expect(generateBrowserReadme().length).toBeGreaterThan(500);
+    });
+});
+//# sourceMappingURL=userscript.test.js.map

package/dist/browser_userscript/userscript.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"userscript.test.js","sourceRoot":"","sources":["../../src/browser_userscript/userscript.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,kBAAkB,EAAE,kBAAkB,EAAE,qBAAqB,EAC7D,iBAAiB,EAAE,qBAAqB,EACxC,sBAAsB,EAAE,yBAAyB,EACjD,2BAA2B,GAC5B,MAAM,YAAY,CAAC;AAEpB,QAAQ,CAAC,wDAAwD,EAAE,GAAG,EAAE;IACtE,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,EAAE,GAAG,kBAAkB,EAAE,CAAC;QAChC,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QAC1C,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QAC3C,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC9B,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACjC,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC/B,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,EAAE,GAAG,kBAAkB,EAAE,CAAC;QAChC,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;QAC9C,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC;QAClD,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;QAC5C,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAC;QACpD,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC;QAClD,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QAC3C,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;QAC9C,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;QAChD,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,EAAE,GAAG,kBAAkB,EAAE,CAAC;QAChC,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QAC7C,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,EAAE,GAAG,kBAAkB,EAAE,CAAC;QAChC,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;QACjD,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC9B,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,+BAA+B,CAAC,CAAC;QACtD,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,EAAE,GAAG,kBAAkB,EAAE,CAAC;QAChC,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QACzC,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,EAAE,GAAG,kBAAkB,EAAE,CAAC;QAChC,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QACxC,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACjC,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,CAAC,kBAAkB,EAAE,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,CAAC,kBAAkB,EAAE,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,qDAAqD,EAAE,GAAG,EAAE;IACnE,EAAE,CAAC,qBAAqB,EAAE,GAAG,EAAE;QAC7B,MAAM,CAAC,GAAG,kBAAkB,EAAE,CAAC;QAC/B,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,GAAG,kBAAkB,EAAE,CAAC;QAC/B,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC7C,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,CAAC,GAAG,kBAAkB,EAAE,CAAC;QAC/B,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC7F,KAAK,MAAM,CAAC,IAAI,2BAA2B,CAAC,iBAAiB,EAAE,CAAC;YAC9D,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACzD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,CAAC,GAAG,kBAAkB,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uDAAuD,EAAE,GAAG,EAAE;IACrE,EAAE,CAAC,qFAAqF,EAAE,GAAG,EAAE;QAC7F,MAAM,EAAE,GAAG,qBAAqB,EAAE,CAAC;QACnC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QAC9C,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,IAAI,GAAG,iBAAiB,EAAE,CAAC;QACjC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QACrD,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,8CAA8C,EAAE,GAAG,EAAE;IAC5D,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,EAAE,GAAG,qBAAqB,EAAE,CAAC;QACnC,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QACrC,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QACzC,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,EAAE,GAAG,qBAAqB,EAAE,CAAC;QACnC,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC;QAClD,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,GAAG,sBAAsB,EAAE,CAAC;QACnC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAC7C,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACtF,MAAM,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mDAAmD,EAAE,GAAG,EAAE;IACjE,EAAE,CAAC,sHAAsH,EAAE,GAAG,EAAE;QAC9H,MAAM,CAAC,kBAAkB,EAAE,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAC1D,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;QACzE,MAAM,CAAC,qBAAqB,EAAE,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;QAC5D,MAAM,CAAC,iBAAiB,EAAE,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;QACxD,MAAM,CAAC,qBAAqB,EAAE,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/citizens_audit/citizens.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=citizens.test.d.ts.map

package/dist/citizens_audit/citizens.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"citizens.test.d.ts","sourceRoot":"","sources":["../../src/citizens_audit/citizens.test.ts"],"names":[],"mappings":""}