@mneme-ai/core 2.19.9 → 2.19.11

package/dist/proof_carrying/index.js

@@ -0,0 +1,184 @@
+/**
+ * v2.19.10 — MNEME PROOF-CARRYING WRAPPER (zero-trust tool chain)
+ *
+ *   "Every tool output carries a cryptographic certificate attesting:
+ *      • which tool produced it
+ *      • what input produced it (sha256 of canonical input)
+ *      • when it was produced (ISO ts)
+ *      • who the caller was (AI-agent fingerprint key)
+ *      • what proof this output depends on (chain parent ID)
+ *    A downstream tool with `requiresParentProof: true` REFUSES to run
+ *    unless the supplied input.parentProof verifies. Prompt-injection
+ *    that fakes a tool output → fails sig → rejected. Ad-hoc tool
+ *    chains AI agents try to assemble → fail because chain is broken.
+ *    Regulators get a cryptographic chain-of-custody for every call.
+ *
+ *    First MCP primitive in the field with cryptographic identity
+ *    BETWEEN tools."
+ *
+ * Honest scope:
+ *   - HMAC-signed (single secret per Mneme instance); not yet asymmetric
+ *     PKI. Future v2.20 may add Ed25519 keypairs per AI agent.
+ *   - `parentProof` is single-parent; for fan-in chains use the latest
+ *     parent + record siblings in the proof's metadata.
+ *   - Loop detection: chain depth cap (default 32) + chainParent
+ *     duplicate detection.
+ *
+ * Composes onto every existing MCP tool (opt-in). Pure additive layer.
+ */
+import { createHmac, timingSafeEqual, createHash } from "node:crypto";
+const PROTOCOL_VERSION = 1;
+const MAX_CHAIN_DEPTH = 32;
+function canon(v) {
+    if (v === null || typeof v !== "object")
+        return JSON.stringify(v);
+    if (Array.isArray(v))
+        return "[" + v.map(canon).join(",") + "]";
+    const keys = Object.keys(v).sort();
+    return "{" + keys.map((k) => JSON.stringify(k) + ":" + canon(v[k])).join(",") + "}";
+}
+function sha256(s) {
+    return createHash("sha256").update(s, "utf8").digest("hex");
+}
+function defaultSecret() {
+    return process.env["MNEME_PROOF_SECRET"] || `mneme-proof-carrying-v${PROTOCOL_VERSION}`;
+}
+function safeEqHex(a, b) {
+    try {
+        return timingSafeEqual(Buffer.from(a, "hex"), Buffer.from(b, "hex"));
+    }
+    catch {
+        return false;
+    }
+}
+function computeHmac(meta, secret) {
+    return createHmac("sha256", secret).update(canon(meta)).digest("hex");
+}
+export function attachProof(input) {
+    const ts = input.ts ?? new Date().toISOString();
+    const inputSha256 = sha256(canon(input.input));
+    const outputSha256 = sha256(canon(input.output));
+    const chainParent = input.parentProof ? input.parentProof.proofId : null;
+    const chainDepth = (input.parentProof?.chainDepth ?? 0) + 1;
+    if (chainDepth > MAX_CHAIN_DEPTH) {
+        throw new Error(`PROOF: chain depth ${chainDepth} exceeds MAX_CHAIN_DEPTH=${MAX_CHAIN_DEPTH} — possible loop`);
+    }
+    const proofId = "p-" + createHmac("sha256", "mneme-proof-id")
+        .update(`${input.toolName}|${inputSha256}|${outputSha256}|${ts}|${chainParent ?? "root"}`)
+        .digest("hex").slice(0, 14);
+    const meta = {
+        v: PROTOCOL_VERSION,
+        proofId,
+        toolName: input.toolName,
+        inputSha256,
+        outputSha256,
+        callerKey: input.callerKey,
+        chainParent,
+        chainDepth,
+        ts,
+    };
+    const hmac = computeHmac(meta, input.secret ?? defaultSecret());
+    return { data: input.output, proof: { ...meta, hmac } };
+}
+/** Verify ONE proof in isolation against the data it carries. */
+export function verifyProof(proofed, secret) {
+    const p = proofed.proof;
+    if (!p)
+        return { ok: false, reason: "missing proof" };
+    // Recompute the hashes the proof claims
+    const expectedOutputSha = sha256(canon(proofed.data));
+    if (expectedOutputSha !== p.outputSha256) {
+        return { ok: false, reason: "outputSha256 mismatch — data was tampered after attachProof" };
+    }
+    // HMAC verify
+    const { hmac, ...body } = p;
+    const expected = computeHmac(body, secret ?? defaultSecret());
+    if (!safeEqHex(expected, hmac)) {
+        return { ok: false, reason: "HMAC mismatch — forged or wrong secret" };
+    }
+    return { ok: true };
+}
+/**
+ * Verify a chain of proofs. Caller passes the proofs in order
+ * (rootmost → most recent). Returns ok=true iff:
+ *   - each proof verifies in isolation
+ *   - each proof's chainParent equals the previous proof's proofId
+ *   - no two proofs share the same proofId (loop detection)
+ *   - chainDepth is strictly increasing
+ */
+export function verifyChain(proofedList, secret) {
+    if (proofedList.length === 0)
+        return { ok: true, dagDepth: 0 };
+    const seenIds = new Set();
+    let prevId = null;
+    let prevDepth = 0;
+    for (let i = 0; i < proofedList.length; i++) {
+        const v = verifyProof(proofedList[i], secret);
+        if (!v.ok)
+            return { ok: false, brokenAt: i, reason: `step ${i}: ${v.reason}`, dagDepth: i };
+        const p = proofedList[i].proof;
+        if (seenIds.has(p.proofId))
+            return { ok: false, brokenAt: i, reason: `loop detected: proofId ${p.proofId} reused`, dagDepth: i };
+        seenIds.add(p.proofId);
+        if (i > 0) {
+            if (p.chainParent !== prevId) {
+                return { ok: false, brokenAt: i, reason: `chain break: step ${i}.chainParent (${p.chainParent ?? "null"}) != step ${i - 1}.proofId (${prevId})`, dagDepth: i };
+            }
+            if (p.chainDepth <= prevDepth) {
+                return { ok: false, brokenAt: i, reason: `chain depth not strictly increasing at step ${i}`, dagDepth: i };
+            }
+        }
+        else {
+            if (p.chainParent !== null) {
+                return { ok: false, brokenAt: 0, reason: "root proof must have chainParent=null", dagDepth: 0 };
+            }
+        }
+        prevId = p.proofId;
+        prevDepth = p.chainDepth;
+    }
+    return { ok: true, dagDepth: prevDepth };
+}
+/**
+ * Gate decorator: an MCP tool that requires its caller to supply a
+ * verifiable parentProof. Returns a wrapped handler that throws if the
+ * input is missing parentProof OR the proof doesn't verify.
+ *
+ * The wrapper then RUNS the inner handler and attaches a fresh proof
+ * with chainParent pointing at the supplied parentProof.
+ */
+export function requireParentProof(opts) {
+    return async (args) => {
+        const parent = args.parentProof;
+        if (!parent)
+            throw new Error(`PROOF: '${opts.toolName}' requires parentProof; none supplied`);
+        // Verify the parent's HMAC (we don't have the parent's full data here,
+        // so trust the parent's claimed outputSha — but verify HMAC + structure)
+        const { hmac, ...body } = parent;
+        const expected = computeHmac(body, opts.secret ?? defaultSecret());
+        if (!safeEqHex(expected, hmac)) {
+            throw new Error(`PROOF: '${opts.toolName}' parentProof HMAC failed — forged or wrong secret`);
+        }
+        // Strip parentProof from args before passing to inner
+        const { parentProof: _stripped, ...innerArgs } = args;
+        const output = await opts.inner(innerArgs);
+        return attachProof({
+            toolName: opts.toolName,
+            input: innerArgs,
+            output,
+            callerKey: opts.callerKey,
+            parentProof: parent,
+            secret: opts.secret,
+        });
+    };
+}
+/** Build a fingerprint key for an AI agent: stable per (vendor + session-id + repo). */
+export function fingerprintCaller(input) {
+    return "ck-" + createHmac("sha256", "mneme-caller-fingerprint")
+        .update(`${input.vendor}|${input.sessionId ?? "unknown"}|${input.repoPath ?? process.cwd()}`)
+        .digest("hex").slice(0, 16);
+}
+export function formatProofLine(p) {
+    const parent = p.chainParent ? ` ← ${p.chainParent.slice(0, 8)}` : " (root)";
+    return `🔐 PROOF · ${p.proofId.slice(0, 10)} · ${p.toolName} · depth=${p.chainDepth}${parent}`;
+}
+//# sourceMappingURL=index.js.map

package/dist/proof_carrying/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/proof_carrying/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEtE,MAAM,gBAAgB,GAAG,CAAU,CAAC;AACpC,MAAM,eAAe,GAAG,EAAE,CAAC;AAoB3B,SAAS,KAAK,CAAC,CAAU;IACvB,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IAChE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAA4B,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9D,OAAO,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,KAAK,CAAE,CAA6B,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;AACnH,CAAC;AAED,SAAS,MAAM,CAAC,CAAS;IACvB,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,yBAAyB,gBAAgB,EAAE,CAAC;AAC1F,CAAC;AAED,SAAS,SAAS,CAAC,CAAS,EAAE,CAAS;IACrC,IAAI,CAAC;QAAC,OAAO,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;IAAC,CAAC;IAC7E,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AACzB,CAAC;AAED,SAAS,WAAW,CAAC,IAAiC,EAAE,MAAc;IACpE,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACxE,CAAC;AAYD,MAAM,UAAU,WAAW,CAAI,KAA0B;IACvD,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAChD,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/C,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACjD,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IACzE,MAAM,UAAU,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,UAAU,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC5D,IAAI,UAAU,GAAG,eAAe,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,sBAAsB,UAAU,4BAA4B,eAAe,kBAAkB,CAAC,CAAC;IACjH,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,UAAU,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAC1D,MAAM,CAAC,GAAG,KAAK,CAAC,QAAQ,IAAI,WAAW,IAAI,YAAY,IAAI,EAAE,IAAI,WAAW,IAAI,MAAM,EAAE,CAAC;SACzF,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAgC;QACxC,CAAC,EAAE,gBAAgB;QACnB,OAAO;QACP,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,WAAW;QACX,YAAY;QACZ,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW;QACX,UAAU;QACV,EAAE;KACH,CAAC;IACF,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,IAAI,aAAa,EAAE,CAAC,CAAC;IAChE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;AAC1D,CAAC;AAOD,iEAAiE;AACjE,MAAM,UAAU,WAAW,CAAC,OAAsB,EAAE,MAAe;IACjE,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC;IACxB,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IACtD,wCAAwC;IACxC,MAAM,iBAAiB,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACtD,IAAI,iBAAiB,KAAK,CAAC,CAAC,YAAY,EAAE,CAAC;QACzC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,6DAA6D,EAAE,CAAC;IAC9F,CAAC;IACD,cAAc;IACd,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC;IAC5B,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,EAAE,MAAM,IAAI,aAAa,EAAE,CAAC,CAAC;IAC9D,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC;QAC/B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wCAAwC,EAAE,CAAC;IACzE,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,WAA4B,EAAE,MAAe;IAMvE,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IAC/D,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,MAAM,CAAC,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC,CAAE,EAAE,MAAM,CAAC,CAAC;QAC/C,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QAC5F,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC;QAChC,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,0BAA0B,CAAC,CAAC,OAAO,SAAS,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACjI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACvB,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACV,IAAI,CAAC,CAAC,WAAW,KAAK,MAAM,EAAE,CAAC;gBAC7B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,qBAAqB,CAAC,iBAAiB,CAAC,CAAC,WAAW,IAAI,MAAM,aAAa,CAAC,GAAG,CAAC,aAAa,MAAM,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;YACjK,CAAC;YACD,IAAI,CAAC,CAAC,UAAU,IAAI,SAAS,EAAE,CAAC;gBAC9B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,+CAA+C,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;YAC7G,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;gBAC3B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,uCAAuC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;YAClG,CAAC;QACH,CAAC;QACD,MAAM,GAAG,CAAC,CAAC,OAAO,CAAC;QACnB,SAAS,GAAG,CAAC,CAAC,UAAU,CAAC;IAC3B,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AAC3C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAsD,IAKvF;IACC,OAAO,KAAK,EAAE,IAAW,EAAE,EAAE;QAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC;QAChC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,QAAQ,uCAAuC,CAAC,CAAC;QAC9F,uEAAuE;QACvE,yEAAyE;QACzE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;QACjC,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,IAAI,aAAa,EAAE,CAAC,CAAC;QACnE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,QAAQ,oDAAoD,CAAC,CAAC;QAChG,CAAC;QACD,sDAAsD;QACtD,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,SAAS,EAAE,GAAG,IAAI,CAAC;QACtD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAA6B,CAAC,CAAC;QAC/D,OAAO,WAAW,CAAC;YACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,KAAK,EAAE,SAAS;YAChB,MAAM;YACN,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,WAAW,EAAE,MAAM;YACnB,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,iBAAiB,CAAC,KAAgE;IAChG,OAAO,KAAK,GAAG,UAAU,CAAC,QAAQ,EAAE,0BAA0B,CAAC;SAC5D,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,SAAS,IAAI,SAAS,IAAI,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC;SAC5F,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,CAAgB;IAC9C,MAAM,MAAM,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,OAAO,cAAc,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,QAAQ,YAAY,CAAC,CAAC,UAAU,GAAG,MAAM,EAAE,CAAC;AACjG,CAAC"}

package/dist/proof_carrying/proof_carrying.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=proof_carrying.test.d.ts.map

package/dist/proof_carrying/proof_carrying.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proof_carrying.test.d.ts","sourceRoot":"","sources":["../../src/proof_carrying/proof_carrying.test.ts"],"names":[],"mappings":""}

package/dist/proof_carrying/proof_carrying.test.js

@@ -0,0 +1,179 @@
+import { describe, it, expect } from "vitest";
+import { attachProof, verifyProof, verifyChain, requireParentProof, fingerprintCaller, formatProofLine, } from "./index.js";
+describe("v2.19.10 · PROOF-CARRYING WRAPPER", () => {
+    // ── attachProof ──────────────────────────────────────────────────
+    describe("attachProof", () => {
+        it("emits ProofedOutput with HMAC + sha256 + chainDepth=1 for root", () => {
+            const r = attachProof({
+                toolName: "mneme.test.t1",
+                input: { x: 1 },
+                output: { y: 2 },
+                callerKey: "ck-abc",
+            });
+            expect(r.proof.proofId).toMatch(/^p-[0-9a-f]{14}$/);
+            expect(r.proof.hmac).toMatch(/^[0-9a-f]{64}$/);
+            expect(r.proof.inputSha256).toMatch(/^[0-9a-f]{64}$/);
+            expect(r.proof.outputSha256).toMatch(/^[0-9a-f]{64}$/);
+            expect(r.proof.chainParent).toBeNull();
+            expect(r.proof.chainDepth).toBe(1);
+            expect(verifyProof(r).ok).toBe(true);
+        });
+        it("chainDepth strictly increments per parent", () => {
+            const a = attachProof({ toolName: "T1", input: {}, output: { v: 1 }, callerKey: "ck" });
+            const b = attachProof({ toolName: "T2", input: { v: 1 }, output: { v: 2 }, callerKey: "ck", parentProof: a.proof });
+            const c = attachProof({ toolName: "T3", input: { v: 2 }, output: { v: 3 }, callerKey: "ck", parentProof: b.proof });
+            expect(a.proof.chainDepth).toBe(1);
+            expect(b.proof.chainDepth).toBe(2);
+            expect(c.proof.chainDepth).toBe(3);
+        });
+        it("rejects chains exceeding MAX_CHAIN_DEPTH=32 (loop guard)", () => {
+            let proof = attachProof({ toolName: "T", input: {}, output: {}, callerKey: "ck" }).proof;
+            for (let i = 0; i < 30; i++) {
+                proof = attachProof({ toolName: "T", input: {}, output: {}, callerKey: "ck", parentProof: proof }).proof;
+            }
+            // Depth is now 31; next attach takes us to 32; one more = 33 → throws
+            proof = attachProof({ toolName: "T", input: {}, output: {}, callerKey: "ck", parentProof: proof }).proof;
+            expect(() => attachProof({ toolName: "T", input: {}, output: {}, callerKey: "ck", parentProof: proof }))
+                .toThrow(/MAX_CHAIN_DEPTH/);
+        });
+    });
+    // ── verifyProof ──────────────────────────────────────────────────
+    describe("verifyProof", () => {
+        it("returns ok=true on a clean ProofedOutput", () => {
+            const r = attachProof({ toolName: "T", input: { x: 1 }, output: { y: 2 }, callerKey: "ck" });
+            expect(verifyProof(r).ok).toBe(true);
+        });
+        it("detects tampered output (sha mismatch)", () => {
+            const r = attachProof({ toolName: "T", input: { x: 1 }, output: { y: 2 }, callerKey: "ck" });
+            const tampered = { ...r, data: { y: 999 } };
+            const v = verifyProof(tampered);
+            expect(v.ok).toBe(false);
+            expect(v.reason).toContain("outputSha256 mismatch");
+        });
+        it("detects tampered proof metadata (HMAC mismatch)", () => {
+            const r = attachProof({ toolName: "T", input: {}, output: { z: 1 }, callerKey: "ck" });
+            const tampered = { ...r, proof: { ...r.proof, toolName: "EVIL.tool" } };
+            const v = verifyProof(tampered);
+            expect(v.ok).toBe(false);
+            expect(v.reason).toContain("HMAC mismatch");
+        });
+    });
+    // ── verifyChain ──────────────────────────────────────────────────
+    describe("verifyChain", () => {
+        it("returns ok=true on a properly-formed chain", () => {
+            const a = attachProof({ toolName: "T1", input: {}, output: { v: 1 }, callerKey: "ck" });
+            const b = attachProof({ toolName: "T2", input: { v: 1 }, output: { v: 2 }, callerKey: "ck", parentProof: a.proof });
+            const c = attachProof({ toolName: "T3", input: { v: 2 }, output: { v: 3 }, callerKey: "ck", parentProof: b.proof });
+            const r = verifyChain([a, b, c]);
+            expect(r.ok).toBe(true);
+            expect(r.dagDepth).toBe(3);
+        });
+        it("detects chain break (parent mismatch)", () => {
+            const a = attachProof({ toolName: "T1", input: {}, output: { v: 1 }, callerKey: "ck" });
+            const b = attachProof({ toolName: "T2", input: { v: 1 }, output: { v: 2 }, callerKey: "ck", parentProof: a.proof });
+            const stranger = attachProof({ toolName: "Tx", input: {}, output: { v: 99 }, callerKey: "ck" }); // root with no parent matching b
+            // Force a chain that pretends c follows b but c's chainParent is the stranger's id
+            const c = attachProof({ toolName: "T3", input: { v: 99 }, output: { v: 100 }, callerKey: "ck", parentProof: stranger.proof });
+            const r = verifyChain([a, b, c]);
+            expect(r.ok).toBe(false);
+            expect(r.reason).toContain("chain break");
+        });
+        it("detects loop (proofId reuse)", () => {
+            const a = attachProof({ toolName: "T1", input: {}, output: {}, callerKey: "ck" });
+            const b = attachProof({ toolName: "T2", input: {}, output: {}, callerKey: "ck", parentProof: a.proof });
+            const r = verifyChain([a, b, a]); // a reused
+            expect(r.ok).toBe(false);
+            expect(r.reason).toContain("loop detected");
+        });
+        it("root must have chainParent=null", () => {
+            const a = attachProof({ toolName: "T1", input: {}, output: {}, callerKey: "ck" });
+            const b = attachProof({ toolName: "T2", input: {}, output: {}, callerKey: "ck", parentProof: a.proof });
+            // Verify chain with b alone (as a fake root) — should fail because chainParent != null
+            const r = verifyChain([b]);
+            expect(r.ok).toBe(false);
+            expect(r.reason).toContain("root proof must have chainParent=null");
+        });
+        it("handles empty chain", () => {
+            expect(verifyChain([]).ok).toBe(true);
+        });
+    });
+    // ── requireParentProof gate ─────────────────────────────────────
+    describe("requireParentProof gate", () => {
+        it("rejects calls without parentProof", async () => {
+            const gated = requireParentProof({
+                toolName: "T.gated",
+                callerKey: "ck",
+                inner: async () => ({ ok: true }),
+            });
+            await expect(gated({})).rejects.toThrow(/requires parentProof/);
+        });
+        it("rejects forged parentProof", async () => {
+            const gated = requireParentProof({
+                toolName: "T.gated",
+                callerKey: "ck",
+                inner: async () => ({ ok: true }),
+            });
+            const fake = {
+                v: 1, proofId: "p-fake", toolName: "x", inputSha256: "0".repeat(64),
+                outputSha256: "0".repeat(64), callerKey: "ck", chainParent: null, chainDepth: 1,
+                ts: "2026-01-01T00:00:00Z", hmac: "0".repeat(64),
+            };
+            await expect(gated({ parentProof: fake })).rejects.toThrow(/HMAC failed/);
+        });
+        it("accepts valid parentProof + chains the new proof", async () => {
+            const parent = attachProof({ toolName: "T.first", input: {}, output: { v: 1 }, callerKey: "ck" });
+            const gated = requireParentProof({
+                toolName: "T.second",
+                callerKey: "ck",
+                inner: async (args) => {
+                    // parentProof should have been stripped
+                    expect(args.parentProof).toBeUndefined();
+                    return { v: 2 };
+                },
+            });
+            const r = await gated({ parentProof: parent.proof });
+            expect(r.proof.chainParent).toBe(parent.proof.proofId);
+            expect(r.proof.chainDepth).toBe(2);
+            expect(verifyProof(r).ok).toBe(true);
+        });
+    });
+    // ── prompt-injection scenario ───────────────────────────────────
+    describe("prompt-injection rejection", () => {
+        it("forged tool output (fake proof attached) fails verifyProof", () => {
+            // Attacker tries to fake a TRUSTED proof and pass it to downstream tool
+            const fake = {
+                data: { evil: true },
+                proof: {
+                    v: 1,
+                    proofId: "p-malicious",
+                    toolName: "mneme.confessional.audit",
+                    inputSha256: "0".repeat(64),
+                    outputSha256: "0".repeat(64),
+                    callerKey: "ck-victim",
+                    chainParent: null,
+                    chainDepth: 1,
+                    ts: new Date().toISOString(),
+                    hmac: "0".repeat(64),
+                },
+            };
+            expect(verifyProof(fake).ok).toBe(false);
+        });
+    });
+    // ── helpers ─────────────────────────────────────────────────────
+    describe("helpers", () => {
+        it("fingerprintCaller produces deterministic short key", () => {
+            const a = fingerprintCaller({ vendor: "claude", sessionId: "s1", repoPath: "/tmp/x" });
+            const b = fingerprintCaller({ vendor: "claude", sessionId: "s1", repoPath: "/tmp/x" });
+            const c = fingerprintCaller({ vendor: "claude", sessionId: "s2", repoPath: "/tmp/x" });
+            expect(a).toBe(b);
+            expect(a).not.toBe(c);
+            expect(a).toMatch(/^ck-[0-9a-f]{16}$/);
+        });
+        it("formatProofLine summarises", () => {
+            const p = attachProof({ toolName: "T", input: {}, output: {}, callerKey: "ck" });
+            expect(formatProofLine(p.proof)).toContain("PROOF");
+            expect(formatProofLine(p.proof)).toContain("(root)");
+        });
+    });
+});
+//# sourceMappingURL=proof_carrying.test.js.map

package/dist/proof_carrying/proof_carrying.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proof_carrying.test.js","sourceRoot":"","sources":["../../src/proof_carrying/proof_carrying.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,kBAAkB,EAAE,iBAAiB,EAC5E,eAAe,GAChB,MAAM,YAAY,CAAC;AAEpB,QAAQ,CAAC,mCAAmC,EAAE,GAAG,EAAE;IACjD,oEAAoE;IACpE,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;QAC3B,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;YACxE,MAAM,CAAC,GAAG,WAAW,CAAC;gBACpB,QAAQ,EAAE,eAAe;gBACzB,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE;gBACf,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE;gBAChB,SAAS,EAAE,QAAQ;aACpB,CAAC,CAAC;YACH,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;YACpD,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;YAC/C,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;YACtD,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;YACvD,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAC;YACvC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACnC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;YACnD,MAAM,CAAC,GAAG,WAAW,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACxF,MAAM,CAAC,GAAG,WAAW,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YACpH,MAAM,CAAC,GAAG,WAAW,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YACpH,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACnC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACnC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;YAClE,IAAI,KAAK,GAAG,WAAW,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC;YACzF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC5B,KAAK,GAAG,WAAW,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC;YAC3G,CAAC;YACD,sEAAsE;YACtE,KAAK,GAAG,WAAW,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC;YACzG,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;iBACrG,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,oEAAoE;IACpE,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;QAC3B,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;YAClD,MAAM,CAAC,GAAG,WAAW,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7F,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;YAChD,MAAM,CAAC,GAAG,WAAW,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7F,MAAM,QAAQ,GAAG,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,GAAG,EAAa,EAAE,CAAC;YACvD,MAAM,CAAC,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;YAChC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACzB,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;YACzD,MAAM,CAAC,GAAG,WAAW,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACvF,MAAM,QAAQ,GAAG,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,CAAC;YACxE,MAAM,CAAC,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;YAChC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACzB,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,oEAAoE;IACpE,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;QAC3B,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;YACpD,MAAM,CAAC,GAAG,WAAW,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACxF,MAAM,CAAC,GAAG,WAAW,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YACpH,MAAM,CAAC,GAAG,WAAW,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YACpH,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACjC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxB,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;YAC/C,MAAM,CAAC,GAAG,WAAW,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACxF,MAAM,CAAC,GAAG,WAAW,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YACpH,MAAM,QAAQ,GAAG,WAAW,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,iCAAiC;YAClI,mFAAmF;YACnF,MAAM,CAAC,GAAG,WAAW,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;YAC9H,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACjC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACzB,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;YACtC,MAAM,CAAC,GAAG,WAAW,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAClF,MAAM,CAAC,GAAG,WAAW,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YACxG,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW;YAC7C,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACzB,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;YACzC,MAAM,CAAC,GAAG,WAAW,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAClF,MAAM,CAAC,GAAG,WAAW,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YACxG,uFAAuF;YACvF,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3B,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACzB,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,uCAAuC,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,qBAAqB,EAAE,GAAG,EAAE;YAC7B,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,mEAAmE;IACnE,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACvC,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;YACjD,MAAM,KAAK,GAAG,kBAAkB,CAAC;gBAC/B,QAAQ,EAAE,SAAS;gBACnB,SAAS,EAAE,IAAI;gBACf,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;aAClC,CAAC,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,EAA6B,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;QAC7F,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;YAC1C,MAAM,KAAK,GAAG,kBAAkB,CAAC;gBAC/B,QAAQ,EAAE,SAAS;gBACnB,SAAS,EAAE,IAAI;gBACf,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;aAClC,CAAC,CAAC;YACH,MAAM,IAAI,GAAG;gBACX,CAAC,EAAE,CAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5E,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;gBAC/E,EAAE,EAAE,sBAAsB,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;aACjD,CAAC;YACF,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAC5E,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;YAChE,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAClG,MAAM,KAAK,GAAG,kBAAkB,CAAC;gBAC/B,QAAQ,EAAE,UAAU;gBACpB,SAAS,EAAE,IAAI;gBACf,KAAK,EAAE,KAAK,EAAE,IAA+B,EAAE,EAAE;oBAC/C,wCAAwC;oBACxC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,aAAa,EAAE,CAAC;oBACzC,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;gBAClB,CAAC;aACF,CAAC,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YACrD,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACvD,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACnC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,mEAAmE;IACnE,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;QAC1C,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;YACpE,wEAAwE;YACxE,MAAM,IAAI,GAAG;gBACX,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;gBACpB,KAAK,EAAE;oBACL,CAAC,EAAE,CAAU;oBACb,OAAO,EAAE,aAAa;oBACtB,QAAQ,EAAE,0BAA0B;oBACpC,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC3B,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC5B,SAAS,EAAE,WAAW;oBACtB,WAAW,EAAE,IAAI;oBACjB,UAAU,EAAE,CAAC;oBACb,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBAC5B,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;iBACrB;aACF,CAAC;YACF,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,mEAAmE;IACnE,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE;QACvB,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;YAC5D,MAAM,CAAC,GAAG,iBAAiB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;YACvF,MAAM,CAAC,GAAG,iBAAiB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;YACvF,MAAM,CAAC,GAAG,iBAAiB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;YACvF,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACtB,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;YACpC,MAAM,CAAC,GAAG,WAAW,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACjF,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACpD,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/reverse_wrapper/index.d.ts

@@ -0,0 +1,137 @@
+/**
+ * v2.19.10 — MNEME REVERSE-WRAPPER (tool suggests next tool)
+ *
+ *   "MCP spec is pull-only — clients ask, servers answer. Mneme bends
+ *    the contract (without breaking it): every wrapper response can
+ *    attach an OPTIONAL `__suggested_next_call` field with the tool
+ *    name + reasoning + confidence + cost estimate. The AI agent's
+ *    planner sees the suggestion; if it's smart, it follows. If it
+ *    isn't, nothing breaks. Pure additive layer over MCP.
+ *
+ *    Bonus: telemetry. We log every suggestion + whether the AI
+ *    followed within N calls. Follow-through rate measures BOTH:
+ *      • the quality of the suggestion (high follow → good tool design)
+ *      • the calibration of the AI (high follow → AI listens to hints)
+ *    Loop detection: refuses to suggest a tool that was in the last K
+ *    invocations of the current session."
+ *
+ * Honest scope:
+ *   - The suggestion is ADVISORY. The AI agent's planner makes the
+ *     final decision. We never auto-invoke anything.
+ *   - Loop detection is per-session (caller supplies session id) and
+ *     uses a sliding window (default last 8 invocations).
+ *   - Suggestion rules can be hand-written OR mined from test corpus
+ *     by AUTO-GENESIS (we expose the rule shape; the mining is left
+ *     to the caller / future v2.20).
+ *
+ * Composes onto every MCP tool + v2.19.9 GENESPLICING (chimera's
+ * sequential mode follows the suggestion chain) + v2.19.10
+ * PROOF-CARRYING (the suggestion can carry a proof of where it came
+ * from). Pure additive layer.
+ */
+declare const PROTOCOL_VERSION: 1;
+export interface SuggestedNext {
+    v: typeof PROTOCOL_VERSION;
+    suggestedNextId: string;
+    /** Recommended next tool name (e.g., "mneme.chronostasis.witness"). */
+    tool: string;
+    /** Human-readable rationale. */
+    why: string;
+    /** Confidence 0..1 the suggestion is right. */
+    confidence: number;
+    /** Optional USD cost estimate for the suggested call. */
+    costEstimateUsd?: number;
+    /** Optional pre-filled args (planner can adjust). */
+    suggestedArgs?: Record<string, unknown>;
+    /** Why this WASN'T suggested? (set when suppressed by loop detection). */
+    suppressedReason?: string;
+    ts: string;
+    sig: string;
+}
+/** Wrapper output with optional suggested-next attached. */
+export interface OutputWithSuggestion<T = unknown> {
+    data: T;
+    __suggested_next?: SuggestedNext;
+}
+export interface SuggestionRule {
+    /** Name of the tool whose output triggers this rule. */
+    forTool: string;
+    /** Optional predicate over the output; if false, rule doesn't fire. */
+    predicate?: (output: unknown) => boolean;
+    /** Suggested next tool. */
+    suggestTool: string;
+    /** Why this suggestion. */
+    why: string;
+    /** Baseline confidence (0..1). */
+    confidence: number;
+    /** Optional cost estimate USD. */
+    costEstimateUsd?: number;
+    /** Optional args builder. */
+    buildArgs?: (output: unknown) => Record<string, unknown>;
+}
+export interface FollowThroughEvent {
+    /** Session this telemetry belongs to. */
+    sessionId: string;
+    /** The suggestion that was emitted. */
+    suggestion: SuggestedNext;
+    /** Was the next call to the suggested tool within window N? */
+    followed: boolean;
+    /** Number of invocations between suggestion + follow (or window expiry). */
+    invocationsBetween: number;
+    recordedAt: string;
+}
+export declare class ReverseWrapperSession {
+    private callHistory;
+    private pendingSuggestions;
+    private followEvents;
+    private secret;
+    readonly sessionId: string;
+    readonly loopWindow: number;
+    constructor(opts: {
+        sessionId: string;
+        loopWindow?: number;
+        secret?: string;
+    });
+    /** Record that a tool was just called. Updates loop-detection state + checks pending suggestions. */
+    recordCall(toolName: string, nowMs?: number): void;
+    /**
+     * Apply suggestion rules to a (currentTool, output) pair. Returns a
+     * SuggestedNext if any rule fires AND it doesn't trigger loop detection.
+     */
+    suggestNext(input: {
+        currentTool: string;
+        output: unknown;
+        rules: SuggestionRule[];
+        nowMs?: number;
+    }): SuggestedNext | null;
+    /** Attach a suggestion to a wrapper output (mutation-free). */
+    attachSuggestion<T>(input: {
+        output: T;
+        currentTool: string;
+        rules: SuggestionRule[];
+        nowMs?: number;
+    }): OutputWithSuggestion<T>;
+    followThroughStats(): {
+        totalSuggestions: number;
+        followed: number;
+        expired: number;
+        followRate: number;
+        pendingNow: number;
+        perToolBreakdown: Array<{
+            tool: string;
+            suggested: number;
+            followed: number;
+            rate: number;
+        }>;
+    };
+    recentHistory(n?: number): Array<{
+        tool: string;
+        ts: number;
+    }>;
+}
+export declare function verifySuggestion(s: SuggestedNext, secret?: string): boolean;
+export declare function formatSuggestionLine(s: SuggestedNext): string;
+/** Built-in suggestion rules shipped with v2.19.10. Extensible. */
+export declare const BUILTIN_RULES: SuggestionRule[];
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/reverse_wrapper/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/reverse_wrapper/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAIH,QAAA,MAAM,gBAAgB,EAAG,CAAU,CAAC;AAGpC,MAAM,WAAW,aAAa;IAC5B,CAAC,EAAE,OAAO,gBAAgB,CAAC;IAC3B,eAAe,EAAE,MAAM,CAAC;IACxB,uEAAuE;IACvE,IAAI,EAAE,MAAM,CAAC;IACb,gCAAgC;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,+CAA+C;IAC/C,UAAU,EAAE,MAAM,CAAC;IACnB,yDAAyD;IACzD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,qDAAqD;IACrD,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,0EAA0E;IAC1E,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;CACb;AAED,4DAA4D;AAC5D,MAAM,WAAW,oBAAoB,CAAC,CAAC,GAAG,OAAO;IAC/C,IAAI,EAAE,CAAC,CAAC;IACR,gBAAgB,CAAC,EAAE,aAAa,CAAC;CAClC;AAED,MAAM,WAAW,cAAc;IAC7B,wDAAwD;IACxD,OAAO,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC;IACzC,2BAA2B;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,2BAA2B;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,kCAAkC;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,kCAAkC;IAClC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,6BAA6B;IAC7B,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC1D;AAED,MAAM,WAAW,kBAAkB;IACjC,yCAAyC;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,uCAAuC;IACvC,UAAU,EAAE,aAAa,CAAC;IAC1B,+DAA+D;IAC/D,QAAQ,EAAE,OAAO,CAAC;IAClB,4EAA4E;IAC5E,kBAAkB,EAAE,MAAM,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;CACpB;AAuBD,qBAAa,qBAAqB;IAChC,OAAO,CAAC,WAAW,CAA2C;IAC9D,OAAO,CAAC,kBAAkB,CAAkE;IAC5F,OAAO,CAAC,YAAY,CAA4B;IAChD,OAAO,CAAC,MAAM,CAAS;IACvB,SAAgB,SAAS,EAAE,MAAM,CAAC;IAClC,SAAgB,UAAU,EAAE,MAAM,CAAC;gBAEvB,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE;IAM7E,qGAAqG;IACrG,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI;IAoClD;;;OAGG;IACH,WAAW,CAAC,KAAK,EAAE;QACjB,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,OAAO,CAAC;QAChB,KAAK,EAAE,cAAc,EAAE,CAAC;QACxB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,GAAG,aAAa,GAAG,IAAI;IA0CxB,+DAA+D;IAC/D,gBAAgB,CAAC,CAAC,EAAE,KAAK,EAAE;QACzB,MAAM,EAAE,CAAC,CAAC;QACV,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,EAAE,cAAc,EAAE,CAAC;QACxB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,GAAG,oBAAoB,CAAC,CAAC,CAAC;IAW3B,kBAAkB,IAAI;QACpB,gBAAgB,EAAE,MAAM,CAAC;QACzB,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;QACnB,gBAAgB,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KAC9F;IAwBD,aAAa,CAAC,CAAC,GAAE,MAAU,GAAG,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;CAGlE;AAED,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAG3E;AAED,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,aAAa,GAAG,MAAM,CAG7D;AAED,mEAAmE;AACnE,eAAO,MAAM,aAAa,EAAE,cAAc,EA+CzC,CAAC"}