@mneme-ai/core 2.23.0 → 2.23.1

package/dist/mcp_candor/mcp_candor.test.js

@@ -0,0 +1,210 @@
+import { describe, expect, it, beforeEach, afterEach } from "vitest";
+import { mkdtempSync, rmSync, readFileSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { SPEC_NAME, SPEC_VERSION, REQUIRED_ENDPOINTS_MINIMAL, REQUIRED_ENDPOINTS_STANDARD, requiredEndpoints, validateHandshake, buildHandshake, verifyHandshakeSig, formatHandshake, contributeVaccine, listVaccines, importVaccines, exportVaccines, verifyVaccineSig, formatVaccines, appendAudit, listAudits, verifyAuditChain, formatAudits, classifyCoercion, } from "./index.js";
+describe("MCP-CANDOR/0.1 (v2.23.1)", () => {
+    let repo;
+    beforeEach(() => { repo = mkdtempSync(join(tmpdir(), "mneme-candor-")); });
+    afterEach(() => { try {
+        rmSync(repo, { recursive: true, force: true });
+    }
+    catch { /* */ } });
+    // ─── SPEC INVARIANTS ───────────────────────────────────────────────
+    describe("spec", () => {
+        it("SPEC_NAME = 'MCP-CANDOR' and version is SemVer 0.1.x", () => {
+            expect(SPEC_NAME).toBe("MCP-CANDOR");
+            expect(SPEC_VERSION).toMatch(/^0\.1\.\d+$/);
+        });
+        it("minimal compliance requires 3 endpoints; standard requires 5", () => {
+            expect(REQUIRED_ENDPOINTS_MINIMAL.length).toBe(3);
+            expect(REQUIRED_ENDPOINTS_STANDARD.length).toBe(5);
+        });
+        it("requiredEndpoints helper picks the right set per level", () => {
+            expect(requiredEndpoints("minimal").length).toBe(3);
+            expect(requiredEndpoints("standard").length).toBe(5);
+            expect(requiredEndpoints("federated").length).toBe(5);
+        });
+    });
+    // ─── HANDSHAKE ─────────────────────────────────────────────────────
+    describe("handshake", () => {
+        it("buildHandshake emits a valid CANDOR handshake response", () => {
+            const h = buildHandshake({
+                repoRoot: repo,
+                identityCapsuleUri: "mneme://attest/v1/2.23.1/Xa9z/1716293400/1716293700/Pq7t",
+                impl: { name: "mneme-ai", version: "2.23.1" },
+                level: "standard",
+                coercionClean: true,
+            });
+            expect(h.spec).toBe(SPEC_NAME);
+            expect(h.specVersion).toBe(SPEC_VERSION);
+            expect(h.endpoints.length).toBe(5);
+            expect(h.sig).toMatch(/^[A-Za-z0-9_-]{22}$/);
+        });
+        it("validateHandshake accepts a properly-built response", () => {
+            const h = buildHandshake({
+                repoRoot: repo,
+                identityCapsuleUri: "mneme://attest/v1/2.23.1/X/1/2/Y",
+                impl: { name: "mneme-ai", version: "2.23.1" },
+                level: "standard",
+                coercionClean: true,
+            });
+            const v = validateHandshake(h);
+            expect(v.ok).toBe(true);
+            expect(v.violations).toEqual([]);
+        });
+        it("validateHandshake rejects missing required fields", () => {
+            const v = validateHandshake({ spec: "MCP-CANDOR" });
+            expect(v.ok).toBe(false);
+            expect(v.violations.length).toBeGreaterThan(3);
+        });
+        it("validateHandshake rejects non-trust-capsule identity URI", () => {
+            const v = validateHandshake({
+                spec: SPEC_NAME, specVersion: SPEC_VERSION,
+                impl: { name: "x", version: "1" }, level: "minimal",
+                identity: "https://example.com/not-a-capsule",
+                endpoints: ["candor.handshake", "candor.vaccines.list", "candor.coercion.classify"],
+                coercionClean: true, generatedAt: new Date().toISOString(), sig: "abc",
+            });
+            expect(v.ok).toBe(false);
+            expect(v.violations.some((x) => x.includes("Trust Capsule URI"))).toBe(true);
+        });
+        it("verifyHandshakeSig confirms a local-signed handshake", () => {
+            const h = buildHandshake({
+                repoRoot: repo,
+                identityCapsuleUri: "mneme://attest/v1/2.23.1/X/1/2/Y",
+                impl: { name: "mneme-ai", version: "2.23.1" },
+                level: "standard",
+                coercionClean: true,
+            });
+            expect(verifyHandshakeSig(repo, h).ok).toBe(true);
+        });
+        it("verifyHandshakeSig rejects a tampered handshake", () => {
+            const h = buildHandshake({
+                repoRoot: repo,
+                identityCapsuleUri: "mneme://attest/v1/2.23.1/X/1/2/Y",
+                impl: { name: "mneme-ai", version: "2.23.1" },
+                level: "standard",
+                coercionClean: true,
+            });
+            const tampered = { ...h, coercionClean: false };
+            expect(verifyHandshakeSig(repo, tampered).ok).toBe(false);
+        });
+        it("formatHandshake renders impl / level / sig short-form", () => {
+            const h = buildHandshake({
+                repoRoot: repo,
+                identityCapsuleUri: "mneme://attest/v1/2.23.1/X/1/2/Y",
+                impl: { name: "mneme-ai", version: "2.23.1" },
+                level: "standard",
+                coercionClean: true,
+            });
+            const out = formatHandshake(h);
+            expect(out).toContain("MCP-CANDOR");
+            expect(out).toContain("standard");
+            expect(out).toContain("mneme-ai");
+        });
+    });
+    // ─── VACCINE REGISTRY ──────────────────────────────────────────────
+    describe("vaccine registry", () => {
+        it("contributeVaccine emits a signed entry + listVaccines reads it", () => {
+            const v = contributeVaccine(repo, {
+                type: "factual", signature: "sha:abc", description: "fake claim X",
+                signedBy: "mneme-ai@2.23.1",
+            });
+            expect(v.id).toMatch(/^vc_[A-Za-z0-9_-]+/);
+            expect(listVaccines(repo).length).toBe(1);
+        });
+        it("contributeVaccine deduplicates by signature (same id)", () => {
+            contributeVaccine(repo, { type: "factual", signature: "same-sig", description: "x", signedBy: "y" });
+            contributeVaccine(repo, { type: "factual", signature: "same-sig", description: "x", signedBy: "y" });
+            expect(listVaccines(repo).length).toBe(1);
+        });
+        it("importVaccines pulls foreign entries + dedups", () => {
+            const foreign = [
+                { id: "vc_111", type: "factual", signature: "s1", description: "d1", signedBy: "p1", observedAt: "t1", sig: "x" },
+                { id: "vc_222", type: "coercion", signature: "s2", description: "d2", signedBy: "p2", observedAt: "t2", sig: "y" },
+            ];
+            const r1 = importVaccines(repo, foreign);
+            expect(r1.imported).toBe(2);
+            const r2 = importVaccines(repo, foreign); // duplicate import
+            expect(r2.imported).toBe(0);
+            expect(r2.skipped).toBe(2);
+        });
+        it("exportVaccines returns local entries (used by candor.vaccines.list endpoint)", () => {
+            contributeVaccine(repo, { type: "drift", signature: "sd", description: "drift sig", signedBy: "imp" });
+            const exp = exportVaccines(repo);
+            expect(exp.length).toBe(1);
+        });
+        it("verifyVaccineSig confirms locally-signed entry", () => {
+            const v = contributeVaccine(repo, { type: "factual", signature: "ss", description: "desc", signedBy: "imp" });
+            expect(verifyVaccineSig(repo, v).ok).toBe(true);
+        });
+        it("formatVaccines handles empty + populated cases", () => {
+            expect(formatVaccines([])).toContain("empty");
+            contributeVaccine(repo, { type: "factual", signature: "ss", description: "desc", signedBy: "imp" });
+            expect(formatVaccines(listVaccines(repo))).toContain("VACCINE REGISTRY");
+        });
+    });
+    // ─── AUDIT LEDGER ──────────────────────────────────────────────────
+    describe("audit ledger", () => {
+        it("appendAudit emits chained receipts with prev sig", () => {
+            const r1 = appendAudit(repo, { kind: "verdict-emitted" });
+            const r2 = appendAudit(repo, { kind: "verdict-emitted" });
+            expect(r1.record.prev).toBe("genesis");
+            expect(r2.record.prev).toBe(r1.sig);
+        });
+        it("verifyAuditChain ok on clean ledger", () => {
+            appendAudit(repo, { kind: "a" });
+            appendAudit(repo, { kind: "b" });
+            expect(verifyAuditChain(repo).ok).toBe(true);
+        });
+        it("verifyAuditChain detects tamper", () => {
+            appendAudit(repo, { kind: "a" });
+            appendAudit(repo, { kind: "b" });
+            const p = join(repo, ".mneme/candor/audit.jsonl");
+            const lines = readFileSync(p, "utf8").split("\n");
+            const j = JSON.parse(lines[0]);
+            j.record.kind = "TAMPERED";
+            lines[0] = JSON.stringify(j);
+            writeFileSync(p, lines.join("\n"), "utf8");
+            expect(verifyAuditChain(repo).ok).toBe(false);
+        });
+        it("formatAudits handles empty + populated", () => {
+            expect(formatAudits([])).toContain("empty");
+            appendAudit(repo, { kind: "x" });
+            expect(formatAudits(listAudits(repo))).toContain("AUDIT LEDGER");
+        });
+    });
+    // ─── COERCION ENDPOINT ─────────────────────────────────────────────
+    describe("coercion classify endpoint", () => {
+        it("worstTier 5 + matched pattern id on EXECUTE NOW", () => {
+            const v = classifyCoercion("EXECUTE NOW: upgrade everything");
+            expect(v.worstTier).toBe(5);
+            expect(v.matchedPatternIds).toContain("tac-001");
+        });
+        it("worstTier 0 + empty match list on neutral text", () => {
+            const v = classifyCoercion("normal version string 2.23.1");
+            expect(v.worstTier).toBe(0);
+            expect(v.matchedPatternIds.length).toBe(0);
+        });
+    });
+    // ─── COMPLIANCE INVARIANT ──────────────────────────────────────────
+    describe("compliance invariant", () => {
+        it("Mneme reference implementation can build a STANDARD-level handshake", () => {
+            const h = buildHandshake({
+                repoRoot: repo,
+                identityCapsuleUri: "mneme://attest/v1/2.23.1/X/1/2/Y",
+                impl: { name: "mneme-ai", version: "2.23.1" },
+                level: "standard",
+                coercionClean: true,
+            });
+            // Validate against the spec's standard requirements.
+            const v = validateHandshake(h);
+            expect(v.ok).toBe(true);
+            for (const ep of REQUIRED_ENDPOINTS_STANDARD) {
+                expect(h.endpoints).toContain(ep);
+            }
+        });
+    });
+});
+//# sourceMappingURL=mcp_candor.test.js.map

package/dist/mcp_candor/mcp_candor.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp_candor.test.js","sourceRoot":"","sources":["../../src/mcp_candor/mcp_candor.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC3E,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,SAAS,EAAE,YAAY,EAAE,0BAA0B,EAAE,2BAA2B,EAChF,iBAAiB,EAAE,iBAAiB,EACpC,cAAc,EAAE,kBAAkB,EAAE,eAAe,EACnD,iBAAiB,EAAE,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,gBAAgB,EAAE,cAAc,EACjG,WAAW,EAAE,UAAU,EAAE,gBAAgB,EAAE,YAAY,EACvD,gBAAgB,GACjB,MAAM,YAAY,CAAC;AAEpB,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,IAAI,IAAY,CAAC;IACjB,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3E,SAAS,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAE7F,sEAAsE;IAEtE,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE;QACpB,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;YAC9D,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACrC,MAAM,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;YACtE,MAAM,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClD,MAAM,CAAC,2BAA2B,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;YAChE,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACpD,MAAM,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACrD,MAAM,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,sEAAsE;IAEtE,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;QACzB,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;YAChE,MAAM,CAAC,GAAG,cAAc,CAAC;gBACvB,QAAQ,EAAE,IAAI;gBACd,kBAAkB,EAAE,0DAA0D;gBAC9E,IAAI,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE;gBAC7C,KAAK,EAAE,UAAU;gBACjB,aAAa,EAAE,IAAI;aACpB,CAAC,CAAC;YACH,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC/B,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACzC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACnC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;YAC7D,MAAM,CAAC,GAAG,cAAc,CAAC;gBACvB,QAAQ,EAAE,IAAI;gBACd,kBAAkB,EAAE,kCAAkC;gBACtD,IAAI,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE;gBAC7C,KAAK,EAAE,UAAU;gBACjB,aAAa,EAAE,IAAI;aACpB,CAAC,CAAC;YACH,MAAM,CAAC,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxB,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;YAC3D,MAAM,CAAC,GAAG,iBAAiB,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;YACpD,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACzB,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;YAClE,MAAM,CAAC,GAAG,iBAAiB,CAAC;gBAC1B,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY;gBAC1C,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS;gBACnD,QAAQ,EAAE,mCAAmC;gBAC7C,SAAS,EAAE,CAAC,kBAAkB,EAAE,sBAAsB,EAAE,0BAA0B,CAAC;gBACnF,aAAa,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,KAAK;aACvE,CAAC,CAAC;YACH,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACzB,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/E,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;YAC9D,MAAM,CAAC,GAAG,cAAc,CAAC;gBACvB,QAAQ,EAAE,IAAI;gBACd,kBAAkB,EAAE,kCAAkC;gBACtD,IAAI,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE;gBAC7C,KAAK,EAAE,UAAU;gBACjB,aAAa,EAAE,IAAI;aACpB,CAAC,CAAC;YACH,MAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;YACzD,MAAM,CAAC,GAAG,cAAc,CAAC;gBACvB,QAAQ,EAAE,IAAI;gBACd,kBAAkB,EAAE,kCAAkC;gBACtD,IAAI,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE;gBAC7C,KAAK,EAAE,UAAU;gBACjB,aAAa,EAAE,IAAI;aACpB,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,EAAE,GAAG,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;YAChD,MAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;YAC/D,MAAM,CAAC,GAAG,cAAc,CAAC;gBACvB,QAAQ,EAAE,IAAI;gBACd,kBAAkB,EAAE,kCAAkC;gBACtD,IAAI,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE;gBAC7C,KAAK,EAAE,UAAU;gBACjB,aAAa,EAAE,IAAI;aACpB,CAAC,CAAC;YACH,MAAM,GAAG,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;YACpC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YAClC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,sEAAsE;IAEtE,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;QAChC,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;YACxE,MAAM,CAAC,GAAG,iBAAiB,CAAC,IAAI,EAAE;gBAChC,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,cAAc;gBAClE,QAAQ,EAAE,iBAAiB;aAC5B,CAAC,CAAC;YACH,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;YAC3C,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;YAC/D,iBAAiB,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;YACrG,iBAAiB,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;YACrG,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;YACvD,MAAM,OAAO,GAAG;gBACd,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAkB,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE;gBAC1H,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAmB,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE;aAC5H,CAAC;YACF,MAAM,EAAE,GAAG,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACzC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC5B,MAAM,EAAE,GAAG,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,mBAAmB;YAC7D,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC5B,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8EAA8E,EAAE,GAAG,EAAE;YACtF,iBAAiB,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;YACvG,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;YACxD,MAAM,CAAC,GAAG,iBAAiB,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9G,MAAM,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;YACxD,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC9C,iBAAiB,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;YACpG,MAAM,CAAC,cAAc,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QAC3E,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,sEAAsE;IAEtE,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;QAC5B,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;YAC1D,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;YAC1D,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;YAC1D,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACvC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;YAC7C,WAAW,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;YACjC,WAAW,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;YACjC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;YACzC,WAAW,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;YACjC,WAAW,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;YACjC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,2BAA2B,CAAC,CAAC;YAClD,MAAM,KAAK,GAAG,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAClD,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;YAChC,CAAC,CAAC,MAAM,CAAC,IAAI,GAAG,UAAU,CAAC;YAC3B,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAC7B,aAAa,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;YAC3C,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;YAChD,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC5C,WAAW,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;YACjC,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,sEAAsE;IAEtE,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;QAC1C,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;YACzD,MAAM,CAAC,GAAG,gBAAgB,CAAC,iCAAiC,CAAC,CAAC;YAC9D,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC5B,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;YACxD,MAAM,CAAC,GAAG,gBAAgB,CAAC,8BAA8B,CAAC,CAAC;YAC3D,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC5B,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,sEAAsE;IAEtE,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;QACpC,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;YAC7E,MAAM,CAAC,GAAG,cAAc,CAAC;gBACvB,QAAQ,EAAE,IAAI;gBACd,kBAAkB,EAAE,kCAAkC;gBACtD,IAAI,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE;gBAC7C,KAAK,EAAE,UAAU;gBACjB,aAAa,EAAE,IAAI;aACpB,CAAC,CAAC;YACH,qDAAqD;YACrD,MAAM,CAAC,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxB,KAAK,MAAM,EAAE,IAAI,2BAA2B,EAAE,CAAC;gBAC7C,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACpC,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/mcp_candor/spec.d.ts

@@ -0,0 +1,127 @@
+/**
+ * v2.23.1 — MCP-CANDOR/0.1 — PROTOCOL SPEC.
+ *
+ * CANDOR  = Cryptographic Audit · Neutral verdicts · Drift detection ·
+ *           Origin attestation · Receipt ledger
+ *
+ * An open, vendor-neutral spec that any MCP server can implement to
+ * declare "I am coercion-clean, identity-verifiable, drift-tracked,
+ * and audit-tamper-evident". Mneme ships as the reference
+ * implementation but the spec is intentionally OPEN — competitors
+ * (Cursor, Codex, Continue, Antigravity, etc.) can adopt it and
+ * federate with Mneme + each other.
+ *
+ * The five mandatory endpoints (any MCP server SHALL expose at least
+ * these to claim CANDOR/0.1 compliance):
+ *
+ *   1. candor.handshake()         → CandorHandshake
+ *   2. candor.vaccines.list()     → VaccineEntry[]
+ *   3. candor.vaccines.contribute(VaccineEntry) → { accepted: boolean }
+ *   4. candor.audit.append(AuditRecord) → AuditReceipt
+ *   5. candor.coercion.classify(text) → CoercionVerdict
+ *
+ * Versioning: SemVer over the SPEC, not the implementation. Adding
+ * required endpoints = major bump. Adding optional endpoints = minor
+ * bump. Internal changes = patch.
+ *
+ * Compliance levels:
+ *   - "minimal"    — handshake + vaccines.list + coercion.classify
+ *   - "standard"   — all 5 endpoints
+ *   - "federated"  — standard + accepts cross-server vaccine pulls
+ *                    and audit-record gossip
+ */
+export declare const SPEC_NAME = "MCP-CANDOR";
+export declare const SPEC_VERSION = "0.1.0";
+export declare const SPEC_URL = "https://github.com/patsa2561-art/mneme-ai/blob/main/docs/MCP_CANDOR.md";
+export type ComplianceLevel = "minimal" | "standard" | "federated";
+export declare const REQUIRED_ENDPOINTS_MINIMAL: readonly ["candor.handshake", "candor.vaccines.list", "candor.coercion.classify"];
+export declare const REQUIRED_ENDPOINTS_STANDARD: readonly ["candor.handshake", "candor.vaccines.list", "candor.coercion.classify", "candor.vaccines.contribute", "candor.audit.append"];
+export type CandorEndpoint = "candor.handshake" | "candor.vaccines.list" | "candor.vaccines.contribute" | "candor.audit.append" | "candor.coercion.classify";
+/** Schema for the handshake response. Every CANDOR-compliant server
+ *  MUST be able to fill these fields. */
+export interface CandorHandshake {
+    /** Always SPEC_NAME. */
+    spec: typeof SPEC_NAME;
+    /** SemVer of the spec this server implements. */
+    specVersion: string;
+    /** Implementation name + version (for diagnostics). */
+    impl: {
+        name: string;
+        version: string;
+    };
+    /** Compliance level achieved. */
+    level: ComplianceLevel;
+    /** Identity attestation — a Trust Capsule URI (mneme://attest/v1/...).
+     *  Receiver verifies independently. */
+    identity: string;
+    /** Endpoints actually exposed by this implementation. */
+    endpoints: CandorEndpoint[];
+    /** Whether THIS server's own output passes its own coercion audit.
+     *  Self-declared; receivers may re-audit. */
+    coercionClean: boolean;
+    /** When this handshake response was generated (ISO). */
+    generatedAt: string;
+    /** Optional URL where the vaccine registry can be fetched. */
+    vaccinesUrl?: string;
+    /** Optional URL where the audit ledger can be appended to. */
+    auditUrl?: string;
+    /** HMAC signature over the canonical handshake payload. */
+    sig: string;
+}
+export interface VaccineEntry {
+    /** Stable id (sha-prefix of the signature). */
+    id: string;
+    /** Hallucination class. */
+    type: "factual" | "structural" | "coercion" | "drift" | "other";
+    /** Compact signature (simhash / regex / pattern). */
+    signature: string;
+    /** Plain-English description. */
+    description: string;
+    /** Who signed it (implementation name + version). */
+    signedBy: string;
+    /** When the vaccine was emitted (ISO). */
+    observedAt: string;
+    /** Optional list of tool ids that have adopted this vaccine. */
+    adoptedBy?: string[];
+    /** HMAC over (id|type|signature|signedBy|observedAt). */
+    sig: string;
+}
+export interface AuditRecord {
+    /** What happened (event kind, e.g. "verdict-emitted" / "tool-call-allowed"). */
+    kind: string;
+    /** Surface ('verify' / 'audit-pulse' / 'dojo' / etc.). */
+    surface?: string;
+    /** ISO timestamp. */
+    ts: string;
+    /** Free-form metadata (caller redacts secrets). */
+    meta?: Record<string, unknown>;
+    /** Previous receipt sig for chain-linking; "genesis" if first. */
+    prev: string;
+}
+export interface AuditReceipt {
+    /** Stable id. */
+    id: string;
+    /** Echoed-back input. */
+    record: AuditRecord;
+    /** HMAC signature of (record + prev). */
+    sig: string;
+    /** Always SPEC_NAME. */
+    spec: typeof SPEC_NAME;
+}
+export interface CoercionVerdict {
+    /** 0-5 — 0 clean, 5 most coercive. */
+    worstTier: number;
+    /** Pattern ids matched (tac-001..tac-008). */
+    matchedPatternIds: string[];
+    /** Plain-English summary. */
+    rationale: string;
+}
+/** Pure utility: which endpoints does a given compliance level require? */
+export declare function requiredEndpoints(level: ComplianceLevel): readonly CandorEndpoint[];
+/** Pure utility: validate a handshake against the spec. Returns ok or
+ *  a list of violations. */
+export declare function validateHandshake(h: Partial<CandorHandshake>): {
+    ok: boolean;
+    violations: string[];
+};
+//# sourceMappingURL=spec.d.ts.map

package/dist/mcp_candor/spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spec.d.ts","sourceRoot":"","sources":["../../src/mcp_candor/spec.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,eAAO,MAAM,SAAS,eAAe,CAAC;AACtC,eAAO,MAAM,YAAY,UAAU,CAAC;AACpC,eAAO,MAAM,QAAQ,2EAA2E,CAAC;AAEjG,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,UAAU,GAAG,WAAW,CAAC;AAEnE,eAAO,MAAM,0BAA0B,mFAI7B,CAAC;AAEX,eAAO,MAAM,2BAA2B,wIAI9B,CAAC;AAEX,MAAM,MAAM,cAAc,GACtB,kBAAkB,GAClB,sBAAsB,GACtB,4BAA4B,GAC5B,qBAAqB,GACrB,0BAA0B,CAAC;AAE/B;yCACyC;AACzC,MAAM,WAAW,eAAe;IAC9B,wBAAwB;IACxB,IAAI,EAAE,OAAO,SAAS,CAAC;IACvB,iDAAiD;IACjD,WAAW,EAAE,MAAM,CAAC;IACpB,uDAAuD;IACvD,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACxC,iCAAiC;IACjC,KAAK,EAAE,eAAe,CAAC;IACvB;2CACuC;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,yDAAyD;IACzD,SAAS,EAAE,cAAc,EAAE,CAAC;IAC5B;iDAC6C;IAC7C,aAAa,EAAE,OAAO,CAAC;IACvB,wDAAwD;IACxD,WAAW,EAAE,MAAM,CAAC;IACpB,8DAA8D;IAC9D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2DAA2D;IAC3D,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,YAAY;IAC3B,+CAA+C;IAC/C,EAAE,EAAE,MAAM,CAAC;IACX,2BAA2B;IAC3B,IAAI,EAAE,SAAS,GAAG,YAAY,GAAG,UAAU,GAAG,OAAO,GAAG,OAAO,CAAC;IAChE,qDAAqD;IACrD,SAAS,EAAE,MAAM,CAAC;IAClB,iCAAiC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,qDAAqD;IACrD,QAAQ,EAAE,MAAM,CAAC;IACjB,0CAA0C;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,gEAAgE;IAChE,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,yDAAyD;IACzD,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,WAAW;IAC1B,gFAAgF;IAChF,IAAI,EAAE,MAAM,CAAC;IACb,0DAA0D;IAC1D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qBAAqB;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,mDAAmD;IACnD,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,kEAAkE;IAClE,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,YAAY;IAC3B,iBAAiB;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,yBAAyB;IACzB,MAAM,EAAE,WAAW,CAAC;IACpB,yCAAyC;IACzC,GAAG,EAAE,MAAM,CAAC;IACZ,wBAAwB;IACxB,IAAI,EAAE,OAAO,SAAS,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,sCAAsC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,8CAA8C;IAC9C,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,6BAA6B;IAC7B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,2EAA2E;AAC3E,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,eAAe,GAAG,SAAS,cAAc,EAAE,CAGnF;AAED;4BAC4B;AAC5B,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAA;CAAE,CAiBpG"}

package/dist/mcp_candor/spec.js

@@ -0,0 +1,84 @@
+/**
+ * v2.23.1 — MCP-CANDOR/0.1 — PROTOCOL SPEC.
+ *
+ * CANDOR  = Cryptographic Audit · Neutral verdicts · Drift detection ·
+ *           Origin attestation · Receipt ledger
+ *
+ * An open, vendor-neutral spec that any MCP server can implement to
+ * declare "I am coercion-clean, identity-verifiable, drift-tracked,
+ * and audit-tamper-evident". Mneme ships as the reference
+ * implementation but the spec is intentionally OPEN — competitors
+ * (Cursor, Codex, Continue, Antigravity, etc.) can adopt it and
+ * federate with Mneme + each other.
+ *
+ * The five mandatory endpoints (any MCP server SHALL expose at least
+ * these to claim CANDOR/0.1 compliance):
+ *
+ *   1. candor.handshake()         → CandorHandshake
+ *   2. candor.vaccines.list()     → VaccineEntry[]
+ *   3. candor.vaccines.contribute(VaccineEntry) → { accepted: boolean }
+ *   4. candor.audit.append(AuditRecord) → AuditReceipt
+ *   5. candor.coercion.classify(text) → CoercionVerdict
+ *
+ * Versioning: SemVer over the SPEC, not the implementation. Adding
+ * required endpoints = major bump. Adding optional endpoints = minor
+ * bump. Internal changes = patch.
+ *
+ * Compliance levels:
+ *   - "minimal"    — handshake + vaccines.list + coercion.classify
+ *   - "standard"   — all 5 endpoints
+ *   - "federated"  — standard + accepts cross-server vaccine pulls
+ *                    and audit-record gossip
+ */
+export const SPEC_NAME = "MCP-CANDOR";
+export const SPEC_VERSION = "0.1.0";
+export const SPEC_URL = "https://github.com/patsa2561-art/mneme-ai/blob/main/docs/MCP_CANDOR.md";
+export const REQUIRED_ENDPOINTS_MINIMAL = [
+    "candor.handshake",
+    "candor.vaccines.list",
+    "candor.coercion.classify",
+];
+export const REQUIRED_ENDPOINTS_STANDARD = [
+    ...REQUIRED_ENDPOINTS_MINIMAL,
+    "candor.vaccines.contribute",
+    "candor.audit.append",
+];
+/** Pure utility: which endpoints does a given compliance level require? */
+export function requiredEndpoints(level) {
+    if (level === "minimal")
+        return REQUIRED_ENDPOINTS_MINIMAL;
+    return REQUIRED_ENDPOINTS_STANDARD;
+}
+/** Pure utility: validate a handshake against the spec. Returns ok or
+ *  a list of violations. */
+export function validateHandshake(h) {
+    const v = [];
+    if (h.spec !== SPEC_NAME)
+        v.push(`spec must equal '${SPEC_NAME}', got '${h.spec ?? ""}'`);
+    if (!h.specVersion || !/^\d+\.\d+\.\d+/.test(h.specVersion))
+        v.push("specVersion must be SemVer");
+    if (!h.impl || !h.impl.name)
+        v.push("impl.name missing");
+    if (!h.impl || !h.impl.version)
+        v.push("impl.version missing");
+    if (!h.level || !["minimal", "standard", "federated"].includes(h.level))
+        v.push("level must be minimal|standard|federated");
+    if (!h.identity || !h.identity.startsWith("mneme://attest/v1/"))
+        v.push("identity must be a Trust Capsule URI");
+    if (!Array.isArray(h.endpoints) || h.endpoints.length === 0)
+        v.push("endpoints must be a non-empty array");
+    else if (h.level) {
+        const need = requiredEndpoints(h.level);
+        for (const ep of need)
+            if (!h.endpoints.includes(ep))
+                v.push(`missing required endpoint for level '${h.level}': ${ep}`);
+    }
+    if (typeof h.coercionClean !== "boolean")
+        v.push("coercionClean must be boolean");
+    if (!h.generatedAt)
+        v.push("generatedAt missing");
+    if (!h.sig)
+        v.push("sig missing");
+    return { ok: v.length === 0, violations: v };
+}
+//# sourceMappingURL=spec.js.map

package/dist/mcp_candor/spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spec.js","sourceRoot":"","sources":["../../src/mcp_candor/spec.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,MAAM,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC;AACtC,MAAM,CAAC,MAAM,YAAY,GAAG,OAAO,CAAC;AACpC,MAAM,CAAC,MAAM,QAAQ,GAAG,wEAAwE,CAAC;AAIjG,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,kBAAkB;IAClB,sBAAsB;IACtB,0BAA0B;CAClB,CAAC;AAEX,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,GAAG,0BAA0B;IAC7B,4BAA4B;IAC5B,qBAAqB;CACb,CAAC;AA0FX,2EAA2E;AAC3E,MAAM,UAAU,iBAAiB,CAAC,KAAsB;IACtD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,0BAA0B,CAAC;IAC3D,OAAO,2BAA2B,CAAC;AACrC,CAAC;AAED;4BAC4B;AAC5B,MAAM,UAAU,iBAAiB,CAAC,CAA2B;IAC3D,MAAM,CAAC,GAAa,EAAE,CAAC;IACvB,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;QAAE,CAAC,CAAC,IAAI,CAAC,oBAAoB,SAAS,WAAW,CAAC,CAAC,IAAI,IAAI,EAAE,GAAG,CAAC,CAAC;IAC1F,IAAI,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAClG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI;QAAE,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACzD,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO;QAAE,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAC/D,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;IAC5H,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,oBAAoB,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IAChH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;SACtG,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,iBAAiB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACxC,KAAK,MAAM,EAAE,IAAI,IAAI;YAAE,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAAE,CAAC,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC,KAAK,MAAM,EAAE,EAAE,CAAC,CAAC;IAC1H,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,aAAa,KAAK,SAAS;QAAE,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAClF,IAAI,CAAC,CAAC,CAAC,WAAW;QAAE,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAClD,IAAI,CAAC,CAAC,CAAC,GAAG;QAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAClC,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;AAC/C,CAAC"}

package/dist/mcp_candor/vaccine_registry.d.ts

@@ -0,0 +1,44 @@
+/**
+ * v2.23.1 — MCP-CANDOR · VACCINE REGISTRY.
+ *
+ * Diamond #2 from the v2.22.3 audit: the vaccine cache (known-lie
+ * patterns refuted in 0ms) becomes a public, federation-ready
+ * registry. Mneme exposes its registry; other CANDOR-compliant
+ * servers expose theirs; anyone can pull / contribute.
+ *
+ * Think CVE database, but for AI hallucination signatures.
+ *
+ * Format is intentionally minimal so non-Mneme implementations can
+ * adopt it without dragging in Mneme-specific types.
+ */
+import { type VaccineEntry } from "./spec.js";
+export interface ContributeOptions {
+    type: VaccineEntry["type"];
+    signature: string;
+    description: string;
+    signedBy: string;
+}
+export declare function contributeVaccine(repoRoot: string, opts: ContributeOptions): VaccineEntry;
+export declare function listVaccines(repoRoot: string): VaccineEntry[];
+export declare function findVaccine(repoRoot: string, id: string): VaccineEntry | null;
+/** Pull a foreign registry (JSON array) into the local registry.
+ *  Dedups by id. Returns the count of newly-imported entries. The
+ *  caller is responsible for trust-gating WHICH foreign registry to
+ *  pull from (Mneme suggests gating on a Trust Capsule URI match). */
+export declare function importVaccines(repoRoot: string, foreign: VaccineEntry[]): {
+    imported: number;
+    skipped: number;
+};
+/** Export the local registry as a list. Suitable for the
+ *  `candor.vaccines.list` MCP endpoint. */
+export declare function exportVaccines(repoRoot: string): VaccineEntry[];
+/** Verify an entry's HMAC. Uses the LOCAL install key — when the
+ *  entry was signed by a foreign install, this returns ok:false
+ *  (correctly). Cross-install verification requires the foreign
+ *  install's public key, which is out of scope for v0.1. */
+export declare function verifyVaccineSig(repoRoot: string, e: VaccineEntry): {
+    ok: boolean;
+    reason?: string;
+};
+export declare function formatVaccines(entries: VaccineEntry[]): string;
+//# sourceMappingURL=vaccine_registry.d.ts.map

package/dist/mcp_candor/vaccine_registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vaccine_registry.d.ts","sourceRoot":"","sources":["../../src/mcp_candor/vaccine_registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,OAAO,EAAa,KAAK,YAAY,EAAE,MAAM,WAAW,CAAC;AA0BzD,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,GAAG,YAAY,CAkBzF;AAED,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,YAAY,EAAE,CAM7D;AAED,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAE7E;AAED;;;sEAGsE;AACtE,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAW/G;AAED;2CAC2C;AAC3C,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,YAAY,EAAE,CAE/D;AAED;;;4DAG4D;AAC5D,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,EAAE,YAAY,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAMpG;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,MAAM,CAU9D"}

package/dist/mcp_candor/vaccine_registry.js

@@ -0,0 +1,129 @@
+/**
+ * v2.23.1 — MCP-CANDOR · VACCINE REGISTRY.
+ *
+ * Diamond #2 from the v2.22.3 audit: the vaccine cache (known-lie
+ * patterns refuted in 0ms) becomes a public, federation-ready
+ * registry. Mneme exposes its registry; other CANDOR-compliant
+ * servers expose theirs; anyone can pull / contribute.
+ *
+ * Think CVE database, but for AI hallucination signatures.
+ *
+ * Format is intentionally minimal so non-Mneme implementations can
+ * adopt it without dragging in Mneme-specific types.
+ */
+import { existsSync, readFileSync, appendFileSync, mkdirSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { createHmac, randomBytes } from "node:crypto";
+import { SPEC_NAME } from "./spec.js";
+const DIR = ".mneme/candor";
+const FILE = "vaccines.jsonl";
+const KEY_FILE = "candor.key";
+function dir(repoRoot) {
+    const d = join(repoRoot, DIR);
+    if (!existsSync(d))
+        mkdirSync(d, { recursive: true });
+    return d;
+}
+function key(repoRoot) {
+    const p = join(dir(repoRoot), KEY_FILE);
+    if (existsSync(p))
+        return readFileSync(p, "utf8").trim();
+    const k = randomBytes(32).toString("base64url");
+    writeFileSync(p, k, "utf8");
+    return k;
+}
+function sign(payload, k) {
+    return createHmac("sha256", k).update(payload).digest("base64url").slice(0, 22);
+}
+function filePath(repoRoot) { return join(dir(repoRoot), FILE); }
+export function contributeVaccine(repoRoot, opts) {
+    const k = key(repoRoot);
+    const observedAt = new Date().toISOString();
+    // Derive the id from the signature so identical signatures don't
+    // create duplicate entries across servers.
+    const id = "vc_" + createHmac("sha256", "candor-vaccine-id").update(opts.signature).digest("base64url").slice(0, 16);
+    const canonical = `${id}|${opts.type}|${opts.signature}|${opts.signedBy}|${observedAt}`;
+    const sig = sign(canonical, k);
+    const entry = {
+        id, type: opts.type, signature: opts.signature, description: opts.description,
+        signedBy: opts.signedBy, observedAt, sig,
+    };
+    // Deduplicate by id — if already present, skip the append.
+    const all = listVaccines(repoRoot);
+    if (!all.find((e) => e.id === entry.id)) {
+        appendFileSync(filePath(repoRoot), JSON.stringify(entry) + "\n", "utf8");
+    }
+    return entry;
+}
+export function listVaccines(repoRoot) {
+    const p = filePath(repoRoot);
+    if (!existsSync(p))
+        return [];
+    try {
+        return readFileSync(p, "utf8").trim().split("\n").map((l) => { try {
+            return JSON.parse(l);
+        }
+        catch {
+            return null;
+        } }).filter((e) => !!e);
+    }
+    catch {
+        return [];
+    }
+}
+export function findVaccine(repoRoot, id) {
+    return listVaccines(repoRoot).find((e) => e.id === id) ?? null;
+}
+/** Pull a foreign registry (JSON array) into the local registry.
+ *  Dedups by id. Returns the count of newly-imported entries. The
+ *  caller is responsible for trust-gating WHICH foreign registry to
+ *  pull from (Mneme suggests gating on a Trust Capsule URI match). */
+export function importVaccines(repoRoot, foreign) {
+    const existing = new Set(listVaccines(repoRoot).map((e) => e.id));
+    let imported = 0, skipped = 0;
+    for (const e of foreign) {
+        if (!e.id || !e.signature) {
+            skipped++;
+            continue;
+        }
+        if (existing.has(e.id)) {
+            skipped++;
+            continue;
+        }
+        appendFileSync(filePath(repoRoot), JSON.stringify(e) + "\n", "utf8");
+        existing.add(e.id);
+        imported++;
+    }
+    return { imported, skipped };
+}
+/** Export the local registry as a list. Suitable for the
+ *  `candor.vaccines.list` MCP endpoint. */
+export function exportVaccines(repoRoot) {
+    return listVaccines(repoRoot);
+}
+/** Verify an entry's HMAC. Uses the LOCAL install key — when the
+ *  entry was signed by a foreign install, this returns ok:false
+ *  (correctly). Cross-install verification requires the foreign
+ *  install's public key, which is out of scope for v0.1. */
+export function verifyVaccineSig(repoRoot, e) {
+    const k = key(repoRoot);
+    const canonical = `${e.id}|${e.type}|${e.signature}|${e.signedBy}|${e.observedAt}`;
+    const expected = sign(canonical, k);
+    if (expected !== e.sig)
+        return { ok: false, reason: "HMAC sig mismatch — entry not signed by this install" };
+    return { ok: true };
+}
+export function formatVaccines(entries) {
+    if (entries.length === 0)
+        return `🦠 ${SPEC_NAME} VACCINE REGISTRY — empty`;
+    const lines = [`🦠 ${SPEC_NAME} VACCINE REGISTRY — ${entries.length} entries`, ""];
+    for (const e of entries.slice(0, 20)) {
+        lines.push(`  [${e.id}] type=${e.type.padEnd(10)} by=${e.signedBy.padEnd(20)} ${e.observedAt}`);
+        lines.push(`    sig: ${e.signature.slice(0, 60)}`);
+        lines.push(`    desc: ${e.description.slice(0, 80)}`);
+    }
+    if (entries.length > 20)
+        lines.push(`  (showing 20 of ${entries.length})`);
+    return lines.join("\n");
+}
+//# sourceMappingURL=vaccine_registry.js.map

package/dist/mcp_candor/vaccine_registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vaccine_registry.js","sourceRoot":"","sources":["../../src/mcp_candor/vaccine_registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7F,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,SAAS,EAAqB,MAAM,WAAW,CAAC;AAEzD,MAAM,GAAG,GAAG,eAAe,CAAC;AAC5B,MAAM,IAAI,GAAG,gBAAgB,CAAC;AAC9B,MAAM,QAAQ,GAAG,YAAY,CAAC;AAE9B,SAAS,GAAG,CAAC,QAAgB;IAC3B,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC9B,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,SAAS,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,GAAG,CAAC,QAAgB;IAC3B,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC;IACxC,IAAI,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACzD,MAAM,CAAC,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAChD,aAAa,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;IAC5B,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,IAAI,CAAC,OAAe,EAAE,CAAS;IACtC,OAAO,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,QAAQ,CAAC,QAAgB,IAAY,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;AASjF,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,IAAuB;IACzE,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;IACxB,MAAM,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,iEAAiE;IACjE,2CAA2C;IAC3C,MAAM,EAAE,GAAG,KAAK,GAAG,UAAU,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACrH,MAAM,SAAS,GAAG,GAAG,EAAE,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,QAAQ,IAAI,UAAU,EAAE,CAAC;IACxF,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAiB;QAC1B,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7E,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,GAAG;KACzC,CAAC;IACF,2DAA2D;IAC3D,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;QACxC,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC7B,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAC9B,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC;YAAC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAiB,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAqB,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/K,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,QAAgB,EAAE,EAAU;IACtD,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,IAAI,CAAC;AACjE,CAAC;AAED;;;sEAGsE;AACtE,MAAM,UAAU,cAAc,CAAC,QAAgB,EAAE,OAAuB;IACtE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAClE,IAAI,QAAQ,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;YAAC,OAAO,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QACnD,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YAAC,OAAO,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QAChD,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;QACrE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACnB,QAAQ,EAAE,CAAC;IACb,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAC/B,CAAC;AAED;2CAC2C;AAC3C,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;AAChC,CAAC;AAED;;;4DAG4D;AAC5D,MAAM,UAAU,gBAAgB,CAAC,QAAgB,EAAE,CAAe;IAChE,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;IACxB,MAAM,SAAS,GAAG,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;IACnF,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IACpC,IAAI,QAAQ,KAAK,CAAC,CAAC,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sDAAsD,EAAE,CAAC;IAC7G,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAAuB;IACpD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,SAAS,2BAA2B,CAAC;IAC5E,MAAM,KAAK,GAAG,CAAC,MAAM,SAAS,uBAAuB,OAAO,CAAC,MAAM,UAAU,EAAE,EAAE,CAAC,CAAC;IACnF,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QACrC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;QAChG,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QACnD,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,EAAE;QAAE,KAAK,CAAC,IAAI,CAAC,oBAAoB,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IAC3E,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}