@mneme-ai/core 2.29.1 → 2.31.0

package/dist/hgp/hgp.test.js

@@ -0,0 +1,198 @@
+// v2.31.0 — HGP (Hallucination Genome Project) discrete root tests.
+import { describe, it, expect, beforeEach } from "vitest";
+import { mkdtempSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { computeHgpIdFromSimhash, isValidHgpId, disambiguate, recordHallucination, lookup, topN, loadCollapsed, computeSeverity, readConsent, setConsent, federationStatus, federatePush, verifyLedger, severityForVendor, allVendorsBreakdown, topInWindow, } from "./index.js";
+describe("HGP-ID format", () => {
+    it("isValidHgpId accepts canonical form", () => {
+        expect(isValidHgpId("HGP-2026-00001")).toBe(true);
+        expect(isValidHgpId("HGP-2026-12345")).toBe(true);
+        expect(isValidHgpId("HGP-2026-12345-A")).toBe(true);
+        expect(isValidHgpId("HGP-2026-12345-AB")).toBe(true);
+    });
+    it("isValidHgpId rejects malformed", () => {
+        expect(isValidHgpId("HGP-26-1")).toBe(false);
+        expect(isValidHgpId("CVE-2026-12345")).toBe(false);
+        expect(isValidHgpId("HGP-2026-123")).toBe(false);
+        expect(isValidHgpId("")).toBe(false);
+    });
+    it("computeHgpIdFromSimhash is deterministic", () => {
+        const sim = "deadbeefdeadbeef";
+        const id1 = computeHgpIdFromSimhash(sim, "2026-05-23T00:00:00Z");
+        const id2 = computeHgpIdFromSimhash(sim, "2026-05-23T00:00:00Z");
+        expect(id1).toBe(id2);
+        expect(isValidHgpId(id1)).toBe(true);
+    });
+    it("computeHgpIdFromSimhash differs per simhash within same year", () => {
+        const id1 = computeHgpIdFromSimhash("aaaaaaaaaaaaaaaa", "2026-05-23T00:00:00Z");
+        const id2 = computeHgpIdFromSimhash("bbbbbbbbbbbbbbbb", "2026-05-23T00:00:00Z");
+        expect(id1).not.toBe(id2);
+    });
+    it("disambiguate appends A, B, C correctly", () => {
+        expect(disambiguate("HGP-2026-00001", 0)).toBe("HGP-2026-00001");
+        expect(disambiguate("HGP-2026-00001", 1)).toBe("HGP-2026-00001-A");
+        expect(disambiguate("HGP-2026-00001", 2)).toBe("HGP-2026-00001-B");
+    });
+});
+describe("recordHallucination + lookup", () => {
+    let repo;
+    beforeEach(() => { repo = mkdtempSync(join(tmpdir(), "hgp-test-")); });
+    it("records a hallucination + assigns a valid HGP-ID", () => {
+        const r = recordHallucination(repo, {
+            claim: "useFormStatus accepts a reset option",
+            signature: "chandrasekhar:UNKNOWN_API",
+            vendor: "claude-opus-4.7",
+        });
+        expect(isValidHgpId(r.hgpId)).toBe(true);
+        expect(r.observeCount).toBe(1);
+        expect(r.vendorCounts["claude-opus-4.7"]).toBe(1);
+    });
+    it("same simhash → same HGP-ID across calls (idempotent identity)", () => {
+        const r1 = recordHallucination(repo, {
+            claim: "useFormStatus accepts a reset option",
+            signature: "chandrasekhar:UNKNOWN_API",
+            vendor: "claude",
+        });
+        const r2 = recordHallucination(repo, {
+            claim: "useFormStatus accepts a reset option",
+            signature: "chandrasekhar:UNKNOWN_API",
+            vendor: "gpt-5",
+        });
+        expect(r2.hgpId).toBe(r1.hgpId);
+        const collapsed = loadCollapsed(repo).get(r1.hgpId);
+        expect(collapsed.observeCount).toBe(2);
+        expect(collapsed.vendorCounts["claude"]).toBe(1);
+        expect(collapsed.vendorCounts["gpt-5"]).toBe(1);
+    });
+    it("different simhash → different HGP-ID", () => {
+        const r1 = recordHallucination(repo, {
+            claim: "React 19 ships server components by default",
+            signature: "x", vendor: "a",
+        });
+        const r2 = recordHallucination(repo, {
+            claim: "asyncio.gather accepts a loop= parameter today",
+            signature: "x", vendor: "a",
+        });
+        expect(r2.hgpId).not.toBe(r1.hgpId);
+    });
+    it("severity grows with observe count + vendor spread", () => {
+        const c = "Vue 4 was released yesterday with major breaking changes";
+        let r = recordHallucination(repo, { claim: c, signature: "x", vendor: "a" });
+        const sev1 = r.severity;
+        for (let i = 0; i < 5; i++)
+            recordHallucination(repo, { claim: c, signature: "x", vendor: "a" });
+        recordHallucination(repo, { claim: c, signature: "x", vendor: "b" });
+        recordHallucination(repo, { claim: c, signature: "x", vendor: "c" });
+        r = lookup(repo, r.hgpId);
+        expect(r.severity).toBeGreaterThan(sev1);
+    });
+    it("topN returns highest severity first", () => {
+        const A = "Common lie about something useful long sentence here";
+        const B = "Rare lie observed only once particular pattern";
+        for (let i = 0; i < 5; i++)
+            recordHallucination(repo, { claim: A, signature: "x", vendor: "v" });
+        recordHallucination(repo, { claim: B, signature: "x", vendor: "v" });
+        const top = topN(repo, 2);
+        expect(top.length).toBe(2);
+        expect(top[0].observeCount).toBeGreaterThanOrEqual(top[1].observeCount);
+    });
+    it("redacts obvious secrets from sample text", () => {
+        const r = recordHallucination(repo, {
+            claim: "the AWS key AKIAIOSFODNN7EXAMPLE was used to call S3",
+            signature: "x", vendor: "v",
+        });
+        expect(r.sample).not.toContain("AKIAIOSFODNN7EXAMPLE");
+        expect(r.sample).toContain("<aws-key>");
+    });
+});
+describe("federation consent (default OFF)", () => {
+    let repo;
+    beforeEach(() => { repo = mkdtempSync(join(tmpdir(), "hgp-cons-")); });
+    it("default consent is opt-out", () => {
+        const c = readConsent(repo);
+        expect(c.optIn).toBe(false);
+    });
+    it("setConsent persists across reads", () => {
+        setConsent(repo, true, "https://hgp.ai");
+        const c = readConsent(repo);
+        expect(c.optIn).toBe(true);
+        expect(c.endpoint).toBe("https://hgp.ai");
+    });
+    it("federationStatus reports localCount + consent", () => {
+        recordHallucination(repo, { claim: "x lie sentence pattern abc", signature: "y", vendor: "z" });
+        const s = federationStatus(repo);
+        expect(s.localCount).toBe(1);
+        expect(s.consent.optIn).toBe(false);
+    });
+    it("federatePush refuses without consent", async () => {
+        const r = await federatePush(repo);
+        expect(r.ok).toBe(false);
+        expect(r.reason).toMatch(/consent/i);
+    });
+    it("federatePush refuses with consent but no endpoint", async () => {
+        setConsent(repo, true);
+        const r = await federatePush(repo);
+        expect(r.ok).toBe(false);
+        expect(r.reason).toMatch(/endpoint/i);
+    });
+});
+describe("severity windowing", () => {
+    let repo;
+    beforeEach(() => { repo = mkdtempSync(join(tmpdir(), "hgp-sev-")); });
+    it("severityForVendor counts records in window", () => {
+        recordHallucination(repo, { claim: "first lie observed here", signature: "x", vendor: "anthropic" });
+        recordHallucination(repo, { claim: "second different lie observed", signature: "x", vendor: "anthropic" });
+        recordHallucination(repo, { claim: "third one for openai test", signature: "x", vendor: "openai" });
+        const a = severityForVendor(repo, "anthropic", 30);
+        expect(a.count).toBe(2);
+        expect(a.vendor).toBe("anthropic");
+        expect(a.windowDays).toBe(30);
+    });
+    it("allVendorsBreakdown lists every observed vendor", () => {
+        recordHallucination(repo, { claim: "lie 1 sentence long enough", signature: "x", vendor: "anthropic" });
+        recordHallucination(repo, { claim: "lie 2 sentence long enough", signature: "x", vendor: "openai" });
+        const all = allVendorsBreakdown(repo, 30);
+        const vendors = all.map((s) => s.vendor).sort();
+        expect(vendors).toContain("anthropic");
+        expect(vendors).toContain("openai");
+    });
+    it("topInWindow returns no record outside window", () => {
+        recordHallucination(repo, { claim: "lie in window test sentence", signature: "x", vendor: "v" });
+        const recent = topInWindow(repo, 30, 5);
+        expect(recent.length).toBe(1);
+        // 0-day window: nothing recent enough.
+        const none = topInWindow(repo, 0, 5);
+        expect(none.length).toBe(0);
+    });
+});
+describe("verifyLedger", () => {
+    it("returns ok=true on empty registry", () => {
+        const repo = mkdtempSync(join(tmpdir(), "hgp-ver-"));
+        const r = verifyLedger(repo);
+        expect(r.ok).toBe(true);
+        expect(r.lines).toBe(0);
+    });
+    it("counts well-formed lines + accepts them", () => {
+        const repo = mkdtempSync(join(tmpdir(), "hgp-ver2-"));
+        recordHallucination(repo, { claim: "first lie ok one two three", signature: "x", vendor: "v" });
+        recordHallucination(repo, { claim: "second different shape lie one two", signature: "x", vendor: "v" });
+        const r = verifyLedger(repo);
+        expect(r.ok).toBe(true);
+        expect(r.lines).toBe(2);
+    });
+});
+describe("computeSeverity bounds", () => {
+    it("severity is in [0,1]", () => {
+        const r = computeSeverity({
+            hgpId: "HGP-2026-00001",
+            simhash: "x", firstSeen: "x", lastSeen: "x",
+            observeCount: 1000,
+            vendorCounts: { a: 100, b: 100, c: 100, d: 100, e: 100 },
+            signature: "x", sample: "x", severity: 0,
+        });
+        expect(r).toBeGreaterThanOrEqual(0);
+        expect(r).toBeLessThanOrEqual(1);
+    });
+});
+//# sourceMappingURL=hgp.test.js.map

package/dist/hgp/hgp.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hgp.test.js","sourceRoot":"","sources":["../../src/hgp/hgp.test.ts"],"names":[],"mappings":"AAAA,oEAAoE;AAEpE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAU,MAAM,SAAS,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EACL,uBAAuB,EAAE,YAAY,EAAE,YAAY,EACnD,mBAAmB,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,eAAe,EACjE,WAAW,EAAE,UAAU,EAAE,gBAAgB,EAAE,YAAY,EAAE,YAAY,EACrE,iBAAiB,EAAE,mBAAmB,EAAE,WAAW,GACpD,MAAM,YAAY,CAAC;AAEpB,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,CAAC,YAAY,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,CAAC,YAAY,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnD,MAAM,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,GAAG,GAAG,kBAAkB,CAAC;QAC/B,MAAM,GAAG,GAAG,uBAAuB,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;QACjE,MAAM,GAAG,GAAG,uBAAuB,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;QACjE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtB,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,GAAG,GAAG,uBAAuB,CAAC,kBAAkB,EAAE,sBAAsB,CAAC,CAAC;QAChF,MAAM,GAAG,GAAG,uBAAuB,CAAC,kBAAkB,EAAE,sBAAsB,CAAC,CAAC;QAChF,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,CAAC,YAAY,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACjE,MAAM,CAAC,YAAY,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACnE,MAAM,CAAC,YAAY,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;IAC5C,IAAI,IAAY,CAAC;IACjB,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEvE,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,GAAG,mBAAmB,CAAC,IAAI,EAAE;YAClC,KAAK,EAAE,sCAAsC;YAC7C,SAAS,EAAE,2BAA2B;YACtC,MAAM,EAAE,iBAAiB;SAC1B,CAAC,CAAC;QACH,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,EAAE,GAAG,mBAAmB,CAAC,IAAI,EAAE;YACnC,KAAK,EAAE,sCAAsC;YAC7C,SAAS,EAAE,2BAA2B;YACtC,MAAM,EAAE,QAAQ;SACjB,CAAC,CAAC;QACH,MAAM,EAAE,GAAG,mBAAmB,CAAC,IAAI,EAAE;YACnC,KAAK,EAAE,sCAAsC;YAC7C,SAAS,EAAE,2BAA2B;YACtC,MAAM,EAAE,OAAO;SAChB,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAE,CAAC;QACrD,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjD,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,EAAE,GAAG,mBAAmB,CAAC,IAAI,EAAE;YACnC,KAAK,EAAE,6CAA6C;YACpD,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG;SAC5B,CAAC,CAAC;QACH,MAAM,EAAE,GAAG,mBAAmB,CAAC,IAAI,EAAE;YACnC,KAAK,EAAE,gDAAgD;YACvD,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG;SAC5B,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,CAAC,GAAG,0DAA0D,CAAC;QACrE,IAAI,CAAC,GAAG,mBAAmB,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7E,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC;QACxB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;YAAE,mBAAmB,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACjG,mBAAmB,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACrE,mBAAmB,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACrE,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAE,CAAC;QAC3B,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,GAAG,sDAAsD,CAAC;QACjE,MAAM,CAAC,GAAG,gDAAgD,CAAC;QAC3D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;YAAE,mBAAmB,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACjG,mBAAmB,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACrE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC1B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,YAAY,CAAC,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,YAAY,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,GAAG,mBAAmB,CAAC,IAAI,EAAE;YAClC,KAAK,EAAE,sDAAsD;YAC7D,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG;SAC5B,CAAC,CAAC;QACH,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QACvD,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,kCAAkC,EAAE,GAAG,EAAE;IAChD,IAAI,IAAY,CAAC;IACjB,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEvE,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,gBAAgB,CAAC,CAAC;QACzC,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3B,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,mBAAmB,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,4BAA4B,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAChG,MAAM,CAAC,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,CAAC,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACvB,MAAM,CAAC,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,IAAI,IAAY,CAAC;IACjB,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEtE,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,mBAAmB,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;QACrG,mBAAmB,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,+BAA+B,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;QAC3G,mBAAmB,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,2BAA2B,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QACpG,MAAM,CAAC,GAAG,iBAAiB,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;QACnD,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACxB,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACnC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,mBAAmB,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,4BAA4B,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;QACxG,mBAAmB,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,4BAA4B,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QACrG,MAAM,GAAG,GAAG,mBAAmB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAChD,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACvC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,mBAAmB,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,6BAA6B,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACjG,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9B,uCAAuC;QACvC,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC;QACrD,MAAM,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC;QACtD,mBAAmB,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,4BAA4B,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAChG,mBAAmB,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,oCAAoC,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACxG,MAAM,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,MAAM,CAAC,GAAG,eAAe,CAAC;YACxB,KAAK,EAAE,gBAAgB;YACvB,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG;YAC3C,YAAY,EAAE,IAAI;YAClB,YAAY,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE;YACxD,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;SACzC,CAAC,CAAC;QACH,MAAM,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/hgp/hgp_id.d.ts

@@ -0,0 +1,18 @@
+/**
+ * v2.31.0 — HGP-ID issuance (CVE-style deterministic IDs).
+ *
+ * Format: HGP-YYYY-NNNNN
+ *   YYYY = year the hallucination was FIRST seen
+ *   NNNNN = 5-digit base-10 derived deterministically from the
+ *           hallucination's simhash so that the SAME shape on
+ *           different machines + at different times gets the SAME
+ *           HGP-ID (modulo year-collision, handled by the registry).
+ *
+ * The year-NNNNN combination is a 64-bit space → < 1 in 10^5
+ * per-year collision rate even at 10k hallucinations/year. Registry
+ * (next file) handles collision by appending -A / -B / ... suffix.
+ */
+export declare function computeHgpIdFromSimhash(simhash: string, firstSeen: string): string;
+export declare function isValidHgpId(id: string): boolean;
+export declare function disambiguate(baseId: string, takenCount: number): string;
+//# sourceMappingURL=hgp_id.d.ts.map

package/dist/hgp/hgp_id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hgp_id.d.ts","sourceRoot":"","sources":["../../src/hgp/hgp_id.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAOlF;AAID,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAEhD;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAWvE"}

package/dist/hgp/hgp_id.js

@@ -0,0 +1,41 @@
+/**
+ * v2.31.0 — HGP-ID issuance (CVE-style deterministic IDs).
+ *
+ * Format: HGP-YYYY-NNNNN
+ *   YYYY = year the hallucination was FIRST seen
+ *   NNNNN = 5-digit base-10 derived deterministically from the
+ *           hallucination's simhash so that the SAME shape on
+ *           different machines + at different times gets the SAME
+ *           HGP-ID (modulo year-collision, handled by the registry).
+ *
+ * The year-NNNNN combination is a 64-bit space → < 1 in 10^5
+ * per-year collision rate even at 10k hallucinations/year. Registry
+ * (next file) handles collision by appending -A / -B / ... suffix.
+ */
+import { createHash } from "node:crypto";
+export function computeHgpIdFromSimhash(simhash, firstSeen) {
+    const year = new Date(firstSeen).getUTCFullYear();
+    // Deterministic 5-digit derivation: hash(simhash || year) mod 100_000.
+    const h = createHash("sha256").update(`${simhash}|${year}`).digest();
+    const n = (h[0] << 24 | h[1] << 16 | h[2] << 8 | h[3]) >>> 0;
+    const slot = (n % 99_999) + 1;
+    return `HGP-${year}-${String(slot).padStart(5, "0")}`;
+}
+const VALID = /^HGP-(\d{4})-(\d{5})(?:-[A-Z]+)?$/;
+export function isValidHgpId(id) {
+    return VALID.test(id);
+}
+export function disambiguate(baseId, takenCount) {
+    if (takenCount === 0)
+        return baseId;
+    // Suffix A, B, C, ..., AA, AB, ... for >26. takenCount is 1-based:
+    // 1 → A, 2 → B, ..., 27 → AA.
+    let n = takenCount - 1;
+    const letters = [];
+    do {
+        letters.unshift(String.fromCharCode("A".charCodeAt(0) + (n % 26)));
+        n = Math.floor(n / 26) - 1;
+    } while (n >= 0);
+    return `${baseId}-${letters.join("")}`;
+}
+//# sourceMappingURL=hgp_id.js.map

package/dist/hgp/hgp_id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hgp_id.js","sourceRoot":"","sources":["../../src/hgp/hgp_id.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,UAAU,uBAAuB,CAAC,OAAe,EAAE,SAAiB;IACxE,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE,CAAC;IAClD,uEAAuE;IACvE,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,OAAO,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IACrE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC;IACjE,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC9B,OAAO,OAAO,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;AACxD,CAAC;AAED,MAAM,KAAK,GAAG,mCAAmC,CAAC;AAElD,MAAM,UAAU,YAAY,CAAC,EAAU;IACrC,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAc,EAAE,UAAkB;IAC7D,IAAI,UAAU,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IACpC,mEAAmE;IACnE,8BAA8B;IAC9B,IAAI,CAAC,GAAG,UAAU,GAAG,CAAC,CAAC;IACvB,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,GAAG,CAAC;QACF,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QACnE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE;IACjB,OAAO,GAAG,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;AACzC,CAAC"}

package/dist/hgp/index.d.ts

@@ -0,0 +1,12 @@
+/**
+ * v2.31.0 — HGP (Hallucination Genome Project) public surface.
+ *
+ * Every ACGV refute → recordHallucination → CVE-style HGP-ID.
+ * Federation opt-in via consent (default OFF).
+ */
+export type { HallucinationRecord, FederationConsent, FederationStatus, SeverityWindow, } from "./types.js";
+export { computeHgpIdFromSimhash, isValidHgpId, disambiguate, } from "./hgp_id.js";
+export { recordHallucination, lookup, lookupBySimhash, topN, readConsent, setConsent, federationStatus, federatePush, loadCollapsed, computeSeverity, verifyLedger, hashSample, } from "./registry.js";
+export type { RecordParams } from "./registry.js";
+export { severityForVendor, allVendorsBreakdown, topInWindow, } from "./severity.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/hgp/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/hgp/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,YAAY,EACV,mBAAmB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,cAAc,GACzE,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,uBAAuB,EAAE,YAAY,EAAE,YAAY,GACpD,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,mBAAmB,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAClD,WAAW,EAAE,UAAU,EAAE,gBAAgB,EAAE,YAAY,EACvD,aAAa,EAAE,eAAe,EAAE,YAAY,EAAE,UAAU,GACzD,MAAM,eAAe,CAAC;AAEvB,YAAY,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAElD,OAAO,EACL,iBAAiB,EAAE,mBAAmB,EAAE,WAAW,GACpD,MAAM,eAAe,CAAC"}

package/dist/hgp/index.js

@@ -0,0 +1,10 @@
+/**
+ * v2.31.0 — HGP (Hallucination Genome Project) public surface.
+ *
+ * Every ACGV refute → recordHallucination → CVE-style HGP-ID.
+ * Federation opt-in via consent (default OFF).
+ */
+export { computeHgpIdFromSimhash, isValidHgpId, disambiguate, } from "./hgp_id.js";
+export { recordHallucination, lookup, lookupBySimhash, topN, readConsent, setConsent, federationStatus, federatePush, loadCollapsed, computeSeverity, verifyLedger, hashSample, } from "./registry.js";
+export { severityForVendor, allVendorsBreakdown, topInWindow, } from "./severity.js";
+//# sourceMappingURL=index.js.map

package/dist/hgp/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/hgp/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,OAAO,EACL,uBAAuB,EAAE,YAAY,EAAE,YAAY,GACpD,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,mBAAmB,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAClD,WAAW,EAAE,UAAU,EAAE,gBAAgB,EAAE,YAAY,EACvD,aAAa,EAAE,eAAe,EAAE,YAAY,EAAE,UAAU,GACzD,MAAM,eAAe,CAAC;AAIvB,OAAO,EACL,iBAAiB,EAAE,mBAAmB,EAAE,WAAW,GACpD,MAAM,eAAe,CAAC"}

package/dist/hgp/registry.d.ts

@@ -0,0 +1,64 @@
+/**
+ * v2.31.0 — HGP local registry + opt-in federation stubs.
+ *
+ * Storage layout:
+ *   .mneme/hgp/registry.jsonl       — append-only HMAC-chained log
+ *   .mneme/hgp/consent.json         — federation opt-in flag
+ *
+ * Append-only design (no UPDATE-in-place): every observation appends
+ * a new line. Querying collapses by HGP-ID. Same pattern as ACGV
+ * lie-vaccine ledger — composes cleanly with existing audit chain.
+ *
+ * Federation is OFF by default (CONSENT FABRIC). When the user
+ * explicitly opts in via mneme.hgp.federate.join, the registry will
+ * batch-push to the configured endpoint. v2.31.0 ships local-only;
+ * the federation push is a no-op stub returning "consent required"
+ * unless opt-in is true AND a real endpoint is configured.
+ */
+import type { HallucinationRecord, FederationConsent, FederationStatus } from "./types.js";
+/** Read every observation from the append-only log + collapse by HGP-ID. */
+export declare function loadCollapsed(repoRoot: string): Map<string, HallucinationRecord>;
+/**
+ * Compute severity 0..1: blends observe-count (log-saturated at 100)
+ * with vendor spread (more vendors hitting same lie = more dangerous).
+ */
+export declare function computeSeverity(r: HallucinationRecord): number;
+export interface RecordParams {
+    claim: string;
+    signature: string;
+    vendor?: string;
+}
+/**
+ * Record a hallucination observation. Returns the COLLAPSED post-write
+ * view (HGP-ID + aggregated counts across the full ledger).
+ *
+ * Implementation: we always append a DELTA record (observeCount=1,
+ * single vendor=+1) to the append-only ledger; loadCollapsed sums
+ * deltas. This keeps the ledger idempotent + tamper-evident: replay
+ * the ledger and you get the same collapsed view every time.
+ */
+export declare function recordHallucination(repoRoot: string, params: RecordParams): HallucinationRecord;
+export declare function lookup(repoRoot: string, hgpId: string): HallucinationRecord | null;
+export declare function lookupBySimhash(repoRoot: string, simhash: string): HallucinationRecord | null;
+export declare function topN(repoRoot: string, n?: number): HallucinationRecord[];
+export declare function readConsent(repoRoot: string): FederationConsent;
+export declare function setConsent(repoRoot: string, optIn: boolean, endpoint?: string): FederationConsent;
+export declare function federationStatus(repoRoot: string): FederationStatus;
+/**
+ * Federation push stub (v2.31.0). Will NEVER attempt a network call
+ * unless consent.optIn is true AND consent.endpoint is configured.
+ * Returns a structured refusal otherwise so callers can surface the
+ * consent gate to the user.
+ */
+export declare function federatePush(repoRoot: string): Promise<{
+    ok: boolean;
+    reason?: string;
+    pushed?: number;
+}>;
+export declare function verifyLedger(repoRoot: string): {
+    ok: boolean;
+    lines: number;
+    reason?: string;
+};
+export declare function hashSample(claim: string): string;
+//# sourceMappingURL=registry.d.ts.map

package/dist/hgp/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/hgp/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAQH,OAAO,KAAK,EACV,mBAAmB,EAAE,iBAAiB,EAAE,gBAAgB,EACzD,MAAM,YAAY,CAAC;AAkBpB,4EAA4E;AAC5E,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAqBhF;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,mBAAmB,GAAG,MAAM,CAM9D;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,GAAG,mBAAmB,CAoC/F;AAYD,wBAAgB,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI,CAGlF;AAED,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI,CAI7F;AAED,wBAAgB,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,SAAK,GAAG,mBAAmB,EAAE,CAIpE;AAID,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,iBAAiB,CAS/D;AAED,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAIjG;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,gBAAgB,CAInE;AAED;;;;;GAKG;AACH,wBAAsB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAQ/G;AAID,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAmB9F;AAGD,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEhD"}

package/dist/hgp/registry.js

@@ -0,0 +1,221 @@
+/**
+ * v2.31.0 — HGP local registry + opt-in federation stubs.
+ *
+ * Storage layout:
+ *   .mneme/hgp/registry.jsonl       — append-only HMAC-chained log
+ *   .mneme/hgp/consent.json         — federation opt-in flag
+ *
+ * Append-only design (no UPDATE-in-place): every observation appends
+ * a new line. Querying collapses by HGP-ID. Same pattern as ACGV
+ * lie-vaccine ledger — composes cleanly with existing audit chain.
+ *
+ * Federation is OFF by default (CONSENT FABRIC). When the user
+ * explicitly opts in via mneme.hgp.federate.join, the registry will
+ * batch-push to the configured endpoint. v2.31.0 ships local-only;
+ * the federation push is a no-op stub returning "consent required"
+ * unless opt-in is true AND a real endpoint is configured.
+ */
+import { existsSync, mkdirSync, appendFileSync, readFileSync, writeFileSync, } from "node:fs";
+import { join } from "node:path";
+import { createHash } from "node:crypto";
+import { simhash64 } from "../squadron/acgv_vaccine.js";
+import { computeHgpIdFromSimhash, disambiguate } from "./hgp_id.js";
+function dirOf(repoRoot) {
+    const d = join(repoRoot, ".mneme", "hgp");
+    if (!existsSync(d))
+        mkdirSync(d, { recursive: true });
+    return d;
+}
+function registryPath(repoRoot) {
+    return join(dirOf(repoRoot), "registry.jsonl");
+}
+function consentPath(repoRoot) {
+    return join(dirOf(repoRoot), "consent.json");
+}
+/** Read every observation from the append-only log + collapse by HGP-ID. */
+export function loadCollapsed(repoRoot) {
+    const p = registryPath(repoRoot);
+    if (!existsSync(p))
+        return new Map();
+    const out = new Map();
+    try {
+        const body = readFileSync(p, "utf8");
+        for (const ln of body.split("\n")) {
+            if (!ln)
+                continue;
+            let entry;
+            try {
+                entry = JSON.parse(ln);
+            }
+            catch {
+                continue;
+            }
+            const cur = out.get(entry.hgpId);
+            if (!cur) {
+                out.set(entry.hgpId, { ...entry });
+                continue;
+            }
+            cur.lastSeen = entry.lastSeen > cur.lastSeen ? entry.lastSeen : cur.lastSeen;
+            cur.observeCount += entry.observeCount;
+            for (const [v, c] of Object.entries(entry.vendorCounts)) {
+                cur.vendorCounts[v] = (cur.vendorCounts[v] ?? 0) + c;
+            }
+            cur.severity = computeSeverity(cur);
+        }
+    }
+    catch { /* best-effort */ }
+    return out;
+}
+/**
+ * Compute severity 0..1: blends observe-count (log-saturated at 100)
+ * with vendor spread (more vendors hitting same lie = more dangerous).
+ */
+export function computeSeverity(r) {
+    const obs = Math.min(1, Math.log10(r.observeCount + 1) / 2); // log-saturate at 100 → 1.0
+    const vendorN = Object.keys(r.vendorCounts).length;
+    const spread = Math.min(1, vendorN / 4); // saturate at 4 distinct vendors
+    // 60% observation pressure + 40% vendor spread.
+    return Number((0.6 * obs + 0.4 * spread).toFixed(3));
+}
+/**
+ * Record a hallucination observation. Returns the COLLAPSED post-write
+ * view (HGP-ID + aggregated counts across the full ledger).
+ *
+ * Implementation: we always append a DELTA record (observeCount=1,
+ * single vendor=+1) to the append-only ledger; loadCollapsed sums
+ * deltas. This keeps the ledger idempotent + tamper-evident: replay
+ * the ledger and you get the same collapsed view every time.
+ */
+export function recordHallucination(repoRoot, params) {
+    const now = new Date().toISOString();
+    const simhash = simhash64(params.claim);
+    const baseId = computeHgpIdFromSimhash(simhash, now);
+    const existing = loadCollapsed(repoRoot);
+    // Find an existing entry that has the same simhash OR same baseId.
+    let hgpId = baseId;
+    let foundExisting;
+    for (const e of existing.values()) {
+        if (e.simhash === simhash) {
+            foundExisting = e;
+            hgpId = e.hgpId;
+            break;
+        }
+    }
+    // If baseId taken by a DIFFERENT simhash, disambiguate.
+    if (!foundExisting) {
+        const collisions = Array.from(existing.values()).filter((e) => e.hgpId.startsWith(baseId) && e.simhash !== simhash).length;
+        hgpId = disambiguate(baseId, collisions);
+    }
+    // Always-1 delta record: vendor counted once, observeCount=1.
+    const deltaVendorCounts = {};
+    if (params.vendor)
+        deltaVendorCounts[params.vendor] = 1;
+    const delta = {
+        hgpId, simhash,
+        firstSeen: foundExisting?.firstSeen ?? now,
+        lastSeen: now,
+        observeCount: 1,
+        vendorCounts: deltaVendorCounts,
+        signature: params.signature,
+        sample: redactObviousSecrets(params.claim).slice(0, 200),
+        severity: 0, // recomputed on the collapsed view below
+    };
+    appendFileSync(registryPath(repoRoot), JSON.stringify(delta) + "\n", "utf8");
+    // Return the post-write collapsed view.
+    const after = loadCollapsed(repoRoot).get(hgpId);
+    return after ?? delta;
+}
+/** Conservative secrets-strip — same shape as honest_mirror anonymizer. */
+function redactObviousSecrets(s) {
+    return s
+        .replace(/AKIA[0-9A-Z]{16}/g, "<aws-key>")
+        .replace(/ghp_[A-Za-z0-9]{20,}/g, "<gh-token>")
+        .replace(/sk-[A-Za-z0-9_-]{20,}/g, "<openai-key>")
+        .replace(/[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}/g, "<email>")
+        .replace(/Bearer\s+[A-Za-z0-9._-]+/g, "Bearer <token>");
+}
+export function lookup(repoRoot, hgpId) {
+    const all = loadCollapsed(repoRoot);
+    return all.get(hgpId) ?? null;
+}
+export function lookupBySimhash(repoRoot, simhash) {
+    const all = loadCollapsed(repoRoot);
+    for (const e of all.values())
+        if (e.simhash === simhash)
+            return e;
+    return null;
+}
+export function topN(repoRoot, n = 10) {
+    const all = Array.from(loadCollapsed(repoRoot).values());
+    all.sort((a, b) => b.severity - a.severity || b.observeCount - a.observeCount);
+    return all.slice(0, n);
+}
+// ── Consent + federation stubs ──────────────────────────────────────────
+export function readConsent(repoRoot) {
+    const p = consentPath(repoRoot);
+    if (!existsSync(p))
+        return { optIn: false, at: new Date().toISOString() };
+    try {
+        const obj = JSON.parse(readFileSync(p, "utf8"));
+        return { optIn: Boolean(obj.optIn), at: obj.at ?? new Date().toISOString(), endpoint: obj.endpoint };
+    }
+    catch {
+        return { optIn: false, at: new Date().toISOString() };
+    }
+}
+export function setConsent(repoRoot, optIn, endpoint) {
+    const c = { optIn, at: new Date().toISOString(), endpoint };
+    writeFileSync(consentPath(repoRoot), JSON.stringify(c, null, 2));
+    return c;
+}
+export function federationStatus(repoRoot) {
+    const consent = readConsent(repoRoot);
+    const localCount = loadCollapsed(repoRoot).size;
+    return { consent, localCount, lastPushedAt: null, lastError: null };
+}
+/**
+ * Federation push stub (v2.31.0). Will NEVER attempt a network call
+ * unless consent.optIn is true AND consent.endpoint is configured.
+ * Returns a structured refusal otherwise so callers can surface the
+ * consent gate to the user.
+ */
+export async function federatePush(repoRoot) {
+    const consent = readConsent(repoRoot);
+    if (!consent.optIn)
+        return { ok: false, reason: "consent required — run mneme.hgp.federate_join to opt in" };
+    if (!consent.endpoint)
+        return { ok: false, reason: "no endpoint configured — pass endpoint when opting in" };
+    // v2.31.0: real HTTP push is a deliberate no-op so we never accidentally
+    // exfiltrate user data even with consent enabled. The protocol contract
+    // and HMAC envelope land in a follow-up release.
+    return { ok: true, pushed: 0, reason: "federation stub — protocol envelope coming in v2.32.x" };
+}
+// ── HMAC verify (full ledger integrity) ─────────────────────────────────
+export function verifyLedger(repoRoot) {
+    const p = registryPath(repoRoot);
+    if (!existsSync(p))
+        return { ok: true, lines: 0 };
+    try {
+        const body = readFileSync(p, "utf8");
+        let lines = 0;
+        for (const ln of body.split("\n")) {
+            if (!ln)
+                continue;
+            const parsed = JSON.parse(ln);
+            // Sanity-check shape — full HMAC chain over the registry is a v2.32.x.
+            if (typeof parsed.hgpId !== "string" || typeof parsed.simhash !== "string") {
+                return { ok: false, lines, reason: "malformed entry" };
+            }
+            lines++;
+        }
+        return { ok: true, lines };
+    }
+    catch (e) {
+        return { ok: false, lines: 0, reason: e.message };
+    }
+}
+// (Helper exposed so callers can re-hash without depending on internal layout.)
+export function hashSample(claim) {
+    return createHash("sha256").update(claim).digest("hex").slice(0, 12);
+}
+//# sourceMappingURL=registry.js.map

package/dist/hgp/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/hgp/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EACL,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,YAAY,EAAE,aAAa,GACnE,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAKzC,OAAO,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AACxD,OAAO,EAAE,uBAAuB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEpE,SAAS,KAAK,CAAC,QAAgB;IAC7B,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC1C,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,SAAS,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,YAAY,CAAC,QAAgB;IACpC,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,gBAAgB,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB;IACnC,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,cAAc,CAAC,CAAC;AAC/C,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,MAAM,CAAC,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACjC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IACrC,MAAM,GAAG,GAAG,IAAI,GAAG,EAA+B,CAAC;IACnD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACrC,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,IAAI,CAAC,EAAE;gBAAE,SAAS;YAClB,IAAI,KAA0B,CAAC;YAC/B,IAAI,CAAC;gBAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAwB,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,SAAS;YAAC,CAAC;YAC1E,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACjC,IAAI,CAAC,GAAG,EAAE,CAAC;gBAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;gBAAC,SAAS;YAAC,CAAC;YAC3D,GAAG,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC7E,GAAG,CAAC,YAAY,IAAI,KAAK,CAAC,YAAY,CAAC;YACvC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;gBACxD,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YACvD,CAAC;YACD,GAAG,CAAC,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC7B,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,CAAsB;IACpD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,4BAA4B;IACzF,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC;IACnD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,iCAAiC;IAC1E,gDAAgD;IAChD,OAAO,MAAM,CAAC,CAAC,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AACvD,CAAC;AAQD;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,MAAoB;IACxE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,uBAAuB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAErD,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IACzC,mEAAmE;IACnE,IAAI,KAAK,GAAG,MAAM,CAAC;IACnB,IAAI,aAA8C,CAAC;IACnD,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QAClC,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;YAAC,aAAa,GAAG,CAAC,CAAC;YAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;YAAC,MAAM;QAAC,CAAC;IAC3E,CAAC;IACD,wDAAwD;IACxD,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,MAAM,CAAC;QAC3H,KAAK,GAAG,YAAY,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC3C,CAAC;IAED,8DAA8D;IAC9D,MAAM,iBAAiB,GAA2B,EAAE,CAAC;IACrD,IAAI,MAAM,CAAC,MAAM;QAAE,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACxD,MAAM,KAAK,GAAwB;QACjC,KAAK,EAAE,OAAO;QACd,SAAS,EAAE,aAAa,EAAE,SAAS,IAAI,GAAG;QAC1C,QAAQ,EAAE,GAAG;QACb,YAAY,EAAE,CAAC;QACf,YAAY,EAAE,iBAAiB;QAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,MAAM,EAAE,oBAAoB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;QACxD,QAAQ,EAAE,CAAC,EAAE,yCAAyC;KACvD,CAAC;IACF,cAAc,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IAE7E,wCAAwC;IACxC,MAAM,KAAK,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACjD,OAAO,KAAK,IAAI,KAAK,CAAC;AACxB,CAAC;AAED,2EAA2E;AAC3E,SAAS,oBAAoB,CAAC,CAAS;IACrC,OAAO,CAAC;SACL,OAAO,CAAC,mBAAmB,EAAE,WAAW,CAAC;SACzC,OAAO,CAAC,uBAAuB,EAAE,YAAY,CAAC;SAC9C,OAAO,CAAC,wBAAwB,EAAE,cAAc,CAAC;SACjD,OAAO,CAAC,iDAAiD,EAAE,SAAS,CAAC;SACrE,OAAO,CAAC,2BAA2B,EAAE,gBAAgB,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,QAAgB,EAAE,KAAa;IACpD,MAAM,GAAG,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IACpC,OAAO,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,QAAgB,EAAE,OAAe;IAC/D,MAAM,GAAG,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,EAAE;QAAE,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO;YAAE,OAAO,CAAC,CAAC;IAClE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,QAAgB,EAAE,CAAC,GAAG,EAAE;IAC3C,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACzD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC;IAC/E,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACzB,CAAC;AAED,2EAA2E;AAE3E,MAAM,UAAU,WAAW,CAAC,QAAgB;IAC1C,MAAM,CAAC,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IAChC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IAC1E,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAsB,CAAC;QACrE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;IACvG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IACxD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,QAAgB,EAAE,KAAc,EAAE,QAAiB;IAC5E,MAAM,CAAC,GAAsB,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC;IAC/E,aAAa,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACjE,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,UAAU,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC;IAChD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AACtE,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAgB;IACjD,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,CAAC,OAAO,CAAC,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,0DAA0D,EAAE,CAAC;IAC7G,IAAI,CAAC,OAAO,CAAC,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uDAAuD,EAAE,CAAC;IAC7G,yEAAyE;IACzE,wEAAwE;IACxE,iDAAiD;IACjD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,uDAAuD,EAAE,CAAC;AAClG,CAAC;AAED,2EAA2E;AAE3E,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,MAAM,CAAC,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACjC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACrC,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,IAAI,CAAC,EAAE;gBAAE,SAAS;YAClB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAwB,CAAC;YACrD,uEAAuE;YACvE,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAC3E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;YACzD,CAAC;YACD,KAAK,EAAE,CAAC;QACV,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC7B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAG,CAAW,CAAC,OAAO,EAAE,CAAC;IAC/D,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACvE,CAAC"}

package/dist/hgp/severity.d.ts

@@ -0,0 +1,19 @@
+/**
+ * v2.31.0 — HGP severity scoring by vendor + time window.
+ *
+ * Powers `mneme.hgp.severity --vendor anthropic --window 30d`.
+ *
+ * Composes with CONCLAVE Aletheia weights: vendors with high HGP
+ * severity over the recent window can be auto-downgraded in the
+ * vote-weight feedback file (next iteration; v2.31.0 surfaces the
+ * signal, v2.32.x wires the auto-downgrade).
+ */
+import type { HallucinationRecord, SeverityWindow } from "./types.js";
+export declare function severityForVendor(repoRoot: string, vendor: string, windowDays: number): SeverityWindow;
+export declare function allVendorsBreakdown(repoRoot: string, windowDays: number): SeverityWindow[];
+/**
+ * Top globally-severe HGP-IDs (regardless of vendor) over window.
+ * Useful for the dashboard / public roll-up.
+ */
+export declare function topInWindow(repoRoot: string, windowDays: number, limit?: number): HallucinationRecord[];
+//# sourceMappingURL=severity.d.ts.map