@mneme-ai/core 2.43.0 → 2.45.0

package/dist/argus10/homoglyph_banner.d.ts

@@ -0,0 +1,35 @@
+/**
+ * v2.44.0 — HOMOGLYPH ATTACK BANNER.
+ *
+ * When ARGUS search candidates contain cross-script characters
+ * (Cyrillic letter inside a Latin word; Greek inside Latin; etc),
+ * surface a USER-VISIBLE banner with codepoint + position so the
+ * operator immediately sees the attack shape.
+ *
+ * Pure deterministic, no I/O.
+ */
+export type Script = "latin" | "cyrillic" | "greek" | "other";
+export interface HomoglyphAttack {
+    candidateIndex: number;
+    candidateText: string;
+    /** The non-Latin script char masquerading inside a Latin token. */
+    script: Script;
+    /** Hex form of the suspicious codepoint, e.g. "U+0435". */
+    codepoint: string;
+    /** The actual character. */
+    character: string;
+    /** UTF-16 position within the candidate text. */
+    position: number;
+}
+/**
+ * Walk each candidate, find tokens that mix Latin with another script.
+ * Returns one attack record per suspicious codepoint.
+ */
+export declare function detectHomoglyphAttacks(candidates: ReadonlyArray<{
+    text: string;
+}>): HomoglyphAttack[];
+/**
+ * Render attacks as a multi-line warning banner for CLI/MCP output.
+ */
+export declare function formatBanner(attacks: ReadonlyArray<HomoglyphAttack>): string;
+//# sourceMappingURL=homoglyph_banner.d.ts.map

package/dist/argus10/homoglyph_banner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"homoglyph_banner.d.ts","sourceRoot":"","sources":["../../src/argus10/homoglyph_banner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,MAAM,MAAM,GAAG,OAAO,GAAG,UAAU,GAAG,OAAO,GAAG,OAAO,CAAC;AAS9D,MAAM,WAAW,eAAe;IAC9B,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,mEAAmE;IACnE,MAAM,EAAE,MAAM,CAAC;IACf,2DAA2D;IAC3D,SAAS,EAAE,MAAM,CAAC;IAClB,4BAA4B;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,iDAAiD;IACjD,QAAQ,EAAE,MAAM,CAAC;CAClB;AAMD;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,aAAa,CAAC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,eAAe,EAAE,CAwCrG;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,aAAa,CAAC,eAAe,CAAC,GAAG,MAAM,CAW5E"}

package/dist/argus10/homoglyph_banner.js

@@ -0,0 +1,85 @@
+/**
+ * v2.44.0 — HOMOGLYPH ATTACK BANNER.
+ *
+ * When ARGUS search candidates contain cross-script characters
+ * (Cyrillic letter inside a Latin word; Greek inside Latin; etc),
+ * surface a USER-VISIBLE banner with codepoint + position so the
+ * operator immediately sees the attack shape.
+ *
+ * Pure deterministic, no I/O.
+ */
+function scriptOf(cp) {
+    if ((cp >= 0x41 && cp <= 0x5A) || (cp >= 0x61 && cp <= 0x7A))
+        return "latin";
+    if (cp >= 0x0400 && cp <= 0x04FF)
+        return "cyrillic";
+    if (cp >= 0x0370 && cp <= 0x03FF)
+        return "greek";
+    return "other";
+}
+function hexCp(cp) {
+    return "U+" + cp.toString(16).toUpperCase().padStart(4, "0");
+}
+/**
+ * Walk each candidate, find tokens that mix Latin with another script.
+ * Returns one attack record per suspicious codepoint.
+ */
+export function detectHomoglyphAttacks(candidates) {
+    const out = [];
+    for (let ci = 0; ci < candidates.length; ci++) {
+        const text = candidates[ci].text;
+        // Split on whitespace + punctuation to find tokens.
+        const tokens = text.split(/(\s+|[.,;:!?()[\]{}<>"'`])/);
+        let offset = 0;
+        for (const tok of tokens) {
+            if (!tok || /^\s+$/.test(tok)) {
+                offset += tok.length;
+                continue;
+            }
+            // Determine the dominant script in the token.
+            const scripts = new Set();
+            for (const ch of tok) {
+                const cp = ch.codePointAt(0);
+                const s = scriptOf(cp);
+                if (s !== "other")
+                    scripts.add(s);
+            }
+            // Attack pattern: token contains Latin + another script.
+            if (scripts.has("latin") && (scripts.has("cyrillic") || scripts.has("greek"))) {
+                // Surface every non-Latin char individually with its position.
+                let i = 0;
+                for (const ch of tok) {
+                    const cp = ch.codePointAt(0);
+                    const s = scriptOf(cp);
+                    if (s === "cyrillic" || s === "greek") {
+                        out.push({
+                            candidateIndex: ci,
+                            candidateText: text,
+                            script: s,
+                            codepoint: hexCp(cp),
+                            character: ch,
+                            position: offset + i,
+                        });
+                    }
+                    i += ch.length;
+                }
+            }
+            offset += tok.length;
+        }
+    }
+    return out;
+}
+/**
+ * Render attacks as a multi-line warning banner for CLI/MCP output.
+ */
+export function formatBanner(attacks) {
+    if (attacks.length === 0)
+        return "";
+    const lines = [];
+    lines.push("🚨 HOMOGLYPH ATTACK DETECTED");
+    for (const a of attacks) {
+        lines.push(`  candidate #${a.candidateIndex}: "${a.candidateText}"`, `    ${a.script} ${a.codepoint} '${a.character}' at position ${a.position} masquerading as a Latin letter`);
+    }
+    return lines.join("\n");
+}
+//# sourceMappingURL=homoglyph_banner.js.map

package/dist/argus10/homoglyph_banner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"homoglyph_banner.js","sourceRoot":"","sources":["../../src/argus10/homoglyph_banner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,SAAS,QAAQ,CAAC,EAAU;IAC1B,IAAI,CAAC,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC;IAC7E,IAAI,EAAE,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM;QAAE,OAAO,UAAU,CAAC;IACpD,IAAI,EAAE,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM;QAAE,OAAO,OAAO,CAAC;IACjD,OAAO,OAAO,CAAC;AACjB,CAAC;AAeD,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC/D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,UAA2C;IAChF,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,UAAU,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC;QAC9C,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,CAAE,CAAC,IAAI,CAAC;QAClC,oDAAoD;QACpD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACxD,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;YACzB,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC;gBAAC,SAAS;YAAC,CAAC;YAClE,8CAA8C;YAC9C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;YAClC,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;gBACrB,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC;gBAC9B,MAAM,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;gBACvB,IAAI,CAAC,KAAK,OAAO;oBAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACpC,CAAC;YACD,yDAAyD;YACzD,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBAC9E,+DAA+D;gBAC/D,IAAI,CAAC,GAAG,CAAC,CAAC;gBACV,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;oBACrB,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC;oBAC9B,MAAM,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;oBACvB,IAAI,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,OAAO,EAAE,CAAC;wBACtC,GAAG,CAAC,IAAI,CAAC;4BACP,cAAc,EAAE,EAAE;4BAClB,aAAa,EAAE,IAAI;4BACnB,MAAM,EAAE,CAAC;4BACT,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC;4BACpB,SAAS,EAAE,EAAE;4BACb,QAAQ,EAAE,MAAM,GAAG,CAAC;yBACrB,CAAC,CAAC;oBACL,CAAC;oBACD,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC;gBACjB,CAAC;YACH,CAAC;YACD,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC;QACvB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,OAAuC;IAClE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAC3C,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CACR,gBAAgB,CAAC,CAAC,cAAc,MAAM,CAAC,CAAC,aAAa,GAAG,EACxD,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,SAAS,iBAAiB,CAAC,CAAC,QAAQ,iCAAiC,CAC3G,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/argus10/index.d.ts

@@ -22,4 +22,5 @@ export { MULTIMODAL_EYES, EYE_11_image_modality, EYE_12_code_modality, lexCode,
 export { buildBloom, membershipFraction, prefilterCandidates, type BloomFilter, } from "./bloom_prefilter.js";
 export { phantomDecide, partitionEyes, CHEAP_EYE_IDS, EXPENSIVE_EYE_IDS, type PhantomDecision, } from "./phantom_eye.js";
 export { VENDOR_ADAPTERS, listAdapters, countAdapters, findAdapter, adaptersByTransport, type VendorAdapter, type VendorTransport, } from "./vendor_adapters.js";
+export { detectHomoglyphAttacks, formatBanner, type HomoglyphAttack, type Script as HomoglyphScript, } from "./homoglyph_banner.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/argus10/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/argus10/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,YAAY,EACV,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAC7D,eAAe,EAAE,gBAAgB,EAAE,iBAAiB,GACrD,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,YAAY,EACZ,iBAAiB,EAAE,sBAAsB,EAAE,oBAAoB,EAC/D,kBAAkB,EAAE,oBAAoB,EACxC,OAAO,EAAE,cAAc,EAAE,aAAa,GACvC,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,UAAU,EACV,wBAAwB,EAAE,uBAAuB,EAAE,sBAAsB,EACzE,qBAAqB,EAAE,4BAA4B,EACnD,sBAAsB,GACvB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,mBAAmB,EACnB,KAAK,cAAc,GACpB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,aAAa,EAAE,cAAc,EAAE,UAAU,EACzC,KAAK,YAAY,GAClB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,WAAW,EAAE,iBAAiB,GAC/B,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,qBAAqB,EACrB,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,GAC3B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,oBAAoB,EACpB,OAAO,EAAE,YAAY,EAAE,UAAU,GAClC,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,UAAU,EAAE,kBAAkB,EAAE,mBAAmB,EACnD,KAAK,WAAW,GACjB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,iBAAiB,EAC9D,KAAK,eAAe,GACrB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,eAAe,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,mBAAmB,EAC9E,KAAK,aAAa,EAAE,KAAK,eAAe,GACzC,MAAM,sBAAsB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/argus10/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,YAAY,EACV,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAC7D,eAAe,EAAE,gBAAgB,EAAE,iBAAiB,GACrD,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,YAAY,EACZ,iBAAiB,EAAE,sBAAsB,EAAE,oBAAoB,EAC/D,kBAAkB,EAAE,oBAAoB,EACxC,OAAO,EAAE,cAAc,EAAE,aAAa,GACvC,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,UAAU,EACV,wBAAwB,EAAE,uBAAuB,EAAE,sBAAsB,EACzE,qBAAqB,EAAE,4BAA4B,EACnD,sBAAsB,GACvB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,mBAAmB,EACnB,KAAK,cAAc,GACpB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,aAAa,EAAE,cAAc,EAAE,UAAU,EACzC,KAAK,YAAY,GAClB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,WAAW,EAAE,iBAAiB,GAC/B,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,qBAAqB,EACrB,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,GAC3B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,oBAAoB,EACpB,OAAO,EAAE,YAAY,EAAE,UAAU,GAClC,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,UAAU,EAAE,kBAAkB,EAAE,mBAAmB,EACnD,KAAK,WAAW,GACjB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,iBAAiB,EAC9D,KAAK,eAAe,GACrB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,eAAe,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,mBAAmB,EAC9E,KAAK,aAAa,EAAE,KAAK,eAAe,GACzC,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EACL,sBAAsB,EAAE,YAAY,EACpC,KAAK,eAAe,EAAE,KAAK,MAAM,IAAI,eAAe,GACrD,MAAM,uBAAuB,CAAC"}

package/dist/argus10/index.js

@@ -22,4 +22,6 @@ export { MULTIMODAL_EYES, EYE_11_image_modality, EYE_12_code_modality, lexCode,
 export { buildBloom, membershipFraction, prefilterCandidates, } from "./bloom_prefilter.js";
 export { phantomDecide, partitionEyes, CHEAP_EYE_IDS, EXPENSIVE_EYE_IDS, } from "./phantom_eye.js";
 export { VENDOR_ADAPTERS, listAdapters, countAdapters, findAdapter, adaptersByTransport, } from "./vendor_adapters.js";
+// v2.44.0 — Homoglyph attack banner (per-candidate cross-script detection).
+export { detectHomoglyphAttacks, formatBanner, } from "./homoglyph_banner.js";
 //# sourceMappingURL=index.js.map

package/dist/argus10/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/argus10/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAOH,OAAO,EACL,YAAY,EACZ,iBAAiB,EAAE,sBAAsB,EAAE,oBAAoB,EAC/D,kBAAkB,EAAE,oBAAoB,EACxC,OAAO,EAAE,cAAc,EAAE,aAAa,GACvC,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,UAAU,EACV,wBAAwB,EAAE,uBAAuB,EAAE,sBAAsB,EACzE,qBAAqB,EAAE,4BAA4B,EACnD,sBAAsB,GACvB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,mBAAmB,GAEpB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,aAAa,EAAE,cAAc,EAAE,UAAU,GAE1C,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,WAAW,EAAE,iBAAiB,GAC/B,MAAM,aAAa,CAAC;AAErB,gCAAgC;AAChC,OAAO,EACL,qBAAqB,GAGtB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,oBAAoB,EACpB,OAAO,EAAE,YAAY,EAAE,UAAU,GAClC,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,UAAU,EAAE,kBAAkB,EAAE,mBAAmB,GAEpD,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,iBAAiB,GAE/D,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,eAAe,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,mBAAmB,GAE/E,MAAM,sBAAsB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/argus10/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAOH,OAAO,EACL,YAAY,EACZ,iBAAiB,EAAE,sBAAsB,EAAE,oBAAoB,EAC/D,kBAAkB,EAAE,oBAAoB,EACxC,OAAO,EAAE,cAAc,EAAE,aAAa,GACvC,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,UAAU,EACV,wBAAwB,EAAE,uBAAuB,EAAE,sBAAsB,EACzE,qBAAqB,EAAE,4BAA4B,EACnD,sBAAsB,GACvB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,mBAAmB,GAEpB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,aAAa,EAAE,cAAc,EAAE,UAAU,GAE1C,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,WAAW,EAAE,iBAAiB,GAC/B,MAAM,aAAa,CAAC;AAErB,gCAAgC;AAChC,OAAO,EACL,qBAAqB,GAGtB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,oBAAoB,EACpB,OAAO,EAAE,YAAY,EAAE,UAAU,GAClC,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,UAAU,EAAE,kBAAkB,EAAE,mBAAmB,GAEpD,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,iBAAiB,GAE/D,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,eAAe,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,mBAAmB,GAE/E,MAAM,sBAAsB,CAAC;AAE9B,4EAA4E;AAC5E,OAAO,EACL,sBAAsB,EAAE,YAAY,GAErC,MAAM,uBAAuB,CAAC"}

package/dist/auto_init/dev_tooling_detector.d.ts

@@ -0,0 +1,21 @@
+/**
+ * v2.45.0 — DEV-TOOLING DETECTOR (closes caveat #3).
+ *
+ * The bug: user's own `D:\typecrypt\` scratch folder has CLAUDE.md +
+ * AGENTS.md + .cursorrules + .windsurfrules + .mneme/ but is NOT a git
+ * repo. AUTO-INIT shouldn't poison such folders with a fake .gitignore.
+ *
+ * Heuristic: "this folder is an AI-dev scratch dir" when:
+ *   - NOT a git repo (no .git/HEAD)
+ *   - AND has ≥ 3 AI-tooling fingerprint files at the root
+ *
+ * Pure read; no I/O writes.
+ */
+export interface DevToolingVerdict {
+    isDevTooling: boolean;
+    isGitRepo: boolean;
+    fingerprints: string[];
+    reason: string;
+}
+export declare function detectDevTooling(cwd: string): DevToolingVerdict;
+//# sourceMappingURL=dev_tooling_detector.d.ts.map

package/dist/auto_init/dev_tooling_detector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev_tooling_detector.d.ts","sourceRoot":"","sources":["../../src/auto_init/dev_tooling_detector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAkBH,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE,OAAO,CAAC;IACtB,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB,CA2B/D"}

package/dist/auto_init/dev_tooling_detector.js

@@ -0,0 +1,57 @@
+/**
+ * v2.45.0 — DEV-TOOLING DETECTOR (closes caveat #3).
+ *
+ * The bug: user's own `D:\typecrypt\` scratch folder has CLAUDE.md +
+ * AGENTS.md + .cursorrules + .windsurfrules + .mneme/ but is NOT a git
+ * repo. AUTO-INIT shouldn't poison such folders with a fake .gitignore.
+ *
+ * Heuristic: "this folder is an AI-dev scratch dir" when:
+ *   - NOT a git repo (no .git/HEAD)
+ *   - AND has ≥ 3 AI-tooling fingerprint files at the root
+ *
+ * Pure read; no I/O writes.
+ */
+import { existsSync } from "node:fs";
+import { join } from "node:path";
+const FINGERPRINTS = [
+    "CLAUDE.md",
+    "AGENTS.md",
+    ".cursorrules",
+    ".windsurfrules",
+    ".windsurf",
+    ".cursor",
+    ".aider.conf.yml",
+    ".continuerc",
+    "GEMINI.md",
+    ".mneme",
+];
+export function detectDevTooling(cwd) {
+    // Defensive: bad path → not a tooling folder (autoInit will fail elsewhere).
+    if (!cwd || !existsSync(cwd)) {
+        return { isDevTooling: false, isGitRepo: false, fingerprints: [], reason: "path does not exist" };
+    }
+    const isGitRepo = existsSync(join(cwd, ".git")) || existsSync(join(cwd, ".git", "HEAD"));
+    const fingerprints = [];
+    for (const f of FINGERPRINTS) {
+        if (existsSync(join(cwd, f)))
+            fingerprints.push(f);
+    }
+    // Rule: NOT a git repo + ≥3 AI fingerprints → tooling folder.
+    if (!isGitRepo && fingerprints.length >= 3) {
+        return {
+            isDevTooling: true,
+            isGitRepo: false,
+            fingerprints,
+            reason: `not a git repo + ${fingerprints.length} AI-fingerprint files (${fingerprints.slice(0, 3).join(", ")}...) — looks like an AI-dev scratch folder, not a customer repo`,
+        };
+    }
+    return {
+        isDevTooling: false,
+        isGitRepo,
+        fingerprints,
+        reason: isGitRepo
+            ? "is a git repo (customer-facing)"
+            : `not a git repo but only ${fingerprints.length} fingerprint(s) — too few to flag as tooling`,
+    };
+}
+//# sourceMappingURL=dev_tooling_detector.js.map

package/dist/auto_init/dev_tooling_detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev_tooling_detector.js","sourceRoot":"","sources":["../../src/auto_init/dev_tooling_detector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,YAAY,GAAG;IACnB,WAAW;IACX,WAAW;IACX,cAAc;IACd,gBAAgB;IAChB,WAAW;IACX,SAAS;IACT,iBAAiB;IACjB,aAAa;IACb,WAAW;IACX,QAAQ;CACT,CAAC;AASF,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,6EAA6E;IAC7E,IAAI,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IACpG,CAAC;IACD,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACzF,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;QAC7B,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrD,CAAC;IACD,8DAA8D;IAC9D,IAAI,CAAC,SAAS,IAAI,YAAY,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QAC3C,OAAO;YACL,YAAY,EAAE,IAAI;YAClB,SAAS,EAAE,KAAK;YAChB,YAAY;YACZ,MAAM,EAAE,oBAAoB,YAAY,CAAC,MAAM,0BAA0B,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,iEAAiE;SAC9K,CAAC;IACJ,CAAC;IACD,OAAO;QACL,YAAY,EAAE,KAAK;QACnB,SAAS;QACT,YAAY;QACZ,MAAM,EAAE,SAAS;YACf,CAAC,CAAC,iCAAiC;YACnC,CAAC,CAAC,2BAA2B,YAAY,CAAC,MAAM,8CAA8C;KACjG,CAAC;AACJ,CAAC"}

package/dist/auto_init/index.d.ts

@@ -0,0 +1,52 @@
+/**
+ * v2.45.0 — AUTO-INIT (closes caveat #1).
+ *
+ * The bug from user's v2.41 audit: "ลูกค้าต้องรัน `mneme init` ก่อน;
+ * ถ้าใช้ผ่าน MCP โดยตรงโดยไม่รัน init → อาจไม่มี .gitignore ถูก create".
+ *
+ * Fix: every MCP tool call (and every CLI invocation that touches the
+ * repo) auto-bootstraps in <50ms. Idempotent + defensive — never throws,
+ * never duplicates entries, skips DEV-TOOLING folders.
+ *
+ * User experience after install:
+ *   1. user installs Mneme
+ *   2. user opens Cursor / Claude Code / etc
+ *   3. AI agent calls ANY mneme.* MCP tool → server boot runs autoInit
+ *      silently
+ *   4. .mneme/ + .gitignore entries appear automatically
+ *   5. user NEVER typed `mneme init`
+ *
+ * Pure deterministic on the idempotent path (already-init → no writes).
+ */
+import { detectDevTooling } from "./dev_tooling_detector.js";
+declare const GITIGNORE_SENTINEL_BEGIN = "# BEGIN MNEME AUTO-INIT (do not edit between sentinels) \u2014 v2.45.0+";
+declare const GITIGNORE_SENTINEL_END = "# END MNEME AUTO-INIT";
+declare const GITIGNORE_PAYLOAD: string[];
+export interface AutoInitResult {
+    ok: boolean;
+    /** True when no work was needed (.mneme/ + sentinel-block already present). */
+    alreadyInit?: boolean;
+    /** Why autoInit became a no-op (e.g. dev-tooling folder, no write access). */
+    skippedReason?: string;
+    /** Paths created or modified. */
+    created: string[];
+    /** Wall time ms. */
+    dtMs: number;
+    /** Why ok=false, if applicable. */
+    reason?: string;
+}
+/**
+ * Idempotent bootstrap. Safe to call before EVERY MCP tool dispatch.
+ * Returns ok=false (never throws) when path is invalid or filesystem
+ * refuses writes.
+ */
+export declare function autoInit(cwd: string): AutoInitResult;
+/**
+ * Best-effort guard: call this at the TOP of every MCP CallTool handler
+ * + every CLI command. Never blocks, never throws. Returns silently.
+ */
+export declare function autoInitSilent(cwd: string): void;
+export { GITIGNORE_PAYLOAD, GITIGNORE_SENTINEL_BEGIN, GITIGNORE_SENTINEL_END };
+export { detectDevTooling };
+export type { DevToolingVerdict } from "./dev_tooling_detector.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/auto_init/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auto_init/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAK7D,QAAA,MAAM,wBAAwB,4EAAuE,CAAC;AACtG,QAAA,MAAM,sBAAsB,0BAA4B,CAAC;AACzD,QAAA,MAAM,iBAAiB,UAiBtB,CAAC;AAEF,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,OAAO,CAAC;IACZ,+EAA+E;IAC/E,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,8EAA8E;IAC9E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iCAAiC;IACjC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,oBAAoB;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,mCAAmC;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAyDD;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,CAsDpD;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAEhD;AAED,OAAO,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,CAAC;AAC/E,OAAO,EAAE,gBAAgB,EAAE,CAAC;AAC5B,YAAY,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC"}

package/dist/auto_init/index.js

@@ -0,0 +1,186 @@
+/**
+ * v2.45.0 — AUTO-INIT (closes caveat #1).
+ *
+ * The bug from user's v2.41 audit: "ลูกค้าต้องรัน `mneme init` ก่อน;
+ * ถ้าใช้ผ่าน MCP โดยตรงโดยไม่รัน init → อาจไม่มี .gitignore ถูก create".
+ *
+ * Fix: every MCP tool call (and every CLI invocation that touches the
+ * repo) auto-bootstraps in <50ms. Idempotent + defensive — never throws,
+ * never duplicates entries, skips DEV-TOOLING folders.
+ *
+ * User experience after install:
+ *   1. user installs Mneme
+ *   2. user opens Cursor / Claude Code / etc
+ *   3. AI agent calls ANY mneme.* MCP tool → server boot runs autoInit
+ *      silently
+ *   4. .mneme/ + .gitignore entries appear automatically
+ *   5. user NEVER typed `mneme init`
+ *
+ * Pure deterministic on the idempotent path (already-init → no writes).
+ */
+import { existsSync, mkdirSync, readFileSync, writeFileSync, statSync } from "node:fs";
+import { join } from "node:path";
+import { detectDevTooling } from "./dev_tooling_detector.js";
+// Entries appended to .gitignore. Each on its own line. Sentinel-bracketed
+// so we can find + update them atomically without touching user-authored
+// entries above/below.
+const GITIGNORE_SENTINEL_BEGIN = "# BEGIN MNEME AUTO-INIT (do not edit between sentinels) — v2.45.0+";
+const GITIGNORE_SENTINEL_END = "# END MNEME AUTO-INIT";
+const GITIGNORE_PAYLOAD = [
+    ".mneme/",
+    "CLAUDE.md",
+    "AGENTS.md",
+    ".cursorrules",
+    ".windsurfrules",
+    ".windsurf/",
+    ".cursor/",
+    ".continuerc",
+    "GEMINI.md",
+    ".aider.conf.yml",
+    ".aider.chat.history.md",
+    ".aider.input.history",
+    // Mneme local state never goes to git
+    ".mneme/lie-vaccines.jsonl",
+    ".mneme/cli-activity.jsonl",
+    ".mneme/honest_mirror_weights.json",
+];
+function ensureMnemeDir(cwd, created) {
+    const dir = join(cwd, ".mneme");
+    if (existsSync(dir))
+        return true;
+    try {
+        mkdirSync(dir, { recursive: true });
+        created.push(".mneme/");
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function ensureGitignoreSentinelBlock(cwd, created) {
+    const path = join(cwd, ".gitignore");
+    let body = "";
+    let existed = false;
+    try {
+        if (existsSync(path)) {
+            body = readFileSync(path, "utf8");
+            existed = true;
+        }
+    }
+    catch {
+        return false;
+    }
+    // Already has our sentinel block? Idempotent return.
+    if (body.includes(GITIGNORE_SENTINEL_BEGIN) && body.includes(GITIGNORE_SENTINEL_END)) {
+        return true;
+    }
+    // Build the block. If user already has SOME of our entries above
+    // (legacy install), our sentinel block is still safe — git collapses
+    // duplicates without warning.
+    const block = [
+        "",
+        GITIGNORE_SENTINEL_BEGIN,
+        ...GITIGNORE_PAYLOAD,
+        GITIGNORE_SENTINEL_END,
+        "",
+    ].join("\n");
+    // Strip duplicates from PAYLOAD that may have been written by an
+    // older / manual install (avoid the literal duplicate-line audit
+    // catch). We only de-dupe lines that exactly match one of our
+    // payload entries.
+    const payloadSet = new Set(GITIGNORE_PAYLOAD);
+    const dedupedLines = body.split("\n").filter((ln, i, arr) => {
+        const t = ln.trim();
+        if (!payloadSet.has(t))
+            return true;
+        // Keep the FIRST occurrence only
+        return arr.findIndex((x) => x.trim() === t) === i;
+    });
+    const cleanBody = dedupedLines.join("\n");
+    // Append our sentinel block.
+    const final = cleanBody.endsWith("\n") || cleanBody.length === 0 ? cleanBody + block : cleanBody + "\n" + block;
+    try {
+        writeFileSync(path, final);
+        if (!existed)
+            created.push(".gitignore");
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Idempotent bootstrap. Safe to call before EVERY MCP tool dispatch.
+ * Returns ok=false (never throws) when path is invalid or filesystem
+ * refuses writes.
+ */
+export function autoInit(cwd) {
+    const t0 = Date.now();
+    const created = [];
+    if (!cwd) {
+        return { ok: false, reason: "empty cwd", created, dtMs: Date.now() - t0 };
+    }
+    // Quick existence check (path must exist + be readable)
+    try {
+        const st = statSync(cwd);
+        if (!st.isDirectory()) {
+            return { ok: false, reason: "cwd is not a directory", created, dtMs: Date.now() - t0 };
+        }
+    }
+    catch (e) {
+        return { ok: false, reason: `cwd inaccessible: ${e.message?.slice(0, 80) ?? "err"}`, created, dtMs: Date.now() - t0 };
+    }
+    // Skip dev-tooling folders (user's own scratch dirs — closes caveat #3).
+    const tooling = detectDevTooling(cwd);
+    if (tooling.isDevTooling) {
+        return {
+            ok: true,
+            skippedReason: `dev-tooling folder detected: ${tooling.reason}`,
+            created,
+            dtMs: Date.now() - t0,
+        };
+    }
+    // Hot path: both already in place?
+    const mnemeExists = existsSync(join(cwd, ".mneme"));
+    let alreadyInit = false;
+    if (mnemeExists) {
+        const giPath = join(cwd, ".gitignore");
+        if (existsSync(giPath)) {
+            try {
+                const body = readFileSync(giPath, "utf8");
+                if (body.includes(GITIGNORE_SENTINEL_BEGIN)) {
+                    alreadyInit = true;
+                }
+            }
+            catch { /* fall through to write */ }
+        }
+    }
+    if (alreadyInit) {
+        return { ok: true, alreadyInit: true, created, dtMs: Date.now() - t0 };
+    }
+    // Cold path: ensure both .mneme/ + .gitignore sentinel block.
+    const mnemeOk = ensureMnemeDir(cwd, created);
+    const giOk = ensureGitignoreSentinelBlock(cwd, created);
+    if (!mnemeOk || !giOk) {
+        return {
+            ok: false,
+            reason: `partial init: mneme=${mnemeOk} gitignore=${giOk}`,
+            created,
+            dtMs: Date.now() - t0,
+        };
+    }
+    return { ok: true, alreadyInit: false, created, dtMs: Date.now() - t0 };
+}
+/**
+ * Best-effort guard: call this at the TOP of every MCP CallTool handler
+ * + every CLI command. Never blocks, never throws. Returns silently.
+ */
+export function autoInitSilent(cwd) {
+    try {
+        autoInit(cwd);
+    }
+    catch { /* never bubble */ }
+}
+export { GITIGNORE_PAYLOAD, GITIGNORE_SENTINEL_BEGIN, GITIGNORE_SENTINEL_END };
+export { detectDevTooling };
+//# sourceMappingURL=index.js.map

package/dist/auto_init/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auto_init/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACvF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAE7D,2EAA2E;AAC3E,yEAAyE;AACzE,uBAAuB;AACvB,MAAM,wBAAwB,GAAG,oEAAoE,CAAC;AACtG,MAAM,sBAAsB,GAAK,uBAAuB,CAAC;AACzD,MAAM,iBAAiB,GAAG;IACxB,SAAS;IACT,WAAW;IACX,WAAW;IACX,cAAc;IACd,gBAAgB;IAChB,YAAY;IACZ,UAAU;IACV,aAAa;IACb,WAAW;IACX,iBAAiB;IACjB,wBAAwB;IACxB,sBAAsB;IACtB,sCAAsC;IACtC,2BAA2B;IAC3B,2BAA2B;IAC3B,mCAAmC;CACpC,CAAC;AAgBF,SAAS,cAAc,CAAC,GAAW,EAAE,OAAiB;IACpD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAChC,IAAI,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACjC,IAAI,CAAC;QACH,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AAC3B,CAAC;AAED,SAAS,4BAA4B,CAAC,GAAW,EAAE,OAAiB;IAClE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACrC,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAClC,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;IACzB,qDAAqD;IACrD,IAAI,IAAI,CAAC,QAAQ,CAAC,wBAAwB,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC;QACrF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,iEAAiE;IACjE,qEAAqE;IACrE,8BAA8B;IAC9B,MAAM,KAAK,GAAG;QACZ,EAAE;QACF,wBAAwB;QACxB,GAAG,iBAAiB;QACpB,sBAAsB;QACtB,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,iEAAiE;IACjE,iEAAiE;IACjE,8DAA8D;IAC9D,mBAAmB;IACnB,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAC9C,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE;QAC1D,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC;QACpB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACpC,iCAAiC;QACjC,OAAO,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,6BAA6B;IAC7B,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,SAAS,GAAG,IAAI,GAAG,KAAK,CAAC;IAChH,IAAI,CAAC;QACH,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC3B,IAAI,CAAC,OAAO;YAAE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AAC3B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CAAC,GAAW;IAClC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtB,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC;IAC5E,CAAC;IACD,wDAAwD;IACxD,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;YACtB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC;QACzF,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAsB,CAAW,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC;IACnI,CAAC;IACD,yEAAyE;IACzE,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QACzB,OAAO;YACL,EAAE,EAAE,IAAI;YACR,aAAa,EAAE,gCAAgC,OAAO,CAAC,MAAM,EAAE;YAC/D,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;SACtB,CAAC;IACJ,CAAC;IACD,mCAAmC;IACnC,MAAM,WAAW,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;IACpD,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QACvC,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAC1C,IAAI,IAAI,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,CAAC;oBAC5C,WAAW,GAAG,IAAI,CAAC;gBACrB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC,CAAC,2BAA2B,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IACD,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC;IACzE,CAAC;IACD,8DAA8D;IAC9D,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,4BAA4B,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACxD,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;QACtB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,uBAAuB,OAAO,cAAc,IAAI,EAAE;YAC1D,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;SACtB,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC;AAC1E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,CAAC;QAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;AACrD,CAAC;AAED,OAAO,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,CAAC;AAC/E,OAAO,EAAE,gBAAgB,EAAE,CAAC"}

package/dist/auto_init/retroactive_cleanse.d.ts

@@ -0,0 +1,67 @@
+/**
+ * v2.45.0 — RETROACTIVE CLEANSE (closes caveat #2).
+ *
+ * The bug: "ถ้า repo ลูกค้าเคย commit ไฟล์เหล่านี้ก่อนติด Mneme,
+ * .gitignore ใหม่ จะ block ของใหม่ — แต่ของเก่าใน history ยังอยู่".
+ *
+ * AI-fingerprint files (CLAUDE.md / AGENTS.md / .cursorrules /
+ * .windsurfrules / .mneme/) committed BEFORE Mneme install stay in git
+ * history forever. The user shouldn't have to remember `git filter-repo`.
+ *
+ * Fix: a single MCP tool the AI agent can invoke on the user's behalf.
+ * Three modes (DRY-RUN default):
+ *
+ *   scan         — read-only; lists AI-fingerprint files seen in git history
+ *   uncommit     — runs `git rm --cached <file>` (SAFE: keeps disk copy,
+ *                  history stays; future commits won't track)
+ *   filter-repo  — destructive history rewrite via `git filter-repo`
+ *                  (requires confirm:true; emits HMAC receipt)
+ *
+ * Pure-defensive: never throws; returns structured envelope every time.
+ */
+export type CleanseMode = "scan" | "uncommit" | "filter-repo";
+export interface CleanseFinding {
+    path: string;
+    /** First commit (oldest) where this file appears. */
+    firstCommit?: string;
+    /** Most recent commit touching it. */
+    lastCommit?: string;
+    /** Number of commits that touched it. */
+    commitCount: number;
+    /** Whether file is also in current working tree. */
+    inWorkingTree: boolean;
+}
+export interface CleanseAction {
+    path: string;
+    command: string;
+    executed: boolean;
+    ok?: boolean;
+    stderr?: string;
+}
+export interface CleanseResult {
+    ok: boolean;
+    mode: CleanseMode;
+    dryRun: boolean;
+    /** Files matched by scan. */
+    findings: CleanseFinding[];
+    /** Planned commands (always populated; in dryRun NONE executed). */
+    plan: string[];
+    /** Executed commands (empty when dryRun=true). */
+    actions: CleanseAction[];
+    /** Why ok=false. */
+    reason?: string;
+    /** HMAC over (mode + repoRoot + findings + actions) for audit trail. */
+    hmac?: string;
+    /** Wall ms. */
+    dtMs: number;
+}
+export interface CleanseInput {
+    repoRoot: string;
+    mode: CleanseMode;
+    /** Default TRUE for safety. Pass false to actually mutate. */
+    dryRun?: boolean;
+    /** Required true when mode='filter-repo' (destructive history rewrite). */
+    confirm?: boolean;
+}
+export declare function cleanse(input: CleanseInput): CleanseResult;
+//# sourceMappingURL=retroactive_cleanse.d.ts.map

package/dist/auto_init/retroactive_cleanse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retroactive_cleanse.d.ts","sourceRoot":"","sources":["../../src/auto_init/retroactive_cleanse.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAyBH,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,UAAU,GAAG,aAAa,CAAC;AAE9D,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,qDAAqD;IACrD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sCAAsC;IACtC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yCAAyC;IACzC,WAAW,EAAE,MAAM,CAAC;IACpB,oDAAoD;IACpD,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,OAAO,CAAC;IAClB,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,WAAW,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC;IAChB,6BAA6B;IAC7B,QAAQ,EAAE,cAAc,EAAE,CAAC;IAC3B,oEAAoE;IACpE,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,kDAAkD;IAClD,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,oBAAoB;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wEAAwE;IACxE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AA4DD,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,WAAW,CAAC;IAClB,8DAA8D;IAC9D,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,2EAA2E;IAC3E,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,wBAAgB,OAAO,CAAC,KAAK,EAAE,YAAY,GAAG,aAAa,CAuF1D"}