@mneme-ai/core 2.45.0 → 2.46.0

package/dist/nemesis/eu_ai_act_stamp.js

@@ -0,0 +1,116 @@
+/**
+ * v2.46.0 — NEMESIS ORGAN 3: EU AI Act Article 50 AUTO-STAMPER.
+ *
+ * EU AI Act Article 50 enforceable 2 Aug 2026 requires machine-readable
+ * disclosure of AI-generated content. NEMESIS auto-appends a sentinel-
+ * bracketed block to commit messages that's:
+ *   - human-readable
+ *   - machine-parseable (single regex)
+ *   - HMAC-signed (tamper-evident; verifiable offline)
+ *   - locale-independent
+ *
+ * Format (appended to commit message body):
+ *
+ *   <!-- AI-GENERATED-CONTENT
+ *   regime=EU-AI-ACT-2024 article=50 vendor=claude-code confidence=0.98
+ *   content-type=text/x-source-code at=2026-05-24T08:32:11.444Z
+ *   hmac=7a6302153ee6a839...
+ *   -->
+ *
+ * Pure deterministic; never throws. Caller wires it into git pre-commit
+ * via `nemesis install-hook`.
+ */
+import { createHmac } from "node:crypto";
+const HMAC_KEY = process.env["MNEME_NEMESIS_KEY"] ?? "MNEME-NEMESIS-DEFAULT-KEY-v2.46";
+const REGIME = "EU-AI-ACT-2024";
+const ARTICLE = "50";
+function canonicalStampBody(s, message) {
+    // Order matters for HMAC; we sort keys explicitly.
+    return JSON.stringify({
+        article: s.article,
+        at: s.at,
+        confidence: Number(s.confidence.toFixed(4)),
+        contentType: s.contentType,
+        message,
+        regime: s.regime,
+        vendor: s.vendor,
+    });
+}
+export function stampArticle50(input) {
+    if (!input || typeof input.vendor !== "string" || input.vendor.length === 0) {
+        return {
+            ok: false,
+            reason: "vendor is required (e.g. 'claude-code', 'codex', 'cursor')",
+            stampedMessage: input?.message ?? "",
+            stamp: {
+                at: "", vendor: "", confidence: 0, contentType: "text/x-source-code",
+                hmac: "", regime: REGIME, article: ARTICLE,
+            },
+        };
+    }
+    const at = new Date().toISOString();
+    const contentType = input.contentType ?? "text/x-source-code";
+    const confidence = Math.max(0, Math.min(1, input.confidence ?? 0));
+    const message = input.message ?? "";
+    const body = {
+        at, vendor: input.vendor, confidence, contentType, regime: REGIME, article: ARTICLE,
+    };
+    const hmac = createHmac("sha256", HMAC_KEY).update(canonicalStampBody(body, message)).digest("hex").slice(0, 32);
+    const stamp = { ...body, hmac };
+    const block = [
+        "",
+        "<!-- AI-GENERATED-CONTENT",
+        `regime=${REGIME} article=${ARTICLE} vendor=${input.vendor} confidence=${confidence.toFixed(2)}`,
+        `content-type=${contentType} at=${at}`,
+        `hmac=${hmac}`,
+        "-->",
+    ].join("\n");
+    return {
+        ok: true,
+        stampedMessage: message.endsWith("\n") ? message + block : message + "\n" + block,
+        stamp,
+    };
+}
+/**
+ * Parse a stamped message + HMAC-verify. Returns valid=false on any
+ * tamper / missing field / regex mismatch.
+ */
+export function verifyStamp(stampedMessage) {
+    if (!stampedMessage)
+        return { valid: false, reason: "empty input" };
+    const blockMatch = stampedMessage.match(/<!--\s*AI-GENERATED-CONTENT\s*([\s\S]*?)\s*-->/);
+    if (!blockMatch)
+        return { valid: false, reason: "no AI-GENERATED-CONTENT block found" };
+    const block = blockMatch[1];
+    const pick = (key) => {
+        const m = block.match(new RegExp(`(?:^|\\s)${key}=(\\S+)`));
+        return m ? m[1] : null;
+    };
+    const regime = pick("regime");
+    const article = pick("article");
+    const vendor = pick("vendor");
+    const confidence = pick("confidence");
+    const contentType = pick("content-type");
+    const at = pick("at");
+    const hmac = pick("hmac");
+    if (!regime || !article || !vendor || !confidence || !contentType || !at || !hmac) {
+        return { valid: false, reason: `missing fields in stamp block: regime=${!!regime} article=${!!article} vendor=${!!vendor} confidence=${!!confidence} contentType=${!!contentType} at=${!!at} hmac=${!!hmac}` };
+    }
+    if (regime !== REGIME)
+        return { valid: false, reason: `regime mismatch: expected ${REGIME}, got ${regime}` };
+    if (article !== ARTICLE)
+        return { valid: false, reason: `article mismatch: expected ${ARTICLE}, got ${article}` };
+    const confidenceNum = parseFloat(confidence);
+    if (!Number.isFinite(confidenceNum))
+        return { valid: false, reason: "confidence is not a number" };
+    // Recompute HMAC over the body + original message (everything before the block).
+    const message = stampedMessage.slice(0, blockMatch.index).replace(/\n+$/, "");
+    const body = {
+        at, vendor, confidence: confidenceNum, contentType, regime: REGIME, article: ARTICLE,
+    };
+    const expected = createHmac("sha256", HMAC_KEY).update(canonicalStampBody(body, message)).digest("hex").slice(0, 32);
+    if (expected !== hmac)
+        return { valid: false, reason: "HMAC mismatch — stamp was tampered" };
+    return { valid: true, parsed: { ...body, hmac } };
+}
+//# sourceMappingURL=eu_ai_act_stamp.js.map

package/dist/nemesis/eu_ai_act_stamp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"eu_ai_act_stamp.js","sourceRoot":"","sources":["../../src/nemesis/eu_ai_act_stamp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAKzC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,iCAAiC,CAAC;AACvF,MAAM,MAAM,GAAG,gBAAgB,CAAC;AAChC,MAAM,OAAO,GAAG,IAAI,CAAC;AAErB,SAAS,kBAAkB,CAAC,CAA+B,EAAE,OAAe;IAC1E,mDAAmD;IACnD,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC3C,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,OAAO;QACP,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,MAAM,EAAE,CAAC,CAAC,MAAM;KACjB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAA0B;IACvD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5E,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,4DAA4D;YACpE,cAAc,EAAE,KAAK,EAAE,OAAO,IAAI,EAAE;YACpC,KAAK,EAAE;gBACL,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE,oBAAoB;gBACpE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO;aAC3C;SACF,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACpC,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,oBAAoB,CAAC;IAC9D,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;IACpC,MAAM,IAAI,GAAiC;QACzC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO;KACpF,CAAC;IACF,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACjH,MAAM,KAAK,GAAmB,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG;QACZ,EAAE;QACF,2BAA2B;QAC3B,UAAU,MAAM,YAAY,OAAO,WAAW,KAAK,CAAC,MAAM,eAAe,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;QAChG,gBAAgB,WAAW,OAAO,EAAE,EAAE;QACtC,QAAQ,IAAI,EAAE;QACd,KAAK;KACN,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,OAAO;QACL,EAAE,EAAE,IAAI;QACR,cAAc,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,GAAG,IAAI,GAAG,KAAK;QACjF,KAAK;KACN,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,cAAsB;IAChD,IAAI,CAAC,cAAc;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IACpE,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;IAC1F,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,qCAAqC,EAAE,CAAC;IACxF,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,CAAC,GAAW,EAAiB,EAAE;QAC1C,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,YAAY,GAAG,SAAS,CAAC,CAAC,CAAC;QAC5D,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1B,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9B,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC;IACtC,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC;IACzC,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IACtB,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1B,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,IAAI,CAAC,WAAW,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QAClF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,yCAAyC,CAAC,CAAC,MAAM,YAAY,CAAC,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,eAAe,CAAC,CAAC,UAAU,gBAAgB,CAAC,CAAC,WAAW,OAAO,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;IACjN,CAAC;IACD,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,6BAA6B,MAAM,SAAS,MAAM,EAAE,EAAE,CAAC;IAC7G,IAAI,OAAO,KAAK,OAAO;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B,OAAO,SAAS,OAAO,EAAE,EAAE,CAAC;IAClH,MAAM,aAAa,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;IACnG,iFAAiF;IACjF,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9E,MAAM,IAAI,GAAiC;QACzC,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO;KACrF,CAAC;IACF,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACrH,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAC;IAC7F,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;AACpD,CAAC"}

package/dist/nemesis/features.d.ts

@@ -0,0 +1,13 @@
+/**
+ * v2.46.0 — NEMESIS ORGAN 1: FINGERPRINTER (41 features).
+ *
+ * Implements the 41-feature vector from arxiv 2601.17406 — pure
+ * deterministic extraction (no ML model needed for the EXTRACTOR; the
+ * CLASSIFIER applies the paper's feature weights to predict vendor).
+ *
+ * Each feature is documented in types.ts. Every value is a finite
+ * non-negative real. NEVER throws — empty inputs return zero-vector.
+ */
+import type { Fingerprint, Fixture } from "./types.js";
+export declare function extractFingerprint(fixture: Fixture): Fingerprint;
+//# sourceMappingURL=features.d.ts.map

package/dist/nemesis/features.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"features.d.ts","sourceRoot":"","sources":["../../src/nemesis/features.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAqDvD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,GAAG,WAAW,CA6GhE"}

package/dist/nemesis/features.js

@@ -0,0 +1,151 @@
+/**
+ * v2.46.0 — NEMESIS ORGAN 1: FINGERPRINTER (41 features).
+ *
+ * Implements the 41-feature vector from arxiv 2601.17406 — pure
+ * deterministic extraction (no ML model needed for the EXTRACTOR; the
+ * CLASSIFIER applies the paper's feature weights to predict vendor).
+ *
+ * Each feature is documented in types.ts. Every value is a finite
+ * non-negative real. NEVER throws — empty inputs return zero-vector.
+ */
+function safeDivide(num, den) {
+    return den === 0 ? 0 : num / den;
+}
+function shannonEntropyNormalized(counts) {
+    const total = counts.reduce((a, b) => a + b, 0);
+    if (total === 0 || counts.length === 0)
+        return 0;
+    let h = 0;
+    for (const c of counts) {
+        if (c === 0)
+            continue;
+        const p = c / total;
+        h += -p * Math.log2(p);
+    }
+    const maxH = Math.log2(Math.max(1, counts.length));
+    return maxH === 0 ? 0 : h / maxH; // ∈ [0, 1]
+}
+/**
+ * Parse a unified diff into per-file added/removed line counts +
+ * collected added-line text.
+ */
+function parseDiff(diff) {
+    const perFile = new Map();
+    const addedLines = [];
+    const removedLines = [];
+    let current = null;
+    let currentName = "";
+    for (const ln of diff.split("\n")) {
+        const m = ln.match(/^diff --git a\/(\S+) b\/(\S+)/);
+        if (m) {
+            currentName = m[2];
+            current = { added: 0, removed: 0 };
+            perFile.set(currentName, current);
+            continue;
+        }
+        if (!current)
+            continue;
+        if (ln.startsWith("+") && !ln.startsWith("+++")) {
+            current.added++;
+            addedLines.push(ln.slice(1));
+        }
+        else if (ln.startsWith("-") && !ln.startsWith("---")) {
+            current.removed++;
+            removedLines.push(ln.slice(1));
+        }
+    }
+    return { perFile, addedLines, removedLines };
+}
+export function extractFingerprint(fixture) {
+    const diff = fixture.diff ?? "";
+    const prDesc = fixture.prDescription ?? "";
+    const commits = fixture.commitMessages ?? [];
+    // ── Commit shape ──
+    const commit_count = commits.length;
+    const multiline = commits.filter((c) => /\n/.test(c)).length;
+    const multiline_commit_ratio = safeDivide(multiline, commit_count);
+    const commitLineCounts = commits.map((c) => c.split("\n").length);
+    const mean_commit_lines = commit_count === 0 ? 0 : commitLineCounts.reduce((a, b) => a + b, 0) / commit_count;
+    const max_commit_chars = commits.reduce((m, c) => Math.max(m, c.length), 0);
+    const commit_bullet_count = commits.reduce((n, c) => n + (c.match(/^[\s>]*[-*+]\s/gm)?.length ?? 0), 0);
+    // ── Diff parse ──
+    const { perFile, addedLines, removedLines } = parseDiff(diff);
+    const added_lines = addedLines.length;
+    const removed_lines = removedLines.length;
+    const net_lines = added_lines - removed_lines;
+    const files_touched = perFile.size;
+    const addedJoined = addedLines.join("\n");
+    // Conditional / control flow
+    const if_count = (addedJoined.match(/\b(if|elif|else\s+if)\b/g) ?? []).length;
+    const switch_count = (addedJoined.match(/\b(switch|case|match)\b/g) ?? []).length;
+    const try_count = (addedJoined.match(/\b(try|catch|except|finally)\b/g) ?? []).length;
+    const conditional_density = safeDivide(if_count + switch_count + try_count, added_lines);
+    // ── PR description shape ──
+    const pr_desc_length_chars = prDesc.length;
+    const pr_desc_length_words = prDesc.split(/\s+/).filter(Boolean).length;
+    const pr_desc_length_lines = prDesc.split("\n").length;
+    const bullet_point_count = (prDesc.match(/^[\s>]*[-*+]\s/gm) ?? []).length;
+    const hyperlink_count = (prDesc.match(/\[[^\]]+\]\([^)]+\)/g) ?? []).length +
+        (prDesc.match(/\bhttps?:\/\/\S+/g) ?? []).length;
+    const heading_count = (prDesc.match(/^#{1,6}\s/gm) ?? []).length;
+    const code_fence_count = (prDesc.match(/```/g) ?? []).length / 2;
+    const inline_code_count = (prDesc.match(/`[^`\n]+`/g) ?? []).length;
+    // ── Change concentration ──
+    const perFileCounts = [...perFile.values()].map((v) => v.added + v.removed);
+    const distributed_changes_score = shannonEntropyNormalized(perFileCounts);
+    const change_concentration = 1 - distributed_changes_score;
+    // ── Line shape ──
+    const lineLengths = addedLines.map((l) => l.length);
+    const mean_line_length = lineLengths.length === 0 ? 0 : lineLengths.reduce((a, b) => a + b, 0) / lineLengths.length;
+    const max_line_length = lineLengths.reduce((m, l) => Math.max(m, l), 0);
+    const long_line_ratio = safeDivide(lineLengths.filter((l) => l > 100).length, lineLengths.length);
+    // ── Comments / blanks ──
+    const comment_count = addedLines.filter((l) => /^\s*(\/\/|#|\/\*|\*\s|---)/.test(l)).length;
+    const comment_ratio = safeDivide(comment_count, added_lines);
+    const blank_line_count = addedLines.filter((l) => /^\s*$/.test(l)).length;
+    const blank_line_ratio = safeDivide(blank_line_count, added_lines);
+    // ── Test / doc files ──
+    const filePaths = [...perFile.keys()];
+    const test_files_touched = filePaths.filter((p) => /\.(test|spec)\.|__tests__\/|tests?\//.test(p)).length;
+    const doc_files_touched = filePaths.filter((p) => /\.(md|rst|txt|adoc)$|docs?\//i.test(p)).length;
+    const test_file_ratio = safeDivide(test_files_touched, files_touched);
+    // ── Hygiene markers ──
+    const debug_print_count = (addedJoined.match(/\bconsole\.log\(/g) ?? []).length +
+        (addedJoined.match(/\bprint\(/g) ?? []).length +
+        (addedJoined.match(/\bdebugger\b/g) ?? []).length;
+    const todo_marker_count = (addedJoined.match(/\b(TODO|FIXME|XXX|HACK)\b/g) ?? []).length;
+    // ── Imports ──
+    const import_count = (addedJoined.match(/^\s*import\s/gm) ?? []).length +
+        (addedJoined.match(/\brequire\(/g) ?? []).length +
+        (addedJoined.match(/\bfrom\s+["']/g) ?? []).length;
+    const relative_import_count = (addedJoined.match(/from\s+["']\.{1,2}\//g) ?? []).length;
+    // ── Punctuation density ──
+    const semicolon_count = (addedJoined.match(/;/g) ?? []).length;
+    const semicolon_density = safeDivide(semicolon_count, added_lines);
+    const brace_count = (addedJoined.match(/[{}]/g) ?? []).length;
+    const brace_density = safeDivide(brace_count, added_lines);
+    const paren_count = (addedJoined.match(/[()]/g) ?? []).length;
+    const paren_density = safeDivide(paren_count, added_lines);
+    // ── Naming style ──
+    const identifiers = addedJoined.match(/\b[A-Za-z_][A-Za-z0-9_]{2,}\b/g) ?? [];
+    const camel_case_count = identifiers.filter((id) => /^[a-z][a-z0-9]*[A-Z]/.test(id)).length;
+    const snake_case_count = identifiers.filter((id) => /^[a-z][a-z0-9]*_[a-z]/.test(id)).length;
+    const mean_identifier_length = identifiers.length === 0 ? 0 : identifiers.reduce((s, i) => s + i.length, 0) / identifiers.length;
+    return {
+        multiline_commit_ratio, mean_commit_lines, max_commit_chars, commit_count,
+        conditional_density, if_count, switch_count, try_count,
+        pr_desc_length_chars, pr_desc_length_words, pr_desc_length_lines,
+        bullet_point_count, hyperlink_count, heading_count, code_fence_count, inline_code_count,
+        change_concentration, distributed_changes_score, files_touched,
+        added_lines, removed_lines, net_lines,
+        mean_line_length, max_line_length, long_line_ratio,
+        comment_ratio, blank_line_ratio,
+        test_files_touched, doc_files_touched, test_file_ratio,
+        debug_print_count, todo_marker_count,
+        import_count, relative_import_count,
+        semicolon_density, brace_density, paren_density,
+        camel_case_count, snake_case_count, mean_identifier_length,
+        commit_bullet_count,
+    };
+}
+//# sourceMappingURL=features.js.map

package/dist/nemesis/features.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features.js","sourceRoot":"","sources":["../../src/nemesis/features.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,SAAS,UAAU,CAAC,GAAW,EAAE,GAAW;IAC1C,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC;AACnC,CAAC;AAED,SAAS,wBAAwB,CAAC,MAAgB;IAChD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAChD,IAAI,KAAK,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IACjD,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,KAAK,CAAC;YAAE,SAAS;QACtB,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACpB,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACnD,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,WAAW;AAC/C,CAAC;AAED;;;GAGG;AACH,SAAS,SAAS,CAAC,IAAY;IAK7B,MAAM,OAAO,GAAG,IAAI,GAAG,EAA8C,CAAC;IACtE,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,IAAI,OAAO,GAA8C,IAAI,CAAC;IAC9D,IAAI,WAAW,GAAG,EAAE,CAAC;IACrB,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACpD,IAAI,CAAC,EAAE,CAAC;YACN,WAAW,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;YACpB,OAAO,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;YACnC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YAClC,SAAS;QACX,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAChD,OAAO,CAAC,KAAK,EAAE,CAAC;YAChB,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,CAAC;aAAM,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YACvD,OAAO,CAAC,OAAO,EAAE,CAAC;YAClB,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAgB;IACjD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAG,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC;IAE7C,qBAAqB;IACrB,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC;IACpC,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC7D,MAAM,sBAAsB,GAAG,UAAU,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IACnE,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC;IAClE,MAAM,iBAAiB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,YAAY,CAAC;IAC9G,MAAM,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5E,MAAM,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAExG,mBAAmB;IACnB,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9D,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,CAAC;IACtC,MAAM,aAAa,GAAG,YAAY,CAAC,MAAM,CAAC;IAC1C,MAAM,SAAS,GAAG,WAAW,GAAG,aAAa,CAAC;IAC9C,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IACnC,MAAM,WAAW,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAE1C,6BAA6B;IAC7B,MAAM,QAAQ,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,0BAA0B,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IAC9E,MAAM,YAAY,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,0BAA0B,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IAClF,MAAM,SAAS,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,iCAAiC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IACtF,MAAM,mBAAmB,GAAG,UAAU,CAAC,QAAQ,GAAG,YAAY,GAAG,SAAS,EAAE,WAAW,CAAC,CAAC;IAEzF,6BAA6B;IAC7B,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC3C,MAAM,oBAAoB,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IACxE,MAAM,oBAAoB,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;IACvD,MAAM,kBAAkB,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IAC3E,MAAM,eAAe,GACnB,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM;QACnD,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IACnD,MAAM,aAAa,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IACjE,MAAM,gBAAgB,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IACjE,MAAM,iBAAiB,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IAEpE,6BAA6B;IAC7B,MAAM,aAAa,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;IAC5E,MAAM,yBAAyB,GAAG,wBAAwB,CAAC,aAAa,CAAC,CAAC;IAC1E,MAAM,oBAAoB,GAAG,CAAC,GAAG,yBAAyB,CAAC;IAE3D,mBAAmB;IACnB,MAAM,WAAW,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACpD,MAAM,gBAAgB,GAAG,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC;IACpH,MAAM,eAAe,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACxE,MAAM,eAAe,GAAG,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAElG,0BAA0B;IAC1B,MAAM,aAAa,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAC5C,4BAA4B,CAAC,IAAI,CAAC,CAAC,CAAC,CACrC,CAAC,MAAM,CAAC;IACT,MAAM,aAAa,GAAG,UAAU,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;IAC7D,MAAM,gBAAgB,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC1E,MAAM,gBAAgB,GAAG,UAAU,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC;IAEnE,yBAAyB;IACzB,MAAM,SAAS,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACtC,MAAM,kBAAkB,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,sCAAsC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC1G,MAAM,iBAAiB,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,+BAA+B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAClG,MAAM,eAAe,GAAG,UAAU,CAAC,kBAAkB,EAAE,aAAa,CAAC,CAAC;IAEtE,wBAAwB;IACxB,MAAM,iBAAiB,GACrB,CAAC,WAAW,CAAC,KAAK,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM;QACrD,CAAC,WAAW,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM;QAC9C,CAAC,WAAW,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IACpD,MAAM,iBAAiB,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,4BAA4B,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IAEzF,gBAAgB;IAChB,MAAM,YAAY,GAChB,CAAC,WAAW,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM;QAClD,CAAC,WAAW,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM;QAChD,CAAC,WAAW,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IACrD,MAAM,qBAAqB,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,uBAAuB,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IAExF,4BAA4B;IAC5B,MAAM,eAAe,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IAC/D,MAAM,iBAAiB,GAAG,UAAU,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IACnE,MAAM,WAAW,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IAC9D,MAAM,aAAa,GAAG,UAAU,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IAC3D,MAAM,WAAW,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IAC9D,MAAM,aAAa,GAAG,UAAU,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IAE3D,qBAAqB;IACrB,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,gCAAgC,CAAC,IAAI,EAAE,CAAC;IAC9E,MAAM,gBAAgB,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;IAC5F,MAAM,gBAAgB,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;IAC7F,MAAM,sBAAsB,GAAG,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC;IAEjI,OAAO;QACL,sBAAsB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,YAAY;QACzE,mBAAmB,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS;QACtD,oBAAoB,EAAE,oBAAoB,EAAE,oBAAoB;QAChE,kBAAkB,EAAE,eAAe,EAAE,aAAa,EAAE,gBAAgB,EAAE,iBAAiB;QACvF,oBAAoB,EAAE,yBAAyB,EAAE,aAAa;QAC9D,WAAW,EAAE,aAAa,EAAE,SAAS;QACrC,gBAAgB,EAAE,eAAe,EAAE,eAAe;QAClD,aAAa,EAAE,gBAAgB;QAC/B,kBAAkB,EAAE,iBAAiB,EAAE,eAAe;QACtD,iBAAiB,EAAE,iBAAiB;QACpC,YAAY,EAAE,qBAAqB;QACnC,iBAAiB,EAAE,aAAa,EAAE,aAAa;QAC/C,gBAAgB,EAAE,gBAAgB,EAAE,sBAAsB;QAC1D,mBAAmB;KACpB,CAAC;AACJ,CAAC"}

package/dist/nemesis/git_hook_installer.d.ts

@@ -0,0 +1,24 @@
+/**
+ * v2.46.0 — NEMESIS ORGAN 3 surface: GIT PRE-COMMIT HOOK INSTALLER.
+ *
+ * Installs a `.git/hooks/prepare-commit-msg` script that calls
+ * `mneme nemesis eu_stamp` for every commit and appends the Article 50
+ * disclosure block to the staged commit message.
+ *
+ * DRY-RUN default. Defensive: never throws.
+ */
+export interface InstallHookInput {
+    repoRoot: string;
+    dryRun?: boolean;
+}
+export interface InstallHookResult {
+    ok: boolean;
+    reason?: string;
+    hookPath?: string;
+    plannedScript: string;
+    installed?: boolean;
+    /** When a hook already exists, we don't overwrite — return the existing body so the caller can merge manually. */
+    existing?: string;
+}
+export declare function installPreCommitHook(input: InstallHookInput): InstallHookResult;
+//# sourceMappingURL=git_hook_installer.d.ts.map

package/dist/nemesis/git_hook_installer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git_hook_installer.d.ts","sourceRoot":"","sources":["../../src/nemesis/git_hook_installer.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA8BH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,kHAAkH;IAClH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,gBAAgB,GAAG,iBAAiB,CAgC/E"}

package/dist/nemesis/git_hook_installer.js

@@ -0,0 +1,71 @@
+/**
+ * v2.46.0 — NEMESIS ORGAN 3 surface: GIT PRE-COMMIT HOOK INSTALLER.
+ *
+ * Installs a `.git/hooks/prepare-commit-msg` script that calls
+ * `mneme nemesis eu_stamp` for every commit and appends the Article 50
+ * disclosure block to the staged commit message.
+ *
+ * DRY-RUN default. Defensive: never throws.
+ */
+import { existsSync, mkdirSync, writeFileSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+const HOOK_SCRIPT = `#!/bin/sh
+# Mneme NEMESIS — EU AI Act Article 50 auto-stamper (v2.46.0+)
+# Auto-installed by \`mneme nemesis install-hook\`.
+#
+# Reads the in-progress commit message, asks mneme nemesis for the
+# detected vendor + confidence, and appends a machine-readable
+# disclosure block. Skips if the message already contains one.
+MSG_FILE="$1"
+[ -z "$MSG_FILE" ] && exit 0
+grep -q 'AI-GENERATED-CONTENT' "$MSG_FILE" 2>/dev/null && exit 0
+# Best-effort detection via env scan (cheapest signal); fallback "unknown"
+VENDOR="unknown"
+[ -n "$CLAUDECODE" ] && VENDOR="claude-code"
+[ -n "$CURSOR_AGENT" ] && VENDOR="cursor"
+[ -n "$DEVIN_SESSION" ] && VENDOR="devin"
+[ -n "$COPILOT_AGENT" ] && VENDOR="copilot"
+[ -n "$CODEX_AGENT" ] && VENDOR="codex"
+[ "$VENDOR" = "unknown" ] && exit 0
+MSG=$(cat "$MSG_FILE")
+mneme nemesis eu_stamp --message "$MSG" --vendor "$VENDOR" --json 2>/dev/null | \
+  node -e 'let s=""; process.stdin.on("data",d=>s+=d); process.stdin.on("end",()=>{try{const j=JSON.parse(s);if(j&&j.ok)process.stdout.write(j.stampedMessage)}catch{}})' \
+  > "$MSG_FILE.new" && mv "$MSG_FILE.new" "$MSG_FILE"
+exit 0
+`;
+export function installPreCommitHook(input) {
+    const plannedScript = HOOK_SCRIPT;
+    if (!input || !input.repoRoot) {
+        return { ok: false, reason: "repoRoot required", plannedScript };
+    }
+    const dryRun = input.dryRun !== false; // default TRUE
+    const hookDir = join(input.repoRoot, ".git", "hooks");
+    const hookPath = join(hookDir, "prepare-commit-msg");
+    if (dryRun) {
+        return { ok: true, hookPath, plannedScript, installed: false };
+    }
+    if (!existsSync(join(input.repoRoot, ".git"))) {
+        return { ok: false, reason: "not a git repo (no .git directory)", hookPath, plannedScript };
+    }
+    try {
+        if (!existsSync(hookDir))
+            mkdirSync(hookDir, { recursive: true });
+        if (existsSync(hookPath)) {
+            const existing = readFileSync(hookPath, "utf8");
+            if (existing.includes("mneme nemesis eu_stamp")) {
+                return { ok: true, hookPath, plannedScript, installed: true, existing };
+            }
+            return {
+                ok: false,
+                reason: "existing prepare-commit-msg hook found; refuse to overwrite. Add the NEMESIS body manually or move the existing hook aside.",
+                hookPath, plannedScript, existing,
+            };
+        }
+        writeFileSync(hookPath, plannedScript, { mode: 0o755 });
+        return { ok: true, hookPath, plannedScript, installed: true };
+    }
+    catch (e) {
+        return { ok: false, reason: `install failed: ${e.message}`, hookPath, plannedScript };
+    }
+}
+//# sourceMappingURL=git_hook_installer.js.map

package/dist/nemesis/git_hook_installer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git_hook_installer.js","sourceRoot":"","sources":["../../src/nemesis/git_hook_installer.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;;;;;CAuBnB,CAAC;AAiBF,MAAM,UAAU,oBAAoB,CAAC,KAAuB;IAC1D,MAAM,aAAa,GAAG,WAAW,CAAC;IAClC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC9B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,aAAa,EAAE,CAAC;IACnE,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,eAAe;IACtD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;IACrD,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACjE,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;QAC9C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oCAAoC,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC9F,CAAC;IACD,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAChD,IAAI,QAAQ,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,CAAC;gBAChD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;YAC1E,CAAC;YACD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,6HAA6H;gBACrI,QAAQ,EAAE,aAAa,EAAE,QAAQ;aAClC,CAAC;QACJ,CAAC;QACD,aAAa,CAAC,QAAQ,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACxD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAChE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAoB,CAAW,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;IACnG,CAAC;AACH,CAAC"}

package/dist/nemesis/identity_verifier.d.ts

@@ -0,0 +1,25 @@
+/**
+ * v2.46.0 — NEMESIS ORGAN 2: LIE DETECTOR.
+ *
+ * Compares CLAIMED vendor (whoever the AI agent says it is) against
+ * DETECTED vendor (from fingerprinter + env scan). Divergence → alert.
+ *
+ * Verdict ladder:
+ *   CONFIRMED     claimed = detected with confidence ≥ 0.40
+ *   DISPUTED      different vendor but detector confidence < 0.65
+ *   IMPOSSIBLE    different vendor AND detector confidence ≥ 0.65
+ *   INCONCLUSIVE  detector returned unknown / confidence < 0.10
+ *
+ * Every verdict carries an HMAC over the canonical body so an
+ * external auditor can verify the verdict was actually computed
+ * (and not faked by the AI agent itself).
+ */
+import type { Fixture, IdentityClaimInput, IdentityVerdict } from "./types.js";
+export declare function verifyIdentityClaim(input: IdentityClaimInput): IdentityVerdict;
+/**
+ * Verify the HMAC of a returned IdentityVerdict. Returns false if
+ * any field was tampered after the verdict was signed.
+ */
+export declare function verifyIdentityHmac(v: IdentityVerdict): boolean;
+export type { Fixture, IdentityClaimInput, IdentityVerdict };
+//# sourceMappingURL=identity_verifier.d.ts.map

package/dist/nemesis/identity_verifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity_verifier.d.ts","sourceRoot":"","sources":["../../src/nemesis/identity_verifier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,KAAK,EACV,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAC7C,MAAM,YAAY,CAAC;AA6BpB,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,kBAAkB,GAAG,eAAe,CAgD9E;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,eAAe,GAAG,OAAO,CAU9D;AAGD,YAAY,EAAE,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,CAAC"}

package/dist/nemesis/identity_verifier.js

@@ -0,0 +1,106 @@
+/**
+ * v2.46.0 — NEMESIS ORGAN 2: LIE DETECTOR.
+ *
+ * Compares CLAIMED vendor (whoever the AI agent says it is) against
+ * DETECTED vendor (from fingerprinter + env scan). Divergence → alert.
+ *
+ * Verdict ladder:
+ *   CONFIRMED     claimed = detected with confidence ≥ 0.40
+ *   DISPUTED      different vendor but detector confidence < 0.65
+ *   IMPOSSIBLE    different vendor AND detector confidence ≥ 0.65
+ *   INCONCLUSIVE  detector returned unknown / confidence < 0.10
+ *
+ * Every verdict carries an HMAC over the canonical body so an
+ * external auditor can verify the verdict was actually computed
+ * (and not faked by the AI agent itself).
+ */
+import { createHmac } from "node:crypto";
+import { extractFingerprint } from "./features.js";
+import { classifyAgent } from "./classifier.js";
+import { scanEnv } from "./env_scan.js";
+const HMAC_KEY = process.env["MNEME_NEMESIS_KEY"] ?? "MNEME-NEMESIS-DEFAULT-KEY-v2.46";
+function canonical(obj) {
+    const keys = Object.keys(obj).sort();
+    return JSON.stringify(keys.reduce((acc, k) => { acc[k] = obj[k]; return acc; }, {}));
+}
+function hmacOf(body) {
+    return createHmac("sha256", HMAC_KEY).update(canonical(body)).digest("hex").slice(0, 32);
+}
+function normalizeVendor(s) {
+    const x = (s ?? "").toLowerCase().trim();
+    // common aliases
+    const map = {
+        "claude": "claude-code", "claude-code": "claude-code", "claudecode": "claude-code", "anthropic-claude": "claude-code",
+        "codex": "codex", "openai-codex": "codex", "openai-codex-cli": "codex",
+        "copilot": "copilot", "github-copilot": "copilot", "gh-copilot": "copilot",
+        "cursor": "cursor", "cursor-agent": "cursor",
+        "devin": "devin", "cognition-devin": "devin",
+    };
+    return map[x] ?? x;
+}
+export function verifyIdentityClaim(input) {
+    const claimedRaw = input.claimedVendor ?? "";
+    const claimed = normalizeVendor(claimedRaw);
+    const fp = extractFingerprint(input.fixture);
+    const fpVerdict = classifyAgent(fp);
+    const envVerdict = scanEnv();
+    // Fuse fingerprint + env detector. Env evidence boosts confidence
+    // when it agrees; reduces when it disagrees.
+    let detected = fpVerdict.topVendor;
+    let confidence = fpVerdict.confidence;
+    if (envVerdict.vendor !== "unknown") {
+        if (envVerdict.vendor === fpVerdict.topVendor) {
+            // Agreement boost
+            confidence = Math.min(0.99, confidence + 0.20);
+        }
+        else if (fpVerdict.confidence < 0.40) {
+            // Env wins when fingerprint is weak
+            detected = envVerdict.vendor;
+            confidence = Math.min(0.95, envVerdict.confidence + fpVerdict.confidence * 0.30);
+        }
+    }
+    // Compute verdict.
+    let verdict;
+    let reasoning;
+    if (detected === "unknown" || confidence < 0.10) {
+        verdict = "INCONCLUSIVE";
+        reasoning = `detector returned ${detected} with confidence ${confidence.toFixed(2)} — cannot judge claim`;
+    }
+    else if (claimed === detected) {
+        verdict = "CONFIRMED";
+        reasoning = `claim=${claimed} matches detected=${detected} (conf ${confidence.toFixed(2)})`;
+    }
+    else if (confidence >= 0.65) {
+        verdict = "IMPOSSIBLE";
+        reasoning = `claim=${claimed} contradicts detected=${detected} with HIGH confidence ${confidence.toFixed(2)}`;
+    }
+    else {
+        verdict = "DISPUTED";
+        reasoning = `claim=${claimed} differs from detected=${detected} but detector confidence ${confidence.toFixed(2)} is below threshold`;
+    }
+    const body = {
+        verdict,
+        claimedVendor: claimed,
+        fingerprintTop: detected,
+        fingerprintConfidence: Number(confidence.toFixed(4)),
+        reasoning,
+    };
+    const hmac = hmacOf(body);
+    return { ...body, hmac };
+}
+/**
+ * Verify the HMAC of a returned IdentityVerdict. Returns false if
+ * any field was tampered after the verdict was signed.
+ */
+export function verifyIdentityHmac(v) {
+    const body = {
+        verdict: v.verdict,
+        claimedVendor: v.claimedVendor,
+        fingerprintTop: v.fingerprintTop,
+        fingerprintConfidence: Number(v.fingerprintConfidence.toFixed(4)),
+        reasoning: v.reasoning,
+    };
+    const expected = hmacOf(body);
+    return expected === v.hmac;
+}
+//# sourceMappingURL=identity_verifier.js.map

package/dist/nemesis/identity_verifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity_verifier.js","sourceRoot":"","sources":["../../src/nemesis/identity_verifier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,iCAAiC,CAAC;AAEvF,SAAS,SAAS,CAAC,GAA4B;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACrC,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAA0B,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAChH,CAAC;AAED,SAAS,MAAM,CAAC,IAA6B;IAC3C,OAAO,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC3F,CAAC;AAED,SAAS,eAAe,CAAC,CAAS;IAChC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;IACzC,iBAAiB;IACjB,MAAM,GAAG,GAA6B;QACpC,QAAQ,EAAE,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,kBAAkB,EAAE,aAAa;QACrH,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,kBAAkB,EAAE,OAAO;QACtE,SAAS,EAAE,SAAS,EAAE,gBAAgB,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS;QAC1E,QAAQ,EAAE,QAAQ,EAAE,cAAc,EAAE,QAAQ;QAC5C,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,OAAO;KAC7C,CAAC;IACF,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAyB;IAC3D,MAAM,UAAU,GAAG,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC;IAC7C,MAAM,OAAO,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IAC5C,MAAM,EAAE,GAAG,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,aAAa,CAAC,EAAE,CAAC,CAAC;IACpC,MAAM,UAAU,GAAG,OAAO,EAAE,CAAC;IAE7B,kEAAkE;IAClE,6CAA6C;IAC7C,IAAI,QAAQ,GAAa,SAAS,CAAC,SAAS,CAAC;IAC7C,IAAI,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC;IACtC,IAAI,UAAU,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACpC,IAAI,UAAU,CAAC,MAAM,KAAK,SAAS,CAAC,SAAS,EAAE,CAAC;YAC9C,kBAAkB;YAClB,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI,CAAC,CAAC;QACjD,CAAC;aAAM,IAAI,SAAS,CAAC,UAAU,GAAG,IAAI,EAAE,CAAC;YACvC,oCAAoC;YACpC,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC;YAC7B,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAED,mBAAmB;IACnB,IAAI,OAAmC,CAAC;IACxC,IAAI,SAAiB,CAAC;IACtB,IAAI,QAAQ,KAAK,SAAS,IAAI,UAAU,GAAG,IAAI,EAAE,CAAC;QAChD,OAAO,GAAG,cAAc,CAAC;QACzB,SAAS,GAAG,qBAAqB,QAAQ,oBAAoB,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC;IAC5G,CAAC;SAAM,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,GAAG,WAAW,CAAC;QACtB,SAAS,GAAG,SAAS,OAAO,qBAAqB,QAAQ,UAAU,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;IAC9F,CAAC;SAAM,IAAI,UAAU,IAAI,IAAI,EAAE,CAAC;QAC9B,OAAO,GAAG,YAAY,CAAC;QACvB,SAAS,GAAG,SAAS,OAAO,yBAAyB,QAAQ,yBAAyB,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IAChH,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,UAAU,CAAC;QACrB,SAAS,GAAG,SAAS,OAAO,0BAA0B,QAAQ,4BAA4B,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC;IACvI,CAAC;IAED,MAAM,IAAI,GAAG;QACX,OAAO;QACP,aAAa,EAAE,OAAO;QACtB,cAAc,EAAE,QAAQ;QACxB,qBAAqB,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACpD,SAAS;KACV,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1B,OAAO,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,CAAkB;IACnD,MAAM,IAAI,GAAG;QACX,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,aAAa,EAAE,CAAC,CAAC,aAAa;QAC9B,cAAc,EAAE,CAAC,CAAC,cAAc;QAChC,qBAAqB,EAAE,MAAM,CAAC,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACjE,SAAS,EAAE,CAAC,CAAC,SAAS;KACvB,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC9B,OAAO,QAAQ,KAAK,CAAC,CAAC,IAAI,CAAC;AAC7B,CAAC"}

package/dist/nemesis/index.d.ts

@@ -0,0 +1,26 @@
+/**
+ * v2.46.0 — NEMESIS public surface.
+ *
+ * The world's first Anti-Identity-Lie Engine for AI Coding Agents.
+ *
+ *   ORGAN 1 FINGERPRINTER     — features.ts + env_scan.ts (41-axis vector + env markers)
+ *   ORGAN 2 LIE DETECTOR      — classifier.ts + identity_verifier.ts (claim vs detected; HMAC verdict)
+ *   ORGAN 3 ARTICLE 50 STAMP  — eu_ai_act_stamp.ts + watermark.ts + git_hook_installer.ts
+ *   ORGAN 4 DRIFT TIMELINE    — drift_timeline.ts (per-vendor fingerprint history + σ-based drift)
+ *   ORGAN 5 REPLAY DETECTOR   — replay_attack.ts (stealth-upgrade/downgrade/swap)
+ *
+ * Composes: arxiv 2601.17406 fingerprinting + Mneme HMAC chain +
+ * EU AI Act Article 50 (Aug 2026 deadline) + HONEST MIRROR + ARGUS.
+ */
+export type { VendorId, Fixture, Fingerprint, AgentVerdict, IdentityClaimInput, IdentityVerdict, IdentityVerdictKind, Article50StampInput, Article50Stamp, StampResult, VerifyStampResult, } from "./types.js";
+export { extractFingerprint } from "./features.js";
+export { scanEnv, type EnvScanResult } from "./env_scan.js";
+export { classifyAgent, SIGNATURES } from "./classifier.js";
+export { verifyIdentityClaim, verifyIdentityHmac } from "./identity_verifier.js";
+export { stampArticle50, verifyStamp } from "./eu_ai_act_stamp.js";
+export { encodeWatermark, decodeWatermark } from "./watermark.js";
+export { installPreCommitHook, type InstallHookInput, type InstallHookResult } from "./git_hook_installer.js";
+export { recordFingerprint, readTimeline, computeVariance, type DriftEntry, type VarianceResult } from "./drift_timeline.js";
+export { detectReplayAttack, type ReplayResult } from "./replay_attack.js";
+export { generateProbes, gradeRun, recordRun, readRuns, trendFor, type Probe, type ProbeFamily, type NemesisRun, type TrendSeries, } from "./nemesis.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/nemesis/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/nemesis/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,YAAY,EACV,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,YAAY,EAC5C,kBAAkB,EAAE,eAAe,EAAE,mBAAmB,EACxD,mBAAmB,EAAE,cAAc,EAAE,WAAW,EAAE,iBAAiB,GACpE,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACjF,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,KAAK,gBAAgB,EAAE,KAAK,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC9G,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,eAAe,EAAE,KAAK,UAAU,EAAE,KAAK,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC7H,OAAO,EAAE,kBAAkB,EAAE,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAO3E,OAAO,EACL,cAAc,EACd,QAAQ,EACR,SAAS,EACT,QAAQ,EACR,QAAQ,EACR,KAAK,KAAK,EACV,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,WAAW,GACjB,MAAM,cAAc,CAAC"}

package/dist/nemesis/index.js

@@ -0,0 +1,30 @@
+/**
+ * v2.46.0 — NEMESIS public surface.
+ *
+ * The world's first Anti-Identity-Lie Engine for AI Coding Agents.
+ *
+ *   ORGAN 1 FINGERPRINTER     — features.ts + env_scan.ts (41-axis vector + env markers)
+ *   ORGAN 2 LIE DETECTOR      — classifier.ts + identity_verifier.ts (claim vs detected; HMAC verdict)
+ *   ORGAN 3 ARTICLE 50 STAMP  — eu_ai_act_stamp.ts + watermark.ts + git_hook_installer.ts
+ *   ORGAN 4 DRIFT TIMELINE    — drift_timeline.ts (per-vendor fingerprint history + σ-based drift)
+ *   ORGAN 5 REPLAY DETECTOR   — replay_attack.ts (stealth-upgrade/downgrade/swap)
+ *
+ * Composes: arxiv 2601.17406 fingerprinting + Mneme HMAC chain +
+ * EU AI Act Article 50 (Aug 2026 deadline) + HONEST MIRROR + ARGUS.
+ */
+export { extractFingerprint } from "./features.js";
+export { scanEnv } from "./env_scan.js";
+export { classifyAgent, SIGNATURES } from "./classifier.js";
+export { verifyIdentityClaim, verifyIdentityHmac } from "./identity_verifier.js";
+export { stampArticle50, verifyStamp } from "./eu_ai_act_stamp.js";
+export { encodeWatermark, decodeWatermark } from "./watermark.js";
+export { installPreCommitHook } from "./git_hook_installer.js";
+export { recordFingerprint, readTimeline, computeVariance } from "./drift_timeline.js";
+export { detectReplayAttack } from "./replay_attack.js";
+// v1.61 NEMESIS PROTOCOL (Tier 5 — weekly adversarial audit) lives in
+// nemesis.ts alongside the new v2.46.0 ANTI-IDENTITY-LIE ENGINE. Both
+// export through this barrel so downstream consumers (MCP `nemesis.generate`
+// / `nemesis.grade` / `nemesis.trend` Tier 5 tools) continue to work
+// unchanged. Two distinct primitives sharing one namespace by design.
+export { generateProbes, gradeRun, recordRun, readRuns, trendFor, } from "./nemesis.js";
+//# sourceMappingURL=index.js.map

package/dist/nemesis/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/nemesis/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAQH,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,OAAO,EAAsB,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACjF,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAiD,MAAM,yBAAyB,CAAC;AAC9G,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,eAAe,EAAwC,MAAM,qBAAqB,CAAC;AAC7H,OAAO,EAAE,kBAAkB,EAAqB,MAAM,oBAAoB,CAAC;AAE3E,sEAAsE;AACtE,sEAAsE;AACtE,6EAA6E;AAC7E,qEAAqE;AACrE,sEAAsE;AACtE,OAAO,EACL,cAAc,EACd,QAAQ,EACR,SAAS,EACT,QAAQ,EACR,QAAQ,GAKT,MAAM,cAAc,CAAC"}