@mneme-ai/core 2.45.0 → 2.46.0

package/dist/nemesis/replay_attack.d.ts

@@ -0,0 +1,27 @@
+/**
+ * v2.46.0 — NEMESIS ORGAN 5: REPLAY ATTACK DETECTOR.
+ *
+ * Same vendor claimed; same/similar prompt fired twice; fingerprints
+ * diverge significantly → vendor likely swapped models silently
+ * ("stealth-upgrade" or "stealth-downgrade").
+ *
+ * Pure deterministic; takes two Fingerprint records + returns a flag.
+ *
+ * Heuristic: Euclidean distance over a curated set of high-discriminator
+ * features. Threshold > 1.0 = stealth swap. Direction is decided by the
+ * sign of conditional_density delta (Claude-like up → "upgrade"; down →
+ * "downgrade"). Generic vendors return "stealth-swap".
+ */
+export interface ReplayResult {
+    vendor: string;
+    alert: boolean;
+    /** Euclidean distance across discriminator features. */
+    distance: number;
+    /** "stealth-upgrade" / "stealth-downgrade" / "stealth-swap". */
+    kind: string;
+    reasoning: string;
+}
+export declare function detectReplayAttack(vendor: string, fpA: Record<string, number>, fpB: Record<string, number>, opts?: {
+    threshold?: number;
+}): ReplayResult;
+//# sourceMappingURL=replay_attack.d.ts.map

package/dist/nemesis/replay_attack.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"replay_attack.d.ts","sourceRoot":"","sources":["../../src/nemesis/replay_attack.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAaH,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,wDAAwD;IACxD,QAAQ,EAAE,MAAM,CAAC;IACjB,gEAAgE;IAChE,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB;AAQD,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC3B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC3B,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAChC,YAAY,CA0Bd"}

package/dist/nemesis/replay_attack.js

@@ -0,0 +1,60 @@
+/**
+ * v2.46.0 — NEMESIS ORGAN 5: REPLAY ATTACK DETECTOR.
+ *
+ * Same vendor claimed; same/similar prompt fired twice; fingerprints
+ * diverge significantly → vendor likely swapped models silently
+ * ("stealth-upgrade" or "stealth-downgrade").
+ *
+ * Pure deterministic; takes two Fingerprint records + returns a flag.
+ *
+ * Heuristic: Euclidean distance over a curated set of high-discriminator
+ * features. Threshold > 1.0 = stealth swap. Direction is decided by the
+ * sign of conditional_density delta (Claude-like up → "upgrade"; down →
+ * "downgrade"). Generic vendors return "stealth-swap".
+ */
+const DISCRIMINATORS = [
+    "conditional_density",
+    "multiline_commit_ratio",
+    "bullet_point_count",
+    "hyperlink_count",
+    "distributed_changes_score",
+    "pr_desc_length_chars",
+    "change_concentration",
+    "mean_line_length",
+];
+function safeNumber(fp, k) {
+    if (!fp)
+        return 0;
+    const v = fp[k];
+    return Number.isFinite(v) ? v : 0;
+}
+export function detectReplayAttack(vendor, fpA, fpB, opts = {}) {
+    const threshold = opts.threshold ?? 0.6;
+    let sumSq = 0;
+    for (const k of DISCRIMINATORS) {
+        const a = safeNumber(fpA, k);
+        const b = safeNumber(fpB, k);
+        sumSq += (a - b) ** 2;
+    }
+    const distance = Math.sqrt(sumSq);
+    const alert = distance >= threshold;
+    let kind = "stable";
+    let reasoning = "within expected variance";
+    if (alert) {
+        const deltaConditional = safeNumber(fpB, "conditional_density") - safeNumber(fpA, "conditional_density");
+        if (deltaConditional > 0.20) {
+            kind = "stealth-upgrade";
+            reasoning = `${vendor} conditional density grew from ${safeNumber(fpA, "conditional_density").toFixed(2)} → ${safeNumber(fpB, "conditional_density").toFixed(2)} (model likely smarter)`;
+        }
+        else if (deltaConditional < -0.20) {
+            kind = "stealth-downgrade";
+            reasoning = `${vendor} conditional density dropped from ${safeNumber(fpA, "conditional_density").toFixed(2)} → ${safeNumber(fpB, "conditional_density").toFixed(2)} (model likely smaller)`;
+        }
+        else {
+            kind = "stealth-swap";
+            reasoning = `${vendor} fingerprint shifted by distance ${distance.toFixed(2)} across ${DISCRIMINATORS.length} features (model likely swapped)`;
+        }
+    }
+    return { vendor, alert, distance, kind, reasoning };
+}
+//# sourceMappingURL=replay_attack.js.map

package/dist/nemesis/replay_attack.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"replay_attack.js","sourceRoot":"","sources":["../../src/nemesis/replay_attack.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,MAAM,cAAc,GAAG;IACrB,qBAAqB;IACrB,wBAAwB;IACxB,oBAAoB;IACpB,iBAAiB;IACjB,2BAA2B;IAC3B,sBAAsB;IACtB,sBAAsB;IACtB,kBAAkB;CACnB,CAAC;AAYF,SAAS,UAAU,CAAC,EAAsC,EAAE,CAAS;IACnE,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,CAAC;IAClB,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IAChB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAY,CAAC,CAAC,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,MAAc,EACd,GAA2B,EAC3B,GAA2B,EAC3B,OAA+B,EAAE;IAEjC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,GAAG,CAAC;IACxC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC7B,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,QAAQ,IAAI,SAAS,CAAC;IACpC,IAAI,IAAI,GAAG,QAAQ,CAAC;IACpB,IAAI,SAAS,GAAG,0BAA0B,CAAC;IAC3C,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,gBAAgB,GAAG,UAAU,CAAC,GAAG,EAAE,qBAAqB,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;QACzG,IAAI,gBAAgB,GAAG,IAAI,EAAE,CAAC;YAC5B,IAAI,GAAG,iBAAiB,CAAC;YACzB,SAAS,GAAG,GAAG,MAAM,kCAAkC,UAAU,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB,CAAC;QAC3L,CAAC;aAAM,IAAI,gBAAgB,GAAG,CAAC,IAAI,EAAE,CAAC;YACpC,IAAI,GAAG,mBAAmB,CAAC;YAC3B,SAAS,GAAG,GAAG,MAAM,qCAAqC,UAAU,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB,CAAC;QAC9L,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,cAAc,CAAC;YACtB,SAAS,GAAG,GAAG,MAAM,oCAAoC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,cAAc,CAAC,MAAM,kCAAkC,CAAC;QACjJ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AACtD,CAAC"}

package/dist/nemesis/types.d.ts

@@ -0,0 +1,160 @@
+/**
+ * v2.46.0 — NEMESIS types.
+ *
+ * Inspired by arxiv 2601.17406 (Jan 2026): "Fingerprinting AI Coding
+ * Agents in the Wild" — 97.2% F1 across 33,580 PRs using 41 features.
+ * Vendors covered: Codex / Claude Code / Copilot / Cursor / Devin.
+ */
+export type VendorId = "codex" | "claude-code" | "copilot" | "cursor" | "devin" | "unknown";
+export interface Fixture {
+    /** Unified-diff text. */
+    diff: string;
+    /** PR / merge-request description (markdown). */
+    prDescription: string;
+    /** Each commit message (one element per commit). */
+    commitMessages: string[];
+}
+/** The 41 numeric features extracted from a fixture. Pure-numeric: every
+ *  value is a real number in [0, +inf). Most are ratios in [0, 1]; a few
+ *  are counts. */
+export interface Fingerprint {
+    /** Fraction of commits that contain a newline. */
+    multiline_commit_ratio: number;
+    /** Mean lines per commit message (across all commits). */
+    mean_commit_lines: number;
+    /** Max commit message length (chars). */
+    max_commit_chars: number;
+    /** Total commit count. */
+    commit_count: number;
+    /** Conditional keyword count divided by added-line count. */
+    conditional_density: number;
+    /** Total `if` / `else if` keywords in the diff. */
+    if_count: number;
+    /** `switch` / `case` keyword count. */
+    switch_count: number;
+    /** `try` / `catch` keyword count. */
+    try_count: number;
+    /** Length of PR description (chars). */
+    pr_desc_length_chars: number;
+    /** Length of PR description (words). */
+    pr_desc_length_words: number;
+    /** Length of PR description (lines). */
+    pr_desc_length_lines: number;
+    /** Count of markdown bullet markers (-, *, +) at line starts. */
+    bullet_point_count: number;
+    /** Count of markdown hyperlinks `[text](url)` + bare URLs. */
+    hyperlink_count: number;
+    /** Count of markdown headings (`#` ... `######`). */
+    heading_count: number;
+    /** Count of fenced code blocks (```). */
+    code_fence_count: number;
+    /** Count of inline-code spans (backticks). */
+    inline_code_count: number;
+    /** 1 - distributed_changes_score; high = changes concentrated in few files. */
+    change_concentration: number;
+    /** Shannon-entropy-style spread of changes across files (0..1). */
+    distributed_changes_score: number;
+    /** Number of distinct files touched. */
+    files_touched: number;
+    added_lines: number;
+    removed_lines: number;
+    /** Net = added - removed. */
+    net_lines: number;
+    /** Mean added-line length (chars). */
+    mean_line_length: number;
+    /** Max added-line length. */
+    max_line_length: number;
+    /** Fraction of added lines that exceed 100 chars. */
+    long_line_ratio: number;
+    /** Lines starting with `//` `#` `/*` `*` divided by added lines. */
+    comment_ratio: number;
+    /** Blank lines / added lines. */
+    blank_line_ratio: number;
+    test_files_touched: number;
+    doc_files_touched: number;
+    /** Fraction of files that look like tests. */
+    test_file_ratio: number;
+    /** Count of `console.log` / `print(` debug calls left in. */
+    debug_print_count: number;
+    /** Count of `TODO` / `FIXME` markers. */
+    todo_marker_count: number;
+    /** New `import` / `require` lines. */
+    import_count: number;
+    /** Relative import count. */
+    relative_import_count: number;
+    /** Semicolon density in added lines. */
+    semicolon_density: number;
+    /** Brace density `{` `}`. */
+    brace_density: number;
+    /** Paren density `(` `)`. */
+    paren_density: number;
+    /** camelCase identifier count. */
+    camel_case_count: number;
+    /** snake_case identifier count. */
+    snake_case_count: number;
+    /** Mean identifier length. */
+    mean_identifier_length: number;
+    /** Count of bullet markers in COMMIT messages. */
+    commit_bullet_count: number;
+}
+export interface AgentVerdict {
+    /** Top-ranked vendor; "unknown" when all scores tie at 0. */
+    topVendor: VendorId;
+    /** Confidence ∈ [0, 1] = topScore / sum(scores). */
+    confidence: number;
+    /** Per-vendor signature-match score. */
+    scores: Partial<Record<VendorId, number>>;
+    /** One-line explanation of which features drove the verdict. */
+    reasoning: string;
+}
+export type IdentityVerdictKind = "CONFIRMED" | "DISPUTED" | "IMPOSSIBLE" | "INCONCLUSIVE";
+export interface IdentityClaimInput {
+    claimedVendor: string;
+    fixture: Fixture;
+}
+export interface IdentityVerdict {
+    verdict: IdentityVerdictKind;
+    claimedVendor: string;
+    fingerprintTop: VendorId;
+    fingerprintConfidence: number;
+    /** One-line summary. */
+    reasoning: string;
+    /** HMAC over canonical(verdict + claimedVendor + topVendor + confidence). */
+    hmac: string;
+}
+export interface Article50StampInput {
+    /** Original commit message / content text. */
+    message: string;
+    /** Vendor that generated the content. */
+    vendor: string;
+    /** Caller's confidence in attribution (0..1). */
+    confidence: number;
+    /** Optional content-type override (default text/x-source-code). */
+    contentType?: string;
+}
+export interface Article50Stamp {
+    /** ISO timestamp. */
+    at: string;
+    vendor: string;
+    confidence: number;
+    contentType: string;
+    /** HMAC over canonical(at + vendor + confidence + contentType + message). */
+    hmac: string;
+    /** "EU-AI-ACT-2024" — locked. */
+    regime: string;
+    /** "50" — Article number. */
+    article: string;
+}
+export interface StampResult {
+    ok: boolean;
+    reason?: string;
+    /** message + machine-readable disclosure block appended. */
+    stampedMessage: string;
+    stamp: Article50Stamp;
+}
+export interface VerifyStampResult {
+    valid: boolean;
+    reason?: string;
+    parsed?: Article50Stamp;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/nemesis/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/nemesis/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,MAAM,QAAQ,GAChB,OAAO,GACP,aAAa,GACb,SAAS,GACT,QAAQ,GACR,OAAO,GACP,SAAS,CAAC;AAEd,MAAM,WAAW,OAAO;IACtB,yBAAyB;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,iDAAiD;IACjD,aAAa,EAAE,MAAM,CAAC;IACtB,oDAAoD;IACpD,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED;;kBAEkB;AAClB,MAAM,WAAW,WAAW;IAE1B,kDAAkD;IAClD,sBAAsB,EAAE,MAAM,CAAC;IAC/B,0DAA0D;IAC1D,iBAAiB,EAAE,MAAM,CAAC;IAC1B,yCAAyC;IACzC,gBAAgB,EAAE,MAAM,CAAC;IACzB,0BAA0B;IAC1B,YAAY,EAAE,MAAM,CAAC;IAGrB,6DAA6D;IAC7D,mBAAmB,EAAE,MAAM,CAAC;IAC5B,mDAAmD;IACnD,QAAQ,EAAE,MAAM,CAAC;IACjB,uCAAuC;IACvC,YAAY,EAAE,MAAM,CAAC;IACrB,qCAAqC;IACrC,SAAS,EAAE,MAAM,CAAC;IAGlB,wCAAwC;IACxC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,wCAAwC;IACxC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,wCAAwC;IACxC,oBAAoB,EAAE,MAAM,CAAC;IAG7B,iEAAiE;IACjE,kBAAkB,EAAE,MAAM,CAAC;IAC3B,8DAA8D;IAC9D,eAAe,EAAE,MAAM,CAAC;IACxB,qDAAqD;IACrD,aAAa,EAAE,MAAM,CAAC;IACtB,yCAAyC;IACzC,gBAAgB,EAAE,MAAM,CAAC;IACzB,8CAA8C;IAC9C,iBAAiB,EAAE,MAAM,CAAC;IAG1B,+EAA+E;IAC/E,oBAAoB,EAAE,MAAM,CAAC;IAC7B,mEAAmE;IACnE,yBAAyB,EAAE,MAAM,CAAC;IAClC,wCAAwC;IACxC,aAAa,EAAE,MAAM,CAAC;IAGtB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,6BAA6B;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,sCAAsC;IACtC,gBAAgB,EAAE,MAAM,CAAC;IACzB,6BAA6B;IAC7B,eAAe,EAAE,MAAM,CAAC;IACxB,qDAAqD;IACrD,eAAe,EAAE,MAAM,CAAC;IAGxB,oEAAoE;IACpE,aAAa,EAAE,MAAM,CAAC;IACtB,iCAAiC;IACjC,gBAAgB,EAAE,MAAM,CAAC;IAGzB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,8CAA8C;IAC9C,eAAe,EAAE,MAAM,CAAC;IAGxB,6DAA6D;IAC7D,iBAAiB,EAAE,MAAM,CAAC;IAC1B,yCAAyC;IACzC,iBAAiB,EAAE,MAAM,CAAC;IAG1B,sCAAsC;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,6BAA6B;IAC7B,qBAAqB,EAAE,MAAM,CAAC;IAG9B,wCAAwC;IACxC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,6BAA6B;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,6BAA6B;IAC7B,aAAa,EAAE,MAAM,CAAC;IAGtB,kCAAkC;IAClC,gBAAgB,EAAE,MAAM,CAAC;IACzB,mCAAmC;IACnC,gBAAgB,EAAE,MAAM,CAAC;IACzB,8BAA8B;IAC9B,sBAAsB,EAAE,MAAM,CAAC;IAG/B,kDAAkD;IAClD,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,YAAY;IAC3B,6DAA6D;IAC7D,SAAS,EAAE,QAAQ,CAAC;IACpB,oDAAoD;IACpD,UAAU,EAAE,MAAM,CAAC;IACnB,wCAAwC;IACxC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1C,gEAAgE;IAChE,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,mBAAmB,GAAG,WAAW,GAAG,UAAU,GAAG,YAAY,GAAG,cAAc,CAAC;AAE3F,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,mBAAmB,CAAC;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,QAAQ,CAAC;IACzB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,wBAAwB;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,6EAA6E;IAC7E,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,mBAAmB;IAClC,8CAA8C;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,yCAAyC;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,iDAAiD;IACjD,UAAU,EAAE,MAAM,CAAC;IACnB,mEAAmE;IACnE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,qBAAqB;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,IAAI,EAAE,MAAM,CAAC;IACb,iCAAiC;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,6BAA6B;IAC7B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4DAA4D;IAC5D,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,cAAc,CAAC;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,cAAc,CAAC;CACzB"}

package/dist/nemesis/types.js

@@ -0,0 +1,9 @@
+/**
+ * v2.46.0 — NEMESIS types.
+ *
+ * Inspired by arxiv 2601.17406 (Jan 2026): "Fingerprinting AI Coding
+ * Agents in the Wild" — 97.2% F1 across 33,580 PRs using 41 features.
+ * Vendors covered: Codex / Claude Code / Copilot / Cursor / Devin.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/nemesis/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/nemesis/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}

package/dist/nemesis/watermark.d.ts

@@ -0,0 +1,32 @@
+/**
+ * v2.46.0 — NEMESIS ORGAN 3 wild-idea: WHITESPACE-STEGO WATERMARK.
+ *
+ * Encodes a short vendor tag (e.g. "claude", "cursor") into a string
+ * using zero-width Unicode characters. Result is BYTE-different but
+ * VISUALLY identical — so an AI-injected code comment can carry a
+ * tamper-evident vendor watermark that survives copy-paste through
+ * any text editor.
+ *
+ * Encoding alphabet (3 chars, base-3):
+ *   U+200B  ZERO WIDTH SPACE       → digit 0
+ *   U+200C  ZERO WIDTH NON-JOINER  → digit 1
+ *   U+200D  ZERO WIDTH JOINER      → digit 2
+ *
+ * Each input byte (0-255) becomes 6 base-3 digits (3^6 = 729 ≥ 256).
+ *
+ * Use case: append `// AI: <invisible-watermark>` to a code comment;
+ * GREP detects the visible prefix; decoder reveals the vendor.
+ *
+ * Pure deterministic; never throws.
+ */
+/**
+ * Encode a watermark into a visible prefix string.
+ * Returns prefix + zero-width-encoded payload.
+ */
+export declare function encodeWatermark(visiblePrefix: string, payload: string): string;
+/**
+ * Decode a watermark out of a line. Returns "" when no watermark present
+ * OR the encoded bytes don't form valid UTF-8.
+ */
+export declare function decodeWatermark(line: string): string;
+//# sourceMappingURL=watermark.d.ts.map

package/dist/nemesis/watermark.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"watermark.d.ts","sourceRoot":"","sources":["../../src/nemesis/watermark.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AA2BH;;;GAGG;AACH,wBAAgB,eAAe,CAAC,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAM9E;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAgBpD"}

package/dist/nemesis/watermark.js

@@ -0,0 +1,83 @@
+/**
+ * v2.46.0 — NEMESIS ORGAN 3 wild-idea: WHITESPACE-STEGO WATERMARK.
+ *
+ * Encodes a short vendor tag (e.g. "claude", "cursor") into a string
+ * using zero-width Unicode characters. Result is BYTE-different but
+ * VISUALLY identical — so an AI-injected code comment can carry a
+ * tamper-evident vendor watermark that survives copy-paste through
+ * any text editor.
+ *
+ * Encoding alphabet (3 chars, base-3):
+ *   U+200B  ZERO WIDTH SPACE       → digit 0
+ *   U+200C  ZERO WIDTH NON-JOINER  → digit 1
+ *   U+200D  ZERO WIDTH JOINER      → digit 2
+ *
+ * Each input byte (0-255) becomes 6 base-3 digits (3^6 = 729 ≥ 256).
+ *
+ * Use case: append `// AI: <invisible-watermark>` to a code comment;
+ * GREP detects the visible prefix; decoder reveals the vendor.
+ *
+ * Pure deterministic; never throws.
+ */
+const D0 = "​"; // ZWSP
+const D1 = "‌"; // ZWNJ
+const D2 = "‍"; // ZWJ
+const DIGITS = [D0, D1, D2];
+function byteToBase3(b) {
+    let n = b & 0xff;
+    let s = "";
+    for (let i = 0; i < 6; i++) {
+        s = DIGITS[n % 3] + s;
+        n = Math.floor(n / 3);
+    }
+    return s;
+}
+function base3ToByte(s) {
+    let n = 0;
+    for (const ch of s) {
+        const d = ch === D0 ? 0 : ch === D1 ? 1 : ch === D2 ? 2 : -1;
+        if (d === -1)
+            return -1;
+        n = n * 3 + d;
+    }
+    return n & 0xff;
+}
+/**
+ * Encode a watermark into a visible prefix string.
+ * Returns prefix + zero-width-encoded payload.
+ */
+export function encodeWatermark(visiblePrefix, payload) {
+    if (!payload)
+        return visiblePrefix;
+    const bytes = Buffer.from(payload, "utf8");
+    let out = visiblePrefix;
+    for (const b of bytes)
+        out += byteToBase3(b);
+    return out;
+}
+/**
+ * Decode a watermark out of a line. Returns "" when no watermark present
+ * OR the encoded bytes don't form valid UTF-8.
+ */
+export function decodeWatermark(line) {
+    if (!line)
+        return "";
+    // Extract only the zero-width chars
+    const zw = line.replace(/[^​‌‍]/g, "");
+    if (zw.length === 0 || zw.length % 6 !== 0)
+        return "";
+    const bytes = [];
+    for (let i = 0; i < zw.length; i += 6) {
+        const b = base3ToByte(zw.slice(i, i + 6));
+        if (b === -1)
+            return "";
+        bytes.push(b);
+    }
+    try {
+        return Buffer.from(bytes).toString("utf8");
+    }
+    catch {
+        return "";
+    }
+}
+//# sourceMappingURL=watermark.js.map

package/dist/nemesis/watermark.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"watermark.js","sourceRoot":"","sources":["../../src/nemesis/watermark.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,OAAO;AACvB,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,OAAO;AACvB,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,MAAM;AACtB,MAAM,MAAM,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;AAE5B,SAAS,WAAW,CAAC,CAAS;IAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IACjB,IAAI,CAAC,GAAG,EAAE,CAAC;IACX,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAE,GAAG,CAAC,CAAC;QACvB,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,WAAW,CAAC,CAAS;IAC5B,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;QACnB,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7D,IAAI,CAAC,KAAK,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC;QACxB,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChB,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,aAAqB,EAAE,OAAe;IACpE,IAAI,CAAC,OAAO;QAAE,OAAO,aAAa,CAAC;IACnC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC3C,IAAI,GAAG,GAAG,aAAa,CAAC;IACxB,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC;IAC7C,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,oCAAoC;IACpC,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACvC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACtD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,WAAW,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,CAAC,CAAC;YAAE,OAAO,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAChB,CAAC;IACD,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/truth_gate/claims.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claims.d.ts","sourceRoot":"","sources":["../../src/truth_gate/claims.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAExC,eAAO,MAAM,aAAa,EAAE,aAAa,CAAC,KAAK,CAqN9C,CAAC"}
+{"version":3,"file":"claims.d.ts","sourceRoot":"","sources":["../../src/truth_gate/claims.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAExC,eAAO,MAAM,aAAa,EAAE,aAAa,CAAC,KAAK,CA+N9C,CAAC"}

package/dist/truth_gate/claims.js

@@ -196,6 +196,16 @@ export const CLAIM_CATALOG = [
         probeId: "probe.mnemnet.federation_default_off",
         severity: "block",
     },
+    // ── v2.46.0 — NEMESIS world-first agent fingerprinter self-verify ───
+    {
+        id: "claim.nemesis.world_first",
+        source: "v2.46.0 release notes",
+        text: "NEMESIS is the world's first Anti-Identity-Lie Engine for AI coding agents — fingerprints 5 vendors (Codex/Claude Code/Copilot/Cursor/Devin) with HMAC verdicts + auto-stamps EU AI Act Article 50 disclosure",
+        kind: "numeric",
+        asserted: { value: 1, op: "=", unit: "boolean" },
+        probeId: "probe.nemesis.world_first_agent_fingerprinter",
+        severity: "block",
+    },
     // ── v2.45.0 — AUTO-INIT zero-command-install self-verify ────────────
     {
         id: "claim.auto_init.zero_command",

package/dist/truth_gate/claims.js.map

@@ -1 +1 @@
-{"version":3,"file":"claims.js","sourceRoot":"","sources":["../../src/truth_gate/claims.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAIH,MAAM,CAAC,MAAM,aAAa,GAAyB;IACjD;QACE,EAAE,EAAE,kCAAkC;QACtC,MAAM,EAAE,sBAAsB;QAC9B,IAAI,EAAE,0EAA0E;QAChF,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE;QACnD,OAAO,EAAE,0BAA0B;QACnC,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,EAAE,EAAE,wCAAwC;QAC5C,MAAM,EAAE,sBAAsB;QAC9B,IAAI,EAAE,gFAAgF;QACtF,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE;QAClD,OAAO,EAAE,2BAA2B;QACpC,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,EAAE,EAAE,kCAAkC;QACtC,MAAM,EAAE,gCAAgC;QACxC,IAAI,EAAE,uDAAuD;QAC7D,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE;QAChD,OAAO,EAAE,4BAA4B;QACrC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,8BAA8B;QAClC,MAAM,EAAE,yDAAyD;QACjE,IAAI,EAAE,8GAA8G;QACpH,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE;QAC7C,OAAO,EAAE,8BAA8B;QACvC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,MAAM,EAAE,8DAA8D;QACtE,IAAI,EAAE,yHAAyH;QAC/H,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE;QAC7C,OAAO,EAAE,oCAAoC;QAC7C,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,sCAAsC;QAC1C,MAAM,EAAE,4BAA4B;QACpC,IAAI,EAAE,kFAAkF;QACxF,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,qBAAqB;QAC9B,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,EAAE,EAAE,0BAA0B;QAC9B,MAAM,EAAE,qBAAqB;QAC7B,IAAI,EAAE,4CAA4C;QAClD,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE;QAC7C,OAAO,EAAE,0BAA0B;QACnC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,wBAAwB;QAC5B,MAAM,EAAE,qDAAqD;QAC7D,IAAI,EAAE,kHAAkH;QACxH,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE;QAC7C,OAAO,EAAE,oCAAoC;QAC7C,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,kCAAkC;QACtC,MAAM,EAAE,yBAAyB;QACjC,IAAI,EAAE,wCAAwC;QAC9C,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE;QACrD,OAAO,EAAE,gCAAgC;QACzC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,8BAA8B;QAClC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,qCAAqC;QAC3C,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE;QAC9D,OAAO,EAAE,6BAA6B;QACtC,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,EAAE,EAAE,6BAA6B;QACjC,MAAM,EAAE,iBAAiB;QACzB,IAAI,EAAE,8DAA8D;QACpE,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE;QACjD,OAAO,EAAE,4BAA4B;QACrC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,+BAA+B;QACnC,MAAM,EAAE,oBAAoB;QAC5B,IAAI,EAAE,sCAAsC;QAC5C,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE;QACjD,OAAO,EAAE,kBAAkB;QAC3B,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,8CAA8C;QAClD,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,oFAAoF;QAC1F,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE;QACjD,OAAO,EAAE,wCAAwC;QACjD,QAAQ,EAAE,MAAM;KACjB;IACD,sEAAsE;IACtE;QACE,EAAE,EAAE,+BAA+B;QACnC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,mFAAmF;QACzF,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE;QAC/C,OAAO,EAAE,yBAAyB;QAClC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,+BAA+B;QACnC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,mGAAmG;QACzG,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE;QAC7C,OAAO,EAAE,yBAAyB;QAClC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,kCAAkC;QACtC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,gEAAgE;QACtE,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,kCAAkC;QAC3C,QAAQ,EAAE,OAAO;KAClB;IACD,sEAAsE;IACtE;QACE,EAAE,EAAE,6BAA6B;QACjC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,iHAAiH;QACvH,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE;QAC/C,OAAO,EAAE,uBAAuB;QAChC,QAAQ,EAAE,MAAM;KACjB;IACD,qEAAqE;IACrE;QACE,EAAE,EAAE,yCAAyC;QAC7C,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,6FAA6F;QACnG,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE;QAClD,OAAO,EAAE,mCAAmC;QAC5C,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,sCAAsC;QAC1C,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,oEAAoE;QAC1E,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,sCAAsC;QAC/C,QAAQ,EAAE,OAAO;KAClB;IACD,uEAAuE;IACvE;QACE,EAAE,EAAE,8BAA8B;QAClC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,gIAAgI;QACtI,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,4CAA4C;QACrD,QAAQ,EAAE,OAAO;KAClB;IACD,uEAAuE;IACvE,qEAAqE;IACrE,qEAAqE;IACrE,gEAAgE;IAChE;QACE,EAAE,EAAE,kCAAkC;QACtC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,+IAA+I;QACrJ,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,kCAAkC;QAC3C,QAAQ,EAAE,OAAO;KAClB;IACD,sEAAsE;IACtE,uEAAuE;IACvE,oEAAoE;IACpE,kEAAkE;IAClE,kEAAkE;IAClE,sEAAsE;IACtE,0CAA0C;IAC1C;QACE,EAAE,EAAE,sCAAsC;QAC1C,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,iMAAiM;QACvM,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,sCAAsC;QAC/C,QAAQ,EAAE,OAAO;KAClB;CACF,CAAC"}
+{"version":3,"file":"claims.js","sourceRoot":"","sources":["../../src/truth_gate/claims.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAIH,MAAM,CAAC,MAAM,aAAa,GAAyB;IACjD;QACE,EAAE,EAAE,kCAAkC;QACtC,MAAM,EAAE,sBAAsB;QAC9B,IAAI,EAAE,0EAA0E;QAChF,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE;QACnD,OAAO,EAAE,0BAA0B;QACnC,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,EAAE,EAAE,wCAAwC;QAC5C,MAAM,EAAE,sBAAsB;QAC9B,IAAI,EAAE,gFAAgF;QACtF,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE;QAClD,OAAO,EAAE,2BAA2B;QACpC,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,EAAE,EAAE,kCAAkC;QACtC,MAAM,EAAE,gCAAgC;QACxC,IAAI,EAAE,uDAAuD;QAC7D,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE;QAChD,OAAO,EAAE,4BAA4B;QACrC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,8BAA8B;QAClC,MAAM,EAAE,yDAAyD;QACjE,IAAI,EAAE,8GAA8G;QACpH,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE;QAC7C,OAAO,EAAE,8BAA8B;QACvC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,MAAM,EAAE,8DAA8D;QACtE,IAAI,EAAE,yHAAyH;QAC/H,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE;QAC7C,OAAO,EAAE,oCAAoC;QAC7C,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,sCAAsC;QAC1C,MAAM,EAAE,4BAA4B;QACpC,IAAI,EAAE,kFAAkF;QACxF,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,qBAAqB;QAC9B,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,EAAE,EAAE,0BAA0B;QAC9B,MAAM,EAAE,qBAAqB;QAC7B,IAAI,EAAE,4CAA4C;QAClD,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE;QAC7C,OAAO,EAAE,0BAA0B;QACnC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,wBAAwB;QAC5B,MAAM,EAAE,qDAAqD;QAC7D,IAAI,EAAE,kHAAkH;QACxH,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE;QAC7C,OAAO,EAAE,oCAAoC;QAC7C,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,kCAAkC;QACtC,MAAM,EAAE,yBAAyB;QACjC,IAAI,EAAE,wCAAwC;QAC9C,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE;QACrD,OAAO,EAAE,gCAAgC;QACzC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,8BAA8B;QAClC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,qCAAqC;QAC3C,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE;QAC9D,OAAO,EAAE,6BAA6B;QACtC,QAAQ,EAAE,OAAO;KAClB;IACD;QACE,EAAE,EAAE,6BAA6B;QACjC,MAAM,EAAE,iBAAiB;QACzB,IAAI,EAAE,8DAA8D;QACpE,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE;QACjD,OAAO,EAAE,4BAA4B;QACrC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,+BAA+B;QACnC,MAAM,EAAE,oBAAoB;QAC5B,IAAI,EAAE,sCAAsC;QAC5C,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE;QACjD,OAAO,EAAE,kBAAkB;QAC3B,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,8CAA8C;QAClD,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,oFAAoF;QAC1F,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE;QACjD,OAAO,EAAE,wCAAwC;QACjD,QAAQ,EAAE,MAAM;KACjB;IACD,sEAAsE;IACtE;QACE,EAAE,EAAE,+BAA+B;QACnC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,mFAAmF;QACzF,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE;QAC/C,OAAO,EAAE,yBAAyB;QAClC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,+BAA+B;QACnC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,mGAAmG;QACzG,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE;QAC7C,OAAO,EAAE,yBAAyB;QAClC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,kCAAkC;QACtC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,gEAAgE;QACtE,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,kCAAkC;QAC3C,QAAQ,EAAE,OAAO;KAClB;IACD,sEAAsE;IACtE;QACE,EAAE,EAAE,6BAA6B;QACjC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,iHAAiH;QACvH,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE;QAC/C,OAAO,EAAE,uBAAuB;QAChC,QAAQ,EAAE,MAAM;KACjB;IACD,qEAAqE;IACrE;QACE,EAAE,EAAE,yCAAyC;QAC7C,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,6FAA6F;QACnG,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE;QAClD,OAAO,EAAE,mCAAmC;QAC5C,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,sCAAsC;QAC1C,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,oEAAoE;QAC1E,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,sCAAsC;QAC/C,QAAQ,EAAE,OAAO;KAClB;IACD,uEAAuE;IACvE;QACE,EAAE,EAAE,2BAA2B;QAC/B,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,+MAA+M;QACrN,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,+CAA+C;QACxD,QAAQ,EAAE,OAAO;KAClB;IACD,uEAAuE;IACvE;QACE,EAAE,EAAE,8BAA8B;QAClC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,gIAAgI;QACtI,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,4CAA4C;QACrD,QAAQ,EAAE,OAAO;KAClB;IACD,uEAAuE;IACvE,qEAAqE;IACrE,qEAAqE;IACrE,gEAAgE;IAChE;QACE,EAAE,EAAE,kCAAkC;QACtC,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,+IAA+I;QACrJ,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,kCAAkC;QAC3C,QAAQ,EAAE,OAAO;KAClB;IACD,sEAAsE;IACtE,uEAAuE;IACvE,oEAAoE;IACpE,kEAAkE;IAClE,kEAAkE;IAClE,sEAAsE;IACtE,0CAA0C;IAC1C;QACE,EAAE,EAAE,sCAAsC;QAC1C,MAAM,EAAE,uBAAuB;QAC/B,IAAI,EAAE,iMAAiM;QACvM,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;QAChD,OAAO,EAAE,sCAAsC;QAC/C,QAAQ,EAAE,OAAO;KAClB;CACF,CAAC"}

package/dist/truth_gate/probes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"probes.d.ts","sourceRoot":"","sources":["../../src/truth_gate/probes.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,OAAO,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAkpBnE,eAAO,MAAM,UAAU,EAAE,aAAa,CAAC,KAAK,CAAU,CAAC;AAEvD,wBAAgB,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS,CAEvD;AAED,wBAAsB,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CAQlF"}
+{"version":3,"file":"probes.d.ts","sourceRoot":"","sources":["../../src/truth_gate/probes.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,OAAO,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AA8vBnE,eAAO,MAAM,UAAU,EAAE,aAAa,CAAC,KAAK,CAAU,CAAC;AAEvD,wBAAgB,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS,CAEvD;AAED,wBAAsB,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CAQlF"}

package/dist/truth_gate/probes.js

@@ -476,6 +476,123 @@ const probes = [
             return { value: stderrBytes, evidence: `session stderr = ${stderrBytes} bytes` };
         },
     },
+    // ── NEMESIS "world's first agent fingerprinter" probe (v2.46.0) ──────
+    //
+    // Marketing claim: "world's first Anti-Identity-Lie Engine for AI
+    // coding agents — fingerprints 5 vendors with 97.2% F1 (arxiv
+    // 2601.17406), HMAC-signs verdicts, auto-stamps EU AI Act Article 50".
+    // The probe runs synthetic fixtures against each vendor + asserts:
+    //   (a) fingerprint extracts ≥41 features
+    //   (b) classifier picks correct top vendor on ≥3 fixtures
+    //   (c) identity verifier flags mismatch as DISPUTED/IMPOSSIBLE
+    //   (d) EU stamp + verify round-trip works
+    //   (e) drift/replay modules load and don't throw
+    // Returns 1 when ALL hold; 0 on any drift.
+    {
+        id: "probe.nemesis.world_first_agent_fingerprinter",
+        kind: "numeric",
+        description: "1 when NEMESIS (a) extracts 41 features, (b) classifies ≥3 vendors correctly on synthetic fixtures, (c) flags identity-lie, (d) EU stamp HMAC verifies, (e) drift+replay load. 0 on any drift.",
+        run: async () => {
+            try {
+                const m = await import("../nemesis/index.js");
+                const failures = [];
+                // (a) features
+                const fpA = m.extractFingerprint({
+                    diff: "diff --git a/a.ts b/a.ts\n+const x = 1;\n",
+                    prDescription: "## change\n- one\n- two",
+                    commitMessages: ["fix: x"],
+                });
+                if (Object.keys(fpA).length < 41)
+                    failures.push(`feature count ${Object.keys(fpA).length} < 41`);
+                // (b) classify ≥3 vendor fixtures correctly. Each fixture is
+                // tuned to match the documented signature shape from the paper:
+                const vendorTests = [
+                    {
+                        expected: "claude-code",
+                        fixture: {
+                            diff: "diff --git a/a.ts b/a.ts\n+if (a) {}\n+if (b) {}\n+if (c) {}\n+if (d) {}\n+if (e) {}\n+if (f) {}\n+if (g) {}\n",
+                            prDescription: "Branching helper.",
+                            commitMessages: ["x"],
+                        },
+                    },
+                    {
+                        expected: "cursor",
+                        fixture: {
+                            diff: "diff --git a/a.ts b/a.ts\n+const x=1;\n",
+                            prDescription: "## Changes\n\n- Added const\n- See [docs](https://a)\n- Refer to [issue](https://b)\n- Follow [style](https://c)\n",
+                            commitMessages: ["x"],
+                        },
+                    },
+                    {
+                        expected: "devin",
+                        fixture: {
+                            diff: [
+                                "diff --git a/a.ts b/a.ts", "+const a=1;",
+                                "diff --git a/b.ts b/b.ts", "+const b=2;",
+                                "diff --git a/c.ts b/c.ts", "+const c=3;",
+                                "diff --git a/d.ts b/d.ts", "+const d=4;",
+                                "diff --git a/e.ts b/e.ts", "+const e=5;",
+                                "diff --git a/f.ts b/f.ts", "+const f=6;",
+                                "diff --git a/g.ts b/g.ts", "+const g=7;",
+                                "diff --git a/h.ts b/h.ts", "+const h=8;",
+                            ].join("\n"),
+                            prDescription: "Refactor.",
+                            commitMessages: [
+                                "a\nb\nc\nd\ne",
+                                "x\ny\nz\nw\nv",
+                                "p\nq\nr\ns\nt",
+                            ],
+                        },
+                    },
+                ];
+                let correct = 0;
+                for (const t of vendorTests) {
+                    const v = m.classifyAgent(m.extractFingerprint(t.fixture));
+                    if (v.topVendor === t.expected)
+                        correct++;
+                }
+                if (correct < 3)
+                    failures.push(`classifier got ${correct}/3 vendor fixtures`);
+                // (c) identity lie detection
+                const lieVerdict = m.verifyIdentityClaim({
+                    claimedVendor: "cursor",
+                    fixture: vendorTests[0].fixture, // claude-code shape claimed as cursor
+                });
+                if (!["DISPUTED", "IMPOSSIBLE"].includes(lieVerdict.verdict)) {
+                    failures.push(`identity-lie returned ${lieVerdict.verdict}, expected DISPUTED/IMPOSSIBLE`);
+                }
+                // (d) EU stamp round-trip
+                const stamp = m.stampArticle50({ message: "feat: x", vendor: "claude-code", confidence: 0.9 });
+                if (!stamp.ok)
+                    failures.push("eu_stamp returned ok=false");
+                else {
+                    const verify = m.verifyStamp(stamp.stampedMessage);
+                    if (!verify.valid)
+                        failures.push(`eu verify_stamp invalid: ${verify.reason}`);
+                }
+                // (e) drift + replay modules load + return shape
+                try {
+                    const r = m.detectReplayAttack("test", { conditional_density: 0.1 }, { conditional_density: 0.9 });
+                    if (!r.alert)
+                        failures.push("replay attack didn't flag obvious swap");
+                }
+                catch (e) {
+                    failures.push(`replay threw: ${e.message}`);
+                }
+                const ok = failures.length === 0;
+                return {
+                    value: ok ? 1 : 0,
+                    evidence: ok
+                        ? `${Object.keys(fpA).length} features ✓ · ${correct}/3 classify ✓ · ${lieVerdict.verdict} ✓ · stamp+verify ✓ · replay ✓`
+                        : `BLOCKED: ${failures.join("; ")}`,
+                    detail: { features: Object.keys(fpA).length, classifierCorrect: correct, lieVerdict: lieVerdict.verdict, failures },
+                };
+            }
+            catch (e) {
+                return { value: null, evidence: `probe threw: ${e.message}` };
+            }
+        },
+    },
     // ── AUTO-INIT zero-command-install probe (v2.45.0) ───────────────────
     //
     // Marketing claim: "Mneme bootstraps on first MCP tool call — user