@mneme-ai/core 2.45.0 → 2.47.0

package/dist/nemesis/classifier_calibrated.js

@@ -0,0 +1,166 @@
+/**
+ * v2.47.0 — CALIBRATED CLASSIFIER (production-grade).
+ *
+ * Replaces v2.46.0's fixed-weight heuristic with a per-vendor
+ * Mahalanobis-style log-likelihood score derived from the seed
+ * calibration corpus + the (opt-in) self-calibrating learning ledger.
+ *
+ * Algorithm:
+ *   For each vendor V with stats {feature_i: (mean_i, stdev_i)}:
+ *     logL(fp | V) = − Σ_i ((fp[i] − mean_i) / max(stdev_i, ε))²
+ *
+ *   Top vendor = argmax logL. Confidence = softmax(logL) of the top.
+ *
+ * Only DISCRIMINATIVE features are used (the ones with high inter-vendor
+ * variance) — others would just add noise. We compute discriminativeness
+ * dynamically per feature.
+ *
+ * Falls back to v2.46.0 heuristic classifier when seed stats unavailable
+ * (e.g. user has deleted the corpus). Defensive: never throws.
+ */
+import { seedStats, buildSeedCorpus } from "./calibration_corpus.js";
+import { classifyAgent as heuristicClassify } from "./classifier.js";
+import { extractFingerprint } from "./features.js";
+const EPSILON_FLOOR = 1e-3;
+/** Cap per-feature z² so a single zero-stdev mismatch can't dominate. */
+const Z_SQUARED_CAP = 100;
+/** EPSILON_FLOOR for any feature with stdev<= this threshold is set to 10% of mean (or floor). */
+function effectiveStdev(mean, stdev) {
+    if (stdev > EPSILON_FLOOR)
+        return stdev;
+    // Zero-stdev: scale to mean's magnitude so features with large means don't
+    // produce absurd z-scores. If mean is also tiny, use floor.
+    const relative = Math.abs(mean) * 0.10;
+    return Math.max(relative, EPSILON_FLOOR);
+}
+/**
+ * Compute discriminativeness per feature: ratio of cross-vendor mean
+ * variance to within-vendor variance. Higher = more discriminative.
+ * Features with discriminativeness < threshold are excluded from scoring.
+ */
+function discriminativeFeatures(statsMap, minDiscrim = 0.5) {
+    const featureKeys = new Set();
+    for (const s of statsMap.values())
+        for (const k of Object.keys(s.features))
+            featureKeys.add(k);
+    const out = [];
+    for (const k of featureKeys) {
+        const means = [];
+        const stdevs = [];
+        for (const s of statsMap.values()) {
+            const f = s.features[k];
+            if (!f)
+                continue;
+            means.push(f.mean);
+            stdevs.push(f.stdev);
+        }
+        if (means.length < 2)
+            continue;
+        const meanOfMeans = means.reduce((a, b) => a + b, 0) / means.length;
+        const meansVar = means.reduce((s, m) => s + (m - meanOfMeans) ** 2, 0) / means.length;
+        const meanStdev = stdevs.reduce((a, b) => a + b, 0) / stdevs.length;
+        const denom = meanStdev * meanStdev + EPSILON_FLOOR;
+        const discrim = meansVar / denom;
+        if (discrim >= minDiscrim)
+            out.push(k);
+    }
+    return out;
+}
+let _cachedDiscrim = null;
+function getDiscriminativeFeatures() {
+    if (_cachedDiscrim)
+        return _cachedDiscrim;
+    try {
+        _cachedDiscrim = discriminativeFeatures(seedStats());
+    }
+    catch {
+        _cachedDiscrim = [];
+    }
+    return _cachedDiscrim;
+}
+export function __resetCalibratedCacheForTest() { _cachedDiscrim = null; }
+/**
+ * Calibrated log-likelihood score per vendor. Pure deterministic.
+ */
+function scoreCalibrated(fp) {
+    const stats = (() => { try {
+        return seedStats();
+    }
+    catch {
+        return new Map();
+    } })();
+    if (stats.size === 0)
+        return { scores: {}, discrim: [] };
+    const discrim = getDiscriminativeFeatures();
+    if (discrim.length === 0)
+        return { scores: {}, discrim };
+    const scores = {};
+    const fpObj = fp;
+    for (const [vendor, vstats] of stats) {
+        let logL = 0;
+        for (const k of discrim) {
+            const f = vstats.features[k];
+            if (!f)
+                continue;
+            const sd = effectiveStdev(f.mean, f.stdev);
+            const z = (Number(fpObj[k] ?? 0) - f.mean) / sd;
+            const zSq = Math.min(Z_SQUARED_CAP, z * z);
+            logL -= zSq;
+        }
+        scores[vendor] = logL;
+    }
+    return { scores, discrim };
+}
+function softmaxTop(scores) {
+    const entries = Object.entries(scores);
+    if (entries.length === 0)
+        return { topVendor: "unknown", confidence: 0 };
+    const maxLogL = Math.max(...entries.map(([, v]) => v));
+    const exps = entries.map(([k, v]) => [k, Math.exp((v - maxLogL) / Math.max(1, entries.length))]);
+    const sum = exps.reduce((s, [, v]) => s + v, 0);
+    const sorted = exps.sort((a, b) => b[1] - a[1]);
+    const top = sorted[0];
+    return { topVendor: top[0], confidence: sum === 0 ? 0 : top[1] / sum };
+}
+/**
+ * Calibrated classification. Falls back to v2.46.0 heuristic when the
+ * calibration corpus is unavailable.
+ */
+export function classifyAgentCalibrated(fp) {
+    const { scores, discrim } = scoreCalibrated(fp);
+    if (Object.keys(scores).length === 0) {
+        // Fallback to heuristic; tag the reasoning so callers know
+        const fallback = heuristicClassify(fp);
+        return { ...fallback, reasoning: `heuristic fallback (no seed corpus): ${fallback.reasoning}` };
+    }
+    const { topVendor, confidence } = softmaxTop(scores);
+    const driving = discrim.slice(0, 3).join(", ");
+    return {
+        topVendor,
+        confidence,
+        scores,
+        reasoning: `calibrated log-likelihood over ${discrim.length} discriminative features (top: ${driving}); top vendor ${topVendor} (conf ${confidence.toFixed(2)})`,
+    };
+}
+export function evaluateSeedAccuracy() {
+    const entries = buildSeedCorpus();
+    const perVendor = {};
+    let total = 0;
+    let correct = 0;
+    for (const e of entries) {
+        const fp = extractFingerprint(e.fixture);
+        const v = classifyAgentCalibrated(fp);
+        const isCorrect = v.topVendor === e.vendor;
+        total++;
+        if (isCorrect)
+            correct++;
+        const pv = perVendor[e.vendor] ?? { total: 0, correct: 0, accuracy: 0 };
+        pv.total++;
+        if (isCorrect)
+            pv.correct++;
+        pv.accuracy = pv.correct / pv.total;
+        perVendor[e.vendor] = pv;
+    }
+    return { total, correct, accuracy: total === 0 ? 0 : correct / total, perVendor };
+}
+//# sourceMappingURL=classifier_calibrated.js.map

package/dist/nemesis/classifier_calibrated.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"classifier_calibrated.js","sourceRoot":"","sources":["../../src/nemesis/classifier_calibrated.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,EAAE,SAAS,EAAE,eAAe,EAAoB,MAAM,yBAAyB,CAAC;AACvF,OAAO,EAAE,aAAa,IAAI,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAEnD,MAAM,aAAa,GAAG,IAAI,CAAC;AAC3B,yEAAyE;AACzE,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,kGAAkG;AAClG,SAAS,cAAc,CAAC,IAAY,EAAE,KAAa;IACjD,IAAI,KAAK,GAAG,aAAa;QAAE,OAAO,KAAK,CAAC;IACxC,2EAA2E;IAC3E,4DAA4D;IAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACvC,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;AAC3C,CAAC;AAED;;;;GAIG;AACH,SAAS,sBAAsB,CAAC,QAAoC,EAAE,UAAU,GAAG,GAAG;IACpF,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,EAAE;QAAE,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;YAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC/F,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAClC,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YACxB,IAAI,CAAC,CAAC;gBAAE,SAAS;YACjB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACnB,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QAC/B,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;QACpE,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;QACtF,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;QACpE,MAAM,KAAK,GAAG,SAAS,GAAG,SAAS,GAAG,aAAa,CAAC;QACpD,MAAM,OAAO,GAAG,QAAQ,GAAG,KAAK,CAAC;QACjC,IAAI,OAAO,IAAI,UAAU;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,IAAI,cAAc,GAAoB,IAAI,CAAC;AAC3C,SAAS,yBAAyB;IAChC,IAAI,cAAc;QAAE,OAAO,cAAc,CAAC;IAC1C,IAAI,CAAC;QACH,cAAc,GAAG,sBAAsB,CAAC,SAAS,EAAE,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,cAAc,GAAG,EAAE,CAAC;IACtB,CAAC;IACD,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,6BAA6B,KAAW,cAAc,GAAG,IAAI,CAAC,CAAC,CAAC;AAEhF;;GAEG;AACH,SAAS,eAAe,CAAC,EAAe;IACtC,MAAM,KAAK,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QAAC,OAAO,SAAS,EAAE,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,GAAG,EAAyB,CAAC;IAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3G,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACzD,MAAM,OAAO,GAAG,yBAAyB,EAAE,CAAC;IAC5C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC;IACzD,MAAM,MAAM,GAAsC,EAAE,CAAC;IACrD,MAAM,KAAK,GAAG,EAAuC,CAAC;IACtD,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACrC,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC7B,IAAI,CAAC,CAAC;gBAAE,SAAS;YACjB,MAAM,EAAE,GAAG,cAAc,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;YAC3C,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YAChD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3C,IAAI,IAAI,GAAG,CAAC;QACd,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;IACxB,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,UAAU,CAAC,MAAyC;IAC3D,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAA8B,CAAC;IACpE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;IACzE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAuB,CAAC,CAAC;IACvH,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;IACvB,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC;AACzE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,EAAe;IACrD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC;IAChD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrC,2DAA2D;QAC3D,MAAM,QAAQ,GAAG,iBAAiB,CAAC,EAAE,CAAC,CAAC;QACvC,OAAO,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,wCAAwC,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC;IAClG,CAAC;IACD,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/C,OAAO;QACL,SAAS;QACT,UAAU;QACV,MAAM;QACN,SAAS,EAAE,kCAAkC,OAAO,CAAC,MAAM,kCAAkC,OAAO,iBAAiB,SAAS,UAAU,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG;KACjK,CAAC;AACJ,CAAC;AAkBD,MAAM,UAAU,oBAAoB;IAClC,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;IAClC,MAAM,SAAS,GAAgC,EAAE,CAAC;IAClD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,EAAE,GAAG,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,CAAC,GAAG,uBAAuB,CAAC,EAAE,CAAC,CAAC;QACtC,MAAM,SAAS,GAAG,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,MAAM,CAAC;QAC3C,KAAK,EAAE,CAAC;QACR,IAAI,SAAS;YAAE,OAAO,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACxE,EAAE,CAAC,KAAK,EAAE,CAAC;QACX,IAAI,SAAS;YAAE,EAAE,CAAC,OAAO,EAAE,CAAC;QAC5B,EAAE,CAAC,QAAQ,GAAG,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC;QACpC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;IAC3B,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,KAAK,EAAE,SAAS,EAAE,CAAC;AACpF,CAAC"}

package/dist/nemesis/drift_timeline.d.ts

@@ -0,0 +1,35 @@
+/**
+ * v2.46.0 — NEMESIS ORGAN 4: MODEL DRIFT TIMELINE.
+ *
+ * Records each fingerprint per vendor over time + computes variance.
+ * When a vendor's fingerprint distribution shifts past N standard
+ * deviations, NEMESIS surfaces "vendor X changed personality on Y".
+ *
+ * Ledger: `.mneme/nemesis/drift-<vendor>.jsonl` — one row per recorded
+ * fingerprint, capped at 200 most-recent rows per vendor.
+ */
+export interface DriftEntry {
+    at: string;
+    vendor: string;
+    fingerprint: Record<string, number>;
+}
+export interface VarianceResult {
+    feature: string;
+    vendor: string;
+    mean: number;
+    stdev: number;
+    /** Most recent value of the feature. */
+    latest: number;
+    /** Z-score of the latest vs the prior distribution. */
+    z: number;
+    driftDetected: boolean;
+    /** ISO timestamp of the drift event (the latest entry). */
+    driftAt?: string;
+}
+export declare function recordFingerprint(repoRoot: string, vendor: string, fingerprint: Record<string, number>): {
+    ok: boolean;
+    reason?: string;
+};
+export declare function readTimeline(repoRoot: string, vendor: string): DriftEntry[];
+export declare function computeVariance(repoRoot: string, vendor: string, feature: string): VarianceResult;
+//# sourceMappingURL=drift_timeline.d.ts.map

package/dist/nemesis/drift_timeline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"drift_timeline.d.ts","sourceRoot":"","sources":["../../src/nemesis/drift_timeline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAQH,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,wCAAwC;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,uDAAuD;IACvD,CAAC,EAAE,MAAM,CAAC;IACV,aAAa,EAAE,OAAO,CAAC;IACvB,2DAA2D;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAYD,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAoBzI;AAED,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,UAAU,EAAE,CAY3E;AAED,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,cAAc,CAyBjG"}

package/dist/nemesis/drift_timeline.js

@@ -0,0 +1,98 @@
+/**
+ * v2.46.0 — NEMESIS ORGAN 4: MODEL DRIFT TIMELINE.
+ *
+ * Records each fingerprint per vendor over time + computes variance.
+ * When a vendor's fingerprint distribution shifts past N standard
+ * deviations, NEMESIS surfaces "vendor X changed personality on Y".
+ *
+ * Ledger: `.mneme/nemesis/drift-<vendor>.jsonl` — one row per recorded
+ * fingerprint, capped at 200 most-recent rows per vendor.
+ */
+import { existsSync, mkdirSync, readFileSync, writeFileSync, appendFileSync } from "node:fs";
+import { join } from "node:path";
+const LEDGER_CAP = 200;
+const DRIFT_SIGMA_THRESHOLD = 3; // 3σ = "real" drift
+function dirOf(repoRoot) {
+    const dir = join(repoRoot, ".mneme", "nemesis");
+    if (!existsSync(dir)) {
+        try {
+            mkdirSync(dir, { recursive: true });
+        }
+        catch { /* */ }
+    }
+    return dir;
+}
+function safeVendor(v) {
+    return v.replace(/[^a-zA-Z0-9._-]/g, "_") || "anonymous";
+}
+export function recordFingerprint(repoRoot, vendor, fingerprint) {
+    try {
+        const ledger = join(dirOf(repoRoot), `drift-${safeVendor(vendor)}.jsonl`);
+        const entry = { at: new Date().toISOString(), vendor, fingerprint };
+        // Roll the ledger if it's at cap.
+        if (existsSync(ledger)) {
+            try {
+                const body = readFileSync(ledger, "utf8");
+                const lines = body.split("\n").filter(Boolean);
+                if (lines.length >= LEDGER_CAP) {
+                    const trimmed = lines.slice(-(LEDGER_CAP - 1));
+                    writeFileSync(ledger, trimmed.join("\n") + "\n");
+                }
+            }
+            catch { /* */ }
+        }
+        appendFileSync(ledger, JSON.stringify(entry) + "\n");
+        return { ok: true };
+    }
+    catch (e) {
+        return { ok: false, reason: e.message };
+    }
+}
+export function readTimeline(repoRoot, vendor) {
+    try {
+        const ledger = join(dirOf(repoRoot), `drift-${safeVendor(vendor)}.jsonl`);
+        if (!existsSync(ledger))
+            return [];
+        const body = readFileSync(ledger, "utf8");
+        const out = [];
+        for (const ln of body.split("\n")) {
+            if (!ln.trim())
+                continue;
+            try {
+                out.push(JSON.parse(ln));
+            }
+            catch { /* skip */ }
+        }
+        return out;
+    }
+    catch {
+        return [];
+    }
+}
+export function computeVariance(repoRoot, vendor, feature) {
+    const tl = readTimeline(repoRoot, vendor);
+    if (tl.length === 0) {
+        return { feature, vendor, mean: 0, stdev: 0, latest: 0, z: 0, driftDetected: false };
+    }
+    const values = tl.map((e) => Number(e.fingerprint[feature] ?? 0)).filter((n) => Number.isFinite(n));
+    if (values.length === 0) {
+        return { feature, vendor, mean: 0, stdev: 0, latest: 0, z: 0, driftDetected: false };
+    }
+    // Compute mean + stdev of all-but-latest, compare latest against that distribution.
+    const latestValue = values[values.length - 1];
+    const priorValues = values.slice(0, -1);
+    if (priorValues.length < 2) {
+        return { feature, vendor, mean: latestValue, stdev: 0, latest: latestValue, z: 0, driftDetected: false };
+    }
+    const mean = priorValues.reduce((a, b) => a + b, 0) / priorValues.length;
+    const variance = priorValues.reduce((s, v) => s + (v - mean) ** 2, 0) / priorValues.length;
+    const stdev = Math.sqrt(variance);
+    const z = stdev === 0 ? 0 : Math.abs(latestValue - mean) / stdev;
+    const driftDetected = z >= DRIFT_SIGMA_THRESHOLD && stdev > 0;
+    return {
+        feature, vendor, mean, stdev, latest: latestValue, z,
+        driftDetected,
+        driftAt: driftDetected ? tl[tl.length - 1].at : undefined,
+    };
+}
+//# sourceMappingURL=drift_timeline.js.map

package/dist/nemesis/drift_timeline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"drift_timeline.js","sourceRoot":"","sources":["../../src/nemesis/drift_timeline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC7F,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,UAAU,GAAG,GAAG,CAAC;AACvB,MAAM,qBAAqB,GAAG,CAAC,CAAC,CAAC,oBAAoB;AAsBrD,SAAS,KAAK,CAAC,QAAgB;IAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IAChD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAAC,IAAI,CAAC;YAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IACtF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,IAAI,WAAW,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,MAAc,EAAE,WAAmC;IACrG,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,SAAS,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC1E,MAAM,KAAK,GAAe,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QAChF,kCAAkC;QAClC,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAC/C,IAAI,KAAK,CAAC,MAAM,IAAI,UAAU,EAAE,CAAC;oBAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC;oBAC/C,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;gBACnD,CAAC;YACH,CAAC;YAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;QACnB,CAAC;QACD,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;QACrD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAG,CAAW,CAAC,OAAO,EAAE,CAAC;IACrD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAAgB,EAAE,MAAc;IAC3D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,SAAS,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC1E,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAiB,EAAE,CAAC;QAC7B,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE;gBAAE,SAAS;YACzB,IAAI,CAAC;gBAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAe,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,QAAgB,EAAE,MAAc,EAAE,OAAe;IAC/E,MAAM,EAAE,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1C,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpB,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;IACvF,CAAC;IACD,MAAM,MAAM,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACpG,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;IACvF,CAAC;IACD,oFAAoF;IACpF,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;IAC/C,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACxC,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;IAC3G,CAAC;IACD,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC;IACzE,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC;IAC3F,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC;IACjE,MAAM,aAAa,GAAG,CAAC,IAAI,qBAAqB,IAAI,KAAK,GAAG,CAAC,CAAC;IAC9D,OAAO;QACL,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QACpD,aAAa;QACb,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;KAC3D,CAAC;AACJ,CAAC"}

package/dist/nemesis/env_scan.d.ts

@@ -0,0 +1,40 @@
+/**
+ * v2.46.0 — NEMESIS ORGAN 1 addon: ENV-SCAN.
+ *
+ * Each AI coding agent sets a recognizable env var when it spawns
+ * child processes. Detecting these is the cheapest + most reliable
+ * vendor signal — zero false positives, zero ML needed.
+ *
+ * Public sources:
+ *   CLAUDECODE          = "1"        Claude Code
+ *   CLAUDE_CODE_*       =            Claude Code
+ *   CURSOR_AGENT        = "1"        Cursor
+ *   CURSOR_TRACE_ID                  Cursor
+ *   CONTINUE_*                       Continue.dev
+ *   GITHUB_COPILOT_*                 GitHub Copilot CLI
+ *   COPILOT_AGENT                    Copilot Workspace
+ *   AIDER_*                          Aider
+ *   GEMINI_CLI                       Gemini CLI
+ *   DEVIN_SESSION                    Devin
+ *   ANTHROPIC_API_KEY                Claude API
+ *   OPENAI_API_KEY                   OpenAI / Codex
+ *   CODER_*                          Coder
+ *   WINDSURF_*                       Windsurf / Codeium
+ *
+ * Pure deterministic; reads only the env object passed in (default
+ * process.env). NEVER throws.
+ */
+import type { VendorId } from "./types.js";
+export interface EnvScanResult {
+    vendor: VendorId;
+    /** Confidence ∈ [0, 1]. */
+    confidence: number;
+    /** Per-marker evidence. */
+    evidence: Array<{
+        key: string;
+        value: string;
+        vendor: VendorId;
+    }>;
+}
+export declare function scanEnv(env?: NodeJS.ProcessEnv | Record<string, string | undefined>): EnvScanResult;
+//# sourceMappingURL=env_scan.d.ts.map

package/dist/nemesis/env_scan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env_scan.d.ts","sourceRoot":"","sources":["../../src/nemesis/env_scan.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAyB3C,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,QAAQ,CAAC;IACjB,2BAA2B;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,2BAA2B;IAC3B,QAAQ,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,QAAQ,CAAA;KAAE,CAAC,CAAC;CACnE;AAED,wBAAgB,OAAO,CAAC,GAAG,GAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GAAG,aAAa,CA0BhH"}

package/dist/nemesis/env_scan.js

@@ -0,0 +1,74 @@
+/**
+ * v2.46.0 — NEMESIS ORGAN 1 addon: ENV-SCAN.
+ *
+ * Each AI coding agent sets a recognizable env var when it spawns
+ * child processes. Detecting these is the cheapest + most reliable
+ * vendor signal — zero false positives, zero ML needed.
+ *
+ * Public sources:
+ *   CLAUDECODE          = "1"        Claude Code
+ *   CLAUDE_CODE_*       =            Claude Code
+ *   CURSOR_AGENT        = "1"        Cursor
+ *   CURSOR_TRACE_ID                  Cursor
+ *   CONTINUE_*                       Continue.dev
+ *   GITHUB_COPILOT_*                 GitHub Copilot CLI
+ *   COPILOT_AGENT                    Copilot Workspace
+ *   AIDER_*                          Aider
+ *   GEMINI_CLI                       Gemini CLI
+ *   DEVIN_SESSION                    Devin
+ *   ANTHROPIC_API_KEY                Claude API
+ *   OPENAI_API_KEY                   OpenAI / Codex
+ *   CODER_*                          Coder
+ *   WINDSURF_*                       Windsurf / Codeium
+ *
+ * Pure deterministic; reads only the env object passed in (default
+ * process.env). NEVER throws.
+ */
+const MARKERS = [
+    { key: "CLAUDECODE", vendor: "claude-code", match: (v) => v === "1" || v.toLowerCase() === "true" },
+    { key: "CLAUDE_CODE_ENTRYPOINT", vendor: "claude-code" },
+    { key: "CLAUDE_CODE_SSE_PORT", vendor: "claude-code" },
+    { key: "CURSOR_AGENT", vendor: "cursor", match: (v) => v === "1" || v.toLowerCase() === "true" },
+    { key: "CURSOR_TRACE_ID", vendor: "cursor" },
+    { key: "COPILOT_AGENT", vendor: "copilot" },
+    { key: "GH_COPILOT_TOKEN", vendor: "copilot" },
+    { key: "GITHUB_COPILOT_CLI", vendor: "copilot" },
+    { key: "DEVIN_SESSION", vendor: "devin" },
+    { key: "DEVIN_API_KEY", vendor: "devin" },
+    // Codex CLI uses OpenAI's CLI ARG conventions but env shape is OPENAI_*
+    // We only flag codex when OPENAI_API_KEY + a CODEX-specific marker.
+    { key: "OPENAI_CODEX", vendor: "codex" },
+    { key: "CODEX_AGENT", vendor: "codex" },
+];
+export function scanEnv(env = process.env) {
+    const evidence = [];
+    const perVendor = {};
+    try {
+        for (const m of MARKERS) {
+            const v = env[m.key];
+            if (typeof v !== "string" || v.length === 0)
+                continue;
+            if (m.match && !m.match(v))
+                continue;
+            evidence.push({ key: m.key, value: v.slice(0, 32), vendor: m.vendor });
+            perVendor[m.vendor] = (perVendor[m.vendor] ?? 0) + 1;
+        }
+    }
+    catch { /* defensive */ }
+    if (evidence.length === 0) {
+        return { vendor: "unknown", confidence: 0, evidence: [] };
+    }
+    // Pick the vendor with the most distinct markers.
+    let top = "unknown";
+    let topN = 0;
+    for (const [v, n] of Object.entries(perVendor)) {
+        if ((n ?? 0) > topN) {
+            topN = n ?? 0;
+            top = v;
+        }
+    }
+    const total = Object.values(perVendor).reduce((a, b) => a + (b ?? 0), 0);
+    const confidence = total === 0 ? 0 : topN / total;
+    return { vendor: top, confidence, evidence };
+}
+//# sourceMappingURL=env_scan.js.map

package/dist/nemesis/env_scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env_scan.js","sourceRoot":"","sources":["../../src/nemesis/env_scan.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAUH,MAAM,OAAO,GAAgB;IAC3B,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE;IACnG,EAAE,GAAG,EAAE,wBAAwB,EAAE,MAAM,EAAE,aAAa,EAAE;IACxD,EAAE,GAAG,EAAE,sBAAsB,EAAE,MAAM,EAAE,aAAa,EAAE;IACtD,EAAE,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE;IAChG,EAAE,GAAG,EAAE,iBAAiB,EAAE,MAAM,EAAE,QAAQ,EAAE;IAC5C,EAAE,GAAG,EAAE,eAAe,EAAE,MAAM,EAAE,SAAS,EAAE;IAC3C,EAAE,GAAG,EAAE,kBAAkB,EAAE,MAAM,EAAE,SAAS,EAAE;IAC9C,EAAE,GAAG,EAAE,oBAAoB,EAAE,MAAM,EAAE,SAAS,EAAE;IAChD,EAAE,GAAG,EAAE,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE;IACzC,EAAE,GAAG,EAAE,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE;IACzC,wEAAwE;IACxE,oEAAoE;IACpE,EAAE,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE;IACxC,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE;CACxC,CAAC;AAUF,MAAM,UAAU,OAAO,CAAC,MAA8D,OAAO,CAAC,GAAG;IAC/F,MAAM,QAAQ,GAA8B,EAAE,CAAC;IAC/C,MAAM,SAAS,GAAsC,EAAE,CAAC;IACxD,IAAI,CAAC;QACH,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACrB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YACtD,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;gBAAE,SAAS;YACrC,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YACvE,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;IAE3B,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC5D,CAAC;IAED,kDAAkD;IAClD,IAAI,GAAG,GAAa,SAAS,CAAC;IAC9B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC;YAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;YAAC,GAAG,GAAG,CAAa,CAAC;QAAC,CAAC;IAC9D,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACzE,MAAM,UAAU,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC;IAClD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;AAC/C,CAAC"}

package/dist/nemesis/eu_ai_act_stamp.d.ts

@@ -0,0 +1,30 @@
+/**
+ * v2.46.0 — NEMESIS ORGAN 3: EU AI Act Article 50 AUTO-STAMPER.
+ *
+ * EU AI Act Article 50 enforceable 2 Aug 2026 requires machine-readable
+ * disclosure of AI-generated content. NEMESIS auto-appends a sentinel-
+ * bracketed block to commit messages that's:
+ *   - human-readable
+ *   - machine-parseable (single regex)
+ *   - HMAC-signed (tamper-evident; verifiable offline)
+ *   - locale-independent
+ *
+ * Format (appended to commit message body):
+ *
+ *   <!-- AI-GENERATED-CONTENT
+ *   regime=EU-AI-ACT-2024 article=50 vendor=claude-code confidence=0.98
+ *   content-type=text/x-source-code at=2026-05-24T08:32:11.444Z
+ *   hmac=7a6302153ee6a839...
+ *   -->
+ *
+ * Pure deterministic; never throws. Caller wires it into git pre-commit
+ * via `nemesis install-hook`.
+ */
+import type { Article50StampInput, StampResult, VerifyStampResult } from "./types.js";
+export declare function stampArticle50(input: Article50StampInput): StampResult;
+/**
+ * Parse a stamped message + HMAC-verify. Returns valid=false on any
+ * tamper / missing field / regex mismatch.
+ */
+export declare function verifyStamp(stampedMessage: string): VerifyStampResult;
+//# sourceMappingURL=eu_ai_act_stamp.d.ts.map

package/dist/nemesis/eu_ai_act_stamp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"eu_ai_act_stamp.d.ts","sourceRoot":"","sources":["../../src/nemesis/eu_ai_act_stamp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,KAAK,EACM,mBAAmB,EAAE,WAAW,EAAE,iBAAiB,EACpE,MAAM,YAAY,CAAC;AAmBpB,wBAAgB,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG,WAAW,CAkCtE;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,cAAc,EAAE,MAAM,GAAG,iBAAiB,CA+BrE"}

package/dist/nemesis/eu_ai_act_stamp.js

@@ -0,0 +1,116 @@
+/**
+ * v2.46.0 — NEMESIS ORGAN 3: EU AI Act Article 50 AUTO-STAMPER.
+ *
+ * EU AI Act Article 50 enforceable 2 Aug 2026 requires machine-readable
+ * disclosure of AI-generated content. NEMESIS auto-appends a sentinel-
+ * bracketed block to commit messages that's:
+ *   - human-readable
+ *   - machine-parseable (single regex)
+ *   - HMAC-signed (tamper-evident; verifiable offline)
+ *   - locale-independent
+ *
+ * Format (appended to commit message body):
+ *
+ *   <!-- AI-GENERATED-CONTENT
+ *   regime=EU-AI-ACT-2024 article=50 vendor=claude-code confidence=0.98
+ *   content-type=text/x-source-code at=2026-05-24T08:32:11.444Z
+ *   hmac=7a6302153ee6a839...
+ *   -->
+ *
+ * Pure deterministic; never throws. Caller wires it into git pre-commit
+ * via `nemesis install-hook`.
+ */
+import { createHmac } from "node:crypto";
+const HMAC_KEY = process.env["MNEME_NEMESIS_KEY"] ?? "MNEME-NEMESIS-DEFAULT-KEY-v2.46";
+const REGIME = "EU-AI-ACT-2024";
+const ARTICLE = "50";
+function canonicalStampBody(s, message) {
+    // Order matters for HMAC; we sort keys explicitly.
+    return JSON.stringify({
+        article: s.article,
+        at: s.at,
+        confidence: Number(s.confidence.toFixed(4)),
+        contentType: s.contentType,
+        message,
+        regime: s.regime,
+        vendor: s.vendor,
+    });
+}
+export function stampArticle50(input) {
+    if (!input || typeof input.vendor !== "string" || input.vendor.length === 0) {
+        return {
+            ok: false,
+            reason: "vendor is required (e.g. 'claude-code', 'codex', 'cursor')",
+            stampedMessage: input?.message ?? "",
+            stamp: {
+                at: "", vendor: "", confidence: 0, contentType: "text/x-source-code",
+                hmac: "", regime: REGIME, article: ARTICLE,
+            },
+        };
+    }
+    const at = new Date().toISOString();
+    const contentType = input.contentType ?? "text/x-source-code";
+    const confidence = Math.max(0, Math.min(1, input.confidence ?? 0));
+    const message = input.message ?? "";
+    const body = {
+        at, vendor: input.vendor, confidence, contentType, regime: REGIME, article: ARTICLE,
+    };
+    const hmac = createHmac("sha256", HMAC_KEY).update(canonicalStampBody(body, message)).digest("hex").slice(0, 32);
+    const stamp = { ...body, hmac };
+    const block = [
+        "",
+        "<!-- AI-GENERATED-CONTENT",
+        `regime=${REGIME} article=${ARTICLE} vendor=${input.vendor} confidence=${confidence.toFixed(2)}`,
+        `content-type=${contentType} at=${at}`,
+        `hmac=${hmac}`,
+        "-->",
+    ].join("\n");
+    return {
+        ok: true,
+        stampedMessage: message.endsWith("\n") ? message + block : message + "\n" + block,
+        stamp,
+    };
+}
+/**
+ * Parse a stamped message + HMAC-verify. Returns valid=false on any
+ * tamper / missing field / regex mismatch.
+ */
+export function verifyStamp(stampedMessage) {
+    if (!stampedMessage)
+        return { valid: false, reason: "empty input" };
+    const blockMatch = stampedMessage.match(/<!--\s*AI-GENERATED-CONTENT\s*([\s\S]*?)\s*-->/);
+    if (!blockMatch)
+        return { valid: false, reason: "no AI-GENERATED-CONTENT block found" };
+    const block = blockMatch[1];
+    const pick = (key) => {
+        const m = block.match(new RegExp(`(?:^|\\s)${key}=(\\S+)`));
+        return m ? m[1] : null;
+    };
+    const regime = pick("regime");
+    const article = pick("article");
+    const vendor = pick("vendor");
+    const confidence = pick("confidence");
+    const contentType = pick("content-type");
+    const at = pick("at");
+    const hmac = pick("hmac");
+    if (!regime || !article || !vendor || !confidence || !contentType || !at || !hmac) {
+        return { valid: false, reason: `missing fields in stamp block: regime=${!!regime} article=${!!article} vendor=${!!vendor} confidence=${!!confidence} contentType=${!!contentType} at=${!!at} hmac=${!!hmac}` };
+    }
+    if (regime !== REGIME)
+        return { valid: false, reason: `regime mismatch: expected ${REGIME}, got ${regime}` };
+    if (article !== ARTICLE)
+        return { valid: false, reason: `article mismatch: expected ${ARTICLE}, got ${article}` };
+    const confidenceNum = parseFloat(confidence);
+    if (!Number.isFinite(confidenceNum))
+        return { valid: false, reason: "confidence is not a number" };
+    // Recompute HMAC over the body + original message (everything before the block).
+    const message = stampedMessage.slice(0, blockMatch.index).replace(/\n+$/, "");
+    const body = {
+        at, vendor, confidence: confidenceNum, contentType, regime: REGIME, article: ARTICLE,
+    };
+    const expected = createHmac("sha256", HMAC_KEY).update(canonicalStampBody(body, message)).digest("hex").slice(0, 32);
+    if (expected !== hmac)
+        return { valid: false, reason: "HMAC mismatch — stamp was tampered" };
+    return { valid: true, parsed: { ...body, hmac } };
+}
+//# sourceMappingURL=eu_ai_act_stamp.js.map

package/dist/nemesis/eu_ai_act_stamp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"eu_ai_act_stamp.js","sourceRoot":"","sources":["../../src/nemesis/eu_ai_act_stamp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAKzC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,iCAAiC,CAAC;AACvF,MAAM,MAAM,GAAG,gBAAgB,CAAC;AAChC,MAAM,OAAO,GAAG,IAAI,CAAC;AAErB,SAAS,kBAAkB,CAAC,CAA+B,EAAE,OAAe;IAC1E,mDAAmD;IACnD,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC3C,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,OAAO;QACP,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,MAAM,EAAE,CAAC,CAAC,MAAM;KACjB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAA0B;IACvD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5E,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,4DAA4D;YACpE,cAAc,EAAE,KAAK,EAAE,OAAO,IAAI,EAAE;YACpC,KAAK,EAAE;gBACL,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE,oBAAoB;gBACpE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO;aAC3C;SACF,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACpC,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,oBAAoB,CAAC;IAC9D,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;IACpC,MAAM,IAAI,GAAiC;QACzC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO;KACpF,CAAC;IACF,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACjH,MAAM,KAAK,GAAmB,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG;QACZ,EAAE;QACF,2BAA2B;QAC3B,UAAU,MAAM,YAAY,OAAO,WAAW,KAAK,CAAC,MAAM,eAAe,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;QAChG,gBAAgB,WAAW,OAAO,EAAE,EAAE;QACtC,QAAQ,IAAI,EAAE;QACd,KAAK;KACN,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,OAAO;QACL,EAAE,EAAE,IAAI;QACR,cAAc,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,GAAG,IAAI,GAAG,KAAK;QACjF,KAAK;KACN,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,cAAsB;IAChD,IAAI,CAAC,cAAc;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IACpE,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;IAC1F,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,qCAAqC,EAAE,CAAC;IACxF,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,CAAC,GAAW,EAAiB,EAAE;QAC1C,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,YAAY,GAAG,SAAS,CAAC,CAAC,CAAC;QAC5D,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1B,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9B,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC;IACtC,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC;IACzC,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IACtB,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1B,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,IAAI,CAAC,WAAW,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QAClF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,yCAAyC,CAAC,CAAC,MAAM,YAAY,CAAC,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,eAAe,CAAC,CAAC,UAAU,gBAAgB,CAAC,CAAC,WAAW,OAAO,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;IACjN,CAAC;IACD,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,6BAA6B,MAAM,SAAS,MAAM,EAAE,EAAE,CAAC;IAC7G,IAAI,OAAO,KAAK,OAAO;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B,OAAO,SAAS,OAAO,EAAE,EAAE,CAAC;IAClH,MAAM,aAAa,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;IACnG,iFAAiF;IACjF,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9E,MAAM,IAAI,GAAiC;QACzC,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO;KACrF,CAAC;IACF,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACrH,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAC;IAC7F,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;AACpD,CAAC"}

package/dist/nemesis/features.d.ts

@@ -0,0 +1,13 @@
+/**
+ * v2.46.0 — NEMESIS ORGAN 1: FINGERPRINTER (41 features).
+ *
+ * Implements the 41-feature vector from arxiv 2601.17406 — pure
+ * deterministic extraction (no ML model needed for the EXTRACTOR; the
+ * CLASSIFIER applies the paper's feature weights to predict vendor).
+ *
+ * Each feature is documented in types.ts. Every value is a finite
+ * non-negative real. NEVER throws — empty inputs return zero-vector.
+ */
+import type { Fingerprint, Fixture } from "./types.js";
+export declare function extractFingerprint(fixture: Fixture): Fingerprint;
+//# sourceMappingURL=features.d.ts.map

package/dist/nemesis/features.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"features.d.ts","sourceRoot":"","sources":["../../src/nemesis/features.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAqDvD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,GAAG,WAAW,CA6GhE"}