@mneme-ai/core 2.52.0 → 2.54.0

package/dist/nemesis/lethe.js

@@ -0,0 +1,211 @@
+/**
+ * v2.54.0 — LETHE: GDPR forget primitive (Merkle exclusion proof).
+ *
+ * Greek mythology: river in Hades that erases memory.
+ *
+ * Problem: EU GDPR Art 17 (right to erasure) + AI-specific provisions
+ * require that personal data — including fingerprint-style behavioural
+ * markers — be REMOVABLE on request. But Mneme's HMAC chains are
+ * tamper-evident by design: removing rows breaks the chain.
+ *
+ * Solution (cryptographically rigorous, not just "delete"):
+ *   1. Build a Merkle tree over the chain rows.
+ *   2. To "forget" row R, REPLACE the row's leaf with `H("forgotten:" || nonce)`
+ *      where nonce is fresh per request.
+ *   3. Recompute the Merkle root from the modified leaves.
+ *   4. Issue a FORGET RECEIPT: signed proof tree showing
+ *      (a) the row WAS in the chain (by original leaf hash, kept ONLY as
+ *          the path to the root — never the content)
+ *      (b) the row is NOW erased (replacement leaf)
+ *      (c) the new Merkle root that subsequent verifiers can use
+ *      (d) timestamp + GDPR jurisdiction tag
+ *
+ * Verifiers downstream:
+ *   - Future readers see the new root + the FORGET ENVELOPE; they cannot
+ *     recover the original content (it was the only place stored).
+ *   - The exclusion proof is a few hundred bytes regardless of chain size.
+ *
+ * Composes: createHash + the existing HMAC-chained ledger pattern.
+ * Pure deterministic + defensive; never throws.
+ */
+import { existsSync, mkdirSync, readFileSync, writeFileSync, appendFileSync, copyFileSync } from "node:fs";
+import { join } from "node:path";
+import { createHash, createHmac, randomBytes } from "node:crypto";
+const LETHE_DIR = ".mneme/nemesis/lethe";
+const FORGET_LEDGER = "forget_receipts.jsonl";
+const KEY_ENV = "MNEME_LETHE_KEY";
+const DEFAULT_KEY = "mneme-lethe-v1";
+function keyOf() {
+    return process.env[KEY_ENV] ?? DEFAULT_KEY;
+}
+function leafOf(content) {
+    return createHash("sha256").update("leaf:").update(content).digest("hex");
+}
+function parentOf(left, right) {
+    return createHash("sha256").update("parent:").update(left).update(":").update(right).digest("hex");
+}
+/**
+ * Build a Merkle tree from a list of row contents. Odd-count layers
+ * duplicate the last element (standard Bitcoin-style construction).
+ */
+export function buildMerkleTree(rows) {
+    if (!Array.isArray(rows) || rows.length === 0) {
+        const empty = createHash("sha256").update("empty").digest("hex");
+        return { root: empty, leaves: [], count: 0 };
+    }
+    const leaves = rows.map(leafOf);
+    let level = [...leaves];
+    while (level.length > 1) {
+        const next = [];
+        for (let i = 0; i < level.length; i += 2) {
+            const a = level[i];
+            const b = i + 1 < level.length ? level[i + 1] : level[i];
+            next.push(parentOf(a, b));
+        }
+        level = next;
+    }
+    return { root: level[0], leaves, count: rows.length };
+}
+/**
+ * Build an inclusion proof for the leaf at `index`.
+ * Returns the sibling path from the leaf up to (but not including) the root.
+ */
+export function buildInclusionProof(rows, index) {
+    if (!Array.isArray(rows) || index < 0 || index >= rows.length)
+        return null;
+    const leaves = rows.map(leafOf);
+    const leafHash = leaves[index];
+    let level = [...leaves];
+    let pos = index;
+    const proof = [];
+    while (level.length > 1) {
+        const isLeft = pos % 2 === 0;
+        const siblingIdx = isLeft ? pos + 1 : pos - 1;
+        const sibling = level[siblingIdx] ?? level[pos];
+        proof.push({ sibling, position: isLeft ? "left" : "right" });
+        const next = [];
+        for (let i = 0; i < level.length; i += 2) {
+            const a = level[i];
+            const b = i + 1 < level.length ? level[i + 1] : level[i];
+            next.push(parentOf(a, b));
+        }
+        level = next;
+        pos = Math.floor(pos / 2);
+    }
+    return { proof, root: level[0], leafHash };
+}
+/** Verify an inclusion proof. Pure. */
+export function verifyInclusionProof(leafHash, proof, expectedRoot) {
+    if (typeof leafHash !== "string" || !Array.isArray(proof))
+        return false;
+    let cur = leafHash;
+    for (const step of proof) {
+        if (step.position === "left")
+            cur = parentOf(cur, step.sibling);
+        else
+            cur = parentOf(step.sibling, cur);
+    }
+    return cur === expectedRoot;
+}
+function hmacOf(body) {
+    return createHmac("sha256", keyOf()).update(JSON.stringify(body)).digest("hex");
+}
+function forgetLeaf(nonce) {
+    return createHash("sha256").update("forgotten:").update(nonce).digest("hex");
+}
+/**
+ * Read a JSONL ledger + perform GDPR forget on a specific row. Pure
+ * cryptographic operation; ledger rewrite + backup are best-effort.
+ */
+export function forgetRow(input) {
+    try {
+        const p = join(input.repoRoot, input.ledgerRelative);
+        if (!existsSync(p))
+            return { ok: false, reason: `ledger not found: ${p}` };
+        const rows = readFileSync(p, "utf8").split("\n").filter((l) => l.trim());
+        if (input.rowIndex < 0 || input.rowIndex >= rows.length) {
+            return { ok: false, reason: `row ${input.rowIndex} out of range (ledger has ${rows.length} rows)` };
+        }
+        const originalTree = buildMerkleTree(rows);
+        const inclusion = buildInclusionProof(rows, input.rowIndex);
+        if (!inclusion)
+            return { ok: false, reason: "failed to build inclusion proof" };
+        const nonce = randomBytes(16).toString("hex");
+        const replacementHash = forgetLeaf(nonce);
+        const newRows = [...rows];
+        // Replace with a sentinel that's parseable + non-PII
+        const sentinel = JSON.stringify({ at: new Date().toISOString(), forgotten: true, leafHash: replacementHash, jurisdiction: input.jurisdiction ?? "EU-GDPR-Art17" });
+        newRows[input.rowIndex] = sentinel;
+        const newTree = buildMerkleTree(newRows);
+        const bodyForHmac = {
+            at: new Date().toISOString(),
+            jurisdiction: input.jurisdiction ?? "EU-GDPR-Art17",
+            ledger: input.ledgerRelative,
+            forgottenIndex: input.rowIndex,
+            originalLeafHash: inclusion.leafHash,
+            replacementLeafHash: replacementHash,
+            inclusionProof: inclusion.proof,
+            originalRoot: originalTree.root,
+            newRoot: newTree.root,
+        };
+        const receipt = { ...bodyForHmac, hmac: hmacOf(bodyForHmac) };
+        if (input.dryRun) {
+            return { ok: true, receipt, reason: "dry-run: receipt built, ledger untouched" };
+        }
+        // Backup + rewrite
+        const backupPath = p + ".pre-lethe.bak";
+        try {
+            copyFileSync(p, backupPath);
+        }
+        catch { /* */ }
+        try {
+            writeFileSync(p, newRows.join("\n") + "\n");
+        }
+        catch (e) {
+            return { ok: false, reason: `ledger rewrite failed: ${e.message}` };
+        }
+        // Append receipt to forget ledger
+        try {
+            const dir = join(input.repoRoot, LETHE_DIR);
+            if (!existsSync(dir))
+                mkdirSync(dir, { recursive: true });
+            appendFileSync(join(dir, FORGET_LEDGER), JSON.stringify(receipt) + "\n");
+        }
+        catch { /* */ }
+        return { ok: true, receipt, newLedgerPath: p, backupPath, reason: `row ${input.rowIndex} forgotten; old root ${originalTree.root.slice(0, 8)}… → new root ${newTree.root.slice(0, 8)}…` };
+    }
+    catch (e) {
+        return { ok: false, reason: `forget failed: ${e.message}` };
+    }
+}
+/** Verify a forget receipt cryptographically — does the inclusion proof
+ *  reconstruct the original root + does the HMAC match? Pure. */
+export function verifyForgetReceipt(receipt) {
+    if (!receipt || typeof receipt.hmac !== "string")
+        return { ok: false, reason: "missing hmac" };
+    const { hmac, ...body } = receipt;
+    const expectedHmac = hmacOf(body);
+    if (expectedHmac !== hmac)
+        return { ok: false, reason: "hmac mismatch" };
+    const recoveredRoot = verifyInclusionProof(receipt.originalLeafHash, receipt.inclusionProof, receipt.originalRoot);
+    if (!recoveredRoot)
+        return { ok: false, reason: "inclusion proof does not reconstruct original root" };
+    return { ok: true, reason: "receipt verified — row was in chain + has been forgotten + new root computed correctly" };
+}
+/** List all forget receipts in this repo. */
+export function listForgetReceipts(repoRoot) {
+    const p = join(repoRoot, LETHE_DIR, FORGET_LEDGER);
+    if (!existsSync(p))
+        return [];
+    const out = [];
+    for (const line of readFileSync(p, "utf8").split("\n")) {
+        if (!line.trim())
+            continue;
+        try {
+            out.push(JSON.parse(line));
+        }
+        catch { /* skip */ }
+    }
+    return out;
+}
+//# sourceMappingURL=lethe.js.map

package/dist/nemesis/lethe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lethe.js","sourceRoot":"","sources":["../../src/nemesis/lethe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC3G,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAElE,MAAM,SAAS,GAAG,sBAAsB,CAAC;AACzC,MAAM,aAAa,GAAG,uBAAuB,CAAC;AAC9C,MAAM,OAAO,GAAG,iBAAiB,CAAC;AAClC,MAAM,WAAW,GAAG,gBAAgB,CAAC;AAErC,SAAS,KAAK;IACZ,OAAO,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,WAAW,CAAC;AAC7C,CAAC;AAED,SAAS,MAAM,CAAC,OAAe;IAC7B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,KAAa;IAC3C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACrG,CAAC;AAkBD;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,IAAc;IAC5C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9C,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACjE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAC/C,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC;IACxB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;YACpB,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;YAC3D,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC;QACD,KAAK,GAAG,IAAI,CAAC;IACf,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;AACzD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAc,EAAE,KAAa;IAC/D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAC3E,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAE,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC;IACxB,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,MAAM,KAAK,GAAsB,EAAE,CAAC;IACpC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;QAC7B,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,GAAG,CAAE,CAAC;QACjD,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;YACpB,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;YAC3D,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC;QACD,KAAK,GAAG,IAAI,CAAC;QACb,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,QAAQ,EAAE,CAAC;AAC9C,CAAC;AAED,uCAAuC;AACvC,MAAM,UAAU,oBAAoB,CAClC,QAAgB,EAAE,KAAwB,EAAE,YAAoB;IAEhE,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxE,IAAI,GAAG,GAAG,QAAQ,CAAC;IACnB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,QAAQ,KAAK,MAAM;YAAE,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;;YAC3D,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,GAAG,KAAK,YAAY,CAAC;AAC9B,CAAC;AA6BD,SAAS,MAAM,CAAC,IAAY;IAC1B,OAAO,UAAU,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClF,CAAC;AAoBD,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC/E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,KAAkB;IAC1C,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;QACrD,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,CAAC,EAAE,EAAE,CAAC;QAC3E,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACzE,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACxD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,KAAK,CAAC,QAAQ,6BAA6B,IAAI,CAAC,MAAM,QAAQ,EAAE,CAAC;QACtG,CAAC;QACD,MAAM,YAAY,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC5D,IAAI,CAAC,SAAS;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;QAEhF,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,eAAe,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;QAC1B,qDAAqD;QACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,eAAe,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,eAAe,EAAE,CAAC,CAAC;QACnK,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC;QACnC,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QAEzC,MAAM,WAAW,GAAgC;YAC/C,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,eAAe;YACnD,MAAM,EAAE,KAAK,CAAC,cAAc;YAC5B,cAAc,EAAE,KAAK,CAAC,QAAQ;YAC9B,gBAAgB,EAAE,SAAS,CAAC,QAAQ;YACpC,mBAAmB,EAAE,eAAe;YACpC,cAAc,EAAE,SAAS,CAAC,KAAK;YAC/B,YAAY,EAAE,YAAY,CAAC,IAAI;YAC/B,OAAO,EAAE,OAAO,CAAC,IAAI;SACtB,CAAC;QACF,MAAM,OAAO,GAAkB,EAAE,GAAG,WAAW,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;QAE7E,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,0CAA0C,EAAE,CAAC;QACnF,CAAC;QAED,mBAAmB;QACnB,MAAM,UAAU,GAAG,CAAC,GAAG,gBAAgB,CAAC;QACxC,IAAI,CAAC;YAAC,YAAY,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;QACpD,IAAI,CAAC;YAAC,aAAa,CAAC,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YAC9D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA2B,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC;QACjF,CAAC;QACD,kCAAkC;QAClC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YAC5C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;QAC3E,CAAC;QAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;QACjB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,KAAK,CAAC,QAAQ,wBAAwB,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,gBAAgB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;IAC5L,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAmB,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC;IACzE,CAAC;AACH,CAAC;AAED;iEACiE;AACjE,MAAM,UAAU,mBAAmB,CAAC,OAAsB;IACxD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAC/F,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAClC,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,YAAY,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IACzE,MAAM,aAAa,GAAG,oBAAoB,CAAC,OAAO,CAAC,gBAAgB,EAAE,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IACnH,IAAI,CAAC,aAAa;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oDAAoD,EAAE,CAAC;IACvG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,wFAAwF,EAAE,CAAC;AACxH,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,kBAAkB,CAAC,QAAgB;IACjD,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;IACnD,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAC9B,MAAM,GAAG,GAAoB,EAAE,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,SAAS;QAC3B,IAAI,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAkB,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/nemesis/nimbus.d.ts

@@ -0,0 +1,117 @@
+/**
+ * v2.54.0 — NIMBUS: federated trust mesh primitive.
+ *
+ * Latin: cloud / aura. Per-org leaderboards + cross-org reputation
+ * transfer, gated by CONSENT FABRIC.
+ *
+ * Design (network-effects-first):
+ *   Each Mneme installation can publish a signed LEADERBOARD CARD
+ *   summarising the org's TRUSTed primitives:
+ *     - COLOSSEUM top-5 vendors + ELO scores
+ *     - HONEST MIRROR per-vendor false-rate windowed lower bound
+ *     - NEMESIS dispute count
+ *     - Org-level consent + scope (which artifacts shareable)
+ *
+ *   Consumers subscribe to other orgs' cards + compute weighted
+ *   cross-org reputation. The trust mesh is a federation, not a
+ *   central server.
+ *
+ *   v2.54 ships the LOCAL pub/sub primitive (no network). Network
+ *   transport is a future extension via the existing bridge.
+ *
+ * Privacy: only AGGREGATED scores cross the boundary. Per-commit
+ * fingerprints + raw activity never leave the org.
+ *
+ * Composes: createHmac + the existing leaderboard / mirror primitives.
+ * Pure deterministic + defensive; never throws.
+ */
+export interface NimbusVendorEntry {
+    vendor: string;
+    elo?: number;
+    falseRateLB?: number;
+    /** Sample size — readers can weight by N. */
+    n?: number;
+}
+export interface NimbusCard {
+    /** Anonymized org identifier (HMAC of git-remote or user-set tag). */
+    orgFingerprint: string;
+    at: string;
+    /** Top vendors by ELO (from COLOSSEUM). */
+    topByElo: NimbusVendorEntry[];
+    /** Vendors by lowest false-rate LB (from HONEST MIRROR / BOUNTY). */
+    topByHonesty: NimbusVendorEntry[];
+    /** Consent fields — what may consumers do with this card. */
+    consent: {
+        sharedScopes: string[];
+        expiresAt: string;
+        /** Revocation URI (if any). */
+        revocationRef?: string;
+    };
+    /** Optional sticky note for human readers. */
+    note?: string;
+    /** Card-level HMAC. */
+    hmac: string;
+}
+export interface PublishInput {
+    repoRoot: string;
+    orgTag: string;
+    topByElo?: NimbusVendorEntry[];
+    topByHonesty?: NimbusVendorEntry[];
+    sharedScopes?: string[];
+    expiresAtIso?: string;
+    revocationRef?: string;
+    note?: string;
+    persist?: boolean;
+}
+export interface PublishResult {
+    ok: boolean;
+    card?: NimbusCard;
+    path?: string;
+    reason: string;
+}
+/**
+ * Publish a NIMBUS card to the local pub-store. Pure: card is just a
+ * signed JSON envelope; transport to other orgs is the caller's job
+ * (HTTP / git / file copy / etc).
+ */
+export declare function publishCard(input: PublishInput): PublishResult;
+/** Verify a NIMBUS card's HMAC + expiry. Pure. */
+export declare function verifyCard(card: NimbusCard): {
+    ok: boolean;
+    expired: boolean;
+    reason: string;
+};
+export interface SubscriptionEntry {
+    at: string;
+    orgFingerprint: string;
+    card: NimbusCard;
+    /** Caller's local trust weight for this org (0..1). */
+    trustWeight: number;
+}
+export interface SubscribeInput {
+    repoRoot: string;
+    card: NimbusCard;
+    trustWeight?: number;
+    persist?: boolean;
+}
+export declare function subscribeCard(input: SubscribeInput): {
+    ok: boolean;
+    entry?: SubscriptionEntry;
+    reason: string;
+};
+/**
+ * Compute cross-org weighted reputation: per vendor, weighted average
+ * of (ELO + 1/(1+falseRateLB)) across all subscribed cards.
+ * Returns a ranked list with confidence.
+ */
+export interface CrossOrgReputation {
+    vendor: string;
+    weightedScore: number;
+    contributingOrgs: number;
+    /** Sum of trustWeights — proxy for confidence. */
+    totalWeight: number;
+}
+export declare function computeCrossOrgReputation(repoRoot: string): CrossOrgReputation[];
+export declare function listPublished(repoRoot: string): NimbusCard[];
+export declare function listSubscriptions(repoRoot: string): SubscriptionEntry[];
+//# sourceMappingURL=nimbus.d.ts.map

package/dist/nemesis/nimbus.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nimbus.d.ts","sourceRoot":"","sources":["../../src/nemesis/nimbus.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAgBH,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,6CAA6C;IAC7C,CAAC,CAAC,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,UAAU;IACzB,sEAAsE;IACtE,cAAc,EAAE,MAAM,CAAC;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,2CAA2C;IAC3C,QAAQ,EAAE,iBAAiB,EAAE,CAAC;IAC9B,qEAAqE;IACrE,YAAY,EAAE,iBAAiB,EAAE,CAAC;IAClC,6DAA6D;IAC7D,OAAO,EAAE;QACP,YAAY,EAAE,MAAM,EAAE,CAAC;QACvB,SAAS,EAAE,MAAM,CAAC;QAClB,+BAA+B;QAC/B,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,CAAC;IACF,8CAA8C;IAC9C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uBAAuB;IACvB,IAAI,EAAE,MAAM,CAAC;CACd;AAMD,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAC/B,YAAY,CAAC,EAAE,iBAAiB,EAAE,CAAC;IACnC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,YAAY,GAAG,aAAa,CAkC9D;AAED,kDAAkD;AAClD,wBAAgB,UAAU,CAAC,IAAI,EAAE,UAAU,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAQ9F;AAMD,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,UAAU,CAAC;IACjB,uDAAuD;IACvD,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,UAAU,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,cAAc,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,iBAAiB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAuB/G;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,kDAAkD;IAClD,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,GAAG,kBAAkB,EAAE,CA0ChF;AAED,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,UAAU,EAAE,CAS5D;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,iBAAiB,EAAE,CASvE"}

package/dist/nemesis/nimbus.js

@@ -0,0 +1,208 @@
+/**
+ * v2.54.0 — NIMBUS: federated trust mesh primitive.
+ *
+ * Latin: cloud / aura. Per-org leaderboards + cross-org reputation
+ * transfer, gated by CONSENT FABRIC.
+ *
+ * Design (network-effects-first):
+ *   Each Mneme installation can publish a signed LEADERBOARD CARD
+ *   summarising the org's TRUSTed primitives:
+ *     - COLOSSEUM top-5 vendors + ELO scores
+ *     - HONEST MIRROR per-vendor false-rate windowed lower bound
+ *     - NEMESIS dispute count
+ *     - Org-level consent + scope (which artifacts shareable)
+ *
+ *   Consumers subscribe to other orgs' cards + compute weighted
+ *   cross-org reputation. The trust mesh is a federation, not a
+ *   central server.
+ *
+ *   v2.54 ships the LOCAL pub/sub primitive (no network). Network
+ *   transport is a future extension via the existing bridge.
+ *
+ * Privacy: only AGGREGATED scores cross the boundary. Per-commit
+ * fingerprints + raw activity never leave the org.
+ *
+ * Composes: createHmac + the existing leaderboard / mirror primitives.
+ * Pure deterministic + defensive; never throws.
+ */
+import { existsSync, mkdirSync, readFileSync, writeFileSync, appendFileSync } from "node:fs";
+import { join } from "node:path";
+import { createHmac } from "node:crypto";
+const NIMBUS_DIR = ".mneme/nemesis/nimbus";
+const PUBLISHED_FILE = "published_cards.jsonl";
+const SUBSCRIPTIONS_FILE = "subscriptions.jsonl";
+const KEY_ENV = "MNEME_NIMBUS_KEY";
+const DEFAULT_KEY = "mneme-nimbus-v1";
+function keyOf() {
+    return process.env[KEY_ENV] ?? DEFAULT_KEY;
+}
+function hmacOf(body) {
+    return createHmac("sha256", keyOf()).update(JSON.stringify(body)).digest("hex");
+}
+/**
+ * Publish a NIMBUS card to the local pub-store. Pure: card is just a
+ * signed JSON envelope; transport to other orgs is the caller's job
+ * (HTTP / git / file copy / etc).
+ */
+export function publishCard(input) {
+    try {
+        if (!input || !input.orgTag)
+            return { ok: false, reason: "orgTag required" };
+        const orgFingerprint = createHmac("sha256", keyOf()).update("org:").update(input.orgTag).digest("hex").slice(0, 16);
+        const at = new Date().toISOString();
+        const expiresAt = input.expiresAtIso ?? new Date(Date.now() + 90 * 86_400_000).toISOString();
+        const cardBody = {
+            orgFingerprint,
+            at,
+            topByElo: input.topByElo ?? [],
+            topByHonesty: input.topByHonesty ?? [],
+            consent: {
+                sharedScopes: input.sharedScopes ?? ["leaderboard:read"],
+                expiresAt,
+                revocationRef: input.revocationRef,
+            },
+            note: input.note,
+        };
+        const card = { ...cardBody, hmac: hmacOf(cardBody) };
+        if (input.persist !== false) {
+            try {
+                const dir = join(input.repoRoot, NIMBUS_DIR);
+                if (!existsSync(dir))
+                    mkdirSync(dir, { recursive: true });
+                const p = join(dir, PUBLISHED_FILE);
+                appendFileSync(p, JSON.stringify(card) + "\n");
+                return { ok: true, card, path: p, reason: `card published to ${p}` };
+            }
+            catch (e) {
+                return { ok: true, card, reason: `card built but persist failed: ${e.message}` };
+            }
+        }
+        return { ok: true, card, reason: "card built (no persist)" };
+    }
+    catch (e) {
+        return { ok: false, reason: `publish failed: ${e.message}` };
+    }
+}
+/** Verify a NIMBUS card's HMAC + expiry. Pure. */
+export function verifyCard(card) {
+    if (!card || typeof card.hmac !== "string")
+        return { ok: false, expired: false, reason: "missing card or hmac" };
+    const { hmac, ...body } = card;
+    const expected = hmacOf(body);
+    if (expected !== hmac)
+        return { ok: false, expired: false, reason: "hmac mismatch" };
+    const expired = Date.parse(card.consent.expiresAt) < Date.now();
+    if (expired)
+        return { ok: false, expired: true, reason: "card expired" };
+    return { ok: true, expired: false, reason: "card verified + within expiry" };
+}
+export function subscribeCard(input) {
+    try {
+        if (!input || !input.card)
+            return { ok: false, reason: "card required" };
+        const v = verifyCard(input.card);
+        if (!v.ok)
+            return { ok: false, reason: `card refused: ${v.reason}` };
+        const trustWeight = typeof input.trustWeight === "number" ? Math.max(0, Math.min(1, input.trustWeight)) : 0.5;
+        const entry = {
+            at: new Date().toISOString(),
+            orgFingerprint: input.card.orgFingerprint,
+            card: input.card,
+            trustWeight,
+        };
+        if (input.persist !== false) {
+            try {
+                const dir = join(input.repoRoot, NIMBUS_DIR);
+                if (!existsSync(dir))
+                    mkdirSync(dir, { recursive: true });
+                appendFileSync(join(dir, SUBSCRIPTIONS_FILE), JSON.stringify(entry) + "\n");
+            }
+            catch { /* */ }
+        }
+        return { ok: true, entry, reason: "card subscribed + verified" };
+    }
+    catch (e) {
+        return { ok: false, reason: `subscribe failed: ${e.message}` };
+    }
+}
+export function computeCrossOrgReputation(repoRoot) {
+    const p = join(repoRoot, NIMBUS_DIR, SUBSCRIPTIONS_FILE);
+    if (!existsSync(p))
+        return [];
+    const entries = [];
+    for (const line of readFileSync(p, "utf8").split("\n")) {
+        if (!line.trim())
+            continue;
+        try {
+            entries.push(JSON.parse(line));
+        }
+        catch { /* */ }
+    }
+    // Aggregate
+    const acc = new Map();
+    for (const e of entries) {
+        const w = e.trustWeight;
+        const seen = new Set();
+        for (const v of e.card.topByElo) {
+            const score = (v.elo ?? 1200) / 2000; // normalize to ~0..1
+            const cur = acc.get(v.vendor) ?? { weightedScoreSum: 0, orgs: new Set(), totalWeight: 0 };
+            cur.weightedScoreSum += score * w;
+            cur.totalWeight += w;
+            cur.orgs.add(e.orgFingerprint);
+            acc.set(v.vendor, cur);
+            seen.add(v.vendor);
+        }
+        for (const v of e.card.topByHonesty) {
+            if (seen.has(v.vendor))
+                continue;
+            const score = 1 / (1 + (v.falseRateLB ?? 0.5));
+            const cur = acc.get(v.vendor) ?? { weightedScoreSum: 0, orgs: new Set(), totalWeight: 0 };
+            cur.weightedScoreSum += score * w;
+            cur.totalWeight += w;
+            cur.orgs.add(e.orgFingerprint);
+            acc.set(v.vendor, cur);
+        }
+    }
+    const out = [];
+    for (const [vendor, a] of acc) {
+        out.push({
+            vendor,
+            weightedScore: a.totalWeight > 0 ? +(a.weightedScoreSum / a.totalWeight).toFixed(3) : 0,
+            contributingOrgs: a.orgs.size,
+            totalWeight: +a.totalWeight.toFixed(3),
+        });
+    }
+    return out.sort((a, b) => b.weightedScore - a.weightedScore);
+}
+export function listPublished(repoRoot) {
+    const p = join(repoRoot, NIMBUS_DIR, PUBLISHED_FILE);
+    if (!existsSync(p))
+        return [];
+    const out = [];
+    for (const line of readFileSync(p, "utf8").split("\n")) {
+        if (!line.trim())
+            continue;
+        try {
+            out.push(JSON.parse(line));
+        }
+        catch { /* */ }
+    }
+    return out;
+}
+export function listSubscriptions(repoRoot) {
+    const p = join(repoRoot, NIMBUS_DIR, SUBSCRIPTIONS_FILE);
+    if (!existsSync(p))
+        return [];
+    const out = [];
+    for (const line of readFileSync(p, "utf8").split("\n")) {
+        if (!line.trim())
+            continue;
+        try {
+            out.push(JSON.parse(line));
+        }
+        catch { /* */ }
+    }
+    return out;
+}
+void writeFileSync; // referenced for future use (revoke API)
+//# sourceMappingURL=nimbus.js.map

package/dist/nemesis/nimbus.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nimbus.js","sourceRoot":"","sources":["../../src/nemesis/nimbus.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC7F,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,UAAU,GAAG,uBAAuB,CAAC;AAC3C,MAAM,cAAc,GAAG,uBAAuB,CAAC;AAC/C,MAAM,kBAAkB,GAAG,qBAAqB,CAAC;AACjD,MAAM,OAAO,GAAG,kBAAkB,CAAC;AACnC,MAAM,WAAW,GAAG,iBAAiB,CAAC;AAEtC,SAAS,KAAK;IACZ,OAAO,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,WAAW,CAAC;AAC7C,CAAC;AA+BD,SAAS,MAAM,CAAC,IAAY;IAC1B,OAAO,UAAU,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClF,CAAC;AAqBD;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,KAAmB;IAC7C,IAAI,CAAC;QACH,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;QAC7E,MAAM,cAAc,GAAG,UAAU,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACpH,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,SAAS,GAAG,KAAK,CAAC,YAAY,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;QAC7F,MAAM,QAAQ,GAAG;YACf,cAAc;YACd,EAAE;YACF,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,EAAE;YAC9B,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,EAAE;YACtC,OAAO,EAAE;gBACP,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,CAAC,kBAAkB,CAAC;gBACxD,SAAS;gBACT,aAAa,EAAE,KAAK,CAAC,aAAa;aACnC;YACD,IAAI,EAAE,KAAK,CAAC,IAAI;SACjB,CAAC;QACF,MAAM,IAAI,GAAe,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjE,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;gBAC7C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC1D,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;gBACpC,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;gBAC/C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,qBAAqB,CAAC,EAAE,EAAE,CAAC;YACvE,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,kCAAmC,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC;YAC9F,CAAC;QACH,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;IAC/D,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAoB,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC;IAC1E,CAAC;AACH,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,UAAU,CAAC,IAAgB;IACzC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;IACjH,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;IAC/B,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IACrF,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAChE,IAAI,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IACzE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;AAC/E,CAAC;AAqBD,MAAM,UAAU,aAAa,CAAC,KAAqB;IACjD,IAAI,CAAC;QACH,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;QACzE,MAAM,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QACrE,MAAM,WAAW,GAAG,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAC9G,MAAM,KAAK,GAAsB;YAC/B,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,cAAc;YACzC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,WAAW;SACZ,CAAC;QACF,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;gBAC7C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC1D,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,kBAAkB,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;YAC9E,CAAC;YAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;QACnB,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;IACnE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAsB,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC;IAC5E,CAAC;AACH,CAAC;AAeD,MAAM,UAAU,yBAAyB,CAAC,QAAgB;IACxD,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,kBAAkB,CAAC,CAAC;IACzD,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,SAAS;QAC3B,IAAI,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAsB,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;IAC9E,CAAC;IACD,YAAY;IACZ,MAAM,GAAG,GAAsF,IAAI,GAAG,EAAE,CAAC;IACzG,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC;QACxB,MAAM,IAAI,GAAgB,IAAI,GAAG,EAAE,CAAC;QACpC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,qBAAqB;YAC3D,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,gBAAgB,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;YAC1F,GAAG,CAAC,gBAAgB,IAAI,KAAK,GAAG,CAAC,CAAC;YAClC,GAAG,CAAC,WAAW,IAAI,CAAC,CAAC;YACrB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;YAC/B,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACvB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACrB,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACpC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;gBAAE,SAAS;YACjC,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,IAAI,GAAG,CAAC,CAAC,CAAC;YAC/C,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,gBAAgB,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;YAC1F,GAAG,CAAC,gBAAgB,IAAI,KAAK,GAAG,CAAC,CAAC;YAClC,GAAG,CAAC,WAAW,IAAI,CAAC,CAAC;YACrB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;YAC/B,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAyB,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC;QAC9B,GAAG,CAAC,IAAI,CAAC;YACP,MAAM;YACN,aAAa,EAAE,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvF,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI;YAC7B,WAAW,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;SACvC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;IACrD,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAC9B,MAAM,GAAG,GAAiB,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,SAAS;QAC3B,IAAI,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAe,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,kBAAkB,CAAC,CAAC;IACzD,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAC9B,MAAM,GAAG,GAAwB,EAAE,CAAC;IACpC,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,SAAS;QAC3B,IAAI,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAsB,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,aAAa,CAAC,CAAC,yCAAyC"}

package/dist/perf_budget.d.ts

@@ -0,0 +1,48 @@
+/**
+ * v2.54.0 — PERFORMANCE BUDGET infrastructure.
+ *
+ * From the v2.53 audit: "ถ้า latency เกิน 100ms ใน git hook → user
+ * disable → product ตาย". Lock budgets per operation + measure them
+ * deterministically every TG run; release-script refuses tag if any
+ * budget regresses.
+ *
+ * Budgets are MEASURED in-process (avoids subprocess noise) where
+ * possible. The CLI-level ops also expose budgets via the subprocess
+ * benchmark suite for end-to-end verification.
+ *
+ * Pure deterministic + defensive; never throws.
+ */
+export interface PerfBudget {
+    /** Op identifier. */
+    op: string;
+    /** Budget ceiling in milliseconds (warm-path target). */
+    budgetMs: number;
+    /** Optional cold-path ceiling (first call). */
+    coldBudgetMs?: number;
+    /** Human-readable rationale for the budget. */
+    rationale: string;
+}
+export declare const PERF_BUDGETS: ReadonlyArray<PerfBudget>;
+export interface PerfMeasurement {
+    op: string;
+    budgetMs: number;
+    warmMeanMs: number;
+    warmP95Ms: number;
+    coldFirstMs: number;
+    iterations: number;
+    ok: boolean;
+}
+export interface PerfBudgetReport {
+    ok: boolean;
+    measurements: PerfMeasurement[];
+    failing: string[];
+    at: string;
+}
+/**
+ * Run the full perf budget suite in-process. Iterations chosen so total
+ * runtime stays <2s on typical hardware.
+ */
+export declare function runPerfBudget(): PerfBudgetReport;
+/** Human-friendly text report. */
+export declare function renderPerfBudgetReport(r: PerfBudgetReport): string;
+//# sourceMappingURL=perf_budget.d.ts.map

package/dist/perf_budget.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"perf_budget.d.ts","sourceRoot":"","sources":["../src/perf_budget.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAQH,MAAM,WAAW,UAAU;IACzB,qBAAqB;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,yDAAyD;IACzD,QAAQ,EAAE,MAAM,CAAC;IACjB,+CAA+C;IAC/C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,+CAA+C;IAC/C,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,eAAO,MAAM,YAAY,EAAE,aAAa,CAAC,UAAU,CAMlD,CAAC;AAEF,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,OAAO,CAAC;CACb;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,OAAO,CAAC;IACZ,YAAY,EAAE,eAAe,EAAE,CAAC;IAChC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;CACZ;AAqCD;;;GAGG;AACH,wBAAgB,aAAa,IAAI,gBAAgB,CAwBhD;AAED,kCAAkC;AAClC,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,gBAAgB,GAAG,MAAM,CAUlE"}