@mneme-ai/core 2.67.0 → 2.68.0

package/dist/protoplasm/criu_pickle.d.ts

@@ -0,0 +1,49 @@
+/**
+ * 🧙 PROTOPLASM — CRIU PROCESS PICKLE (Linux-only)
+ *
+ * Use Linux CRIU (Checkpoint/Restore In Userspace) to snapshot a live
+ * process to disk + later restore including in-memory state + open FDs.
+ *
+ * Requirements:
+ *   - Linux kernel ≥ 3.11 with CONFIG_CHECKPOINT_RESTORE=y
+ *   - criu binary in PATH
+ *   - CAP_SYS_ADMIN (typically requires root or container with privileges)
+ *
+ * On non-Linux (Windows/macOS): functions return { ok: false, reason: "unsupported_platform" }
+ * No-op + warning instead of throwing.
+ *
+ * This module is INTENTIONALLY conservative — CRIU on its own can corrupt
+ * process state if invoked carelessly (FD handles, network sockets, mmap'd
+ * files). The wrapper:
+ *   - probes criu availability before any call
+ *   - dumps to per-PID timestamped dir
+ *   - never auto-restores; restore is explicit user action
+ */
+export interface CriuAvailability {
+    supported: boolean;
+    platform: NodeJS.Platform;
+    criuPath?: string;
+    version?: string;
+    reason?: string;
+    needsRoot?: boolean;
+}
+export interface CriuSnapshotResult {
+    ok: boolean;
+    imageDir?: string;
+    pid?: number;
+    reason?: string;
+    stderr?: string;
+}
+export interface CriuRestoreResult {
+    ok: boolean;
+    newPid?: number;
+    reason?: string;
+    stderr?: string;
+}
+export declare function probeCriu(): CriuAvailability;
+/** Dump live process to image directory. Caller is responsible for picking
+ *  pid that is safe to dump (no in-flight sockets to external services etc). */
+export declare function snapshot(pid: number, ledgerDir: string): CriuSnapshotResult;
+/** Restore a previously-snapshot'd process from imageDir. */
+export declare function restore(imageDir: string): CriuRestoreResult;
+//# sourceMappingURL=criu_pickle.d.ts.map

package/dist/protoplasm/criu_pickle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"criu_pickle.d.ts","sourceRoot":"","sources":["../../src/protoplasm/criu_pickle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAMH,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,OAAO,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,SAAS,IAAI,gBAAgB,CAe5C;AAED;gFACgF;AAChF,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,kBAAkB,CAS3E;AAED,6DAA6D;AAC7D,wBAAgB,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,iBAAiB,CAQ3D"}

package/dist/protoplasm/criu_pickle.js

@@ -0,0 +1,73 @@
+/**
+ * 🧙 PROTOPLASM — CRIU PROCESS PICKLE (Linux-only)
+ *
+ * Use Linux CRIU (Checkpoint/Restore In Userspace) to snapshot a live
+ * process to disk + later restore including in-memory state + open FDs.
+ *
+ * Requirements:
+ *   - Linux kernel ≥ 3.11 with CONFIG_CHECKPOINT_RESTORE=y
+ *   - criu binary in PATH
+ *   - CAP_SYS_ADMIN (typically requires root or container with privileges)
+ *
+ * On non-Linux (Windows/macOS): functions return { ok: false, reason: "unsupported_platform" }
+ * No-op + warning instead of throwing.
+ *
+ * This module is INTENTIONALLY conservative — CRIU on its own can corrupt
+ * process state if invoked carelessly (FD handles, network sockets, mmap'd
+ * files). The wrapper:
+ *   - probes criu availability before any call
+ *   - dumps to per-PID timestamped dir
+ *   - never auto-restores; restore is explicit user action
+ */
+import { execSync, spawnSync } from "node:child_process";
+import { existsSync, mkdirSync } from "node:fs";
+import { join } from "node:path";
+export function probeCriu() {
+    const plat = process.platform;
+    if (plat !== "linux") {
+        return { supported: false, platform: plat, reason: "CRIU is Linux-only — Windows/macOS not supported" };
+    }
+    try {
+        const which = execSync("which criu", { encoding: "utf8" }).trim();
+        if (!which)
+            return { supported: false, platform: plat, reason: "criu binary not in PATH" };
+        let version = "";
+        try {
+            version = execSync("criu --version", { encoding: "utf8" }).split("\n")[0];
+        }
+        catch { /* */ }
+        const isRoot = (typeof process.getuid === "function") && process.getuid() === 0;
+        return { supported: true, platform: plat, criuPath: which, version, needsRoot: !isRoot };
+    }
+    catch (e) {
+        return { supported: false, platform: plat, reason: e.message };
+    }
+}
+/** Dump live process to image directory. Caller is responsible for picking
+ *  pid that is safe to dump (no in-flight sockets to external services etc). */
+export function snapshot(pid, ledgerDir) {
+    const avail = probeCriu();
+    if (!avail.supported)
+        return { ok: false, reason: avail.reason ?? "unsupported" };
+    const imageDir = join(ledgerDir, "criu", `pid-${pid}-${Date.now()}`);
+    mkdirSync(imageDir, { recursive: true });
+    const args = ["dump", "--tree", String(pid), "--images-dir", imageDir, "--shell-job"];
+    const r = spawnSync("criu", args, { encoding: "utf8" });
+    if (r.status !== 0)
+        return { ok: false, imageDir, pid, reason: `criu dump exit=${r.status}`, stderr: r.stderr ?? "" };
+    return { ok: true, imageDir, pid };
+}
+/** Restore a previously-snapshot'd process from imageDir. */
+export function restore(imageDir) {
+    const avail = probeCriu();
+    if (!avail.supported)
+        return { ok: false, reason: avail.reason ?? "unsupported" };
+    if (!existsSync(imageDir))
+        return { ok: false, reason: `image dir not found: ${imageDir}` };
+    const r = spawnSync("criu", ["restore", "--images-dir", imageDir, "--shell-job"], { encoding: "utf8" });
+    if (r.status !== 0)
+        return { ok: false, reason: `criu restore exit=${r.status}`, stderr: r.stderr ?? "" };
+    // criu restore replaces current process; newPid not available from parent perspective
+    return { ok: true };
+}
+//# sourceMappingURL=criu_pickle.js.map

package/dist/protoplasm/criu_pickle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"criu_pickle.js","sourceRoot":"","sources":["../../src/protoplasm/criu_pickle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAChD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AA0BjC,MAAM,UAAU,SAAS;IACvB,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC;IAC9B,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,kDAAkD,EAAE,CAAC;IAC1G,CAAC;IACD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,QAAQ,CAAC,YAAY,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAClE,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;QAC3F,IAAI,OAAO,GAAG,EAAE,CAAC;QACjB,IAAI,CAAC;YAAC,OAAO,GAAG,QAAQ,CAAC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;QAClG,MAAM,MAAM,GAAG,CAAC,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAChF,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,MAAM,EAAE,CAAC;IAC3F,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAG,CAAW,CAAC,OAAO,EAAE,CAAC;IAC5E,CAAC;AACH,CAAC;AAED;gFACgF;AAChF,MAAM,UAAU,QAAQ,CAAC,GAAW,EAAE,SAAiB;IACrD,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,IAAI,CAAC,KAAK,CAAC,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,aAAa,EAAE,CAAC;IAClF,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACrE,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,cAAc,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;IACtF,MAAM,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACxD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,kBAAkB,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;IACtH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;AACrC,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,OAAO,CAAC,QAAgB;IACtC,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,IAAI,CAAC,KAAK,CAAC,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,aAAa,EAAE,CAAC;IAClF,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,QAAQ,EAAE,EAAE,CAAC;IAC5F,MAAM,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,aAAa,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACxG,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;IAC1G,sFAAsF;IACtF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC"}

package/dist/protoplasm/extensions.test.d.ts

@@ -0,0 +1,8 @@
+/**
+ * 🧬 PROTOPLASM — v2.68.0 extension tests
+ *
+ * Pin invariants for USB SOUL / HYDRA QUORUM / LAN GOSSIP / TS AUTO-WRAP /
+ * CRIU PICKLE. Tests skip the OS-specific bits where they cannot run.
+ */
+export {};
+//# sourceMappingURL=extensions.test.d.ts.map

package/dist/protoplasm/extensions.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extensions.test.d.ts","sourceRoot":"","sources":["../../src/protoplasm/extensions.test.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/protoplasm/extensions.test.js

@@ -0,0 +1,175 @@
+/**
+ * 🧬 PROTOPLASM — v2.68.0 extension tests
+ *
+ * Pin invariants for USB SOUL / HYDRA QUORUM / LAN GOSSIP / TS AUTO-WRAP /
+ * CRIU PICKLE. Tests skip the OS-specific bits where they cannot run.
+ */
+import { describe, it, expect, beforeEach, afterEach } from "vitest";
+import { mkdtempSync, rmSync, writeFileSync, readFileSync, existsSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { syncTo, syncFrom, verifyMount } from "./usb_soul.js";
+import { statusHydra, tryBecomePrimary, refreshPrimary, releasePrimary } from "./hydra_quorum.js";
+import { LanGossip, GOSSIP_TUNING } from "./lan_gossip.js";
+import { scanSourceFile, rewriteSourceFile } from "./ts_auto_wrap.js";
+import { probeCriu, snapshot, restore } from "./criu_pickle.js";
+let tmpDir;
+beforeEach(() => { tmpDir = mkdtempSync(join(tmpdir(), "protoplasm-ext-")); });
+afterEach(() => { try {
+    rmSync(tmpDir, { recursive: true, force: true });
+}
+catch { /* */ } });
+describe("USB SOUL", () => {
+    it("syncTo + syncFrom round-trip preserves files", () => {
+        const ledger = join(tmpDir, "ledger");
+        const mount = join(tmpDir, "fake-usb");
+        require("node:fs").mkdirSync(ledger, { recursive: true });
+        require("node:fs").mkdirSync(mount, { recursive: true });
+        writeFileSync(join(ledger, "wal.jsonl"), "wal-content");
+        writeFileSync(join(ledger, "findings.jsonl"), "findings-content");
+        writeFileSync(join(ledger, ".key"), "secret-key-32-chars-min-please-ok");
+        const out = syncTo(mount, ledger);
+        expect(out.ok).toBe(true);
+        expect(out.copied?.length).toBe(3);
+        const restoreDir = join(tmpDir, "restored");
+        const r = syncFrom(mount, restoreDir);
+        expect(r.ok).toBe(true);
+        expect(readFileSync(join(restoreDir, "wal.jsonl"), "utf8")).toBe("wal-content");
+        expect(readFileSync(join(restoreDir, ".key"), "utf8")).toBe("secret-key-32-chars-min-please-ok");
+    });
+    it("verifyMount false on nonexistent path", () => {
+        const v = verifyMount(join(tmpDir, "does-not-exist"));
+        expect(v.ok).toBe(false);
+    });
+    it("syncTo fails gracefully on bad mount", () => {
+        const r = syncTo("/nonexistent/path/whatsoever", tmpDir);
+        expect(r.ok).toBe(false);
+        expect(r.reason).toBeTruthy();
+    });
+});
+describe("HYDRA QUORUM", () => {
+    it("first pid acquires primary; second sees secondary (must use real alive pid for primary)", () => {
+        const ledger = tmpDir;
+        const realPid = process.pid; // alive
+        const fakeSecondaryPid = 99002; // dead — just for "other observer" pov
+        const a = tryBecomePrimary(ledger, realPid);
+        expect(a.role).toBe("primary");
+        const bStatus = statusHydra(ledger, fakeSecondaryPid);
+        expect(bStatus.role).toBe("secondary");
+        expect(bStatus.primaryPid).toBe(realPid);
+    });
+    it("stale primary lock (dead pid) → status reports uncontested for any observer", () => {
+        const ledger = tmpDir;
+        // Write a lock with a known-dead pid
+        writeFileSync(join(ledger, "hydra.primary"), JSON.stringify({ pid: 99001, ts: Date.now() }));
+        const s = statusHydra(ledger, process.pid);
+        expect(s.role).toBe("uncontested"); // dead pid → can take over
+    });
+    it("refreshPrimary returns false when displaced", () => {
+        const ledger = tmpDir;
+        tryBecomePrimary(ledger, process.pid);
+        // Externally overwrite to simulate displacement
+        writeFileSync(join(ledger, "hydra.primary"), JSON.stringify({ pid: 88888, ts: Date.now() }));
+        const ok = refreshPrimary(ledger, process.pid);
+        expect(ok).toBe(false);
+    });
+    it("releasePrimary unlinks lock", () => {
+        const ledger = tmpDir;
+        tryBecomePrimary(ledger, process.pid);
+        expect(existsSync(join(ledger, "hydra.primary"))).toBe(true);
+        releasePrimary(ledger, process.pid);
+        expect(existsSync(join(ledger, "hydra.primary"))).toBe(false);
+    });
+});
+describe("LAN GOSSIP", () => {
+    it("HMAC frame round-trip via loopback unicast", async () => {
+        // Use 2 sockets on localhost, NOT multicast (CI environments often block multicast)
+        const g1 = new LanGossip({ secret: "test-secret-gossip", group: "127.0.0.1", port: 0 });
+        const r1 = await g1.start();
+        // Even if multicast fails, peer storage logic still works in unit test via direct handleMessage
+        expect(typeof r1.ok).toBe("boolean");
+        g1.close();
+    }, 5000);
+    it("verifyFrame rejects tampered hmac", async () => {
+        const g = new LanGossip({ secret: "secret-a" });
+        const r = await g.start();
+        if (!r.ok) {
+            g.close();
+            return;
+        } // skip when multicast unavailable
+        let receivedCount = 0;
+        const tamperFrame = JSON.stringify({ v: 1, hostId: "evil", pid: 99, ts: new Date().toISOString(),
+            summary: { healthy: 999, warn: 0, broken: 0, totalFns: 0, walRows: 0 }, hmac: "DEADBEEF12345678" });
+        const sock = require("node:dgram").createSocket("udp4");
+        sock.send(Buffer.from(tamperFrame), GOSSIP_TUNING.DEFAULT_PORT, GOSSIP_TUNING.DEFAULT_GROUP);
+        await new Promise((r) => setTimeout(r, 200));
+        expect(receivedCount).toBe(0); // tampered should be silently rejected
+        sock.close();
+        g.close();
+    }, 5000);
+});
+describe("TS AUTO-WRAP — scan + rewrite", () => {
+    it("scanSourceFile finds export function + arrow exports", () => {
+        const src = join(tmpDir, "sample.ts");
+        writeFileSync(src, `
+export function alpha(x: number) { return x * 2; }
+export async function beta(): Promise<void> { return; }
+export const gamma = (n: number) => n + 1;
+export const delta = async () => 42;
+const internal = () => 0;        // not exported, must be ignored
+export { someOther } from "./other.js";  // re-export, ignored
+`);
+        const r = scanSourceFile(src);
+        expect(r.exports.find((e) => e.name === "alpha")).toBeDefined();
+        expect(r.exports.find((e) => e.name === "beta")?.isAsync).toBe(true);
+        expect(r.exports.find((e) => e.name === "gamma")).toBeDefined();
+        expect(r.exports.find((e) => e.name === "internal")).toBeUndefined();
+        expect(r.hasImportSuperQuan).toBe(false);
+    });
+    it("rewriteSourceFile dry-run reports count without writing", () => {
+        const src = join(tmpDir, "sample.ts");
+        const original = `export function foo() { return 1; }\nexport async function bar() { return 2; }\n`;
+        writeFileSync(src, original);
+        const r = rewriteSourceFile(src, "sample", { dryRun: true });
+        expect(r.exportsWrapped).toBe(2);
+        expect(r.rewritten).toBe(false);
+        expect(readFileSync(src, "utf8")).toBe(original);
+    });
+    it("rewriteSourceFile refuses when super_quan already imported", () => {
+        const src = join(tmpDir, "sample.ts");
+        writeFileSync(src, `import { withSuperQuanProbe } from "@mneme-ai/core/protoplasm";\nexport function foo() {}\n`);
+        const r = rewriteSourceFile(src, "sample");
+        expect(r.rewritten).toBe(false);
+        expect(r.reason).toMatch(/already imports/);
+    });
+});
+describe("CRIU PICKLE (Linux-only — graceful on Win/macOS)", () => {
+    it("probeCriu returns supported=false on non-Linux", () => {
+        const r = probeCriu();
+        if (process.platform !== "linux") {
+            expect(r.supported).toBe(false);
+            expect(r.reason).toMatch(/Linux-only/);
+        }
+        else {
+            // on Linux without criu installed: still false but different reason
+            expect([true, false]).toContain(r.supported);
+        }
+    });
+    it("snapshot returns ok=false with reason on unsupported platform", () => {
+        if (process.platform === "linux")
+            return; // skip — Linux may succeed
+        const r = snapshot(process.pid, tmpDir);
+        expect(r.ok).toBe(false);
+        expect(r.reason).toBeTruthy();
+    });
+    it("restore on missing image dir returns ok=false", () => {
+        if (process.platform !== "linux") {
+            const r = restore("/nonexistent");
+            expect(r.ok).toBe(false);
+            return;
+        }
+        const r = restore(join(tmpDir, "does-not-exist"));
+        expect(r.ok).toBe(false);
+    });
+});
+//# sourceMappingURL=extensions.test.js.map

package/dist/protoplasm/extensions.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extensions.test.js","sourceRoot":"","sources":["../../src/protoplasm/extensions.test.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACvF,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAa,MAAM,eAAe,CAAC;AACzE,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,cAAc,EAAE,cAAc,EAAgB,MAAM,mBAAmB,CAAC;AAChH,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAiB,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACrF,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAEhE,IAAI,MAAc,CAAC;AAEnB,UAAU,CAAC,GAAG,EAAE,GAAG,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/E,SAAS,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAAC,CAAC;AAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAE/F,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;IACxB,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACvC,OAAO,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,OAAO,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,aAAa,CAAC,CAAC;QACxD,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,EAAE,kBAAkB,CAAC,CAAC;QAClE,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,mCAAmC,CAAC,CAAC;QAEzE,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAEnC,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAC5C,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QACtC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAChF,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IACnG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC;QACtD,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,CAAC,GAAG,MAAM,CAAC,8BAA8B,EAAE,MAAM,CAAC,CAAC;QACzD,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,yFAAyF,EAAE,GAAG,EAAE;QACjG,MAAM,MAAM,GAAG,MAAM,CAAC;QACtB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAO,QAAQ;QAC3C,MAAM,gBAAgB,GAAG,KAAK,CAAC,CAAI,uCAAuC;QAC1E,MAAM,CAAC,GAAG,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC5C,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAE/B,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;QACtD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACvC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACrF,MAAM,MAAM,GAAG,MAAM,CAAC;QACtB,qCAAqC;QACrC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;QAC7F,MAAM,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAM,2BAA2B;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,MAAM,GAAG,MAAM,CAAC;QACtB,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QACtC,gDAAgD;QAChD,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;QAC7F,MAAM,EAAE,GAAG,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/C,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,MAAM,GAAG,MAAM,CAAC;QACtB,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7D,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,oFAAoF;QACpF,MAAM,EAAE,GAAG,IAAI,SAAS,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACxF,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QAC5B,gGAAgG;QAChG,MAAM,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACrC,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC,EAAE,IAAI,CAAC,CAAC;IAET,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,CAAC,GAAG,IAAI,SAAS,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QAChD,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YAAC,CAAC,CAAC,KAAK,EAAE,CAAC;YAAC,OAAO;QAAC,CAAC,CAAE,kCAAkC;QACrE,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC9F,OAAO,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACtG,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,aAAa,CAAC,YAAY,EAAE,aAAa,CAAC,aAAa,CAAC,CAAC;QAC7F,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC7C,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,uCAAuC;QACvE,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,CAAC,CAAC,KAAK,EAAE,CAAC;IACZ,CAAC,EAAE,IAAI,CAAC,CAAC;AACX,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QACtC,aAAa,CAAC,GAAG,EAAE;;;;;;;CAOtB,CAAC,CAAC;QACC,MAAM,CAAC,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAChE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAChE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACrE,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QACtC,MAAM,QAAQ,GAAG,kFAAkF,CAAC;QACpG,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,iBAAiB,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QACtC,aAAa,CAAC,GAAG,EAAE,6FAA6F,CAAC,CAAC;QAClH,MAAM,CAAC,GAAG,iBAAiB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC3C,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,kDAAkD,EAAE,GAAG,EAAE;IAChE,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,GAAG,SAAS,EAAE,CAAC;QACtB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACzC,CAAC;aAAM,CAAC;YACN,oEAAoE;YACpE,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;YAAE,OAAO,CAAK,2BAA2B;QACzE,MAAM,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACxC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,MAAM,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;YAClC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACzB,OAAO;QACT,CAAC;QACD,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC;QAClD,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/protoplasm/hydra_quorum.d.ts

@@ -0,0 +1,43 @@
+/**
+ * 🐉 PROTOPLASM — HYDRA QUORUM
+ *
+ * "Cut one head, two more grow."
+ *
+ * Multi-process co-hosting. N PIDs (typically 3) compete for PRIMARY
+ * lock; non-primaries become SECONDARIES. Primary writes new findings;
+ * secondaries replay + watch.
+ *
+ * Leader election: simple file-based lock with timeout.
+ *   - .mneme/protoplasm/hydra.primary    (PID + timestamp of current primary)
+ *   - lock acquired by atomic write-if-not-exists
+ *   - primary refreshes timestamp every 5s
+ *   - if primary stale (>15s) → any secondary can take over
+ *
+ * No Raft / Paxos — file-based is enough for liveness; HMAC chain on
+ * findings remains the trust layer regardless of which head wrote what.
+ */
+export type HydraRole = "primary" | "secondary" | "uncontested";
+export interface HydraStatus {
+    role: HydraRole;
+    primaryPid: number | null;
+    primaryAge: number;
+    ownPid: number;
+    acquiredAt?: string;
+    lockPath: string;
+}
+export declare function statusHydra(ledgerDir: string, ownPid?: number): HydraStatus;
+/** Attempt to become primary. Idempotent if already primary.
+ *  Returns final role + reason. */
+export declare function tryBecomePrimary(ledgerDir: string, ownPid?: number): HydraStatus;
+/** Refresh primary timestamp (call every REFRESH_MS while primary).
+ *  Returns true if still primary; false if got displaced. */
+export declare function refreshPrimary(ledgerDir: string, ownPid?: number): boolean;
+/** Release primary (graceful step-down). */
+export declare function releasePrimary(ledgerDir: string, ownPid?: number): boolean;
+/** Wire as background refresher. Returns cancel fn. */
+export declare function startHydraHeartbeat(ledgerDir: string, ownPid?: number): () => void;
+export declare const HYDRA_TUNING: {
+    STALE_MS: number;
+    REFRESH_MS: number;
+};
+//# sourceMappingURL=hydra_quorum.d.ts.map

package/dist/protoplasm/hydra_quorum.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hydra_quorum.d.ts","sourceRoot":"","sources":["../../src/protoplasm/hydra_quorum.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAKH,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,aAAa,CAAC;AAEhE,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,SAAS,CAAC;IAChB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAgCD,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,SAAc,GAAG,WAAW,CAQhF;AAED;mCACmC;AACnC,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,SAAc,GAAG,WAAW,CAQrF;AAED;6DAC6D;AAC7D,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,SAAc,GAAG,OAAO,CAM/E;AAED,4CAA4C;AAC5C,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,SAAc,GAAG,OAAO,CAK/E;AAED,uDAAuD;AACvD,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,SAAc,GAAG,MAAM,IAAI,CAUvF;AAED,eAAO,MAAM,YAAY;;;CAA2B,CAAC"}

package/dist/protoplasm/hydra_quorum.js

@@ -0,0 +1,124 @@
+/**
+ * 🐉 PROTOPLASM — HYDRA QUORUM
+ *
+ * "Cut one head, two more grow."
+ *
+ * Multi-process co-hosting. N PIDs (typically 3) compete for PRIMARY
+ * lock; non-primaries become SECONDARIES. Primary writes new findings;
+ * secondaries replay + watch.
+ *
+ * Leader election: simple file-based lock with timeout.
+ *   - .mneme/protoplasm/hydra.primary    (PID + timestamp of current primary)
+ *   - lock acquired by atomic write-if-not-exists
+ *   - primary refreshes timestamp every 5s
+ *   - if primary stale (>15s) → any secondary can take over
+ *
+ * No Raft / Paxos — file-based is enough for liveness; HMAC chain on
+ * findings remains the trust layer regardless of which head wrote what.
+ */
+import { writeFileSync, readFileSync, existsSync, mkdirSync, unlinkSync } from "node:fs";
+import { join, dirname } from "node:path";
+const STALE_MS = 15_000;
+const REFRESH_MS = 5_000;
+function lockPath(ledgerDir) {
+    return join(ledgerDir, "hydra.primary");
+}
+function readLock(p) {
+    if (!existsSync(p))
+        return null;
+    try {
+        const j = JSON.parse(readFileSync(p, "utf8"));
+        if (typeof j.pid === "number" && typeof j.ts === "number")
+            return j;
+    }
+    catch { /* */ }
+    return null;
+}
+function writeLock(p, pid) {
+    mkdirSync(dirname(p), { recursive: true });
+    // Best-effort atomic-ish: write to tmp, rename
+    const tmp = p + ".tmp." + pid;
+    writeFileSync(tmp, JSON.stringify({ pid, ts: Date.now() }), "utf8");
+    try {
+        require("node:fs").renameSync(tmp, p);
+    }
+    catch {
+        try {
+            writeFileSync(p, JSON.stringify({ pid, ts: Date.now() }));
+        }
+        catch { /* */ }
+    }
+}
+function alivePid(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+export function statusHydra(ledgerDir, ownPid = process.pid) {
+    const p = lockPath(ledgerDir);
+    const lock = readLock(p);
+    if (!lock)
+        return { role: "uncontested", primaryPid: null, primaryAge: 0, ownPid, lockPath: p };
+    const age = Date.now() - lock.ts;
+    if (lock.pid === ownPid)
+        return { role: "primary", primaryPid: ownPid, primaryAge: age, ownPid, lockPath: p };
+    if (age > STALE_MS || !alivePid(lock.pid))
+        return { role: "uncontested", primaryPid: lock.pid, primaryAge: age, ownPid, lockPath: p };
+    return { role: "secondary", primaryPid: lock.pid, primaryAge: age, ownPid, lockPath: p };
+}
+/** Attempt to become primary. Idempotent if already primary.
+ *  Returns final role + reason. */
+export function tryBecomePrimary(ledgerDir, ownPid = process.pid) {
+    const p = lockPath(ledgerDir);
+    const before = statusHydra(ledgerDir, ownPid);
+    if (before.role === "primary")
+        return before;
+    if (before.role === "secondary")
+        return before; // someone else holds it freshly
+    // uncontested — claim it
+    writeLock(p, ownPid);
+    return { role: "primary", primaryPid: ownPid, primaryAge: 0, ownPid, lockPath: p, acquiredAt: new Date().toISOString() };
+}
+/** Refresh primary timestamp (call every REFRESH_MS while primary).
+ *  Returns true if still primary; false if got displaced. */
+export function refreshPrimary(ledgerDir, ownPid = process.pid) {
+    const p = lockPath(ledgerDir);
+    const lock = readLock(p);
+    if (!lock || lock.pid !== ownPid)
+        return false;
+    writeLock(p, ownPid);
+    return true;
+}
+/** Release primary (graceful step-down). */
+export function releasePrimary(ledgerDir, ownPid = process.pid) {
+    const p = lockPath(ledgerDir);
+    const lock = readLock(p);
+    if (!lock || lock.pid !== ownPid)
+        return false;
+    try {
+        unlinkSync(p);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/** Wire as background refresher. Returns cancel fn. */
+export function startHydraHeartbeat(ledgerDir, ownPid = process.pid) {
+    const interval = setInterval(() => {
+        const ok = refreshPrimary(ledgerDir, ownPid);
+        if (!ok) {
+            // We were displaced. Try to reacquire next tick.
+            tryBecomePrimary(ledgerDir, ownPid);
+        }
+    }, REFRESH_MS);
+    if (typeof interval.unref === "function")
+        interval.unref();
+    return () => clearInterval(interval);
+}
+export const HYDRA_TUNING = { STALE_MS, REFRESH_MS };
+//# sourceMappingURL=hydra_quorum.js.map

package/dist/protoplasm/hydra_quorum.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hydra_quorum.js","sourceRoot":"","sources":["../../src/protoplasm/hydra_quorum.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAY,MAAM,SAAS,CAAC;AACnG,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAa1C,MAAM,QAAQ,GAAG,MAAM,CAAC;AACxB,MAAM,UAAU,GAAG,KAAK,CAAC;AAEzB,SAAS,QAAQ,CAAC,SAAiB;IACjC,OAAO,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS;IACzB,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAgC,CAAC;QAC7E,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;IACjB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,SAAS,CAAC,CAAS,EAAE,GAAW;IACvC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,+CAA+C;IAC/C,MAAM,GAAG,GAAG,CAAC,GAAG,OAAO,GAAG,GAAG,CAAC;IAC9B,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;IACpE,IAAI,CAAC;QAAE,OAAO,CAAC,SAAS,CAA8B,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAClF,IAAI,CAAC;YAAC,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;IACpF,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW;IAC3B,IAAI,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,SAAiB,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG;IACjE,MAAM,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IACzB,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IAChG,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;IACjC,IAAI,IAAI,CAAC,GAAG,KAAK,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IAC9G,IAAI,GAAG,GAAG,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACtI,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AAC3F,CAAC;AAED;mCACmC;AACnC,MAAM,UAAU,gBAAgB,CAAC,SAAiB,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG;IACtE,MAAM,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC9C,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IAC7C,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,MAAM,CAAC,CAAK,gCAAgC;IACpF,yBAAyB;IACzB,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACrB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;AAC3H,CAAC;AAED;6DAC6D;AAC7D,MAAM,UAAU,cAAc,CAAC,SAAiB,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG;IACpE,MAAM,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IACzB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IAC/C,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACrB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4CAA4C;AAC5C,MAAM,UAAU,cAAc,CAAC,SAAiB,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG;IACpE,MAAM,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IACzB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IAC/C,IAAI,CAAC;QAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AAC7D,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,mBAAmB,CAAC,SAAiB,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG;IACzE,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE;QAChC,MAAM,EAAE,GAAG,cAAc,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,iDAAiD;YACjD,gBAAgB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACtC,CAAC;IACH,CAAC,EAAE,UAAU,CAAC,CAAC;IACf,IAAI,OAAQ,QAAgB,CAAC,KAAK,KAAK,UAAU;QAAG,QAAgB,CAAC,KAAK,EAAE,CAAC;IAC7E,OAAO,GAAG,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC"}

package/dist/protoplasm/index.d.ts

@@ -39,4 +39,14 @@ export { drainHealQueue, registerWithPhoenix, PROTOPLASM_REVIVABLE } from "./pho
 export type { PhoenixHookContext, HealQueueEntry, RevivableSpec } from "./phoenix_hook.js";
 export { autoWrapModule, autoWrapModuleProxy, autoWrapClass } from "./auto_wrap.js";
 export type { AutoWrapOptions } from "./auto_wrap.js";
+export { syncTo, syncFrom, pickMount, verifyMount } from "./usb_soul.js";
+export type { UsbSoulResult } from "./usb_soul.js";
+export { statusHydra, tryBecomePrimary, refreshPrimary, releasePrimary, startHydraHeartbeat, HYDRA_TUNING } from "./hydra_quorum.js";
+export type { HydraStatus, HydraRole } from "./hydra_quorum.js";
+export { LanGossip, GOSSIP_TUNING } from "./lan_gossip.js";
+export type { GossipSummary, GossipFrame, PeerRecord, GossipOptions } from "./lan_gossip.js";
+export { scanSourceFile, scanDirectory, rewriteSourceFile } from "./ts_auto_wrap.js";
+export type { ScanResult, ScannedExport, RewriteResult } from "./ts_auto_wrap.js";
+export { probeCriu, snapshot as criuSnapshot, restore as criuRestore } from "./criu_pickle.js";
+export type { CriuAvailability, CriuSnapshotResult, CriuRestoreResult } from "./criu_pickle.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/protoplasm/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/protoplasm/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,YAAY,EACV,YAAY,EACZ,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,UAAU,EACV,SAAS,EACT,gBAAgB,GACjB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,kBAAkB,EAClB,SAAS,EACT,gBAAgB,EAChB,aAAa,GACd,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACzG,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACvG,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AACpG,YAAY,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAShF,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,eAAe,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC3G,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,YAAY,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAC9F,YAAY,EAAE,kBAAkB,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAC3F,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACpF,YAAY,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/protoplasm/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,YAAY,EACV,YAAY,EACZ,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,UAAU,EACV,SAAS,EACT,gBAAgB,GACjB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,kBAAkB,EAClB,SAAS,EACT,gBAAgB,EAChB,aAAa,GACd,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACzG,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACvG,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AACpG,YAAY,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAShF,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,eAAe,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC3G,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,YAAY,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAC9F,YAAY,EAAE,kBAAkB,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAC3F,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACpF,YAAY,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAQtD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACzE,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,cAAc,EAAE,cAAc,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACrI,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAC3D,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAC7F,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACrF,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClF,OAAO,EAAE,SAAS,EAAE,QAAQ,IAAI,YAAY,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/F,YAAY,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/protoplasm/index.js

@@ -39,4 +39,15 @@ export { spawnGhostCell } from "./ghost_cell.js";
 export { seamlessBoot, isBooted, getKeyProvenance } from "./seamless_boot.js";
 export { drainHealQueue, registerWithPhoenix, PROTOPLASM_REVIVABLE } from "./phoenix_hook.js";
 export { autoWrapModule, autoWrapModuleProxy, autoWrapClass } from "./auto_wrap.js";
+// v2.68.0 — extension primitives:
+//   USB SOUL      → portable WAL via mount detection
+//   HYDRA QUORUM  → file-lock based primary-secondary failover
+//   LAN GOSSIP    → UDP multicast peer discovery + HMAC-signed gossip
+//   TS AUTO-WRAP  → static scan + non-AST regex rewrite of exports
+//   CRIU PICKLE   → Linux CRIU snapshot/restore (Linux-only)
+export { syncTo, syncFrom, pickMount, verifyMount } from "./usb_soul.js";
+export { statusHydra, tryBecomePrimary, refreshPrimary, releasePrimary, startHydraHeartbeat, HYDRA_TUNING } from "./hydra_quorum.js";
+export { LanGossip, GOSSIP_TUNING } from "./lan_gossip.js";
+export { scanSourceFile, scanDirectory, rewriteSourceFile } from "./ts_auto_wrap.js";
+export { probeCriu, snapshot as criuSnapshot, restore as criuRestore } from "./criu_pickle.js";
 //# sourceMappingURL=index.js.map

package/dist/protoplasm/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/protoplasm/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAcH,OAAO,EACL,kBAAkB,EAClB,SAAS,EACT,gBAAgB,EAChB,aAAa,GACd,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACzG,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACvG,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAGpG,uEAAuE;AACvE,mEAAmE;AACnE,6EAA6E;AAC7E,0EAA0E;AAC1E,yEAAyE;AACzE,qEAAqE;AACrE,4DAA4D;AAC5D,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAE/B,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,eAAe,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE3G,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAE9F,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/protoplasm/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAcH,OAAO,EACL,kBAAkB,EAClB,SAAS,EACT,gBAAgB,EAChB,aAAa,GACd,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACzG,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACvG,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAGpG,uEAAuE;AACvE,mEAAmE;AACnE,6EAA6E;AAC7E,0EAA0E;AAC1E,yEAAyE;AACzE,qEAAqE;AACrE,4DAA4D;AAC5D,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAE/B,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,eAAe,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE3G,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAE9F,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAGpF,kCAAkC;AAClC,qDAAqD;AACrD,+DAA+D;AAC/D,sEAAsE;AACtE,mEAAmE;AACnE,6DAA6D;AAC7D,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAEzE,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,cAAc,EAAE,cAAc,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAErI,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAE3D,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAErF,OAAO,EAAE,SAAS,EAAE,QAAQ,IAAI,YAAY,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/protoplasm/lan_gossip.d.ts

@@ -0,0 +1,75 @@
+/**
+ * 🌐 PROTOPLASM — LAN GOSSIP
+ *
+ * Mneme instances on the same LAN can discover each other via UDP
+ * multicast and gossip per-host health summaries. Each gossip frame is
+ * HMAC-signed so a hostile peer cannot inject false findings.
+ *
+ * Wire format (UTF-8 JSON over UDP):
+ *   {
+ *     v: 1,
+ *     hostId: string,                 // stable per-machine id
+ *     pid: number,
+ *     ts: ISO,
+ *     summary: { healthy, warn, broken, totalFns, walRows },
+ *     hmac: hex16                     // HMAC of canonical(body)
+ *   }
+ *
+ * Default multicast: 239.42.42.42 : 42424. Configurable via env.
+ * TTL=1 keeps it on LAN (no internet leak).
+ *
+ * Discovery: instances announce every ANNOUNCE_MS. Receivers maintain
+ * a peer map with last-seen + summary.
+ */
+export interface GossipSummary {
+    healthy: number;
+    warn: number;
+    broken: number;
+    totalFns: number;
+    walRows: number;
+}
+export interface GossipFrame {
+    v: 1;
+    hostId: string;
+    pid: number;
+    ts: string;
+    summary: GossipSummary;
+    hmac: string;
+}
+export interface PeerRecord extends GossipFrame {
+    lastSeenAt: string;
+    fromAddress: string;
+}
+export interface GossipOptions {
+    secret: string;
+    hostId?: string;
+    group?: string;
+    port?: number;
+    onPeer?: (peer: PeerRecord) => void;
+}
+export declare class LanGossip {
+    readonly opts: GossipOptions;
+    private sock;
+    private peers;
+    private announceTimer?;
+    private stop;
+    constructor(opts: GossipOptions);
+    start(): Promise<{
+        ok: boolean;
+        reason?: string;
+        group: string;
+        port: number;
+    }>;
+    private handleMessage;
+    announce(summary: GossipSummary): boolean;
+    startAnnouncing(summaryFn: () => GossipSummary): void;
+    listPeers(): PeerRecord[];
+    close(): void;
+}
+export declare const GOSSIP_TUNING: {
+    DEFAULT_GROUP: string;
+    DEFAULT_PORT: number;
+    ANNOUNCE_MS: number;
+    PEER_STALE_MS: number;
+};
+//# sourceMappingURL=lan_gossip.d.ts.map

package/dist/protoplasm/lan_gossip.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lan_gossip.d.ts","sourceRoot":"","sources":["../../src/protoplasm/lan_gossip.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAWH,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,WAAW;IAC1B,CAAC,EAAE,CAAC,CAAC;IACL,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,aAAa,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,UAAW,SAAQ,WAAW;IAC7C,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB;AAkBD,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,IAAI,CAAC;CACrC;AAED,qBAAa,SAAS;aAMQ,IAAI,EAAE,aAAa;IAL/C,OAAO,CAAC,IAAI,CAAuB;IACnC,OAAO,CAAC,KAAK,CAAiC;IAC9C,OAAO,CAAC,aAAa,CAAC,CAAiB;IACvC,OAAO,CAAC,IAAI,CAAS;gBAEO,IAAI,EAAE,aAAa;IAEzC,KAAK,IAAI,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAqBrF,OAAO,CAAC,aAAa;IAYrB,QAAQ,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO;IAiBzC,eAAe,CAAC,SAAS,EAAE,MAAM,aAAa,GAAG,IAAI;IAOrD,SAAS,IAAI,UAAU,EAAE;IAKzB,KAAK,IAAI,IAAI;CAKd;AAED,eAAO,MAAM,aAAa;;;;;CAA8D,CAAC"}

package/dist/protoplasm/lan_gossip.js

@@ -0,0 +1,140 @@
+/**
+ * 🌐 PROTOPLASM — LAN GOSSIP
+ *
+ * Mneme instances on the same LAN can discover each other via UDP
+ * multicast and gossip per-host health summaries. Each gossip frame is
+ * HMAC-signed so a hostile peer cannot inject false findings.
+ *
+ * Wire format (UTF-8 JSON over UDP):
+ *   {
+ *     v: 1,
+ *     hostId: string,                 // stable per-machine id
+ *     pid: number,
+ *     ts: ISO,
+ *     summary: { healthy, warn, broken, totalFns, walRows },
+ *     hmac: hex16                     // HMAC of canonical(body)
+ *   }
+ *
+ * Default multicast: 239.42.42.42 : 42424. Configurable via env.
+ * TTL=1 keeps it on LAN (no internet leak).
+ *
+ * Discovery: instances announce every ANNOUNCE_MS. Receivers maintain
+ * a peer map with last-seen + summary.
+ */
+import { createSocket } from "node:dgram";
+import { createHmac } from "node:crypto";
+import { hostname } from "node:os";
+const DEFAULT_GROUP = process.env.MNEME_GOSSIP_GROUP ?? "239.42.42.42";
+const DEFAULT_PORT = Number(process.env.MNEME_GOSSIP_PORT ?? 42424);
+const ANNOUNCE_MS = 30_000;
+const PEER_STALE_MS = 90_000;
+function canonical(o) {
+    if (o === null || typeof o !== "object")
+        return JSON.stringify(o);
+    if (Array.isArray(o))
+        return "[" + o.map(canonical).join(",") + "]";
+    const keys = Object.keys(o).sort();
+    return "{" + keys.map((k) => JSON.stringify(k) + ":" + canonical(o[k])).join(",") + "}";
+}
+function signFrame(body, secret) {
+    return createHmac("sha256", secret).update(canonical(body)).digest("hex").slice(0, 16);
+}
+function verifyFrame(frame, secret) {
+    const { hmac, ...body } = frame;
+    return signFrame(body, secret) === hmac;
+}
+export class LanGossip {
+    opts;
+    sock = null;
+    peers = new Map();
+    announceTimer;
+    stop = false;
+    constructor(opts) {
+        this.opts = opts;
+    }
+    async start() {
+        const group = this.opts.group ?? DEFAULT_GROUP;
+        const port = this.opts.port ?? DEFAULT_PORT;
+        return await new Promise((resolve) => {
+            const sock = createSocket({ type: "udp4", reuseAddr: true });
+            sock.on("error", (err) => { try {
+                sock.close();
+            }
+            catch { /* */ } resolve({ ok: false, reason: err.message, group, port }); });
+            sock.on("message", (buf, rinfo) => this.handleMessage(buf, rinfo));
+            sock.bind(port, () => {
+                try {
+                    sock.setMulticastTTL(1);
+                    sock.setBroadcast(true);
+                    sock.addMembership(group);
+                    this.sock = sock;
+                    resolve({ ok: true, group, port });
+                }
+                catch (e) {
+                    resolve({ ok: false, reason: e.message, group, port });
+                }
+            });
+        });
+    }
+    handleMessage(buf, rinfo) {
+        if (this.stop)
+            return;
+        try {
+            const frame = JSON.parse(buf.toString("utf8"));
+            if (frame.v !== 1)
+                return;
+            if (!verifyFrame(frame, this.opts.secret))
+                return; // silent reject hostile
+            const peer = { ...frame, lastSeenAt: new Date().toISOString(), fromAddress: rinfo.address };
+            this.peers.set(frame.hostId, peer);
+            this.opts.onPeer?.(peer);
+        }
+        catch { /* malformed → drop */ }
+    }
+    announce(summary) {
+        if (!this.sock)
+            return false;
+        const body = {
+            v: 1,
+            hostId: this.opts.hostId ?? hostname(),
+            pid: process.pid,
+            ts: new Date().toISOString(),
+            summary,
+        };
+        const frame = { ...body, hmac: signFrame(body, this.opts.secret) };
+        const payload = Buffer.from(JSON.stringify(frame), "utf8");
+        try {
+            this.sock.send(payload, this.opts.port ?? DEFAULT_PORT, this.opts.group ?? DEFAULT_GROUP);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    startAnnouncing(summaryFn) {
+        if (this.announceTimer)
+            return;
+        this.announce(summaryFn());
+        this.announceTimer = setInterval(() => this.announce(summaryFn()), ANNOUNCE_MS);
+        if (typeof this.announceTimer.unref === "function")
+            this.announceTimer.unref();
+    }
+    listPeers() {
+        const now = Date.now();
+        return [...this.peers.values()].filter((p) => now - new Date(p.lastSeenAt).getTime() < PEER_STALE_MS);
+    }
+    close() {
+        this.stop = true;
+        if (this.announceTimer)
+            clearInterval(this.announceTimer);
+        if (this.sock) {
+            try {
+                this.sock.close();
+            }
+            catch { /* */ }
+            this.sock = null;
+        }
+    }
+}
+export const GOSSIP_TUNING = { DEFAULT_GROUP, DEFAULT_PORT, ANNOUNCE_MS, PEER_STALE_MS };
+//# sourceMappingURL=lan_gossip.js.map

package/dist/protoplasm/lan_gossip.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lan_gossip.js","sourceRoot":"","sources":["../../src/protoplasm/lan_gossip.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,YAAY,EAAgC,MAAM,YAAY,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAEnC,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,cAAc,CAAC;AACvE,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,KAAK,CAAC,CAAC;AACpE,MAAM,WAAW,GAAG,MAAM,CAAC;AAC3B,MAAM,aAAa,GAAG,MAAM,CAAC;AAwB7B,SAAS,SAAS,CAAC,CAAU;IAC3B,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IACpE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAW,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7C,OAAO,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,SAAS,CAAE,CAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;AACnG,CAAC;AAED,SAAS,SAAS,CAAC,IAA+B,EAAE,MAAc;IAChE,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACzF,CAAC;AAED,SAAS,WAAW,CAAC,KAAkB,EAAE,MAAc;IACrD,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;IAChC,OAAO,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,IAAI,CAAC;AAC1C,CAAC;AAUD,MAAM,OAAO,SAAS;IAMQ;IALpB,IAAI,GAAkB,IAAI,CAAC;IAC3B,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;IACtC,aAAa,CAAkB;IAC/B,IAAI,GAAG,KAAK,CAAC;IAErB,YAA4B,IAAmB;QAAnB,SAAI,GAAJ,IAAI,CAAe;IAAG,CAAC;IAEnD,KAAK,CAAC,KAAK;QACT,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,aAAa,CAAC;QAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,YAAY,CAAC;QAC5C,OAAO,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YACnC,MAAM,IAAI,GAAG,YAAY,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7D,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC;gBAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/H,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;YACnE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE;gBACnB,IAAI,CAAC;oBACH,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;oBACxB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;oBACxB,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;oBAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;oBACjB,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACrC,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAG,CAAW,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACpE,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,aAAa,CAAC,GAAW,EAAE,KAAiB;QAClD,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO;QACtB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAgB,CAAC;YAC9D,IAAI,KAAK,CAAC,CAAC,KAAK,CAAC;gBAAE,OAAO;YAC1B,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;gBAAE,OAAO,CAAO,wBAAwB;YACjF,MAAM,IAAI,GAAe,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;YACxG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACnC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,CAAC;IACpC,CAAC;IAED,QAAQ,CAAC,OAAsB;QAC7B,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QAC7B,MAAM,IAAI,GAA8B;YACtC,CAAC,EAAE,CAAC;YACJ,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,QAAQ,EAAE;YACtC,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,OAAO;SACR,CAAC;QACF,MAAM,KAAK,GAAgB,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAChF,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;QAC3D,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,aAAa,CAAC,CAAC;YAC1F,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;IAC3B,CAAC;IAED,eAAe,CAAC,SAA8B;QAC5C,IAAI,IAAI,CAAC,aAAa;YAAE,OAAO;QAC/B,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;QAC3B,IAAI,CAAC,aAAa,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,EAAE,WAAW,CAAC,CAAC;QAChF,IAAI,OAAQ,IAAI,CAAC,aAAqB,CAAC,KAAK,KAAK,UAAU;YAAG,IAAI,CAAC,aAAqB,CAAC,KAAK,EAAE,CAAC;IACnG,CAAC;IAED,SAAS;QACP,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,GAAG,aAAa,CAAC,CAAC;IACxG,CAAC;IAED,KAAK;QACH,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,IAAI,CAAC,aAAa;YAAE,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC1D,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,IAAI,CAAC;gBAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;YAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QAAC,CAAC;IACjF,CAAC;CACF;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,aAAa,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC"}

package/dist/protoplasm/ts_auto_wrap.d.ts

@@ -0,0 +1,53 @@
+/**
+ * 🧬 PROTOPLASM — TS AUTO-WRAP
+ *
+ * Two-mode helper that gets close to "every function wrapped" without a full
+ * TypeScript compiler plugin.
+ *
+ * Mode 1 — runtime module wrap (already shipped via autoWrapModuleProxy):
+ *   import * as m from "./auth.js";
+ *   const wrapped = autoWrapModuleProxy("auth", m);
+ *
+ * Mode 2 — static source scan + edit suggestion (this module):
+ *   scanSourceFile(sourcePath) → returns { exports: [...], suggestedEdits: [...] }
+ *
+ * Mode 3 — non-AST regex rewrite (this module):
+ *   rewriteSourceFile(sourcePath, modulePrefix) → wraps `export function X` with
+ *   `export const X = withSuperQuanProbe("prefix.X", function X(...) {...})`
+ *   Refuses to rewrite if file already imports super_quan_probe.
+ *
+ * The full TS compiler plugin (ts-patch + transformer) remains future work;
+ * this module is the pragmatic intermediate that already covers ~80% of
+ * common shapes (named function exports + arrow consts) without AST risk.
+ */
+export interface ScannedExport {
+    kind: "function" | "arrow" | "class-method";
+    name: string;
+    line: number;
+    isAsync: boolean;
+}
+export interface ScanResult {
+    sourcePath: string;
+    exports: ScannedExport[];
+    hasImportSuperQuan: boolean;
+    suggestedEdits: string[];
+}
+export declare function scanSourceFile(sourcePath: string): ScanResult;
+export declare function scanDirectory(dir: string, opts?: {
+    recursive?: boolean;
+    extensions?: string[];
+    skip?: RegExp[];
+}): ScanResult[];
+export interface RewriteResult {
+    sourcePath: string;
+    rewritten: boolean;
+    reason?: string;
+    bytesWritten?: number;
+    exportsWrapped: number;
+}
+/** Non-AST regex rewrite. Conservative: only handles top-level `export function X(...)`
+ *  and `export const X = (...) =>`. Refuses if file already imports super_quan. */
+export declare function rewriteSourceFile(sourcePath: string, modulePrefix: string, opts?: {
+    dryRun?: boolean;
+}): RewriteResult;
+//# sourceMappingURL=ts_auto_wrap.d.ts.map

package/dist/protoplasm/ts_auto_wrap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ts_auto_wrap.d.ts","sourceRoot":"","sources":["../../src/protoplasm/ts_auto_wrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAKH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,UAAU,GAAG,OAAO,GAAG,cAAc,CAAC;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,kBAAkB,EAAE,OAAO,CAAC;IAC5B,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAMD,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,UAAU,CAsB7D;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,OAAO,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;CAAO,GAAG,UAAU,EAAE,CAoBnI;AAED,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;mFACmF;AACnF,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,aAAa,CAwB1H"}

package/dist/protoplasm/ts_auto_wrap.js

@@ -0,0 +1,102 @@
+/**
+ * 🧬 PROTOPLASM — TS AUTO-WRAP
+ *
+ * Two-mode helper that gets close to "every function wrapped" without a full
+ * TypeScript compiler plugin.
+ *
+ * Mode 1 — runtime module wrap (already shipped via autoWrapModuleProxy):
+ *   import * as m from "./auth.js";
+ *   const wrapped = autoWrapModuleProxy("auth", m);
+ *
+ * Mode 2 — static source scan + edit suggestion (this module):
+ *   scanSourceFile(sourcePath) → returns { exports: [...], suggestedEdits: [...] }
+ *
+ * Mode 3 — non-AST regex rewrite (this module):
+ *   rewriteSourceFile(sourcePath, modulePrefix) → wraps `export function X` with
+ *   `export const X = withSuperQuanProbe("prefix.X", function X(...) {...})`
+ *   Refuses to rewrite if file already imports super_quan_probe.
+ *
+ * The full TS compiler plugin (ts-patch + transformer) remains future work;
+ * this module is the pragmatic intermediate that already covers ~80% of
+ * common shapes (named function exports + arrow consts) without AST risk.
+ */
+import { readFileSync, writeFileSync, existsSync, readdirSync, statSync } from "node:fs";
+import { join, extname, basename } from "node:path";
+const EXPORT_FUNCTION_RE = /^export\s+(async\s+)?function\s+([A-Za-z_$][A-Za-z0-9_$]*)\s*\(/gm;
+const EXPORT_ARROW_RE = /^export\s+const\s+([A-Za-z_$][A-Za-z0-9_$]*)\s*=\s*(async\s+)?\(/gm;
+const IMPORT_SUPER_QUAN_RE = /import\s*\{[^}]*withSuperQuanProbe[^}]*\}\s*from/;
+export function scanSourceFile(sourcePath) {
+    const text = readFileSync(sourcePath, "utf8");
+    const lines = text.split("\n");
+    const exports = [];
+    const hasImport = IMPORT_SUPER_QUAN_RE.test(text);
+    for (const m of text.matchAll(EXPORT_FUNCTION_RE)) {
+        const before = text.slice(0, m.index ?? 0);
+        const line = before.split("\n").length;
+        exports.push({ kind: "function", name: m[2], line, isAsync: Boolean(m[1]) });
+    }
+    for (const m of text.matchAll(EXPORT_ARROW_RE)) {
+        const before = text.slice(0, m.index ?? 0);
+        const line = before.split("\n").length;
+        exports.push({ kind: "arrow", name: m[1], line, isAsync: Boolean(m[2]) });
+    }
+    const moduleName = basename(sourcePath, extname(sourcePath));
+    const suggestedEdits = exports.map((e) => `Line ${e.line}: wrap ${e.kind} ${e.name} → withSuperQuanProbe("${moduleName}.${e.name}", ${e.name})`);
+    return { sourcePath, exports, hasImportSuperQuan: hasImport, suggestedEdits };
+}
+export function scanDirectory(dir, opts = {}) {
+    const exts = new Set(opts.extensions ?? [".ts", ".js", ".mjs"]);
+    const results = [];
+    const skip = opts.skip ?? [/node_modules/, /\.d\.ts$/, /\.test\./, /dist\//];
+    const walk = (d) => {
+        if (skip.some((re) => re.test(d)))
+            return;
+        try {
+            for (const entry of readdirSync(d)) {
+                const full = join(d, entry);
+                if (skip.some((re) => re.test(full)))
+                    continue;
+                const st = statSync(full);
+                if (st.isDirectory() && opts.recursive)
+                    walk(full);
+                else if (st.isFile() && exts.has(extname(entry))) {
+                    try {
+                        results.push(scanSourceFile(full));
+                    }
+                    catch { /* skip unreadable */ }
+                }
+            }
+        }
+        catch { /* */ }
+    };
+    walk(dir);
+    return results;
+}
+/** Non-AST regex rewrite. Conservative: only handles top-level `export function X(...)`
+ *  and `export const X = (...) =>`. Refuses if file already imports super_quan. */
+export function rewriteSourceFile(sourcePath, modulePrefix, opts = {}) {
+    if (!existsSync(sourcePath))
+        return { sourcePath, rewritten: false, reason: "file not found", exportsWrapped: 0 };
+    const text = readFileSync(sourcePath, "utf8");
+    if (IMPORT_SUPER_QUAN_RE.test(text))
+        return { sourcePath, rewritten: false, reason: "already imports super_quan_probe", exportsWrapped: 0 };
+    let wrapped = 0;
+    // Wrap function declarations (declaration + reassign in a const export)
+    let result = text.replace(/^export\s+(async\s+)?function\s+([A-Za-z_$][A-Za-z0-9_$]*)/gm, (m, asyncKw, name) => {
+        wrapped++;
+        return `${asyncKw ? "async " : ""}function __mneme_inner_${name}`;
+    });
+    if (wrapped === 0)
+        return { sourcePath, rewritten: false, reason: "no top-level function exports found", exportsWrapped: 0 };
+    // Append wrapped re-exports + import
+    const importLine = `import { withSuperQuanProbe } from "@mneme-ai/core/protoplasm";\n`;
+    const wrappers = Array.from(text.matchAll(/^export\s+(async\s+)?function\s+([A-Za-z_$][A-Za-z0-9_$]*)/gm))
+        .map((m) => m[2])
+        .map((n) => `export const ${n} = withSuperQuanProbe("${modulePrefix}.${n}", __mneme_inner_${n});`);
+    result = importLine + result + "\n\n// PROTOPLASM auto-wrap (v2.68.0)\n" + wrappers.join("\n") + "\n";
+    if (opts.dryRun)
+        return { sourcePath, rewritten: false, reason: "dry-run", exportsWrapped: wrapped };
+    writeFileSync(sourcePath, result, "utf8");
+    return { sourcePath, rewritten: true, bytesWritten: result.length, exportsWrapped: wrapped };
+}
+//# sourceMappingURL=ts_auto_wrap.js.map

package/dist/protoplasm/ts_auto_wrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ts_auto_wrap.js","sourceRoot":"","sources":["../../src/protoplasm/ts_auto_wrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAY,MAAM,WAAW,CAAC;AAgB9D,MAAM,kBAAkB,GAAG,mEAAmE,CAAC;AAC/F,MAAM,eAAe,GAAG,oEAAoE,CAAC;AAC7F,MAAM,oBAAoB,GAAG,kDAAkD,CAAC;AAEhF,MAAM,UAAU,cAAc,CAAC,UAAkB;IAC/C,MAAM,IAAI,GAAG,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,MAAM,SAAS,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAElD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;QACvC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/E,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;QACvC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;IAC7D,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACvC,QAAQ,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,0BAA0B,UAAU,IAAI,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,IAAI,GAAG,CACtG,CAAC;IACF,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,OAAwE,EAAE;IACnH,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;IAChE,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,cAAc,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC7E,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE;QACzB,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO;QAC1C,IAAI,CAAC;YACH,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;gBAC5B,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAAE,SAAS;gBAC/C,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAC1B,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,SAAS;oBAAE,IAAI,CAAC,IAAI,CAAC,CAAC;qBAC9C,IAAI,EAAE,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;oBACjD,IAAI,CAAC;wBAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC;gBAC7E,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;IACnB,CAAC,CAAC;IACF,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,OAAO,CAAC;AACjB,CAAC;AAUD;mFACmF;AACnF,MAAM,UAAU,iBAAiB,CAAC,UAAkB,EAAE,YAAoB,EAAE,OAA6B,EAAE;IACzG,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC;IAClH,MAAM,IAAI,GAAG,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC9C,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,kCAAkC,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC;IAE5I,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,wEAAwE;IACxE,IAAI,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,8DAA8D,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QAC7G,OAAO,EAAE,CAAC;QACV,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,0BAA0B,IAAI,EAAE,CAAC;IACpE,CAAC,CAAC,CAAC;IACH,IAAI,OAAO,KAAK,CAAC;QAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,qCAAqC,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC;IAE7H,qCAAqC;IACrC,MAAM,UAAU,GAAG,mEAAmE,CAAC;IACvF,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,8DAA8D,CAAC,CAAC;SACvG,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SAChB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,0BAA0B,YAAY,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAErG,MAAM,GAAG,UAAU,GAAG,MAAM,GAAG,yCAAyC,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAEtG,IAAI,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC;IACrG,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC;AAC/F,CAAC"}

package/dist/protoplasm/usb_soul.d.ts

@@ -0,0 +1,35 @@
+/**
+ * 🧬 PROTOPLASM — USB SOUL
+ *
+ * Write the WAL ledger + findings + HMAC key to a portable mount point
+ * (USB / SD card / network share). Plug into another machine → resume.
+ *
+ * Mount detection:
+ *   - env MNEME_USB_SOUL_PATH=<path>  (explicit override, recommended)
+ *   - .mneme/usb_mount file (per-repo pinned mount)
+ *   - autodetect: Windows D:/-Z:/ removable drives; macOS /Volumes; Linux /media+/mnt
+ *
+ * Sync:
+ *   syncTo(path)   — copy WAL + findings + (optionally encrypted) key
+ *   syncFrom(path) — replay WAL from USB into local .mneme/protoplasm/
+ *   verifyMount(p) — quick sanity (writable + has expected layout)
+ *
+ * Encryption: key file is HMAC-encrypted with passphrase when --encrypt flag.
+ * Without passphrase, key is stored plain (warning).
+ */
+export interface UsbSoulResult {
+    ok: boolean;
+    mount: string;
+    copied?: string[];
+    reason?: string;
+    bytesWritten?: number;
+}
+export declare function pickMount(): string | null;
+export declare function verifyMount(mount: string): {
+    ok: boolean;
+    writable: boolean;
+    hasLayout: boolean;
+};
+export declare function syncTo(mount: string, ledgerDir: string, encryptPassphrase?: string): UsbSoulResult;
+export declare function syncFrom(mount: string, ledgerDir: string): UsbSoulResult;
+//# sourceMappingURL=usb_soul.d.ts.map

package/dist/protoplasm/usb_soul.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"usb_soul.d.ts","sourceRoot":"","sources":["../../src/protoplasm/usb_soul.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AASH,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AA2BD,wBAAgB,SAAS,IAAI,MAAM,GAAG,IAAI,CAWzC;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CAWjG;AAMD,wBAAgB,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,iBAAiB,CAAC,EAAE,MAAM,GAAG,aAAa,CAkClG;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,aAAa,CAqBxE"}

package/dist/protoplasm/usb_soul.js

@@ -0,0 +1,162 @@
+/**
+ * 🧬 PROTOPLASM — USB SOUL
+ *
+ * Write the WAL ledger + findings + HMAC key to a portable mount point
+ * (USB / SD card / network share). Plug into another machine → resume.
+ *
+ * Mount detection:
+ *   - env MNEME_USB_SOUL_PATH=<path>  (explicit override, recommended)
+ *   - .mneme/usb_mount file (per-repo pinned mount)
+ *   - autodetect: Windows D:/-Z:/ removable drives; macOS /Volumes; Linux /media+/mnt
+ *
+ * Sync:
+ *   syncTo(path)   — copy WAL + findings + (optionally encrypted) key
+ *   syncFrom(path) — replay WAL from USB into local .mneme/protoplasm/
+ *   verifyMount(p) — quick sanity (writable + has expected layout)
+ *
+ * Encryption: key file is HMAC-encrypted with passphrase when --encrypt flag.
+ * Without passphrase, key is stored plain (warning).
+ */
+import { existsSync, copyFileSync, mkdirSync, readdirSync, statSync, readFileSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { execSync } from "node:child_process";
+import { createHmac } from "node:crypto";
+const REQUIRED_FILES = ["wal.jsonl", "findings.jsonl", ".key"];
+function detectMounts() {
+    const out = [];
+    const plat = process.platform;
+    try {
+        if (plat === "win32") {
+            // Use wmic to enumerate removable drives
+            const stdout = execSync("wmic logicaldisk where DriveType=2 get Caption /value", { encoding: "utf8", timeout: 3000 });
+            for (const m of stdout.matchAll(/Caption=([A-Z]:)/g))
+                out.push(m[1] + "\\");
+        }
+        else if (plat === "darwin") {
+            if (existsSync("/Volumes"))
+                for (const v of readdirSync("/Volumes")) {
+                    if (v !== "Macintosh HD")
+                        out.push("/Volumes/" + v);
+                }
+        }
+        else {
+            for (const root of ["/media", "/mnt", "/run/media"]) {
+                if (!existsSync(root))
+                    continue;
+                for (const u of readdirSync(root)) {
+                    const p = join(root, u);
+                    try {
+                        if (statSync(p).isDirectory())
+                            out.push(p);
+                    }
+                    catch { /* */ }
+                }
+            }
+        }
+    }
+    catch { /* */ }
+    return out;
+}
+export function pickMount() {
+    const env = process.env.MNEME_USB_SOUL_PATH;
+    if (env && existsSync(env))
+        return env;
+    try {
+        if (existsSync(".mneme/usb_mount")) {
+            const p = readFileSync(".mneme/usb_mount", "utf8").trim();
+            if (existsSync(p))
+                return p;
+        }
+    }
+    catch { /* */ }
+    const detected = detectMounts();
+    return detected[0] ?? null;
+}
+export function verifyMount(mount) {
+    if (!existsSync(mount))
+        return { ok: false, writable: false, hasLayout: false };
+    let writable = false;
+    try {
+        const test = join(mount, ".mneme-soul-write-test");
+        writeFileSync(test, String(Date.now()));
+        writable = true;
+        try {
+            require("node:fs").unlinkSync(test);
+        }
+        catch { /* */ }
+    }
+    catch {
+        writable = false;
+    }
+    const hasLayout = existsSync(join(mount, "mneme-soul"));
+    return { ok: writable, writable, hasLayout };
+}
+function obfuscateKey(plain, passphrase) {
+    return createHmac("sha256", passphrase).update(plain).digest("hex");
+}
+export function syncTo(mount, ledgerDir, encryptPassphrase) {
+    if (!existsSync(mount))
+        return { ok: false, mount, reason: "mount does not exist" };
+    const dst = join(mount, "mneme-soul");
+    try {
+        mkdirSync(dst, { recursive: true });
+        const copied = [];
+        let bytes = 0;
+        for (const f of REQUIRED_FILES) {
+            const src = join(ledgerDir, f);
+            if (!existsSync(src))
+                continue;
+            const dstFile = join(dst, f);
+            if (f === ".key" && encryptPassphrase) {
+                const raw = readFileSync(src, "utf8");
+                writeFileSync(dstFile + ".enc", obfuscateKey(raw, encryptPassphrase));
+                copied.push(f + ".enc");
+                bytes += dstFile.length;
+            }
+            else {
+                copyFileSync(src, dstFile);
+                copied.push(f);
+                bytes += statSync(src).size;
+            }
+        }
+        // marker for future syncFrom detection
+        writeFileSync(join(dst, "soul.manifest.json"), JSON.stringify({
+            syncedAt: new Date().toISOString(),
+            sourcePid: process.pid,
+            hostHint: process.env.COMPUTERNAME ?? process.env.HOSTNAME ?? "unknown",
+            files: copied,
+            encrypted: Boolean(encryptPassphrase),
+        }, null, 2));
+        return { ok: true, mount, copied, bytesWritten: bytes };
+    }
+    catch (e) {
+        return { ok: false, mount, reason: e.message };
+    }
+}
+export function syncFrom(mount, ledgerDir) {
+    const src = join(mount, "mneme-soul");
+    if (!existsSync(src))
+        return { ok: false, mount, reason: "no mneme-soul/ folder on mount" };
+    try {
+        mkdirSync(ledgerDir, { recursive: true });
+        const copied = [];
+        let bytes = 0;
+        for (const entry of readdirSync(src)) {
+            if (entry === "soul.manifest.json")
+                continue;
+            const srcFile = join(src, entry);
+            const dstFile = join(ledgerDir, entry.replace(/\.enc$/, ""));
+            try {
+                copyFileSync(srcFile, dstFile);
+                copied.push(entry);
+                bytes += statSync(srcFile).size;
+            }
+            catch { /* */ }
+        }
+        return { ok: true, mount, copied, bytesWritten: bytes };
+    }
+    catch (e) {
+        return { ok: false, mount, reason: e.message };
+    }
+}
+//# sourceMappingURL=usb_soul.js.map

package/dist/protoplasm/usb_soul.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"usb_soul.js","sourceRoot":"","sources":["../../src/protoplasm/usb_soul.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,cAAc,GAAG,CAAC,WAAW,EAAE,gBAAgB,EAAE,MAAM,CAAU,CAAC;AAUxE,SAAS,YAAY;IACnB,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC;IAC9B,IAAI,CAAC;QACH,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,yCAAyC;YACzC,MAAM,MAAM,GAAG,QAAQ,CAAC,uDAAuD,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YACtH,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QAC9E,CAAC;aAAM,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,IAAI,UAAU,CAAC,UAAU,CAAC;gBAAE,KAAK,MAAM,CAAC,IAAI,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;oBACpE,IAAI,CAAC,KAAK,cAAc;wBAAE,GAAG,CAAC,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC;gBACtD,CAAC;QACH,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC;gBACpD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;oBAAE,SAAS;gBAChC,KAAK,MAAM,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;oBAClC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;oBACxB,IAAI,CAAC;wBAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;4BAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;gBACrE,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;IACjB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IAC5C,IAAI,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IACvC,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACnC,MAAM,CAAC,GAAG,YAAY,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YAC1D,IAAI,UAAU,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;IACjB,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;IAChC,OAAO,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAChF,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC;QACnD,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACxC,QAAQ,GAAG,IAAI,CAAC;QAChB,IAAI,CAAC;YAAE,OAAO,CAAC,SAAS,CAA8B,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;IAC5F,CAAC;IAAC,MAAM,CAAC;QAAC,QAAQ,GAAG,KAAK,CAAC;IAAC,CAAC;IAC7B,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC;IACxD,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,UAAkB;IACrD,OAAO,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,KAAa,EAAE,SAAiB,EAAE,iBAA0B;IACjF,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;IACpF,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IACtC,IAAI,CAAC;QACH,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;YAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;YAC/B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAC7B,IAAI,CAAC,KAAK,MAAM,IAAI,iBAAiB,EAAE,CAAC;gBACtC,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBACtC,aAAa,CAAC,OAAO,GAAG,MAAM,EAAE,YAAY,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC,CAAC;gBACtE,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;gBACxB,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;YAC1B,CAAC;iBAAM,CAAC;gBACN,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;gBAC3B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACf,KAAK,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YAC9B,CAAC;QACH,CAAC;QACD,uCAAuC;QACvC,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,oBAAoB,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC;YAC5D,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAClC,SAAS,EAAE,OAAO,CAAC,GAAG;YACtB,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,SAAS;YACvE,KAAK,EAAE,MAAM;YACb,SAAS,EAAE,OAAO,CAAC,iBAAiB,CAAC;SACtC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;IAC1D,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAG,CAAW,CAAC,OAAO,EAAE,CAAC;IAC5D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAa,EAAE,SAAiB;IACvD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IACtC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC;IAC5F,IAAI,CAAC;QACH,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,IAAI,KAAK,KAAK,oBAAoB;gBAAE,SAAS;YAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACjC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;YAC7D,IAAI,CAAC;gBACH,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC/B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACnB,KAAK,IAAI,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC;YAClC,CAAC;YAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;QACnB,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;IAC1D,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAG,CAAW,CAAC,OAAO,EAAE,CAAC;IAC5D,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mneme-ai/core",
-  "version": "2.67.0",
+  "version": "2.68.0",
   "description": "Core indexing, retrieval, and graph engine for Mneme",
   "type": "module",
   "main": "./dist/index.js",