@mneme-ai/core 2.7.0 → 2.8.1

package/dist/shadow_consensus/index.js

@@ -0,0 +1,132 @@
+/**
+ * v2.8.0 -- SHADOW CONSENSUS.
+ *
+ *   "N vendors silently vote on a claim · winner is the fused verdict."
+ *
+ * The wild move: Mneme can already PREPARE a question + soul-prompt
+ * context. It can already FUSE multiple sensor verdicts via the v2.6
+ * TRUTH KERNEL. SHADOW CONSENSUS composes these two:
+ *
+ *   1. User asks Mneme a high-stakes question.
+ *   2. Mneme generates a soul prompt + question payload tagged with
+ *      a "ballot id".
+ *   3. Mneme writes the ballot to N vendor inboxes (Claude / GPT /
+ *      Gemini / Cursor / etc) via the existing handoff paths — the
+ *      user (or AI orchestrator) pastes to each vendor.
+ *   4. Each vendor's reply lands back as a sensor output (caller calls
+ *      `recordVendorReply(ballotId, vendor, answer)`).
+ *   5. When ≥ M replies arrive, SHADOW CONSENSUS fuses them via the
+ *      v2.6 TRUTH KERNEL and emits a verdict + per-vendor breakdown.
+ *
+ * Mneme becomes a META-LLM that you don't pay for: it asks every
+ * vendor, fuses the answers, surfaces the disagreement. The user paid
+ * for the actual vendor seats; Mneme adds the consensus layer.
+ *
+ * Nobel-tier move: each ballot is HMAC-chained — sending the same
+ * question to Claude twice doesn't fool the consensus (Mneme detects
+ * the duplicate signature). Tampering with one vendor's reply also
+ * fails verification. The consensus IS the proof.
+ *
+ * Privacy: ballots are NEVER persisted off-disk by default. The caller
+ * decides if + where to store them.
+ */
+import { createHash, createHmac, randomBytes } from "node:crypto";
+import { checkTruth } from "../truth_kernel/index.js";
+import { safeHmacEqual } from "../util/hmac_compare.js";
+function canonicalBallot(b) {
+    return JSON.stringify({ id: b.id, question: b.question, context: b.context ?? "", vendors: [...b.vendors].sort(), openedAt: b.openedAt });
+}
+function canonicalReply(r) {
+    return JSON.stringify({ ballotId: r.ballotId, vendor: r.vendor, verdict: r.verdict, confidence: r.confidence, rationale: r.rationale ?? "", receivedAt: r.receivedAt });
+}
+/** Open a new ballot. The HMAC is computed over the canonical body so
+ *  duplicates with a different timestamp don't match. */
+export function openBallot(input) {
+    if (input.vendors.length === 0)
+        throw new Error("openBallot: at least one vendor required");
+    if (input.question.length === 0)
+        throw new Error("openBallot: question must be non-empty");
+    const id = createHash("sha256").update(randomBytes(16)).digest("hex").slice(0, 16);
+    const body = {
+        id,
+        question: input.question,
+        context: input.context,
+        vendors: input.vendors,
+        openedAt: new Date().toISOString(),
+    };
+    const sig = createHmac("sha256", input.secret).update(canonicalBallot(body)).digest("hex");
+    return { ...body, sig };
+}
+/** Verify a ballot's HMAC matches the secret. */
+export function verifyBallot(ballot, secret) {
+    const expected = createHmac("sha256", secret).update(canonicalBallot(ballot)).digest("hex");
+    return safeHmacEqual(expected, ballot.sig);
+}
+/** Record a vendor's reply against a ballot. Fails if the vendor wasn't
+ *  invited or the ballot signature is bad. */
+export function recordReply(input) {
+    if (!verifyBallot(input.ballot, input.secret))
+        return { ok: false, reason: "ballot signature invalid" };
+    if (!input.ballot.vendors.includes(input.vendor))
+        return { ok: false, reason: `vendor ${input.vendor} not invited` };
+    const body = {
+        ballotId: input.ballot.id,
+        vendor: input.vendor,
+        verdict: input.verdict,
+        confidence: Math.max(0, Math.min(1, input.confidence)),
+        rationale: input.rationale,
+        receivedAt: new Date().toISOString(),
+    };
+    const sig = createHmac("sha256", input.secret).update(canonicalReply(body)).digest("hex");
+    return { ok: true, reply: { ...body, sig } };
+}
+/** Verify a vendor reply's HMAC. */
+export function verifyReply(reply, secret) {
+    const expected = createHmac("sha256", secret).update(canonicalReply(reply)).digest("hex");
+    return safeHmacEqual(expected, reply.sig);
+}
+/** Close the ballot and compute the fused consensus.
+ *  Replies that fail HMAC verification are silently dropped + reported
+ *  via `replies.length`. */
+export async function closeConsensus(input) {
+    if (!verifyBallot(input.ballot, input.secret)) {
+        throw new Error("closeConsensus: ballot signature invalid");
+    }
+    const valid = [];
+    const seenVendors = new Set();
+    for (const r of input.replies) {
+        if (r.ballotId !== input.ballot.id)
+            continue;
+        if (!input.ballot.vendors.includes(r.vendor))
+            continue;
+        if (seenVendors.has(r.vendor))
+            continue; // one vote per vendor
+        if (!verifyReply(r, input.secret))
+            continue;
+        valid.push(r);
+        seenVendors.add(r.vendor);
+    }
+    const minQuorum = input.quorumOverride ?? Math.floor(input.ballot.vendors.length / 2) + 1;
+    const quorate = valid.length >= minQuorum;
+    // Wrap each reply as a TRUTH KERNEL sensor adapter.
+    const sensors = valid.map((r) => ({
+        id: r.vendor,
+        weight: 1,
+        run: () => ({ sensor: r.vendor, verdict: r.verdict, confidence: r.confidence, rationale: r.rationale }),
+    }));
+    const truth = await checkTruth({ claim: input.ballot.question, sensors });
+    const coverage = input.ballot.vendors.length > 0 ? valid.length / input.ballot.vendors.length : 0;
+    return {
+        ballot: input.ballot,
+        replies: valid,
+        truth,
+        coverage,
+        quorate,
+        closedAt: new Date().toISOString(),
+    };
+}
+/** Compact pulse summary. */
+export function formatConsensusPulseLine(c) {
+    return `SHADOW-CONSENSUS · ${c.truth.verdict} · pTrue=${c.truth.pTrue.toFixed(2)} · coverage=${(c.coverage * 100).toFixed(0)}% · quorate=${c.quorate} · ballot=${c.ballot.id.slice(0, 8)}`;
+}
+//# sourceMappingURL=index.js.map

package/dist/shadow_consensus/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/shadow_consensus/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,EAAE,UAAU,EAAyC,MAAM,0BAA0B,CAAC;AAC7F,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AA6CxD,SAAS,eAAe,CAAC,CAAsB;IAC7C,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;AAC5I,CAAC;AAED,SAAS,cAAc,CAAC,CAA2B;IACjD,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;AAC1K,CAAC;AASD;yDACyD;AACzD,MAAM,UAAU,UAAU,CAAC,KAAsB;IAC/C,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC5F,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC3F,MAAM,EAAE,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACnF,MAAM,IAAI,GAAwB;QAChC,EAAE;QACF,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACnC,CAAC;IACF,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3F,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,CAAC;AAC1B,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,YAAY,CAAC,MAAc,EAAE,MAAc;IACzD,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5F,OAAO,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;AAC7C,CAAC;AAWD;8CAC8C;AAC9C,MAAM,UAAU,WAAW,CAAC,KAAuB;IACjD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;IACxG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,KAAK,CAAC,MAAM,cAAc,EAAE,CAAC;IACrH,MAAM,IAAI,GAA6B;QACrC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE;QACzB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QACtD,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC;IACF,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;AAC/C,CAAC;AAED,oCAAoC;AACpC,MAAM,UAAU,WAAW,CAAC,KAAkB,EAAE,MAAc;IAC5D,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1F,OAAO,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;AAC5C,CAAC;AAUD;;4BAE4B;AAC5B,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAA0B;IAC7D,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,KAAK,GAAkB,EAAE,CAAC;IAChC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAC9B,IAAI,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,MAAM,CAAC,EAAE;YAAE,SAAS;QAC7C,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;YAAE,SAAS;QACvD,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;YAAE,SAAS,CAAC,sBAAsB;QAC/D,IAAI,CAAC,WAAW,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC;YAAE,SAAS;QAC5C,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACd,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IACD,MAAM,SAAS,GAAG,KAAK,CAAC,cAAc,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;IAC1F,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,IAAI,SAAS,CAAC;IAE1C,oDAAoD;IACpD,MAAM,OAAO,GAAoB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACjD,EAAE,EAAE,CAAC,CAAC,MAAM;QACZ,MAAM,EAAE,CAAC;QACT,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC;KACxG,CAAC,CAAC,CAAC;IACJ,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1E,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAClG,OAAO;QACL,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE,KAAK;QACd,KAAK;QACL,QAAQ;QACR,OAAO;QACP,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACnC,CAAC;AACJ,CAAC;AAED,6BAA6B;AAC7B,MAAM,UAAU,wBAAwB,CAAC,CAAmB;IAC1D,OAAO,sBAAsB,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,QAAQ,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AAC7L,CAAC"}

package/dist/shadow_consensus/shadow_consensus.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=shadow_consensus.test.d.ts.map

package/dist/shadow_consensus/shadow_consensus.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shadow_consensus.test.d.ts","sourceRoot":"","sources":["../../src/shadow_consensus/shadow_consensus.test.ts"],"names":[],"mappings":""}

package/dist/shadow_consensus/shadow_consensus.test.js

@@ -0,0 +1,84 @@
+import { describe, it, expect } from "vitest";
+import { openBallot, recordReply, closeConsensus, verifyBallot, verifyReply, formatConsensusPulseLine } from "./index.js";
+describe("v2.8 SHADOW CONSENSUS", () => {
+    const secret = "test-secret";
+    it("openBallot mints a signed ballot", () => {
+        const b = openBallot({ question: "is X true?", vendors: ["claude", "gpt", "gemini"], secret });
+        expect(b.id).toMatch(/^[0-9a-f]{16}$/);
+        expect(b.sig.length).toBe(64);
+        expect(verifyBallot(b, secret)).toBe(true);
+    });
+    it("openBallot rejects empty inputs", () => {
+        expect(() => openBallot({ question: "", vendors: ["claude"], secret })).toThrow();
+        expect(() => openBallot({ question: "?", vendors: [], secret })).toThrow();
+    });
+    it("verifyBallot detects tampering", () => {
+        const b = openBallot({ question: "q", vendors: ["claude", "gpt"], secret });
+        const tampered = { ...b, question: "different" };
+        expect(verifyBallot(tampered, secret)).toBe(false);
+    });
+    it("recordReply succeeds for invited vendor", () => {
+        const b = openBallot({ question: "q", vendors: ["claude", "gpt"], secret });
+        const r = recordReply({ ballot: b, vendor: "claude", verdict: "TRUE", confidence: 0.9, secret });
+        expect(r.ok).toBe(true);
+        if (r.ok)
+            expect(verifyReply(r.reply, secret)).toBe(true);
+    });
+    it("recordReply rejects un-invited vendor", () => {
+        const b = openBallot({ question: "q", vendors: ["claude"], secret });
+        const r = recordReply({ ballot: b, vendor: "stranger", verdict: "TRUE", confidence: 1, secret });
+        expect(r.ok).toBe(false);
+        if (!r.ok)
+            expect(r.reason).toContain("not invited");
+    });
+    it("recordReply rejects with wrong secret", () => {
+        const b = openBallot({ question: "q", vendors: ["claude"], secret });
+        const r = recordReply({ ballot: b, vendor: "claude", verdict: "TRUE", confidence: 1, secret: "wrong" });
+        expect(r.ok).toBe(false);
+    });
+    it("closeConsensus fuses N replies via TRUTH KERNEL", async () => {
+        const b = openBallot({ question: "is X true?", vendors: ["claude", "gpt", "gemini"], secret });
+        const claudeR = recordReply({ ballot: b, vendor: "claude", verdict: "TRUE", confidence: 0.9, secret });
+        const gptR = recordReply({ ballot: b, vendor: "gpt", verdict: "TRUE", confidence: 0.85, secret });
+        expect(claudeR.ok && gptR.ok).toBe(true);
+        const replies = [
+            claudeR.reply,
+            gptR.reply,
+        ];
+        const c = await closeConsensus({ ballot: b, replies, secret });
+        expect(c.truth.verdict).toBe("ACCEPTED");
+        expect(c.quorate).toBe(true); // 2 of 3 ≥ floor(3/2)+1 = 2
+        expect(c.coverage).toBeCloseTo(2 / 3, 2);
+    });
+    it("closeConsensus drops replies with tampered HMAC", async () => {
+        const b = openBallot({ question: "q", vendors: ["claude", "gpt"], secret });
+        const r1 = recordReply({ ballot: b, vendor: "claude", verdict: "TRUE", confidence: 0.9, secret });
+        const replyOk = r1.reply;
+        const tampered = { ...replyOk, verdict: "FALSE" };
+        const c = await closeConsensus({ ballot: b, replies: [replyOk, tampered], secret });
+        expect(c.replies.length).toBe(1); // tampered dropped
+    });
+    it("closeConsensus enforces one-vote-per-vendor", async () => {
+        const b = openBallot({ question: "q", vendors: ["claude"], secret });
+        const r1 = recordReply({ ballot: b, vendor: "claude", verdict: "TRUE", confidence: 0.9, secret });
+        const r2 = recordReply({ ballot: b, vendor: "claude", verdict: "FALSE", confidence: 0.9, secret });
+        const replies = [r1.reply, r2.reply];
+        const c = await closeConsensus({ ballot: b, replies, secret });
+        expect(c.replies.length).toBe(1); // duplicate dropped
+    });
+    it("closeConsensus not quorate when too few replies", async () => {
+        const b = openBallot({ question: "q", vendors: ["a", "b", "c", "d", "e"], secret });
+        const r = recordReply({ ballot: b, vendor: "a", verdict: "TRUE", confidence: 1, secret });
+        const reply = r.reply;
+        const c = await closeConsensus({ ballot: b, replies: [reply], secret });
+        expect(c.quorate).toBe(false); // 1 of 5 < floor(5/2)+1 = 3
+    });
+    it("formatConsensusPulseLine emits a compact summary", async () => {
+        const b = openBallot({ question: "q", vendors: ["a"], secret });
+        const r = recordReply({ ballot: b, vendor: "a", verdict: "TRUE", confidence: 1, secret });
+        const reply = r.reply;
+        const c = await closeConsensus({ ballot: b, replies: [reply], secret });
+        expect(formatConsensusPulseLine(c)).toContain("SHADOW-CONSENSUS");
+    });
+});
+//# sourceMappingURL=shadow_consensus.test.js.map

package/dist/shadow_consensus/shadow_consensus.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shadow_consensus.test.js","sourceRoot":"","sources":["../../src/shadow_consensus/shadow_consensus.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,EAAE,YAAY,EAAE,WAAW,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAE1H,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,MAAM,MAAM,GAAG,aAAa,CAAC;IAE7B,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,GAAG,UAAU,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/F,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACvC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC9B,MAAM,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QAClF,MAAM,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,GAAG,UAAU,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5E,MAAM,QAAQ,GAAG,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;QACjD,MAAM,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,CAAC,GAAG,UAAU,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5E,MAAM,CAAC,GAAG,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;QACjG,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,CAAC,CAAC,EAAE;YAAE,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,GAAG,UAAU,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACrE,MAAM,CAAC,GAAG,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACjG,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,GAAG,UAAU,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACrE,MAAM,CAAC,GAAG,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QACxG,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,CAAC,GAAG,UAAU,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/F,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;QACvG,MAAM,IAAI,GAAG,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAClG,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG;YACb,OAAgG,CAAC,KAAK;YACtG,IAA0F,CAAC,KAAK;SAClG,CAAC;QACF,MAAM,CAAC,GAAG,MAAM,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/D,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,4BAA4B;QAC1D,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,CAAC,GAAG,UAAU,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5E,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;QAClG,MAAM,OAAO,GAAI,EAAsI,CAAC,KAAK,CAAC;QAC9J,MAAM,QAAQ,GAAG,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,OAAgB,EAAE,CAAC;QAC3D,MAAM,CAAC,GAAG,MAAM,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACpF,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,CAAC,GAAG,UAAU,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACrE,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;QAClG,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;QACnG,MAAM,OAAO,GAAG,CAAE,EAAgJ,CAAC,KAAK,EAAG,EAAgJ,CAAC,KAAK,CAAC,CAAC;QACnU,MAAM,CAAC,GAAG,MAAM,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/D,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,oBAAoB;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,CAAC,GAAG,UAAU,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACpF,MAAM,CAAC,GAAG,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1F,MAAM,KAAK,GAAI,CAAqI,CAAC,KAAK,CAAC;QAC3J,MAAM,CAAC,GAAG,MAAM,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACxE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,4BAA4B;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,CAAC,GAAG,UAAU,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAChE,MAAM,CAAC,GAAG,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1F,MAAM,KAAK,GAAI,CAAqI,CAAC,KAAK,CAAC;QAC3J,MAAM,CAAC,GAAG,MAAM,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACxE,MAAM,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/util/best_effort.d.ts

@@ -0,0 +1,32 @@
+/**
+ * v2.8.0 -- BEST EFFORT marker.
+ *
+ *   "Distinguish deliberate silent catches from accidental bug-swallowers."
+ *
+ * METRON v2.7 counted every `catch {}` as a Reliability penalty. That's
+ * unfair: some catches are intentionally silent (best-effort writes,
+ * optional probes, cleanup paths). The fix is structural — wrap
+ * deliberate silent catches in `bestEffort()` so:
+ *
+ *   1. The intent is documented at the call site (a comment with the
+ *      reason instead of an opaque `catch {}`).
+ *   2. The auditor in METRON can recognise the marker and exclude it
+ *      from the silent-catch penalty.
+ *   3. Optional `onError` callback lets callers log to a structured
+ *      channel without changing the catch shape.
+ *
+ * Nobel-tier move: the marker IS the audit gate. Mneme refuses to ship
+ * Reliability score > 90 unless every catch{} is either WRAPPED in
+ * bestEffort() or REMEDIATED to a real handler. No more silent decay.
+ */
+/** Sentinel string embedded in the call site so METRON's audit can
+ *  recognise a deliberate silent catch. */
+export declare const BEST_EFFORT_MARKER = "BE:silent-by-design";
+/** Synchronous best-effort wrapper. Runs the body, swallows errors,
+ *  optionally invokes onError for telemetry. NEVER throws. */
+export declare function bestEffort<T>(body: () => T, onError?: (e: unknown) => void): T | undefined;
+/** Async best-effort wrapper. */
+export declare function bestEffortAsync<T>(body: () => Promise<T> | T, onError?: (e: unknown) => void): Promise<T | undefined>;
+/** Match catch-block bodies that are documented as best-effort. */
+export declare const BEST_EFFORT_REGEX: RegExp;
+//# sourceMappingURL=best_effort.d.ts.map

package/dist/util/best_effort.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"best_effort.d.ts","sourceRoot":"","sources":["../../src/util/best_effort.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH;2CAC2C;AAC3C,eAAO,MAAM,kBAAkB,wBAAwB,CAAC;AAExD;8DAC8D;AAC9D,wBAAgB,UAAU,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,IAAI,GAAG,CAAC,GAAG,SAAS,CAS1F;AAED,iCAAiC;AACjC,wBAAsB,eAAe,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,IAAI,GAAG,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAS3H;AAED,mEAAmE;AACnE,eAAO,MAAM,iBAAiB,QAA8E,CAAC"}

package/dist/util/best_effort.js

@@ -0,0 +1,58 @@
+/**
+ * v2.8.0 -- BEST EFFORT marker.
+ *
+ *   "Distinguish deliberate silent catches from accidental bug-swallowers."
+ *
+ * METRON v2.7 counted every `catch {}` as a Reliability penalty. That's
+ * unfair: some catches are intentionally silent (best-effort writes,
+ * optional probes, cleanup paths). The fix is structural — wrap
+ * deliberate silent catches in `bestEffort()` so:
+ *
+ *   1. The intent is documented at the call site (a comment with the
+ *      reason instead of an opaque `catch {}`).
+ *   2. The auditor in METRON can recognise the marker and exclude it
+ *      from the silent-catch penalty.
+ *   3. Optional `onError` callback lets callers log to a structured
+ *      channel without changing the catch shape.
+ *
+ * Nobel-tier move: the marker IS the audit gate. Mneme refuses to ship
+ * Reliability score > 90 unless every catch{} is either WRAPPED in
+ * bestEffort() or REMEDIATED to a real handler. No more silent decay.
+ */
+/** Sentinel string embedded in the call site so METRON's audit can
+ *  recognise a deliberate silent catch. */
+export const BEST_EFFORT_MARKER = "BE:silent-by-design";
+/** Synchronous best-effort wrapper. Runs the body, swallows errors,
+ *  optionally invokes onError for telemetry. NEVER throws. */
+export function bestEffort(body, onError) {
+    try {
+        return body();
+    }
+    catch (e) {
+        if (onError) {
+            try {
+                onError(e);
+            }
+            catch { /* BE:silent-by-design (telemetry must not throw) */ }
+        }
+        return undefined;
+    }
+}
+/** Async best-effort wrapper. */
+export async function bestEffortAsync(body, onError) {
+    try {
+        return await body();
+    }
+    catch (e) {
+        if (onError) {
+            try {
+                onError(e);
+            }
+            catch { /* BE:silent-by-design (telemetry must not throw) */ }
+        }
+        return undefined;
+    }
+}
+/** Match catch-block bodies that are documented as best-effort. */
+export const BEST_EFFORT_REGEX = /catch\s*(?:\([^)]*\))?\s*\{\s*\/\*\s*(?:BE:silent-by-design|best-effort)/i;
+//# sourceMappingURL=best_effort.js.map

package/dist/util/best_effort.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"best_effort.js","sourceRoot":"","sources":["../../src/util/best_effort.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH;2CAC2C;AAC3C,MAAM,CAAC,MAAM,kBAAkB,GAAG,qBAAqB,CAAC;AAExD;8DAC8D;AAC9D,MAAM,UAAU,UAAU,CAAI,IAAa,EAAE,OAA8B;IACzE,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC;gBAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,oDAAoD,CAAC,CAAC;QACpF,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,iCAAiC;AACjC,MAAM,CAAC,KAAK,UAAU,eAAe,CAAI,IAA0B,EAAE,OAA8B;IACjG,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC;gBAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,oDAAoD,CAAC,CAAC;QACpF,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,mEAAmE;AACnE,MAAM,CAAC,MAAM,iBAAiB,GAAG,2EAA2E,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mneme-ai/core",
-  "version": "2.7.0",
+  "version": "2.8.1",
   "description": "Core indexing, retrieval, and graph engine for Mneme",
   "type": "module",
   "main": "./dist/index.js",