@mneme-ai/core 2.81.0 → 2.83.0

package/dist/bgp_router/index.d.ts

@@ -0,0 +1,59 @@
+/**
+ * v2.82.0 — BGP NOTARIZING ROUTER · the cross-protocol "BGP of agent protocols"
+ * (TRUST FABRIC 💎1, on the NOTARY spine).
+ *
+ * Everyone builds ONE protocol (MCP or A2A or x402 or ERC-8004). Nobody builds the
+ * notarizing router that lets a request hop MCP → A2A → x402 → ERC-8004 in one
+ * flow where EVERY hop is signed — like BGP routing between autonomous systems,
+ * but with a notary stamp + CCTV on every segment.
+ *
+ * Each protocol-boundary crossing becomes a NOTARY receipt (kind "protocol-hop"),
+ * prev-chained into a route. `verifyRoute` proves: every hop's signature is valid,
+ * the chain is intact, AND the protocols actually connect (hop[i].to == hop[i+1].from).
+ * A third party verifies the whole cross-protocol path OFFLINE without trusting Mneme.
+ *
+ * Composes NOTARY directly. Pure except route() (signs). Never throws on verify.
+ */
+import { type NotaryReceipt, type IssuerKeyPair } from "../notary/index.js";
+export type Protocol = "mcp" | "a2a" | "x402" | "erc8004" | "http" | "local";
+export interface Hop {
+    from: Protocol;
+    to: Protocol;
+    /** What crosses the boundary (a tool call, an agent task, a payment, an identity check). */
+    action: string;
+    agent?: string;
+    /** Optional structured payload attested at this hop. */
+    payload?: unknown;
+}
+export interface RoutedHop extends Hop {
+    index: number;
+    receipt: NotaryReceipt;
+}
+/**
+ * Route a request across protocol boundaries, notarizing every hop. Returns one
+ * signed, prev-chained receipt per hop. `requestId` ties the route together.
+ */
+export declare function routeRequest(repoRoot: string, input: {
+    requestId: string;
+    hops: Hop[];
+}, keyPair?: IssuerKeyPair): {
+    routeId: string;
+    hops: RoutedHop[];
+    receipts: NotaryReceipt[];
+};
+export interface RouteVerifyResult {
+    valid: boolean;
+    reason: string;
+    hops: number;
+    /** index where it broke, if any. */
+    brokenAt?: number;
+}
+/**
+ * Verify a routed path OFFLINE: every hop signs + chains (NOTARY), AND protocols
+ * connect (each hop's `to` is the next hop's `from`). Catches a tampered or
+ * spliced route across protocol boundaries.
+ */
+export declare function verifyRoute(receipts: NotaryReceipt[]): RouteVerifyResult;
+/** Human path string: mcp→a2a→x402→erc8004. */
+export declare function renderRoute(receipts: NotaryReceipt[]): string;
+//# sourceMappingURL=index.d.ts.map

package/dist/bgp_router/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/bgp_router/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAA6B,KAAK,aAAa,EAAE,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEvG,MAAM,MAAM,QAAQ,GAAG,KAAK,GAAG,KAAK,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,OAAO,CAAC;AAE7E,MAAM,WAAW,GAAG;IAClB,IAAI,EAAE,QAAQ,CAAC;IACf,EAAE,EAAE,QAAQ,CAAC;IACb,4FAA4F;IAC5F,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wDAAwD;IACxD,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,SAAU,SAAQ,GAAG;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,aAAa,CAAC;CACxB;AAID;;;GAGG;AACH,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,GAAG,EAAE,CAAA;CAAE,EACzC,OAAO,CAAC,EAAE,aAAa,GACtB;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,SAAS,EAAE,CAAC;IAAC,QAAQ,EAAE,aAAa,EAAE,CAAA;CAAE,CAkBnE;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,oCAAoC;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,aAAa,EAAE,GAAG,iBAAiB,CAkBxE;AAED,+CAA+C;AAC/C,wBAAgB,WAAW,CAAC,QAAQ,EAAE,aAAa,EAAE,GAAG,MAAM,CAK7D"}

package/dist/bgp_router/index.js

@@ -0,0 +1,77 @@
+/**
+ * v2.82.0 — BGP NOTARIZING ROUTER · the cross-protocol "BGP of agent protocols"
+ * (TRUST FABRIC 💎1, on the NOTARY spine).
+ *
+ * Everyone builds ONE protocol (MCP or A2A or x402 or ERC-8004). Nobody builds the
+ * notarizing router that lets a request hop MCP → A2A → x402 → ERC-8004 in one
+ * flow where EVERY hop is signed — like BGP routing between autonomous systems,
+ * but with a notary stamp + CCTV on every segment.
+ *
+ * Each protocol-boundary crossing becomes a NOTARY receipt (kind "protocol-hop"),
+ * prev-chained into a route. `verifyRoute` proves: every hop's signature is valid,
+ * the chain is intact, AND the protocols actually connect (hop[i].to == hop[i+1].from).
+ * A third party verifies the whole cross-protocol path OFFLINE without trusting Mneme.
+ *
+ * Composes NOTARY directly. Pure except route() (signs). Never throws on verify.
+ */
+import { issueReceipt, verifyChain } from "../notary/index.js";
+const PROTOCOLS = new Set(["mcp", "a2a", "x402", "erc8004", "http", "local"]);
+/**
+ * Route a request across protocol boundaries, notarizing every hop. Returns one
+ * signed, prev-chained receipt per hop. `requestId` ties the route together.
+ */
+export function routeRequest(repoRoot, input, keyPair) {
+    const routed = [];
+    const receipts = [];
+    let prev = null;
+    const hops = Array.isArray(input.hops) ? input.hops : [];
+    for (let i = 0; i < hops.length; i++) {
+        const h = hops[i];
+        const receipt = issueReceipt(repoRoot, {
+            kind: "protocol-hop",
+            subject: `route:${input.requestId}:${i}:${h.from}->${h.to}`,
+            payload: { requestId: input.requestId, index: i, from: h.from, to: h.to, action: h.action, agent: h.agent, hopPayload: h.payload },
+            prev,
+        }, keyPair);
+        prev = receipt.receiptId;
+        routed.push({ ...h, index: i, receipt });
+        receipts.push(receipt);
+    }
+    return { routeId: receipts.length ? receipts[receipts.length - 1].receiptId : input.requestId, hops: routed, receipts };
+}
+/**
+ * Verify a routed path OFFLINE: every hop signs + chains (NOTARY), AND protocols
+ * connect (each hop's `to` is the next hop's `from`). Catches a tampered or
+ * spliced route across protocol boundaries.
+ */
+export function verifyRoute(receipts) {
+    if (!Array.isArray(receipts) || receipts.length === 0)
+        return { valid: false, reason: "empty route", hops: 0 };
+    const chain = verifyChain(receipts, { sameIssuer: true });
+    if (!chain.valid)
+        return { valid: false, reason: `chain: ${chain.reason}`, hops: receipts.length, brokenAt: chain.brokenAt };
+    // Protocol continuity + shape.
+    let prevTo = null;
+    for (let i = 0; i < receipts.length; i++) {
+        const p = receipts[i].payload;
+        if (!p || !PROTOCOLS.has(p.from) || !PROTOCOLS.has(p.to)) {
+            return { valid: false, reason: `hop ${i}: invalid protocol`, hops: receipts.length, brokenAt: i };
+        }
+        if (p.index !== i)
+            return { valid: false, reason: `hop ${i}: index mismatch (route reordered)`, hops: receipts.length, brokenAt: i };
+        if (prevTo !== null && p.from !== prevTo) {
+            return { valid: false, reason: `hop ${i}: protocol discontinuity (${prevTo} ≠ ${p.from})`, hops: receipts.length, brokenAt: i };
+        }
+        prevTo = p.to;
+    }
+    return { valid: true, reason: "ok", hops: receipts.length };
+}
+/** Human path string: mcp→a2a→x402→erc8004. */
+export function renderRoute(receipts) {
+    if (!receipts.length)
+        return "(empty route)";
+    const first = receipts[0].payload;
+    const segs = [first.from ?? "?", ...receipts.map((r) => r.payload.to ?? "?")];
+    return segs.join("→");
+}
+//# sourceMappingURL=index.js.map

package/dist/bgp_router/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/bgp_router/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,YAAY,EAAE,WAAW,EAA0C,MAAM,oBAAoB,CAAC;AAmBvG,MAAM,SAAS,GAAG,IAAI,GAAG,CAAW,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAExF;;;GAGG;AACH,MAAM,UAAU,YAAY,CAC1B,QAAgB,EAChB,KAAyC,EACzC,OAAuB;IAEvB,MAAM,MAAM,GAAgB,EAAE,CAAC;IAC/B,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;QACnB,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE;YACrC,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,SAAS,KAAK,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,EAAE,EAAE;YAC3D,OAAO,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE;YAClI,IAAI;SACL,EAAE,OAAO,CAAC,CAAC;QACZ,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QACzC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC3H,CAAC;AAUD;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,QAAyB;IACnD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAC/G,MAAM,KAAK,GAAG,WAAW,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,IAAI,CAAC,KAAK,CAAC,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,KAAK,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC7H,+BAA+B;IAC/B,IAAI,MAAM,GAAoB,IAAI,CAAC;IACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC,OAAyE,CAAC;QACjG,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAc,CAAC,EAAE,CAAC;YACjF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,oBAAoB,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACpG,CAAC;QACD,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,oCAAoC,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACrI,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACzC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,6BAA6B,MAAM,MAAM,CAAC,CAAC,IAAI,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QAClI,CAAC;QACD,MAAM,GAAG,CAAC,CAAC,EAAc,CAAC;IAC5B,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;AAC9D,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,WAAW,CAAC,QAAyB;IACnD,IAAI,CAAC,QAAQ,CAAC,MAAM;QAAE,OAAO,eAAe,CAAC;IAC7C,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC,OAA4B,CAAC;IACxD,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,GAAG,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAAC,CAAC,OAA2B,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;IACnG,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACxB,CAAC"}

package/dist/byob/byob.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=byob.test.d.ts.map

package/dist/byob/byob.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"byob.test.d.ts","sourceRoot":"","sources":["../../src/byob/byob.test.ts"],"names":[],"mappings":""}

package/dist/byob/byob.test.js

@@ -0,0 +1,57 @@
+/**
+ * v2.82.0 — BYOB portable brain pinned + QUAN tests (💎2).
+ */
+import { describe, it, expect } from "vitest";
+import { mkdtempSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { makeCapsule, packCapsule, verifyCapsule, mergeCapsules } from "./index.js";
+const repo = () => mkdtempSync(join(tmpdir(), "mneme-byob-"));
+describe("v2.82.0 💎2 BYOB (PINNED)", () => {
+    it("Y1 pack → verify offline; tamper fails", () => {
+        const r = repo();
+        const cap = makeCapsule({ owner: "user", vendor: "claude", items: [{ id: "m1", content: "prefer pnpm", ts: 1 }] });
+        const receipt = packCapsule(r, cap);
+        const v = verifyCapsule(JSON.parse(JSON.stringify(receipt)));
+        expect(v.valid).toBe(true);
+        expect(v.capsule.items[0].content).toBe("prefer pnpm");
+        expect(verifyCapsule({ ...receipt, payload: { ...receipt.payload, owner: "attacker" } }).valid).toBe(false);
+    });
+    it("Y2 merge: union by id, last-write-wins by ts, vendors unioned", () => {
+        const a = makeCapsule({ owner: "u", vendor: "claude", items: [{ id: "m1", content: "v1", ts: 1 }, { id: "m2", content: "keep", ts: 1 }] });
+        const b = makeCapsule({ owner: "u", vendor: "gpt", items: [{ id: "m1", content: "v2-newer", ts: 5 }, { id: "m3", content: "new", ts: 2 }] });
+        const m = mergeCapsules(a, b);
+        expect(m.items.find((i) => i.id === "m1").content).toBe("v2-newer"); // LWW
+        expect(m.items.map((i) => i.id)).toEqual(["m1", "m2", "m3"]);
+        expect(m.vendors).toEqual(["claude", "gpt"]);
+    });
+});
+describe("v2.82.0 💎2 QUAN", () => {
+    function randCap(seed) {
+        const items = [];
+        for (let i = 0; i < 8; i++) {
+            const id = `m${(seed * 3 + i) % 12}`;
+            items.push({ id, content: `c${seed}-${i}`, ts: (seed * 7 + i * 13) % 100 });
+        }
+        return makeCapsule({ owner: "u", vendor: `v${seed % 3}`, items });
+    }
+    it("Q merge is commutative + idempotent (CRDT convergence)", () => {
+        for (let s = 0; s < 60; s++) {
+            const a = randCap(s);
+            const b = randCap(s + 1);
+            const ab = mergeCapsules(a, b);
+            const ba = mergeCapsules(b, a);
+            // commutative (item set + LWW values converge; owner from first arg may differ, compare items+vendors)
+            expect(ab.items).toEqual(ba.items);
+            expect(ab.vendors).toEqual(ba.vendors);
+            // idempotent
+            expect(mergeCapsules(ab, ab).items).toEqual(ab.items);
+            // associative-ish: merging a third then re-merging converges
+            const c = randCap(s + 2);
+            const left = mergeCapsules(mergeCapsules(a, b), c);
+            const right = mergeCapsules(a, mergeCapsules(b, c));
+            expect(left.items).toEqual(right.items);
+        }
+    });
+});
+//# sourceMappingURL=byob.test.js.map

package/dist/byob/byob.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"byob.test.js","sourceRoot":"","sources":["../../src/byob/byob.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,EAAmB,MAAM,YAAY,CAAC;AAGrG,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC;AAE9D,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;QACjB,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACnH,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACpC,MAAM,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC7D,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3B,MAAM,CAAC,CAAC,CAAC,OAAQ,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACzD,MAAM,CAAC,aAAa,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,EAAE,GAAI,OAAO,CAAC,OAAkB,EAAE,KAAK,EAAE,UAAU,EAAE,EAAmB,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3I,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,CAAC,GAAG,WAAW,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC3I,MAAM,CAAC,GAAG,WAAW,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC7I,MAAM,CAAC,GAAG,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM;QAC5E,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAC7D,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,SAAS,OAAO,CAAC,IAAY;QAC3B,MAAM,KAAK,GAAiB,EAAE,CAAC;QAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;YACrC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,IAAI,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO,WAAW,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,IAAI,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YAAC,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/C,MAAM,EAAE,GAAG,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC/B,MAAM,EAAE,GAAG,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC/B,uGAAuG;YACvG,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;YACnC,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;YACvC,aAAa;YACb,MAAM,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;YACtD,6DAA6D;YAC7D,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACzB,MAAM,IAAI,GAAG,aAAa,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACnD,MAAM,KAAK,GAAG,aAAa,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACpD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/byob/index.d.ts

@@ -0,0 +1,52 @@
+/**
+ * v2.82.0 — BYOB · "Bring Your Own Brain": user-owned portable memory (TRUST FABRIC 💎2, on NOTARY).
+ *
+ * Vendors silo memory by design (portable memory that flows to a competitor breaks
+ * lock-in — they will NEVER build it). Only an independent player can. BYOB is a
+ * signed, tamper-evident memory CAPSULE the user owns: any vendor (Grok / Gemini /
+ * Claude / Cursor) loads it at session start and writes back at session end, and
+ * nobody can secretly alter it — the Ed25519 signature catches any edit.
+ *
+ * CRDT merge: two vendors editing the brain in parallel reconcile deterministically
+ * (union by item id, last-write-wins by ts) — commutative + idempotent, so the merge
+ * order across vendors doesn't matter.
+ *
+ * Composes NOTARY (the capsule is a signed receipt). Pure except pack() (signs).
+ */
+import { type NotaryReceipt, type IssuerKeyPair } from "../notary/index.js";
+export interface MemoryItem {
+    id: string;
+    content: string;
+    /** ms epoch — last-write-wins tiebreaker. */
+    ts: number;
+    kind?: string;
+}
+export interface Capsule {
+    v: 1;
+    owner: string;
+    /** Vendors that have touched this capsule (union on merge). */
+    vendors: string[];
+    createdAt: number;
+    items: MemoryItem[];
+}
+export declare function makeCapsule(input: {
+    owner: string;
+    vendor?: string;
+    vendors?: string[];
+    items: MemoryItem[];
+    createdAt?: number;
+}): Capsule;
+/** Pack a capsule into a signed, portable NOTARY receipt. */
+export declare function packCapsule(repoRoot: string, capsule: Capsule, keyPair?: IssuerKeyPair): NotaryReceipt;
+export declare function verifyCapsule(receipt: unknown): {
+    valid: boolean;
+    reason: string;
+    capsule?: Capsule;
+};
+/**
+ * CRDT merge of two capsules: union of items by id, last-write-wins by ts (id
+ * tiebreak), union of vendors. Commutative + idempotent + associative — vendors can
+ * merge in any order and converge. Owner is preserved from `a`.
+ */
+export declare function mergeCapsules(a: Capsule, b: Capsule): Capsule;
+//# sourceMappingURL=index.d.ts.map

package/dist/byob/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/byob/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAA+B,KAAK,aAAa,EAAE,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEzG,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,6CAA6C;IAC7C,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,OAAO;IACtB,CAAC,EAAE,CAAC,CAAC;IACL,KAAK,EAAE,MAAM,CAAC;IACd,+DAA+D;IAC/D,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,UAAU,EAAE,CAAC;CACrB;AAmBD,wBAAgB,WAAW,CAAC,KAAK,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,EAAE,UAAU,EAAE,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAS3I;AAED,6DAA6D;AAC7D,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,aAAa,GAAG,aAAa,CAEtG;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,CAQrG;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,GAAG,OAAO,CAgB7D"}

package/dist/byob/index.js

@@ -0,0 +1,82 @@
+/**
+ * v2.82.0 — BYOB · "Bring Your Own Brain": user-owned portable memory (TRUST FABRIC 💎2, on NOTARY).
+ *
+ * Vendors silo memory by design (portable memory that flows to a competitor breaks
+ * lock-in — they will NEVER build it). Only an independent player can. BYOB is a
+ * signed, tamper-evident memory CAPSULE the user owns: any vendor (Grok / Gemini /
+ * Claude / Cursor) loads it at session start and writes back at session end, and
+ * nobody can secretly alter it — the Ed25519 signature catches any edit.
+ *
+ * CRDT merge: two vendors editing the brain in parallel reconcile deterministically
+ * (union by item id, last-write-wins by ts) — commutative + idempotent, so the merge
+ * order across vendors doesn't matter.
+ *
+ * Composes NOTARY (the capsule is a signed receipt). Pure except pack() (signs).
+ */
+import { issueReceipt, verifyReceipt } from "../notary/index.js";
+function normItems(items) {
+    if (!Array.isArray(items))
+        return [];
+    const out = [];
+    for (const it of items) {
+        const r = it;
+        if (r && typeof r.id === "string" && typeof r.content === "string") {
+            out.push({ id: r.id, content: r.content, ts: typeof r.ts === "number" && Number.isFinite(r.ts) ? r.ts : 0, ...(typeof r.kind === "string" ? { kind: r.kind } : {}) });
+        }
+    }
+    return out;
+}
+/** Sort items by id for a canonical, stable capsule (so merges are deterministic). */
+function canonicalItems(items) {
+    return items.slice().sort((a, b) => a.id < b.id ? -1 : a.id > b.id ? 1 : 0);
+}
+export function makeCapsule(input) {
+    const vendors = Array.from(new Set([...(input.vendors ?? []), ...(input.vendor ? [input.vendor] : [])].filter((x) => typeof x === "string"))).sort();
+    return {
+        v: 1,
+        owner: String(input.owner ?? "unknown"),
+        vendors,
+        createdAt: typeof input.createdAt === "number" ? input.createdAt : Date.now(),
+        items: canonicalItems(normItems(input.items)),
+    };
+}
+/** Pack a capsule into a signed, portable NOTARY receipt. */
+export function packCapsule(repoRoot, capsule, keyPair) {
+    return issueReceipt(repoRoot, { kind: "memory-capsule", subject: `brain:${capsule.owner}`, payload: capsule }, keyPair);
+}
+export function verifyCapsule(receipt) {
+    const v = verifyReceipt(receipt);
+    if (!v.valid)
+        return { valid: false, reason: v.reason };
+    const p = receipt.payload;
+    if (!p || p.v !== 1 || typeof p.owner !== "string" || !Array.isArray(p.items)) {
+        return { valid: false, reason: "not a memory capsule" };
+    }
+    return { valid: true, reason: "ok", capsule: p };
+}
+/**
+ * CRDT merge of two capsules: union of items by id, last-write-wins by ts (id
+ * tiebreak), union of vendors. Commutative + idempotent + associative — vendors can
+ * merge in any order and converge. Owner is preserved from `a`.
+ */
+export function mergeCapsules(a, b) {
+    const byId = new Map();
+    const consider = (it) => {
+        const cur = byId.get(it.id);
+        if (!cur || it.ts > cur.ts || (it.ts === cur.ts && it.content > cur.content))
+            byId.set(it.id, it);
+    };
+    for (const it of a.items)
+        consider(it);
+    for (const it of b.items)
+        consider(it);
+    const vendors = Array.from(new Set([...a.vendors, ...b.vendors])).sort();
+    return {
+        v: 1,
+        owner: a.owner,
+        vendors,
+        createdAt: Math.min(a.createdAt, b.createdAt),
+        items: canonicalItems(Array.from(byId.values())),
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/byob/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/byob/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAA0C,MAAM,oBAAoB,CAAC;AAmBzG,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,MAAM,GAAG,GAAiB,EAAE,CAAC;IAC7B,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,EAAyB,CAAC;QACpC,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACnE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACxK,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,sFAAsF;AACtF,SAAS,cAAc,CAAC,KAAmB;IACzC,OAAO,KAAK,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAsG;IAChI,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAClK,OAAO;QACL,CAAC,EAAE,CAAC;QACJ,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,SAAS,CAAC;QACvC,OAAO;QACP,SAAS,EAAE,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE;QAC7E,KAAK,EAAE,cAAc,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,WAAW,CAAC,QAAgB,EAAE,OAAgB,EAAE,OAAuB;IACrF,OAAO,YAAY,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,SAAS,OAAO,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;AAC1H,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAgB;IAC5C,MAAM,CAAC,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,CAAC,CAAC,CAAC,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IACxD,MAAM,CAAC,GAAI,OAAyB,CAAC,OAA8B,CAAC;IACpE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9E,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;IAC1D,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;AACnD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,CAAU,EAAE,CAAU;IAClD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC3C,MAAM,QAAQ,GAAG,CAAC,EAAc,EAAE,EAAE;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC5B,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,GAAG,GAAG,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACpG,CAAC,CAAC;IACF,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,KAAK;QAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;IACvC,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,KAAK;QAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACzE,OAAO;QACL,CAAC,EAAE,CAAC;QACJ,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,OAAO;QACP,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC;QAC7C,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;KACjD,CAAC;AACJ,CAAC"}

package/dist/edge_mesh/edge_mesh.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=edge_mesh.test.d.ts.map

package/dist/edge_mesh/edge_mesh.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"edge_mesh.test.d.ts","sourceRoot":"","sources":["../../src/edge_mesh/edge_mesh.test.ts"],"names":[],"mappings":""}

package/dist/edge_mesh/edge_mesh.test.js

@@ -0,0 +1,45 @@
+/**
+ * v2.82.0 — SOVEREIGN EDGE MESH pinned + QUAN tests (💎9).
+ */
+import { describe, it, expect } from "vitest";
+import { mkdtempSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { buildPeerCard, verifyPeerCard, mergeMesh } from "./index.js";
+const repo = () => mkdtempSync(join(tmpdir(), "mneme-edge-"));
+describe("v2.82.0 💎9 Edge Mesh (PINNED)", () => {
+    it("E1 build → verify offline; tamper fails", () => {
+        const r = repo();
+        const { receipt } = buildPeerCard(r, { peer: "laptop", lanUrl: "http://192.168.1.5:7741", capabilities: ["verify", "index"] });
+        const v = verifyPeerCard(JSON.parse(JSON.stringify(receipt)));
+        expect(v.valid).toBe(true);
+        expect(v.peer.lanUrl).toBe("http://192.168.1.5:7741");
+        expect(verifyPeerCard({ ...receipt, payload: { ...receipt.payload, lanUrl: "http://evil.cloud" } }).valid).toBe(false);
+    });
+    it("E2 mergeMesh dedups by peer (latest issuedAt wins) + drops forged", () => {
+        const r = repo();
+        const c1 = buildPeerCard(r, { peer: "node-a", lanUrl: "http://a:1", issuedAt: 100 }).receipt;
+        const c2 = buildPeerCard(r, { peer: "node-a", lanUrl: "http://a:2", issuedAt: 200 }).receipt; // newer
+        const c3 = buildPeerCard(r, { peer: "node-b", lanUrl: "http://b:1", issuedAt: 50 }).receipt;
+        const forged = { ...c3, payload: { ...c3.payload, peer: "node-c" } };
+        const mesh = mergeMesh([c1, c2, c3, forged]);
+        expect(mesh.admitted).toBe(2);
+        expect(mesh.rejected).toBe(1);
+        expect(mesh.peers.find((p) => p.peer === "node-a").lanUrl).toBe("http://a:2");
+    });
+});
+describe("v2.82.0 💎9 QUAN", () => {
+    it("Q mergeMesh is order-independent + idempotent", () => {
+        const r = repo();
+        const cards = [];
+        for (let i = 0; i < 20; i++)
+            cards.push(buildPeerCard(r, { peer: `peer-${i % 7}`, lanUrl: `http://h:${i}`, issuedAt: (i * 11) % 50 }).receipt);
+        const a = mergeMesh(cards);
+        const b = mergeMesh(cards.slice().reverse());
+        expect(a.peers.map((p) => `${p.peer}@${p.lanUrl}`)).toEqual(b.peers.map((p) => `${p.peer}@${p.lanUrl}`));
+        // idempotent: re-merging the admitted cards yields the same set
+        const reMerged = mergeMesh(a.peers.map((p) => buildPeerCard(r, { peer: p.peer, lanUrl: p.lanUrl, capabilities: p.capabilities, issuedAt: p.issuedAt }).receipt));
+        expect(reMerged.peers.map((p) => p.peer)).toEqual(a.peers.map((p) => p.peer));
+    });
+});
+//# sourceMappingURL=edge_mesh.test.js.map

package/dist/edge_mesh/edge_mesh.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"edge_mesh.test.js","sourceRoot":"","sources":["../../src/edge_mesh/edge_mesh.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAGtE,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC;AAE9D,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC9C,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;QACjB,MAAM,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,yBAAyB,EAAE,YAAY,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;QAC/H,MAAM,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC9D,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3B,MAAM,CAAC,CAAC,CAAC,IAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACvD,MAAM,CAAC,cAAc,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,EAAE,GAAI,OAAO,CAAC,OAAkB,EAAE,MAAM,EAAE,mBAAmB,EAAE,EAAmB,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtJ,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;QACjB,MAAM,EAAE,GAAG,aAAa,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC;QAC7F,MAAM,EAAE,GAAG,aAAa,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ;QACtG,MAAM,EAAE,GAAG,aAAa,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC;QAC5F,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,GAAI,EAAE,CAAC,OAAkB,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAmB,CAAC;QAClG,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;QACjB,MAAM,KAAK,GAAoB,EAAE,CAAC;QAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;YAAE,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;QAC/I,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAC3B,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7C,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACzG,gEAAgE;QAChE,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QACjK,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/edge_mesh/index.d.ts

@@ -0,0 +1,51 @@
+/**
+ * v2.82.0 — SOVEREIGN EDGE MESH · cloud-free, signed agent mesh (TRUST FABRIC 💎9, on NOTARY).
+ *
+ * Everything else (MCP remote, A2A, x402) routes through the cloud. The contrarian
+ * bet: enterprise + government will NOT send everything to OpenAI. EDGE MESH is a
+ * local-first / offline P2P agent mesh on LAN/edge where every peer announcement is
+ * an Ed25519-signed card — discover + trust peers without any cloud, and verify each
+ * peer card OFFLINE. Mneme's local-first + AURA (LAN pairing) + ANCHOR (identity)
+ * ethos, made into a mesh.
+ *
+ * Composes NOTARY (peer cards are signed receipts). Pure except buildPeerCard (signs).
+ * No network calls here — cards carry LAN hints; transport is the caller's job.
+ */
+import { type NotaryReceipt, type IssuerKeyPair } from "../notary/index.js";
+export interface PeerCard {
+    v: 1;
+    peer: string;
+    /** LAN endpoint hint (e.g. http://192.168.1.20:7741) — never a cloud URL. */
+    lanUrl: string;
+    capabilities: string[];
+    issuedAt: number;
+}
+export declare function buildPeerCard(repoRoot: string, input: {
+    peer: string;
+    lanUrl: string;
+    capabilities?: string[];
+    issuedAt?: number;
+}, keyPair?: IssuerKeyPair): {
+    card: PeerCard;
+    receipt: NotaryReceipt;
+};
+export interface VerifiedPeer extends PeerCard {
+    issuerFingerprint: string;
+}
+export declare function verifyPeerCard(receipt: unknown): {
+    valid: boolean;
+    reason: string;
+    peer?: VerifiedPeer;
+};
+/**
+ * Gossip-merge a set of peer-card receipts into a verified peer table. Only valid
+ * cards are admitted; per peer, the LATEST issuedAt wins (issuer fingerprint
+ * tiebreak for determinism). Commutative + idempotent — merge in any order, same
+ * mesh. Forged cards are silently dropped.
+ */
+export declare function mergeMesh(receipts: unknown[]): {
+    peers: VerifiedPeer[];
+    admitted: number;
+    rejected: number;
+};
+//# sourceMappingURL=index.d.ts.map

package/dist/edge_mesh/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/edge_mesh/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAA+B,KAAK,aAAa,EAAE,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEzG,MAAM,WAAW,QAAQ;IACvB,CAAC,EAAE,CAAC,CAAC;IACL,IAAI,EAAE,MAAM,CAAC;IACb,6EAA6E;IAC7E,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,EACnF,OAAO,CAAC,EAAE,aAAa,GACtB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,aAAa,CAAA;CAAE,CAU5C;AAED,MAAM,WAAW,YAAa,SAAQ,QAAQ;IAC5C,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,OAAO,GAAG;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,YAAY,CAAA;CAAE,CAQxG;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG;IAAE,KAAK,EAAE,YAAY,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAa5G"}

package/dist/edge_mesh/index.js

@@ -0,0 +1,59 @@
+/**
+ * v2.82.0 — SOVEREIGN EDGE MESH · cloud-free, signed agent mesh (TRUST FABRIC 💎9, on NOTARY).
+ *
+ * Everything else (MCP remote, A2A, x402) routes through the cloud. The contrarian
+ * bet: enterprise + government will NOT send everything to OpenAI. EDGE MESH is a
+ * local-first / offline P2P agent mesh on LAN/edge where every peer announcement is
+ * an Ed25519-signed card — discover + trust peers without any cloud, and verify each
+ * peer card OFFLINE. Mneme's local-first + AURA (LAN pairing) + ANCHOR (identity)
+ * ethos, made into a mesh.
+ *
+ * Composes NOTARY (peer cards are signed receipts). Pure except buildPeerCard (signs).
+ * No network calls here — cards carry LAN hints; transport is the caller's job.
+ */
+import { issueReceipt, verifyReceipt } from "../notary/index.js";
+export function buildPeerCard(repoRoot, input, keyPair) {
+    const card = {
+        v: 1,
+        peer: String(input.peer ?? "unknown"),
+        lanUrl: String(input.lanUrl ?? ""),
+        capabilities: Array.isArray(input.capabilities) ? input.capabilities.filter((x) => typeof x === "string").sort() : [],
+        issuedAt: typeof input.issuedAt === "number" ? input.issuedAt : Date.now(),
+    };
+    const receipt = issueReceipt(repoRoot, { kind: "generic", subject: `peer:${card.peer}`, payload: card }, keyPair);
+    return { card, receipt };
+}
+export function verifyPeerCard(receipt) {
+    const v = verifyReceipt(receipt);
+    if (!v.valid)
+        return { valid: false, reason: v.reason };
+    const p = receipt.payload;
+    if (!p || p.v !== 1 || typeof p.peer !== "string" || typeof p.lanUrl !== "string") {
+        return { valid: false, reason: "not a peer card" };
+    }
+    return { valid: true, reason: "ok", peer: { ...p, issuerFingerprint: v.issuerFingerprint } };
+}
+/**
+ * Gossip-merge a set of peer-card receipts into a verified peer table. Only valid
+ * cards are admitted; per peer, the LATEST issuedAt wins (issuer fingerprint
+ * tiebreak for determinism). Commutative + idempotent — merge in any order, same
+ * mesh. Forged cards are silently dropped.
+ */
+export function mergeMesh(receipts) {
+    const byPeer = new Map();
+    let rejected = 0;
+    for (const r of Array.isArray(receipts) ? receipts : []) {
+        const v = verifyPeerCard(r);
+        if (!v.valid || !v.peer) {
+            rejected++;
+            continue;
+        }
+        const cur = byPeer.get(v.peer.peer);
+        if (!cur || v.peer.issuedAt > cur.issuedAt || (v.peer.issuedAt === cur.issuedAt && v.peer.issuerFingerprint > cur.issuerFingerprint)) {
+            byPeer.set(v.peer.peer, v.peer);
+        }
+    }
+    const peers = Array.from(byPeer.values()).sort((a, b) => a.peer < b.peer ? -1 : a.peer > b.peer ? 1 : 0);
+    return { peers, admitted: peers.length, rejected };
+}
+//# sourceMappingURL=index.js.map

package/dist/edge_mesh/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/edge_mesh/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAA0C,MAAM,oBAAoB,CAAC;AAWzG,MAAM,UAAU,aAAa,CAC3B,QAAgB,EAChB,KAAmF,EACnF,OAAuB;IAEvB,MAAM,IAAI,GAAa;QACrB,CAAC,EAAE,CAAC;QACJ,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,SAAS,CAAC;QACrC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC;QAClC,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE;QAClI,QAAQ,EAAE,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE;KAC3E,CAAC;IACF,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,IAAI,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC;IAClH,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC;AAMD,MAAM,UAAU,cAAc,CAAC,OAAgB;IAC7C,MAAM,CAAC,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,CAAC,CAAC,CAAC,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IACxD,MAAM,CAAC,GAAI,OAAyB,CAAC,OAA+B,CAAC;IACrE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAClF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACrD,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,iBAAkB,EAAE,EAAE,CAAC;AAChG,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,QAAmB;IAC3C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC/C,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACxD,MAAM,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAAC,QAAQ,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QAClD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,iBAAiB,GAAG,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACrI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzG,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;AACrD,CAAC"}

package/dist/gephyra/gephyra.test.d.ts

@@ -0,0 +1,14 @@
+/**
+ * v2.83.0 — GEPHYRA pinned + QUAN tests. Every flow + every plan-B/C path.
+ *   G1 PASS (verdict TRUSTWORTHY)
+ *   G2 CORRECTED (REFUTED → fixed before delivery + nudge + signed receipt)
+ *   G3 QUARANTINED (injection never crosses)
+ *   G4 UNVERIFIED (no engine / engine down → crosses flagged, bridge survives)
+ *   G5 conscience nudge on overconfident unverified claims
+ *   G6 honesty toll → heavy scrutiny for low-trust senders
+ *   G7 default truth-customs catches arithmetic falsehood
+ *   G8 bridgeStatus counts crossings + hallucinations caught; chain intact
+ *   QUAN: crossBridge NEVER throws over fuzz; every crossing yields a verifiable receipt
+ */
+export {};
+//# sourceMappingURL=gephyra.test.d.ts.map

package/dist/gephyra/gephyra.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gephyra.test.d.ts","sourceRoot":"","sources":["../../src/gephyra/gephyra.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG"}