@mneme-ai/core 2.95.0 → 2.97.0

package/dist/hydra/analytic.js

@@ -0,0 +1,161 @@
+/**
+ * v2.96.0 — HYDRA · the SUPER-BOT ANALYTIC ENGINE.
+ *
+ * A live, self-checking forge loop. It mines (L1), MDL-selects (L2), and
+ * GROWS the codebook one batch at a time — but every growth step is gated
+ * by the gauntlet (L4 lossless ∧ L7 zero-collision). It keeps improving
+ * (L9) until it can no longer add a byte of value, then STOPS. It never
+ * ships a codebook that loses a byte or holds two meanings for one symbol.
+ *
+ * "Continue improvement until it doesn't lie, 100%": the loop's exit
+ * condition is CONVERGENCE (no positive-MDL candidate survives the
+ * gauntlet) — not a guess. Each round strictly increases bytes-saved or
+ * the loop ends. Bounded by construction: the candidate pool is finite and
+ * each accepted phrase is removed from contention.
+ *
+ * Pure + deterministic. No crypto, no I/O, no Date — attestation (L5 sign,
+ * L8 energy cert) lives in attest.ts so this stays trivially testable.
+ */
+import { chooseMarkers, symbolFor, proveLossless, sha256Hex, compress, expand } from "./engine.js";
+import { mineCandidates } from "./mine.js";
+/** Order entries longest-phrase-first + (re)assign deterministic symbols. */
+export function buildCodebook(open, close, phrases, corpus) {
+    const sorted = [...phrases].sort((a, b) => b.phrase.length - a.phrase.length || (a.phrase < b.phrase ? -1 : 1));
+    const entries = sorted.map((p, i) => ({ sym: symbolFor(open, close, i), phrase: p.phrase, hits: p.hits, gain: p.gain }));
+    return { v: 1, open, close, entries, corpusHash: sha256Hex(corpus) };
+}
+/**
+ * L7 — collision detection (the "can't hold two meanings" invariant, the
+ * same discipline as the axiom lattice). A codebook is collision-free iff:
+ *   - every symbol is unique,
+ *   - every phrase is unique,
+ *   - no phrase contains a marker (would make expansion ambiguous).
+ */
+export function collisions(cb) {
+    const reasons = [];
+    const syms = new Set();
+    const phrases = new Set();
+    for (const e of cb.entries) {
+        if (syms.has(e.sym))
+            reasons.push(`duplicate symbol ${JSON.stringify(e.sym)}`);
+        if (phrases.has(e.phrase))
+            reasons.push(`duplicate phrase ${JSON.stringify(e.phrase.slice(0, 24))}`);
+        if (e.phrase.includes(cb.open) || e.phrase.includes(cb.close))
+            reasons.push(`phrase carries a marker`);
+        syms.add(e.sym);
+        phrases.add(e.phrase);
+    }
+    return { collisions: reasons.length, reasons: reasons.slice(0, 8) };
+}
+function codebookByteSize(cb) {
+    let n = 0;
+    for (const e of cb.entries)
+        n += Buffer.byteLength(e.phrase, "utf8") + Buffer.byteLength(e.sym, "utf8") + 4;
+    return n;
+}
+/** Run the full gauntlet (L4 ∧ L6 ∧ L7 + honest ratios) over a codebook. */
+export function gauntlet(corpus, cb) {
+    const proof = proveLossless(corpus, cb);
+    const coll = collisions(cb);
+    // L6 portability: determinism — recompute the round-trip hash; it must
+    // equal the original (single recompute; proveLossless already did one).
+    const portable = sha256Hex(expand(compress(corpus, cb), cb)) === proof.originalHash;
+    const perfect = proof.lossless && coll.collisions === 0 && portable;
+    const codebookBytes = codebookByteSize(cb);
+    return {
+        lossless: proof.lossless,
+        collisions: coll.collisions,
+        portable,
+        bytesOriginal: proof.originalBytes,
+        bytesCompressed: proof.compressedBytes,
+        codebookBytes,
+        ratio: proof.ratio,
+        netRatio: (proof.compressedBytes + codebookBytes) === 0 ? 1 : proof.originalBytes / (proof.compressedBytes + codebookBytes),
+        entries: cb.entries.length,
+        score: perfect ? 100 : 0,
+    };
+}
+/**
+ * L9 — forge the codebook by infinite-until-convergence self-improvement.
+ * Each round: mine candidates not already covered, promote the top batch,
+ * RE-PROVE the gauntlet; if a batch ever broke losslessness or introduced
+ * a collision (it shouldn't, by construction), it is rolled back and
+ * retried one-at-a-time. Stop when no positive-gain candidate survives.
+ */
+export function forgeCodebook(corpus, opts = {}) {
+    const maxRounds = opts.maxRounds ?? 500;
+    const batchPerRound = opts.batchPerRound ?? 16;
+    const maxEntries = opts.maxEntries ?? 512;
+    const auditEvery = opts.auditEvery ?? 16;
+    const dedupSubstrings = opts.dedupSubstrings ?? true;
+    const [open, close] = chooseMarkers(corpus, []);
+    // Mine the full candidate pool ONCE — the corpus is fixed, so the pool
+    // doesn't change. Pre-sorted by MDL gain (L2). Per-candidate admission is
+    // O(1)+dedup; the full lossless proof is the load-bearing L4 gate, run as
+    // a LIVE periodic audit and authoritatively at the end.
+    const pool = mineCandidates(corpus, { minHits: opts.minHits, windowSizes: opts.windowSizes });
+    const chosen = [];
+    const chosenPhrases = new Set();
+    const rounds = [];
+    // collision-free ⟹ lossless (distinct phrases + PUA markers absent from
+    // corpus ⇒ symbols are isolated, expansion is exact). Per-candidate we
+    // check the O(1) collision precondition + substring-dedup; the full proof
+    // audits it. Substring-dedup keeps the codebook LEAN (one high-gain phrase
+    // beats a dozen overlapping sub-phrases).
+    const admissible = (phrase) => {
+        if (chosenPhrases.has(phrase) || phrase.includes(open) || phrase.includes(close))
+            return false;
+        if (dedupSubstrings) {
+            for (const c of chosen)
+                if (c.phrase.includes(phrase))
+                    return false; // redundant with a higher-gain pick
+        }
+        return true;
+    };
+    let cb = buildCodebook(open, close, chosen, corpus);
+    let cursor = 0;
+    for (let round = 0; round < maxRounds && cursor < pool.length; round++) {
+        const before = chosen.length;
+        let taken = 0;
+        while (cursor < pool.length && taken < batchPerRound && chosen.length < maxEntries) {
+            const c = pool[cursor++];
+            if (!c)
+                break;
+            if (!admissible(c.phrase))
+                continue;
+            chosen.push(c);
+            chosenPhrases.add(c.phrase);
+            taken++;
+        }
+        if (chosen.length === before) {
+            if (cursor >= pool.length || chosen.length >= maxEntries)
+                break; // converged
+            continue; // batch all redundant, keep scanning
+        }
+        const lastRound = cursor >= pool.length || chosen.length >= maxEntries;
+        const doAudit = lastRound || round % auditEvery === 0;
+        if (doAudit) {
+            cb = buildCodebook(open, close, chosen, corpus);
+            const g = gauntlet(corpus, cb); // LIVE full audit (L4∧L6∧L7)
+            if (g.score !== 100) { // must not happen by construction
+                const rolledBack = chosen.splice(before);
+                for (const p of rolledBack)
+                    chosenPhrases.delete(p.phrase);
+                cb = buildCodebook(open, close, chosen, corpus);
+                const rg = gauntlet(corpus, cb);
+                rounds.push({ round, added: 0, entries: chosen.length, bytesSaved: rg.bytesOriginal - rg.bytesCompressed, gauntletScore: rg.score, lossless: rg.lossless, collisions: g.collisions });
+                break;
+            }
+            rounds.push({ round, added: chosen.length - before, entries: chosen.length, bytesSaved: g.bytesOriginal - g.bytesCompressed, gauntletScore: g.score, lossless: g.lossless, collisions: g.collisions });
+        }
+        else {
+            rounds.push({ round, added: chosen.length - before, entries: chosen.length, bytesSaved: -1, gauntletScore: -1, lossless: true, collisions: 0 });
+        }
+        if (lastRound)
+            break;
+    }
+    cb = buildCodebook(open, close, chosen, corpus);
+    const finalG = gauntlet(corpus, cb);
+    return { codebook: cb, gauntlet: finalG, rounds, converged: finalG.score === 100 };
+}
+//# sourceMappingURL=analytic.js.map

package/dist/hydra/analytic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analytic.js","sourceRoot":"","sources":["../../src/hydra/analytic.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAqC,aAAa,EAAE,SAAS,EAAE,aAAa,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACtI,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAE3C,6EAA6E;AAC7E,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,KAAa,EAAE,OAA8D,EAAE,MAAc;IACvI,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChH,MAAM,OAAO,GAAoB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1I,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;AACvE,CAAC;AAOD;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,EAAY;IACrC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,oBAAoB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/E,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,oBAAoB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QACrG,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACvG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AACtE,CAAC;AA2BD,SAAS,gBAAgB,CAAC,EAAY;IACpC,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO;QAAE,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5G,OAAO,CAAC,CAAC;AACX,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,QAAQ,CAAC,MAAc,EAAE,EAAY;IACnD,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;IAC5B,uEAAuE;IACvE,wEAAwE;IACxE,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,YAAY,CAAC;IACpF,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,UAAU,KAAK,CAAC,IAAI,QAAQ,CAAC;IACpE,MAAM,aAAa,GAAG,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAC3C,OAAO;QACL,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,QAAQ;QACR,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,aAAa;QACb,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,QAAQ,EAAE,CAAC,KAAK,CAAC,eAAe,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,GAAG,CAAC,KAAK,CAAC,eAAe,GAAG,aAAa,CAAC;QAC3H,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM;QAC1B,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;KACzB,CAAC;AACJ,CAAC;AAoCD;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,MAAc,EAAE,OAAkB,EAAE;IAChE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,GAAG,CAAC;IACxC,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC;IAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,GAAG,CAAC;IAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;IACzC,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC;IACrD,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAEhD,uEAAuE;IACvE,0EAA0E;IAC1E,0EAA0E;IAC1E,wDAAwD;IACxD,MAAM,IAAI,GAAG,cAAc,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IAE9F,MAAM,MAAM,GAA0D,EAAE,CAAC;IACzE,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;IACxC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAEhC,wEAAwE;IACxE,uEAAuE;IACvE,0EAA0E;IAC1E,2EAA2E;IAC3E,0CAA0C;IAC1C,MAAM,UAAU,GAAG,CAAC,MAAc,EAAW,EAAE;QAC7C,IAAI,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC/F,IAAI,eAAe,EAAE,CAAC;YACpB,KAAK,MAAM,CAAC,IAAI,MAAM;gBAAE,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;oBAAE,OAAO,KAAK,CAAC,CAAC,oCAAoC;QAC3G,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,IAAI,EAAE,GAAG,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACpD,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,SAAS,IAAI,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACvE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC7B,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,OAAO,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,KAAK,GAAG,aAAa,IAAI,MAAM,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;YACnF,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YACzB,IAAI,CAAC,CAAC;gBAAE,MAAM;YACd,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC;gBAAE,SAAS;YACpC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACf,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAC5B,KAAK,EAAE,CAAC;QACV,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC7B,IAAI,MAAM,IAAI,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,IAAI,UAAU;gBAAE,MAAM,CAAG,YAAY;YAC/E,SAAS,CAA0D,qCAAqC;QAC1G,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,IAAI,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,IAAI,UAAU,CAAC;QACvE,MAAM,OAAO,GAAG,SAAS,IAAI,KAAK,GAAG,UAAU,KAAK,CAAC,CAAC;QACtD,IAAI,OAAO,EAAE,CAAC;YACZ,EAAE,GAAG,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YAChD,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAiB,6BAA6B;YAC7E,IAAI,CAAC,CAAC,KAAK,KAAK,GAAG,EAAE,CAAC,CAA0B,kCAAkC;gBAChF,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACzC,KAAK,MAAM,CAAC,IAAI,UAAU;oBAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;gBAC3D,EAAE,GAAG,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;gBAChD,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAChC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC,aAAa,GAAG,EAAE,CAAC,eAAe,EAAE,aAAa,EAAE,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;gBACtL,MAAM;YACR,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,GAAG,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,aAAa,GAAG,CAAC,CAAC,eAAe,EAAE,aAAa,EAAE,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;QACzM,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,GAAG,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;QAClJ,CAAC;QACD,IAAI,SAAS;YAAE,MAAM;IACvB,CAAC;IAED,EAAE,GAAG,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACpC,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,KAAK,GAAG,EAAE,CAAC;AACrF,CAAC"}

package/dist/hydra/attest.d.ts

@@ -0,0 +1,60 @@
+/**
+ * v2.96.0 — HYDRA · L5 signed codebook + L8 energy certificate.
+ *
+ * This is the gem's CUT — the facets prior-art research found UNFILLED:
+ * no prompt-compression system signs its codebook or attests the round
+ * trip. HYDRA reuses Mneme's existing NOTARY (Ed25519) spine so a third
+ * party can verify OFFLINE, with the public key alone, that:
+ *   - this exact codebook was forged by this issuer (L5), and
+ *   - it expands a corpus of this exact hash with a perfect gauntlet, and
+ *   - the one-time mining energy buys perpetual ~0-energy recollection (L8,
+ *     the ANAMNESIS thesis: compute once, recollect forever).
+ *
+ * No new crypto — diamonds compound on the NOTARY spine.
+ */
+import { type NotaryReceipt } from "../notary/receipt.js";
+import type { Codebook } from "./engine.js";
+import type { Gauntlet } from "./analytic.js";
+/** Canonical, deterministic serialization of a codebook (for hashing/sig). */
+export declare function canonicalizeCodebook(cb: Codebook): string;
+export interface HydraCodebookProof {
+    codebookHash: string;
+    corpusHash: string;
+    entries: number;
+    gauntletScore: number;
+    ratio: number;
+    bytesOriginal: number;
+    bytesCompressed: number;
+}
+/**
+ * L5 — sign the codebook + its gauntlet verdict into a portable NOTARY
+ * receipt. `at` is the issue timestamp (passed in for determinism/testing;
+ * the CLI supplies Date.now()).
+ */
+export declare function signCodebook(repoRoot: string, cb: Codebook, g: Gauntlet, at: number): NotaryReceipt;
+export interface CodebookVerify {
+    valid: boolean;
+    reason: string;
+    /** True only when the signature is valid AND the receipt's codebookHash
+     *  matches the codebook actually presented (no swap-after-sign). */
+    bound: boolean;
+}
+/**
+ * Verify a signed codebook OFFLINE: the Ed25519 signature must check out
+ * AND the receipt's embedded codebookHash must equal the hash of the
+ * codebook presented. Catches both forged receipts and codebook tampering.
+ */
+export declare function verifyCodebook(receipt: unknown, cb: Codebook): CodebookVerify;
+export interface EnergyCert {
+    receipt: NotaryReceipt;
+    bytesSaved: number;
+    ratio: number;
+    /** Bytes saved per future expansion, paid for by a single mine. */
+    perpetualSavingPerUse: number;
+}
+/**
+ * L8 — energy certificate: the one-time mine cost buys perpetual savings.
+ * Signed via NOTARY so the savings claim is itself verifiable, not boast.
+ */
+export declare function mintEnergyCert(repoRoot: string, cb: Codebook, g: Gauntlet, at: number): EnergyCert;
+//# sourceMappingURL=attest.d.ts.map

package/dist/hydra/attest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attest.d.ts","sourceRoot":"","sources":["../../src/hydra/attest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAA+B,KAAK,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACvF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAE5C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAE9C,8EAA8E;AAC9E,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,QAAQ,GAAG,MAAM,CAKzD;AAED,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,GAAG,aAAa,CAiBnG;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf;wEACoE;IACpE,KAAK,EAAE,OAAO,CAAC;CAChB;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,GAAG,cAAc,CAe7E;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,aAAa,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,mEAAmE;IACnE,qBAAqB,EAAE,MAAM,CAAC;CAC/B;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,GAAG,UAAU,CAUlG"}

package/dist/hydra/attest.js

@@ -0,0 +1,84 @@
+/**
+ * v2.96.0 — HYDRA · L5 signed codebook + L8 energy certificate.
+ *
+ * This is the gem's CUT — the facets prior-art research found UNFILLED:
+ * no prompt-compression system signs its codebook or attests the round
+ * trip. HYDRA reuses Mneme's existing NOTARY (Ed25519) spine so a third
+ * party can verify OFFLINE, with the public key alone, that:
+ *   - this exact codebook was forged by this issuer (L5), and
+ *   - it expands a corpus of this exact hash with a perfect gauntlet, and
+ *   - the one-time mining energy buys perpetual ~0-energy recollection (L8,
+ *     the ANAMNESIS thesis: compute once, recollect forever).
+ *
+ * No new crypto — diamonds compound on the NOTARY spine.
+ */
+import { issueReceipt, verifyReceipt } from "../notary/receipt.js";
+import { sha256Hex } from "./engine.js";
+/** Canonical, deterministic serialization of a codebook (for hashing/sig). */
+export function canonicalizeCodebook(cb) {
+    // Entry order is already deterministic (longest-first); we serialize only
+    // the load-bearing fields so the hash is stable across runs.
+    const entries = cb.entries.map((e) => [e.sym, e.phrase]);
+    return JSON.stringify({ v: cb.v, open: cb.open, close: cb.close, corpusHash: cb.corpusHash, entries });
+}
+/**
+ * L5 — sign the codebook + its gauntlet verdict into a portable NOTARY
+ * receipt. `at` is the issue timestamp (passed in for determinism/testing;
+ * the CLI supplies Date.now()).
+ */
+export function signCodebook(repoRoot, cb, g, at) {
+    const proof = {
+        codebookHash: sha256Hex(canonicalizeCodebook(cb)),
+        corpusHash: cb.corpusHash,
+        entries: g.entries,
+        gauntletScore: g.score,
+        ratio: Number(g.ratio.toFixed(4)),
+        bytesOriginal: g.bytesOriginal,
+        bytesCompressed: g.bytesCompressed,
+    };
+    return issueReceipt(repoRoot, {
+        kind: "memory-capsule",
+        subject: `hydra-codebook:${cb.corpusHash.slice(0, 16)}`,
+        payload: proof,
+        includePayload: true,
+        issuedAt: at,
+    });
+}
+/**
+ * Verify a signed codebook OFFLINE: the Ed25519 signature must check out
+ * AND the receipt's embedded codebookHash must equal the hash of the
+ * codebook presented. Catches both forged receipts and codebook tampering.
+ */
+export function verifyCodebook(receipt, cb) {
+    const v = verifyReceipt(receipt);
+    if (!v.valid)
+        return { valid: false, reason: v.reason ?? "invalid signature", bound: false };
+    const payload = receipt.payload;
+    if (!payload || typeof payload.codebookHash !== "string") {
+        return { valid: true, reason: "signature valid but no codebookHash payload to bind", bound: false };
+    }
+    const actual = sha256Hex(canonicalizeCodebook(cb));
+    if (payload.codebookHash !== actual) {
+        return { valid: true, reason: "signature valid but codebook does NOT match receipt (tampered/swapped)", bound: false };
+    }
+    if (payload.corpusHash !== cb.corpusHash) {
+        return { valid: true, reason: "signature valid but corpusHash mismatch", bound: false };
+    }
+    return { valid: true, reason: "signature valid and codebook bound to receipt", bound: true };
+}
+/**
+ * L8 — energy certificate: the one-time mine cost buys perpetual savings.
+ * Signed via NOTARY so the savings claim is itself verifiable, not boast.
+ */
+export function mintEnergyCert(repoRoot, cb, g, at) {
+    const bytesSaved = g.bytesOriginal - g.bytesCompressed;
+    const receipt = issueReceipt(repoRoot, {
+        kind: "memory-capsule",
+        subject: `hydra-energy:${cb.corpusHash.slice(0, 16)}`,
+        payload: { corpusHash: cb.corpusHash, bytesSaved, ratio: Number(g.ratio.toFixed(4)), computedOnce: true },
+        includePayload: true,
+        issuedAt: at,
+    });
+    return { receipt, bytesSaved, ratio: g.ratio, perpetualSavingPerUse: bytesSaved };
+}
+//# sourceMappingURL=attest.js.map

package/dist/hydra/attest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attest.js","sourceRoot":"","sources":["../../src/hydra/attest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAsB,MAAM,sBAAsB,CAAC;AAEvF,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAGxC,8EAA8E;AAC9E,MAAM,UAAU,oBAAoB,CAAC,EAAY;IAC/C,0EAA0E;IAC1E,6DAA6D;IAC7D,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACzD,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;AACzG,CAAC;AAYD;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,QAAgB,EAAE,EAAY,EAAE,CAAW,EAAE,EAAU;IAClF,MAAM,KAAK,GAAuB;QAChC,YAAY,EAAE,SAAS,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC;QACjD,UAAU,EAAE,EAAE,CAAC,UAAU;QACzB,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,aAAa,EAAE,CAAC,CAAC,KAAK;QACtB,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACjC,aAAa,EAAE,CAAC,CAAC,aAAa;QAC9B,eAAe,EAAE,CAAC,CAAC,eAAe;KACnC,CAAC;IACF,OAAO,YAAY,CAAC,QAAQ,EAAE;QAC5B,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,kBAAkB,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;QACvD,OAAO,EAAE,KAAK;QACd,cAAc,EAAE,IAAI;QACpB,QAAQ,EAAE,EAAE;KACb,CAAC,CAAC;AACL,CAAC;AAUD;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,OAAgB,EAAE,EAAY;IAC3D,MAAM,CAAC,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,CAAC,CAAC,CAAC,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,mBAAmB,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC7F,MAAM,OAAO,GAAI,OAA4C,CAAC,OAAO,CAAC;IACtE,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;QACzD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,qDAAqD,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACtG,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,CAAC;IACnD,IAAI,OAAO,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;QACpC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,wEAAwE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACzH,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,KAAK,EAAE,CAAC,UAAU,EAAE,CAAC;QACzC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,yCAAyC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC1F,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,+CAA+C,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AAC/F,CAAC;AAUD;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,QAAgB,EAAE,EAAY,EAAE,CAAW,EAAE,EAAU;IACpF,MAAM,UAAU,GAAG,CAAC,CAAC,aAAa,GAAG,CAAC,CAAC,eAAe,CAAC;IACvD,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE;QACrC,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,gBAAgB,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;QACrD,OAAO,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE;QACzG,cAAc,EAAE,IAAI;QACpB,QAAQ,EAAE,EAAE;KACb,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,qBAAqB,EAAE,UAAU,EAAE,CAAC;AACpF,CAAC"}

package/dist/hydra/engine.d.ts

@@ -0,0 +1,84 @@
+/**
+ * v2.96.0 — HYDRA · L3 deterministic expansion engine + L4 lossless proof.
+ *
+ * HYDRA is NOT a "compressor" (the world has those — LLMLingua/LoPace/AWS
+ * Meta-Tokens). HYDRA is a SIGNED, DETERMINISTIC, PROVABLY-LOSSLESS,
+ * VENDOR-NEUTRAL context codebook that Mneme mines from its OWN corpus.
+ * The defensible gem is the CUT, not the carbon: L5 signed codebook (NOTARY)
+ * × L6 vendor-neutral-by-construction × L7 axiom-lattice binding — a
+ * combination prior-art research found UNFILLED.
+ *
+ * This file is the bedrock every other layer stands on: a substitution
+ * codec whose round-trip is BYTE-IDENTICAL by construction, and a proof
+ * (SHA-256 round-trip) that is a boolean — never "downstream accuracy
+ * stayed similar", always lossless=1.000 or fail. No lies.
+ *
+ * KEY DESIGN (different thinking):
+ *   - Symbols live in the Unicode Private-Use Area (U+E000…), which never
+ *     occurs in real manifests/code/docs. The marker pair is VERIFIED
+ *     absent from the corpus AND every phrase, with deterministic fallback
+ *     to the next candidate pair → collision is impossible, not unlikely.
+ *   - Expansion is a single deterministic pass: phrases (raw corpus
+ *     substrings) cannot contain markers, so no cascade, no ambiguity.
+ *   - Pure functions. Same input → same bytes on every OS/arch (that IS
+ *     the L6 vendor-neutral proof: the LLM never sees the codebook).
+ */
+export interface CodebookEntry {
+    /** The private-use-area symbol that stands in for `phrase`. */
+    sym: string;
+    /** The raw corpus substring this symbol expands to. */
+    phrase: string;
+    /** Occurrences in the corpus at mining time (telemetry only). */
+    hits: number;
+    /** MDL gain in bytes this entry contributed (telemetry only). */
+    gain: number;
+}
+export interface Codebook {
+    v: 1;
+    /** Open marker (PUA char), verified absent from corpus + all phrases. */
+    open: string;
+    /** Close marker (PUA char), verified absent from corpus + all phrases. */
+    close: string;
+    /** Entries ordered LONGEST-phrase-first so greedy encode never splits a
+     *  longer phrase by replacing a shorter sub-phrase first. */
+    entries: CodebookEntry[];
+    /** SHA-256 of the exact corpus this codebook was mined from. */
+    corpusHash: string;
+}
+export declare function sha256Hex(s: string): string;
+/**
+ * Pick a marker pair guaranteed absent from `corpus` and every `phrase`.
+ * Deterministic: always returns the first clean candidate. Throws only if
+ * the (astronomically unlikely) corpus contains every PUA candidate.
+ */
+export declare function chooseMarkers(corpus: string, phrases: string[]): readonly [string, string];
+/** The deterministic symbol for entry index `i`. */
+export declare function symbolFor(open: string, close: string, i: number): string;
+/**
+ * L3 — COMPRESS. Replace each codebook phrase with its symbol, longest
+ * phrase first (the entries are pre-sorted). Pure + deterministic.
+ */
+export declare function compress(text: string, cb: Codebook): string;
+/**
+ * L3 — EXPAND (the Hydra head). Single deterministic pass: replace every
+ * symbol with its phrase. Because phrases are raw corpus substrings they
+ * cannot contain markers, so there is no cascade and the result is exact.
+ */
+export declare function expand(encoded: string, cb: Codebook): string;
+export interface LosslessProof {
+    /** True iff expand(compress(text)) is byte-identical to text. */
+    lossless: boolean;
+    originalHash: string;
+    roundTripHash: string;
+    originalBytes: number;
+    compressedBytes: number;
+    /** original / compressed (1.0 = no gain). */
+    ratio: number;
+}
+/**
+ * L4 — LOSSLESS PROOF. The boolean that cannot lie: a SHA-256 round-trip,
+ * not a similarity score. If `lossless` is ever false the codebook is
+ * REJECTED upstream — HYDRA never ships a codebook that loses a byte.
+ */
+export declare function proveLossless(text: string, cb: Codebook): LosslessProof;
+//# sourceMappingURL=engine.d.ts.map

package/dist/hydra/engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../src/hydra/engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAIH,MAAM,WAAW,aAAa;IAC5B,+DAA+D;IAC/D,GAAG,EAAE,MAAM,CAAC;IACZ,uDAAuD;IACvD,MAAM,EAAE,MAAM,CAAC;IACf,iEAAiE;IACjE,IAAI,EAAE,MAAM,CAAC;IACb,iEAAiE;IACjE,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,QAAQ;IACvB,CAAC,EAAE,CAAC,CAAC;IACL,yEAAyE;IACzE,IAAI,EAAE,MAAM,CAAC;IACb,0EAA0E;IAC1E,KAAK,EAAE,MAAM,CAAC;IACd;iEAC6D;IAC7D,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,gEAAgE;IAChE,UAAU,EAAE,MAAM,CAAC;CACpB;AAcD,wBAAgB,SAAS,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAE3C;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAO1F;AAED,oDAAoD;AACpD,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAExE;AAED;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,GAAG,MAAM,CAO3D;AAED;;;;GAIG;AACH,wBAAgB,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,GAAG,MAAM,CAO5D;AAED,MAAM,WAAW,aAAa;IAC5B,iEAAiE;IACjE,QAAQ,EAAE,OAAO,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,6CAA6C;IAC7C,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,GAAG,aAAa,CAevE"}

package/dist/hydra/engine.js

@@ -0,0 +1,108 @@
+/**
+ * v2.96.0 — HYDRA · L3 deterministic expansion engine + L4 lossless proof.
+ *
+ * HYDRA is NOT a "compressor" (the world has those — LLMLingua/LoPace/AWS
+ * Meta-Tokens). HYDRA is a SIGNED, DETERMINISTIC, PROVABLY-LOSSLESS,
+ * VENDOR-NEUTRAL context codebook that Mneme mines from its OWN corpus.
+ * The defensible gem is the CUT, not the carbon: L5 signed codebook (NOTARY)
+ * × L6 vendor-neutral-by-construction × L7 axiom-lattice binding — a
+ * combination prior-art research found UNFILLED.
+ *
+ * This file is the bedrock every other layer stands on: a substitution
+ * codec whose round-trip is BYTE-IDENTICAL by construction, and a proof
+ * (SHA-256 round-trip) that is a boolean — never "downstream accuracy
+ * stayed similar", always lossless=1.000 or fail. No lies.
+ *
+ * KEY DESIGN (different thinking):
+ *   - Symbols live in the Unicode Private-Use Area (U+E000…), which never
+ *     occurs in real manifests/code/docs. The marker pair is VERIFIED
+ *     absent from the corpus AND every phrase, with deterministic fallback
+ *     to the next candidate pair → collision is impossible, not unlikely.
+ *   - Expansion is a single deterministic pass: phrases (raw corpus
+ *     substrings) cannot contain markers, so no cascade, no ambiguity.
+ *   - Pure functions. Same input → same bytes on every OS/arch (that IS
+ *     the L6 vendor-neutral proof: the LLM never sees the codebook).
+ */
+import { createHash } from "node:crypto";
+/** Candidate marker pairs, built from Private-Use-Area code points
+ *  (U+E000…U+E00B) — these never occur in real manifests/code/docs.
+ *  Built programmatically so the bytes are unambiguous in source. */
+const MARKER_PAIRS = [
+    [String.fromCharCode(0xe000), String.fromCharCode(0xe001)],
+    [String.fromCharCode(0xe002), String.fromCharCode(0xe003)],
+    [String.fromCharCode(0xe004), String.fromCharCode(0xe005)],
+    [String.fromCharCode(0xe006), String.fromCharCode(0xe007)],
+    [String.fromCharCode(0xe008), String.fromCharCode(0xe009)],
+    [String.fromCharCode(0xe00a), String.fromCharCode(0xe00b)],
+];
+export function sha256Hex(s) {
+    return createHash("sha256").update(s, "utf8").digest("hex");
+}
+/**
+ * Pick a marker pair guaranteed absent from `corpus` and every `phrase`.
+ * Deterministic: always returns the first clean candidate. Throws only if
+ * the (astronomically unlikely) corpus contains every PUA candidate.
+ */
+export function chooseMarkers(corpus, phrases) {
+    for (const [o, c] of MARKER_PAIRS) {
+        if (corpus.includes(o) || corpus.includes(c))
+            continue;
+        if (phrases.some((p) => p.includes(o) || p.includes(c)))
+            continue;
+        return [o, c];
+    }
+    throw new Error("HYDRA: corpus exhausts all PUA marker candidates (impossible for real text)");
+}
+/** The deterministic symbol for entry index `i`. */
+export function symbolFor(open, close, i) {
+    return open + i.toString(36) + close;
+}
+/**
+ * L3 — COMPRESS. Replace each codebook phrase with its symbol, longest
+ * phrase first (the entries are pre-sorted). Pure + deterministic.
+ */
+export function compress(text, cb) {
+    let out = text;
+    for (const e of cb.entries) {
+        if (e.phrase.length === 0)
+            continue;
+        out = out.split(e.phrase).join(e.sym);
+    }
+    return out;
+}
+/**
+ * L3 — EXPAND (the Hydra head). Single deterministic pass: replace every
+ * symbol with its phrase. Because phrases are raw corpus substrings they
+ * cannot contain markers, so there is no cascade and the result is exact.
+ */
+export function expand(encoded, cb) {
+    let out = encoded;
+    for (const e of cb.entries) {
+        if (e.phrase.length === 0)
+            continue;
+        out = out.split(e.sym).join(e.phrase);
+    }
+    return out;
+}
+/**
+ * L4 — LOSSLESS PROOF. The boolean that cannot lie: a SHA-256 round-trip,
+ * not a similarity score. If `lossless` is ever false the codebook is
+ * REJECTED upstream — HYDRA never ships a codebook that loses a byte.
+ */
+export function proveLossless(text, cb) {
+    const encoded = compress(text, cb);
+    const restored = expand(encoded, cb);
+    const originalHash = sha256Hex(text);
+    const roundTripHash = sha256Hex(restored);
+    const originalBytes = Buffer.byteLength(text, "utf8");
+    const compressedBytes = Buffer.byteLength(encoded, "utf8");
+    return {
+        lossless: originalHash === roundTripHash,
+        originalHash,
+        roundTripHash,
+        originalBytes,
+        compressedBytes,
+        ratio: compressedBytes === 0 ? 1 : originalBytes / compressedBytes,
+    };
+}
+//# sourceMappingURL=engine.js.map

package/dist/hydra/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../src/hydra/engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AA0BzC;;qEAEqE;AACrE,MAAM,YAAY,GAA6C;IAC7D,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IAC1D,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IAC1D,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IAC1D,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IAC1D,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IAC1D,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;CAC3D,CAAC;AAEF,MAAM,UAAU,SAAS,CAAC,CAAS;IACjC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,MAAc,EAAE,OAAiB;IAC7D,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,YAAY,EAAE,CAAC;QAClC,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,SAAS;QACvD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAAE,SAAS;QAClE,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAChB,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;AACjG,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,KAAa,EAAE,CAAS;IAC9D,OAAO,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC;AACvC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,EAAY;IACjD,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACpC,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,MAAM,CAAC,OAAe,EAAE,EAAY;IAClD,IAAI,GAAG,GAAG,OAAO,CAAC;IAClB,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACpC,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAaD;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,EAAY;IACtD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACrC,MAAM,YAAY,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC1C,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACtD,MAAM,eAAe,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC3D,OAAO;QACL,QAAQ,EAAE,YAAY,KAAK,aAAa;QACxC,YAAY;QACZ,aAAa;QACb,aAAa;QACb,eAAe;QACf,KAAK,EAAE,eAAe,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,GAAG,eAAe;KACnE,CAAC;AACJ,CAAC"}

package/dist/hydra/guard.d.ts

@@ -0,0 +1,75 @@
+/**
+ * v2.97.0 — HYDRA · GUARDED EXPANSION ("Time-To-Trust").
+ *
+ * The fusion gem: HYDRA codebook × the knowledge-atrophy clock × NOTARY.
+ * A normal expand() is byte-lossless. A GUARDED expand is lossless for
+ * TRUSTED content but provably REDACTS stale/quarantined content down to a
+ * signed abstract (sha256 + byte-count) — so an AI literally cannot
+ * hallucinate from expired memory, yet can still verify the redacted
+ * region's identity and request re-hydration.
+ *
+ * Prior-art research (v2.96) found no signed + lossless + TTL-guarded
+ * codebook anywhere. This is that unfilled lane, made measurable:
+ *   - all-fresh ⟹ guarded output is BYTE-IDENTICAL to the original (boolean)
+ *   - any stale entry ⟹ its raw phrase NEVER appears, its sha256 DOES,
+ *     fresh entries stay byte-exact (boolean)
+ *   - deterministic: same input → same bytes (boolean)
+ *
+ * STABILITY: every function is total — it never throws. Malformed input,
+ * a missing field, an unknown trust level → the SAFEST outcome (redact).
+ * The 108-error rule: when in doubt, guard, don't crash and don't leak.
+ */
+import { type Codebook } from "./engine.js";
+export type TrustLevel = "fresh" | "stale" | "quarantined";
+/** A function (or map) that returns the trust level for a symbol. */
+export type TrustResolver = (sym: string) => TrustLevel;
+export declare function trustFromMap(map: Record<string, TrustLevel>): TrustResolver;
+/**
+ * The deterministic redaction placeholder for a guarded entry. Carries the
+ * sha256 of the original phrase (identity-verifiable) + byte count + the
+ * reason — but NOT the content. Re-hydration replaces it with the real
+ * phrase once the symbol is re-verified.
+ */
+export declare function guardedPlaceholder(phrase: string, level: TrustLevel): string;
+/**
+ * GUARDED EXPAND. Fresh symbols expand to their phrase (byte-exact); stale
+ * or quarantined symbols expand to a signed abstract. Total: never throws;
+ * a bad entry is treated as quarantined (fail-closed, never leak).
+ */
+export declare function expandGuarded(encoded: string, cb: Codebook, trustOf: TrustResolver): string;
+/**
+ * RE-HYDRATE a guarded output: given the set of symbols whose access has
+ * been re-verified, replace their placeholders with the real phrase. Total:
+ * unknown symbols / malformed input are left untouched (no throw, no leak).
+ */
+export declare function rehydrate(encoded: string, cb: Codebook, approvedSyms: Iterable<string>, trustOf: TrustResolver): string;
+export interface GuardedGauntlet {
+    /** all-fresh ⟹ guarded output is byte-identical to the original. */
+    freshLossless: boolean;
+    /** every stale phrase is absent from guarded output AND its sha256 present. */
+    redactionSound: boolean;
+    /** fresh entries remain byte-exact even when others are redacted. */
+    freshPreserved: boolean;
+    /** deterministic — two guarded expands hash-identical. */
+    deterministic: boolean;
+    redactedCount: number;
+    freshCount: number;
+    /** 0–100. 100 ⟺ all four invariants hold. Cannot lie about a leak. */
+    score: number;
+}
+/**
+ * The guarded gauntlet — proves the four Time-To-Trust invariants over a
+ * concrete trust assignment. Total + deterministic. `compressFn` lets the
+ * caller pass the engine's compress to avoid an import cycle; if omitted we
+ * verify directly against the codebook entries.
+ */
+export declare function guardedGauntlet(original: string, encoded: string, cb: Codebook, trustMap: Record<string, TrustLevel>): GuardedGauntlet;
+/**
+ * Compose the ATROPHY clock: mark a codebook's entries stale when the
+ * caller's age map says their source region is older than the half-life.
+ * `ageMsOf` returns the age (ms) of the source behind a symbol, or
+ * undefined if unknown (unknown ⇒ fresh, the least-surprising default —
+ * we only redact what we can PROVE is stale). Total; never throws.
+ */
+export declare function trustByAtrophy(cb: Codebook, ageMsOf: (sym: string) => number | undefined, halfLifeMs: number): Record<string, TrustLevel>;
+//# sourceMappingURL=guard.d.ts.map

package/dist/hydra/guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../../src/hydra/guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,KAAK,QAAQ,EAAa,MAAM,aAAa,CAAC;AAEvD,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,OAAO,GAAG,aAAa,CAAC;AAE3D,qEAAqE;AACrE,MAAM,MAAM,aAAa,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,UAAU,CAAC;AAExD,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,aAAa,CAE3E;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,MAAM,CAI5E;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,GAAG,MAAM,CAY3F;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,aAAa,GAAG,MAAM,CAOvH;AAED,MAAM,WAAW,eAAe;IAC9B,oEAAoE;IACpE,aAAa,EAAE,OAAO,CAAC;IACvB,+EAA+E;IAC/E,cAAc,EAAE,OAAO,CAAC;IACxB,qEAAqE;IACrE,cAAc,EAAE,OAAO,CAAC;IACxB,0DAA0D;IAC1D,aAAa,EAAE,OAAO,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,sEAAsE;IACtE,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,EAAE,EAAE,QAAQ,EACZ,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,GACnC,eAAe,CAkDjB;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAUzI"}