@mneme-ai/mcp 1.9.0 → 1.17.2

package/dist/tools/_genome_tools.d.ts

@@ -0,0 +1,21 @@
+/**
+ * mneme.genome.* — MCP tools that expose the Genetic Engineering primitives
+ * (G1-G5) so AI agents discover them automatically via `tools/list`.
+ *
+ * Six tools:
+ *   • mneme.genome.annotate       — tag a tool list with functional domains
+ *   • mneme.genome.phylogeny      — build ancestry tree + cousins/distance queries
+ *   • mneme.genome.circuit        — run a genetic-circuit network (toggle/AND/OR/NOT/oscillator)
+ *   • mneme.genome.operon_resolve — resolve which operon governs a tool + its current behavior modifier
+ *   • mneme.genome.crispr_edit    — apply a CRISPR edit to a pack (validate-then-commit)
+ *   • mneme.genome.synthesize     — de novo synthesis: recipe → cryptographically-named ToolDefinition
+ */
+import type { MnemeTool } from "./_types.js";
+export declare const genomeAnnotateTool: MnemeTool;
+export declare const genomePhylogenyTool: MnemeTool;
+export declare const genomeCircuitTool: MnemeTool;
+export declare const genomeOperonResolveTool: MnemeTool;
+export declare const genomeCrisprTool: MnemeTool;
+export declare const genomeSynthesizeTool: MnemeTool;
+export declare const genomeTools: MnemeTool[];
+//# sourceMappingURL=_genome_tools.d.ts.map

package/dist/tools/_genome_tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_genome_tools.d.ts","sourceRoot":"","sources":["../../src/tools/_genome_tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAI7C,eAAO,MAAM,kBAAkB,EAAE,SAuChC,CAAC;AAIF,eAAO,MAAM,mBAAmB,EAAE,SA4DjC,CAAC;AAIF,eAAO,MAAM,iBAAiB,EAAE,SAuC/B,CAAC;AAIF,eAAO,MAAM,uBAAuB,EAAE,SA8BrC,CAAC;AAIF,eAAO,MAAM,gBAAgB,EAAE,SA4B9B,CAAC;AAIF,eAAO,MAAM,oBAAoB,EAAE,SAqClC,CAAC;AAEF,eAAO,MAAM,WAAW,EAAE,SAAS,EAOlC,CAAC"}

package/dist/tools/_genome_tools.js

@@ -0,0 +1,247 @@
+/**
+ * mneme.genome.* — MCP tools that expose the Genetic Engineering primitives
+ * (G1-G5) so AI agents discover them automatically via `tools/list`.
+ *
+ * Six tools:
+ *   • mneme.genome.annotate       — tag a tool list with functional domains
+ *   • mneme.genome.phylogeny      — build ancestry tree + cousins/distance queries
+ *   • mneme.genome.circuit        — run a genetic-circuit network (toggle/AND/OR/NOT/oscillator)
+ *   • mneme.genome.operon_resolve — resolve which operon governs a tool + its current behavior modifier
+ *   • mneme.genome.crispr_edit    — apply a CRISPR edit to a pack (validate-then-commit)
+ *   • mneme.genome.synthesize     — de novo synthesis: recipe → cryptographically-named ToolDefinition
+ */
+import { genome } from "@mneme-ai/core";
+// ─── 1. annotate ─────────────────────────────────────────────────────
+export const genomeAnnotateTool = {
+    name: "mneme.genome.annotate",
+    category: "meta",
+    description: "Tag a list of MCP tools with their functional domain (search · mutate · verify · compose · regulate · augment · observe · synthesize) + sub-domains + mutability + genus/species. Pure deterministic. Used by the phylogeny tool to build ancestry trees.",
+    triggers: ["annotate tools", "classify mcp tools", "what domain is this tool"],
+    inputSchema: {
+        type: "object",
+        properties: {
+            tools: {
+                type: "array",
+                items: {
+                    type: "object",
+                    properties: {
+                        name: { type: "string" },
+                        description: { type: "string" },
+                        parent: { type: "string" },
+                    },
+                    required: ["name"],
+                },
+            },
+        },
+        required: ["tools"],
+    },
+    handler: async (_rt, args) => {
+        const tools = args["tools"] ?? [];
+        const result = genome.annotateCatalog(tools);
+        return {
+            data: result,
+            wisdom: `Annotated ${result.tools.length} tool(s). Domain breakdown: ${Object.entries(result.domainCounts)
+                .map(([d, n]) => `${d}=${n}`)
+                .join(", ")}.`,
+            followUp: ["mneme.genome.phylogeny"],
+            confidence: { level: "high" },
+        };
+    },
+};
+// ─── 2. phylogeny ────────────────────────────────────────────────────
+export const genomePhylogenyTool = {
+    name: "mneme.genome.phylogeny",
+    category: "meta",
+    description: "Build the phylogenetic (ancestry) tree of a tool catalog. Supports queries: ancestors of a tool, cousins (siblings within k generations), tree-distance between two tools, closest-relative search across a candidate pool. Use when AI agent needs to reason about WHICH tool to call by relatedness, not just name match.",
+    triggers: ["tool ancestors", "find similar tool", "closest relative", "speciation"],
+    inputSchema: {
+        type: "object",
+        properties: {
+            tools: { type: "array" },
+            query: {
+                type: "object",
+                properties: {
+                    kind: { type: "string", enum: ["ancestors", "cousins", "distance", "closest", "speciation", "ascii"] },
+                    tool: { type: "string" },
+                    other: { type: "string" },
+                    k: { type: "number" },
+                    candidates: { type: "array", items: { type: "string" } },
+                },
+                required: ["kind"],
+            },
+        },
+        required: ["tools", "query"],
+    },
+    handler: async (_rt, args) => {
+        const tools = args["tools"] ?? [];
+        const annotated = genome.annotateCatalog(tools).tools;
+        const tree = genome.buildPhylogeny(annotated);
+        const q = args["query"];
+        let result;
+        switch (q.kind) {
+            case "ancestors":
+                result = q.tool ? genome.findAncestors(tree, q.tool) : [];
+                break;
+            case "cousins":
+                result = q.tool ? genome.findCousins(tree, q.tool, q.k ?? 1) : [];
+                break;
+            case "distance":
+                result = q.tool && q.other ? genome.treeDistance(tree, q.tool, q.other) : Infinity;
+                break;
+            case "closest":
+                result = q.tool && q.candidates ? genome.findClosestRelative(tree, q.tool, q.candidates) : null;
+                break;
+            case "speciation":
+                result = genome.speciationEvents(tree);
+                break;
+            case "ascii":
+                result = genome.renderAsciiTree(tree);
+                break;
+            default:
+                result = null;
+        }
+        return {
+            data: { query: q, result, totalNodes: tree.byName.size },
+            wisdom: `Phylogeny query '${q.kind}' executed across ${tree.byName.size} nodes.`,
+            followUp: [],
+            confidence: { level: "high" },
+        };
+    },
+};
+// ─── 3. circuit ──────────────────────────────────────────────────────
+export const genomeCircuitTool = {
+    name: "mneme.genome.circuit",
+    category: "meta",
+    description: "Execute a genetic-circuit network: toggle / AND / OR / NOT / oscillator gates composed declaratively. Returns whether the circuit fired + reason. Toggle state is caller-managed (pure function).",
+    triggers: ["genetic circuit", "logic gate", "toggle", "and gate", "or gate"],
+    inputSchema: {
+        type: "object",
+        properties: {
+            network: {
+                type: "object",
+                properties: { steps: { type: "array" } },
+                required: ["steps"],
+            },
+            input: {
+                type: "object",
+                properties: {
+                    signals: { type: "object", additionalProperties: { type: "boolean" } },
+                    payload: {},
+                    toggleState: { type: "object", additionalProperties: { type: "boolean" } },
+                    oscillatorTick: { type: "number" },
+                },
+                required: ["signals"],
+            },
+        },
+        required: ["network", "input"],
+    },
+    handler: async (_rt, args) => {
+        const result = genome.runCircuit(args["network"], args["input"]);
+        return {
+            data: result,
+            wisdom: `Circuit ${result.fired ? "fired ✓" : "blocked ✗"} — ${result.reason}`,
+            followUp: [],
+            confidence: { level: "high" },
+        };
+    },
+};
+// ─── 4. operon_resolve ───────────────────────────────────────────────
+export const genomeOperonResolveTool = {
+    name: "mneme.genome.operon_resolve",
+    category: "meta",
+    description: "Resolve which co-regulated operon governs a tool + its current behavior modifier (requireConstitutionGate / requireStrictSniper / minConfidence / maxResults). Use to determine: should this tool's output be gated more strictly given the current PCI / compliance / governance level?",
+    triggers: ["operon", "regulator", "governance level"],
+    inputSchema: {
+        type: "object",
+        properties: {
+            toolName: { type: "string" },
+            registry: { type: "object" },
+            regulatorLevels: { type: "object", additionalProperties: { type: "string" } },
+        },
+        required: ["toolName", "registry", "regulatorLevels"],
+    },
+    handler: async (_rt, args) => {
+        const r = genome.resolveOperonForTool(args["toolName"], args["registry"], args["regulatorLevels"]);
+        return {
+            data: r,
+            wisdom: r.operon
+                ? `Tool '${args["toolName"]}' governed by operon '${r.operon.id}' at level=${r.level}. Modifier: requireGate=${r.modifier?.requireConstitutionGate}, requireSniper=${r.modifier?.requireStrictSniper}, minConf=${r.modifier?.minConfidence}.`
+                : `Tool '${args["toolName"]}' is unregulated.`,
+            followUp: [],
+            confidence: { level: "high" },
+        };
+    },
+};
+// ─── 5. crispr_edit ──────────────────────────────────────────────────
+export const genomeCrisprTool = {
+    name: "mneme.genome.crispr_edit",
+    category: "meta",
+    description: "Apply a CRISPR edit to a pack: delete tool by id/pattern, replace-tool, add-tool, patch-detection. Validates the post-edit pack against the schema; on validation failure, returns ok=false with structured errors and NO change is committed (fail-closed). Returns SHA-256 hashes of pack before + after.",
+    triggers: ["edit pack", "patch tool", "crispr", "tool surgery"],
+    inputSchema: {
+        type: "object",
+        properties: {
+            pack: { type: "object" },
+            edit: { type: "object" },
+        },
+        required: ["pack", "edit"],
+    },
+    handler: async (_rt, args) => {
+        const r = genome.crisprEdit(args["pack"], args["edit"]);
+        return {
+            data: r,
+            wisdom: r.ok
+                ? `CRISPR edit applied: ${r.summary}. Hash ${r.beforeHash.slice(0, 8)} → ${r.afterHash?.slice(0, 8)}.`
+                : `CRISPR edit refused (fail-closed): ${r.error?.reason}.`,
+            followUp: [],
+            confidence: { level: "high" },
+        };
+    },
+};
+// ─── 6. synthesize ───────────────────────────────────────────────────
+export const genomeSynthesizeTool = {
+    name: "mneme.genome.synthesize",
+    category: "meta",
+    description: "DE NOVO SYNTHESIS — compose a brand new MCP tool at runtime from genetic primitives. Recipe (search patterns + verifiers + augmenters + preconditions + authoredBy) → cryptographically-named ToolDefinition. Identical recipe → identical tool name + DNA hash (deterministic). Validated against pack schema before return. Failure modes are structured.",
+    triggers: ["synthesize tool", "create new tool", "de novo", "new gene"],
+    inputSchema: {
+        type: "object",
+        properties: {
+            intent: { type: "string", description: "Plain-English description of what the tool should do (≥10 chars)" },
+            searchPatterns: { type: "array", items: { type: "string" }, minItems: 1 },
+            fileExtensions: { type: "array", items: { type: "string" } },
+            verifiers: { type: "array", items: { type: "string", enum: ["ast", "semantic", "confidence"] }, minItems: 1 },
+            augmenters: { type: "array", items: { type: "string", enum: ["canonical-paths", "deprecated-paths", "expert-authors", "incidents", "rules"] } },
+            authoredBy: { type: "string" },
+        },
+        required: ["intent", "searchPatterns", "verifiers", "authoredBy"],
+    },
+    handler: async (_rt, args) => {
+        const recipe = {
+            intent: String(args["intent"] ?? ""),
+            searchPatterns: args["searchPatterns"] ?? [],
+            fileExtensions: args["fileExtensions"],
+            verifiers: args["verifiers"] ?? [],
+            augmenters: args["augmenters"] ?? [],
+            authoredBy: String(args["authoredBy"] ?? ""),
+        };
+        const r = genome.synthesize(recipe);
+        return {
+            data: r,
+            wisdom: r.ok
+                ? `Synthesized new tool '${r.tool.name}' (DNA hash ${r.tool.dnaHash.slice(0, 12)}…). Tool is verified against pack schema and ready to register.`
+                : `Synthesis refused: ${r.error?.reason}.`,
+            followUp: r.ok ? ["mneme.dna.search"] : [],
+            confidence: { level: "high" },
+        };
+    },
+};
+export const genomeTools = [
+    genomeAnnotateTool,
+    genomePhylogenyTool,
+    genomeCircuitTool,
+    genomeOperonResolveTool,
+    genomeCrisprTool,
+    genomeSynthesizeTool,
+];
+//# sourceMappingURL=_genome_tools.js.map

package/dist/tools/_genome_tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_genome_tools.js","sourceRoot":"","sources":["../../src/tools/_genome_tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAGxC,wEAAwE;AAExE,MAAM,CAAC,MAAM,kBAAkB,GAAc;IAC3C,IAAI,EAAE,uBAAuB;IAC7B,QAAQ,EAAE,MAAM;IAChB,WAAW,EACT,2PAA2P;IAC7P,QAAQ,EAAE,CAAC,gBAAgB,EAAE,oBAAoB,EAAE,0BAA0B,CAAC;IAC9E,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,KAAK,EAAE;gBACL,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE;oBACL,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBACxB,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBAC/B,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;qBAC3B;oBACD,QAAQ,EAAE,CAAC,MAAM,CAAC;iBACnB;aACF;SACF;QACD,QAAQ,EAAE,CAAC,OAAO,CAAC;KACpB;IACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAI,IAAI,CAAC,OAAO,CAA6B,IAAI,EAAE,CAAC;QAC/D,MAAM,MAAM,GAAG,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC7C,OAAO;YACL,IAAI,EAAE,MAAM;YACZ,MAAM,EACJ,aAAa,MAAM,CAAC,KAAK,CAAC,MAAM,+BAC9B,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC;iBAChC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;iBAC5B,IAAI,CAAC,IAAI,CACd,GAAG;YACL,QAAQ,EAAE,CAAC,wBAAwB,CAAC;YACpC,UAAU,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE;SAC9B,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,wEAAwE;AAExE,MAAM,CAAC,MAAM,mBAAmB,GAAc;IAC5C,IAAI,EAAE,wBAAwB;IAC9B,QAAQ,EAAE,MAAM;IAChB,WAAW,EACT,6TAA6T;IAC/T,QAAQ,EAAE,CAAC,gBAAgB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,YAAY,CAAC;IACnF,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;YACxB,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE;oBACtG,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACxB,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACzB,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACrB,UAAU,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;iBACzD;gBACD,QAAQ,EAAE,CAAC,MAAM,CAAC;aACnB;SACF;QACD,QAAQ,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;KAC7B;IACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAI,IAAI,CAAC,OAAO,CAA6B,IAAI,EAAE,CAAC;QAC/D,MAAM,SAAS,GAAG,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC;QACtD,MAAM,IAAI,GAAG,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QAC9C,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAuF,CAAC;QAE9G,IAAI,MAAe,CAAC;QACpB,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;YACf,KAAK,WAAW;gBACd,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1D,MAAM;YACR,KAAK,SAAS;gBACZ,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClE,MAAM;YACR,KAAK,UAAU;gBACb,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;gBACnF,MAAM;YACR,KAAK,SAAS;gBACZ,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBAChG,MAAM;YACR,KAAK,YAAY;gBACf,MAAM,GAAG,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;gBACvC,MAAM;YACR,KAAK,OAAO;gBACV,MAAM,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;gBACtC,MAAM;YACR;gBACE,MAAM,GAAG,IAAI,CAAC;QAClB,CAAC;QACD,OAAO;YACL,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;YACxD,MAAM,EAAE,oBAAoB,CAAC,CAAC,IAAI,qBAAqB,IAAI,CAAC,MAAM,CAAC,IAAI,SAAS;YAChF,QAAQ,EAAE,EAAE;YACZ,UAAU,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE;SAC9B,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,wEAAwE;AAExE,MAAM,CAAC,MAAM,iBAAiB,GAAc;IAC1C,IAAI,EAAE,sBAAsB;IAC5B,QAAQ,EAAE,MAAM;IAChB,WAAW,EACT,mMAAmM;IACrM,QAAQ,EAAE,CAAC,iBAAiB,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAC;IAC5E,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,OAAO,EAAE;gBACP,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;gBACxC,QAAQ,EAAE,CAAC,OAAO,CAAC;aACpB;YACD,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;oBACtE,OAAO,EAAE,EAAE;oBACX,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;oBAC1E,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;iBACnC;gBACD,QAAQ,EAAE,CAAC,SAAS,CAAC;aACtB;SACF;QACD,QAAQ,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC;KAC/B;IACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAC9B,IAAI,CAAC,SAAS,CAA0B,EACxC,IAAI,CAAC,OAAO,CAAwB,CACrC,CAAC;QACF,OAAO;YACL,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,WAAW,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,MAAM,MAAM,CAAC,MAAM,EAAE;YAC9E,QAAQ,EAAE,EAAE;YACZ,UAAU,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE;SAC9B,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,wEAAwE;AAExE,MAAM,CAAC,MAAM,uBAAuB,GAAc;IAChD,IAAI,EAAE,6BAA6B;IACnC,QAAQ,EAAE,MAAM;IAChB,WAAW,EACT,0RAA0R;IAC5R,QAAQ,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,kBAAkB,CAAC;IACrD,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC5B,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC5B,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;SAC9E;QACD,QAAQ,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,iBAAiB,CAAC;KACtD;IACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC3B,MAAM,CAAC,GAAG,MAAM,CAAC,oBAAoB,CACnC,IAAI,CAAC,UAAU,CAAW,EAC1B,IAAI,CAAC,UAAU,CAA0B,EACzC,IAAI,CAAC,iBAAiB,CAA0C,CACjE,CAAC;QACF,OAAO;YACL,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,CAAC,CAAC,MAAM;gBACd,CAAC,CAAC,SAAS,IAAI,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAAC,MAAM,CAAC,EAAE,cAAc,CAAC,CAAC,KAAK,2BAA2B,CAAC,CAAC,QAAQ,EAAE,uBAAuB,mBAAmB,CAAC,CAAC,QAAQ,EAAE,mBAAmB,aAAa,CAAC,CAAC,QAAQ,EAAE,aAAa,GAAG;gBAC7O,CAAC,CAAC,SAAS,IAAI,CAAC,UAAU,CAAC,mBAAmB;YAChD,QAAQ,EAAE,EAAE;YACZ,UAAU,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE;SAC9B,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,wEAAwE;AAExE,MAAM,CAAC,MAAM,gBAAgB,GAAc;IACzC,IAAI,EAAE,0BAA0B;IAChC,QAAQ,EAAE,MAAM;IAChB,WAAW,EACT,6SAA6S;IAC/S,QAAQ,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,cAAc,CAAC;IAC/D,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACxB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SACzB;QACD,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;KAC3B;IACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC3B,MAAM,CAAC,GAAG,MAAM,CAAC,UAAU,CACzB,IAAI,CAAC,MAAM,CAA4C,EACvD,IAAI,CAAC,MAAM,CAAsB,CAClC,CAAC;QACF,OAAO;YACL,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,CAAC,CAAC,EAAE;gBACV,CAAC,CAAC,wBAAwB,CAAC,CAAC,OAAO,UAAU,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG;gBACtG,CAAC,CAAC,sCAAsC,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG;YAC5D,QAAQ,EAAE,EAAE;YACZ,UAAU,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE;SAC9B,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,wEAAwE;AAExE,MAAM,CAAC,MAAM,oBAAoB,GAAc;IAC7C,IAAI,EAAE,yBAAyB;IAC/B,QAAQ,EAAE,MAAM;IAChB,WAAW,EACT,6VAA6V;IAC/V,QAAQ,EAAE,CAAC,iBAAiB,EAAE,iBAAiB,EAAE,SAAS,EAAE,UAAU,CAAC;IACvE,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kEAAkE,EAAE;YAC3G,cAAc,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE;YACzE,cAAc,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;YAC5D,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,UAAU,EAAE,YAAY,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE;YAC7G,UAAU,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,iBAAiB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,EAAE;YAC/I,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SAC/B;QACD,QAAQ,EAAE,CAAC,QAAQ,EAAE,gBAAgB,EAAE,WAAW,EAAE,YAAY,CAAC;KAClE;IACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC3B,MAAM,MAAM,GAA2B;YACrC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACpC,cAAc,EAAG,IAAI,CAAC,gBAAgB,CAAc,IAAI,EAAE;YAC1D,cAAc,EAAE,IAAI,CAAC,gBAAgB,CAAyB;YAC9D,SAAS,EAAG,IAAI,CAAC,WAAW,CAA8C,IAAI,EAAE;YAChF,UAAU,EAAG,IAAI,CAAC,YAAY,CAA8F,IAAI,EAAE;YAClI,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;SAC7C,CAAC;QACF,MAAM,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACpC,OAAO;YACL,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,CAAC,CAAC,EAAE;gBACV,CAAC,CAAC,yBAAyB,CAAC,CAAC,IAAK,CAAC,IAAI,eAAe,CAAC,CAAC,IAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,iEAAiE;gBACnJ,CAAC,CAAC,sBAAsB,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG;YAC5C,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,EAAE;YAC1C,UAAU,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE;SAC9B,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAgB;IACtC,kBAAkB;IAClB,mBAAmB;IACnB,iBAAiB;IACjB,uBAAuB;IACvB,gBAAgB;IAChB,oBAAoB;CACrB,CAAC"}

package/dist/tools/_registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"_registry.d.ts","sourceRoot":"","sources":["../../src/tools/_registry.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAgB3D;sEACsE;AACtE,wBAAgB,aAAa,IAAI,SAAS,EAAE,CAgB3C;AAED,mDAAmD;AACnD,wBAAgB,YAAY,IAAI,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CASrD;AAED,uEAAuE;AACvE,wBAAgB,eAAe,IAAI,GAAG,CAAC,YAAY,EAAE,SAAS,EAAE,CAAC,CAOhE"}
+{"version":3,"file":"_registry.d.ts","sourceRoot":"","sources":["../../src/tools/_registry.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAoB3D;sEACsE;AACtE,wBAAgB,aAAa,IAAI,SAAS,EAAE,CAoB3C;AAED,mDAAmD;AACnD,wBAAgB,YAAY,IAAI,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CASrD;AAED,uEAAuE;AACvE,wBAAgB,eAAe,IAAI,GAAG,CAAC,YAAY,EAAE,SAAS,EAAE,CAAC,CAOhE"}

package/dist/tools/_registry.js

@@ -18,6 +18,10 @@ import { capabilitiesTool } from "./_capabilities.js";
 import { smartDoTool } from "./_smart_do.js";
 import { graderTool } from "./_grader_tool.js";
 import { understandIntentTool } from "./_intent_tool.js";
+import { constitutionTool } from "./_constitution_tool.js";
+import { verifyClaimsTool } from "./_verify_claims_tool.js";
+import { dnaSearchTool } from "./_dna_tool.js";
+import { genomeTools } from "./_genome_tools.js";
 /** All Mneme tools, in display order. The capabilities syllabus comes first
  *  so AI clients that read tool lists top-down see it immediately. */
 export function buildAllTools() {
@@ -25,6 +29,10 @@ export function buildAllTools() {
         capabilitiesTool,
         understandIntentTool,
         graderTool,
+        verifyClaimsTool,
+        constitutionTool,
+        dnaSearchTool,
+        ...genomeTools,
         smartDoTool,
         ...memoryTools,
         ...peopleTools,

package/dist/tools/_registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"_registry.js","sourceRoot":"","sources":["../../src/tools/_registry.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAEzD;sEACsE;AACtE,MAAM,UAAU,aAAa;IAC3B,OAAO;QACL,gBAAgB;QAChB,oBAAoB;QACpB,UAAU;QACV,WAAW;QACX,GAAG,WAAW;QACd,GAAG,WAAW;QACd,GAAG,UAAU;QACb,GAAG,cAAc;QACjB,GAAG,aAAa;QAChB,GAAG,YAAY;QACf,GAAG,UAAU;QACb,GAAG,QAAQ;QACX,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,YAAY;IAC1B,MAAM,GAAG,GAAG,IAAI,GAAG,EAAqB,CAAC;IACzC,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,EAAE,CAAC;QAChC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,eAAe;IAC7B,MAAM,GAAG,GAAG,IAAI,GAAG,EAA6B,CAAC;IACjD,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,EAAE,CAAC;QAChC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAClD,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"_registry.js","sourceRoot":"","sources":["../../src/tools/_registry.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjD;sEACsE;AACtE,MAAM,UAAU,aAAa;IAC3B,OAAO;QACL,gBAAgB;QAChB,oBAAoB;QACpB,UAAU;QACV,gBAAgB;QAChB,gBAAgB;QAChB,aAAa;QACb,GAAG,WAAW;QACd,WAAW;QACX,GAAG,WAAW;QACd,GAAG,WAAW;QACd,GAAG,UAAU;QACb,GAAG,cAAc;QACjB,GAAG,aAAa;QAChB,GAAG,YAAY;QACf,GAAG,UAAU;QACb,GAAG,QAAQ;QACX,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,YAAY;IAC1B,MAAM,GAAG,GAAG,IAAI,GAAG,EAAqB,CAAC;IACzC,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,EAAE,CAAC;QAChC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,eAAe;IAC7B,MAAM,GAAG,GAAG,IAAI,GAAG,EAA6B,CAAC;IACjD,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,EAAE,CAAC;QAChC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAClD,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/tools/_runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"_runtime.d.ts","sourceRoot":"","sources":["../../src/tools/_runtime.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE/C,wBAAsB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAapE;AAED;;iFAEiF;AACjF,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,EAAE,EACnD,OAAO,GAAE;IAAE,MAAM,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAA;CAExG,IAEa,IAAI,WAAW,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;;;;;;GAS7D;AAED;;;qCAGqC;AACrC,wBAAsB,UAAU,CAC9B,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,MAAM,EAAO,EACtB,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAChC,OAAO,CAAC,OAAO,CAAC,CA+BlB"}
+{"version":3,"file":"_runtime.d.ts","sourceRoot":"","sources":["../../src/tools/_runtime.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE/C,wBAAsB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAapE;AAED;;iFAEiF;AACjF,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,EAAE,EACnD,OAAO,GAAE;IAAE,MAAM,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAA;CAExG,IAEa,IAAI,WAAW,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;;;;;;GAS7D;AAED;;;qCAGqC;AACrC,wBAAsB,UAAU,CAC9B,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,MAAM,EAAO,EACtB,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAChC,OAAO,CAAC,OAAO,CAAC,CA0ClB"}

package/dist/tools/_runtime.js

@@ -44,10 +44,21 @@ export function passthroughHandler(cliCommand, argMap, options = {
  *  non-zero exit / parse failure. */
 export async function runCliJson(cwd, command, cliArgs = [], opts = {}) {
     const { spawn } = await import("node:child_process");
+    // Security hardening (v1.11.0): refuse any cliArg or command that looks
+    // like shell-metacharacter injection. MCP args come from AI clients —
+    // we treat them as untrusted input.
+    const SHELL_META = /[;&|`$<>()\\\n\r"']/;
+    for (const a of [command, ...cliArgs]) {
+        if (typeof a !== "string" || SHELL_META.test(a)) {
+            throw new Error(`Refusing to spawn: argument contains shell metacharacters or is non-string: ${JSON.stringify(a).slice(0, 80)}`);
+        }
+    }
+    // Windows: resolve to .cmd explicitly so we don't need shell:true
+    const exe = process.platform === "win32" ? "mneme.cmd" : "mneme";
     return await new Promise((resolve, reject) => {
-        const child = spawn("mneme", [command, ...cliArgs, "--json"], {
+        const child = spawn(exe, [command, ...cliArgs, "--json"], {
             cwd,
-            shell: process.platform === "win32",
+            shell: false,
         });
         let stdout = "";
         let stderr = "";

package/dist/tools/_runtime.js.map

@@ -1 +1 @@
-{"version":3,"file":"_runtime.js","sourceRoot":"","sources":["../../src/tools/_runtime.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAChD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAGvD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAW;IAC5C,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,IAAI,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC5C,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,SAAS,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAEvC,MAAM,CAAC,GAAG,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAE7D,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC;AAC3C,CAAC;AAED;;iFAEiF;AACjF,MAAM,UAAU,kBAAkB,CAChC,UAAkB,EAClB,MAAmD,EACnD,UAA8G;IAC5G,MAAM,EAAE,GAAG,EAAE,CAAC,+DAA+D;CAC9E;IAED,OAAO,KAAK,EAAE,EAAe,EAAE,IAA6B,EAAE,EAAE;QAC9D,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1E,OAAO;YACL,IAAI;YACJ,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;YAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE;YAChC,UAAU,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,UAAU,IAAI,QAAiB,EAAE;SAC/D,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED;;;qCAGqC;AACrC,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,GAAW,EACX,OAAe,EACf,UAAoB,EAAE,EACtB,OAA+B,EAAE;IAEjC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACrD,OAAO,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,GAAG,OAAO,EAAE,QAAQ,CAAC,EAAE;YAC5D,GAAG;YACH,KAAK,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;SACpC,CAAC,CAAC;QACH,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvD,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,KAAK,CAAC,IAAI,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,OAAO,oBAAoB,IAAI,CAAC,SAAS,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC;QACrF,CAAC,EAAE,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC;QAC7B,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,OAAO,WAAW,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YACvF,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;YAC9B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,OAAO,uBAAwB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACrF,CAAC;QACH,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"_runtime.js","sourceRoot":"","sources":["../../src/tools/_runtime.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAChD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAGvD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAW;IAC5C,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,IAAI,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC5C,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,SAAS,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAEvC,MAAM,CAAC,GAAG,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAE7D,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC;AAC3C,CAAC;AAED;;iFAEiF;AACjF,MAAM,UAAU,kBAAkB,CAChC,UAAkB,EAClB,MAAmD,EACnD,UAA8G;IAC5G,MAAM,EAAE,GAAG,EAAE,CAAC,+DAA+D;CAC9E;IAED,OAAO,KAAK,EAAE,EAAe,EAAE,IAA6B,EAAE,EAAE;QAC9D,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1E,OAAO;YACL,IAAI;YACJ,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;YAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE;YAChC,UAAU,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,UAAU,IAAI,QAAiB,EAAE;SAC/D,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED;;;qCAGqC;AACrC,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,GAAW,EACX,OAAe,EACf,UAAoB,EAAE,EACtB,OAA+B,EAAE;IAEjC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACrD,wEAAwE;IACxE,sEAAsE;IACtE,oCAAoC;IACpC,MAAM,UAAU,GAAG,qBAAqB,CAAC;IACzC,KAAK,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC;QACtC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,+EAA+E,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QACnI,CAAC;IACH,CAAC;IACD,kEAAkE;IAClE,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC;IACjE,OAAO,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,OAAO,EAAE,QAAQ,CAAC,EAAE;YACxD,GAAG;YACH,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;QACH,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvD,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,KAAK,CAAC,IAAI,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,OAAO,oBAAoB,IAAI,CAAC,SAAS,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC;QACrF,CAAC,EAAE,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC;QAC7B,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,OAAO,WAAW,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YACvF,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;YAC9B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,OAAO,uBAAwB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACrF,CAAC;QACH,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/tools/_types.d.ts

@@ -194,7 +194,13 @@ export interface MnemeTool<TArgs = Record<string, unknown>, TData = unknown> {
 }
 /** Convert a wrapped tool response into MCP's expected CallToolResult.
  *  We serialise the entire envelope (data + wisdom + followUp + confidence)
- *  so the AI sees the full picture in one shot. */
+ *  so the AI sees the full picture in one shot.
+ *
+ *  v1.11.1 — by default, every wisdom + secondBrain.presentation field
+ *  is run through the prompt-injection scrubber. Untrusted content
+ *  (commit messages, PR text, issue text from federation) cannot smuggle
+ *  control tokens like `<system>`, `[INST]`, or "ignore prior instructions"
+ *  into the AI's context. Set MNEME_NO_AUTO_SECURITY=1 to disable. */
 export declare function toCallResult(r: ToolResponse): CallToolResult;
 /** Convert a thrown error into MCP's expected error result */
 export declare function toErrorResult(message: string): CallToolResult;

package/dist/tools/_types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"_types.d.ts","sourceRoot":"","sources":["../../src/tools/_types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAEpE;qEACqE;AACrE,MAAM,MAAM,YAAY,GACpB,QAAQ,GACR,QAAQ,GACR,OAAO,GACP,WAAW,GACX,UAAU,GACV,SAAS,GACT,OAAO,GACP,KAAK,GACL,MAAM,CAAC;AAEX;;;;;;;GAOG;AACH,MAAM,WAAW,YAAY,CAAC,KAAK,GAAG,OAAO;IAC3C,2CAA2C;IAC3C,IAAI,EAAE,KAAK,CAAC;IACZ;iEAC6D;IAC7D,MAAM,EAAE,MAAM,CAAC;IACf;kFAC8E;IAC9E,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,+EAA+E;IAC/E,UAAU,CAAC,EAAE;QACX,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;QACjC,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IACF;8DAC0D;IAC1D,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AAED;;;oEAGoE;AACpE,MAAM,WAAW,WAAW;IAC1B;;wEAEoE;IACpE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;oEACgE;IAChE,OAAO,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAC9B;8CAC0C;IAC1C,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B;;;;sEAIkE;IAClE,QAAQ,CAAC,EAAE,QAAQ,CAAC;CACrB;AAED;;qCAEqC;AACrC,MAAM,WAAW,QAAQ;IACvB,oEAAoE;IACpE,MAAM,EAAE,MAAM,CAAC;IACf,iEAAiE;IACjE,YAAY,EAAE,WAAW,EAAE,CAAC;IAC5B,yEAAyE;IACzE,MAAM,EAAE,MAAM,CAAC;IACf;gDAC4C;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB;8BAC0B;IAC1B,UAAU,EAAE,gBAAgB,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,WAAW;IAC1B,yCAAyC;IACzC,EAAE,EAAE,MAAM,CAAC;IACX,mEAAmE;IACnE,WAAW,EAAE,MAAM,CAAC;IACpB,8CAA8C;IAC9C,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;+DAC+D;AAC/D,MAAM,MAAM,gBAAgB;AAC1B;;iBAEiB;AACf,mBAAmB;AACrB;;+BAE+B;GAC7B,sBAAsB;AACxB;;kFAEkF;GAChF,mBAAmB;AACrB;;iDAEiD;GAC/C,0BAA0B;AAC5B;;uEAEuE;GACrE,yBAAyB,CAAC;AAE9B;4DAC4D;AAC5D,MAAM,WAAW,YAAY;IAC3B,oBAAoB;IACpB,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IAClC,4BAA4B;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,mDAAmD;IACnD,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,sCAAsC;IACtC,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,kEAAkE;IAClE,kBAAkB,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC1D,iDAAiD;IACjD,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,4DAA4D;IAC5D,gBAAgB,EAAE,KAAK,CAAC;QAAE,SAAS,EAAE,gBAAgB,CAAC;QAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5G,+DAA+D;IAC/D,UAAU,EAAE,MAAM,CAAC;IACnB,yEAAyE;IACzE,MAAM,EAAE,OAAO,CAAC;CACjB;AAED;8DAC8D;AAC9D,MAAM,WAAW,iBAAiB;IAChC,8DAA8D;IAC9D,QAAQ,EAAE,MAAM,CAAC;IACjB,0EAA0E;IAC1E,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,8DAA8D;IAC9D,IAAI,EAAE,MAAM,CAAC;IACb,0DAA0D;IAC1D,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,qEAAqE;AACrE,MAAM,WAAW,aAAa;IAC5B,uEAAuE;IACvE,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;2DACuD;IACvD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;kEAC8D;IAC9D,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;mEACmE;AACnE,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;IAClD,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC;IACxB,QAAQ,EAAE,iBAAiB,CAAC;CAC7B;AAED;;;;;;;mCAOmC;AACnC,MAAM,WAAW,SAAS,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,GAAG,OAAO;IACzE,0EAA0E;IAC1E,IAAI,EAAE,MAAM,CAAC;IACb,6CAA6C;IAC7C,QAAQ,EAAE,YAAY,CAAC;IACvB;;2CAEuC;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB;4DACwD;IACxD,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,uCAAuC;IACvC,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;IACjC,qDAAqD;IACrD,OAAO,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,KAAK,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;CAC9E;AAED;;mDAEmD;AACnD,wBAAgB,YAAY,CAAC,CAAC,EAAE,YAAY,GAAG,cAAc,CAkB5D;AAED,8DAA8D;AAC9D,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,cAAc,CAK7D"}
+{"version":3,"file":"_types.d.ts","sourceRoot":"","sources":["../../src/tools/_types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAGpE;qEACqE;AACrE,MAAM,MAAM,YAAY,GACpB,QAAQ,GACR,QAAQ,GACR,OAAO,GACP,WAAW,GACX,UAAU,GACV,SAAS,GACT,OAAO,GACP,KAAK,GACL,MAAM,CAAC;AAEX;;;;;;;GAOG;AACH,MAAM,WAAW,YAAY,CAAC,KAAK,GAAG,OAAO;IAC3C,2CAA2C;IAC3C,IAAI,EAAE,KAAK,CAAC;IACZ;iEAC6D;IAC7D,MAAM,EAAE,MAAM,CAAC;IACf;kFAC8E;IAC9E,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,+EAA+E;IAC/E,UAAU,CAAC,EAAE;QACX,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;QACjC,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IACF;8DAC0D;IAC1D,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AAED;;;oEAGoE;AACpE,MAAM,WAAW,WAAW;IAC1B;;wEAEoE;IACpE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;oEACgE;IAChE,OAAO,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAC9B;8CAC0C;IAC1C,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B;;;;sEAIkE;IAClE,QAAQ,CAAC,EAAE,QAAQ,CAAC;CACrB;AAED;;qCAEqC;AACrC,MAAM,WAAW,QAAQ;IACvB,oEAAoE;IACpE,MAAM,EAAE,MAAM,CAAC;IACf,iEAAiE;IACjE,YAAY,EAAE,WAAW,EAAE,CAAC;IAC5B,yEAAyE;IACzE,MAAM,EAAE,MAAM,CAAC;IACf;gDAC4C;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB;8BAC0B;IAC1B,UAAU,EAAE,gBAAgB,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,WAAW;IAC1B,yCAAyC;IACzC,EAAE,EAAE,MAAM,CAAC;IACX,mEAAmE;IACnE,WAAW,EAAE,MAAM,CAAC;IACpB,8CAA8C;IAC9C,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;+DAC+D;AAC/D,MAAM,MAAM,gBAAgB;AAC1B;;iBAEiB;AACf,mBAAmB;AACrB;;+BAE+B;GAC7B,sBAAsB;AACxB;;kFAEkF;GAChF,mBAAmB;AACrB;;iDAEiD;GAC/C,0BAA0B;AAC5B;;uEAEuE;GACrE,yBAAyB,CAAC;AAE9B;4DAC4D;AAC5D,MAAM,WAAW,YAAY;IAC3B,oBAAoB;IACpB,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IAClC,4BAA4B;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,mDAAmD;IACnD,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,sCAAsC;IACtC,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,kEAAkE;IAClE,kBAAkB,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC1D,iDAAiD;IACjD,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,4DAA4D;IAC5D,gBAAgB,EAAE,KAAK,CAAC;QAAE,SAAS,EAAE,gBAAgB,CAAC;QAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5G,+DAA+D;IAC/D,UAAU,EAAE,MAAM,CAAC;IACnB,yEAAyE;IACzE,MAAM,EAAE,OAAO,CAAC;CACjB;AAED;8DAC8D;AAC9D,MAAM,WAAW,iBAAiB;IAChC,8DAA8D;IAC9D,QAAQ,EAAE,MAAM,CAAC;IACjB,0EAA0E;IAC1E,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,8DAA8D;IAC9D,IAAI,EAAE,MAAM,CAAC;IACb,0DAA0D;IAC1D,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,qEAAqE;AACrE,MAAM,WAAW,aAAa;IAC5B,uEAAuE;IACvE,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;2DACuD;IACvD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;kEAC8D;IAC9D,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;mEACmE;AACnE,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;IAClD,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC;IACxB,QAAQ,EAAE,iBAAiB,CAAC;CAC7B;AAED;;;;;;;mCAOmC;AACnC,MAAM,WAAW,SAAS,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,GAAG,OAAO;IACzE,0EAA0E;IAC1E,IAAI,EAAE,MAAM,CAAC;IACb,6CAA6C;IAC7C,QAAQ,EAAE,YAAY,CAAC;IACvB;;2CAEuC;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB;4DACwD;IACxD,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,uCAAuC;IACvC,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;IACjC,qDAAqD;IACrD,OAAO,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,KAAK,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;CAC9E;AAED;;;;;;;;sEAQsE;AACtE,wBAAgB,YAAY,CAAC,CAAC,EAAE,YAAY,GAAG,cAAc,CAmC5D;AAED,8DAA8D;AAC9D,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,cAAc,CAK7D"}

package/dist/tools/_types.js

@@ -6,19 +6,45 @@
  * a 1-3 sentence narrative the AI can quote (or paraphrase) directly to the
  * user. Citations live in `data`, the human meaning lives in `wisdom`.
  */
+import { security } from "@mneme-ai/core";
 /** Convert a wrapped tool response into MCP's expected CallToolResult.
  *  We serialise the entire envelope (data + wisdom + followUp + confidence)
- *  so the AI sees the full picture in one shot. */
+ *  so the AI sees the full picture in one shot.
+ *
+ *  v1.11.1 — by default, every wisdom + secondBrain.presentation field
+ *  is run through the prompt-injection scrubber. Untrusted content
+ *  (commit messages, PR text, issue text from federation) cannot smuggle
+ *  control tokens like `<system>`, `[INST]`, or "ignore prior instructions"
+ *  into the AI's context. Set MNEME_NO_AUTO_SECURITY=1 to disable. */
 export function toCallResult(r) {
+    // v1.11.1 — auto-scrub the human-language fields. We intentionally do
+    // NOT scrub `data` (which is structured JSON the AI client should treat
+    // as data, not as instruction).
+    const skipScrub = process.env["MNEME_NO_AUTO_SECURITY"] === "1";
+    let wisdom = r.wisdom;
+    let secondBrain = r.secondBrain;
+    if (!skipScrub) {
+        try {
+            if (typeof wisdom === "string")
+                wisdom = security.scrubber.scrubForPrompt(wisdom).scrubbed;
+            if (secondBrain && typeof secondBrain.presentation === "string") {
+                secondBrain = { ...secondBrain, presentation: security.scrubber.scrubForPrompt(secondBrain.presentation).scrubbed };
+            }
+        }
+        catch {
+            // best-effort — never block a tool result on scrubber failure
+        }
+    }
     return {
         content: [
             {
                 type: "text",
                 text: JSON.stringify({
                     data: r.data,
-                    wisdom: r.wisdom,
+                    wisdom,
                     followUp: r.followUp ?? [],
                     confidence: r.confidence ?? { level: "medium" },
+                    ...(secondBrain ? { secondBrain } : {}),
                 }, null, 2),
             },
         ],

package/dist/tools/_types.js.map

@@ -1 +1 @@
-{"version":3,"file":"_types.js","sourceRoot":"","sources":["../../src/tools/_types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AA0MH;;mDAEmD;AACnD,MAAM,UAAU,YAAY,CAAC,CAAe;IAC1C,OAAO;QACL,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB;oBACE,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,EAAE;oBAC1B,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE;iBAChD,EACD,IAAI,EACJ,CAAC,CACF;aACF;SACF;KACF,CAAC;AACJ,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,OAAO;QACL,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;KAC3C,CAAC;AACJ,CAAC"}
+{"version":3,"file":"_types.js","sourceRoot":"","sources":["../../src/tools/_types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAuM1C;;;;;;;;sEAQsE;AACtE,MAAM,UAAU,YAAY,CAAC,CAAe;IAC1C,sEAAsE;IACtE,wEAAwE;IACxE,gCAAgC;IAChC,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,KAAK,GAAG,CAAC;IAChE,IAAI,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,IAAI,WAAW,GAAI,CAA4D,CAAC,WAAW,CAAC;IAC5F,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,IAAI,CAAC;YACH,IAAI,OAAO,MAAM,KAAK,QAAQ;gBAAE,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC;YAC3F,IAAI,WAAW,IAAI,OAAO,WAAW,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;gBAChE,WAAW,GAAG,EAAE,GAAG,WAAW,EAAE,YAAY,EAAE,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;YACtH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,8DAA8D;QAChE,CAAC;IACH,CAAC;IACD,OAAO;QACL,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB;oBACE,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,MAAM;oBACN,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,EAAE;oBAC1B,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE;oBAC/C,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACxC,EACD,IAAI,EACJ,CAAC,CACF;aACF;SACF;KACF,CAAC;AACJ,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,OAAO;QACL,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;KAC3C,CAAC;AACJ,CAAC"}

package/dist/tools/_verify_claims_tool.d.ts

@@ -0,0 +1,18 @@
+/**
+ * mneme.verify_claims — Hallucination Auto-Block (MVP).
+ *
+ * The post-draft verifier. AI client passes a draft answer string and
+ * Mneme runs every commit-hash claim through `git rev-parse` to detect
+ * hallucinated hashes. Returns the list of fake refs + a recommendation
+ * to rewrite.
+ *
+ * Future v1.11.0+: when MCP spec supports token-stream interception,
+ * this will run pre-delivery (catch lies BEFORE user sees them).
+ *
+ * For v1.10.0 the AI is expected to call this between drafting and
+ * delivering — same loop as mneme.grade.answer, but specifically for
+ * citation correctness.
+ */
+import type { MnemeTool } from "./_types.js";
+export declare const verifyClaimsTool: MnemeTool;
+//# sourceMappingURL=_verify_claims_tool.d.ts.map

package/dist/tools/_verify_claims_tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_verify_claims_tool.d.ts","sourceRoot":"","sources":["../../src/tools/_verify_claims_tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAS7C,eAAO,MAAM,gBAAgB,EAAE,SAqD9B,CAAC"}

package/dist/tools/_verify_claims_tool.js

@@ -0,0 +1,70 @@
+/**
+ * mneme.verify_claims — Hallucination Auto-Block (MVP).
+ *
+ * The post-draft verifier. AI client passes a draft answer string and
+ * Mneme runs every commit-hash claim through `git rev-parse` to detect
+ * hallucinated hashes. Returns the list of fake refs + a recommendation
+ * to rewrite.
+ *
+ * Future v1.11.0+: when MCP spec supports token-stream interception,
+ * this will run pre-delivery (catch lies BEFORE user sees them).
+ *
+ * For v1.10.0 the AI is expected to call this between drafting and
+ * delivering — same loop as mneme.grade.answer, but specifically for
+ * citation correctness.
+ */
+import { spawnSync } from "node:child_process";
+export const verifyClaimsTool = {
+    name: "mneme.verify_claims",
+    category: "meta",
+    description: "Hallucination Auto-Block. Pass an AI draft answer; Mneme extracts every commit-hash-looking string " +
+        "and verifies each via `git rev-parse`. Returns the list of HALLUCINATED hashes (not present in this repo). " +
+        "AI client MUST call this AFTER drafting and BEFORE delivering ANY answer that includes commit hashes — " +
+        "if hallucinated hashes are found, rewrite the answer using only the ones in `resolved` (or remove the " +
+        "claim entirely). This is the post-draft pre-delivery citation gate.",
+    triggers: [
+        "verify the commit hashes in this draft",
+        "check for hallucinated citations",
+        "are these hashes real",
+    ],
+    inputSchema: {
+        type: "object",
+        properties: {
+            draft: { type: "string", description: "The draft answer text to verify" },
+        },
+        required: ["draft"],
+    },
+    handler: async (rt, args) => {
+        const draft = String(args["draft"] ?? "");
+        const hashes = Array.from(new Set(draft.match(/\b[a-f0-9]{7,40}\b/gi) ?? []));
+        const resolved = [];
+        const hallucinated = [];
+        for (const h of hashes) {
+            const r = spawnSync("git", ["rev-parse", "--verify", h], { cwd: rt.meta.rootPath, stdio: "pipe" });
+            if (r.status === 0)
+                resolved.push(h);
+            else
+                hallucinated.push(h);
+        }
+        const result = {
+            total: hashes.length,
+            resolved,
+            hallucinated,
+            recommendedRewrite: hallucinated.length > 0,
+        };
+        return {
+            data: result,
+            wisdom: hallucinated.length === 0
+                ? `All ${resolved.length} cited hash${resolved.length === 1 ? "" : "es"} resolve to real commits. Safe to deliver.`
+                : `STOP — ${hallucinated.length} hallucinated hash${hallucinated.length === 1 ? "" : "es"} detected: ${hallucinated.slice(0, 3).join(", ")}${hallucinated.length > 3 ? ", ..." : ""}. Rewrite the draft using only the hashes in data.resolved (${resolved.length} real ones), OR remove the unbacked claim entirely.`,
+            followUp: hallucinated.length > 0 ? ["mneme.memory.search_commits"] : [],
+            confidence: { level: "high" },
+            secondBrain: {
+                presentation: hallucinated.length === 0
+                    ? "Deliver the draft to the user."
+                    : "DO NOT deliver this draft. Either rewrite using data.resolved hashes only, or call mneme.memory.search_commits to find real related commits, then rewrite. Re-call mneme.verify_claims with the new draft. Loop until hallucinated.length === 0.",
+            },
+        };
+    },
+};
+//# sourceMappingURL=_verify_claims_tool.js.map

package/dist/tools/_verify_claims_tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_verify_claims_tool.js","sourceRoot":"","sources":["../../src/tools/_verify_claims_tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAU/C,MAAM,CAAC,MAAM,gBAAgB,GAAc;IACzC,IAAI,EAAE,qBAAqB;IAC3B,QAAQ,EAAE,MAAM;IAChB,WAAW,EACT,qGAAqG;QACrG,6GAA6G;QAC7G,yGAAyG;QACzG,wGAAwG;QACxG,qEAAqE;IACvE,QAAQ,EAAE;QACR,wCAAwC;QACxC,kCAAkC;QAClC,uBAAuB;KACxB;IACD,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iCAAiC,EAAE;SAC1E;QACD,QAAQ,EAAE,CAAC,OAAO,CAAC;KACpB;IACD,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE;QAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,sBAAsB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC9E,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YACnG,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;gBAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;;gBAChC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC;QACD,MAAM,MAAM,GAAiB;YAC3B,KAAK,EAAE,MAAM,CAAC,MAAM;YACpB,QAAQ;YACR,YAAY;YACZ,kBAAkB,EAAE,YAAY,CAAC,MAAM,GAAG,CAAC;SAC5C,CAAC;QACF,OAAO;YACL,IAAI,EAAE,MAAM;YACZ,MAAM,EACJ,YAAY,CAAC,MAAM,KAAK,CAAC;gBACvB,CAAC,CAAC,OAAO,QAAQ,CAAC,MAAM,cAAc,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,4CAA4C;gBACnH,CAAC,CAAC,UAAU,YAAY,CAAC,MAAM,qBAAqB,YAAY,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,cAAc,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,+DAA+D,QAAQ,CAAC,MAAM,qDAAqD;YAC1T,QAAQ,EAAE,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,CAAC,EAAE;YACxE,UAAU,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE;YAC7B,WAAW,EAAE;gBACX,YAAY,EACV,YAAY,CAAC,MAAM,KAAK,CAAC;oBACvB,CAAC,CAAC,gCAAgC;oBAClC,CAAC,CAAC,kPAAkP;aACzP;SACF,CAAC;IACJ,CAAC;CACF,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mneme-ai/mcp",
-  "version": "1.9.0",
+  "version": "1.17.2",
   "description": "MCP server that exposes Mneme to Claude Code, Cursor, Continue, and other AI clients",
   "type": "module",
   "main": "./dist/index.js",
@@ -37,8 +37,8 @@
     "node": ">=22.13.0 <25.0.0"
   },
   "dependencies": {
-    "@mneme-ai/core": "1.9.0",
-    "@mneme-ai/embeddings": "1.9.0",
+    "@mneme-ai/core": "1.17.2",
+    "@mneme-ai/embeddings": "1.17.2",
     "@modelcontextprotocol/sdk": "^1.0.4"
   }
 }