@mneme-ai/sdk 2.55.0

package/dist/lock.js

@@ -0,0 +1,140 @@
+/**
+ * @mneme-ai/sdk file-lock adapter.
+ *
+ * Fixes the race condition the user identified:
+ *   "CLI mneme verify ... + Cursor SDK writing HMAC chain simultaneously
+ *    → race in writing .mneme/cli-activity.jsonl"
+ *
+ * Strategy: simple advisory lock via `.lock` sentinel file with PID +
+ * stale-detection. No external dependency (no proper-lockfile import) —
+ * stays compatible with bundler tree-shake + works in container/serverless.
+ *
+ * Pure deterministic + defensive; never throws.
+ */
+import { existsSync, mkdirSync, writeFileSync, readFileSync, unlinkSync, openSync, closeSync, constants as fsConstants } from "node:fs";
+import { dirname } from "node:path";
+const STALE_MS = 5_000; // a lock older than this is considered stale
+function lockPathFor(target) {
+    return target + ".lock";
+}
+/**
+ * Try to acquire an advisory lock on a target file. Non-blocking: returns
+ * { acquired: false } immediately on failure.
+ *
+ * Caller MUST call releaseLock when done.
+ */
+export function acquireLock(targetPath) {
+    const lockPath = lockPathFor(targetPath);
+    const now = Date.now();
+    try {
+        // Ensure parent dir exists
+        const parent = dirname(targetPath);
+        if (parent && !existsSync(parent)) {
+            try {
+                mkdirSync(parent, { recursive: true });
+            }
+            catch { /* */ }
+        }
+        // Stale check: if lock file exists + old enough → remove
+        if (existsSync(lockPath)) {
+            try {
+                const body = JSON.parse(readFileSync(lockPath, "utf8"));
+                if (now - body.at > STALE_MS) {
+                    try {
+                        unlinkSync(lockPath);
+                    }
+                    catch { /* */ }
+                }
+                else {
+                    return { acquired: false, lockPath, at: body.at, holderPid: body.pid, reason: "held by another process" };
+                }
+            }
+            catch {
+                // Corrupted lock file → safe to remove
+                try {
+                    unlinkSync(lockPath);
+                }
+                catch { /* */ }
+            }
+        }
+        // Try exclusive create — fails if another process raced us
+        let fd;
+        try {
+            fd = openSync(lockPath, fsConstants.O_CREAT | fsConstants.O_EXCL | fsConstants.O_WRONLY);
+        }
+        catch {
+            return { acquired: false, lockPath, at: now, reason: "exclusive create failed (race)" };
+        }
+        writeFileSync(fd, JSON.stringify({ pid: process.pid, at: now }));
+        closeSync(fd);
+        return { acquired: true, lockPath, at: now, holderPid: process.pid };
+    }
+    catch (e) {
+        return { acquired: false, lockPath, at: now, reason: `lock attempt failed: ${e.message}` };
+    }
+}
+export function releaseLock(lockResult) {
+    if (!lockResult.acquired)
+        return;
+    try {
+        if (existsSync(lockResult.lockPath))
+            unlinkSync(lockResult.lockPath);
+    }
+    catch { /* */ }
+}
+/**
+ * Run a critical section under the lock. Releases the lock even when fn
+ * throws. Returns { acquired: false } envelope when the lock could not
+ * be acquired (caller decides whether to retry).
+ */
+export async function withLock(targetPath, fn, opts = {}) {
+    const retries = Math.max(0, opts.retries ?? 5);
+    const delayMs = Math.max(1, opts.retryDelayMs ?? 50);
+    for (let i = 0; i <= retries; i++) {
+        const r = acquireLock(targetPath);
+        if (r.acquired) {
+            try {
+                const data = await Promise.resolve(fn());
+                return { ok: true, data };
+            }
+            catch (e) {
+                return { ok: false, reason: `critical-section threw: ${e.message}` };
+            }
+            finally {
+                releaseLock(r);
+            }
+        }
+        if (i < retries)
+            await new Promise((res) => setTimeout(res, delayMs));
+    }
+    return { ok: false, reason: `lock acquisition failed after ${retries + 1} attempts` };
+}
+/** Diagnostic: check if a lock currently exists + is fresh. */
+export function isLocked(targetPath) {
+    const p = lockPathFor(targetPath);
+    if (!existsSync(p))
+        return { locked: false };
+    try {
+        const body = JSON.parse(readFileSync(p, "utf8"));
+        const age = Date.now() - body.at;
+        if (age > STALE_MS)
+            return { locked: false, ageMs: age };
+        return { locked: true, holderPid: body.pid, ageMs: age };
+    }
+    catch {
+        return { locked: false };
+    }
+}
+/** Test-only: lockPath getter. */
+export function __lockPathForTest(targetPath) {
+    return lockPathFor(targetPath);
+}
+/**
+ * Wrap a function so that every call serialises through the lock for
+ * a given path. Useful for wrapping ledger writers transparently.
+ */
+export function serializeOnLock(lockTarget, fn) {
+    return async (...a) => withLock(lockTarget, () => fn(...a));
+}
+export const STALE_LOCK_MS = STALE_MS;
+//# sourceMappingURL=lock.js.map

package/dist/lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lock.js","sourceRoot":"","sources":["../src/lock.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,IAAI,WAAW,EAAE,MAAM,SAAS,CAAC;AACxI,OAAO,EAAE,OAAO,EAAQ,MAAM,WAAW,CAAC;AAE1C,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,6CAA6C;AAarE,SAAS,WAAW,CAAC,MAAc;IACjC,OAAO,MAAM,GAAG,OAAO,CAAC;AAC1B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,UAAkB;IAC5C,MAAM,QAAQ,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,CAAC;QACH,2BAA2B;QAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;QACnC,IAAI,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAClC,IAAI,CAAC;gBAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;QACjE,CAAC;QACD,yDAAyD;QACzD,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAgC,CAAC;gBACvF,IAAI,GAAG,GAAG,IAAI,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC;oBAC7B,IAAI,CAAC;wBAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;gBAC/C,CAAC;qBAAM,CAAC;oBACN,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;gBAC5G,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,uCAAuC;gBACvC,IAAI,CAAC;oBAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QACD,2DAA2D;QAC3D,IAAI,EAAU,CAAC;QACf,IAAI,CAAC;YACH,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,OAAO,GAAG,WAAW,CAAC,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC3F,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC;QAC1F,CAAC;QACD,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QACjE,SAAS,CAAC,EAAE,CAAC,CAAC;QACd,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;IACvE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,wBAAyB,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC;IACxG,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,UAAqD;IAC/E,IAAI,CAAC,UAAU,CAAC,QAAQ;QAAE,OAAO;IACjC,IAAI,CAAC;QAAC,IAAI,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;AAC/F,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,UAAkB,EAClB,EAAwB,EACxB,OAAoD,EAAE;IAEtD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IACrD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;QAClC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;YACf,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;gBACzC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YAC5B,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA4B,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC;YAClF,CAAC;oBAAS,CAAC;gBACT,WAAW,CAAC,CAAC,CAAC,CAAC;YACjB,CAAC;QACH,CAAC;QACD,IAAI,CAAC,GAAG,OAAO;YAAE,MAAM,IAAI,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,OAAO,GAAG,CAAC,WAAW,EAAE,CAAC;AACxF,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,QAAQ,CAAC,UAAkB;IACzC,MAAM,CAAC,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IAClC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAgC,CAAC;QAChF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QACjC,IAAI,GAAG,GAAG,QAAQ;YAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;QACzD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,kCAAkC;AAClC,MAAM,UAAU,iBAAiB,CAAC,UAAkB;IAClD,OAAO,WAAW,CAAC,UAAU,CAAC,CAAC;AACjC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC7B,UAAkB,EAClB,EAAkC;IAElC,OAAO,KAAK,EAAE,GAAG,CAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,QAAQ,CAAC"}

package/dist/nemesis.d.ts

@@ -0,0 +1,134 @@
+/**
+ * @mneme-ai/sdk/nemesis — typed, in-process surface for the NEMESIS engine.
+ *
+ * 30-80× faster than `mneme nemesis <verb>` CLI subprocess — every method
+ * is a direct function call into @mneme-ai/core. No spawn, no JSON
+ * parsing, no stderr piping. Type-safe via branded types.
+ */
+import * as core from "@mneme-ai/core";
+import type { Fixture, SdkEnvelope, VendorId } from "./types.js";
+export interface MnemeInstanceOpts {
+    /** Directory where Mneme keeps chains (default: <cwd>/.mneme). */
+    dataDir?: string;
+    /** HMAC key for NEMESIS receipts (overrides env / file). */
+    hmacKey?: string;
+    /** Strict mode: throw on default-insecure key (mirrors MNEME_NEMESIS_STRICT=1). */
+    strict?: boolean;
+}
+export declare class NemesisSdk {
+    private readonly opts;
+    constructor(opts?: MnemeInstanceOpts);
+    /** Pure deterministic — extract the 41-feature fingerprint. <30ms. */
+    fingerprint(fx: Fixture): {
+        ok: true;
+        data: core.nemesis.Fingerprint;
+        latencyMs: number;
+    };
+    /** Calibrated Mahalanobis classifier — <50ms. */
+    classify(fx: Fixture | Parameters<typeof core.nemesis.classifyAgentCalibrated>[0]): {
+        ok: true;
+        data: core.nemesis.AgentVerdict;
+        latencyMs: number;
+    };
+    /** EU AI Act Article 50 stamp — <30ms warm path. */
+    stamp(input: {
+        message: string;
+        vendor: VendorId | string;
+        confidence?: number;
+        contentType?: string;
+    }): {
+        ok: boolean;
+        data: core.nemesis.StampResult;
+        latencyMs: number;
+    };
+    verifyStamp(stampedMessage: string): SdkEnvelope<ReturnType<typeof core.nemesis.verifyStamp>>;
+    /** STEALTH SCORE — inverse of classifier confidence. <80ms. */
+    stealthScore(fx: Fixture): {
+        ok: true;
+        data: core.nemesis.StealthVerdict;
+        latencyMs: number;
+    };
+    /** CAPILLARY — 50+ micro-tells. <50ms. */
+    capillary(diff: string): {
+        ok: true;
+        data: core.nemesis.MicroProfile;
+        latencyMs: number;
+    };
+    /** JANUS — locate vendor cluster basin. <50ms. */
+    janusObserve(fx: Fixture): {
+        ok: true;
+        data: core.nemesis.JanusObservation;
+        latencyMs: number;
+    };
+    /** JANUS swap detector — emits swap.detected events. */
+    janusSwap(fixtures: Fixture[], swapOpts?: {
+        minMargin?: number;
+    }): {
+        ok: true;
+        data: core.nemesis.JanusSessionResult;
+        latencyMs: number;
+    };
+    /** THEMIS alibi verifier. */
+    alibi(input: {
+        notVendor: VendorId | string;
+        fixture: Fixture;
+    }): {
+        ok: boolean;
+        data: core.nemesis.ThemisResult;
+        latencyMs: number;
+    };
+    /** SIBYL commit (session-start identity hash commitment). */
+    sibylCommit(input: {
+        vendor: VendorId | string;
+        model?: string;
+        version?: string;
+        sessionId?: string;
+    }): {
+        ok: true;
+        data: core.nemesis.CommitResult;
+        latencyMs: number;
+    };
+    /** SIBYL reveal — verifies the (identity, nonce) recreates the commitment. */
+    sibylReveal(input: {
+        sessionId: string;
+        identity: {
+            vendor: string;
+            model?: string;
+            version?: string;
+        };
+        nonce: string;
+    }): {
+        ok: boolean;
+        data: core.nemesis.RevealResult;
+        latencyMs: number;
+    };
+    /** GAVEL — court-admissible bundle pack. */
+    gavelPack(input: Parameters<typeof core.nemesis.buildGavelBundle>[0]): {
+        ok: boolean;
+        data: {
+            ok: boolean;
+            bundle?: core.nemesis.GavelBundle;
+            reason: string;
+        };
+        latencyMs: number;
+    };
+    /** LETHE — GDPR forget. */
+    letheForget(input: {
+        ledgerRelative: string;
+        rowIndex: number;
+        jurisdiction?: string;
+        dryRun?: boolean;
+    }): {
+        ok: boolean;
+        data: core.nemesis.ForgetResult;
+        latencyMs: number;
+    };
+    /** NIMBUS publish leaderboard card to the local pub-store. */
+    nimbusPublish(input: Omit<Parameters<typeof core.nemesis.publishCard>[0], "repoRoot">): {
+        ok: boolean;
+        data: core.nemesis.PublishResult;
+        latencyMs: number;
+    };
+    private dataDir;
+}
+//# sourceMappingURL=nemesis.d.ts.map

package/dist/nemesis.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nemesis.d.ts","sourceRoot":"","sources":["../src/nemesis.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,IAAI,MAAM,gBAAgB,CAAC;AACvC,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAGjE,MAAM,WAAW,iBAAiB;IAChC,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,4DAA4D;IAC5D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mFAAmF;IACnF,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,qBAAa,UAAU;IACT,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,GAAE,iBAAsB;IAEzD,sEAAsE;IACtE,WAAW,CAAC,EAAE,EAAE,OAAO;;;;;IAMvB,iDAAiD;IACjD,QAAQ,CAAC,EAAE,EAAE,OAAO,GAAG,UAAU,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC;;;;;IASjF,oDAAoD;IACpD,KAAK,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,QAAQ,GAAG,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE;;;;;IAatG,WAAW,CAAC,cAAc,EAAE,MAAM,GAAG,WAAW,CAAC,UAAU,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAM7F,+DAA+D;IAC/D,YAAY,CAAC,EAAE,EAAE,OAAO;;;;;IAMxB,0CAA0C;IAC1C,SAAS,CAAC,IAAI,EAAE,MAAM;;;;;IAMtB,kDAAkD;IAClD,YAAY,CAAC,EAAE,EAAE,OAAO;;;;;IAMxB,wDAAwD;IACxD,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,QAAQ,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO;;;;;IAWpE,6BAA6B;IAC7B,KAAK,CAAC,KAAK,EAAE;QAAE,SAAS,EAAE,QAAQ,GAAG,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE;;;;;IAM/D,6DAA6D;IAC7D,WAAW,CAAC,KAAK,EAAE;QAAE,MAAM,EAAE,QAAQ,GAAG,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE;;;;;IAStG,8EAA8E;IAC9E,WAAW,CAAC,KAAK,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE;;;;;IAMvH,4CAA4C;IAC5C,SAAS,CAAC,KAAK,EAAE,UAAU,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;;;;;;;;;IAQpE,2BAA2B;IAC3B,WAAW,CAAC,KAAK,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE;;;;;IAcxG,8DAA8D;IAC9D,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC;;;;;IAQrF,OAAO,CAAC,OAAO;CAIhB"}

package/dist/nemesis.js

@@ -0,0 +1,137 @@
+/**
+ * @mneme-ai/sdk/nemesis — typed, in-process surface for the NEMESIS engine.
+ *
+ * 30-80× faster than `mneme nemesis <verb>` CLI subprocess — every method
+ * is a direct function call into @mneme-ai/core. No spawn, no JSON
+ * parsing, no stderr piping. Type-safe via branded types.
+ */
+import * as core from "@mneme-ai/core";
+import { getEventBus } from "./events.js";
+export class NemesisSdk {
+    opts;
+    constructor(opts = {}) {
+        this.opts = opts;
+    }
+    /** Pure deterministic — extract the 41-feature fingerprint. <30ms. */
+    fingerprint(fx) {
+        const t0 = performance.now();
+        const data = core.nemesis.extractFingerprint(fx);
+        return { ok: true, data, latencyMs: +(performance.now() - t0).toFixed(2) };
+    }
+    /** Calibrated Mahalanobis classifier — <50ms. */
+    classify(fx) {
+        const t0 = performance.now();
+        const fp = (typeof fx.diff === "string")
+            ? core.nemesis.extractFingerprint(fx)
+            : fx;
+        const data = core.nemesis.classifyAgentCalibrated(fp);
+        return { ok: true, data, latencyMs: +(performance.now() - t0).toFixed(2) };
+    }
+    /** EU AI Act Article 50 stamp — <30ms warm path. */
+    stamp(input) {
+        const t0 = performance.now();
+        const data = core.nemesis.stampArticle50({
+            message: input.message,
+            vendor: String(input.vendor),
+            confidence: input.confidence ?? 0.95,
+            contentType: input.contentType,
+        });
+        const latencyMs = +(performance.now() - t0).toFixed(2);
+        getEventBus().emit({ kind: "stamp.issued", at: Date.now(), data: { vendor: input.vendor, latencyMs } });
+        return { ok: data.ok, data, latencyMs };
+    }
+    verifyStamp(stampedMessage) {
+        const t0 = performance.now();
+        const data = core.nemesis.verifyStamp(stampedMessage);
+        return { ok: data.valid, data, latencyMs: +(performance.now() - t0).toFixed(2), reason: data.reason };
+    }
+    /** STEALTH SCORE — inverse of classifier confidence. <80ms. */
+    stealthScore(fx) {
+        const t0 = performance.now();
+        const data = core.nemesis.computeStealthScore(fx);
+        return { ok: true, data, latencyMs: +(performance.now() - t0).toFixed(2) };
+    }
+    /** CAPILLARY — 50+ micro-tells. <50ms. */
+    capillary(diff) {
+        const t0 = performance.now();
+        const data = core.nemesis.extractMicroProfile(diff);
+        return { ok: true, data, latencyMs: +(performance.now() - t0).toFixed(2) };
+    }
+    /** JANUS — locate vendor cluster basin. <50ms. */
+    janusObserve(fx) {
+        const t0 = performance.now();
+        const data = core.nemesis.observe(fx);
+        return { ok: true, data, latencyMs: +(performance.now() - t0).toFixed(2) };
+    }
+    /** JANUS swap detector — emits swap.detected events. */
+    janusSwap(fixtures, swapOpts = {}) {
+        const t0 = performance.now();
+        const obs = fixtures.map((fx) => core.nemesis.observe(fx));
+        const data = core.nemesis.detectIdentitySwap(obs, swapOpts);
+        const latencyMs = +(performance.now() - t0).toFixed(2);
+        if (data.swapDetected) {
+            getEventBus().emit({ kind: "swap.detected", at: Date.now(), data: { transitions: data.transitions, latencyMs } });
+        }
+        return { ok: true, data, latencyMs };
+    }
+    /** THEMIS alibi verifier. */
+    alibi(input) {
+        const t0 = performance.now();
+        const data = core.nemesis.verifyAlibi({ notVendor: String(input.notVendor), fixture: input.fixture });
+        return { ok: data.verdict !== "INCONCLUSIVE", data, latencyMs: +(performance.now() - t0).toFixed(2) };
+    }
+    /** SIBYL commit (session-start identity hash commitment). */
+    sibylCommit(input) {
+        const t0 = performance.now();
+        const data = core.nemesis.commitIdentity(this.dataDir(), {
+            identity: { vendor: String(input.vendor), model: input.model, version: input.version },
+            sessionId: input.sessionId,
+        });
+        return { ok: true, data, latencyMs: +(performance.now() - t0).toFixed(2) };
+    }
+    /** SIBYL reveal — verifies the (identity, nonce) recreates the commitment. */
+    sibylReveal(input) {
+        const t0 = performance.now();
+        const data = core.nemesis.revealIdentity(this.dataDir(), input);
+        return { ok: data.matches, data, latencyMs: +(performance.now() - t0).toFixed(2) };
+    }
+    /** GAVEL — court-admissible bundle pack. */
+    gavelPack(input) {
+        const t0 = performance.now();
+        const data = core.nemesis.buildGavelBundle(input);
+        const latencyMs = +(performance.now() - t0).toFixed(2);
+        if (data.ok)
+            getEventBus().emit({ kind: "gavel.packed", at: Date.now(), data: { commitRef: input.commitRef, latencyMs } });
+        return { ok: data.ok, data, latencyMs };
+    }
+    /** LETHE — GDPR forget. */
+    letheForget(input) {
+        const t0 = performance.now();
+        const data = core.nemesis.forgetRow({
+            repoRoot: this.dataDir().replace(/[\\/]\.mneme$/, ""),
+            ledgerRelative: input.ledgerRelative,
+            rowIndex: input.rowIndex,
+            jurisdiction: input.jurisdiction,
+            dryRun: input.dryRun,
+        });
+        const latencyMs = +(performance.now() - t0).toFixed(2);
+        if (data.ok && data.receipt)
+            getEventBus().emit({ kind: "lethe.forgotten", at: Date.now(), data: { ledger: input.ledgerRelative, latencyMs } });
+        return { ok: data.ok, data, latencyMs };
+    }
+    /** NIMBUS publish leaderboard card to the local pub-store. */
+    nimbusPublish(input) {
+        const t0 = performance.now();
+        const data = core.nemesis.publishCard({ ...input, repoRoot: this.dataDir().replace(/[\\/]\.mneme$/, "") });
+        const latencyMs = +(performance.now() - t0).toFixed(2);
+        if (data.ok)
+            getEventBus().emit({ kind: "nimbus.published", at: Date.now(), data: { orgTag: input.orgTag, latencyMs } });
+        return { ok: data.ok, data, latencyMs };
+    }
+    dataDir() {
+        if (this.opts.dataDir)
+            return this.opts.dataDir;
+        return `${process.cwd()}/.mneme`;
+    }
+}
+//# sourceMappingURL=nemesis.js.map

package/dist/nemesis.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nemesis.js","sourceRoot":"","sources":["../src/nemesis.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,IAAI,MAAM,gBAAgB,CAAC;AAEvC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAW1C,MAAM,OAAO,UAAU;IACQ;IAA7B,YAA6B,OAA0B,EAAE;QAA5B,SAAI,GAAJ,IAAI,CAAwB;IAAG,CAAC;IAE7D,sEAAsE;IACtE,WAAW,CAAC,EAAW;QACrB,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;QACjD,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACtF,CAAC;IAED,iDAAiD;IACjD,QAAQ,CAAC,EAAwE;QAC/E,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,EAAE,GAAG,CAAC,OAAQ,EAAc,CAAC,IAAI,KAAK,QAAQ,CAAC;YACnD,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAa,CAAC;YAChD,CAAC,CAAC,EAAgE,CAAC;QACrE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC;QACtD,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACtF,CAAC;IAED,oDAAoD;IACpD,KAAK,CAAC,KAAgG;QACpG,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC;YACvC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;YAC5B,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;YACpC,WAAW,EAAE,KAAK,CAAC,WAAW;SAC/B,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACvD,WAAW,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QACxG,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC1C,CAAC;IAED,WAAW,CAAC,cAAsB;QAChC,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;QACtD,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;IACxG,CAAC;IAED,+DAA+D;IAC/D,YAAY,CAAC,EAAW;QACtB,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;QAClD,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACtF,CAAC;IAED,0CAA0C;IAC1C,SAAS,CAAC,IAAY;QACpB,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACpD,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACtF,CAAC;IAED,kDAAkD;IAClD,YAAY,CAAC,EAAW;QACtB,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACtC,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACtF,CAAC;IAED,wDAAwD;IACxD,SAAS,CAAC,QAAmB,EAAE,WAAmC,EAAE;QAClE,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACvD,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,WAAW,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QACpH,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAChD,CAAC;IAED,6BAA6B;IAC7B,KAAK,CAAC,KAAyD;QAC7D,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACtG,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,KAAK,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACxG,CAAC;IAED,6DAA6D;IAC7D,WAAW,CAAC,KAA0F;QACpG,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE;YACvD,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;YACtF,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACtF,CAAC;IAED,8EAA8E;IAC9E,WAAW,CAAC,KAA2G;QACrH,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;QAChE,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACrF,CAAC;IAED,4CAA4C;IAC5C,SAAS,CAAC,KAA0D;QAClE,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,SAAS,GAAG,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACvD,IAAI,IAAI,CAAC,EAAE;YAAE,WAAW,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QAC3H,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC1C,CAAC;IAED,2BAA2B;IAC3B,WAAW,CAAC,KAA4F;QACtG,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;YAClC,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;YACrD,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACvD,IAAI,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,OAAO;YAAE,WAAW,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,cAAc,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QAChJ,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC1C,CAAC;IAED,8DAA8D;IAC9D,aAAa,CAAC,KAAuE;QACnF,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAC3G,MAAM,SAAS,GAAG,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACvD,IAAI,IAAI,CAAC,EAAE;YAAE,WAAW,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QACzH,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC1C,CAAC;IAEO,OAAO;QACb,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;QAChD,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC;IACnC,CAAC;CACF"}

package/dist/truth.d.ts

@@ -0,0 +1,39 @@
+/**
+ * @mneme-ai/sdk/truth — TRUTH GATE in-process surface.
+ *
+ * The CLI shells out to `mneme truth_gate run` which spawns the MCP
+ * server + walks all probes. The SDK calls the probe runner directly
+ * — same probes, no subprocess, type-safe results.
+ */
+import { truthGate } from "@mneme-ai/core";
+import type { SdkEnvelope } from "./types.js";
+declare const ALL_PROBES: readonly truthGate.Probe[];
+type ProbeResultLike = Awaited<ReturnType<typeof ALL_PROBES[number]["run"]>>;
+export interface ProbeRunInput {
+    probeId: string;
+    cwd?: string;
+}
+export declare function runProbe(input: ProbeRunInput): Promise<SdkEnvelope<ProbeResultLike & {
+    probeId: string;
+    latencyMs: number;
+}>>;
+export declare function listProbes(): ReadonlyArray<{
+    id: string;
+    kind: string;
+    description: string;
+}>;
+export declare function runAllProbes(opts?: {
+    cwd?: string;
+}): Promise<SdkEnvelope<{
+    total: number;
+    passed: number;
+    failed: number;
+    results: Array<{
+        probeId: string;
+        value: unknown;
+        evidence: string;
+        latencyMs: number;
+    }>;
+}>>;
+export {};
+//# sourceMappingURL=truth.d.ts.map

package/dist/truth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"truth.d.ts","sourceRoot":"","sources":["../src/truth.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,QAAA,MAAQ,UAAU,4BAAyB,CAAC;AAC5C,KAAK,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAE7E,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,wBAAsB,QAAQ,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC,eAAe,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CAWnI;AAED,wBAAgB,UAAU,IAAI,aAAa,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC,CAE7F;AAED,wBAAsB,YAAY,CAAC,IAAI,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAAC,WAAW,CAAC;IACnF,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC1F,CAAC,CAAC,CAwBF"}

package/dist/truth.js

@@ -0,0 +1,56 @@
+/**
+ * @mneme-ai/sdk/truth — TRUTH GATE in-process surface.
+ *
+ * The CLI shells out to `mneme truth_gate run` which spawns the MCP
+ * server + walks all probes. The SDK calls the probe runner directly
+ * — same probes, no subprocess, type-safe results.
+ */
+import { truthGate } from "@mneme-ai/core";
+const { ALL_PROBES, probeById } = truthGate;
+export async function runProbe(input) {
+    const p = probeById(input.probeId);
+    if (!p)
+        return { ok: false, reason: `unknown probe: ${input.probeId}` };
+    const t0 = performance.now();
+    try {
+        const r = await p.run({ cwd: input.cwd ?? process.cwd() });
+        const latencyMs = +(performance.now() - t0).toFixed(2);
+        return { ok: true, data: { ...r, probeId: input.probeId, latencyMs }, latencyMs };
+    }
+    catch (e) {
+        return { ok: false, reason: e.message, latencyMs: +(performance.now() - t0).toFixed(2) };
+    }
+}
+export function listProbes() {
+    return ALL_PROBES.map((p) => ({ id: p.id, kind: p.kind, description: p.description }));
+}
+export async function runAllProbes(opts = {}) {
+    const cwd = opts.cwd ?? process.cwd();
+    const t0 = performance.now();
+    const results = [];
+    let passed = 0, failed = 0;
+    for (const p of ALL_PROBES) {
+        const start = performance.now();
+        try {
+            const r = await p.run({ cwd });
+            const latency = +(performance.now() - start).toFixed(2);
+            const ok = r.value === 1;
+            if (ok)
+                passed++;
+            else
+                failed++;
+            results.push({ probeId: p.id, value: r.value, evidence: r.evidence, latencyMs: latency });
+        }
+        catch (e) {
+            failed++;
+            results.push({ probeId: p.id, value: null, evidence: `threw: ${e.message}`, latencyMs: +(performance.now() - start).toFixed(2) });
+        }
+    }
+    const latencyMs = +(performance.now() - t0).toFixed(2);
+    return {
+        ok: failed === 0,
+        data: { total: results.length, passed, failed, results },
+        latencyMs,
+    };
+}
+//# sourceMappingURL=truth.js.map

package/dist/truth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"truth.js","sourceRoot":"","sources":["../src/truth.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAG3C,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,SAAS,CAAC;AAQ5C,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,KAAoB;IACjD,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;IACxE,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACvD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,CAAC;IACpF,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAG,CAAW,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACtG,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;AACzF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAyB,EAAE;IAM5D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACtC,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAoF,EAAE,CAAC;IACpG,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;YAC/B,MAAM,OAAO,GAAG,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YACxD,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC;YACzB,IAAI,EAAE;gBAAE,MAAM,EAAE,CAAC;;gBAAM,MAAM,EAAE,CAAC;YAChC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;QAC5F,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,EAAE,CAAC;YACT,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAW,CAAW,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC/I,CAAC;IACH,CAAC;IACD,MAAM,SAAS,GAAG,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACvD,OAAO;QACL,EAAE,EAAE,MAAM,KAAK,CAAC;QAChB,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE;QACxD,SAAS;KACV,CAAC;AACJ,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,50 @@
+/**
+ * @mneme-ai/sdk types — branded types for type-level safety.
+ *
+ * "Branded" type pattern: a `Brand<T, "tag">` looks like `T` at runtime
+ * but the compiler refuses to substitute one tagged value for another.
+ * Prevents string-confusion bugs (e.g. passing a vendor slug where a
+ * commit ref is expected).
+ *
+ * Adopted from world-class TS codebases (Effect, fp-ts).
+ */
+declare const __brand: unique symbol;
+export type Brand<T, B> = T & {
+    readonly [__brand]: B;
+};
+/** A SHA-256 hex digest. */
+export type HmacHash = Brand<string, "HmacHash">;
+/** A vendor slug from the NEMESIS allowlist. */
+export type VendorId = Brand<string, "VendorId">;
+/** A claim text submitted to the verifier. */
+export type ClaimText = Brand<string, "ClaimText">;
+/** A git commit ref (short or long). */
+export type CommitRef = Brand<string, "CommitRef">;
+/** An ISO-8601 timestamp string. */
+export type IsoTimestamp = Brand<string, "IsoTimestamp">;
+/** A NEMESIS session identifier. */
+export type SessionId = Brand<string, "SessionId">;
+/** A repo-relative path. */
+export type RepoPath = Brand<string, "RepoPath">;
+export declare function asHmacHash(s: string): HmacHash;
+export declare function asVendorId(s: string): VendorId;
+export declare function asClaimText(s: string): ClaimText;
+export declare function asCommitRef(s: string): CommitRef;
+export declare function asIsoTimestamp(s: string | Date): IsoTimestamp;
+export interface Fixture {
+    diff: string;
+    prDescription: string;
+    commitMessages: string[];
+}
+/** Verdict ladder produced by ACGV / verify. */
+export type Verdict = "IMPOSSIBLE_REFUTE" | "AUTO_REFUTE" | "BLACK_HOLE" | "FUSION" | "LIMBO" | "PASSTHROUGH";
+/** Plain envelope every SDK call returns — always includes ok + reason. */
+export interface SdkEnvelope<T> {
+    ok: boolean;
+    data?: T;
+    reason?: string;
+    /** Latency in milliseconds (in-process). */
+    latencyMs?: number;
+}
+export {};
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,CAAC,MAAM,OAAO,EAAE,OAAO,MAAM,CAAC;AACrC,MAAM,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG;IAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;CAAE,CAAC;AAExD,4BAA4B;AAC5B,MAAM,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;AACjD,gDAAgD;AAChD,MAAM,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;AACjD,8CAA8C;AAC9C,MAAM,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AACnD,wCAAwC;AACxC,MAAM,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AACnD,oCAAoC;AACpC,MAAM,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;AACzD,oCAAoC;AACpC,MAAM,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AACnD,4BAA4B;AAC5B,MAAM,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;AAIjD,wBAAgB,UAAU,CAAC,CAAC,EAAE,MAAM,GAAG,QAAQ,CAK9C;AAED,wBAAgB,UAAU,CAAC,CAAC,EAAE,MAAM,GAAG,QAAQ,CAK9C;AAED,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,GAAG,SAAS,CAGhD;AAED,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,GAAG,SAAS,CAKhD;AAED,wBAAgB,cAAc,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,YAAY,CAM7D;AAID,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,gDAAgD;AAChD,MAAM,MAAM,OAAO,GAAG,mBAAmB,GAAG,aAAa,GAAG,YAAY,GAAG,QAAQ,GAAG,OAAO,GAAG,aAAa,CAAC;AAE9G,2EAA2E;AAC3E,MAAM,WAAW,WAAW,CAAC,CAAC;IAC5B,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,CAAC,EAAE,CAAC,CAAC;IACT,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4CAA4C;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB"}

package/dist/types.js

@@ -0,0 +1,42 @@
+/**
+ * @mneme-ai/sdk types — branded types for type-level safety.
+ *
+ * "Branded" type pattern: a `Brand<T, "tag">` looks like `T` at runtime
+ * but the compiler refuses to substitute one tagged value for another.
+ * Prevents string-confusion bugs (e.g. passing a vendor slug where a
+ * commit ref is expected).
+ *
+ * Adopted from world-class TS codebases (Effect, fp-ts).
+ */
+// ── Constructors (validating + casting) ─────────────────────────────
+export function asHmacHash(s) {
+    if (typeof s !== "string" || !/^[0-9a-f]{64}$/.test(s)) {
+        throw new Error(`asHmacHash: not a SHA-256 hex digest: ${String(s).slice(0, 16)}...`);
+    }
+    return s;
+}
+export function asVendorId(s) {
+    if (typeof s !== "string" || !/^[a-z0-9_-]{1,64}$/.test(s)) {
+        throw new Error(`asVendorId: not a valid vendor slug: ${String(s).slice(0, 32)}`);
+    }
+    return s;
+}
+export function asClaimText(s) {
+    if (typeof s !== "string")
+        throw new Error("asClaimText: not a string");
+    return s;
+}
+export function asCommitRef(s) {
+    if (typeof s !== "string" || !/^[0-9a-f]{7,64}$/.test(s)) {
+        throw new Error(`asCommitRef: not a valid commit hash: ${String(s).slice(0, 32)}`);
+    }
+    return s;
+}
+export function asIsoTimestamp(s) {
+    const v = s instanceof Date ? s.toISOString() : s;
+    if (typeof v !== "string" || Number.isNaN(Date.parse(v))) {
+        throw new Error(`asIsoTimestamp: not parseable: ${String(v).slice(0, 32)}`);
+    }
+    return v;
+}
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAoBH,uEAAuE;AAEvE,MAAM,UAAU,UAAU,CAAC,CAAS;IAClC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,yCAAyC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,CAAa,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,CAAS;IAClC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,wCAAwC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,CAAa,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,CAAS;IACnC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACxE,OAAO,CAAc,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,CAAS;IACnC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,yCAAyC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,CAAc,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,CAAgB;IAC7C,MAAM,CAAC,GAAG,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,kCAAkC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,CAAiB,CAAC;AAC3B,CAAC"}