@mneme-ai/sdk 3.7.0 → 3.8.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/governance.d.ts +18 -0
- package/dist/governance.d.ts.map +1 -0
- package/dist/governance.js +42 -0
- package/dist/governance.js.map +1 -0
- package/dist/governance.test.d.ts +2 -0
- package/dist/governance.test.d.ts.map +1 -0
- package/dist/governance.test.js +24 -0
- package/dist/governance.test.js.map +1 -0
- package/dist/index.d.ts +1 -0
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +3 -0
- package/dist/index.js.map +1 -1
- package/package.json +2 -2
|
@@ -0,0 +1,18 @@
|
|
|
1
|
+
import { harness, agentcert } from "@mneme-ai/core";
|
|
2
|
+
export declare const createHarness: typeof harness.createHarness;
|
|
3
|
+
export declare const GovernanceBlocked: typeof harness.GovernanceBlocked;
|
|
4
|
+
export type HarnessOptions = harness.HarnessOptions;
|
|
5
|
+
export type AgentHarness = harness.AgentHarness;
|
|
6
|
+
export type AgentRunCertificate = agentcert.AgentRunCertificate;
|
|
7
|
+
export interface Governor extends harness.AgentHarness {
|
|
8
|
+
/** Build the Agent Run Certificate, NOTARY-sign it (Ed25519, offline-verifiable), and optionally
|
|
9
|
+
* write it to disk. The signed artifact embeds its evidence — verifiable from one file, anywhere. */
|
|
10
|
+
sign(opts?: {
|
|
11
|
+
repoRoot?: string;
|
|
12
|
+
out?: string;
|
|
13
|
+
}): unknown;
|
|
14
|
+
/** Verify the current run's certificate against its own evidence (no signature check). */
|
|
15
|
+
selfVerify(): agentcert.CertVerify;
|
|
16
|
+
}
|
|
17
|
+
export declare function createGovernor(opts: harness.HarnessOptions): Governor;
|
|
18
|
+
//# sourceMappingURL=governance.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"governance.d.ts","sourceRoot":"","sources":["../src/governance.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAE,OAAO,EAAE,SAAS,EAAU,MAAM,gBAAgB,CAAC;AAE5D,eAAO,MAAM,aAAa,8BAAwB,CAAC;AACnD,eAAO,MAAM,iBAAiB,kCAA4B,CAAC;AAC3D,MAAM,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;AACpD,MAAM,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;AAChD,MAAM,MAAM,mBAAmB,GAAG,SAAS,CAAC,mBAAmB,CAAC;AAEhE,MAAM,WAAW,QAAS,SAAQ,OAAO,CAAC,YAAY;IACpD;0GACsG;IACtG,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;IAC1D,0FAA0F;IAC1F,UAAU,IAAI,SAAS,CAAC,UAAU,CAAC;CACpC;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,cAAc,GAAG,QAAQ,CAerE"}
|
|
@@ -0,0 +1,42 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* @mneme-ai/sdk/governance — drop-in agent governance.
|
|
3
|
+
*
|
|
4
|
+
* The whole point: make every tool-call a governed agent makes gated + audited + (human-)approved
|
|
5
|
+
* + certifiable, by changing ONE line of your agent. Wrap your tool executor once:
|
|
6
|
+
*
|
|
7
|
+
* import { createGovernor } from "@mneme-ai/sdk";
|
|
8
|
+
*
|
|
9
|
+
* const gov = createGovernor({ agent: "Grok", task: "refactor auth", onNeedsApproval: askPhone });
|
|
10
|
+
* const run = gov.guard(myToolExecutor); // ← the only change
|
|
11
|
+
* await run("bash", { command: "rm -rf /" }); // throws GovernanceBlocked — never reaches the tool
|
|
12
|
+
* const cert = gov.sign(); // a portable, NOTARY-signed Agent Run Certificate
|
|
13
|
+
* // anyone verifies it OFFLINE: `mneme agentcert verify cert.json` (no Mneme, no vendor trust)
|
|
14
|
+
*
|
|
15
|
+
* The certificate from a governed run is policy-compliant + offline-verifiable BY CONSTRUCTION —
|
|
16
|
+
* the API gives you no way to silently execute a blocked call.
|
|
17
|
+
*/
|
|
18
|
+
import { writeFileSync } from "node:fs";
|
|
19
|
+
import { harness, agentcert, notary } from "@mneme-ai/core";
|
|
20
|
+
export const createHarness = harness.createHarness;
|
|
21
|
+
export const GovernanceBlocked = harness.GovernanceBlocked;
|
|
22
|
+
export function createGovernor(opts) {
|
|
23
|
+
const h = harness.createHarness(opts);
|
|
24
|
+
function evidence() {
|
|
25
|
+
const c = h.certificate();
|
|
26
|
+
return { runId: c.runId, agent: c.agent, model: c.model, task: c.task, startedAt: c.startedAt, endedAt: c.endedAt, auditFrames: h.frames(), approvals: h.approvals() };
|
|
27
|
+
}
|
|
28
|
+
function sign(o) {
|
|
29
|
+
const cert = h.certificate();
|
|
30
|
+
const payload = { cert, evidence: evidence() };
|
|
31
|
+
let signed = payload;
|
|
32
|
+
try {
|
|
33
|
+
signed = notary.issueReceipt(o?.repoRoot ?? process.cwd(), { kind: "reasoning-trace", subject: `agent-run-cert:${cert.runId}`, payload, includePayload: true, issuedAt: Date.now() });
|
|
34
|
+
}
|
|
35
|
+
catch { /* notary optional */ }
|
|
36
|
+
if (o?.out)
|
|
37
|
+
writeFileSync(o.out, JSON.stringify(signed, null, 2), "utf8");
|
|
38
|
+
return signed;
|
|
39
|
+
}
|
|
40
|
+
return { ...h, sign, selfVerify: () => agentcert.verifyCertificate(h.certificate(), evidence()) };
|
|
41
|
+
}
|
|
42
|
+
//# sourceMappingURL=governance.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"governance.js","sourceRoot":"","sources":["../src/governance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAE5D,MAAM,CAAC,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;AACnD,MAAM,CAAC,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;AAa3D,MAAM,UAAU,cAAc,CAAC,IAA4B;IACzD,MAAM,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;IACtC,SAAS,QAAQ;QACf,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;QAC1B,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC;IACzK,CAAC;IACD,SAAS,IAAI,CAAC,CAAuC;QACnD,MAAM,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAAC;QAC/C,IAAI,MAAM,GAAY,OAAO,CAAC;QAC9B,IAAI,CAAC;YAAC,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,EAAE,QAAQ,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,kBAAkB,IAAI,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC;QAC9N,IAAI,CAAC,EAAE,GAAG;YAAE,aAAa,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC1E,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AACpG,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"governance.test.d.ts","sourceRoot":"","sources":["../src/governance.test.ts"],"names":[],"mappings":""}
|
|
@@ -0,0 +1,24 @@
|
|
|
1
|
+
import { describe, it, expect } from "vitest";
|
|
2
|
+
import { createGovernor, GovernanceBlocked } from "./index.js";
|
|
3
|
+
import { agentcert, notary } from "@mneme-ai/core";
|
|
4
|
+
describe("@mneme-ai/sdk governance — the 5-line drop-in", () => {
|
|
5
|
+
it("end-to-end: wrap → block destructive → sign → verify offline", async () => {
|
|
6
|
+
let t = 1000;
|
|
7
|
+
const gov = createGovernor({ agent: "Grok", task: "refactor auth", run: "sdk1", now: () => t++, onNeedsApproval: async () => "allow" });
|
|
8
|
+
const run = gov.guard(async (_tool, _args) => "executed");
|
|
9
|
+
expect(await run("get_weather", { city: "x" })).toBe("executed"); // non-sensitive → allow → runs
|
|
10
|
+
await expect(run("bash", { command: "rm -rf /" })).rejects.toBeInstanceOf(GovernanceBlocked); // blocked → never runs
|
|
11
|
+
expect(await run("http_request", { url: "https://api.x" })).toBe("executed"); // sensitive → escalated → human allows → runs
|
|
12
|
+
const signed = gov.sign();
|
|
13
|
+
// signature is valid + offline-verifiable
|
|
14
|
+
const sig = notary.verifyReceipt(signed);
|
|
15
|
+
expect(sig.valid).toBe(true);
|
|
16
|
+
// the embedded cert re-derives from its evidence (prove-not-claim)
|
|
17
|
+
const v = agentcert.verifyCertificate(signed.payload.cert, signed.payload.evidence);
|
|
18
|
+
expect(v.valid).toBe(true);
|
|
19
|
+
expect(signed.payload.cert.summary.blocked).toBe(1);
|
|
20
|
+
expect(signed.payload.cert.summary.humanApprovals).toBe(1);
|
|
21
|
+
expect(gov.selfVerify().valid).toBe(true);
|
|
22
|
+
});
|
|
23
|
+
});
|
|
24
|
+
//# sourceMappingURL=governance.test.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"governance.test.js","sourceRoot":"","sources":["../src/governance.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAEnD,QAAQ,CAAC,+CAA+C,EAAE,GAAG,EAAE;IAC7D,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,IAAI,CAAC,GAAG,IAAI,CAAC;QACb,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,eAAe,EAAE,KAAK,IAAI,EAAE,CAAC,OAAgB,EAAE,CAAC,CAAC;QACjJ,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,KAAa,EAAE,KAAc,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC;QAE3E,MAAM,CAAC,MAAM,GAAG,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAQ,+BAA+B;QACxG,MAAM,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC,CAAE,uBAAuB;QACtH,MAAM,CAAC,MAAM,GAAG,CAAC,cAAc,EAAE,EAAE,GAAG,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAE,8CAA8C;QAE7H,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAA8F,CAAC;QACtH,0CAA0C;QAC1C,MAAM,GAAG,GAAG,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,mEAAmE;QACnE,MAAM,CAAC,GAAG,SAAS,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAQ,CAAC,IAAK,EAAE,MAAM,CAAC,OAAQ,CAAC,QAAS,CAAC,CAAC;QACxF,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3B,MAAM,CAAC,MAAM,CAAC,OAAQ,CAAC,IAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtD,MAAM,CAAC,MAAM,CAAC,OAAQ,CAAC,IAAK,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7D,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|
package/dist/index.d.ts
CHANGED
|
@@ -36,6 +36,7 @@ export { NemesisSdk } from "./nemesis.js";
|
|
|
36
36
|
export { verify, verifyTagged, type VerifyOpts, type VerifyResult } from "./verify.js";
|
|
37
37
|
export { runProbe, runAllProbes, listProbes } from "./truth.js";
|
|
38
38
|
export { vsCli as benchVsCli, benchEuStamp, benchClassify, type BenchmarkResult } from "./benchmark.js";
|
|
39
|
+
export { createGovernor, createHarness, GovernanceBlocked, type Governor, type HarnessOptions, type AgentHarness, type AgentRunCertificate } from "./governance.js";
|
|
39
40
|
/**
|
|
40
41
|
* Tagged-template-literal compatible verify dispatcher.
|
|
41
42
|
*
|
package/dist/index.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,UAAU,EAAE,KAAK,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAClE,OAAO,EAAE,MAAM,IAAI,QAAQ,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AACpC,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAmB,KAAK,cAAc,EAAE,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AAEpF,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAE5B,YAAY,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,UAAU,EAAE,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AACvF,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAChE,OAAO,EAAE,KAAK,IAAI,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,KAAK,eAAe,EAAE,MAAM,gBAAgB,CAAC;
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,UAAU,EAAE,KAAK,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAClE,OAAO,EAAE,MAAM,IAAI,QAAQ,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AACpC,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAmB,KAAK,cAAc,EAAE,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AAEpF,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAE5B,YAAY,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,UAAU,EAAE,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AACvF,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAChE,OAAO,EAAE,KAAK,IAAI,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,KAAK,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAGxG,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,iBAAiB,EAAE,KAAK,QAAQ,EAAE,KAAK,cAAc,EAAE,KAAK,YAAY,EAAE,KAAK,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAEpK;;;;;;GAMG;AACH,UAAU,gBAAgB;IACxB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,UAAU,CAAC,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,OAAO,QAAQ,CAAC,CAAC;IACpF,CAAC,OAAO,EAAE,oBAAoB,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,UAAU,CAAC,OAAO,YAAY,CAAC,CAAC;CACtF;AAYD,MAAM,WAAW,QAAQ;IACvB,mDAAmD;IACnD,OAAO,EAAE,UAAU,CAAC;IACpB,qEAAqE;IACrE,KAAK,EAAE;QACL,MAAM,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;KACnC,CAAC;IACF,qEAAqE;IACrE,KAAK,EAAE;QACL,IAAI,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC;KAC/B,CAAC;IACF,sEAAsE;IACtE,MAAM,EAAE;QACN,OAAO,EAAE,UAAU,CAAC,eAAe,CAAC,CAAC;KACtC,CAAC;IACF,uCAAuC;IACvC,MAAM,EAAE,gBAAgB,CAAC;IACzB,0CAA0C;IAC1C,KAAK,EAAE,OAAO,KAAK,CAAC;IACpB,qCAAqC;IACrC,SAAS,EAAE,OAAO,SAAS,CAAC;IAC5B,0DAA0D;IAC1D,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,cAAc,EAAE,KAAK,qBAAqB,CAAC,UAAU,CAAC,CAAC;IACxE,8CAA8C;IAC9C,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,kCAAkC;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,IAAI,GAAE,iBAAsB,GAAG,QAAQ,CA+BlE;AAED,0CAA0C;AAC1C,eAAO,MAAM,WAAW,WAAW,CAAC;AACpC,eAAO,MAAM,eAAe,gGAAsF,CAAC;AAEnH;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAE1C,eAAO,MAAM,WAAW,kCAA4B,CAAC;AACrD,eAAO,MAAM,mBAAmB,4CAAsC,CAAC;AACvE,eAAO,MAAM,SAAS,yCAAmC,CAAC;AAC1D,eAAO,MAAM,iBAAiB,0CAAoC,CAAC;AACnE,eAAO,MAAM,aAAa,oCAA8B,CAAC;AAEzD,kFAAkF;AAClF,eAAO,MAAM,KAAK;;;CAGjB,CAAC;AACF,eAAO,MAAM,KAAK;;;CAGjB,CAAC;AACF,eAAO,MAAM,MAAM;;CAElB,CAAC;AAEF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,kBAAkB,8CAAwC,CAAC;AACxE,eAAO,MAAM,eAAe,6CAAuC,CAAC;AACpE,eAAO,MAAM,gBAAgB,6CAAuC,CAAC;AACrE,eAAO,MAAM,qBAAqB,uCAAiC,CAAC;AAEpE,eAAO,MAAM,UAAU;;;;;;CAMtB,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,iBAAiB,6CAAuC,CAAC;AACtE,eAAO,MAAM,YAAY,wCAAkC,CAAC;AAC5D,eAAO,MAAM,gBAAgB,4CAAsC,CAAC;AACpE,eAAO,MAAM,eAAe,2CAAqC,CAAC;AAClE,eAAO,MAAM,mBAAmB,+CAAyC,CAAC;AAC1E,eAAO,MAAM,eAAe,2CAAqC,CAAC;AAClE,eAAO,MAAM,qBAAqB,iDAA2C,CAAC;AAC9E,eAAO,MAAM,oBAAoB,gDAA0C,CAAC;AAE5E,eAAO,MAAM,IAAI;;;;;;;;;CAShB,CAAC"}
|
package/dist/index.js
CHANGED
|
@@ -35,6 +35,9 @@ export { NemesisSdk } from "./nemesis.js";
|
|
|
35
35
|
export { verify, verifyTagged } from "./verify.js";
|
|
36
36
|
export { runProbe, runAllProbes, listProbes } from "./truth.js";
|
|
37
37
|
export { vsCli as benchVsCli, benchEuStamp, benchClassify } from "./benchmark.js";
|
|
38
|
+
// 🎖 Drop-in agent governance: wrap a tool executor once → gated + audited + approved + a signed,
|
|
39
|
+
// offline-verifiable Agent Run Certificate. See ./governance.ts.
|
|
40
|
+
export { createGovernor, createHarness, GovernanceBlocked } from "./governance.js";
|
|
38
41
|
function buildVerifyDispatcher() {
|
|
39
42
|
const dispatcher = ((firstArg, ...rest) => {
|
|
40
43
|
if (Array.isArray(firstArg) && "raw" in firstArg) {
|
package/dist/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,UAAU,EAA0B,MAAM,cAAc,CAAC;AAClE,OAAO,EAAE,MAAM,IAAI,QAAQ,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AACpC,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAwC,MAAM,aAAa,CAAC;AAEpF,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAG5B,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,YAAY,EAAsC,MAAM,aAAa,CAAC;AACvF,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAChE,OAAO,EAAE,KAAK,IAAI,UAAU,EAAE,YAAY,EAAE,aAAa,EAAwB,MAAM,gBAAgB,CAAC;
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,UAAU,EAA0B,MAAM,cAAc,CAAC;AAClE,OAAO,EAAE,MAAM,IAAI,QAAQ,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AACpC,OAAO,KAAK,SAAS,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAwC,MAAM,aAAa,CAAC;AAEpF,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAG5B,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,YAAY,EAAsC,MAAM,aAAa,CAAC;AACvF,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAChE,OAAO,EAAE,KAAK,IAAI,UAAU,EAAE,YAAY,EAAE,aAAa,EAAwB,MAAM,gBAAgB,CAAC;AACxG,kGAAkG;AAClG,iEAAiE;AACjE,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,iBAAiB,EAAmF,MAAM,iBAAiB,CAAC;AAcpK,SAAS,qBAAqB;IAC5B,MAAM,UAAU,GAAG,CAAC,CAAC,QAAuC,EAAE,GAAG,IAAe,EAAE,EAAE;QAClF,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,KAAK,IAAK,QAAiC,EAAE,CAAC;YAC3E,OAAO,YAAY,CAAC,QAAgC,EAAE,GAAG,IAAI,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,QAAQ,CAAC,QAAkB,EAAE,IAAI,CAAC,CAAC,CAA+C,CAAC,CAAC;IAC7F,CAAC,CAAqB,CAAC;IACvB,OAAO,UAAU,CAAC;AACpB,CAAC;AA+BD;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,OAA0B,EAAE;IACtD,wBAAwB;IACxB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAC;QAClG,CAAC;IACH,CAAC;IACD,2EAA2E;IAC3E,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;IAClD,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IACrC,OAAO;QACL,OAAO;QACP,kEAAkE;QAClE,KAAK,EAAE;YACL,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC;SAC1C;QACD,KAAK,EAAE;YACL,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;SACtC;QACD,MAAM,EAAE;YACN,OAAO,EAAE,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;SAC7C;QACD,MAAM,EAAE,qBAAqB,EAAE;QAC/B,KAAK;QACL,SAAS;QACT,MAAM,EAAE,CAAC,KAAwB,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC;QAC5D,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC;QAChC,OAAO,EAAE,QAAQ;KAClB,CAAC;AACJ,CAAC;AAED,0CAA0C;AAC1C,MAAM,CAAC,MAAM,WAAW,GAAG,QAAQ,CAAC;AACpC,MAAM,CAAC,MAAM,eAAe,GAAG,mFAAmF,CAAC;AAEnH;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAE1C,MAAM,CAAC,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;AACrD,MAAM,CAAC,MAAM,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC;AACvE,MAAM,CAAC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC;AAC1D,MAAM,CAAC,MAAM,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC;AACnE,MAAM,CAAC,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC;AAEzD,kFAAkF;AAClF,MAAM,CAAC,MAAM,KAAK,GAAG;IACnB,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS;IACjC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,mBAAmB;CAC5C,CAAC;AACF,MAAM,CAAC,MAAM,KAAK,GAAG;IACnB,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,gBAAgB;IACtC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,iBAAiB;CAC1C,CAAC;AACF,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,WAAW;CACrC,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAO,CAAC,UAAU,CAAC,kBAAkB,CAAC;AACxE,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC;AACpE,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC;AACrE,MAAM,CAAC,MAAM,qBAAqB,GAAG,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC;AAEpE,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,kBAAkB;IAC5C,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,iBAAiB;IAC3C,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,iBAAiB;IAC5C,WAAW,EAAE,OAAO,CAAC,UAAU,CAAC,WAAW;IAC3C,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,gBAAgB;CAC9C,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC;AACtE,MAAM,CAAC,MAAM,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC;AAC5D,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC;AACpE,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC;AAClE,MAAM,CAAC,MAAM,mBAAmB,GAAG,OAAO,CAAC,UAAU,CAAC,mBAAmB,CAAC;AAC1E,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC;AAClE,MAAM,CAAC,MAAM,qBAAqB,GAAG,OAAO,CAAC,UAAU,CAAC,qBAAqB,CAAC;AAC9E,MAAM,CAAC,MAAM,oBAAoB,GAAG,OAAO,CAAC,UAAU,CAAC,oBAAoB,CAAC;AAE5E,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,iBAAiB;IAC5C,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,YAAY;IACzC,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,eAAe;IAC7C,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,gBAAgB;IAC/C,aAAa,EAAE,OAAO,CAAC,UAAU,CAAC,qBAAqB;IACvD,cAAc,EAAE,OAAO,CAAC,UAAU,CAAC,mBAAmB;IACtD,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,eAAe;IAC5C,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,oBAAoB;CACpD,CAAC"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@mneme-ai/sdk",
|
|
3
|
-
"version": "3.
|
|
3
|
+
"version": "3.8.0",
|
|
4
4
|
"description": "World-class premium SDK for Mneme — in-process native API for AI vendor embedding. 30-80× faster than CLI subprocess.",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"main": "./dist/index.js",
|
|
@@ -61,7 +61,7 @@
|
|
|
61
61
|
"native"
|
|
62
62
|
],
|
|
63
63
|
"dependencies": {
|
|
64
|
-
"@mneme-ai/core": "3.
|
|
64
|
+
"@mneme-ai/core": "3.8.0"
|
|
65
65
|
},
|
|
66
66
|
"engines": {
|
|
67
67
|
"node": ">=22.13.0 <25.0.0"
|