@mnemom/mnemom 0.17.34-next.1 → 0.17.34-next.2

package/dist/vendor/shared/durable-contract/test-mode.js

@@ -0,0 +1,140 @@
+// GENERATED from shared/durable-contract/src/test-mode.ts by cli/scripts/sync-durable-contract.mjs; do not edit.
+/**
+ * The closed TEST_MODE seam list T1-T12 and the per-repo guard lists (C17-R16, rulings I06, I22,
+ * I29; BACKBONE "TEST_MODE"). A seam is honoured only when DURABLE_SESSIONS_TEST_MODE is exactly
+ * "1" AND every URL on the repo's guard list is a loopback literal; an unset URL fails. Each repo
+ * reads the env in exactly one module (TEST_MODE_MODULE).
+ */
+export const TEST_MODE_ENV = "DURABLE_SESSIONS_TEST_MODE";
+export const REPOS = ["cli", "api", "gateway"];
+export const TEST_SEAMS = [
+    { id: "T1", repo: "cli", kind: "env", names: ["DURABLE_BOOT_ID_FILE"] },
+    { id: "T2", repo: "cli", kind: "env", names: ["DURABLE_HOST_TEST_PAUSE_AT"] },
+    {
+        id: "T3",
+        repo: "cli",
+        kind: "env",
+        names: ["http door on a loopback host (credential proxy)"],
+    },
+    { id: "T4", repo: "api", kind: "env", names: ["DURABLE_TEST_GITHUB_API_BASE"] },
+    { id: "T5", repo: "api", kind: "route", names: ["POST /__test/durable/barriers/{name}/release"] },
+    { id: "T6", repo: "api", kind: "header", names: ["x-durable-test-fault"] },
+    { id: "T7", repo: "api", kind: "route", names: ["POST /__test/durable/append"] },
+    { id: "T8", repo: "api", kind: "body", names: ["max_rows", "time_budget_ms", "batch_size"] },
+    {
+        id: "T9",
+        repo: "api",
+        kind: "env",
+        names: [
+            "DURABLE_SWEEP_TEST_BATCH_DELAY_MS",
+            "DURABLE_SWEEP_TEST_PAUSE_ADVISORY_KEY",
+            "DURABLE_SWEEP_TEST_FAULT",
+        ],
+    },
+    { id: "T10", repo: "gateway", kind: "env", names: ["SUBSCRIPTION_PROFILE_URL_OVERRIDE"] },
+    {
+        id: "T11",
+        repo: "gateway",
+        kind: "route",
+        names: ["POST /__test/durable/kv", "POST /__test/durable/fault", "POST /__test/durable/lru"],
+    },
+    { id: "T12", repo: "api+gateway", kind: "header", names: ["x-mnemom-test-case"] },
+];
+export const T2_PAUSE_POINTS = [
+    "after_claim_before_spawn",
+    "after_spawn_before_register",
+    "after_register_before_hello",
+    "after_first_batch",
+    "after_verify_before_exec",
+];
+export const T5_BARRIERS = [
+    "lock.after_preconditions",
+    "lock.before_commit",
+    "session_create.before_insert",
+    "session_key_mint.before_insert",
+];
+export const T6_FAULTS = ["drop_response_after_commit"];
+export const T9_SWEEP_FAULTS = ["after_update"];
+/** Dropped seams: must be absent from every repo (C17-R16). */
+export const DROPPED_SEAMS = [
+    "DURABLE_CLAUDE_BIN",
+    "DURABLE_SPAWN_PAUSE_AFTER_VERIFY_MS",
+    "DURABLE_SWEEP_BUDGET",
+    "/internal/durable/test/lru-flush",
+    "durable_test_barrier",
+    "test_barriers_enabled",
+];
+export const GUARD_LISTS = {
+    cli: ["MNEMOM_API_URL", "MNEMOM_GATEWAY_URL"],
+    api: ["SUPABASE_URL", "MNEMOM_GATEWAY_URL"],
+    gateway: ["SUPABASE_URL", "MNEMOM_ANALYZE_URL"],
+};
+/** The one module per repo that reads TEST_MODE and holds every seam getter (repo-relative). */
+export const TEST_MODE_MODULE = {
+    cli: "cli/src/durable/test-mode.mjs",
+    api: "src/durable/test-mode.ts",
+    gateway: "gateway/src/durable/test-mode.ts",
+};
+export function seamsOf(repo) {
+    return TEST_SEAMS.filter((s) => s.repo === repo || (s.repo === "api+gateway" && repo !== "cli")).map((s) => s.id);
+}
+export const LOOPBACK_HOSTS = ["127.0.0.1", "[::1]", "localhost"];
+/** A URL whose host is exactly a loopback literal (look-alikes such as 127.0.0.1.nip.io fail). */
+export function isLoopbackUrl(value) {
+    if (value === undefined || value === "")
+        return false;
+    let u;
+    try {
+        u = new URL(value);
+    }
+    catch {
+        return false;
+    }
+    return LOOPBACK_HOSTS.includes(u.hostname);
+}
+/** The seam guard: TEST_MODE exactly "1" and every guard URL a loopback literal. */
+export function testModeActive(repo, env) {
+    if (env[TEST_MODE_ENV] !== "1")
+        return false;
+    return GUARD_LISTS[repo].every((k) => isLoopbackUrl(env[k]));
+}
+/**
+ * The C17-R18 integrity allowlist (ruling 31(2)): the pre-existing tests and generated snapshots
+ * that M1 may legitimately change, so the test_integrity tool does not count their edits as a
+ * deletion, skip or weakening. Closed to R18's three kinds. Each entry is a literal repo-relative
+ * path (the narrowest glob): spec coverage is the api's spec-coverage gates, route inventory is
+ * `npm run inventory:check` (the extractor's tests and its exempt lists), openapi snapshots are
+ * the two files `npm run openapi:check` diffs. Repos use the vitest_suite enum; gateway, cli and
+ * the api postgrest suite hold no file of these kinds.
+ */
+export const TEST_ALLOWLIST_KINDS = [
+    "spec_coverage",
+    "route_inventory",
+    "openapi_snapshot",
+];
+export const TEST_ALLOWLIST_REPOS = [
+    "gateway",
+    "api",
+    "api_postgrest",
+    "cli",
+    "durable_contract",
+];
+const allow = (repo, kind, path) => Object.freeze({ repo, kind, path });
+/**
+ * test_integrity baseline runs (ruling 31.1): the merge-base suites run this many times to record
+ * flaky tests (passes and fails across runs) and baseline_failing ones (fails every run); also the
+ * most attempts a test recorded flaky gets in the candidate run.
+ */
+export const TEST_FLAKY_RUNS = 3;
+export const TEST_ALLOWLIST = Object.freeze([
+    allow("api", "spec_coverage", "src/__tests__/auth-gate-spec-coverage.test.ts"),
+    allow("api", "spec_coverage", "src/__tests__/spec-500-doc-coverage.test.ts"),
+    allow("api", "route_inventory", "openapi/__tests__/extract-routes.test.ts"),
+    allow("api", "route_inventory", "openapi/scripts/check-route-coverage.ts"),
+    allow("api", "openapi_snapshot", "openapi.json"),
+    allow("api", "openapi_snapshot", "openapi-internal.json"),
+]);
+/** Whether `path` (repo-relative, exact) is on TEST_ALLOWLIST for `repo`. */
+export function isTestAllowlisted(repo, path) {
+    return TEST_ALLOWLIST.some((e) => e.repo === repo && e.path === path);
+}

package/dist/vendor/shared/durable-contract/turn.d.ts

@@ -0,0 +1,57 @@
+/**
+ * The S1 attended rule, the reserved inbox key and the chain derivation (BACKBONE amendments 34,
+ * 38, 47; rulings r3 U03, U08, final F07; C09; C19-R03).
+ *
+ * x-mnemom-turn entries are the cli/src/turn-origin.mjs grammar
+ *   origin=<o>; [source=<s>; ][producer=<p>; ]pastes=<n>; h=<64 hex>[; inbox=<64 hex>]
+ * `producer` (amendment 56) is stated on origin=task entries only: Claude Code's `origin.producer`.
+ * joined by ", ", plus one leading `chain=<64 hex>` element from the durable variant only (C3).
+ * This module holds the posture decision; the parser stays in the gateway (goal-turn-claims.ts).
+ */
+export declare const TURN_ORIGINS: readonly ["human", "channel", "scheduled", "peer", "task", "meta"];
+export type TurnOrigin = (typeof TURN_ORIGINS)[number];
+export declare const TURN_SOURCES: readonly ["typed", "queued", "system", "sdk"];
+export type TurnSource = (typeof TURN_SOURCES)[number];
+export declare const CHAIN_KEY = "chain";
+/** Reserved entry key; no M1 emitter (P0a-B). Any entry carrying it is unattended. */
+export declare const INBOX_KEY = "inbox";
+export declare const TURN_HASH_RE: RegExp;
+export interface TurnEntryFacts {
+    origin: TurnOrigin;
+    source?: TurnSource;
+    /** The entry's `producer=<p>` (amendment 56), when stated. */
+    producer?: string;
+    /** True when the entry carried `inbox=<sha256 hex>`. */
+    inbox: boolean;
+}
+/** Sources that keep a human entry attended: absent, typed, queued (queued attended is a recorded departure). */
+export declare const ATTENDED_SOURCES: readonly (TurnSource | undefined)[];
+/** A stated producer token: lowercase, digits and hyphens, at most 32 characters (amendment 56). */
+export declare const TURN_PRODUCER_RE: RegExp;
+/**
+ * Amendment 56 (approved by Wassim 2026-10-29: task-notification = attended continuation): the one
+ * task producer whose notification continues the human's own work. Claude Code records a finished
+ * background command or agent of this session as origin.kind task-notification, producer
+ * session-task, promptSource system.
+ */
+export declare const ATTENDED_TASK_PRODUCER = "session-task";
+/**
+ * Candidate posture of a chain's opening request: attended when the NEWEST stated entry is
+ * origin=human with source absent, typed or queued, and no inbox key. Amendment 56 adds one
+ * continuation: a newest origin=task entry with source=system, producer session-task and no inbox
+ * key is attended when an earlier stated entry is such a human turn. Anything else (every other
+ * origin, producer or source, a task entry with no human turn before it), an empty entry list, or
+ * `schemaKnown=false` (schema=unknown with a well-formed chain, F07) is unattended.
+ */
+export declare function candidatePosture(entries: readonly TurnEntryFacts[], schemaKnown?: boolean): "attended" | "unattended";
+/** chain = sha256 hex of the root promptId (UTF-8). */
+export declare function chainIdOf(rootPromptId: string): Promise<string>;
+/** Request classes (day-1 spike vocabulary) and whether each waits for its transcript entry. */
+export declare const REQUEST_CLASSES: readonly ["main_synced", "main_no_prompt_id", "compaction", "auxiliary", "count_tokens_pre_first_prompt"];
+export type RequestClass = (typeof REQUEST_CLASSES)[number];
+/** What the C3 proxy does per request class (amendment 38). */
+export declare function chainHandling(c: RequestClass): {
+    wait: boolean;
+    chain: "own_root" | "current_root" | "none";
+    dropOnTimeout: boolean;
+};

package/dist/vendor/shared/durable-contract/turn.js

@@ -0,0 +1,81 @@
+// GENERATED from shared/durable-contract/src/turn.ts by cli/scripts/sync-durable-contract.mjs; do not edit.
+/**
+ * The S1 attended rule, the reserved inbox key and the chain derivation (BACKBONE amendments 34,
+ * 38, 47; rulings r3 U03, U08, final F07; C09; C19-R03).
+ *
+ * x-mnemom-turn entries are the cli/src/turn-origin.mjs grammar
+ *   origin=<o>; [source=<s>; ][producer=<p>; ]pastes=<n>; h=<64 hex>[; inbox=<64 hex>]
+ * `producer` (amendment 56) is stated on origin=task entries only: Claude Code's `origin.producer`.
+ * joined by ", ", plus one leading `chain=<64 hex>` element from the durable variant only (C3).
+ * This module holds the posture decision; the parser stays in the gateway (goal-turn-claims.ts).
+ */
+import { sha256Hex } from "./canonical.js";
+export const TURN_ORIGINS = ["human", "channel", "scheduled", "peer", "task", "meta"];
+export const TURN_SOURCES = ["typed", "queued", "system", "sdk"];
+export const CHAIN_KEY = "chain";
+/** Reserved entry key; no M1 emitter (P0a-B). Any entry carrying it is unattended. */
+export const INBOX_KEY = "inbox";
+export const TURN_HASH_RE = /^[0-9a-f]{64}$/;
+/** Sources that keep a human entry attended: absent, typed, queued (queued attended is a recorded departure). */
+export const ATTENDED_SOURCES = [undefined, "typed", "queued"];
+/** A stated producer token: lowercase, digits and hyphens, at most 32 characters (amendment 56). */
+export const TURN_PRODUCER_RE = /^[a-z][a-z0-9-]{0,31}$/;
+/**
+ * Amendment 56 (approved by Wassim 2026-10-29: task-notification = attended continuation): the one
+ * task producer whose notification continues the human's own work. Claude Code records a finished
+ * background command or agent of this session as origin.kind task-notification, producer
+ * session-task, promptSource system.
+ */
+export const ATTENDED_TASK_PRODUCER = "session-task";
+const attendedHuman = (e) => e.origin === "human" && ATTENDED_SOURCES.includes(e.source) && !e.inbox;
+/**
+ * Candidate posture of a chain's opening request: attended when the NEWEST stated entry is
+ * origin=human with source absent, typed or queued, and no inbox key. Amendment 56 adds one
+ * continuation: a newest origin=task entry with source=system, producer session-task and no inbox
+ * key is attended when an earlier stated entry is such a human turn. Anything else (every other
+ * origin, producer or source, a task entry with no human turn before it), an empty entry list, or
+ * `schemaKnown=false` (schema=unknown with a well-formed chain, F07) is unattended.
+ */
+export function candidatePosture(entries, schemaKnown = true) {
+    if (!schemaKnown)
+        return "unattended";
+    const newest = entries[entries.length - 1];
+    if (newest === undefined)
+        return "unattended";
+    if (attendedHuman(newest))
+        return "attended";
+    const continuation = newest.origin === "task" &&
+        newest.source === "system" &&
+        newest.producer === ATTENDED_TASK_PRODUCER &&
+        !newest.inbox &&
+        entries.slice(0, -1).some(attendedHuman);
+    return continuation ? "attended" : "unattended";
+}
+/** chain = sha256 hex of the root promptId (UTF-8). */
+export async function chainIdOf(rootPromptId) {
+    if (typeof rootPromptId !== "string" || rootPromptId.length === 0)
+        throw new RangeError("root promptId is required");
+    return sha256Hex(rootPromptId);
+}
+/** Request classes (day-1 spike vocabulary) and whether each waits for its transcript entry. */
+export const REQUEST_CLASSES = [
+    "main_synced",
+    "main_no_prompt_id",
+    "compaction",
+    "auxiliary",
+    "count_tokens_pre_first_prompt",
+];
+/** What the C3 proxy does per request class (amendment 38). */
+export function chainHandling(c) {
+    switch (c) {
+        case "main_synced":
+            return { wait: true, chain: "own_root", dropOnTimeout: true };
+        case "main_no_prompt_id":
+        case "compaction":
+        case "auxiliary":
+            return { wait: false, chain: "current_root", dropOnTimeout: false };
+        // No chain: admission skips the posture step for it (admission.ts isUnchainedCountTokens, ruling 22).
+        case "count_tokens_pre_first_prompt":
+            return { wait: false, chain: "none", dropOnTimeout: false };
+    }
+}

package/dist/vendor/shared/durable-contract/vectors.d.ts

@@ -0,0 +1,191 @@
+/**
+ * Golden vectors for the recipes S1 freezes, computed independently with node:crypto (a separate
+ * canonical-JSON and AES-256-GCM implementation, scratchpad s1gen/gen.cjs) and pinned here. The
+ * tests recompute each with this package's code; a mismatch is a contract break.
+ */
+export declare const CONTRACT_VECTOR: {
+    readonly dek_b64url: "AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8";
+    readonly iv_b64url: "oKGio6Slpqeoqaqr";
+    readonly session_id: "11111111-2222-4333-8444-555555555555";
+    readonly contract: {
+        readonly statement: "Ship the M1 durable contract and keep every flag inert when off.";
+        readonly requirements: readonly ["tests pass", "no prod change"];
+        readonly allowed_paths: readonly ["shared/durable-contract/**"];
+        readonly forbidden_paths: readonly [".github/**"];
+    };
+    readonly plaintext: "{\"allowed_paths\":[\"shared/durable-contract/**\"],\"forbidden_paths\":[\".github/**\"],\"requirements\":[\"tests pass\",\"no prod change\"],\"statement\":\"Ship the M1 durable contract and keep every flag inert when off.\"}";
+    readonly statement_hash: "51d9393d4b1b22b84e4fe45acb3e4f3c561e75d03701771aa40c805a5146f939";
+    readonly requirements_hash: "566af8b913e8827626360e11b53b0356f9784508e3e51e36c9d6d4ce5b64bb31";
+    readonly envelopes: readonly [{
+        readonly charter_version: 1;
+        readonly envelope: "v1.oKGio6Slpqeoqaqr.nTodQSmkddoGOveycxKz_Er3e2P61jAJ-CFC8w3KF223WySQwVYhXDzoK-IjWN7VZX0pOgC5fhokMFQuxQTtw5aG3k0ewo2UnJedN6Xk7ufhKdnBtLTwCIsYW_TF6W-u1KZfznDa_LvuunUjp6TPRktwEdyxUbtfR66ww9F3r2HnYsQepyftclkt3LEwGfm_-PnZA9vwt73dqciHzqVYTuZ7cN_CGCF19ipKTAvy3YQSVt39dAPcR6LkGlg7onY5UUQ46Re53oPTMiapZwZPU3bq5U_b2kWGfRebX73T3g";
+    }, {
+        readonly charter_version: 2;
+        readonly envelope: "v1.oKGio6Slpqeoqaqr.nTodQSmkddoGOveycxKz_Er3e2P61jAJ-CFC8w3KF223WySQwVYhXDzoK-IjWN7VZX0pOgC5fhokMFQuxQTtw5aG3k0ewo2UnJedN6Xk7ufhKdnBtLTwCIsYW_TF6W-u1KZfznDa_LvuunUjp6TPRktwEdyxUbtfR66ww9F3r2HnYsQepyftclkt3LEwGfm_-PnZA9vwt73dqciHzqVYTuZ7cN_CGCF19ipKTAvy3YQSVt39dAPcR6LkGlg7onY5UUQ46Re53oPTMiapZwZPLBiJm0K86YthUHE-qc35MQ";
+    }];
+};
+/** One journal row per writer class, each hashed as a genesis row (prev_hash = 64 zeros). */
+export declare const EVENT_PREIMAGE_VECTORS: readonly [{
+    readonly writer: "executor";
+    readonly refs: {
+        readonly spawn_id: "aaaaaaaa-bbbb-4ccc-8ddd-eeeeeeeeeeee";
+    };
+    readonly detail: "executor.spawned spawn_id=aaaaaaaa-bbbb-4ccc-8ddd-eeeeeeeeeeee";
+    readonly preimage: "{\"detail_sha256\":\"9869cd123386f64b766dbff0fcf4a6f7d35f4bf9f6eec5594055e77c5fe0d4b0\",\"epoch\":2,\"idempotency_key\":\"spawn:11111111-2222-4333-8444-555555555555:2:aaaaaaaa-bbbb-4ccc-8ddd-eeeeeeeeeeee\",\"kind\":\"executor.spawned\",\"prev_hash\":\"0000000000000000000000000000000000000000000000000000000000000000\",\"principal_ref\":null,\"refs_sha256\":\"80280db047606c26674cc10fa3e08ac9dabbde08c3958116f31f0211f15b31c9\",\"seq\":3,\"session_id\":\"11111111-2222-4333-8444-555555555555\",\"ts\":\"2026-10-16T12:00:00.123000Z\",\"v\":1}";
+    readonly hash: "a54e7c93b2bc865905a57755b02b0af397b6b281caab922c411de689a2e2273d";
+}, {
+    readonly writer: "gateway";
+    readonly refs: {
+        readonly admitted_epoch: 2;
+        readonly current_epoch: 3;
+    };
+    readonly detail: "lease.zombie_call admitted_epoch=2 current_epoch=3";
+    readonly preimage: "{\"detail_sha256\":\"9ee4f5d787302fe3464b96cc8d38cfffe049c503fea6292db98e68135ceafd9b\",\"epoch\":3,\"idempotency_key\":\"zombie:req-0001\",\"kind\":\"lease.zombie_call\",\"prev_hash\":\"0000000000000000000000000000000000000000000000000000000000000000\",\"principal_ref\":null,\"refs_sha256\":\"351c59d5e2d263f0e3edc09e0ad8bf205b4fb0ba12898c5b5e666e7edf821eb4\",\"seq\":4,\"session_id\":\"11111111-2222-4333-8444-555555555555\",\"ts\":\"2026-10-16T12:00:01.000000Z\",\"v\":1}";
+    readonly hash: "db229bf5c9d46295dd6e3b282750ddfd291ea164c2b8fced450790fc141d9c39";
+}, {
+    readonly writer: "api";
+    readonly refs: {
+        readonly durable_mode: "locked";
+    };
+    readonly detail: "session.registered durable_mode=locked";
+    readonly preimage: "{\"detail_sha256\":\"eab692f69df0b5aa9984cd233af2135fa08329f21236f6a095d9a289002a28b0\",\"epoch\":0,\"idempotency_key\":\"tr:11111111-2222-4333-8444-555555555555:session.registered:0\",\"kind\":\"session.registered\",\"prev_hash\":\"0000000000000000000000000000000000000000000000000000000000000000\",\"principal_ref\":\"9999999999999999999999999999999999999999999999999999999999999999\",\"refs_sha256\":\"b62d326eeec5672858e7bd2cfa73a0520968329af7e405a0d8cf86cd6cecd891\",\"seq\":1,\"session_id\":\"11111111-2222-4333-8444-555555555555\",\"ts\":\"2026-10-16T11:59:00.000000Z\",\"v\":1}";
+    readonly hash: "13acfe4d0979d989464c0a71fbae440afb4d6056eaf770db2b27d39e1793d6d3";
+}];
+export declare const PRINCIPAL_REF_VECTOR: {
+    readonly salt_utf8: "salt-0123456789abcdef";
+    readonly principal_uid: "user-uid-1";
+    readonly principal_ref: "beb9218556929a56f74799caabfb6679f829cbc1521d139fdb710a66ab2e29b6";
+};
+export declare const SPEC_HASH_VECTOR: {
+    readonly spec: {
+        readonly v: 1;
+        readonly cwd: "/Users/dev/repo";
+        readonly plugin: "bundled-mnemom";
+        readonly trim_mcp: false;
+        readonly model: "opus";
+        readonly effort: "high";
+    };
+    readonly hash: "ccd6829afca0f806e52f010b15a0ae407f58df6465a6edd11c58a6a543e369d8";
+};
+export declare const PLUGIN_DIR_HASH_VECTOR: {
+    readonly files: readonly [{
+        readonly path: "hooks/x.sh";
+        readonly sha256: "ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff";
+    }, {
+        readonly path: "a.json";
+        readonly sha256: "0000000000000000000000000000000000000000000000000000000000000000";
+    }];
+    readonly hash: "c9df73b3ae9cd900bb324ee0c5bb3f142a58cf5fac29673a038e95098edab5cd";
+};
+export declare const CHAIN_ID_VECTOR: {
+    readonly root_prompt_id: "root-prompt-0001";
+    readonly chain_id: "66e05a0707771bf96685f5963062f0c6413ec65c3cc159038aba55b081545100";
+};
+/**
+ * Charter hash chain (C07-R04): a v1 genesis row and a v2 row chained to it, computed with an
+ * independent Python canonical-JSON + hashlib generator (scratchpad s1gen/charter_gen.py). created_at
+ * is given in the row's text form; the preimage carries its canonical form.
+ */
+export declare const CHARTER_HASH_VECTORS: {
+    readonly session_id: "11111111-2222-4333-8444-555555555555";
+    readonly rows: readonly [{
+        readonly version: 1;
+        readonly prev_hash: "0000000000000000000000000000000000000000000000000000000000000000";
+        readonly charter: {
+            readonly statement_hash: "51d9393d4b1b22b84e4fe45acb3e4f3c561e75d03701771aa40c805a5146f939";
+            readonly requirements_hash: "566af8b913e8827626360e11b53b0356f9784508e3e51e36c9d6d4ce5b64bb31";
+            readonly budget_usd: 5;
+            readonly max_turns: 40;
+            readonly pins: {
+                readonly card_content_hash: "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc";
+                readonly policy_engine_major: 3;
+            };
+            readonly tool_classes: {
+                readonly Bash: "input_dependent";
+            };
+            readonly launch_spec: {
+                readonly v: 1;
+                readonly cwd: "/Users/dev/repo";
+                readonly plugin: "bundled-mnemom";
+                readonly trim_mcp: false;
+                readonly model: "opus";
+                readonly effort: "high";
+            };
+        };
+        readonly created_at: "2026-10-16 12:00:00.123+00";
+        readonly preimage: "{\"charter\":{\"budget_usd\":5,\"launch_spec\":{\"cwd\":\"/Users/dev/repo\",\"effort\":\"high\",\"model\":\"opus\",\"plugin\":\"bundled-mnemom\",\"trim_mcp\":false,\"v\":1},\"max_turns\":40,\"pins\":{\"card_content_hash\":\"cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc\",\"policy_engine_major\":3},\"requirements_hash\":\"566af8b913e8827626360e11b53b0356f9784508e3e51e36c9d6d4ce5b64bb31\",\"statement_hash\":\"51d9393d4b1b22b84e4fe45acb3e4f3c561e75d03701771aa40c805a5146f939\",\"tool_classes\":{\"Bash\":\"input_dependent\"}},\"created_at\":\"2026-10-16T12:00:00.123000Z\",\"prev_hash\":\"0000000000000000000000000000000000000000000000000000000000000000\",\"session_id\":\"11111111-2222-4333-8444-555555555555\",\"v\":1,\"version\":1}";
+        readonly hash: "1db9e38158199cec38e592881b9568aa79005c230c28f4fee3cc139ddf676eaf";
+    }, {
+        readonly version: 2;
+        readonly prev_hash: "1db9e38158199cec38e592881b9568aa79005c230c28f4fee3cc139ddf676eaf";
+        readonly charter: {
+            readonly statement_hash: "51d9393d4b1b22b84e4fe45acb3e4f3c561e75d03701771aa40c805a5146f939";
+            readonly requirements_hash: "566af8b913e8827626360e11b53b0356f9784508e3e51e36c9d6d4ce5b64bb31";
+            readonly budget_usd: 4;
+            readonly max_turns: 40;
+            readonly pins: {
+                readonly card_content_hash: "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc";
+                readonly policy_engine_major: 3;
+            };
+            readonly tool_classes: {
+                readonly Bash: "input_dependent";
+            };
+            readonly launch_spec: {
+                readonly v: 1;
+                readonly cwd: "/Users/dev/repo";
+                readonly plugin: "bundled-mnemom";
+                readonly trim_mcp: false;
+                readonly model: "opus";
+                readonly effort: "high";
+            };
+        };
+        readonly created_at: "2026-10-16T12:05:00Z";
+        readonly preimage: "{\"charter\":{\"budget_usd\":4,\"launch_spec\":{\"cwd\":\"/Users/dev/repo\",\"effort\":\"high\",\"model\":\"opus\",\"plugin\":\"bundled-mnemom\",\"trim_mcp\":false,\"v\":1},\"max_turns\":40,\"pins\":{\"card_content_hash\":\"cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc\",\"policy_engine_major\":3},\"requirements_hash\":\"566af8b913e8827626360e11b53b0356f9784508e3e51e36c9d6d4ce5b64bb31\",\"statement_hash\":\"51d9393d4b1b22b84e4fe45acb3e4f3c561e75d03701771aa40c805a5146f939\",\"tool_classes\":{\"Bash\":\"input_dependent\"}},\"created_at\":\"2026-10-16T12:05:00.000000Z\",\"prev_hash\":\"1db9e38158199cec38e592881b9568aa79005c230c28f4fee3cc139ddf676eaf\",\"session_id\":\"11111111-2222-4333-8444-555555555555\",\"v\":1,\"version\":2}";
+        readonly hash: "70306a09f19c8df756547dae953756c3151536d30e0d7d46cbc8c4db0252b4c1";
+    }];
+};
+/**
+ * Amendment 55 seal round trip (C07-R02, R13, R14). `seal` is the contract C07-HDR-01 sealed through a
+ * live gateway, which answered x-mnemom-contract-hash `gateway_enforce_h16` (mode enforce) and, for the
+ * same contract rehydrated as nudge, `gateway_nudge_h16`. The full hashes, the commitments and the v1
+ * charter row are from an independent Python canonical-JSON + hashlib generator (scratchpad
+ * s1gen/seal_gen.py). `sealed_at` is the seal instant in an offset form; charter_v1.created_at is it in UTC.
+ */
+export declare const SEAL_VECTORS: {
+    readonly seal: {
+        readonly statement: "Ship the release. canary zq-k1-102d461d964a345ca757";
+        readonly requirements: readonly ["Tests stay green. canary zq-k2-54e87989d0dd1c2f7a00"];
+        readonly budget_usd: 5;
+        readonly max_turns: 40;
+        readonly time_limit_s: 3600;
+        readonly mode: "enforce";
+        readonly allowed_paths: readonly ["src/**"];
+        readonly forbidden_paths: readonly ["secrets/**"];
+    };
+    readonly enforce_hash: "85fc982c26cf4a28ac1e7e3ba0f746a83bd96bc3ce7a3ed84401f79aa684d13a";
+    readonly gateway_enforce_h16: "85fc982c26cf4a28";
+    readonly nudge_hash: "d0344555137faf1ce06f81bb905ec9dfb15dd385de57b6a959e381bf1f3fe654";
+    readonly gateway_nudge_h16: "d0344555137faf1c";
+    readonly sealed_at: "2026-10-29T12:45:33.355-07:00";
+    readonly charter_v1: {
+        readonly commitments: {
+            readonly statement_hash: "04ed1e6039e500e2a1d09fd4238a77863cdfc699e504cea01a4c63263ffdf538";
+            readonly requirements_hash: "d594733b87aa9594eb4d084a49e8450aa8ac9e32ffb9c985d7a2f24fa6513fcd";
+            readonly contract_hash: "85fc982c26cf4a28ac1e7e3ba0f746a83bd96bc3ce7a3ed84401f79aa684d13a";
+            readonly mode: "enforce";
+            readonly budget_usd: 5;
+            readonly max_turns: 40;
+            readonly active_time_limit_s: 3600;
+            readonly pins: {
+                readonly card_content_hash: "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc";
+                readonly policy_engine_major: 3;
+            };
+            readonly tool_classes: {
+                readonly Bash: "input_dependent";
+            };
+        };
+        readonly created_at: "2026-10-29T19:45:33.355000Z";
+        readonly preimage: "{\"charter\":{\"active_time_limit_s\":3600,\"budget_usd\":5,\"contract_hash\":\"85fc982c26cf4a28ac1e7e3ba0f746a83bd96bc3ce7a3ed84401f79aa684d13a\",\"max_turns\":40,\"mode\":\"enforce\",\"pins\":{\"card_content_hash\":\"cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc\",\"policy_engine_major\":3},\"requirements_hash\":\"d594733b87aa9594eb4d084a49e8450aa8ac9e32ffb9c985d7a2f24fa6513fcd\",\"statement_hash\":\"04ed1e6039e500e2a1d09fd4238a77863cdfc699e504cea01a4c63263ffdf538\",\"tool_classes\":{\"Bash\":\"input_dependent\"}},\"created_at\":\"2026-10-29T19:45:33.355000Z\",\"prev_hash\":\"0000000000000000000000000000000000000000000000000000000000000000\",\"session_id\":\"11111111-2222-4333-8444-555555555555\",\"v\":1,\"version\":1}";
+        readonly hash: "5a3bb041c155d67e50d18ee9afb0e6903f7a64988c881ab6373d3447fd5906f5";
+    };
+};