@neurcode-ai/cli 0.9.64 → 0.9.65

package/dist/utils/brain-cache.d.ts

@@ -0,0 +1,100 @@
+/**
+ * Persistent deterministic brain cache infrastructure.
+ *
+ * Design principles:
+ *   - Content-hash invalidation: files are only re-indexed when content changes
+ *   - Replay-safe: cache manifest is deterministic and serializable
+ *   - CI-restorable: manifest + index can be archived and restored across runs
+ *   - Governance-neutral: cache accelerates indexing, never affects correctness
+ *   - Append-only manifest entries (no silent deletion of records)
+ *
+ * Cache location: <projectRoot>/.neurcode/brain/cache/
+ * Manifest:       <projectRoot>/.neurcode/brain/cache/manifest.json
+ * Semantic index: <projectRoot>/.neurcode/brain/cache/semantic-index.json
+ */
+export declare const BRAIN_CACHE_SCHEMA_VERSION: "2026-05-11.1";
+export interface BrainCacheFileEntry {
+    /** Repo-relative file path. */
+    filePath: string;
+    /** SHA-256 content hash (hex). */
+    contentHash: string;
+    /** Last-modified timestamp (Unix ms). */
+    lastModifiedMs: number;
+    /** File size in bytes. */
+    sizeBytes: number;
+    /** True when this file was included in the semantic index. */
+    indexed: boolean;
+}
+export interface BrainCacheManifest {
+    schemaVersion: typeof BRAIN_CACHE_SCHEMA_VERSION;
+    /** Repository root path at build time. */
+    repoRoot: string;
+    /** ISO 8601 build timestamp. */
+    builtAt: string;
+    /** SHA-256 of the manifest itself (for integrity checks). Populated after write. */
+    manifestHash: string;
+    /** Total files tracked. */
+    totalFiles: number;
+    /** Total files indexed in semantic index. */
+    indexedFiles: number;
+    /** Combined content hash of all tracked files (for CI cache key generation). */
+    contentFingerprint: string;
+    /** Per-file entries. */
+    files: BrainCacheFileEntry[];
+}
+export interface BrainCacheStatus {
+    exists: boolean;
+    manifest: BrainCacheManifest | null;
+    staleFiles: string[];
+    missingFiles: string[];
+    newFiles: string[];
+    totalFiles: number;
+    freshFiles: number;
+    stalePercent: number;
+    needsRebuild: boolean;
+    cacheDir: string;
+    manifestPath: string;
+    semanticIndexPath: string;
+    sizeBytes: number;
+}
+export declare function getBrainCacheDir(projectRoot: string): string;
+export declare function getBrainCacheManifestPath(projectRoot: string): string;
+export declare function getBrainCacheSemanticIndexPath(projectRoot: string): string;
+export declare function hashFileContent(content: string): string;
+export declare function loadBrainCacheManifest(projectRoot: string): BrainCacheManifest | null;
+export declare function saveBrainCacheManifest(projectRoot: string, manifest: Omit<BrainCacheManifest, 'manifestHash'>): BrainCacheManifest;
+export interface BrainCacheBuildOptions {
+    projectRoot: string;
+    maxFiles?: number;
+    /** If true, force full rebuild ignoring existing manifest. */
+    force?: boolean;
+    onProgress?: (indexed: number, total: number) => void;
+}
+export interface BrainCacheBuildResult {
+    manifest: BrainCacheManifest;
+    builtFiles: number;
+    skippedFiles: number;
+    /** Files re-indexed because content changed. */
+    updatedFiles: number;
+    elapsedMs: number;
+}
+export declare function buildBrainCache(options: BrainCacheBuildOptions): BrainCacheBuildResult;
+export declare function getBrainCacheStatus(projectRoot: string): BrainCacheStatus;
+export interface BrainCacheRestoreOptions {
+    projectRoot: string;
+    /** Path to the CI cache artifact (JSON). */
+    artifactPath: string;
+}
+export interface BrainCacheRestoreResult {
+    success: boolean;
+    manifest: BrainCacheManifest | null;
+    message: string;
+    staleAfterRestore: number;
+}
+export declare function restoreBrainCache(options: BrainCacheRestoreOptions): BrainCacheRestoreResult;
+/**
+ * Export the current cache manifest as a CI artifact.
+ * CI pipelines can cache this file and restore it on subsequent runs.
+ */
+export declare function exportBrainCacheArtifact(projectRoot: string, outputPath: string): boolean;
+//# sourceMappingURL=brain-cache.d.ts.map

package/dist/utils/brain-cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"brain-cache.d.ts","sourceRoot":"","sources":["../../src/utils/brain-cache.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAeH,eAAO,MAAM,0BAA0B,EAAG,cAAuB,CAAC;AAIlE,MAAM,WAAW,mBAAmB;IAClC,+BAA+B;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,kCAAkC;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,yCAAyC;IACzC,cAAc,EAAE,MAAM,CAAC;IACvB,0BAA0B;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,8DAA8D;IAC9D,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,OAAO,0BAA0B,CAAC;IACjD,0CAA0C;IAC1C,QAAQ,EAAE,MAAM,CAAC;IACjB,gCAAgC;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,oFAAoF;IACpF,YAAY,EAAE,MAAM,CAAC;IACrB,2BAA2B;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,6CAA6C;IAC7C,YAAY,EAAE,MAAM,CAAC;IACrB,gFAAgF;IAChF,kBAAkB,EAAE,MAAM,CAAC;IAC3B,wBAAwB;IACxB,KAAK,EAAE,mBAAmB,EAAE,CAAC;CAC9B;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACpC,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,OAAO,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;CACnB;AAID,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED,wBAAgB,yBAAyB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAErE;AAED,wBAAgB,8BAA8B,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAE1E;AAID,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEvD;AAqBD,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,kBAAkB,GAAG,IAAI,CAarF;AAED,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,kBAAkB,EAAE,cAAc,CAAC,GAAG,kBAAkB,CAWlI;AAoDD,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8DAA8D;IAC9D,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;CACvD;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,gDAAgD;IAChD,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,sBAAsB,GAAG,qBAAqB,CAuEtF;AAID,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,gBAAgB,CA8EzE;AAID,MAAM,WAAW,wBAAwB;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,4CAA4C;IAC5C,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,uBAAuB,CAqD5F;AAID;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CASzF"}

package/dist/utils/brain-cache.js

@@ -0,0 +1,346 @@
+"use strict";
+/**
+ * Persistent deterministic brain cache infrastructure.
+ *
+ * Design principles:
+ *   - Content-hash invalidation: files are only re-indexed when content changes
+ *   - Replay-safe: cache manifest is deterministic and serializable
+ *   - CI-restorable: manifest + index can be archived and restored across runs
+ *   - Governance-neutral: cache accelerates indexing, never affects correctness
+ *   - Append-only manifest entries (no silent deletion of records)
+ *
+ * Cache location: <projectRoot>/.neurcode/brain/cache/
+ * Manifest:       <projectRoot>/.neurcode/brain/cache/manifest.json
+ * Semantic index: <projectRoot>/.neurcode/brain/cache/semantic-index.json
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BRAIN_CACHE_SCHEMA_VERSION = void 0;
+exports.getBrainCacheDir = getBrainCacheDir;
+exports.getBrainCacheManifestPath = getBrainCacheManifestPath;
+exports.getBrainCacheSemanticIndexPath = getBrainCacheSemanticIndexPath;
+exports.hashFileContent = hashFileContent;
+exports.loadBrainCacheManifest = loadBrainCacheManifest;
+exports.saveBrainCacheManifest = saveBrainCacheManifest;
+exports.buildBrainCache = buildBrainCache;
+exports.getBrainCacheStatus = getBrainCacheStatus;
+exports.restoreBrainCache = restoreBrainCache;
+exports.exportBrainCacheArtifact = exportBrainCacheArtifact;
+const crypto_1 = require("crypto");
+const fs_1 = require("fs");
+const path_1 = require("path");
+// ── Schema version ─────────────────────────────────────────────────────────────
+exports.BRAIN_CACHE_SCHEMA_VERSION = '2026-05-11.1';
+// ── Cache paths ────────────────────────────────────────────────────────────────
+function getBrainCacheDir(projectRoot) {
+    return (0, path_1.join)(projectRoot, '.neurcode', 'brain', 'cache');
+}
+function getBrainCacheManifestPath(projectRoot) {
+    return (0, path_1.join)(getBrainCacheDir(projectRoot), 'manifest.json');
+}
+function getBrainCacheSemanticIndexPath(projectRoot) {
+    return (0, path_1.join)(getBrainCacheDir(projectRoot), 'semantic-index.json');
+}
+// ── Content hashing ────────────────────────────────────────────────────────────
+function hashFileContent(content) {
+    return (0, crypto_1.createHash)('sha256').update(content, 'utf-8').digest('hex');
+}
+function hashFileAtPath(filePath) {
+    try {
+        const content = (0, fs_1.readFileSync)(filePath, 'utf-8');
+        return hashFileContent(content);
+    }
+    catch {
+        return '';
+    }
+}
+function contentFingerprint(files) {
+    const sorted = [...files]
+        .sort((a, b) => a.filePath.localeCompare(b.filePath))
+        .map((f) => `${f.filePath}:${f.contentHash}`)
+        .join('\n');
+    return (0, crypto_1.createHash)('sha256').update(sorted, 'utf-8').digest('hex').slice(0, 32);
+}
+// ── Manifest I/O ───────────────────────────────────────────────────────────────
+function loadBrainCacheManifest(projectRoot) {
+    const path = getBrainCacheManifestPath(projectRoot);
+    if (!(0, fs_1.existsSync)(path))
+        return null;
+    try {
+        const raw = (0, fs_1.readFileSync)(path, 'utf-8');
+        const parsed = JSON.parse(raw);
+        if (parsed.schemaVersion !== exports.BRAIN_CACHE_SCHEMA_VERSION) {
+            return null; // incompatible schema, treat as cache miss
+        }
+        return parsed;
+    }
+    catch {
+        return null;
+    }
+}
+function saveBrainCacheManifest(projectRoot, manifest) {
+    const cacheDir = getBrainCacheDir(projectRoot);
+    (0, fs_1.mkdirSync)(cacheDir, { recursive: true });
+    const withoutHash = { ...manifest, manifestHash: '' };
+    const serialized = JSON.stringify(withoutHash, null, 2);
+    const hash = (0, crypto_1.createHash)('sha256').update(serialized, 'utf-8').digest('hex');
+    const final = { ...withoutHash, manifestHash: hash };
+    (0, fs_1.writeFileSync)(getBrainCacheManifestPath(projectRoot), JSON.stringify(final, null, 2), 'utf-8');
+    return final;
+}
+// ── Scan project files for indexable content ───────────────────────────────────
+const INDEXABLE_EXTENSIONS = new Set([
+    '.ts', '.tsx', '.js', '.jsx', '.mts', '.mjs',
+    '.py', '.go', '.rs', '.java', '.rb', '.swift',
+]);
+const EXCLUDED_DIRS = new Set([
+    'node_modules', '.git', '.next', 'dist', 'build', 'out',
+    '.neurcode', '__pycache__', '.venv', 'venv', '.cache',
+]);
+function scanIndexableFiles(projectRoot, maxFiles = 5000) {
+    const results = [];
+    function traverse(dir, depth = 0) {
+        if (depth > 10)
+            return;
+        let entries = [];
+        try {
+            entries = (0, fs_1.readdirSync)(dir);
+        }
+        catch {
+            return;
+        }
+        for (const entry of entries) {
+            if (EXCLUDED_DIRS.has(entry))
+                continue;
+            const fullPath = (0, path_1.join)(dir, entry);
+            let stat;
+            try {
+                stat = (0, fs_1.statSync)(fullPath);
+            }
+            catch {
+                continue;
+            }
+            if (stat.isDirectory()) {
+                traverse(fullPath, depth + 1);
+            }
+            else if (stat.isFile()) {
+                const dotIdx = entry.lastIndexOf('.');
+                if (dotIdx > 0 && INDEXABLE_EXTENSIONS.has(entry.slice(dotIdx))) {
+                    results.push(fullPath);
+                    if (results.length >= maxFiles)
+                        return;
+                }
+            }
+        }
+    }
+    traverse(projectRoot);
+    return results;
+}
+function buildBrainCache(options) {
+    const { projectRoot, maxFiles = 5000, force = false } = options;
+    const start = Date.now();
+    const existing = force ? null : loadBrainCacheManifest(projectRoot);
+    const existingMap = new Map((existing?.files ?? []).map((f) => [f.filePath, f]));
+    const allFiles = scanIndexableFiles(projectRoot, maxFiles);
+    const entries = [];
+    let builtFiles = 0;
+    let skippedFiles = 0;
+    let updatedFiles = 0;
+    for (let i = 0; i < allFiles.length; i++) {
+        const fullPath = allFiles[i];
+        const relPath = (0, path_1.relative)(projectRoot, fullPath).split(path_1.sep).join('/');
+        let stat;
+        try {
+            stat = (0, fs_1.statSync)(fullPath);
+        }
+        catch {
+            continue;
+        }
+        const existing = existingMap.get(relPath);
+        const lastModifiedMs = stat.mtimeMs;
+        // Fast path: mtime unchanged → skip rehash
+        if (existing && Math.abs(existing.lastModifiedMs - lastModifiedMs) < 1000) {
+            entries.push(existing);
+            skippedFiles++;
+        }
+        else {
+            const contentHash = hashFileAtPath(fullPath);
+            if (!contentHash)
+                continue;
+            const isUpdated = existing !== undefined && existing.contentHash !== contentHash;
+            if (isUpdated)
+                updatedFiles++;
+            entries.push({
+                filePath: relPath,
+                contentHash,
+                lastModifiedMs,
+                sizeBytes: stat.size,
+                indexed: true,
+            });
+            builtFiles++;
+        }
+        if (options.onProgress && (i % 100 === 0 || i === allFiles.length - 1)) {
+            options.onProgress(i + 1, allFiles.length);
+        }
+    }
+    const manifest = saveBrainCacheManifest(projectRoot, {
+        schemaVersion: exports.BRAIN_CACHE_SCHEMA_VERSION,
+        repoRoot: projectRoot,
+        builtAt: new Date().toISOString(),
+        totalFiles: entries.length,
+        indexedFiles: entries.filter((e) => e.indexed).length,
+        contentFingerprint: contentFingerprint(entries),
+        files: entries,
+    });
+    return {
+        manifest,
+        builtFiles,
+        skippedFiles,
+        updatedFiles,
+        elapsedMs: Date.now() - start,
+    };
+}
+// ── Cache status ───────────────────────────────────────────────────────────────
+function getBrainCacheStatus(projectRoot) {
+    const cacheDir = getBrainCacheDir(projectRoot);
+    const manifestPath = getBrainCacheManifestPath(projectRoot);
+    const semanticIndexPath = getBrainCacheSemanticIndexPath(projectRoot);
+    const manifest = loadBrainCacheManifest(projectRoot);
+    if (!manifest) {
+        return {
+            exists: false,
+            manifest: null,
+            staleFiles: [],
+            missingFiles: [],
+            newFiles: [],
+            totalFiles: 0,
+            freshFiles: 0,
+            stalePercent: 0,
+            needsRebuild: true,
+            cacheDir,
+            manifestPath,
+            semanticIndexPath,
+            sizeBytes: 0,
+        };
+    }
+    // Check staleness: compare manifest hashes against current files
+    const staleFiles = [];
+    const missingFiles = [];
+    for (const entry of manifest.files) {
+        const fullPath = (0, path_1.join)(projectRoot, entry.filePath);
+        if (!(0, fs_1.existsSync)(fullPath)) {
+            missingFiles.push(entry.filePath);
+            continue;
+        }
+        const currentHash = hashFileAtPath(fullPath);
+        if (currentHash !== entry.contentHash) {
+            staleFiles.push(entry.filePath);
+        }
+    }
+    // Detect new files not in manifest
+    const manifestFileSet = new Set(manifest.files.map((f) => f.filePath));
+    const currentFiles = scanIndexableFiles(projectRoot, 10_000);
+    const newFiles = [];
+    for (const f of currentFiles) {
+        const rel = (0, path_1.relative)(projectRoot, f).split(path_1.sep).join('/');
+        if (!manifestFileSet.has(rel))
+            newFiles.push(rel);
+    }
+    const totalFiles = manifest.totalFiles;
+    const changedFiles = staleFiles.length + missingFiles.length;
+    const freshFiles = totalFiles - changedFiles;
+    const stalePercent = totalFiles > 0 ? Math.round((changedFiles / totalFiles) * 100) : 0;
+    const needsRebuild = stalePercent > 20 || newFiles.length > 50;
+    let sizeBytes = 0;
+    for (const path of [manifestPath, semanticIndexPath]) {
+        try {
+            sizeBytes += (0, fs_1.statSync)(path).size;
+        }
+        catch { /* ignore */ }
+    }
+    return {
+        exists: true,
+        manifest,
+        staleFiles,
+        missingFiles,
+        newFiles,
+        totalFiles,
+        freshFiles,
+        stalePercent,
+        needsRebuild,
+        cacheDir,
+        manifestPath,
+        semanticIndexPath,
+        sizeBytes,
+    };
+}
+function restoreBrainCache(options) {
+    const { projectRoot, artifactPath } = options;
+    if (!(0, fs_1.existsSync)(artifactPath)) {
+        return {
+            success: false,
+            manifest: null,
+            message: `Artifact not found: ${artifactPath}`,
+            staleAfterRestore: 0,
+        };
+    }
+    let artifact;
+    try {
+        artifact = JSON.parse((0, fs_1.readFileSync)(artifactPath, 'utf-8'));
+    }
+    catch (err) {
+        return {
+            success: false,
+            manifest: null,
+            message: `Failed to parse artifact: ${err instanceof Error ? err.message : String(err)}`,
+            staleAfterRestore: 0,
+        };
+    }
+    if (artifact.schemaVersion !== exports.BRAIN_CACHE_SCHEMA_VERSION) {
+        return {
+            success: false,
+            manifest: null,
+            message: `Incompatible cache schema: ${artifact.schemaVersion} (expected ${exports.BRAIN_CACHE_SCHEMA_VERSION})`,
+            staleAfterRestore: 0,
+        };
+    }
+    // Write artifact to cache dir
+    const cacheDir = getBrainCacheDir(projectRoot);
+    (0, fs_1.mkdirSync)(cacheDir, { recursive: true });
+    (0, fs_1.writeFileSync)(getBrainCacheManifestPath(projectRoot), JSON.stringify(artifact, null, 2), 'utf-8');
+    // Quick staleness check on restore
+    let staleAfterRestore = 0;
+    for (const entry of artifact.files.slice(0, 200)) { // sample first 200
+        const fullPath = (0, path_1.join)(projectRoot, entry.filePath);
+        if (!(0, fs_1.existsSync)(fullPath)) {
+            staleAfterRestore++;
+            continue;
+        }
+        const hash = hashFileAtPath(fullPath);
+        if (hash !== entry.contentHash)
+            staleAfterRestore++;
+    }
+    return {
+        success: true,
+        manifest: artifact,
+        message: `Cache restored from ${artifactPath} (${artifact.totalFiles} files, built ${artifact.builtAt})`,
+        staleAfterRestore,
+    };
+}
+// ── CI artifact export ─────────────────────────────────────────────────────────
+/**
+ * Export the current cache manifest as a CI artifact.
+ * CI pipelines can cache this file and restore it on subsequent runs.
+ */
+function exportBrainCacheArtifact(projectRoot, outputPath) {
+    const manifest = loadBrainCacheManifest(projectRoot);
+    if (!manifest)
+        return false;
+    try {
+        (0, fs_1.writeFileSync)(outputPath, JSON.stringify(manifest, null, 2), 'utf-8');
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=brain-cache.js.map

package/dist/utils/brain-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"brain-cache.js","sourceRoot":"","sources":["../../src/utils/brain-cache.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;;AAoEH,4CAEC;AAED,8DAEC;AAED,wEAEC;AAID,0CAEC;AAqBD,wDAaC;AAED,wDAWC;AAqED,0CAuEC;AAID,kDA8EC;AAiBD,8CAqDC;AAQD,4DASC;AAtbD,mCAAoC;AACpC,2BAOY;AACZ,+BAA2C;AAE3C,kFAAkF;AAErE,QAAA,0BAA0B,GAAG,cAAuB,CAAC;AAmDlE,kFAAkF;AAElF,SAAgB,gBAAgB,CAAC,WAAmB;IAClD,OAAO,IAAA,WAAI,EAAC,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAC1D,CAAC;AAED,SAAgB,yBAAyB,CAAC,WAAmB;IAC3D,OAAO,IAAA,WAAI,EAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,eAAe,CAAC,CAAC;AAC9D,CAAC;AAED,SAAgB,8BAA8B,CAAC,WAAmB;IAChE,OAAO,IAAA,WAAI,EAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,qBAAqB,CAAC,CAAC;AACpE,CAAC;AAED,kFAAkF;AAElF,SAAgB,eAAe,CAAC,OAAe;IAC7C,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB;IACtC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAA,iBAAY,EAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAChD,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,KAA4B;IACtD,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC;SACtB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;SACpD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;SAC5C,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACjF,CAAC;AAED,kFAAkF;AAElF,SAAgB,sBAAsB,CAAC,WAAmB;IACxD,MAAM,IAAI,GAAG,yBAAyB,CAAC,WAAW,CAAC,CAAC;IACpD,IAAI,CAAC,IAAA,eAAU,EAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAA,iBAAY,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAuB,CAAC;QACrD,IAAI,MAAM,CAAC,aAAa,KAAK,kCAA0B,EAAE,CAAC;YACxD,OAAO,IAAI,CAAC,CAAC,2CAA2C;QAC1D,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAgB,sBAAsB,CAAC,WAAmB,EAAE,QAAkD;IAC5G,MAAM,QAAQ,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC/C,IAAA,cAAS,EAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEzC,MAAM,WAAW,GAAG,EAAE,GAAG,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IACtD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAE5E,MAAM,KAAK,GAAuB,EAAE,GAAG,WAAW,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IACzE,IAAA,kBAAa,EAAC,yBAAyB,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAC/F,OAAO,KAAK,CAAC;AACf,CAAC;AAED,kFAAkF;AAElF,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IACnC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAC5C,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ;CAC9C,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK;IACvD,WAAW,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ;CACtD,CAAC,CAAC;AAEH,SAAS,kBAAkB,CAAC,WAAmB,EAAE,QAAQ,GAAG,IAAI;IAC9D,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,SAAS,QAAQ,CAAC,GAAW,EAAE,KAAK,GAAG,CAAC;QACtC,IAAI,KAAK,GAAG,EAAE;YAAE,OAAO;QACvB,IAAI,OAAO,GAAa,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,OAAO,GAAG,IAAA,gBAAW,EAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,SAAS;YACvC,MAAM,QAAQ,GAAG,IAAA,WAAI,EAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAClC,IAAI,IAAiC,CAAC;YACtC,IAAI,CAAC;gBACH,IAAI,GAAG,IAAA,aAAQ,EAAC,QAAQ,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBACvB,QAAQ,CAAC,QAAQ,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YAChC,CAAC;iBAAM,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;gBACzB,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;gBACtC,IAAI,MAAM,GAAG,CAAC,IAAI,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;oBAChE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBACvB,IAAI,OAAO,CAAC,MAAM,IAAI,QAAQ;wBAAE,OAAO;gBACzC,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,QAAQ,CAAC,WAAW,CAAC,CAAC;IACtB,OAAO,OAAO,CAAC;AACjB,CAAC;AAqBD,SAAgB,eAAe,CAAC,OAA+B;IAC7D,MAAM,EAAE,WAAW,EAAE,QAAQ,GAAG,IAAI,EAAE,KAAK,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC;IAChE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEzB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC;IACpE,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CACpD,CAAC;IAEF,MAAM,QAAQ,GAAG,kBAAkB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC3D,MAAM,OAAO,GAA0B,EAAE,CAAC;IAC1C,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,IAAA,eAAQ,EAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,UAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrE,IAAI,IAAiC,CAAC;QACtC,IAAI,CAAC;YACH,IAAI,GAAG,IAAA,aAAQ,EAAC,QAAQ,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QAED,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC;QAEpC,2CAA2C;QAC3C,IAAI,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,cAAc,GAAG,cAAc,CAAC,GAAG,IAAI,EAAE,CAAC;YAC1E,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvB,YAAY,EAAE,CAAC;QACjB,CAAC;aAAM,CAAC;YACN,MAAM,WAAW,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;YAC7C,IAAI,CAAC,WAAW;gBAAE,SAAS;YAE3B,MAAM,SAAS,GAAG,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,WAAW,KAAK,WAAW,CAAC;YACjF,IAAI,SAAS;gBAAE,YAAY,EAAE,CAAC;YAE9B,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,OAAO;gBACjB,WAAW;gBACX,cAAc;gBACd,SAAS,EAAE,IAAI,CAAC,IAAI;gBACpB,OAAO,EAAE,IAAI;aACd,CAAC,CAAC;YACH,UAAU,EAAE,CAAC;QACf,CAAC;QAED,IAAI,OAAO,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;YACvE,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,sBAAsB,CAAC,WAAW,EAAE;QACnD,aAAa,EAAE,kCAA0B;QACzC,QAAQ,EAAE,WAAW;QACrB,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACjC,UAAU,EAAE,OAAO,CAAC,MAAM;QAC1B,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM;QACrD,kBAAkB,EAAE,kBAAkB,CAAC,OAAO,CAAC;QAC/C,KAAK,EAAE,OAAO;KACf,CAAC,CAAC;IAEH,OAAO;QACL,QAAQ;QACR,UAAU;QACV,YAAY;QACZ,YAAY;QACZ,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;KAC9B,CAAC;AACJ,CAAC;AAED,kFAAkF;AAElF,SAAgB,mBAAmB,CAAC,WAAmB;IACrD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC/C,MAAM,YAAY,GAAG,yBAAyB,CAAC,WAAW,CAAC,CAAC;IAC5D,MAAM,iBAAiB,GAAG,8BAA8B,CAAC,WAAW,CAAC,CAAC;IAEtE,MAAM,QAAQ,GAAG,sBAAsB,CAAC,WAAW,CAAC,CAAC;IAErD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;YACL,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,IAAI;YACd,UAAU,EAAE,EAAE;YACd,YAAY,EAAE,EAAE;YAChB,QAAQ,EAAE,EAAE;YACZ,UAAU,EAAE,CAAC;YACb,UAAU,EAAE,CAAC;YACb,YAAY,EAAE,CAAC;YACf,YAAY,EAAE,IAAI;YAClB,QAAQ;YACR,YAAY;YACZ,iBAAiB;YACjB,SAAS,EAAE,CAAC;SACb,CAAC;IACJ,CAAC;IAED,iEAAiE;IACjE,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,YAAY,GAAa,EAAE,CAAC;IAElC,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAA,WAAI,EAAC,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,CAAC,IAAA,eAAU,EAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAClC,SAAS;QACX,CAAC;QACD,MAAM,WAAW,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,WAAW,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC;YACtC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,mCAAmC;IACnC,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IACvE,MAAM,YAAY,GAAG,kBAAkB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,IAAA,eAAQ,EAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,UAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1D,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC;IACvC,MAAM,YAAY,GAAG,UAAU,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC;IAC7D,MAAM,UAAU,GAAG,UAAU,GAAG,YAAY,CAAC;IAC7C,MAAM,YAAY,GAAG,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,GAAG,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxF,MAAM,YAAY,GAAG,YAAY,GAAG,EAAE,IAAI,QAAQ,CAAC,MAAM,GAAG,EAAE,CAAC;IAE/D,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,KAAK,MAAM,IAAI,IAAI,CAAC,YAAY,EAAE,iBAAiB,CAAC,EAAE,CAAC;QACrD,IAAI,CAAC;YACH,SAAS,IAAI,IAAA,aAAQ,EAAC,IAAI,CAAC,CAAC,IAAI,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IAC1B,CAAC;IAED,OAAO;QACL,MAAM,EAAE,IAAI;QACZ,QAAQ;QACR,UAAU;QACV,YAAY;QACZ,QAAQ;QACR,UAAU;QACV,UAAU;QACV,YAAY;QACZ,YAAY;QACZ,QAAQ;QACR,YAAY;QACZ,iBAAiB;QACjB,SAAS;KACV,CAAC;AACJ,CAAC;AAiBD,SAAgB,iBAAiB,CAAC,OAAiC;IACjE,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC;IAE9C,IAAI,CAAC,IAAA,eAAU,EAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,OAAO;YACL,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,uBAAuB,YAAY,EAAE;YAC9C,iBAAiB,EAAE,CAAC;SACrB,CAAC;IACJ,CAAC;IAED,IAAI,QAA4B,CAAC;IACjC,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,YAAY,EAAE,OAAO,CAAC,CAAuB,CAAC;IACnF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,6BAA6B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;YACxF,iBAAiB,EAAE,CAAC;SACrB,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,aAAa,KAAK,kCAA0B,EAAE,CAAC;QAC1D,OAAO;YACL,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,8BAA8B,QAAQ,CAAC,aAAa,cAAc,kCAA0B,GAAG;YACxG,iBAAiB,EAAE,CAAC;SACrB,CAAC;IACJ,CAAC;IAED,8BAA8B;IAC9B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC/C,IAAA,cAAS,EAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,IAAA,kBAAa,EAAC,yBAAyB,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAElG,mCAAmC;IACnC,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAC1B,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,mBAAmB;QACrE,MAAM,QAAQ,GAAG,IAAA,WAAI,EAAC,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,CAAC,IAAA,eAAU,EAAC,QAAQ,CAAC,EAAE,CAAC;YAAC,iBAAiB,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,IAAI,KAAK,KAAK,CAAC,WAAW;YAAE,iBAAiB,EAAE,CAAC;IACtD,CAAC;IAED,OAAO;QACL,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,uBAAuB,YAAY,KAAK,QAAQ,CAAC,UAAU,iBAAiB,QAAQ,CAAC,OAAO,GAAG;QACxG,iBAAiB;KAClB,CAAC;AACJ,CAAC;AAED,kFAAkF;AAElF;;;GAGG;AACH,SAAgB,wBAAwB,CAAC,WAAmB,EAAE,UAAkB;IAC9E,MAAM,QAAQ,GAAG,sBAAsB,CAAC,WAAW,CAAC,CAAC;IACrD,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5B,IAAI,CAAC;QACH,IAAA,kBAAa,EAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACtE,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/utils/governance-provenance.d.ts

@@ -0,0 +1,95 @@
+/**
+ * Governance Provenance Chain
+ *
+ * Every neurcode verify run persists a signed fingerprint record.
+ * The record proves exactly why a governance decision happened:
+ * which rules ran, what they found, what was suppressed, and why.
+ *
+ * Stored at: .neurcode/provenance/{runId}.json
+ * Index:     .neurcode/provenance/index.json
+ *
+ * @process-local Provenance records are per-workstation/CI runner.
+ * For org-wide auditability, upload records to your SIEM or audit log system.
+ */
+export interface ProvenanceRecord {
+    runId: string;
+    runAt: string;
+    schemaVersion: 1;
+    repoRoot: string;
+    filesAnalyzed: number;
+    diffContext: string;
+    planId: string | null;
+    intentHash: string | null;
+    policyHash: string | null;
+    ruleIds: string[];
+    blockingCount: number;
+    advisoryCount: number;
+    suppressedCount: number;
+    structuralBlockingCount: number;
+    structuralAdvisoryCount: number;
+    deterministicSignals: number;
+    heuristicSignals: number;
+    overallTrustScore: number;
+    verdict: 'PASS' | 'FAIL' | 'WARN';
+    governanceDecision: string;
+    fingerprint: string;
+    signature: string | null;
+    signingKeyId: string | null;
+}
+export interface ProvenanceIndex {
+    schemaVersion: 1;
+    records: Array<{
+        runId: string;
+        runAt: string;
+        verdict: string;
+        planId: string | null;
+        fingerprint: string;
+    }>;
+}
+/**
+ * Build a provenance record from verify run results.
+ * The fingerprint is SHA-256 of: runId + runAt + ruleIds.sort().join(',') + blockingCount + verdict
+ */
+export declare function buildProvenanceRecord(input: {
+    repoRoot: string;
+    filesAnalyzed: number;
+    diffContext: string;
+    planId: string | null;
+    intentHash: string | null;
+    policyHash: string | null;
+    ruleIds: string[];
+    blockingCount: number;
+    advisoryCount: number;
+    suppressedCount: number;
+    structuralBlockingCount: number;
+    structuralAdvisoryCount: number;
+    deterministicSignals: number;
+    heuristicSignals: number;
+    overallTrustScore: number;
+    verdict: 'PASS' | 'FAIL' | 'WARN';
+    governanceDecision: string;
+}): ProvenanceRecord;
+/**
+ * Persist a provenance record to .neurcode/provenance/.
+ * Updates the index file atomically.
+ * Index retains last 1000 records (trims oldest first).
+ */
+export declare function saveProvenanceRecord(repoRoot: string, record: ProvenanceRecord): void;
+/**
+ * Load the provenance index.
+ */
+export declare function loadProvenanceIndex(repoRoot: string): ProvenanceIndex;
+/**
+ * Load a specific provenance record by runId.
+ */
+export declare function loadProvenanceRecord(repoRoot: string, runId: string): ProvenanceRecord | null;
+/**
+ * Get the last N provenance records (most recent first).
+ */
+export declare function getRecentProvenance(repoRoot: string, limit?: number): ProvenanceRecord[];
+/**
+ * Verify the integrity fingerprint of a stored record.
+ * Returns true if fingerprint matches recomputed value.
+ */
+export declare function verifyProvenanceIntegrity(record: ProvenanceRecord): boolean;
+//# sourceMappingURL=governance-provenance.d.ts.map

package/dist/utils/governance-provenance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"governance-provenance.d.ts","sourceRoot":"","sources":["../../src/utils/governance-provenance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAMH,MAAM,WAAW,gBAAgB;IAE/B,KAAK,EAAY,MAAM,CAAC;IACxB,KAAK,EAAY,MAAM,CAAC;IACxB,aAAa,EAAI,CAAC,CAAC;IAGnB,QAAQ,EAAS,MAAM,CAAC;IACxB,aAAa,EAAI,MAAM,CAAC;IACxB,WAAW,EAAM,MAAM,CAAC;IAGxB,MAAM,EAAW,MAAM,GAAG,IAAI,CAAC;IAC/B,UAAU,EAAO,MAAM,GAAG,IAAI,CAAC;IAC/B,UAAU,EAAO,MAAM,GAAG,IAAI,CAAC;IAC/B,OAAO,EAAU,MAAM,EAAE,CAAC;IAG1B,aAAa,EAAI,MAAM,CAAC;IACxB,aAAa,EAAI,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,uBAAuB,EAAE,MAAM,CAAC;IAChC,uBAAuB,EAAE,MAAM,CAAC;IAGhC,oBAAoB,EAAG,MAAM,CAAC;IAC9B,gBAAgB,EAAO,MAAM,CAAC;IAC9B,iBAAiB,EAAM,MAAM,CAAC;IAG9B,OAAO,EAAU,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IAC1C,kBAAkB,EAAE,MAAM,CAAC;IAG3B,WAAW,EAAM,MAAM,CAAC;IACxB,SAAS,EAAQ,MAAM,GAAG,IAAI,CAAC;IAC/B,YAAY,EAAK,MAAM,GAAG,IAAI,CAAC;CAChC;AAED,MAAM,WAAW,eAAe;IAC9B,aAAa,EAAE,CAAC,CAAC;IACjB,OAAO,EAAE,KAAK,CAAC;QACb,KAAK,EAAQ,MAAM,CAAC;QACpB,KAAK,EAAQ,MAAM,CAAC;QACpB,OAAO,EAAM,MAAM,CAAC;QACpB,MAAM,EAAO,MAAM,GAAG,IAAI,CAAC;QAC3B,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC,CAAC;CACJ;AAiCD;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAC3C,QAAQ,EAAO,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAI,MAAM,CAAC;IACtB,MAAM,EAAS,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,EAAK,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,EAAK,MAAM,GAAG,IAAI,CAAC;IAC7B,OAAO,EAAQ,MAAM,EAAE,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,uBAAuB,EAAE,MAAM,CAAC;IAChC,uBAAuB,EAAE,MAAM,CAAC;IAChC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,OAAO,EAAQ,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IACxC,kBAAkB,EAAE,MAAM,CAAC;CAC5B,GAAG,gBAAgB,CA8CnB;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,GAAG,IAAI,CA+BrF;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,eAAe,CAerE;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI,CAW7F;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,SAAK,GAAG,gBAAgB,EAAE,CAepF;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAa3E"}