@nxuss/lemma 1.16.1 → 1.18.0

package/dist/esm/cloud/v2/server.js

@@ -0,0 +1,44 @@
+import { Pool } from 'pg';
+import { createApp } from './app';
+import { FileBrainStore, PostgresBrainStore } from '../store';
+import { InMemoryIdentityStore, PostgresIdentityStore, InMemoryRateLimiter, PostgresRateLimiter, PlanPolicy, TenantResolver, } from '../identity';
+import { UsageLedger } from '../metering';
+function buildDeps(options) {
+    const databaseUrl = options.databaseUrl ?? process.env.DATABASE_URL;
+    const policy = new PlanPolicy();
+    const usageLedger = new UsageLedger();
+    if (databaseUrl) {
+        const pool = new Pool({ connectionString: databaseUrl });
+        const identityStore = new PostgresIdentityStore(pool);
+        return {
+            store: new PostgresBrainStore(pool),
+            resolver: new TenantResolver(identityStore),
+            policy,
+            rateLimiter: new PostgresRateLimiter(pool),
+            usageLedger,
+        };
+    }
+    const identityStore = new InMemoryIdentityStore();
+    return {
+        store: new FileBrainStore(),
+        resolver: new TenantResolver(identityStore),
+        policy,
+        rateLimiter: new InMemoryRateLimiter(),
+        usageLedger,
+    };
+}
+/** Starts the /v2 HTTP server. Resolves with the underlying `http.Server` once listening. */
+export function startV2Server(options = {}) {
+    const port = options.port ?? parseInt(process.env.LEMMA_CLOUD_V2_PORT || '3200', 10);
+    const deps = buildDeps(options);
+    const app = createApp(deps);
+    return new Promise((resolve) => {
+        const server = app.listen(port, () => {
+            // eslint-disable-next-line no-console
+            console.log(`🚀 Lemma API v2 listening on port ${port}`);
+            resolve(server);
+        });
+    });
+}
+export default startV2Server;
+//# sourceMappingURL=server.js.map

package/dist/esm/cloud/v2/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../../../src/cloud/v2/server.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAC1B,OAAO,EAAE,SAAS,EAAgB,MAAM,OAAO,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAC9D,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,mBAAmB,EACnB,mBAAmB,EACnB,UAAU,EACV,cAAc,GACf,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAQ1C,SAAS,SAAS,CAAC,OAA6B;IAC9C,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IACpE,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;IAChC,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;IAEtC,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,EAAE,gBAAgB,EAAE,WAAW,EAAE,CAAC,CAAC;QACzD,MAAM,aAAa,GAAG,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC;QACtD,OAAO;YACL,KAAK,EAAE,IAAI,kBAAkB,CAAC,IAAI,CAAC;YACnC,QAAQ,EAAE,IAAI,cAAc,CAAC,aAAa,CAAC;YAC3C,MAAM;YACN,WAAW,EAAE,IAAI,mBAAmB,CAAC,IAAI,CAAC;YAC1C,WAAW;SACZ,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,qBAAqB,EAAE,CAAC;IAClD,OAAO;QACL,KAAK,EAAE,IAAI,cAAc,EAAE;QAC3B,QAAQ,EAAE,IAAI,cAAc,CAAC,aAAa,CAAC;QAC3C,MAAM;QACN,WAAW,EAAE,IAAI,mBAAmB,EAAE;QACtC,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,aAAa,CAAC,UAAgC,EAAE;IAC9D,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;IACrF,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAChC,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAE5B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;YACnC,sCAAsC;YACtC,OAAO,CAAC,GAAG,CAAC,qCAAqC,IAAI,EAAE,CAAC,CAAC;YACzD,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,eAAe,aAAa,CAAC"}

package/dist/esm/config/index.d.ts

@@ -1,4 +1,4 @@
-import { EnvironmentConfig } from '../types/index.js';
+import { EnvironmentConfig } from '../types';
 /**
  * Application configuration loaded from environment variables
  */

package/dist/esm/config/index.js

@@ -1,5 +1,5 @@
 import dotenv from 'dotenv';
-import { ConfigurationError } from '../errors/LemmaError.js';
+import { ConfigurationError } from '../errors/LemmaError';
 // Load environment variables
 dotenv.config();
 /**

package/dist/esm/consensus/index.d.ts

@@ -3,6 +3,6 @@
  *
  * Exports all consensus components for Phase 3.
  */
-export { ConsensusEngine, ConsensusRequest, ModelResponse, DebateRound, ConsensusResult, ConsensusEngineConfig, ConsensusMetrics, } from './ConsensusEngine.js';
-export { ModelPool, ModelConfig, ModelInfo, QueryResponse, ModelPoolConfig, } from './ModelPool.js';
+export { ConsensusEngine, ConsensusRequest, ModelResponse, DebateRound, ConsensusResult, ConsensusEngineConfig, ConsensusMetrics, } from './ConsensusEngine';
+export { ModelPool, ModelConfig, ModelInfo, QueryResponse, ModelPoolConfig, } from './ModelPool';
 //# sourceMappingURL=index.d.ts.map

package/dist/esm/consensus/index.js

@@ -3,6 +3,6 @@
  *
  * Exports all consensus components for Phase 3.
  */
-export { ConsensusEngine, } from './ConsensusEngine.js';
-export { ModelPool, } from './ModelPool.js';
+export { ConsensusEngine, } from './ConsensusEngine';
+export { ModelPool, } from './ModelPool';
 //# sourceMappingURL=index.js.map

package/dist/esm/contracts/api-v2.types.d.ts

@@ -0,0 +1,103 @@
+/**
+ * Lemma API v2 — Wire types (Lane 0)
+ *
+ * The contract for the six /v2 routes. Frozen here so lanes C..K can implement
+ * against a stable shape and the TS SDK can generate identically-shaped clients.
+ */
+import type { Evidence } from './evidence';
+/**
+ * Verifiability state of a memory or claim. This is the differentiator of the
+ * product and the fail-closed invariant lives here (see plan §0):
+ *
+ *   fresh   — every tracked path hashes identical to what was stored.
+ *   stale   — a tracked path hashed differently (with which files changed).
+ *   unverified — the verifier cannot prove validity (client sent no current
+ *                evidence, or omitted a tracked path). NEVER `fresh` by guess.
+ *   contradicted — two stored claims about the same subject now diverge.
+ */
+export type MemoryState = 'fresh' | 'stale' | 'unverified' | 'contradicted';
+/** One fact a memory asserts, self-contained. */
+export interface MemoryClaim {
+    id: string;
+    text: string;
+    fileHashes?: Evidence['files'];
+    symbolHashes?: Evidence['symbols'];
+    symbolNormalizedHashes?: Evidence['symbolsNormalized'];
+}
+/** A worker result inside /v2/recall or /v2/verify. */
+export interface VerifiedResult {
+    id: string;
+    state: MemoryState;
+    /** Paths (or `path::symbol`) that no longer hash the same, when stale. */
+    staleFiles?: string[];
+    /** Cosmetic-only changes ignored under semantic diff, when applicable. */
+    cosmeticChanges?: string[];
+    /** The original memory/claim payload, when the caller asked for it. */
+    memory?: unknown;
+}
+export interface CreateMemoryRequest {
+    claims: Array<{
+        text: string;
+        filePaths?: string[];
+        symbols?: Array<{
+            filePath: string;
+            symbolName: string;
+        }>;
+    }>;
+    evidence: Evidence;
+    /** Optional ids this memory was derived from (transitive freshness). */
+    derivedFrom?: string[];
+}
+export interface CreateMemoryResponse {
+    id: string;
+    claims: MemoryClaim[];
+}
+export interface RecallRequest {
+    query: string;
+    /** The client's current evidence for the candidate set, if it has any. */
+    currentEvidence?: Evidence;
+    limit?: number;
+}
+export interface RecallResponse {
+    results: VerifiedResult[];
+    query: string;
+}
+export interface VerifyRequest {
+    /** Ids whose freshness to resolve. */
+    ids: string[];
+    currentEvidence: Evidence;
+}
+export interface VerifyResponse {
+    results: VerifiedResult[];
+}
+/** Outcome of a batch forget. */
+export interface ForgetResponse {
+    forged: string[];
+}
+export interface ScrubFinding {
+    type: string;
+    offset: number;
+    length: number;
+}
+export interface ScrubRequest {
+    text?: string;
+    toolCallJson?: string;
+    mode?: 'mask' | 'detect';
+}
+export interface ScrubResponse {
+    text?: string;
+    toolCallJson?: string;
+    findings: ScrubFinding[];
+}
+/** A single auditable usage number. Every value here is measured, never estimated. */
+export interface UsageStat {
+    measurement: 'counted';
+    value: number;
+}
+export interface UsageResponse {
+    /** Keyed by metric name → counted value. */
+    metrics: Record<string, UsageStat>;
+    /** How many ledger events were excluded for lacking a reliable count. */
+    excludedEvents: number;
+}
+//# sourceMappingURL=api-v2.types.d.ts.map

package/dist/esm/contracts/api-v2.types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-v2.types.d.ts","sourceRoot":"","sources":["../../../src/contracts/api-v2.types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C;;;;;;;;;GASG;AACH,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,OAAO,GAAG,YAAY,GAAG,cAAc,CAAC;AAE5E,iDAAiD;AACjD,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/B,YAAY,CAAC,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;IACnC,sBAAsB,CAAC,EAAE,QAAQ,CAAC,mBAAmB,CAAC,CAAC;CACxD;AAED,uDAAuD;AACvD,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,WAAW,CAAC;IACnB,0EAA0E;IAC1E,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,0EAA0E;IAC1E,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,uEAAuE;IACvE,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE,KAAK,CAAC;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC,CAAC;IACjH,QAAQ,EAAE,QAAQ,CAAC;IACnB,wEAAwE;IACxE,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,WAAW,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,0EAA0E;IAC1E,eAAe,CAAC,EAAE,QAAQ,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,aAAa;IAC5B,sCAAsC;IACtC,GAAG,EAAE,MAAM,EAAE,CAAC;IACd,eAAe,EAAE,QAAQ,CAAC;CAC3B;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,cAAc,EAAE,CAAC;CAC3B;AAED,iCAAiC;AACjC,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC;CAC1B;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,YAAY,EAAE,CAAC;CAC1B;AAED,sFAAsF;AACtF,MAAM,WAAW,SAAS;IACxB,WAAW,EAAE,SAAS,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,aAAa;IAC5B,4CAA4C;IAC5C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACnC,yEAAyE;IACzE,cAAc,EAAE,MAAM,CAAC;CACxB"}

package/dist/esm/contracts/api-v2.types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=api-v2.types.js.map

package/dist/esm/contracts/api-v2.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-v2.types.js","sourceRoot":"","sources":["../../../src/contracts/api-v2.types.ts"],"names":[],"mappings":""}

package/dist/esm/contracts/errors.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Lemma API v2 — Shared error types (Lane 0)
+ *
+ * Every failure that crosses the /v2 boundary is a LemmaApiError with a stable
+ * `code`, never a raw exception or a JS stack. Codes are contract — SDKs and
+ * clients branch on them, so they must not change across releases.
+ */
+/** Stable, machine-readable error codes exposed by the /v2 surface. */
+export type LemmaErrorCode = 'unauthenticated' | 'invalid_request' | 'quota_exceeded' | 'not_found' | 'forbidden' | 'rate_limited' | 'not_implemented' | 'internal';
+/**
+ * The single error type that crosses the API boundary. Carries a stable code, a
+ * human message and — where it does not leak internals — the offending field.
+ */
+export declare class LemmaApiError extends Error {
+    readonly code: LemmaErrorCode;
+    readonly status: number;
+    /** Offending field name, when the error is a validation failure. */
+    readonly field?: string;
+    /** Details destined for logs only, never for the client response. */
+    readonly internal?: unknown;
+    constructor(opts: {
+        code: LemmaErrorCode;
+        status: number;
+        message: string;
+        field?: string;
+        internal?: unknown;
+    });
+    toJSON(): Record<string, unknown>;
+}
+/**
+ * Helper raising the "not implemented yet" signal. Lane 0 generates stubs for
+ * every lane file so the project compiles in any worktree; invoking a stub at
+ * runtime must never look like a real success, and must name the responsible
+ * lane so the integration chat can route the work.
+ */
+export declare class NotImplementedError extends Error {
+    readonly lane: string;
+    constructor(lane: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/esm/contracts/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/contracts/errors.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,uEAAuE;AACvE,MAAM,MAAM,cAAc,GACtB,iBAAiB,GACjB,iBAAiB,GACjB,gBAAgB,GAChB,WAAW,GACX,WAAW,GACX,cAAc,GACd,iBAAiB,GACjB,UAAU,CAAC;AAEf;;;GAGG;AACH,qBAAa,aAAc,SAAQ,KAAK;IACtC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,oEAAoE;IACpE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,qEAAqE;IACrE,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;gBAEhB,IAAI,EAAE;QAChB,IAAI,EAAE,cAAc,CAAC;QACrB,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB;IASD,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAUlC;AAED;;;;;GAKG;AACH,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBAEV,IAAI,EAAE,MAAM;CAKzB"}

package/dist/esm/contracts/errors.js

@@ -0,0 +1,45 @@
+/**
+ * Lemma API v2 — Shared error types (Lane 0)
+ *
+ * Every failure that crosses the /v2 boundary is a LemmaApiError with a stable
+ * `code`, never a raw exception or a JS stack. Codes are contract — SDKs and
+ * clients branch on them, so they must not change across releases.
+ */
+/**
+ * The single error type that crosses the API boundary. Carries a stable code, a
+ * human message and — where it does not leak internals — the offending field.
+ */
+export class LemmaApiError extends Error {
+    constructor(opts) {
+        super(opts.message);
+        this.name = 'LemmaApiError';
+        this.code = opts.code;
+        this.status = opts.status;
+        this.field = opts.field;
+        this.internal = opts.internal;
+    }
+    toJSON() {
+        return {
+            error: {
+                code: this.code,
+                status: this.status,
+                message: this.message,
+                ...(this.field ? { field: this.field } : {}),
+            },
+        };
+    }
+}
+/**
+ * Helper raising the "not implemented yet" signal. Lane 0 generates stubs for
+ * every lane file so the project compiles in any worktree; invoking a stub at
+ * runtime must never look like a real success, and must name the responsible
+ * lane so the integration chat can route the work.
+ */
+export class NotImplementedError extends Error {
+    constructor(lane) {
+        super(`NotImplemented: lane ${lane} has not implemented this module yet`);
+        this.name = 'NotImplementedError';
+        this.lane = lane;
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/esm/contracts/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../src/contracts/errors.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAaH;;;GAGG;AACH,MAAM,OAAO,aAAc,SAAQ,KAAK;IAQtC,YAAY,IAMX;QACC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpB,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACxB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAChC,CAAC;IAED,MAAM;QACJ,OAAO;YACL,KAAK,EAAE;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC7C;SACF,CAAC;IACJ,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAG5C,YAAY,IAAY;QACtB,KAAK,CAAC,wBAAwB,IAAI,sCAAsC,CAAC,CAAC;QAC1E,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF"}

package/dist/esm/contracts/evidence.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Lemma API v2 — Evidence & EvidenceResolver contract (Lane 0)
+ *
+ * Truth behind the product (see plan §0): freshness is computed by hashing the
+ * code a memory was recorded against. Local consumers hash the local filesystem
+ * (LocalFsResolver), cloud consumers send their own hashes (SuppliedEvidenceResolver).
+ * Both satisfy the same interface. The verifier only ever *compares* hashes — it
+ * never hashes on the server's behalf, because the server has no client filesystem.
+ */
+/** Hash of a whole file: path (as the client refers to it) → sha256 hex. */
+export type FileHashes = Record<string, string>;
+/** Hash pair for one symbol: key is `<path>::<symbolName>`. */
+export type SymbolHashes = Record<string, string>;
+/**
+ * The complete evidence bundle a client attaches when storing a memory and
+ * re-supplies when verifying. `files`/`symbols` are keyed by *relative* path as
+ * the client refers to them; the `branch`/`commit` fields let a verifier reason
+ * about cross-checkout freshness without re-reading disk.
+ */
+export interface Evidence {
+    files: FileHashes;
+    symbols: SymbolHashes;
+    /** Symbols hashed after stripping comments/whitespace (semantic diff). */
+    symbolsNormalized: SymbolHashes;
+    branch?: string;
+    commit?: string;
+}
+/**
+ * Resolves the current evidence for a path/symbol.
+ *
+ * This is the seam that decouples the Brain from the local filesystem:
+ *  - LocalFsResolver reads real files (MCP-local behaviour, byte for byte).
+ *  - SuppliedEvidenceResolver consults a client-supplied `currentEvidence`
+ *    mapping and FAILS CLOSED — a tracked path the client omitted resolves to
+ *    `null`, which the verifier maps to `unverified`, never `fresh`.
+ *
+ * Methods resolve to `null` when evidence cannot be obtained. `null` is the
+ * fail-closed signal; callers must treat it as "cannot verify ⇒ not fresh".
+ */
+export interface EvidenceResolver {
+    /** sha256 of a whole file, or `null` if the file cannot be read/verified. */
+    hashFile(path: string): string | null;
+    /** Raw + normalized hash pair for a symbol, or `null` if it cannot be read. */
+    hashSymbol(path: string, symbolName: string): {
+        raw: string;
+        normalized: string;
+    } | null;
+}
+//# sourceMappingURL=evidence.d.ts.map

package/dist/esm/contracts/evidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.d.ts","sourceRoot":"","sources":["../../../src/contracts/evidence.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,4EAA4E;AAC5E,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAEhD,+DAA+D;AAC/D,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAElD;;;;;GAKG;AACH,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,UAAU,CAAC;IAClB,OAAO,EAAE,YAAY,CAAC;IACtB,0EAA0E;IAC1E,iBAAiB,EAAE,YAAY,CAAC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,gBAAgB;IAC/B,6EAA6E;IAC7E,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACtC,+EAA+E;IAC/E,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CAC1F"}

package/dist/esm/contracts/evidence.js

@@ -0,0 +1,11 @@
+/**
+ * Lemma API v2 — Evidence & EvidenceResolver contract (Lane 0)
+ *
+ * Truth behind the product (see plan §0): freshness is computed by hashing the
+ * code a memory was recorded against. Local consumers hash the local filesystem
+ * (LocalFsResolver), cloud consumers send their own hashes (SuppliedEvidenceResolver).
+ * Both satisfy the same interface. The verifier only ever *compares* hashes — it
+ * never hashes on the server's behalf, because the server has no client filesystem.
+ */
+export {};
+//# sourceMappingURL=evidence.js.map

package/dist/esm/contracts/evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.js","sourceRoot":"","sources":["../../../src/contracts/evidence.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG"}

package/dist/esm/contracts/index.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Lemma API v2 — Contracts barrel (Lane 0)
+ *
+ * Import everything the v2 lanes share from a single entry point.
+ */
+export * from './errors';
+export * from './evidence';
+export * from './store';
+export * from './api-v2.types';
+//# sourceMappingURL=index.d.ts.map

package/dist/esm/contracts/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/contracts/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,cAAc,UAAU,CAAC;AACzB,cAAc,YAAY,CAAC;AAC3B,cAAc,SAAS,CAAC;AACxB,cAAc,gBAAgB,CAAC"}

package/dist/esm/contracts/index.js

@@ -0,0 +1,10 @@
+/**
+ * Lemma API v2 — Contracts barrel (Lane 0)
+ *
+ * Import everything the v2 lanes share from a single entry point.
+ */
+export * from './errors';
+export * from './evidence';
+export * from './store';
+export * from './api-v2.types';
+//# sourceMappingURL=index.js.map

package/dist/esm/contracts/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/contracts/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,cAAc,UAAU,CAAC;AACzB,cAAc,YAAY,CAAC;AAC3B,cAAc,SAAS,CAAC;AACxB,cAAc,gBAAgB,CAAC"}

package/dist/esm/contracts/store.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Lemma API v2 — BrainStore contract (Lane 0)
+ *
+ * The durable backing for the /v2 memory routes. Multi-tenant: every method is
+ * scoped by `tenantId` and every query MUST filter by it. A store that leaks one
+ * tenant's memories to another is a security failure, not a bug (Lane B tests it).
+ *
+ * Implementations: PostgresBrainStore (cloud, Lane B), FileBrainStore (wraps the
+ * local NDJSON brain, Lane B).
+ */
+export interface Candidate {
+    id: string;
+    score: number;
+}
+export interface BrainStore {
+    /** Persist a memory under `tenantId`; returns its id. */
+    put(tenantId: string, memory: unknown): Promise<string>;
+    /** Fetch one memory by id, scoped to the tenant. Resolves null if not owned. */
+    get(tenantId: string, id: string): Promise<unknown | null>;
+    /**
+     * Ranked candidates by BM25-style relevance for a query, scoped to the tenant.
+     * Must stay under the contractual p95 budget for the lane's backing impl.
+     */
+    searchCandidates(tenantId: string, query: string, limit: number): Promise<Candidate[]>;
+    /** Fetch many memories by id in one round trip; results scoped to the tenant. */
+    listByIds(tenantId: string, ids: string[]): Promise<Map<string, unknown>>;
+    /** Hard delete (forget), scoped to the tenant. */
+    delete(tenantId: string, id: string): Promise<boolean>;
+}
+//# sourceMappingURL=store.d.ts.map

package/dist/esm/contracts/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../../src/contracts/store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,UAAU;IACzB,yDAAyD;IACzD,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAExD,gFAAgF;IAChF,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAE3D;;;OAGG;IACH,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAEvF,iFAAiF;IACjF,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAE1E,kDAAkD;IAClD,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACxD"}

package/dist/esm/contracts/store.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=store.js.map

package/dist/esm/contracts/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../../src/contracts/store.ts"],"names":[],"mappings":""}

package/dist/esm/core/AgentRegistry.d.ts

@@ -1,5 +1,5 @@
 import { EventEmitter } from 'events';
-import { AgentInfo, AgentStatus, AgentCapability, AgentMetrics } from '../types/index.js';
+import { AgentInfo, AgentStatus, AgentCapability, AgentMetrics } from '../types';
 /**
  * Dynamic registry for tracking connected agents and their capabilities
  * Maintains agent state, metrics, and capability discovery

package/dist/esm/core/AgentRegistry.js

@@ -1,5 +1,5 @@
 import { EventEmitter } from 'events';
-import { AgentStatus } from '../types/index.js';
+import { AgentStatus } from '../types';
 /**
  * Dynamic registry for tracking connected agents and their capabilities
  * Maintains agent state, metrics, and capability discovery

package/dist/esm/core/DashboardBroadcaster.d.ts

@@ -1,6 +1,6 @@
-import { WebSocketServer } from './WebSocketServer.js';
-import { OrchestrationEngine } from './OrchestrationEngine.js';
-import { IAPMessage } from '../types/index.js';
+import { WebSocketServer } from './WebSocketServer';
+import { OrchestrationEngine } from './OrchestrationEngine';
+import { IAPMessage } from '../types';
 /**
  * Dashboard Broadcaster
  * Handles real-time metrics and state broadcasting to dashboard clients

package/dist/esm/core/DashboardBroadcaster.js

@@ -1,6 +1,6 @@
-import { MessageType } from '../types/index.js';
+import { MessageType } from '../types';
 import { v4 as uuidv4 } from 'uuid';
-import { createLogger } from '../utils/logger.js';
+import { createLogger } from '../utils/logger';
 const logger = createLogger('DashboardBroadcaster');
 /**
  * Dashboard Broadcaster

package/dist/esm/core/DashboardWebSocketServer.d.ts

@@ -5,7 +5,7 @@
  */
 import { Server as SocketIOServer } from 'socket.io';
 import http from 'http';
-import { OrchestrationEngine } from './OrchestrationEngine.js';
+import { OrchestrationEngine } from './OrchestrationEngine';
 export declare class DashboardWebSocketServer {
     private io;
     private orchestrationEngine;

package/dist/esm/core/DashboardWebSocketServer.js

@@ -4,7 +4,7 @@
  * Emits metrics, agent updates, and cache events
  */
 import { Server as SocketIOServer } from 'socket.io';
-import { createLogger } from '../utils/logger.js';
+import { createLogger } from '../utils/logger';
 const logger = createLogger('DashboardWebSocketServer');
 export class DashboardWebSocketServer {
     constructor(httpServer, port = 3002) {

package/dist/esm/core/GhostAlchemist.js

@@ -1,5 +1,5 @@
 import axios from 'axios';
-import { logger } from '../utils/logger.js';
+import { logger } from '../utils/logger';
 export class GhostAlchemist {
     constructor() {
         this.model = process.env.OLLAMA_GEN_MODEL || 'llama3';

package/dist/esm/core/GhostListener.js

@@ -1,6 +1,6 @@
 import { spawn } from 'child_process';
-import { GhostAlchemist } from './GhostAlchemist.js';
-import { logger } from '../utils/logger.js';
+import { GhostAlchemist } from './GhostAlchemist';
+import { logger } from '../utils/logger';
 /**
  * GhostListener
  * Watches terminal output for errors and provides instant diagnostics.

package/dist/esm/core/OrchestrationEngine.d.ts

@@ -1,6 +1,6 @@
-import { WebSocketServer } from './WebSocketServer.js';
-import { SubconsciousEngine } from './SubconsciousEngine.js';
-import { OrchestrationMetrics } from '../types/index.js';
+import { WebSocketServer } from './WebSocketServer';
+import { SubconsciousEngine } from './SubconsciousEngine';
+import { OrchestrationMetrics } from '../types';
 /**
  * Orchestration Engine
  * Integrates WebSocket Server and Subconscious Engine

package/dist/esm/core/OrchestrationEngine.js

@@ -1,6 +1,6 @@
 import { v4 as uuidv4 } from 'uuid';
-import { MessageType, } from '../types/index.js';
-import { createLogger } from '../utils/logger.js';
+import { MessageType, } from '../types';
+import { createLogger } from '../utils/logger';
 const logger = createLogger('OrchestrationEngine');
 /**
  * Orchestration Engine

package/dist/esm/core/SubconsciousEngine.d.ts

@@ -1,4 +1,4 @@
-import { CacheEntry, SemanticMatch } from '../types/index.js';
+import { CacheEntry, SemanticMatch } from '../types';
 /**
  * Subconscious Semantic Engine
  * Provides semantic caching using ChromaDB and Ollama embeddings

package/dist/esm/core/SubconsciousEngine.js

@@ -1,7 +1,7 @@
 import { ChromaClient } from 'chromadb';
 import axios from 'axios';
-import { config, getChromaURL } from '../config/index.js';
-import { createLogger } from '../utils/logger.js';
+import { config, getChromaURL } from '../config';
+import { createLogger } from '../utils/logger';
 const logger = createLogger('SubconsciousEngine');
 /**
  * Subconscious Semantic Engine

package/dist/esm/core/WebSocketServer.d.ts

@@ -1,6 +1,6 @@
 import { EventEmitter } from 'events';
-import { AgentConnection, ServerConfig, ConnectionStats } from '../types/index.js';
-import { SecurityMiddleware, SecurityConfig } from '../security/index.js';
+import { AgentConnection, ServerConfig, ConnectionStats } from '../types';
+import { SecurityMiddleware, SecurityConfig } from '../security';
 /**
  * High-performance WebSocket server for agent connections
  * Handles connection lifecycle, heartbeat, reconnection logic, and security

package/dist/esm/core/WebSocketServer.js

@@ -1,6 +1,6 @@
 import WebSocket, { WebSocketServer as WSServer } from 'ws';
 import { EventEmitter } from 'events';
-import { SecurityMiddleware } from '../security/index.js';
+import { SecurityMiddleware } from '../security';
 /**
  * High-performance WebSocket server for agent connections
  * Handles connection lifecycle, heartbeat, reconnection logic, and security

package/dist/esm/core/index.d.ts

@@ -6,10 +6,10 @@
  * - AgentRegistry: Dynamic agent registration and capability tracking
  * - Router: I.A.P. message routing and task orchestration
  */
-export { WebSocketServer } from './WebSocketServer.js';
-export { AgentRegistry } from './AgentRegistry.js';
-export { Router } from './router.js';
-export { OrchestrationEngine } from './OrchestrationEngine.js';
-export { SubconsciousEngine } from './SubconsciousEngine.js';
-export { DashboardBroadcaster } from './DashboardBroadcaster.js';
+export { WebSocketServer } from './WebSocketServer';
+export { AgentRegistry } from './AgentRegistry';
+export { Router } from './router';
+export { OrchestrationEngine } from './OrchestrationEngine';
+export { SubconsciousEngine } from './SubconsciousEngine';
+export { DashboardBroadcaster } from './DashboardBroadcaster';
 //# sourceMappingURL=index.d.ts.map

package/dist/esm/core/index.js

@@ -6,10 +6,10 @@
  * - AgentRegistry: Dynamic agent registration and capability tracking
  * - Router: I.A.P. message routing and task orchestration
  */
-export { WebSocketServer } from './WebSocketServer.js';
-export { AgentRegistry } from './AgentRegistry.js';
-export { Router } from './router.js';
-export { OrchestrationEngine } from './OrchestrationEngine.js';
-export { SubconsciousEngine } from './SubconsciousEngine.js';
-export { DashboardBroadcaster } from './DashboardBroadcaster.js';
+export { WebSocketServer } from './WebSocketServer';
+export { AgentRegistry } from './AgentRegistry';
+export { Router } from './router';
+export { OrchestrationEngine } from './OrchestrationEngine';
+export { SubconsciousEngine } from './SubconsciousEngine';
+export { DashboardBroadcaster } from './DashboardBroadcaster';
 //# sourceMappingURL=index.js.map

package/dist/esm/core/router.d.ts

@@ -1,7 +1,7 @@
 import { EventEmitter } from 'events';
-import { AgentRegistry } from './AgentRegistry.js';
-import { WebSocketServer } from './WebSocketServer.js';
-import { RouterConfig } from '../types/index.js';
+import { AgentRegistry } from './AgentRegistry';
+import { WebSocketServer } from './WebSocketServer';
+import { RouterConfig } from '../types';
 /**
  * Core routing engine for Inter-Agent Protocol (I.A.P.) messages
  * Handles message reception, agent selection, and error management