@nxuss/lemma 1.23.0 → 1.24.1

package/README.md

@@ -2,10 +2,10 @@
 
 [![npm version](https://img.shields.io/npm/v/@nxuss/lemma.svg?color=orange&style=flat-square)](https://www.npmjs.com/package/@nxuss/lemma)
 [![License](https://img.shields.io/npm/l/@nxuss/lemma.svg?color=blue&style=flat-square)](https://github.com/Nxusbets/lemma/blob/main/LICENSE)
-[![MCP Tools](https://img.shields.io/badge/MCP%20tools-97-ff69b4?style=flat-square)](https://github.com/Nxusbets/lemma)
+[![MCP Tools](https://img.shields.io/badge/MCP%20tools-108-ff69b4?style=flat-square)](https://github.com/Nxusbets/lemma)
 [![Security](https://img.shields.io/badge/privacy-firewall%20active-blueviolet?style=flat-square)](https://github.com/Nxusbets/lemma)
 [![Caching](https://img.shields.io/badge/semantic%20memory-enabled-success?style=flat-square)](https://github.com/Nxusbets/lemma)
-[![Tests](https://img.shields.io/badge/tests-429%20passing-00c853?style=flat-square)](https://github.com/Nxusbets/lemma)
+[![Tests](https://img.shields.io/badge/tests-917%20passing-00c853?style=flat-square)](https://github.com/Nxusbets/lemma)
 
 ```text
     __
@@ -34,6 +34,12 @@ lemma start     # gateway + dashboard on http://localhost:8081
 > **Muse** — no setup needed. This repo is already Muse-compatible zero-config: clone and open with `muse` — the skill at `.agents/skills/lemma/SKILL.md` auto-loads and `lemma call` works via `bash`. See [MCP integration](#-mcp-integration).
 >
 > **🆕 v1.22.0 — Lemma auto-activates in every LLM client.** `npm i -g @nxuss/lemma` registers the skill in your **user** catalog (auto-loads in every `muse` session, any project) and `lemma init` wires each project for Muse, Claude Code, Cursor, Codex, Windsurf, Kiro and OpenCode. Health check: `lemma doctor`.
+>
+> **🆕 v1.24.0 — the Brain stops crediting what it can't verify.** `smarter_cache` no longer
+> presents a stale hit as a clean one (`stale:true`/`tokensSaved:0` + why, instead of a silent
+> guess); `store_memory` derives evidence by default from files/symbols the session already
+> touched instead of depending on the caller to pass them; every "tokens saved" figure now cites
+> the `hits` that earned it. See [`CHANGELOG.md`](CHANGELOG.md) for the full list.
 
 ---
 
@@ -53,8 +59,11 @@ lemma start     # gateway + dashboard on http://localhost:8081
   tags; a passing `test_oracle` run over an uncommitted diff auto-captures itself; two memories
   about the same symbol that disagree on outcome are flagged, not silently both suggested.
   Every hit explains itself (`whyShown` ranking signals + cited `evidence` files/symbols), and
-  every reuse books its savings onto the memory itself — `brain_stats` names which memories
-  actually pay for the Brain (`totalTokensSaved`, top savers).
+  every reuse books its savings onto the memory itself — `brain_stats` and `brain_upkeep` name
+  which memories actually pay for the Brain (`totalTokensSaved` alongside the `hits` that earned
+  it, never one without the other). `store_memory` derives `filePaths`/`symbols` by default from
+  whatever the session already read, wrote, or patched when the caller doesn't pass them —
+  flagged as auto-derived in the response, correctable, but no longer opt-in.
 - **A memory that maintains itself** — `brain_upkeep` revalidates the most-reused memories,
   surfaces exact duplicates and merge candidates, dead weight, and savings in one read-only
   pass, each finding with its fix. `brain_merge` folds near-duplicate fragments into one
@@ -70,8 +79,11 @@ lemma start     # gateway + dashboard on http://localhost:8081
   corpus AES-256-GCM encrypted under a local 0600 key; secrets never reach disk at all —
   scrub-on-store redacts credentials one-way before indexing or persisting.
 - **Verifiable caching, not marketing numbers** — `state_hash_cache` only hits when the files an
-  answer depends on are byte-identical; `token_receipt` gives a real per-session breakdown of how
-  each answer was produced instead of an invented "% saved."
+  answer depends on are byte-identical, and reading a file it already tracks an answer for
+  surfaces that proactively, the same way a Brain memory does. A `smarter_cache` hit on a memory
+  whose evidence changed comes back `stale:true`/`tokensSaved:0` with a warning instead of
+  looking like a clean hit. `token_receipt` gives a real per-session breakdown of how each answer
+  was produced instead of an invented "% saved."
 - **Privacy Firewall** — API keys, credentials, and PII are scrubbed automatically from every file
   read and workspace search, before anything leaves your machine.
 - **Zero-token static intelligence** — dependency graphs, entropy/coupling/risk scores, and an AST

package/dist/cjs/cli/lemma-proxy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lemma-proxy.d.ts","sourceRoot":"","sources":["../../../src/cli/lemma-proxy.ts"],"names":[],"mappings":";AA0cA,wBAAgB,+BAA+B,CAAC,OAAO,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CA4DvF;AAqfD,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAE1C,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAGtD;AAyqDD,wBAAsB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA8KhL"}
+{"version":3,"file":"lemma-proxy.d.ts","sourceRoot":"","sources":["../../../src/cli/lemma-proxy.ts"],"names":[],"mappings":";AA0cA,wBAAgB,+BAA+B,CAAC,OAAO,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CA4DvF;AAqfD,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAE1C,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAGtD;AAsrDD,wBAAsB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA8KhL"}

package/dist/cjs/cli/lemma-proxy.js

@@ -1566,16 +1566,28 @@ class LemmaServer {
             // Cost Record Endpoint — the counterpart to /api/savings-record. Without it the
             // ledger only ever counts wins, which makes its totals unfalsifiable.
             this.app.post('/api/cost-record', (req, res) => {
-                const { source, tokens, chars } = req.body || {};
+                // AN-01: attribution rides in the same body — tool/host/origin are what turn
+                // the toolResult bucket from an inscrutable total into auditable accounting.
+                // Unknown/unset stays "unknown": unattributed events are labeled, never re-homed.
+                const { source, tokens, chars, toolName, tool, host, origin } = req.body || {};
                 const validSources = ['mcpInstructions', 'toolResult', 'cacheMiss'];
                 if (!source || !validSources.includes(source)) {
                     return res.status(400).json({ error: 'Invalid cost source' });
                 }
+                const attribution = typeof toolName === 'string' || typeof tool === 'string' ||
+                    typeof host === 'string' || typeof origin === 'string'
+                    ? {
+                        ...(typeof toolName === 'string' && toolName ? { tool: toolName.slice(0, 128) } : {}),
+                        ...(typeof tool === 'string' && tool ? { tool: tool.slice(0, 128) } : {}),
+                        ...(typeof host === 'string' && host ? { host } : {}),
+                        ...(typeof origin === 'string' && origin ? { origin } : {}),
+                    }
+                    : undefined;
                 if (typeof tokens === 'number' && tokens > 0) {
-                    SavingsLedger_1.savingsLedger.recordCost(source, tokens);
+                    SavingsLedger_1.savingsLedger.recordCost(source, tokens, attribution);
                 }
                 else if (typeof chars === 'number' && chars > 0) {
-                    SavingsLedger_1.savingsLedger.recordCostChars(source, chars);
+                    SavingsLedger_1.savingsLedger.recordCostChars(source, chars, attribution);
                 }
                 const snap = SavingsLedger_1.savingsLedger.getSnapshot();
                 res.json({ ok: true, totalCost: snap.totalCost, net: snap.net });