@rohankumar4179/engram-sdk 0.0.0-stage → 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Rohan
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,22 @@
-# Temporary Holding Version
+# @rohankumar4179/engram-sdk
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Git for agent memory: episodes → beliefs (LLM), signed commits on Walrus Memory anchored on Sui,
+decision receipts with Merkle proofs, `verify`, and provable `forget`.
+
+```ts
+import { engram } from "@rohankumar4179/engram-sdk";
+
+const mind = engram({ agent: "money-ops" });          // keys from .env (Walrus Memory, Tatum, Gemini)
+const agent = mind.wrap(myAgent, { used: (out) => out.beliefIds });
+
+mind.observe({ source: "tatum", data: tx });          // encrypted episode
+await mind.sleep();                                   // episodes → beliefs
+await mind.commit("weekly");                          // Merkle root → Walrus → Sui
+await mind.beliefs({ about: "rent" });
+mind.at("2026-10-25");                                // time travel
+mind.forget("ep_…");                                  // provable forgetting
+await mind.verify(agent.lastReceipt!.id);             // proof check
+```
+
+Audit bundles: `exportAudit(mind.core)` / `verifyAudit(bundle, { anchorer })`.
+Full docs: https://github.com/rohan911438/Engram

package/dist/anchor.d.ts

@@ -0,0 +1,101 @@
+import { SuiGrpcClient } from "@mysten/sui/grpc";
+import { type TatumSui } from "./tatum.js";
+import type { Anchor, Commit } from "./types.js";
+export interface AnchorCheck {
+    ok: boolean;
+    detail: string;
+    timestampMs?: number;
+}
+/** Finds and re-checks the on-chain record of a stored manifest. */
+export interface Anchorer {
+    /** Locates the Sui record for a Walrus blob. Null if it isn't visible yet. */
+    find(blobId: string): Promise<Anchor | null>;
+    /** Independently re-reads the chain to confirm an anchor. */
+    check(anchor: Anchor, blobId: string, commit: Commit): Promise<AnchorCheck>;
+    /** Anchorers that write to chain themselves (option B) implement this instead of relying on `find`. */
+    publish?(commit: Commit): Promise<Anchor | null>;
+}
+/**
+ * Option A anchoring: every Walrus Memory write registers a Walrus `Blob`
+ * object on Sui, owned by the account owner. The commit manifest's blob is
+ * that anchor — its certifying transaction fixes the time on-chain.
+ * All reads go through Tatum's Sui RPC.
+ */
+export declare class WalrusBlobAnchorer implements Anchorer {
+    readonly tatum: TatumSui;
+    private memwalAccountId;
+    private opts;
+    private owner?;
+    constructor(tatum: TatumSui, memwalAccountId: string, opts?: {
+        retries?: number;
+        delayMs?: number;
+    });
+    ownerAddress(): Promise<string>;
+    find(blobId: string): Promise<Anchor | null>;
+    check(anchor: Anchor, blobId: string, commit: Commit): Promise<AnchorCheck>;
+}
+/** Offline anchorer for tests: pretends every blob is on-chain. */
+export declare class FakeAnchorer implements Anchorer {
+    readonly anchored: Map<string, Anchor>;
+    find(blobId: string): Promise<Anchor | null>;
+    check(anchor: Anchor, blobId: string): Promise<AnchorCheck>;
+}
+export type SuiNetwork = "mainnet" | "testnet";
+export interface MoveAnchorerOptions {
+    /** Published `engram_anchor` package ID. */
+    packageId: string;
+    /** Wallet that pays gas (BIP-39 phrase). */
+    mnemonic: string;
+    /** Default mainnet. Mainnet sends and re-reads through Tatum (gRPC); testnet uses the public Sui gRPC node. */
+    network?: SuiNetwork;
+    /** Required on mainnet. */
+    tatum?: TatumSui;
+    tatumApiKey?: string;
+    /** Checks older commits that were anchored as Walrus Blobs. */
+    blobAnchorer?: Anchorer;
+}
+/** The fields of one `Anchored` event, hex-encoded. */
+interface AnchoredRead {
+    checkpoint?: string;
+    timestampMs?: number;
+    event?: {
+        commitId: string;
+        merkleRoot: string;
+        agentPubKey: string;
+    };
+}
+/** Reads the `Anchored` event of a transaction from some Sui endpoint. */
+export interface AnchoredEventReader {
+    readAnchored(digest: string, eventType: string): Promise<AnchoredRead>;
+}
+export declare function suiGrpc(network: SuiNetwork): SuiGrpcClient;
+/** Reads anchors over gRPC: a public Sui full node by network name, or any client (e.g. Tatum's). */
+export declare class GrpcEventReader implements AnchoredEventReader {
+    private client;
+    constructor(source: SuiNetwork | SuiGrpcClient);
+    readAnchored(digest: string, eventType: string): Promise<AnchoredRead>;
+}
+/** Reads anchors through Tatum's Sui Mainnet gRPC gateway. */
+export declare function tatumEventReader(tatum: TatumSui): AnchoredEventReader;
+/**
+ * Option B anchoring: each commit calls `engram_anchor::anchor::anchor`, which
+ * emits an `Anchored` event with the commit ID and Merkle root in the clear.
+ * Mainnet transactions are sent and re-read through Tatum's Sui gRPC gateway.
+ */
+export declare class MoveAnchorer implements Anchorer {
+    private opts;
+    private keypair;
+    readonly network: SuiNetwork;
+    private reader;
+    constructor(opts: MoveAnchorerOptions);
+    get address(): string;
+    get eventType(): string;
+    private buildTx;
+    private send;
+    publish(c: Commit): Promise<Anchor | null>;
+    find(): Promise<Anchor | null>;
+    check(anchor: Anchor, blobId: string, c: Commit): Promise<AnchorCheck>;
+}
+/** Re-reads an `Anchored` event and compares it with the commit. Accepts a Tatum client (mainnet) or any reader. */
+export declare function checkMoveAnchor(source: TatumSui | AnchoredEventReader, anchor: Anchor, c: Commit): Promise<AnchorCheck>;
+export {};

package/dist/anchor.js

@@ -0,0 +1,215 @@
+import { Transaction } from "@mysten/sui/transactions";
+import { Ed25519Keypair } from "@mysten/sui/keypairs/ed25519";
+import { SuiGrpcClient } from "@mysten/sui/grpc";
+import { bcs } from "@mysten/sui/bcs";
+import { hexToBytes } from "./crypto.js";
+import { blobIdFromU256 } from "./tatum.js";
+/**
+ * Option A anchoring: every Walrus Memory write registers a Walrus `Blob`
+ * object on Sui, owned by the account owner. The commit manifest's blob is
+ * that anchor — its certifying transaction fixes the time on-chain.
+ * All reads go through Tatum's Sui RPC.
+ */
+export class WalrusBlobAnchorer {
+    tatum;
+    memwalAccountId;
+    opts;
+    owner;
+    constructor(tatum, memwalAccountId, opts = {}) {
+        this.tatum = tatum;
+        this.memwalAccountId = memwalAccountId;
+        this.opts = opts;
+    }
+    async ownerAddress() {
+        this.owner ??= await this.tatum.memwalAccountOwner(this.memwalAccountId);
+        return this.owner;
+    }
+    async find(blobId) {
+        const owner = await this.ownerAddress();
+        const retries = this.opts.retries ?? 4;
+        for (let attempt = 0; attempt <= retries; attempt++) {
+            for await (const b of this.tatum.ownedBlobs(owner)) {
+                if (b.blobId !== blobId)
+                    continue;
+                const tx = await this.tatum.getTransaction(b.previousTransaction);
+                return { method: "walrus-blob", objectId: b.objectId, txDigest: tx.digest, checkpoint: tx.checkpoint, timestampMs: tx.timestampMs };
+            }
+            if (attempt < retries)
+                await new Promise((r) => setTimeout(r, this.opts.delayMs ?? 4000));
+        }
+        return null;
+    }
+    async check(anchor, blobId, commit) {
+        if (anchor.method === "move-event")
+            return checkMoveAnchor(anchor.network === "testnet" ? new GrpcEventReader("testnet") : this.tatum, anchor, commit);
+        const obj = await this.tatum.getObject(anchor.objectId);
+        if (!obj)
+            return { ok: false, detail: `Sui object ${anchor.objectId} not found` };
+        const fields = obj.content?.fields;
+        if (!obj.type?.endsWith("::blob::Blob") || !fields?.blob_id)
+            return { ok: false, detail: `object is not a Walrus Blob (${obj.type})` };
+        if (blobIdFromU256(fields.blob_id) !== blobId)
+            return { ok: false, detail: "on-chain blob_id does not match the manifest blob" };
+        if (fields.certified_epoch == null)
+            return { ok: false, detail: "blob is registered but not certified" };
+        const owner = obj.owner?.AddressOwner;
+        if (owner && owner !== (await this.ownerAddress()))
+            return { ok: false, detail: `blob owned by ${owner}, not the Walrus Memory account owner` };
+        const tx = await this.tatum.getTransaction(anchor.txDigest);
+        if (!tx.checkpoint)
+            return { ok: false, detail: `transaction ${anchor.txDigest} not found` };
+        if (anchor.checkpoint && tx.checkpoint !== anchor.checkpoint)
+            return { ok: false, detail: `checkpoint mismatch (${tx.checkpoint} vs ${anchor.checkpoint})` };
+        return { ok: true, detail: `Walrus Blob ${short(anchor.objectId)} certified, tx ${short(tx.digest)} in checkpoint ${tx.checkpoint}`, timestampMs: tx.timestampMs };
+    }
+}
+const short = (s) => (s.length > 14 ? `${s.slice(0, 8)}…${s.slice(-4)}` : s);
+/** Offline anchorer for tests: pretends every blob is on-chain. */
+export class FakeAnchorer {
+    anchored = new Map();
+    async find(blobId) {
+        let a = this.anchored.get(blobId);
+        if (!a) {
+            a = { method: "walrus-blob", objectId: `0xobj_${blobId.slice(0, 8)}`, txDigest: `tx_${blobId.slice(0, 8)}`, checkpoint: String(this.anchored.size + 1), timestampMs: Date.now() };
+            this.anchored.set(blobId, a);
+        }
+        return a;
+    }
+    async check(anchor, blobId) {
+        const a = this.anchored.get(blobId);
+        return a && a.txDigest === anchor.txDigest && a.objectId === anchor.objectId
+            ? { ok: true, detail: `fake anchor ${a.txDigest}`, timestampMs: a.timestampMs }
+            : { ok: false, detail: "no such anchor" };
+    }
+}
+const AnchoredBcs = bcs.struct("Anchored", {
+    sender: bcs.Address,
+    agent_pubkey: bcs.vector(bcs.u8()),
+    commit_id: bcs.vector(bcs.u8()),
+    merkle_root: bcs.vector(bcs.u8()),
+    parent: bcs.vector(bcs.u8()),
+    manifest_blob: bcs.vector(bcs.u8()),
+    timestamp_ms: bcs.u64(),
+});
+const toHex = (b) => Buffer.from([...b]).toString("hex");
+const grpcClients = new Map();
+export function suiGrpc(network) {
+    let c = grpcClients.get(network);
+    if (!c)
+        grpcClients.set(network, (c = new SuiGrpcClient({ network, baseUrl: `https://fullnode.${network}.sui.io:443` })));
+    return c;
+}
+/** Reads anchors over gRPC: a public Sui full node by network name, or any client (e.g. Tatum's). */
+export class GrpcEventReader {
+    client;
+    constructor(source) {
+        this.client = typeof source === "string" ? suiGrpc(source) : source;
+    }
+    async readAnchored(digest, eventType) {
+        const res = await this.client.getTransaction({ digest, include: { events: true } });
+        const t = res.Transaction ?? res.FailedTransaction;
+        const ev = t?.events?.find((e) => e.eventType === eventType);
+        const out = { checkpoint: t?.checkpoint ?? undefined, timestampMs: t?.timestampMs ?? undefined };
+        if (ev && res.$kind === "Transaction") {
+            const p = AnchoredBcs.parse(ev.bcs);
+            out.event = { commitId: toHex(p.commit_id), merkleRoot: toHex(p.merkle_root), agentPubKey: toHex(p.agent_pubkey) };
+        }
+        return out;
+    }
+}
+/** Reads anchors through Tatum's Sui Mainnet gRPC gateway. */
+export function tatumEventReader(tatum) {
+    return new GrpcEventReader(tatum.client);
+}
+/**
+ * Option B anchoring: each commit calls `engram_anchor::anchor::anchor`, which
+ * emits an `Anchored` event with the commit ID and Merkle root in the clear.
+ * Mainnet transactions are sent and re-read through Tatum's Sui gRPC gateway.
+ */
+export class MoveAnchorer {
+    opts;
+    keypair;
+    network;
+    reader;
+    constructor(opts) {
+        this.opts = opts;
+        this.keypair = Ed25519Keypair.deriveKeypair(opts.mnemonic.trim());
+        this.network = opts.network ?? "mainnet";
+        if (this.network === "mainnet" && !opts.tatum)
+            throw new Error("mainnet anchoring needs a Tatum API key");
+        this.reader = this.network === "mainnet" ? tatumEventReader(opts.tatum) : new GrpcEventReader(this.network);
+    }
+    get address() {
+        return this.keypair.toSuiAddress();
+    }
+    get eventType() {
+        return `${this.opts.packageId}::anchor::Anchored`;
+    }
+    buildTx(c) {
+        const tx = new Transaction();
+        tx.moveCall({
+            target: `${this.opts.packageId}::anchor::anchor`,
+            arguments: [
+                tx.pure.vector("u8", hexToBytes(c.manifest.agentPubKey)),
+                tx.pure.vector("u8", hexToBytes(c.id)),
+                tx.pure.vector("u8", hexToBytes(c.manifest.merkleRoot)),
+                tx.pure.vector("u8", c.manifest.parent ? hexToBytes(c.manifest.parent) : new Uint8Array()),
+                tx.pure.vector("u8", new TextEncoder().encode(c.manifestBlobId ?? "")),
+                tx.object.clock(),
+            ],
+        });
+        return tx;
+    }
+    async send(c) {
+        const client = this.network === "mainnet" ? this.opts.tatum.client : suiGrpc(this.network);
+        const res = await client.signAndExecuteTransaction({ transaction: this.buildTx(c), signer: this.keypair });
+        if (res.$kind !== "Transaction")
+            throw new Error(`anchor transaction failed: ${JSON.stringify(res.FailedTransaction?.status)}`);
+        await client.waitForTransaction({ digest: res.Transaction.digest });
+        return res.Transaction.digest;
+    }
+    async publish(c) {
+        const digest = await this.send(c);
+        // The checkpoint can lag execution by a moment; retry briefly.
+        let t = {};
+        for (let i = 0; i < 6 && !t.checkpoint; i++) {
+            t = await this.reader.readAnchored(digest, this.eventType);
+            if (!t.checkpoint)
+                await new Promise((r) => setTimeout(r, 1500));
+        }
+        const anchor = { method: "move-event", objectId: this.opts.packageId, txDigest: digest, checkpoint: t.checkpoint, timestampMs: t.timestampMs };
+        if (this.network !== "mainnet")
+            anchor.network = this.network;
+        return anchor;
+    }
+    async find() {
+        return null; // option B anchors are published, not discovered
+    }
+    async check(anchor, blobId, c) {
+        if (anchor.method === "walrus-blob") {
+            return this.opts.blobAnchorer ? this.opts.blobAnchorer.check(anchor, blobId, c) : { ok: false, detail: "Walrus Blob anchor but no Walrus Memory account configured" };
+        }
+        const net = anchor.network ?? "mainnet";
+        if (net === this.network)
+            return checkMoveAnchor(this.reader, anchor, c);
+        if (net === "mainnet" && !this.opts.tatum)
+            return { ok: false, detail: "mainnet anchor but no Tatum key configured" };
+        return checkMoveAnchor(net === "mainnet" ? this.opts.tatum : new GrpcEventReader(net), anchor, c);
+    }
+}
+/** Re-reads an `Anchored` event and compares it with the commit. Accepts a Tatum client (mainnet) or any reader. */
+export async function checkMoveAnchor(source, anchor, c) {
+    const reader = "readAnchored" in source ? source : tatumEventReader(source);
+    const r = await reader.readAnchored(anchor.txDigest, `${anchor.objectId}::anchor::Anchored`);
+    const net = anchor.network && anchor.network !== "mainnet" ? ` (${anchor.network})` : "";
+    if (!r.event)
+        return { ok: false, detail: `no Anchored event in tx ${anchor.txDigest}${net}` };
+    if (r.event.commitId !== c.id)
+        return { ok: false, detail: "event commit_id differs from this commit" };
+    if (r.event.merkleRoot !== c.manifest.merkleRoot)
+        return { ok: false, detail: "event merkle_root differs from this commit" };
+    if (r.event.agentPubKey !== c.manifest.agentPubKey)
+        return { ok: false, detail: "event names a different agent key" };
+    return { ok: true, detail: `Anchored event: root ${c.manifest.merkleRoot.slice(0, 10)}… public in checkpoint ${r.checkpoint}${net}`, timestampMs: r.timestampMs };
+}
+//# sourceMappingURL=anchor.js.map

package/dist/anchor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"anchor.js","sourceRoot":"","sources":["../src/anchor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,cAAc,EAAiB,MAAM,YAAY,CAAC;AAmB3D;;;;;GAKG;AACH,MAAM,OAAO,kBAAkB;IAIlB;IACD;IACA;IALF,KAAK,CAAU;IAEvB,YACW,KAAe,EAChB,eAAuB,EACvB,OAA+C,EAAE;QAFhD,UAAK,GAAL,KAAK,CAAU;QAChB,oBAAe,GAAf,eAAe,CAAQ;QACvB,SAAI,GAAJ,IAAI,CAA6C;IACxD,CAAC;IAEJ,KAAK,CAAC,YAAY;QAChB,IAAI,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACzE,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAc;QACvB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;QACvC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC;YACpD,IAAI,KAAK,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;gBACnD,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM;oBAAE,SAAS;gBAClC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;gBAClE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC,UAAU,EAAE,WAAW,EAAE,EAAE,CAAC,WAAW,EAAE,CAAC;YACtI,CAAC;YACD,IAAI,OAAO,GAAG,OAAO;gBAAE,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC;QAC5F,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,MAAc,EAAE,MAAc,EAAE,MAAc;QACxD,IAAI,MAAM,CAAC,MAAM,KAAK,YAAY;YAAE,OAAO,eAAe,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QACvJ,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACxD,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,MAAM,CAAC,QAAQ,YAAY,EAAE,CAAC;QAClF,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,EAAE,MAA2E,CAAC;QACxG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gCAAgC,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC;QACvI,IAAI,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mDAAmD,EAAE,CAAC;QACjI,IAAI,MAAM,CAAC,eAAe,IAAI,IAAI;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAC;QACzG,MAAM,KAAK,GAAI,GAAG,CAAC,KAA+C,EAAE,YAAY,CAAC;QACjF,IAAI,KAAK,IAAI,KAAK,KAAK,CAAC,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,KAAK,uCAAuC,EAAE,CAAC;QAChJ,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC5D,IAAI,CAAC,EAAE,CAAC,UAAU;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,MAAM,CAAC,QAAQ,YAAY,EAAE,CAAC;QAC7F,IAAI,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC,UAAU,OAAO,MAAM,CAAC,UAAU,GAAG,EAAE,CAAC;QAC7J,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC,UAAU,EAAE,EAAE,WAAW,EAAE,EAAE,CAAC,WAAW,EAAE,CAAC;IACrK,CAAC;CACF;AAED,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAErF,mEAAmE;AACnE,MAAM,OAAO,YAAY;IACd,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC9C,KAAK,CAAC,IAAI,CAAC,MAAc;QACvB,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAClC,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,SAAS,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAClL,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC/B,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,MAAc,EAAE,MAAc;QACxC,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;YAC1E,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE;YAC/E,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC9C,CAAC;CACF;AAiCD,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE;IACzC,MAAM,EAAE,GAAG,CAAC,OAAO;IACnB,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAClC,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAC/B,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IACjC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAC5B,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IACnC,YAAY,EAAE,GAAG,CAAC,GAAG,EAAE;CACxB,CAAC,CAAC;AACH,MAAM,KAAK,GAAG,CAAC,CAAmB,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAE3E,MAAM,WAAW,GAAG,IAAI,GAAG,EAA6B,CAAC;AACzD,MAAM,UAAU,OAAO,CAAC,OAAmB;IACzC,IAAI,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,CAAC,CAAC;QAAE,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,IAAI,aAAa,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,oBAAoB,OAAO,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1H,OAAO,CAAC,CAAC;AACX,CAAC;AAED,qGAAqG;AACrG,MAAM,OAAO,eAAe;IAClB,MAAM,CAAgB;IAC9B,YAAY,MAAkC;QAC5C,IAAI,CAAC,MAAM,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACtE,CAAC;IACD,KAAK,CAAC,YAAY,CAAC,MAAc,EAAE,SAAiB;QAClD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACpF,MAAM,CAAC,GAAG,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,iBAAiB,CAAC;QACnD,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;QAC7D,MAAM,GAAG,GAAiB,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,IAAI,SAAS,EAAE,WAAW,EAAE,CAAC,EAAE,WAAW,IAAI,SAAS,EAAE,CAAC;QAC/G,IAAI,EAAE,IAAI,GAAG,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;YACtC,MAAM,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;YACpC,GAAG,CAAC,KAAK,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC;QACrH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;CACF;AAED,8DAA8D;AAC9D,MAAM,UAAU,gBAAgB,CAAC,KAAe;IAC9C,OAAO,IAAI,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAC3C,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,YAAY;IAKH;IAJZ,OAAO,CAAiB;IACvB,OAAO,CAAa;IACrB,MAAM,CAAsB;IAEpC,YAAoB,IAAyB;QAAzB,SAAI,GAAJ,IAAI,CAAqB;QAC3C,IAAI,CAAC,OAAO,GAAG,cAAc,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,SAAS,CAAC;QACzC,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC1G,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAM,CAAC,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/G,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;IACrC,CAAC;IAED,IAAI,SAAS;QACX,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,oBAAoB,CAAC;IACpD,CAAC;IAEO,OAAO,CAAC,CAAS;QACvB,MAAM,EAAE,GAAG,IAAI,WAAW,EAAE,CAAC;QAC7B,EAAE,CAAC,QAAQ,CAAC;YACV,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,kBAAkB;YAChD,SAAS,EAAE;gBACT,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;gBACxD,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACtC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;gBACvD,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,EAAE,CAAC;gBAC1F,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;gBACtE,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE;aAClB;SACF,CAAC,CAAC;QACH,OAAO,EAAE,CAAC;IACZ,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,CAAS;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAM,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5F,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3G,IAAI,GAAG,CAAC,KAAK,KAAK,aAAa;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAChI,MAAM,MAAM,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;QACpE,OAAO,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,CAAS;QACrB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClC,+DAA+D;QAC/D,IAAI,CAAC,GAAiB,EAAE,CAAC;QACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5C,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YAC3D,IAAI,CAAC,CAAC,CAAC,UAAU;gBAAE,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,MAAM,GAAW,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QACvJ,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;YAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC9D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,IAAI;QACR,OAAO,IAAI,CAAC,CAAC,iDAAiD;IAChE,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,MAAc,EAAE,MAAc,EAAE,CAAS;QACnD,IAAI,MAAM,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,4DAA4D,EAAE,CAAC;QACxK,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,IAAI,SAAS,CAAC;QACxC,IAAI,GAAG,KAAK,IAAI,CAAC,OAAO;YAAE,OAAO,eAAe,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QACzE,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,4CAA4C,EAAE,CAAC;QACtH,OAAO,eAAe,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAM,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IACrG,CAAC;CACF;AAED,oHAAoH;AACpH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAsC,EAAE,MAAc,EAAE,CAAS;IACrG,MAAM,MAAM,GAAG,cAAc,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAC5E,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,MAAM,CAAC,QAAQ,oBAAoB,CAAC,CAAC;IAC7F,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACzF,IAAI,CAAC,CAAC,CAAC,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,MAAM,CAAC,QAAQ,GAAG,GAAG,EAAE,EAAE,CAAC;IAC/F,IAAI,CAAC,CAAC,KAAK,CAAC,QAAQ,KAAK,CAAC,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,0CAA0C,EAAE,CAAC;IACxG,IAAI,CAAC,CAAC,KAAK,CAAC,UAAU,KAAK,CAAC,CAAC,QAAQ,CAAC,UAAU;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,4CAA4C,EAAE,CAAC;IAC7H,IAAI,CAAC,CAAC,KAAK,CAAC,WAAW,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC;IACtH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,wBAAwB,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,0BAA0B,CAAC,CAAC,UAAU,GAAG,GAAG,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AACpK,CAAC"}

package/dist/audit.d.ts

@@ -0,0 +1,48 @@
+import type { Anchorer } from "./anchor.js";
+import { type Engram } from "./engram.js";
+import type { Belief, Commit, Receipt } from "./types.js";
+/**
+ * A self-contained audit file: the agent's commit history, every belief
+ * version those commits reference, and its decision receipts. Anyone can
+ * re-check it without the agent's repo (`verifyAudit`). Raw episodes are not
+ * included — they stay encrypted; beliefs cite them by ID and Walrus blob.
+ */
+export interface AuditBundle {
+    engram: "audit";
+    v: 1;
+    agent: string;
+    agentPubKey: string;
+    exportedAt: number;
+    head: string | null;
+    /** Newest first, back to the first commit. */
+    commits: Commit[];
+    beliefs: Belief[];
+    receipts: Receipt[];
+}
+export declare function exportAudit(e: Engram, opts?: {
+    receipts?: boolean;
+}): AuditBundle;
+export interface AuditCheck {
+    subject: string;
+    ok: boolean;
+    detail: string;
+    skipped?: boolean;
+}
+export interface AuditReport {
+    ok: boolean;
+    checks: AuditCheck[];
+    summary: {
+        commits: number;
+        receipts: number;
+        anchored: number;
+    };
+}
+/**
+ * Re-checks an audit bundle from scratch: each commit's ID, signature,
+ * Merkle root (rebuilt from the included beliefs) and parent link; each
+ * receipt's signature and Merkle proofs. With an `anchorer`, also re-reads
+ * every commit's anchor on Sui.
+ */
+export declare function verifyAudit(bundle: AuditBundle, opts?: {
+    anchorer?: Anchorer;
+}): Promise<AuditReport>;

package/dist/audit.js

@@ -0,0 +1,93 @@
+import { canonical, verifySignature } from "./crypto.js";
+import { beliefKey } from "./engram.js";
+import { buildCommitTree, commitId, verifyBeliefProof, verifyManifestSignature } from "./proof.js";
+export function exportAudit(e, opts = {}) {
+    const head = e.head();
+    const commits = head ? e.log() : [];
+    const keys = new Set(commits.flatMap((c) => c.manifest.beliefs));
+    const beliefs = [...keys].map((k) => e.belief(k)).filter((b) => !!b);
+    return {
+        engram: "audit",
+        v: 1,
+        agent: e.agent,
+        agentPubKey: e.publicKey,
+        exportedAt: Date.now(),
+        head,
+        commits,
+        beliefs,
+        receipts: opts.receipts === false ? [] : e.receipts().filter((r) => commits.some((c) => c.id === r.commitId)),
+    };
+}
+/**
+ * Re-checks an audit bundle from scratch: each commit's ID, signature,
+ * Merkle root (rebuilt from the included beliefs) and parent link; each
+ * receipt's signature and Merkle proofs. With an `anchorer`, also re-reads
+ * every commit's anchor on Sui.
+ */
+export async function verifyAudit(bundle, opts = {}) {
+    const checks = [];
+    const add = (subject, ok, detail, skipped = false) => checks.push({ subject, ok, detail, skipped });
+    if (bundle.engram !== "audit" || bundle.v !== 1)
+        throw new Error("not an Engram audit bundle (v1)");
+    const beliefs = new Map(bundle.beliefs.map((b) => [beliefKey(b), b]));
+    const commits = new Map(bundle.commits.map((c) => [c.id, c]));
+    let anchored = 0;
+    for (const c of bundle.commits) {
+        const m = c.manifest;
+        const s = `commit ${c.id.slice(0, 8)}`;
+        const problems = [];
+        if (commitId(m) !== c.id)
+            problems.push("ID is not the hash of its manifest");
+        if (m.agentPubKey !== bundle.agentPubKey)
+            problems.push("signed by a different agent key");
+        if (!verifyManifestSignature(m, c.signature))
+            problems.push("bad signature");
+        const missing = m.beliefs.filter((k) => !beliefs.has(k));
+        if (missing.length)
+            problems.push(`missing beliefs ${missing.join(", ")}`);
+        else if (buildCommitTree(m.beliefs.map((k) => beliefs.get(k)), m.tombstones).tree.root !== m.merkleRoot)
+            problems.push("beliefs don't rebuild the Merkle root");
+        if (m.parent && !commits.has(m.parent))
+            problems.push(`parent ${m.parent.slice(0, 8)} not in the bundle`);
+        else if (m.parent && commits.get(m.parent).manifest.ts > m.ts)
+            problems.push("parent is newer than the commit");
+        add(s, problems.length === 0, problems.length ? problems.join("; ") : `signed, ${m.beliefs.length} beliefs + ${m.tombstones.length} tombstones → root ${m.merkleRoot.slice(0, 10)}…`);
+        if (!opts.anchorer)
+            continue;
+        if (!c.anchor || !c.manifestBlobId) {
+            add(`${s} anchor`, false, "no Sui anchor");
+            continue;
+        }
+        try {
+            const r = await opts.anchorer.check(c.anchor, c.manifestBlobId, c);
+            if (r.ok)
+                anchored++;
+            add(`${s} anchor`, r.ok, r.detail);
+        }
+        catch (err) {
+            add(`${s} anchor`, true, `could not reach Sui: ${err.message}`, true);
+        }
+    }
+    if (bundle.head && bundle.commits[0]?.id !== bundle.head)
+        add("head", false, "the newest commit is not the bundle's head");
+    for (const r of bundle.receipts) {
+        const s = `receipt ${r.id}`;
+        const { signature, blobId: _b, ...body } = r;
+        const c = commits.get(r.commitId);
+        const problems = [];
+        if (r.agentPubKey !== bundle.agentPubKey || !verifySignature(canonical(body), signature, r.agentPubKey))
+            problems.push("bad signature");
+        if (!c)
+            problems.push(`points at commit ${r.commitId.slice(0, 8)}, not in the bundle`);
+        else {
+            const bad = r.beliefs.filter((k) => !beliefs.has(k) || !r.proofs[k] || !verifyBeliefProof(beliefs.get(k), r.proofs[k], c.manifest.merkleRoot));
+            if (bad.length)
+                problems.push(`invalid proof for ${bad.join(", ")}`);
+            if (r.ts < c.manifest.ts)
+                problems.push("decided before its commit existed");
+        }
+        add(s, problems.length === 0, problems.length ? problems.join("; ") : `"${r.action.slice(0, 60)}" — ${r.beliefs.length} belief(s) proven in ${r.commitId.slice(0, 8)}`);
+    }
+    return { ok: checks.every((x) => x.ok), checks, summary: { commits: bundle.commits.length, receipts: bundle.receipts.length, anchored } };
+}
+//# sourceMappingURL=audit.js.map

package/dist/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../src/audit.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,SAAS,EAAe,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAsBnG,MAAM,UAAU,WAAW,CAAC,CAAS,EAAE,OAA+B,EAAE;IACtE,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACtB,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClF,OAAO;QACL,MAAM,EAAE,OAAO;QACf,CAAC,EAAE,CAAC;QACJ,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,WAAW,EAAE,CAAC,CAAC,SAAS;QACxB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;QACtB,IAAI;QACJ,OAAO;QACP,OAAO;QACP,QAAQ,EAAE,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC;KAC9G,CAAC;AACJ,CAAC;AAeD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAmB,EAAE,OAAgC,EAAE;IACvF,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,MAAM,GAAG,GAAG,CAAC,OAAe,EAAE,EAAW,EAAE,MAAc,EAAE,OAAO,GAAG,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IAC7H,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAEpG,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9D,IAAI,QAAQ,GAAG,CAAC,CAAC;IAEjB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;QACrB,MAAM,CAAC,GAAG,UAAU,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE;YAAE,QAAQ,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;QAC9E,IAAI,CAAC,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW;YAAE,QAAQ,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QAC3F,IAAI,CAAC,uBAAuB,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC7E,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACzD,IAAI,OAAO,CAAC,MAAM;YAAE,QAAQ,CAAC,IAAI,CAAC,mBAAmB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;aACtE,IAAI,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,UAAU;YAAE,QAAQ,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;QACjK,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,oBAAoB,CAAC,CAAC;aACrG,IAAI,CAAC,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAE,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE;YAAE,QAAQ,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QACjH,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,MAAM,cAAc,CAAC,CAAC,UAAU,CAAC,MAAM,sBAAsB,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;QAEtL,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,SAAS;QAC7B,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC;YACnC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC;YAC3C,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;YACnE,IAAI,CAAC,CAAC,EAAE;gBAAE,QAAQ,EAAE,CAAC;YACrB,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,wBAAyB,GAAa,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,MAAM,CAAC,IAAI;QAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,4CAA4C,CAAC,CAAC;IAE3H,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,EAAE,EAAE,CAAC;QAC5B,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC;QAC7C,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAClC,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,IAAI,CAAC,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,WAAW,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACxI,IAAI,CAAC,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,qBAAqB,CAAC,CAAC;aAClF,CAAC;YACJ,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;YACjJ,IAAI,GAAG,CAAC,MAAM;gBAAE,QAAQ,CAAC,IAAI,CAAC,qBAAqB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACrE,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,EAAE;gBAAE,QAAQ,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;QAC/E,CAAC;QACD,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,MAAM,wBAAwB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1K,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC;AAC5I,CAAC"}

package/dist/consolidator.d.ts

@@ -0,0 +1,62 @@
+import type { LLM } from "./llm.js";
+import type { Belief, EpisodeContent } from "./types.js";
+/** One change the consolidator wants to make to the belief set. */
+export type BeliefOp = {
+    op: "create";
+    key: string;
+    statement: string;
+    confidence: number;
+    evidence: string[];
+    tags: string[];
+    reason: string;
+} | {
+    op: "revise";
+    belief: string;
+    statement: string;
+    confidence: number;
+    evidence: string[];
+    tags?: string[];
+    reason: string;
+} | {
+    op: "retract";
+    belief: string;
+    reason: string;
+};
+export interface ConsolidationInput {
+    episodes: {
+        id: string;
+        content: EpisodeContent;
+        summary?: string;
+    }[];
+    beliefs: Belief[];
+    /** Optional domain hint, e.g. "You manage a crypto wallet for one owner." */
+    context?: string;
+}
+interface RawOp {
+    op?: string;
+    key?: string;
+    belief?: string;
+    statement?: string;
+    confidence?: number;
+    evidence?: string[];
+    tags?: string[];
+    reason?: string;
+}
+export declare function buildPrompt(input: ConsolidationInput): string;
+/** Asks the LLM for belief changes and drops anything malformed or ungrounded. */
+export declare function proposeOps(llm: LLM, input: ConsolidationInput): Promise<{
+    ops: BeliefOp[];
+    rejected: {
+        op: unknown;
+        why: string;
+    }[];
+}>;
+export declare function validateOps(rawOps: RawOp[], input: ConsolidationInput): {
+    ops: BeliefOp[];
+    rejected: {
+        op: unknown;
+        why: string;
+    }[];
+};
+export declare function slug(s: string): string;
+export {};