agentdb 3.0.0-alpha.19 → 3.0.0-alpha.20

package/dist/src/embedding/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/embedding/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,2BAA2B,EAC3B,iBAAiB,EACjB,8BAA8B,EAC9B,4BAA4B,EAC5B,oBAAoB,EACrB,MAAM,6BAA6B,CAAC"}

package/dist/src/governance/MetaHarnessGateway.d.ts

@@ -0,0 +1,55 @@
+export interface PromotionEvidence {
+    baseline: {
+        primary: number;
+        noopRate: number;
+        costPerWin: number;
+        regressed?: boolean;
+    };
+    candidate: {
+        primary: number;
+        noopRate: number;
+        costPerWin: number;
+        regressed?: boolean;
+    };
+    anchor?: {
+        baseline: number;
+        candidate: number;
+    };
+}
+export interface PromotionDecision {
+    promote: boolean;
+    reasons: string[];
+}
+type RuvectorMetaHarness = {
+    getMetaHarnessCapabilities(): Promise<unknown[]>;
+    evaluateMetaHarnessPromotion(evidence: PromotionEvidence): Promise<PromotionDecision>;
+    verifyMetaHarnessReplay(bundle: unknown, options?: {
+        pinnedGateFingerprint?: string;
+    }): Promise<Record<string, unknown>>;
+    scanMetaHarnessRewardHacks(trajectory: Record<string, unknown>): Promise<{
+        clean: boolean;
+        findings: unknown[];
+    }>;
+    assertMetaHarnessSafePayload(payload: unknown): Promise<void>;
+};
+type ModuleLoader = () => Promise<RuvectorMetaHarness>;
+/**
+ * Lazy governance boundary around ruvector's pinned MetaHarness integration.
+ * Candidate/Darwin execution is intentionally absent: AgentDB stores evidence
+ * and verifies promotion, but never executes research candidates over MCP.
+ */
+export declare class MetaHarnessGateway {
+    private readonly loader;
+    private pending;
+    constructor(loader?: ModuleLoader);
+    private load;
+    capabilities(): Promise<unknown[]>;
+    evaluatePromotion(evidence: PromotionEvidence): Promise<PromotionDecision>;
+    verifyReplay(bundle: unknown, pinnedGateFingerprint?: string): Promise<Record<string, unknown>>;
+    scanRewardHacks(trajectory: Record<string, unknown>): Promise<{
+        clean: boolean;
+        findings: unknown[];
+    }>;
+}
+export {};
+//# sourceMappingURL=MetaHarnessGateway.d.ts.map

package/dist/src/governance/MetaHarnessGateway.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MetaHarnessGateway.d.ts","sourceRoot":"","sources":["../../../src/governance/MetaHarnessGateway.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE;QACR,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,OAAO,CAAC;KACrB,CAAC;IACF,SAAS,EAAE;QACT,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,OAAO,CAAC;KACrB,CAAC;IACF,MAAM,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;CAClD;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,KAAK,mBAAmB,GAAG;IACzB,0BAA0B,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IACjD,4BAA4B,CAAC,QAAQ,EAAE,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACtF,uBAAuB,CACrB,MAAM,EAAE,OAAO,EACf,OAAO,CAAC,EAAE;QAAE,qBAAqB,CAAC,EAAE,MAAM,CAAA;KAAE,GAC3C,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACpC,0BAA0B,CACxB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAClC,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,OAAO,EAAE,CAAA;KAAE,CAAC,CAAC;IACpD,4BAA4B,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/D,CAAC;AAEF,KAAK,YAAY,GAAG,MAAM,OAAO,CAAC,mBAAmB,CAAC,CAAC;AAqBvD;;;;GAIG;AACH,qBAAa,kBAAkB;IAGjB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAFnC,OAAO,CAAC,OAAO,CAA6C;gBAE/B,MAAM,GAAE,YAA4B;IAEjE,OAAO,CAAC,IAAI;IAKN,YAAY,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IAIlC,iBAAiB,CAAC,QAAQ,EAAE,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAO1E,YAAY,CAChB,MAAM,EAAE,OAAO,EACf,qBAAqB,CAAC,EAAE,MAAM,GAC7B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAS7B,eAAe,CACnB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAClC,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,OAAO,EAAE,CAAA;KAAE,CAAC;CAIpD"}

package/dist/src/governance/MetaHarnessGateway.js

@@ -0,0 +1,65 @@
+const defaultLoader = async () => {
+    const loaded = await import('ruvector');
+    const required = [
+        'getMetaHarnessCapabilities',
+        'evaluateMetaHarnessPromotion',
+        'verifyMetaHarnessReplay',
+        'scanMetaHarnessRewardHacks',
+        'assertMetaHarnessSafePayload',
+    ];
+    for (const name of required) {
+        if (typeof loaded[name] !== 'function') {
+            throw new Error(`Installed ruvector does not expose ${name}; install ruvector >= 0.2.40`);
+        }
+    }
+    return loaded;
+};
+/**
+ * Lazy governance boundary around ruvector's pinned MetaHarness integration.
+ * Candidate/Darwin execution is intentionally absent: AgentDB stores evidence
+ * and verifies promotion, but never executes research candidates over MCP.
+ */
+export class MetaHarnessGateway {
+    loader;
+    pending = null;
+    constructor(loader = defaultLoader) {
+        this.loader = loader;
+    }
+    load() {
+        this.pending ??= this.loader();
+        return this.pending;
+    }
+    async capabilities() {
+        return (await this.load()).getMetaHarnessCapabilities();
+    }
+    async evaluatePromotion(evidence) {
+        validatePromotionEvidence(evidence);
+        const api = await this.load();
+        await api.assertMetaHarnessSafePayload(evidence);
+        return api.evaluateMetaHarnessPromotion(evidence);
+    }
+    async verifyReplay(bundle, pinnedGateFingerprint) {
+        const api = await this.load();
+        await api.assertMetaHarnessSafePayload(bundle);
+        return api.verifyMetaHarnessReplay(bundle, pinnedGateFingerprint ? { pinnedGateFingerprint } : {});
+    }
+    async scanRewardHacks(trajectory) {
+        const api = await this.load();
+        return api.scanMetaHarnessRewardHacks(trajectory);
+    }
+}
+function validatePromotionEvidence(evidence) {
+    for (const side of ['baseline', 'candidate']) {
+        for (const field of ['primary', 'noopRate', 'costPerWin']) {
+            if (!Number.isFinite(evidence[side][field])) {
+                throw new TypeError(`${side}.${field} must be finite`);
+            }
+        }
+    }
+    if (evidence.anchor) {
+        if (!Number.isFinite(evidence.anchor.baseline) || !Number.isFinite(evidence.anchor.candidate)) {
+            throw new TypeError('anchor values must be finite');
+        }
+    }
+}
+//# sourceMappingURL=MetaHarnessGateway.js.map

package/dist/src/governance/MetaHarnessGateway.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MetaHarnessGateway.js","sourceRoot":"","sources":["../../../src/governance/MetaHarnessGateway.ts"],"names":[],"mappings":"AAoCA,MAAM,aAAa,GAAiB,KAAK,IAAI,EAAE;IAC7C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,CAAmC,CAAC;IAC1E,MAAM,QAAQ,GAAG;QACf,4BAA4B;QAC5B,8BAA8B;QAC9B,yBAAyB;QACzB,4BAA4B;QAC5B,8BAA8B;KACtB,CAAC;IACX,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,UAAU,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CACb,sCAAsC,IAAI,8BAA8B,CACzE,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,OAAO,kBAAkB;IAGA;IAFrB,OAAO,GAAwC,IAAI,CAAC;IAE5D,YAA6B,SAAuB,aAAa;QAApC,WAAM,GAAN,MAAM,CAA8B;IAAG,CAAC;IAE7D,IAAI;QACV,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,0BAA0B,EAAE,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,QAA2B;QACjD,yBAAyB,CAAC,QAAQ,CAAC,CAAC;QACpC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,GAAG,CAAC,4BAA4B,CAAC,QAAQ,CAAC,CAAC;QACjD,OAAO,GAAG,CAAC,4BAA4B,CAAC,QAAQ,CAAC,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,MAAe,EACf,qBAA8B;QAE9B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,GAAG,CAAC,4BAA4B,CAAC,MAAM,CAAC,CAAC;QAC/C,OAAO,GAAG,CAAC,uBAAuB,CAChC,MAAM,EACN,qBAAqB,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC,EAAE,CACvD,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,UAAmC;QAEnC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9B,OAAO,GAAG,CAAC,0BAA0B,CAAC,UAAU,CAAC,CAAC;IACpD,CAAC;CACF;AAED,SAAS,yBAAyB,CAAC,QAA2B;IAC5D,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE,WAAW,CAAU,EAAE,CAAC;QACtD,KAAK,MAAM,KAAK,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,YAAY,CAAU,EAAE,CAAC;YACnE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBAC5C,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,IAAI,KAAK,iBAAiB,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9F,MAAM,IAAI,SAAS,CAAC,8BAA8B,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/src/governance/RvfExperimentBranch.d.ts

@@ -0,0 +1,65 @@
+import type { PromotionDecision, PromotionEvidence } from './MetaHarnessGateway.js';
+import { MetaHarnessGateway } from './MetaHarnessGateway.js';
+interface GovernedRvfStore {
+    fileId(): Promise<string>;
+    parentId(): Promise<string>;
+    lineageDepth(): Promise<number>;
+    status(): Promise<{
+        totalVectors: number;
+        totalSegments: number;
+    }>;
+    segments(): Promise<Array<{
+        id: number;
+        segType: string;
+        payloadLength: number;
+    }>>;
+    verifyWitness(): {
+        valid: boolean;
+        entries: number;
+        error?: string;
+    };
+    derive(childPath: string): Promise<GovernedRvfStore>;
+    getStoragePath(): string;
+}
+export interface ExperimentAnchor {
+    repository: string;
+    commitSha: string;
+    benchmarkHash: string;
+    embeddingSpaceHash: string;
+    experimentalRevision: string;
+}
+export interface ExperimentReceipt {
+    schemaVersion: 1;
+    parentPath: string;
+    childPath: string;
+    parentFingerprint: string;
+    childFingerprint: string;
+    anchor: ExperimentAnchor;
+    decision: PromotionDecision;
+    receiptHash: string;
+}
+export declare class StaleExperimentBaselineError extends Error {
+    readonly code = "AGENTDB_STALE_EXPERIMENT_BASELINE";
+    constructor();
+}
+export declare class StaleExperimentRevisionError extends Error {
+    readonly code = "AGENTDB_STALE_EXPERIMENT_REVISION";
+    constructor();
+}
+export declare function assertExperimentRevisionCompatible(previous: ExperimentAnchor, next: ExperimentAnchor): void;
+/**
+ * Creates an isolated RVF COW candidate and authorizes it without mutating the
+ * authoritative parent. Actual path/alias promotion remains a trusted external
+ * transaction so candidate code never receives release authority.
+ */
+export declare class RvfExperimentBranch {
+    private readonly parent;
+    readonly candidate: GovernedRvfStore;
+    readonly anchor: ExperimentAnchor;
+    private readonly parentFingerprint;
+    private constructor();
+    static create(parent: GovernedRvfStore, childPath: string, anchor: ExperimentAnchor): Promise<RvfExperimentBranch>;
+    authorizePromotion(gateway: MetaHarnessGateway, evidence: PromotionEvidence): Promise<ExperimentReceipt>;
+}
+export {};
+//# sourceMappingURL=RvfExperimentBranch.d.ts.map

package/dist/src/governance/RvfExperimentBranch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RvfExperimentBranch.d.ts","sourceRoot":"","sources":["../../../src/governance/RvfExperimentBranch.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACpF,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D,UAAU,gBAAgB;IACxB,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1B,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5B,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,IAAI,OAAO,CAAC;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnE,QAAQ,IAAI,OAAO,CAAC,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAC;IACnF,aAAa,IAAI;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACrE,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACrD,cAAc,IAAI,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,iBAAiB;IAChC,aAAa,EAAE,CAAC,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,gBAAgB,CAAC;IACzB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,qBAAa,4BAA6B,SAAQ,KAAK;IACrD,QAAQ,CAAC,IAAI,uCAAuC;;CAMrD;AAED,qBAAa,4BAA6B,SAAQ,KAAK;IACrD,QAAQ,CAAC,IAAI,uCAAuC;;CAMrD;AAED,wBAAgB,kCAAkC,CAChD,QAAQ,EAAE,gBAAgB,EAC1B,IAAI,EAAE,gBAAgB,GACrB,IAAI,CASN;AAED;;;;GAIG;AACH,qBAAa,mBAAmB;IAE5B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,QAAQ,CAAC,SAAS,EAAE,gBAAgB;IACpC,QAAQ,CAAC,MAAM,EAAE,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAJpC,OAAO;WAOM,MAAM,CACjB,MAAM,EAAE,gBAAgB,EACxB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,gBAAgB,GACvB,OAAO,CAAC,mBAAmB,CAAC;IAczB,kBAAkB,CACtB,OAAO,EAAE,kBAAkB,EAC3B,QAAQ,EAAE,iBAAiB,GAC1B,OAAO,CAAC,iBAAiB,CAAC;CAyB9B"}

package/dist/src/governance/RvfExperimentBranch.js

@@ -0,0 +1,115 @@
+import { createHash } from 'node:crypto';
+export class StaleExperimentBaselineError extends Error {
+    code = 'AGENTDB_STALE_EXPERIMENT_BASELINE';
+    constructor() {
+        super('The parent RVF generation changed after the experiment branch was created');
+        this.name = 'StaleExperimentBaselineError';
+    }
+}
+export class StaleExperimentRevisionError extends Error {
+    code = 'AGENTDB_STALE_EXPERIMENT_REVISION';
+    constructor() {
+        super('Embedding-space changes require a new experimental revision');
+        this.name = 'StaleExperimentRevisionError';
+    }
+}
+export function assertExperimentRevisionCompatible(previous, next) {
+    validateAnchor(previous);
+    validateAnchor(next);
+    if (previous.embeddingSpaceHash !== next.embeddingSpaceHash
+        && previous.experimentalRevision === next.experimentalRevision) {
+        throw new StaleExperimentRevisionError();
+    }
+}
+/**
+ * Creates an isolated RVF COW candidate and authorizes it without mutating the
+ * authoritative parent. Actual path/alias promotion remains a trusted external
+ * transaction so candidate code never receives release authority.
+ */
+export class RvfExperimentBranch {
+    parent;
+    candidate;
+    anchor;
+    parentFingerprint;
+    constructor(parent, candidate, anchor, parentFingerprint) {
+        this.parent = parent;
+        this.candidate = candidate;
+        this.anchor = anchor;
+        this.parentFingerprint = parentFingerprint;
+    }
+    static async create(parent, childPath, anchor) {
+        validateAnchor(anchor);
+        const parentFingerprint = await fingerprintStore(parent);
+        const parentId = await parent.fileId();
+        const candidate = await parent.derive(childPath);
+        if (await candidate.parentId() !== parentId) {
+            throw new Error('Derived RVF candidate does not identify the expected parent');
+        }
+        if (await candidate.lineageDepth() < 1) {
+            throw new Error('Derived RVF candidate has invalid lineage depth');
+        }
+        return new RvfExperimentBranch(parent, candidate, anchor, parentFingerprint);
+    }
+    async authorizePromotion(gateway, evidence) {
+        if (await fingerprintStore(this.parent) !== this.parentFingerprint) {
+            throw new StaleExperimentBaselineError();
+        }
+        const witness = this.candidate.verifyWitness();
+        if (!witness.valid) {
+            throw new Error(`Candidate RVF witness verification failed: ${witness.error ?? 'unknown error'}`);
+        }
+        const decision = await gateway.evaluatePromotion(evidence);
+        const childFingerprint = await fingerprintStore(this.candidate);
+        const unsigned = {
+            schemaVersion: 1,
+            parentPath: this.parent.getStoragePath(),
+            childPath: this.candidate.getStoragePath(),
+            parentFingerprint: this.parentFingerprint,
+            childFingerprint,
+            anchor: this.anchor,
+            decision,
+        };
+        return {
+            ...unsigned,
+            receiptHash: hashCanonical(unsigned),
+        };
+    }
+}
+async function fingerprintStore(store) {
+    const [fileId, parentId, lineageDepth, status, segments] = await Promise.all([
+        store.fileId(),
+        store.parentId(),
+        store.lineageDepth(),
+        store.status(),
+        store.segments(),
+    ]);
+    return hashCanonical({
+        fileId,
+        parentId,
+        lineageDepth,
+        status,
+        segments: [...segments].sort((a, b) => a.id - b.id),
+    });
+}
+function hashCanonical(value) {
+    return createHash('sha256').update(canonicalJson(value)).digest('hex');
+}
+function canonicalJson(value) {
+    if (Array.isArray(value))
+        return `[${value.map(canonicalJson).join(',')}]`;
+    if (value && typeof value === 'object') {
+        return `{${Object.entries(value)
+            .sort(([left], [right]) => left < right ? -1 : left > right ? 1 : 0)
+            .map(([key, item]) => `${JSON.stringify(key)}:${canonicalJson(item)}`)
+            .join(',')}}`;
+    }
+    return JSON.stringify(value);
+}
+function validateAnchor(anchor) {
+    for (const [name, value] of Object.entries(anchor)) {
+        if (typeof value !== 'string' || value.trim().length === 0) {
+            throw new TypeError(`anchor.${name} must be a non-empty string`);
+        }
+    }
+}
+//# sourceMappingURL=RvfExperimentBranch.js.map

package/dist/src/governance/RvfExperimentBranch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RvfExperimentBranch.js","sourceRoot":"","sources":["../../../src/governance/RvfExperimentBranch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAkCzC,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IAC5C,IAAI,GAAG,mCAAmC,CAAC;IAEpD;QACE,KAAK,CAAC,2EAA2E,CAAC,CAAC;QACnF,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;IAC7C,CAAC;CACF;AAED,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IAC5C,IAAI,GAAG,mCAAmC,CAAC;IAEpD;QACE,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACrE,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;IAC7C,CAAC;CACF;AAED,MAAM,UAAU,kCAAkC,CAChD,QAA0B,EAC1B,IAAsB;IAEtB,cAAc,CAAC,QAAQ,CAAC,CAAC;IACzB,cAAc,CAAC,IAAI,CAAC,CAAC;IACrB,IACE,QAAQ,CAAC,kBAAkB,KAAK,IAAI,CAAC,kBAAkB;WACpD,QAAQ,CAAC,oBAAoB,KAAK,IAAI,CAAC,oBAAoB,EAC9D,CAAC;QACD,MAAM,IAAI,4BAA4B,EAAE,CAAC;IAC3C,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,mBAAmB;IAEX;IACR;IACA;IACQ;IAJnB,YACmB,MAAwB,EAChC,SAA2B,EAC3B,MAAwB,EAChB,iBAAyB;QAHzB,WAAM,GAAN,MAAM,CAAkB;QAChC,cAAS,GAAT,SAAS,CAAkB;QAC3B,WAAM,GAAN,MAAM,CAAkB;QAChB,sBAAiB,GAAjB,iBAAiB,CAAQ;IACzC,CAAC;IAEJ,MAAM,CAAC,KAAK,CAAC,MAAM,CACjB,MAAwB,EACxB,SAAiB,EACjB,MAAwB;QAExB,cAAc,CAAC,MAAM,CAAC,CAAC;QACvB,MAAM,iBAAiB,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACzD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;QACvC,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,MAAM,SAAS,CAAC,QAAQ,EAAE,KAAK,QAAQ,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,MAAM,SAAS,CAAC,YAAY,EAAE,GAAG,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QACD,OAAO,IAAI,mBAAmB,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAC/E,CAAC;IAED,KAAK,CAAC,kBAAkB,CACtB,OAA2B,EAC3B,QAA2B;QAE3B,IAAI,MAAM,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACnE,MAAM,IAAI,4BAA4B,EAAE,CAAC;QAC3C,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC;QAC/C,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,8CAA8C,OAAO,CAAC,KAAK,IAAI,eAAe,EAAE,CAAC,CAAC;QACpG,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAC3D,MAAM,gBAAgB,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG;YACf,aAAa,EAAE,CAAU;YACzB,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE;YACxC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE;YAC1C,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,gBAAgB;YAChB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ;SACT,CAAC;QACF,OAAO;YACL,GAAG,QAAQ;YACX,WAAW,EAAE,aAAa,CAAC,QAAQ,CAAC;SACrC,CAAC;IACJ,CAAC;CACF;AAED,KAAK,UAAU,gBAAgB,CAAC,KAAuB;IACrD,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC3E,KAAK,CAAC,MAAM,EAAE;QACd,KAAK,CAAC,QAAQ,EAAE;QAChB,KAAK,CAAC,YAAY,EAAE;QACpB,KAAK,CAAC,MAAM,EAAE;QACd,KAAK,CAAC,QAAQ,EAAE;KACjB,CAAC,CAAC;IACH,OAAO,aAAa,CAAC;QACnB,MAAM;QACN,QAAQ;QACR,YAAY;QACZ,MAAM;QACN,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;KACpD,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC3E,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;aACxD,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aACnE,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;aACrE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAClB,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,cAAc,CAAC,MAAwB;IAC9C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3D,MAAM,IAAI,SAAS,CAAC,UAAU,IAAI,6BAA6B,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/src/index.d.ts

@@ -19,8 +19,9 @@ export { ReflexionMemory } from './controllers/ReflexionMemory.js';
 export { SkillLibrary } from './controllers/SkillLibrary.js';
 export { LearningSystem } from './controllers/LearningSystem.js';
 export { ReasoningBank } from './controllers/ReasoningBank.js';
-export { EmbeddingService } from './controllers/EmbeddingService.js';
+export { EmbeddingService, registerEmbeddingModelRolePolicy } from './controllers/EmbeddingService.js';
 export { EnhancedEmbeddingService } from './controllers/EnhancedEmbeddingService.js';
+export { EmbeddingSpaceMismatchError, applyRoleTemplate, assertEmbeddingSpaceCompatible, createEmbeddingSpaceIdentity, embeddingSpacesEqual, type EmbeddingCompatibilityOperation, type EmbeddingProvenanceType, type EmbeddingRole, type EmbeddingRolePolicy, type EmbeddingSpaceIdentity, type EmbeddingSpaceIdentityInput, type MemoryProvenance } from './embedding/index.js';
 export { ModelCacheLoader } from './model/ModelCacheLoader.js';
 export { WASMVectorSearch } from './controllers/WASMVectorSearch.js';
 export { HNSWIndex, isHnswlibAvailable } from './controllers/HNSWIndex.js';
@@ -35,6 +36,9 @@ export { QueryOptimizer } from './optimizations/QueryOptimizer.js';
 export { QueryCache } from './core/QueryCache.js';
 export type { QueryCacheConfig, CacheEntry, CacheStatistics } from './core/QueryCache.js';
 export { validateTableName, validateColumnName, validatePragmaCommand, buildSafeWhereClause, buildSafeSetClause, ValidationError, } from './security/input-validation.js';
+export { buildMcpToolPolicy, filterMcpTools, isMcpToolAllowed, type AgentDbMcpProfile, type McpToolPolicy, } from './security/mcp-policy.js';
+export { MetaHarnessGateway, type PromotionDecision, type PromotionEvidence, } from './governance/MetaHarnessGateway.js';
+export { RvfExperimentBranch, StaleExperimentBaselineError, StaleExperimentRevisionError, assertExperimentRevisionCompatible, type ExperimentAnchor, type ExperimentReceipt, } from './governance/RvfExperimentBranch.js';
 export { type QuantizationStats, type QuantizedVector, type ProductQuantizerConfig, type PQEncodedVector, type QuantizedVectorStoreConfig, type QuantizedSearchResult, quantize8bit, quantize4bit, dequantize8bit, dequantize4bit, calculateQuantizationError, getQuantizationStats, ProductQuantizer, QuantizedVectorStore, createScalar8BitStore, createScalar4BitStore, createProductQuantizedStore, } from './quantization/index.js';
 export { KeywordIndex, HybridSearch, createKeywordIndex, createHybridSearch, type HybridSearchOptions, type HybridSearchResult, type HybridQuery, type BM25Config, } from './search/index.js';
 export { BenchmarkSuite, Benchmark, VectorInsertBenchmark, VectorSearchBenchmark, MemoryUsageBenchmark, ConcurrencyBenchmark, QuantizationBenchmark, runBenchmarks, runSelectedBenchmarks, formatReportAsMarkdown, formatComparisonAsMarkdown, type LatencyStats, type BenchmarkResult, type BenchmarkReport, type ComparisonReport, type BenchmarkConfig, } from './benchmark/index.js';

package/dist/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC5D,eAAe,YAAY,CAAC;AAG5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAG/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAGrF,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAG/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAG3E,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAGrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAGrE,OAAO,EAAE,uBAAuB,EAAE,MAAM,oDAAoD,CAAC;AAC7F,OAAO,EAAE,wBAAwB,EAAE,MAAM,qDAAqD,CAAC;AAC/F,OAAO,EAAE,4BAA4B,EAAE,MAAM,yDAAyD,CAAC;AAGvG,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAGlD,OAAO,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,YAAY,EAAE,gBAAgB,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAG1F,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,qBAAqB,EACrB,oBAAoB,EACpB,kBAAkB,EAClB,eAAe,GAChB,MAAM,gCAAgC,CAAC;AAGxC,OAAO,EAEL,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,sBAAsB,EAC3B,KAAK,eAAe,EACpB,KAAK,0BAA0B,EAC/B,KAAK,qBAAqB,EAE1B,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,cAAc,EACd,0BAA0B,EAC1B,oBAAoB,EAEpB,gBAAgB,EAEhB,oBAAoB,EAEpB,qBAAqB,EACrB,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,kBAAkB,EAClB,kBAAkB,EAClB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,WAAW,EAChB,KAAK,UAAU,GAChB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EAEL,cAAc,EAEd,SAAS,EAET,qBAAqB,EACrB,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,EAErB,aAAa,EACb,qBAAqB,EAErB,sBAAsB,EACtB,0BAA0B,EAE1B,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,eAAe,GACrB,MAAM,sBAAsB,CAAC;AAG9B,cAAc,wBAAwB,CAAC;AAGvC,OAAO,EACL,SAAS,EACT,iBAAiB,EACjB,KAAK,SAAS,EACd,KAAK,WAAW,GACjB,MAAM,yBAAyB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC5D,eAAe,YAAY,CAAC;AAG5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAG/D,OAAO,EACL,gBAAgB,EAChB,gCAAgC,EACjC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AACrF,OAAO,EACL,2BAA2B,EAC3B,iBAAiB,EACjB,8BAA8B,EAC9B,4BAA4B,EAC5B,oBAAoB,EACpB,KAAK,+BAA+B,EACpC,KAAK,uBAAuB,EAC5B,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,2BAA2B,EAChC,KAAK,gBAAgB,EACtB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAG/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAG3E,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAGrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAGrE,OAAO,EAAE,uBAAuB,EAAE,MAAM,oDAAoD,CAAC;AAC7F,OAAO,EAAE,wBAAwB,EAAE,MAAM,qDAAqD,CAAC;AAC/F,OAAO,EAAE,4BAA4B,EAAE,MAAM,yDAAyD,CAAC;AAGvG,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAGlD,OAAO,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,YAAY,EAAE,gBAAgB,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAG1F,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,qBAAqB,EACrB,oBAAoB,EACpB,kBAAkB,EAClB,eAAe,GAChB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,gBAAgB,EAChB,KAAK,iBAAiB,EACtB,KAAK,aAAa,GACnB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,kBAAkB,EAClB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,GACvB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,mBAAmB,EACnB,4BAA4B,EAC5B,4BAA4B,EAC5B,kCAAkC,EAClC,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,GACvB,MAAM,qCAAqC,CAAC;AAG7C,OAAO,EAEL,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,sBAAsB,EAC3B,KAAK,eAAe,EACpB,KAAK,0BAA0B,EAC/B,KAAK,qBAAqB,EAE1B,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,cAAc,EACd,0BAA0B,EAC1B,oBAAoB,EAEpB,gBAAgB,EAEhB,oBAAoB,EAEpB,qBAAqB,EACrB,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,kBAAkB,EAClB,kBAAkB,EAClB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,WAAW,EAChB,KAAK,UAAU,GAChB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EAEL,cAAc,EAEd,SAAS,EAET,qBAAqB,EACrB,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,EAErB,aAAa,EACb,qBAAqB,EAErB,sBAAsB,EACtB,0BAA0B,EAE1B,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,eAAe,GACrB,MAAM,sBAAsB,CAAC;AAG9B,cAAc,wBAAwB,CAAC;AAGvC,OAAO,EACL,SAAS,EACT,iBAAiB,EACjB,KAAK,SAAS,EACd,KAAK,WAAW,GACjB,MAAM,yBAAyB,CAAC"}

package/dist/src/index.js

@@ -22,8 +22,9 @@ export { SkillLibrary } from './controllers/SkillLibrary.js';
 export { LearningSystem } from './controllers/LearningSystem.js';
 export { ReasoningBank } from './controllers/ReasoningBank.js';
 // Embedding services
-export { EmbeddingService } from './controllers/EmbeddingService.js';
+export { EmbeddingService, registerEmbeddingModelRolePolicy } from './controllers/EmbeddingService.js';
 export { EnhancedEmbeddingService } from './controllers/EnhancedEmbeddingService.js';
+export { EmbeddingSpaceMismatchError, applyRoleTemplate, assertEmbeddingSpaceCompatible, createEmbeddingSpaceIdentity, embeddingSpacesEqual } from './embedding/index.js';
 // Model cache (offline .rvf model loading)
 export { ModelCacheLoader } from './model/ModelCacheLoader.js';
 // WASM acceleration and HNSW indexing
@@ -45,6 +46,9 @@ export { QueryOptimizer } from './optimizations/QueryOptimizer.js';
 export { QueryCache } from './core/QueryCache.js';
 // Security
 export { validateTableName, validateColumnName, validatePragmaCommand, buildSafeWhereClause, buildSafeSetClause, ValidationError, } from './security/input-validation.js';
+export { buildMcpToolPolicy, filterMcpTools, isMcpToolAllowed, } from './security/mcp-policy.js';
+export { MetaHarnessGateway, } from './governance/MetaHarnessGateway.js';
+export { RvfExperimentBranch, StaleExperimentBaselineError, StaleExperimentRevisionError, assertExperimentRevisionCompatible, } from './governance/RvfExperimentBranch.js';
 // Vector Quantization
 export { 
 // Scalar Quantization

package/dist/src/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,qBAAqB;AACrB,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC5D,eAAe,YAAY,CAAC;AAE5B,mBAAmB;AACnB,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAE/D,qBAAqB;AACrB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAErF,2CAA2C;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAE/D,sCAAsC;AACtC,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAE3E,uBAAuB;AACvB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAErE,+CAA+C;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAErE,wBAAwB;AACxB,OAAO,EAAE,uBAAuB,EAAE,MAAM,oDAAoD,CAAC;AAC7F,OAAO,EAAE,wBAAwB,EAAE,MAAM,qDAAqD,CAAC;AAC/F,OAAO,EAAE,4BAA4B,EAAE,MAAM,yDAAyD,CAAC;AAEvG,qBAAqB;AACrB,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAElD,gBAAgB;AAChB,OAAO,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAGlD,WAAW;AACX,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,qBAAqB,EACrB,oBAAoB,EACpB,kBAAkB,EAClB,eAAe,GAChB,MAAM,gCAAgC,CAAC;AAExC,sBAAsB;AACtB,OAAO;AAQL,sBAAsB;AACtB,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,cAAc,EACd,0BAA0B,EAC1B,oBAAoB;AACpB,uBAAuB;AACvB,gBAAgB;AAChB,yBAAyB;AACzB,oBAAoB;AACpB,oBAAoB;AACpB,qBAAqB,EACrB,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,yBAAyB,CAAC;AAEjC,mCAAmC;AACnC,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,kBAAkB,EAClB,kBAAkB,GAKnB,MAAM,mBAAmB,CAAC;AAE3B,qBAAqB;AACrB,OAAO;AACL,aAAa;AACb,cAAc;AACd,mCAAmC;AACnC,SAAS;AACT,sBAAsB;AACtB,qBAAqB,EACrB,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB;AACrB,4BAA4B;AAC5B,aAAa,EACb,qBAAqB;AACrB,uBAAuB;AACvB,sBAAsB,EACtB,0BAA0B,GAO3B,MAAM,sBAAsB,CAAC;AAE9B,4CAA4C;AAC5C,cAAc,wBAAwB,CAAC;AAEvC,kEAAkE;AAClE,OAAO,EACL,SAAS,EACT,iBAAiB,GAGlB,MAAM,yBAAyB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,qBAAqB;AACrB,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC5D,eAAe,YAAY,CAAC;AAE5B,mBAAmB;AACnB,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAE/D,qBAAqB;AACrB,OAAO,EACL,gBAAgB,EAChB,gCAAgC,EACjC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AACrF,OAAO,EACL,2BAA2B,EAC3B,iBAAiB,EACjB,8BAA8B,EAC9B,4BAA4B,EAC5B,oBAAoB,EAQrB,MAAM,sBAAsB,CAAC;AAE9B,2CAA2C;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAE/D,sCAAsC;AACtC,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAE3E,uBAAuB;AACvB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAErE,+CAA+C;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAErE,wBAAwB;AACxB,OAAO,EAAE,uBAAuB,EAAE,MAAM,oDAAoD,CAAC;AAC7F,OAAO,EAAE,wBAAwB,EAAE,MAAM,qDAAqD,CAAC;AAC/F,OAAO,EAAE,4BAA4B,EAAE,MAAM,yDAAyD,CAAC;AAEvG,qBAAqB;AACrB,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAElD,gBAAgB;AAChB,OAAO,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAGlD,WAAW;AACX,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,qBAAqB,EACrB,oBAAoB,EACpB,kBAAkB,EAClB,eAAe,GAChB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,gBAAgB,GAGjB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,kBAAkB,GAGnB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,mBAAmB,EACnB,4BAA4B,EAC5B,4BAA4B,EAC5B,kCAAkC,GAGnC,MAAM,qCAAqC,CAAC;AAE7C,sBAAsB;AACtB,OAAO;AAQL,sBAAsB;AACtB,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,cAAc,EACd,0BAA0B,EAC1B,oBAAoB;AACpB,uBAAuB;AACvB,gBAAgB;AAChB,yBAAyB;AACzB,oBAAoB;AACpB,oBAAoB;AACpB,qBAAqB,EACrB,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,yBAAyB,CAAC;AAEjC,mCAAmC;AACnC,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,kBAAkB,EAClB,kBAAkB,GAKnB,MAAM,mBAAmB,CAAC;AAE3B,qBAAqB;AACrB,OAAO;AACL,aAAa;AACb,cAAc;AACd,mCAAmC;AACnC,SAAS;AACT,sBAAsB;AACtB,qBAAqB,EACrB,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB;AACrB,4BAA4B;AAC5B,aAAa,EACb,qBAAqB;AACrB,uBAAuB;AACvB,sBAAsB,EACtB,0BAA0B,GAO3B,MAAM,sBAAsB,CAAC;AAE9B,4CAA4C;AAC5C,cAAc,wBAAwB,CAAC;AAEvC,kEAAkE;AAClE,OAAO,EACL,SAAS,EACT,iBAAiB,GAGlB,MAAM,yBAAyB,CAAC"}

package/dist/src/mcp/agentdb-mcp-server.js

@@ -23,9 +23,11 @@ import * as path from 'path';
 import * as fs from 'fs';
 import { fileURLToPath } from 'url';
 import { dirname } from 'path';
+import { buildMcpToolPolicy, filterMcpTools, isMcpToolAllowed, } from '../security/mcp-policy.js';
 // ES module equivalent of __dirname
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = dirname(__filename);
+const toolPolicy = buildMcpToolPolicy();
 // stdout belongs exclusively to JSON-RPC when running over stdio. Route every
 // transitive diagnostic (including legacy controller console.log calls) to
 // stderr before database and embedding initialization begins.
@@ -876,11 +878,14 @@ const tools = [
 // Tool Handlers
 // ============================================================================
 server.setRequestHandler(ListToolsRequestSchema, async () => {
-    return { tools };
+    return { tools: filterMcpTools(tools, toolPolicy) };
 });
 server.setRequestHandler(CallToolRequestSchema, async (request) => {
     const { name, arguments: args } = request.params;
     try {
+        if (!isMcpToolAllowed(name, toolPolicy)) {
+            throw new Error(`MCP tool "${name}" is not permitted by the active AgentDB capability policy`);
+        }
         switch (name) {
             // ======================================================================
             // CORE VECTOR DB OPERATIONS