enigma-memory 0.1.16 → 0.1.18

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (39) hide show
  1. package/README.md +23 -13
  2. package/apps/cli/bin/enigma.mjs +3341 -3151
  3. package/deploy/SIMULATION.md +14 -9
  4. package/deploy/docker-compose.local-production-simulation.yml +18 -12
  5. package/docs/benchmark-attestation-network.md +487 -487
  6. package/docs/benchmark-reproducibility.md +289 -240
  7. package/docs/blockchain-only-mechanisms.md +400 -388
  8. package/docs/client-connectors.md +10 -6
  9. package/docs/demo-proof-network.md +275 -275
  10. package/docs/developer-ecosystem.md +7 -5
  11. package/docs/developer-proof-quickstart.md +325 -325
  12. package/docs/enigma-memory-ready-conformance.md +376 -376
  13. package/docs/hosted-cloud-product.md +29 -0
  14. package/docs/install-anywhere.md +16 -12
  15. package/docs/memory-benchmarks.md +16 -1
  16. package/docs/memory-drive-health-model.md +690 -649
  17. package/docs/proof-network-build-notes.md +240 -240
  18. package/docs/proof-network.md +339 -282
  19. package/docs/sdk-api.md +324 -324
  20. package/docs/solana-proof-rail.md +453 -453
  21. package/package.json +279 -278
  22. package/packages/core/src/index.js +1 -1
  23. package/packages/hosted-cloud/src/index.js +470 -2
  24. package/packages/mcp-server/src/index.js +1185 -1185
  25. package/packages/passport/src/index.js +740 -6
  26. package/packages/proof-network/src/index.js +139 -0
  27. package/packages/vault/src/index.js +187 -25
  28. package/scripts/build-benchmark-proof-release.mjs +15 -3
  29. package/scripts/build-hosted-api-key-lifecycle.mjs +274 -274
  30. package/scripts/build-hosted-customer-lifecycle.mjs +476 -456
  31. package/scripts/build-installer-assets.mjs +389 -389
  32. package/scripts/build-production-unblocker.mjs +409 -409
  33. package/scripts/build-proof-network-packet.mjs +213 -213
  34. package/scripts/check.mjs +8 -1
  35. package/scripts/release-audit.mjs +9 -6
  36. package/scripts/release-provenance.mjs +6 -2
  37. package/scripts/run-standard-memory-benchmarks.mjs +1354 -1194
  38. package/scripts/scan-secrets.mjs +177 -0
  39. package/scripts/simulate-production-env.mjs +64 -8
package/README.md CHANGED
@@ -2,9 +2,9 @@
2
2
 
3
3
  Enigma Memory is a local-first AI Memory Passport. It gives you one canonical local memory vault, receipt-backed proof for Enigma-controlled events, and MCP connections into assistants such as Claude Desktop, Cursor, Kimi Code, and generic MCP clients.
4
4
 
5
- Start with `enigma setup --overwrite` below. You do not need to understand relay, gateway, mesh, browser, desktop, hosted infrastructure, or the proof network before trying Enigma locally.
5
+ Start with the Memory Drive loop below — one install, one connect, then health and status verification. You do not need to understand relay, gateway, mesh, browser, desktop, hosted infrastructure, or the proof network before trying Enigma locally.
6
6
 
7
- The package path needs no database, provider credential, cloud credential, npm publishing token, or external account. Hosted cloud and BYOC operation are separate advanced modes that require real deployment credentials, domains, TLS, durable storage, KMS/secrets, monitoring, backups, and operator acceptance.
7
+ Hosted cloud and BYOC operation are waitlist/operator-deploy only; they require real deployment credentials, domains, TLS, durable storage, KMS/secrets, monitoring, backups, and operator acceptance. The relay and gateway binaries included in the package are local bootstrap probes, not a live hosted service.
8
8
 
9
9
  Enigma does not claim that a closed provider deleted internal data, that model weights forgot, or that provider-native memory disappeared. It proves facts about Enigma-controlled vault state, receipts, checkpoints, and declared boundary operations.
10
10
 
@@ -16,21 +16,31 @@ Prerequisites:
16
16
  - No database, package registry account, provider credential, cloud credential, hosted Enigma account, or external account for the local setup path
17
17
  - Git only when you choose the advanced source-checkout path
18
18
 
19
- Use Enigma as a one-time AI Memory Passport setup: install the package, create the local Enigma workspace once, then use the same memory/search/context/verify/connect loop from any supported client.
19
+ Use Enigma as your private Memory Drive for AI: install once, connect the AI clients you already have, then inspect drive health and passport status before remembering, retrieving, packaging, and verifying context.
20
20
 
21
21
  ```sh
22
22
  npm install -g enigma-memory
23
- enigma setup --overwrite
24
- enigma remember --text-file ./memory.txt
25
- enigma search --query "..."
26
- enigma context --query "..." --optimize
27
- enigma verify --export ./.enigma/export.json
28
- enigma connect claude-desktop --dry-run
23
+ enigma setup --bundle "$HOME/.enigma/bundle.json" --client auto --connect-installed --overwrite
24
+ echo "Keep all Q3 planning notes in the project-context tag." > memory.txt
25
+ enigma remember --bundle "$HOME/.enigma/bundle.json" --text-file memory.txt
26
+ enigma search --bundle "$HOME/.enigma/bundle.json" --query "Q3 planning"
27
+ enigma context --bundle "$HOME/.enigma/bundle.json" --query "Q3 planning" --out "$HOME/.enigma/context-pack.json"
28
+ enigma verify --export "$HOME/.enigma/export.json"
29
29
  ```
30
30
 
31
- `enigma setup --overwrite` writes local Enigma artifacts under the workspace `.enigma` path and emits deterministic, public-safe JSON without printing raw memory plaintext. It does not write Claude, Cursor, Kimi, or other third-party app configs. Client config writes happen only when you explicitly run `enigma connect <client>` without `--dry-run`; keep `--dry-run` while reviewing the planned MCP entry.
31
+ Windows CMD:
32
+
33
+ ```cmd
34
+ npm install -g enigma-memory
35
+ enigma setup --bundle "%USERPROFILE%\.enigma\bundle.json" --client auto --connect-installed --overwrite
36
+ echo Keep all Q3 planning notes in the project-context tag.> memory.txt
37
+ enigma remember --bundle "%USERPROFILE%\.enigma\bundle.json" --text-file memory.txt
38
+ enigma search --bundle "%USERPROFILE%\.enigma\bundle.json" --query "Q3 planning"
39
+ enigma context --bundle "%USERPROFILE%\.enigma\bundle.json" --query "Q3 planning" --out "%USERPROFILE%\.enigma\context-pack.json"
40
+ enigma verify --export "%USERPROFILE%\.enigma\export.json"
41
+ ```
32
42
 
33
- The local Enigma vault remains canonical. Provider-native memory is non-canonical and should be treated as a convenience cache only. Enigma receipts prove Enigma-controlled vault state, receipts, checkpoints, and declared boundary operations; they do not prove provider deletion, provider model forgetting, provider-native memory removal, hosted availability, ROI/savings, or compliance certification.
43
+ `enigma setup` is the credential-free first run: it creates the local `.enigma` workspace, bundle, proof artifacts, and a demo memory, then connects every installed/config-present client it detects (Claude Desktop, Cursor, Kimi Code, VS Code/Cline, Roo, OpenCode, generic MCP). It skips clients that are not installed and never creates configs from scratch; preview with `--dry-run` first if you want to see which clients will be written. If no clients are installed, setup still succeeds and the local CLI path works; use the copy-paste MCP snippets below to connect a client later, or run `enigma connect generic-mcp --dry-run` to preview a standalone snippet. The same commands run on Windows PowerShell via the `enigma.cmd` shim the npm global install adds. Neither command prints raw memory plaintext.
34
44
 
35
45
  ## Enigma Proof Network
36
46
 
@@ -146,7 +156,7 @@ Supported connector profiles are:
146
156
  - `opencode`
147
157
  - `generic-mcp`
148
158
 
149
- After `enigma setup --overwrite`, preview a client connection before writing anything:
159
+ The one-command path above (`enigma setup --client auto --connect-installed --overwrite`) already connects every installed/config-present client. To connect or preview a single client instead:
150
160
 
151
161
  ```sh
152
162
  enigma connect claude-desktop --dry-run
@@ -155,7 +165,7 @@ enigma connect kimi-code --dry-run
155
165
  enigma connect generic-mcp --dry-run
156
166
  ```
157
167
 
158
- Remove `--dry-run` from `enigma connect <client>` only after you are ready for Enigma to merge the `mcpServers.enigma` entry into that specific client config. The safe default setup command never writes third-party app configs.
168
+ Remove `--dry-run` from `enigma connect <client>` only after you are ready for Enigma to merge the `mcpServers.enigma` entry into that specific client config. Bare `enigma setup` without `--connect-installed` or `--write-connectors` never writes third-party app configs.
159
169
 
160
170
  Copy-paste MCP snippets:
161
171