mneme-ai 2.129.0 → 2.131.0

package/dist/commands/firewall.d.ts

@@ -0,0 +1,12 @@
+/**
+ * `mneme firewall` (v2.130.0) — Structural Context Firewall against Indirect
+ * Prompt Injection (OWASP LLM01). Scan content an agent is about to read; detect
+ * + neutralize known injection patterns hidden in comments/strings, and wrap it
+ * in an untrusted-data boundary so the model treats it as DATA, never commands.
+ *
+ *   cat suspect.ts | mneme firewall scan                 # verdict + findings
+ *   cat external-dep.ts | mneme firewall fortify          # → safe-to-read content (neutralized + wrapped)
+ */
+import type { Command } from "commander";
+export declare function registerFirewallCommands(program: Command): void;
+//# sourceMappingURL=firewall.d.ts.map

package/dist/commands/firewall.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"firewall.d.ts","sourceRoot":"","sources":["../../src/commands/firewall.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAmBzC,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA+B/D"}

package/dist/commands/firewall.js

@@ -0,0 +1,80 @@
+/**
+ * `mneme firewall` (v2.130.0) — Structural Context Firewall against Indirect
+ * Prompt Injection (OWASP LLM01). Scan content an agent is about to read; detect
+ * + neutralize known injection patterns hidden in comments/strings, and wrap it
+ * in an untrusted-data boundary so the model treats it as DATA, never commands.
+ *
+ *   cat suspect.ts | mneme firewall scan                 # verdict + findings
+ *   cat external-dep.ts | mneme firewall fortify          # → safe-to-read content (neutralized + wrapped)
+ */
+import { existsSync, readFileSync } from "node:fs";
+import { firewall } from "@mneme-ai/core";
+function out(s) { process.stdout.write(s + "\n"); }
+function readStdin() {
+    return new Promise((resolve) => {
+        if (process.stdin.isTTY)
+            return resolve("");
+        let d = "";
+        let done = false;
+        const fin = () => { if (!done) {
+            done = true;
+            resolve(d);
+        } };
+        process.stdin.setEncoding("utf8");
+        process.stdin.on("data", (c) => { d += c; if (d.length > 8_000_000)
+            fin(); });
+        process.stdin.on("end", fin);
+        process.stdin.on("error", fin);
+        setTimeout(fin, 4000);
+    });
+}
+async function getPayload(opts) {
+    if (typeof opts.text === "string")
+        return opts.text;
+    if (opts.file && existsSync(opts.file)) {
+        try {
+            return readFileSync(opts.file, "utf8");
+        }
+        catch { /* */ }
+    }
+    return readStdin();
+}
+export function registerFirewallCommands(program) {
+    const fw = program.command("firewall").description("🧱 STRUCTURAL CONTEXT FIREWALL — defend against Indirect Prompt Injection (OWASP LLM01): scan content for injection hidden in comments/strings + neutralize it, and wrap it as untrusted DATA so the model never obeys instructions buried in a file. Defense-in-depth, not a 100% guarantee against unknown attacks.");
+    fw.command("scan")
+        .description("Scan content (stdin/--file/--text). Verdict clean | flagged | blocked + findings (line, category). Exit 2 on blocked.")
+        .option("--text <t>", "inline content.")
+        .option("--file <p>", "read from a file.")
+        .option("--json", "JSON output.")
+        .action(async (opts) => {
+        const r = firewall.scanInjection(await getPayload(opts));
+        if (opts.json) {
+            process.stdout.write(JSON.stringify(r, null, 2) + "\n");
+        }
+        else {
+            const icon = r.verdict === "blocked" ? "🛑" : r.verdict === "flagged" ? "⚠️" : "✓";
+            out(`${icon} FIREWALL ${r.verdict.toUpperCase()} — ${r.findings.length} finding(s), ${r.neutralizedCount} neutralized`);
+            for (const f of r.findings.slice(0, 12))
+                out(`   • L${f.line} [${f.severity}] ${f.category}: ${f.snippet}`);
+            if (r.verdict !== "clean")
+                out(`   → read the FORTIFIED form (mneme firewall fortify) instead of the raw file.`);
+        }
+        if (r.verdict === "blocked")
+            process.exitCode = 2;
+    });
+    fw.command("fortify")
+        .description("Emit the safe-to-read form: known injections neutralized + content wrapped in an untrusted-data boundary (the always-on, attack-agnostic separation). Read THIS instead of the raw file.")
+        .option("--text <t>", "inline content.")
+        .option("--file <p>", "read from a file.")
+        .option("--json", "JSON output (fortified + findings).")
+        .action(async (opts) => {
+        const r = firewall.fortify(await getPayload(opts), opts.file ? { path: opts.file } : undefined);
+        if (opts.json) {
+            process.stdout.write(JSON.stringify(r, null, 2) + "\n");
+            return;
+        }
+        process.stdout.write(r.fortified + "\n");
+        process.stderr.write(`🧱 firewall: ${r.verdict} · ${r.neutralizedCount} injection(s) neutralized · wrapped as untrusted data\n`);
+    });
+}
+//# sourceMappingURL=firewall.js.map

package/dist/commands/firewall.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"firewall.js","sourceRoot":"","sources":["../../src/commands/firewall.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C,SAAS,GAAG,CAAC,CAAS,IAAU,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;AACjE,SAAS,SAAS;IAChB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK;YAAE,OAAO,OAAO,CAAC,EAAE,CAAC,CAAC;QAC5C,IAAI,CAAC,GAAG,EAAE,CAAC;QAAC,IAAI,IAAI,GAAG,KAAK,CAAC;QAAC,MAAM,GAAG,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,IAAI,GAAG,IAAI,CAAC;YAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC;QAC5F,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,SAAS;YAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACjH,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;AACL,CAAC;AACD,KAAK,UAAU,UAAU,CAAC,IAAsC;IAC9D,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC;IACpD,IAAI,IAAI,CAAC,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAAC,IAAI,CAAC;YAAC,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IAC3G,OAAO,SAAS,EAAE,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,OAAgB;IACvD,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,WAAW,CAAC,uTAAuT,CAAC,CAAC;IAE5W,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,uHAAuH,CAAC;SACpI,MAAM,CAAC,YAAY,EAAE,iBAAiB,CAAC;SACvC,MAAM,CAAC,YAAY,EAAE,mBAAmB,CAAC;SACzC,MAAM,CAAC,QAAQ,EAAE,cAAc,CAAC;SAChC,MAAM,CAAC,KAAK,EAAE,IAAsD,EAAE,EAAE;QACvE,MAAM,CAAC,GAAG,QAAQ,CAAC,aAAa,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QACzD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QAAC,CAAC;aACtE,CAAC;YACJ,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;YACnF,GAAG,CAAC,GAAG,IAAI,aAAa,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,gBAAgB,CAAC,CAAC,gBAAgB,cAAc,CAAC,CAAC;YACxH,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;gBAAE,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YAC5G,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO;gBAAE,GAAG,CAAC,gFAAgF,CAAC,CAAC;QACnH,CAAC;QACD,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEL,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,0LAA0L,CAAC;SACvM,MAAM,CAAC,YAAY,EAAE,iBAAiB,CAAC;SACvC,MAAM,CAAC,YAAY,EAAE,mBAAmB,CAAC;SACzC,MAAM,CAAC,QAAQ,EAAE,qCAAqC,CAAC;SACvD,MAAM,CAAC,KAAK,EAAE,IAAsD,EAAE,EAAE;QACvE,MAAM,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAChG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACnF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;QACzC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,gBAAgB,yDAAyD,CAAC,CAAC;IACnI,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/rail.d.ts

@@ -0,0 +1,14 @@
+/**
+ * `mneme rail` + `mneme policy` (v2.131.0) — THE CONTEXT RAIL.
+ * The single governed pipe every payload crosses between a local workspace and a
+ * hosted model — the "Visa rail" of AI context. Composes policy · firewall ·
+ * blind (ingress) and egress · settlement (egress) into one signed receipt.
+ *
+ *   cat src/billing.ts | mneme rail ingress --path src/billing.ts   # safe-to-send form + local map
+ *   echo "$MODEL_OUTPUT"  | mneme rail egress                        # leak-screened + metered to the ledger
+ *   mneme policy check --path config/.env                           # ALLOW | DENY (deterministic gate)
+ *   mneme policy init                                                # write a default mneme.policy.json
+ */
+import type { Command } from "commander";
+export declare function registerRailCommands(program: Command): void;
+//# sourceMappingURL=rail.d.ts.map

package/dist/commands/rail.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rail.d.ts","sourceRoot":"","sources":["../../src/commands/rail.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAyEzC,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAqI3D"}

package/dist/commands/rail.js

@@ -0,0 +1,293 @@
+/**
+ * `mneme rail` + `mneme policy` (v2.131.0) — THE CONTEXT RAIL.
+ * The single governed pipe every payload crosses between a local workspace and a
+ * hosted model — the "Visa rail" of AI context. Composes policy · firewall ·
+ * blind (ingress) and egress · settlement (egress) into one signed receipt.
+ *
+ *   cat src/billing.ts | mneme rail ingress --path src/billing.ts   # safe-to-send form + local map
+ *   echo "$MODEL_OUTPUT"  | mneme rail egress                        # leak-screened + metered to the ledger
+ *   mneme policy check --path config/.env                           # ALLOW | DENY (deterministic gate)
+ *   mneme policy init                                                # write a default mneme.policy.json
+ */
+import { existsSync, readFileSync, writeFileSync, appendFileSync, mkdirSync, rmdirSync, statSync } from "node:fs";
+import { resolve, join, dirname } from "node:path";
+import { rail, policy, settlement, notary } from "@mneme-ai/core";
+const SETTLEMENT_LEDGER = ".mneme/settlement/ledger.jsonl";
+const GENESIS = "0".repeat(64);
+function readSettlementLedger(cwd) {
+    try {
+        const p = join(cwd, SETTLEMENT_LEDGER);
+        if (!existsSync(p))
+            return [];
+        return readFileSync(p, "utf8").split(/\r?\n/).filter(Boolean).map((l) => JSON.parse(l));
+    }
+    catch {
+        return [];
+    }
+}
+function appendSettlementLedger(cwd, rec) {
+    const p = join(cwd, SETTLEMENT_LEDGER);
+    if (!existsSync(dirname(p)))
+        mkdirSync(dirname(p), { recursive: true });
+    appendFileSync(p, JSON.stringify(rec) + "\n");
+}
+/**
+ * Run a critical section under a best-effort atomic mutex (mkdir is atomic on
+ * every OS). Closes the read-then-append race between two concurrent
+ * `rail egress` processes that would otherwise fork the chain. Total: a stale
+ * lock (>10s) is reclaimed, and any failure falls back to running unlocked
+ * rather than hanging (metering is never allowed to block the verdict).
+ */
+function withLedgerLock(cwd, fn) {
+    const lockDir = join(cwd, ".mneme/settlement/.ledger.lock");
+    try {
+        if (!existsSync(dirname(lockDir)))
+            mkdirSync(dirname(lockDir), { recursive: true });
+    }
+    catch { /* */ }
+    let held = false;
+    for (let i = 0; i < 100; i++) {
+        try {
+            mkdirSync(lockDir);
+            held = true;
+            break;
+        }
+        catch {
+            try {
+                const age = Date.now() - statSync(lockDir).mtimeMs;
+                if (age > 10_000) {
+                    rmdirSync(lockDir);
+                    continue;
+                }
+            }
+            catch { /* */ }
+            // brief synchronous spin (≤~50ms total); never blocks indefinitely.
+            const until = Date.now() + 5;
+            while (Date.now() < until) { /* spin */ }
+        }
+    }
+    try {
+        return fn();
+    }
+    finally {
+        if (held) {
+            try {
+                rmdirSync(lockDir);
+            }
+            catch { /* */ }
+        }
+    }
+}
+function out(s) { process.stdout.write(s + "\n"); }
+function err(s) { process.stderr.write(s + "\n"); }
+const STDIN_CAP = 64_000_000; // 64MB — a security scan must not silently drop the tail.
+function readStdin() {
+    return new Promise((res) => {
+        if (process.stdin.isTTY)
+            return res("");
+        let d = "";
+        let done = false;
+        let truncated = false;
+        const fin = () => {
+            if (done)
+                return;
+            done = true;
+            if (truncated)
+                err(`⚠️  rail: stdin exceeded ${STDIN_CAP / 1_000_000}MB and was truncated — the scan is PARTIAL; pass --file for a complete scan of large inputs.`);
+            res(d);
+        };
+        process.stdin.setEncoding("utf8");
+        process.stdin.on("data", (c) => { d += c; if (d.length > STDIN_CAP) {
+            truncated = true;
+            fin();
+        } });
+        process.stdin.on("end", fin);
+        process.stdin.on("error", fin);
+        setTimeout(fin, 4000);
+    });
+}
+async function getPayload(opts) {
+    if (typeof opts.text === "string")
+        return opts.text;
+    if (opts.file && existsSync(opts.file)) {
+        try {
+            return readFileSync(opts.file, "utf8");
+        }
+        catch { /* */ }
+    }
+    return readStdin();
+}
+function loadPolicy(cwd) {
+    try {
+        const p = resolve(cwd, "mneme.policy.json");
+        if (existsSync(p))
+            return policy.normalizePolicy(JSON.parse(readFileSync(p, "utf8")));
+    }
+    catch { /* fall through to default */ }
+    return policy.defaultPolicy();
+}
+export function registerRailCommands(program) {
+    // ───────────────────────────── mneme rail ─────────────────────────────
+    const r = program.command("rail").description("🛤  THE CONTEXT RAIL — the single governed pipe between your workspace and a model (the 'Visa rail' of AI context). ingress = policy→firewall→blind before sending; egress = leak-guard→settlement before writing. Each crossing leaves a signed receipt.");
+    r.command("ingress")
+        .description("Local context → wire. Policy-gate, neutralize injection + wrap as untrusted data, blind names/secrets. Prints the safe-to-send payload; the reverse map stays local. Exit 2 if the policy gate BLOCKs.")
+        .option("--text <t>", "inline content.")
+        .option("--file <p>", "read from a file.")
+        .option("--path <p>", "logical path for the policy gate (e.g. src/billing.ts).")
+        .option("--agent <id>", "agent id (for an allow-list policy).")
+        .option("--aggressive", "mask ALL user identifiers (default: sensitive only).")
+        .option("--map <p>", "write the local reverse map to this file (NEVER send it).")
+        .option("--json", "JSON output (full receipt).")
+        .action(async (opts) => {
+        const cwd = process.cwd();
+        const payload = await getPayload(opts);
+        const rec = rail.traverseIngress(payload, {
+            ...(opts.path ? { path: opts.path } : {}),
+            ...(opts.agent ? { agent: opts.agent } : {}),
+            policy: loadPolicy(cwd),
+            blindMode: opts.aggressive ? "aggressive" : "sensitive",
+        });
+        const receipt = notary.issueReceipt(cwd, { kind: "claim-verdict", subject: "rail.ingress", payload: { contentHash: rec.contentHash, safeHash: rec.safeHash, verdict: rec.verdict }, includePayload: true });
+        if (opts.map && rec.map) {
+            try {
+                writeFileSync(resolve(cwd, opts.map), JSON.stringify(rec.map, null, 2));
+            }
+            catch { /* */ }
+        }
+        if (opts.json) {
+            out(JSON.stringify({ ...rec, receipt }, null, 2));
+        }
+        else {
+            if (rec.allowed)
+                out(rec.safePayload);
+            const icon = rec.verdict === "BLOCK" ? "🛑" : rec.verdict === "REDACT" ? "🛡" : "✓";
+            err(`${icon} rail ingress: ${rec.verdict} — ${rec.layers.map((l) => `${l.layer}${l.ok ? "✓" : "✗"}`).join(" · ")}`);
+            err(`   ${rec.note}`);
+            if (rec.map && Object.keys(rec.map).length)
+                err(`   ${Object.keys(rec.map).length} name(s) masked${opts.map ? ` → map written to ${opts.map}` : " (use --map to save the reverse map)"}`);
+            err(`   receipt ${receipt.receiptId ?? "(signed)"}`);
+        }
+        if (rec.verdict === "BLOCK")
+            process.exitCode = 2;
+    });
+    r.command("egress")
+        .description("Model output → local disk. Screen for secret leakage (canary/bloom/pattern/entropy), then meter the transaction into the signed settlement ledger. Exit 2 if a leak BLOCKs the write.")
+        .option("--text <t>", "inline content.")
+        .option("--file <p>", "read from a file.")
+        .option("--agent <id>", "agent id.")
+        .option("--canary <list>", "comma-separated honeytoken canaries to trip on.")
+        .option("--verified", "mark that a LOCAL verify (compile/test) passed.")
+        .option("--json", "JSON output (full receipt).")
+        .action(async (opts) => {
+        const cwd = process.cwd();
+        const payload = await getPayload(opts);
+        const canaries = (opts.canary ?? "").split(",").map((s) => s.trim()).filter(Boolean);
+        const rec = rail.traverseEgress(payload, {
+            ...(canaries.length ? { canaries } : {}),
+            ...(opts.agent ? { agent: opts.agent } : {}),
+            localVerified: opts.verified === true,
+        });
+        // settle the transaction into the signed hash-chained ledger (side-effect).
+        let settled = null;
+        if (rec.allowed && rec.txDraft) {
+            try {
+                const draft = rec.txDraft;
+                settled = withLedgerLock(cwd, () => {
+                    const records = readSettlementLedger(cwd);
+                    const prev = records.length ? records[records.length - 1].chainHash : GENESIS;
+                    // seq = records.length + 1 to match settlement's own convention
+                    // (settlement CLI + buildLedger start at 1) so the SHARED ledger chain
+                    // verifies. map localVerified: boolean → "pass"/"na" (never "fail" —
+                    // an unverified op is not a known failure).
+                    const r2 = settlement.recordTx(prev, {
+                        kind: draft.kind,
+                        sentHash: draft.sentHash,
+                        namesHidden: draft.namesHidden,
+                        secretsRemoved: draft.secretsRemoved,
+                        localVerified: draft.localVerified ? "pass" : "na",
+                        tokensSent: draft.tokensSent,
+                        tokensSaved: draft.tokensSaved,
+                    }, records.length + 1);
+                    appendSettlementLedger(cwd, r2);
+                    return { seq: records.length + 1, chainHash: r2.chainHash };
+                });
+            }
+            catch { /* metering is best-effort; never block the verdict */ }
+        }
+        const receipt = notary.issueReceipt(cwd, { kind: "claim-verdict", subject: "rail.egress", payload: { contentHash: rec.contentHash, verdict: rec.verdict, settledSeq: settled?.seq ?? -1 }, includePayload: true });
+        if (opts.json) {
+            out(JSON.stringify({ ...rec, settled, receipt }, null, 2));
+        }
+        else {
+            if (rec.allowed)
+                out(rec.safePayload);
+            const icon = rec.verdict === "BLOCK" ? "🛑" : rec.verdict === "REDACT" ? "🛡" : "✓";
+            err(`${icon} rail egress: ${rec.verdict} — ${rec.layers.map((l) => `${l.layer}${l.ok ? "✓" : "✗"}`).join(" · ")}`);
+            err(`   ${rec.note}`);
+            if (settled)
+                err(`   settled → ledger seq ${settled.seq} (${settled.chainHash.slice(0, 12)}…)`);
+            err(`   receipt ${receipt.receiptId ?? "(signed)"}`);
+        }
+        if (rec.verdict === "BLOCK")
+            process.exitCode = 2;
+    });
+    // ──────────────────────────── mneme policy ────────────────────────────
+    const p = program.command("policy").description("📜 DYNAMIC POLICY ENFORCEMENT — the deterministic access gate the rail consults before any context crosses. Configured via mneme.policy.json (deny-path globs, deny-content patterns, agent allow-list, byte cap). Fail-closed.");
+    p.command("check")
+        .description("Check a path/content/agent against the active policy. Verdict ALLOW | DENY + violations. Exit 2 on DENY.")
+        .option("--path <p>", "path to test.")
+        .option("--text <t>", "inline content to test.")
+        .option("--file <p>", "file whose path AND content to test.")
+        .option("--agent <id>", "agent id to test against the allow-list.")
+        .option("--json", "JSON output.")
+        .action(async (opts) => {
+        const cwd = process.cwd();
+        let content = typeof opts.text === "string" ? opts.text : "";
+        let path = opts.path;
+        if (opts.file) {
+            path = path ?? opts.file;
+            if (existsSync(opts.file)) {
+                try {
+                    content = readFileSync(opts.file, "utf8");
+                }
+                catch { /* */ }
+            }
+        }
+        const d = policy.checkPolicy({ ...(path ? { path } : {}), ...(content ? { content } : {}), ...(opts.agent ? { agent: opts.agent } : {}) }, loadPolicy(cwd));
+        if (opts.json) {
+            out(JSON.stringify(d, null, 2));
+        }
+        else {
+            out(`${d.verdict === "ALLOW" ? "✓ ALLOW" : "🛑 DENY"} — ${d.reason}`);
+            for (const v of d.violations)
+                out(`   • [${v.kind}] ${v.detail} (rule: ${v.rule})`);
+        }
+        if (!d.allowed)
+            process.exitCode = 2;
+    });
+    p.command("init")
+        .description("Write a default mneme.policy.json to the repo root (denies .env / secrets / keys / PII content). Edit to taste.")
+        .option("--force", "overwrite an existing policy file.")
+        .action((opts) => {
+        const cwd = process.cwd();
+        const dest = resolve(cwd, "mneme.policy.json");
+        if (existsSync(dest) && !opts.force) {
+            err(`mneme.policy.json already exists — pass --force to overwrite.`);
+            process.exitCode = 1;
+            return;
+        }
+        try {
+            writeFileSync(dest, JSON.stringify(policy.defaultPolicy(), null, 2) + "\n");
+            out(`✓ wrote ${dest}`);
+            err(`   the rail will consult this on every ingress crossing. Add agent allow-lists / size caps as needed.`);
+        }
+        catch (e) {
+            err(`failed to write policy: ${e.message}`);
+            process.exitCode = 1;
+        }
+    });
+    p.command("show")
+        .description("Print the active policy (the loaded mneme.policy.json, or the built-in default).")
+        .action(() => { out(JSON.stringify(loadPolicy(process.cwd()), null, 2)); });
+}
+//# sourceMappingURL=rail.js.map

package/dist/commands/rail.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rail.js","sourceRoot":"","sources":["../../src/commands/rail.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAClH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAElE,MAAM,iBAAiB,GAAG,gCAAgC,CAAC;AAC3D,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAC/B,SAAS,oBAAoB,CAAC,GAAW;IACvC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;QACvC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;YAAE,OAAO,EAAE,CAAC;QAC9B,OAAO,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAA4B,CAAC,CAAC;IACrH,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AACxB,CAAC;AACD,SAAS,sBAAsB,CAAC,GAAW,EAAE,GAA4B;IACvE,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IACvC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxE,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;AAChD,CAAC;AACD;;;;;;GAMG;AACH,SAAS,cAAc,CAAI,GAAW,EAAE,EAAW;IACjD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,gCAAgC,CAAC,CAAC;IAC5D,IAAI,CAAC;QAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAAE,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;IAC5G,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,IAAI,CAAC;YAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAAC,IAAI,GAAG,IAAI,CAAC;YAAC,MAAM;QAAC,CAAC;QAC/C,MAAM,CAAC;YACL,IAAI,CAAC;gBAAC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC;gBAAC,IAAI,GAAG,GAAG,MAAM,EAAE,CAAC;oBAAC,SAAS,CAAC,OAAO,CAAC,CAAC;oBAAC,SAAS;gBAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;YAC/H,oEAAoE;YACpE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QAAC,OAAO,EAAE,EAAE,CAAC;IAAC,CAAC;YACZ,CAAC;QAAC,IAAI,IAAI,EAAE,CAAC;YAAC,IAAI,CAAC;gBAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;IAAC,CAAC;AACvE,CAAC;AAED,SAAS,GAAG,CAAC,CAAS,IAAU,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;AACjE,SAAS,GAAG,CAAC,CAAS,IAAU,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;AAEjE,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,0DAA0D;AACxF,SAAS,SAAS;IAChB,OAAO,IAAI,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QACzB,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK;YAAE,OAAO,GAAG,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,GAAG,EAAE,CAAC;QAAC,IAAI,IAAI,GAAG,KAAK,CAAC;QAAC,IAAI,SAAS,GAAG,KAAK,CAAC;QACpD,MAAM,GAAG,GAAG,GAAG,EAAE;YACf,IAAI,IAAI;gBAAE,OAAO;YAAC,IAAI,GAAG,IAAI,CAAC;YAC9B,IAAI,SAAS;gBAAE,GAAG,CAAC,4BAA4B,SAAS,GAAG,SAAS,8FAA8F,CAAC,CAAC;YACpK,GAAG,CAAC,CAAC,CAAC,CAAC;QACT,CAAC,CAAC;QACF,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAClC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;YAAC,SAAS,GAAG,IAAI,CAAC;YAAC,GAAG,EAAE,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpG,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;AACL,CAAC;AACD,KAAK,UAAU,UAAU,CAAC,IAAsC;IAC9D,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC;IACpD,IAAI,IAAI,CAAC,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAAC,IAAI,CAAC;YAAC,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IAC3G,OAAO,SAAS,EAAE,CAAC;AACrB,CAAC;AACD,SAAS,UAAU,CAAC,GAAW;IAC7B,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QAC5C,IAAI,UAAU,CAAC,CAAC,CAAC;YAAE,OAAO,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACxF,CAAC;IAAC,MAAM,CAAC,CAAC,6BAA6B,CAAC,CAAC;IACzC,OAAO,MAAM,CAAC,aAAa,EAAE,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,yEAAyE;IACzE,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,2PAA2P,CAAC,CAAC;IAE3S,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;SACjB,WAAW,CAAC,wMAAwM,CAAC;SACrN,MAAM,CAAC,YAAY,EAAE,iBAAiB,CAAC;SACvC,MAAM,CAAC,YAAY,EAAE,mBAAmB,CAAC;SACzC,MAAM,CAAC,YAAY,EAAE,yDAAyD,CAAC;SAC/E,MAAM,CAAC,cAAc,EAAE,sCAAsC,CAAC;SAC9D,MAAM,CAAC,cAAc,EAAE,sDAAsD,CAAC;SAC9E,MAAM,CAAC,WAAW,EAAE,2DAA2D,CAAC;SAChF,MAAM,CAAC,QAAQ,EAAE,6BAA6B,CAAC;SAC/C,MAAM,CAAC,KAAK,EAAE,IAAyH,EAAE,EAAE;QAC1I,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE;YACxC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,MAAM,EAAE,UAAU,CAAC,GAAG,CAAC;YACvB,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW;SACxD,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5M,IAAI,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC;YAAC,IAAI,CAAC;gBAAC,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QAC7H,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;aAChE,CAAC;YACJ,IAAI,GAAG,CAAC,OAAO;gBAAE,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACtC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;YACpF,GAAG,CAAC,GAAG,IAAI,kBAAkB,GAAG,CAAC,OAAO,MAAM,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACpH,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YACtB,IAAI,GAAG,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM;gBAAE,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,kBAAkB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,qBAAqB,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,sCAAsC,EAAE,CAAC,CAAC;YAC1L,GAAG,CAAC,cAAc,OAAO,CAAC,SAAS,IAAI,UAAU,EAAE,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,GAAG,CAAC,OAAO,KAAK,OAAO;YAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEL,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;SAChB,WAAW,CAAC,uLAAuL,CAAC;SACpM,MAAM,CAAC,YAAY,EAAE,iBAAiB,CAAC;SACvC,MAAM,CAAC,YAAY,EAAE,mBAAmB,CAAC;SACzC,MAAM,CAAC,cAAc,EAAE,WAAW,CAAC;SACnC,MAAM,CAAC,iBAAiB,EAAE,iDAAiD,CAAC;SAC5E,MAAM,CAAC,YAAY,EAAE,iDAAiD,CAAC;SACvE,MAAM,CAAC,QAAQ,EAAE,6BAA6B,CAAC;SAC/C,MAAM,CAAC,KAAK,EAAE,IAA2G,EAAE,EAAE;QAC5H,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACrF,MAAM,GAAG,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE;YACvC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,aAAa,EAAE,IAAI,CAAC,QAAQ,KAAK,IAAI;SACtC,CAAC,CAAC;QACH,4EAA4E;QAC5E,IAAI,OAAO,GAA8C,IAAI,CAAC;QAC9D,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC;gBAC1B,OAAO,GAAG,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE;oBACjC,MAAM,OAAO,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;oBAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;oBAC/E,gEAAgE;oBAChE,uEAAuE;oBACvE,qEAAqE;oBACrE,4CAA4C;oBAC5C,MAAM,EAAE,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE;wBACnC,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;wBACxB,WAAW,EAAE,KAAK,CAAC,WAAW;wBAC9B,cAAc,EAAE,KAAK,CAAC,cAAc;wBACpC,aAAa,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;wBAClD,UAAU,EAAE,KAAK,CAAC,UAAU;wBAC5B,WAAW,EAAE,KAAK,CAAC,WAAW;qBAC/B,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;oBACvB,sBAAsB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;oBAChC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC;gBAC9D,CAAC,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC,CAAC,sDAAsD,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QACnN,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;aACzE,CAAC;YACJ,IAAI,GAAG,CAAC,OAAO;gBAAE,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACtC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;YACpF,GAAG,CAAC,GAAG,IAAI,iBAAiB,GAAG,CAAC,OAAO,MAAM,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACnH,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YACtB,IAAI,OAAO;gBAAE,GAAG,CAAC,2BAA2B,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;YAChG,GAAG,CAAC,cAAc,OAAO,CAAC,SAAS,IAAI,UAAU,EAAE,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,GAAG,CAAC,OAAO,KAAK,OAAO;YAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEL,yEAAyE;IACzE,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,iOAAiO,CAAC,CAAC;IAEnR,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;SACf,WAAW,CAAC,0GAA0G,CAAC;SACvH,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC;SACrC,MAAM,CAAC,YAAY,EAAE,yBAAyB,CAAC;SAC/C,MAAM,CAAC,YAAY,EAAE,sCAAsC,CAAC;SAC5D,MAAM,CAAC,cAAc,EAAE,0CAA0C,CAAC;SAClE,MAAM,CAAC,QAAQ,EAAE,cAAc,CAAC;SAChC,MAAM,CAAC,KAAK,EAAE,IAAqF,EAAE,EAAE;QACtG,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,IAAI,OAAO,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,IAAI,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACrB,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,IAAI,GAAG,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC;YAAC,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAAC,IAAI,CAAC;oBAAC,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC;QAAC,CAAC;QAC9I,MAAM,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5J,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;aAC9C,CAAC;YACJ,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YACtE,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU;gBAAE,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,WAAW,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;QACtF,CAAC;QACD,IAAI,CAAC,CAAC,CAAC,OAAO;YAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEL,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;SACd,WAAW,CAAC,iHAAiH,CAAC;SAC9H,MAAM,CAAC,SAAS,EAAE,oCAAoC,CAAC;SACvD,MAAM,CAAC,CAAC,IAAyB,EAAE,EAAE;QACpC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QAC/C,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC;YAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAC5I,IAAI,CAAC;YACH,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YAC5E,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;YACvB,GAAG,CAAC,uGAAuG,CAAC,CAAC;QAC/G,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YAAC,GAAG,CAAC,2BAA4B,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;YAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QAAC,CAAC;IAC/F,CAAC,CAAC,CAAC;IAEL,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;SACd,WAAW,CAAC,kFAAkF,CAAC;SAC/F,MAAM,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAChF,CAAC"}

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AA0JA,wBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA4gNvD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AA4JA,wBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA8gNvD"}

package/dist/index.js

@@ -87,6 +87,8 @@ import { registerScaffoldCommands } from "./commands/scaffold.js";
 import { registerBlindCommands } from "./commands/blind.js";
 import { registerChannelCommands } from "./commands/channel.js";
 import { registerSettlementCommands } from "./commands/settlement.js";
+import { registerFirewallCommands } from "./commands/firewall.js";
+import { registerRailCommands } from "./commands/rail.js";
 import { registerTrustCommands } from "./commands/trust.js";
 import { registerNuclearCommands } from "./commands/nuclear-cli.js";
 import { registerOvernightCommand } from "./commands/overnight.js";
@@ -4719,6 +4721,8 @@ export async function run(argv) {
     registerBlindCommands(program);
     registerChannelCommands(program);
     registerSettlementCommands(program);
+    registerFirewallCommands(program);
+    registerRailCommands(program);
     // ─── Trust calibrator (v1.31.0) -- per-subsystem precision/recall/band
     registerTrustCommands(program);
     // ─── Wisdom reactor (v1.33.0) -- five nuclear-physics formulas as Mneme metrics