mneme-ai 2.137.0 → 2.139.0

package/dist/commands/axia.d.ts

@@ -0,0 +1,27 @@
+/**
+ * `mneme axia` (v2.138.0) — AXIA (ἀξία, "worth"), membrane pillar 2: the Value
+ * Ledger. One signed, hash-chained, OFFLINE-verifiable summary of the value
+ * events Mneme's organs actually produced:
+ *   - tokens-saved          (pulled live from the treasury ledger)
+ *   - destructive-gated · secret-redacted · injection-neutralized ·
+ *     claim-corrected · omission-flagged  (recorded into AXIA's own ledger)
+ *
+ *   mneme axia                          # the signed value summary
+ *   mneme axia --price-per-1k 0.003     # …with USD from tokens-saved × your rate
+ *   mneme axia record --kind destructive-gated --source heph
+ *
+ * HONEST: counts are signed facts (events that HAPPENED). NOT "attacks
+ * prevented" and NEVER an estimated $ of damage — the only $ is
+ * tokens-saved × the price-per-1k YOU supply.
+ */
+import type { Command } from "commander";
+export declare const AXIA_LEDGER = ".mneme/axia/ledger.jsonl";
+export declare const TREASURY_LEDGER = ".mneme/treasury/ledger.jsonl";
+/** Shared appender — any organ records a value event. Total: never throws. */
+export declare function appendAxiaEvent(cwd: string, e: {
+    kind: string;
+    count?: number;
+    source: string;
+}): void;
+export declare function registerAxiaCommands(program: Command): void;
+//# sourceMappingURL=axia.d.ts.map

package/dist/commands/axia.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"axia.d.ts","sourceRoot":"","sources":["../../src/commands/axia.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAOzC,eAAO,MAAM,WAAW,6BAA6B,CAAC;AACtD,eAAO,MAAM,eAAe,iCAAiC,CAAC;AAE9D,8EAA8E;AAC9E,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAOtG;AAsCD,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAuC3D"}

package/dist/commands/axia.js

@@ -0,0 +1,136 @@
+/**
+ * `mneme axia` (v2.138.0) — AXIA (ἀξία, "worth"), membrane pillar 2: the Value
+ * Ledger. One signed, hash-chained, OFFLINE-verifiable summary of the value
+ * events Mneme's organs actually produced:
+ *   - tokens-saved          (pulled live from the treasury ledger)
+ *   - destructive-gated · secret-redacted · injection-neutralized ·
+ *     claim-corrected · omission-flagged  (recorded into AXIA's own ledger)
+ *
+ *   mneme axia                          # the signed value summary
+ *   mneme axia --price-per-1k 0.003     # …with USD from tokens-saved × your rate
+ *   mneme axia record --kind destructive-gated --source heph
+ *
+ * HONEST: counts are signed facts (events that HAPPENED). NOT "attacks
+ * prevented" and NEVER an estimated $ of damage — the only $ is
+ * tokens-saved × the price-per-1k YOU supply.
+ */
+import { existsSync, readFileSync, mkdirSync, appendFileSync } from "node:fs";
+import { join, dirname } from "node:path";
+function writeJson(p) { process.stdout.write(JSON.stringify(p, null, 2) + "\n"); }
+function writeText(l) { process.stdout.write(l + "\n"); }
+export const AXIA_LEDGER = ".mneme/axia/ledger.jsonl";
+export const TREASURY_LEDGER = ".mneme/treasury/ledger.jsonl";
+/** Shared appender — any organ records a value event. Total: never throws. */
+export function appendAxiaEvent(cwd, e) {
+    try {
+        const p = join(cwd, AXIA_LEDGER);
+        if (!existsSync(dirname(p)))
+            mkdirSync(dirname(p), { recursive: true });
+        const count = Number.isFinite(e.count) && e.count > 0 ? Math.floor(e.count) : 1;
+        appendFileSync(p, JSON.stringify({ kind: e.kind, count, source: e.source, at: Date.now() }) + "\n");
+    }
+    catch { /* best-effort — accounting never blocks work */ }
+}
+async function core() {
+    try {
+        const c = (await import("@mneme-ai/core"));
+        if (c.axia)
+            return c;
+    }
+    catch { /* */ }
+    return null;
+}
+/** Read AXIA's own event ledger + the treasury tokens-saved into a fused event list. */
+function gatherEvents(m, cwd) {
+    const events = [];
+    // AXIA's own recorded events (gated / redacted / corrected / neutralized / flagged)
+    const ap = join(cwd, AXIA_LEDGER);
+    if (existsSync(ap)) {
+        for (const line of readFileSync(ap, "utf8").split("\n")) {
+            if (!line.trim())
+                continue;
+            try {
+                const j = JSON.parse(line);
+                if (j && typeof j.kind === "string")
+                    events.push({ kind: j.kind, count: Number(j.count) || 1, source: String(j.source ?? "unknown"), at: Number(j.at) || undefined });
+            }
+            catch { /* skip */ }
+        }
+    }
+    // tokens-saved pulled LIVE from the treasury (single fused event, source=treasury)
+    try {
+        const tp = join(cwd, TREASURY_LEDGER);
+        if (m.treasury && existsSync(tp)) {
+            const tokensSaved = m.treasury.aggregate(m.treasury.parseLedger(readFileSync(tp, "utf8"))).tokensSaved;
+            if (tokensSaved > 0)
+                events.push({ kind: "tokens-saved", count: tokensSaved, source: "treasury" });
+        }
+    }
+    catch { /* */ }
+    return events;
+}
+export function registerAxiaCommands(program) {
+    const axia = program
+        .command("axia")
+        .description("💎 AXIA — the signed, hash-chained, OFFLINE-verifiable VALUE LEDGER (membrane pillar 2). Fuses what Mneme's organs actually did — tokens saved (treasury), destructive commands GATED, secrets redacted, injections neutralized, claims corrected, omissions flagged — into one number an auditor/insurer checks with a public key. HONEST: counts are facts, NOT 'attacks prevented'; the only $ is tokens-saved × YOUR price-per-1k — never an invented $ of damage.")
+        .option("--price-per-1k <usd>", "your vendor's INPUT price per 1k tokens → USD from tokens-saved only", (v) => parseFloat(v))
+        .option("--json", "JSON output (signed).")
+        .action(async (opts) => {
+        const m = await core();
+        if (!m) {
+            writeText("✗ core unavailable");
+            process.exitCode = 1;
+            return;
+        }
+        const cwd = process.cwd();
+        const events = gatherEvents(m, cwd);
+        const led = m.axia.buildAxiaLedger(events);
+        const s = m.axia.axiaSummary(led, opts.pricePer1k !== undefined ? { pricePer1k: opts.pricePer1k } : undefined);
+        let receipt = null;
+        try {
+            receipt = m.notary?.issueReceipt(cwd, { kind: "claim-verdict", subject: `axia:${s.totalEvents}ev/${s.tokensSaved}tok`, payload: { totalEvents: s.totalEvents, tokensSaved: s.tokensSaved, byKind: s.byKind }, includePayload: true });
+        }
+        catch { /* */ }
+        if (opts.json) {
+            writeJson({ ...s, signed: receipt });
+            return;
+        }
+        writeText(`💎 AXIA value ledger — ${s.totalEvents} value events · ${s.tokensSaved.toLocaleString()} tokens saved`);
+        const labels = { "destructive-gated": "destructive cmds GATED", "secret-redacted": "secrets redacted", "injection-neutralized": "injections neutralized", "claim-corrected": "claims corrected", "omission-flagged": "omissions flagged" };
+        for (const [k, label] of Object.entries(labels)) {
+            const n = s.byKind[k] ?? 0;
+            if (n > 0)
+                writeText(`     ${String(n).padStart(6)}  ${label}`);
+        }
+        if (s.tokensSaved > 0)
+            writeText(`     ${s.tokensSaved.toLocaleString().padStart(6)}  input tokens saved (treasury, ≈chars/4)`);
+        if (s.usdSaved !== null)
+            writeText(`   ≈ $${s.usdSaved.toLocaleString(undefined, { minimumFractionDigits: 2 })} saved at $${opts.pricePer1k}/1k tokens (your supplied price)`);
+        writeText(`   chain ${s.chainValid ? "✓ valid" : "🛑 BROKEN"}${receipt ? " · signed (verify offline with the NOTARY public key)" : ""}`);
+        writeText(`   ${s.note}`);
+        if (s.totalEvents === 0 && s.tokensSaved === 0)
+            writeText("   (no value events yet — they accrue as Mneme's organs gate/redact/correct/save during normal use.)");
+    });
+    axia
+        .command("record")
+        .description("Record one value event into AXIA's signed ledger (organs call this; you rarely do).")
+        .requiredOption("--kind <k>", "tokens-saved | destructive-gated | secret-redacted | injection-neutralized | claim-corrected | omission-flagged")
+        .option("--count <n>", "how many (default 1)", (v) => parseInt(v, 10))
+        .option("--source <s>", "which organ produced it", "manual")
+        .action(async (opts) => {
+        const m = await core();
+        if (!m) {
+            writeText("✗ core unavailable");
+            process.exitCode = 1;
+            return;
+        }
+        if (!m.axia.AXIA_KINDS.includes(opts.kind)) {
+            writeText(`✗ unknown kind '${opts.kind}'. one of: ${m.axia.AXIA_KINDS.join(", ")}`);
+            process.exitCode = 2;
+            return;
+        }
+        appendAxiaEvent(process.cwd(), { kind: opts.kind, count: opts.count, source: opts.source });
+        writeText(`✓ recorded ${opts.count ?? 1}× ${opts.kind} (source: ${opts.source})`);
+    });
+}
+//# sourceMappingURL=axia.js.map

package/dist/commands/axia.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"axia.js","sourceRoot":"","sources":["../../src/commands/axia.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC9E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE1C,SAAS,SAAS,CAAC,CAAU,IAAU,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;AACjG,SAAS,SAAS,CAAC,CAAS,IAAU,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;AAEvE,MAAM,CAAC,MAAM,WAAW,GAAG,0BAA0B,CAAC;AACtD,MAAM,CAAC,MAAM,eAAe,GAAG,8BAA8B,CAAC;AAE9D,8EAA8E;AAC9E,MAAM,UAAU,eAAe,CAAC,GAAW,EAAE,CAAmD;IAC9F,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QACjC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxE,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAK,CAAC,CAAC,KAAgB,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtG,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IACtG,CAAC;IAAC,MAAM,CAAC,CAAC,gDAAgD,CAAC,CAAC;AAC9D,CAAC;AAWD,KAAK,UAAU,IAAI;IACjB,IAAI,CAAC;QAAC,MAAM,CAAC,GAAG,CAAC,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAqB,CAAC;QAAC,IAAI,CAAC,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;IAC7G,OAAO,IAAI,CAAC;AACd,CAAC;AAED,wFAAwF;AACxF,SAAS,YAAY,CAAC,CAAQ,EAAE,GAAW;IACzC,MAAM,MAAM,GAAwE,EAAE,CAAC;IACvF,oFAAoF;IACpF,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAClC,IAAI,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;QACnB,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACxD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;gBAAE,SAAS;YAC3B,IAAI,CAAC;gBAAC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAAC,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,SAAS,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,SAAS,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;QACjO,CAAC;IACH,CAAC;IACD,mFAAmF;IACnF,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QACtC,IAAI,CAAC,CAAC,QAAQ,IAAI,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;YACjC,MAAM,WAAW,GAAG,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;YACvG,IAAI,WAAW,GAAG,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QACrG,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;IACjB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,MAAM,IAAI,GAAG,OAAO;SACjB,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,wcAAwc,CAAC;SACrd,MAAM,CAAC,sBAAsB,EAAE,sEAAsE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;SAC5H,MAAM,CAAC,QAAQ,EAAE,uBAAuB,CAAC;SACzC,MAAM,CAAC,KAAK,EAAE,IAA6C,EAAE,EAAE;QAC9D,MAAM,CAAC,GAAG,MAAM,IAAI,EAAE,CAAC;QAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;YAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAClG,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACpC,MAAM,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,CAE5G,CAAC;QACF,IAAI,OAAO,GAAY,IAAI,CAAC;QAC5B,IAAI,CAAC;YAAC,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,YAAY,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,WAAW,MAAM,CAAC,CAAC,WAAW,KAAK,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;QAC9P,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,SAAS,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAChE,SAAS,CAAC,0BAA0B,CAAC,CAAC,WAAW,mBAAmB,CAAC,CAAC,WAAW,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QACnH,MAAM,MAAM,GAA2B,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,CAAC;QACnQ,KAAK,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAAC,IAAI,CAAC,GAAG,CAAC;gBAAE,SAAS,CAAC,QAAQ,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;QAAC,CAAC;QACjJ,IAAI,CAAC,CAAC,WAAW,GAAG,CAAC;YAAE,SAAS,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,cAAc,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,2CAA2C,CAAC,CAAC;QAChI,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI;YAAE,SAAS,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,SAAS,EAAE,EAAE,qBAAqB,EAAE,CAAC,EAAE,CAAC,cAAc,IAAI,CAAC,UAAU,kCAAkC,CAAC,CAAC;QAC/K,SAAS,CAAC,YAAY,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,uDAAuD,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACzI,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1B,IAAI,CAAC,CAAC,WAAW,KAAK,CAAC,IAAI,CAAC,CAAC,WAAW,KAAK,CAAC;YAAE,SAAS,CAAC,sGAAsG,CAAC,CAAC;IACpK,CAAC,CAAC,CAAC;IAEL,IAAI;SACD,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,qFAAqF,CAAC;SAClG,cAAc,CAAC,YAAY,EAAE,iHAAiH,CAAC;SAC/I,MAAM,CAAC,aAAa,EAAE,sBAAsB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;SACrE,MAAM,CAAC,cAAc,EAAE,yBAAyB,EAAE,QAAQ,CAAC;SAC3D,MAAM,CAAC,KAAK,EAAE,IAAsD,EAAE,EAAE;QACvE,MAAM,CAAC,GAAG,MAAM,IAAI,EAAE,CAAC;QAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;YAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAClG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAAC,SAAS,CAAC,mBAAmB,IAAI,CAAC,IAAI,cAAc,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAClK,eAAe,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5F,SAAS,CAAC,cAAc,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,aAAa,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/pce.d.ts

@@ -0,0 +1,15 @@
+/**
+ * `mneme pce` (v2.139.0) — Proof-Carrying Edit (💎2). Attach a SIGNED certificate
+ * to an AI's diff that statically proves what it touches + introduces, so a
+ * reviewer/CI trusts the analysis offline without re-running it or trusting the
+ * author. Tampering with the diff OR the cert is caught.
+ *
+ *   git diff | mneme pce --scope "src/**" --forbid network,childProcess
+ *   mneme pce --diff change.patch --json > passport.json
+ *   git diff | mneme pce verify --passport passport.json --scope "src/**"
+ *
+ * Exit 2 on BLOCK (out-of-scope · secret added · forbidden primitive) — CI-gate.
+ */
+import type { Command } from "commander";
+export declare function registerPceCommands(program: Command): void;
+//# sourceMappingURL=pce.d.ts.map

package/dist/commands/pce.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pce.d.ts","sourceRoot":"","sources":["../../src/commands/pce.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAazC,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA0C1D"}

package/dist/commands/pce.js

@@ -0,0 +1,97 @@
+/**
+ * `mneme pce` (v2.139.0) — Proof-Carrying Edit (💎2). Attach a SIGNED certificate
+ * to an AI's diff that statically proves what it touches + introduces, so a
+ * reviewer/CI trusts the analysis offline without re-running it or trusting the
+ * author. Tampering with the diff OR the cert is caught.
+ *
+ *   git diff | mneme pce --scope "src/**" --forbid network,childProcess
+ *   mneme pce --diff change.patch --json > passport.json
+ *   git diff | mneme pce verify --passport passport.json --scope "src/**"
+ *
+ * Exit 2 on BLOCK (out-of-scope · secret added · forbidden primitive) — CI-gate.
+ */
+import { existsSync, readFileSync } from "node:fs";
+import { pce, notary } from "@mneme-ai/core";
+function out(s) { process.stdout.write(s + "\n"); }
+function readDiff(file) {
+    try {
+        if (file && file !== "-" && existsSync(file))
+            return readFileSync(file, "utf8");
+        return readFileSync(0, "utf8"); // stdin
+    }
+    catch {
+        return "";
+    }
+}
+function splitList(v) { return typeof v === "string" && v.trim() ? v.split(",").map((s) => s.trim()).filter(Boolean) : []; }
+export function registerPceCommands(program) {
+    const cmd = program
+        .command("pce")
+        .description("💎 PCE — Proof-Carrying Edit. Attach a SIGNED certificate to an AI's diff that statically PROVES what it does/doesn't do — which paths it touches, whether it stays inside a declared --scope, the dangerous primitives it introduces (eval/childProcess/fsDelete/network/dynamicImport), add/delete balance, and secret literals. A reviewer/CI verifies it OFFLINE (trusts the analysis, not the author); tampering with the diff OR the cert is caught. Exit 2 on BLOCK. HONEST: static lexical+structural analysis — proves declared checkable properties, NOT total runtime safety.")
+        .argument("[action]", "omit to certify; 'verify' to check a passport")
+        .option("--diff <file>", "unified diff file (default: stdin)")
+        .option("--scope <globs>", "comma-separated allowed path globs (e.g. \"src/**,test/**\")")
+        .option("--forbid <names>", "comma-separated primitives to BLOCK: eval,childProcess,fsDelete,network,dynamicImport")
+        .option("--passport <file>", "(verify) the passport JSON to check against the diff")
+        .option("--json", "JSON output")
+        .action((action, opts) => {
+        const diff = readDiff(opts.diff);
+        const analysisOpts = { declaredScope: splitList(opts.scope), forbidPrimitives: splitList(opts.forbid) };
+        if (action === "verify") {
+            if (!opts.passport || !existsSync(opts.passport)) {
+                out("✗ --passport <file> required for verify");
+                process.exitCode = 2;
+                return;
+            }
+            let passport;
+            try {
+                const j = JSON.parse(readFileSync(opts.passport, "utf8"));
+                passport = (j.passport ?? j);
+            }
+            catch {
+                out("✗ could not parse passport JSON");
+                process.exitCode = 2;
+                return;
+            }
+            const v = pce.verifyPassport(diff, passport, analysisOpts);
+            if (opts.json) {
+                out(JSON.stringify(v, null, 2));
+            }
+            else {
+                out(`${v.ok ? "✓ VERIFIED" : "🛑 INVALID"} — ${v.reason}`);
+            }
+            process.exitCode = v.ok ? 0 : 2;
+            return;
+        }
+        const passport = pce.buildPassport(diff, analysisOpts);
+        const cwd = process.cwd();
+        let receipt = null;
+        try {
+            receipt = notary.issueReceipt(cwd, { kind: "claim-verdict", subject: `pce:${passport.verdict}:${passport.diffHash.slice(0, 12)}`, payload: { diffHash: passport.diffHash, verdict: passport.verdict, propsHash: undefined }, includePayload: true });
+        }
+        catch { /* */ }
+        if (opts.json) {
+            out(JSON.stringify({ passport, signed: receipt }, null, 2));
+            process.exitCode = passport.verdict === "BLOCK" ? 2 : 0;
+            return;
+        }
+        const icon = passport.verdict === "PASS" ? "🟢" : passport.verdict === "REVIEW" ? "🟡" : "🛑";
+        const p = passport.properties;
+        out(`${icon} PCE ${passport.verdict} — ${p.touchedPaths.length} file(s), net ${p.netLines >= 0 ? "+" : ""}${p.netLines} lines`);
+        for (const path of p.touchedPaths.slice(0, 20))
+            out(`   • ${path}`);
+        const intro = Object.entries(p.introducedPrimitives).filter(([, v]) => v).map(([k]) => k);
+        if (intro.length)
+            out(`   primitives introduced: ${intro.join(", ")}`);
+        if (p.secretsAdded)
+            out(`   ⚠ secret-looking literal added`);
+        if (!p.inScope)
+            out(`   ⚠ out of scope: ${p.outOfScopePaths.join(", ")}`);
+        for (const r of passport.reasons)
+            out(`   → ${r}`);
+        out(`   diffHash ${passport.diffHash.slice(0, 16)}… ${receipt ? "· signed (verify offline with the NOTARY public key)" : ""}`);
+        process.exitCode = passport.verdict === "BLOCK" ? 2 : 0;
+    });
+    void cmd;
+}
+//# sourceMappingURL=pce.js.map

package/dist/commands/pce.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pce.js","sourceRoot":"","sources":["../../src/commands/pce.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAE7C,SAAS,GAAG,CAAC,CAAS,IAAU,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;AACjE,SAAS,QAAQ,CAAC,IAAa;IAC7B,IAAI,CAAC;QACH,IAAI,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAChF,OAAO,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ;IAC1C,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AACxB,CAAC;AACD,SAAS,SAAS,CAAC,CAAU,IAAc,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAE/I,MAAM,UAAU,mBAAmB,CAAC,OAAgB;IAClD,MAAM,GAAG,GAAG,OAAO;SAChB,OAAO,CAAC,KAAK,CAAC;SACd,WAAW,CAAC,0jBAA0jB,CAAC;SACvkB,QAAQ,CAAC,UAAU,EAAE,+CAA+C,CAAC;SACrE,MAAM,CAAC,eAAe,EAAE,oCAAoC,CAAC;SAC7D,MAAM,CAAC,iBAAiB,EAAE,8DAA8D,CAAC;SACzF,MAAM,CAAC,kBAAkB,EAAE,uFAAuF,CAAC;SACnH,MAAM,CAAC,mBAAmB,EAAE,sDAAsD,CAAC;SACnF,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC;SAC/B,MAAM,CAAC,CAAC,MAA0B,EAAE,IAA2F,EAAE,EAAE;QAClI,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,YAAY,GAAG,EAAE,aAAa,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,gBAAgB,EAAE,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAExG,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;gBAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACnI,IAAI,QAAsB,CAAC;YAC3B,IAAI,CAAC;gBAAC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;gBAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAiB,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;gBAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YAChM,MAAM,CAAC,GAAG,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;YAC3D,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;iBAAM,CAAC;gBAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YAAC,CAAC;YACxH,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAAC,OAAO;QAC1C,CAAC;QAED,MAAM,QAAQ,GAAG,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACvD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,IAAI,OAAO,GAAY,IAAI,CAAC;QAC5B,IAAI,CAAC;YAAC,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,OAAO,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;QAE7Q,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAAC,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAChJ,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9F,MAAM,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC;QAC9B,GAAG,CAAC,GAAG,IAAI,QAAQ,QAAQ,CAAC,OAAO,MAAM,CAAC,CAAC,YAAY,CAAC,MAAM,iBAAiB,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,QAAQ,CAAC,CAAC;QAChI,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;YAAE,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QACpE,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1F,IAAI,KAAK,CAAC,MAAM;YAAE,GAAG,CAAC,6BAA6B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvE,IAAI,CAAC,CAAC,YAAY;YAAE,GAAG,CAAC,mCAAmC,CAAC,CAAC;QAC7D,IAAI,CAAC,CAAC,CAAC,OAAO;YAAE,GAAG,CAAC,sBAAsB,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1E,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,OAAO;YAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACnD,GAAG,CAAC,eAAe,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,sDAAsD,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/H,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IACL,KAAK,GAAG,CAAC;AACX,CAAC"}

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AA+JA,wBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAqhNvD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAiKA,wBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuhNvD"}

package/dist/index.js

@@ -92,6 +92,8 @@ import { registerRailCommands } from "./commands/rail.js";
 import { registerBootCommands } from "./commands/boot.js";
 import { registerElleipsisCommands } from "./commands/elleipsis.js";
 import { registerSteleCommands } from "./commands/stele.js";
+import { registerAxiaCommands } from "./commands/axia.js";
+import { registerPceCommands } from "./commands/pce.js";
 import { registerTrustCommands } from "./commands/trust.js";
 import { registerNuclearCommands } from "./commands/nuclear-cli.js";
 import { registerOvernightCommand } from "./commands/overnight.js";
@@ -4733,6 +4735,8 @@ export async function run(argv) {
     registerBootCommands(program);
     registerElleipsisCommands(program);
     registerSteleCommands(program);
+    registerAxiaCommands(program);
+    registerPceCommands(program);
     // ─── Trust calibrator (v1.31.0) -- per-subsystem precision/recall/band
     registerTrustCommands(program);
     // ─── Wisdom reactor (v1.33.0) -- five nuclear-physics formulas as Mneme metrics