mneme-ai 2.138.0 → 2.140.0

package/dist/commands/pce.d.ts

@@ -0,0 +1,15 @@
+/**
+ * `mneme pce` (v2.139.0) — Proof-Carrying Edit (💎2). Attach a SIGNED certificate
+ * to an AI's diff that statically proves what it touches + introduces, so a
+ * reviewer/CI trusts the analysis offline without re-running it or trusting the
+ * author. Tampering with the diff OR the cert is caught.
+ *
+ *   git diff | mneme pce --scope "src/**" --forbid network,childProcess
+ *   mneme pce --diff change.patch --json > passport.json
+ *   git diff | mneme pce verify --passport passport.json --scope "src/**"
+ *
+ * Exit 2 on BLOCK (out-of-scope · secret added · forbidden primitive) — CI-gate.
+ */
+import type { Command } from "commander";
+export declare function registerPceCommands(program: Command): void;
+//# sourceMappingURL=pce.d.ts.map

package/dist/commands/pce.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pce.d.ts","sourceRoot":"","sources":["../../src/commands/pce.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAazC,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA0C1D"}

package/dist/commands/pce.js

@@ -0,0 +1,97 @@
+/**
+ * `mneme pce` (v2.139.0) — Proof-Carrying Edit (💎2). Attach a SIGNED certificate
+ * to an AI's diff that statically proves what it touches + introduces, so a
+ * reviewer/CI trusts the analysis offline without re-running it or trusting the
+ * author. Tampering with the diff OR the cert is caught.
+ *
+ *   git diff | mneme pce --scope "src/**" --forbid network,childProcess
+ *   mneme pce --diff change.patch --json > passport.json
+ *   git diff | mneme pce verify --passport passport.json --scope "src/**"
+ *
+ * Exit 2 on BLOCK (out-of-scope · secret added · forbidden primitive) — CI-gate.
+ */
+import { existsSync, readFileSync } from "node:fs";
+import { pce, notary } from "@mneme-ai/core";
+function out(s) { process.stdout.write(s + "\n"); }
+function readDiff(file) {
+    try {
+        if (file && file !== "-" && existsSync(file))
+            return readFileSync(file, "utf8");
+        return readFileSync(0, "utf8"); // stdin
+    }
+    catch {
+        return "";
+    }
+}
+function splitList(v) { return typeof v === "string" && v.trim() ? v.split(",").map((s) => s.trim()).filter(Boolean) : []; }
+export function registerPceCommands(program) {
+    const cmd = program
+        .command("pce")
+        .description("💎 PCE — Proof-Carrying Edit. Attach a SIGNED certificate to an AI's diff that statically PROVES what it does/doesn't do — which paths it touches, whether it stays inside a declared --scope, the dangerous primitives it introduces (eval/childProcess/fsDelete/network/dynamicImport), add/delete balance, and secret literals. A reviewer/CI verifies it OFFLINE (trusts the analysis, not the author); tampering with the diff OR the cert is caught. Exit 2 on BLOCK. HONEST: static lexical+structural analysis — proves declared checkable properties, NOT total runtime safety.")
+        .argument("[action]", "omit to certify; 'verify' to check a passport")
+        .option("--diff <file>", "unified diff file (default: stdin)")
+        .option("--scope <globs>", "comma-separated allowed path globs (e.g. \"src/**,test/**\")")
+        .option("--forbid <names>", "comma-separated primitives to BLOCK: eval,childProcess,fsDelete,network,dynamicImport")
+        .option("--passport <file>", "(verify) the passport JSON to check against the diff")
+        .option("--json", "JSON output")
+        .action((action, opts) => {
+        const diff = readDiff(opts.diff);
+        const analysisOpts = { declaredScope: splitList(opts.scope), forbidPrimitives: splitList(opts.forbid) };
+        if (action === "verify") {
+            if (!opts.passport || !existsSync(opts.passport)) {
+                out("✗ --passport <file> required for verify");
+                process.exitCode = 2;
+                return;
+            }
+            let passport;
+            try {
+                const j = JSON.parse(readFileSync(opts.passport, "utf8"));
+                passport = (j.passport ?? j);
+            }
+            catch {
+                out("✗ could not parse passport JSON");
+                process.exitCode = 2;
+                return;
+            }
+            const v = pce.verifyPassport(diff, passport, analysisOpts);
+            if (opts.json) {
+                out(JSON.stringify(v, null, 2));
+            }
+            else {
+                out(`${v.ok ? "✓ VERIFIED" : "🛑 INVALID"} — ${v.reason}`);
+            }
+            process.exitCode = v.ok ? 0 : 2;
+            return;
+        }
+        const passport = pce.buildPassport(diff, analysisOpts);
+        const cwd = process.cwd();
+        let receipt = null;
+        try {
+            receipt = notary.issueReceipt(cwd, { kind: "claim-verdict", subject: `pce:${passport.verdict}:${passport.diffHash.slice(0, 12)}`, payload: { diffHash: passport.diffHash, verdict: passport.verdict, propsHash: undefined }, includePayload: true });
+        }
+        catch { /* */ }
+        if (opts.json) {
+            out(JSON.stringify({ passport, signed: receipt }, null, 2));
+            process.exitCode = passport.verdict === "BLOCK" ? 2 : 0;
+            return;
+        }
+        const icon = passport.verdict === "PASS" ? "🟢" : passport.verdict === "REVIEW" ? "🟡" : "🛑";
+        const p = passport.properties;
+        out(`${icon} PCE ${passport.verdict} — ${p.touchedPaths.length} file(s), net ${p.netLines >= 0 ? "+" : ""}${p.netLines} lines`);
+        for (const path of p.touchedPaths.slice(0, 20))
+            out(`   • ${path}`);
+        const intro = Object.entries(p.introducedPrimitives).filter(([, v]) => v).map(([k]) => k);
+        if (intro.length)
+            out(`   primitives introduced: ${intro.join(", ")}`);
+        if (p.secretsAdded)
+            out(`   ⚠ secret-looking literal added`);
+        if (!p.inScope)
+            out(`   ⚠ out of scope: ${p.outOfScopePaths.join(", ")}`);
+        for (const r of passport.reasons)
+            out(`   → ${r}`);
+        out(`   diffHash ${passport.diffHash.slice(0, 16)}… ${receipt ? "· signed (verify offline with the NOTARY public key)" : ""}`);
+        process.exitCode = passport.verdict === "BLOCK" ? 2 : 0;
+    });
+    void cmd;
+}
+//# sourceMappingURL=pce.js.map

package/dist/commands/pce.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pce.js","sourceRoot":"","sources":["../../src/commands/pce.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAE7C,SAAS,GAAG,CAAC,CAAS,IAAU,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;AACjE,SAAS,QAAQ,CAAC,IAAa;IAC7B,IAAI,CAAC;QACH,IAAI,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAChF,OAAO,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ;IAC1C,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AACxB,CAAC;AACD,SAAS,SAAS,CAAC,CAAU,IAAc,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAE/I,MAAM,UAAU,mBAAmB,CAAC,OAAgB;IAClD,MAAM,GAAG,GAAG,OAAO;SAChB,OAAO,CAAC,KAAK,CAAC;SACd,WAAW,CAAC,0jBAA0jB,CAAC;SACvkB,QAAQ,CAAC,UAAU,EAAE,+CAA+C,CAAC;SACrE,MAAM,CAAC,eAAe,EAAE,oCAAoC,CAAC;SAC7D,MAAM,CAAC,iBAAiB,EAAE,8DAA8D,CAAC;SACzF,MAAM,CAAC,kBAAkB,EAAE,uFAAuF,CAAC;SACnH,MAAM,CAAC,mBAAmB,EAAE,sDAAsD,CAAC;SACnF,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC;SAC/B,MAAM,CAAC,CAAC,MAA0B,EAAE,IAA2F,EAAE,EAAE;QAClI,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,YAAY,GAAG,EAAE,aAAa,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,gBAAgB,EAAE,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAExG,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;gBAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACnI,IAAI,QAAsB,CAAC;YAC3B,IAAI,CAAC;gBAAC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;gBAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAiB,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;gBAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YAChM,MAAM,CAAC,GAAG,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;YAC3D,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;iBAAM,CAAC;gBAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YAAC,CAAC;YACxH,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAAC,OAAO;QAC1C,CAAC;QAED,MAAM,QAAQ,GAAG,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACvD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,IAAI,OAAO,GAAY,IAAI,CAAC;QAC5B,IAAI,CAAC;YAAC,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,OAAO,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;QAE7Q,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAAC,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAChJ,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9F,MAAM,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC;QAC9B,GAAG,CAAC,GAAG,IAAI,QAAQ,QAAQ,CAAC,OAAO,MAAM,CAAC,CAAC,YAAY,CAAC,MAAM,iBAAiB,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,QAAQ,CAAC,CAAC;QAChI,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;YAAE,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QACpE,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1F,IAAI,KAAK,CAAC,MAAM;YAAE,GAAG,CAAC,6BAA6B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvE,IAAI,CAAC,CAAC,YAAY;YAAE,GAAG,CAAC,mCAAmC,CAAC,CAAC;QAC7D,IAAI,CAAC,CAAC,CAAC,OAAO;YAAE,GAAG,CAAC,sBAAsB,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1E,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,OAAO;YAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACnD,GAAG,CAAC,eAAe,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,sDAAsD,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/H,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IACL,KAAK,GAAG,CAAC;AACX,CAAC"}

package/dist/commands/regret.d.ts

@@ -0,0 +1,24 @@
+/**
+ * `mneme regret` (v2.140.0) — the REGRET ORACLE (💎3). A signed, cross-vendor
+ * calibration of how often an edit carrying a given signal was ACTUALLY
+ * regretted later (reverted / test failed). Backward-looking, not fortune-telling.
+ *
+ *   mneme regret record --features "primitive:network,area:auth,vendor:grok" --regretted
+ *   git diff | mneme regret record --diff - --vendor grok --regretted   # auto-derive signals
+ *   git diff | mneme regret score --diff - --vendor grok
+ *   mneme regret vendors
+ *
+ * `score` exit 2 on band HIGH (CI-gate). Honest: a historical base rate with a
+ * Wilson interval + UNKNOWN when support is thin — never a prediction.
+ */
+import type { Command } from "commander";
+/**
+ * Attach the REGRET ORACLE calibration as subcommands of the EXISTING `regret`
+ * command (which lists reverted commits — the raw outcome source). So:
+ *   mneme regret            → the git revert/hotfix lister (unchanged)
+ *   mneme regret score      → calibrated regret base rate for an edit's signals
+ *   mneme regret record     → record an outcome into the calibration ledger
+ *   mneme regret vendors    → cross-vendor regret comparison
+ */
+export declare function attachRegretOracle(regretCmd: Command): void;
+//# sourceMappingURL=regret.d.ts.map

package/dist/commands/regret.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"regret.d.ts","sourceRoot":"","sources":["../../src/commands/regret.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAuCzC;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,OAAO,GAAG,IAAI,CAoD3D"}

package/dist/commands/regret.js

@@ -0,0 +1,155 @@
+/**
+ * `mneme regret` (v2.140.0) — the REGRET ORACLE (💎3). A signed, cross-vendor
+ * calibration of how often an edit carrying a given signal was ACTUALLY
+ * regretted later (reverted / test failed). Backward-looking, not fortune-telling.
+ *
+ *   mneme regret record --features "primitive:network,area:auth,vendor:grok" --regretted
+ *   git diff | mneme regret record --diff - --vendor grok --regretted   # auto-derive signals
+ *   git diff | mneme regret score --diff - --vendor grok
+ *   mneme regret vendors
+ *
+ * `score` exit 2 on band HIGH (CI-gate). Honest: a historical base rate with a
+ * Wilson interval + UNKNOWN when support is thin — never a prediction.
+ */
+import { existsSync, readFileSync, mkdirSync, appendFileSync } from "node:fs";
+import { join, dirname } from "node:path";
+import { regret, pce, notary } from "@mneme-ai/core";
+function out(s) { process.stdout.write(s + "\n"); }
+const LEDGER = ".mneme/regret/outcomes.jsonl";
+function splitList(v) { return typeof v === "string" && v.trim() ? v.split(",").map((s) => s.trim()).filter(Boolean) : []; }
+function readDiff(file) { try {
+    if (file && file !== "-" && existsSync(file))
+        return readFileSync(file, "utf8");
+    if (file === "-")
+        return readFileSync(0, "utf8");
+}
+catch { /* */ } return ""; }
+/** Derive observable signals from a diff (via PCE's static analysis) + a vendor. */
+function deriveFeatures(diff, vendor) {
+    const f = [];
+    try {
+        const props = pce.analyzeDiff(diff);
+        for (const [k, v] of Object.entries(props.introducedPrimitives))
+            if (v)
+                f.push(`primitive:${k.toLowerCase()}`);
+        if (props.massDeletion)
+            f.push("mass-deletion");
+        if (props.touchedPaths.some((p) => /delete/.test(p))) { /* noop */ }
+        // top-level dir as "area:*"
+        for (const p of props.touchedPaths) {
+            const top = p.split("/")[0];
+            if (top)
+                f.push(`area:${top.toLowerCase()}`);
+        }
+        f.push(props.touchedPaths.length > 5 ? "breadth:wide" : "breadth:narrow");
+    }
+    catch { /* */ }
+    if (vendor)
+        f.push(`vendor:${vendor.toLowerCase()}`);
+    return Array.from(new Set(f));
+}
+function loadModel(cwd) {
+    const p = join(cwd, LEDGER);
+    const events = [];
+    if (existsSync(p)) {
+        for (const line of readFileSync(p, "utf8").split("\n")) {
+            if (!line.trim())
+                continue;
+            try {
+                const j = JSON.parse(line);
+                if (Array.isArray(j.features))
+                    events.push({ features: j.features, regretted: j.regretted === true });
+            }
+            catch { /* */ }
+        }
+    }
+    return regret.buildRegretModel(events);
+}
+/**
+ * Attach the REGRET ORACLE calibration as subcommands of the EXISTING `regret`
+ * command (which lists reverted commits — the raw outcome source). So:
+ *   mneme regret            → the git revert/hotfix lister (unchanged)
+ *   mneme regret score      → calibrated regret base rate for an edit's signals
+ *   mneme regret record     → record an outcome into the calibration ledger
+ *   mneme regret vendors    → cross-vendor regret comparison
+ */
+export function attachRegretOracle(regretCmd) {
+    regretCmd
+        .command("score")
+        .description("💎 REGRET ORACLE — calibrated regret base rate for an edit's signals (Wilson 95% LOWER bound of the riskiest signal, UNKNOWN when support is thin). Pass --diff - to derive signals via PCE. Exit 2 on HIGH. HONEST: a backward-looking historical base rate, not a prediction.")
+        .option("--features <list>", "comma-separated signals (e.g. \"primitive:network,area:auth,vendor:grok\")")
+        .option("--diff <file>", "derive signals from a unified diff (PCE static analysis); '-' = stdin")
+        .option("--vendor <name>", "tag the vendor (adds vendor:<name>)")
+        .option("--min-support <n>", "min samples before a signal counts (default 5)", (v) => parseInt(v, 10))
+        .option("--json", "JSON output")
+        .action((opts) => {
+        const cwd = process.cwd();
+        const features = opts.diff !== undefined ? deriveFeatures(readDiff(opts.diff), opts.vendor) : (() => { const f = splitList(opts.features); if (opts.vendor)
+            f.push(`vendor:${opts.vendor.toLowerCase()}`); return f; })();
+        const model = loadModel(cwd);
+        const s = regret.scoreRegret(model, features, opts.minSupport !== undefined ? { minSupport: opts.minSupport } : undefined);
+        let receipt = null;
+        try {
+            receipt = notary.issueReceipt(cwd, { kind: "claim-verdict", subject: `regret:${s.band}`, payload: { band: s.band, lb: s.regretRateLowerBound, support: s.support }, includePayload: true });
+        }
+        catch { /* */ }
+        if (opts.json) {
+            out(JSON.stringify({ ...s, signed: receipt }, null, 2));
+            process.exitCode = s.band === "HIGH" ? 2 : 0;
+            return;
+        }
+        const icon = s.band === "HIGH" ? "🛑" : s.band === "ELEVATED" ? "🟡" : s.band === "LOW" ? "🟢" : "❔";
+        out(`${icon} REGRET ${s.band}${s.band !== "UNKNOWN" ? ` — ≥${(s.regretRateLowerBound * 100).toFixed(1)}% of similar edits were regretted (Wilson LB · ${(s.observedRate * 100).toFixed(0)}% observed · n=${s.support})` : " — not enough recorded outcomes for these signals"}`);
+        for (const d of s.drivers)
+            out(`   • ${d.feature}: ${(d.wilsonLow * 100).toFixed(1)}% LB (n=${d.n})`);
+        out(`   ${s.note}`);
+        if (receipt)
+            out(`   ✓ signed (verify offline with the NOTARY public key)`);
+        process.exitCode = s.band === "HIGH" ? 2 : 0;
+    });
+    regretCmd
+        .command("record")
+        .description("💎 REGRET ORACLE — record one real outcome (signals + --regretted) into the signed calibration ledger.")
+        .option("--features <list>", "comma-separated signals")
+        .option("--diff <file>", "derive signals from a unified diff; '-' = stdin")
+        .option("--vendor <name>", "tag the vendor")
+        .option("--regretted", "this outcome WAS regretted (reverted / test failed)")
+        .action((opts) => {
+        const cwd = process.cwd();
+        const features = opts.diff !== undefined ? deriveFeatures(readDiff(opts.diff), opts.vendor) : (() => { const f = splitList(opts.features); if (opts.vendor)
+            f.push(`vendor:${opts.vendor.toLowerCase()}`); return f; })();
+        if (!features.length) {
+            out("✗ no signals — pass --features or --diff");
+            process.exitCode = 2;
+            return;
+        }
+        try {
+            const p = join(cwd, LEDGER);
+            if (!existsSync(dirname(p)))
+                mkdirSync(dirname(p), { recursive: true });
+            appendFileSync(p, JSON.stringify({ features, regretted: opts.regretted === true, at: Date.now() }) + "\n");
+        }
+        catch { /* */ }
+        out(`✓ recorded outcome (${opts.regretted ? "REGRETTED" : "stable"}): ${features.join(", ")}`);
+    });
+    regretCmd
+        .command("vendors")
+        .description("💎 REGRET ORACLE — cross-vendor regret comparison (Wilson LB, riskiest first).")
+        .option("--json", "JSON output")
+        .action((opts) => {
+        const vr = regret.vendorRegret(loadModel(process.cwd()));
+        if (opts.json) {
+            out(JSON.stringify(vr, null, 2));
+            return;
+        }
+        if (!vr.length) {
+            out("💎 Regret Oracle — no vendor-tagged outcomes recorded yet.");
+            return;
+        }
+        out("💎 Regret Oracle — cross-vendor regret (riskiest first, Wilson 95% LB):");
+        for (const v of vr)
+            out(`   ${v.feature.replace("vendor:", "").padEnd(10)} ${(v.wilsonLow * 100).toFixed(1)}% LB · ${(v.rate * 100).toFixed(0)}% observed · n=${v.n}`);
+        out("   (historical base rate from your own revert/test outcomes — not a prediction.)");
+    });
+}
+//# sourceMappingURL=regret.js.map

package/dist/commands/regret.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"regret.js","sourceRoot":"","sources":["../../src/commands/regret.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC9E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAErD,SAAS,GAAG,CAAC,CAAS,IAAU,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;AACjE,MAAM,MAAM,GAAG,8BAA8B,CAAC;AAE9C,SAAS,SAAS,CAAC,CAAU,IAAc,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/I,SAAS,QAAQ,CAAC,IAAa,IAAY,IAAI,CAAC;IAAC,IAAI,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAAC,IAAI,IAAI,KAAK,GAAG;QAAE,OAAO,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AAAC,CAAC;AAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;AAElN,oFAAoF;AACpF,SAAS,cAAc,CAAC,IAAY,EAAE,MAAe;IACnD,MAAM,CAAC,GAAa,EAAE,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACpC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC;YAAE,IAAI,CAAC;gBAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAC/G,IAAI,KAAK,CAAC,YAAY;YAAE,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAChD,IAAI,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC;QACpE,4BAA4B;QAC5B,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;YAAC,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAAC,IAAI,GAAG;gBAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAAC,CAAC;QAClH,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;IACjB,IAAI,MAAM;QAAE,CAAC,CAAC,IAAI,CAAC,UAAU,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACrD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,SAAS,CAAC,GAAW;IAC5B,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC5B,MAAM,MAAM,GAAyB,EAAE,CAAC;IACxC,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;QAClB,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACvD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;gBAAE,SAAS;YAC3B,IAAI,CAAC;gBAAC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;oBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;QAC5J,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;AACzC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,SAAkB;IACnD,SAAS;SACN,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,iRAAiR,CAAC;SAC9R,MAAM,CAAC,mBAAmB,EAAE,4EAA4E,CAAC;SACzG,MAAM,CAAC,eAAe,EAAE,uEAAuE,CAAC;SAChG,MAAM,CAAC,iBAAiB,EAAE,qCAAqC,CAAC;SAChE,MAAM,CAAC,mBAAmB,EAAE,gDAAgD,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;SACrG,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC;SAC/B,MAAM,CAAC,CAAC,IAAgG,EAAE,EAAE;QAC3G,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM;YAAE,CAAC,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1N,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC3H,IAAI,OAAO,GAAY,IAAI,CAAC;QAC5B,IAAI,CAAC;YAAC,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,oBAAoB,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;QACpN,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACjI,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;QACrG,GAAG,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,kDAAkD,CAAC,CAAC,CAAC,YAAY,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,mDAAmD,EAAE,CAAC,CAAC;QACjR,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO;YAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACtG,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACpB,IAAI,OAAO;YAAE,GAAG,CAAC,yDAAyD,CAAC,CAAC;QAC5E,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEL,SAAS;SACN,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,wGAAwG,CAAC;SACrH,MAAM,CAAC,mBAAmB,EAAE,yBAAyB,CAAC;SACtD,MAAM,CAAC,eAAe,EAAE,iDAAiD,CAAC;SAC1E,MAAM,CAAC,iBAAiB,EAAE,gBAAgB,CAAC;SAC3C,MAAM,CAAC,aAAa,EAAE,qDAAqD,CAAC;SAC5E,MAAM,CAAC,CAAC,IAAgF,EAAE,EAAE;QAC3F,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM;YAAE,CAAC,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1N,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;YAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACxG,IAAI,CAAC;YAAC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAAC,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,KAAK,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;QACzO,GAAG,CAAC,uBAAuB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjG,CAAC,CAAC,CAAC;IAEL,SAAS;SACN,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,gFAAgF,CAAC;SAC7F,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC;SAC/B,MAAM,CAAC,CAAC,IAAwB,EAAE,EAAE;QACnC,MAAM,EAAE,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACzD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAC5D,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;YAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAC9F,GAAG,CAAC,yEAAyE,CAAC,CAAC;QAC/E,KAAK,MAAM,CAAC,IAAI,EAAE;YAAE,GAAG,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACvK,GAAG,CAAC,kFAAkF,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAgKA,wBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAshNvD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAkKA,wBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA0hNvD"}

package/dist/index.js

@@ -93,6 +93,8 @@ import { registerBootCommands } from "./commands/boot.js";
 import { registerElleipsisCommands } from "./commands/elleipsis.js";
 import { registerSteleCommands } from "./commands/stele.js";
 import { registerAxiaCommands } from "./commands/axia.js";
+import { registerPceCommands } from "./commands/pce.js";
+import { attachRegretOracle } from "./commands/regret.js";
 import { registerTrustCommands } from "./commands/trust.js";
 import { registerNuclearCommands } from "./commands/nuclear-cli.js";
 import { registerOvernightCommand } from "./commands/overnight.js";
@@ -1751,7 +1753,7 @@ export async function run(argv) {
         process.exit(await chatCommand({ cwd: process.cwd(), noLlm: opts.llm === false }));
     });
     // ─── Sprint 4 killer commands ────────────────────────────────────────
-    program
+    const regretCmd = program
         .command("regret", { hidden: true })
         .description("Surface commits that were shipped and immediately fixed/reverted")
         .option("--window-days <n>", "follow-up window", (v) => Number(v), 7)
@@ -1763,6 +1765,9 @@ export async function run(argv) {
             json: opts.json,
         }));
     });
+    // 💎 v2.140.0 — attach the REGRET ORACLE calibration as subcommands
+    // (`regret score|record|vendors`); bare `regret` stays the git revert lister.
+    attachRegretOracle(regretCmd);
     program
         .command("bus-factor", { hidden: true })
         .description("Identify single-source-of-truth knowledge holders + pairing recommendations")
@@ -4735,6 +4740,7 @@ export async function run(argv) {
     registerElleipsisCommands(program);
     registerSteleCommands(program);
     registerAxiaCommands(program);
+    registerPceCommands(program);
     // ─── Trust calibrator (v1.31.0) -- per-subsystem precision/recall/band
     registerTrustCommands(program);
     // ─── Wisdom reactor (v1.33.0) -- five nuclear-physics formulas as Mneme metrics