mneme-ai 2.146.0 → 2.148.0

package/dist/commands/mycelium.d.ts

@@ -0,0 +1,13 @@
+/**
+ * `mneme mycelium` (v2.147.0) — the Sovereign Data Flywheel. Share signed,
+ * content-free lesson digests across Mneme nodes so the whole network gets
+ * smarter — with NO central data store. Local data never leaves; only hashes +
+ * DP-noised counts do.
+ *
+ *   mneme mycelium bundle --out lessons.bundle.json   # signed, content-free, DP-noised
+ *   mneme mycelium merge  --bundle peer.bundle.json    # CRDT-merge a peer's lessons
+ *   mneme mycelium status                              # mesh size + worked/failed split
+ */
+import type { Command } from "commander";
+export declare function registerMyceliumCommands(program: Command): void;
+//# sourceMappingURL=mycelium.d.ts.map

package/dist/commands/mycelium.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mycelium.d.ts","sourceRoot":"","sources":["../../src/commands/mycelium.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAoBzC,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA2C/D"}

package/dist/commands/mycelium.js

@@ -0,0 +1,116 @@
+/**
+ * `mneme mycelium` (v2.147.0) — the Sovereign Data Flywheel. Share signed,
+ * content-free lesson digests across Mneme nodes so the whole network gets
+ * smarter — with NO central data store. Local data never leaves; only hashes +
+ * DP-noised counts do.
+ *
+ *   mneme mycelium bundle --out lessons.bundle.json   # signed, content-free, DP-noised
+ *   mneme mycelium merge  --bundle peer.bundle.json    # CRDT-merge a peer's lessons
+ *   mneme mycelium status                              # mesh size + worked/failed split
+ */
+import { existsSync, readFileSync, writeFileSync, mkdirSync } from "node:fs";
+import { join, dirname } from "node:path";
+import { mycelium as myc, notary } from "@mneme-ai/core";
+function out(s) { process.stdout.write(s + "\n"); }
+const MESH = ".mneme/mycelium/mesh.json";
+/** Best-effort: harvest local outcomes from the regret + nkl ledgers (content stays local). */
+function localOutcomes(cwd) {
+    const o = [];
+    try {
+        const rp = join(cwd, ".mneme", "regret", "outcomes.jsonl");
+        if (existsSync(rp))
+            for (const l of readFileSync(rp, "utf8").split("\n")) {
+                if (!l.trim())
+                    continue;
+                try {
+                    const j = JSON.parse(l);
+                    o.push({ topic: (j.features || []).join(" "), approach: (j.features || []).join(","), kind: j.regretted ? "failed" : "worked" });
+                }
+                catch { /* */ }
+            }
+    }
+    catch { /* */ }
+    return o;
+}
+function readMesh(cwd) { try {
+    const p = join(cwd, MESH);
+    if (existsSync(p)) {
+        const j = JSON.parse(readFileSync(p, "utf8"));
+        return Array.isArray(j.lessons) ? j.lessons : [];
+    }
+}
+catch { /* */ } return []; }
+function writeMesh(cwd, lessons) { try {
+    const p = join(cwd, MESH);
+    if (!existsSync(dirname(p)))
+        mkdirSync(dirname(p), { recursive: true });
+    writeFileSync(p, JSON.stringify({ v: 1, lessons }, null, 2));
+}
+catch { /* */ } }
+export function registerMyceliumCommands(program) {
+    const m = program
+        .command("mycelium")
+        .description("🍄 MYCELIUM — the Sovereign Data Flywheel: share SIGNED, content-free lesson digests (hashes + DP-noised counts, never raw code/secrets) across Mneme nodes so the whole network gets smarter with NO central data store. Captures what WORKED and what FAILED (negative knowledge). The privacy-preserving flywheel only a local-first system can run.");
+    m.command("bundle")
+        .description("build a signed, content-free, DP-noised bundle of local lessons to share with peers.")
+        .option("--out <file>", "write the bundle JSON here (else stdout)")
+        .option("--epsilon <n>", "differential-privacy epsilon (default 1)", (v) => parseFloat(v))
+        .action((opts) => {
+        const cwd = process.cwd();
+        const lessons = myc.extractLessons(localOutcomes(cwd), "node");
+        const b = myc.buildBundle(lessons, { epsilon: opts.epsilon ?? 1, sample: () => 0 });
+        let receipt = null;
+        try {
+            receipt = notary.issueReceipt(cwd, { kind: "memory-capsule", subject: `mycelium.bundle:${b.lessons.length}`, payload: { count: b.lessons.length, epsilon: b.epsilon }, includePayload: true });
+        }
+        catch { /* */ }
+        const bundle = { ...b, signed: receipt };
+        if (opts.out) {
+            try {
+                writeFileSync(opts.out, JSON.stringify(bundle, null, 2));
+                out(`🍄 wrote ${b.lessons.length} content-free lessons → ${opts.out} (signed, DP ε=${b.epsilon})`);
+            }
+            catch {
+                out("✗ write failed");
+                process.exitCode = 1;
+            }
+        }
+        else
+            out(JSON.stringify(bundle, null, 2));
+    });
+    m.command("merge")
+        .description("CRDT-merge a peer's lesson bundle into the local mesh (signature-verified; forged dropped). Commutative + idempotent.")
+        .requiredOption("--bundle <file>", "peer bundle JSON")
+        .action((opts) => {
+        const cwd = process.cwd();
+        if (!existsSync(opts.bundle)) {
+            out("✗ bundle not found");
+            process.exitCode = 2;
+            return;
+        }
+        let incoming = [];
+        try {
+            const j = JSON.parse(readFileSync(opts.bundle, "utf8"));
+            incoming = Array.isArray(j.lessons) ? j.lessons : [];
+        }
+        catch {
+            out("✗ bad bundle JSON");
+            process.exitCode = 2;
+            return;
+        }
+        const r = myc.mergeBundles(readMesh(cwd), incoming);
+        writeMesh(cwd, r.merged);
+        out(`🍄 merged — +${r.added} new · ~${r.updated} updated · ${r.dropped} dropped · mesh now ${r.merged.length} lessons`);
+    });
+    m.command("status")
+        .description("mesh size + worked/failed split + topics covered.")
+        .action(() => {
+        const mesh = readMesh(process.cwd());
+        const worked = mesh.filter((l) => l.kind === "worked").length;
+        const failed = mesh.filter((l) => l.kind === "failed").length;
+        const topics = new Set(mesh.map((l) => l.topicHash)).size;
+        out(`🍄 MYCELIUM mesh — ${mesh.length} lessons · ✅ ${worked} worked · ❌ ${failed} failed (negative knowledge) · ${topics} topics`);
+        out("   content-free + signed; the network compounds without a central data store.");
+    });
+}
+//# sourceMappingURL=mycelium.js.map

package/dist/commands/mycelium.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mycelium.js","sourceRoot":"","sources":["../../src/commands/mycelium.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,QAAQ,IAAI,GAAG,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAEzD,SAAS,GAAG,CAAC,CAAS,IAAU,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;AACjE,MAAM,IAAI,GAAG,2BAA2B,CAAC;AAEzC,+FAA+F;AAC/F,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,CAAC,GAAuB,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC;QAC3D,IAAI,UAAU,CAAC,EAAE,CAAC;YAAE,KAAK,MAAM,CAAC,IAAI,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE;oBAAE,SAAS;gBAAC,IAAI,CAAC;oBAAC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;oBAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC;IAC3R,CAAC;IAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;IACjB,OAAO,CAAC,CAAC;AACX,CAAC;AACD,SAAS,QAAQ,CAAC,GAAW,IAAkB,IAAI,CAAC;IAAC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAAC,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;QAAC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QAAC,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IAAC,CAAC;AAAC,CAAC;AAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;AACtO,SAAS,SAAS,CAAC,GAAW,EAAE,OAAqB,IAAU,IAAI,CAAC;IAAC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAAC,CAAC;AAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAE1P,MAAM,UAAU,wBAAwB,CAAC,OAAgB;IACvD,MAAM,CAAC,GAAG,OAAO;SACd,OAAO,CAAC,UAAU,CAAC;SACnB,WAAW,CAAC,yVAAyV,CAAC,CAAC;IAE1W,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;SAChB,WAAW,CAAC,sFAAsF,CAAC;SACnG,MAAM,CAAC,cAAc,EAAE,0CAA0C,CAAC;SAClE,MAAM,CAAC,eAAe,EAAE,0CAA0C,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;SACzF,MAAM,CAAC,CAAC,IAAwC,EAAE,EAAE;QACnD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,GAAG,CAAC,cAAc,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;QAC/D,MAAM,CAAC,GAAG,GAAG,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QACpF,IAAI,OAAO,GAAY,IAAI,CAAC;QAC5B,IAAI,CAAC;YAAC,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,mBAAmB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;QACvN,MAAM,MAAM,GAAG,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QACzC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YAAC,IAAI,CAAC;gBAAC,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBAAC,GAAG,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,MAAM,2BAA2B,IAAI,CAAC,GAAG,kBAAkB,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;gBAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YAAC,CAAC;QAAC,CAAC;;YACzO,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEL,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;SACf,WAAW,CAAC,uHAAuH,CAAC;SACpI,cAAc,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;SACrD,MAAM,CAAC,CAAC,IAAwB,EAAE,EAAE;QACnC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;YAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAC1F,IAAI,QAAQ,GAAiB,EAAE,CAAC;QAChC,IAAI,CAAC;YAAC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;YAAC,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;YAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACxL,MAAM,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;QACpD,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;QACzB,GAAG,CAAC,gBAAgB,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,OAAO,cAAc,CAAC,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,MAAM,UAAU,CAAC,CAAC;IAC1H,CAAC,CAAC,CAAC;IAEL,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;SAChB,WAAW,CAAC,mDAAmD,CAAC;SAChE,MAAM,CAAC,GAAG,EAAE;QACX,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC;QAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC;QAC9D,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1D,GAAG,CAAC,sBAAsB,IAAI,CAAC,MAAM,gBAAgB,MAAM,eAAe,MAAM,kCAAkC,MAAM,SAAS,CAAC,CAAC;QACnI,GAAG,CAAC,+EAA+E,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/siege.d.ts

@@ -0,0 +1,12 @@
+/**
+ * `mneme siege` (v2.148.0) — the Adversarial Self-Bounty. Fire Mneme's attack
+ * corpus at a command-gate and get a SIGNED, public, ever-rising bypass-resistance
+ * score (Wilson lower bound). Self mode benches Mneme's own gate (CERBERUS).
+ *
+ *   mneme siege self                       # resistance of Mneme's own command gate
+ *   mneme siege gate --cmd 'mygate {cmd}'  # bench any external gate (parse ALLOW/BLOCK)
+ *   mneme siege corpus                     # show the attack corpus
+ */
+import type { Command } from "commander";
+export declare function registerSiegeCommands(program: Command): void;
+//# sourceMappingURL=siege.d.ts.map

package/dist/commands/siege.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"siege.d.ts","sourceRoot":"","sources":["../../src/commands/siege.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AASzC,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAqD5D"}

package/dist/commands/siege.js

@@ -0,0 +1,92 @@
+/**
+ * `mneme siege` (v2.148.0) — the Adversarial Self-Bounty. Fire Mneme's attack
+ * corpus at a command-gate and get a SIGNED, public, ever-rising bypass-resistance
+ * score (Wilson lower bound). Self mode benches Mneme's own gate (CERBERUS).
+ *
+ *   mneme siege self                       # resistance of Mneme's own command gate
+ *   mneme siege gate --cmd 'mygate {cmd}'  # bench any external gate (parse ALLOW/BLOCK)
+ *   mneme siege corpus                     # show the attack corpus
+ */
+import { existsSync, mkdirSync, appendFileSync } from "node:fs";
+import { join, dirname } from "node:path";
+import { spawnSync } from "node:child_process";
+import { siege as sg, hephaestus, notary } from "@mneme-ai/core";
+function out(s) { process.stdout.write(s + "\n"); }
+const LEDGER = ".mneme/siege/resistance.jsonl";
+export function registerSiegeCommands(program) {
+    const s = program
+        .command("siege")
+        .description("🏰 SIEGE — the Adversarial Self-Bounty. Fire Mneme's attack corpus (rm -rf, pipe-to-shell, base64/hex-decode, find -delete, $IFS, var-indirection, fork-bomb, DROP TABLE, /dev/tcp exfil, …) at a command-gate → a SIGNED, public, EVER-RISING bypass-resistance score (Wilson LOWER bound = proven-at-least, never 'unbreakable'). Every new bypass found folds back into the corpus → the gate gets provably harder. The moat: a public resistance score competitors can't match + nobody else dares publish.");
+    s.command("self")
+        .description("siege Mneme's OWN command gate (CERBERUS) → its bypass-resistance, signed + appended to the resistance ledger.")
+        .option("--json", "JSON output (signed)")
+        .action((opts) => {
+        const cwd = process.cwd();
+        const gate = (cmd) => hephaestus.classifyCommandRisk(cmd).risk === "destructive" ? "COSIGN" : "ALLOW";
+        const score = sg.scoreSiege(sg.siege(gate));
+        let receipt = null;
+        try {
+            receipt = notary.issueReceipt(cwd, { kind: "claim-verdict", subject: `siege:${score.band}:${(score.resistanceLB * 100).toFixed(0)}`, payload: { band: score.band, resistanceLB: score.resistanceLB, withstood: score.withstood, total: score.total }, includePayload: true });
+        }
+        catch { /* */ }
+        try {
+            const p = join(cwd, LEDGER);
+            if (!existsSync(dirname(p)))
+                mkdirSync(dirname(p), { recursive: true });
+            appendFileSync(p, JSON.stringify({ at: Date.now(), band: score.band, resistanceLB: score.resistanceLB, withstood: score.withstood, total: score.total }) + "\n");
+        }
+        catch { /* */ }
+        if (opts.json) {
+            out(JSON.stringify({ ...score, signed: receipt }, null, 2));
+            process.exitCode = score.bypassed === 0 ? 0 : 2;
+            return;
+        }
+        const icon = score.band === "FORTRESS" ? "🏰" : score.band === "STRONG" ? "🛡" : score.band === "WEAK" ? "⚠" : "🛑";
+        out(`${icon} SIEGE — ${score.band} · bypass-resistance ≥ ${(score.resistanceLB * 100).toFixed(0)}% (Wilson LB)`);
+        out(`   withstood ${score.withstood}/${score.total} attacks · bypassed ${score.bypassed}`);
+        for (const [cls, b] of Object.entries(score.byClass))
+            out(`     ${cls.padEnd(12)} ${b.withstood}/${b.total}`);
+        for (const b of score.bypasses.slice(0, 8))
+            out(`     🛑 BYPASS ${b.id} (${b.class}) → gate said ${b.verdict}`);
+        out(`   ${receipt ? "✓ signed + ledgered · " : ""}${score.note}`);
+        process.exitCode = score.bypassed === 0 ? 0 : 2;
+    });
+    s.command("gate")
+        .description("siege an EXTERNAL gate: a command template with {cmd}; non-zero exit OR stdout containing BLOCK/DENY/COSIGN = withstood, else bypassed.")
+        .requiredOption("--cmd <template>", "gate command, e.g. \"mygate check {cmd}\"")
+        .option("--json", "JSON output")
+        .action((opts) => {
+        const gate = (payload) => {
+            try {
+                const command = opts.cmd.replace(/\{cmd\}/g, payload);
+                const r = spawnSync(command, { encoding: "utf8", shell: true, timeout: 15000 });
+                const o = ((r.stdout ?? "") + (r.stderr ?? "")).toUpperCase();
+                if ((r.status ?? 0) !== 0 || /\b(BLOCK|DENY|DENIED|COSIGN|REFUSE|REJECT)\b/.test(o))
+                    return "BLOCK";
+                return "ALLOW";
+            }
+            catch {
+                return "BLOCK";
+            }
+        };
+        const score = sg.scoreSiege(sg.siege(gate));
+        if (opts.json) {
+            out(JSON.stringify(score, null, 2));
+            process.exitCode = score.bypassed === 0 ? 0 : 2;
+            return;
+        }
+        const icon = score.band === "FORTRESS" ? "🏰" : score.band === "STRONG" ? "🛡" : score.band === "WEAK" ? "⚠" : "🛑";
+        out(`${icon} SIEGE (external) — ${score.band} · resistance ≥ ${(score.resistanceLB * 100).toFixed(0)}% · withstood ${score.withstood}/${score.total}`);
+        for (const b of score.bypasses.slice(0, 12))
+            out(`   🛑 BYPASS ${b.id} (${b.class})`);
+        process.exitCode = score.bypassed === 0 ? 0 : 2;
+    });
+    s.command("corpus").description("show the attack corpus (size + classes).").action(() => {
+        const byClass = {};
+        for (const c of sg.ATTACK_CORPUS)
+            byClass[c.class] = (byClass[c.class] ?? 0) + 1;
+        out(`🏰 SIEGE attack corpus — ${sg.ATTACK_CORPUS.length} payloads: ${Object.entries(byClass).map(([k, v]) => `${k}=${v}`).join(" · ")}`);
+        out("   self-hardening: every bypass found in a bounty folds back in → the gate gets provably harder.");
+    });
+}
+//# sourceMappingURL=siege.js.map

package/dist/commands/siege.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"siege.js","sourceRoot":"","sources":["../../src/commands/siege.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,KAAK,IAAI,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAEjE,SAAS,GAAG,CAAC,CAAS,IAAU,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;AACjE,MAAM,MAAM,GAAG,+BAA+B,CAAC;AAE/C,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACpD,MAAM,CAAC,GAAG,OAAO;SACd,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,ifAAif,CAAC,CAAC;IAElgB,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;SACd,WAAW,CAAC,gHAAgH,CAAC;SAC7H,MAAM,CAAC,QAAQ,EAAE,sBAAsB,CAAC;SACxC,MAAM,CAAC,CAAC,IAAwB,EAAE,EAAE;QACnC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,QAAiB,CAAC,CAAC,CAAC,OAAgB,CAAC;QAChI,MAAM,KAAK,GAAG,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5C,IAAI,OAAO,GAAY,IAAI,CAAC;QAC5B,IAAI,CAAC;YAAC,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;QACtS,IAAI,CAAC;YAAC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAAC,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;QAC/R,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAAC,OAAO,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACxI,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QACpH,GAAG,CAAC,GAAG,IAAI,YAAY,KAAK,CAAC,IAAI,0BAA0B,CAAC,KAAK,CAAC,YAAY,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;QACjH,GAAG,CAAC,gBAAgB,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,KAAK,uBAAuB,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC3F,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;YAAE,GAAG,CAAC,QAAQ,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC9G,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YAAE,GAAG,CAAC,kBAAkB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,KAAK,iBAAiB,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAChH,GAAG,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAClE,OAAO,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEL,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;SACd,WAAW,CAAC,yIAAyI,CAAC;SACtJ,cAAc,CAAC,kBAAkB,EAAE,2CAA2C,CAAC;SAC/E,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC;SAC/B,MAAM,CAAC,CAAC,IAAqC,EAAE,EAAE;QAChD,MAAM,IAAI,GAAG,CAAC,OAAe,EAAE,EAAE;YAC/B,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;gBACtD,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;gBAChF,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;gBAC9D,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,8CAA8C,CAAC,IAAI,CAAC,CAAC,CAAC;oBAAE,OAAO,OAAgB,CAAC;gBAC7G,OAAO,OAAgB,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,OAAgB,CAAC;YAAC,CAAC;QACtC,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5C,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAAC,OAAO,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAChH,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QACpH,GAAG,CAAC,GAAG,IAAI,uBAAuB,KAAK,CAAC,IAAI,mBAAmB,CAAC,KAAK,CAAC,YAAY,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QACvJ,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;YAAE,GAAG,CAAC,gBAAgB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;QACtF,OAAO,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEL,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,0CAA0C,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE;QACtF,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,aAAa;YAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACjF,GAAG,CAAC,4BAA4B,EAAE,CAAC,aAAa,CAAC,MAAM,cAAc,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACzI,GAAG,CAAC,kGAAkG,CAAC,CAAC;IAC1G,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAuKA,wBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAukNvD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAyKA,wBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAykNvD"}

package/dist/index.js

@@ -99,6 +99,8 @@ import { registerCrucibleCommands } from "./commands/crucible.js";
 import { registerDriftCommands } from "./commands/drift.js";
 import { registerGovernCommands } from "./commands/govern.js";
 import { registerGatewayCommands } from "./commands/gateway.js";
+import { registerMyceliumCommands } from "./commands/mycelium.js";
+import { registerSiegeCommands } from "./commands/siege.js";
 import { attachRegretOracle } from "./commands/regret.js";
 import { registerTrustCommands } from "./commands/trust.js";
 import { registerNuclearCommands } from "./commands/nuclear-cli.js";
@@ -4751,6 +4753,8 @@ export async function run(argv) {
     registerDriftCommands(program);
     registerGovernCommands(program);
     registerGatewayCommands(program);
+    registerMyceliumCommands(program);
+    registerSiegeCommands(program);
     // ─── Trust calibrator (v1.31.0) -- per-subsystem precision/recall/band
     registerTrustCommands(program);
     // ─── Wisdom reactor (v1.33.0) -- five nuclear-physics formulas as Mneme metrics