mneme-ai 2.148.0 → 2.149.0

package/dist/commands/canon.d.ts

@@ -0,0 +1,12 @@
+/**
+ * `mneme canon` (v2.149.0) — the Accountability-Record Standard (CANON/1). Emit
+ * + verify a versioned, Ed25519 offline-verifiable record of "an AI did/decided
+ * X, here's the proof" that ANY party can check with the public key alone.
+ *
+ *   mneme canon emit --kind command-gate --subject "rm -rf /" --verdict BLOCK > rec.json
+ *   mneme canon verify --record rec.json    # offline: conformance + body-binds-id + Ed25519 sig
+ *   mneme canon spec                         # the published schema
+ */
+import type { Command } from "commander";
+export declare function registerCanonCommands(program: Command): void;
+//# sourceMappingURL=canon.d.ts.map

package/dist/commands/canon.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canon.d.ts","sourceRoot":"","sources":["../../src/commands/canon.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAOzC,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAgD5D"}

package/dist/commands/canon.js

@@ -0,0 +1,81 @@
+/**
+ * `mneme canon` (v2.149.0) — the Accountability-Record Standard (CANON/1). Emit
+ * + verify a versioned, Ed25519 offline-verifiable record of "an AI did/decided
+ * X, here's the proof" that ANY party can check with the public key alone.
+ *
+ *   mneme canon emit --kind command-gate --subject "rm -rf /" --verdict BLOCK > rec.json
+ *   mneme canon verify --record rec.json    # offline: conformance + body-binds-id + Ed25519 sig
+ *   mneme canon spec                         # the published schema
+ */
+import { readFileSync } from "node:fs";
+import { createHash } from "node:crypto";
+import { canon, notary } from "@mneme-ai/core";
+function out(s) { process.stdout.write(s + "\n"); }
+export function registerCanonCommands(program) {
+    const c = program
+        .command("canon")
+        .description("📜 CANON — the Accountability-Record Standard: a versioned, Ed25519 OFFLINE-verifiable record of an AI decision/action that ANY auditor / insurer / regulator / competitor can emit + verify with the public key alone, without trusting Mneme. The neutral 'NVD/Visa-of-AI' format on the NOTARY spine; binds the payload by hash (proves what was decided without exposing it), chains by lineage. The moat: a model isn't a moat, but if the canonical FORMAT everyone accepts is yours, everyone speaks it.");
+    c.command("emit")
+        .description("emit a signed CANON/1 accountability record.")
+        .requiredOption("--kind <k>", "command-gate | diff | claim-verdict | agent-action | value-event | siege | memory-capsule | other")
+        .requiredOption("--subject <s>", "what the record is about")
+        .requiredOption("--verdict <v>", "the decision (ALLOW/BLOCK/PASS/REFUTED/…)")
+        .option("--payload <json>", "the underlying payload (bound by hash, not exposed)")
+        .option("--lineage <id>", "prev record id (chain)")
+        .action((opts) => {
+        let payload = undefined;
+        try {
+            payload = opts.payload ? JSON.parse(opts.payload) : undefined;
+        }
+        catch {
+            payload = opts.payload;
+        }
+        const rec = canon.buildRecord({ kind: opts.kind, subject: opts.subject, verdict: opts.verdict, payload, lineage: opts.lineage ?? null, ts: Date.now() });
+        // sign the recordId with NOTARY (Ed25519, offline-verifiable); embed issuer + sig
+        try {
+            const receipt = notary.issueReceipt(process.cwd(), { kind: "claim-verdict", subject: `canon:${rec.kind}:${rec.recordId.slice(0, 12)}`, payload: { recordId: rec.recordId }, includePayload: true });
+            rec.issuer = (receipt.publicKey ?? receipt.pubkey ?? "ed25519:notary");
+            rec.sig = receipt.signature ?? null;
+            // re-derive recordId now that issuer is set (issuer is part of the signed body)
+            rec.recordId = createHash("sha256").update(canon.canonicalize(rec)).digest("hex");
+        }
+        catch { /* still emit unsigned-but-conformant */ }
+        out(JSON.stringify(rec, null, 2));
+    });
+    c.command("verify")
+        .description("verify a CANON record OFFLINE: conformance + version + body-binds-recordId (exit 2 if invalid).")
+        .requiredOption("--record <file>", "the record JSON ('-' for stdin)")
+        .option("--json", "JSON output")
+        .action((opts) => {
+        let rec;
+        try {
+            const raw = opts.record === "-" ? readFileSync(0, "utf8") : readFileSync(opts.record, "utf8");
+            rec = JSON.parse(raw);
+        }
+        catch {
+            out("✗ could not read/parse record");
+            process.exitCode = 2;
+            return;
+        }
+        const v = canon.verifyRecord(rec);
+        if (opts.json) {
+            out(JSON.stringify(v, null, 2));
+            process.exitCode = v.ok ? 0 : 2;
+            return;
+        }
+        out(`${v.ok ? "✓ VALID" : "🛑 INVALID"} — ${v.reason}`);
+        out(`   conformant=${v.conformant} · recordId-binds-body=${v.recordIdValid}`);
+        process.exitCode = v.ok ? 0 : 2;
+    });
+    c.command("spec").description("print the published CANON spec (schema + version policy).").option("--json", "JSON").action((opts) => {
+        if (opts.json) {
+            out(JSON.stringify(canon.SPEC, null, 2));
+            return;
+        }
+        out(`📜 CANON/${canon.CANON_VERSION} — required: ${canon.SPEC.required.join(", ")}`);
+        out(`   kinds: ${canon.SPEC.kinds.join(" · ")}`);
+        out(`   verify: ${canon.SPEC.verify}`);
+        out(`   versions: ${canon.SPEC.versionPolicy}`);
+    });
+}
+//# sourceMappingURL=canon.js.map

package/dist/commands/canon.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canon.js","sourceRoot":"","sources":["../../src/commands/canon.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAE/C,SAAS,GAAG,CAAC,CAAS,IAAU,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;AAEjE,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACpD,MAAM,CAAC,GAAG,OAAO;SACd,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,ifAAif,CAAC,CAAC;IAElgB,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;SACd,WAAW,CAAC,8CAA8C,CAAC;SAC3D,cAAc,CAAC,YAAY,EAAE,mGAAmG,CAAC;SACjI,cAAc,CAAC,eAAe,EAAE,0BAA0B,CAAC;SAC3D,cAAc,CAAC,eAAe,EAAE,2CAA2C,CAAC;SAC5E,MAAM,CAAC,kBAAkB,EAAE,qDAAqD,CAAC;SACjF,MAAM,CAAC,gBAAgB,EAAE,wBAAwB,CAAC;SAClD,MAAM,CAAC,CAAC,IAA4F,EAAE,EAAE;QACvG,IAAI,OAAO,GAAY,SAAS,CAAC;QACjC,IAAI,CAAC;YAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAAC,CAAC;QACxG,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACzJ,kFAAkF;QAClF,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAgE,CAAC;YACnQ,GAAG,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,MAAM,IAAI,gBAAgB,CAAC,CAAC;YACvE,GAAG,CAAC,GAAG,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC;YACpC,gFAAgF;YAChF,GAAG,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACpF,CAAC;QAAC,MAAM,CAAC,CAAC,wCAAwC,CAAC,CAAC;QACpD,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEL,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;SAChB,WAAW,CAAC,iGAAiG,CAAC;SAC9G,cAAc,CAAC,iBAAiB,EAAE,iCAAiC,CAAC;SACpE,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC;SAC/B,MAAM,CAAC,CAAC,IAAwC,EAAE,EAAE;QACnD,IAAI,GAA+B,CAAC;QACpC,IAAI,CAAC;YAAC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;YAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAC3M,MAAM,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAC5F,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACxD,GAAG,CAAC,iBAAiB,CAAC,CAAC,UAAU,0BAA0B,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;QAC9E,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEL,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,2DAA2D,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,IAAwB,EAAE,EAAE;QACtJ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACpE,GAAG,CAAC,YAAY,KAAK,CAAC,aAAa,gBAAgB,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrF,GAAG,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjD,GAAG,CAAC,cAAc,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACvC,GAAG,CAAC,gBAAgB,KAAK,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAyKA,wBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAykNvD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AA0KA,wBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA0kNvD"}

package/dist/index.js

@@ -101,6 +101,7 @@ import { registerGovernCommands } from "./commands/govern.js";
 import { registerGatewayCommands } from "./commands/gateway.js";
 import { registerMyceliumCommands } from "./commands/mycelium.js";
 import { registerSiegeCommands } from "./commands/siege.js";
+import { registerCanonCommands } from "./commands/canon.js";
 import { attachRegretOracle } from "./commands/regret.js";
 import { registerTrustCommands } from "./commands/trust.js";
 import { registerNuclearCommands } from "./commands/nuclear-cli.js";
@@ -4755,6 +4756,7 @@ export async function run(argv) {
     registerGatewayCommands(program);
     registerMyceliumCommands(program);
     registerSiegeCommands(program);
+    registerCanonCommands(program);
     // ─── Trust calibrator (v1.31.0) -- per-subsystem precision/recall/band
     registerTrustCommands(program);
     // ─── Wisdom reactor (v1.33.0) -- five nuclear-physics formulas as Mneme metrics