mneme-ai 2.175.0 → 2.187.0

package/dist/commands/xray.d.ts

@@ -0,0 +1,17 @@
+/**
+ * `mneme xray` (v2.187.0) — the Repo X-Ray, from the CLI. Runs the deterministic,
+ * signed, raw-free audit (deps · secrets · bus-factor · age · complexity · hotspots
+ * · coupling · security) on a local repo or a public git URL, and prints the grade +
+ * the team-intelligence gems (Keystone risk · Action plan · Momentum · Onboarding).
+ *
+ *   mneme xray                     # analyse the current repo
+ *   mneme xray ./path/to/repo      # analyse a local path
+ *   mneme xray https://github.com/owner/repo [--branch main]
+ *   mneme xray --json              # the full signed report
+ *
+ * The xray engine lives in @mneme-ai/xray (bundled with the CLI). Lazy-imported +
+ * fail-open so the core CLI still runs if the optional analysis package is absent.
+ */
+import type { Command } from "commander";
+export declare function registerXrayCommands(program: Command): void;
+//# sourceMappingURL=xray.d.ts.map

package/dist/commands/xray.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"xray.d.ts","sourceRoot":"","sources":["../../src/commands/xray.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA0BzC,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAuD3D"}

package/dist/commands/xray.js

@@ -0,0 +1,83 @@
+import { existsSync } from "node:fs";
+function out(s) { process.stdout.write(s + "\n"); }
+async function load() {
+    try {
+        return (await import("@mneme-ai/xray"));
+    }
+    catch {
+        out("🩻 the X-Ray engine needs @mneme-ai/xray — install it: npm i @mneme-ai/xray");
+        return null;
+    }
+}
+const base = (f) => { const p = String(f).split("/"); return p[p.length - 1] || f; };
+export function registerXrayCommands(program) {
+    program
+        .command("xray [target]")
+        .description("🩻 REPO X-RAY — a signed, deterministic audit of any repo (deps · secrets · bus-factor · age · complexity · coupling · security) + the team-intelligence gems (Keystone risk · Action plan · Momentum · Onboarding). No LLM guesses any number; the report is offline-verifiable. Pass a local path (default: current repo) or a public git URL.")
+        .option("--branch <name>", "branch to analyse (git-URL target)")
+        .option("--max-files <n>", "cap files scanned (perf bound)")
+        .option("--json", "print the full signed report as JSON")
+        .action(async (target, opts) => {
+        const api = await load();
+        if (!api) {
+            process.exitCode = 2;
+            return;
+        }
+        const isUrl = !!target && /^(https?:\/\/|git@)/.test(target);
+        const repoPath = isUrl ? undefined : (target || process.cwd());
+        if (repoPath && !existsSync(repoPath)) {
+            out(`path not found: ${repoPath}`);
+            process.exitCode = 2;
+            return;
+        }
+        const maxFiles = opts.maxFiles ? parseInt(opts.maxFiles, 10) : undefined;
+        let report;
+        try {
+            report = await api.buildXRay(isUrl ? { gitUrl: target, branch: opts.branch, maxFiles } : { repoPath, maxFiles });
+        }
+        catch (e) {
+            out(`🩻 X-Ray failed: ${e.message}`);
+            process.exitCode = 2;
+            return;
+        }
+        if (opts.json) {
+            try {
+                const signed = api.sealXRay(repoPath || process.cwd(), report);
+                out(JSON.stringify(signed, null, 2));
+            }
+            catch {
+                out(JSON.stringify(report, null, 2));
+            }
+            return;
+        }
+        const s = report.summary;
+        out("");
+        out(`🩻 X-RAY · ${report.subject.repoName}${report.subject.branch ? ` @ ${report.subject.branch}` : ""}   [ ${s.grade} ]`);
+        out(`   ${s.headline} · ${s.signalsRun} deterministic signals · @ ${String(report.subject.commitHash).slice(0, 10)}`);
+        for (const b of s.bullets.slice(0, 6))
+            out(`   • ${b}`);
+        const mo = api.buildMomentum(report);
+        if (mo.verdict !== "unknown")
+            out(`\n📈 Momentum: ${mo.verdict} — ${mo.note}`);
+        const ks = api.buildKeystones(report, 3).keystones;
+        if (ks.length) {
+            out(`\n🔑 Keystone risk (single point of catastrophe):`);
+            for (const k of ks)
+                out(`   ${base(k.file)} — ripples to ${k.partners} file(s), ${Math.round(k.ownerPct * 100)}% one author${k.expert ? ` · ask ${k.expert}` : ""}`);
+        }
+        const plan = api.buildActionPlan(report, 8).items;
+        if (plan.length) {
+            out(`\n✅ Action plan (ranked, each traceable):`);
+            for (const it of plan)
+                out(`   [${it.sev.toUpperCase()}] ${it.icon} ${it.title}  (${it.source})`);
+        }
+        const onb = api.buildOnboarding(report, 6).steps;
+        if (onb.length) {
+            out(`\n📖 Onboarding — read in this order:`);
+            onb.forEach((st, i) => out(`   ${i + 1}. ${base(st.file)} — ${st.why}`));
+        }
+        out(`\n🔒 deterministic · Ed25519-signable · fingerprint ${String(report.fingerprint).slice(0, 16)}…`);
+        out(`   full signed report: mneme xray${target ? ` ${target}` : ""} --json`);
+    });
+}
+//# sourceMappingURL=xray.js.map

package/dist/commands/xray.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"xray.js","sourceRoot":"","sources":["../../src/commands/xray.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,SAAS,GAAG,CAAC,CAAS,IAAU,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;AAgBjE,KAAK,UAAU,IAAI;IACjB,IAAI,CAAC;QAAC,OAAO,CAAC,MAAM,MAAM,CAAC,gBAA0B,CAAC,CAAuB,CAAC;IAAC,CAAC;IAChF,MAAM,CAAC;QAAC,GAAG,CAAC,6EAA6E,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC5G,CAAC;AAED,MAAM,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE,GAAG,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAErG,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,OAAO;SACJ,OAAO,CAAC,eAAe,CAAC;SACxB,WAAW,CAAC,kVAAkV,CAAC;SAC/V,MAAM,CAAC,iBAAiB,EAAE,oCAAoC,CAAC;SAC/D,MAAM,CAAC,iBAAiB,EAAE,gCAAgC,CAAC;SAC3D,MAAM,CAAC,QAAQ,EAAE,sCAAsC,CAAC;SACxD,MAAM,CAAC,KAAK,EAAE,MAA0B,EAAE,IAA4D,EAAE,EAAE;QACzG,MAAM,GAAG,GAAG,MAAM,IAAI,EAAE,CAAC;QAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACrE,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,IAAI,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAC/D,IAAI,QAAQ,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAAC,GAAG,CAAC,mBAAmB,QAAQ,EAAE,CAAC,CAAC;YAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAC5G,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAEzE,IAAI,MAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;QACnH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YAAC,GAAG,CAAC,oBAAqB,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;YAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAE9F,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,IAAI,CAAC;gBAAC,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC;gBAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;YAC7G,MAAM,CAAC;gBAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;YAC/C,OAAO;QACT,CAAC;QAED,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;QACzB,GAAG,CAAC,EAAE,CAAC,CAAC;QACR,GAAG,CAAC,cAAc,MAAM,CAAC,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QAC3H,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,MAAM,CAAC,CAAC,UAAU,8BAA8B,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QACtH,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAExD,MAAM,EAAE,GAAG,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,EAAE,CAAC,OAAO,KAAK,SAAS;YAAE,GAAG,CAAC,kBAAkB,EAAE,CAAC,OAAO,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QAE/E,MAAM,EAAE,GAAG,GAAG,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACnD,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;YACd,GAAG,CAAC,mDAAmD,CAAC,CAAC;YACzD,KAAK,MAAM,CAAC,IAAI,EAAE;gBAAE,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,QAAQ,aAAa,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,GAAG,GAAG,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACvK,CAAC;QAED,MAAM,IAAI,GAAG,GAAG,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;QAClD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,GAAG,CAAC,2CAA2C,CAAC,CAAC;YACjD,KAAK,MAAM,EAAE,IAAI,IAAI;gBAAE,GAAG,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,KAAK,MAAM,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;QACpG,CAAC;QAED,MAAM,GAAG,GAAG,GAAG,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;QACjD,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACf,GAAG,CAAC,uCAAuC,CAAC,CAAC;YAC7C,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC3E,CAAC;QAED,GAAG,CAAC,uDAAuD,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;QACvG,GAAG,CAAC,oCAAoC,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAiLA,wBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAilNvD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAkLA,wBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAklNvD"}

package/dist/index.js

@@ -95,6 +95,7 @@ import { registerSteleCommands } from "./commands/stele.js";
 import { registerMembraneCommands } from "./commands/membrane.js";
 import { registerTrustlessCommands } from "./commands/trustless.js";
 import { registerMatrixCommands } from "./commands/matrix.js";
+import { registerXrayCommands } from "./commands/xray.js";
 import { registerAdamasCommands } from "./commands/adamas.js";
 import { registerPrismCommands } from "./commands/prism.js";
 import { registerGoldilocksCommands } from "./commands/goldilocks.js";
@@ -4757,6 +4758,7 @@ export async function run(argv) {
     registerMembraneCommands(program);
     registerTrustlessCommands(program);
     registerMatrixCommands(program);
+    registerXrayCommands(program);
     registerAdamasCommands(program);
     registerPrismCommands(program);
     registerGoldilocksCommands(program);