mneme-ai 3.101.0 → 3.103.0

package/dist/commands/live.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"live.d.ts","sourceRoot":"","sources":["../../src/commands/live.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAiBzC,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAuqC3D"}
+{"version":3,"file":"live.d.ts","sourceRoot":"","sources":["../../src/commands/live.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAiBzC,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAsrC3D"}

package/dist/commands/live.js

@@ -3,7 +3,7 @@ import { createHash } from "node:crypto";
 import { join } from "node:path";
 import { get as httpsGet, request as httpsRequest } from "node:https";
 import { spawn, spawnSync } from "node:child_process";
-import { live, agentFit, proofLoop, turnSignal, skillEffectiveness, crossLayerGraph, scopeCovenant, agentCollision, testGap, authzGap, intentImpact, riskHotspots, onboarding, crossService, logicEngine, graphLogic, accuracy, apiSurface, graphqlSurface, archLock, invariants, archBisect, archDecay, hotspots, changeCoupling, archRegressions, archLineage, deadPath, archFirewall, scarVaccine, equivReceipt, changeGate, scarMining, agentLedger, trustService, equivDiff, exfilPath, injectionTaint, behavioralDiff, securityAudit } from "@mneme-ai/core";
+import { live, agentFit, proofLoop, turnSignal, skillEffectiveness, crossLayerGraph, scopeCovenant, agentCollision, testGap, authzGap, intentImpact, riskHotspots, onboarding, crossService, logicEngine, graphLogic, accuracy, apiSurface, graphqlSurface, archLock, invariants, archBisect, archDecay, hotspots, changeCoupling, archRegressions, archLineage, deadPath, archFirewall, scarVaccine, equivReceipt, changeGate, scarMining, agentLedger, trustService, equivDiff, exfilPath, injectionTaint, behavioralDiff, securityAudit, mediator } from "@mneme-ai/core";
 import { createContext as vmCreateContext, runInContext as vmRunInContext } from "node:vm";
 import { createServer as httpCreateServer } from "node:http";
 import { appendFileSync, readFileSync as _rf } from "node:fs";
@@ -1290,7 +1290,36 @@ jobs:
         if (v.verdict === "BLOCK")
             process.exitCode = 2;
     });
-    program.command("security").alias("appsec").description("🛡 SECURITY POSTURE — the AppSec triad in one pass: AUTHZ GAP (unguarded sensitive WRITE) + EXFIL PATH (sensitive READ to response, no redaction) + INJECTION (request input → dangerous sink, no sanitizer). One verdict (CLEAR / REVIEW / AT-RISK) + a posture 0-100. Exit 2 if AT-RISK.")
+    program.command("mediate").alias("fair-split").description("⚖️ FAIR-DIVISION MEDIATOR — find the fairest agreement between parties who can't (divorce / inheritance / M&A split / partnership). Each party gives point-valuations over the items; for TWO parties it runs Adjusted Winner → an envy-free + equitable + Pareto-optimal split (≤1 item split); for N>2 → proportional. Every fairness property is re-checkable from the parties' own values (the neutrality proof). Pass --file <json> or --json '[{\"name\":\"A\",\"vals\":{\"house\":50,...}},...]'.")
+        .option("--file <path>", "JSON file: [{name, vals:{item:points}}]").option("--json <s>", "inline JSON of the parties")
+        .action((o) => {
+        let parties = [];
+        try {
+            const raw = o.json ? o.json : o.file ? readFileSync(o.file.includes("/") || o.file.includes("\\") ? o.file : join(process.cwd(), o.file), "utf8") : "";
+            if (!raw) {
+                out("✗ pass --json '[...]' or --file <path> with [{name, vals:{item:points}}]");
+                process.exitCode = 2;
+                return;
+            }
+            parties = JSON.parse(raw);
+        }
+        catch (e) {
+            out(`✗ invalid JSON: ${e.message.slice(0, 120)}`);
+            process.exitCode = 2;
+            return;
+        }
+        const r = mediator.mediate(parties);
+        out(`⚖️ ${r.method === "adjusted-winner" ? "Adjusted Winner" : "Proportional"} mediation · ${r.parties.length} parties · ${r.items.length} items\n`);
+        for (const it of r.items) {
+            const shares = Object.entries(r.allocation[it] || {}).filter(([, f]) => f > 1e-6).map(([p, f]) => f >= 1 - 1e-6 ? `${p}` : `${p} ${Math.round(f * 100)}%`).join(" / ");
+            out(`   • ${it}  →  ${shares}`);
+        }
+        out(`\n   payoffs (each party's own perceived value): ${Object.entries(r.proof.payoffs).map(([p, v]) => `${p}=${v}`).join(" · ")}`);
+        out(`   ✅ envy-free: ${r.proof.envyFree} · equitable: ${r.proof.equitable} · proportional: ${r.proof.proportional}${r.proof.splitItems.length ? ` · split: ${r.proof.splitItems.join(", ")}` : ""}`);
+        out(`\n   ${r.note}`);
+        out(`   neutrality: every property above is re-checkable from the parties' OWN valuations — the math decided, not a biased AI.`);
+    });
+    program.command("appsec").alias("security-posture").description("🛡 SECURITY POSTURE — the AppSec triad in one pass: AUTHZ GAP (unguarded sensitive WRITE) + EXFIL PATH (sensitive READ to response, no redaction) + INJECTION (request input → dangerous sink, no sanitizer). One verdict (CLEAR / REVIEW / AT-RISK) + a posture 0-100. Exit 2 if AT-RISK.")
         .action(() => {
         const cwd = process.cwd();
         const files = scanWithDocs(cwd);