mneme-ai 3.12.0 → 3.13.0

package/dist/commands/infra.d.ts

@@ -0,0 +1,9 @@
+/**
+ * `mneme infra` (v3.13.0) — INFRA PROVENANCE: where + when your agent run executed.
+ *   infra                         → where am I running (provider/region/gpu), signed
+ *   infra attest --out a.json     → a NOTARY-signed attestation (verify offline)
+ *   infra residency --allow eu- … → data-residency check (EU AI Act-style)
+ */
+import type { Command } from "commander";
+export declare function registerInfraCommands(program: Command): void;
+//# sourceMappingURL=infra.d.ts.map

package/dist/commands/infra.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"infra.d.ts","sourceRoot":"","sources":["../../src/commands/infra.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAezC,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAsB5D"}

package/dist/commands/infra.js

@@ -0,0 +1,40 @@
+import { hostname, cpus } from "node:os";
+import { writeFileSync } from "node:fs";
+import { infraProvenance, notary } from "@mneme-ai/core";
+function out(s) { process.stdout.write(s + "\n"); }
+function capture() {
+    return infraProvenance.captureInfra({ env: process.env, host: hostname(), platform: process.platform, arch: process.arch, cpus: cpus().length }, Date.now());
+}
+function show(a) {
+    out(`🛰 INFRA PROVENANCE — ${a.provider}${a.region ? ` · ${a.region}` : ""}${a.service ? ` · ${a.service}` : ""}${a.gpu ? ` · ${a.gpu} GPU` : ""}`);
+    out(`   ${a.platform}/${a.arch} · ${a.cpus} cpu · host ${a.host.slice(0, 12)}… (hashed) · fingerprint ${a.fingerprint.slice(0, 16)}…`);
+    out(`   signals: ${a.signals.length ? a.signals.join(", ") : "(none — local)"}`);
+}
+export function registerInfraCommands(program) {
+    const k = program.command("infra").description("🛰 INFRA PROVENANCE — a neutral, signed, offline-verifiable record of WHERE (which rented compute provider/region) + WHEN your agent run executed. Detects migration drift + checks data-residency. Honest: attests the environment as the host declares it — not a TEE/hardware proof.")
+        .action(() => show(capture()));
+    k.command("attest").description("Capture + NOTARY-sign this run's infra attestation (anyone verifies it offline).")
+        .option("--out <file>", "write the signed attestation").action((o) => {
+        const a = capture();
+        let signed = a;
+        try {
+            signed = notary.issueReceipt(process.cwd(), { kind: "protocol-hop", subject: `infra:${a.fingerprint}`, payload: a, includePayload: true, issuedAt: Date.now() });
+        }
+        catch { /* */ }
+        if (o.out)
+            writeFileSync(o.out, JSON.stringify(signed, null, 2), "utf8");
+        show(a);
+        out(o.out ? `   🛰 signed → ${o.out} (verify offline with the embedded key)` : "   (pass --out to write the signed attestation)");
+    });
+    k.command("residency").description("Check this run against a data-residency policy. allow entries: a region, a prefix ('eu-'), or 'provider:*'.")
+        .requiredOption("--allow <regions...>", "allowed regions/prefixes/provider wildcards")
+        .action((o) => {
+        const a = capture();
+        const v = infraProvenance.dataResidencyCheck(a, o.allow);
+        out(`${v.compliant ? "🟢 COMPLIANT" : "🔴 OUTSIDE POLICY"} — ${v.reason}`);
+        out(`   provider ${v.provider} · region ${v.region ?? "unknown"} · policy [${o.allow.join(", ")}]`);
+        if (!v.compliant)
+            process.exitCode = 2;
+    });
+}
+//# sourceMappingURL=infra.js.map

package/dist/commands/infra.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"infra.js","sourceRoot":"","sources":["../../src/commands/infra.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAEzD,SAAS,GAAG,CAAC,CAAS,IAAU,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;AACjE,SAAS,OAAO;IACd,OAAO,eAAe,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;AAC/J,CAAC;AACD,SAAS,IAAI,CAAC,CAAmC;IAC/C,GAAG,CAAC,yBAAyB,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACpJ,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,IAAI,eAAe,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,4BAA4B,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;IACvI,GAAG,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC;AACnF,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACpD,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,yRAAyR,CAAC;SACtU,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAEjC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,kFAAkF,CAAC;SAChH,MAAM,CAAC,cAAc,EAAE,8BAA8B,CAAC,CAAC,MAAM,CAAC,CAAC,CAAmB,EAAE,EAAE;QACrF,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;QACpB,IAAI,MAAM,GAAY,CAAC,CAAC;QACxB,IAAI,CAAC;YAAC,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;QACzL,IAAI,CAAC,CAAC,GAAG;YAAE,aAAa,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACzE,IAAI,CAAC,CAAC,CAAC,CAAC;QACR,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,GAAG,yCAAyC,CAAC,CAAC,CAAC,iDAAiD,CAAC,CAAC;IACpI,CAAC,CAAC,CAAC;IAEL,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,WAAW,CAAC,6GAA6G,CAAC;SAC9I,cAAc,CAAC,sBAAsB,EAAE,6CAA6C,CAAC;SACrF,MAAM,CAAC,CAAC,CAAsB,EAAE,EAAE;QACjC,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;QAAC,MAAM,CAAC,GAAG,eAAe,CAAC,kBAAkB,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QAC9E,GAAG,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,mBAAmB,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3E,GAAG,CAAC,eAAe,CAAC,CAAC,QAAQ,aAAa,CAAC,CAAC,MAAM,IAAI,SAAS,cAAc,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpG,IAAI,CAAC,CAAC,CAAC,SAAS;YAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAgMA,wBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAgmNvD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAiMA,wBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAimNvD"}

package/dist/index.js

@@ -110,6 +110,7 @@ import { registerSkillscanCommands } from "./commands/skillscan.js";
 import { registerMcpgateCommands } from "./commands/mcpgate.js";
 import { registerAgentcertCommands } from "./commands/agentcert.js";
 import { registerThymosCommands } from "./commands/thymos.js";
+import { registerInfraCommands } from "./commands/infra.js";
 import { registerAdamasCommands } from "./commands/adamas.js";
 import { registerPrismCommands } from "./commands/prism.js";
 import { registerGoldilocksCommands } from "./commands/goldilocks.js";
@@ -4787,6 +4788,7 @@ export async function run(argv) {
     registerMcpgateCommands(program);
     registerAgentcertCommands(program);
     registerThymosCommands(program);
+    registerInfraCommands(program);
     registerAdamasCommands(program);
     registerPrismCommands(program);
     registerGoldilocksCommands(program);