wyrm-mcp 7.0.3 → 7.1.0

package/LICENSE

@@ -661,7 +661,7 @@ For more information on this, and how to apply and follow the GNU AGPL, see
 <https://www.gnu.org/licenses/>.
 
 ---
-Copyright (c) 2024-2026 Ghost Protocol (Pvt) Ltd
+Copyright (c) 2026 Ghost Protocol (Pvt) Ltd
 https://ghosts.lk
 
 For commercial licensing inquiries: ghosts.lk@proton.me

package/NOTICE

@@ -0,0 +1,29 @@
+Wyrm — Persistent Memory for AI Agents
+Copyright © 2026 Ghost Protocol (Pvt) Ltd. All rights reserved.
+
+This software ("Wyrm", published as the npm package "wyrm-mcp") and its source
+code, documentation, and associated materials are the original work and
+intellectual property of Ghost Protocol (Pvt) Ltd, Colombo, Sri Lanka.
+
+LICENSE — dual-licensed:
+
+  1. Open source: GNU Affero General Public License, version 3 or later
+     (AGPL-3.0-or-later). See the LICENSE file for the full terms. Note in
+     particular AGPL section 13: if you run a modified version of this software
+     to provide a network service, you must offer the complete corresponding
+     source code of your modified version to the users of that service.
+
+  2. Commercial: a separate, non-copyleft commercial license is available for
+     embedding Wyrm in a closed-source product, or operating it as a managed
+     service without AGPL's source-sharing obligations. Contact:
+     ghosts.lk@proton.me
+
+Trademarks: "Wyrm", "Ghost Protocol", and the silver-dragon mark are trademarks
+of Ghost Protocol (Pvt) Ltd. Use of the AGPL license does not grant any
+trademark rights.
+
+Unauthorized copying, reverse engineering to circumvent the license, or
+distribution of derivative works outside the terms above is prohibited and may
+infringe the copyright and other rights of Ghost Protocol (Pvt) Ltd.
+
+Ghost Protocol (Pvt) Ltd · Colombo, Sri Lanka · ghosts.lk · ghosts.lk@proton.me

package/dist/agent-daemon.d.ts

@@ -15,7 +15,7 @@
  * alive, `start()` refuses (no fork-bomb). `restart()` is provided as
  * an explicit operation.
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  */
 import type Database from 'better-sqlite3';

package/dist/agent-daemon.js

@@ -15,7 +15,7 @@
  * alive, `start()` refuses (no fork-bomb). `restart()` is provided as
  * an explicit operation.
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  */
 import { spawn } from 'child_process';

package/dist/agent-loop.d.ts

@@ -26,7 +26,7 @@
  *   {"thought":"...","action":"done","summary":"..."} or
  *   {"thought":"...","action":"block","reason":"..."}
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  */
 import type Database from 'better-sqlite3';

package/dist/agent-loop.js

@@ -26,7 +26,7 @@
  *   {"thought":"...","action":"done","summary":"..."} or
  *   {"thought":"...","action":"block","reason":"..."}
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  */
 import { Goals } from './goals.js';

package/dist/analytics.d.ts

@@ -1,7 +1,7 @@
 /**
  * Wyrm Analytics — Persistent Usage Tracking & Cost Monitoring
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  * @module analytics
  * @version 3.2.0

package/dist/analytics.js

@@ -1,7 +1,7 @@
 /**
  * Wyrm Analytics — Persistent Usage Tracking & Cost Monitoring
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  * @module analytics
  * @version 3.2.0

package/dist/audit.d.ts

@@ -59,7 +59,7 @@
  * unsigned, byte-identical to 6.x behavior. `WYRM_AUDIT_SIGNING_KEY` holds a
  * PEM-encoded (pkcs8) Ed25519 private key, or a path to one.
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  */
 import type Database from 'better-sqlite3';

package/dist/audit.js

@@ -59,7 +59,7 @@
  * unsigned, byte-identical to 6.x behavior. `WYRM_AUDIT_SIGNING_KEY` holds a
  * PEM-encoded (pkcs8) Ed25519 private key, or a path to one.
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  */
 import { createHash, createPrivateKey, createPublicKey, sign as edSign, verify as edVerify, } from 'crypto';

package/dist/auto-capture.js

@@ -12,7 +12,7 @@
  * stored with needs_review=1 so the operator vets them (wyrm_review) — nothing
  * auto-trusted, matching Wyrm's distillation-queue discipline.
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  */
 import { classifyCapture } from './capture.js';

package/dist/auto-orchestrator.d.ts

@@ -10,7 +10,7 @@
  * - Task Decomposition: Large features via subtasks + parallel execution
  * - Verification: High-risk code changes via multi-angle review
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  */
 export type TaskType = 'decision' | 'generation' | 'research' | 'verification' | 'decomposition';

package/dist/auto-orchestrator.js

@@ -10,7 +10,7 @@
  * - Task Decomposition: Large features via subtasks + parallel execution
  * - Verification: High-risk code changes via multi-angle review
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  */
 /**

package/dist/autoconfig.d.ts

@@ -5,7 +5,7 @@
  * Cursor, Windsurf, Zed, etc.) and configures Wyrm's MCP server in each.
  * Handles provider switching seamlessly — change your AI, Wyrm follows.
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  * @module autoconfig
  * @version 3.0.0

package/dist/autoconfig.js

@@ -5,7 +5,7 @@
  * Cursor, Windsurf, Zed, etc.) and configures Wyrm's MCP server in each.
  * Handles provider switching seamlessly — change your AI, Wyrm follows.
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  * @module autoconfig
  * @version 3.0.0

package/dist/buddy-runner.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Companion-buddy runner (v7 F4 T036 - extracted from the index.ts monolith).
+ * The buddy fold's ONE implementation: wyrm_buddy calls it directly and the
+ * well-known `buddy` tool calls it when any companion param is present. Lifted
+ * VERBATIM behind a factory that captures the same singletons it always closed
+ * over (db / mcpClient / our version string for cycle-prevention).
+ *
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
+ * @license AGPL-3.0-or-later
+ */
+import type { WyrmDB } from "./database.js";
+import type { OutboundMcpClient } from "./mcp-client.js";
+export interface BuddyRunnerDeps {
+    db: WyrmDB;
+    mcpClient: OutboundMcpClient;
+    version: string;
+}
+export declare function makeRunCompanionBuddy(deps: BuddyRunnerDeps): (args: Record<string, unknown>) => Promise<{
+    content: Array<{
+        type: string;
+        text: string;
+    }>;
+}>;
+//# sourceMappingURL=buddy-runner.d.ts.map

package/dist/buddy-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"buddy-runner.d.ts","sourceRoot":"","sources":["../src/buddy-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAIzD,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,iBAAiB,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,eAAe,UA0DpB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,OAAO,CAAC;IAAE,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,CAAC,CAoC3H"}

package/dist/buddy-runner.js

@@ -0,0 +1,109 @@
+/**
+ * Companion-buddy runner (v7 F4 T036 - extracted from the index.ts monolith).
+ * The buddy fold's ONE implementation: wyrm_buddy calls it directly and the
+ * well-known `buddy` tool calls it when any companion param is present. Lifted
+ * VERBATIM behind a factory that captures the same singletons it always closed
+ * over (db / mcpClient / our version string for cycle-prevention).
+ *
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
+ * @license AGPL-3.0-or-later
+ */
+import { gatherBuddyInputs, buildBuddyOutput } from "./buddy.js";
+export function makeRunCompanionBuddy(deps) {
+    const { db, mcpClient, version } = deps;
+    /**
+     * Spec 015 — buddy federation.
+     *
+     * For each registered + enabled outbound MCP server, list its tools and
+     * call any whose name matches /^(buddy_|.+_buddy$)/ (case-insensitive).
+     * Collects up to 3 replies; budget-frugal, best-effort.
+     */
+    async function collectExternalBuddyReplies(projectId) {
+        const replies = [];
+        const servers = mcpClient.list().filter((r) => r.enabled);
+        // Identify ourselves for cycle prevention per Buddy Protocol v1.0 §4.
+        const fromBuddy = `wyrm@${version}`;
+        // Try to give peers context — name of the project the local buddy is on.
+        let projectHint;
+        try {
+            const row = db.getDatabase().prepare('SELECT name FROM projects WHERE id = ?').get(projectId);
+            projectHint = row?.name;
+        }
+        catch { /* fine */ }
+        for (const srv of servers) {
+            if (replies.length >= 3)
+                break;
+            let tools = null;
+            try {
+                tools = await mcpClient.listTools(srv.server_name);
+            }
+            catch {
+                continue;
+            }
+            if (!tools)
+                continue;
+            // Prefer well-known `buddy` (Buddy Protocol v1.0); fall back to `*_buddy` / `buddy_*` patterns.
+            const wellKnown = tools.find((t) => t.name.toLowerCase() === 'buddy');
+            const buddyTools = wellKnown
+                ? [wellKnown]
+                : tools.filter((t) => /^(buddy_|.*_buddy)$/i.test(t.name));
+            for (const t of buddyTools) {
+                if (replies.length >= 3)
+                    break;
+                try {
+                    const r = await mcpClient.call(srv.server_name, t.name, {
+                        from_buddy: fromBuddy,
+                        project_hint: projectHint,
+                        size: 'compact',
+                    });
+                    const text = typeof r.result === 'string' ? r.result : JSON.stringify(r.result).slice(0, 800);
+                    if (text)
+                        replies.push({ server: srv.server_name, tool: t.name, reply: text });
+                }
+                catch { /* skip on error */ }
+            }
+        }
+        return replies;
+    }
+    /**
+     * v7 F3 (T021) — the companion buddy code path, extracted VERBATIM from the
+     * wyrm_buddy switch case so the buddy fold shares ONE implementation:
+     * `wyrm_buddy` calls it directly, and the well-known `buddy` tool calls it
+     * whenever any companion param (persona/persona_name/mood/federate/
+     * project_path — handlers/alias-adapters.ts) is present. Never a duplicate;
+     * the alias spine routes wyrm_buddy → buddy with an argument adapter and the
+     * golden replay CI proves both entries byte-equivalent.
+     */
+    async function runCompanionBuddy(args) {
+        const { project_path: bdPath, mood: bdMood, persona: bdPersona, persona_name: bdPersonaName, federate: bdFederate, size: bdSize } = args;
+        // Resolve project: explicit path > cwd > nothing
+        const cwd = bdPath ?? process.cwd();
+        const project = db.getProject(cwd);
+        if (!project) {
+            return {
+                content: [{
+                        type: 'text',
+                        text: `󱅝 I don't see *${cwd}* in my hoard yet — scan it first with \`wyrm_scan_projects\`, then come back.`,
+                    }],
+            };
+        }
+        const persona = bdPersona ?? process.env.WYRM_BUDDY_DEFAULT_PERSONA ?? 'wyrm';
+        const inputs = gatherBuddyInputs(db.getDatabase(), project.id);
+        // Federate with other "*_buddy" tools on registered external MCPs.
+        // Skipped in quiet mode (token-frugal) and on explicit federate:false.
+        if (bdFederate !== false && bdMood !== 'quiet') {
+            try {
+                const externals = await collectExternalBuddyReplies(project.id);
+                if (externals.length > 0)
+                    inputs.externalBuddies = externals;
+            }
+            catch {
+                // Federation is best-effort. Don't fail the local buddy on a remote hiccup.
+            }
+        }
+        const out = buildBuddyOutput(inputs, { mood: bdMood, persona, personaName: bdPersonaName, size: bdSize });
+        return { content: [{ type: 'text', text: out.markdown }] };
+    }
+    return runCompanionBuddy;
+}
+//# sourceMappingURL=buddy-runner.js.map

package/dist/buddy-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"buddy-runner.js","sourceRoot":"","sources":["../src/buddy-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AASjE,MAAM,UAAU,qBAAqB,CAAC,IAAqB;IACzD,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAC1C;;;;;;OAMG;IACH,KAAK,UAAU,2BAA2B,CAAC,SAAiB;QAC1D,MAAM,OAAO,GAA2D,EAAE,CAAC;QAC3E,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC1D,sEAAsE;QACtE,MAAM,SAAS,GAAG,QAAQ,OAAO,EAAE,CAAC;QACpC,yEAAyE;QACzE,IAAI,WAA+B,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAiC,CAAC;YAC9H,WAAW,GAAG,GAAG,EAAE,IAAI,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;QAEtB,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC;gBAAE,MAAM;YAC/B,IAAI,KAAK,GAAyD,IAAI,CAAC;YACvE,IAAI,CAAC;gBACH,KAAK,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACrD,CAAC;YAAC,MAAM,CAAC;gBAAC,SAAS;YAAC,CAAC;YACrB,IAAI,CAAC,KAAK;gBAAE,SAAS;YACrB,gGAAgG;YAChG,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,CAAC;YACtE,MAAM,UAAU,GAAG,SAAS;gBAC1B,CAAC,CAAC,CAAC,SAAS,CAAC;gBACb,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAC7D,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;gBAC3B,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC;oBAAE,MAAM;gBAC/B,IAAI,CAAC;oBACH,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE;wBACtD,UAAU,EAAE,SAAS;wBACrB,YAAY,EAAE,WAAW;wBACzB,IAAI,EAAE,SAAS;qBAChB,CAAC,CAAC;oBACH,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;oBAC9F,IAAI,IAAI;wBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACjF,CAAC;gBAAC,MAAM,CAAC,CAAC,mBAAmB,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,UAAU,iBAAiB,CAAC,IAA6B;QAC5D,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAEnI,CAAC;QAEF,iDAAiD;QACjD,MAAM,GAAG,GAAG,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,mBAAmB,GAAG,gFAAgF;qBAC7G,CAAC;aACH,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAiB,SAAS,IAAK,OAAO,CAAC,GAAG,CAAC,0BAA2C,IAAI,MAAM,CAAC;QAC9G,MAAM,MAAM,GAAG,iBAAiB,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;QAE/D,mEAAmE;QACnE,uEAAuE;QACvE,IAAI,UAAU,KAAK,KAAK,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YAC/C,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,MAAM,2BAA2B,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBAChE,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;oBAAE,MAAM,CAAC,eAAe,GAAG,SAAS,CAAC;YAC/D,CAAC;YAAC,MAAM,CAAC;gBACP,4EAA4E;YAC9E,CAAC;QACH,CAAC;QAED,MAAM,GAAG,GAAG,gBAAgB,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1G,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC;IAC7D,CAAC;IAEC,OAAO,iBAAiB,CAAC;AAC3B,CAAC"}

package/dist/buddy.d.ts

@@ -10,7 +10,7 @@
  * `buddy_*` is queried via `wyrm_call_external` and its output is
  * folded into the response.
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  */
 import type Database from 'better-sqlite3';

package/dist/buddy.js

@@ -10,7 +10,7 @@
  * `buddy_*` is queried via `wyrm_call_external` and its output is
  * folded into the response.
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  */
 import { ICON } from './icons.js';

package/dist/capabilities.d.ts

@@ -10,7 +10,7 @@
  * Also used as the body of the `wyrm_capabilities` MCP tool, the
  * `wyrm_inject_prompt` block, and the postinstall pitch.
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  */
 import type Database from 'better-sqlite3';

package/dist/capabilities.js

@@ -10,7 +10,7 @@
  * Also used as the body of the `wyrm_capabilities` MCP tool, the
  * `wyrm_inject_prompt` block, and the postinstall pitch.
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  */
 import { homedir } from 'os';

package/dist/capture.d.ts

@@ -1,7 +1,7 @@
 /**
  * Wyrm Capture Helpers — Classification logic for unified auto-capture.
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  */
 export type CaptureType = 'quest' | 'truth' | 'memory';

package/dist/capture.js

@@ -1,7 +1,7 @@
 /**
  * Wyrm Capture Helpers — Classification logic for unified auto-capture.
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  */
 /**

package/dist/causality.d.ts

@@ -9,7 +9,7 @@
  * ground truth flips to stale or gets superseded, the invalidation
  * cascade walks the edge graph and flags downstream decisions.
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  */
 import type Database from 'better-sqlite3';

package/dist/causality.js

@@ -9,7 +9,7 @@
  * ground truth flips to stale or gets superseded, the invalidation
  * cascade walks the edge graph and flags downstream decisions.
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  */
 import { emitEvent } from './events.js';

package/dist/cli.d.ts

@@ -1,7 +1,7 @@
 /**
  * Wyrm CLI - Beautiful command-line interface
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  * @module cli
  * @version 3.0.0

package/dist/cli.js

@@ -1,7 +1,7 @@
 /**
  * Wyrm CLI - Beautiful command-line interface
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  * @module cli
  * @version 3.0.0

package/dist/cloud-backup.d.ts

@@ -1,7 +1,7 @@
 /**
  * Wyrm Cloud Backup — Encrypted backup/restore to Cloudflare R2
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  * @module cloud-backup
  * @version 3.2.0

package/dist/cloud-backup.js

@@ -1,7 +1,7 @@
 /**
  * Wyrm Cloud Backup — Encrypted backup/restore to Cloudflare R2
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  * @module cloud-backup
  * @version 3.2.0

package/dist/cloud-profile.d.ts

@@ -0,0 +1,103 @@
+/**
+ * v7 F4 (T042) — Cloud parity v2: the cloud-capable subset of the STANDARD tier.
+ *
+ * Cloud parity v1 (`cloud-tools.json`, contract `wyrm-cloud-memory-v1`) was a
+ * HAND-CURATED 9-name list: the memory/search/truth/quest/stats core the
+ * mcp.wyrm.ghosts.lk edge first shipped. v2 makes the cloud subset a
+ * MEASURABLE PROPERTY of the frozen surface instead of a guess (spec FR-4 /
+ * §7 criterion 12, Article V — "per-tool cloudSupported flags generated from
+ * the registry, cannot lie; cloud parity is a measurable property").
+ *
+ * THE v2 RULE (spec.md:334-336):
+ *
+ *     cloud-capable v2 = STANDARD tier
+ *                        − device-local
+ *                        − egress
+ *                        − subprocess
+ *
+ * The three exclusion classes below are the tools a STATELESS WORKER cannot
+ * honestly serve against a remote D1/KV-backed store:
+ *
+ *  - SUBPROCESS — spawns a local OS process / long-running loop / index build
+ *    on the operator's machine. Meaningless on the edge (no process to spawn,
+ *    no local Ollama, no daemon). wyrm_run (the agent run loop) +
+ *    wyrm_maintenance (reindex / vector-backfill).
+ *
+ *  - EGRESS — reaches OUT to another network endpoint (a peer Worker, a third
+ *    -party MCP server, a federation peer, a companion model). The edge is the
+ *    server, not a client; it must not fan out. wyrm_call_external + wyrm_mcp
+ *    (outbound MCP client) + wyrm_replication (peer push/pull) + wyrm_share
+ *    (federation egress) + buddy (companion external replies).
+ *
+ *  - DEVICE-LOCAL — semantically bound to THIS machine / process / on-disk
+ *    session, or a multi-action shim with a device-local action that touches
+ *    the local filesystem. A stateless Worker has no "this device", no local
+ *    agent presence, no per-process OODA loop, no server-self capability report
+ *    that matches the edge's surface, no local disk to write SKILL.md to, and no
+ *    local tree to scan. wyrm_act + wyrm_presence + wyrm_session +
+ *    wyrm_capabilities + wyrm_skill (create/register write SKILL.md) +
+ *    wyrm_project (scan walks the tree; sync reads/writes local .wyrm folders).
+ *
+ * Everything else on the standard tier is a pure local-DB memory op (capture /
+ * recall / search / truth / quest / goal / review / entity / reference / audit /
+ * causality / design-token / stats / failure / context) — the edge serves these
+ * against its remote store with identical semantics. (NOTE: skill and project
+ * are NOT in this list — their multi-action surfaces include a device-local FS
+ * write/scan, so they are excluded above, not served pure-DB.)
+ *
+ * The sets are CLOSED over the standard tier: cloud-profile.test.ts asserts
+ * every excluded name is a standard-tier member and the three classes are
+ * disjoint, so the subtraction can never silently include a legacy/core-only
+ * name or double-count. The measured v2 count is whatever this derivation
+ * yields — published, never asserted to a magic literal beyond the spec's
+ * ~18-22 sanity band.
+ *
+ * Article V (vendor-neutral): the exclusion is by TOOL CAPABILITY CLASS, never
+ * by client/vendor name. Article VI (back-compat): every v1 name still
+ * resolves under v2 — the 9 v1 names are either v2 members or aliases whose
+ * target is a v2 member (cloudV1ResolvesUnderV2).
+ *
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
+ * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
+ */
+/** Contract names. v1 stays for back-compat; v2 is the expanded subset. */
+export declare const CLOUD_CONTRACT_V1: "wyrm-cloud-memory-v1";
+export declare const CLOUD_CONTRACT_V2: "wyrm-cloud-memory-v2";
+/**
+ * SUBPROCESS — spawns a local process / loop / index build. Cannot run on a
+ * stateless edge Worker.
+ */
+export declare const CLOUD_EXCLUDE_SUBPROCESS: ReadonlySet<string>;
+/**
+ * EGRESS — reaches out to another network endpoint. The edge is the server,
+ * not a fan-out client.
+ */
+export declare const CLOUD_EXCLUDE_EGRESS: ReadonlySet<string>;
+/**
+ * DEVICE-LOCAL — bound to THIS machine / process / on-disk session; has no
+ * meaning on a stateless Worker.
+ */
+export declare const CLOUD_EXCLUDE_DEVICE_LOCAL: ReadonlySet<string>;
+/** The union of all three exclusion classes (device-local ∪ egress ∪ subprocess). */
+export declare const CLOUD_EXCLUDED_FROM_STANDARD: ReadonlySet<string>;
+/**
+ * THE cloud-capable v2 set — STANDARD tier minus the three exclusion classes.
+ * Computed (never hand-listed) so the manifest cannot lie about parity.
+ */
+export declare const CLOUD_CAPABLE_V2: ReadonlySet<string>;
+/** Sorted array view (codepoint order) — deterministic iteration / manifests. */
+export declare const CLOUD_CAPABLE_V2_NAMES: readonly string[];
+/** The measured v2 tool count (whatever the derivation yields). */
+export declare const CLOUD_CAPABLE_V2_COUNT: number;
+/**
+ * v1 → v2 resolution check (Article VI): every v1 cloud name must still be
+ * answered under v2 — either it IS a v2 member, or it is a hidden alias whose
+ * routed target is a v2 member. `aliasTargetOf` is injected (the alias spine
+ * lives in handlers/aliases.ts; passing it keeps cloud-profile.ts free of a
+ * registry import cycle).
+ */
+export declare function cloudV1ResolvesUnderV2(v1Names: readonly string[], aliasTargetOf: (name: string) => string | undefined): {
+    resolves: boolean;
+    unresolved: string[];
+};
+//# sourceMappingURL=cloud-profile.d.ts.map

package/dist/cloud-profile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-profile.d.ts","sourceRoot":"","sources":["../src/cloud-profile.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6DG;AAIH,2EAA2E;AAC3E,eAAO,MAAM,iBAAiB,EAAG,sBAA+B,CAAC;AACjE,eAAO,MAAM,iBAAiB,EAAG,sBAA+B,CAAC;AAEjE;;;GAGG;AACH,eAAO,MAAM,wBAAwB,EAAE,WAAW,CAAC,MAAM,CAGvD,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAE,WAAW,CAAC,MAAM,CAMnD,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,0BAA0B,EAAE,WAAW,CAAC,MAAM,CAazD,CAAC;AAEH,qFAAqF;AACrF,eAAO,MAAM,4BAA4B,EAAE,WAAW,CAAC,MAAM,CAI3D,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,gBAAgB,EAAE,WAAW,CAAC,MAAM,CAEhD,CAAC;AAEF,iFAAiF;AACjF,eAAO,MAAM,sBAAsB,EAAE,SAAS,MAAM,EAAiC,CAAC;AAEtF,mEAAmE;AACnE,eAAO,MAAM,sBAAsB,QAAwB,CAAC;AAE5D;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,aAAa,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,GAClD;IAAE,QAAQ,EAAE,OAAO,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAA;CAAE,CAS7C"}