@aion0/bastion 0.1.7

package/dist/storage/repositories/cache.js

@@ -0,0 +1,44 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CacheRepository = void 0;
+class CacheRepository {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    get(key, ttlSeconds) {
+        let query = 'SELECT * FROM cache WHERE key = ?';
+        if (ttlSeconds && ttlSeconds > 0) {
+            query += ` AND created_at > datetime('now', '-${Math.floor(ttlSeconds)} seconds')`;
+        }
+        const record = this.db.prepare(query).get(key);
+        if (!record)
+            return undefined;
+        this.db.prepare("UPDATE cache SET hit_count = hit_count + 1, last_hit_at = datetime('now') WHERE key = ?").run(key);
+        // Return with updated hit_count
+        record.hit_count += 1;
+        return record;
+    }
+    set(record) {
+        this.db.prepare(`
+      INSERT OR REPLACE INTO cache (key, provider, model, encrypted_response, iv, auth_tag, input_tokens, output_tokens)
+      VALUES (@key, @provider, @model, @encrypted_response, @iv, @auth_tag, @input_tokens, @output_tokens)
+    `).run(record);
+    }
+    getStats() {
+        const result = this.db.prepare(`
+      SELECT COUNT(*) as total_entries, COALESCE(SUM(hit_count), 0) as total_hits FROM cache
+    `).get();
+        return result;
+    }
+    evictOldest(keepCount) {
+        const result = this.db.prepare(`
+      DELETE FROM cache WHERE key NOT IN (
+        SELECT key FROM cache ORDER BY last_hit_at DESC, created_at DESC LIMIT ?
+      )
+    `).run(keepCount);
+        return result.changes;
+    }
+}
+exports.CacheRepository = CacheRepository;
+//# sourceMappingURL=cache.js.map

package/dist/storage/repositories/cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.js","sourceRoot":"","sources":["../../../src/storage/repositories/cache.ts"],"names":[],"mappings":";;;AAgBA,MAAa,eAAe;IAClB,EAAE,CAAoB;IAE9B,YAAY,EAAqB;QAC/B,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;IACf,CAAC;IAED,GAAG,CAAC,GAAW,EAAE,UAAmB;QAClC,IAAI,KAAK,GAAG,mCAAmC,CAAC;QAChD,IAAI,UAAU,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;YACjC,KAAK,IAAI,uCAAuC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,YAAY,CAAC;QACrF,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAA4B,CAAC;QAC1E,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QAC9B,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,yFAAyF,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpH,gCAAgC;QAChC,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC;QACtB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,GAAG,CAAC,MAAqE;QACvE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;KAGf,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACjB,CAAC;IAED,QAAQ;QACN,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;KAE9B,CAAC,CAAC,GAAG,EAAmD,CAAC;QAC1D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,WAAW,CAAC,SAAiB;QAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;KAI9B,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAClB,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;CACF;AA1CD,0CA0CC"}

package/dist/storage/repositories/dlp-config-history.d.ts

@@ -0,0 +1,17 @@
+import type Database from 'better-sqlite3';
+export interface DlpConfigHistoryEntry {
+    id: number;
+    config_json: string;
+    created_at: string;
+}
+export declare class DlpConfigHistoryRepository {
+    private db;
+    constructor(db: Database.Database);
+    /** Save a DLP config snapshot and prune old entries beyond MAX_ENTRIES */
+    insert(config: object): number;
+    /** Get the most recent entries (newest first) */
+    getRecent(limit?: number): DlpConfigHistoryEntry[];
+    /** Get a single entry by ID */
+    getById(id: number): DlpConfigHistoryEntry | null;
+}
+//# sourceMappingURL=dlp-config-history.d.ts.map

package/dist/storage/repositories/dlp-config-history.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dlp-config-history.d.ts","sourceRoot":"","sources":["../../../src/storage/repositories/dlp-config-history.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAE3C,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB;AAID,qBAAa,0BAA0B;IACrC,OAAO,CAAC,EAAE,CAAoB;gBAElB,EAAE,EAAE,QAAQ,CAAC,QAAQ;IAIjC,0EAA0E;IAC1E,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;IAgB9B,iDAAiD;IACjD,SAAS,CAAC,KAAK,SAAc,GAAG,qBAAqB,EAAE;IAMvD,+BAA+B;IAC/B,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,qBAAqB,GAAG,IAAI;CAKlD"}

package/dist/storage/repositories/dlp-config-history.js

@@ -0,0 +1,30 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DlpConfigHistoryRepository = void 0;
+const MAX_ENTRIES = 10;
+class DlpConfigHistoryRepository {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    /** Save a DLP config snapshot and prune old entries beyond MAX_ENTRIES */
+    insert(config) {
+        const stmt = this.db.prepare('INSERT INTO dlp_config_history (config_json) VALUES (?)');
+        const result = stmt.run(JSON.stringify(config));
+        // Prune old entries
+        this.db.prepare(`DELETE FROM dlp_config_history WHERE id NOT IN (
+        SELECT id FROM dlp_config_history ORDER BY id DESC LIMIT ?
+      )`).run(MAX_ENTRIES);
+        return result.lastInsertRowid;
+    }
+    /** Get the most recent entries (newest first) */
+    getRecent(limit = MAX_ENTRIES) {
+        return this.db.prepare('SELECT id, config_json, created_at FROM dlp_config_history ORDER BY id DESC LIMIT ?').all(limit);
+    }
+    /** Get a single entry by ID */
+    getById(id) {
+        return this.db.prepare('SELECT id, config_json, created_at FROM dlp_config_history WHERE id = ?').get(id) ?? null;
+    }
+}
+exports.DlpConfigHistoryRepository = DlpConfigHistoryRepository;
+//# sourceMappingURL=dlp-config-history.js.map

package/dist/storage/repositories/dlp-config-history.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dlp-config-history.js","sourceRoot":"","sources":["../../../src/storage/repositories/dlp-config-history.ts"],"names":[],"mappings":";;;AAQA,MAAM,WAAW,GAAG,EAAE,CAAC;AAEvB,MAAa,0BAA0B;IAC7B,EAAE,CAAoB;IAE9B,YAAY,EAAqB;QAC/B,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;IACf,CAAC;IAED,0EAA0E;IAC1E,MAAM,CAAC,MAAc;QACnB,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAC1B,yDAAyD,CAC1D,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAEhD,oBAAoB;QACpB,IAAI,CAAC,EAAE,CAAC,OAAO,CACb;;QAEE,CACH,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAEnB,OAAO,MAAM,CAAC,eAAyB,CAAC;IAC1C,CAAC;IAED,iDAAiD;IACjD,SAAS,CAAC,KAAK,GAAG,WAAW;QAC3B,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CACpB,qFAAqF,CACtF,CAAC,GAAG,CAAC,KAAK,CAA4B,CAAC;IAC1C,CAAC;IAED,+BAA+B;IAC/B,OAAO,CAAC,EAAU;QAChB,OAAQ,IAAI,CAAC,EAAE,CAAC,OAAO,CACrB,yEAAyE,CAC1E,CAAC,GAAG,CAAC,EAAE,CAA2B,IAAI,IAAI,CAAC;IAC9C,CAAC;CACF;AArCD,gEAqCC"}

package/dist/storage/repositories/dlp-events.d.ts

@@ -0,0 +1,35 @@
+import type Database from 'better-sqlite3';
+export interface DlpEventRecord {
+    id: string;
+    request_id: string;
+    pattern_name: string;
+    pattern_category: string;
+    action: string;
+    match_count: number;
+    original_snippet: string | null;
+    redacted_snippet: string | null;
+    direction: string;
+    created_at: string;
+}
+export declare class DlpEventsRepository {
+    private db;
+    private insertStmt;
+    constructor(db: Database.Database);
+    insert(record: Omit<DlpEventRecord, 'created_at' | 'direction'> & {
+        direction?: string;
+    }): void;
+    getByRequestId(requestId: string): DlpEventRecord[];
+    getRecent(limit?: number, sinceHours?: number): (DlpEventRecord & {
+        provider?: string;
+        model?: string;
+        session_id?: string;
+        session_label?: string;
+    })[];
+    purgeOlderThan(hours: number): number;
+    getStats(): {
+        total_events: number;
+        by_action: Record<string, number>;
+        by_pattern: Record<string, number>;
+    };
+}
+//# sourceMappingURL=dlp-events.d.ts.map

package/dist/storage/repositories/dlp-events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dlp-events.d.ts","sourceRoot":"","sources":["../../../src/storage/repositories/dlp-events.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAE3C,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,EAAE,CAAoB;IAC9B,OAAO,CAAC,UAAU,CAAqB;gBAE3B,EAAE,EAAE,QAAQ,CAAC,QAAQ;IAQjC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,cAAc,EAAE,YAAY,GAAG,WAAW,CAAC,GAAG;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAI/F,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc,EAAE;IAInD,SAAS,CAAC,KAAK,GAAE,MAAW,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,CAAC,cAAc,GAAG;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,EAAE;IAoB3J,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAOrC,QAAQ,IAAI;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE;CAiB5G"}

package/dist/storage/repositories/dlp-events.js

@@ -0,0 +1,57 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DlpEventsRepository = void 0;
+class DlpEventsRepository {
+    db;
+    insertStmt;
+    constructor(db) {
+        this.db = db;
+        this.insertStmt = db.prepare(`
+      INSERT INTO dlp_events (id, request_id, pattern_name, pattern_category, action, match_count, original_snippet, redacted_snippet, direction)
+      VALUES (@id, @request_id, @pattern_name, @pattern_category, @action, @match_count, @original_snippet, @redacted_snippet, @direction)
+    `);
+    }
+    insert(record) {
+        this.insertStmt.run({ ...record, direction: record.direction ?? 'request' });
+    }
+    getByRequestId(requestId) {
+        return this.db.prepare('SELECT * FROM dlp_events WHERE request_id = ?').all(requestId);
+    }
+    getRecent(limit = 20, sinceHours) {
+        if (sinceHours) {
+            return this.db.prepare(`
+        SELECT d.*, r.provider, r.model, r.session_id, s.label as session_label
+        FROM dlp_events d
+        LEFT JOIN requests r ON r.id = d.request_id
+        LEFT JOIN sessions s ON s.id = r.session_id
+        WHERE d.created_at > datetime('now', '-' || ? || ' hours')
+        ORDER BY d.created_at DESC LIMIT ?
+      `).all(sinceHours, limit);
+        }
+        return this.db.prepare(`
+      SELECT d.*, r.provider, r.model, r.session_id, s.label as session_label
+      FROM dlp_events d
+      LEFT JOIN requests r ON r.id = d.request_id
+      LEFT JOIN sessions s ON s.id = r.session_id
+      ORDER BY d.created_at DESC LIMIT ?
+    `).all(limit);
+    }
+    purgeOlderThan(hours) {
+        const result = this.db.prepare(`DELETE FROM dlp_events WHERE created_at < datetime('now', '-' || ? || ' hours')`).run(hours);
+        return result.changes;
+    }
+    getStats() {
+        const total = this.db.prepare('SELECT COUNT(*) as count FROM dlp_events').get();
+        const actionRows = this.db.prepare('SELECT action, COUNT(*) as count FROM dlp_events GROUP BY action').all();
+        const patternRows = this.db.prepare('SELECT pattern_name, COUNT(*) as count FROM dlp_events GROUP BY pattern_name').all();
+        const by_action = {};
+        for (const row of actionRows)
+            by_action[row.action] = row.count;
+        const by_pattern = {};
+        for (const row of patternRows)
+            by_pattern[row.pattern_name] = row.count;
+        return { total_events: total.count, by_action, by_pattern };
+    }
+}
+exports.DlpEventsRepository = DlpEventsRepository;
+//# sourceMappingURL=dlp-events.js.map

package/dist/storage/repositories/dlp-events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dlp-events.js","sourceRoot":"","sources":["../../../src/storage/repositories/dlp-events.ts"],"names":[],"mappings":";;;AAeA,MAAa,mBAAmB;IACtB,EAAE,CAAoB;IACtB,UAAU,CAAqB;IAEvC,YAAY,EAAqB;QAC/B,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC,OAAO,CAAC;;;KAG5B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,MAAiF;QACtF,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,SAAS,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,cAAc,CAAC,SAAiB;QAC9B,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,+CAA+C,CAAC,CAAC,GAAG,CAAC,SAAS,CAAqB,CAAC;IAC7G,CAAC;IAED,SAAS,CAAC,QAAgB,EAAE,EAAE,UAAmB;QAC/C,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;;;OAOtB,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAA4G,CAAC;QACvI,CAAC;QACD,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;;KAMtB,CAAC,CAAC,GAAG,CAAC,KAAK,CAA4G,CAAC;IAC3H,CAAC;IAED,cAAc,CAAC,KAAa;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAC5B,iFAAiF,CAClF,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACb,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;IAED,QAAQ;QACN,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAAC,GAAG,EAAuB,CAAC;QACrG,MAAM,UAAU,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAChC,kEAAkE,CACnE,CAAC,GAAG,EAAyC,CAAC;QAC/C,MAAM,WAAW,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CACjC,8EAA8E,CAC/E,CAAC,GAAG,EAA+C,CAAC;QAErD,MAAM,SAAS,GAA2B,EAAE,CAAC;QAC7C,KAAK,MAAM,GAAG,IAAI,UAAU;YAAE,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC;QAEhE,MAAM,UAAU,GAA2B,EAAE,CAAC;QAC9C,KAAK,MAAM,GAAG,IAAI,WAAW;YAAE,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC;QAExE,OAAO,EAAE,YAAY,EAAE,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;IAC9D,CAAC;CACF;AAhED,kDAgEC"}

package/dist/storage/repositories/dlp-patterns.d.ts

@@ -0,0 +1,70 @@
+import type Database from 'better-sqlite3';
+import type { DlpPattern, ContextVerification } from '../../dlp/engine.js';
+export interface DlpPatternRecord {
+    id: string;
+    name: string;
+    category: string;
+    regex_source: string;
+    regex_flags: string;
+    description: string | null;
+    validator: string | null;
+    require_context: string | null;
+    context_verify: string | null;
+    enabled: number;
+    is_builtin: number;
+    created_at: string;
+}
+export declare function serializeContextVerify(cv: ContextVerification): string;
+export declare function deserializeContextVerify(json: string): ContextVerification;
+export declare class DlpPatternsRepository {
+    private db;
+    constructor(db: Database.Database);
+    /**
+     * Seed built-in patterns from the hardcoded pattern files.
+     * First seed: only enable categories matching enabledCategories.
+     * Subsequent: new builtins added get enabled=1 by default, existing rows untouched.
+     */
+    seedBuiltins(patterns: DlpPattern[], enabledCategories: string[]): void;
+    /** Get all enabled patterns, converted to DlpPattern objects */
+    getEnabled(): DlpPattern[];
+    /** Get all patterns for UI listing */
+    getAll(): DlpPatternRecord[];
+    /** Toggle enabled flag */
+    toggle(id: string, enabled: boolean): void;
+    /** Insert or update a pattern */
+    upsert(record: {
+        id: string;
+        name: string;
+        category?: string;
+        regex_source: string;
+        regex_flags?: string;
+        description?: string | null;
+        validator?: string | null;
+        require_context?: string | null;
+        context_verify?: string | null;
+        enabled?: boolean;
+    }): void;
+    /**
+     * Upsert a remote pattern from the signature repo.
+     * New patterns: inserted with enabled based on category match.
+     * Existing patterns: regex/description/etc updated, but user's enabled toggle is preserved.
+     */
+    upsertRemote(record: {
+        id: string;
+        name: string;
+        category: string;
+        regex_source: string;
+        regex_flags: string;
+        description: string | null;
+        validator: string | null;
+        require_context: string | null;
+        context_verify: string | null;
+        enabled: boolean;
+        source: string;
+    }): void;
+    /** Get DlpPattern objects by name (regardless of enabled status) */
+    getByNames(names: string[]): DlpPattern[];
+    /** Delete a custom pattern. Rejects if is_builtin=1. Returns true if deleted. */
+    remove(id: string): boolean;
+}
+//# sourceMappingURL=dlp-patterns.d.ts.map

package/dist/storage/repositories/dlp-patterns.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dlp-patterns.d.ts","sourceRoot":"","sources":["../../../src/storage/repositories/dlp-patterns.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE3E,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAID,wBAAgB,sBAAsB,CAAC,EAAE,EAAE,mBAAmB,GAAG,MAAM,CAOtE;AAED,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,mBAAmB,CAQ1E;AAED,qBAAa,qBAAqB;IAChC,OAAO,CAAC,EAAE,CAAoB;gBAElB,EAAE,EAAE,QAAQ,CAAC,QAAQ;IAIjC;;;;OAIG;IACH,YAAY,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,iBAAiB,EAAE,MAAM,EAAE,GAAG,IAAI;IAiCvE,gEAAgE;IAChE,UAAU,IAAI,UAAU,EAAE;IAO1B,sCAAsC;IACtC,MAAM,IAAI,gBAAgB,EAAE;IAM5B,0BAA0B;IAC1B,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI;IAM1C,iCAAiC;IACjC,MAAM,CAAC,MAAM,EAAE;QACb,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,YAAY,EAAE,MAAM,CAAC;QACrB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAChC,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC/B,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB,GAAG,IAAI;IA4BR;;;;OAIG;IACH,YAAY,CAAC,MAAM,EAAE;QACnB,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,YAAY,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;QAC/B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,OAAO,EAAE,OAAO,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;KAChB,GAAG,IAAI;IA+CR,oEAAoE;IACpE,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,UAAU,EAAE;IASzC,iFAAiF;IACjF,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;CAa5B"}

package/dist/storage/repositories/dlp-patterns.js

@@ -0,0 +1,187 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DlpPatternsRepository = void 0;
+exports.serializeContextVerify = serializeContextVerify;
+exports.deserializeContextVerify = deserializeContextVerify;
+// ── ContextVerification serialization ──
+function serializeContextVerify(cv) {
+    return JSON.stringify({
+        antiPatterns: cv.antiPatterns?.map(r => r.source),
+        confirmPatterns: cv.confirmPatterns?.map(r => r.source),
+        minEntropy: cv.minEntropy,
+        rejectInCodeBlock: cv.rejectInCodeBlock,
+    });
+}
+function deserializeContextVerify(json) {
+    const obj = JSON.parse(json);
+    return {
+        antiPatterns: obj.antiPatterns?.map((s) => new RegExp(s, 'i')),
+        confirmPatterns: obj.confirmPatterns?.map((s) => new RegExp(s, 'i')),
+        minEntropy: obj.minEntropy,
+        rejectInCodeBlock: obj.rejectInCodeBlock,
+    };
+}
+class DlpPatternsRepository {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    /**
+     * Seed built-in patterns from the hardcoded pattern files.
+     * First seed: only enable categories matching enabledCategories.
+     * Subsequent: new builtins added get enabled=1 by default, existing rows untouched.
+     */
+    seedBuiltins(patterns, enabledCategories) {
+        const enabledSet = new Set(enabledCategories);
+        const insertStmt = this.db.prepare(`
+      INSERT OR IGNORE INTO dlp_patterns (id, name, category, regex_source, regex_flags, description, validator, require_context, context_verify, enabled, is_builtin)
+      VALUES (@id, @name, @category, @regex_source, @regex_flags, @description, @validator, @require_context, @context_verify, @enabled, 1)
+    `);
+        // Update regex/description/require_context/context_verify for existing builtins (preserve user's enabled toggle)
+        const updateStmt = this.db.prepare(`
+      UPDATE dlp_patterns SET regex_source = @regex_source, regex_flags = @regex_flags, description = @description, require_context = @require_context, context_verify = @context_verify
+      WHERE id = @id AND is_builtin = 1 AND (regex_source != @regex_source OR regex_flags != @regex_flags OR IFNULL(require_context, '') != IFNULL(@require_context, '') OR IFNULL(context_verify, '') != IFNULL(@context_verify, ''))
+    `);
+        const seed = this.db.transaction(() => {
+            for (const p of patterns) {
+                const row = {
+                    id: `builtin-${p.name}`,
+                    name: p.name,
+                    category: p.category,
+                    regex_source: p.regex.source,
+                    regex_flags: p.regex.flags,
+                    description: p.description ?? null,
+                    validator: p.validator ?? null,
+                    require_context: p.requireContext ? JSON.stringify(p.requireContext) : null,
+                    context_verify: p.contextVerify ? serializeContextVerify(p.contextVerify) : null,
+                    enabled: enabledSet.has(p.category) ? 1 : 0,
+                };
+                insertStmt.run(row);
+                updateStmt.run(row);
+            }
+        });
+        seed();
+    }
+    /** Get all enabled patterns, converted to DlpPattern objects */
+    getEnabled() {
+        const rows = this.db.prepare('SELECT * FROM dlp_patterns WHERE enabled = 1').all();
+        return rows.map(rowToPattern);
+    }
+    /** Get all patterns for UI listing */
+    getAll() {
+        return this.db.prepare('SELECT * FROM dlp_patterns ORDER BY is_builtin DESC, category, name').all();
+    }
+    /** Toggle enabled flag */
+    toggle(id, enabled) {
+        this.db.prepare('UPDATE dlp_patterns SET enabled = ? WHERE id = ?').run(enabled ? 1 : 0, id);
+    }
+    /** Insert or update a pattern */
+    upsert(record) {
+        this.db.prepare(`
+      INSERT INTO dlp_patterns (id, name, category, regex_source, regex_flags, description, validator, require_context, context_verify, enabled, is_builtin)
+      VALUES (@id, @name, @category, @regex_source, @regex_flags, @description, @validator, @require_context, @context_verify, @enabled, 0)
+      ON CONFLICT(id) DO UPDATE SET
+        name = @name,
+        category = @category,
+        regex_source = @regex_source,
+        regex_flags = @regex_flags,
+        description = @description,
+        validator = @validator,
+        require_context = @require_context,
+        context_verify = @context_verify,
+        enabled = @enabled
+    `).run({
+            id: record.id,
+            name: record.name,
+            category: record.category ?? 'custom',
+            regex_source: record.regex_source,
+            regex_flags: record.regex_flags ?? 'g',
+            description: record.description ?? null,
+            validator: record.validator ?? null,
+            require_context: record.require_context ?? null,
+            context_verify: record.context_verify ?? null,
+            enabled: record.enabled === false ? 0 : 1,
+        });
+    }
+    /**
+     * Upsert a remote pattern from the signature repo.
+     * New patterns: inserted with enabled based on category match.
+     * Existing patterns: regex/description/etc updated, but user's enabled toggle is preserved.
+     */
+    upsertRemote(record) {
+        // If a row with the same name already exists (e.g. builtin with different id),
+        // update its regex/description but preserve user's enabled toggle.
+        const existing = this.db.prepare('SELECT id FROM dlp_patterns WHERE name = ?').get(record.name);
+        if (existing) {
+            this.db.prepare(`
+        UPDATE dlp_patterns SET
+          category = @category,
+          regex_source = @regex_source,
+          regex_flags = @regex_flags,
+          description = @description,
+          validator = @validator,
+          require_context = @require_context,
+          context_verify = @context_verify
+        WHERE id = @id
+      `).run({
+                id: existing.id,
+                category: record.category,
+                regex_source: record.regex_source,
+                regex_flags: record.regex_flags,
+                description: record.description,
+                validator: record.validator,
+                require_context: record.require_context,
+                context_verify: record.context_verify,
+            });
+        }
+        else {
+            this.db.prepare(`
+        INSERT INTO dlp_patterns (id, name, category, regex_source, regex_flags, description, validator, require_context, context_verify, enabled, is_builtin)
+        VALUES (@id, @name, @category, @regex_source, @regex_flags, @description, @validator, @require_context, @context_verify, @enabled, 0)
+      `).run({
+                id: record.id,
+                name: record.name,
+                category: record.category,
+                regex_source: record.regex_source,
+                regex_flags: record.regex_flags,
+                description: record.description,
+                validator: record.validator,
+                require_context: record.require_context,
+                context_verify: record.context_verify,
+                enabled: record.enabled ? 1 : 0,
+            });
+        }
+    }
+    /** Get DlpPattern objects by name (regardless of enabled status) */
+    getByNames(names) {
+        if (names.length === 0)
+            return [];
+        const placeholders = names.map(() => '?').join(',');
+        const rows = this.db.prepare(`SELECT * FROM dlp_patterns WHERE name IN (${placeholders})`).all(...names);
+        return rows.map(rowToPattern);
+    }
+    /** Delete a custom pattern. Rejects if is_builtin=1. Returns true if deleted. */
+    remove(id) {
+        const row = this.db.prepare('SELECT is_builtin FROM dlp_patterns WHERE id = ?').get(id);
+        if (!row)
+            return false;
+        if (row.is_builtin === 1) {
+            throw new Error('Cannot delete built-in pattern');
+        }
+        this.db.prepare('DELETE FROM dlp_patterns WHERE id = ?').run(id);
+        return true;
+    }
+}
+exports.DlpPatternsRepository = DlpPatternsRepository;
+function rowToPattern(row) {
+    return {
+        name: row.name,
+        category: row.category,
+        regex: new RegExp(row.regex_source, row.regex_flags),
+        description: row.description ?? '',
+        validator: row.validator ?? undefined,
+        requireContext: row.require_context ? JSON.parse(row.require_context) : undefined,
+        contextVerify: row.context_verify ? deserializeContextVerify(row.context_verify) : undefined,
+    };
+}
+//# sourceMappingURL=dlp-patterns.js.map

package/dist/storage/repositories/dlp-patterns.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dlp-patterns.js","sourceRoot":"","sources":["../../../src/storage/repositories/dlp-patterns.ts"],"names":[],"mappings":";;;AAoBA,wDAOC;AAED,4DAQC;AAnBD,0CAA0C;AAE1C,SAAgB,sBAAsB,CAAC,EAAuB;IAC5D,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,YAAY,EAAE,EAAE,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QACjD,eAAe,EAAE,EAAE,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QACvD,UAAU,EAAE,EAAE,CAAC,UAAU;QACzB,iBAAiB,EAAE,EAAE,CAAC,iBAAiB;KACxC,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,wBAAwB,CAAC,IAAY;IACnD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,OAAO;QACL,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACtE,eAAe,EAAE,GAAG,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC5E,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;KACzC,CAAC;AACJ,CAAC;AAED,MAAa,qBAAqB;IACxB,EAAE,CAAoB;IAE9B,YAAY,EAAqB;QAC/B,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;IACf,CAAC;IAED;;;;OAIG;IACH,YAAY,CAAC,QAAsB,EAAE,iBAA2B;QAC9D,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC9C,MAAM,UAAU,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;KAGlC,CAAC,CAAC;QACH,iHAAiH;QACjH,MAAM,UAAU,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;KAGlC,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;YACpC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;gBACzB,MAAM,GAAG,GAAG;oBACV,EAAE,EAAE,WAAW,CAAC,CAAC,IAAI,EAAE;oBACvB,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;oBACpB,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM;oBAC5B,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK;oBAC1B,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,IAAI;oBAClC,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI;oBAC9B,eAAe,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI;oBAC3E,cAAc,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI;oBAChF,OAAO,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;iBAC5C,CAAC;gBACF,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACpB,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACtB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,IAAI,EAAE,CAAC;IACT,CAAC;IAED,gEAAgE;IAChE,UAAU;QACR,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAC1B,8CAA8C,CAC/C,CAAC,GAAG,EAAwB,CAAC;QAC9B,OAAO,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAChC,CAAC;IAED,sCAAsC;IACtC,MAAM;QACJ,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CACpB,qEAAqE,CACtE,CAAC,GAAG,EAAwB,CAAC;IAChC,CAAC;IAED,0BAA0B;IAC1B,MAAM,CAAC,EAAU,EAAE,OAAgB;QACjC,IAAI,CAAC,EAAE,CAAC,OAAO,CACb,kDAAkD,CACnD,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC7B,CAAC;IAED,iCAAiC;IACjC,MAAM,CAAC,MAWN;QACC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;;;;;;;;;KAaf,CAAC,CAAC,GAAG,CAAC;YACL,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,QAAQ;YACrC,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,GAAG;YACtC,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI;YACvC,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI;YACnC,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,IAAI;YAC/C,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,IAAI;YAC7C,OAAO,EAAE,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SAC1C,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,YAAY,CAAC,MAYZ;QACC,+EAA+E;QAC/E,mEAAmE;QACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAC9B,4CAA4C,CAC7C,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAA+B,CAAC;QAEjD,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;;;;;;OAUf,CAAC,CAAC,GAAG,CAAC;gBACL,EAAE,EAAE,QAAQ,CAAC,EAAE;gBACf,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,eAAe,EAAE,MAAM,CAAC,eAAe;gBACvC,cAAc,EAAE,MAAM,CAAC,cAAc;aACtC,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;OAGf,CAAC,CAAC,GAAG,CAAC;gBACL,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,eAAe,EAAE,MAAM,CAAC,eAAe;gBACvC,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aAChC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,oEAAoE;IACpE,UAAU,CAAC,KAAe;QACxB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAClC,MAAM,YAAY,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAC1B,6CAA6C,YAAY,GAAG,CAC7D,CAAC,GAAG,CAAC,GAAG,KAAK,CAAuB,CAAC;QACtC,OAAO,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAChC,CAAC;IAED,iFAAiF;IACjF,MAAM,CAAC,EAAU;QACf,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CACzB,kDAAkD,CACnD,CAAC,GAAG,CAAC,EAAE,CAAuC,CAAC;QAEhD,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC;QACvB,IAAI,GAAG,CAAC,UAAU,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,CAAC;QAED,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,uCAAuC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjE,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAnMD,sDAmMC;AAED,SAAS,YAAY,CAAC,GAAqB;IACzC,OAAO;QACL,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,KAAK,EAAE,IAAI,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,WAAW,CAAC;QACpD,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE;QAClC,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,SAAS;QACrC,cAAc,EAAE,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS;QACjF,aAAa,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,wBAAwB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS;KAC7F,CAAC;AACJ,CAAC"}

package/dist/storage/repositories/optimizer-events.d.ts

@@ -0,0 +1,28 @@
+import type Database from 'better-sqlite3';
+export interface OptimizerEventRecord {
+    id: string;
+    request_id: string;
+    cache_hit: number;
+    original_length: number;
+    trimmed_length: number;
+    chars_saved: number;
+    tokens_saved_estimate: number;
+    created_at: string;
+}
+export interface OptimizerStats {
+    total_events: number;
+    total_cache_hits: number;
+    cache_hit_rate: number;
+    total_chars_saved: number;
+    total_tokens_saved: number;
+}
+export declare class OptimizerEventsRepository {
+    private db;
+    private insertStmt;
+    constructor(db: Database.Database);
+    insert(record: Omit<OptimizerEventRecord, 'created_at'>): void;
+    getStats(): OptimizerStats;
+    getRecent(limit?: number, sinceHours?: number): OptimizerEventRecord[];
+    purgeOlderThan(hours: number): number;
+}
+//# sourceMappingURL=optimizer-events.d.ts.map

package/dist/storage/repositories/optimizer-events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"optimizer-events.d.ts","sourceRoot":"","sources":["../../../src/storage/repositories/optimizer-events.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAE3C,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED,qBAAa,yBAAyB;IACpC,OAAO,CAAC,EAAE,CAAoB;IAC9B,OAAO,CAAC,UAAU,CAAqB;gBAE3B,EAAE,EAAE,QAAQ,CAAC,QAAQ;IAQjC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,oBAAoB,EAAE,YAAY,CAAC,GAAG,IAAI;IAI9D,QAAQ,IAAI,cAAc;IAuB1B,SAAS,CAAC,KAAK,GAAE,MAAW,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,oBAAoB,EAAE;IAW1E,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;CAMtC"}

package/dist/storage/repositories/optimizer-events.js

@@ -0,0 +1,49 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OptimizerEventsRepository = void 0;
+class OptimizerEventsRepository {
+    db;
+    insertStmt;
+    constructor(db) {
+        this.db = db;
+        this.insertStmt = db.prepare(`
+      INSERT INTO optimizer_events (id, request_id, cache_hit, original_length, trimmed_length, chars_saved, tokens_saved_estimate)
+      VALUES (@id, @request_id, @cache_hit, @original_length, @trimmed_length, @chars_saved, @tokens_saved_estimate)
+    `);
+    }
+    insert(record) {
+        this.insertStmt.run(record);
+    }
+    getStats() {
+        const result = this.db.prepare(`
+      SELECT
+        COUNT(*) as total_events,
+        COALESCE(SUM(cache_hit), 0) as total_cache_hits,
+        COALESCE(SUM(chars_saved), 0) as total_chars_saved,
+        COALESCE(SUM(tokens_saved_estimate), 0) as total_tokens_saved
+      FROM optimizer_events
+    `).get();
+        return {
+            ...result,
+            cache_hit_rate: result.total_events > 0
+                ? result.total_cache_hits / result.total_events
+                : 0,
+        };
+    }
+    getRecent(limit = 20, sinceHours) {
+        if (sinceHours) {
+            return this.db.prepare(`
+        SELECT * FROM optimizer_events WHERE created_at > datetime('now', '-' || ? || ' hours') ORDER BY created_at DESC LIMIT ?
+      `).all(sinceHours, limit);
+        }
+        return this.db.prepare(`
+      SELECT * FROM optimizer_events ORDER BY created_at DESC LIMIT ?
+    `).all(limit);
+    }
+    purgeOlderThan(hours) {
+        const result = this.db.prepare(`DELETE FROM optimizer_events WHERE created_at < datetime('now', '-' || ? || ' hours')`).run(hours);
+        return result.changes;
+    }
+}
+exports.OptimizerEventsRepository = OptimizerEventsRepository;
+//# sourceMappingURL=optimizer-events.js.map

package/dist/storage/repositories/optimizer-events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"optimizer-events.js","sourceRoot":"","sources":["../../../src/storage/repositories/optimizer-events.ts"],"names":[],"mappings":";;;AAqBA,MAAa,yBAAyB;IAC5B,EAAE,CAAoB;IACtB,UAAU,CAAqB;IAEvC,YAAY,EAAqB;QAC/B,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC,OAAO,CAAC;;;KAG5B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,MAAgD;QACrD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAED,QAAQ;QACN,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;;;KAO9B,CAAC,CAAC,GAAG,EAKL,CAAC;QAEF,OAAO;YACL,GAAG,MAAM;YACT,cAAc,EAAE,MAAM,CAAC,YAAY,GAAG,CAAC;gBACrC,CAAC,CAAC,MAAM,CAAC,gBAAgB,GAAG,MAAM,CAAC,YAAY;gBAC/C,CAAC,CAAC,CAAC;SACN,CAAC;IACJ,CAAC;IAED,SAAS,CAAC,QAAgB,EAAE,EAAE,UAAmB;QAC/C,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;OAEtB,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAA2B,CAAC;QACtD,CAAC;QACD,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;KAEtB,CAAC,CAAC,GAAG,CAAC,KAAK,CAA2B,CAAC;IAC1C,CAAC;IAED,cAAc,CAAC,KAAa;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAC5B,uFAAuF,CACxF,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACb,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;CACF;AAxDD,8DAwDC"}

package/dist/storage/repositories/plugin-events.d.ts

@@ -0,0 +1,34 @@
+import type Database from 'better-sqlite3';
+export interface PluginEventRecord {
+    id: string;
+    plugin_name: string;
+    request_id: string | null;
+    type: string;
+    severity: string;
+    rule: string;
+    detail: string;
+    matched_text: string | null;
+    created_at: string;
+}
+export declare class PluginEventsRepository {
+    private db;
+    private insertStmt;
+    constructor(db: Database.Database);
+    insert(record: Omit<PluginEventRecord, 'created_at'>): void;
+    insertEvent(pluginName: string, requestId: string | null, event: {
+        type: string;
+        severity: string;
+        rule: string;
+        detail: string;
+        matchedText?: string;
+    }): void;
+    getRecent(limit?: number, sinceHours?: number): PluginEventRecord[];
+    getByPlugin(pluginName: string, limit?: number): PluginEventRecord[];
+    purgeOlderThan(hours: number): number;
+    getStats(): {
+        total_events: number;
+        by_plugin: Record<string, number>;
+        by_type: Record<string, number>;
+    };
+}
+//# sourceMappingURL=plugin-events.d.ts.map

package/dist/storage/repositories/plugin-events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-events.d.ts","sourceRoot":"","sources":["../../../src/storage/repositories/plugin-events.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAE3C,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,qBAAa,sBAAsB;IACjC,OAAO,CAAC,EAAE,CAAoB;IAC9B,OAAO,CAAC,UAAU,CAAqB;gBAE3B,EAAE,EAAE,QAAQ,CAAC,QAAQ;IAQjC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,iBAAiB,EAAE,YAAY,CAAC,GAAG,IAAI;IAI3D,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,EAAE,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAa9J,SAAS,CAAC,KAAK,GAAE,MAAW,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,iBAAiB,EAAE;IAavE,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,GAAE,MAAW,GAAG,iBAAiB,EAAE;IAMxE,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAOrC,QAAQ,IAAI;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE;CAiBzG"}