@aj-archipelago/cortex 1.4.1 → 1.4.2

package/lib/crypto.js

@@ -36,70 +36,6 @@ function decrypt(message, key) {
     }
 }
 
-// Double encryption: encrypt with user key first, then system key
-function doubleEncrypt(data, userContextKey, systemKey) {
-    if (!systemKey) {
-        logger.error('System key is required for encryption');
-        return null;
-    }
-    
-    if (!userContextKey) {
-        // If no user key provided, use single-layer encryption with system key
-        return encrypt(data, systemKey);
-    }
-    
-    try {
-        // First encrypt with user's contextKey
-        const userEncrypted = encrypt(data, userContextKey);
-        if (!userEncrypted) {
-            logger.error('User encryption failed, falling back to system encryption only');
-            return encrypt(data, systemKey);
-        }
-        
-        // Then encrypt with system key
-        return encrypt(userEncrypted, systemKey);
-    } catch (error) {
-        logger.error(`Double encryption failed: ${error.message}`);
-        // Fallback to single-layer system encryption
-        return encrypt(data, systemKey);
-    }
-}
-
-// Double decryption: decrypt with system key first, then user key
-function doubleDecrypt(encryptedData, userContextKey, systemKey) {
-    if (!systemKey) {
-        logger.error('System key is required for decryption');
-        return null;
-    }
-    
-    if (!userContextKey) {
-        // If no user key provided, use single-layer decryption with system key
-        return decrypt(encryptedData, systemKey);
-    }
-    
-    try {
-        // First decrypt with system key
-        const systemDecrypted = decrypt(encryptedData, systemKey);
-        if (!systemDecrypted) {
-            logger.error('System decryption failed');
-            return null;
-        }
-        
-        // Try to decrypt with user's contextKey
-        const userDecrypted = decrypt(systemDecrypted, userContextKey);
-        if (userDecrypted) {
-            // Successfully double-decrypted
-            return userDecrypted;
-        }
-        
-        // User decryption failed, but system decryption succeeded
-        // This means the data was single-encrypted with system key only
-        return systemDecrypted;
-    } catch (error) {
-        logger.error(`Double decryption failed: ${error.message}`);
-        return null;
-    }
-}
 
 function tryBufferKey(key) {
     if (key.length === 64) {
@@ -108,4 +44,4 @@ function tryBufferKey(key) {
     return key;
 }
 
-export { encrypt, decrypt, doubleEncrypt, doubleDecrypt };
+export { encrypt, decrypt };

package/lib/keyValueStorageClient.js

@@ -45,8 +45,60 @@ async function getv(key) {
     return keyValueStorageClient && (await keyValueStorageClient.get(key));
 }
 
+// Set values to keyv with additional context key encryption
+async function setvWithDoubleEncryption(key, value, contextKey) {
+    let processedValue = value;
+    
+    // If contextKey exists and is not empty, encrypt the value with it
+    if (contextKey && contextKey.trim() !== '' && value !== null && value !== undefined) {
+        try {
+            // Convert value to string for encryption
+            const stringValue = typeof value === 'string' ? value : JSON.stringify(value);
+            processedValue = encrypt(stringValue, contextKey);
+        } catch (error) {
+            logger.error(`Context key encryption failed: ${error.message}`);
+            // Continue with unencrypted value if context encryption fails
+        }
+    }
+    
+    return keyValueStorageClient && (await keyValueStorageClient.set(key, processedValue));
+}
+
+// Get values from keyv with additional context key decryption
+async function getvWithDoubleDecryption(key, contextKey) {
+    const result = keyValueStorageClient && (await keyValueStorageClient.get(key));
+    
+    if (result === null || result === undefined) {
+        return result;
+    }
+    
+    // If contextKey exists and is not empty, try to decrypt the result with it
+    if (contextKey && contextKey.trim() !== '') {
+        try {
+            // Try to decrypt with context key
+            const decrypted = decrypt(result, contextKey);
+            if (decrypted) {
+                // Try to parse as JSON, if it fails return the string as-is
+                try {
+                    return JSON.parse(decrypted);
+                } catch (parseError) {
+                    return decrypted;
+                }
+            }
+        } catch (error) {
+            // If context decryption fails, the data might not be context-encrypted
+            // or the context key might be wrong, so return the result as-is
+            logger.debug(`Context key decryption failed, returning original data: ${error.message}`);
+        }
+    }
+    
+    return result;
+}
+
 export {
     keyValueStorageClient,
     setv,
-    getv
+    getv,
+    setvWithDoubleEncryption,
+    getvWithDoubleDecryption
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aj-archipelago/cortex",
-  "version": "1.4.1",
+  "version": "1.4.2",
   "description": "Cortex is a GraphQL API for AI. It provides a simple, extensible interface for using AI services from OpenAI, Azure and others.",
   "private": false,
   "repository": {

package/pathways/system/entity/memory/sys_read_memory.js

@@ -2,7 +2,7 @@
 // it should never try to call other pathways
 
 import { getv } from '../../../../lib/keyValueStorageClient.js';
-import { getvWithDoubleDecryption } from '../../../../lib/doubleEncryptionStorageClient.js';
+import { getvWithDoubleDecryption } from '../../../../lib/keyValueStorageClient.js';
 
 const isValidISOTimestamp = (timestamp) => {
     if (!timestamp) return false;

package/pathways/system/entity/memory/sys_save_memory.js

@@ -1,5 +1,5 @@
 import { getv } from '../../../../lib/keyValueStorageClient.js';
-import { setvWithDoubleEncryption } from '../../../../lib/doubleEncryptionStorageClient.js';
+import { setvWithDoubleEncryption } from '../../../../lib/keyValueStorageClient.js';
 
 export default {
     inputParameters: {

package/pathways/system/entity/memory/sys_search_memory.js

@@ -1,6 +1,6 @@
 import { Prompt } from '../../../../server/prompt.js';
 import { callPathway } from '../../../../lib/pathwayTools.js';
-import { setvWithDoubleEncryption } from '../../../../lib/doubleEncryptionStorageClient.js';
+import { setvWithDoubleEncryption } from '../../../../lib/keyValueStorageClient.js';
 
 export default {
     prompt:

package/server/pathwayResolver.js

@@ -6,7 +6,7 @@ import { getFirstNToken, getLastNToken, getSemanticChunks } from './chunker.js';
 import { PathwayResponseParser } from './pathwayResponseParser.js';
 import { Prompt } from './prompt.js';
 import { getv, setv } from '../lib/keyValueStorageClient.js';
-import { getvWithDoubleDecryption, setvWithDoubleEncryption } from '../lib/doubleEncryptionStorageClient.js';
+import { getvWithDoubleDecryption, setvWithDoubleEncryption } from '../lib/keyValueStorageClient.js';
 import { requestState } from './requestState.js';
 import { callPathway, addCitationsToResolver } from '../lib/pathwayTools.js';
 import logger from '../lib/logger.js';