@askexenow/exe-os 0.9.299 → 0.9.301

package/dist/memory-poisoning-defense-5UZT3WWA.js

@@ -0,0 +1,224 @@
+import {
+  blobToVector
+} from "./chunk-OTVEIJUQ.js";
+import {
+  getClient
+} from "./chunk-XABJRAUW.js";
+import "./chunk-2I23RPSI.js";
+import "./chunk-PH6VRRFR.js";
+import "./chunk-PNQDP3OA.js";
+import "./chunk-7HLWBYH7.js";
+import "./chunk-FXU7JOXK.js";
+import {
+  loadConfig
+} from "./chunk-R36FAN53.js";
+import "./chunk-LYH5HE24.js";
+import "./chunk-MLKGABMK.js";
+
+// src/lib/memory-poisoning-defense.ts
+var SYSTEM_TOOLS = /* @__PURE__ */ new Set([
+  "session-start",
+  "ingest",
+  "ingest-worker",
+  "consolidation",
+  "skill-learning",
+  "summary-worker",
+  "bug-report-worker",
+  "reflection",
+  "dreaming-engine",
+  "daemon"
+]);
+function computeTrustLevel(toolName, agentId) {
+  if (SYSTEM_TOOLS.has(toolName)) return "system";
+  if (agentId && (toolName.startsWith("mcp__exe") || toolName === "manual" || toolName === "store_memory")) {
+    return "agent";
+  }
+  if (toolName.includes("webhook") || toolName.includes("pipeline") || toolName.includes("ingest_raw")) {
+    return "external";
+  }
+  return "unknown";
+}
+function cosineDistance(a, b) {
+  if (a.length !== b.length || a.length === 0) return 1;
+  let dotProduct = 0;
+  let normA = 0;
+  let normB = 0;
+  for (let i = 0; i < a.length; i++) {
+    dotProduct += a[i] * b[i];
+    normA += a[i] * a[i];
+    normB += b[i] * b[i];
+  }
+  const denom = Math.sqrt(normA) * Math.sqrt(normB);
+  if (denom === 0) return 1;
+  const similarity = dotProduct / denom;
+  return 1 - similarity;
+}
+async function getAgentCentroid(agentId, projectName) {
+  const client = getClient();
+  try {
+    const result = await client.execute({
+      sql: `SELECT centroid_vector FROM agent_centroids WHERE agent_id = ? AND project_name = ?`,
+      args: [agentId, projectName]
+    });
+    if (result.rows.length === 0 || !result.rows[0].centroid_vector) return null;
+    const vector = blobToVector(result.rows[0].centroid_vector);
+    return vector.length > 0 ? vector : null;
+  } catch {
+    return null;
+  }
+}
+async function checkAnomaly(vector, agentId, projectName, threshold) {
+  const centroid = await getAgentCentroid(agentId, projectName);
+  if (!centroid) return { anomalous: false, distance: 0 };
+  const distance = cosineDistance(vector, centroid);
+  const effectiveThreshold = threshold ?? 0.85;
+  return { anomalous: distance > effectiveThreshold, distance };
+}
+async function refreshAgentCentroid(agentId, projectName, sampleSize = 100) {
+  const client = getClient();
+  const result = await client.execute({
+    sql: `SELECT vector FROM memories
+          WHERE agent_id = ? AND project_name = ? AND vector IS NOT NULL
+            AND status = 'active' AND quarantined = 0
+          ORDER BY timestamp DESC LIMIT ?`,
+    args: [agentId, projectName, sampleSize]
+  });
+  if (result.rows.length < 5) return;
+  let dim = 0;
+  const vectors = [];
+  for (const row of result.rows) {
+    const arr = blobToVector(row.vector);
+    if (arr.length > 0 && (dim === 0 || arr.length === dim)) {
+      dim = arr.length;
+      vectors.push(arr);
+    }
+  }
+  if (vectors.length < 5 || dim === 0) return;
+  const centroid = new Float32Array(dim);
+  for (const v of vectors) {
+    for (let i = 0; i < dim; i++) {
+      centroid[i] += v[i] / vectors.length;
+    }
+  }
+  const centroidBlob = Buffer.from(centroid.buffer);
+  await client.execute({
+    sql: `INSERT OR REPLACE INTO agent_centroids (agent_id, project_name, centroid_vector, sample_count, updated_at)
+          VALUES (?, ?, ?, ?, ?)`,
+    args: [agentId, projectName, centroidBlob, vectors.length, (/* @__PURE__ */ new Date()).toISOString()]
+  });
+}
+async function quarantineMemory(memoryId, reason) {
+  const client = getClient();
+  await client.execute({
+    sql: `UPDATE memories SET quarantined = 1, quarantine_reason = ? WHERE id = ?`,
+    args: [reason, memoryId]
+  });
+}
+async function approveQuarantined(memoryId) {
+  const client = getClient();
+  await client.execute({
+    sql: `UPDATE memories SET quarantined = 0, quarantine_reason = NULL WHERE id = ?`,
+    args: [memoryId]
+  });
+}
+async function rejectQuarantined(memoryId) {
+  const client = getClient();
+  await client.execute({
+    sql: `UPDATE memories SET status = 'archived', quarantine_reason = COALESCE(quarantine_reason, '') || ' [REJECTED]' WHERE id = ?`,
+    args: [memoryId]
+  });
+}
+async function listQuarantined(limit = 20) {
+  const client = getClient();
+  const result = await client.execute({
+    sql: `SELECT id, agent_id, raw_text, quarantine_reason, timestamp
+          FROM memories
+          WHERE quarantined = 1 AND status = 'active'
+          ORDER BY timestamp DESC LIMIT ?`,
+    args: [limit]
+  });
+  return result.rows.map((r) => ({
+    id: String(r.id),
+    agentId: String(r.agent_id),
+    rawText: String(r.raw_text).slice(0, 200),
+    reason: String(r.quarantine_reason ?? "unknown"),
+    createdAt: String(r.timestamp)
+  }));
+}
+var _writeCounters = /* @__PURE__ */ new Map();
+var _sessionCounters = /* @__PURE__ */ new Map();
+function checkRateLimit(agentId, sessionId, limits) {
+  const perMinute = limits?.perMinute ?? 50;
+  const perSession = limits?.perSession ?? 5e3;
+  const now = Date.now();
+  const minuteKey = `${agentId}:minute`;
+  const minuteCounter = _writeCounters.get(minuteKey);
+  if (minuteCounter && now - minuteCounter.windowStart < 6e4) {
+    if (minuteCounter.count >= perMinute) {
+      return { allowed: false, reason: `Rate limit: ${perMinute}/minute exceeded for ${agentId}` };
+    }
+    minuteCounter.count++;
+  } else {
+    _writeCounters.set(minuteKey, { count: 1, windowStart: now });
+  }
+  const sessionCount = (_sessionCounters.get(sessionId) ?? 0) + 1;
+  _sessionCounters.set(sessionId, sessionCount);
+  if (sessionCount > perSession) {
+    return { allowed: false, reason: `Session limit: ${perSession} memories exceeded for session ${sessionId}` };
+  }
+  return { allowed: true };
+}
+function resetRateLimits() {
+  _writeCounters.clear();
+  _sessionCounters.clear();
+}
+async function checkMemoryPoisoning(opts) {
+  const config = await loadConfig();
+  const defenseConfig = config.poisoningDefense;
+  if (!defenseConfig?.enabled) {
+    return { passed: true, trustLevel: computeTrustLevel(opts.toolName, opts.agentId), quarantined: false };
+  }
+  const trustLevel = computeTrustLevel(opts.toolName, opts.agentId);
+  const rateCheck = checkRateLimit(opts.agentId, opts.sessionId, defenseConfig.rateLimits);
+  if (!rateCheck.allowed) {
+    await quarantineMemory(opts.memoryId, rateCheck.reason);
+    return { passed: false, trustLevel, quarantined: true, reason: rateCheck.reason };
+  }
+  if (opts.importance >= 8 && trustLevel !== "system") {
+    const highImpLimit = defenseConfig.rateLimits?.highImportance ?? 20;
+    const sessionHighImp = (_sessionCounters.get(`${opts.sessionId}:highimp`) ?? 0) + 1;
+    _sessionCounters.set(`${opts.sessionId}:highimp`, sessionHighImp);
+    if (sessionHighImp > highImpLimit) {
+      await quarantineMemory(opts.memoryId, `High-importance inflation: ${sessionHighImp} importance>=8 memories in session`);
+      return { passed: false, trustLevel, quarantined: true, reason: "importance inflation" };
+    }
+  }
+  if (opts.vector && opts.vector.length > 0) {
+    const threshold = defenseConfig.anomalyThreshold ?? 0.85;
+    const anomaly = await checkAnomaly(opts.vector, opts.agentId, opts.projectName, threshold);
+    if (anomaly.anomalous) {
+      await quarantineMemory(opts.memoryId, `Anomalous vector: distance ${anomaly.distance.toFixed(3)} > threshold ${threshold}`);
+      return {
+        passed: false,
+        trustLevel,
+        anomalyDistance: anomaly.distance,
+        quarantined: true,
+        reason: `anomaly distance ${anomaly.distance.toFixed(3)}`
+      };
+    }
+  }
+  return { passed: true, trustLevel, quarantined: false };
+}
+export {
+  approveQuarantined,
+  checkAnomaly,
+  checkMemoryPoisoning,
+  checkRateLimit,
+  computeTrustLevel,
+  getAgentCentroid,
+  listQuarantined,
+  quarantineMemory,
+  refreshAgentCentroid,
+  rejectQuarantined,
+  resetRateLimits
+};

package/dist/memory-poisoning-defense-SEM25TY5.js

@@ -0,0 +1,224 @@
+import {
+  blobToVector
+} from "./chunk-OTVEIJUQ.js";
+import {
+  getClient
+} from "./chunk-V6LOEOXG.js";
+import "./chunk-2I23RPSI.js";
+import "./chunk-VWUQFZFB.js";
+import "./chunk-PNQDP3OA.js";
+import "./chunk-7HLWBYH7.js";
+import "./chunk-FXU7JOXK.js";
+import {
+  loadConfig
+} from "./chunk-R36FAN53.js";
+import "./chunk-LYH5HE24.js";
+import "./chunk-MLKGABMK.js";
+
+// src/lib/memory-poisoning-defense.ts
+var SYSTEM_TOOLS = /* @__PURE__ */ new Set([
+  "session-start",
+  "ingest",
+  "ingest-worker",
+  "consolidation",
+  "skill-learning",
+  "summary-worker",
+  "bug-report-worker",
+  "reflection",
+  "dreaming-engine",
+  "daemon"
+]);
+function computeTrustLevel(toolName, agentId) {
+  if (SYSTEM_TOOLS.has(toolName)) return "system";
+  if (agentId && (toolName.startsWith("mcp__exe") || toolName === "manual" || toolName === "store_memory")) {
+    return "agent";
+  }
+  if (toolName.includes("webhook") || toolName.includes("pipeline") || toolName.includes("ingest_raw")) {
+    return "external";
+  }
+  return "unknown";
+}
+function cosineDistance(a, b) {
+  if (a.length !== b.length || a.length === 0) return 1;
+  let dotProduct = 0;
+  let normA = 0;
+  let normB = 0;
+  for (let i = 0; i < a.length; i++) {
+    dotProduct += a[i] * b[i];
+    normA += a[i] * a[i];
+    normB += b[i] * b[i];
+  }
+  const denom = Math.sqrt(normA) * Math.sqrt(normB);
+  if (denom === 0) return 1;
+  const similarity = dotProduct / denom;
+  return 1 - similarity;
+}
+async function getAgentCentroid(agentId, projectName) {
+  const client = getClient();
+  try {
+    const result = await client.execute({
+      sql: `SELECT centroid_vector FROM agent_centroids WHERE agent_id = ? AND project_name = ?`,
+      args: [agentId, projectName]
+    });
+    if (result.rows.length === 0 || !result.rows[0].centroid_vector) return null;
+    const vector = blobToVector(result.rows[0].centroid_vector);
+    return vector.length > 0 ? vector : null;
+  } catch {
+    return null;
+  }
+}
+async function checkAnomaly(vector, agentId, projectName, threshold) {
+  const centroid = await getAgentCentroid(agentId, projectName);
+  if (!centroid) return { anomalous: false, distance: 0 };
+  const distance = cosineDistance(vector, centroid);
+  const effectiveThreshold = threshold ?? 0.85;
+  return { anomalous: distance > effectiveThreshold, distance };
+}
+async function refreshAgentCentroid(agentId, projectName, sampleSize = 100) {
+  const client = getClient();
+  const result = await client.execute({
+    sql: `SELECT vector FROM memories
+          WHERE agent_id = ? AND project_name = ? AND vector IS NOT NULL
+            AND status = 'active' AND quarantined = 0
+          ORDER BY timestamp DESC LIMIT ?`,
+    args: [agentId, projectName, sampleSize]
+  });
+  if (result.rows.length < 5) return;
+  let dim = 0;
+  const vectors = [];
+  for (const row of result.rows) {
+    const arr = blobToVector(row.vector);
+    if (arr.length > 0 && (dim === 0 || arr.length === dim)) {
+      dim = arr.length;
+      vectors.push(arr);
+    }
+  }
+  if (vectors.length < 5 || dim === 0) return;
+  const centroid = new Float32Array(dim);
+  for (const v of vectors) {
+    for (let i = 0; i < dim; i++) {
+      centroid[i] += v[i] / vectors.length;
+    }
+  }
+  const centroidBlob = Buffer.from(centroid.buffer);
+  await client.execute({
+    sql: `INSERT OR REPLACE INTO agent_centroids (agent_id, project_name, centroid_vector, sample_count, updated_at)
+          VALUES (?, ?, ?, ?, ?)`,
+    args: [agentId, projectName, centroidBlob, vectors.length, (/* @__PURE__ */ new Date()).toISOString()]
+  });
+}
+async function quarantineMemory(memoryId, reason) {
+  const client = getClient();
+  await client.execute({
+    sql: `UPDATE memories SET quarantined = 1, quarantine_reason = ? WHERE id = ?`,
+    args: [reason, memoryId]
+  });
+}
+async function approveQuarantined(memoryId) {
+  const client = getClient();
+  await client.execute({
+    sql: `UPDATE memories SET quarantined = 0, quarantine_reason = NULL WHERE id = ?`,
+    args: [memoryId]
+  });
+}
+async function rejectQuarantined(memoryId) {
+  const client = getClient();
+  await client.execute({
+    sql: `UPDATE memories SET status = 'archived', quarantine_reason = COALESCE(quarantine_reason, '') || ' [REJECTED]' WHERE id = ?`,
+    args: [memoryId]
+  });
+}
+async function listQuarantined(limit = 20) {
+  const client = getClient();
+  const result = await client.execute({
+    sql: `SELECT id, agent_id, raw_text, quarantine_reason, timestamp
+          FROM memories
+          WHERE quarantined = 1 AND status = 'active'
+          ORDER BY timestamp DESC LIMIT ?`,
+    args: [limit]
+  });
+  return result.rows.map((r) => ({
+    id: String(r.id),
+    agentId: String(r.agent_id),
+    rawText: String(r.raw_text).slice(0, 200),
+    reason: String(r.quarantine_reason ?? "unknown"),
+    createdAt: String(r.timestamp)
+  }));
+}
+var _writeCounters = /* @__PURE__ */ new Map();
+var _sessionCounters = /* @__PURE__ */ new Map();
+function checkRateLimit(agentId, sessionId, limits) {
+  const perMinute = limits?.perMinute ?? 50;
+  const perSession = limits?.perSession ?? 5e3;
+  const now = Date.now();
+  const minuteKey = `${agentId}:minute`;
+  const minuteCounter = _writeCounters.get(minuteKey);
+  if (minuteCounter && now - minuteCounter.windowStart < 6e4) {
+    if (minuteCounter.count >= perMinute) {
+      return { allowed: false, reason: `Rate limit: ${perMinute}/minute exceeded for ${agentId}` };
+    }
+    minuteCounter.count++;
+  } else {
+    _writeCounters.set(minuteKey, { count: 1, windowStart: now });
+  }
+  const sessionCount = (_sessionCounters.get(sessionId) ?? 0) + 1;
+  _sessionCounters.set(sessionId, sessionCount);
+  if (sessionCount > perSession) {
+    return { allowed: false, reason: `Session limit: ${perSession} memories exceeded for session ${sessionId}` };
+  }
+  return { allowed: true };
+}
+function resetRateLimits() {
+  _writeCounters.clear();
+  _sessionCounters.clear();
+}
+async function checkMemoryPoisoning(opts) {
+  const config = await loadConfig();
+  const defenseConfig = config.poisoningDefense;
+  if (!defenseConfig?.enabled) {
+    return { passed: true, trustLevel: computeTrustLevel(opts.toolName, opts.agentId), quarantined: false };
+  }
+  const trustLevel = computeTrustLevel(opts.toolName, opts.agentId);
+  const rateCheck = checkRateLimit(opts.agentId, opts.sessionId, defenseConfig.rateLimits);
+  if (!rateCheck.allowed) {
+    await quarantineMemory(opts.memoryId, rateCheck.reason);
+    return { passed: false, trustLevel, quarantined: true, reason: rateCheck.reason };
+  }
+  if (opts.importance >= 8 && trustLevel !== "system") {
+    const highImpLimit = defenseConfig.rateLimits?.highImportance ?? 20;
+    const sessionHighImp = (_sessionCounters.get(`${opts.sessionId}:highimp`) ?? 0) + 1;
+    _sessionCounters.set(`${opts.sessionId}:highimp`, sessionHighImp);
+    if (sessionHighImp > highImpLimit) {
+      await quarantineMemory(opts.memoryId, `High-importance inflation: ${sessionHighImp} importance>=8 memories in session`);
+      return { passed: false, trustLevel, quarantined: true, reason: "importance inflation" };
+    }
+  }
+  if (opts.vector && opts.vector.length > 0) {
+    const threshold = defenseConfig.anomalyThreshold ?? 0.85;
+    const anomaly = await checkAnomaly(opts.vector, opts.agentId, opts.projectName, threshold);
+    if (anomaly.anomalous) {
+      await quarantineMemory(opts.memoryId, `Anomalous vector: distance ${anomaly.distance.toFixed(3)} > threshold ${threshold}`);
+      return {
+        passed: false,
+        trustLevel,
+        anomalyDistance: anomaly.distance,
+        quarantined: true,
+        reason: `anomaly distance ${anomaly.distance.toFixed(3)}`
+      };
+    }
+  }
+  return { passed: true, trustLevel, quarantined: false };
+}
+export {
+  approveQuarantined,
+  checkAnomaly,
+  checkMemoryPoisoning,
+  checkRateLimit,
+  computeTrustLevel,
+  getAgentCentroid,
+  listQuarantined,
+  quarantineMemory,
+  refreshAgentCentroid,
+  rejectQuarantined,
+  resetRateLimits
+};

package/dist/memory-queue-client-WKWRFERJ.js

@@ -0,0 +1,16 @@
+import {
+  batchWriteMemoryViaDaemon,
+  writeMemoryViaDaemon
+} from "./chunk-LEJ5FKIK.js";
+import "./chunk-MEWGYH6Z.js";
+import "./chunk-NTWF4DAF.js";
+import "./chunk-QOZQ2MYZ.js";
+import "./chunk-HCCG67BY.js";
+import "./chunk-7L2EV3XX.js";
+import "./chunk-R36FAN53.js";
+import "./chunk-LYH5HE24.js";
+import "./chunk-MLKGABMK.js";
+export {
+  batchWriteMemoryViaDaemon,
+  writeMemoryViaDaemon
+};