@blackms/aistack 1.5.0 → 1.5.2

package/dist/mcp/tools/memory-tools.js

@@ -1,19 +1,24 @@
 /**
  * Memory MCP tools - store, search, get, list, delete
+ *
+ * All operations require a sessionId for session-based isolation.
  */
 import { z } from 'zod';
-// Input schemas
+import { getAccessControl } from '../../memory/index.js';
+// Input schemas - sessionId is required for all operations
 const StoreInputSchema = z.object({
+    sessionId: z.string().uuid().describe('Session ID for memory isolation (required)'),
     key: z.string().min(1).max(500).describe('Unique key for the memory entry'),
     content: z.string().min(1).max(1000000).describe('Content to store'),
-    namespace: z.string().min(1).max(100).optional().describe('Namespace for organization'),
+    namespace: z.string().min(1).max(100).optional().describe('Namespace for organization (defaults to session namespace)'),
     metadata: z.record(z.unknown()).optional().describe('Additional metadata'),
     generateEmbedding: z.boolean().optional().describe('Generate embedding for vector search'),
     agentId: z.string().uuid().optional().describe('Agent ID to associate this memory with'),
 });
 const SearchInputSchema = z.object({
+    sessionId: z.string().uuid().describe('Session ID for memory isolation (required)'),
     query: z.string().min(1).max(1000).describe('Search query'),
-    namespace: z.string().optional().describe('Namespace to search in'),
+    namespace: z.string().optional().describe('Namespace to search in (defaults to session namespace)'),
     limit: z.number().min(1).max(100).optional().describe('Maximum results'),
     threshold: z.number().min(0).max(1).optional().describe('Minimum similarity score'),
     useVector: z.boolean().optional().describe('Use vector search if available'),
@@ -21,46 +26,65 @@ const SearchInputSchema = z.object({
     includeShared: z.boolean().optional().describe('Include shared memory (agent_id = NULL)'),
 });
 const GetInputSchema = z.object({
+    sessionId: z.string().uuid().describe('Session ID for memory isolation (required)'),
     key: z.string().min(1).max(500).describe('Key to retrieve'),
-    namespace: z.string().optional().describe('Namespace'),
+    namespace: z.string().optional().describe('Namespace (defaults to session namespace)'),
 });
 const ListInputSchema = z.object({
-    namespace: z.string().optional().describe('Filter by namespace'),
+    sessionId: z.string().uuid().describe('Session ID for memory isolation (required)'),
+    namespace: z.string().optional().describe('Filter by namespace (defaults to session namespace)'),
     limit: z.number().min(1).max(1000).optional().describe('Maximum results'),
     offset: z.number().min(0).optional().describe('Offset for pagination'),
     agentId: z.string().uuid().optional().describe('Filter by agent ownership'),
     includeShared: z.boolean().optional().describe('Include shared memory (agent_id = NULL)'),
 });
 const DeleteInputSchema = z.object({
+    sessionId: z.string().uuid().describe('Session ID for memory isolation (required)'),
     key: z.string().min(1).max(500).describe('Key to delete'),
-    namespace: z.string().optional().describe('Namespace'),
+    namespace: z.string().optional().describe('Namespace (defaults to session namespace)'),
 });
 export function createMemoryTools(memory) {
+    const accessControl = getAccessControl();
+    /**
+     * Helper to execute an operation with proper context management.
+     * Ensures context is always cleared, even on error.
+     */
+    async function withContext(context, operation) {
+        memory.setAgentContext(context);
+        try {
+            return await operation();
+        }
+        finally {
+            memory.clearAgentContext();
+        }
+    }
     return {
         memory_store: {
             name: 'memory_store',
-            description: 'Store a key-value pair in memory',
+            description: 'Store a key-value pair in memory (requires sessionId for isolation)',
             inputSchema: {
                 type: 'object',
                 properties: {
+                    sessionId: { type: 'string', description: 'Session ID for memory isolation (required)' },
                     key: { type: 'string', description: 'Unique key for the memory entry' },
                     content: { type: 'string', description: 'Content to store' },
-                    namespace: { type: 'string', description: 'Namespace for organization' },
+                    namespace: { type: 'string', description: 'Namespace for organization (defaults to session namespace)' },
                     metadata: { type: 'object', description: 'Additional metadata' },
                     generateEmbedding: { type: 'boolean', description: 'Generate embedding for vector search' },
                     agentId: { type: 'string', description: 'Agent ID to associate this memory with' },
                 },
-                required: ['key', 'content'],
+                required: ['sessionId', 'key', 'content'],
             },
             handler: async (params) => {
                 const input = StoreInputSchema.parse(params);
                 try {
-                    const entry = await memory.store(input.key, input.content, {
-                        namespace: input.namespace,
+                    const namespace = input.namespace ?? accessControl.getSessionNamespace(input.sessionId);
+                    const entry = await withContext({ sessionId: input.sessionId, agentId: input.agentId }, () => memory.store(input.key, input.content, {
+                        namespace,
                         metadata: input.metadata,
                         generateEmbedding: input.generateEmbedding,
                         agentId: input.agentId,
-                    });
+                    }));
                     return {
                         success: true,
                         entry: {
@@ -83,31 +107,34 @@ export function createMemoryTools(memory) {
         },
         memory_search: {
             name: 'memory_search',
-            description: 'Search memory using full-text and/or vector search',
+            description: 'Search memory using full-text and/or vector search (requires sessionId for isolation)',
             inputSchema: {
                 type: 'object',
                 properties: {
+                    sessionId: { type: 'string', description: 'Session ID for memory isolation (required)' },
                     query: { type: 'string', description: 'Search query' },
-                    namespace: { type: 'string', description: 'Namespace to search in' },
+                    namespace: { type: 'string', description: 'Namespace to search in (defaults to session namespace)' },
                     limit: { type: 'number', description: 'Maximum results' },
                     threshold: { type: 'number', description: 'Minimum similarity score (0-1)' },
                     useVector: { type: 'boolean', description: 'Use vector search if available' },
                     agentId: { type: 'string', description: 'Filter by agent ownership' },
                     includeShared: { type: 'boolean', description: 'Include shared memory (agent_id = NULL)' },
                 },
-                required: ['query'],
+                required: ['sessionId', 'query'],
             },
             handler: async (params) => {
                 const input = SearchInputSchema.parse(params);
                 try {
-                    const results = await memory.search(input.query, {
-                        namespace: input.namespace,
+                    const namespace = input.namespace ?? accessControl.getSessionNamespace(input.sessionId);
+                    const includeShared = input.includeShared ?? true;
+                    const results = await withContext({ sessionId: input.sessionId, agentId: input.agentId, includeShared }, () => memory.search(input.query, {
+                        namespace,
                         limit: input.limit,
                         threshold: input.threshold,
                         useVector: input.useVector,
                         agentId: input.agentId,
-                        includeShared: input.includeShared,
-                    });
+                        includeShared,
+                    }));
                     return {
                         count: results.length,
                         results: results.map(r => ({
@@ -132,18 +159,20 @@ export function createMemoryTools(memory) {
         },
         memory_get: {
             name: 'memory_get',
-            description: 'Get a memory entry by key',
+            description: 'Get a memory entry by key (requires sessionId for isolation)',
             inputSchema: {
                 type: 'object',
                 properties: {
+                    sessionId: { type: 'string', description: 'Session ID for memory isolation (required)' },
                     key: { type: 'string', description: 'Key to retrieve' },
-                    namespace: { type: 'string', description: 'Namespace' },
+                    namespace: { type: 'string', description: 'Namespace (defaults to session namespace)' },
                 },
-                required: ['key'],
+                required: ['sessionId', 'key'],
             },
             handler: async (params) => {
                 const input = GetInputSchema.parse(params);
-                const entry = memory.get(input.key, input.namespace);
+                const namespace = input.namespace ?? accessControl.getSessionNamespace(input.sessionId);
+                const entry = await withContext({ sessionId: input.sessionId }, () => memory.get(input.key, namespace));
                 if (!entry) {
                     return {
                         found: false,
@@ -166,24 +195,30 @@ export function createMemoryTools(memory) {
         },
         memory_list: {
             name: 'memory_list',
-            description: 'List memory entries',
+            description: 'List memory entries (requires sessionId for isolation)',
             inputSchema: {
                 type: 'object',
                 properties: {
-                    namespace: { type: 'string', description: 'Filter by namespace' },
+                    sessionId: { type: 'string', description: 'Session ID for memory isolation (required)' },
+                    namespace: { type: 'string', description: 'Filter by namespace (defaults to session namespace)' },
                     limit: { type: 'number', description: 'Maximum results' },
                     offset: { type: 'number', description: 'Offset for pagination' },
                     agentId: { type: 'string', description: 'Filter by agent ownership' },
                     includeShared: { type: 'boolean', description: 'Include shared memory (agent_id = NULL)' },
                 },
+                required: ['sessionId'],
             },
             handler: async (params) => {
                 const input = ListInputSchema.parse(params);
-                const entries = memory.list(input.namespace, input.limit, input.offset, {
-                    agentId: input.agentId,
-                    includeShared: input.includeShared,
-                });
-                const total = memory.count(input.namespace);
+                const namespace = input.namespace ?? accessControl.getSessionNamespace(input.sessionId);
+                const includeShared = input.includeShared ?? true;
+                const { entries, total } = await withContext({ sessionId: input.sessionId, agentId: input.agentId, includeShared }, () => ({
+                    entries: memory.list(namespace, input.limit, input.offset, {
+                        agentId: input.agentId,
+                        includeShared,
+                    }),
+                    total: memory.count(namespace),
+                }));
                 return {
                     total,
                     count: entries.length,
@@ -203,18 +238,20 @@ export function createMemoryTools(memory) {
         },
         memory_delete: {
             name: 'memory_delete',
-            description: 'Delete a memory entry',
+            description: 'Delete a memory entry (requires sessionId for isolation)',
             inputSchema: {
                 type: 'object',
                 properties: {
+                    sessionId: { type: 'string', description: 'Session ID for memory isolation (required)' },
                     key: { type: 'string', description: 'Key to delete' },
-                    namespace: { type: 'string', description: 'Namespace' },
+                    namespace: { type: 'string', description: 'Namespace (defaults to session namespace)' },
                 },
-                required: ['key'],
+                required: ['sessionId', 'key'],
             },
             handler: async (params) => {
                 const input = DeleteInputSchema.parse(params);
-                const deleted = memory.delete(input.key, input.namespace);
+                const namespace = input.namespace ?? accessControl.getSessionNamespace(input.sessionId);
+                const deleted = await withContext({ sessionId: input.sessionId }, () => memory.delete(input.key, namespace));
                 return {
                     success: deleted,
                     message: deleted ? 'Entry deleted' : 'Entry not found',

package/dist/mcp/tools/memory-tools.js.map

@@ -1 +1 @@
-{"version":3,"file":"memory-tools.js","sourceRoot":"","sources":["../../../src/mcp/tools/memory-tools.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,gBAAgB;AAChB,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IAC3E,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC;IACpE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;IACvF,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;IAC1E,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;IAC1F,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;CACzF,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;IAC3D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IACnE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;IACxE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;IACnF,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;IAC5E,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IAC3E,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;CAC1F,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAC;IAC3D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;CACvD,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;IAChE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;IACzE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;IACtE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IAC3E,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;CAC1F,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC;IACzD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;CACvD,CAAC,CAAC;AAEH,MAAM,UAAU,iBAAiB,CAAC,MAAqB;IACrD,OAAO;QACL,YAAY,EAAE;YACZ,IAAI,EAAE,cAAc;YACpB,WAAW,EAAE,kCAAkC;YAC/C,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iCAAiC,EAAE;oBACvE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE;oBAC5D,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,4BAA4B,EAAE;oBACxE,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qBAAqB,EAAE;oBAChE,iBAAiB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,sCAAsC,EAAE;oBAC3F,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,wCAAwC,EAAE;iBACnF;gBACD,QAAQ,EAAE,CAAC,KAAK,EAAE,SAAS,CAAC;aAC7B;YACD,OAAO,EAAE,KAAK,EAAE,MAA+B,EAAE,EAAE;gBACjD,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAE7C,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,EAAE;wBACzD,SAAS,EAAE,KAAK,CAAC,SAAS;wBAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;wBACxB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;wBAC1C,OAAO,EAAE,KAAK,CAAC,OAAO;qBACvB,CAAC,CAAC;oBAEH,OAAO;wBACL,OAAO,EAAE,IAAI;wBACb,KAAK,EAAE;4BACL,EAAE,EAAE,KAAK,CAAC,EAAE;4BACZ,GAAG,EAAE,KAAK,CAAC,GAAG;4BACd,SAAS,EAAE,KAAK,CAAC,SAAS;4BAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;4BACtB,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE;4BACxC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE;yBACzC;qBACF,CAAC;gBACJ,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO;wBACL,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;qBAC9D,CAAC;gBACJ,CAAC;YACH,CAAC;SACF;QAED,aAAa,EAAE;YACb,IAAI,EAAE,eAAe;YACrB,WAAW,EAAE,oDAAoD;YACjE,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE;oBACtD,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,wBAAwB,EAAE;oBACpE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iBAAiB,EAAE;oBACzD,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gCAAgC,EAAE;oBAC5E,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,gCAAgC,EAAE;oBAC7E,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,2BAA2B,EAAE;oBACrE,aAAa,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,yCAAyC,EAAE;iBAC3F;gBACD,QAAQ,EAAE,CAAC,OAAO,CAAC;aACpB;YACD,OAAO,EAAE,KAAK,EAAE,MAA+B,EAAE,EAAE;gBACjD,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAE9C,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE;wBAC/C,SAAS,EAAE,KAAK,CAAC,SAAS;wBAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;wBAClB,SAAS,EAAE,KAAK,CAAC,SAAS;wBAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;wBAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;wBACtB,aAAa,EAAE,KAAK,CAAC,aAAa;qBACnC,CAAC,CAAC;oBAEH,OAAO;wBACL,KAAK,EAAE,OAAO,CAAC,MAAM;wBACrB,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;4BACzB,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG;4BAChB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO;4BACxB,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS;4BAC5B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO;4BACxB,KAAK,EAAE,CAAC,CAAC,KAAK;4BACd,SAAS,EAAE,CAAC,CAAC,SAAS;4BACtB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ;yBAC3B,CAAC,CAAC;qBACJ,CAAC;gBACJ,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO;wBACL,KAAK,EAAE,CAAC;wBACR,OAAO,EAAE,EAAE;wBACX,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;qBAC9D,CAAC;gBACJ,CAAC;YACH,CAAC;SACF;QAED,UAAU,EAAE;YACV,IAAI,EAAE,YAAY;YAClB,WAAW,EAAE,2BAA2B;YACxC,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iBAAiB,EAAE;oBACvD,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE;iBACxD;gBACD,QAAQ,EAAE,CAAC,KAAK,CAAC;aAClB;YACD,OAAO,EAAE,KAAK,EAAE,MAA+B,EAAE,EAAE;gBACjD,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;gBAErD,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,OAAO;wBACL,KAAK,EAAE,KAAK;wBACZ,OAAO,EAAE,iBAAiB;qBAC3B,CAAC;gBACJ,CAAC;gBAED,OAAO;oBACL,KAAK,EAAE,IAAI;oBACX,KAAK,EAAE;wBACL,EAAE,EAAE,KAAK,CAAC,EAAE;wBACZ,GAAG,EAAE,KAAK,CAAC,GAAG;wBACd,OAAO,EAAE,KAAK,CAAC,OAAO;wBACtB,SAAS,EAAE,KAAK,CAAC,SAAS;wBAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;wBACxB,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE;wBACxC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE;qBACzC;iBACF,CAAC;YACJ,CAAC;SACF;QAED,WAAW,EAAE;YACX,IAAI,EAAE,aAAa;YACnB,WAAW,EAAE,qBAAqB;YAClC,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qBAAqB,EAAE;oBACjE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iBAAiB,EAAE;oBACzD,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uBAAuB,EAAE;oBAChE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,2BAA2B,EAAE;oBACrE,aAAa,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,yCAAyC,EAAE;iBAC3F;aACF;YACD,OAAO,EAAE,KAAK,EAAE,MAA+B,EAAE,EAAE;gBACjD,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC5C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE;oBACtE,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,aAAa,EAAE,KAAK,CAAC,aAAa;iBACnC,CAAC,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBAE5C,OAAO;oBACL,KAAK;oBACL,KAAK,EAAE,OAAO,CAAC,MAAM;oBACrB,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,CAAC;oBACzB,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;wBACzB,EAAE,EAAE,CAAC,CAAC,EAAE;wBACR,GAAG,EAAE,CAAC,CAAC,GAAG;wBACV,SAAS,EAAE,CAAC,CAAC,SAAS;wBACtB,OAAO,EAAE,CAAC,CAAC,OAAO;wBAClB,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC/E,QAAQ,EAAE,CAAC,CAAC,QAAQ;wBACpB,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE;wBACpC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE;qBACrC,CAAC,CAAC;iBACJ,CAAC;YACJ,CAAC;SACF;QAED,aAAa,EAAE;YACb,IAAI,EAAE,eAAe;YACrB,WAAW,EAAE,uBAAuB;YACpC,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,EAAE;oBACrD,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE;iBACxD;gBACD,QAAQ,EAAE,CAAC,KAAK,CAAC;aAClB;YACD,OAAO,EAAE,KAAK,EAAE,MAA+B,EAAE,EAAE;gBACjD,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC9C,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;gBAE1D,OAAO;oBACL,OAAO,EAAE,OAAO;oBAChB,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,iBAAiB;iBACvD,CAAC;YACJ,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"memory-tools.js","sourceRoot":"","sources":["../../../src/mcp/tools/memory-tools.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEzD,2DAA2D;AAC3D,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,4CAA4C,CAAC;IACnF,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IAC3E,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC;IACpE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4DAA4D,CAAC;IACvH,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;IAC1E,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;IAC1F,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;CACzF,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,4CAA4C,CAAC;IACnF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;IAC3D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wDAAwD,CAAC;IACnG,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;IACxE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;IACnF,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;IAC5E,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IAC3E,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;CAC1F,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,4CAA4C,CAAC;IACnF,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAC;IAC3D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;CACvF,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,4CAA4C,CAAC;IACnF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qDAAqD,CAAC;IAChG,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;IACzE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;IACtE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IAC3E,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;CAC1F,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,4CAA4C,CAAC;IACnF,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC;IACzD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;CACvF,CAAC,CAAC;AAEH,MAAM,UAAU,iBAAiB,CAAC,MAAqB;IACrD,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;IAEzC;;;OAGG;IACH,KAAK,UAAU,WAAW,CACxB,OAAyE,EACzE,SAA+B;QAE/B,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,CAAC;YACH,OAAO,MAAM,SAAS,EAAE,CAAC;QAC3B,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,OAAO;QACL,YAAY,EAAE;YACZ,IAAI,EAAE,cAAc;YACpB,WAAW,EAAE,qEAAqE;YAClF,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,4CAA4C,EAAE;oBACxF,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iCAAiC,EAAE;oBACvE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE;oBAC5D,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,4DAA4D,EAAE;oBACxG,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qBAAqB,EAAE;oBAChE,iBAAiB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,sCAAsC,EAAE;oBAC3F,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,wCAAwC,EAAE;iBACnF;gBACD,QAAQ,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,SAAS,CAAC;aAC1C;YACD,OAAO,EAAE,KAAK,EAAE,MAA+B,EAAE,EAAE;gBACjD,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAE7C,IAAI,CAAC;oBACH,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,aAAa,CAAC,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;oBAExF,MAAM,KAAK,GAAG,MAAM,WAAW,CAC7B,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,EACtD,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,EAAE;wBAC3C,SAAS;wBACT,QAAQ,EAAE,KAAK,CAAC,QAAQ;wBACxB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;wBAC1C,OAAO,EAAE,KAAK,CAAC,OAAO;qBACvB,CAAC,CACH,CAAC;oBAEF,OAAO;wBACL,OAAO,EAAE,IAAI;wBACb,KAAK,EAAE;4BACL,EAAE,EAAE,KAAK,CAAC,EAAE;4BACZ,GAAG,EAAE,KAAK,CAAC,GAAG;4BACd,SAAS,EAAE,KAAK,CAAC,SAAS;4BAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;4BACtB,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE;4BACxC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE;yBACzC;qBACF,CAAC;gBACJ,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO;wBACL,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;qBAC9D,CAAC;gBACJ,CAAC;YACH,CAAC;SACF;QAED,aAAa,EAAE;YACb,IAAI,EAAE,eAAe;YACrB,WAAW,EAAE,uFAAuF;YACpG,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,4CAA4C,EAAE;oBACxF,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE;oBACtD,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,wDAAwD,EAAE;oBACpG,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iBAAiB,EAAE;oBACzD,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gCAAgC,EAAE;oBAC5E,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,gCAAgC,EAAE;oBAC7E,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,2BAA2B,EAAE;oBACrE,aAAa,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,yCAAyC,EAAE;iBAC3F;gBACD,QAAQ,EAAE,CAAC,WAAW,EAAE,OAAO,CAAC;aACjC;YACD,OAAO,EAAE,KAAK,EAAE,MAA+B,EAAE,EAAE;gBACjD,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAE9C,IAAI,CAAC;oBACH,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,aAAa,CAAC,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;oBACxF,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,IAAI,IAAI,CAAC;oBAElD,MAAM,OAAO,GAAG,MAAM,WAAW,CAC/B,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,aAAa,EAAE,EACrE,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE;wBAC/B,SAAS;wBACT,KAAK,EAAE,KAAK,CAAC,KAAK;wBAClB,SAAS,EAAE,KAAK,CAAC,SAAS;wBAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;wBAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;wBACtB,aAAa;qBACd,CAAC,CACH,CAAC;oBAEF,OAAO;wBACL,KAAK,EAAE,OAAO,CAAC,MAAM;wBACrB,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;4BACzB,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG;4BAChB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO;4BACxB,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS;4BAC5B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO;4BACxB,KAAK,EAAE,CAAC,CAAC,KAAK;4BACd,SAAS,EAAE,CAAC,CAAC,SAAS;4BACtB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ;yBAC3B,CAAC,CAAC;qBACJ,CAAC;gBACJ,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO;wBACL,KAAK,EAAE,CAAC;wBACR,OAAO,EAAE,EAAE;wBACX,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;qBAC9D,CAAC;gBACJ,CAAC;YACH,CAAC;SACF;QAED,UAAU,EAAE;YACV,IAAI,EAAE,YAAY;YAClB,WAAW,EAAE,8DAA8D;YAC3E,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,4CAA4C,EAAE;oBACxF,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iBAAiB,EAAE;oBACvD,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,2CAA2C,EAAE;iBACxF;gBACD,QAAQ,EAAE,CAAC,WAAW,EAAE,KAAK,CAAC;aAC/B;YACD,OAAO,EAAE,KAAK,EAAE,MAA+B,EAAE,EAAE;gBACjD,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC3C,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,aAAa,CAAC,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBAExF,MAAM,KAAK,GAAG,MAAM,WAAW,CAC7B,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,EAC9B,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CACvC,CAAC;gBAEF,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,OAAO;wBACL,KAAK,EAAE,KAAK;wBACZ,OAAO,EAAE,iBAAiB;qBAC3B,CAAC;gBACJ,CAAC;gBAED,OAAO;oBACL,KAAK,EAAE,IAAI;oBACX,KAAK,EAAE;wBACL,EAAE,EAAE,KAAK,CAAC,EAAE;wBACZ,GAAG,EAAE,KAAK,CAAC,GAAG;wBACd,OAAO,EAAE,KAAK,CAAC,OAAO;wBACtB,SAAS,EAAE,KAAK,CAAC,SAAS;wBAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;wBACxB,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE;wBACxC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE;qBACzC;iBACF,CAAC;YACJ,CAAC;SACF;QAED,WAAW,EAAE;YACX,IAAI,EAAE,aAAa;YACnB,WAAW,EAAE,wDAAwD;YACrE,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,4CAA4C,EAAE;oBACxF,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qDAAqD,EAAE;oBACjG,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iBAAiB,EAAE;oBACzD,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uBAAuB,EAAE;oBAChE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,2BAA2B,EAAE;oBACrE,aAAa,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,yCAAyC,EAAE;iBAC3F;gBACD,QAAQ,EAAE,CAAC,WAAW,CAAC;aACxB;YACD,OAAO,EAAE,KAAK,EAAE,MAA+B,EAAE,EAAE;gBACjD,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC5C,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,aAAa,CAAC,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBACxF,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,IAAI,IAAI,CAAC;gBAElD,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,WAAW,CAC1C,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,aAAa,EAAE,EACrE,GAAG,EAAE,CAAC,CAAC;oBACL,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE;wBACzD,OAAO,EAAE,KAAK,CAAC,OAAO;wBACtB,aAAa;qBACd,CAAC;oBACF,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC;iBAC/B,CAAC,CACH,CAAC;gBAEF,OAAO;oBACL,KAAK;oBACL,KAAK,EAAE,OAAO,CAAC,MAAM;oBACrB,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,CAAC;oBACzB,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;wBACzB,EAAE,EAAE,CAAC,CAAC,EAAE;wBACR,GAAG,EAAE,CAAC,CAAC,GAAG;wBACV,SAAS,EAAE,CAAC,CAAC,SAAS;wBACtB,OAAO,EAAE,CAAC,CAAC,OAAO;wBAClB,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC/E,QAAQ,EAAE,CAAC,CAAC,QAAQ;wBACpB,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE;wBACpC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE;qBACrC,CAAC,CAAC;iBACJ,CAAC;YACJ,CAAC;SACF;QAED,aAAa,EAAE;YACb,IAAI,EAAE,eAAe;YACrB,WAAW,EAAE,0DAA0D;YACvE,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,4CAA4C,EAAE;oBACxF,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,EAAE;oBACrD,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,2CAA2C,EAAE;iBACxF;gBACD,QAAQ,EAAE,CAAC,WAAW,EAAE,KAAK,CAAC;aAC/B;YACD,OAAO,EAAE,KAAK,EAAE,MAA+B,EAAE,EAAE;gBACjD,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC9C,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,aAAa,CAAC,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBAExF,MAAM,OAAO,GAAG,MAAM,WAAW,CAC/B,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,EAC9B,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAC1C,CAAC;gBAEF,OAAO;oBACL,OAAO,EAAE,OAAO;oBAChB,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,iBAAiB;iBACvD,CAAC;YACJ,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/memory/access-control.d.ts

@@ -0,0 +1,153 @@
+/**
+ * Memory Access Control - Session-based isolation for agent memory
+ *
+ * This module provides session-based memory isolation to prevent agents in
+ * different sessions from accessing each other's memory. Each session gets
+ * its own namespace prefixed with "session:" followed by the session ID.
+ *
+ * Key security guarantees:
+ * - Cross-session access is blocked (agents in session A cannot access session B's memory)
+ * - Within a session, agents can optionally share memory or have private memory
+ * - Global/system namespaces remain accessible for shared data
+ *
+ * @module memory/access-control
+ */
+/**
+ * Context for memory access operations.
+ *
+ * This context is required for all memory operations to enforce session isolation.
+ *
+ * @example
+ * ```typescript
+ * const context: MemoryAccessContext = {
+ *   sessionId: 'abc-123-def',      // Required: session identifier
+ *   agentId: 'agent-456',          // Optional: filter to specific agent
+ *   includeShared: true            // Optional: include session-level shared memory
+ * };
+ * ```
+ */
+export interface MemoryAccessContext {
+    /** Required - enforced namespace based on session */
+    sessionId: string;
+    /** Optional - scoping within session for agent-specific memory */
+    agentId?: string;
+    /** Include shared memory (agent_id = NULL within session). Defaults to true. */
+    includeShared?: boolean;
+}
+/**
+ * Memory access control for session-based isolation.
+ *
+ * This class enforces memory isolation between sessions by:
+ * - Validating that memory operations only access the caller's session namespace
+ * - Blocking cross-session access attempts
+ * - Supporting agent-level filtering within a session
+ *
+ * @example
+ * ```typescript
+ * const accessControl = getAccessControl();
+ * const namespace = accessControl.getSessionNamespace('session-123');
+ * // namespace = 'session:session-123'
+ *
+ * // Validate access
+ * accessControl.validateAccess(
+ *   { sessionId: 'session-123' },
+ *   'session:session-123',
+ *   'read'
+ * ); // OK
+ *
+ * accessControl.validateAccess(
+ *   { sessionId: 'session-123' },
+ *   'session:session-456',
+ *   'read'
+ * ); // Throws: Access denied
+ * ```
+ */
+export declare class MemoryAccessControl {
+    /** Prefix for session namespaces */
+    private static readonly SESSION_PREFIX;
+    /**
+     * Get the namespace for a session.
+     *
+     * @param sessionId - The session identifier
+     * @returns The session namespace in format "session:{sessionId}"
+     * @throws {Error} If sessionId is empty or undefined
+     *
+     * @example
+     * ```typescript
+     * getSessionNamespace('abc-123'); // Returns 'session:abc-123'
+     * ```
+     */
+    getSessionNamespace(sessionId: string): string;
+    /**
+     * Check if a namespace belongs to a session (starts with "session:" prefix).
+     *
+     * @param namespace - The namespace to check
+     * @returns True if the namespace is a session namespace
+     */
+    isSessionNamespace(namespace: string): boolean;
+    /**
+     * Extract session ID from a namespace.
+     *
+     * @param namespace - The namespace to extract from
+     * @returns The session ID if this is a session namespace, null otherwise
+     *
+     * @example
+     * ```typescript
+     * extractSessionId('session:abc-123'); // Returns 'abc-123'
+     * extractSessionId('default');          // Returns null
+     * ```
+     */
+    extractSessionId(namespace: string): string | null;
+    /**
+     * Validate access to a namespace.
+     *
+     * This method enforces session isolation by checking that:
+     * - The context has a valid sessionId
+     * - If the target namespace is a session namespace, it belongs to the caller's session
+     *
+     * Non-session namespaces (global/shared) are allowed for backwards compatibility.
+     *
+     * @param context - The access context with sessionId
+     * @param namespace - The target namespace to access
+     * @param operation - The operation type for logging purposes
+     * @throws {Error} If sessionId is missing or cross-session access is attempted
+     */
+    validateAccess(context: MemoryAccessContext, namespace: string, operation: 'read' | 'write' | 'delete'): void;
+    /**
+     * Check if a context can access a specific memory entry.
+     *
+     * This performs a non-throwing access check, useful for filtering results.
+     *
+     * @param context - The access context with sessionId
+     * @param entryNamespace - The namespace of the memory entry
+     * @param entryAgentId - Optional agent ID of the entry owner
+     * @returns True if access is allowed, false otherwise
+     */
+    canAccessEntry(context: MemoryAccessContext, entryNamespace: string, entryAgentId?: string): boolean;
+    /**
+     * Derive the appropriate namespace for a memory operation.
+     *
+     * If an explicit namespace is provided, validates access and returns it.
+     * Otherwise, returns the session namespace for the context.
+     *
+     * @param context - The access context with sessionId
+     * @param explicitNamespace - Optional explicit namespace to use
+     * @returns The namespace to use for the operation
+     * @throws {Error} If access to the explicit namespace is denied
+     */
+    deriveNamespace(context: MemoryAccessContext, explicitNamespace?: string): string;
+    /**
+     * Check if we should filter by session namespace
+     * Used when listing/searching to ensure session isolation
+     */
+    shouldFilterBySession(context: MemoryAccessContext, requestedNamespace?: string): string | undefined;
+}
+/**
+ * Get or create the access control instance
+ */
+export declare function getAccessControl(): MemoryAccessControl;
+/**
+ * Reset the access control instance (for testing)
+ */
+export declare function resetAccessControl(): void;
+//# sourceMappingURL=access-control.d.ts.map

package/dist/memory/access-control.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-control.d.ts","sourceRoot":"","sources":["../../src/memory/access-control.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAMH;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,mBAAmB;IAClC,qDAAqD;IACrD,SAAS,EAAE,MAAM,CAAC;IAClB,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gFAAgF;IAChF,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,qBAAa,mBAAmB;IAC9B,oCAAoC;IACpC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAc;IAEpD;;;;;;;;;;;OAWG;IACH,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IAO9C;;;;;OAKG;IACH,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAI9C;;;;;;;;;;;OAWG;IACH,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAOlD;;;;;;;;;;;;;OAaG;IACH,cAAc,CACZ,OAAO,EAAE,mBAAmB,EAC5B,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAAG,OAAO,GAAG,QAAQ,GACrC,IAAI;IAuCP;;;;;;;;;OASG;IACH,cAAc,CACZ,OAAO,EAAE,mBAAmB,EAC5B,cAAc,EAAE,MAAM,EACtB,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO;IAwBV;;;;;;;;;;OAUG;IACH,eAAe,CAAC,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,CAAC,EAAE,MAAM,GAAG,MAAM;IAWjF;;;OAGG;IACH,qBAAqB,CAAC,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;CAUrG;AAKD;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,mBAAmB,CAKtD;AAED;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,IAAI,CAEzC"}

package/dist/memory/access-control.js

@@ -0,0 +1,221 @@
+/**
+ * Memory Access Control - Session-based isolation for agent memory
+ *
+ * This module provides session-based memory isolation to prevent agents in
+ * different sessions from accessing each other's memory. Each session gets
+ * its own namespace prefixed with "session:" followed by the session ID.
+ *
+ * Key security guarantees:
+ * - Cross-session access is blocked (agents in session A cannot access session B's memory)
+ * - Within a session, agents can optionally share memory or have private memory
+ * - Global/system namespaces remain accessible for shared data
+ *
+ * @module memory/access-control
+ */
+import { logger } from '../utils/logger.js';
+const log = logger.child('memory:access-control');
+/**
+ * Memory access control for session-based isolation.
+ *
+ * This class enforces memory isolation between sessions by:
+ * - Validating that memory operations only access the caller's session namespace
+ * - Blocking cross-session access attempts
+ * - Supporting agent-level filtering within a session
+ *
+ * @example
+ * ```typescript
+ * const accessControl = getAccessControl();
+ * const namespace = accessControl.getSessionNamespace('session-123');
+ * // namespace = 'session:session-123'
+ *
+ * // Validate access
+ * accessControl.validateAccess(
+ *   { sessionId: 'session-123' },
+ *   'session:session-123',
+ *   'read'
+ * ); // OK
+ *
+ * accessControl.validateAccess(
+ *   { sessionId: 'session-123' },
+ *   'session:session-456',
+ *   'read'
+ * ); // Throws: Access denied
+ * ```
+ */
+export class MemoryAccessControl {
+    /** Prefix for session namespaces */
+    static SESSION_PREFIX = 'session:';
+    /**
+     * Get the namespace for a session.
+     *
+     * @param sessionId - The session identifier
+     * @returns The session namespace in format "session:{sessionId}"
+     * @throws {Error} If sessionId is empty or undefined
+     *
+     * @example
+     * ```typescript
+     * getSessionNamespace('abc-123'); // Returns 'session:abc-123'
+     * ```
+     */
+    getSessionNamespace(sessionId) {
+        if (!sessionId) {
+            throw new Error('sessionId is required for memory access');
+        }
+        return `${MemoryAccessControl.SESSION_PREFIX}${sessionId}`;
+    }
+    /**
+     * Check if a namespace belongs to a session (starts with "session:" prefix).
+     *
+     * @param namespace - The namespace to check
+     * @returns True if the namespace is a session namespace
+     */
+    isSessionNamespace(namespace) {
+        return namespace.startsWith(MemoryAccessControl.SESSION_PREFIX);
+    }
+    /**
+     * Extract session ID from a namespace.
+     *
+     * @param namespace - The namespace to extract from
+     * @returns The session ID if this is a session namespace, null otherwise
+     *
+     * @example
+     * ```typescript
+     * extractSessionId('session:abc-123'); // Returns 'abc-123'
+     * extractSessionId('default');          // Returns null
+     * ```
+     */
+    extractSessionId(namespace) {
+        if (!this.isSessionNamespace(namespace)) {
+            return null;
+        }
+        return namespace.slice(MemoryAccessControl.SESSION_PREFIX.length);
+    }
+    /**
+     * Validate access to a namespace.
+     *
+     * This method enforces session isolation by checking that:
+     * - The context has a valid sessionId
+     * - If the target namespace is a session namespace, it belongs to the caller's session
+     *
+     * Non-session namespaces (global/shared) are allowed for backwards compatibility.
+     *
+     * @param context - The access context with sessionId
+     * @param namespace - The target namespace to access
+     * @param operation - The operation type for logging purposes
+     * @throws {Error} If sessionId is missing or cross-session access is attempted
+     */
+    validateAccess(context, namespace, operation) {
+        if (!context.sessionId) {
+            throw new Error('sessionId is required for memory access');
+        }
+        // If the namespace is a session namespace, verify it matches the context's session
+        if (this.isSessionNamespace(namespace)) {
+            const namespaceSessionId = this.extractSessionId(namespace);
+            if (namespaceSessionId !== context.sessionId) {
+                log.warn('Access denied: cross-session access attempt', {
+                    operation,
+                    requestedNamespace: namespace,
+                    contextSessionId: context.sessionId,
+                    agentId: context.agentId,
+                });
+                throw new Error(`Access denied: cannot ${operation} memory in session ${namespaceSessionId} from session ${context.sessionId}`);
+            }
+        }
+        // Non-session namespaces are allowed (global/shared data)
+        // but writes should be carefully controlled
+        if (!this.isSessionNamespace(namespace) && operation === 'write') {
+            log.debug('Write to non-session namespace', {
+                namespace,
+                sessionId: context.sessionId,
+                agentId: context.agentId,
+            });
+        }
+        log.debug('Access validated', {
+            operation,
+            namespace,
+            sessionId: context.sessionId,
+            agentId: context.agentId,
+        });
+    }
+    /**
+     * Check if a context can access a specific memory entry.
+     *
+     * This performs a non-throwing access check, useful for filtering results.
+     *
+     * @param context - The access context with sessionId
+     * @param entryNamespace - The namespace of the memory entry
+     * @param entryAgentId - Optional agent ID of the entry owner
+     * @returns True if access is allowed, false otherwise
+     */
+    canAccessEntry(context, entryNamespace, entryAgentId) {
+        if (!context.sessionId) {
+            return false;
+        }
+        // If entry is in a session namespace, verify it's the same session
+        if (this.isSessionNamespace(entryNamespace)) {
+            const entrySessionId = this.extractSessionId(entryNamespace);
+            if (entrySessionId !== context.sessionId) {
+                return false;
+            }
+        }
+        // If agentId filter is set on context and entry has an agentId
+        if (context.agentId && entryAgentId) {
+            // If includeShared is false, only allow matching agentId
+            if (context.includeShared === false && entryAgentId !== context.agentId) {
+                return false;
+            }
+        }
+        return true;
+    }
+    /**
+     * Derive the appropriate namespace for a memory operation.
+     *
+     * If an explicit namespace is provided, validates access and returns it.
+     * Otherwise, returns the session namespace for the context.
+     *
+     * @param context - The access context with sessionId
+     * @param explicitNamespace - Optional explicit namespace to use
+     * @returns The namespace to use for the operation
+     * @throws {Error} If access to the explicit namespace is denied
+     */
+    deriveNamespace(context, explicitNamespace) {
+        if (explicitNamespace) {
+            // Validate access to the explicit namespace
+            this.validateAccess(context, explicitNamespace, 'write');
+            return explicitNamespace;
+        }
+        // Default to session namespace
+        return this.getSessionNamespace(context.sessionId);
+    }
+    /**
+     * Check if we should filter by session namespace
+     * Used when listing/searching to ensure session isolation
+     */
+    shouldFilterBySession(context, requestedNamespace) {
+        // If a specific namespace is requested, validate and use it
+        if (requestedNamespace) {
+            this.validateAccess(context, requestedNamespace, 'read');
+            return requestedNamespace;
+        }
+        // Default to session namespace for session isolation
+        return this.getSessionNamespace(context.sessionId);
+    }
+}
+// Singleton instance
+let instance = null;
+/**
+ * Get or create the access control instance
+ */
+export function getAccessControl() {
+    if (!instance) {
+        instance = new MemoryAccessControl();
+    }
+    return instance;
+}
+/**
+ * Reset the access control instance (for testing)
+ */
+export function resetAccessControl() {
+    instance = null;
+}
+//# sourceMappingURL=access-control.js.map