@dmsdc-ai/aigentry-brain 0.0.1

package/dist/metrics/ResumeMetrics.d.ts

@@ -0,0 +1,20 @@
+import type { Entry } from '../core/EntrySchema.js';
+export interface ResumeResult {
+    resumeMs: number;
+    expectedCount: number;
+    actualCount: number;
+    lossRate: number;
+    success: boolean;
+}
+export interface ResumeTimer {
+    stop(expectedEntries: Entry[], actualEntries: Entry[]): ResumeResult;
+}
+/**
+ * Start a resume timer. Call stop() with expected/actual entries
+ * to get the ResumeResult with timing and loss metrics.
+ */
+export declare function startResumeTimer(): ResumeTimer;
+/**
+ * Compute resume metrics from pre-collected data (no timer).
+ */
+export declare function computeResumeResult(resumeMs: number, expectedEntries: Entry[], actualEntries: Entry[]): ResumeResult;

package/dist/metrics/ResumeMetrics.js

@@ -0,0 +1,46 @@
+/** Compute lossRate from expected vs actual entry IDs. */
+function computeLossRate(expected, actual) {
+    if (expected.length === 0)
+        return 0;
+    const actualIds = new Set(actual.map(e => e.id));
+    let matchCount = 0;
+    for (const entry of expected) {
+        if (actualIds.has(entry.id))
+            matchCount++;
+    }
+    return (expected.length - matchCount) / expected.length;
+}
+/**
+ * Start a resume timer. Call stop() with expected/actual entries
+ * to get the ResumeResult with timing and loss metrics.
+ */
+export function startResumeTimer() {
+    const start = performance.now();
+    return {
+        stop(expectedEntries, actualEntries) {
+            const resumeMs = performance.now() - start;
+            const lossRate = computeLossRate(expectedEntries, actualEntries);
+            return {
+                resumeMs,
+                expectedCount: expectedEntries.length,
+                actualCount: actualEntries.length,
+                lossRate,
+                success: lossRate < 0.1 && resumeMs < 5000,
+            };
+        },
+    };
+}
+/**
+ * Compute resume metrics from pre-collected data (no timer).
+ */
+export function computeResumeResult(resumeMs, expectedEntries, actualEntries) {
+    const lossRate = computeLossRate(expectedEntries, actualEntries);
+    return {
+        resumeMs,
+        expectedCount: expectedEntries.length,
+        actualCount: actualEntries.length,
+        lossRate,
+        success: lossRate < 0.1 && resumeMs < 5000,
+    };
+}
+//# sourceMappingURL=ResumeMetrics.js.map

package/dist/metrics/ResumeMetrics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ResumeMetrics.js","sourceRoot":"","sources":["../../src/metrics/ResumeMetrics.ts"],"names":[],"mappings":"AAcA,0DAA0D;AAC1D,SAAS,eAAe,CAAC,QAAiB,EAAE,MAAe;IACzD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACjD,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAAE,UAAU,EAAE,CAAC;IAC5C,CAAC;IACD,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,UAAU,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC;AAC1D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB;IAC9B,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IAEhC,OAAO;QACL,IAAI,CAAC,eAAwB,EAAE,aAAsB;YACnD,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;YAC3C,MAAM,QAAQ,GAAG,eAAe,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC;YAEjE,OAAO;gBACL,QAAQ;gBACR,aAAa,EAAE,eAAe,CAAC,MAAM;gBACrC,WAAW,EAAE,aAAa,CAAC,MAAM;gBACjC,QAAQ;gBACR,OAAO,EAAE,QAAQ,GAAG,GAAG,IAAI,QAAQ,GAAG,IAAI;aAC3C,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAAgB,EAChB,eAAwB,EACxB,aAAsB;IAEtB,MAAM,QAAQ,GAAG,eAAe,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC;IAEjE,OAAO;QACL,QAAQ;QACR,aAAa,EAAE,eAAe,CAAC,MAAM;QACrC,WAAW,EAAE,aAAa,CAAC,MAAM;QACjC,QAAQ;QACR,OAAO,EAAE,QAAQ,GAAG,GAAG,IAAI,QAAQ,GAAG,IAAI;KAC3C,CAAC;AACJ,CAAC"}

package/dist/peers/PeerStore.d.ts

@@ -0,0 +1,17 @@
+export interface Peer {
+    id: string;
+    remote_url?: string;
+    last_seen: string;
+    status: 'active' | 'inactive';
+}
+export interface PeersFile {
+    peers: Peer[];
+}
+export declare class PeerStore {
+    private filePath;
+    constructor(filePath: string);
+    list(): Promise<Peer[]>;
+    register(peer: Omit<Peer, 'last_seen' | 'status'>): Promise<Peer>;
+    remove(peerId: string): Promise<boolean>;
+    getFilePath(): string;
+}

package/dist/peers/PeerStore.js

@@ -0,0 +1,65 @@
+import yaml from 'js-yaml';
+import { readFile } from 'node:fs/promises';
+import { mkdir } from 'node:fs/promises';
+import { dirname } from 'node:path';
+import { atomicWrite } from '../shared/AtomicWrite.js';
+export class PeerStore {
+    filePath;
+    constructor(filePath) {
+        this.filePath = filePath;
+    }
+    async list() {
+        let content;
+        try {
+            content = await readFile(this.filePath, 'utf8');
+        }
+        catch (err) {
+            const e = err;
+            if (e.code === 'ENOENT') {
+                return [];
+            }
+            throw err;
+        }
+        const parsed = yaml.load(content);
+        if (!parsed || !Array.isArray(parsed.peers)) {
+            return [];
+        }
+        return parsed.peers;
+    }
+    async register(peer) {
+        const peers = await this.list();
+        const now = new Date().toISOString();
+        const existingIndex = peers.findIndex(p => p.id === peer.id);
+        const registered = {
+            ...peer,
+            last_seen: now,
+            status: 'active',
+        };
+        if (existingIndex >= 0) {
+            peers[existingIndex] = registered;
+        }
+        else {
+            peers.push(registered);
+        }
+        await mkdir(dirname(this.filePath), { recursive: true });
+        const fileContent = { peers };
+        await atomicWrite(this.filePath, yaml.dump(fileContent));
+        return registered;
+    }
+    async remove(peerId) {
+        const peers = await this.list();
+        const index = peers.findIndex(p => p.id === peerId);
+        if (index < 0) {
+            return false;
+        }
+        peers.splice(index, 1);
+        await mkdir(dirname(this.filePath), { recursive: true });
+        const fileContent = { peers };
+        await atomicWrite(this.filePath, yaml.dump(fileContent));
+        return true;
+    }
+    getFilePath() {
+        return this.filePath;
+    }
+}
+//# sourceMappingURL=PeerStore.js.map

package/dist/peers/PeerStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PeerStore.js","sourceRoot":"","sources":["../../src/peers/PeerStore.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,SAAS,CAAC;AAC3B,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAavD,MAAM,OAAO,SAAS;IACZ,QAAQ,CAAS;IAEzB,YAAY,QAAgB;QAC1B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,GAA4B,CAAC;YACvC,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACxB,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAqB,CAAC;QACtD,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5C,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,MAAM,CAAC,KAAK,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAwC;QACrD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAErC,MAAM,aAAa,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7D,MAAM,UAAU,GAAS;YACvB,GAAG,IAAI;YACP,SAAS,EAAE,GAAG;YACd,MAAM,EAAE,QAAQ;SACjB,CAAC;QAEF,IAAI,aAAa,IAAI,CAAC,EAAE,CAAC;YACvB,KAAK,CAAC,aAAa,CAAC,GAAG,UAAU,CAAC;QACpC,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzB,CAAC;QAED,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,MAAM,WAAW,GAAc,EAAE,KAAK,EAAE,CAAC;QACzC,MAAM,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;QAEzD,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAc;QACzB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;QACpD,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,OAAO,KAAK,CAAC;QACf,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACvB,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,MAAM,WAAW,GAAc,EAAE,KAAK,EAAE,CAAC;QACzC,MAAM,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;QAEzD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;CACF"}

package/dist/policy/PolicyEngine.d.ts

@@ -0,0 +1,16 @@
+import type { Entry } from '../core/EntrySchema.js';
+import type { PolicyEnvelope } from './PolicyEnvelope.js';
+export interface PolicyConfig {
+    currentProjectId: string;
+    defaultScope: 'user' | 'project' | 'team';
+}
+export declare class PolicyEngine {
+    private config;
+    constructor(config: PolicyConfig);
+    validateWrite(policy?: PolicyEnvelope): void;
+    applyDefaults(policy?: PolicyEnvelope): PolicyEnvelope;
+    filterRead(entries: Entry[], options?: {
+        projectId?: string;
+        now?: Date;
+    }): Entry[];
+}

package/dist/policy/PolicyEngine.js

@@ -0,0 +1,70 @@
+import { parseRetentionTTL, isExpired } from './RetentionParser.js';
+const VALID_SCOPES = new Set(['user', 'project', 'team']);
+const VALID_SENSITIVITIES = new Set(['public', 'internal', 'confidential', 'restricted']);
+export class PolicyEngine {
+    config;
+    constructor(config) {
+        this.config = config;
+    }
+    validateWrite(policy) {
+        if (!policy) {
+            return;
+        }
+        if (policy.scope !== undefined) {
+            if (!VALID_SCOPES.has(policy.scope)) {
+                throw new Error(`Invalid scope: "${policy.scope}". Must be one of: ${[...VALID_SCOPES].join(', ')}`);
+            }
+        }
+        if (policy.retention_ttl !== undefined) {
+            // Will throw if invalid
+            parseRetentionTTL(policy.retention_ttl);
+        }
+        if (policy.sensitivity !== undefined) {
+            if (!VALID_SENSITIVITIES.has(policy.sensitivity)) {
+                throw new Error(`Invalid sensitivity: "${policy.sensitivity}". Must be one of: ${[...VALID_SENSITIVITIES].join(', ')}`);
+            }
+        }
+        if (policy.allowed_models !== undefined) {
+            if (!Array.isArray(policy.allowed_models) ||
+                policy.allowed_models.length === 0 ||
+                policy.allowed_models.some(m => typeof m !== 'string')) {
+                throw new Error('allowed_models must be a non-empty array of strings');
+            }
+        }
+        if ((policy.scope === 'team' || policy.scope === 'project') &&
+            !policy.project_id) {
+            // Warn only — do not throw
+            console.warn(`[PolicyEngine] Warning: scope="${policy.scope}" but no project_id specified. ` +
+                `Defaulting to currentProjectId="${this.config.currentProjectId}".`);
+        }
+    }
+    applyDefaults(policy) {
+        return {
+            project_id: this.config.currentProjectId,
+            scope: this.config.defaultScope,
+            ...policy,
+        };
+    }
+    filterRead(entries, options) {
+        const projectId = options?.projectId ?? this.config.currentProjectId;
+        const now = options?.now ?? new Date();
+        return entries.filter(entry => {
+            // 1. Filter by retention_ttl expiration
+            if (entry.policy?.retention_ttl) {
+                if (isExpired(entry.policy.retention_ttl, entry.created, now)) {
+                    return false;
+                }
+            }
+            // 2. Filter by scope + project_id
+            if (entry.policy?.scope === 'project' &&
+                entry.policy?.project_id &&
+                entry.policy.project_id !== projectId) {
+                return false;
+            }
+            // 'user' scope entries are always visible
+            // 'team' scope entries are always visible (team access control is Phase 2)
+            return true;
+        });
+    }
+}
+//# sourceMappingURL=PolicyEngine.js.map

package/dist/policy/PolicyEngine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PolicyEngine.js","sourceRoot":"","sources":["../../src/policy/PolicyEngine.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAOpE,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;AAC1D,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC,CAAC;AAE1F,MAAM,OAAO,YAAY;IACf,MAAM,CAAe;IAE7B,YAAY,MAAoB;QAC9B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,aAAa,CAAC,MAAuB;QACnC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;QACT,CAAC;QAED,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC/B,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpC,MAAM,IAAI,KAAK,CACb,mBAAmB,MAAM,CAAC,KAAK,sBAAsB,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACpF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACvC,wBAAwB;YACxB,iBAAiB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAC1C,CAAC;QAED,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACrC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;gBACjD,MAAM,IAAI,KAAK,CACb,yBAAyB,MAAM,CAAC,WAAW,sBAAsB,CAAC,GAAG,mBAAmB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACvG,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACxC,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC;gBACrC,MAAM,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC;gBAClC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EACtD,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;QAED,IACE,CAAC,MAAM,CAAC,KAAK,KAAK,MAAM,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC;YACvD,CAAC,MAAM,CAAC,UAAU,EAClB,CAAC;YACD,2BAA2B;YAC3B,OAAO,CAAC,IAAI,CACV,kCAAkC,MAAM,CAAC,KAAK,iCAAiC;gBAC7E,mCAAmC,IAAI,CAAC,MAAM,CAAC,gBAAgB,IAAI,CACtE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,aAAa,CAAC,MAAuB;QACnC,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB;YACxC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;YAC/B,GAAG,MAAM;SACV,CAAC;IACJ,CAAC;IAED,UAAU,CAAC,OAAgB,EAAE,OAA4C;QACvE,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;QACrE,MAAM,GAAG,GAAG,OAAO,EAAE,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;QAEvC,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;YAC5B,wCAAwC;YACxC,IAAI,KAAK,CAAC,MAAM,EAAE,aAAa,EAAE,CAAC;gBAChC,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;oBAC9D,OAAO,KAAK,CAAC;gBACf,CAAC;YACH,CAAC;YAED,kCAAkC;YAClC,IACE,KAAK,CAAC,MAAM,EAAE,KAAK,KAAK,SAAS;gBACjC,KAAK,CAAC,MAAM,EAAE,UAAU;gBACxB,KAAK,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,EACrC,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;YAED,0CAA0C;YAC1C,2EAA2E;YAC3E,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/policy/PolicyEnvelope.d.ts

@@ -0,0 +1,7 @@
+export interface PolicyEnvelope {
+    project_id?: string;
+    scope?: 'user' | 'project' | 'team';
+    allowed_models?: string[];
+    retention_ttl?: string;
+    sensitivity?: 'public' | 'internal' | 'confidential' | 'restricted';
+}

package/dist/policy/PolicyEnvelope.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=PolicyEnvelope.js.map

package/dist/policy/PolicyEnvelope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PolicyEnvelope.js","sourceRoot":"","sources":["../../src/policy/PolicyEnvelope.ts"],"names":[],"mappings":""}

package/dist/policy/RetentionParser.d.ts

@@ -0,0 +1,6 @@
+export interface ParsedTTL {
+    ms: number;
+    forever: boolean;
+}
+export declare function parseRetentionTTL(ttl: string): ParsedTTL;
+export declare function isExpired(ttl: string, createdAt: string, now: Date): boolean;

package/dist/policy/RetentionParser.js

@@ -0,0 +1,48 @@
+export function parseRetentionTTL(ttl) {
+    if (!ttl || ttl.trim() === '') {
+        throw new Error('retention_ttl cannot be empty');
+    }
+    const trimmed = ttl.trim();
+    if (trimmed === 'forever') {
+        return { ms: Infinity, forever: true };
+    }
+    const dayMatch = trimmed.match(/^(\d+)d$/);
+    if (dayMatch) {
+        const days = parseInt(dayMatch[1], 10);
+        if (days <= 0) {
+            throw new Error(`retention_ttl days must be positive, got: ${ttl}`);
+        }
+        return { ms: days * 24 * 60 * 60 * 1000, forever: false };
+    }
+    const hourMatch = trimmed.match(/^(\d+)h$/);
+    if (hourMatch) {
+        const hours = parseInt(hourMatch[1], 10);
+        if (hours <= 0) {
+            throw new Error(`retention_ttl hours must be positive, got: ${ttl}`);
+        }
+        return { ms: hours * 60 * 60 * 1000, forever: false };
+    }
+    const yearMatch = trimmed.match(/^(\d+)y$/);
+    if (yearMatch) {
+        const years = parseInt(yearMatch[1], 10);
+        if (years <= 0) {
+            throw new Error(`retention_ttl years must be positive, got: ${ttl}`);
+        }
+        return { ms: years * 365 * 24 * 60 * 60 * 1000, forever: false };
+    }
+    // Handle negative values like "-1d"
+    if (trimmed.match(/^-/)) {
+        throw new Error(`retention_ttl must be positive, got: ${ttl}`);
+    }
+    throw new Error(`Invalid retention_ttl format: "${ttl}". Supported formats: "30d", "24h", "1y", "forever"`);
+}
+export function isExpired(ttl, createdAt, now) {
+    const parsed = parseRetentionTTL(ttl);
+    if (parsed.forever) {
+        return false;
+    }
+    const createdMs = new Date(createdAt).getTime();
+    const expiresAt = createdMs + parsed.ms;
+    return now.getTime() >= expiresAt;
+}
+//# sourceMappingURL=RetentionParser.js.map

package/dist/policy/RetentionParser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RetentionParser.js","sourceRoot":"","sources":["../../src/policy/RetentionParser.ts"],"names":[],"mappings":"AAKA,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAE3B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACzC,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACvC,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,6CAA6C,GAAG,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5D,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC5C,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACzC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,8CAA8C,GAAG,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACxD,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC5C,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACzC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,8CAA8C,GAAG,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACnE,CAAC;IAED,oCAAoC;IACpC,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,wCAAwC,GAAG,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,IAAI,KAAK,CACb,kCAAkC,GAAG,qDAAqD,CAC3F,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,GAAW,EAAE,SAAiB,EAAE,GAAS;IACjE,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAEtC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;IAChD,MAAM,SAAS,GAAG,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC;IACxC,OAAO,GAAG,CAAC,OAAO,EAAE,IAAI,SAAS,CAAC;AACpC,CAAC"}

package/dist/shared/AtomicWrite.d.ts

@@ -0,0 +1 @@
+export declare function atomicWrite(filePath: string, content: string): Promise<void>;

package/dist/shared/AtomicWrite.js

@@ -0,0 +1,11 @@
+import { writeFile, rename, mkdir } from 'node:fs/promises';
+import { dirname, join } from 'node:path';
+import { randomUUID } from 'node:crypto';
+export async function atomicWrite(filePath, content) {
+    const dir = dirname(filePath);
+    await mkdir(dir, { recursive: true });
+    const tmpPath = join(dir, `.${randomUUID()}.tmp`);
+    await writeFile(tmpPath, content, 'utf8');
+    await rename(tmpPath, filePath);
+}
+//# sourceMappingURL=AtomicWrite.js.map

package/dist/shared/AtomicWrite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AtomicWrite.js","sourceRoot":"","sources":["../../src/shared/AtomicWrite.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,QAAgB,EAAE,OAAe;IACjE,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9B,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,UAAU,EAAE,MAAM,CAAC,CAAC;IAClD,MAAM,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1C,MAAM,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;AAClC,CAAC"}

package/dist/shared/Clock.d.ts

@@ -0,0 +1,11 @@
+export interface Clock {
+    now(): Date;
+}
+export declare const SystemClock: Clock;
+export declare class FakeClock implements Clock {
+    private _now;
+    constructor(now: Date);
+    now(): Date;
+    advance(ms: number): void;
+    set(date: Date): void;
+}

package/dist/shared/Clock.js

@@ -0,0 +1,17 @@
+export const SystemClock = { now: () => new Date() };
+export class FakeClock {
+    _now;
+    constructor(now) {
+        this._now = new Date(now.getTime());
+    }
+    now() {
+        return new Date(this._now.getTime());
+    }
+    advance(ms) {
+        this._now = new Date(this._now.getTime() + ms);
+    }
+    set(date) {
+        this._now = new Date(date.getTime());
+    }
+}
+//# sourceMappingURL=Clock.js.map

package/dist/shared/Clock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Clock.js","sourceRoot":"","sources":["../../src/shared/Clock.ts"],"names":[],"mappings":"AAIA,MAAM,CAAC,MAAM,WAAW,GAAU,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;AAE5D,MAAM,OAAO,SAAS;IACZ,IAAI,CAAO;IACnB,YAAY,GAAS;QACnB,IAAI,CAAC,IAAI,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IACtC,CAAC;IACD,GAAG;QACD,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,CAAC,EAAU;QAChB,IAAI,CAAC,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,GAAG,CAAC,IAAU;QACZ,IAAI,CAAC,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IACvC,CAAC;CACF"}

package/dist/shared/Config.d.ts

@@ -0,0 +1,15 @@
+import type { LogLevel } from './Logger.js';
+export interface BrainConfig {
+    profilePath: string;
+    deviceId: string;
+    statusPath: string;
+    logLevel: LogLevel;
+    serverName: string;
+    serverVersion: string;
+    remoteUrl?: string;
+    repoPath?: string;
+    projectId?: string;
+    defaultScope?: 'user' | 'project' | 'team';
+    peersPath?: string;
+}
+export declare function loadConfig(): BrainConfig;

package/dist/shared/Config.js

@@ -0,0 +1,67 @@
+import { homedir, hostname } from 'node:os';
+import { join, dirname } from 'node:path';
+import { readFileSync, existsSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = dirname(__filename);
+function readPackageVersion() {
+    try {
+        const pkgPath = join(__dirname, '..', '..', 'package.json');
+        const pkg = JSON.parse(readFileSync(pkgPath, 'utf8'));
+        return pkg.version ?? '0.0.0';
+    }
+    catch {
+        return '0.0.0';
+    }
+}
+const VALID_LOG_LEVELS = new Set(['debug', 'info', 'warn', 'error']);
+function readConfigJsonSync(configPath) {
+    try {
+        const raw = readFileSync(configPath, 'utf8');
+        return JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+}
+export function loadConfig() {
+    // Read config.json as fallback (env vars take priority)
+    const configJsonPath = process.env.BRAIN_CONFIG_PATH
+        ?? join(homedir(), '.aigentry', 'config.json');
+    const configJson = readConfigJsonSync(configJsonPath);
+    const logLevelRaw = process.env.BRAIN_LOG_LEVEL ?? 'info';
+    if (!VALID_LOG_LEVELS.has(logLevelRaw)) {
+        throw new Error(`Invalid BRAIN_LOG_LEVEL: "${logLevelRaw}". Must be one of: debug, info, warn, error.`);
+    }
+    const remoteUrlRaw = process.env.BRAIN_REMOTE_URL ?? (configJson?.remoteUrl ?? undefined);
+    const defaultScopeRaw = process.env.BRAIN_DEFAULT_SCOPE ?? 'user';
+    if (defaultScopeRaw !== 'user' && defaultScopeRaw !== 'project' && defaultScopeRaw !== 'team') {
+        throw new Error(`Invalid BRAIN_DEFAULT_SCOPE: "${defaultScopeRaw}". Must be one of: user, project, team.`);
+    }
+    // When sync is enabled and repo is cloned, use repo profile as source of truth
+    const repoPath = process.env.BRAIN_REPO_PATH ?? join(homedir(), '.aigentry', 'repo');
+    const repoProfilePath = join(repoPath, 'memory-profile.yaml');
+    const hasRepo = remoteUrlRaw && existsSync(join(repoPath, '.git'));
+    const defaultProfilePath = hasRepo ? repoProfilePath : join(homedir(), '.aigentry', 'profile.yaml');
+    const config = {
+        profilePath: process.env.BRAIN_PROFILE_PATH ?? defaultProfilePath,
+        deviceId: process.env.BRAIN_DEVICE_ID ?? configJson?.deviceId ?? `device-${hostname()}`,
+        statusPath: process.env.BRAIN_STATUS_PATH ?? join(homedir(), '.aigentry', 'status.json'),
+        logLevel: logLevelRaw,
+        serverName: process.env.BRAIN_SERVER_NAME ?? 'aigentry-brain',
+        serverVersion: process.env.BRAIN_SERVER_VERSION ?? readPackageVersion(),
+        remoteUrl: remoteUrlRaw && remoteUrlRaw !== '' ? remoteUrlRaw : undefined,
+        repoPath: process.env.BRAIN_REPO_PATH ?? join(homedir(), '.aigentry', 'repo'),
+        projectId: process.env.BRAIN_PROJECT_ID ?? 'default',
+        defaultScope: defaultScopeRaw,
+        peersPath: process.env.BRAIN_PEERS_PATH ?? join(homedir(), '.aigentry', 'peers.yaml'),
+    };
+    if (config.profilePath === '') {
+        throw new Error('BRAIN_PROFILE_PATH must not be empty');
+    }
+    if (config.statusPath === '') {
+        throw new Error('BRAIN_STATUS_PATH must not be empty');
+    }
+    return config;
+}
+//# sourceMappingURL=Config.js.map

package/dist/shared/Config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Config.js","sourceRoot":"","sources":["../../src/shared/Config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAGzC,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AAEtC,SAAS,kBAAkB;IACzB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;QAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QACtD,OAAO,GAAG,CAAC,OAAO,IAAI,OAAO,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC;AAED,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAe1F,SAAS,kBAAkB,CAAC,UAAkB;IAC5C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC7C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAgBD,MAAM,UAAU,UAAU;IACxB,wDAAwD;IACxD,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB;WAC/C,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,kBAAkB,CAAC,cAAc,CAAC,CAAC;IAEtD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,MAAM,CAAC;IAC1D,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CACb,6BAA6B,WAAW,8CAA8C,CACvF,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,UAAU,EAAE,SAAS,IAAI,SAAS,CAAC,CAAC;IAC1F,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,MAAM,CAAC;IAClE,IAAI,eAAe,KAAK,MAAM,IAAI,eAAe,KAAK,SAAS,IAAI,eAAe,KAAK,MAAM,EAAE,CAAC;QAC9F,MAAM,IAAI,KAAK,CACb,iCAAiC,eAAe,yCAAyC,CAC1F,CAAC;IACJ,CAAC;IAED,+EAA+E;IAC/E,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IACrF,MAAM,eAAe,GAAG,IAAI,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,YAAY,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IACnE,MAAM,kBAAkB,GAAG,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;IAEpG,MAAM,MAAM,GAAG;QACb,WAAW,EACT,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,kBAAkB;QACtD,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,UAAU,EAAE,QAAQ,IAAI,UAAU,QAAQ,EAAE,EAAE;QACvF,UAAU,EACR,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,aAAa,CAAC;QAC9E,QAAQ,EAAE,WAAuB;QACjC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,gBAAgB;QAC7D,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,kBAAkB,EAAE;QACvE,SAAS,EAAE,YAAY,IAAI,YAAY,KAAK,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;QACzE,QAAQ,EACN,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC;QACrE,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,SAAS;QACpD,YAAY,EAAE,eAA8C;QAC5D,SAAS,EACP,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,YAAY,CAAC;KAC7E,CAAC;IAEF,IAAI,MAAM,CAAC,WAAW,KAAK,EAAE,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,KAAK,EAAE,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/shared/Encryption.d.ts

@@ -0,0 +1,19 @@
+export declare enum EncryptionMode {
+    ACTIVE = "active",
+    FALLBACK_PLAINTEXT = "fallback_plaintext",
+    DISABLED = "disabled"
+}
+export declare function getEncryptionMode(): EncryptionMode;
+/**
+ * Read and decrypt a file.
+ * In DISABLED mode: reads plaintext.
+ * In ACTIVE mode: tries age decryption, falls back to plaintext on failure.
+ * In FALLBACK_PLAINTEXT mode: reads plaintext with warning.
+ */
+export declare function readDecrypted(path: string): Promise<string>;
+/**
+ * Encrypt a file in-place.
+ * No-op: encryption is now handled at the ProfileFormat level using age-encryption npm.
+ * Kept for backward compatibility during migration.
+ */
+export declare function encryptInPlace(_path: string): Promise<void>;

package/dist/shared/Encryption.js

@@ -0,0 +1,47 @@
+import { readFile } from 'node:fs/promises';
+import { createLogger } from './Logger.js';
+const logger = createLogger('Encryption');
+export var EncryptionMode;
+(function (EncryptionMode) {
+    EncryptionMode["ACTIVE"] = "active";
+    EncryptionMode["FALLBACK_PLAINTEXT"] = "fallback_plaintext";
+    EncryptionMode["DISABLED"] = "disabled";
+})(EncryptionMode || (EncryptionMode = {}));
+export function getEncryptionMode() {
+    const env = process.env.AIGENTRY_ENCRYPTION;
+    if (env === 'required' || env === 'active')
+        return EncryptionMode.ACTIVE;
+    if (env === 'disabled')
+        return EncryptionMode.DISABLED;
+    // Auto-detect test environment
+    if (process.env.VITEST || process.env.NODE_ENV === 'test')
+        return EncryptionMode.DISABLED;
+    // Default: active (Invisible Security — auto-encrypt, graceful fallback)
+    return EncryptionMode.ACTIVE;
+}
+/**
+ * Read and decrypt a file.
+ * In DISABLED mode: reads plaintext.
+ * In ACTIVE mode: tries age decryption, falls back to plaintext on failure.
+ * In FALLBACK_PLAINTEXT mode: reads plaintext with warning.
+ */
+export async function readDecrypted(path) {
+    const mode = getEncryptionMode();
+    if (mode === EncryptionMode.DISABLED)
+        return readFile(path, 'utf-8');
+    // For ACTIVE and FALLBACK: read plaintext (age decryption is handled at ProfileFormat level)
+    // This function now only handles raw file reads — encryption/decryption is in ProfileFormat
+    return readFile(path, 'utf-8');
+}
+/**
+ * Encrypt a file in-place.
+ * No-op: encryption is now handled at the ProfileFormat level using age-encryption npm.
+ * Kept for backward compatibility during migration.
+ */
+export async function encryptInPlace(_path) {
+    const mode = getEncryptionMode();
+    if (mode === EncryptionMode.DISABLED)
+        return;
+    // No-op: age-block encryption is done in ProfileFormat.writeToFile()
+}
+//# sourceMappingURL=Encryption.js.map

package/dist/shared/Encryption.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Encryption.js","sourceRoot":"","sources":["../../src/shared/Encryption.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,MAAM,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;AAE1C,MAAM,CAAN,IAAY,cAIX;AAJD,WAAY,cAAc;IACxB,mCAAiB,CAAA;IACjB,2DAAyC,CAAA;IACzC,uCAAqB,CAAA;AACvB,CAAC,EAJW,cAAc,KAAd,cAAc,QAIzB;AAED,MAAM,UAAU,iBAAiB;IAC/B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IAC5C,IAAI,GAAG,KAAK,UAAU,IAAI,GAAG,KAAK,QAAQ;QAAE,OAAO,cAAc,CAAC,MAAM,CAAC;IACzE,IAAI,GAAG,KAAK,UAAU;QAAE,OAAO,cAAc,CAAC,QAAQ,CAAC;IAEvD,+BAA+B;IAC/B,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM;QAAE,OAAO,cAAc,CAAC,QAAQ,CAAC;IAE1F,yEAAyE;IACzE,OAAO,cAAc,CAAC,MAAM,CAAC;AAC/B,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAY;IAC9C,MAAM,IAAI,GAAG,iBAAiB,EAAE,CAAC;IACjC,IAAI,IAAI,KAAK,cAAc,CAAC,QAAQ;QAAE,OAAO,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAErE,6FAA6F;IAC7F,4FAA4F;IAC5F,OAAO,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACjC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAa;IAChD,MAAM,IAAI,GAAG,iBAAiB,EAAE,CAAC;IACjC,IAAI,IAAI,KAAK,cAAc,CAAC,QAAQ;QAAE,OAAO;IAC7C,qEAAqE;AACvE,CAAC"}

package/dist/shared/Logger.d.ts

@@ -0,0 +1,12 @@
+export type LogLevel = 'debug' | 'info' | 'warn' | 'error';
+export interface Logger {
+    debug(msg: string, extra?: Record<string, unknown>): void;
+    info(msg: string, extra?: Record<string, unknown>): void;
+    warn(msg: string, extra?: Record<string, unknown>): void;
+    error(msg: string, extra?: Record<string, unknown>): void;
+}
+export interface LoggerOptions {
+    level?: LogLevel;
+    deviceId?: string;
+}
+export declare function createLogger(component: string, options?: LoggerOptions): Logger;

package/dist/shared/Logger.js

@@ -0,0 +1,40 @@
+const LEVEL_ORDER = {
+    debug: 0,
+    info: 1,
+    warn: 2,
+    error: 3,
+};
+function resolveLevel(options) {
+    if (options?.level)
+        return options.level;
+    const env = process.env.BRAIN_LOG_LEVEL;
+    if (env && env in LEVEL_ORDER)
+        return env;
+    return 'info';
+}
+export function createLogger(component, options) {
+    const minLevel = resolveLevel(options);
+    const deviceId = options?.deviceId;
+    function write(level, msg, extra) {
+        if (LEVEL_ORDER[level] < LEVEL_ORDER[minLevel])
+            return;
+        const entry = {
+            level,
+            ts: new Date().toISOString(),
+            component,
+            msg,
+        };
+        if (deviceId !== undefined)
+            entry['deviceId'] = deviceId;
+        if (extra && Object.keys(extra).length > 0)
+            entry['extra'] = extra;
+        process.stderr.write(JSON.stringify(entry) + '\n');
+    }
+    return {
+        debug: (msg, extra) => write('debug', msg, extra),
+        info: (msg, extra) => write('info', msg, extra),
+        warn: (msg, extra) => write('warn', msg, extra),
+        error: (msg, extra) => write('error', msg, extra),
+    };
+}
+//# sourceMappingURL=Logger.js.map

package/dist/shared/Logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Logger.js","sourceRoot":"","sources":["../../src/shared/Logger.ts"],"names":[],"mappings":"AAcA,MAAM,WAAW,GAA6B;IAC5C,KAAK,EAAE,CAAC;IACR,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,CAAC;IACP,KAAK,EAAE,CAAC;CACT,CAAC;AAEF,SAAS,YAAY,CAAC,OAAuB;IAC3C,IAAI,OAAO,EAAE,KAAK;QAAE,OAAO,OAAO,CAAC,KAAK,CAAC;IACzC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IACxC,IAAI,GAAG,IAAI,GAAG,IAAI,WAAW;QAAE,OAAO,GAAe,CAAC;IACtD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,SAAiB,EAAE,OAAuB;IACrE,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,CAAC;IAEnC,SAAS,KAAK,CAAC,KAAe,EAAE,GAAW,EAAE,KAA+B;QAC1E,IAAI,WAAW,CAAC,KAAK,CAAC,GAAG,WAAW,CAAC,QAAQ,CAAC;YAAE,OAAO;QACvD,MAAM,KAAK,GAA4B;YACrC,KAAK;YACL,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,SAAS;YACT,GAAG;SACJ,CAAC;QACF,IAAI,QAAQ,KAAK,SAAS;YAAE,KAAK,CAAC,UAAU,CAAC,GAAG,QAAQ,CAAC;QACzD,IAAI,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;QACnE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;IACrD,CAAC;IAED,OAAO;QACL,KAAK,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC;QACjD,IAAI,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC;QAC/C,IAAI,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC;QAC/C,KAAK,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC;KAClD,CAAC;AACJ,CAAC"}

package/dist/shared/Mutex.d.ts

@@ -0,0 +1,7 @@
+export declare class Mutex {
+    private _locked;
+    private _queue;
+    acquire(): Promise<() => void>;
+    private release;
+    runExclusive<T>(fn: () => Promise<T>): Promise<T>;
+}