@runcore-sh/runcore 0.1.2

package/dist/utils/logger.js

@@ -0,0 +1,169 @@
+import { AsyncLocalStorage } from "node:async_hooks";
+import { appendFile, stat, rename } from "node:fs/promises";
+const LEVEL_PRIORITY = {
+    debug: 0,
+    info: 1,
+    warn: 2,
+    error: 3,
+};
+// Initialize from LOG_LEVEL env var, default to "debug"
+const envLevel = (process.env.LOG_LEVEL ?? "debug").toLowerCase();
+let minLevel = envLevel in LEVEL_PRIORITY ? envLevel : "debug";
+// Pretty-print mode for development (LOG_FORMAT=pretty)
+const prettyMode = process.env.LOG_FORMAT === "pretty";
+const correlationStore = new AsyncLocalStorage();
+const contextStore = new AsyncLocalStorage();
+export function setMinLevel(level) {
+    minLevel = level;
+}
+export function getCorrelationId() {
+    return contextStore.getStore()?.correlationId ?? correlationStore.getStore();
+}
+export function runWithCorrelationId(id, fn) {
+    return correlationStore.run(id, fn);
+}
+/**
+ * Run a function with full context metadata (correlationId, agentId, taskId).
+ * All loggers within the callback automatically attach these fields.
+ */
+export function runWithContext(meta, fn) {
+    return contextStore.run(meta, fn);
+}
+/** Get the current async context metadata. */
+export function getContext() {
+    return contextStore.getStore();
+}
+function shouldLog(level) {
+    return LEVEL_PRIORITY[level] >= LEVEL_PRIORITY[minLevel];
+}
+let fileConfig = null;
+let rotationInProgress = false;
+/**
+ * Enable file-based logging with rotation.
+ * Logs are written to the file AND to stdout/stderr.
+ * Set LOG_FILE env var or call this to enable.
+ */
+export function enableFileLogging(config) {
+    fileConfig = {
+        filePath: config.filePath,
+        maxSizeBytes: config.maxSizeBytes ?? 10 * 1024 * 1024,
+        maxFiles: config.maxFiles ?? 3,
+    };
+}
+// Auto-enable from env
+if (process.env.LOG_FILE) {
+    enableFileLogging({ filePath: process.env.LOG_FILE });
+}
+async function rotateIfNeeded() {
+    if (!fileConfig || rotationInProgress)
+        return;
+    try {
+        const stats = await stat(fileConfig.filePath).catch(() => null);
+        if (!stats || stats.size < fileConfig.maxSizeBytes)
+            return;
+        rotationInProgress = true;
+        // Rotate: .log -> .log.1, .log.1 -> .log.2, etc.
+        for (let i = fileConfig.maxFiles - 1; i >= 1; i--) {
+            const from = i === 1 ? fileConfig.filePath : `${fileConfig.filePath}.${i - 1}`;
+            const to = `${fileConfig.filePath}.${i}`;
+            await rename(from, to).catch(() => { });
+        }
+    }
+    catch {
+        // Rotation errors are non-fatal
+    }
+    finally {
+        rotationInProgress = false;
+    }
+}
+async function writeToFile(line) {
+    if (!fileConfig)
+        return;
+    await appendFile(fileConfig.filePath, line + "\n", "utf-8").catch(() => { });
+    // Check rotation in background (non-blocking)
+    rotateIfNeeded().catch(() => { });
+}
+// ── Pretty formatting for development ────────────────────────────────────────
+const LEVEL_COLORS = {
+    debug: "\x1b[36m", // cyan
+    info: "\x1b[32m", // green
+    warn: "\x1b[33m", // yellow
+    error: "\x1b[31m", // red
+};
+const RESET = "\x1b[0m";
+const DIM = "\x1b[2m";
+function formatPretty(entry) {
+    const time = entry.timestamp.slice(11, 23); // HH:MM:SS.mmm
+    const color = LEVEL_COLORS[entry.level];
+    const lvl = entry.level.toUpperCase().padEnd(5);
+    const ns = entry.namespace ? ` ${DIM}[${entry.namespace}]${RESET}` : "";
+    const cid = entry.correlationId ? ` ${DIM}cid=${entry.correlationId}${RESET}` : "";
+    const aid = entry.agentId ? ` ${DIM}agent=${entry.agentId}${RESET}` : "";
+    const tid = entry.taskId ? ` ${DIM}task=${entry.taskId}${RESET}` : "";
+    const meta = entry.metadata ? ` ${DIM}${JSON.stringify(entry.metadata)}${RESET}` : "";
+    return `${DIM}${time}${RESET} ${color}${lvl}${RESET}${ns}${cid}${aid}${tid} ${entry.message}${meta}`;
+}
+// ── Core write ───────────────────────────────────────────────────────────────
+function write(entry) {
+    const isError = entry.level === "warn" || entry.level === "error";
+    const stream = isError ? process.stderr : process.stdout;
+    try {
+        if (prettyMode) {
+            stream.write(formatPretty(entry) + "\n");
+        }
+        else {
+            stream.write(JSON.stringify(entry) + "\n");
+        }
+    }
+    catch (err) {
+        // Swallow EPIPE errors — the pipe reader (e.g. tsx watch) has disconnected.
+        // Logging must never crash the application.
+        if (!(err instanceof Error && err.code === "EPIPE")) {
+            throw err; // Re-throw non-EPIPE errors
+        }
+    }
+    // File logging (always JSON, regardless of pretty mode)
+    if (fileConfig) {
+        writeToFile(JSON.stringify(entry));
+    }
+}
+function buildEntry(level, message, namespace, metadata) {
+    const entry = {
+        timestamp: new Date().toISOString(),
+        level,
+        message,
+    };
+    if (namespace)
+        entry.namespace = namespace;
+    // Pull context from async local storage
+    const ctx = contextStore.getStore();
+    const cid = ctx?.correlationId ?? correlationStore.getStore();
+    if (cid)
+        entry.correlationId = cid;
+    if (ctx?.agentId)
+        entry.agentId = ctx.agentId;
+    if (ctx?.taskId)
+        entry.taskId = ctx.taskId;
+    if (metadata && Object.keys(metadata).length > 0)
+        entry.metadata = metadata;
+    return entry;
+}
+function makeLogger(namespace) {
+    const emit = (level, message, metadata) => {
+        if (!shouldLog(level))
+            return;
+        write(buildEntry(level, message, namespace, metadata));
+    };
+    return {
+        debug: (msg, meta) => emit("debug", msg, meta),
+        info: (msg, meta) => emit("info", msg, meta),
+        warn: (msg, meta) => emit("warn", msg, meta),
+        error: (msg, meta) => emit("error", msg, meta),
+        child: (ns) => makeLogger(namespace ? `${namespace}.${ns}` : ns),
+    };
+}
+export const log = makeLogger();
+export function createLogger(namespace) {
+    return makeLogger(namespace);
+}
+//# sourceMappingURL=logger.js.map

package/dist/utils/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAgB5D,MAAM,cAAc,GAA6B;IAC/C,KAAK,EAAE,CAAC;IACR,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,CAAC;IACP,KAAK,EAAE,CAAC;CACT,CAAC;AAEF,wDAAwD;AACxD,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;AAClE,IAAI,QAAQ,GAAa,QAAQ,IAAI,cAAc,CAAC,CAAC,CAAE,QAAqB,CAAC,CAAC,CAAC,OAAO,CAAC;AAEvF,wDAAwD;AACxD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,KAAK,QAAQ,CAAC;AAEvD,MAAM,gBAAgB,GAAG,IAAI,iBAAiB,EAAU,CAAC;AAQzD,MAAM,YAAY,GAAG,IAAI,iBAAiB,EAAe,CAAC;AAE1D,MAAM,UAAU,WAAW,CAAC,KAAe;IACzC,QAAQ,GAAG,KAAK,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,OAAO,YAAY,CAAC,QAAQ,EAAE,EAAE,aAAa,IAAI,gBAAgB,CAAC,QAAQ,EAAE,CAAC;AAC/E,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAI,EAAU,EAAE,EAAW;IAC7D,OAAO,gBAAgB,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAI,IAAiB,EAAE,EAAW;IAC9D,OAAO,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;AACpC,CAAC;AAED,8CAA8C;AAC9C,MAAM,UAAU,UAAU;IACxB,OAAO,YAAY,CAAC,QAAQ,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,SAAS,CAAC,KAAe;IAChC,OAAO,cAAc,CAAC,KAAK,CAAC,IAAI,cAAc,CAAC,QAAQ,CAAC,CAAC;AAC3D,CAAC;AAaD,IAAI,UAAU,GAA8B,IAAI,CAAC;AACjD,IAAI,kBAAkB,GAAG,KAAK,CAAC;AAE/B;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAA0D;IAC1F,UAAU,GAAG;QACX,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,EAAE,GAAG,IAAI,GAAG,IAAI;QACrD,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC;KAC/B,CAAC;AACJ,CAAC;AAED,uBAAuB;AACvB,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;IACzB,iBAAiB,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;AACxD,CAAC;AAED,KAAK,UAAU,cAAc;IAC3B,IAAI,CAAC,UAAU,IAAI,kBAAkB;QAAE,OAAO;IAC9C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAChE,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,GAAG,UAAU,CAAC,YAAY;YAAE,OAAO;QAE3D,kBAAkB,GAAG,IAAI,CAAC;QAE1B,iDAAiD;QACjD,KAAK,IAAI,CAAC,GAAG,UAAU,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAClD,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/E,MAAM,EAAE,GAAG,GAAG,UAAU,CAAC,QAAQ,IAAI,CAAC,EAAE,CAAC;YACzC,MAAM,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,gCAAgC;IAClC,CAAC;YAAS,CAAC;QACT,kBAAkB,GAAG,KAAK,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAY;IACrC,IAAI,CAAC,UAAU;QAAE,OAAO;IACxB,MAAM,UAAU,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC5E,8CAA8C;IAC9C,cAAc,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;AACnC,CAAC;AAED,gFAAgF;AAEhF,MAAM,YAAY,GAA6B;IAC7C,KAAK,EAAE,UAAU,EAAE,OAAO;IAC1B,IAAI,EAAE,UAAU,EAAG,QAAQ;IAC3B,IAAI,EAAE,UAAU,EAAG,SAAS;IAC5B,KAAK,EAAE,UAAU,EAAE,MAAM;CAC1B,CAAC;AACF,MAAM,KAAK,GAAG,SAAS,CAAC;AACxB,MAAM,GAAG,GAAG,SAAS,CAAC;AAEtB,SAAS,YAAY,CAAC,KAAe;IACnC,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe;IAC3D,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAChD,MAAM,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,MAAM,GAAG,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,GAAG,OAAO,KAAK,CAAC,aAAa,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,GAAG,SAAS,KAAK,CAAC,OAAO,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,QAAQ,KAAK,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACtF,OAAO,GAAG,GAAG,GAAG,IAAI,GAAG,KAAK,IAAI,KAAK,GAAG,GAAG,GAAG,KAAK,GAAG,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,IAAI,KAAK,CAAC,OAAO,GAAG,IAAI,EAAE,CAAC;AACvG,CAAC;AAED,gFAAgF;AAEhF,SAAS,KAAK,CAAC,KAAe;IAC5B,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,KAAK,MAAM,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,CAAC;IAClE,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IAEzD,IAAI,CAAC;QACH,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;QAC3C,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,4EAA4E;QAC5E,4CAA4C;QAC5C,IAAI,CAAC,CAAC,GAAG,YAAY,KAAK,IAAK,GAA6B,CAAC,IAAI,KAAK,OAAO,CAAC,EAAE,CAAC;YAC/E,MAAM,GAAG,CAAC,CAAC,4BAA4B;QACzC,CAAC;IACH,CAAC;IAED,wDAAwD;IACxD,IAAI,UAAU,EAAE,CAAC;QACf,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CACjB,KAAe,EACf,OAAe,EACf,SAAkB,EAClB,QAAkC;IAElC,MAAM,KAAK,GAAa;QACtB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,KAAK;QACL,OAAO;KACR,CAAC;IACF,IAAI,SAAS;QAAE,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC;IAE3C,wCAAwC;IACxC,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,CAAC;IACpC,MAAM,GAAG,GAAG,GAAG,EAAE,aAAa,IAAI,gBAAgB,CAAC,QAAQ,EAAE,CAAC;IAC9D,IAAI,GAAG;QAAE,KAAK,CAAC,aAAa,GAAG,GAAG,CAAC;IACnC,IAAI,GAAG,EAAE,OAAO;QAAE,KAAK,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC9C,IAAI,GAAG,EAAE,MAAM;QAAE,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;IAE3C,IAAI,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC5E,OAAO,KAAK,CAAC;AACf,CAAC;AAUD,SAAS,UAAU,CAAC,SAAkB;IACpC,MAAM,IAAI,GAAG,CAAC,KAAe,EAAE,OAAe,EAAE,QAAkC,EAAE,EAAE;QACpF,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;YAAE,OAAO;QAC9B,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;IACzD,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC;QAC9C,IAAI,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC;QAC5C,IAAI,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC;QAC5C,KAAK,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC;QAC9C,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,SAAS,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjE,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;AAChC,MAAM,UAAU,YAAY,CAAC,SAAiB;IAC5C,OAAO,UAAU,CAAC,SAAS,CAAC,CAAC;AAC/B,CAAC"}

package/dist/vault/matcher.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Fuzzy field matcher — maps form field labels to personal vault entries.
+ *
+ * Normalizes incoming labels (lowercased, stripped of punctuation/whitespace),
+ * checks exact matches first, then alias mappings, then substring/token overlap.
+ * Returns a confidence score (0–1) so callers can threshold auto-fill decisions.
+ */
+import { type VaultCategory } from "./personal.js";
+export interface FieldMatch {
+    /** The vault field name that matched. */
+    field: string;
+    /** The vault category. */
+    category: VaultCategory;
+    /** Confidence score: 1.0 = exact/alias, 0.7 = token overlap, 0.5 = substring. */
+    confidence: number;
+}
+/**
+ * Match a form field label to a vault entry.
+ *
+ * Strategy (in order):
+ * 1. Exact match on normalized vault field name → confidence 1.0
+ * 2. Alias lookup → confidence 1.0
+ * 3. Token overlap (Jaccard-like) → confidence 0.5–0.8
+ *
+ * Returns null if no match found above threshold (0.5).
+ */
+export declare function matchField(label: string): Promise<FieldMatch | null>;
+/**
+ * Match multiple form field labels at once.
+ * Returns matches for each label (null entries for unmatched labels are omitted).
+ */
+export declare function matchFields(labels: string[]): Promise<FieldMatch[]>;
+/**
+ * Get the canonical vault field name for a form label via alias lookup.
+ * Returns the canonical name or the normalized label if no alias exists.
+ * Does NOT check if the field exists in the vault.
+ */
+export declare function resolveFieldName(label: string): string;
+//# sourceMappingURL=matcher.d.ts.map

package/dist/vault/matcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"matcher.d.ts","sourceRoot":"","sources":["../../src/vault/matcher.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAsB,KAAK,aAAa,EAAE,MAAM,eAAe,CAAC;AAIvE,MAAM,WAAW,UAAU;IACzB,yCAAyC;IACzC,KAAK,EAAE,MAAM,CAAC;IACd,0BAA0B;IAC1B,QAAQ,EAAE,aAAa,CAAC;IACxB,iFAAiF;IACjF,UAAU,EAAE,MAAM,CAAC;CACpB;AAmHD;;;;;;;;;GASG;AACH,wBAAsB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAyD1E;AAED;;;GAGG;AACH,wBAAsB,WAAW,CAC/B,MAAM,EAAE,MAAM,EAAE,GACf,OAAO,CAAC,UAAU,EAAE,CAAC,CAOvB;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAGtD"}

package/dist/vault/matcher.js

@@ -0,0 +1,197 @@
+/**
+ * Fuzzy field matcher — maps form field labels to personal vault entries.
+ *
+ * Normalizes incoming labels (lowercased, stripped of punctuation/whitespace),
+ * checks exact matches first, then alias mappings, then substring/token overlap.
+ * Returns a confidence score (0–1) so callers can threshold auto-fill decisions.
+ */
+import { listPersonalFields } from "./personal.js";
+// ── Alias map ────────────────────────────────────────────────────────────────
+/**
+ * Maps common form label variants to canonical vault field names.
+ * Keys are normalized (lowercase, no punctuation). Values are vault field names.
+ */
+const ALIASES = {
+    // Identity
+    "first name": "name.first",
+    "firstname": "name.first",
+    "fname": "name.first",
+    "given name": "name.first",
+    "last name": "name.last",
+    "lastname": "name.last",
+    "lname": "name.last",
+    "surname": "name.last",
+    "family name": "name.last",
+    "full name": "name.full",
+    "fullname": "name.full",
+    "name": "name.full",
+    "middle name": "name.middle",
+    "middlename": "name.middle",
+    "date of birth": "dob",
+    "birthday": "dob",
+    "birthdate": "dob",
+    "dob": "dob",
+    "ssn": "ssn",
+    "social security": "ssn",
+    "social security number": "ssn",
+    // Contact
+    "email": "email",
+    "email address": "email",
+    "e-mail": "email",
+    "phone": "phone",
+    "phone number": "phone",
+    "telephone": "phone",
+    "mobile": "phone.mobile",
+    "mobile phone": "phone.mobile",
+    "cell": "phone.mobile",
+    "cell phone": "phone.mobile",
+    "home phone": "phone.home",
+    "work phone": "phone.work",
+    "address": "address.street",
+    "street address": "address.street",
+    "address line 1": "address.line1",
+    "address line1": "address.line1",
+    "address1": "address.line1",
+    "street": "address.line1",
+    "address line 2": "address.line2",
+    "address line2": "address.line2",
+    "address2": "address.line2",
+    "apt": "address.line2",
+    "apartment": "address.line2",
+    "suite": "address.line2",
+    "unit": "address.line2",
+    "city": "address.city",
+    "state": "address.state",
+    "province": "address.state",
+    "zip": "address.zip",
+    "zip code": "address.zip",
+    "zipcode": "address.zip",
+    "postal code": "address.zip",
+    "postcode": "address.zip",
+    "country": "address.country",
+    // Financial
+    "card number": "card.number",
+    "credit card": "card.number",
+    "credit card number": "card.number",
+    "cc number": "card.number",
+    "card holder": "card.holder",
+    "cardholder": "card.holder",
+    "cardholder name": "card.holder",
+    "name on card": "card.holder",
+    "expiration": "card.expiry",
+    "expiration date": "card.expiry",
+    "exp date": "card.expiry",
+    "expiry": "card.expiry",
+    "cvv": "card.cvv",
+    "cvc": "card.cvv",
+    "security code": "card.cvv",
+    "routing number": "bank.routing",
+    "routing": "bank.routing",
+    "account number": "bank.account",
+    "bank account": "bank.account",
+    // Credentials
+    "username": "username",
+    "user name": "username",
+    "login": "username",
+    "password": "password",
+    "pass": "password",
+};
+// ── Normalization ────────────────────────────────────────────────────────────
+/** Normalize a label for matching: lowercase, strip non-alphanumeric (keep spaces). */
+function normalize(label) {
+    return label
+        .toLowerCase()
+        .replace(/[^a-z0-9\s.]/g, "")
+        .replace(/\s+/g, " ")
+        .trim();
+}
+/** Tokenize a normalized string into words. */
+function tokenize(s) {
+    return s.split(/[\s.]+/).filter(Boolean);
+}
+// ── Matching ─────────────────────────────────────────────────────────────────
+/**
+ * Match a form field label to a vault entry.
+ *
+ * Strategy (in order):
+ * 1. Exact match on normalized vault field name → confidence 1.0
+ * 2. Alias lookup → confidence 1.0
+ * 3. Token overlap (Jaccard-like) → confidence 0.5–0.8
+ *
+ * Returns null if no match found above threshold (0.5).
+ */
+export async function matchField(label) {
+    const norm = normalize(label);
+    if (!norm)
+        return null;
+    const fields = await listPersonalFields();
+    const fieldMap = new Map(fields.map((f) => [f.field, f]));
+    // 1. Exact match on vault field name
+    for (const entry of fields) {
+        if (normalize(entry.field) === norm) {
+            return { field: entry.field, category: entry.category, confidence: 1.0 };
+        }
+    }
+    // 2. Alias lookup
+    const aliasTarget = ALIASES[norm];
+    if (aliasTarget) {
+        const entry = fieldMap.get(aliasTarget);
+        if (entry) {
+            return { field: entry.field, category: entry.category, confidence: 1.0 };
+        }
+        // Alias matched but no vault entry exists yet — still return the canonical field
+        return null;
+    }
+    // 3. Token overlap scoring
+    const labelTokens = new Set(tokenize(norm));
+    if (labelTokens.size === 0)
+        return null;
+    let bestMatch = null;
+    let bestScore = 0;
+    for (const entry of fields) {
+        const fieldTokens = new Set(tokenize(normalize(entry.field)));
+        if (fieldTokens.size === 0)
+            continue;
+        // Count shared tokens
+        let shared = 0;
+        for (const t of labelTokens) {
+            if (fieldTokens.has(t))
+                shared++;
+        }
+        // Jaccard-like: shared / union
+        const union = new Set([...labelTokens, ...fieldTokens]).size;
+        const score = shared / union;
+        if (score > bestScore && score >= 0.5) {
+            bestScore = score;
+            bestMatch = {
+                field: entry.field,
+                category: entry.category,
+                confidence: Math.min(0.8, 0.5 + score * 0.3),
+            };
+        }
+    }
+    return bestMatch;
+}
+/**
+ * Match multiple form field labels at once.
+ * Returns matches for each label (null entries for unmatched labels are omitted).
+ */
+export async function matchFields(labels) {
+    const results = [];
+    for (const label of labels) {
+        const match = await matchField(label);
+        if (match)
+            results.push(match);
+    }
+    return results;
+}
+/**
+ * Get the canonical vault field name for a form label via alias lookup.
+ * Returns the canonical name or the normalized label if no alias exists.
+ * Does NOT check if the field exists in the vault.
+ */
+export function resolveFieldName(label) {
+    const norm = normalize(label);
+    return ALIASES[norm] ?? norm;
+}
+//# sourceMappingURL=matcher.js.map

package/dist/vault/matcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"matcher.js","sourceRoot":"","sources":["../../src/vault/matcher.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,kBAAkB,EAAsB,MAAM,eAAe,CAAC;AAavE,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,OAAO,GAA2B;IACtC,WAAW;IACX,YAAY,EAAE,YAAY;IAC1B,WAAW,EAAE,YAAY;IACzB,OAAO,EAAE,YAAY;IACrB,YAAY,EAAE,YAAY;IAC1B,WAAW,EAAE,WAAW;IACxB,UAAU,EAAE,WAAW;IACvB,OAAO,EAAE,WAAW;IACpB,SAAS,EAAE,WAAW;IACtB,aAAa,EAAE,WAAW;IAC1B,WAAW,EAAE,WAAW;IACxB,UAAU,EAAE,WAAW;IACvB,MAAM,EAAE,WAAW;IACnB,aAAa,EAAE,aAAa;IAC5B,YAAY,EAAE,aAAa;IAC3B,eAAe,EAAE,KAAK;IACtB,UAAU,EAAE,KAAK;IACjB,WAAW,EAAE,KAAK;IAClB,KAAK,EAAE,KAAK;IACZ,KAAK,EAAE,KAAK;IACZ,iBAAiB,EAAE,KAAK;IACxB,wBAAwB,EAAE,KAAK;IAE/B,UAAU;IACV,OAAO,EAAE,OAAO;IAChB,eAAe,EAAE,OAAO;IACxB,QAAQ,EAAE,OAAO;IACjB,OAAO,EAAE,OAAO;IAChB,cAAc,EAAE,OAAO;IACvB,WAAW,EAAE,OAAO;IACpB,QAAQ,EAAE,cAAc;IACxB,cAAc,EAAE,cAAc;IAC9B,MAAM,EAAE,cAAc;IACtB,YAAY,EAAE,cAAc;IAC5B,YAAY,EAAE,YAAY;IAC1B,YAAY,EAAE,YAAY;IAC1B,SAAS,EAAE,gBAAgB;IAC3B,gBAAgB,EAAE,gBAAgB;IAClC,gBAAgB,EAAE,eAAe;IACjC,eAAe,EAAE,eAAe;IAChC,UAAU,EAAE,eAAe;IAC3B,QAAQ,EAAE,eAAe;IACzB,gBAAgB,EAAE,eAAe;IACjC,eAAe,EAAE,eAAe;IAChC,UAAU,EAAE,eAAe;IAC3B,KAAK,EAAE,eAAe;IACtB,WAAW,EAAE,eAAe;IAC5B,OAAO,EAAE,eAAe;IACxB,MAAM,EAAE,eAAe;IACvB,MAAM,EAAE,cAAc;IACtB,OAAO,EAAE,eAAe;IACxB,UAAU,EAAE,eAAe;IAC3B,KAAK,EAAE,aAAa;IACpB,UAAU,EAAE,aAAa;IACzB,SAAS,EAAE,aAAa;IACxB,aAAa,EAAE,aAAa;IAC5B,UAAU,EAAE,aAAa;IACzB,SAAS,EAAE,iBAAiB;IAE5B,YAAY;IACZ,aAAa,EAAE,aAAa;IAC5B,aAAa,EAAE,aAAa;IAC5B,oBAAoB,EAAE,aAAa;IACnC,WAAW,EAAE,aAAa;IAC1B,aAAa,EAAE,aAAa;IAC5B,YAAY,EAAE,aAAa;IAC3B,iBAAiB,EAAE,aAAa;IAChC,cAAc,EAAE,aAAa;IAC7B,YAAY,EAAE,aAAa;IAC3B,iBAAiB,EAAE,aAAa;IAChC,UAAU,EAAE,aAAa;IACzB,QAAQ,EAAE,aAAa;IACvB,KAAK,EAAE,UAAU;IACjB,KAAK,EAAE,UAAU;IACjB,eAAe,EAAE,UAAU;IAC3B,gBAAgB,EAAE,cAAc;IAChC,SAAS,EAAE,cAAc;IACzB,gBAAgB,EAAE,cAAc;IAChC,cAAc,EAAE,cAAc;IAE9B,cAAc;IACd,UAAU,EAAE,UAAU;IACtB,WAAW,EAAE,UAAU;IACvB,OAAO,EAAE,UAAU;IACnB,UAAU,EAAE,UAAU;IACtB,MAAM,EAAE,UAAU;CACnB,CAAC;AAEF,gFAAgF;AAEhF,uFAAuF;AACvF,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,KAAK;SACT,WAAW,EAAE;SACb,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;SAC5B,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,+CAA+C;AAC/C,SAAS,QAAQ,CAAC,CAAS;IACzB,OAAO,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED,gFAAgF;AAEhF;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,KAAa;IAC5C,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAEvB,MAAM,MAAM,GAAG,MAAM,kBAAkB,EAAE,CAAC;IAC1C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAE1D,qCAAqC;IACrC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;YACpC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;QAC3E,CAAC;IACH,CAAC;IAED,kBAAkB;IAClB,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACxC,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;QAC3E,CAAC;QACD,iFAAiF;QACjF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,2BAA2B;IAC3B,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5C,IAAI,WAAW,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAExC,IAAI,SAAS,GAAsB,IAAI,CAAC;IACxC,IAAI,SAAS,GAAG,CAAC,CAAC;IAElB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9D,IAAI,WAAW,CAAC,IAAI,KAAK,CAAC;YAAE,SAAS;QAErC,sBAAsB;QACtB,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;YAC5B,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAE,MAAM,EAAE,CAAC;QACnC,CAAC;QAED,+BAA+B;QAC/B,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,WAAW,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;QAC7D,MAAM,KAAK,GAAG,MAAM,GAAG,KAAK,CAAC;QAE7B,IAAI,KAAK,GAAG,SAAS,IAAI,KAAK,IAAI,GAAG,EAAE,CAAC;YACtC,SAAS,GAAG,KAAK,CAAC;YAClB,SAAS,GAAG;gBACV,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,GAAG,KAAK,GAAG,GAAG,CAAC;aAC7C,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAAgB;IAEhB,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,KAAK;YAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9B,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;AAC/B,CAAC"}

package/dist/vault/personal.d.ts

@@ -0,0 +1,60 @@
+/**
+ * Personal data vault — encrypted JSONL store for form-filling fields.
+ *
+ * Stores personal data (name, address, SSN, etc.) as per-line encrypted JSONL
+ * via brain-io. Each entry has a field key, value, category, and timestamp.
+ *
+ * SECURITY:
+ * - All data encrypted at rest via AES-256-GCM (brain-io handles this).
+ * - Values are NEVER exposed in logs, prompts, or LLM context.
+ * - Only field names and categories are surfaced to the LLM; retrieval
+ *   of actual values happens through action blocks, not context injection.
+ */
+export type VaultCategory = "identity" | "contact" | "financial" | "medical" | "credentials";
+export interface VaultEntry {
+    field: string;
+    value: string;
+    category: VaultCategory;
+    updatedAt: string;
+    /** Soft-delete marker. Archived entries are filtered out on read. */
+    status?: "active" | "archived";
+}
+/**
+ * Initialize the personal vault. Call once at startup after encryption key is set.
+ */
+export declare function loadPersonalVault(): Promise<void>;
+/**
+ * Get a single vault entry by exact field name.
+ * Returns the entry (with value) or null.
+ */
+export declare function getPersonalField(field: string): Promise<VaultEntry | null>;
+/**
+ * Set (create or update) a personal data field.
+ * Appends a new line to the JSONL file (append-only).
+ */
+export declare function setPersonalField(field: string, value: string, category: VaultCategory): Promise<VaultEntry>;
+/**
+ * List all active entries, optionally filtered by category.
+ * Returns field names and categories only — values are redacted.
+ */
+export declare function listPersonalFields(category?: VaultCategory): Promise<Array<{
+    field: string;
+    category: VaultCategory;
+    updatedAt: string;
+}>>;
+/**
+ * Soft-delete a field by appending an archived entry.
+ */
+export declare function deletePersonalField(field: string): Promise<boolean>;
+/**
+ * Get multiple fields by name. Returns a map of field → value.
+ * This is the retrieval path for form-filling — values are returned
+ * but must NEVER be forwarded to logs or LLM context.
+ */
+export declare function getPersonalFields(fields: string[]): Promise<Map<string, string>>;
+/**
+ * Compact the vault file — rewrite with only the latest active entries.
+ * Call periodically to reclaim space from archived/superseded entries.
+ */
+export declare function compactPersonalVault(): Promise<number>;
+//# sourceMappingURL=personal.d.ts.map

package/dist/vault/personal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"personal.d.ts","sourceRoot":"","sources":["../../src/vault/personal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAsBH,MAAM,MAAM,aAAa,GACrB,UAAU,GACV,SAAS,GACT,WAAW,GACX,SAAS,GACT,aAAa,CAAC;AAElB,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,aAAa,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,qEAAqE;IACrE,MAAM,CAAC,EAAE,QAAQ,GAAG,UAAU,CAAC;CAChC;AAoDD;;GAEG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC,CAEvD;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAG5B;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,aAAa,GACtB,OAAO,CAAC,UAAU,CAAC,CAYrB;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,QAAQ,CAAC,EAAE,aAAa,GACvB,OAAO,CAAC,KAAK,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,aAAa,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CAgB/E;AAED;;GAEG;AACH,wBAAsB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAazE;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,EAAE,GACf,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAQ9B;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,MAAM,CAAC,CAQ5D"}

package/dist/vault/personal.js

@@ -0,0 +1,162 @@
+/**
+ * Personal data vault — encrypted JSONL store for form-filling fields.
+ *
+ * Stores personal data (name, address, SSN, etc.) as per-line encrypted JSONL
+ * via brain-io. Each entry has a field key, value, category, and timestamp.
+ *
+ * SECURITY:
+ * - All data encrypted at rest via AES-256-GCM (brain-io handles this).
+ * - Values are NEVER exposed in logs, prompts, or LLM context.
+ * - Only field names and categories are surfaced to the LLM; retrieval
+ *   of actual values happens through action blocks, not context injection.
+ */
+import { join } from "node:path";
+import { readBrainLines, writeBrainLines, appendBrainLine, ensureBrainJsonl, } from "../lib/brain-io.js";
+const VAULT_DIR = join(process.cwd(), "brain", "vault");
+const VAULT_FILE = join(VAULT_DIR, "personal.enc.jsonl");
+const SCHEMA_LINE = JSON.stringify({
+    _schema: "personal-vault",
+    _version: "1.0",
+    _description: "Encrypted personal data for form filling. One JSON object per line. Append-only.",
+});
+// ── In-memory cache ──────────────────────────────────────────────────────────
+/** Field → latest entry. Rebuilt on load, updated on set/delete. */
+let cache = new Map();
+let loaded = false;
+// ── Internal helpers ─────────────────────────────────────────────────────────
+function isVaultEntry(obj) {
+    if (!obj || typeof obj !== "object")
+        return false;
+    const e = obj;
+    return (typeof e.field === "string" &&
+        typeof e.value === "string" &&
+        typeof e.category === "string" &&
+        typeof e.updatedAt === "string");
+}
+/** Load all entries from disk, dedup by field (latest wins), filter archived. */
+async function hydrate() {
+    await ensureBrainJsonl(VAULT_FILE, SCHEMA_LINE);
+    const lines = await readBrainLines(VAULT_FILE);
+    cache = new Map();
+    for (const line of lines) {
+        try {
+            const parsed = JSON.parse(line);
+            // Skip schema header
+            if (parsed && typeof parsed === "object" && "_schema" in parsed)
+                continue;
+            if (!isVaultEntry(parsed))
+                continue;
+            if (parsed.status === "archived") {
+                cache.delete(parsed.field);
+            }
+            else {
+                cache.set(parsed.field, parsed);
+            }
+        }
+        catch {
+            // Skip malformed lines
+        }
+    }
+    loaded = true;
+}
+/** Ensure cache is hydrated before reads. */
+async function ensureLoaded() {
+    if (!loaded)
+        await hydrate();
+}
+// ── Public API ───────────────────────────────────────────────────────────────
+/**
+ * Initialize the personal vault. Call once at startup after encryption key is set.
+ */
+export async function loadPersonalVault() {
+    await hydrate();
+}
+/**
+ * Get a single vault entry by exact field name.
+ * Returns the entry (with value) or null.
+ */
+export async function getPersonalField(field) {
+    await ensureLoaded();
+    return cache.get(field) ?? null;
+}
+/**
+ * Set (create or update) a personal data field.
+ * Appends a new line to the JSONL file (append-only).
+ */
+export async function setPersonalField(field, value, category) {
+    await ensureLoaded();
+    const entry = {
+        field,
+        value,
+        category,
+        updatedAt: new Date().toISOString(),
+        status: "active",
+    };
+    await appendBrainLine(VAULT_FILE, JSON.stringify(entry));
+    cache.set(field, entry);
+    return entry;
+}
+/**
+ * List all active entries, optionally filtered by category.
+ * Returns field names and categories only — values are redacted.
+ */
+export async function listPersonalFields(category) {
+    await ensureLoaded();
+    const results = [];
+    for (const entry of cache.values()) {
+        if (category && entry.category !== category)
+            continue;
+        results.push({
+            field: entry.field,
+            category: entry.category,
+            updatedAt: entry.updatedAt,
+        });
+    }
+    return results;
+}
+/**
+ * Soft-delete a field by appending an archived entry.
+ */
+export async function deletePersonalField(field) {
+    await ensureLoaded();
+    const existing = cache.get(field);
+    if (!existing)
+        return false;
+    const tombstone = {
+        ...existing,
+        updatedAt: new Date().toISOString(),
+        status: "archived",
+    };
+    await appendBrainLine(VAULT_FILE, JSON.stringify(tombstone));
+    cache.delete(field);
+    return true;
+}
+/**
+ * Get multiple fields by name. Returns a map of field → value.
+ * This is the retrieval path for form-filling — values are returned
+ * but must NEVER be forwarded to logs or LLM context.
+ */
+export async function getPersonalFields(fields) {
+    await ensureLoaded();
+    const result = new Map();
+    for (const f of fields) {
+        const entry = cache.get(f);
+        if (entry)
+            result.set(f, entry.value);
+    }
+    return result;
+}
+/**
+ * Compact the vault file — rewrite with only the latest active entries.
+ * Call periodically to reclaim space from archived/superseded entries.
+ */
+export async function compactPersonalVault() {
+    await ensureLoaded();
+    const lines = [SCHEMA_LINE];
+    for (const entry of cache.values()) {
+        lines.push(JSON.stringify(entry));
+    }
+    await writeBrainLines(VAULT_FILE, lines);
+    return cache.size;
+}
+//# sourceMappingURL=personal.js.map

package/dist/vault/personal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"personal.js","sourceRoot":"","sources":["../../src/vault/personal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,cAAc,EACd,eAAe,EACf,eAAe,EACf,gBAAgB,GACjB,MAAM,oBAAoB,CAAC;AAE5B,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AACxD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;AAEzD,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC;IACjC,OAAO,EAAE,gBAAgB;IACzB,QAAQ,EAAE,KAAK;IACf,YAAY,EACV,kFAAkF;CACrF,CAAC,CAAC;AAoBH,gFAAgF;AAEhF,oEAAoE;AACpE,IAAI,KAAK,GAA4B,IAAI,GAAG,EAAE,CAAC;AAC/C,IAAI,MAAM,GAAG,KAAK,CAAC;AAEnB,gFAAgF;AAEhF,SAAS,YAAY,CAAC,GAAY;IAChC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAClD,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,OAAO,CACL,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;QAC3B,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;QAC3B,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;QAC9B,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,CAChC,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,KAAK,UAAU,OAAO;IACpB,MAAM,gBAAgB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,CAAC;IAC/C,KAAK,GAAG,IAAI,GAAG,EAAE,CAAC;IAElB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACzC,qBAAqB;YACrB,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,SAAS,IAAI,MAAM;gBAAE,SAAS;YAC1E,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;gBAAE,SAAS;YACpC,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBACjC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uBAAuB;QACzB,CAAC;IACH,CAAC;IACD,MAAM,GAAG,IAAI,CAAC;AAChB,CAAC;AAED,6CAA6C;AAC7C,KAAK,UAAU,YAAY;IACzB,IAAI,CAAC,MAAM;QAAE,MAAM,OAAO,EAAE,CAAC;AAC/B,CAAC;AAED,gFAAgF;AAEhF;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,MAAM,OAAO,EAAE,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAa;IAEb,MAAM,YAAY,EAAE,CAAC;IACrB,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;AAClC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAa,EACb,KAAa,EACb,QAAuB;IAEvB,MAAM,YAAY,EAAE,CAAC;IACrB,MAAM,KAAK,GAAe;QACxB,KAAK;QACL,KAAK;QACL,QAAQ;QACR,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,MAAM,EAAE,QAAQ;KACjB,CAAC;IACF,MAAM,eAAe,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IACzD,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACxB,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,QAAwB;IAExB,MAAM,YAAY,EAAE,CAAC;IACrB,MAAM,OAAO,GAIR,EAAE,CAAC;IACR,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QACnC,IAAI,QAAQ,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ;YAAE,SAAS;QACtD,OAAO,CAAC,IAAI,CAAC;YACX,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAAa;IACrD,MAAM,YAAY,EAAE,CAAC;IACrB,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAE5B,MAAM,SAAS,GAAe;QAC5B,GAAG,QAAQ;QACX,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,MAAM,EAAE,UAAU;KACnB,CAAC;IACF,MAAM,eAAe,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;IAC7D,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpB,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAgB;IAEhB,MAAM,YAAY,EAAE,CAAC;IACrB,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC3B,IAAI,KAAK;YAAE,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACxC,MAAM,YAAY,EAAE,CAAC;IACrB,MAAM,KAAK,GAAa,CAAC,WAAW,CAAC,CAAC;IACtC,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IACpC,CAAC;IACD,MAAM,eAAe,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACzC,OAAO,KAAK,CAAC,IAAI,CAAC;AACpB,CAAC"}