@stackmemoryai/stackmemory 0.3.6 → 0.3.7

package/dist/integrations/pg-aiguide/embedding-provider.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/integrations/pg-aiguide/embedding-provider.ts"],
-  "sourcesContent": ["import { logger } from '../../core/monitoring/logger.js';\nimport crypto from 'crypto';\n\nexport interface EmbeddingProvider {\n  createEmbedding(text: string): Promise<number[]>;\n  getDimensions(): number;\n  getName(): string;\n}\n\n/**\n * OpenAI Embeddings Provider\n * Requires OPENAI_API_KEY environment variable\n */\nexport class OpenAIEmbeddingProvider implements EmbeddingProvider {\n  private apiKey: string | undefined;\n  private model: string;\n  private dimensions: number;\n\n  constructor(model = 'text-embedding-ada-002') {\n    this.apiKey = process.env.OPENAI_API_KEY;\n    this.model = model;\n    this.dimensions = model === 'text-embedding-ada-002' ? 1536 : 3072; // ada-002 vs text-embedding-3-small\n  }\n\n  async createEmbedding(text: string): Promise<number[]> {\n    if (!this.apiKey) {\n      throw new Error('OPENAI_API_KEY environment variable is not set');\n    }\n\n    try {\n      const response = await fetch('https://api.openai.com/v1/embeddings', {\n        method: 'POST',\n        headers: {\n          'Content-Type': 'application/json',\n          Authorization: `Bearer ${this.apiKey}`,\n        },\n        body: JSON.stringify({\n          input: text,\n          model: this.model,\n        }),\n      });\n\n      if (!response.ok) {\n        throw new Error(`OpenAI API error: ${response.statusText}`);\n      }\n\n      const data = (await response.json()) as {\n        data: Array<{ embedding: number[] }>;\n      };\n      return data.data[0].embedding;\n    } catch (error) {\n      logger.error(\n        'Failed to create OpenAI embedding',\n        error instanceof Error ? error : new Error(String(error))\n      );\n      throw error;\n    }\n  }\n\n  getDimensions(): number {\n    return this.dimensions;\n  }\n\n  getName(): string {\n    return `OpenAI-${this.model}`;\n  }\n}\n\n/**\n * Local Embeddings Provider using simple TF-IDF-like approach\n * Deterministic and doesn't require external APIs\n */\nexport class LocalEmbeddingProvider implements EmbeddingProvider {\n  private dimensions: number;\n  private vocabulary: Map<string, number> = new Map();\n  private idf: Map<string, number> = new Map();\n  private documentCount = 0;\n\n  constructor(dimensions = 384) {\n    this.dimensions = dimensions;\n  }\n\n  private tokenize(text: string): string[] {\n    return text\n      .toLowerCase()\n      .replace(/[^\\w\\s]/g, ' ')\n      .split(/\\s+/)\n      .filter((token) => token.length > 2);\n  }\n\n  private getWordVector(word: string): number[] {\n    // Use deterministic hashing to create a vector for each word\n    const hash = crypto.createHash('sha256').update(word).digest();\n    const vector = new Array(this.dimensions).fill(0);\n\n    // Use hash bytes to set vector components\n    for (let i = 0; i < Math.min(hash.length, this.dimensions); i++) {\n      const value = (hash[i] - 128) / 128; // Normalize to [-1, 1]\n      vector[i] = value;\n    }\n\n    return vector;\n  }\n\n  async createEmbedding(text: string): Promise<number[]> {\n    const tokens = this.tokenize(text);\n    const vector = new Array(this.dimensions).fill(0);\n\n    if (tokens.length === 0) {\n      return vector;\n    }\n\n    // Calculate TF-IDF weighted average of word vectors\n    const termFreq = new Map<string, number>();\n\n    // Count term frequencies\n    for (const token of tokens) {\n      termFreq.set(token, (termFreq.get(token) || 0) + 1);\n    }\n\n    // Build vocabulary and update document frequency\n    this.documentCount++;\n    for (const token of new Set(tokens)) {\n      if (!this.vocabulary.has(token)) {\n        this.vocabulary.set(token, this.vocabulary.size);\n      }\n      this.idf.set(token, (this.idf.get(token) || 0) + 1);\n    }\n\n    // Calculate weighted vector\n    let totalWeight = 0;\n\n    for (const [token, freq] of termFreq.entries()) {\n      const tf = freq / tokens.length;\n      const docFreq = this.idf.get(token) || 1;\n      const idf = Math.log((this.documentCount + 1) / (docFreq + 1));\n      const weight = tf * idf;\n\n      const wordVector = this.getWordVector(token);\n      for (let i = 0; i < this.dimensions; i++) {\n        vector[i] += wordVector[i] * weight;\n      }\n      totalWeight += weight;\n    }\n\n    // Normalize the vector\n    if (totalWeight > 0) {\n      const magnitude = Math.sqrt(\n        vector.reduce((sum, val) => sum + val * val, 0)\n      );\n      if (magnitude > 0) {\n        for (let i = 0; i < this.dimensions; i++) {\n          vector[i] /= magnitude;\n        }\n      }\n    }\n\n    return vector;\n  }\n\n  getDimensions(): number {\n    return this.dimensions;\n  }\n\n  getName(): string {\n    return 'Local-TFIDF';\n  }\n}\n\n/**\n * Hybrid provider that tries OpenAI first, falls back to local\n */\nexport class HybridEmbeddingProvider implements EmbeddingProvider {\n  private openai: OpenAIEmbeddingProvider;\n  private local: LocalEmbeddingProvider;\n  private useOpenAI: boolean;\n\n  constructor(dimensions = 1536) {\n    this.openai = new OpenAIEmbeddingProvider();\n    this.local = new LocalEmbeddingProvider(dimensions);\n    this.useOpenAI = !!process.env.OPENAI_API_KEY;\n\n    if (!this.useOpenAI) {\n      logger.warn('OPENAI_API_KEY not set, using local embeddings');\n    }\n  }\n\n  async createEmbedding(text: string): Promise<number[]> {\n    if (this.useOpenAI) {\n      try {\n        return await this.openai.createEmbedding(text);\n      } catch (error) {\n        logger.warn(\n          'OpenAI embedding failed, falling back to local',\n          error instanceof Error ? error : undefined\n        );\n        this.useOpenAI = false; // Disable for future calls\n      }\n    }\n\n    const localEmbedding = await this.local.createEmbedding(text);\n\n    // Pad or truncate to match expected dimensions\n    const targetDimensions = this.getDimensions();\n    if (localEmbedding.length < targetDimensions) {\n      return [\n        ...localEmbedding,\n        ...new Array(targetDimensions - localEmbedding.length).fill(0),\n      ];\n    }\n    return localEmbedding.slice(0, targetDimensions);\n  }\n\n  getDimensions(): number {\n    return this.useOpenAI\n      ? this.openai.getDimensions()\n      : this.local.getDimensions();\n  }\n\n  getName(): string {\n    return this.useOpenAI\n      ? this.openai.getName()\n      : `Hybrid-${this.local.getName()}`;\n  }\n}\n\n// Factory function\nexport function createEmbeddingProvider(\n  type?: 'openai' | 'local' | 'hybrid'\n): EmbeddingProvider {\n  switch (type) {\n    case 'openai':\n      return new OpenAIEmbeddingProvider();\n    case 'local':\n      return new LocalEmbeddingProvider();\n    case 'hybrid':\n    default:\n      return new HybridEmbeddingProvider();\n  }\n}\n"],
-  "mappings": "AAAA,SAAS,cAAc;AACvB,OAAO,YAAY;AAYZ,MAAM,wBAAqD;AAAA,EACxD;AAAA,EACA;AAAA,EACA;AAAA,EAER,YAAY,QAAQ,0BAA0B;AAC5C,SAAK,SAAS,QAAQ,IAAI;AAC1B,SAAK,QAAQ;AACb,SAAK,aAAa,UAAU,2BAA2B,OAAO;AAAA,EAChE;AAAA,EAEA,MAAM,gBAAgB,MAAiC;AACrD,QAAI,CAAC,KAAK,QAAQ;AAChB,YAAM,IAAI,MAAM,gDAAgD;AAAA,IAClE;AAEA,QAAI;AACF,YAAM,WAAW,MAAM,MAAM,wCAAwC;AAAA,QACnE,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,gBAAgB;AAAA,UAChB,eAAe,UAAU,KAAK,MAAM;AAAA,QACtC;AAAA,QACA,MAAM,KAAK,UAAU;AAAA,UACnB,OAAO;AAAA,UACP,OAAO,KAAK;AAAA,QACd,CAAC;AAAA,MACH,CAAC;AAED,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,IAAI,MAAM,qBAAqB,SAAS,UAAU,EAAE;AAAA,MAC5D;AAEA,YAAM,OAAQ,MAAM,SAAS,KAAK;AAGlC,aAAO,KAAK,KAAK,CAAC,EAAE;AAAA,IACtB,SAAS,OAAO;AACd,aAAO;AAAA,QACL;AAAA,QACA,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AAAA,MAC1D;AACA,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEA,gBAAwB;AACtB,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,UAAkB;AAChB,WAAO,UAAU,KAAK,KAAK;AAAA,EAC7B;AACF;AAMO,MAAM,uBAAoD;AAAA,EACvD;AAAA,EACA,aAAkC,oBAAI,IAAI;AAAA,EAC1C,MAA2B,oBAAI,IAAI;AAAA,EACnC,gBAAgB;AAAA,EAExB,YAAY,aAAa,KAAK;AAC5B,SAAK,aAAa;AAAA,EACpB;AAAA,EAEQ,SAAS,MAAwB;AACvC,WAAO,KACJ,YAAY,EACZ,QAAQ,YAAY,GAAG,EACvB,MAAM,KAAK,EACX,OAAO,CAAC,UAAU,MAAM,SAAS,CAAC;AAAA,EACvC;AAAA,EAEQ,cAAc,MAAwB;AAE5C,UAAM,OAAO,OAAO,WAAW,QAAQ,EAAE,OAAO,IAAI,EAAE,OAAO;AAC7D,UAAM,SAAS,IAAI,MAAM,KAAK,UAAU,EAAE,KAAK,CAAC;AAGhD,aAAS,IAAI,GAAG,IAAI,KAAK,IAAI,KAAK,QAAQ,KAAK,UAAU,GAAG,KAAK;AAC/D,YAAM,SAAS,KAAK,CAAC,IAAI,OAAO;AAChC,aAAO,CAAC,IAAI;AAAA,IACd;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,gBAAgB,MAAiC;AACrD,UAAM,SAAS,KAAK,SAAS,IAAI;AACjC,UAAM,SAAS,IAAI,MAAM,KAAK,UAAU,EAAE,KAAK,CAAC;AAEhD,QAAI,OAAO,WAAW,GAAG;AACvB,aAAO;AAAA,IACT;AAGA,UAAM,WAAW,oBAAI,IAAoB;AAGzC,eAAW,SAAS,QAAQ;AAC1B,eAAS,IAAI,QAAQ,SAAS,IAAI,KAAK,KAAK,KAAK,CAAC;AAAA,IACpD;AAGA,SAAK;AACL,eAAW,SAAS,IAAI,IAAI,MAAM,GAAG;AACnC,UAAI,CAAC,KAAK,WAAW,IAAI,KAAK,GAAG;AAC/B,aAAK,WAAW,IAAI,OAAO,KAAK,WAAW,IAAI;AAAA,MACjD;AACA,WAAK,IAAI,IAAI,QAAQ,KAAK,IAAI,IAAI,KAAK,KAAK,KAAK,CAAC;AAAA,IACpD;AAGA,QAAI,cAAc;AAElB,eAAW,CAAC,OAAO,IAAI,KAAK,SAAS,QAAQ,GAAG;AAC9C,YAAM,KAAK,OAAO,OAAO;AACzB,YAAM,UAAU,KAAK,IAAI,IAAI,KAAK,KAAK;AACvC,YAAM,MAAM,KAAK,KAAK,KAAK,gBAAgB,MAAM,UAAU,EAAE;AAC7D,YAAM,SAAS,KAAK;AAEpB,YAAM,aAAa,KAAK,cAAc,KAAK;AAC3C,eAAS,IAAI,GAAG,IAAI,KAAK,YAAY,KAAK;AACxC,eAAO,CAAC,KAAK,WAAW,CAAC,IAAI;AAAA,MAC/B;AACA,qBAAe;AAAA,IACjB;AAGA,QAAI,cAAc,GAAG;AACnB,YAAM,YAAY,KAAK;AAAA,QACrB,OAAO,OAAO,CAAC,KAAK,QAAQ,MAAM,MAAM,KAAK,CAAC;AAAA,MAChD;AACA,UAAI,YAAY,GAAG;AACjB,iBAAS,IAAI,GAAG,IAAI,KAAK,YAAY,KAAK;AACxC,iBAAO,CAAC,KAAK;AAAA,QACf;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,gBAAwB;AACtB,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,UAAkB;AAChB,WAAO;AAAA,EACT;AACF;AAKO,MAAM,wBAAqD;AAAA,EACxD;AAAA,EACA;AAAA,EACA;AAAA,EAER,YAAY,aAAa,MAAM;AAC7B,SAAK,SAAS,IAAI,wBAAwB;AAC1C,SAAK,QAAQ,IAAI,uBAAuB,UAAU;AAClD,SAAK,YAAY,CAAC,CAAC,QAAQ,IAAI;AAE/B,QAAI,CAAC,KAAK,WAAW;AACnB,aAAO,KAAK,gDAAgD;AAAA,IAC9D;AAAA,EACF;AAAA,EAEA,MAAM,gBAAgB,MAAiC;AACrD,QAAI,KAAK,WAAW;AAClB,UAAI;AACF,eAAO,MAAM,KAAK,OAAO,gBAAgB,IAAI;AAAA,MAC/C,SAAS,OAAO;AACd,eAAO;AAAA,UACL;AAAA,UACA,iBAAiB,QAAQ,QAAQ;AAAA,QACnC;AACA,aAAK,YAAY;AAAA,MACnB;AAAA,IACF;AAEA,UAAM,iBAAiB,MAAM,KAAK,MAAM,gBAAgB,IAAI;AAG5D,UAAM,mBAAmB,KAAK,cAAc;AAC5C,QAAI,eAAe,SAAS,kBAAkB;AAC5C,aAAO;AAAA,QACL,GAAG;AAAA,QACH,GAAG,IAAI,MAAM,mBAAmB,eAAe,MAAM,EAAE,KAAK,CAAC;AAAA,MAC/D;AAAA,IACF;AACA,WAAO,eAAe,MAAM,GAAG,gBAAgB;AAAA,EACjD;AAAA,EAEA,gBAAwB;AACtB,WAAO,KAAK,YACR,KAAK,OAAO,cAAc,IAC1B,KAAK,MAAM,cAAc;AAAA,EAC/B;AAAA,EAEA,UAAkB;AAChB,WAAO,KAAK,YACR,KAAK,OAAO,QAAQ,IACpB,UAAU,KAAK,MAAM,QAAQ,CAAC;AAAA,EACpC;AACF;AAGO,SAAS,wBACd,MACmB;AACnB,UAAQ,MAAM;AAAA,IACZ,KAAK;AACH,aAAO,IAAI,wBAAwB;AAAA,IACrC,KAAK;AACH,aAAO,IAAI,uBAAuB;AAAA,IACpC,KAAK;AAAA,IACL;AACE,aAAO,IAAI,wBAAwB;AAAA,EACvC;AACF;",
+  "sourcesContent": ["import { logger } from '../../core/monitoring/logger.js';\nimport crypto from 'crypto';\n// Type-safe environment variable access\nfunction getEnv(key: string, defaultValue?: string): string {\n  const value = process.env[key];\n  if (value === undefined) {\n    if (defaultValue !== undefined) return defaultValue;\n    throw new Error(`Environment variable ${key} is required`);\n  }\n  return value;\n}\n\nfunction getOptionalEnv(key: string): string | undefined {\n  return process.env[key];\n}\n\n\nexport interface EmbeddingProvider {\n  createEmbedding(text: string): Promise<number[]>;\n  getDimensions(): number;\n  getName(): string;\n}\n\n/**\n * OpenAI Embeddings Provider\n * Requires OPENAI_API_KEY environment variable\n */\nexport class OpenAIEmbeddingProvider implements EmbeddingProvider {\n  private apiKey: string | undefined;\n  private model: string;\n  private dimensions: number;\n\n  constructor(model = 'text-embedding-ada-002') {\n    this.apiKey = process.env['OPENAI_API_KEY'];\n    this.model = model;\n    this.dimensions = model === 'text-embedding-ada-002' ? 1536 : 3072; // ada-002 vs text-embedding-3-small\n  }\n\n  async createEmbedding(text: string): Promise<number[]> {\n    if (!this.apiKey) {\n      throw new Error('OPENAI_API_KEY environment variable is not set');\n    }\n\n    try {\n      const response = await fetch('https://api.openai.com/v1/embeddings', {\n        method: 'POST',\n        headers: {\n          'Content-Type': 'application/json',\n          Authorization: `Bearer ${this.apiKey}`,\n        },\n        body: JSON.stringify({\n          input: text,\n          model: this.model,\n        }),\n      });\n\n      if (!response.ok) {\n        throw new Error(`OpenAI API error: ${response.statusText}`);\n      }\n\n      const data = (await response.json()) as {\n        data: Array<{ embedding: number[] }>;\n      };\n      return data.data[0].embedding;\n    } catch (error: unknown) {\n      logger.error(\n        'Failed to create OpenAI embedding',\n        error instanceof Error ? error : new Error(String(error))\n      );\n      throw error;\n    }\n  }\n\n  getDimensions(): number {\n    return this.dimensions;\n  }\n\n  getName(): string {\n    return `OpenAI-${this.model}`;\n  }\n}\n\n/**\n * Local Embeddings Provider using simple TF-IDF-like approach\n * Deterministic and doesn't require external APIs\n */\nexport class LocalEmbeddingProvider implements EmbeddingProvider {\n  private dimensions: number;\n  private vocabulary: Map<string, number> = new Map();\n  private idf: Map<string, number> = new Map();\n  private documentCount = 0;\n\n  constructor(dimensions = 384) {\n    this.dimensions = dimensions;\n  }\n\n  private tokenize(text: string): string[] {\n    return text\n      .toLowerCase()\n      .replace(/[^\\w\\s]/g, ' ')\n      .split(/\\s+/)\n      .filter((token) => token.length > 2);\n  }\n\n  private getWordVector(word: string): number[] {\n    // Use deterministic hashing to create a vector for each word\n    const hash = crypto.createHash('sha256').update(word).digest();\n    const vector = new Array(this.dimensions).fill(0);\n\n    // Use hash bytes to set vector components\n    for (let i = 0; i < Math.min(hash.length, this.dimensions); i++) {\n      const value = (hash[i] - 128) / 128; // Normalize to [-1, 1]\n      vector[i] = value;\n    }\n\n    return vector;\n  }\n\n  async createEmbedding(text: string): Promise<number[]> {\n    const tokens = this.tokenize(text);\n    const vector = new Array(this.dimensions).fill(0);\n\n    if (tokens.length === 0) {\n      return vector;\n    }\n\n    // Calculate TF-IDF weighted average of word vectors\n    const termFreq = new Map<string, number>();\n\n    // Count term frequencies\n    for (const token of tokens) {\n      termFreq.set(token, (termFreq.get(token) || 0) + 1);\n    }\n\n    // Build vocabulary and update document frequency\n    this.documentCount++;\n    for (const token of new Set(tokens)) {\n      if (!this.vocabulary.has(token)) {\n        this.vocabulary.set(token, this.vocabulary.size);\n      }\n      this.idf.set(token, (this.idf.get(token) || 0) + 1);\n    }\n\n    // Calculate weighted vector\n    let totalWeight = 0;\n\n    for (const [token, freq] of termFreq.entries()) {\n      const tf = freq / tokens.length;\n      const docFreq = this.idf.get(token) || 1;\n      const idf = Math.log((this.documentCount + 1) / (docFreq + 1));\n      const weight = tf * idf;\n\n      const wordVector = this.getWordVector(token);\n      for (let i = 0; i < this.dimensions; i++) {\n        vector[i] += wordVector[i] * weight;\n      }\n      totalWeight += weight;\n    }\n\n    // Normalize the vector\n    if (totalWeight > 0) {\n      const magnitude = Math.sqrt(\n        vector.reduce((sum, val) => sum + val * val, 0)\n      );\n      if (magnitude > 0) {\n        for (let i = 0; i < this.dimensions; i++) {\n          vector[i] /= magnitude;\n        }\n      }\n    }\n\n    return vector;\n  }\n\n  getDimensions(): number {\n    return this.dimensions;\n  }\n\n  getName(): string {\n    return 'Local-TFIDF';\n  }\n}\n\n/**\n * Hybrid provider that tries OpenAI first, falls back to local\n */\nexport class HybridEmbeddingProvider implements EmbeddingProvider {\n  private openai: OpenAIEmbeddingProvider;\n  private local: LocalEmbeddingProvider;\n  private useOpenAI: boolean;\n\n  constructor(dimensions = 1536) {\n    this.openai = new OpenAIEmbeddingProvider();\n    this.local = new LocalEmbeddingProvider(dimensions);\n    this.useOpenAI = !!process.env['OPENAI_API_KEY'];\n\n    if (!this.useOpenAI) {\n      logger.warn('OPENAI_API_KEY not set, using local embeddings');\n    }\n  }\n\n  async createEmbedding(text: string): Promise<number[]> {\n    if (this.useOpenAI) {\n      try {\n        return await this.openai.createEmbedding(text);\n      } catch (error: unknown) {\n        logger.warn(\n          'OpenAI embedding failed, falling back to local',\n          error instanceof Error ? error : undefined\n        );\n        this.useOpenAI = false; // Disable for future calls\n      }\n    }\n\n    const localEmbedding = await this.local.createEmbedding(text);\n\n    // Pad or truncate to match expected dimensions\n    const targetDimensions = this.getDimensions();\n    if (localEmbedding.length < targetDimensions) {\n      return [\n        ...localEmbedding,\n        ...new Array(targetDimensions - localEmbedding.length).fill(0),\n      ];\n    }\n    return localEmbedding.slice(0, targetDimensions);\n  }\n\n  getDimensions(): number {\n    return this.useOpenAI\n      ? this.openai.getDimensions()\n      : this.local.getDimensions();\n  }\n\n  getName(): string {\n    return this.useOpenAI\n      ? this.openai.getName()\n      : `Hybrid-${this.local.getName()}`;\n  }\n}\n\n// Factory function\nexport function createEmbeddingProvider(\n  type?: 'openai' | 'local' | 'hybrid'\n): EmbeddingProvider {\n  switch (type) {\n    case 'openai':\n      return new OpenAIEmbeddingProvider();\n    case 'local':\n      return new LocalEmbeddingProvider();\n    case 'hybrid':\n    default:\n      return new HybridEmbeddingProvider();\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,cAAc;AACvB,OAAO,YAAY;AAEnB,SAAS,OAAO,KAAa,cAA+B;AAC1D,QAAM,QAAQ,QAAQ,IAAI,GAAG;AAC7B,MAAI,UAAU,QAAW;AACvB,QAAI,iBAAiB,OAAW,QAAO;AACvC,UAAM,IAAI,MAAM,wBAAwB,GAAG,cAAc;AAAA,EAC3D;AACA,SAAO;AACT;AAEA,SAAS,eAAe,KAAiC;AACvD,SAAO,QAAQ,IAAI,GAAG;AACxB;AAaO,MAAM,wBAAqD;AAAA,EACxD;AAAA,EACA;AAAA,EACA;AAAA,EAER,YAAY,QAAQ,0BAA0B;AAC5C,SAAK,SAAS,QAAQ,IAAI,gBAAgB;AAC1C,SAAK,QAAQ;AACb,SAAK,aAAa,UAAU,2BAA2B,OAAO;AAAA,EAChE;AAAA,EAEA,MAAM,gBAAgB,MAAiC;AACrD,QAAI,CAAC,KAAK,QAAQ;AAChB,YAAM,IAAI,MAAM,gDAAgD;AAAA,IAClE;AAEA,QAAI;AACF,YAAM,WAAW,MAAM,MAAM,wCAAwC;AAAA,QACnE,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,gBAAgB;AAAA,UAChB,eAAe,UAAU,KAAK,MAAM;AAAA,QACtC;AAAA,QACA,MAAM,KAAK,UAAU;AAAA,UACnB,OAAO;AAAA,UACP,OAAO,KAAK;AAAA,QACd,CAAC;AAAA,MACH,CAAC;AAED,UAAI,CAAC,SAAS,IAAI;AAChB,cAAM,IAAI,MAAM,qBAAqB,SAAS,UAAU,EAAE;AAAA,MAC5D;AAEA,YAAM,OAAQ,MAAM,SAAS,KAAK;AAGlC,aAAO,KAAK,KAAK,CAAC,EAAE;AAAA,IACtB,SAAS,OAAgB;AACvB,aAAO;AAAA,QACL;AAAA,QACA,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AAAA,MAC1D;AACA,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEA,gBAAwB;AACtB,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,UAAkB;AAChB,WAAO,UAAU,KAAK,KAAK;AAAA,EAC7B;AACF;AAMO,MAAM,uBAAoD;AAAA,EACvD;AAAA,EACA,aAAkC,oBAAI,IAAI;AAAA,EAC1C,MAA2B,oBAAI,IAAI;AAAA,EACnC,gBAAgB;AAAA,EAExB,YAAY,aAAa,KAAK;AAC5B,SAAK,aAAa;AAAA,EACpB;AAAA,EAEQ,SAAS,MAAwB;AACvC,WAAO,KACJ,YAAY,EACZ,QAAQ,YAAY,GAAG,EACvB,MAAM,KAAK,EACX,OAAO,CAAC,UAAU,MAAM,SAAS,CAAC;AAAA,EACvC;AAAA,EAEQ,cAAc,MAAwB;AAE5C,UAAM,OAAO,OAAO,WAAW,QAAQ,EAAE,OAAO,IAAI,EAAE,OAAO;AAC7D,UAAM,SAAS,IAAI,MAAM,KAAK,UAAU,EAAE,KAAK,CAAC;AAGhD,aAAS,IAAI,GAAG,IAAI,KAAK,IAAI,KAAK,QAAQ,KAAK,UAAU,GAAG,KAAK;AAC/D,YAAM,SAAS,KAAK,CAAC,IAAI,OAAO;AAChC,aAAO,CAAC,IAAI;AAAA,IACd;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,gBAAgB,MAAiC;AACrD,UAAM,SAAS,KAAK,SAAS,IAAI;AACjC,UAAM,SAAS,IAAI,MAAM,KAAK,UAAU,EAAE,KAAK,CAAC;AAEhD,QAAI,OAAO,WAAW,GAAG;AACvB,aAAO;AAAA,IACT;AAGA,UAAM,WAAW,oBAAI,IAAoB;AAGzC,eAAW,SAAS,QAAQ;AAC1B,eAAS,IAAI,QAAQ,SAAS,IAAI,KAAK,KAAK,KAAK,CAAC;AAAA,IACpD;AAGA,SAAK;AACL,eAAW,SAAS,IAAI,IAAI,MAAM,GAAG;AACnC,UAAI,CAAC,KAAK,WAAW,IAAI,KAAK,GAAG;AAC/B,aAAK,WAAW,IAAI,OAAO,KAAK,WAAW,IAAI;AAAA,MACjD;AACA,WAAK,IAAI,IAAI,QAAQ,KAAK,IAAI,IAAI,KAAK,KAAK,KAAK,CAAC;AAAA,IACpD;AAGA,QAAI,cAAc;AAElB,eAAW,CAAC,OAAO,IAAI,KAAK,SAAS,QAAQ,GAAG;AAC9C,YAAM,KAAK,OAAO,OAAO;AACzB,YAAM,UAAU,KAAK,IAAI,IAAI,KAAK,KAAK;AACvC,YAAM,MAAM,KAAK,KAAK,KAAK,gBAAgB,MAAM,UAAU,EAAE;AAC7D,YAAM,SAAS,KAAK;AAEpB,YAAM,aAAa,KAAK,cAAc,KAAK;AAC3C,eAAS,IAAI,GAAG,IAAI,KAAK,YAAY,KAAK;AACxC,eAAO,CAAC,KAAK,WAAW,CAAC,IAAI;AAAA,MAC/B;AACA,qBAAe;AAAA,IACjB;AAGA,QAAI,cAAc,GAAG;AACnB,YAAM,YAAY,KAAK;AAAA,QACrB,OAAO,OAAO,CAAC,KAAK,QAAQ,MAAM,MAAM,KAAK,CAAC;AAAA,MAChD;AACA,UAAI,YAAY,GAAG;AACjB,iBAAS,IAAI,GAAG,IAAI,KAAK,YAAY,KAAK;AACxC,iBAAO,CAAC,KAAK;AAAA,QACf;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,gBAAwB;AACtB,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,UAAkB;AAChB,WAAO;AAAA,EACT;AACF;AAKO,MAAM,wBAAqD;AAAA,EACxD;AAAA,EACA;AAAA,EACA;AAAA,EAER,YAAY,aAAa,MAAM;AAC7B,SAAK,SAAS,IAAI,wBAAwB;AAC1C,SAAK,QAAQ,IAAI,uBAAuB,UAAU;AAClD,SAAK,YAAY,CAAC,CAAC,QAAQ,IAAI,gBAAgB;AAE/C,QAAI,CAAC,KAAK,WAAW;AACnB,aAAO,KAAK,gDAAgD;AAAA,IAC9D;AAAA,EACF;AAAA,EAEA,MAAM,gBAAgB,MAAiC;AACrD,QAAI,KAAK,WAAW;AAClB,UAAI;AACF,eAAO,MAAM,KAAK,OAAO,gBAAgB,IAAI;AAAA,MAC/C,SAAS,OAAgB;AACvB,eAAO;AAAA,UACL;AAAA,UACA,iBAAiB,QAAQ,QAAQ;AAAA,QACnC;AACA,aAAK,YAAY;AAAA,MACnB;AAAA,IACF;AAEA,UAAM,iBAAiB,MAAM,KAAK,MAAM,gBAAgB,IAAI;AAG5D,UAAM,mBAAmB,KAAK,cAAc;AAC5C,QAAI,eAAe,SAAS,kBAAkB;AAC5C,aAAO;AAAA,QACL,GAAG;AAAA,QACH,GAAG,IAAI,MAAM,mBAAmB,eAAe,MAAM,EAAE,KAAK,CAAC;AAAA,MAC/D;AAAA,IACF;AACA,WAAO,eAAe,MAAM,GAAG,gBAAgB;AAAA,EACjD;AAAA,EAEA,gBAAwB;AACtB,WAAO,KAAK,YACR,KAAK,OAAO,cAAc,IAC1B,KAAK,MAAM,cAAc;AAAA,EAC/B;AAAA,EAEA,UAAkB;AAChB,WAAO,KAAK,YACR,KAAK,OAAO,QAAQ,IACpB,UAAU,KAAK,MAAM,QAAQ,CAAC;AAAA,EACpC;AACF;AAGO,SAAS,wBACd,MACmB;AACnB,UAAQ,MAAM;AAAA,IACZ,KAAK;AACH,aAAO,IAAI,wBAAwB;AAAA,IACrC,KAAK;AACH,aAAO,IAAI,uBAAuB;AAAA,IACpC,KAAK;AAAA,IACL;AACE,aAAO,IAAI,wBAAwB;AAAA,EACvC;AACF;",
   "names": []
 }

package/dist/integrations/pg-aiguide/semantic-search.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/integrations/pg-aiguide/semantic-search.ts"],
-  "sourcesContent": ["import { Pool } from 'pg';\nimport { logger } from '../../core/monitoring/logger.js';\nimport {\n  EmbeddingProvider,\n  createEmbeddingProvider,\n} from './embedding-provider.js';\nimport { sanitizeSQLIdentifier } from '../../validation/schemas.js';\n\nexport interface SemanticSearchConfig {\n  pool: Pool;\n  tableName: string;\n  embeddingColumn: string;\n  contentColumn: string;\n  vectorDimensions: number;\n  embeddingProvider?: EmbeddingProvider;\n}\n\nexport interface SearchResult {\n  id: string;\n  content: string;\n  similarity: number;\n  metadata?: Record<string, any>;\n}\n\nexport class SemanticSearch {\n  private pool: Pool;\n  private config: SemanticSearchConfig;\n  private embeddingProvider: EmbeddingProvider;\n\n  constructor(config: SemanticSearchConfig) {\n    this.pool = config.pool;\n    this.config = config;\n    this.embeddingProvider =\n      config.embeddingProvider || createEmbeddingProvider('hybrid');\n\n    // Verify dimensions match\n    if (this.embeddingProvider.getDimensions() !== config.vectorDimensions) {\n      logger.warn(\n        `Embedding provider dimensions (${this.embeddingProvider.getDimensions()}) ` +\n          `don't match config (${config.vectorDimensions}). Using provider dimensions.`\n      );\n      this.config.vectorDimensions = this.embeddingProvider.getDimensions();\n    }\n  }\n\n  async createEmbedding(text: string): Promise<number[]> {\n    return this.embeddingProvider.createEmbedding(text);\n  }\n\n  async indexContent(\n    id: string,\n    content: string,\n    metadata?: Record<string, any>\n  ): Promise<void> {\n    const embedding = await this.createEmbedding(content);\n\n    const query = `\n      INSERT INTO ${this.config.tableName} (id, ${this.config.contentColumn}, ${this.config.embeddingColumn}, metadata)\n      VALUES ($1, $2, $3, $4)\n      ON CONFLICT (id) DO UPDATE\n      SET ${this.config.contentColumn} = $2,\n          ${this.config.embeddingColumn} = $3,\n          metadata = $4\n    `;\n\n    await this.pool.query(query, [\n      id,\n      content,\n      `[${embedding.join(',')}]`,\n      metadata ? JSON.stringify(metadata) : null,\n    ]);\n  }\n\n  async search(\n    query: string,\n    limit = 10,\n    threshold = 0.7\n  ): Promise<SearchResult[]> {\n    const queryEmbedding = await this.createEmbedding(query);\n\n    // Sanitize all identifiers to prevent SQL injection\n    const sanitizedTable = sanitizeSQLIdentifier(this.config.tableName);\n    const sanitizedContent = sanitizeSQLIdentifier(this.config.contentColumn);\n    const sanitizedEmbedding = sanitizeSQLIdentifier(\n      this.config.embeddingColumn\n    );\n\n    const searchQuery = `\n      SELECT \n        id,\n        ${sanitizedContent} as content,\n        metadata,\n        1 - (${sanitizedEmbedding} <=> $1::vector) as similarity\n      FROM ${sanitizedTable}\n      WHERE 1 - (${sanitizedEmbedding} <=> $1::vector) > $2\n      ORDER BY ${sanitizedEmbedding} <=> $1::vector\n      LIMIT $3\n    `;\n\n    const result = await this.pool.query(searchQuery, [\n      `[${queryEmbedding.join(',')}]`,\n      threshold,\n      limit,\n    ]);\n\n    return result.rows.map((row: any) => ({\n      id: row.id,\n      content: row.content,\n      similarity: row.similarity,\n      metadata: row.metadata,\n    }));\n  }\n\n  async findSimilar(id: string, limit = 10): Promise<SearchResult[]> {\n    // Sanitize all identifiers to prevent SQL injection\n    const sanitizedTable = sanitizeSQLIdentifier(this.config.tableName);\n    const sanitizedContent = sanitizeSQLIdentifier(this.config.contentColumn);\n    const sanitizedEmbedding = sanitizeSQLIdentifier(\n      this.config.embeddingColumn\n    );\n\n    const query = `\n      WITH target AS (\n        SELECT ${sanitizedEmbedding} as embedding\n        FROM ${sanitizedTable}\n        WHERE id = $1\n      )\n      SELECT \n        t.id,\n        t.${sanitizedContent} as content,\n        t.metadata,\n        1 - (t.${sanitizedEmbedding} <=> target.embedding) as similarity\n      FROM ${sanitizedTable} t, target\n      WHERE t.id != $1\n      ORDER BY t.${this.config.embeddingColumn} <=> target.embedding\n      LIMIT $2\n    `;\n\n    const result = await this.pool.query(query, [id, limit]);\n\n    return result.rows.map((row: any) => ({\n      id: row.id,\n      content: row.content,\n      similarity: row.similarity,\n      metadata: row.metadata,\n    }));\n  }\n\n  async cluster(\n    k: number,\n    maxIterations = 10\n  ): Promise<Map<number, SearchResult[]>> {\n    // Sanitize all identifiers to prevent SQL injection\n    const sanitizedTable = sanitizeSQLIdentifier(this.config.tableName);\n    const sanitizedContent = sanitizeSQLIdentifier(this.config.contentColumn);\n    const sanitizedEmbedding = sanitizeSQLIdentifier(\n      this.config.embeddingColumn\n    );\n\n    // K-means clustering using pgvector\n    const query = `\n      WITH clusters AS (\n        SELECT \n          id,\n          ${sanitizedContent} as content,\n          metadata,\n          kmeans(${sanitizedEmbedding}, $1, $2) OVER () as cluster_id\n        FROM ${sanitizedTable}\n      )\n      SELECT * FROM clusters ORDER BY cluster_id\n    `;\n\n    const result = await this.pool.query(query, [k, maxIterations]);\n\n    const clusterMap = new Map<number, SearchResult[]>();\n\n    for (const row of result.rows) {\n      const clusterId = row.cluster_id;\n      if (!clusterMap.has(clusterId)) {\n        clusterMap.set(clusterId, []);\n      }\n\n      clusterMap.get(clusterId)!.push({\n        id: row.id,\n        content: row.content,\n        similarity: 1.0, // Cluster membership\n        metadata: row.metadata,\n      });\n    }\n\n    return clusterMap;\n  }\n\n  async reindex(): Promise<void> {\n    // Sanitize table name to prevent SQL injection\n    const sanitizedTable = sanitizeSQLIdentifier(this.config.tableName);\n\n    // Rebuild the IVFFlat index for better performance\n    // Using sanitized identifier prevents SQL injection\n    const indexName = `idx_${sanitizedTable}_embedding`;\n    const sanitizedIndex = sanitizeSQLIdentifier(indexName);\n\n    const query = `REINDEX INDEX CONCURRENTLY ${sanitizedIndex}`;\n\n    try {\n      await this.pool.query(query);\n      logger.info(`Reindexed ${sanitizedTable} embeddings`);\n    } catch (error) {\n      logger.error(\n        'Failed to reindex embeddings',\n        error instanceof Error ? error : undefined\n      );\n      throw error;\n    }\n  }\n\n  async getStats(): Promise<{\n    totalDocuments: number;\n    avgSimilarity: number;\n    indexSize: string;\n  }> {\n    // Sanitize all identifiers to prevent SQL injection\n    const sanitizedTable = sanitizeSQLIdentifier(this.config.tableName);\n    const sanitizedEmbedding = sanitizeSQLIdentifier(\n      this.config.embeddingColumn\n    );\n    const indexName = `idx_${sanitizedTable}_embedding`;\n\n    const statsQuery = `\n      SELECT \n        COUNT(*) as total,\n        AVG(\n          1 - (${sanitizedEmbedding} <=> (\n            SELECT AVG(${sanitizedEmbedding})::vector \n            FROM ${sanitizedTable}\n          ))\n        ) as avg_similarity,\n        pg_size_pretty(\n          pg_relation_size($1::regclass)\n        ) as index_size\n      FROM ${sanitizedTable}\n    `;\n\n    const result = await this.pool.query(statsQuery, [indexName]);\n    const row: any = result.rows[0];\n\n    return {\n      totalDocuments: parseInt(row.total),\n      avgSimilarity: parseFloat(row.avg_similarity) || 0,\n      indexSize: row.index_size || '0 bytes',\n    };\n  }\n}\n"],
-  "mappings": "AACA,SAAS,cAAc;AACvB;AAAA,EAEE;AAAA,OACK;AACP,SAAS,6BAA6B;AAkB/B,MAAM,eAAe;AAAA,EAClB;AAAA,EACA;AAAA,EACA;AAAA,EAER,YAAY,QAA8B;AACxC,SAAK,OAAO,OAAO;AACnB,SAAK,SAAS;AACd,SAAK,oBACH,OAAO,qBAAqB,wBAAwB,QAAQ;AAG9D,QAAI,KAAK,kBAAkB,cAAc,MAAM,OAAO,kBAAkB;AACtE,aAAO;AAAA,QACL,kCAAkC,KAAK,kBAAkB,cAAc,CAAC,yBAC/C,OAAO,gBAAgB;AAAA,MAClD;AACA,WAAK,OAAO,mBAAmB,KAAK,kBAAkB,cAAc;AAAA,IACtE;AAAA,EACF;AAAA,EAEA,MAAM,gBAAgB,MAAiC;AACrD,WAAO,KAAK,kBAAkB,gBAAgB,IAAI;AAAA,EACpD;AAAA,EAEA,MAAM,aACJ,IACA,SACA,UACe;AACf,UAAM,YAAY,MAAM,KAAK,gBAAgB,OAAO;AAEpD,UAAM,QAAQ;AAAA,oBACE,KAAK,OAAO,SAAS,SAAS,KAAK,OAAO,aAAa,KAAK,KAAK,OAAO,eAAe;AAAA;AAAA;AAAA,YAG/F,KAAK,OAAO,aAAa;AAAA,YACzB,KAAK,OAAO,eAAe;AAAA;AAAA;AAInC,UAAM,KAAK,KAAK,MAAM,OAAO;AAAA,MAC3B;AAAA,MACA;AAAA,MACA,IAAI,UAAU,KAAK,GAAG,CAAC;AAAA,MACvB,WAAW,KAAK,UAAU,QAAQ,IAAI;AAAA,IACxC,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,OACJ,OACA,QAAQ,IACR,YAAY,KACa;AACzB,UAAM,iBAAiB,MAAM,KAAK,gBAAgB,KAAK;AAGvD,UAAM,iBAAiB,sBAAsB,KAAK,OAAO,SAAS;AAClE,UAAM,mBAAmB,sBAAsB,KAAK,OAAO,aAAa;AACxE,UAAM,qBAAqB;AAAA,MACzB,KAAK,OAAO;AAAA,IACd;AAEA,UAAM,cAAc;AAAA;AAAA;AAAA,UAGd,gBAAgB;AAAA;AAAA,eAEX,kBAAkB;AAAA,aACpB,cAAc;AAAA,mBACR,kBAAkB;AAAA,iBACpB,kBAAkB;AAAA;AAAA;AAI/B,UAAM,SAAS,MAAM,KAAK,KAAK,MAAM,aAAa;AAAA,MAChD,IAAI,eAAe,KAAK,GAAG,CAAC;AAAA,MAC5B;AAAA,MACA;AAAA,IACF,CAAC;AAED,WAAO,OAAO,KAAK,IAAI,CAAC,SAAc;AAAA,MACpC,IAAI,IAAI;AAAA,MACR,SAAS,IAAI;AAAA,MACb,YAAY,IAAI;AAAA,MAChB,UAAU,IAAI;AAAA,IAChB,EAAE;AAAA,EACJ;AAAA,EAEA,MAAM,YAAY,IAAY,QAAQ,IAA6B;AAEjE,UAAM,iBAAiB,sBAAsB,KAAK,OAAO,SAAS;AAClE,UAAM,mBAAmB,sBAAsB,KAAK,OAAO,aAAa;AACxE,UAAM,qBAAqB;AAAA,MACzB,KAAK,OAAO;AAAA,IACd;AAEA,UAAM,QAAQ;AAAA;AAAA,iBAED,kBAAkB;AAAA,eACpB,cAAc;AAAA;AAAA;AAAA;AAAA;AAAA,YAKjB,gBAAgB;AAAA;AAAA,iBAEX,kBAAkB;AAAA,aACtB,cAAc;AAAA;AAAA,mBAER,KAAK,OAAO,eAAe;AAAA;AAAA;AAI1C,UAAM,SAAS,MAAM,KAAK,KAAK,MAAM,OAAO,CAAC,IAAI,KAAK,CAAC;AAEvD,WAAO,OAAO,KAAK,IAAI,CAAC,SAAc;AAAA,MACpC,IAAI,IAAI;AAAA,MACR,SAAS,IAAI;AAAA,MACb,YAAY,IAAI;AAAA,MAChB,UAAU,IAAI;AAAA,IAChB,EAAE;AAAA,EACJ;AAAA,EAEA,MAAM,QACJ,GACA,gBAAgB,IACsB;AAEtC,UAAM,iBAAiB,sBAAsB,KAAK,OAAO,SAAS;AAClE,UAAM,mBAAmB,sBAAsB,KAAK,OAAO,aAAa;AACxE,UAAM,qBAAqB;AAAA,MACzB,KAAK,OAAO;AAAA,IACd;AAGA,UAAM,QAAQ;AAAA;AAAA;AAAA;AAAA,YAIN,gBAAgB;AAAA;AAAA,mBAET,kBAAkB;AAAA,eACtB,cAAc;AAAA;AAAA;AAAA;AAKzB,UAAM,SAAS,MAAM,KAAK,KAAK,MAAM,OAAO,CAAC,GAAG,aAAa,CAAC;AAE9D,UAAM,aAAa,oBAAI,IAA4B;AAEnD,eAAW,OAAO,OAAO,MAAM;AAC7B,YAAM,YAAY,IAAI;AACtB,UAAI,CAAC,WAAW,IAAI,SAAS,GAAG;AAC9B,mBAAW,IAAI,WAAW,CAAC,CAAC;AAAA,MAC9B;AAEA,iBAAW,IAAI,SAAS,EAAG,KAAK;AAAA,QAC9B,IAAI,IAAI;AAAA,QACR,SAAS,IAAI;AAAA,QACb,YAAY;AAAA;AAAA,QACZ,UAAU,IAAI;AAAA,MAChB,CAAC;AAAA,IACH;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,UAAyB;AAE7B,UAAM,iBAAiB,sBAAsB,KAAK,OAAO,SAAS;AAIlE,UAAM,YAAY,OAAO,cAAc;AACvC,UAAM,iBAAiB,sBAAsB,SAAS;AAEtD,UAAM,QAAQ,8BAA8B,cAAc;AAE1D,QAAI;AACF,YAAM,KAAK,KAAK,MAAM,KAAK;AAC3B,aAAO,KAAK,aAAa,cAAc,aAAa;AAAA,IACtD,SAAS,OAAO;AACd,aAAO;AAAA,QACL;AAAA,QACA,iBAAiB,QAAQ,QAAQ;AAAA,MACnC;AACA,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEA,MAAM,WAIH;AAED,UAAM,iBAAiB,sBAAsB,KAAK,OAAO,SAAS;AAClE,UAAM,qBAAqB;AAAA,MACzB,KAAK,OAAO;AAAA,IACd;AACA,UAAM,YAAY,OAAO,cAAc;AAEvC,UAAM,aAAa;AAAA;AAAA;AAAA;AAAA,iBAIN,kBAAkB;AAAA,yBACV,kBAAkB;AAAA,mBACxB,cAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,aAMpB,cAAc;AAAA;AAGvB,UAAM,SAAS,MAAM,KAAK,KAAK,MAAM,YAAY,CAAC,SAAS,CAAC;AAC5D,UAAM,MAAW,OAAO,KAAK,CAAC;AAE9B,WAAO;AAAA,MACL,gBAAgB,SAAS,IAAI,KAAK;AAAA,MAClC,eAAe,WAAW,IAAI,cAAc,KAAK;AAAA,MACjD,WAAW,IAAI,cAAc;AAAA,IAC/B;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { Pool } from 'pg';\nimport { logger } from '../../core/monitoring/logger.js';\nimport {\n  EmbeddingProvider,\n  createEmbeddingProvider,\n} from './embedding-provider.js';\nimport { sanitizeSQLIdentifier } from '../../validation/schemas.js';\n\nexport interface SemanticSearchConfig {\n  pool: Pool;\n  tableName: string;\n  embeddingColumn: string;\n  contentColumn: string;\n  vectorDimensions: number;\n  embeddingProvider?: EmbeddingProvider;\n}\n\nexport interface SearchResult {\n  id: string;\n  content: string;\n  similarity: number;\n  metadata?: Record<string, any>;\n}\n\nexport class SemanticSearch {\n  private pool: Pool;\n  private config: SemanticSearchConfig;\n  private embeddingProvider: EmbeddingProvider;\n\n  constructor(config: SemanticSearchConfig) {\n    this.pool = config.pool;\n    this.config = config;\n    this.embeddingProvider =\n      config.embeddingProvider || createEmbeddingProvider('hybrid');\n\n    // Verify dimensions match\n    if (this.embeddingProvider.getDimensions() !== config.vectorDimensions) {\n      logger.warn(\n        `Embedding provider dimensions (${this.embeddingProvider.getDimensions()}) ` +\n          `don't match config (${config.vectorDimensions}). Using provider dimensions.`\n      );\n      this.config.vectorDimensions = this.embeddingProvider.getDimensions();\n    }\n  }\n\n  async createEmbedding(text: string): Promise<number[]> {\n    return this.embeddingProvider.createEmbedding(text);\n  }\n\n  async indexContent(\n    id: string,\n    content: string,\n    metadata?: Record<string, any>\n  ): Promise<void> {\n    const embedding = await this.createEmbedding(content);\n\n    const query = `\n      INSERT INTO ${this.config.tableName} (id, ${this.config.contentColumn}, ${this.config.embeddingColumn}, metadata)\n      VALUES ($1, $2, $3, $4)\n      ON CONFLICT (id) DO UPDATE\n      SET ${this.config.contentColumn} = $2,\n          ${this.config.embeddingColumn} = $3,\n          metadata = $4\n    `;\n\n    await this.pool.query(query, [\n      id,\n      content,\n      `[${embedding.join(',')}]`,\n      metadata ? JSON.stringify(metadata) : null,\n    ]);\n  }\n\n  async search(\n    query: string,\n    limit = 10,\n    threshold = 0.7\n  ): Promise<SearchResult[]> {\n    const queryEmbedding = await this.createEmbedding(query);\n\n    // Sanitize all identifiers to prevent SQL injection\n    const sanitizedTable = sanitizeSQLIdentifier(this.config.tableName);\n    const sanitizedContent = sanitizeSQLIdentifier(this.config.contentColumn);\n    const sanitizedEmbedding = sanitizeSQLIdentifier(\n      this.config.embeddingColumn\n    );\n\n    const searchQuery = `\n      SELECT \n        id,\n        ${sanitizedContent} as content,\n        metadata,\n        1 - (${sanitizedEmbedding} <=> $1::vector) as similarity\n      FROM ${sanitizedTable}\n      WHERE 1 - (${sanitizedEmbedding} <=> $1::vector) > $2\n      ORDER BY ${sanitizedEmbedding} <=> $1::vector\n      LIMIT $3\n    `;\n\n    const result = await this.pool.query(searchQuery, [\n      `[${queryEmbedding.join(',')}]`,\n      threshold,\n      limit,\n    ]);\n\n    return result.rows.map((row: any) => ({\n      id: row.id,\n      content: row.content,\n      similarity: row.similarity,\n      metadata: row.metadata,\n    }));\n  }\n\n  async findSimilar(id: string, limit = 10): Promise<SearchResult[]> {\n    // Sanitize all identifiers to prevent SQL injection\n    const sanitizedTable = sanitizeSQLIdentifier(this.config.tableName);\n    const sanitizedContent = sanitizeSQLIdentifier(this.config.contentColumn);\n    const sanitizedEmbedding = sanitizeSQLIdentifier(\n      this.config.embeddingColumn\n    );\n\n    const query = `\n      WITH target AS (\n        SELECT ${sanitizedEmbedding} as embedding\n        FROM ${sanitizedTable}\n        WHERE id = $1\n      )\n      SELECT \n        t.id,\n        t.${sanitizedContent} as content,\n        t.metadata,\n        1 - (t.${sanitizedEmbedding} <=> target.embedding) as similarity\n      FROM ${sanitizedTable} t, target\n      WHERE t.id != $1\n      ORDER BY t.${this.config.embeddingColumn} <=> target.embedding\n      LIMIT $2\n    `;\n\n    const result = await this.pool.query(query, [id, limit]);\n\n    return result.rows.map((row: any) => ({\n      id: row.id,\n      content: row.content,\n      similarity: row.similarity,\n      metadata: row.metadata,\n    }));\n  }\n\n  async cluster(\n    k: number,\n    maxIterations = 10\n  ): Promise<Map<number, SearchResult[]>> {\n    // Sanitize all identifiers to prevent SQL injection\n    const sanitizedTable = sanitizeSQLIdentifier(this.config.tableName);\n    const sanitizedContent = sanitizeSQLIdentifier(this.config.contentColumn);\n    const sanitizedEmbedding = sanitizeSQLIdentifier(\n      this.config.embeddingColumn\n    );\n\n    // K-means clustering using pgvector\n    const query = `\n      WITH clusters AS (\n        SELECT \n          id,\n          ${sanitizedContent} as content,\n          metadata,\n          kmeans(${sanitizedEmbedding}, $1, $2) OVER () as cluster_id\n        FROM ${sanitizedTable}\n      )\n      SELECT * FROM clusters ORDER BY cluster_id\n    `;\n\n    const result = await this.pool.query(query, [k, maxIterations]);\n\n    const clusterMap = new Map<number, SearchResult[]>();\n\n    for (const row of result.rows) {\n      const clusterId = row.cluster_id;\n      if (!clusterMap.has(clusterId)) {\n        clusterMap.set(clusterId, []);\n      }\n\n      clusterMap.get(clusterId)!.push({\n        id: row.id,\n        content: row.content,\n        similarity: 1.0, // Cluster membership\n        metadata: row.metadata,\n      });\n    }\n\n    return clusterMap;\n  }\n\n  async reindex(): Promise<void> {\n    // Sanitize table name to prevent SQL injection\n    const sanitizedTable = sanitizeSQLIdentifier(this.config.tableName);\n\n    // Rebuild the IVFFlat index for better performance\n    // Using sanitized identifier prevents SQL injection\n    const indexName = `idx_${sanitizedTable}_embedding`;\n    const sanitizedIndex = sanitizeSQLIdentifier(indexName);\n\n    const query = `REINDEX INDEX CONCURRENTLY ${sanitizedIndex}`;\n\n    try {\n      await this.pool.query(query);\n      logger.info(`Reindexed ${sanitizedTable} embeddings`);\n    } catch (error: unknown) {\n      logger.error(\n        'Failed to reindex embeddings',\n        error instanceof Error ? error : undefined\n      );\n      throw error;\n    }\n  }\n\n  async getStats(): Promise<{\n    totalDocuments: number;\n    avgSimilarity: number;\n    indexSize: string;\n  }> {\n    // Sanitize all identifiers to prevent SQL injection\n    const sanitizedTable = sanitizeSQLIdentifier(this.config.tableName);\n    const sanitizedEmbedding = sanitizeSQLIdentifier(\n      this.config.embeddingColumn\n    );\n    const indexName = `idx_${sanitizedTable}_embedding`;\n\n    const statsQuery = `\n      SELECT \n        COUNT(*) as total,\n        AVG(\n          1 - (${sanitizedEmbedding} <=> (\n            SELECT AVG(${sanitizedEmbedding})::vector \n            FROM ${sanitizedTable}\n          ))\n        ) as avg_similarity,\n        pg_size_pretty(\n          pg_relation_size($1::regclass)\n        ) as index_size\n      FROM ${sanitizedTable}\n    `;\n\n    const result = await this.pool.query(statsQuery, [indexName]);\n    const row: any = result.rows[0];\n\n    return {\n      totalDocuments: parseInt(row.total),\n      avgSimilarity: parseFloat(row.avg_similarity) || 0,\n      indexSize: row.index_size || '0 bytes',\n    };\n  }\n}\n"],
+  "mappings": "AACA,SAAS,cAAc;AACvB;AAAA,EAEE;AAAA,OACK;AACP,SAAS,6BAA6B;AAkB/B,MAAM,eAAe;AAAA,EAClB;AAAA,EACA;AAAA,EACA;AAAA,EAER,YAAY,QAA8B;AACxC,SAAK,OAAO,OAAO;AACnB,SAAK,SAAS;AACd,SAAK,oBACH,OAAO,qBAAqB,wBAAwB,QAAQ;AAG9D,QAAI,KAAK,kBAAkB,cAAc,MAAM,OAAO,kBAAkB;AACtE,aAAO;AAAA,QACL,kCAAkC,KAAK,kBAAkB,cAAc,CAAC,yBAC/C,OAAO,gBAAgB;AAAA,MAClD;AACA,WAAK,OAAO,mBAAmB,KAAK,kBAAkB,cAAc;AAAA,IACtE;AAAA,EACF;AAAA,EAEA,MAAM,gBAAgB,MAAiC;AACrD,WAAO,KAAK,kBAAkB,gBAAgB,IAAI;AAAA,EACpD;AAAA,EAEA,MAAM,aACJ,IACA,SACA,UACe;AACf,UAAM,YAAY,MAAM,KAAK,gBAAgB,OAAO;AAEpD,UAAM,QAAQ;AAAA,oBACE,KAAK,OAAO,SAAS,SAAS,KAAK,OAAO,aAAa,KAAK,KAAK,OAAO,eAAe;AAAA;AAAA;AAAA,YAG/F,KAAK,OAAO,aAAa;AAAA,YACzB,KAAK,OAAO,eAAe;AAAA;AAAA;AAInC,UAAM,KAAK,KAAK,MAAM,OAAO;AAAA,MAC3B;AAAA,MACA;AAAA,MACA,IAAI,UAAU,KAAK,GAAG,CAAC;AAAA,MACvB,WAAW,KAAK,UAAU,QAAQ,IAAI;AAAA,IACxC,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,OACJ,OACA,QAAQ,IACR,YAAY,KACa;AACzB,UAAM,iBAAiB,MAAM,KAAK,gBAAgB,KAAK;AAGvD,UAAM,iBAAiB,sBAAsB,KAAK,OAAO,SAAS;AAClE,UAAM,mBAAmB,sBAAsB,KAAK,OAAO,aAAa;AACxE,UAAM,qBAAqB;AAAA,MACzB,KAAK,OAAO;AAAA,IACd;AAEA,UAAM,cAAc;AAAA;AAAA;AAAA,UAGd,gBAAgB;AAAA;AAAA,eAEX,kBAAkB;AAAA,aACpB,cAAc;AAAA,mBACR,kBAAkB;AAAA,iBACpB,kBAAkB;AAAA;AAAA;AAI/B,UAAM,SAAS,MAAM,KAAK,KAAK,MAAM,aAAa;AAAA,MAChD,IAAI,eAAe,KAAK,GAAG,CAAC;AAAA,MAC5B;AAAA,MACA;AAAA,IACF,CAAC;AAED,WAAO,OAAO,KAAK,IAAI,CAAC,SAAc;AAAA,MACpC,IAAI,IAAI;AAAA,MACR,SAAS,IAAI;AAAA,MACb,YAAY,IAAI;AAAA,MAChB,UAAU,IAAI;AAAA,IAChB,EAAE;AAAA,EACJ;AAAA,EAEA,MAAM,YAAY,IAAY,QAAQ,IAA6B;AAEjE,UAAM,iBAAiB,sBAAsB,KAAK,OAAO,SAAS;AAClE,UAAM,mBAAmB,sBAAsB,KAAK,OAAO,aAAa;AACxE,UAAM,qBAAqB;AAAA,MACzB,KAAK,OAAO;AAAA,IACd;AAEA,UAAM,QAAQ;AAAA;AAAA,iBAED,kBAAkB;AAAA,eACpB,cAAc;AAAA;AAAA;AAAA;AAAA;AAAA,YAKjB,gBAAgB;AAAA;AAAA,iBAEX,kBAAkB;AAAA,aACtB,cAAc;AAAA;AAAA,mBAER,KAAK,OAAO,eAAe;AAAA;AAAA;AAI1C,UAAM,SAAS,MAAM,KAAK,KAAK,MAAM,OAAO,CAAC,IAAI,KAAK,CAAC;AAEvD,WAAO,OAAO,KAAK,IAAI,CAAC,SAAc;AAAA,MACpC,IAAI,IAAI;AAAA,MACR,SAAS,IAAI;AAAA,MACb,YAAY,IAAI;AAAA,MAChB,UAAU,IAAI;AAAA,IAChB,EAAE;AAAA,EACJ;AAAA,EAEA,MAAM,QACJ,GACA,gBAAgB,IACsB;AAEtC,UAAM,iBAAiB,sBAAsB,KAAK,OAAO,SAAS;AAClE,UAAM,mBAAmB,sBAAsB,KAAK,OAAO,aAAa;AACxE,UAAM,qBAAqB;AAAA,MACzB,KAAK,OAAO;AAAA,IACd;AAGA,UAAM,QAAQ;AAAA;AAAA;AAAA;AAAA,YAIN,gBAAgB;AAAA;AAAA,mBAET,kBAAkB;AAAA,eACtB,cAAc;AAAA;AAAA;AAAA;AAKzB,UAAM,SAAS,MAAM,KAAK,KAAK,MAAM,OAAO,CAAC,GAAG,aAAa,CAAC;AAE9D,UAAM,aAAa,oBAAI,IAA4B;AAEnD,eAAW,OAAO,OAAO,MAAM;AAC7B,YAAM,YAAY,IAAI;AACtB,UAAI,CAAC,WAAW,IAAI,SAAS,GAAG;AAC9B,mBAAW,IAAI,WAAW,CAAC,CAAC;AAAA,MAC9B;AAEA,iBAAW,IAAI,SAAS,EAAG,KAAK;AAAA,QAC9B,IAAI,IAAI;AAAA,QACR,SAAS,IAAI;AAAA,QACb,YAAY;AAAA;AAAA,QACZ,UAAU,IAAI;AAAA,MAChB,CAAC;AAAA,IACH;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,UAAyB;AAE7B,UAAM,iBAAiB,sBAAsB,KAAK,OAAO,SAAS;AAIlE,UAAM,YAAY,OAAO,cAAc;AACvC,UAAM,iBAAiB,sBAAsB,SAAS;AAEtD,UAAM,QAAQ,8BAA8B,cAAc;AAE1D,QAAI;AACF,YAAM,KAAK,KAAK,MAAM,KAAK;AAC3B,aAAO,KAAK,aAAa,cAAc,aAAa;AAAA,IACtD,SAAS,OAAgB;AACvB,aAAO;AAAA,QACL;AAAA,QACA,iBAAiB,QAAQ,QAAQ;AAAA,MACnC;AACA,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEA,MAAM,WAIH;AAED,UAAM,iBAAiB,sBAAsB,KAAK,OAAO,SAAS;AAClE,UAAM,qBAAqB;AAAA,MACzB,KAAK,OAAO;AAAA,IACd;AACA,UAAM,YAAY,OAAO,cAAc;AAEvC,UAAM,aAAa;AAAA;AAAA;AAAA;AAAA,iBAIN,kBAAkB;AAAA,yBACV,kBAAkB;AAAA,mBACxB,cAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,aAMpB,cAAc;AAAA;AAGvB,UAAM,SAAS,MAAM,KAAK,KAAK,MAAM,YAAY,CAAC,SAAS,CAAC;AAC5D,UAAM,MAAW,OAAO,KAAK,CAAC;AAE9B,WAAO;AAAA,MACL,gBAAgB,SAAS,IAAI,KAAK;AAAA,MAClC,eAAe,WAAW,IAAI,cAAc,KAAK;AAAA,MACjD,WAAW,IAAI,cAAc;AAAA,IAC/B;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/mcp/stackmemory-mcp-server.js

@@ -14,7 +14,18 @@ import {
 import { FrameManager } from "../core/context/frame-manager.js";
 import { AgentTaskManager } from "../agents/core/agent-task-manager.js";
 import { logger } from "../core/monitoring/logger.js";
-const PROJECT_ROOT = process.env.STACKMEMORY_PROJECT || process.cwd();
+function getEnv(key, defaultValue) {
+  const value = process.env[key];
+  if (value === void 0) {
+    if (defaultValue !== void 0) return defaultValue;
+    throw new Error(`Environment variable ${key} is required`);
+  }
+  return value;
+}
+function getOptionalEnv(key) {
+  return process.env[key];
+}
+const PROJECT_ROOT = process.env["STACKMEMORY_PROJECT"] || process.cwd();
 const stackmemoryDir = join(PROJECT_ROOT, ".stackmemory");
 if (!existsSync(stackmemoryDir)) {
   mkdirSync(stackmemoryDir, { recursive: true });

package/dist/mcp/stackmemory-mcp-server.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/mcp/stackmemory-mcp-server.ts"],
-  "sourcesContent": ["#!/usr/bin/env node\n/**\n * StackMemory MCP Server - Integrates with Claude Desktop\n *\n * This MCP server exposes StackMemory's agent task management\n * and context persistence to Claude sessions automatically.\n */\n\nimport { Server } from '@modelcontextprotocol/sdk/server/index.js';\nimport { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';\nimport {\n  CallToolRequestSchema,\n  ListToolsRequestSchema,\n  Tool,\n} from '@modelcontextprotocol/sdk/types.js';\nimport Database from 'better-sqlite3';\nimport { join } from 'path';\nimport { existsSync, mkdirSync } from 'fs';\nimport {\n  PebblesTaskStore,\n  TaskPriority,\n} from '../features/tasks/pebbles-task-store.js';\nimport { FrameManager } from '../core/context/frame-manager.js';\nimport { AgentTaskManager } from '../agents/core/agent-task-manager.js';\nimport { logger } from '../core/monitoring/logger.js';\n\n// Initialize project root (can be overridden by environment variable)\nconst PROJECT_ROOT = process.env.STACKMEMORY_PROJECT || process.cwd();\n\n// Ensure StackMemory directory exists\nconst stackmemoryDir = join(PROJECT_ROOT, '.stackmemory');\nif (!existsSync(stackmemoryDir)) {\n  mkdirSync(stackmemoryDir, { recursive: true });\n}\n\n// Initialize database and managers\nconst db = new Database(join(stackmemoryDir, 'cache.db'));\nconst taskStore = new PebblesTaskStore(PROJECT_ROOT, db);\nconst frameManager = new FrameManager(db, PROJECT_ROOT, undefined);\nconst agentTaskManager = new AgentTaskManager(taskStore, frameManager);\n\n// Track active Claude session\n// eslint-disable-next-line @typescript-eslint/no-unused-vars\nlet _claudeSessionId: string | null = null;\nlet claudeFrameId: string | null = null;\n\n// Type definitions for tool arguments\ninterface CreateTaskArgs {\n  title: string;\n  description?: string;\n  priority?: TaskPriority;\n  tags?: string[];\n  autoExecute?: boolean;\n}\n\ninterface ExecuteTaskArgs {\n  taskId: string;\n  maxTurns?: number;\n}\n\ninterface AgentTurnArgs {\n  sessionId: string;\n  action: string;\n  context?: Record<string, unknown>;\n}\n\ninterface TaskStatusArgs {\n  taskId?: string;\n}\n\ninterface SaveContextArgs {\n  content: string;\n  type: 'decision' | 'constraint' | 'learning' | 'code' | 'error';\n  importance?: number;\n}\n\ninterface LoadContextArgs {\n  query: string;\n  limit?: number;\n  frameId?: string;\n}\n\ninterface SessionArgs {\n  sessionId: string;\n}\n\ninterface TaskArgs {\n  taskId: string;\n}\n\n/**\n * Available tools for Claude\n */\nconst TOOLS: Tool[] = [\n  {\n    name: 'create_task',\n    description:\n      'Create a new task in StackMemory with automatic agent assistance',\n    inputSchema: {\n      type: 'object',\n      properties: {\n        title: { type: 'string', description: 'Task title' },\n        description: {\n          type: 'string',\n          description: 'Detailed task description',\n        },\n        priority: {\n          type: 'string',\n          enum: ['low', 'medium', 'high', 'urgent'],\n          description: 'Task priority',\n        },\n        tags: {\n          type: 'array',\n          items: { type: 'string' },\n          description: 'Tags for categorization',\n        },\n        autoExecute: {\n          type: 'boolean',\n          description: 'Automatically start agent execution',\n        },\n      },\n      required: ['title'],\n    },\n  },\n  {\n    name: 'execute_task',\n    description: 'Execute a task using AI agent with verification loops',\n    inputSchema: {\n      type: 'object',\n      properties: {\n        taskId: { type: 'string', description: 'Task ID to execute' },\n        maxTurns: {\n          type: 'number',\n          description: 'Maximum turns (default 10)',\n          minimum: 1,\n          maximum: 20,\n        },\n      },\n      required: ['taskId'],\n    },\n  },\n  {\n    name: 'task_status',\n    description: 'Get status of a task or all active tasks',\n    inputSchema: {\n      type: 'object',\n      properties: {\n        taskId: { type: 'string', description: 'Optional specific task ID' },\n      },\n    },\n  },\n  {\n    name: 'save_context',\n    description: 'Save important context from current Claude conversation',\n    inputSchema: {\n      type: 'object',\n      properties: {\n        content: { type: 'string', description: 'Context to save' },\n        type: {\n          type: 'string',\n          enum: ['decision', 'constraint', 'learning', 'code', 'error'],\n          description: 'Type of context',\n        },\n        importance: {\n          type: 'number',\n          minimum: 0,\n          maximum: 1,\n          description: 'Importance score (0-1)',\n        },\n      },\n      required: ['content', 'type'],\n    },\n  },\n  {\n    name: 'load_context',\n    description: 'Load relevant context from StackMemory',\n    inputSchema: {\n      type: 'object',\n      properties: {\n        query: { type: 'string', description: 'Search query for context' },\n        limit: {\n          type: 'number',\n          description: 'Maximum results',\n          minimum: 1,\n          maximum: 20,\n        },\n        frameId: { type: 'string', description: 'Optional specific frame ID' },\n      },\n      required: ['query'],\n    },\n  },\n  {\n    name: 'agent_turn',\n    description: 'Execute a single turn in an active agent session',\n    inputSchema: {\n      type: 'object',\n      properties: {\n        sessionId: { type: 'string', description: 'Active session ID' },\n        action: { type: 'string', description: 'Action to perform' },\n        context: {\n          type: 'object',\n          description: 'Additional context for the action',\n        },\n      },\n      required: ['sessionId', 'action'],\n    },\n  },\n  {\n    name: 'session_feedback',\n    description: 'Get feedback from the last agent turn',\n    inputSchema: {\n      type: 'object',\n      properties: {\n        sessionId: { type: 'string', description: 'Session ID' },\n      },\n      required: ['sessionId'],\n    },\n  },\n  {\n    name: 'breakdown_task',\n    description: 'Break down a complex task into subtasks',\n    inputSchema: {\n      type: 'object',\n      properties: {\n        taskId: { type: 'string', description: 'Task ID to break down' },\n      },\n      required: ['taskId'],\n    },\n  },\n  {\n    name: 'list_active_sessions',\n    description: 'List all active agent sessions',\n    inputSchema: {\n      type: 'object',\n      properties: {},\n    },\n  },\n  {\n    name: 'retry_session',\n    description: 'Retry a failed session with learned context',\n    inputSchema: {\n      type: 'object',\n      properties: {\n        sessionId: { type: 'string', description: 'Session ID to retry' },\n      },\n      required: ['sessionId'],\n    },\n  },\n];\n\n/**\n * Create MCP server\n */\nconst server = new Server(\n  {\n    name: 'stackmemory',\n    version: '1.0.0',\n  },\n  {\n    capabilities: {\n      tools: {},\n    },\n  }\n);\n\n/**\n * Handle tool listing\n */\nserver.setRequestHandler(ListToolsRequestSchema, async () => ({\n  tools: TOOLS,\n}));\n\n/**\n * Handle tool execution\n */\nserver.setRequestHandler(CallToolRequestSchema, async (request) => {\n  const { name, arguments: args } = request.params;\n\n  if (!args) {\n    return {\n      content: [\n        {\n          type: 'text',\n          text: 'Error: No arguments provided',\n        },\n      ],\n    };\n  }\n\n  try {\n    switch (name) {\n      case 'create_task': {\n        const taskArgs = args as unknown as CreateTaskArgs;\n\n        // Initialize Claude session frame if needed\n        if (!claudeFrameId) {\n          claudeFrameId = frameManager.createFrame({\n            type: 'task',\n            name: 'Claude AI Session',\n            inputs: { source: 'mcp', timestamp: new Date().toISOString() },\n          });\n        }\n\n        const taskId = taskStore.createTask({\n          title: taskArgs.title,\n          description: taskArgs.description,\n          priority: taskArgs.priority || 'medium',\n          frameId: claudeFrameId,\n          tags: taskArgs.tags || ['claude-generated'],\n        });\n\n        // Auto-execute if requested\n        if (taskArgs.autoExecute) {\n          const session = await agentTaskManager.startTaskSession(\n            taskId,\n            claudeFrameId\n          );\n          _claudeSessionId = session.id;\n\n          return {\n            content: [\n              {\n                type: 'text',\n                text: `Task created: ${taskId}\\nAgent session started: ${session.id}\\nReady for execution with ${session.maxTurns} turns available.`,\n              },\n            ],\n          };\n        }\n\n        return {\n          content: [\n            {\n              type: 'text',\n              text: `Task created successfully: ${taskId}`,\n            },\n          ],\n        };\n      }\n\n      case 'execute_task': {\n        const execArgs = args as unknown as ExecuteTaskArgs;\n\n        if (!claudeFrameId) {\n          claudeFrameId = frameManager.createFrame({\n            type: 'task',\n            name: 'Claude Task Execution',\n            inputs: { taskId: execArgs.taskId },\n          });\n        }\n\n        const session = await agentTaskManager.startTaskSession(\n          execArgs.taskId,\n          claudeFrameId\n        );\n\n        if (execArgs.maxTurns) {\n          session.maxTurns = execArgs.maxTurns;\n        }\n\n        _claudeSessionId = session.id;\n\n        return {\n          content: [\n            {\n              type: 'text',\n              text: `Started agent session: ${session.id}\\nTask: ${execArgs.taskId}\\nMax turns: ${session.maxTurns}\\nUse 'agent_turn' to execute actions.`,\n            },\n          ],\n        };\n      }\n\n      case 'agent_turn': {\n        const turnArgs = args as unknown as AgentTurnArgs;\n\n        const result = await agentTaskManager.executeTurn(\n          turnArgs.sessionId,\n          turnArgs.action,\n          turnArgs.context || {}\n        );\n\n        const verificationSummary = result.verificationResults\n          .map((v) => `${v.passed ? '\u2713' : '\u2717'} ${v.verifierId}: ${v.message}`)\n          .join('\\n');\n\n        return {\n          content: [\n            {\n              type: 'text',\n              text: `Turn executed:\\nSuccess: ${result.success}\\nShould Continue: ${result.shouldContinue}\\n\\nFeedback:\\n${result.feedback}\\n\\nVerifications:\\n${verificationSummary}`,\n            },\n          ],\n        };\n      }\n\n      case 'task_status': {\n        const statusArgs = args as TaskStatusArgs;\n\n        if (statusArgs.taskId) {\n          const task = taskStore.getTask(statusArgs.taskId);\n          if (!task) {\n            return {\n              content: [\n                { type: 'text', text: `Task ${statusArgs.taskId} not found` },\n              ],\n            };\n          }\n\n          return {\n            content: [\n              {\n                type: 'text',\n                text: `Task: ${task.title}\\nStatus: ${task.status}\\nPriority: ${task.priority}\\nCreated: ${new Date(task.created_at * 1000).toLocaleString()}\\nDescription: ${task.description || 'N/A'}`,\n              },\n            ],\n          };\n        }\n\n        const activeTasks = taskStore.getActiveTasks();\n        const taskList = activeTasks\n          .map((t) => `- ${t.id}: ${t.title} (${t.status}, ${t.priority})`)\n          .join('\\n');\n\n        return {\n          content: [\n            {\n              type: 'text',\n              text: `Active tasks (${activeTasks.length}):\\n${taskList || 'No active tasks'}`,\n            },\n          ],\n        };\n      }\n\n      case 'save_context': {\n        const saveArgs = args as unknown as SaveContextArgs;\n\n        if (!claudeFrameId) {\n          claudeFrameId = frameManager.createFrame({\n            type: 'task',\n            name: 'Claude Context',\n            inputs: { source: 'mcp' },\n          });\n        }\n\n        const eventId = frameManager.addEvent(\n          'observation',\n          {\n            type: saveArgs.type,\n            content: saveArgs.content,\n            importance: saveArgs.importance || 0.5,\n            source: 'claude-mcp',\n            timestamp: new Date().toISOString(),\n          },\n          claudeFrameId\n        );\n\n        return {\n          content: [\n            {\n              type: 'text',\n              text: `Context saved to frame ${claudeFrameId} as event ${eventId}`,\n            },\n          ],\n        };\n      }\n\n      case 'load_context': {\n        const loadArgs = args as unknown as LoadContextArgs;\n\n        // Get active frame path and recent events as context\n        const frames = frameManager.getActiveFramePath();\n        const limit = loadArgs.limit || 10;\n        const events = loadArgs.frameId\n          ? frameManager.getFrameEvents(loadArgs.frameId, limit)\n          : [];\n\n        const contextText = frames\n          .map(\n            (frame) =>\n              `[Frame ${frame.type}] ${frame.name}: ${frame.digest_text || 'No digest'}`\n          )\n          .concat(\n            events.map(\n              (event) =>\n                `[Event ${event.event_type}] ${new Date(event.ts).toLocaleString()}: ${JSON.stringify(\n                  event.payload\n                ).substring(0, 100)}...`\n            )\n          )\n          .join('\\n\\n');\n\n        return {\n          content: [\n            {\n              type: 'text',\n              text: `Query: ${loadArgs.query}\\nFound ${frames.length} frames and ${events.length} events:\\n\\n${contextText || 'No matching context found'}`,\n            },\n          ],\n        };\n      }\n\n      case 'breakdown_task': {\n        const breakdownArgs = args as unknown as TaskArgs;\n\n        const task = taskStore.getTask(breakdownArgs.taskId);\n        if (!task) {\n          return {\n            content: [\n              { type: 'text', text: `Task ${breakdownArgs.taskId} not found` },\n            ],\n          };\n        }\n\n        // This would use LLM in production, for now return structured breakdown\n        const subtasks = [\n          `1. Analyze: ${task.title} - Understand requirements (2 turns)`,\n          `2. Design: ${task.title} - Create implementation plan (2 turns)`,\n          `3. Implement: ${task.title} - Build core functionality (5 turns)`,\n          `4. Test: ${task.title} - Validate and verify (3 turns)`,\n          `5. Polish: ${task.title} - Documentation and cleanup (1 turn)`,\n        ].join('\\n');\n\n        return {\n          content: [\n            {\n              type: 'text',\n              text: `Task breakdown for: ${task.title}\\n\\n${subtasks}\\n\\nTotal estimated turns: 13`,\n            },\n          ],\n        };\n      }\n\n      case 'list_active_sessions': {\n        const sessions = agentTaskManager.getActiveSessions();\n        const sessionList = sessions\n          .map(\n            (s) =>\n              `- ${s.sessionId}: Task ${s.taskId} (Turn ${s.turnCount}, ${s.status})`\n          )\n          .join('\\n');\n\n        return {\n          content: [\n            {\n              type: 'text',\n              text: `Active sessions (${sessions.length}):\\n${sessionList || 'No active sessions'}`,\n            },\n          ],\n        };\n      }\n\n      case 'retry_session': {\n        const retryArgs = args as unknown as SessionArgs;\n\n        const newSession = await agentTaskManager.retrySession(\n          retryArgs.sessionId\n        );\n\n        if (!newSession) {\n          return {\n            content: [\n              {\n                type: 'text',\n                text: 'Cannot retry session (max retries reached or session is still active)',\n              },\n            ],\n          };\n        }\n\n        _claudeSessionId = newSession.id;\n\n        return {\n          content: [\n            {\n              type: 'text',\n              text: `Retry session started: ${newSession.id}\\nTask: ${newSession.taskId}\\nIncorporating learned context from previous attempts.`,\n            },\n          ],\n        };\n      }\n\n      case 'session_feedback': {\n        const feedbackArgs = args as unknown as SessionArgs;\n\n        // Get the session to access feedback\n        const sessions = agentTaskManager.getActiveSessions();\n        const session = sessions.find(\n          (s) => s.sessionId === feedbackArgs.sessionId\n        );\n\n        if (!session) {\n          return {\n            content: [\n              {\n                type: 'text',\n                text: `Session ${feedbackArgs.sessionId} not found or not active`,\n              },\n            ],\n          };\n        }\n\n        return {\n          content: [\n            {\n              type: 'text',\n              text: `Session ${feedbackArgs.sessionId}:\\nTurn: ${session.turnCount}\\nStatus: ${session.status}\\n\\nReady for next action.`,\n            },\n          ],\n        };\n      }\n\n      default:\n        throw new Error(`Unknown tool: ${name}`);\n    }\n  } catch (error) {\n    logger.error(\n      'MCP tool execution failed',\n      error instanceof Error ? error : undefined\n    );\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `Error: ${error instanceof Error ? error.message : String(error)}`,\n        },\n      ],\n    };\n  }\n});\n\n/**\n * Start the server\n */\nasync function main() {\n  const transport = new StdioServerTransport();\n  await server.connect(transport);\n\n  logger.info('StackMemory MCP Server started', {\n    projectRoot: PROJECT_ROOT,\n    tools: TOOLS.map((t) => t.name),\n  });\n}\n\n// Handle graceful shutdown\nprocess.on('SIGINT', async () => {\n  logger.info('Shutting down StackMemory MCP Server');\n\n  // Close frame if open\n  if (claudeFrameId) {\n    try {\n      frameManager.closeFrame(claudeFrameId, {\n        summary: 'Claude session ended',\n        timestamp: new Date().toISOString(),\n      });\n    } catch (error) {\n      logger.error(\n        'Error closing frame',\n        error instanceof Error ? error : undefined\n      );\n    }\n  }\n\n  db.close();\n  process.exit(0);\n});\n\nmain().catch((error) => {\n  logger.error(\n    'Failed to start MCP server',\n    error instanceof Error ? error : undefined\n  );\n  process.exit(1);\n});\n"],
-  "mappings": ";AAQA,SAAS,cAAc;AACvB,SAAS,4BAA4B;AACrC;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AACP,OAAO,cAAc;AACrB,SAAS,YAAY;AACrB,SAAS,YAAY,iBAAiB;AACtC;AAAA,EACE;AAAA,OAEK;AACP,SAAS,oBAAoB;AAC7B,SAAS,wBAAwB;AACjC,SAAS,cAAc;AAGvB,MAAM,eAAe,QAAQ,IAAI,uBAAuB,QAAQ,IAAI;AAGpE,MAAM,iBAAiB,KAAK,cAAc,cAAc;AACxD,IAAI,CAAC,WAAW,cAAc,GAAG;AAC/B,YAAU,gBAAgB,EAAE,WAAW,KAAK,CAAC;AAC/C;AAGA,MAAM,KAAK,IAAI,SAAS,KAAK,gBAAgB,UAAU,CAAC;AACxD,MAAM,YAAY,IAAI,iBAAiB,cAAc,EAAE;AACvD,MAAM,eAAe,IAAI,aAAa,IAAI,cAAc,MAAS;AACjE,MAAM,mBAAmB,IAAI,iBAAiB,WAAW,YAAY;AAIrE,IAAI,mBAAkC;AACtC,IAAI,gBAA+B;AAiDnC,MAAM,QAAgB;AAAA,EACpB;AAAA,IACE,MAAM;AAAA,IACN,aACE;AAAA,IACF,aAAa;AAAA,MACX,MAAM;AAAA,MACN,YAAY;AAAA,QACV,OAAO,EAAE,MAAM,UAAU,aAAa,aAAa;AAAA,QACnD,aAAa;AAAA,UACX,MAAM;AAAA,UACN,aAAa;AAAA,QACf;AAAA,QACA,UAAU;AAAA,UACR,MAAM;AAAA,UACN,MAAM,CAAC,OAAO,UAAU,QAAQ,QAAQ;AAAA,UACxC,aAAa;AAAA,QACf;AAAA,QACA,MAAM;AAAA,UACJ,MAAM;AAAA,UACN,OAAO,EAAE,MAAM,SAAS;AAAA,UACxB,aAAa;AAAA,QACf;AAAA,QACA,aAAa;AAAA,UACX,MAAM;AAAA,UACN,aAAa;AAAA,QACf;AAAA,MACF;AAAA,MACA,UAAU,CAAC,OAAO;AAAA,IACpB;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,aAAa;AAAA,MACX,MAAM;AAAA,MACN,YAAY;AAAA,QACV,QAAQ,EAAE,MAAM,UAAU,aAAa,qBAAqB;AAAA,QAC5D,UAAU;AAAA,UACR,MAAM;AAAA,UACN,aAAa;AAAA,UACb,SAAS;AAAA,UACT,SAAS;AAAA,QACX;AAAA,MACF;AAAA,MACA,UAAU,CAAC,QAAQ;AAAA,IACrB;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,aAAa;AAAA,MACX,MAAM;AAAA,MACN,YAAY;AAAA,QACV,QAAQ,EAAE,MAAM,UAAU,aAAa,4BAA4B;AAAA,MACrE;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,aAAa;AAAA,MACX,MAAM;AAAA,MACN,YAAY;AAAA,QACV,SAAS,EAAE,MAAM,UAAU,aAAa,kBAAkB;AAAA,QAC1D,MAAM;AAAA,UACJ,MAAM;AAAA,UACN,MAAM,CAAC,YAAY,cAAc,YAAY,QAAQ,OAAO;AAAA,UAC5D,aAAa;AAAA,QACf;AAAA,QACA,YAAY;AAAA,UACV,MAAM;AAAA,UACN,SAAS;AAAA,UACT,SAAS;AAAA,UACT,aAAa;AAAA,QACf;AAAA,MACF;AAAA,MACA,UAAU,CAAC,WAAW,MAAM;AAAA,IAC9B;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,aAAa;AAAA,MACX,MAAM;AAAA,MACN,YAAY;AAAA,QACV,OAAO,EAAE,MAAM,UAAU,aAAa,2BAA2B;AAAA,QACjE,OAAO;AAAA,UACL,MAAM;AAAA,UACN,aAAa;AAAA,UACb,SAAS;AAAA,UACT,SAAS;AAAA,QACX;AAAA,QACA,SAAS,EAAE,MAAM,UAAU,aAAa,6BAA6B;AAAA,MACvE;AAAA,MACA,UAAU,CAAC,OAAO;AAAA,IACpB;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,aAAa;AAAA,MACX,MAAM;AAAA,MACN,YAAY;AAAA,QACV,WAAW,EAAE,MAAM,UAAU,aAAa,oBAAoB;AAAA,QAC9D,QAAQ,EAAE,MAAM,UAAU,aAAa,oBAAoB;AAAA,QAC3D,SAAS;AAAA,UACP,MAAM;AAAA,UACN,aAAa;AAAA,QACf;AAAA,MACF;AAAA,MACA,UAAU,CAAC,aAAa,QAAQ;AAAA,IAClC;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,aAAa;AAAA,MACX,MAAM;AAAA,MACN,YAAY;AAAA,QACV,WAAW,EAAE,MAAM,UAAU,aAAa,aAAa;AAAA,MACzD;AAAA,MACA,UAAU,CAAC,WAAW;AAAA,IACxB;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,aAAa;AAAA,MACX,MAAM;AAAA,MACN,YAAY;AAAA,QACV,QAAQ,EAAE,MAAM,UAAU,aAAa,wBAAwB;AAAA,MACjE;AAAA,MACA,UAAU,CAAC,QAAQ;AAAA,IACrB;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,aAAa;AAAA,MACX,MAAM;AAAA,MACN,YAAY,CAAC;AAAA,IACf;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,aAAa;AAAA,MACX,MAAM;AAAA,MACN,YAAY;AAAA,QACV,WAAW,EAAE,MAAM,UAAU,aAAa,sBAAsB;AAAA,MAClE;AAAA,MACA,UAAU,CAAC,WAAW;AAAA,IACxB;AAAA,EACF;AACF;AAKA,MAAM,SAAS,IAAI;AAAA,EACjB;AAAA,IACE,MAAM;AAAA,IACN,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,cAAc;AAAA,MACZ,OAAO,CAAC;AAAA,IACV;AAAA,EACF;AACF;AAKA,OAAO,kBAAkB,wBAAwB,aAAa;AAAA,EAC5D,OAAO;AACT,EAAE;AAKF,OAAO,kBAAkB,uBAAuB,OAAO,YAAY;AACjE,QAAM,EAAE,MAAM,WAAW,KAAK,IAAI,QAAQ;AAE1C,MAAI,CAAC,MAAM;AACT,WAAO;AAAA,MACL,SAAS;AAAA,QACP;AAAA,UACE,MAAM;AAAA,UACN,MAAM;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AACF,YAAQ,MAAM;AAAA,MACZ,KAAK,eAAe;AAClB,cAAM,WAAW;AAGjB,YAAI,CAAC,eAAe;AAClB,0BAAgB,aAAa,YAAY;AAAA,YACvC,MAAM;AAAA,YACN,MAAM;AAAA,YACN,QAAQ,EAAE,QAAQ,OAAO,YAAW,oBAAI,KAAK,GAAE,YAAY,EAAE;AAAA,UAC/D,CAAC;AAAA,QACH;AAEA,cAAM,SAAS,UAAU,WAAW;AAAA,UAClC,OAAO,SAAS;AAAA,UAChB,aAAa,SAAS;AAAA,UACtB,UAAU,SAAS,YAAY;AAAA,UAC/B,SAAS;AAAA,UACT,MAAM,SAAS,QAAQ,CAAC,kBAAkB;AAAA,QAC5C,CAAC;AAGD,YAAI,SAAS,aAAa;AACxB,gBAAM,UAAU,MAAM,iBAAiB;AAAA,YACrC;AAAA,YACA;AAAA,UACF;AACA,6BAAmB,QAAQ;AAE3B,iBAAO;AAAA,YACL,SAAS;AAAA,cACP;AAAA,gBACE,MAAM;AAAA,gBACN,MAAM,iBAAiB,MAAM;AAAA,yBAA4B,QAAQ,EAAE;AAAA,2BAA8B,QAAQ,QAAQ;AAAA,cACnH;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAEA,eAAO;AAAA,UACL,SAAS;AAAA,YACP;AAAA,cACE,MAAM;AAAA,cACN,MAAM,8BAA8B,MAAM;AAAA,YAC5C;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,MAEA,KAAK,gBAAgB;AACnB,cAAM,WAAW;AAEjB,YAAI,CAAC,eAAe;AAClB,0BAAgB,aAAa,YAAY;AAAA,YACvC,MAAM;AAAA,YACN,MAAM;AAAA,YACN,QAAQ,EAAE,QAAQ,SAAS,OAAO;AAAA,UACpC,CAAC;AAAA,QACH;AAEA,cAAM,UAAU,MAAM,iBAAiB;AAAA,UACrC,SAAS;AAAA,UACT;AAAA,QACF;AAEA,YAAI,SAAS,UAAU;AACrB,kBAAQ,WAAW,SAAS;AAAA,QAC9B;AAEA,2BAAmB,QAAQ;AAE3B,eAAO;AAAA,UACL,SAAS;AAAA,YACP;AAAA,cACE,MAAM;AAAA,cACN,MAAM,0BAA0B,QAAQ,EAAE;AAAA,QAAW,SAAS,MAAM;AAAA,aAAgB,QAAQ,QAAQ;AAAA;AAAA,YACtG;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,MAEA,KAAK,cAAc;AACjB,cAAM,WAAW;AAEjB,cAAM,SAAS,MAAM,iBAAiB;AAAA,UACpC,SAAS;AAAA,UACT,SAAS;AAAA,UACT,SAAS,WAAW,CAAC;AAAA,QACvB;AAEA,cAAM,sBAAsB,OAAO,oBAChC,IAAI,CAAC,MAAM,GAAG,EAAE,SAAS,WAAM,QAAG,IAAI,EAAE,UAAU,KAAK,EAAE,OAAO,EAAE,EAClE,KAAK,IAAI;AAEZ,eAAO;AAAA,UACL,SAAS;AAAA,YACP;AAAA,cACE,MAAM;AAAA,cACN,MAAM;AAAA,WAA4B,OAAO,OAAO;AAAA,mBAAsB,OAAO,cAAc;AAAA;AAAA;AAAA,EAAkB,OAAO,QAAQ;AAAA;AAAA;AAAA,EAAuB,mBAAmB;AAAA,YACxK;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,MAEA,KAAK,eAAe;AAClB,cAAM,aAAa;AAEnB,YAAI,WAAW,QAAQ;AACrB,gBAAM,OAAO,UAAU,QAAQ,WAAW,MAAM;AAChD,cAAI,CAAC,MAAM;AACT,mBAAO;AAAA,cACL,SAAS;AAAA,gBACP,EAAE,MAAM,QAAQ,MAAM,QAAQ,WAAW,MAAM,aAAa;AAAA,cAC9D;AAAA,YACF;AAAA,UACF;AAEA,iBAAO;AAAA,YACL,SAAS;AAAA,cACP;AAAA,gBACE,MAAM;AAAA,gBACN,MAAM,SAAS,KAAK,KAAK;AAAA,UAAa,KAAK,MAAM;AAAA,YAAe,KAAK,QAAQ;AAAA,WAAc,IAAI,KAAK,KAAK,aAAa,GAAI,EAAE,eAAe,CAAC;AAAA,eAAkB,KAAK,eAAe,KAAK;AAAA,cACzL;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAEA,cAAM,cAAc,UAAU,eAAe;AAC7C,cAAM,WAAW,YACd,IAAI,CAAC,MAAM,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,KAAK,EAAE,MAAM,KAAK,EAAE,QAAQ,GAAG,EAC/D,KAAK,IAAI;AAEZ,eAAO;AAAA,UACL,SAAS;AAAA,YACP;AAAA,cACE,MAAM;AAAA,cACN,MAAM,iBAAiB,YAAY,MAAM;AAAA,EAAO,YAAY,iBAAiB;AAAA,YAC/E;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,MAEA,KAAK,gBAAgB;AACnB,cAAM,WAAW;AAEjB,YAAI,CAAC,eAAe;AAClB,0BAAgB,aAAa,YAAY;AAAA,YACvC,MAAM;AAAA,YACN,MAAM;AAAA,YACN,QAAQ,EAAE,QAAQ,MAAM;AAAA,UAC1B,CAAC;AAAA,QACH;AAEA,cAAM,UAAU,aAAa;AAAA,UAC3B;AAAA,UACA;AAAA,YACE,MAAM,SAAS;AAAA,YACf,SAAS,SAAS;AAAA,YAClB,YAAY,SAAS,cAAc;AAAA,YACnC,QAAQ;AAAA,YACR,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,UACpC;AAAA,UACA;AAAA,QACF;AAEA,eAAO;AAAA,UACL,SAAS;AAAA,YACP;AAAA,cACE,MAAM;AAAA,cACN,MAAM,0BAA0B,aAAa,aAAa,OAAO;AAAA,YACnE;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,MAEA,KAAK,gBAAgB;AACnB,cAAM,WAAW;AAGjB,cAAM,SAAS,aAAa,mBAAmB;AAC/C,cAAM,QAAQ,SAAS,SAAS;AAChC,cAAM,SAAS,SAAS,UACpB,aAAa,eAAe,SAAS,SAAS,KAAK,IACnD,CAAC;AAEL,cAAM,cAAc,OACjB;AAAA,UACC,CAAC,UACC,UAAU,MAAM,IAAI,KAAK,MAAM,IAAI,KAAK,MAAM,eAAe,WAAW;AAAA,QAC5E,EACC;AAAA,UACC,OAAO;AAAA,YACL,CAAC,UACC,UAAU,MAAM,UAAU,KAAK,IAAI,KAAK,MAAM,EAAE,EAAE,eAAe,CAAC,KAAK,KAAK;AAAA,cAC1E,MAAM;AAAA,YACR,EAAE,UAAU,GAAG,GAAG,CAAC;AAAA,UACvB;AAAA,QACF,EACC,KAAK,MAAM;AAEd,eAAO;AAAA,UACL,SAAS;AAAA,YACP;AAAA,cACE,MAAM;AAAA,cACN,MAAM,UAAU,SAAS,KAAK;AAAA,QAAW,OAAO,MAAM,eAAe,OAAO,MAAM;AAAA;AAAA,EAAe,eAAe,2BAA2B;AAAA,YAC7I;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,MAEA,KAAK,kBAAkB;AACrB,cAAM,gBAAgB;AAEtB,cAAM,OAAO,UAAU,QAAQ,cAAc,MAAM;AACnD,YAAI,CAAC,MAAM;AACT,iBAAO;AAAA,YACL,SAAS;AAAA,cACP,EAAE,MAAM,QAAQ,MAAM,QAAQ,cAAc,MAAM,aAAa;AAAA,YACjE;AAAA,UACF;AAAA,QACF;AAGA,cAAM,WAAW;AAAA,UACf,eAAe,KAAK,KAAK;AAAA,UACzB,cAAc,KAAK,KAAK;AAAA,UACxB,iBAAiB,KAAK,KAAK;AAAA,UAC3B,YAAY,KAAK,KAAK;AAAA,UACtB,cAAc,KAAK,KAAK;AAAA,QAC1B,EAAE,KAAK,IAAI;AAEX,eAAO;AAAA,UACL,SAAS;AAAA,YACP;AAAA,cACE,MAAM;AAAA,cACN,MAAM,uBAAuB,KAAK,KAAK;AAAA;AAAA,EAAO,QAAQ;AAAA;AAAA;AAAA,YACxD;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,MAEA,KAAK,wBAAwB;AAC3B,cAAM,WAAW,iBAAiB,kBAAkB;AACpD,cAAM,cAAc,SACjB;AAAA,UACC,CAAC,MACC,KAAK,EAAE,SAAS,UAAU,EAAE,MAAM,UAAU,EAAE,SAAS,KAAK,EAAE,MAAM;AAAA,QACxE,EACC,KAAK,IAAI;AAEZ,eAAO;AAAA,UACL,SAAS;AAAA,YACP;AAAA,cACE,MAAM;AAAA,cACN,MAAM,oBAAoB,SAAS,MAAM;AAAA,EAAO,eAAe,oBAAoB;AAAA,YACrF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,MAEA,KAAK,iBAAiB;AACpB,cAAM,YAAY;AAElB,cAAM,aAAa,MAAM,iBAAiB;AAAA,UACxC,UAAU;AAAA,QACZ;AAEA,YAAI,CAAC,YAAY;AACf,iBAAO;AAAA,YACL,SAAS;AAAA,cACP;AAAA,gBACE,MAAM;AAAA,gBACN,MAAM;AAAA,cACR;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAEA,2BAAmB,WAAW;AAE9B,eAAO;AAAA,UACL,SAAS;AAAA,YACP;AAAA,cACE,MAAM;AAAA,cACN,MAAM,0BAA0B,WAAW,EAAE;AAAA,QAAW,WAAW,MAAM;AAAA;AAAA,YAC3E;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,MAEA,KAAK,oBAAoB;AACvB,cAAM,eAAe;AAGrB,cAAM,WAAW,iBAAiB,kBAAkB;AACpD,cAAM,UAAU,SAAS;AAAA,UACvB,CAAC,MAAM,EAAE,cAAc,aAAa;AAAA,QACtC;AAEA,YAAI,CAAC,SAAS;AACZ,iBAAO;AAAA,YACL,SAAS;AAAA,cACP;AAAA,gBACE,MAAM;AAAA,gBACN,MAAM,WAAW,aAAa,SAAS;AAAA,cACzC;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAEA,eAAO;AAAA,UACL,SAAS;AAAA,YACP;AAAA,cACE,MAAM;AAAA,cACN,MAAM,WAAW,aAAa,SAAS;AAAA,QAAY,QAAQ,SAAS;AAAA,UAAa,QAAQ,MAAM;AAAA;AAAA;AAAA,YACjG;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,MAEA;AACE,cAAM,IAAI,MAAM,iBAAiB,IAAI,EAAE;AAAA,IAC3C;AAAA,EACF,SAAS,OAAO;AACd,WAAO;AAAA,MACL;AAAA,MACA,iBAAiB,QAAQ,QAAQ;AAAA,IACnC;AACA,WAAO;AAAA,MACL,SAAS;AAAA,QACP;AAAA,UACE,MAAM;AAAA,UACN,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,QACxE;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF,CAAC;AAKD,eAAe,OAAO;AACpB,QAAM,YAAY,IAAI,qBAAqB;AAC3C,QAAM,OAAO,QAAQ,SAAS;AAE9B,SAAO,KAAK,kCAAkC;AAAA,IAC5C,aAAa;AAAA,IACb,OAAO,MAAM,IAAI,CAAC,MAAM,EAAE,IAAI;AAAA,EAChC,CAAC;AACH;AAGA,QAAQ,GAAG,UAAU,YAAY;AAC/B,SAAO,KAAK,sCAAsC;AAGlD,MAAI,eAAe;AACjB,QAAI;AACF,mBAAa,WAAW,eAAe;AAAA,QACrC,SAAS;AAAA,QACT,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MACpC,CAAC;AAAA,IACH,SAAS,OAAO;AACd,aAAO;AAAA,QACL;AAAA,QACA,iBAAiB,QAAQ,QAAQ;AAAA,MACnC;AAAA,IACF;AAAA,EACF;AAEA,KAAG,MAAM;AACT,UAAQ,KAAK,CAAC;AAChB,CAAC;AAED,KAAK,EAAE,MAAM,CAAC,UAAU;AACtB,SAAO;AAAA,IACL;AAAA,IACA,iBAAiB,QAAQ,QAAQ;AAAA,EACnC;AACA,UAAQ,KAAK,CAAC;AAChB,CAAC;",
+  "sourcesContent": ["#!/usr/bin/env node\n/**\n * StackMemory MCP Server - Integrates with Claude Desktop\n *\n * This MCP server exposes StackMemory's agent task management\n * and context persistence to Claude sessions automatically.\n */\n\nimport { Server } from '@modelcontextprotocol/sdk/server/index.js';\nimport { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';\nimport {\n  CallToolRequestSchema,\n  ListToolsRequestSchema,\n  Tool,\n} from '@modelcontextprotocol/sdk/types.js';\nimport Database from 'better-sqlite3';\nimport { join } from 'path';\nimport { existsSync, mkdirSync } from 'fs';\nimport {\n  PebblesTaskStore,\n  TaskPriority,\n} from '../features/tasks/pebbles-task-store.js';\nimport { FrameManager } from '../core/context/frame-manager.js';\nimport { AgentTaskManager } from '../agents/core/agent-task-manager.js';\nimport { logger } from '../core/monitoring/logger.js';\n// Type-safe environment variable access\nfunction getEnv(key: string, defaultValue?: string): string {\n  const value = process.env[key];\n  if (value === undefined) {\n    if (defaultValue !== undefined) return defaultValue;\n    throw new Error(`Environment variable ${key} is required`);\n  }\n  return value;\n}\n\nfunction getOptionalEnv(key: string): string | undefined {\n  return process.env[key];\n}\n\n// Initialize project root (can be overridden by environment variable)\nconst PROJECT_ROOT = process.env['STACKMEMORY_PROJECT'] || process.cwd();\n\n// Ensure StackMemory directory exists\nconst stackmemoryDir = join(PROJECT_ROOT, '.stackmemory');\nif (!existsSync(stackmemoryDir)) {\n  mkdirSync(stackmemoryDir, { recursive: true });\n}\n\n// Initialize database and managers\nconst db = new Database(join(stackmemoryDir, 'cache.db'));\nconst taskStore = new PebblesTaskStore(PROJECT_ROOT, db);\nconst frameManager = new FrameManager(db, PROJECT_ROOT, undefined);\nconst agentTaskManager = new AgentTaskManager(taskStore, frameManager);\n\n// Track active Claude session\n// eslint-disable-next-line @typescript-eslint/no-unused-vars\nlet _claudeSessionId: string | null = null;\nlet claudeFrameId: string | null = null;\n\n// Type definitions for tool arguments\ninterface CreateTaskArgs {\n  title: string;\n  description?: string;\n  priority?: TaskPriority;\n  tags?: string[];\n  autoExecute?: boolean;\n}\n\ninterface ExecuteTaskArgs {\n  taskId: string;\n  maxTurns?: number;\n}\n\ninterface AgentTurnArgs {\n  sessionId: string;\n  action: string;\n  context?: Record<string, unknown>;\n}\n\ninterface TaskStatusArgs {\n  taskId?: string;\n}\n\ninterface SaveContextArgs {\n  content: string;\n  type: 'decision' | 'constraint' | 'learning' | 'code' | 'error';\n  importance?: number;\n}\n\ninterface LoadContextArgs {\n  query: string;\n  limit?: number;\n  frameId?: string;\n}\n\ninterface SessionArgs {\n  sessionId: string;\n}\n\ninterface TaskArgs {\n  taskId: string;\n}\n\n/**\n * Available tools for Claude\n */\nconst TOOLS: Tool[] = [\n  {\n    name: 'create_task',\n    description:\n      'Create a new task in StackMemory with automatic agent assistance',\n    inputSchema: {\n      type: 'object',\n      properties: {\n        title: { type: 'string', description: 'Task title' },\n        description: {\n          type: 'string',\n          description: 'Detailed task description',\n        },\n        priority: {\n          type: 'string',\n          enum: ['low', 'medium', 'high', 'urgent'],\n          description: 'Task priority',\n        },\n        tags: {\n          type: 'array',\n          items: { type: 'string' },\n          description: 'Tags for categorization',\n        },\n        autoExecute: {\n          type: 'boolean',\n          description: 'Automatically start agent execution',\n        },\n      },\n      required: ['title'],\n    },\n  },\n  {\n    name: 'execute_task',\n    description: 'Execute a task using AI agent with verification loops',\n    inputSchema: {\n      type: 'object',\n      properties: {\n        taskId: { type: 'string', description: 'Task ID to execute' },\n        maxTurns: {\n          type: 'number',\n          description: 'Maximum turns (default 10)',\n          minimum: 1,\n          maximum: 20,\n        },\n      },\n      required: ['taskId'],\n    },\n  },\n  {\n    name: 'task_status',\n    description: 'Get status of a task or all active tasks',\n    inputSchema: {\n      type: 'object',\n      properties: {\n        taskId: { type: 'string', description: 'Optional specific task ID' },\n      },\n    },\n  },\n  {\n    name: 'save_context',\n    description: 'Save important context from current Claude conversation',\n    inputSchema: {\n      type: 'object',\n      properties: {\n        content: { type: 'string', description: 'Context to save' },\n        type: {\n          type: 'string',\n          enum: ['decision', 'constraint', 'learning', 'code', 'error'],\n          description: 'Type of context',\n        },\n        importance: {\n          type: 'number',\n          minimum: 0,\n          maximum: 1,\n          description: 'Importance score (0-1)',\n        },\n      },\n      required: ['content', 'type'],\n    },\n  },\n  {\n    name: 'load_context',\n    description: 'Load relevant context from StackMemory',\n    inputSchema: {\n      type: 'object',\n      properties: {\n        query: { type: 'string', description: 'Search query for context' },\n        limit: {\n          type: 'number',\n          description: 'Maximum results',\n          minimum: 1,\n          maximum: 20,\n        },\n        frameId: { type: 'string', description: 'Optional specific frame ID' },\n      },\n      required: ['query'],\n    },\n  },\n  {\n    name: 'agent_turn',\n    description: 'Execute a single turn in an active agent session',\n    inputSchema: {\n      type: 'object',\n      properties: {\n        sessionId: { type: 'string', description: 'Active session ID' },\n        action: { type: 'string', description: 'Action to perform' },\n        context: {\n          type: 'object',\n          description: 'Additional context for the action',\n        },\n      },\n      required: ['sessionId', 'action'],\n    },\n  },\n  {\n    name: 'session_feedback',\n    description: 'Get feedback from the last agent turn',\n    inputSchema: {\n      type: 'object',\n      properties: {\n        sessionId: { type: 'string', description: 'Session ID' },\n      },\n      required: ['sessionId'],\n    },\n  },\n  {\n    name: 'breakdown_task',\n    description: 'Break down a complex task into subtasks',\n    inputSchema: {\n      type: 'object',\n      properties: {\n        taskId: { type: 'string', description: 'Task ID to break down' },\n      },\n      required: ['taskId'],\n    },\n  },\n  {\n    name: 'list_active_sessions',\n    description: 'List all active agent sessions',\n    inputSchema: {\n      type: 'object',\n      properties: {},\n    },\n  },\n  {\n    name: 'retry_session',\n    description: 'Retry a failed session with learned context',\n    inputSchema: {\n      type: 'object',\n      properties: {\n        sessionId: { type: 'string', description: 'Session ID to retry' },\n      },\n      required: ['sessionId'],\n    },\n  },\n];\n\n/**\n * Create MCP server\n */\nconst server = new Server(\n  {\n    name: 'stackmemory',\n    version: '1.0.0',\n  },\n  {\n    capabilities: {\n      tools: {},\n    },\n  }\n);\n\n/**\n * Handle tool listing\n */\nserver.setRequestHandler(ListToolsRequestSchema, async () => ({\n  tools: TOOLS,\n}));\n\n/**\n * Handle tool execution\n */\nserver.setRequestHandler(CallToolRequestSchema, async (request) => {\n  const { name, arguments: args } = request.params;\n\n  if (!args) {\n    return {\n      content: [\n        {\n          type: 'text',\n          text: 'Error: No arguments provided',\n        },\n      ],\n    };\n  }\n\n  try {\n    switch (name) {\n      case 'create_task': {\n        const taskArgs = args as unknown as CreateTaskArgs;\n\n        // Initialize Claude session frame if needed\n        if (!claudeFrameId) {\n          claudeFrameId = frameManager.createFrame({\n            type: 'task',\n            name: 'Claude AI Session',\n            inputs: { source: 'mcp', timestamp: new Date().toISOString() },\n          });\n        }\n\n        const taskId = taskStore.createTask({\n          title: taskArgs.title,\n          description: taskArgs.description,\n          priority: taskArgs.priority || 'medium',\n          frameId: claudeFrameId,\n          tags: taskArgs.tags || ['claude-generated'],\n        });\n\n        // Auto-execute if requested\n        if (taskArgs.autoExecute) {\n          const session = await agentTaskManager.startTaskSession(\n            taskId,\n            claudeFrameId\n          );\n          _claudeSessionId = session.id;\n\n          return {\n            content: [\n              {\n                type: 'text',\n                text: `Task created: ${taskId}\\nAgent session started: ${session.id}\\nReady for execution with ${session.maxTurns} turns available.`,\n              },\n            ],\n          };\n        }\n\n        return {\n          content: [\n            {\n              type: 'text',\n              text: `Task created successfully: ${taskId}`,\n            },\n          ],\n        };\n      }\n\n      case 'execute_task': {\n        const execArgs = args as unknown as ExecuteTaskArgs;\n\n        if (!claudeFrameId) {\n          claudeFrameId = frameManager.createFrame({\n            type: 'task',\n            name: 'Claude Task Execution',\n            inputs: { taskId: execArgs.taskId },\n          });\n        }\n\n        const session = await agentTaskManager.startTaskSession(\n          execArgs.taskId,\n          claudeFrameId\n        );\n\n        if (execArgs.maxTurns) {\n          session.maxTurns = execArgs.maxTurns;\n        }\n\n        _claudeSessionId = session.id;\n\n        return {\n          content: [\n            {\n              type: 'text',\n              text: `Started agent session: ${session.id}\\nTask: ${execArgs.taskId}\\nMax turns: ${session.maxTurns}\\nUse 'agent_turn' to execute actions.`,\n            },\n          ],\n        };\n      }\n\n      case 'agent_turn': {\n        const turnArgs = args as unknown as AgentTurnArgs;\n\n        const result = await agentTaskManager.executeTurn(\n          turnArgs.sessionId,\n          turnArgs.action,\n          turnArgs.context || {}\n        );\n\n        const verificationSummary = result.verificationResults\n          .map((v) => `${v.passed ? '\u2713' : '\u2717'} ${v.verifierId}: ${v.message}`)\n          .join('\\n');\n\n        return {\n          content: [\n            {\n              type: 'text',\n              text: `Turn executed:\\nSuccess: ${result.success}\\nShould Continue: ${result.shouldContinue}\\n\\nFeedback:\\n${result.feedback}\\n\\nVerifications:\\n${verificationSummary}`,\n            },\n          ],\n        };\n      }\n\n      case 'task_status': {\n        const statusArgs = args as TaskStatusArgs;\n\n        if (statusArgs.taskId) {\n          const task = taskStore.getTask(statusArgs.taskId);\n          if (!task) {\n            return {\n              content: [\n                { type: 'text', text: `Task ${statusArgs.taskId} not found` },\n              ],\n            };\n          }\n\n          return {\n            content: [\n              {\n                type: 'text',\n                text: `Task: ${task.title}\\nStatus: ${task.status}\\nPriority: ${task.priority}\\nCreated: ${new Date(task.created_at * 1000).toLocaleString()}\\nDescription: ${task.description || 'N/A'}`,\n              },\n            ],\n          };\n        }\n\n        const activeTasks = taskStore.getActiveTasks();\n        const taskList = activeTasks\n          .map((t) => `- ${t.id}: ${t.title} (${t.status}, ${t.priority})`)\n          .join('\\n');\n\n        return {\n          content: [\n            {\n              type: 'text',\n              text: `Active tasks (${activeTasks.length}):\\n${taskList || 'No active tasks'}`,\n            },\n          ],\n        };\n      }\n\n      case 'save_context': {\n        const saveArgs = args as unknown as SaveContextArgs;\n\n        if (!claudeFrameId) {\n          claudeFrameId = frameManager.createFrame({\n            type: 'task',\n            name: 'Claude Context',\n            inputs: { source: 'mcp' },\n          });\n        }\n\n        const eventId = frameManager.addEvent(\n          'observation',\n          {\n            type: saveArgs.type,\n            content: saveArgs.content,\n            importance: saveArgs.importance || 0.5,\n            source: 'claude-mcp',\n            timestamp: new Date().toISOString(),\n          },\n          claudeFrameId\n        );\n\n        return {\n          content: [\n            {\n              type: 'text',\n              text: `Context saved to frame ${claudeFrameId} as event ${eventId}`,\n            },\n          ],\n        };\n      }\n\n      case 'load_context': {\n        const loadArgs = args as unknown as LoadContextArgs;\n\n        // Get active frame path and recent events as context\n        const frames = frameManager.getActiveFramePath();\n        const limit = loadArgs.limit || 10;\n        const events = loadArgs.frameId\n          ? frameManager.getFrameEvents(loadArgs.frameId, limit)\n          : [];\n\n        const contextText = frames\n          .map(\n            (frame) =>\n              `[Frame ${frame.type}] ${frame.name}: ${frame.digest_text || 'No digest'}`\n          )\n          .concat(\n            events.map(\n              (event) =>\n                `[Event ${event.event_type}] ${new Date(event.ts).toLocaleString()}: ${JSON.stringify(\n                  event.payload\n                ).substring(0, 100)}...`\n            )\n          )\n          .join('\\n\\n');\n\n        return {\n          content: [\n            {\n              type: 'text',\n              text: `Query: ${loadArgs.query}\\nFound ${frames.length} frames and ${events.length} events:\\n\\n${contextText || 'No matching context found'}`,\n            },\n          ],\n        };\n      }\n\n      case 'breakdown_task': {\n        const breakdownArgs = args as unknown as TaskArgs;\n\n        const task = taskStore.getTask(breakdownArgs.taskId);\n        if (!task) {\n          return {\n            content: [\n              { type: 'text', text: `Task ${breakdownArgs.taskId} not found` },\n            ],\n          };\n        }\n\n        // This would use LLM in production, for now return structured breakdown\n        const subtasks = [\n          `1. Analyze: ${task.title} - Understand requirements (2 turns)`,\n          `2. Design: ${task.title} - Create implementation plan (2 turns)`,\n          `3. Implement: ${task.title} - Build core functionality (5 turns)`,\n          `4. Test: ${task.title} - Validate and verify (3 turns)`,\n          `5. Polish: ${task.title} - Documentation and cleanup (1 turn)`,\n        ].join('\\n');\n\n        return {\n          content: [\n            {\n              type: 'text',\n              text: `Task breakdown for: ${task.title}\\n\\n${subtasks}\\n\\nTotal estimated turns: 13`,\n            },\n          ],\n        };\n      }\n\n      case 'list_active_sessions': {\n        const sessions = agentTaskManager.getActiveSessions();\n        const sessionList = sessions\n          .map(\n            (s) =>\n              `- ${s.sessionId}: Task ${s.taskId} (Turn ${s.turnCount}, ${s.status})`\n          )\n          .join('\\n');\n\n        return {\n          content: [\n            {\n              type: 'text',\n              text: `Active sessions (${sessions.length}):\\n${sessionList || 'No active sessions'}`,\n            },\n          ],\n        };\n      }\n\n      case 'retry_session': {\n        const retryArgs = args as unknown as SessionArgs;\n\n        const newSession = await agentTaskManager.retrySession(\n          retryArgs.sessionId\n        );\n\n        if (!newSession) {\n          return {\n            content: [\n              {\n                type: 'text',\n                text: 'Cannot retry session (max retries reached or session is still active)',\n              },\n            ],\n          };\n        }\n\n        _claudeSessionId = newSession.id;\n\n        return {\n          content: [\n            {\n              type: 'text',\n              text: `Retry session started: ${newSession.id}\\nTask: ${newSession.taskId}\\nIncorporating learned context from previous attempts.`,\n            },\n          ],\n        };\n      }\n\n      case 'session_feedback': {\n        const feedbackArgs = args as unknown as SessionArgs;\n\n        // Get the session to access feedback\n        const sessions = agentTaskManager.getActiveSessions();\n        const session = sessions.find(\n          (s) => s.sessionId === feedbackArgs.sessionId\n        );\n\n        if (!session) {\n          return {\n            content: [\n              {\n                type: 'text',\n                text: `Session ${feedbackArgs.sessionId} not found or not active`,\n              },\n            ],\n          };\n        }\n\n        return {\n          content: [\n            {\n              type: 'text',\n              text: `Session ${feedbackArgs.sessionId}:\\nTurn: ${session.turnCount}\\nStatus: ${session.status}\\n\\nReady for next action.`,\n            },\n          ],\n        };\n      }\n\n      default:\n        throw new Error(`Unknown tool: ${name}`);\n    }\n  } catch (error: unknown) {\n    logger.error(\n      'MCP tool execution failed',\n      error instanceof Error ? error : undefined\n    );\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `Error: ${error instanceof Error ? error.message : String(error)}`,\n        },\n      ],\n    };\n  }\n});\n\n/**\n * Start the server\n */\nasync function main() {\n  const transport = new StdioServerTransport();\n  await server.connect(transport);\n\n  logger.info('StackMemory MCP Server started', {\n    projectRoot: PROJECT_ROOT,\n    tools: TOOLS.map((t) => t.name),\n  });\n}\n\n// Handle graceful shutdown\nprocess.on('SIGINT', async () => {\n  logger.info('Shutting down StackMemory MCP Server');\n\n  // Close frame if open\n  if (claudeFrameId) {\n    try {\n      frameManager.closeFrame(claudeFrameId, {\n        summary: 'Claude session ended',\n        timestamp: new Date().toISOString(),\n      });\n    } catch (error: unknown) {\n      logger.error(\n        'Error closing frame',\n        error instanceof Error ? error : undefined\n      );\n    }\n  }\n\n  db.close();\n  process.exit(0);\n});\n\nmain().catch((error) => {\n  logger.error(\n    'Failed to start MCP server',\n    error instanceof Error ? error : undefined\n  );\n  process.exit(1);\n});\n"],
+  "mappings": ";AAQA,SAAS,cAAc;AACvB,SAAS,4BAA4B;AACrC;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AACP,OAAO,cAAc;AACrB,SAAS,YAAY;AACrB,SAAS,YAAY,iBAAiB;AACtC;AAAA,EACE;AAAA,OAEK;AACP,SAAS,oBAAoB;AAC7B,SAAS,wBAAwB;AACjC,SAAS,cAAc;AAEvB,SAAS,OAAO,KAAa,cAA+B;AAC1D,QAAM,QAAQ,QAAQ,IAAI,GAAG;AAC7B,MAAI,UAAU,QAAW;AACvB,QAAI,iBAAiB,OAAW,QAAO;AACvC,UAAM,IAAI,MAAM,wBAAwB,GAAG,cAAc;AAAA,EAC3D;AACA,SAAO;AACT;AAEA,SAAS,eAAe,KAAiC;AACvD,SAAO,QAAQ,IAAI,GAAG;AACxB;AAGA,MAAM,eAAe,QAAQ,IAAI,qBAAqB,KAAK,QAAQ,IAAI;AAGvE,MAAM,iBAAiB,KAAK,cAAc,cAAc;AACxD,IAAI,CAAC,WAAW,cAAc,GAAG;AAC/B,YAAU,gBAAgB,EAAE,WAAW,KAAK,CAAC;AAC/C;AAGA,MAAM,KAAK,IAAI,SAAS,KAAK,gBAAgB,UAAU,CAAC;AACxD,MAAM,YAAY,IAAI,iBAAiB,cAAc,EAAE;AACvD,MAAM,eAAe,IAAI,aAAa,IAAI,cAAc,MAAS;AACjE,MAAM,mBAAmB,IAAI,iBAAiB,WAAW,YAAY;AAIrE,IAAI,mBAAkC;AACtC,IAAI,gBAA+B;AAiDnC,MAAM,QAAgB;AAAA,EACpB;AAAA,IACE,MAAM;AAAA,IACN,aACE;AAAA,IACF,aAAa;AAAA,MACX,MAAM;AAAA,MACN,YAAY;AAAA,QACV,OAAO,EAAE,MAAM,UAAU,aAAa,aAAa;AAAA,QACnD,aAAa;AAAA,UACX,MAAM;AAAA,UACN,aAAa;AAAA,QACf;AAAA,QACA,UAAU;AAAA,UACR,MAAM;AAAA,UACN,MAAM,CAAC,OAAO,UAAU,QAAQ,QAAQ;AAAA,UACxC,aAAa;AAAA,QACf;AAAA,QACA,MAAM;AAAA,UACJ,MAAM;AAAA,UACN,OAAO,EAAE,MAAM,SAAS;AAAA,UACxB,aAAa;AAAA,QACf;AAAA,QACA,aAAa;AAAA,UACX,MAAM;AAAA,UACN,aAAa;AAAA,QACf;AAAA,MACF;AAAA,MACA,UAAU,CAAC,OAAO;AAAA,IACpB;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,aAAa;AAAA,MACX,MAAM;AAAA,MACN,YAAY;AAAA,QACV,QAAQ,EAAE,MAAM,UAAU,aAAa,qBAAqB;AAAA,QAC5D,UAAU;AAAA,UACR,MAAM;AAAA,UACN,aAAa;AAAA,UACb,SAAS;AAAA,UACT,SAAS;AAAA,QACX;AAAA,MACF;AAAA,MACA,UAAU,CAAC,QAAQ;AAAA,IACrB;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,aAAa;AAAA,MACX,MAAM;AAAA,MACN,YAAY;AAAA,QACV,QAAQ,EAAE,MAAM,UAAU,aAAa,4BAA4B;AAAA,MACrE;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,aAAa;AAAA,MACX,MAAM;AAAA,MACN,YAAY;AAAA,QACV,SAAS,EAAE,MAAM,UAAU,aAAa,kBAAkB;AAAA,QAC1D,MAAM;AAAA,UACJ,MAAM;AAAA,UACN,MAAM,CAAC,YAAY,cAAc,YAAY,QAAQ,OAAO;AAAA,UAC5D,aAAa;AAAA,QACf;AAAA,QACA,YAAY;AAAA,UACV,MAAM;AAAA,UACN,SAAS;AAAA,UACT,SAAS;AAAA,UACT,aAAa;AAAA,QACf;AAAA,MACF;AAAA,MACA,UAAU,CAAC,WAAW,MAAM;AAAA,IAC9B;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,aAAa;AAAA,MACX,MAAM;AAAA,MACN,YAAY;AAAA,QACV,OAAO,EAAE,MAAM,UAAU,aAAa,2BAA2B;AAAA,QACjE,OAAO;AAAA,UACL,MAAM;AAAA,UACN,aAAa;AAAA,UACb,SAAS;AAAA,UACT,SAAS;AAAA,QACX;AAAA,QACA,SAAS,EAAE,MAAM,UAAU,aAAa,6BAA6B;AAAA,MACvE;AAAA,MACA,UAAU,CAAC,OAAO;AAAA,IACpB;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,aAAa;AAAA,MACX,MAAM;AAAA,MACN,YAAY;AAAA,QACV,WAAW,EAAE,MAAM,UAAU,aAAa,oBAAoB;AAAA,QAC9D,QAAQ,EAAE,MAAM,UAAU,aAAa,oBAAoB;AAAA,QAC3D,SAAS;AAAA,UACP,MAAM;AAAA,UACN,aAAa;AAAA,QACf;AAAA,MACF;AAAA,MACA,UAAU,CAAC,aAAa,QAAQ;AAAA,IAClC;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,aAAa;AAAA,MACX,MAAM;AAAA,MACN,YAAY;AAAA,QACV,WAAW,EAAE,MAAM,UAAU,aAAa,aAAa;AAAA,MACzD;AAAA,MACA,UAAU,CAAC,WAAW;AAAA,IACxB;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,aAAa;AAAA,MACX,MAAM;AAAA,MACN,YAAY;AAAA,QACV,QAAQ,EAAE,MAAM,UAAU,aAAa,wBAAwB;AAAA,MACjE;AAAA,MACA,UAAU,CAAC,QAAQ;AAAA,IACrB;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,aAAa;AAAA,MACX,MAAM;AAAA,MACN,YAAY,CAAC;AAAA,IACf;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,aAAa;AAAA,MACX,MAAM;AAAA,MACN,YAAY;AAAA,QACV,WAAW,EAAE,MAAM,UAAU,aAAa,sBAAsB;AAAA,MAClE;AAAA,MACA,UAAU,CAAC,WAAW;AAAA,IACxB;AAAA,EACF;AACF;AAKA,MAAM,SAAS,IAAI;AAAA,EACjB;AAAA,IACE,MAAM;AAAA,IACN,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,cAAc;AAAA,MACZ,OAAO,CAAC;AAAA,IACV;AAAA,EACF;AACF;AAKA,OAAO,kBAAkB,wBAAwB,aAAa;AAAA,EAC5D,OAAO;AACT,EAAE;AAKF,OAAO,kBAAkB,uBAAuB,OAAO,YAAY;AACjE,QAAM,EAAE,MAAM,WAAW,KAAK,IAAI,QAAQ;AAE1C,MAAI,CAAC,MAAM;AACT,WAAO;AAAA,MACL,SAAS;AAAA,QACP;AAAA,UACE,MAAM;AAAA,UACN,MAAM;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,MAAI;AACF,YAAQ,MAAM;AAAA,MACZ,KAAK,eAAe;AAClB,cAAM,WAAW;AAGjB,YAAI,CAAC,eAAe;AAClB,0BAAgB,aAAa,YAAY;AAAA,YACvC,MAAM;AAAA,YACN,MAAM;AAAA,YACN,QAAQ,EAAE,QAAQ,OAAO,YAAW,oBAAI,KAAK,GAAE,YAAY,EAAE;AAAA,UAC/D,CAAC;AAAA,QACH;AAEA,cAAM,SAAS,UAAU,WAAW;AAAA,UAClC,OAAO,SAAS;AAAA,UAChB,aAAa,SAAS;AAAA,UACtB,UAAU,SAAS,YAAY;AAAA,UAC/B,SAAS;AAAA,UACT,MAAM,SAAS,QAAQ,CAAC,kBAAkB;AAAA,QAC5C,CAAC;AAGD,YAAI,SAAS,aAAa;AACxB,gBAAM,UAAU,MAAM,iBAAiB;AAAA,YACrC;AAAA,YACA;AAAA,UACF;AACA,6BAAmB,QAAQ;AAE3B,iBAAO;AAAA,YACL,SAAS;AAAA,cACP;AAAA,gBACE,MAAM;AAAA,gBACN,MAAM,iBAAiB,MAAM;AAAA,yBAA4B,QAAQ,EAAE;AAAA,2BAA8B,QAAQ,QAAQ;AAAA,cACnH;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAEA,eAAO;AAAA,UACL,SAAS;AAAA,YACP;AAAA,cACE,MAAM;AAAA,cACN,MAAM,8BAA8B,MAAM;AAAA,YAC5C;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,MAEA,KAAK,gBAAgB;AACnB,cAAM,WAAW;AAEjB,YAAI,CAAC,eAAe;AAClB,0BAAgB,aAAa,YAAY;AAAA,YACvC,MAAM;AAAA,YACN,MAAM;AAAA,YACN,QAAQ,EAAE,QAAQ,SAAS,OAAO;AAAA,UACpC,CAAC;AAAA,QACH;AAEA,cAAM,UAAU,MAAM,iBAAiB;AAAA,UACrC,SAAS;AAAA,UACT;AAAA,QACF;AAEA,YAAI,SAAS,UAAU;AACrB,kBAAQ,WAAW,SAAS;AAAA,QAC9B;AAEA,2BAAmB,QAAQ;AAE3B,eAAO;AAAA,UACL,SAAS;AAAA,YACP;AAAA,cACE,MAAM;AAAA,cACN,MAAM,0BAA0B,QAAQ,EAAE;AAAA,QAAW,SAAS,MAAM;AAAA,aAAgB,QAAQ,QAAQ;AAAA;AAAA,YACtG;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,MAEA,KAAK,cAAc;AACjB,cAAM,WAAW;AAEjB,cAAM,SAAS,MAAM,iBAAiB;AAAA,UACpC,SAAS;AAAA,UACT,SAAS;AAAA,UACT,SAAS,WAAW,CAAC;AAAA,QACvB;AAEA,cAAM,sBAAsB,OAAO,oBAChC,IAAI,CAAC,MAAM,GAAG,EAAE,SAAS,WAAM,QAAG,IAAI,EAAE,UAAU,KAAK,EAAE,OAAO,EAAE,EAClE,KAAK,IAAI;AAEZ,eAAO;AAAA,UACL,SAAS;AAAA,YACP;AAAA,cACE,MAAM;AAAA,cACN,MAAM;AAAA,WAA4B,OAAO,OAAO;AAAA,mBAAsB,OAAO,cAAc;AAAA;AAAA;AAAA,EAAkB,OAAO,QAAQ;AAAA;AAAA;AAAA,EAAuB,mBAAmB;AAAA,YACxK;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,MAEA,KAAK,eAAe;AAClB,cAAM,aAAa;AAEnB,YAAI,WAAW,QAAQ;AACrB,gBAAM,OAAO,UAAU,QAAQ,WAAW,MAAM;AAChD,cAAI,CAAC,MAAM;AACT,mBAAO;AAAA,cACL,SAAS;AAAA,gBACP,EAAE,MAAM,QAAQ,MAAM,QAAQ,WAAW,MAAM,aAAa;AAAA,cAC9D;AAAA,YACF;AAAA,UACF;AAEA,iBAAO;AAAA,YACL,SAAS;AAAA,cACP;AAAA,gBACE,MAAM;AAAA,gBACN,MAAM,SAAS,KAAK,KAAK;AAAA,UAAa,KAAK,MAAM;AAAA,YAAe,KAAK,QAAQ;AAAA,WAAc,IAAI,KAAK,KAAK,aAAa,GAAI,EAAE,eAAe,CAAC;AAAA,eAAkB,KAAK,eAAe,KAAK;AAAA,cACzL;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAEA,cAAM,cAAc,UAAU,eAAe;AAC7C,cAAM,WAAW,YACd,IAAI,CAAC,MAAM,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,KAAK,EAAE,MAAM,KAAK,EAAE,QAAQ,GAAG,EAC/D,KAAK,IAAI;AAEZ,eAAO;AAAA,UACL,SAAS;AAAA,YACP;AAAA,cACE,MAAM;AAAA,cACN,MAAM,iBAAiB,YAAY,MAAM;AAAA,EAAO,YAAY,iBAAiB;AAAA,YAC/E;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,MAEA,KAAK,gBAAgB;AACnB,cAAM,WAAW;AAEjB,YAAI,CAAC,eAAe;AAClB,0BAAgB,aAAa,YAAY;AAAA,YACvC,MAAM;AAAA,YACN,MAAM;AAAA,YACN,QAAQ,EAAE,QAAQ,MAAM;AAAA,UAC1B,CAAC;AAAA,QACH;AAEA,cAAM,UAAU,aAAa;AAAA,UAC3B;AAAA,UACA;AAAA,YACE,MAAM,SAAS;AAAA,YACf,SAAS,SAAS;AAAA,YAClB,YAAY,SAAS,cAAc;AAAA,YACnC,QAAQ;AAAA,YACR,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,UACpC;AAAA,UACA;AAAA,QACF;AAEA,eAAO;AAAA,UACL,SAAS;AAAA,YACP;AAAA,cACE,MAAM;AAAA,cACN,MAAM,0BAA0B,aAAa,aAAa,OAAO;AAAA,YACnE;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,MAEA,KAAK,gBAAgB;AACnB,cAAM,WAAW;AAGjB,cAAM,SAAS,aAAa,mBAAmB;AAC/C,cAAM,QAAQ,SAAS,SAAS;AAChC,cAAM,SAAS,SAAS,UACpB,aAAa,eAAe,SAAS,SAAS,KAAK,IACnD,CAAC;AAEL,cAAM,cAAc,OACjB;AAAA,UACC,CAAC,UACC,UAAU,MAAM,IAAI,KAAK,MAAM,IAAI,KAAK,MAAM,eAAe,WAAW;AAAA,QAC5E,EACC;AAAA,UACC,OAAO;AAAA,YACL,CAAC,UACC,UAAU,MAAM,UAAU,KAAK,IAAI,KAAK,MAAM,EAAE,EAAE,eAAe,CAAC,KAAK,KAAK;AAAA,cAC1E,MAAM;AAAA,YACR,EAAE,UAAU,GAAG,GAAG,CAAC;AAAA,UACvB;AAAA,QACF,EACC,KAAK,MAAM;AAEd,eAAO;AAAA,UACL,SAAS;AAAA,YACP;AAAA,cACE,MAAM;AAAA,cACN,MAAM,UAAU,SAAS,KAAK;AAAA,QAAW,OAAO,MAAM,eAAe,OAAO,MAAM;AAAA;AAAA,EAAe,eAAe,2BAA2B;AAAA,YAC7I;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,MAEA,KAAK,kBAAkB;AACrB,cAAM,gBAAgB;AAEtB,cAAM,OAAO,UAAU,QAAQ,cAAc,MAAM;AACnD,YAAI,CAAC,MAAM;AACT,iBAAO;AAAA,YACL,SAAS;AAAA,cACP,EAAE,MAAM,QAAQ,MAAM,QAAQ,cAAc,MAAM,aAAa;AAAA,YACjE;AAAA,UACF;AAAA,QACF;AAGA,cAAM,WAAW;AAAA,UACf,eAAe,KAAK,KAAK;AAAA,UACzB,cAAc,KAAK,KAAK;AAAA,UACxB,iBAAiB,KAAK,KAAK;AAAA,UAC3B,YAAY,KAAK,KAAK;AAAA,UACtB,cAAc,KAAK,KAAK;AAAA,QAC1B,EAAE,KAAK,IAAI;AAEX,eAAO;AAAA,UACL,SAAS;AAAA,YACP;AAAA,cACE,MAAM;AAAA,cACN,MAAM,uBAAuB,KAAK,KAAK;AAAA;AAAA,EAAO,QAAQ;AAAA;AAAA;AAAA,YACxD;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,MAEA,KAAK,wBAAwB;AAC3B,cAAM,WAAW,iBAAiB,kBAAkB;AACpD,cAAM,cAAc,SACjB;AAAA,UACC,CAAC,MACC,KAAK,EAAE,SAAS,UAAU,EAAE,MAAM,UAAU,EAAE,SAAS,KAAK,EAAE,MAAM;AAAA,QACxE,EACC,KAAK,IAAI;AAEZ,eAAO;AAAA,UACL,SAAS;AAAA,YACP;AAAA,cACE,MAAM;AAAA,cACN,MAAM,oBAAoB,SAAS,MAAM;AAAA,EAAO,eAAe,oBAAoB;AAAA,YACrF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,MAEA,KAAK,iBAAiB;AACpB,cAAM,YAAY;AAElB,cAAM,aAAa,MAAM,iBAAiB;AAAA,UACxC,UAAU;AAAA,QACZ;AAEA,YAAI,CAAC,YAAY;AACf,iBAAO;AAAA,YACL,SAAS;AAAA,cACP;AAAA,gBACE,MAAM;AAAA,gBACN,MAAM;AAAA,cACR;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAEA,2BAAmB,WAAW;AAE9B,eAAO;AAAA,UACL,SAAS;AAAA,YACP;AAAA,cACE,MAAM;AAAA,cACN,MAAM,0BAA0B,WAAW,EAAE;AAAA,QAAW,WAAW,MAAM;AAAA;AAAA,YAC3E;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,MAEA,KAAK,oBAAoB;AACvB,cAAM,eAAe;AAGrB,cAAM,WAAW,iBAAiB,kBAAkB;AACpD,cAAM,UAAU,SAAS;AAAA,UACvB,CAAC,MAAM,EAAE,cAAc,aAAa;AAAA,QACtC;AAEA,YAAI,CAAC,SAAS;AACZ,iBAAO;AAAA,YACL,SAAS;AAAA,cACP;AAAA,gBACE,MAAM;AAAA,gBACN,MAAM,WAAW,aAAa,SAAS;AAAA,cACzC;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAEA,eAAO;AAAA,UACL,SAAS;AAAA,YACP;AAAA,cACE,MAAM;AAAA,cACN,MAAM,WAAW,aAAa,SAAS;AAAA,QAAY,QAAQ,SAAS;AAAA,UAAa,QAAQ,MAAM;AAAA;AAAA;AAAA,YACjG;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,MAEA;AACE,cAAM,IAAI,MAAM,iBAAiB,IAAI,EAAE;AAAA,IAC3C;AAAA,EACF,SAAS,OAAgB;AACvB,WAAO;AAAA,MACL;AAAA,MACA,iBAAiB,QAAQ,QAAQ;AAAA,IACnC;AACA,WAAO;AAAA,MACL,SAAS;AAAA,QACP;AAAA,UACE,MAAM;AAAA,UACN,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,QACxE;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF,CAAC;AAKD,eAAe,OAAO;AACpB,QAAM,YAAY,IAAI,qBAAqB;AAC3C,QAAM,OAAO,QAAQ,SAAS;AAE9B,SAAO,KAAK,kCAAkC;AAAA,IAC5C,aAAa;AAAA,IACb,OAAO,MAAM,IAAI,CAAC,MAAM,EAAE,IAAI;AAAA,EAChC,CAAC;AACH;AAGA,QAAQ,GAAG,UAAU,YAAY;AAC/B,SAAO,KAAK,sCAAsC;AAGlD,MAAI,eAAe;AACjB,QAAI;AACF,mBAAa,WAAW,eAAe;AAAA,QACrC,SAAS;AAAA,QACT,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MACpC,CAAC;AAAA,IACH,SAAS,OAAgB;AACvB,aAAO;AAAA,QACL;AAAA,QACA,iBAAiB,QAAQ,QAAQ;AAAA,MACnC;AAAA,IACF;AAAA,EACF;AAEA,KAAG,MAAM;AACT,UAAQ,KAAK,CAAC;AAChB,CAAC;AAED,KAAK,EAAE,MAAM,CAAC,UAAU;AACtB,SAAO;AAAA,IACL;AAAA,IACA,iBAAiB,QAAQ,QAAQ;AAAA,EACnC;AACA,UAAQ,KAAK,CAAC;AAChB,CAAC;",
   "names": []
 }

package/dist/middleware/exponential-rate-limiter.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/middleware/exponential-rate-limiter.ts"],
-  "sourcesContent": ["import { Request, Response, NextFunction } from 'express';\nimport Redis from 'ioredis';\nimport { logger } from '../core/monitoring/logger.js';\nimport { metrics } from '../core/monitoring/metrics.js';\n\ninterface RateLimitConfig {\n  baseLimit: number; // Initial requests allowed\n  windowMs: number; // Time window in milliseconds\n  maxBackoff: number; // Maximum backoff multiplier (e.g., 32 = 2^5)\n  backoffMultiplier: number; // Multiplier for each violation (typically 2)\n  localCacheSize: number; // Max IPs to cache locally\n  localCacheTTL: number; // Local cache TTL in ms\n  whitelistIPs?: string[]; // IPs to bypass rate limiting\n  blacklistIPs?: string[]; // IPs to block immediately\n  customKeyGenerator?: (req: Request) => string;\n}\n\ninterface RateLimitEntry {\n  requests: number;\n  violations: number;\n  backoffLevel: number;\n  firstRequest: number;\n  lastRequest: number;\n  blockedUntil?: number;\n}\n\nexport class ExponentialRateLimiter {\n  private redis: Redis;\n  private localCache: Map<string, RateLimitEntry> = new Map();\n  private localCacheOrder: string[] = [];\n  private config: Required<RateLimitConfig>;\n\n  constructor(redis: Redis, config: Partial<RateLimitConfig> = {}) {\n    this.redis = redis;\n    this.config = {\n      baseLimit: 10,\n      windowMs: 60 * 1000, // 1 minute\n      maxBackoff: 32,\n      backoffMultiplier: 2,\n      localCacheSize: 10000,\n      localCacheTTL: 5 * 60 * 1000, // 5 minutes\n      whitelistIPs: [],\n      blacklistIPs: [],\n      customKeyGenerator: (req) => this.getClientIdentifier(req),\n      ...config,\n    };\n\n    // Clean up local cache periodically\n    setInterval(() => this.cleanupLocalCache(), this.config.localCacheTTL);\n  }\n\n  /**\n   * Main middleware function with exponential backoff\n   */\n  middleware() {\n    return async (\n      req: Request,\n      res: Response,\n      next: NextFunction\n    ): Promise<void> => {\n      const clientId = this.config.customKeyGenerator(req);\n\n      // Check whitelist/blacklist\n      if (this.isWhitelisted(clientId)) {\n        return next();\n      }\n\n      if (this.isBlacklisted(clientId)) {\n        metrics.increment('rate_limit.blacklisted', { ip: clientId });\n        res.status(403).json({\n          error: 'Access denied',\n          code: 'BLACKLISTED_IP',\n        });\n        return;\n      }\n\n      try {\n        // Try local cache first for performance\n        let entry = this.getFromLocalCache(clientId);\n\n        if (!entry) {\n          // Fallback to Redis\n          entry = await this.getFromRedis(clientId);\n        }\n\n        const now = Date.now();\n\n        // Check if client is in backoff period\n        if (entry.blockedUntil && entry.blockedUntil > now) {\n          const retryAfter = Math.ceil((entry.blockedUntil - now) / 1000);\n          metrics.increment('rate_limit.blocked', {\n            ip: clientId,\n            backoffLevel: String(entry.backoffLevel),\n          });\n\n          res.status(429).json({\n            error: 'Too many requests - exponential backoff applied',\n            code: 'RATE_LIMIT_BACKOFF',\n            retryAfter,\n            backoffLevel: entry.backoffLevel,\n          });\n          res.setHeader('Retry-After', String(retryAfter));\n          res.setHeader('X-RateLimit-BackoffLevel', String(entry.backoffLevel));\n          return;\n        }\n\n        // Check if window has expired\n        if (now - entry.firstRequest > this.config.windowMs) {\n          // Reset window\n          entry = {\n            requests: 1,\n            violations: Math.max(0, entry.violations - 1), // Decay violations\n            backoffLevel: Math.max(0, entry.backoffLevel - 1), // Decay backoff\n            firstRequest: now,\n            lastRequest: now,\n          };\n        } else {\n          entry.requests++;\n          entry.lastRequest = now;\n        }\n\n        // Calculate current limit with exponential backoff reduction\n        const currentLimit = Math.max(\n          1,\n          Math.floor(\n            this.config.baseLimit /\n              Math.pow(this.config.backoffMultiplier, entry.backoffLevel)\n          )\n        );\n\n        // Check if limit exceeded\n        if (entry.requests > currentLimit) {\n          entry.violations++;\n\n          // Increase backoff level\n          if (entry.backoffLevel < Math.log2(this.config.maxBackoff)) {\n            entry.backoffLevel++;\n          }\n\n          // Calculate backoff duration with exponential increase\n          const backoffDuration =\n            this.config.windowMs *\n            Math.pow(this.config.backoffMultiplier, entry.backoffLevel);\n          entry.blockedUntil = now + backoffDuration;\n\n          // Update caches\n          await this.updateCaches(clientId, entry);\n\n          const retryAfter = Math.ceil(backoffDuration / 1000);\n          metrics.increment('rate_limit.exceeded', {\n            ip: clientId,\n            violations: String(entry.violations),\n            backoffLevel: String(entry.backoffLevel),\n          });\n\n          res.status(429).json({\n            error: 'Rate limit exceeded - entering exponential backoff',\n            code: 'RATE_LIMIT_EXCEEDED',\n            retryAfter,\n            violations: entry.violations,\n            backoffLevel: entry.backoffLevel,\n            currentLimit,\n          });\n          res.setHeader('Retry-After', String(retryAfter));\n          res.setHeader('X-RateLimit-Limit', String(currentLimit));\n          res.setHeader('X-RateLimit-Remaining', '0');\n          res.setHeader('X-RateLimit-BackoffLevel', String(entry.backoffLevel));\n          return;\n        }\n\n        // Update successful request\n        await this.updateCaches(clientId, entry);\n\n        // Add rate limit headers\n        res.setHeader('X-RateLimit-Limit', String(currentLimit));\n        res.setHeader(\n          'X-RateLimit-Remaining',\n          String(currentLimit - entry.requests)\n        );\n        res.setHeader(\n          'X-RateLimit-Reset',\n          String(new Date(entry.firstRequest + this.config.windowMs).getTime())\n        );\n\n        if (entry.backoffLevel > 0) {\n          res.setHeader('X-RateLimit-BackoffLevel', String(entry.backoffLevel));\n        }\n\n        next();\n      } catch (error) {\n        logger.error(\n          'Rate limiter error',\n          error instanceof Error ? error : new Error(String(error))\n        );\n        // Fail open - allow request on error\n        next();\n      }\n    };\n  }\n\n  /**\n   * Get client identifier from request\n   */\n  private getClientIdentifier(req: Request): string {\n    // Try various methods to identify the client\n    const forwarded = req.headers['x-forwarded-for'];\n    const realIp = req.headers['x-real-ip'];\n    const cfIp = req.headers['cf-connecting-ip']; // Cloudflare\n\n    if (typeof forwarded === 'string') {\n      return forwarded.split(',')[0].trim();\n    }\n    if (typeof realIp === 'string') {\n      return realIp;\n    }\n    if (typeof cfIp === 'string') {\n      return cfIp;\n    }\n\n    return req.ip || req.socket.remoteAddress || 'unknown';\n  }\n\n  /**\n   * Check if IP is whitelisted\n   */\n  private isWhitelisted(ip: string): boolean {\n    return (\n      this.config.whitelistIPs.includes(ip) ||\n      ip === '127.0.0.1' ||\n      ip === '::1' ||\n      ip.startsWith('192.168.') ||\n      ip.startsWith('10.')\n    );\n  }\n\n  /**\n   * Check if IP is blacklisted\n   */\n  private isBlacklisted(ip: string): boolean {\n    return this.config.blacklistIPs.includes(ip);\n  }\n\n  /**\n   * Get rate limit entry from local cache\n   */\n  private getFromLocalCache(clientId: string): RateLimitEntry | null {\n    const cached = this.localCache.get(clientId);\n    if (cached) {\n      const now = Date.now();\n      // Check if cache entry is still valid\n      if (now - cached.lastRequest < this.config.localCacheTTL) {\n        return cached;\n      }\n      // Remove stale entry\n      this.localCache.delete(clientId);\n      const index = this.localCacheOrder.indexOf(clientId);\n      if (index > -1) {\n        this.localCacheOrder.splice(index, 1);\n      }\n    }\n    return null;\n  }\n\n  /**\n   * Get rate limit entry from Redis\n   */\n  private async getFromRedis(clientId: string): Promise<RateLimitEntry> {\n    const key = `rate_limit:${clientId}`;\n    const data = await this.redis.get(key);\n\n    if (data) {\n      return JSON.parse(data);\n    }\n\n    // Return new entry\n    return {\n      requests: 0,\n      violations: 0,\n      backoffLevel: 0,\n      firstRequest: Date.now(),\n      lastRequest: Date.now(),\n    };\n  }\n\n  /**\n   * Update both local cache and Redis\n   */\n  private async updateCaches(\n    clientId: string,\n    entry: RateLimitEntry\n  ): Promise<void> {\n    // Update local cache with LRU eviction\n    if (!this.localCache.has(clientId)) {\n      // Check cache size limit\n      if (this.localCache.size >= this.config.localCacheSize) {\n        // Remove oldest entry\n        const oldest = this.localCacheOrder.shift();\n        if (oldest) {\n          this.localCache.delete(oldest);\n        }\n      }\n      this.localCacheOrder.push(clientId);\n    }\n    this.localCache.set(clientId, entry);\n\n    // Update Redis with TTL\n    const key = `rate_limit:${clientId}`;\n    const ttl = Math.ceil(\n      (this.config.windowMs * Math.pow(2, entry.backoffLevel)) / 1000\n    );\n    await this.redis.setex(key, ttl, JSON.stringify(entry));\n  }\n\n  /**\n   * Clean up stale entries from local cache\n   */\n  private cleanupLocalCache(): void {\n    const now = Date.now();\n    const staleThreshold = now - this.config.localCacheTTL;\n\n    for (const [clientId, entry] of this.localCache.entries()) {\n      if (entry.lastRequest < staleThreshold) {\n        this.localCache.delete(clientId);\n        const index = this.localCacheOrder.indexOf(clientId);\n        if (index > -1) {\n          this.localCacheOrder.splice(index, 1);\n        }\n      }\n    }\n\n    metrics.record('rate_limit.local_cache_size', this.localCache.size);\n  }\n\n  /**\n   * Reset rate limit for a specific client\n   */\n  async reset(clientId: string): Promise<void> {\n    this.localCache.delete(clientId);\n    const index = this.localCacheOrder.indexOf(clientId);\n    if (index > -1) {\n      this.localCacheOrder.splice(index, 1);\n    }\n    await this.redis.del(`rate_limit:${clientId}`);\n  }\n\n  /**\n   * Get current rate limit status for a client\n   */\n  async getStatus(clientId: string): Promise<RateLimitEntry | null> {\n    let entry = this.getFromLocalCache(clientId);\n    if (!entry) {\n      const data = await this.redis.get(`rate_limit:${clientId}`);\n      if (data) {\n        entry = JSON.parse(data);\n      }\n    }\n    return entry;\n  }\n\n  /**\n   * Add IP to blacklist\n   */\n  blacklistIP(ip: string): void {\n    if (!this.config.blacklistIPs.includes(ip)) {\n      this.config.blacklistIPs.push(ip);\n      logger.warn('IP blacklisted', { ip });\n    }\n  }\n\n  /**\n   * Remove IP from blacklist\n   */\n  unblacklistIP(ip: string): void {\n    const index = this.config.blacklistIPs.indexOf(ip);\n    if (index > -1) {\n      this.config.blacklistIPs.splice(index, 1);\n      logger.info('IP unblacklisted', { ip });\n    }\n  }\n}\n"],
-  "mappings": "AAEA,SAAS,cAAc;AACvB,SAAS,eAAe;AAuBjB,MAAM,uBAAuB;AAAA,EAC1B;AAAA,EACA,aAA0C,oBAAI,IAAI;AAAA,EAClD,kBAA4B,CAAC;AAAA,EAC7B;AAAA,EAER,YAAY,OAAc,SAAmC,CAAC,GAAG;AAC/D,SAAK,QAAQ;AACb,SAAK,SAAS;AAAA,MACZ,WAAW;AAAA,MACX,UAAU,KAAK;AAAA;AAAA,MACf,YAAY;AAAA,MACZ,mBAAmB;AAAA,MACnB,gBAAgB;AAAA,MAChB,eAAe,IAAI,KAAK;AAAA;AAAA,MACxB,cAAc,CAAC;AAAA,MACf,cAAc,CAAC;AAAA,MACf,oBAAoB,CAAC,QAAQ,KAAK,oBAAoB,GAAG;AAAA,MACzD,GAAG;AAAA,IACL;AAGA,gBAAY,MAAM,KAAK,kBAAkB,GAAG,KAAK,OAAO,aAAa;AAAA,EACvE;AAAA;AAAA;AAAA;AAAA,EAKA,aAAa;AACX,WAAO,OACL,KACA,KACA,SACkB;AAClB,YAAM,WAAW,KAAK,OAAO,mBAAmB,GAAG;AAGnD,UAAI,KAAK,cAAc,QAAQ,GAAG;AAChC,eAAO,KAAK;AAAA,MACd;AAEA,UAAI,KAAK,cAAc,QAAQ,GAAG;AAChC,gBAAQ,UAAU,0BAA0B,EAAE,IAAI,SAAS,CAAC;AAC5D,YAAI,OAAO,GAAG,EAAE,KAAK;AAAA,UACnB,OAAO;AAAA,UACP,MAAM;AAAA,QACR,CAAC;AACD;AAAA,MACF;AAEA,UAAI;AAEF,YAAI,QAAQ,KAAK,kBAAkB,QAAQ;AAE3C,YAAI,CAAC,OAAO;AAEV,kBAAQ,MAAM,KAAK,aAAa,QAAQ;AAAA,QAC1C;AAEA,cAAM,MAAM,KAAK,IAAI;AAGrB,YAAI,MAAM,gBAAgB,MAAM,eAAe,KAAK;AAClD,gBAAM,aAAa,KAAK,MAAM,MAAM,eAAe,OAAO,GAAI;AAC9D,kBAAQ,UAAU,sBAAsB;AAAA,YACtC,IAAI;AAAA,YACJ,cAAc,OAAO,MAAM,YAAY;AAAA,UACzC,CAAC;AAED,cAAI,OAAO,GAAG,EAAE,KAAK;AAAA,YACnB,OAAO;AAAA,YACP,MAAM;AAAA,YACN;AAAA,YACA,cAAc,MAAM;AAAA,UACtB,CAAC;AACD,cAAI,UAAU,eAAe,OAAO,UAAU,CAAC;AAC/C,cAAI,UAAU,4BAA4B,OAAO,MAAM,YAAY,CAAC;AACpE;AAAA,QACF;AAGA,YAAI,MAAM,MAAM,eAAe,KAAK,OAAO,UAAU;AAEnD,kBAAQ;AAAA,YACN,UAAU;AAAA,YACV,YAAY,KAAK,IAAI,GAAG,MAAM,aAAa,CAAC;AAAA;AAAA,YAC5C,cAAc,KAAK,IAAI,GAAG,MAAM,eAAe,CAAC;AAAA;AAAA,YAChD,cAAc;AAAA,YACd,aAAa;AAAA,UACf;AAAA,QACF,OAAO;AACL,gBAAM;AACN,gBAAM,cAAc;AAAA,QACtB;AAGA,cAAM,eAAe,KAAK;AAAA,UACxB;AAAA,UACA,KAAK;AAAA,YACH,KAAK,OAAO,YACV,KAAK,IAAI,KAAK,OAAO,mBAAmB,MAAM,YAAY;AAAA,UAC9D;AAAA,QACF;AAGA,YAAI,MAAM,WAAW,cAAc;AACjC,gBAAM;AAGN,cAAI,MAAM,eAAe,KAAK,KAAK,KAAK,OAAO,UAAU,GAAG;AAC1D,kBAAM;AAAA,UACR;AAGA,gBAAM,kBACJ,KAAK,OAAO,WACZ,KAAK,IAAI,KAAK,OAAO,mBAAmB,MAAM,YAAY;AAC5D,gBAAM,eAAe,MAAM;AAG3B,gBAAM,KAAK,aAAa,UAAU,KAAK;AAEvC,gBAAM,aAAa,KAAK,KAAK,kBAAkB,GAAI;AACnD,kBAAQ,UAAU,uBAAuB;AAAA,YACvC,IAAI;AAAA,YACJ,YAAY,OAAO,MAAM,UAAU;AAAA,YACnC,cAAc,OAAO,MAAM,YAAY;AAAA,UACzC,CAAC;AAED,cAAI,OAAO,GAAG,EAAE,KAAK;AAAA,YACnB,OAAO;AAAA,YACP,MAAM;AAAA,YACN;AAAA,YACA,YAAY,MAAM;AAAA,YAClB,cAAc,MAAM;AAAA,YACpB;AAAA,UACF,CAAC;AACD,cAAI,UAAU,eAAe,OAAO,UAAU,CAAC;AAC/C,cAAI,UAAU,qBAAqB,OAAO,YAAY,CAAC;AACvD,cAAI,UAAU,yBAAyB,GAAG;AAC1C,cAAI,UAAU,4BAA4B,OAAO,MAAM,YAAY,CAAC;AACpE;AAAA,QACF;AAGA,cAAM,KAAK,aAAa,UAAU,KAAK;AAGvC,YAAI,UAAU,qBAAqB,OAAO,YAAY,CAAC;AACvD,YAAI;AAAA,UACF;AAAA,UACA,OAAO,eAAe,MAAM,QAAQ;AAAA,QACtC;AACA,YAAI;AAAA,UACF;AAAA,UACA,OAAO,IAAI,KAAK,MAAM,eAAe,KAAK,OAAO,QAAQ,EAAE,QAAQ,CAAC;AAAA,QACtE;AAEA,YAAI,MAAM,eAAe,GAAG;AAC1B,cAAI,UAAU,4BAA4B,OAAO,MAAM,YAAY,CAAC;AAAA,QACtE;AAEA,aAAK;AAAA,MACP,SAAS,OAAO;AACd,eAAO;AAAA,UACL;AAAA,UACA,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AAAA,QAC1D;AAEA,aAAK;AAAA,MACP;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKQ,oBAAoB,KAAsB;AAEhD,UAAM,YAAY,IAAI,QAAQ,iBAAiB;AAC/C,UAAM,SAAS,IAAI,QAAQ,WAAW;AACtC,UAAM,OAAO,IAAI,QAAQ,kBAAkB;AAE3C,QAAI,OAAO,cAAc,UAAU;AACjC,aAAO,UAAU,MAAM,GAAG,EAAE,CAAC,EAAE,KAAK;AAAA,IACtC;AACA,QAAI,OAAO,WAAW,UAAU;AAC9B,aAAO;AAAA,IACT;AACA,QAAI,OAAO,SAAS,UAAU;AAC5B,aAAO;AAAA,IACT;AAEA,WAAO,IAAI,MAAM,IAAI,OAAO,iBAAiB;AAAA,EAC/C;AAAA;AAAA;AAAA;AAAA,EAKQ,cAAc,IAAqB;AACzC,WACE,KAAK,OAAO,aAAa,SAAS,EAAE,KACpC,OAAO,eACP,OAAO,SACP,GAAG,WAAW,UAAU,KACxB,GAAG,WAAW,KAAK;AAAA,EAEvB;AAAA;AAAA;AAAA;AAAA,EAKQ,cAAc,IAAqB;AACzC,WAAO,KAAK,OAAO,aAAa,SAAS,EAAE;AAAA,EAC7C;AAAA;AAAA;AAAA;AAAA,EAKQ,kBAAkB,UAAyC;AACjE,UAAM,SAAS,KAAK,WAAW,IAAI,QAAQ;AAC3C,QAAI,QAAQ;AACV,YAAM,MAAM,KAAK,IAAI;AAErB,UAAI,MAAM,OAAO,cAAc,KAAK,OAAO,eAAe;AACxD,eAAO;AAAA,MACT;AAEA,WAAK,WAAW,OAAO,QAAQ;AAC/B,YAAM,QAAQ,KAAK,gBAAgB,QAAQ,QAAQ;AACnD,UAAI,QAAQ,IAAI;AACd,aAAK,gBAAgB,OAAO,OAAO,CAAC;AAAA,MACtC;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,aAAa,UAA2C;AACpE,UAAM,MAAM,cAAc,QAAQ;AAClC,UAAM,OAAO,MAAM,KAAK,MAAM,IAAI,GAAG;AAErC,QAAI,MAAM;AACR,aAAO,KAAK,MAAM,IAAI;AAAA,IACxB;AAGA,WAAO;AAAA,MACL,UAAU;AAAA,MACV,YAAY;AAAA,MACZ,cAAc;AAAA,MACd,cAAc,KAAK,IAAI;AAAA,MACvB,aAAa,KAAK,IAAI;AAAA,IACxB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,aACZ,UACA,OACe;AAEf,QAAI,CAAC,KAAK,WAAW,IAAI,QAAQ,GAAG;AAElC,UAAI,KAAK,WAAW,QAAQ,KAAK,OAAO,gBAAgB;AAEtD,cAAM,SAAS,KAAK,gBAAgB,MAAM;AAC1C,YAAI,QAAQ;AACV,eAAK,WAAW,OAAO,MAAM;AAAA,QAC/B;AAAA,MACF;AACA,WAAK,gBAAgB,KAAK,QAAQ;AAAA,IACpC;AACA,SAAK,WAAW,IAAI,UAAU,KAAK;AAGnC,UAAM,MAAM,cAAc,QAAQ;AAClC,UAAM,MAAM,KAAK;AAAA,MACd,KAAK,OAAO,WAAW,KAAK,IAAI,GAAG,MAAM,YAAY,IAAK;AAAA,IAC7D;AACA,UAAM,KAAK,MAAM,MAAM,KAAK,KAAK,KAAK,UAAU,KAAK,CAAC;AAAA,EACxD;AAAA;AAAA;AAAA;AAAA,EAKQ,oBAA0B;AAChC,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,iBAAiB,MAAM,KAAK,OAAO;AAEzC,eAAW,CAAC,UAAU,KAAK,KAAK,KAAK,WAAW,QAAQ,GAAG;AACzD,UAAI,MAAM,cAAc,gBAAgB;AACtC,aAAK,WAAW,OAAO,QAAQ;AAC/B,cAAM,QAAQ,KAAK,gBAAgB,QAAQ,QAAQ;AACnD,YAAI,QAAQ,IAAI;AACd,eAAK,gBAAgB,OAAO,OAAO,CAAC;AAAA,QACtC;AAAA,MACF;AAAA,IACF;AAEA,YAAQ,OAAO,+BAA+B,KAAK,WAAW,IAAI;AAAA,EACpE;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,MAAM,UAAiC;AAC3C,SAAK,WAAW,OAAO,QAAQ;AAC/B,UAAM,QAAQ,KAAK,gBAAgB,QAAQ,QAAQ;AACnD,QAAI,QAAQ,IAAI;AACd,WAAK,gBAAgB,OAAO,OAAO,CAAC;AAAA,IACtC;AACA,UAAM,KAAK,MAAM,IAAI,cAAc,QAAQ,EAAE;AAAA,EAC/C;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,UAAU,UAAkD;AAChE,QAAI,QAAQ,KAAK,kBAAkB,QAAQ;AAC3C,QAAI,CAAC,OAAO;AACV,YAAM,OAAO,MAAM,KAAK,MAAM,IAAI,cAAc,QAAQ,EAAE;AAC1D,UAAI,MAAM;AACR,gBAAQ,KAAK,MAAM,IAAI;AAAA,MACzB;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,YAAY,IAAkB;AAC5B,QAAI,CAAC,KAAK,OAAO,aAAa,SAAS,EAAE,GAAG;AAC1C,WAAK,OAAO,aAAa,KAAK,EAAE;AAChC,aAAO,KAAK,kBAAkB,EAAE,GAAG,CAAC;AAAA,IACtC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,cAAc,IAAkB;AAC9B,UAAM,QAAQ,KAAK,OAAO,aAAa,QAAQ,EAAE;AACjD,QAAI,QAAQ,IAAI;AACd,WAAK,OAAO,aAAa,OAAO,OAAO,CAAC;AACxC,aAAO,KAAK,oBAAoB,EAAE,GAAG,CAAC;AAAA,IACxC;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { Request, Response, NextFunction } from 'express';\nimport Redis from 'ioredis';\nimport { logger } from '../core/monitoring/logger.js';\nimport { metrics } from '../core/monitoring/metrics.js';\n\ninterface RateLimitConfig {\n  baseLimit: number; // Initial requests allowed\n  windowMs: number; // Time window in milliseconds\n  maxBackoff: number; // Maximum backoff multiplier (e.g., 32 = 2^5)\n  backoffMultiplier: number; // Multiplier for each violation (typically 2)\n  localCacheSize: number; // Max IPs to cache locally\n  localCacheTTL: number; // Local cache TTL in ms\n  whitelistIPs?: string[]; // IPs to bypass rate limiting\n  blacklistIPs?: string[]; // IPs to block immediately\n  customKeyGenerator?: (req: Request) => string;\n}\n\ninterface RateLimitEntry {\n  requests: number;\n  violations: number;\n  backoffLevel: number;\n  firstRequest: number;\n  lastRequest: number;\n  blockedUntil?: number;\n}\n\nexport class ExponentialRateLimiter {\n  private redis: Redis;\n  private localCache: Map<string, RateLimitEntry> = new Map();\n  private localCacheOrder: string[] = [];\n  private config: Required<RateLimitConfig>;\n\n  constructor(redis: Redis, config: Partial<RateLimitConfig> = {}) {\n    this.redis = redis;\n    this.config = {\n      baseLimit: 10,\n      windowMs: 60 * 1000, // 1 minute\n      maxBackoff: 32,\n      backoffMultiplier: 2,\n      localCacheSize: 10000,\n      localCacheTTL: 5 * 60 * 1000, // 5 minutes\n      whitelistIPs: [],\n      blacklistIPs: [],\n      customKeyGenerator: (req) => this.getClientIdentifier(req),\n      ...config,\n    };\n\n    // Clean up local cache periodically\n    setInterval(() => this.cleanupLocalCache(), this.config.localCacheTTL);\n  }\n\n  /**\n   * Main middleware function with exponential backoff\n   */\n  middleware() {\n    return async (\n      req: Request,\n      res: Response,\n      next: NextFunction\n    ): Promise<void> => {\n      const clientId = this.config.customKeyGenerator(req);\n\n      // Check whitelist/blacklist\n      if (this.isWhitelisted(clientId)) {\n        return next();\n      }\n\n      if (this.isBlacklisted(clientId)) {\n        metrics.increment('rate_limit.blacklisted', { ip: clientId });\n        res.status(403).json({\n          error: 'Access denied',\n          code: 'BLACKLISTED_IP',\n        });\n        return;\n      }\n\n      try {\n        // Try local cache first for performance\n        let entry = this.getFromLocalCache(clientId);\n\n        if (!entry) {\n          // Fallback to Redis\n          entry = await this.getFromRedis(clientId);\n        }\n\n        const now = Date.now();\n\n        // Check if client is in backoff period\n        if (entry.blockedUntil && entry.blockedUntil > now) {\n          const retryAfter = Math.ceil((entry.blockedUntil - now) / 1000);\n          metrics.increment('rate_limit.blocked', {\n            ip: clientId,\n            backoffLevel: String(entry.backoffLevel),\n          });\n\n          res.status(429).json({\n            error: 'Too many requests - exponential backoff applied',\n            code: 'RATE_LIMIT_BACKOFF',\n            retryAfter,\n            backoffLevel: entry.backoffLevel,\n          });\n          res.setHeader('Retry-After', String(retryAfter));\n          res.setHeader('X-RateLimit-BackoffLevel', String(entry.backoffLevel));\n          return;\n        }\n\n        // Check if window has expired\n        if (now - entry.firstRequest > this.config.windowMs) {\n          // Reset window\n          entry = {\n            requests: 1,\n            violations: Math.max(0, entry.violations - 1), // Decay violations\n            backoffLevel: Math.max(0, entry.backoffLevel - 1), // Decay backoff\n            firstRequest: now,\n            lastRequest: now,\n          };\n        } else {\n          entry.requests++;\n          entry.lastRequest = now;\n        }\n\n        // Calculate current limit with exponential backoff reduction\n        const currentLimit = Math.max(\n          1,\n          Math.floor(\n            this.config.baseLimit /\n              Math.pow(this.config.backoffMultiplier, entry.backoffLevel)\n          )\n        );\n\n        // Check if limit exceeded\n        if (entry.requests > currentLimit) {\n          entry.violations++;\n\n          // Increase backoff level\n          if (entry.backoffLevel < Math.log2(this.config.maxBackoff)) {\n            entry.backoffLevel++;\n          }\n\n          // Calculate backoff duration with exponential increase\n          const backoffDuration =\n            this.config.windowMs *\n            Math.pow(this.config.backoffMultiplier, entry.backoffLevel);\n          entry.blockedUntil = now + backoffDuration;\n\n          // Update caches\n          await this.updateCaches(clientId, entry);\n\n          const retryAfter = Math.ceil(backoffDuration / 1000);\n          metrics.increment('rate_limit.exceeded', {\n            ip: clientId,\n            violations: String(entry.violations),\n            backoffLevel: String(entry.backoffLevel),\n          });\n\n          res.status(429).json({\n            error: 'Rate limit exceeded - entering exponential backoff',\n            code: 'RATE_LIMIT_EXCEEDED',\n            retryAfter,\n            violations: entry.violations,\n            backoffLevel: entry.backoffLevel,\n            currentLimit,\n          });\n          res.setHeader('Retry-After', String(retryAfter));\n          res.setHeader('X-RateLimit-Limit', String(currentLimit));\n          res.setHeader('X-RateLimit-Remaining', '0');\n          res.setHeader('X-RateLimit-BackoffLevel', String(entry.backoffLevel));\n          return;\n        }\n\n        // Update successful request\n        await this.updateCaches(clientId, entry);\n\n        // Add rate limit headers\n        res.setHeader('X-RateLimit-Limit', String(currentLimit));\n        res.setHeader(\n          'X-RateLimit-Remaining',\n          String(currentLimit - entry.requests)\n        );\n        res.setHeader(\n          'X-RateLimit-Reset',\n          String(new Date(entry.firstRequest + this.config.windowMs).getTime())\n        );\n\n        if (entry.backoffLevel > 0) {\n          res.setHeader('X-RateLimit-BackoffLevel', String(entry.backoffLevel));\n        }\n\n        next();\n      } catch (error: unknown) {\n        logger.error(\n          'Rate limiter error',\n          error instanceof Error ? error : new Error(String(error))\n        );\n        // Fail open - allow request on error\n        next();\n      }\n    };\n  }\n\n  /**\n   * Get client identifier from request\n   */\n  private getClientIdentifier(req: Request): string {\n    // Try various methods to identify the client\n    const forwarded = req.headers['x-forwarded-for'];\n    const realIp = req.headers['x-real-ip'];\n    const cfIp = req.headers['cf-connecting-ip']; // Cloudflare\n\n    if (typeof forwarded === 'string') {\n      return forwarded.split(',')[0].trim();\n    }\n    if (typeof realIp === 'string') {\n      return realIp;\n    }\n    if (typeof cfIp === 'string') {\n      return cfIp;\n    }\n\n    return req.ip || req.socket.remoteAddress || 'unknown';\n  }\n\n  /**\n   * Check if IP is whitelisted\n   */\n  private isWhitelisted(ip: string): boolean {\n    return (\n      this.config.whitelistIPs.includes(ip) ||\n      ip === '127.0.0.1' ||\n      ip === '::1' ||\n      ip.startsWith('192.168.') ||\n      ip.startsWith('10.')\n    );\n  }\n\n  /**\n   * Check if IP is blacklisted\n   */\n  private isBlacklisted(ip: string): boolean {\n    return this.config.blacklistIPs.includes(ip);\n  }\n\n  /**\n   * Get rate limit entry from local cache\n   */\n  private getFromLocalCache(clientId: string): RateLimitEntry | null {\n    const cached = this.localCache.get(clientId);\n    if (cached) {\n      const now = Date.now();\n      // Check if cache entry is still valid\n      if (now - cached.lastRequest < this.config.localCacheTTL) {\n        return cached;\n      }\n      // Remove stale entry\n      this.localCache.delete(clientId);\n      const index = this.localCacheOrder.indexOf(clientId);\n      if (index > -1) {\n        this.localCacheOrder.splice(index, 1);\n      }\n    }\n    return null;\n  }\n\n  /**\n   * Get rate limit entry from Redis\n   */\n  private async getFromRedis(clientId: string): Promise<RateLimitEntry> {\n    const key = `rate_limit:${clientId}`;\n    const data = await this.redis.get(key);\n\n    if (data) {\n      return JSON.parse(data);\n    }\n\n    // Return new entry\n    return {\n      requests: 0,\n      violations: 0,\n      backoffLevel: 0,\n      firstRequest: Date.now(),\n      lastRequest: Date.now(),\n    };\n  }\n\n  /**\n   * Update both local cache and Redis\n   */\n  private async updateCaches(\n    clientId: string,\n    entry: RateLimitEntry\n  ): Promise<void> {\n    // Update local cache with LRU eviction\n    if (!this.localCache.has(clientId)) {\n      // Check cache size limit\n      if (this.localCache.size >= this.config.localCacheSize) {\n        // Remove oldest entry\n        const oldest = this.localCacheOrder.shift();\n        if (oldest) {\n          this.localCache.delete(oldest);\n        }\n      }\n      this.localCacheOrder.push(clientId);\n    }\n    this.localCache.set(clientId, entry);\n\n    // Update Redis with TTL\n    const key = `rate_limit:${clientId}`;\n    const ttl = Math.ceil(\n      (this.config.windowMs * Math.pow(2, entry.backoffLevel)) / 1000\n    );\n    await this.redis.setex(key, ttl, JSON.stringify(entry));\n  }\n\n  /**\n   * Clean up stale entries from local cache\n   */\n  private cleanupLocalCache(): void {\n    const now = Date.now();\n    const staleThreshold = now - this.config.localCacheTTL;\n\n    for (const [clientId, entry] of this.localCache.entries()) {\n      if (entry.lastRequest < staleThreshold) {\n        this.localCache.delete(clientId);\n        const index = this.localCacheOrder.indexOf(clientId);\n        if (index > -1) {\n          this.localCacheOrder.splice(index, 1);\n        }\n      }\n    }\n\n    metrics.record('rate_limit.local_cache_size', this.localCache.size);\n  }\n\n  /**\n   * Reset rate limit for a specific client\n   */\n  async reset(clientId: string): Promise<void> {\n    this.localCache.delete(clientId);\n    const index = this.localCacheOrder.indexOf(clientId);\n    if (index > -1) {\n      this.localCacheOrder.splice(index, 1);\n    }\n    await this.redis.del(`rate_limit:${clientId}`);\n  }\n\n  /**\n   * Get current rate limit status for a client\n   */\n  async getStatus(clientId: string): Promise<RateLimitEntry | null> {\n    let entry = this.getFromLocalCache(clientId);\n    if (!entry) {\n      const data = await this.redis.get(`rate_limit:${clientId}`);\n      if (data) {\n        entry = JSON.parse(data);\n      }\n    }\n    return entry;\n  }\n\n  /**\n   * Add IP to blacklist\n   */\n  blacklistIP(ip: string): void {\n    if (!this.config.blacklistIPs.includes(ip)) {\n      this.config.blacklistIPs.push(ip);\n      logger.warn('IP blacklisted', { ip });\n    }\n  }\n\n  /**\n   * Remove IP from blacklist\n   */\n  unblacklistIP(ip: string): void {\n    const index = this.config.blacklistIPs.indexOf(ip);\n    if (index > -1) {\n      this.config.blacklistIPs.splice(index, 1);\n      logger.info('IP unblacklisted', { ip });\n    }\n  }\n}\n"],
+  "mappings": "AAEA,SAAS,cAAc;AACvB,SAAS,eAAe;AAuBjB,MAAM,uBAAuB;AAAA,EAC1B;AAAA,EACA,aAA0C,oBAAI,IAAI;AAAA,EAClD,kBAA4B,CAAC;AAAA,EAC7B;AAAA,EAER,YAAY,OAAc,SAAmC,CAAC,GAAG;AAC/D,SAAK,QAAQ;AACb,SAAK,SAAS;AAAA,MACZ,WAAW;AAAA,MACX,UAAU,KAAK;AAAA;AAAA,MACf,YAAY;AAAA,MACZ,mBAAmB;AAAA,MACnB,gBAAgB;AAAA,MAChB,eAAe,IAAI,KAAK;AAAA;AAAA,MACxB,cAAc,CAAC;AAAA,MACf,cAAc,CAAC;AAAA,MACf,oBAAoB,CAAC,QAAQ,KAAK,oBAAoB,GAAG;AAAA,MACzD,GAAG;AAAA,IACL;AAGA,gBAAY,MAAM,KAAK,kBAAkB,GAAG,KAAK,OAAO,aAAa;AAAA,EACvE;AAAA;AAAA;AAAA;AAAA,EAKA,aAAa;AACX,WAAO,OACL,KACA,KACA,SACkB;AAClB,YAAM,WAAW,KAAK,OAAO,mBAAmB,GAAG;AAGnD,UAAI,KAAK,cAAc,QAAQ,GAAG;AAChC,eAAO,KAAK;AAAA,MACd;AAEA,UAAI,KAAK,cAAc,QAAQ,GAAG;AAChC,gBAAQ,UAAU,0BAA0B,EAAE,IAAI,SAAS,CAAC;AAC5D,YAAI,OAAO,GAAG,EAAE,KAAK;AAAA,UACnB,OAAO;AAAA,UACP,MAAM;AAAA,QACR,CAAC;AACD;AAAA,MACF;AAEA,UAAI;AAEF,YAAI,QAAQ,KAAK,kBAAkB,QAAQ;AAE3C,YAAI,CAAC,OAAO;AAEV,kBAAQ,MAAM,KAAK,aAAa,QAAQ;AAAA,QAC1C;AAEA,cAAM,MAAM,KAAK,IAAI;AAGrB,YAAI,MAAM,gBAAgB,MAAM,eAAe,KAAK;AAClD,gBAAM,aAAa,KAAK,MAAM,MAAM,eAAe,OAAO,GAAI;AAC9D,kBAAQ,UAAU,sBAAsB;AAAA,YACtC,IAAI;AAAA,YACJ,cAAc,OAAO,MAAM,YAAY;AAAA,UACzC,CAAC;AAED,cAAI,OAAO,GAAG,EAAE,KAAK;AAAA,YACnB,OAAO;AAAA,YACP,MAAM;AAAA,YACN;AAAA,YACA,cAAc,MAAM;AAAA,UACtB,CAAC;AACD,cAAI,UAAU,eAAe,OAAO,UAAU,CAAC;AAC/C,cAAI,UAAU,4BAA4B,OAAO,MAAM,YAAY,CAAC;AACpE;AAAA,QACF;AAGA,YAAI,MAAM,MAAM,eAAe,KAAK,OAAO,UAAU;AAEnD,kBAAQ;AAAA,YACN,UAAU;AAAA,YACV,YAAY,KAAK,IAAI,GAAG,MAAM,aAAa,CAAC;AAAA;AAAA,YAC5C,cAAc,KAAK,IAAI,GAAG,MAAM,eAAe,CAAC;AAAA;AAAA,YAChD,cAAc;AAAA,YACd,aAAa;AAAA,UACf;AAAA,QACF,OAAO;AACL,gBAAM;AACN,gBAAM,cAAc;AAAA,QACtB;AAGA,cAAM,eAAe,KAAK;AAAA,UACxB;AAAA,UACA,KAAK;AAAA,YACH,KAAK,OAAO,YACV,KAAK,IAAI,KAAK,OAAO,mBAAmB,MAAM,YAAY;AAAA,UAC9D;AAAA,QACF;AAGA,YAAI,MAAM,WAAW,cAAc;AACjC,gBAAM;AAGN,cAAI,MAAM,eAAe,KAAK,KAAK,KAAK,OAAO,UAAU,GAAG;AAC1D,kBAAM;AAAA,UACR;AAGA,gBAAM,kBACJ,KAAK,OAAO,WACZ,KAAK,IAAI,KAAK,OAAO,mBAAmB,MAAM,YAAY;AAC5D,gBAAM,eAAe,MAAM;AAG3B,gBAAM,KAAK,aAAa,UAAU,KAAK;AAEvC,gBAAM,aAAa,KAAK,KAAK,kBAAkB,GAAI;AACnD,kBAAQ,UAAU,uBAAuB;AAAA,YACvC,IAAI;AAAA,YACJ,YAAY,OAAO,MAAM,UAAU;AAAA,YACnC,cAAc,OAAO,MAAM,YAAY;AAAA,UACzC,CAAC;AAED,cAAI,OAAO,GAAG,EAAE,KAAK;AAAA,YACnB,OAAO;AAAA,YACP,MAAM;AAAA,YACN;AAAA,YACA,YAAY,MAAM;AAAA,YAClB,cAAc,MAAM;AAAA,YACpB;AAAA,UACF,CAAC;AACD,cAAI,UAAU,eAAe,OAAO,UAAU,CAAC;AAC/C,cAAI,UAAU,qBAAqB,OAAO,YAAY,CAAC;AACvD,cAAI,UAAU,yBAAyB,GAAG;AAC1C,cAAI,UAAU,4BAA4B,OAAO,MAAM,YAAY,CAAC;AACpE;AAAA,QACF;AAGA,cAAM,KAAK,aAAa,UAAU,KAAK;AAGvC,YAAI,UAAU,qBAAqB,OAAO,YAAY,CAAC;AACvD,YAAI;AAAA,UACF;AAAA,UACA,OAAO,eAAe,MAAM,QAAQ;AAAA,QACtC;AACA,YAAI;AAAA,UACF;AAAA,UACA,OAAO,IAAI,KAAK,MAAM,eAAe,KAAK,OAAO,QAAQ,EAAE,QAAQ,CAAC;AAAA,QACtE;AAEA,YAAI,MAAM,eAAe,GAAG;AAC1B,cAAI,UAAU,4BAA4B,OAAO,MAAM,YAAY,CAAC;AAAA,QACtE;AAEA,aAAK;AAAA,MACP,SAAS,OAAgB;AACvB,eAAO;AAAA,UACL;AAAA,UACA,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AAAA,QAC1D;AAEA,aAAK;AAAA,MACP;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKQ,oBAAoB,KAAsB;AAEhD,UAAM,YAAY,IAAI,QAAQ,iBAAiB;AAC/C,UAAM,SAAS,IAAI,QAAQ,WAAW;AACtC,UAAM,OAAO,IAAI,QAAQ,kBAAkB;AAE3C,QAAI,OAAO,cAAc,UAAU;AACjC,aAAO,UAAU,MAAM,GAAG,EAAE,CAAC,EAAE,KAAK;AAAA,IACtC;AACA,QAAI,OAAO,WAAW,UAAU;AAC9B,aAAO;AAAA,IACT;AACA,QAAI,OAAO,SAAS,UAAU;AAC5B,aAAO;AAAA,IACT;AAEA,WAAO,IAAI,MAAM,IAAI,OAAO,iBAAiB;AAAA,EAC/C;AAAA;AAAA;AAAA;AAAA,EAKQ,cAAc,IAAqB;AACzC,WACE,KAAK,OAAO,aAAa,SAAS,EAAE,KACpC,OAAO,eACP,OAAO,SACP,GAAG,WAAW,UAAU,KACxB,GAAG,WAAW,KAAK;AAAA,EAEvB;AAAA;AAAA;AAAA;AAAA,EAKQ,cAAc,IAAqB;AACzC,WAAO,KAAK,OAAO,aAAa,SAAS,EAAE;AAAA,EAC7C;AAAA;AAAA;AAAA;AAAA,EAKQ,kBAAkB,UAAyC;AACjE,UAAM,SAAS,KAAK,WAAW,IAAI,QAAQ;AAC3C,QAAI,QAAQ;AACV,YAAM,MAAM,KAAK,IAAI;AAErB,UAAI,MAAM,OAAO,cAAc,KAAK,OAAO,eAAe;AACxD,eAAO;AAAA,MACT;AAEA,WAAK,WAAW,OAAO,QAAQ;AAC/B,YAAM,QAAQ,KAAK,gBAAgB,QAAQ,QAAQ;AACnD,UAAI,QAAQ,IAAI;AACd,aAAK,gBAAgB,OAAO,OAAO,CAAC;AAAA,MACtC;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,aAAa,UAA2C;AACpE,UAAM,MAAM,cAAc,QAAQ;AAClC,UAAM,OAAO,MAAM,KAAK,MAAM,IAAI,GAAG;AAErC,QAAI,MAAM;AACR,aAAO,KAAK,MAAM,IAAI;AAAA,IACxB;AAGA,WAAO;AAAA,MACL,UAAU;AAAA,MACV,YAAY;AAAA,MACZ,cAAc;AAAA,MACd,cAAc,KAAK,IAAI;AAAA,MACvB,aAAa,KAAK,IAAI;AAAA,IACxB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,aACZ,UACA,OACe;AAEf,QAAI,CAAC,KAAK,WAAW,IAAI,QAAQ,GAAG;AAElC,UAAI,KAAK,WAAW,QAAQ,KAAK,OAAO,gBAAgB;AAEtD,cAAM,SAAS,KAAK,gBAAgB,MAAM;AAC1C,YAAI,QAAQ;AACV,eAAK,WAAW,OAAO,MAAM;AAAA,QAC/B;AAAA,MACF;AACA,WAAK,gBAAgB,KAAK,QAAQ;AAAA,IACpC;AACA,SAAK,WAAW,IAAI,UAAU,KAAK;AAGnC,UAAM,MAAM,cAAc,QAAQ;AAClC,UAAM,MAAM,KAAK;AAAA,MACd,KAAK,OAAO,WAAW,KAAK,IAAI,GAAG,MAAM,YAAY,IAAK;AAAA,IAC7D;AACA,UAAM,KAAK,MAAM,MAAM,KAAK,KAAK,KAAK,UAAU,KAAK,CAAC;AAAA,EACxD;AAAA;AAAA;AAAA;AAAA,EAKQ,oBAA0B;AAChC,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,iBAAiB,MAAM,KAAK,OAAO;AAEzC,eAAW,CAAC,UAAU,KAAK,KAAK,KAAK,WAAW,QAAQ,GAAG;AACzD,UAAI,MAAM,cAAc,gBAAgB;AACtC,aAAK,WAAW,OAAO,QAAQ;AAC/B,cAAM,QAAQ,KAAK,gBAAgB,QAAQ,QAAQ;AACnD,YAAI,QAAQ,IAAI;AACd,eAAK,gBAAgB,OAAO,OAAO,CAAC;AAAA,QACtC;AAAA,MACF;AAAA,IACF;AAEA,YAAQ,OAAO,+BAA+B,KAAK,WAAW,IAAI;AAAA,EACpE;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,MAAM,UAAiC;AAC3C,SAAK,WAAW,OAAO,QAAQ;AAC/B,UAAM,QAAQ,KAAK,gBAAgB,QAAQ,QAAQ;AACnD,QAAI,QAAQ,IAAI;AACd,WAAK,gBAAgB,OAAO,OAAO,CAAC;AAAA,IACtC;AACA,UAAM,KAAK,MAAM,IAAI,cAAc,QAAQ,EAAE;AAAA,EAC/C;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,UAAU,UAAkD;AAChE,QAAI,QAAQ,KAAK,kBAAkB,QAAQ;AAC3C,QAAI,CAAC,OAAO;AACV,YAAM,OAAO,MAAM,KAAK,MAAM,IAAI,cAAc,QAAQ,EAAE;AAC1D,UAAI,MAAM;AACR,gBAAQ,KAAK,MAAM,IAAI;AAAA,MACzB;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,YAAY,IAAkB;AAC5B,QAAI,CAAC,KAAK,OAAO,aAAa,SAAS,EAAE,GAAG;AAC1C,WAAK,OAAO,aAAa,KAAK,EAAE;AAChC,aAAO,KAAK,kBAAkB,EAAE,GAAG,CAAC;AAAA,IACtC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,cAAc,IAAkB;AAC9B,UAAM,QAAQ,KAAK,OAAO,aAAa,QAAQ,EAAE;AACjD,QAAI,QAAQ,IAAI;AACd,WAAK,OAAO,aAAa,OAAO,OAAO,CAAC;AACxC,aAAO,KAAK,oBAAoB,EAAE,GAAG,CAAC;AAAA,IACxC;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/servers/production/auth-middleware.js

@@ -6,11 +6,22 @@ import BetterSqlite3 from "better-sqlite3";
 import { logger } from "../../core/monitoring/logger.js";
 import { metrics } from "../../core/monitoring/metrics.js";
 import { getUserModel } from "../../models/user.model.js";
+function getEnv(key, defaultValue) {
+  const value = process.env[key];
+  if (value === void 0) {
+    if (defaultValue !== void 0) return defaultValue;
+    throw new Error(`Environment variable ${key} is required`);
+  }
+  return value;
+}
+function getOptionalEnv(key) {
+  return process.env[key];
+}
 class AuthMiddleware {
   constructor(config) {
     this.config = config;
     this.redis = new Redis(config.redisUrl);
-    const dbPath = config.dbPath || process.env.STACKMEMORY_DB || ".stackmemory/auth.db";
+    const dbPath = config.dbPath || process.env["STACKMEMORY_DB"] || ".stackmemory/auth.db";
     this.db = new BetterSqlite3(dbPath);
     this.userModel = getUserModel(this.db);
     this.jwksClient = jwksRsa({
@@ -118,7 +129,7 @@ class AuthMiddleware {
       if (req.path === "/health" || req.path === "/metrics") {
         return next();
       }
-      if (this.config.bypassAuth && process.env.NODE_ENV === "development") {
+      if (this.config.bypassAuth && process.env["NODE_ENV"] === "development") {
         req.user = this.getMockUser();
         return next();
       }

package/dist/servers/production/auth-middleware.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/servers/production/auth-middleware.ts"],
-  "sourcesContent": ["/**\n * Production Authentication Middleware for Runway MCP Server\n * Implements JWT validation with Auth0, refresh tokens, and rate limiting\n */\n\nimport jwt from 'jsonwebtoken';\nimport jwksRsa from 'jwks-rsa';\nimport { Request, Response, NextFunction } from 'express';\nimport { RateLimiterRedis, RateLimiterRes } from 'rate-limiter-flexible';\nimport Redis from 'ioredis';\nimport BetterSqlite3 from 'better-sqlite3';\nimport { logger } from '../../core/monitoring/logger.js';\nimport { metrics } from '../../core/monitoring/metrics.js';\nimport { getUserModel, UserModel, User } from '../../models/user.model.js';\n\nexport interface AuthUser {\n  id: string;\n  email: string;\n  sub: string;\n  name?: string;\n  picture?: string;\n  tier: 'free' | 'pro' | 'enterprise';\n  organizations?: string[];\n  permissions: string[];\n  metadata?: Record<string, any>;\n}\n\nexport interface AuthRequest extends Request {\n  user?: AuthUser;\n  rateLimitInfo?: RateLimiterRes;\n}\n\nexport class AuthMiddleware {\n  private jwksClient: jwksRsa.JwksClient;\n  private redis: Redis;\n  private rateLimiters!: Map<string, RateLimiterRedis>;\n  private blacklistedTokens: Set<string> = new Set();\n  private userModel: UserModel;\n  private db: BetterSqlite3.Database;\n  private mockUser?: AuthUser;\n  private mockUserInitializing = false;\n\n  constructor(\n    private config: {\n      auth0Domain: string;\n      auth0Audience: string;\n      redisUrl: string;\n      jwtSecret?: string;\n      bypassAuth?: boolean; // For testing\n      dbPath?: string; // Path to SQLite database\n    }\n  ) {\n    this.redis = new Redis(config.redisUrl);\n\n    // Initialize database\n    const dbPath =\n      config.dbPath || process.env.STACKMEMORY_DB || '.stackmemory/auth.db';\n    this.db = new BetterSqlite3(dbPath);\n    this.userModel = getUserModel(this.db);\n\n    this.jwksClient = jwksRsa({\n      jwksUri: `https://${config.auth0Domain}/.well-known/jwks.json`,\n      cache: true,\n      cacheMaxAge: 600000, // 10 minutes\n      rateLimit: true,\n      jwksRequestsPerMinute: 5,\n    });\n\n    this.initializeRateLimiters();\n    this.setupTokenBlacklistSync();\n  }\n\n  private initializeRateLimiters(): void {\n    // Different rate limits for different tiers\n    this.rateLimiters = new Map([\n      [\n        'free',\n        new RateLimiterRedis({\n          storeClient: this.redis,\n          keyPrefix: 'rl:free',\n          points: 100, // requests\n          duration: 900, // per 15 minutes\n          blockDuration: 900, // block for 15 minutes\n        }),\n      ],\n      [\n        'pro',\n        new RateLimiterRedis({\n          storeClient: this.redis,\n          keyPrefix: 'rl:pro',\n          points: 1000,\n          duration: 900,\n          blockDuration: 300,\n        }),\n      ],\n      [\n        'enterprise',\n        new RateLimiterRedis({\n          storeClient: this.redis,\n          keyPrefix: 'rl:enterprise',\n          points: 10000,\n          duration: 900,\n          blockDuration: 60,\n        }),\n      ],\n    ]);\n\n    // Special rate limiter for auth endpoints\n    this.rateLimiters.set(\n      'auth',\n      new RateLimiterRedis({\n        storeClient: this.redis,\n        keyPrefix: 'rl:auth',\n        points: 10, // Only 10 auth attempts\n        duration: 900,\n        blockDuration: 3600, // Block for 1 hour on excessive auth attempts\n      })\n    );\n  }\n\n  private setupTokenBlacklistSync(): void {\n    // Subscribe to token revocation events\n    const subscriber = new Redis(this.config.redisUrl);\n    subscriber.subscribe('token:revoked');\n\n    subscriber.on('message', (channel, token) => {\n      if (channel === 'token:revoked') {\n        this.blacklistedTokens.add(token);\n        // Clean up old tokens periodically\n        if (this.blacklistedTokens.size > 10000) {\n          this.blacklistedTokens.clear();\n        }\n      }\n    });\n  }\n\n  private async getSigningKey(kid: string): Promise<string> {\n    return new Promise((resolve, reject) => {\n      this.jwksClient.getSigningKey(kid, (err, key) => {\n        if (err) {\n          reject(err);\n        } else {\n          const signingKey = key?.getPublicKey();\n          if (!signingKey) {\n            reject(new Error('No signing key found'));\n          } else {\n            resolve(signingKey);\n          }\n        }\n      });\n    });\n  }\n\n  /**\n   * Main authentication middleware\n   */\n  public authenticate = async (\n    req: AuthRequest,\n    res: Response,\n    next: NextFunction\n  ): Promise<any> => {\n    const startTime = Date.now();\n\n    try {\n      // Bypass auth for health checks\n      if (req.path === '/health' || req.path === '/metrics') {\n        return next();\n      }\n\n      // Development bypass\n      if (this.config.bypassAuth && process.env.NODE_ENV === 'development') {\n        req.user = this.getMockUser();\n        return next();\n      }\n\n      // Extract token or API key\n      const token = this.extractToken(req);\n      const apiKey = this.extractApiKey(req);\n\n      if (!token && !apiKey) {\n        metrics.increment('auth.missing_credentials');\n        return res.status(401).json({\n          error: 'Authentication required',\n          code: 'MISSING_CREDENTIALS',\n        });\n      }\n\n      // API Key authentication\n      if (apiKey) {\n        const user = await this.userModel.validateApiKey(apiKey);\n        if (!user) {\n          metrics.increment('auth.invalid_api_key');\n          return res.status(401).json({\n            error: 'Invalid API key',\n            code: 'INVALID_API_KEY',\n          });\n        }\n\n        // Convert to AuthUser format\n        req.user = {\n          id: user.id,\n          sub: user.sub,\n          email: user.email,\n          name: user.name,\n          picture: user.avatar,\n          tier: user.tier,\n          permissions: user.permissions,\n          organizations: user.organizations.map((org) => org.id),\n          metadata: { ...user.metadata, authMethod: 'api_key' },\n        };\n\n        metrics.increment('auth.api_key_success');\n        await metrics.timing('auth.api_key_duration', Date.now() - startTime);\n        return next();\n      }\n\n      // Check blacklist for JWT tokens\n      if (token && this.blacklistedTokens.has(token)) {\n        metrics.increment('auth.blacklisted_token');\n        return res.status(401).json({\n          error: 'Token has been revoked',\n          code: 'TOKEN_REVOKED',\n        });\n      }\n\n      // Ensure token exists for JWT processing\n      if (!token) {\n        // This should not happen as we checked earlier, but TypeScript needs this\n        return res.status(401).json({\n          error: 'No token provided',\n          code: 'NO_TOKEN',\n        });\n      }\n\n      // Decode and verify token\n      const decoded = jwt.decode(token, { complete: true }) as any;\n      if (!decoded) {\n        metrics.increment('auth.invalid_token');\n        return res.status(401).json({\n          error: 'Invalid token format',\n          code: 'INVALID_TOKEN',\n        });\n      }\n\n      // Get signing key and verify\n      const signingKey = await this.getSigningKey(decoded.header.kid);\n      const verified = jwt.verify(token, signingKey, {\n        algorithms: ['RS256'],\n        audience: this.config.auth0Audience,\n        issuer: `https://${this.config.auth0Domain}/`,\n      }) as any;\n\n      // Load user from database or cache\n      const user = await this.loadUser(verified.sub, verified);\n      if (!user) {\n        metrics.increment('auth.user_not_found');\n        return res.status(403).json({\n          error: 'User not found',\n          code: 'USER_NOT_FOUND',\n        });\n      }\n\n      // Check user suspension\n      if (user.metadata?.suspended) {\n        metrics.increment('auth.user_suspended');\n        return res.status(403).json({\n          error: 'Account suspended',\n          code: 'ACCOUNT_SUSPENDED',\n        });\n      }\n\n      // Apply rate limiting\n      const rateLimiter =\n        this.rateLimiters.get(user.tier) || this.rateLimiters.get('free')!;\n      try {\n        const rateLimitRes = await rateLimiter.consume(user.id);\n        req.rateLimitInfo = rateLimitRes;\n\n        // Add rate limit headers\n        res.setHeader('X-RateLimit-Limit', rateLimiter.points.toString());\n        res.setHeader(\n          'X-RateLimit-Remaining',\n          rateLimitRes.remainingPoints.toString()\n        );\n        res.setHeader(\n          'X-RateLimit-Reset',\n          new Date(Date.now() + rateLimitRes.msBeforeNext).toISOString()\n        );\n      } catch (rateLimitError: any) {\n        metrics.increment('auth.rate_limited');\n        res.setHeader(\n          'Retry-After',\n          Math.round(rateLimitError.msBeforeNext / 1000).toString()\n        );\n        return res.status(429).json({\n          error: 'Too many requests',\n          code: 'RATE_LIMITED',\n          retryAfter: rateLimitError.msBeforeNext,\n        });\n      }\n\n      // Attach user to request\n      req.user = user;\n\n      // Track metrics\n      metrics.increment('auth.success', { tier: user.tier });\n      metrics.timing('auth.duration', Date.now() - startTime);\n\n      logger.info('Authentication successful', {\n        userId: user.id,\n        tier: user.tier,\n        path: req.path,\n      });\n\n      next();\n    } catch (error: any) {\n      metrics.increment('auth.error');\n      logger.error('Authentication error', error);\n\n      if (error.name === 'TokenExpiredError') {\n        return res.status(401).json({\n          error: 'Token expired',\n          code: 'TOKEN_EXPIRED',\n        });\n      }\n\n      if (error.name === 'JsonWebTokenError') {\n        return res.status(401).json({\n          error: 'Invalid token',\n          code: 'INVALID_TOKEN',\n        });\n      }\n\n      res.status(500).json({\n        error: 'Authentication failed',\n        code: 'AUTH_ERROR',\n      });\n    }\n  };\n\n  /**\n   * WebSocket authentication handler\n   */\n  public authenticateWebSocket = async (\n    token: string\n  ): Promise<AuthUser | null> => {\n    try {\n      const decoded = jwt.decode(token, { complete: true }) as any;\n      if (!decoded || this.blacklistedTokens.has(token)) {\n        return null;\n      }\n\n      const signingKey = await this.getSigningKey(decoded.header.kid);\n      const verified = jwt.verify(token, signingKey, {\n        algorithms: ['RS256'],\n        audience: this.config.auth0Audience,\n        issuer: `https://${this.config.auth0Domain}/`,\n      }) as any;\n\n      return await this.loadUser(verified.sub, verified);\n    } catch (error) {\n      logger.error(\n        'WebSocket authentication failed',\n        error instanceof Error ? error : undefined\n      );\n      return null;\n    }\n  };\n\n  /**\n   * Permission checking middleware\n   */\n  public requirePermission = (permission: string) => {\n    return (req: AuthRequest, res: Response, next: NextFunction) => {\n      if (!req.user) {\n        return res.status(401).json({\n          error: 'Authentication required',\n          code: 'NOT_AUTHENTICATED',\n        });\n      }\n\n      if (!req.user.permissions.includes(permission)) {\n        metrics.increment('auth.permission_denied', { permission });\n        return res.status(403).json({\n          error: 'Insufficient permissions',\n          code: 'PERMISSION_DENIED',\n          required: permission,\n        });\n      }\n\n      return next();\n    };\n  };\n\n  /**\n   * Organization access middleware\n   */\n  public requireOrganization = (\n    req: AuthRequest,\n    res: Response,\n    next: NextFunction\n  ) => {\n    const orgId = req.params.orgId || req.query.orgId;\n\n    if (!req.user || !orgId) {\n      return res.status(401).json({\n        error: 'Authentication required',\n        code: 'NOT_AUTHENTICATED',\n      });\n    }\n\n    if (!req.user.organizations?.includes(orgId as string)) {\n      return res.status(403).json({\n        error: 'Organization access denied',\n        code: 'ORG_ACCESS_DENIED',\n      });\n    }\n\n    return next();\n  };\n\n  private extractApiKey(req: Request): string | null {\n    // Check Authorization header for API key\n    const authHeader = req.headers.authorization;\n    if (authHeader?.startsWith('Bearer sk-')) {\n      return authHeader.substring(7);\n    }\n\n    // Check X-API-Key header\n    const apiKeyHeader = req.headers['x-api-key'] as string;\n    if (apiKeyHeader?.startsWith('sk-')) {\n      return apiKeyHeader;\n    }\n\n    // Query parameter support removed for security reasons\n    // API keys should only be sent via headers to prevent:\n    // - URL logging exposure\n    // - Browser history leakage\n    // - Referer header transmission\n\n    return null;\n  }\n\n  private extractToken(req: Request): string | null {\n    const authHeader = req.headers.authorization;\n    if (\n      authHeader?.startsWith('Bearer ') &&\n      !authHeader.startsWith('Bearer sk-')\n    ) {\n      return authHeader.substring(7);\n    }\n\n    // Also check cookie for web clients\n    return req.cookies?.access_token || null;\n  }\n\n  private async loadUser(\n    sub: string,\n    tokenPayload?: any\n  ): Promise<AuthUser | null> {\n    // Try cache first\n    const cached = await this.redis.get(`user:${sub}`);\n    if (cached) {\n      const cachedUser = JSON.parse(cached);\n      // Update last login time in background\n      this.userModel\n        .updateLastLogin(cachedUser.id)\n        .catch((err) => logger.error('Failed to update last login', err));\n      return cachedUser;\n    }\n\n    // Load from database\n    let dbUser = await this.userModel.findUserBySub(sub);\n\n    // If user doesn't exist, create from token payload\n    if (!dbUser && tokenPayload) {\n      dbUser = await this.userModel.createUser({\n        sub,\n        email: tokenPayload.email || `${sub}@auth.local`,\n        name: tokenPayload.name,\n        avatar: tokenPayload.picture,\n        tier: this.determineTier(tokenPayload),\n        permissions: this.determinePermissions(tokenPayload),\n        organizations: this.extractOrganizations(tokenPayload),\n        metadata: {\n          auth0: tokenPayload,\n          signupSource: 'auth0',\n          createdVia: 'auth-middleware',\n        },\n      });\n      logger.info('Auto-created user from auth token', {\n        sub,\n        email: dbUser.email,\n      });\n    }\n\n    if (!dbUser) {\n      return null;\n    }\n\n    // Update last login\n    await this.userModel.updateLastLogin(dbUser.id);\n\n    // Convert to AuthUser format\n    const user: AuthUser = {\n      id: dbUser.id,\n      sub: dbUser.sub,\n      email: dbUser.email,\n      name: dbUser.name,\n      picture: dbUser.avatar,\n      tier: dbUser.tier,\n      permissions: dbUser.permissions,\n      organizations: dbUser.organizations.map((org) => org.id),\n      metadata: dbUser.metadata,\n    };\n\n    // Cache for 5 minutes\n    await this.redis.setex(`user:${sub}`, 300, JSON.stringify(user));\n\n    return user;\n  }\n\n  private determineTier(tokenPayload: any): 'free' | 'pro' | 'enterprise' {\n    // Check custom claims or metadata\n    if (tokenPayload['https://stackmemory.ai/tier']) {\n      return tokenPayload['https://stackmemory.ai/tier'];\n    }\n\n    // Check for subscription info\n    if (tokenPayload.subscription?.plan) {\n      const plan = tokenPayload.subscription.plan.toLowerCase();\n      if (plan.includes('enterprise')) return 'enterprise';\n      if (plan.includes('pro') || plan.includes('premium')) return 'pro';\n    }\n\n    // Default to free\n    return 'free';\n  }\n\n  private determinePermissions(tokenPayload: any): string[] {\n    const permissions: string[] = ['read', 'write'];\n\n    // Check custom permissions claim\n    if (tokenPayload['https://stackmemory.ai/permissions']) {\n      return tokenPayload['https://stackmemory.ai/permissions'];\n    }\n\n    // Check standard permissions\n    if (tokenPayload.permissions && Array.isArray(tokenPayload.permissions)) {\n      return tokenPayload.permissions;\n    }\n\n    // Check roles\n    if (tokenPayload.roles && Array.isArray(tokenPayload.roles)) {\n      if (tokenPayload.roles.includes('admin')) {\n        permissions.push('admin', 'delete');\n      }\n      if (tokenPayload.roles.includes('moderator')) {\n        permissions.push('moderate');\n      }\n    }\n\n    return permissions;\n  }\n\n  private extractOrganizations(\n    tokenPayload: any\n  ): Array<{ id: string; name: string; role: string }> {\n    const orgs: Array<{ id: string; name: string; role: string }> = [];\n\n    // Check custom organization claim\n    if (tokenPayload['https://stackmemory.ai/organizations']) {\n      return tokenPayload['https://stackmemory.ai/organizations'];\n    }\n\n    // Check Auth0 organizations\n    if (tokenPayload.org_id) {\n      orgs.push({\n        id: tokenPayload.org_id,\n        name: tokenPayload.org_name || tokenPayload.org_id,\n        role: tokenPayload.org_role || 'member',\n      });\n    }\n\n    return orgs;\n  }\n\n  private async initializeMockUser(): Promise<AuthUser> {\n    const mockSub = 'dev-sub';\n\n    // Check if user exists in database\n    let dbUser = await this.userModel.findUserBySub(mockSub);\n\n    if (!dbUser) {\n      // Create mock user in database\n      dbUser = await this.userModel.createUser({\n        sub: mockSub,\n        email: 'dev@stackmemory.local',\n        name: 'Development User',\n        tier: 'enterprise',\n        permissions: ['read', 'write', 'admin', 'delete'],\n        organizations: [\n          {\n            id: 'dev-org',\n            name: 'Development Organization',\n            role: 'admin',\n          },\n        ],\n        metadata: {\n          isDevelopmentUser: true,\n          createdAt: new Date().toISOString(),\n        },\n      });\n      logger.info('Created development mock user');\n    }\n\n    return {\n      id: dbUser.id,\n      sub: dbUser.sub,\n      email: dbUser.email,\n      name: dbUser.name,\n      picture: dbUser.avatar,\n      tier: dbUser.tier,\n      permissions: dbUser.permissions,\n      organizations: dbUser.organizations.map((org) => org.id),\n      metadata: dbUser.metadata,\n    };\n  }\n\n  private getMockUser(): AuthUser {\n    // Return cached mock user if available\n    if (this.mockUser) {\n      return this.mockUser;\n    }\n\n    // Initialize mock user synchronously to prevent race conditions\n    // This runs during constructor or first use\n    if (!this.mockUserInitializing) {\n      this.mockUserInitializing = true;\n\n      // Initialize asynchronously but return a temporary user immediately\n      this.initializeMockUser()\n        .then((user) => {\n          this.mockUser = user;\n          this.mockUserInitializing = false;\n          logger.info('Mock user initialized and cached');\n        })\n        .catch((err) => {\n          logger.error('Failed to initialize mock user', err);\n          this.mockUserInitializing = false;\n        });\n    }\n\n    // Return temporary mock user while initialization is in progress\n    return {\n      id: 'temp-dev-user-id',\n      sub: 'dev-sub',\n      email: 'dev@stackmemory.local',\n      name: 'Development User',\n      tier: 'enterprise',\n      permissions: ['read', 'write', 'admin', 'delete'],\n      organizations: ['dev-org'],\n      metadata: { temporary: true },\n    };\n  }\n\n  /**\n   * Revoke a token (add to blacklist)\n   */\n  public async revokeToken(token: string): Promise<void> {\n    this.blacklistedTokens.add(token);\n    await this.redis.publish('token:revoked', token);\n\n    // Also store in Redis with TTL matching token expiry\n    const decoded = jwt.decode(token) as any;\n    if (decoded?.exp) {\n      const ttl = decoded.exp - Math.floor(Date.now() / 1000);\n      if (ttl > 0) {\n        await this.redis.setex(`blacklist:${token}`, ttl, '1');\n      }\n    }\n  }\n\n  /**\n   * Cleanup resources\n   */\n  public async close(): Promise<void> {\n    await this.redis.quit();\n  }\n}\n"],
-  "mappings": "AAKA,OAAO,SAAS;AAChB,OAAO,aAAa;AAEpB,SAAS,wBAAwC;AACjD,OAAO,WAAW;AAClB,OAAO,mBAAmB;AAC1B,SAAS,cAAc;AACvB,SAAS,eAAe;AACxB,SAAS,oBAAqC;AAmBvC,MAAM,eAAe;AAAA,EAU1B,YACU,QAQR;AARQ;AASR,SAAK,QAAQ,IAAI,MAAM,OAAO,QAAQ;AAGtC,UAAM,SACJ,OAAO,UAAU,QAAQ,IAAI,kBAAkB;AACjD,SAAK,KAAK,IAAI,cAAc,MAAM;AAClC,SAAK,YAAY,aAAa,KAAK,EAAE;AAErC,SAAK,aAAa,QAAQ;AAAA,MACxB,SAAS,WAAW,OAAO,WAAW;AAAA,MACtC,OAAO;AAAA,MACP,aAAa;AAAA;AAAA,MACb,WAAW;AAAA,MACX,uBAAuB;AAAA,IACzB,CAAC;AAED,SAAK,uBAAuB;AAC5B,SAAK,wBAAwB;AAAA,EAC/B;AAAA,EArCQ;AAAA,EACA;AAAA,EACA;AAAA,EACA,oBAAiC,oBAAI,IAAI;AAAA,EACzC;AAAA,EACA;AAAA,EACA;AAAA,EACA,uBAAuB;AAAA,EAgCvB,yBAA+B;AAErC,SAAK,eAAe,oBAAI,IAAI;AAAA,MAC1B;AAAA,QACE;AAAA,QACA,IAAI,iBAAiB;AAAA,UACnB,aAAa,KAAK;AAAA,UAClB,WAAW;AAAA,UACX,QAAQ;AAAA;AAAA,UACR,UAAU;AAAA;AAAA,UACV,eAAe;AAAA;AAAA,QACjB,CAAC;AAAA,MACH;AAAA,MACA;AAAA,QACE;AAAA,QACA,IAAI,iBAAiB;AAAA,UACnB,aAAa,KAAK;AAAA,UAClB,WAAW;AAAA,UACX,QAAQ;AAAA,UACR,UAAU;AAAA,UACV,eAAe;AAAA,QACjB,CAAC;AAAA,MACH;AAAA,MACA;AAAA,QACE;AAAA,QACA,IAAI,iBAAiB;AAAA,UACnB,aAAa,KAAK;AAAA,UAClB,WAAW;AAAA,UACX,QAAQ;AAAA,UACR,UAAU;AAAA,UACV,eAAe;AAAA,QACjB,CAAC;AAAA,MACH;AAAA,IACF,CAAC;AAGD,SAAK,aAAa;AAAA,MAChB;AAAA,MACA,IAAI,iBAAiB;AAAA,QACnB,aAAa,KAAK;AAAA,QAClB,WAAW;AAAA,QACX,QAAQ;AAAA;AAAA,QACR,UAAU;AAAA,QACV,eAAe;AAAA;AAAA,MACjB,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEQ,0BAAgC;AAEtC,UAAM,aAAa,IAAI,MAAM,KAAK,OAAO,QAAQ;AACjD,eAAW,UAAU,eAAe;AAEpC,eAAW,GAAG,WAAW,CAAC,SAAS,UAAU;AAC3C,UAAI,YAAY,iBAAiB;AAC/B,aAAK,kBAAkB,IAAI,KAAK;AAEhC,YAAI,KAAK,kBAAkB,OAAO,KAAO;AACvC,eAAK,kBAAkB,MAAM;AAAA,QAC/B;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEA,MAAc,cAAc,KAA8B;AACxD,WAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,WAAK,WAAW,cAAc,KAAK,CAAC,KAAK,QAAQ;AAC/C,YAAI,KAAK;AACP,iBAAO,GAAG;AAAA,QACZ,OAAO;AACL,gBAAM,aAAa,KAAK,aAAa;AACrC,cAAI,CAAC,YAAY;AACf,mBAAO,IAAI,MAAM,sBAAsB,CAAC;AAAA,UAC1C,OAAO;AACL,oBAAQ,UAAU;AAAA,UACpB;AAAA,QACF;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA,EAKO,eAAe,OACpB,KACA,KACA,SACiB;AACjB,UAAM,YAAY,KAAK,IAAI;AAE3B,QAAI;AAEF,UAAI,IAAI,SAAS,aAAa,IAAI,SAAS,YAAY;AACrD,eAAO,KAAK;AAAA,MACd;AAGA,UAAI,KAAK,OAAO,cAAc,QAAQ,IAAI,aAAa,eAAe;AACpE,YAAI,OAAO,KAAK,YAAY;AAC5B,eAAO,KAAK;AAAA,MACd;AAGA,YAAM,QAAQ,KAAK,aAAa,GAAG;AACnC,YAAM,SAAS,KAAK,cAAc,GAAG;AAErC,UAAI,CAAC,SAAS,CAAC,QAAQ;AACrB,gBAAQ,UAAU,0BAA0B;AAC5C,eAAO,IAAI,OAAO,GAAG,EAAE,KAAK;AAAA,UAC1B,OAAO;AAAA,UACP,MAAM;AAAA,QACR,CAAC;AAAA,MACH;AAGA,UAAI,QAAQ;AACV,cAAMA,QAAO,MAAM,KAAK,UAAU,eAAe,MAAM;AACvD,YAAI,CAACA,OAAM;AACT,kBAAQ,UAAU,sBAAsB;AACxC,iBAAO,IAAI,OAAO,GAAG,EAAE,KAAK;AAAA,YAC1B,OAAO;AAAA,YACP,MAAM;AAAA,UACR,CAAC;AAAA,QACH;AAGA,YAAI,OAAO;AAAA,UACT,IAAIA,MAAK;AAAA,UACT,KAAKA,MAAK;AAAA,UACV,OAAOA,MAAK;AAAA,UACZ,MAAMA,MAAK;AAAA,UACX,SAASA,MAAK;AAAA,UACd,MAAMA,MAAK;AAAA,UACX,aAAaA,MAAK;AAAA,UAClB,eAAeA,MAAK,cAAc,IAAI,CAAC,QAAQ,IAAI,EAAE;AAAA,UACrD,UAAU,EAAE,GAAGA,MAAK,UAAU,YAAY,UAAU;AAAA,QACtD;AAEA,gBAAQ,UAAU,sBAAsB;AACxC,cAAM,QAAQ,OAAO,yBAAyB,KAAK,IAAI,IAAI,SAAS;AACpE,eAAO,KAAK;AAAA,MACd;AAGA,UAAI,SAAS,KAAK,kBAAkB,IAAI,KAAK,GAAG;AAC9C,gBAAQ,UAAU,wBAAwB;AAC1C,eAAO,IAAI,OAAO,GAAG,EAAE,KAAK;AAAA,UAC1B,OAAO;AAAA,UACP,MAAM;AAAA,QACR,CAAC;AAAA,MACH;AAGA,UAAI,CAAC,OAAO;AAEV,eAAO,IAAI,OAAO,GAAG,EAAE,KAAK;AAAA,UAC1B,OAAO;AAAA,UACP,MAAM;AAAA,QACR,CAAC;AAAA,MACH;AAGA,YAAM,UAAU,IAAI,OAAO,OAAO,EAAE,UAAU,KAAK,CAAC;AACpD,UAAI,CAAC,SAAS;AACZ,gBAAQ,UAAU,oBAAoB;AACtC,eAAO,IAAI,OAAO,GAAG,EAAE,KAAK;AAAA,UAC1B,OAAO;AAAA,UACP,MAAM;AAAA,QACR,CAAC;AAAA,MACH;AAGA,YAAM,aAAa,MAAM,KAAK,cAAc,QAAQ,OAAO,GAAG;AAC9D,YAAM,WAAW,IAAI,OAAO,OAAO,YAAY;AAAA,QAC7C,YAAY,CAAC,OAAO;AAAA,QACpB,UAAU,KAAK,OAAO;AAAA,QACtB,QAAQ,WAAW,KAAK,OAAO,WAAW;AAAA,MAC5C,CAAC;AAGD,YAAM,OAAO,MAAM,KAAK,SAAS,SAAS,KAAK,QAAQ;AACvD,UAAI,CAAC,MAAM;AACT,gBAAQ,UAAU,qBAAqB;AACvC,eAAO,IAAI,OAAO,GAAG,EAAE,KAAK;AAAA,UAC1B,OAAO;AAAA,UACP,MAAM;AAAA,QACR,CAAC;AAAA,MACH;AAGA,UAAI,KAAK,UAAU,WAAW;AAC5B,gBAAQ,UAAU,qBAAqB;AACvC,eAAO,IAAI,OAAO,GAAG,EAAE,KAAK;AAAA,UAC1B,OAAO;AAAA,UACP,MAAM;AAAA,QACR,CAAC;AAAA,MACH;AAGA,YAAM,cACJ,KAAK,aAAa,IAAI,KAAK,IAAI,KAAK,KAAK,aAAa,IAAI,MAAM;AAClE,UAAI;AACF,cAAM,eAAe,MAAM,YAAY,QAAQ,KAAK,EAAE;AACtD,YAAI,gBAAgB;AAGpB,YAAI,UAAU,qBAAqB,YAAY,OAAO,SAAS,CAAC;AAChE,YAAI;AAAA,UACF;AAAA,UACA,aAAa,gBAAgB,SAAS;AAAA,QACxC;AACA,YAAI;AAAA,UACF;AAAA,UACA,IAAI,KAAK,KAAK,IAAI,IAAI,aAAa,YAAY,EAAE,YAAY;AAAA,QAC/D;AAAA,MACF,SAAS,gBAAqB;AAC5B,gBAAQ,UAAU,mBAAmB;AACrC,YAAI;AAAA,UACF;AAAA,UACA,KAAK,MAAM,eAAe,eAAe,GAAI,EAAE,SAAS;AAAA,QAC1D;AACA,eAAO,IAAI,OAAO,GAAG,EAAE,KAAK;AAAA,UAC1B,OAAO;AAAA,UACP,MAAM;AAAA,UACN,YAAY,eAAe;AAAA,QAC7B,CAAC;AAAA,MACH;AAGA,UAAI,OAAO;AAGX,cAAQ,UAAU,gBAAgB,EAAE,MAAM,KAAK,KAAK,CAAC;AACrD,cAAQ,OAAO,iBAAiB,KAAK,IAAI,IAAI,SAAS;AAEtD,aAAO,KAAK,6BAA6B;AAAA,QACvC,QAAQ,KAAK;AAAA,QACb,MAAM,KAAK;AAAA,QACX,MAAM,IAAI;AAAA,MACZ,CAAC;AAED,WAAK;AAAA,IACP,SAAS,OAAY;AACnB,cAAQ,UAAU,YAAY;AAC9B,aAAO,MAAM,wBAAwB,KAAK;AAE1C,UAAI,MAAM,SAAS,qBAAqB;AACtC,eAAO,IAAI,OAAO,GAAG,EAAE,KAAK;AAAA,UAC1B,OAAO;AAAA,UACP,MAAM;AAAA,QACR,CAAC;AAAA,MACH;AAEA,UAAI,MAAM,SAAS,qBAAqB;AACtC,eAAO,IAAI,OAAO,GAAG,EAAE,KAAK;AAAA,UAC1B,OAAO;AAAA,UACP,MAAM;AAAA,QACR,CAAC;AAAA,MACH;AAEA,UAAI,OAAO,GAAG,EAAE,KAAK;AAAA,QACnB,OAAO;AAAA,QACP,MAAM;AAAA,MACR,CAAC;AAAA,IACH;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKO,wBAAwB,OAC7B,UAC6B;AAC7B,QAAI;AACF,YAAM,UAAU,IAAI,OAAO,OAAO,EAAE,UAAU,KAAK,CAAC;AACpD,UAAI,CAAC,WAAW,KAAK,kBAAkB,IAAI,KAAK,GAAG;AACjD,eAAO;AAAA,MACT;AAEA,YAAM,aAAa,MAAM,KAAK,cAAc,QAAQ,OAAO,GAAG;AAC9D,YAAM,WAAW,IAAI,OAAO,OAAO,YAAY;AAAA,QAC7C,YAAY,CAAC,OAAO;AAAA,QACpB,UAAU,KAAK,OAAO;AAAA,QACtB,QAAQ,WAAW,KAAK,OAAO,WAAW;AAAA,MAC5C,CAAC;AAED,aAAO,MAAM,KAAK,SAAS,SAAS,KAAK,QAAQ;AAAA,IACnD,SAAS,OAAO;AACd,aAAO;AAAA,QACL;AAAA,QACA,iBAAiB,QAAQ,QAAQ;AAAA,MACnC;AACA,aAAO;AAAA,IACT;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKO,oBAAoB,CAAC,eAAuB;AACjD,WAAO,CAAC,KAAkB,KAAe,SAAuB;AAC9D,UAAI,CAAC,IAAI,MAAM;AACb,eAAO,IAAI,OAAO,GAAG,EAAE,KAAK;AAAA,UAC1B,OAAO;AAAA,UACP,MAAM;AAAA,QACR,CAAC;AAAA,MACH;AAEA,UAAI,CAAC,IAAI,KAAK,YAAY,SAAS,UAAU,GAAG;AAC9C,gBAAQ,UAAU,0BAA0B,EAAE,WAAW,CAAC;AAC1D,eAAO,IAAI,OAAO,GAAG,EAAE,KAAK;AAAA,UAC1B,OAAO;AAAA,UACP,MAAM;AAAA,UACN,UAAU;AAAA,QACZ,CAAC;AAAA,MACH;AAEA,aAAO,KAAK;AAAA,IACd;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKO,sBAAsB,CAC3B,KACA,KACA,SACG;AACH,UAAM,QAAQ,IAAI,OAAO,SAAS,IAAI,MAAM;AAE5C,QAAI,CAAC,IAAI,QAAQ,CAAC,OAAO;AACvB,aAAO,IAAI,OAAO,GAAG,EAAE,KAAK;AAAA,QAC1B,OAAO;AAAA,QACP,MAAM;AAAA,MACR,CAAC;AAAA,IACH;AAEA,QAAI,CAAC,IAAI,KAAK,eAAe,SAAS,KAAe,GAAG;AACtD,aAAO,IAAI,OAAO,GAAG,EAAE,KAAK;AAAA,QAC1B,OAAO;AAAA,QACP,MAAM;AAAA,MACR,CAAC;AAAA,IACH;AAEA,WAAO,KAAK;AAAA,EACd;AAAA,EAEQ,cAAc,KAA6B;AAEjD,UAAM,aAAa,IAAI,QAAQ;AAC/B,QAAI,YAAY,WAAW,YAAY,GAAG;AACxC,aAAO,WAAW,UAAU,CAAC;AAAA,IAC/B;AAGA,UAAM,eAAe,IAAI,QAAQ,WAAW;AAC5C,QAAI,cAAc,WAAW,KAAK,GAAG;AACnC,aAAO;AAAA,IACT;AAQA,WAAO;AAAA,EACT;AAAA,EAEQ,aAAa,KAA6B;AAChD,UAAM,aAAa,IAAI,QAAQ;AAC/B,QACE,YAAY,WAAW,SAAS,KAChC,CAAC,WAAW,WAAW,YAAY,GACnC;AACA,aAAO,WAAW,UAAU,CAAC;AAAA,IAC/B;AAGA,WAAO,IAAI,SAAS,gBAAgB;AAAA,EACtC;AAAA,EAEA,MAAc,SACZ,KACA,cAC0B;AAE1B,UAAM,SAAS,MAAM,KAAK,MAAM,IAAI,QAAQ,GAAG,EAAE;AACjD,QAAI,QAAQ;AACV,YAAM,aAAa,KAAK,MAAM,MAAM;AAEpC,WAAK,UACF,gBAAgB,WAAW,EAAE,EAC7B,MAAM,CAAC,QAAQ,OAAO,MAAM,+BAA+B,GAAG,CAAC;AAClE,aAAO;AAAA,IACT;AAGA,QAAI,SAAS,MAAM,KAAK,UAAU,cAAc,GAAG;AAGnD,QAAI,CAAC,UAAU,cAAc;AAC3B,eAAS,MAAM,KAAK,UAAU,WAAW;AAAA,QACvC;AAAA,QACA,OAAO,aAAa,SAAS,GAAG,GAAG;AAAA,QACnC,MAAM,aAAa;AAAA,QACnB,QAAQ,aAAa;AAAA,QACrB,MAAM,KAAK,cAAc,YAAY;AAAA,QACrC,aAAa,KAAK,qBAAqB,YAAY;AAAA,QACnD,eAAe,KAAK,qBAAqB,YAAY;AAAA,QACrD,UAAU;AAAA,UACR,OAAO;AAAA,UACP,cAAc;AAAA,UACd,YAAY;AAAA,QACd;AAAA,MACF,CAAC;AACD,aAAO,KAAK,qCAAqC;AAAA,QAC/C;AAAA,QACA,OAAO,OAAO;AAAA,MAChB,CAAC;AAAA,IACH;AAEA,QAAI,CAAC,QAAQ;AACX,aAAO;AAAA,IACT;AAGA,UAAM,KAAK,UAAU,gBAAgB,OAAO,EAAE;AAG9C,UAAM,OAAiB;AAAA,MACrB,IAAI,OAAO;AAAA,MACX,KAAK,OAAO;AAAA,MACZ,OAAO,OAAO;AAAA,MACd,MAAM,OAAO;AAAA,MACb,SAAS,OAAO;AAAA,MAChB,MAAM,OAAO;AAAA,MACb,aAAa,OAAO;AAAA,MACpB,eAAe,OAAO,cAAc,IAAI,CAAC,QAAQ,IAAI,EAAE;AAAA,MACvD,UAAU,OAAO;AAAA,IACnB;AAGA,UAAM,KAAK,MAAM,MAAM,QAAQ,GAAG,IAAI,KAAK,KAAK,UAAU,IAAI,CAAC;AAE/D,WAAO;AAAA,EACT;AAAA,EAEQ,cAAc,cAAkD;AAEtE,QAAI,aAAa,6BAA6B,GAAG;AAC/C,aAAO,aAAa,6BAA6B;AAAA,IACnD;AAGA,QAAI,aAAa,cAAc,MAAM;AACnC,YAAM,OAAO,aAAa,aAAa,KAAK,YAAY;AACxD,UAAI,KAAK,SAAS,YAAY,EAAG,QAAO;AACxC,UAAI,KAAK,SAAS,KAAK,KAAK,KAAK,SAAS,SAAS,EAAG,QAAO;AAAA,IAC/D;AAGA,WAAO;AAAA,EACT;AAAA,EAEQ,qBAAqB,cAA6B;AACxD,UAAM,cAAwB,CAAC,QAAQ,OAAO;AAG9C,QAAI,aAAa,oCAAoC,GAAG;AACtD,aAAO,aAAa,oCAAoC;AAAA,IAC1D;AAGA,QAAI,aAAa,eAAe,MAAM,QAAQ,aAAa,WAAW,GAAG;AACvE,aAAO,aAAa;AAAA,IACtB;AAGA,QAAI,aAAa,SAAS,MAAM,QAAQ,aAAa,KAAK,GAAG;AAC3D,UAAI,aAAa,MAAM,SAAS,OAAO,GAAG;AACxC,oBAAY,KAAK,SAAS,QAAQ;AAAA,MACpC;AACA,UAAI,aAAa,MAAM,SAAS,WAAW,GAAG;AAC5C,oBAAY,KAAK,UAAU;AAAA,MAC7B;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AAAA,EAEQ,qBACN,cACmD;AACnD,UAAM,OAA0D,CAAC;AAGjE,QAAI,aAAa,sCAAsC,GAAG;AACxD,aAAO,aAAa,sCAAsC;AAAA,IAC5D;AAGA,QAAI,aAAa,QAAQ;AACvB,WAAK,KAAK;AAAA,QACR,IAAI,aAAa;AAAA,QACjB,MAAM,aAAa,YAAY,aAAa;AAAA,QAC5C,MAAM,aAAa,YAAY;AAAA,MACjC,CAAC;AAAA,IACH;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,qBAAwC;AACpD,UAAM,UAAU;AAGhB,QAAI,SAAS,MAAM,KAAK,UAAU,cAAc,OAAO;AAEvD,QAAI,CAAC,QAAQ;AAEX,eAAS,MAAM,KAAK,UAAU,WAAW;AAAA,QACvC,KAAK;AAAA,QACL,OAAO;AAAA,QACP,MAAM;AAAA,QACN,MAAM;AAAA,QACN,aAAa,CAAC,QAAQ,SAAS,SAAS,QAAQ;AAAA,QAChD,eAAe;AAAA,UACb;AAAA,YACE,IAAI;AAAA,YACJ,MAAM;AAAA,YACN,MAAM;AAAA,UACR;AAAA,QACF;AAAA,QACA,UAAU;AAAA,UACR,mBAAmB;AAAA,UACnB,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,QACpC;AAAA,MACF,CAAC;AACD,aAAO,KAAK,+BAA+B;AAAA,IAC7C;AAEA,WAAO;AAAA,MACL,IAAI,OAAO;AAAA,MACX,KAAK,OAAO;AAAA,MACZ,OAAO,OAAO;AAAA,MACd,MAAM,OAAO;AAAA,MACb,SAAS,OAAO;AAAA,MAChB,MAAM,OAAO;AAAA,MACb,aAAa,OAAO;AAAA,MACpB,eAAe,OAAO,cAAc,IAAI,CAAC,QAAQ,IAAI,EAAE;AAAA,MACvD,UAAU,OAAO;AAAA,IACnB;AAAA,EACF;AAAA,EAEQ,cAAwB;AAE9B,QAAI,KAAK,UAAU;AACjB,aAAO,KAAK;AAAA,IACd;AAIA,QAAI,CAAC,KAAK,sBAAsB;AAC9B,WAAK,uBAAuB;AAG5B,WAAK,mBAAmB,EACrB,KAAK,CAAC,SAAS;AACd,aAAK,WAAW;AAChB,aAAK,uBAAuB;AAC5B,eAAO,KAAK,kCAAkC;AAAA,MAChD,CAAC,EACA,MAAM,CAAC,QAAQ;AACd,eAAO,MAAM,kCAAkC,GAAG;AAClD,aAAK,uBAAuB;AAAA,MAC9B,CAAC;AAAA,IACL;AAGA,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,KAAK;AAAA,MACL,OAAO;AAAA,MACP,MAAM;AAAA,MACN,MAAM;AAAA,MACN,aAAa,CAAC,QAAQ,SAAS,SAAS,QAAQ;AAAA,MAChD,eAAe,CAAC,SAAS;AAAA,MACzB,UAAU,EAAE,WAAW,KAAK;AAAA,IAC9B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAa,YAAY,OAA8B;AACrD,SAAK,kBAAkB,IAAI,KAAK;AAChC,UAAM,KAAK,MAAM,QAAQ,iBAAiB,KAAK;AAG/C,UAAM,UAAU,IAAI,OAAO,KAAK;AAChC,QAAI,SAAS,KAAK;AAChB,YAAM,MAAM,QAAQ,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AACtD,UAAI,MAAM,GAAG;AACX,cAAM,KAAK,MAAM,MAAM,aAAa,KAAK,IAAI,KAAK,GAAG;AAAA,MACvD;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAa,QAAuB;AAClC,UAAM,KAAK,MAAM,KAAK;AAAA,EACxB;AACF;",
+  "sourcesContent": ["/**\n * Production Authentication Middleware for Runway MCP Server\n * Implements JWT validation with Auth0, refresh tokens, and rate limiting\n */\n\nimport jwt from 'jsonwebtoken';\nimport jwksRsa from 'jwks-rsa';\nimport { Request, Response, NextFunction } from 'express';\nimport { RateLimiterRedis, RateLimiterRes } from 'rate-limiter-flexible';\nimport Redis from 'ioredis';\nimport BetterSqlite3 from 'better-sqlite3';\nimport { logger } from '../../core/monitoring/logger.js';\nimport { metrics } from '../../core/monitoring/metrics.js';\nimport { getUserModel, UserModel, User } from '../../models/user.model.js';\n// Type-safe environment variable access\nfunction getEnv(key: string, defaultValue?: string): string {\n  const value = process.env[key];\n  if (value === undefined) {\n    if (defaultValue !== undefined) return defaultValue;\n    throw new Error(`Environment variable ${key} is required`);\n  }\n  return value;\n}\n\nfunction getOptionalEnv(key: string): string | undefined {\n  return process.env[key];\n}\n\n\nexport interface AuthUser {\n  id: string;\n  email: string;\n  sub: string;\n  name?: string;\n  picture?: string;\n  tier: 'free' | 'pro' | 'enterprise';\n  organizations?: string[];\n  permissions: string[];\n  metadata?: Record<string, any>;\n}\n\nexport interface AuthRequest extends Request {\n  user?: AuthUser;\n  rateLimitInfo?: RateLimiterRes;\n}\n\nexport class AuthMiddleware {\n  private jwksClient: jwksRsa.JwksClient;\n  private redis: Redis;\n  private rateLimiters!: Map<string, RateLimiterRedis>;\n  private blacklistedTokens: Set<string> = new Set();\n  private userModel: UserModel;\n  private db: BetterSqlite3.Database;\n  private mockUser?: AuthUser;\n  private mockUserInitializing = false;\n\n  constructor(\n    private config: {\n      auth0Domain: string;\n      auth0Audience: string;\n      redisUrl: string;\n      jwtSecret?: string;\n      bypassAuth?: boolean; // For testing\n      dbPath?: string; // Path to SQLite database\n    }\n  ) {\n    this.redis = new Redis(config.redisUrl);\n\n    // Initialize database\n    const dbPath =\n      config.dbPath || process.env['STACKMEMORY_DB'] || '.stackmemory/auth.db';\n    this.db = new BetterSqlite3(dbPath);\n    this.userModel = getUserModel(this.db);\n\n    this.jwksClient = jwksRsa({\n      jwksUri: `https://${config.auth0Domain}/.well-known/jwks.json`,\n      cache: true,\n      cacheMaxAge: 600000, // 10 minutes\n      rateLimit: true,\n      jwksRequestsPerMinute: 5,\n    });\n\n    this.initializeRateLimiters();\n    this.setupTokenBlacklistSync();\n  }\n\n  private initializeRateLimiters(): void {\n    // Different rate limits for different tiers\n    this.rateLimiters = new Map([\n      [\n        'free',\n        new RateLimiterRedis({\n          storeClient: this.redis,\n          keyPrefix: 'rl:free',\n          points: 100, // requests\n          duration: 900, // per 15 minutes\n          blockDuration: 900, // block for 15 minutes\n        }),\n      ],\n      [\n        'pro',\n        new RateLimiterRedis({\n          storeClient: this.redis,\n          keyPrefix: 'rl:pro',\n          points: 1000,\n          duration: 900,\n          blockDuration: 300,\n        }),\n      ],\n      [\n        'enterprise',\n        new RateLimiterRedis({\n          storeClient: this.redis,\n          keyPrefix: 'rl:enterprise',\n          points: 10000,\n          duration: 900,\n          blockDuration: 60,\n        }),\n      ],\n    ]);\n\n    // Special rate limiter for auth endpoints\n    this.rateLimiters.set(\n      'auth',\n      new RateLimiterRedis({\n        storeClient: this.redis,\n        keyPrefix: 'rl:auth',\n        points: 10, // Only 10 auth attempts\n        duration: 900,\n        blockDuration: 3600, // Block for 1 hour on excessive auth attempts\n      })\n    );\n  }\n\n  private setupTokenBlacklistSync(): void {\n    // Subscribe to token revocation events\n    const subscriber = new Redis(this.config.redisUrl);\n    subscriber.subscribe('token:revoked');\n\n    subscriber.on('message', (channel, token) => {\n      if (channel === 'token:revoked') {\n        this.blacklistedTokens.add(token);\n        // Clean up old tokens periodically\n        if (this.blacklistedTokens.size > 10000) {\n          this.blacklistedTokens.clear();\n        }\n      }\n    });\n  }\n\n  private async getSigningKey(kid: string): Promise<string> {\n    return new Promise((resolve, reject) => {\n      this.jwksClient.getSigningKey(kid, (err, key) => {\n        if (err) {\n          reject(err);\n        } else {\n          const signingKey = key?.getPublicKey();\n          if (!signingKey) {\n            reject(new Error('No signing key found'));\n          } else {\n            resolve(signingKey);\n          }\n        }\n      });\n    });\n  }\n\n  /**\n   * Main authentication middleware\n   */\n  public authenticate = async (\n    req: AuthRequest,\n    res: Response,\n    next: NextFunction\n  ): Promise<any> => {\n    const startTime = Date.now();\n\n    try {\n      // Bypass auth for health checks\n      if (req.path === '/health' || req.path === '/metrics') {\n        return next();\n      }\n\n      // Development bypass\n      if (this.config.bypassAuth && process.env['NODE_ENV'] === 'development') {\n        req.user = this.getMockUser();\n        return next();\n      }\n\n      // Extract token or API key\n      const token = this.extractToken(req);\n      const apiKey = this.extractApiKey(req);\n\n      if (!token && !apiKey) {\n        metrics.increment('auth.missing_credentials');\n        return res.status(401).json({\n          error: 'Authentication required',\n          code: 'MISSING_CREDENTIALS',\n        });\n      }\n\n      // API Key authentication\n      if (apiKey) {\n        const user = await this.userModel.validateApiKey(apiKey);\n        if (!user) {\n          metrics.increment('auth.invalid_api_key');\n          return res.status(401).json({\n            error: 'Invalid API key',\n            code: 'INVALID_API_KEY',\n          });\n        }\n\n        // Convert to AuthUser format\n        req.user = {\n          id: user.id,\n          sub: user.sub,\n          email: user.email,\n          name: user.name,\n          picture: user.avatar,\n          tier: user.tier,\n          permissions: user.permissions,\n          organizations: user.organizations.map((org) => org.id),\n          metadata: { ...user.metadata, authMethod: 'api_key' },\n        };\n\n        metrics.increment('auth.api_key_success');\n        await metrics.timing('auth.api_key_duration', Date.now() - startTime);\n        return next();\n      }\n\n      // Check blacklist for JWT tokens\n      if (token && this.blacklistedTokens.has(token)) {\n        metrics.increment('auth.blacklisted_token');\n        return res.status(401).json({\n          error: 'Token has been revoked',\n          code: 'TOKEN_REVOKED',\n        });\n      }\n\n      // Ensure token exists for JWT processing\n      if (!token) {\n        // This should not happen as we checked earlier, but TypeScript needs this\n        return res.status(401).json({\n          error: 'No token provided',\n          code: 'NO_TOKEN',\n        });\n      }\n\n      // Decode and verify token\n      const decoded = jwt.decode(token, { complete: true }) as any;\n      if (!decoded) {\n        metrics.increment('auth.invalid_token');\n        return res.status(401).json({\n          error: 'Invalid token format',\n          code: 'INVALID_TOKEN',\n        });\n      }\n\n      // Get signing key and verify\n      const signingKey = await this.getSigningKey(decoded.header.kid);\n      const verified = jwt.verify(token, signingKey, {\n        algorithms: ['RS256'],\n        audience: this.config.auth0Audience,\n        issuer: `https://${this.config.auth0Domain}/`,\n      }) as any;\n\n      // Load user from database or cache\n      const user = await this.loadUser(verified.sub, verified);\n      if (!user) {\n        metrics.increment('auth.user_not_found');\n        return res.status(403).json({\n          error: 'User not found',\n          code: 'USER_NOT_FOUND',\n        });\n      }\n\n      // Check user suspension\n      if (user.metadata?.suspended) {\n        metrics.increment('auth.user_suspended');\n        return res.status(403).json({\n          error: 'Account suspended',\n          code: 'ACCOUNT_SUSPENDED',\n        });\n      }\n\n      // Apply rate limiting\n      const rateLimiter =\n        this.rateLimiters.get(user.tier) || this.rateLimiters.get('free')!;\n      try {\n        const rateLimitRes = await rateLimiter.consume(user.id);\n        req.rateLimitInfo = rateLimitRes;\n\n        // Add rate limit headers\n        res.setHeader('X-RateLimit-Limit', rateLimiter.points.toString());\n        res.setHeader(\n          'X-RateLimit-Remaining',\n          rateLimitRes.remainingPoints.toString()\n        );\n        res.setHeader(\n          'X-RateLimit-Reset',\n          new Date(Date.now() + rateLimitRes.msBeforeNext).toISOString()\n        );\n      } catch (rateLimitError: any) {\n        metrics.increment('auth.rate_limited');\n        res.setHeader(\n          'Retry-After',\n          Math.round(rateLimitError.msBeforeNext / 1000).toString()\n        );\n        return res.status(429).json({\n          error: 'Too many requests',\n          code: 'RATE_LIMITED',\n          retryAfter: rateLimitError.msBeforeNext,\n        });\n      }\n\n      // Attach user to request\n      req.user = user;\n\n      // Track metrics\n      metrics.increment('auth.success', { tier: user.tier });\n      metrics.timing('auth.duration', Date.now() - startTime);\n\n      logger.info('Authentication successful', {\n        userId: user.id,\n        tier: user.tier,\n        path: req.path,\n      });\n\n      next();\n    } catch (error: any) {\n      metrics.increment('auth.error');\n      logger.error('Authentication error', error);\n\n      if (error.name === 'TokenExpiredError') {\n        return res.status(401).json({\n          error: 'Token expired',\n          code: 'TOKEN_EXPIRED',\n        });\n      }\n\n      if (error.name === 'JsonWebTokenError') {\n        return res.status(401).json({\n          error: 'Invalid token',\n          code: 'INVALID_TOKEN',\n        });\n      }\n\n      res.status(500).json({\n        error: 'Authentication failed',\n        code: 'AUTH_ERROR',\n      });\n    }\n  };\n\n  /**\n   * WebSocket authentication handler\n   */\n  public authenticateWebSocket = async (\n    token: string\n  ): Promise<AuthUser | null> => {\n    try {\n      const decoded = jwt.decode(token, { complete: true }) as any;\n      if (!decoded || this.blacklistedTokens.has(token)) {\n        return null;\n      }\n\n      const signingKey = await this.getSigningKey(decoded.header.kid);\n      const verified = jwt.verify(token, signingKey, {\n        algorithms: ['RS256'],\n        audience: this.config.auth0Audience,\n        issuer: `https://${this.config.auth0Domain}/`,\n      }) as any;\n\n      return await this.loadUser(verified.sub, verified);\n    } catch (error: unknown) {\n      logger.error(\n        'WebSocket authentication failed',\n        error instanceof Error ? error : undefined\n      );\n      return null;\n    }\n  };\n\n  /**\n   * Permission checking middleware\n   */\n  public requirePermission = (permission: string) => {\n    return (req: AuthRequest, res: Response, next: NextFunction) => {\n      if (!req.user) {\n        return res.status(401).json({\n          error: 'Authentication required',\n          code: 'NOT_AUTHENTICATED',\n        });\n      }\n\n      if (!req.user.permissions.includes(permission)) {\n        metrics.increment('auth.permission_denied', { permission });\n        return res.status(403).json({\n          error: 'Insufficient permissions',\n          code: 'PERMISSION_DENIED',\n          required: permission,\n        });\n      }\n\n      return next();\n    };\n  };\n\n  /**\n   * Organization access middleware\n   */\n  public requireOrganization = (\n    req: AuthRequest,\n    res: Response,\n    next: NextFunction\n  ) => {\n    const orgId = req.params.orgId || req.query.orgId;\n\n    if (!req.user || !orgId) {\n      return res.status(401).json({\n        error: 'Authentication required',\n        code: 'NOT_AUTHENTICATED',\n      });\n    }\n\n    if (!req.user.organizations?.includes(orgId as string)) {\n      return res.status(403).json({\n        error: 'Organization access denied',\n        code: 'ORG_ACCESS_DENIED',\n      });\n    }\n\n    return next();\n  };\n\n  private extractApiKey(req: Request): string | null {\n    // Check Authorization header for API key\n    const authHeader = req.headers.authorization;\n    if (authHeader?.startsWith('Bearer sk-')) {\n      return authHeader.substring(7);\n    }\n\n    // Check X-API-Key header\n    const apiKeyHeader = req.headers['x-api-key'] as string;\n    if (apiKeyHeader?.startsWith('sk-')) {\n      return apiKeyHeader;\n    }\n\n    // Query parameter support removed for security reasons\n    // API keys should only be sent via headers to prevent:\n    // - URL logging exposure\n    // - Browser history leakage\n    // - Referer header transmission\n\n    return null;\n  }\n\n  private extractToken(req: Request): string | null {\n    const authHeader = req.headers.authorization;\n    if (\n      authHeader?.startsWith('Bearer ') &&\n      !authHeader.startsWith('Bearer sk-')\n    ) {\n      return authHeader.substring(7);\n    }\n\n    // Also check cookie for web clients\n    return req.cookies?.access_token || null;\n  }\n\n  private async loadUser(\n    sub: string,\n    tokenPayload?: any\n  ): Promise<AuthUser | null> {\n    // Try cache first\n    const cached = await this.redis.get(`user:${sub}`);\n    if (cached) {\n      const cachedUser = JSON.parse(cached);\n      // Update last login time in background\n      this.userModel\n        .updateLastLogin(cachedUser.id)\n        .catch((err) => logger.error('Failed to update last login', err));\n      return cachedUser;\n    }\n\n    // Load from database\n    let dbUser = await this.userModel.findUserBySub(sub);\n\n    // If user doesn't exist, create from token payload\n    if (!dbUser && tokenPayload) {\n      dbUser = await this.userModel.createUser({\n        sub,\n        email: tokenPayload.email || `${sub}@auth.local`,\n        name: tokenPayload.name,\n        avatar: tokenPayload.picture,\n        tier: this.determineTier(tokenPayload),\n        permissions: this.determinePermissions(tokenPayload),\n        organizations: this.extractOrganizations(tokenPayload),\n        metadata: {\n          auth0: tokenPayload,\n          signupSource: 'auth0',\n          createdVia: 'auth-middleware',\n        },\n      });\n      logger.info('Auto-created user from auth token', {\n        sub,\n        email: dbUser.email,\n      });\n    }\n\n    if (!dbUser) {\n      return null;\n    }\n\n    // Update last login\n    await this.userModel.updateLastLogin(dbUser.id);\n\n    // Convert to AuthUser format\n    const user: AuthUser = {\n      id: dbUser.id,\n      sub: dbUser.sub,\n      email: dbUser.email,\n      name: dbUser.name,\n      picture: dbUser.avatar,\n      tier: dbUser.tier,\n      permissions: dbUser.permissions,\n      organizations: dbUser.organizations.map((org) => org.id),\n      metadata: dbUser.metadata,\n    };\n\n    // Cache for 5 minutes\n    await this.redis.setex(`user:${sub}`, 300, JSON.stringify(user));\n\n    return user;\n  }\n\n  private determineTier(tokenPayload: any): 'free' | 'pro' | 'enterprise' {\n    // Check custom claims or metadata\n    if (tokenPayload['https://stackmemory.ai/tier']) {\n      return tokenPayload['https://stackmemory.ai/tier'];\n    }\n\n    // Check for subscription info\n    if (tokenPayload.subscription?.plan) {\n      const plan = tokenPayload.subscription.plan.toLowerCase();\n      if (plan.includes('enterprise')) return 'enterprise';\n      if (plan.includes('pro') || plan.includes('premium')) return 'pro';\n    }\n\n    // Default to free\n    return 'free';\n  }\n\n  private determinePermissions(tokenPayload: any): string[] {\n    const permissions: string[] = ['read', 'write'];\n\n    // Check custom permissions claim\n    if (tokenPayload['https://stackmemory.ai/permissions']) {\n      return tokenPayload['https://stackmemory.ai/permissions'];\n    }\n\n    // Check standard permissions\n    if (tokenPayload.permissions && Array.isArray(tokenPayload.permissions)) {\n      return tokenPayload.permissions;\n    }\n\n    // Check roles\n    if (tokenPayload.roles && Array.isArray(tokenPayload.roles)) {\n      if (tokenPayload.roles.includes('admin')) {\n        permissions.push('admin', 'delete');\n      }\n      if (tokenPayload.roles.includes('moderator')) {\n        permissions.push('moderate');\n      }\n    }\n\n    return permissions;\n  }\n\n  private extractOrganizations(\n    tokenPayload: any\n  ): Array<{ id: string; name: string; role: string }> {\n    const orgs: Array<{ id: string; name: string; role: string }> = [];\n\n    // Check custom organization claim\n    if (tokenPayload['https://stackmemory.ai/organizations']) {\n      return tokenPayload['https://stackmemory.ai/organizations'];\n    }\n\n    // Check Auth0 organizations\n    if (tokenPayload.org_id) {\n      orgs.push({\n        id: tokenPayload.org_id,\n        name: tokenPayload.org_name || tokenPayload.org_id,\n        role: tokenPayload.org_role || 'member',\n      });\n    }\n\n    return orgs;\n  }\n\n  private async initializeMockUser(): Promise<AuthUser> {\n    const mockSub = 'dev-sub';\n\n    // Check if user exists in database\n    let dbUser = await this.userModel.findUserBySub(mockSub);\n\n    if (!dbUser) {\n      // Create mock user in database\n      dbUser = await this.userModel.createUser({\n        sub: mockSub,\n        email: 'dev@stackmemory.local',\n        name: 'Development User',\n        tier: 'enterprise',\n        permissions: ['read', 'write', 'admin', 'delete'],\n        organizations: [\n          {\n            id: 'dev-org',\n            name: 'Development Organization',\n            role: 'admin',\n          },\n        ],\n        metadata: {\n          isDevelopmentUser: true,\n          createdAt: new Date().toISOString(),\n        },\n      });\n      logger.info('Created development mock user');\n    }\n\n    return {\n      id: dbUser.id,\n      sub: dbUser.sub,\n      email: dbUser.email,\n      name: dbUser.name,\n      picture: dbUser.avatar,\n      tier: dbUser.tier,\n      permissions: dbUser.permissions,\n      organizations: dbUser.organizations.map((org) => org.id),\n      metadata: dbUser.metadata,\n    };\n  }\n\n  private getMockUser(): AuthUser {\n    // Return cached mock user if available\n    if (this.mockUser) {\n      return this.mockUser;\n    }\n\n    // Initialize mock user synchronously to prevent race conditions\n    // This runs during constructor or first use\n    if (!this.mockUserInitializing) {\n      this.mockUserInitializing = true;\n\n      // Initialize asynchronously but return a temporary user immediately\n      this.initializeMockUser()\n        .then((user) => {\n          this.mockUser = user;\n          this.mockUserInitializing = false;\n          logger.info('Mock user initialized and cached');\n        })\n        .catch((err) => {\n          logger.error('Failed to initialize mock user', err);\n          this.mockUserInitializing = false;\n        });\n    }\n\n    // Return temporary mock user while initialization is in progress\n    return {\n      id: 'temp-dev-user-id',\n      sub: 'dev-sub',\n      email: 'dev@stackmemory.local',\n      name: 'Development User',\n      tier: 'enterprise',\n      permissions: ['read', 'write', 'admin', 'delete'],\n      organizations: ['dev-org'],\n      metadata: { temporary: true },\n    };\n  }\n\n  /**\n   * Revoke a token (add to blacklist)\n   */\n  public async revokeToken(token: string): Promise<void> {\n    this.blacklistedTokens.add(token);\n    await this.redis.publish('token:revoked', token);\n\n    // Also store in Redis with TTL matching token expiry\n    const decoded = jwt.decode(token) as any;\n    if (decoded?.exp) {\n      const ttl = decoded.exp - Math.floor(Date.now() / 1000);\n      if (ttl > 0) {\n        await this.redis.setex(`blacklist:${token}`, ttl, '1');\n      }\n    }\n  }\n\n  /**\n   * Cleanup resources\n   */\n  public async close(): Promise<void> {\n    await this.redis.quit();\n  }\n}\n"],
+  "mappings": "AAKA,OAAO,SAAS;AAChB,OAAO,aAAa;AAEpB,SAAS,wBAAwC;AACjD,OAAO,WAAW;AAClB,OAAO,mBAAmB;AAC1B,SAAS,cAAc;AACvB,SAAS,eAAe;AACxB,SAAS,oBAAqC;AAE9C,SAAS,OAAO,KAAa,cAA+B;AAC1D,QAAM,QAAQ,QAAQ,IAAI,GAAG;AAC7B,MAAI,UAAU,QAAW;AACvB,QAAI,iBAAiB,OAAW,QAAO;AACvC,UAAM,IAAI,MAAM,wBAAwB,GAAG,cAAc;AAAA,EAC3D;AACA,SAAO;AACT;AAEA,SAAS,eAAe,KAAiC;AACvD,SAAO,QAAQ,IAAI,GAAG;AACxB;AAoBO,MAAM,eAAe;AAAA,EAU1B,YACU,QAQR;AARQ;AASR,SAAK,QAAQ,IAAI,MAAM,OAAO,QAAQ;AAGtC,UAAM,SACJ,OAAO,UAAU,QAAQ,IAAI,gBAAgB,KAAK;AACpD,SAAK,KAAK,IAAI,cAAc,MAAM;AAClC,SAAK,YAAY,aAAa,KAAK,EAAE;AAErC,SAAK,aAAa,QAAQ;AAAA,MACxB,SAAS,WAAW,OAAO,WAAW;AAAA,MACtC,OAAO;AAAA,MACP,aAAa;AAAA;AAAA,MACb,WAAW;AAAA,MACX,uBAAuB;AAAA,IACzB,CAAC;AAED,SAAK,uBAAuB;AAC5B,SAAK,wBAAwB;AAAA,EAC/B;AAAA,EArCQ;AAAA,EACA;AAAA,EACA;AAAA,EACA,oBAAiC,oBAAI,IAAI;AAAA,EACzC;AAAA,EACA;AAAA,EACA;AAAA,EACA,uBAAuB;AAAA,EAgCvB,yBAA+B;AAErC,SAAK,eAAe,oBAAI,IAAI;AAAA,MAC1B;AAAA,QACE;AAAA,QACA,IAAI,iBAAiB;AAAA,UACnB,aAAa,KAAK;AAAA,UAClB,WAAW;AAAA,UACX,QAAQ;AAAA;AAAA,UACR,UAAU;AAAA;AAAA,UACV,eAAe;AAAA;AAAA,QACjB,CAAC;AAAA,MACH;AAAA,MACA;AAAA,QACE;AAAA,QACA,IAAI,iBAAiB;AAAA,UACnB,aAAa,KAAK;AAAA,UAClB,WAAW;AAAA,UACX,QAAQ;AAAA,UACR,UAAU;AAAA,UACV,eAAe;AAAA,QACjB,CAAC;AAAA,MACH;AAAA,MACA;AAAA,QACE;AAAA,QACA,IAAI,iBAAiB;AAAA,UACnB,aAAa,KAAK;AAAA,UAClB,WAAW;AAAA,UACX,QAAQ;AAAA,UACR,UAAU;AAAA,UACV,eAAe;AAAA,QACjB,CAAC;AAAA,MACH;AAAA,IACF,CAAC;AAGD,SAAK,aAAa;AAAA,MAChB;AAAA,MACA,IAAI,iBAAiB;AAAA,QACnB,aAAa,KAAK;AAAA,QAClB,WAAW;AAAA,QACX,QAAQ;AAAA;AAAA,QACR,UAAU;AAAA,QACV,eAAe;AAAA;AAAA,MACjB,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEQ,0BAAgC;AAEtC,UAAM,aAAa,IAAI,MAAM,KAAK,OAAO,QAAQ;AACjD,eAAW,UAAU,eAAe;AAEpC,eAAW,GAAG,WAAW,CAAC,SAAS,UAAU;AAC3C,UAAI,YAAY,iBAAiB;AAC/B,aAAK,kBAAkB,IAAI,KAAK;AAEhC,YAAI,KAAK,kBAAkB,OAAO,KAAO;AACvC,eAAK,kBAAkB,MAAM;AAAA,QAC/B;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEA,MAAc,cAAc,KAA8B;AACxD,WAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,WAAK,WAAW,cAAc,KAAK,CAAC,KAAK,QAAQ;AAC/C,YAAI,KAAK;AACP,iBAAO,GAAG;AAAA,QACZ,OAAO;AACL,gBAAM,aAAa,KAAK,aAAa;AACrC,cAAI,CAAC,YAAY;AACf,mBAAO,IAAI,MAAM,sBAAsB,CAAC;AAAA,UAC1C,OAAO;AACL,oBAAQ,UAAU;AAAA,UACpB;AAAA,QACF;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA,EAKO,eAAe,OACpB,KACA,KACA,SACiB;AACjB,UAAM,YAAY,KAAK,IAAI;AAE3B,QAAI;AAEF,UAAI,IAAI,SAAS,aAAa,IAAI,SAAS,YAAY;AACrD,eAAO,KAAK;AAAA,MACd;AAGA,UAAI,KAAK,OAAO,cAAc,QAAQ,IAAI,UAAU,MAAM,eAAe;AACvE,YAAI,OAAO,KAAK,YAAY;AAC5B,eAAO,KAAK;AAAA,MACd;AAGA,YAAM,QAAQ,KAAK,aAAa,GAAG;AACnC,YAAM,SAAS,KAAK,cAAc,GAAG;AAErC,UAAI,CAAC,SAAS,CAAC,QAAQ;AACrB,gBAAQ,UAAU,0BAA0B;AAC5C,eAAO,IAAI,OAAO,GAAG,EAAE,KAAK;AAAA,UAC1B,OAAO;AAAA,UACP,MAAM;AAAA,QACR,CAAC;AAAA,MACH;AAGA,UAAI,QAAQ;AACV,cAAMA,QAAO,MAAM,KAAK,UAAU,eAAe,MAAM;AACvD,YAAI,CAACA,OAAM;AACT,kBAAQ,UAAU,sBAAsB;AACxC,iBAAO,IAAI,OAAO,GAAG,EAAE,KAAK;AAAA,YAC1B,OAAO;AAAA,YACP,MAAM;AAAA,UACR,CAAC;AAAA,QACH;AAGA,YAAI,OAAO;AAAA,UACT,IAAIA,MAAK;AAAA,UACT,KAAKA,MAAK;AAAA,UACV,OAAOA,MAAK;AAAA,UACZ,MAAMA,MAAK;AAAA,UACX,SAASA,MAAK;AAAA,UACd,MAAMA,MAAK;AAAA,UACX,aAAaA,MAAK;AAAA,UAClB,eAAeA,MAAK,cAAc,IAAI,CAAC,QAAQ,IAAI,EAAE;AAAA,UACrD,UAAU,EAAE,GAAGA,MAAK,UAAU,YAAY,UAAU;AAAA,QACtD;AAEA,gBAAQ,UAAU,sBAAsB;AACxC,cAAM,QAAQ,OAAO,yBAAyB,KAAK,IAAI,IAAI,SAAS;AACpE,eAAO,KAAK;AAAA,MACd;AAGA,UAAI,SAAS,KAAK,kBAAkB,IAAI,KAAK,GAAG;AAC9C,gBAAQ,UAAU,wBAAwB;AAC1C,eAAO,IAAI,OAAO,GAAG,EAAE,KAAK;AAAA,UAC1B,OAAO;AAAA,UACP,MAAM;AAAA,QACR,CAAC;AAAA,MACH;AAGA,UAAI,CAAC,OAAO;AAEV,eAAO,IAAI,OAAO,GAAG,EAAE,KAAK;AAAA,UAC1B,OAAO;AAAA,UACP,MAAM;AAAA,QACR,CAAC;AAAA,MACH;AAGA,YAAM,UAAU,IAAI,OAAO,OAAO,EAAE,UAAU,KAAK,CAAC;AACpD,UAAI,CAAC,SAAS;AACZ,gBAAQ,UAAU,oBAAoB;AACtC,eAAO,IAAI,OAAO,GAAG,EAAE,KAAK;AAAA,UAC1B,OAAO;AAAA,UACP,MAAM;AAAA,QACR,CAAC;AAAA,MACH;AAGA,YAAM,aAAa,MAAM,KAAK,cAAc,QAAQ,OAAO,GAAG;AAC9D,YAAM,WAAW,IAAI,OAAO,OAAO,YAAY;AAAA,QAC7C,YAAY,CAAC,OAAO;AAAA,QACpB,UAAU,KAAK,OAAO;AAAA,QACtB,QAAQ,WAAW,KAAK,OAAO,WAAW;AAAA,MAC5C,CAAC;AAGD,YAAM,OAAO,MAAM,KAAK,SAAS,SAAS,KAAK,QAAQ;AACvD,UAAI,CAAC,MAAM;AACT,gBAAQ,UAAU,qBAAqB;AACvC,eAAO,IAAI,OAAO,GAAG,EAAE,KAAK;AAAA,UAC1B,OAAO;AAAA,UACP,MAAM;AAAA,QACR,CAAC;AAAA,MACH;AAGA,UAAI,KAAK,UAAU,WAAW;AAC5B,gBAAQ,UAAU,qBAAqB;AACvC,eAAO,IAAI,OAAO,GAAG,EAAE,KAAK;AAAA,UAC1B,OAAO;AAAA,UACP,MAAM;AAAA,QACR,CAAC;AAAA,MACH;AAGA,YAAM,cACJ,KAAK,aAAa,IAAI,KAAK,IAAI,KAAK,KAAK,aAAa,IAAI,MAAM;AAClE,UAAI;AACF,cAAM,eAAe,MAAM,YAAY,QAAQ,KAAK,EAAE;AACtD,YAAI,gBAAgB;AAGpB,YAAI,UAAU,qBAAqB,YAAY,OAAO,SAAS,CAAC;AAChE,YAAI;AAAA,UACF;AAAA,UACA,aAAa,gBAAgB,SAAS;AAAA,QACxC;AACA,YAAI;AAAA,UACF;AAAA,UACA,IAAI,KAAK,KAAK,IAAI,IAAI,aAAa,YAAY,EAAE,YAAY;AAAA,QAC/D;AAAA,MACF,SAAS,gBAAqB;AAC5B,gBAAQ,UAAU,mBAAmB;AACrC,YAAI;AAAA,UACF;AAAA,UACA,KAAK,MAAM,eAAe,eAAe,GAAI,EAAE,SAAS;AAAA,QAC1D;AACA,eAAO,IAAI,OAAO,GAAG,EAAE,KAAK;AAAA,UAC1B,OAAO;AAAA,UACP,MAAM;AAAA,UACN,YAAY,eAAe;AAAA,QAC7B,CAAC;AAAA,MACH;AAGA,UAAI,OAAO;AAGX,cAAQ,UAAU,gBAAgB,EAAE,MAAM,KAAK,KAAK,CAAC;AACrD,cAAQ,OAAO,iBAAiB,KAAK,IAAI,IAAI,SAAS;AAEtD,aAAO,KAAK,6BAA6B;AAAA,QACvC,QAAQ,KAAK;AAAA,QACb,MAAM,KAAK;AAAA,QACX,MAAM,IAAI;AAAA,MACZ,CAAC;AAED,WAAK;AAAA,IACP,SAAS,OAAY;AACnB,cAAQ,UAAU,YAAY;AAC9B,aAAO,MAAM,wBAAwB,KAAK;AAE1C,UAAI,MAAM,SAAS,qBAAqB;AACtC,eAAO,IAAI,OAAO,GAAG,EAAE,KAAK;AAAA,UAC1B,OAAO;AAAA,UACP,MAAM;AAAA,QACR,CAAC;AAAA,MACH;AAEA,UAAI,MAAM,SAAS,qBAAqB;AACtC,eAAO,IAAI,OAAO,GAAG,EAAE,KAAK;AAAA,UAC1B,OAAO;AAAA,UACP,MAAM;AAAA,QACR,CAAC;AAAA,MACH;AAEA,UAAI,OAAO,GAAG,EAAE,KAAK;AAAA,QACnB,OAAO;AAAA,QACP,MAAM;AAAA,MACR,CAAC;AAAA,IACH;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKO,wBAAwB,OAC7B,UAC6B;AAC7B,QAAI;AACF,YAAM,UAAU,IAAI,OAAO,OAAO,EAAE,UAAU,KAAK,CAAC;AACpD,UAAI,CAAC,WAAW,KAAK,kBAAkB,IAAI,KAAK,GAAG;AACjD,eAAO;AAAA,MACT;AAEA,YAAM,aAAa,MAAM,KAAK,cAAc,QAAQ,OAAO,GAAG;AAC9D,YAAM,WAAW,IAAI,OAAO,OAAO,YAAY;AAAA,QAC7C,YAAY,CAAC,OAAO;AAAA,QACpB,UAAU,KAAK,OAAO;AAAA,QACtB,QAAQ,WAAW,KAAK,OAAO,WAAW;AAAA,MAC5C,CAAC;AAED,aAAO,MAAM,KAAK,SAAS,SAAS,KAAK,QAAQ;AAAA,IACnD,SAAS,OAAgB;AACvB,aAAO;AAAA,QACL;AAAA,QACA,iBAAiB,QAAQ,QAAQ;AAAA,MACnC;AACA,aAAO;AAAA,IACT;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKO,oBAAoB,CAAC,eAAuB;AACjD,WAAO,CAAC,KAAkB,KAAe,SAAuB;AAC9D,UAAI,CAAC,IAAI,MAAM;AACb,eAAO,IAAI,OAAO,GAAG,EAAE,KAAK;AAAA,UAC1B,OAAO;AAAA,UACP,MAAM;AAAA,QACR,CAAC;AAAA,MACH;AAEA,UAAI,CAAC,IAAI,KAAK,YAAY,SAAS,UAAU,GAAG;AAC9C,gBAAQ,UAAU,0BAA0B,EAAE,WAAW,CAAC;AAC1D,eAAO,IAAI,OAAO,GAAG,EAAE,KAAK;AAAA,UAC1B,OAAO;AAAA,UACP,MAAM;AAAA,UACN,UAAU;AAAA,QACZ,CAAC;AAAA,MACH;AAEA,aAAO,KAAK;AAAA,IACd;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKO,sBAAsB,CAC3B,KACA,KACA,SACG;AACH,UAAM,QAAQ,IAAI,OAAO,SAAS,IAAI,MAAM;AAE5C,QAAI,CAAC,IAAI,QAAQ,CAAC,OAAO;AACvB,aAAO,IAAI,OAAO,GAAG,EAAE,KAAK;AAAA,QAC1B,OAAO;AAAA,QACP,MAAM;AAAA,MACR,CAAC;AAAA,IACH;AAEA,QAAI,CAAC,IAAI,KAAK,eAAe,SAAS,KAAe,GAAG;AACtD,aAAO,IAAI,OAAO,GAAG,EAAE,KAAK;AAAA,QAC1B,OAAO;AAAA,QACP,MAAM;AAAA,MACR,CAAC;AAAA,IACH;AAEA,WAAO,KAAK;AAAA,EACd;AAAA,EAEQ,cAAc,KAA6B;AAEjD,UAAM,aAAa,IAAI,QAAQ;AAC/B,QAAI,YAAY,WAAW,YAAY,GAAG;AACxC,aAAO,WAAW,UAAU,CAAC;AAAA,IAC/B;AAGA,UAAM,eAAe,IAAI,QAAQ,WAAW;AAC5C,QAAI,cAAc,WAAW,KAAK,GAAG;AACnC,aAAO;AAAA,IACT;AAQA,WAAO;AAAA,EACT;AAAA,EAEQ,aAAa,KAA6B;AAChD,UAAM,aAAa,IAAI,QAAQ;AAC/B,QACE,YAAY,WAAW,SAAS,KAChC,CAAC,WAAW,WAAW,YAAY,GACnC;AACA,aAAO,WAAW,UAAU,CAAC;AAAA,IAC/B;AAGA,WAAO,IAAI,SAAS,gBAAgB;AAAA,EACtC;AAAA,EAEA,MAAc,SACZ,KACA,cAC0B;AAE1B,UAAM,SAAS,MAAM,KAAK,MAAM,IAAI,QAAQ,GAAG,EAAE;AACjD,QAAI,QAAQ;AACV,YAAM,aAAa,KAAK,MAAM,MAAM;AAEpC,WAAK,UACF,gBAAgB,WAAW,EAAE,EAC7B,MAAM,CAAC,QAAQ,OAAO,MAAM,+BAA+B,GAAG,CAAC;AAClE,aAAO;AAAA,IACT;AAGA,QAAI,SAAS,MAAM,KAAK,UAAU,cAAc,GAAG;AAGnD,QAAI,CAAC,UAAU,cAAc;AAC3B,eAAS,MAAM,KAAK,UAAU,WAAW;AAAA,QACvC;AAAA,QACA,OAAO,aAAa,SAAS,GAAG,GAAG;AAAA,QACnC,MAAM,aAAa;AAAA,QACnB,QAAQ,aAAa;AAAA,QACrB,MAAM,KAAK,cAAc,YAAY;AAAA,QACrC,aAAa,KAAK,qBAAqB,YAAY;AAAA,QACnD,eAAe,KAAK,qBAAqB,YAAY;AAAA,QACrD,UAAU;AAAA,UACR,OAAO;AAAA,UACP,cAAc;AAAA,UACd,YAAY;AAAA,QACd;AAAA,MACF,CAAC;AACD,aAAO,KAAK,qCAAqC;AAAA,QAC/C;AAAA,QACA,OAAO,OAAO;AAAA,MAChB,CAAC;AAAA,IACH;AAEA,QAAI,CAAC,QAAQ;AACX,aAAO;AAAA,IACT;AAGA,UAAM,KAAK,UAAU,gBAAgB,OAAO,EAAE;AAG9C,UAAM,OAAiB;AAAA,MACrB,IAAI,OAAO;AAAA,MACX,KAAK,OAAO;AAAA,MACZ,OAAO,OAAO;AAAA,MACd,MAAM,OAAO;AAAA,MACb,SAAS,OAAO;AAAA,MAChB,MAAM,OAAO;AAAA,MACb,aAAa,OAAO;AAAA,MACpB,eAAe,OAAO,cAAc,IAAI,CAAC,QAAQ,IAAI,EAAE;AAAA,MACvD,UAAU,OAAO;AAAA,IACnB;AAGA,UAAM,KAAK,MAAM,MAAM,QAAQ,GAAG,IAAI,KAAK,KAAK,UAAU,IAAI,CAAC;AAE/D,WAAO;AAAA,EACT;AAAA,EAEQ,cAAc,cAAkD;AAEtE,QAAI,aAAa,6BAA6B,GAAG;AAC/C,aAAO,aAAa,6BAA6B;AAAA,IACnD;AAGA,QAAI,aAAa,cAAc,MAAM;AACnC,YAAM,OAAO,aAAa,aAAa,KAAK,YAAY;AACxD,UAAI,KAAK,SAAS,YAAY,EAAG,QAAO;AACxC,UAAI,KAAK,SAAS,KAAK,KAAK,KAAK,SAAS,SAAS,EAAG,QAAO;AAAA,IAC/D;AAGA,WAAO;AAAA,EACT;AAAA,EAEQ,qBAAqB,cAA6B;AACxD,UAAM,cAAwB,CAAC,QAAQ,OAAO;AAG9C,QAAI,aAAa,oCAAoC,GAAG;AACtD,aAAO,aAAa,oCAAoC;AAAA,IAC1D;AAGA,QAAI,aAAa,eAAe,MAAM,QAAQ,aAAa,WAAW,GAAG;AACvE,aAAO,aAAa;AAAA,IACtB;AAGA,QAAI,aAAa,SAAS,MAAM,QAAQ,aAAa,KAAK,GAAG;AAC3D,UAAI,aAAa,MAAM,SAAS,OAAO,GAAG;AACxC,oBAAY,KAAK,SAAS,QAAQ;AAAA,MACpC;AACA,UAAI,aAAa,MAAM,SAAS,WAAW,GAAG;AAC5C,oBAAY,KAAK,UAAU;AAAA,MAC7B;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AAAA,EAEQ,qBACN,cACmD;AACnD,UAAM,OAA0D,CAAC;AAGjE,QAAI,aAAa,sCAAsC,GAAG;AACxD,aAAO,aAAa,sCAAsC;AAAA,IAC5D;AAGA,QAAI,aAAa,QAAQ;AACvB,WAAK,KAAK;AAAA,QACR,IAAI,aAAa;AAAA,QACjB,MAAM,aAAa,YAAY,aAAa;AAAA,QAC5C,MAAM,aAAa,YAAY;AAAA,MACjC,CAAC;AAAA,IACH;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,qBAAwC;AACpD,UAAM,UAAU;AAGhB,QAAI,SAAS,MAAM,KAAK,UAAU,cAAc,OAAO;AAEvD,QAAI,CAAC,QAAQ;AAEX,eAAS,MAAM,KAAK,UAAU,WAAW;AAAA,QACvC,KAAK;AAAA,QACL,OAAO;AAAA,QACP,MAAM;AAAA,QACN,MAAM;AAAA,QACN,aAAa,CAAC,QAAQ,SAAS,SAAS,QAAQ;AAAA,QAChD,eAAe;AAAA,UACb;AAAA,YACE,IAAI;AAAA,YACJ,MAAM;AAAA,YACN,MAAM;AAAA,UACR;AAAA,QACF;AAAA,QACA,UAAU;AAAA,UACR,mBAAmB;AAAA,UACnB,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,QACpC;AAAA,MACF,CAAC;AACD,aAAO,KAAK,+BAA+B;AAAA,IAC7C;AAEA,WAAO;AAAA,MACL,IAAI,OAAO;AAAA,MACX,KAAK,OAAO;AAAA,MACZ,OAAO,OAAO;AAAA,MACd,MAAM,OAAO;AAAA,MACb,SAAS,OAAO;AAAA,MAChB,MAAM,OAAO;AAAA,MACb,aAAa,OAAO;AAAA,MACpB,eAAe,OAAO,cAAc,IAAI,CAAC,QAAQ,IAAI,EAAE;AAAA,MACvD,UAAU,OAAO;AAAA,IACnB;AAAA,EACF;AAAA,EAEQ,cAAwB;AAE9B,QAAI,KAAK,UAAU;AACjB,aAAO,KAAK;AAAA,IACd;AAIA,QAAI,CAAC,KAAK,sBAAsB;AAC9B,WAAK,uBAAuB;AAG5B,WAAK,mBAAmB,EACrB,KAAK,CAAC,SAAS;AACd,aAAK,WAAW;AAChB,aAAK,uBAAuB;AAC5B,eAAO,KAAK,kCAAkC;AAAA,MAChD,CAAC,EACA,MAAM,CAAC,QAAQ;AACd,eAAO,MAAM,kCAAkC,GAAG;AAClD,aAAK,uBAAuB;AAAA,MAC9B,CAAC;AAAA,IACL;AAGA,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,KAAK;AAAA,MACL,OAAO;AAAA,MACP,MAAM;AAAA,MACN,MAAM;AAAA,MACN,aAAa,CAAC,QAAQ,SAAS,SAAS,QAAQ;AAAA,MAChD,eAAe,CAAC,SAAS;AAAA,MACzB,UAAU,EAAE,WAAW,KAAK;AAAA,IAC9B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAa,YAAY,OAA8B;AACrD,SAAK,kBAAkB,IAAI,KAAK;AAChC,UAAM,KAAK,MAAM,QAAQ,iBAAiB,KAAK;AAG/C,UAAM,UAAU,IAAI,OAAO,KAAK;AAChC,QAAI,SAAS,KAAK;AAChB,YAAM,MAAM,QAAQ,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AACtD,UAAI,MAAM,GAAG;AACX,cAAM,KAAK,MAAM,MAAM,aAAa,KAAK,IAAI,KAAK,GAAG;AAAA,MACvD;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAa,QAAuB;AAClC,UAAM,KAAK,MAAM,KAAK;AAAA,EACxB;AACF;",
   "names": ["user"]
 }