agentic-flow 3.0.0-alpha.2 → 3.1.0

package/dist/agentic-flow/src/security/rate-limiter.js

@@ -1,133 +0,0 @@
-/**
- * Rate Limiting Security Module
- * Prevents DoS attacks (VUL-010)
- */
-export class RateLimiter {
-    requests = new Map();
-    config;
-    constructor(config) {
-        this.config = config;
-        // Cleanup old entries every minute
-        setInterval(() => this.cleanup(), 60000);
-    }
-    /**
-     * Check if request should be allowed
-     */
-    async consume(key = 'default') {
-        const now = Date.now();
-        const windowStart = now - this.config.windowMs;
-        // Get or create request history for this key
-        let history = this.requests.get(key) || [];
-        // Remove expired requests
-        history = history.filter((timestamp) => timestamp > windowStart);
-        // Check if limit exceeded
-        if (history.length >= this.config.maxRequests) {
-            const oldestRequest = Math.min(...history);
-            const retryAfter = Math.ceil((oldestRequest + this.config.windowMs - now) / 1000);
-            throw new RateLimitError(`Rate limit exceeded: max ${this.config.maxRequests} requests per ${this.config.windowMs / 1000}s`, {
-                remaining: 0,
-                resetTime: oldestRequest + this.config.windowMs,
-                retryAfter,
-            });
-        }
-        // Add current request
-        history.push(now);
-        this.requests.set(key, history);
-        return {
-            remaining: this.config.maxRequests - history.length,
-            resetTime: now + this.config.windowMs,
-        };
-    }
-    /**
-     * Get current limit status without consuming
-     */
-    getStatus(key = 'default') {
-        const now = Date.now();
-        const windowStart = now - this.config.windowMs;
-        const history = (this.requests.get(key) || []).filter((timestamp) => timestamp > windowStart);
-        return {
-            remaining: this.config.maxRequests - history.length,
-            resetTime: now + this.config.windowMs,
-        };
-    }
-    /**
-     * Reset limit for a specific key
-     */
-    reset(key = 'default') {
-        this.requests.delete(key);
-    }
-    /**
-     * Cleanup expired entries
-     */
-    cleanup() {
-        const now = Date.now();
-        const windowStart = now - this.config.windowMs;
-        for (const [key, history] of this.requests.entries()) {
-            const validRequests = history.filter((timestamp) => timestamp > windowStart);
-            if (validRequests.length === 0) {
-                this.requests.delete(key);
-            }
-            else {
-                this.requests.set(key, validRequests);
-            }
-        }
-    }
-}
-export class RateLimitError extends Error {
-    info;
-    constructor(message, info) {
-        super(message);
-        this.info = info;
-        this.name = 'RateLimitError';
-    }
-}
-// Pre-configured rate limiters for different use cases
-export const orchestrationLimiter = new RateLimiter({
-    maxRequests: 10,
-    windowMs: 60000, // 10 requests per minute
-});
-export const memoryOperationLimiter = new RateLimiter({
-    maxRequests: 100,
-    windowMs: 60000, // 100 operations per minute
-});
-export const fileOperationLimiter = new RateLimiter({
-    maxRequests: 50,
-    windowMs: 60000, // 50 file ops per minute
-});
-/**
- * Max concurrent runs tracker
- */
-export class ConcurrencyLimiter {
-    activeRuns = new Set();
-    maxConcurrent;
-    constructor(maxConcurrent = 100) {
-        this.maxConcurrent = maxConcurrent;
-    }
-    /**
-     * Acquire a run slot
-     */
-    acquire(runId) {
-        if (this.activeRuns.size >= this.maxConcurrent) {
-            throw new Error(`Maximum concurrent runs (${this.maxConcurrent}) exceeded. Active: ${this.activeRuns.size}`);
-        }
-        this.activeRuns.add(runId);
-    }
-    /**
-     * Release a run slot
-     */
-    release(runId) {
-        this.activeRuns.delete(runId);
-    }
-    /**
-     * Get current status
-     */
-    getStatus() {
-        return {
-            active: this.activeRuns.size,
-            available: this.maxConcurrent - this.activeRuns.size,
-            max: this.maxConcurrent,
-        };
-    }
-}
-export const concurrencyLimiter = new ConcurrencyLimiter(100);
-//# sourceMappingURL=rate-limiter.js.map

package/dist/agentic-flow/src/security/rate-limiter.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"rate-limiter.js","sourceRoot":"","sources":["../../../../src/security/rate-limiter.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAcH,MAAM,OAAO,WAAW;IACd,QAAQ,GAA0B,IAAI,GAAG,EAAE,CAAC;IAC5C,MAAM,CAAkB;IAEhC,YAAY,MAAuB;QACjC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QAErB,mCAAmC;QACnC,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;IAC3C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,MAAc,SAAS;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QAE/C,6CAA6C;QAC7C,IAAI,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAE3C,0BAA0B;QAC1B,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,GAAG,WAAW,CAAC,CAAC;QAEjE,0BAA0B;QAC1B,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC9C,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC;YAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;YAElF,MAAM,IAAI,cAAc,CACtB,4BAA4B,IAAI,CAAC,MAAM,CAAC,WAAW,iBAAiB,IAAI,CAAC,MAAM,CAAC,QAAQ,GAAG,IAAI,GAAG,EAClG;gBACE,SAAS,EAAE,CAAC;gBACZ,SAAS,EAAE,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAC/C,UAAU;aACX,CACF,CAAC;QACJ,CAAC;QAED,sBAAsB;QACtB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAEhC,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,GAAG,OAAO,CAAC,MAAM;YACnD,SAAS,EAAE,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ;SACtC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,MAAc,SAAS;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QAE/C,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CACnD,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,GAAG,WAAW,CACvC,CAAC;QAEF,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,GAAG,OAAO,CAAC,MAAM;YACnD,SAAS,EAAE,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ;SACtC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAc,SAAS;QAC3B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED;;OAEG;IACK,OAAO;QACb,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QAE/C,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;YACrD,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,GAAG,WAAW,CAAC,CAAC;YAE7E,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC5B,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED,MAAM,OAAO,cAAe,SAAQ,KAAK;IAG9B;IAFT,YACE,OAAe,EACR,IAAmB;QAE1B,KAAK,CAAC,OAAO,CAAC,CAAC;QAFR,SAAI,GAAJ,IAAI,CAAe;QAG1B,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED,uDAAuD;AACvD,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,WAAW,CAAC;IAClD,WAAW,EAAE,EAAE;IACf,QAAQ,EAAE,KAAK,EAAE,yBAAyB;CAC3C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,WAAW,CAAC;IACpD,WAAW,EAAE,GAAG;IAChB,QAAQ,EAAE,KAAK,EAAE,4BAA4B;CAC9C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,WAAW,CAAC;IAClD,WAAW,EAAE,EAAE;IACf,QAAQ,EAAE,KAAK,EAAE,yBAAyB;CAC3C,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,OAAO,kBAAkB;IACrB,UAAU,GAAgB,IAAI,GAAG,EAAE,CAAC;IACpC,aAAa,CAAS;IAE9B,YAAY,gBAAwB,GAAG;QACrC,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,KAAa;QACnB,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CACb,4BAA4B,IAAI,CAAC,aAAa,uBAAuB,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAC5F,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,KAAa;QACnB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAC5B,SAAS,EAAE,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI;YACpD,GAAG,EAAE,IAAI,CAAC,aAAa;SACxB,CAAC;IACJ,CAAC;CACF;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,kBAAkB,CAAC,GAAG,CAAC,CAAC","sourcesContent":["/**\n * Rate Limiting Security Module\n * Prevents DoS attacks (VUL-010)\n */\n\nexport interface RateLimitConfig {\n  maxRequests: number;\n  windowMs: number;\n  keyGenerator?: (context: any) => string;\n}\n\nexport interface RateLimitInfo {\n  remaining: number;\n  resetTime: number;\n  retryAfter?: number;\n}\n\nexport class RateLimiter {\n  private requests: Map<string, number[]> = new Map();\n  private config: RateLimitConfig;\n\n  constructor(config: RateLimitConfig) {\n    this.config = config;\n\n    // Cleanup old entries every minute\n    setInterval(() => this.cleanup(), 60000);\n  }\n\n  /**\n   * Check if request should be allowed\n   */\n  async consume(key: string = 'default'): Promise<RateLimitInfo> {\n    const now = Date.now();\n    const windowStart = now - this.config.windowMs;\n\n    // Get or create request history for this key\n    let history = this.requests.get(key) || [];\n\n    // Remove expired requests\n    history = history.filter((timestamp) => timestamp > windowStart);\n\n    // Check if limit exceeded\n    if (history.length >= this.config.maxRequests) {\n      const oldestRequest = Math.min(...history);\n      const retryAfter = Math.ceil((oldestRequest + this.config.windowMs - now) / 1000);\n\n      throw new RateLimitError(\n        `Rate limit exceeded: max ${this.config.maxRequests} requests per ${this.config.windowMs / 1000}s`,\n        {\n          remaining: 0,\n          resetTime: oldestRequest + this.config.windowMs,\n          retryAfter,\n        }\n      );\n    }\n\n    // Add current request\n    history.push(now);\n    this.requests.set(key, history);\n\n    return {\n      remaining: this.config.maxRequests - history.length,\n      resetTime: now + this.config.windowMs,\n    };\n  }\n\n  /**\n   * Get current limit status without consuming\n   */\n  getStatus(key: string = 'default'): RateLimitInfo {\n    const now = Date.now();\n    const windowStart = now - this.config.windowMs;\n\n    const history = (this.requests.get(key) || []).filter(\n      (timestamp) => timestamp > windowStart\n    );\n\n    return {\n      remaining: this.config.maxRequests - history.length,\n      resetTime: now + this.config.windowMs,\n    };\n  }\n\n  /**\n   * Reset limit for a specific key\n   */\n  reset(key: string = 'default'): void {\n    this.requests.delete(key);\n  }\n\n  /**\n   * Cleanup expired entries\n   */\n  private cleanup(): void {\n    const now = Date.now();\n    const windowStart = now - this.config.windowMs;\n\n    for (const [key, history] of this.requests.entries()) {\n      const validRequests = history.filter((timestamp) => timestamp > windowStart);\n\n      if (validRequests.length === 0) {\n        this.requests.delete(key);\n      } else {\n        this.requests.set(key, validRequests);\n      }\n    }\n  }\n}\n\nexport class RateLimitError extends Error {\n  constructor(\n    message: string,\n    public info: RateLimitInfo\n  ) {\n    super(message);\n    this.name = 'RateLimitError';\n  }\n}\n\n// Pre-configured rate limiters for different use cases\nexport const orchestrationLimiter = new RateLimiter({\n  maxRequests: 10,\n  windowMs: 60000, // 10 requests per minute\n});\n\nexport const memoryOperationLimiter = new RateLimiter({\n  maxRequests: 100,\n  windowMs: 60000, // 100 operations per minute\n});\n\nexport const fileOperationLimiter = new RateLimiter({\n  maxRequests: 50,\n  windowMs: 60000, // 50 file ops per minute\n});\n\n/**\n * Max concurrent runs tracker\n */\nexport class ConcurrencyLimiter {\n  private activeRuns: Set<string> = new Set();\n  private maxConcurrent: number;\n\n  constructor(maxConcurrent: number = 100) {\n    this.maxConcurrent = maxConcurrent;\n  }\n\n  /**\n   * Acquire a run slot\n   */\n  acquire(runId: string): void {\n    if (this.activeRuns.size >= this.maxConcurrent) {\n      throw new Error(\n        `Maximum concurrent runs (${this.maxConcurrent}) exceeded. Active: ${this.activeRuns.size}`\n      );\n    }\n\n    this.activeRuns.add(runId);\n  }\n\n  /**\n   * Release a run slot\n   */\n  release(runId: string): void {\n    this.activeRuns.delete(runId);\n  }\n\n  /**\n   * Get current status\n   */\n  getStatus(): { active: number; available: number; max: number } {\n    return {\n      active: this.activeRuns.size,\n      available: this.maxConcurrent - this.activeRuns.size,\n      max: this.maxConcurrent,\n    };\n  }\n}\n\nexport const concurrencyLimiter = new ConcurrencyLimiter(100);\n"]}

package/dist/agentic-flow/src/security/secret-redaction.d.ts

@@ -1,39 +0,0 @@
-/**
- * Secret Redaction Security Module
- * Prevents API key exposure in logs (CVE-2026-005)
- */
-export interface RedactionOptions {
-    showPrefix?: number;
-    showSuffix?: number;
-    maskChar?: string;
-}
-export declare class SecretRedactor {
-    private static readonly SECRET_PATTERNS;
-    /**
-     * Redact API key for safe logging
-     */
-    redactKey(key: string | undefined, options?: RedactionOptions): string;
-    /**
-     * Redact secrets from string (for error messages, logs)
-     */
-    redactString(text: string): string;
-    /**
-     * Redact secrets from object (deep)
-     */
-    redactObject<T extends Record<string, any>>(obj: T): T;
-    /**
-     * Check if a key name suggests it contains a secret
-     */
-    private isSecretKey;
-    /**
-     * Create safe environment for child processes
-     */
-    sanitizeEnvironment(env: NodeJS.ProcessEnv, requiredKeys?: string[]): NodeJS.ProcessEnv;
-    /**
-     * Log environment variable status without exposing values
-     */
-    logEnvStatus(keys: string[], env?: NodeJS.ProcessEnv): string[];
-}
-export declare const secretRedactor: SecretRedactor;
-export declare const redactKey: (key: string | undefined, options?: RedactionOptions) => string, redactString: (text: string) => string, redactObject: <T extends Record<string, any>>(obj: T) => T, sanitizeEnvironment: (env: NodeJS.ProcessEnv, requiredKeys?: string[]) => NodeJS.ProcessEnv, logEnvStatus: (keys: string[], env?: NodeJS.ProcessEnv) => string[];
-//# sourceMappingURL=secret-redaction.d.ts.map

package/dist/agentic-flow/src/security/secret-redaction.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"secret-redaction.d.ts","sourceRoot":"","sources":["../../../../src/security/secret-redaction.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,qBAAa,cAAc;IACzB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAWrC;IAEF;;OAEG;IACH,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,GAAE,gBAAqB,GAAG,MAAM;IAkB1E;;OAEG;IACH,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAalC;;OAEG;IACH,YAAY,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC;IA+BtD;;OAEG;IACH,OAAO,CAAC,WAAW;IAiBnB;;OAEG;IACH,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,YAAY,GAAE,MAAM,EAAO,GAAG,MAAM,CAAC,UAAU;IAsB3F;;OAEG;IACH,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,EAAE;CAM7E;AAGD,eAAO,MAAM,cAAc,gBAAuB,CAAC;AAGnD,eAAO,MACL,SAAS,QAjIM,MAAM,GAAG,SAAS,YAAW,gBAAgB,KAAQ,MAAM,EAkI1E,YAAY,SA7GO,MAAM,KAAG,MAAM,EA8GlC,YAAY,GA9FC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,KAAG,CAAC,EA+FtD,mBAAmB,QAzCM,MAAM,CAAC,UAAU,iBAAgB,MAAM,EAAE,KAAQ,MAAM,CAAC,UAAU,EA0C3F,YAAY,SAjBO,MAAM,EAAE,QAAO,MAAM,CAAC,UAAU,KAAiB,MAAM,EAkB1D,CAAC"}

package/dist/agentic-flow/src/security/secret-redaction.js

@@ -1,128 +0,0 @@
-/**
- * Secret Redaction Security Module
- * Prevents API key exposure in logs (CVE-2026-005)
- */
-export class SecretRedactor {
-    static SECRET_PATTERNS = [
-        /sk-[a-zA-Z0-9]{32,}/g, // Stripe/Anthropic keys
-        /sk-ant-[a-zA-Z0-9-]{32,}/g, // Anthropic keys
-        /sk-or-v1-[a-zA-Z0-9-]{32,}/g, // OpenRouter keys
-        /AIza[a-zA-Z0-9-_]{35}/g, // Google API keys
-        /ghp_[a-zA-Z0-9]{36}/g, // GitHub personal access tokens
-        /gho_[a-zA-Z0-9]{36}/g, // GitHub OAuth tokens
-        /glpat-[a-zA-Z0-9-_]{20}/g, // GitLab tokens
-        /xox[baprs]-[a-zA-Z0-9-]{10,}/g, // Slack tokens
-        /ya29\.[a-zA-Z0-9-_]+/g, // Google OAuth tokens
-        /AKIA[a-zA-Z0-9]{16}/g, // AWS access keys
-    ];
-    /**
-     * Redact API key for safe logging
-     */
-    redactKey(key, options = {}) {
-        if (!key)
-            return '✗ not set';
-        const prefixLen = options.showPrefix ?? 7;
-        const suffixLen = options.showSuffix ?? 4;
-        const maskChar = options.maskChar ?? '*';
-        if (key.length < prefixLen + suffixLen) {
-            return maskChar.repeat(8); // Too short, fully redact
-        }
-        const prefix = key.substring(0, prefixLen);
-        const suffix = key.slice(-suffixLen);
-        const masked = maskChar.repeat(Math.min(key.length - prefixLen - suffixLen, 20));
-        return `✓ set (${prefix}${masked}${suffix})`;
-    }
-    /**
-     * Redact secrets from string (for error messages, logs)
-     */
-    redactString(text) {
-        let redacted = text;
-        for (const pattern of SecretRedactor.SECRET_PATTERNS) {
-            redacted = redacted.replace(pattern, (match) => {
-                const prefix = match.substring(0, 7);
-                return `${prefix}${'*'.repeat(8)}`;
-            });
-        }
-        return redacted;
-    }
-    /**
-     * Redact secrets from object (deep)
-     */
-    redactObject(obj) {
-        const redacted = { ...obj };
-        for (const [key, value] of Object.entries(redacted)) {
-            // Redact known secret keys
-            if (this.isSecretKey(key)) {
-                redacted[key] = this.redactKey(String(value));
-                continue;
-            }
-            // Recursively redact nested objects
-            if (typeof value === 'object' && value !== null && !Array.isArray(value)) {
-                redacted[key] = this.redactObject(value);
-            }
-            // Redact strings that match secret patterns
-            if (typeof value === 'string') {
-                redacted[key] = this.redactString(value);
-            }
-            // Redact arrays
-            if (Array.isArray(value)) {
-                redacted[key] = value.map((item) => typeof item === 'string' ? this.redactString(item) : item);
-            }
-        }
-        return redacted;
-    }
-    /**
-     * Check if a key name suggests it contains a secret
-     */
-    isSecretKey(key) {
-        const secretKeywords = [
-            'key',
-            'secret',
-            'token',
-            'password',
-            'apikey',
-            'api_key',
-            'auth',
-            'credential',
-            'private',
-        ];
-        const lowerKey = key.toLowerCase();
-        return secretKeywords.some((keyword) => lowerKey.includes(keyword));
-    }
-    /**
-     * Create safe environment for child processes
-     */
-    sanitizeEnvironment(env, requiredKeys = []) {
-        const safeEnv = {
-            PATH: env.PATH,
-            NODE_ENV: env.NODE_ENV,
-            HOME: env.HOME,
-            USER: env.USER,
-            TERM: env.TERM,
-            SHELL: env.SHELL,
-            LANG: env.LANG,
-            TZ: env.TZ,
-        };
-        // Only include explicitly required keys
-        for (const key of requiredKeys) {
-            if (env[key]) {
-                safeEnv[key] = env[key];
-            }
-        }
-        return safeEnv;
-    }
-    /**
-     * Log environment variable status without exposing values
-     */
-    logEnvStatus(keys, env = process.env) {
-        return keys.map((key) => {
-            const value = env[key];
-            return `${key}: ${this.redactKey(value)}`;
-        });
-    }
-}
-// Singleton instance
-export const secretRedactor = new SecretRedactor();
-// Convenience exports
-export const { redactKey, redactString, redactObject, sanitizeEnvironment, logEnvStatus, } = secretRedactor;
-//# sourceMappingURL=secret-redaction.js.map

package/dist/agentic-flow/src/security/secret-redaction.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"secret-redaction.js","sourceRoot":"","sources":["../../../../src/security/secret-redaction.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAQH,MAAM,OAAO,cAAc;IACjB,MAAM,CAAU,eAAe,GAAG;QACxC,sBAAsB,EAAE,wBAAwB;QAChD,2BAA2B,EAAE,iBAAiB;QAC9C,6BAA6B,EAAE,kBAAkB;QACjD,wBAAwB,EAAE,kBAAkB;QAC5C,sBAAsB,EAAE,gCAAgC;QACxD,sBAAsB,EAAE,sBAAsB;QAC9C,0BAA0B,EAAE,gBAAgB;QAC5C,+BAA+B,EAAE,eAAe;QAChD,uBAAuB,EAAE,sBAAsB;QAC/C,sBAAsB,EAAE,kBAAkB;KAC3C,CAAC;IAEF;;OAEG;IACH,SAAS,CAAC,GAAuB,EAAE,UAA4B,EAAE;QAC/D,IAAI,CAAC,GAAG;YAAE,OAAO,WAAW,CAAC;QAE7B,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,IAAI,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,IAAI,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,GAAG,CAAC;QAEzC,IAAI,GAAG,CAAC,MAAM,GAAG,SAAS,GAAG,SAAS,EAAE,CAAC;YACvC,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,0BAA0B;QACvD,CAAC;QAED,MAAM,MAAM,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,SAAS,GAAG,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;QAEjF,OAAO,UAAU,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,IAAY;QACvB,IAAI,QAAQ,GAAG,IAAI,CAAC;QAEpB,KAAK,MAAM,OAAO,IAAI,cAAc,CAAC,eAAe,EAAE,CAAC;YACrD,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC7C,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBACrC,OAAO,GAAG,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YACrC,CAAC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,YAAY,CAAgC,GAAM;QAChD,MAAM,QAAQ,GAAQ,EAAE,GAAG,GAAG,EAAE,CAAC;QAEjC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpD,2BAA2B;YAC3B,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1B,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC9C,SAAS;YACX,CAAC;YAED,oCAAoC;YACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzE,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YAC3C,CAAC;YAED,4CAA4C;YAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YAC3C,CAAC;YAED,gBAAgB;YAChB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACjC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAC1D,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,QAAa,CAAC;IACvB,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,GAAW;QAC7B,MAAM,cAAc,GAAG;YACrB,KAAK;YACL,QAAQ;YACR,OAAO;YACP,UAAU;YACV,QAAQ;YACR,SAAS;YACT,MAAM;YACN,YAAY;YACZ,SAAS;SACV,CAAC;QAEF,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QACnC,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IACtE,CAAC;IAED;;OAEG;IACH,mBAAmB,CAAC,GAAsB,EAAE,eAAyB,EAAE;QACrE,MAAM,OAAO,GAAsB;YACjC,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,EAAE,EAAE,GAAG,CAAC,EAAE;SACX,CAAC;QAEF,wCAAwC;QACxC,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;YAC/B,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACb,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,IAAc,EAAE,MAAyB,OAAO,CAAC,GAAG;QAC/D,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YACtB,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;YACvB,OAAO,GAAG,GAAG,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5C,CAAC,CAAC,CAAC;IACL,CAAC;;AAGH,qBAAqB;AACrB,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,cAAc,EAAE,CAAC;AAEnD,sBAAsB;AACtB,MAAM,CAAC,MAAM,EACX,SAAS,EACT,YAAY,EACZ,YAAY,EACZ,mBAAmB,EACnB,YAAY,GACb,GAAG,cAAc,CAAC","sourcesContent":["/**\n * Secret Redaction Security Module\n * Prevents API key exposure in logs (CVE-2026-005)\n */\n\nexport interface RedactionOptions {\n  showPrefix?: number;\n  showSuffix?: number;\n  maskChar?: string;\n}\n\nexport class SecretRedactor {\n  private static readonly SECRET_PATTERNS = [\n    /sk-[a-zA-Z0-9]{32,}/g, // Stripe/Anthropic keys\n    /sk-ant-[a-zA-Z0-9-]{32,}/g, // Anthropic keys\n    /sk-or-v1-[a-zA-Z0-9-]{32,}/g, // OpenRouter keys\n    /AIza[a-zA-Z0-9-_]{35}/g, // Google API keys\n    /ghp_[a-zA-Z0-9]{36}/g, // GitHub personal access tokens\n    /gho_[a-zA-Z0-9]{36}/g, // GitHub OAuth tokens\n    /glpat-[a-zA-Z0-9-_]{20}/g, // GitLab tokens\n    /xox[baprs]-[a-zA-Z0-9-]{10,}/g, // Slack tokens\n    /ya29\\.[a-zA-Z0-9-_]+/g, // Google OAuth tokens\n    /AKIA[a-zA-Z0-9]{16}/g, // AWS access keys\n  ];\n\n  /**\n   * Redact API key for safe logging\n   */\n  redactKey(key: string | undefined, options: RedactionOptions = {}): string {\n    if (!key) return '✗ not set';\n\n    const prefixLen = options.showPrefix ?? 7;\n    const suffixLen = options.showSuffix ?? 4;\n    const maskChar = options.maskChar ?? '*';\n\n    if (key.length < prefixLen + suffixLen) {\n      return maskChar.repeat(8); // Too short, fully redact\n    }\n\n    const prefix = key.substring(0, prefixLen);\n    const suffix = key.slice(-suffixLen);\n    const masked = maskChar.repeat(Math.min(key.length - prefixLen - suffixLen, 20));\n\n    return `✓ set (${prefix}${masked}${suffix})`;\n  }\n\n  /**\n   * Redact secrets from string (for error messages, logs)\n   */\n  redactString(text: string): string {\n    let redacted = text;\n\n    for (const pattern of SecretRedactor.SECRET_PATTERNS) {\n      redacted = redacted.replace(pattern, (match) => {\n        const prefix = match.substring(0, 7);\n        return `${prefix}${'*'.repeat(8)}`;\n      });\n    }\n\n    return redacted;\n  }\n\n  /**\n   * Redact secrets from object (deep)\n   */\n  redactObject<T extends Record<string, any>>(obj: T): T {\n    const redacted: any = { ...obj };\n\n    for (const [key, value] of Object.entries(redacted)) {\n      // Redact known secret keys\n      if (this.isSecretKey(key)) {\n        redacted[key] = this.redactKey(String(value));\n        continue;\n      }\n\n      // Recursively redact nested objects\n      if (typeof value === 'object' && value !== null && !Array.isArray(value)) {\n        redacted[key] = this.redactObject(value);\n      }\n\n      // Redact strings that match secret patterns\n      if (typeof value === 'string') {\n        redacted[key] = this.redactString(value);\n      }\n\n      // Redact arrays\n      if (Array.isArray(value)) {\n        redacted[key] = value.map((item) =>\n          typeof item === 'string' ? this.redactString(item) : item\n        );\n      }\n    }\n\n    return redacted as T;\n  }\n\n  /**\n   * Check if a key name suggests it contains a secret\n   */\n  private isSecretKey(key: string): boolean {\n    const secretKeywords = [\n      'key',\n      'secret',\n      'token',\n      'password',\n      'apikey',\n      'api_key',\n      'auth',\n      'credential',\n      'private',\n    ];\n\n    const lowerKey = key.toLowerCase();\n    return secretKeywords.some((keyword) => lowerKey.includes(keyword));\n  }\n\n  /**\n   * Create safe environment for child processes\n   */\n  sanitizeEnvironment(env: NodeJS.ProcessEnv, requiredKeys: string[] = []): NodeJS.ProcessEnv {\n    const safeEnv: NodeJS.ProcessEnv = {\n      PATH: env.PATH,\n      NODE_ENV: env.NODE_ENV,\n      HOME: env.HOME,\n      USER: env.USER,\n      TERM: env.TERM,\n      SHELL: env.SHELL,\n      LANG: env.LANG,\n      TZ: env.TZ,\n    };\n\n    // Only include explicitly required keys\n    for (const key of requiredKeys) {\n      if (env[key]) {\n        safeEnv[key] = env[key];\n      }\n    }\n\n    return safeEnv;\n  }\n\n  /**\n   * Log environment variable status without exposing values\n   */\n  logEnvStatus(keys: string[], env: NodeJS.ProcessEnv = process.env): string[] {\n    return keys.map((key) => {\n      const value = env[key];\n      return `${key}: ${this.redactKey(value)}`;\n    });\n  }\n}\n\n// Singleton instance\nexport const secretRedactor = new SecretRedactor();\n\n// Convenience exports\nexport const {\n  redactKey,\n  redactString,\n  redactObject,\n  sanitizeEnvironment,\n  logEnvStatus,\n} = secretRedactor;\n"]}

package/dist/agentic-flow/src/services/agentdb-phase4-methods.d.ts

@@ -1,70 +0,0 @@
-/**
- * Phase 4 Controller Methods for AgentDBService
- * This file contains methods to be added to the AgentDBService class
- */
-/**
- * Run nightly learner for automated causal discovery
- */
-export declare function runNightlyLearner(this: any): Promise<any>;
-/**
- * Consolidate episodes using FlashAttention
- */
-export declare function consolidateEpisodes(this: any, sessionId?: string): Promise<any>;
-/**
- * Synchronize with remote AgentDB instance
- */
-export declare function syncWithRemote(this: any, onProgress?: (progress: any) => void): Promise<any>;
-/**
- * Get synchronization status
- */
-export declare function getSyncStatus(this: any): any;
-/**
- * Create explainable recall certificate for a retrieval
- */
-export declare function createRecallCertificate(this: any, params: {
-    queryId: string;
-    queryText: string;
-    chunks: Array<{
-        id: string;
-        type: string;
-        content: string;
-        relevance: number;
-    }>;
-    requirements: string[];
-    accessLevel?: string;
-}): Promise<any>;
-/**
- * Verify a recall certificate
- */
-export declare function verifyRecallCertificate(this: any, certificateId: string): any;
-/**
- * Get justification for a chunk in a recall certificate
- */
-export declare function getRecallJustification(this: any, certificateId: string, chunkId: string): any;
-/**
- * Trace provenance lineage for a certificate
- */
-export declare function traceProvenance(this: any, certificateId: string): any;
-/**
- * Audit a recall certificate
- */
-export declare function auditCertificate(this: any, certificateId: string): any;
-/**
- * Start QUIC server for distributed sync
- */
-export declare function startQUICServer(this: any): Promise<void>;
-/**
- * Stop QUIC server
- */
-export declare function stopQUICServer(this: any): Promise<void>;
-/**
- * Get Phase 4 controller availability status
- */
-export declare function getPhase4Status(this: any): {
-    syncCoordinator: boolean;
-    nightlyLearner: boolean;
-    explainableRecall: boolean;
-    quicClient: boolean;
-    quicServer: boolean;
-};
-//# sourceMappingURL=agentdb-phase4-methods.d.ts.map

package/dist/agentic-flow/src/services/agentdb-phase4-methods.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"agentdb-phase4-methods.d.ts","sourceRoot":"","sources":["../../../../src/services/agentdb-phase4-methods.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH;;GAEG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAK/D;AAED;;GAEG;AACH,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAKrF;AAED;;GAEG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE,GAAG,EAAE,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,KAAK,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAKlG;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,GAAG,GAAG,GAAG,CAiB5C;AAED;;GAEG;AACH,wBAAsB,uBAAuB,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE;IAC/D,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAChF,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GAAG,OAAO,CAAC,GAAG,CAAC,CAKf;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,GAAG,GAAG,CAK7E;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,GAAG,CAK7F;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,GAAG,GAAG,CAKrE;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,GAAG,GAAG,CAKtE;AAED;;GAEG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAK9D;AAED;;GAEG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAK7D;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,GAAG,GAAG;IAC1C,eAAe,EAAE,OAAO,CAAC;IACzB,cAAc,EAAE,OAAO,CAAC;IACxB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,UAAU,EAAE,OAAO,CAAC;IACpB,UAAU,EAAE,OAAO,CAAC;CACrB,CAQA"}

package/dist/agentic-flow/src/services/agentdb-phase4-methods.js

@@ -1,129 +0,0 @@
-/**
- * Phase 4 Controller Methods for AgentDBService
- * This file contains methods to be added to the AgentDBService class
- */
-// -- Phase 4 Controller Methods -------------------------------------------
-/**
- * Run nightly learner for automated causal discovery
- */
-export async function runNightlyLearner() {
-    if (!this.nightlyLearner) {
-        throw new Error('NightlyLearner not available');
-    }
-    return this.nightlyLearner.run();
-}
-/**
- * Consolidate episodes using FlashAttention
- */
-export async function consolidateEpisodes(sessionId) {
-    if (!this.nightlyLearner) {
-        throw new Error('NightlyLearner not available');
-    }
-    return this.nightlyLearner.consolidateEpisodes(sessionId);
-}
-/**
- * Synchronize with remote AgentDB instance
- */
-export async function syncWithRemote(onProgress) {
-    if (!this.syncCoordinator) {
-        throw new Error('SyncCoordinator not available');
-    }
-    return this.syncCoordinator.sync(onProgress);
-}
-/**
- * Get synchronization status
- */
-export function getSyncStatus() {
-    if (!this.syncCoordinator) {
-        return {
-            isSyncing: false,
-            autoSyncEnabled: false,
-            state: {
-                lastSyncAt: 0,
-                lastEpisodeSync: 0,
-                lastSkillSync: 0,
-                lastEdgeSync: 0,
-                totalItemsSynced: 0,
-                totalBytesSynced: 0,
-                syncCount: 0,
-            },
-        };
-    }
-    return this.syncCoordinator.getStatus();
-}
-/**
- * Create explainable recall certificate for a retrieval
- */
-export async function createRecallCertificate(params) {
-    if (!this.explainableRecall) {
-        throw new Error('ExplainableRecall not available');
-    }
-    return this.explainableRecall.createCertificate(params);
-}
-/**
- * Verify a recall certificate
- */
-export function verifyRecallCertificate(certificateId) {
-    if (!this.explainableRecall) {
-        throw new Error('ExplainableRecall not available');
-    }
-    return this.explainableRecall.verifyCertificate(certificateId);
-}
-/**
- * Get justification for a chunk in a recall certificate
- */
-export function getRecallJustification(certificateId, chunkId) {
-    if (!this.explainableRecall) {
-        throw new Error('ExplainableRecall not available');
-    }
-    return this.explainableRecall.getJustification(certificateId, chunkId);
-}
-/**
- * Trace provenance lineage for a certificate
- */
-export function traceProvenance(certificateId) {
-    if (!this.explainableRecall) {
-        throw new Error('ExplainableRecall not available');
-    }
-    return this.explainableRecall.traceProvenance(certificateId);
-}
-/**
- * Audit a recall certificate
- */
-export function auditCertificate(certificateId) {
-    if (!this.explainableRecall) {
-        throw new Error('ExplainableRecall not available');
-    }
-    return this.explainableRecall.auditCertificate(certificateId);
-}
-/**
- * Start QUIC server for distributed sync
- */
-export async function startQUICServer() {
-    if (!this.quicServer) {
-        throw new Error('QUICServer not available');
-    }
-    return this.quicServer.start();
-}
-/**
- * Stop QUIC server
- */
-export async function stopQUICServer() {
-    if (!this.quicServer) {
-        throw new Error('QUICServer not available');
-    }
-    return this.quicServer.stop();
-}
-/**
- * Get Phase 4 controller availability status
- */
-export function getPhase4Status() {
-    return {
-        syncCoordinator: this.syncCoordinator !== null,
-        nightlyLearner: this.nightlyLearner !== null,
-        explainableRecall: this.explainableRecall !== null,
-        quicClient: this.quicClient !== null,
-        quicServer: this.quicServer !== null,
-    };
-}
-//# sourceMappingURL=agentdb-phase4-methods.js.map

package/dist/agentic-flow/src/services/agentdb-phase4-methods.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"agentdb-phase4-methods.js","sourceRoot":"","sources":["../../../../src/services/agentdb-phase4-methods.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,4EAA4E;AAE5E;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,CAAC;AACnC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAY,SAAkB;IACrE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;AAC5D,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAY,UAAoC;IAClF,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AAC/C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa;IAC3B,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;QAC1B,OAAO;YACL,SAAS,EAAE,KAAK;YAChB,eAAe,EAAE,KAAK;YACtB,KAAK,EAAE;gBACL,UAAU,EAAE,CAAC;gBACb,eAAe,EAAE,CAAC;gBAClB,aAAa,EAAE,CAAC;gBAChB,YAAY,EAAE,CAAC;gBACf,gBAAgB,EAAE,CAAC;gBACnB,gBAAgB,EAAE,CAAC;gBACnB,SAAS,EAAE,CAAC;aACb;SACF,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,CAAC;AAC1C,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAY,MAMxD;IACC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,IAAI,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;AAC1D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAY,aAAqB;IACtE,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,IAAI,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC;AACjE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAY,aAAqB,EAAE,OAAe;IACtF,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;AACzE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAY,aAAqB;IAC9D,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,IAAI,CAAC,iBAAiB,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC;AAC/D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAY,aAAqB;IAC/D,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC;AAChE,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;AACjC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;AAChC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe;IAO7B,OAAO;QACL,eAAe,EAAE,IAAI,CAAC,eAAe,KAAK,IAAI;QAC9C,cAAc,EAAE,IAAI,CAAC,cAAc,KAAK,IAAI;QAC5C,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,KAAK,IAAI;QAClD,UAAU,EAAE,IAAI,CAAC,UAAU,KAAK,IAAI;QACpC,UAAU,EAAE,IAAI,CAAC,UAAU,KAAK,IAAI;KACrC,CAAC;AACJ,CAAC","sourcesContent":["/**\n * Phase 4 Controller Methods for AgentDBService\n * This file contains methods to be added to the AgentDBService class\n */\n\n// -- Phase 4 Controller Methods -------------------------------------------\n\n/**\n * Run nightly learner for automated causal discovery\n */\nexport async function runNightlyLearner(this: any): Promise<any> {\n  if (!this.nightlyLearner) {\n    throw new Error('NightlyLearner not available');\n  }\n  return this.nightlyLearner.run();\n}\n\n/**\n * Consolidate episodes using FlashAttention\n */\nexport async function consolidateEpisodes(this: any, sessionId?: string): Promise<any> {\n  if (!this.nightlyLearner) {\n    throw new Error('NightlyLearner not available');\n  }\n  return this.nightlyLearner.consolidateEpisodes(sessionId);\n}\n\n/**\n * Synchronize with remote AgentDB instance\n */\nexport async function syncWithRemote(this: any, onProgress?: (progress: any) => void): Promise<any> {\n  if (!this.syncCoordinator) {\n    throw new Error('SyncCoordinator not available');\n  }\n  return this.syncCoordinator.sync(onProgress);\n}\n\n/**\n * Get synchronization status\n */\nexport function getSyncStatus(this: any): any {\n  if (!this.syncCoordinator) {\n    return {\n      isSyncing: false,\n      autoSyncEnabled: false,\n      state: {\n        lastSyncAt: 0,\n        lastEpisodeSync: 0,\n        lastSkillSync: 0,\n        lastEdgeSync: 0,\n        totalItemsSynced: 0,\n        totalBytesSynced: 0,\n        syncCount: 0,\n      },\n    };\n  }\n  return this.syncCoordinator.getStatus();\n}\n\n/**\n * Create explainable recall certificate for a retrieval\n */\nexport async function createRecallCertificate(this: any, params: {\n  queryId: string;\n  queryText: string;\n  chunks: Array<{ id: string; type: string; content: string; relevance: number }>;\n  requirements: string[];\n  accessLevel?: string;\n}): Promise<any> {\n  if (!this.explainableRecall) {\n    throw new Error('ExplainableRecall not available');\n  }\n  return this.explainableRecall.createCertificate(params);\n}\n\n/**\n * Verify a recall certificate\n */\nexport function verifyRecallCertificate(this: any, certificateId: string): any {\n  if (!this.explainableRecall) {\n    throw new Error('ExplainableRecall not available');\n  }\n  return this.explainableRecall.verifyCertificate(certificateId);\n}\n\n/**\n * Get justification for a chunk in a recall certificate\n */\nexport function getRecallJustification(this: any, certificateId: string, chunkId: string): any {\n  if (!this.explainableRecall) {\n    throw new Error('ExplainableRecall not available');\n  }\n  return this.explainableRecall.getJustification(certificateId, chunkId);\n}\n\n/**\n * Trace provenance lineage for a certificate\n */\nexport function traceProvenance(this: any, certificateId: string): any {\n  if (!this.explainableRecall) {\n    throw new Error('ExplainableRecall not available');\n  }\n  return this.explainableRecall.traceProvenance(certificateId);\n}\n\n/**\n * Audit a recall certificate\n */\nexport function auditCertificate(this: any, certificateId: string): any {\n  if (!this.explainableRecall) {\n    throw new Error('ExplainableRecall not available');\n  }\n  return this.explainableRecall.auditCertificate(certificateId);\n}\n\n/**\n * Start QUIC server for distributed sync\n */\nexport async function startQUICServer(this: any): Promise<void> {\n  if (!this.quicServer) {\n    throw new Error('QUICServer not available');\n  }\n  return this.quicServer.start();\n}\n\n/**\n * Stop QUIC server\n */\nexport async function stopQUICServer(this: any): Promise<void> {\n  if (!this.quicServer) {\n    throw new Error('QUICServer not available');\n  }\n  return this.quicServer.stop();\n}\n\n/**\n * Get Phase 4 controller availability status\n */\nexport function getPhase4Status(this: any): {\n  syncCoordinator: boolean;\n  nightlyLearner: boolean;\n  explainableRecall: boolean;\n  quicClient: boolean;\n  quicServer: boolean;\n} {\n  return {\n    syncCoordinator: this.syncCoordinator !== null,\n    nightlyLearner: this.nightlyLearner !== null,\n    explainableRecall: this.explainableRecall !== null,\n    quicClient: this.quicClient !== null,\n    quicServer: this.quicServer !== null,\n  };\n}\n"]}