agentic-qe 2.8.0 → 2.8.2

package/dist/code-intelligence/embeddings/backends/RedisBackend.js

@@ -0,0 +1,279 @@
+"use strict";
+/**
+ * Redis Storage Backend for Embedding Cache
+ *
+ * Distributed caching with automatic TTL expiration.
+ * Best for multi-process/multi-server deployments.
+ *
+ * @module code-intelligence/embeddings/backends/RedisBackend
+ * @see Issue #146 - Security Hardening: SP-2 Dedicated Embedding Cache
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RedisStorageBackend = void 0;
+const ioredis_1 = require("ioredis");
+const types_js_1 = require("./types.js");
+/**
+ * Default Redis configuration
+ */
+const DEFAULT_REDIS_CONFIG = {
+    host: 'localhost',
+    port: 6379,
+    db: 0,
+    keyPrefix: 'emb:',
+    ttlSeconds: 86400, // 24 hours
+    connectTimeoutMs: 5000,
+    tls: false,
+};
+/**
+ * Redis-based embedding storage backend
+ *
+ * Features:
+ * - Distributed caching across processes
+ * - Automatic TTL expiration via Redis SETEX
+ * - Connection pooling via ioredis
+ * - Graceful degradation on connection failure
+ */
+class RedisStorageBackend {
+    constructor(config) {
+        this.name = 'redis';
+        this.type = 'redis';
+        this.client = null;
+        this.initialized = false;
+        this.healthy = false;
+        this.config = {
+            host: config.host,
+            port: config.port,
+            password: config.password ?? '',
+            db: config.db ?? DEFAULT_REDIS_CONFIG.db,
+            keyPrefix: config.keyPrefix ?? DEFAULT_REDIS_CONFIG.keyPrefix,
+            ttlSeconds: config.ttlSeconds ?? DEFAULT_REDIS_CONFIG.ttlSeconds,
+            connectTimeoutMs: config.connectTimeoutMs ?? DEFAULT_REDIS_CONFIG.connectTimeoutMs,
+            tls: config.tls ?? DEFAULT_REDIS_CONFIG.tls,
+            maxSize: config.maxSize ?? 0,
+            defaultTtlMs: config.defaultTtlMs ?? types_js_1.DEFAULT_TTL_MS,
+            debug: config.debug ?? false,
+            retryStrategy: config.retryStrategy ?? ((times) => Math.min(times * 100, 3000)),
+        };
+    }
+    async initialize() {
+        if (this.initialized)
+            return;
+        try {
+            this.client = new ioredis_1.Redis({
+                host: this.config.host,
+                port: this.config.port,
+                password: this.config.password || undefined,
+                db: this.config.db,
+                connectTimeout: this.config.connectTimeoutMs,
+                tls: this.config.tls ? {} : undefined,
+                retryStrategy: this.config.retryStrategy,
+                lazyConnect: true,
+            });
+            // Set up event handlers
+            this.client.on('connect', () => {
+                this.healthy = true;
+                this.log('Connected to Redis');
+            });
+            this.client.on('error', (error) => {
+                this.healthy = false;
+                this.log(`Redis error: ${error.message}`);
+            });
+            this.client.on('close', () => {
+                this.healthy = false;
+                this.log('Redis connection closed');
+            });
+            // Connect
+            await this.client.connect();
+            await this.client.ping();
+            this.initialized = true;
+            this.healthy = true;
+            this.log('Redis backend initialized');
+        }
+        catch (error) {
+            this.healthy = false;
+            throw new Error(`Failed to initialize Redis backend: ${error.message}`);
+        }
+    }
+    async close() {
+        if (this.client) {
+            await this.client.quit();
+            this.client = null;
+        }
+        this.initialized = false;
+        this.healthy = false;
+        this.log('Redis backend closed');
+    }
+    async isHealthy() {
+        if (!this.client || !this.initialized)
+            return false;
+        try {
+            await this.client.ping();
+            this.healthy = true;
+            return true;
+        }
+        catch {
+            this.healthy = false;
+            return false;
+        }
+    }
+    async get(key) {
+        this.ensureClient();
+        try {
+            const data = await this.client.get(this.prefixKey(key));
+            if (!data)
+                return null;
+            return this.deserialize(data);
+        }
+        catch (error) {
+            this.log(`Get error: ${error.message}`);
+            return null;
+        }
+    }
+    async set(key, entry) {
+        this.ensureClient();
+        try {
+            const serialized = this.serialize(entry);
+            await this.client.setex(this.prefixKey(key), this.config.ttlSeconds, serialized);
+        }
+        catch (error) {
+            this.log(`Set error: ${error.message}`);
+            throw error;
+        }
+    }
+    async has(key) {
+        this.ensureClient();
+        try {
+            const exists = await this.client.exists(this.prefixKey(key));
+            return exists === 1;
+        }
+        catch {
+            return false;
+        }
+    }
+    async delete(key) {
+        this.ensureClient();
+        try {
+            const result = await this.client.del(this.prefixKey(key));
+            return result === 1;
+        }
+        catch {
+            return false;
+        }
+    }
+    async clear() {
+        this.ensureClient();
+        try {
+            // Use SCAN to find all keys with our prefix
+            const pattern = `${this.config.keyPrefix}*`;
+            let cursor = '0';
+            const keysToDelete = [];
+            do {
+                const [nextCursor, keys] = await this.client.scan(cursor, 'MATCH', pattern, 'COUNT', 1000);
+                cursor = nextCursor;
+                keysToDelete.push(...keys);
+            } while (cursor !== '0');
+            // Delete in batches
+            if (keysToDelete.length > 0) {
+                const pipeline = this.client.pipeline();
+                for (const key of keysToDelete) {
+                    pipeline.del(key);
+                }
+                await pipeline.exec();
+            }
+            this.log(`Cleared ${keysToDelete.length} keys`);
+        }
+        catch (error) {
+            this.log(`Clear error: ${error.message}`);
+            throw error;
+        }
+    }
+    async size() {
+        this.ensureClient();
+        try {
+            const pattern = `${this.config.keyPrefix}*`;
+            let cursor = '0';
+            let count = 0;
+            do {
+                const [nextCursor, keys] = await this.client.scan(cursor, 'MATCH', pattern, 'COUNT', 1000);
+                cursor = nextCursor;
+                count += keys.length;
+            } while (cursor !== '0');
+            return count;
+        }
+        catch {
+            return 0;
+        }
+    }
+    async *keys() {
+        this.ensureClient();
+        const pattern = `${this.config.keyPrefix}*`;
+        let cursor = '0';
+        do {
+            const [nextCursor, keys] = await this.client.scan(cursor, 'MATCH', pattern, 'COUNT', 100);
+            cursor = nextCursor;
+            for (const key of keys) {
+                // Remove prefix before yielding
+                yield key.substring(this.config.keyPrefix.length);
+            }
+        } while (cursor !== '0');
+    }
+    async pruneExpired(_maxAgeMs) {
+        // Redis handles TTL expiration automatically
+        // This method is a no-op for Redis
+        this.log('Redis handles TTL expiration automatically');
+        return 0;
+    }
+    /**
+     * Get backend statistics
+     */
+    async getStats() {
+        const size = await this.size();
+        return {
+            name: this.name,
+            type: this.type,
+            size,
+            memoryUsageBytes: size * types_js_1.BYTES_PER_ENTRY,
+            healthy: this.healthy,
+            lastHealthCheck: new Date(),
+            metrics: {
+                ttlSeconds: this.config.ttlSeconds,
+                db: this.config.db,
+            },
+        };
+    }
+    // ============================================
+    // Private Methods
+    // ============================================
+    prefixKey(key) {
+        return `${this.config.keyPrefix}${key}`;
+    }
+    serialize(entry) {
+        // Use MessagePack-style binary encoding for efficiency
+        // For now, use JSON (can optimize later)
+        return JSON.stringify({
+            e: entry.embedding,
+            t: entry.timestamp,
+            m: entry.model,
+        });
+    }
+    deserialize(data) {
+        const parsed = JSON.parse(data);
+        return {
+            embedding: parsed.e,
+            timestamp: parsed.t,
+            model: parsed.m,
+        };
+    }
+    ensureClient() {
+        if (!this.client || !this.initialized) {
+            throw new Error('Redis client not initialized. Call initialize() first.');
+        }
+    }
+    log(message) {
+        if (this.config.debug) {
+            console.log(`[RedisBackend] ${message}`);
+        }
+    }
+}
+exports.RedisStorageBackend = RedisStorageBackend;
+//# sourceMappingURL=RedisBackend.js.map

package/dist/code-intelligence/embeddings/backends/RedisBackend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RedisBackend.js","sourceRoot":"","sources":["../../../../src/code-intelligence/embeddings/backends/RedisBackend.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;AAEH,qCAAgC;AAOhC,yCAA6D;AAE7D;;GAEG;AACH,MAAM,oBAAoB,GAAgC;IACxD,IAAI,EAAE,WAAW;IACjB,IAAI,EAAE,IAAI;IACV,EAAE,EAAE,CAAC;IACL,SAAS,EAAE,MAAM;IACjB,UAAU,EAAE,KAAK,EAAE,WAAW;IAC9B,gBAAgB,EAAE,IAAI;IACtB,GAAG,EAAE,KAAK;CACX,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAa,mBAAmB;IAS9B,YAAY,MAA0B;QAR7B,SAAI,GAAG,OAAO,CAAC;QACf,SAAI,GAAG,OAAgB,CAAC;QAEzB,WAAM,GAAiB,IAAI,CAAC;QAE5B,gBAAW,GAAY,KAAK,CAAC;QAC7B,YAAO,GAAY,KAAK,CAAC;QAG/B,IAAI,CAAC,MAAM,GAAG;YACZ,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,EAAE;YAC/B,EAAE,EAAE,MAAM,CAAC,EAAE,IAAI,oBAAoB,CAAC,EAAG;YACzC,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,oBAAoB,CAAC,SAAU;YAC9D,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,oBAAoB,CAAC,UAAW;YACjE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,IAAI,oBAAoB,CAAC,gBAAiB;YACnF,GAAG,EAAE,MAAM,CAAC,GAAG,IAAI,oBAAoB,CAAC,GAAI;YAC5C,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,CAAC;YAC5B,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,yBAAc;YACnD,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,KAAK;YAC5B,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,GAAG,EAAE,IAAI,CAAC,CAAC;SAChF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,UAAU;QACd,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO;QAE7B,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,GAAG,IAAI,eAAK,CAAC;gBACtB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;gBACtB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;gBACtB,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,SAAS;gBAC3C,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;gBAClB,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB;gBAC5C,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;gBACrC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;gBACxC,WAAW,EAAE,IAAI;aAClB,CAAC,CAAC;YAEH,wBAAwB;YACxB,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;gBAC7B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;gBACpB,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;YACjC,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBAChC,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;gBACrB,IAAI,CAAC,GAAG,CAAC,gBAAgB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAC5C,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBAC3B,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;gBACrB,IAAI,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;YACtC,CAAC,CAAC,CAAC;YAEH,UAAU;YACV,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC5B,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YAEzB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YACxB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;YACpB,IAAI,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,uCAAwC,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACrB,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;QACzB,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,SAAS;QACb,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC;QAEpD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;YACpB,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;YACrB,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,IAAI,CAAC,YAAY,EAAE,CAAC;QAEpB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;YACzD,IAAI,CAAC,IAAI;gBAAE,OAAO,IAAI,CAAC;YAEvB,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,GAAG,CAAC,cAAe,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;YACnD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,KAA0B;QAC/C,IAAI,CAAC,YAAY,EAAE,CAAC;QAEpB,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACzC,MAAM,IAAI,CAAC,MAAO,CAAC,KAAK,CACtB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EACnB,IAAI,CAAC,MAAM,CAAC,UAAU,EACtB,UAAU,CACX,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,GAAG,CAAC,cAAe,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;YACnD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,IAAI,CAAC,YAAY,EAAE,CAAC;QAEpB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9D,OAAO,MAAM,KAAK,CAAC,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,IAAI,CAAC,YAAY,EAAE,CAAC;QAEpB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3D,OAAO,MAAM,KAAK,CAAC,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,YAAY,EAAE,CAAC;QAEpB,IAAI,CAAC;YACH,4CAA4C;YAC5C,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,GAAG,CAAC;YAC5C,IAAI,MAAM,GAAG,GAAG,CAAC;YACjB,MAAM,YAAY,GAAa,EAAE,CAAC;YAElC,GAAG,CAAC;gBACF,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,MAAO,CAAC,IAAI,CAChD,MAAM,EACN,OAAO,EACP,OAAO,EACP,OAAO,EACP,IAAI,CACL,CAAC;gBACF,MAAM,GAAG,UAAU,CAAC;gBACpB,YAAY,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;YAC7B,CAAC,QAAQ,MAAM,KAAK,GAAG,EAAE;YAEzB,oBAAoB;YACpB,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAO,CAAC,QAAQ,EAAE,CAAC;gBACzC,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;oBAC/B,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACpB,CAAC;gBACD,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACxB,CAAC;YAED,IAAI,CAAC,GAAG,CAAC,WAAW,YAAY,CAAC,MAAM,OAAO,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,GAAG,CAAC,gBAAiB,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;YACrD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,YAAY,EAAE,CAAC;QAEpB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,GAAG,CAAC;YAC5C,IAAI,MAAM,GAAG,GAAG,CAAC;YACjB,IAAI,KAAK,GAAG,CAAC,CAAC;YAEd,GAAG,CAAC;gBACF,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,MAAO,CAAC,IAAI,CAChD,MAAM,EACN,OAAO,EACP,OAAO,EACP,OAAO,EACP,IAAI,CACL,CAAC;gBACF,MAAM,GAAG,UAAU,CAAC;gBACpB,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC;YACvB,CAAC,QAAQ,MAAM,KAAK,GAAG,EAAE;YAEzB,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAED,KAAK,CAAC,CAAC,IAAI;QACT,IAAI,CAAC,YAAY,EAAE,CAAC;QAEpB,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,GAAG,CAAC;QAC5C,IAAI,MAAM,GAAG,GAAG,CAAC;QAEjB,GAAG,CAAC;YACF,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,MAAO,CAAC,IAAI,CAChD,MAAM,EACN,OAAO,EACP,OAAO,EACP,OAAO,EACP,GAAG,CACJ,CAAC;YACF,MAAM,GAAG,UAAU,CAAC;YAEpB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,gCAAgC;gBAChC,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACpD,CAAC;QACH,CAAC,QAAQ,MAAM,KAAK,GAAG,EAAE;IAC3B,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,SAAiB;QAClC,6CAA6C;QAC7C,mCAAmC;QACnC,IAAI,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;QACvD,OAAO,CAAC,CAAC;IACX,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ;QACZ,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAE/B,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI;YACJ,gBAAgB,EAAE,IAAI,GAAG,0BAAe;YACxC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,eAAe,EAAE,IAAI,IAAI,EAAE;YAC3B,OAAO,EAAE;gBACP,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;gBAClC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;aACnB;SACF,CAAC;IACJ,CAAC;IAED,+CAA+C;IAC/C,kBAAkB;IAClB,+CAA+C;IAEvC,SAAS,CAAC,GAAW;QAC3B,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;IAC1C,CAAC;IAEO,SAAS,CAAC,KAA0B;QAC1C,uDAAuD;QACvD,yCAAyC;QACzC,OAAO,IAAI,CAAC,SAAS,CAAC;YACpB,CAAC,EAAE,KAAK,CAAC,SAAS;YAClB,CAAC,EAAE,KAAK,CAAC,SAAS;YAClB,CAAC,EAAE,KAAK,CAAC,KAAK;SACf,CAAC,CAAC;IACL,CAAC;IAEO,WAAW,CAAC,IAAY;QAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,OAAO;YACL,SAAS,EAAE,MAAM,CAAC,CAAC;YACnB,SAAS,EAAE,MAAM,CAAC,CAAC;YACnB,KAAK,EAAE,MAAM,CAAC,CAAC;SAChB,CAAC;IACJ,CAAC;IAEO,YAAY;QAClB,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IAEO,GAAG,CAAC,OAAe;QACzB,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,kBAAkB,OAAO,EAAE,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;CACF;AAxSD,kDAwSC"}

package/dist/code-intelligence/embeddings/backends/SQLiteBackend.d.ts

@@ -0,0 +1,64 @@
+/**
+ * SQLite Storage Backend for Embedding Cache
+ *
+ * Persistent local storage with efficient binary embedding storage.
+ * Best for single-server deployments requiring persistence.
+ *
+ * @module code-intelligence/embeddings/backends/SQLiteBackend
+ * @see Issue #146 - Security Hardening: SP-2 Dedicated Embedding Cache
+ */
+import type { EmbeddingCacheEntry } from '../types.js';
+import type { EmbeddingStorageBackend, SQLiteBackendConfig, BackendStats } from './types.js';
+/**
+ * SQLite-based embedding storage backend
+ *
+ * Features:
+ * - Persistent storage across restarts
+ * - Efficient binary BLOB storage for embeddings
+ * - WAL mode for concurrent access
+ * - Indexed timestamp for fast TTL queries
+ */
+export declare class SQLiteStorageBackend implements EmbeddingStorageBackend {
+    readonly name = "sqlite";
+    readonly type: "sqlite";
+    private db;
+    private config;
+    private initialized;
+    private stmtGet;
+    private stmtSet;
+    private stmtHas;
+    private stmtDelete;
+    private stmtSize;
+    private stmtPrune;
+    constructor(config: SQLiteBackendConfig);
+    initialize(): Promise<void>;
+    close(): Promise<void>;
+    isHealthy(): Promise<boolean>;
+    get(key: string): Promise<EmbeddingCacheEntry | null>;
+    set(key: string, entry: EmbeddingCacheEntry): Promise<void>;
+    has(key: string): Promise<boolean>;
+    delete(key: string): Promise<boolean>;
+    clear(): Promise<void>;
+    size(): Promise<number>;
+    keys(): AsyncIterable<string>;
+    pruneExpired(maxAgeMs: number): Promise<number>;
+    /**
+     * Get backend statistics
+     */
+    getStats(): Promise<BackendStats>;
+    /**
+     * Run VACUUM to reclaim space
+     */
+    vacuum(): Promise<void>;
+    /**
+     * Get database file size in bytes
+     */
+    getDatabaseSize(): Promise<number>;
+    private prepareStatements;
+    private serializeEmbedding;
+    private deserializeEmbedding;
+    private isExpired;
+    private ensureDb;
+    private log;
+}
+//# sourceMappingURL=SQLiteBackend.d.ts.map

package/dist/code-intelligence/embeddings/backends/SQLiteBackend.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SQLiteBackend.d.ts","sourceRoot":"","sources":["../../../../src/code-intelligence/embeddings/backends/SQLiteBackend.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,KAAK,EACV,uBAAuB,EACvB,mBAAmB,EACnB,YAAY,EACb,MAAM,YAAY,CAAC;AAapB;;;;;;;;GAQG;AACH,qBAAa,oBAAqB,YAAW,uBAAuB;IAClE,QAAQ,CAAC,IAAI,YAAY;IACzB,QAAQ,CAAC,IAAI,EAAG,QAAQ,CAAU;IAElC,OAAO,CAAC,EAAE,CAAkC;IAC5C,OAAO,CAAC,MAAM,CAAgC;IAC9C,OAAO,CAAC,WAAW,CAAkB;IAGrC,OAAO,CAAC,OAAO,CAAmC;IAClD,OAAO,CAAC,OAAO,CAAmC;IAClD,OAAO,CAAC,OAAO,CAAmC;IAClD,OAAO,CAAC,UAAU,CAAmC;IACrD,OAAO,CAAC,QAAQ,CAAmC;IACnD,OAAO,CAAC,SAAS,CAAmC;gBAExC,MAAM,EAAE,mBAAmB;IAajC,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAqC3B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAqBtB,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC;IAW7B,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;IA6BrD,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAY3D,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAelC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAWrC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAYtB,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC;IAWtB,IAAI,IAAI,aAAa,CAAC,MAAM,CAAC;IAU9B,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAkBrD;;OAEG;IACG,QAAQ,IAAI,OAAO,CAAC,YAAY,CAAC;IA2BvC;;OAEG;IACG,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAM7B;;OAEG;IACG,eAAe,IAAI,OAAO,CAAC,MAAM,CAAC;IAiBxC,OAAO,CAAC,iBAAiB;IA4BzB,OAAO,CAAC,kBAAkB;IAS1B,OAAO,CAAC,oBAAoB;IAQ5B,OAAO,CAAC,SAAS;IAKjB,OAAO,CAAC,QAAQ;IAMhB,OAAO,CAAC,GAAG;CAKZ"}

package/dist/code-intelligence/embeddings/backends/SQLiteBackend.js

@@ -0,0 +1,314 @@
+"use strict";
+/**
+ * SQLite Storage Backend for Embedding Cache
+ *
+ * Persistent local storage with efficient binary embedding storage.
+ * Best for single-server deployments requiring persistence.
+ *
+ * @module code-intelligence/embeddings/backends/SQLiteBackend
+ * @see Issue #146 - Security Hardening: SP-2 Dedicated Embedding Cache
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SQLiteStorageBackend = void 0;
+const better_sqlite3_1 = __importDefault(require("better-sqlite3"));
+const types_js_1 = require("./types.js");
+/**
+ * Default SQLite configuration
+ */
+const DEFAULT_SQLITE_CONFIG = {
+    tableName: 'embedding_cache',
+    walMode: true,
+    busyTimeoutMs: 5000,
+    vacuumOnClose: false,
+};
+/**
+ * SQLite-based embedding storage backend
+ *
+ * Features:
+ * - Persistent storage across restarts
+ * - Efficient binary BLOB storage for embeddings
+ * - WAL mode for concurrent access
+ * - Indexed timestamp for fast TTL queries
+ */
+class SQLiteStorageBackend {
+    constructor(config) {
+        this.name = 'sqlite';
+        this.type = 'sqlite';
+        this.db = null;
+        this.initialized = false;
+        // Prepared statements for performance
+        this.stmtGet = null;
+        this.stmtSet = null;
+        this.stmtHas = null;
+        this.stmtDelete = null;
+        this.stmtSize = null;
+        this.stmtPrune = null;
+        this.config = {
+            dbPath: config.dbPath,
+            tableName: config.tableName ?? DEFAULT_SQLITE_CONFIG.tableName,
+            walMode: config.walMode ?? DEFAULT_SQLITE_CONFIG.walMode,
+            busyTimeoutMs: config.busyTimeoutMs ?? DEFAULT_SQLITE_CONFIG.busyTimeoutMs,
+            vacuumOnClose: config.vacuumOnClose ?? DEFAULT_SQLITE_CONFIG.vacuumOnClose,
+            maxSize: config.maxSize ?? 0,
+            defaultTtlMs: config.defaultTtlMs ?? types_js_1.DEFAULT_TTL_MS,
+            debug: config.debug ?? false,
+        };
+    }
+    async initialize() {
+        if (this.initialized)
+            return;
+        try {
+            this.db = new better_sqlite3_1.default(this.config.dbPath);
+            // Configure database
+            this.db.pragma(`busy_timeout = ${this.config.busyTimeoutMs}`);
+            if (this.config.walMode) {
+                this.db.pragma('journal_mode = WAL');
+            }
+            // Create table
+            this.db.exec(`
+        CREATE TABLE IF NOT EXISTS ${this.config.tableName} (
+          key TEXT PRIMARY KEY,
+          embedding BLOB NOT NULL,
+          model TEXT NOT NULL,
+          timestamp INTEGER NOT NULL,
+          created_at INTEGER DEFAULT (strftime('%s', 'now'))
+        );
+
+        CREATE INDEX IF NOT EXISTS idx_${this.config.tableName}_timestamp
+          ON ${this.config.tableName}(timestamp);
+      `);
+            // Prepare statements
+            this.prepareStatements();
+            this.initialized = true;
+            this.log('SQLite backend initialized');
+        }
+        catch (error) {
+            throw new Error(`Failed to initialize SQLite backend: ${error.message}`);
+        }
+    }
+    async close() {
+        if (this.db) {
+            if (this.config.vacuumOnClose) {
+                this.db.exec('VACUUM');
+            }
+            this.db.close();
+            this.db = null;
+        }
+        // Clear prepared statements
+        this.stmtGet = null;
+        this.stmtSet = null;
+        this.stmtHas = null;
+        this.stmtDelete = null;
+        this.stmtSize = null;
+        this.stmtPrune = null;
+        this.initialized = false;
+        this.log('SQLite backend closed');
+    }
+    async isHealthy() {
+        if (!this.db || !this.initialized)
+            return false;
+        try {
+            this.db.exec('SELECT 1');
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    async get(key) {
+        this.ensureDb();
+        try {
+            const row = this.stmtGet.get(key);
+            if (!row)
+                return null;
+            // Check if expired
+            if (this.isExpired(row.timestamp)) {
+                await this.delete(key);
+                return null;
+            }
+            return {
+                embedding: this.deserializeEmbedding(row.embedding),
+                model: row.model,
+                timestamp: row.timestamp,
+            };
+        }
+        catch (error) {
+            this.log(`Get error: ${error.message}`);
+            return null;
+        }
+    }
+    async set(key, entry) {
+        this.ensureDb();
+        try {
+            const embeddingBlob = this.serializeEmbedding(entry.embedding);
+            this.stmtSet.run(key, embeddingBlob, entry.model, entry.timestamp);
+        }
+        catch (error) {
+            this.log(`Set error: ${error.message}`);
+            throw error;
+        }
+    }
+    async has(key) {
+        this.ensureDb();
+        try {
+            const row = this.stmtHas.get(key);
+            if (!row || row.count === 0)
+                return false;
+            // Also check expiration
+            const entry = await this.get(key);
+            return entry !== null;
+        }
+        catch {
+            return false;
+        }
+    }
+    async delete(key) {
+        this.ensureDb();
+        try {
+            const result = this.stmtDelete.run(key);
+            return result.changes > 0;
+        }
+        catch {
+            return false;
+        }
+    }
+    async clear() {
+        this.ensureDb();
+        try {
+            this.db.exec(`DELETE FROM ${this.config.tableName}`);
+            this.log('Cache cleared');
+        }
+        catch (error) {
+            this.log(`Clear error: ${error.message}`);
+            throw error;
+        }
+    }
+    async size() {
+        this.ensureDb();
+        try {
+            const row = this.stmtSize.get();
+            return row?.count ?? 0;
+        }
+        catch {
+            return 0;
+        }
+    }
+    async *keys() {
+        this.ensureDb();
+        const stmt = this.db.prepare(`SELECT key FROM ${this.config.tableName}`);
+        for (const row of stmt.iterate()) {
+            yield row.key;
+        }
+    }
+    async pruneExpired(maxAgeMs) {
+        this.ensureDb();
+        try {
+            const threshold = Date.now() - maxAgeMs;
+            const result = this.stmtPrune.run(threshold);
+            if (result.changes > 0) {
+                this.log(`Pruned ${result.changes} expired entries`);
+            }
+            return result.changes;
+        }
+        catch (error) {
+            this.log(`Prune error: ${error.message}`);
+            return 0;
+        }
+    }
+    /**
+     * Get backend statistics
+     */
+    async getStats() {
+        const size = await this.size();
+        let dbSizeBytes = 0;
+        if (this.db) {
+            try {
+                const row = this.db.prepare('SELECT page_count * page_size as size FROM pragma_page_count(), pragma_page_size()').get();
+                dbSizeBytes = row?.size ?? 0;
+            }
+            catch {
+                dbSizeBytes = size * types_js_1.BYTES_PER_ENTRY;
+            }
+        }
+        return {
+            name: this.name,
+            type: this.type,
+            size,
+            memoryUsageBytes: dbSizeBytes,
+            healthy: this.initialized,
+            lastHealthCheck: new Date(),
+            metrics: {
+                walMode: this.config.walMode ? 1 : 0,
+                defaultTtlMs: this.config.defaultTtlMs,
+            },
+        };
+    }
+    /**
+     * Run VACUUM to reclaim space
+     */
+    async vacuum() {
+        this.ensureDb();
+        this.db.exec('VACUUM');
+        this.log('VACUUM completed');
+    }
+    /**
+     * Get database file size in bytes
+     */
+    async getDatabaseSize() {
+        this.ensureDb();
+        try {
+            const row = this.db.prepare('SELECT page_count * page_size as size FROM pragma_page_count(), pragma_page_size()').get();
+            return row?.size ?? 0;
+        }
+        catch {
+            return 0;
+        }
+    }
+    // ============================================
+    // Private Methods
+    // ============================================
+    prepareStatements() {
+        const table = this.config.tableName;
+        this.stmtGet = this.db.prepare(`SELECT embedding, model, timestamp FROM ${table} WHERE key = ?`);
+        this.stmtSet = this.db.prepare(`INSERT OR REPLACE INTO ${table} (key, embedding, model, timestamp) VALUES (?, ?, ?, ?)`);
+        this.stmtHas = this.db.prepare(`SELECT COUNT(*) as count FROM ${table} WHERE key = ?`);
+        this.stmtDelete = this.db.prepare(`DELETE FROM ${table} WHERE key = ?`);
+        this.stmtSize = this.db.prepare(`SELECT COUNT(*) as count FROM ${table}`);
+        this.stmtPrune = this.db.prepare(`DELETE FROM ${table} WHERE timestamp < ?`);
+    }
+    serializeEmbedding(embedding) {
+        // Store as Float64Array for precision
+        const buffer = Buffer.alloc(embedding.length * 8);
+        for (let i = 0; i < embedding.length; i++) {
+            buffer.writeDoubleLE(embedding[i], i * 8);
+        }
+        return buffer;
+    }
+    deserializeEmbedding(buffer) {
+        const embedding = [];
+        for (let i = 0; i < buffer.length; i += 8) {
+            embedding.push(buffer.readDoubleLE(i));
+        }
+        return embedding;
+    }
+    isExpired(timestamp) {
+        if (this.config.defaultTtlMs === 0)
+            return false;
+        return Date.now() - timestamp > this.config.defaultTtlMs;
+    }
+    ensureDb() {
+        if (!this.db || !this.initialized) {
+            throw new Error('SQLite database not initialized. Call initialize() first.');
+        }
+    }
+    log(message) {
+        if (this.config.debug) {
+            console.log(`[SQLiteBackend] ${message}`);
+        }
+    }
+}
+exports.SQLiteStorageBackend = SQLiteStorageBackend;
+//# sourceMappingURL=SQLiteBackend.js.map