audrey 0.17.0 → 0.20.0

package/dist/src/redact.js

@@ -0,0 +1,228 @@
+/**
+ * Redaction for secrets, credentials, and personally identifying data.
+ *
+ * Audrey never ingests raw shell output, tool input, or files. Anything that
+ * reaches a memory_events row must first be filtered through redact().
+ *
+ * Rules are intentionally conservative: false positives are far cheaper than
+ * leaking a real credential into long-lived memory.
+ */
+function tokenPlaceholder(className, match) {
+    const tail = match.slice(-4).replace(/[^A-Za-z0-9]/g, '');
+    const suffix = tail.length === 4 ? `…${tail}` : '';
+    return `[REDACTED:${className}${suffix}]`;
+}
+const RULES = [
+    {
+        class: 'aws_access_key',
+        pattern: /\bAKIA[0-9A-Z]{16}\b/g,
+        replacement: m => tokenPlaceholder('aws_access_key', m),
+    },
+    {
+        class: 'anthropic_api_key',
+        pattern: /\bsk-ant-[A-Za-z0-9_-]{20,}\b/g,
+        replacement: m => tokenPlaceholder('anthropic_api_key', m),
+    },
+    {
+        class: 'openai_api_key',
+        pattern: /\bsk-(?:proj-)?[A-Za-z0-9_-]{20,}\b/g,
+        replacement: m => tokenPlaceholder('openai_api_key', m),
+    },
+    {
+        class: 'github_token',
+        pattern: /\b(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9]{30,}\b/g,
+        replacement: m => tokenPlaceholder('github_token', m),
+    },
+    {
+        class: 'stripe_live_key',
+        pattern: /\b(?:sk|rk|pk)_live_[A-Za-z0-9]{20,}\b/g,
+        replacement: m => tokenPlaceholder('stripe_live_key', m),
+    },
+    {
+        class: 'stripe_test_key',
+        pattern: /\b(?:sk|rk|pk)_test_[A-Za-z0-9]{20,}\b/g,
+        replacement: m => tokenPlaceholder('stripe_test_key', m),
+    },
+    {
+        class: 'google_api_key',
+        pattern: /\bAIza[0-9A-Za-z_-]{35}\b/g,
+        replacement: m => tokenPlaceholder('google_api_key', m),
+    },
+    {
+        class: 'slack_token',
+        pattern: /\bxox[baprs]-[A-Za-z0-9-]{10,}\b/g,
+        replacement: m => tokenPlaceholder('slack_token', m),
+    },
+    {
+        class: 'jwt',
+        pattern: /\b[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\b/g,
+        replacement: m => tokenPlaceholder('jwt', m),
+    },
+    {
+        class: 'private_key_block',
+        pattern: /-----BEGIN (?:RSA |EC |DSA |OPENSSH |PGP |ENCRYPTED )?PRIVATE KEY-----[\s\S]*?-----END (?:RSA |EC |DSA |OPENSSH |PGP |ENCRYPTED )?PRIVATE KEY-----/g,
+        replacement: () => '[REDACTED:private_key_block]',
+    },
+    {
+        class: 'url_credentials',
+        pattern: /\b([a-z][a-z0-9+.-]*:\/\/)([^\s:@/]+):([^\s@/]+)@/gi,
+        replacement: (match) => {
+            const parts = match.match(/^([a-z][a-z0-9+.-]*:\/\/)([^\s:@/]+):([^\s@/]+)@/i);
+            if (!parts)
+                return '[REDACTED:url_credentials]';
+            return `${parts[1]}${parts[2]}:[REDACTED:url_credentials]@`;
+        },
+    },
+    {
+        class: 'generic_bearer',
+        pattern: /\bBearer\s+[A-Za-z0-9._~+/=-]{16,}\b/g,
+        replacement: () => 'Bearer [REDACTED:generic_bearer]',
+    },
+    {
+        class: 'credit_card_number',
+        pattern: /\b(?:\d[ -]?){13,19}\b/g,
+        replacement: (match) => {
+            const digits = match.replace(/[^0-9]/g, '');
+            if (digits.length < 13 || digits.length > 19)
+                return match;
+            if (!isLikelyCard(digits))
+                return match;
+            return tokenPlaceholder('credit_card_number', digits);
+        },
+    },
+    {
+        class: 'cvv',
+        pattern: /\b(?:cvv|cvc|cvn|cid)\s*[:=]?\s*(\d{3,4})\b/gi,
+        replacement: (match) => match.replace(/\d{3,4}$/, '[REDACTED:cvv]'),
+    },
+    {
+        class: 'us_ssn',
+        pattern: /\b(?!000|666|9\d{2})\d{3}-(?!00)\d{2}-(?!0000)\d{4}\b/g,
+        replacement: () => '[REDACTED:us_ssn]',
+    },
+    {
+        class: 'signed_url_signature',
+        pattern: /([?&](?:X-Amz-Signature|sig|signature|token)=)[^&\s"']+/gi,
+        replacement: (match) => {
+            const parts = match.match(/^([?&](?:X-Amz-Signature|sig|signature|token)=)/i);
+            const prefix = parts ? parts[1] : '';
+            return `${prefix}[REDACTED:signed_url_signature]`;
+        },
+    },
+    {
+        class: 'session_cookie',
+        pattern: /\b(?:session|sid|sessionid|connect\.sid|JSESSIONID|PHPSESSID|laravel_session)=([A-Za-z0-9%._-]{8,})/gi,
+        replacement: (match) => {
+            const eq = match.indexOf('=');
+            const name = eq > 0 ? match.slice(0, eq + 1) : match;
+            return `${name}[REDACTED:session_cookie]`;
+        },
+    },
+    {
+        // Keep this last: it is the broadest of the credential classes and can
+        // otherwise shadow more specific token patterns (google_api_key, stripe,
+        // github, openai, etc.) when a caller writes `api_key: <token>`.
+        class: 'password_assignment',
+        pattern: /(?:\b|_)(?:password|passwd|pwd|secret|api[_-]?key|auth[_-]?token|bearer[_-]?token)\s*[:=]\s*["']?([^\s"'&]{4,})["']?/gi,
+        replacement: (match) => {
+            const split = match.match(/^((?:\b|_)(?:password|passwd|pwd|secret|api[_-]?key|auth[_-]?token|bearer[_-]?token)\s*[:=]\s*["']?)/i);
+            const prefix = split ? split[1] : '';
+            return `${prefix}[REDACTED:password_assignment]`;
+        },
+    },
+];
+function isLikelyCard(digits) {
+    let sum = 0;
+    let shouldDouble = false;
+    for (let i = digits.length - 1; i >= 0; i--) {
+        const ch = digits.charAt(i);
+        let d = ch.charCodeAt(0) - 48;
+        if (d < 0 || d > 9)
+            return false;
+        if (shouldDouble) {
+            d *= 2;
+            if (d > 9)
+                d -= 9;
+        }
+        sum += d;
+        shouldDouble = !shouldDouble;
+    }
+    return sum % 10 === 0;
+}
+export function redact(input) {
+    if (!input) {
+        return { text: '', redactions: [], state: 'clean' };
+    }
+    const counts = new Map();
+    let text = input;
+    for (const rule of RULES) {
+        text = text.replace(rule.pattern, (match) => {
+            const replaced = rule.replacement(match);
+            if (replaced !== match) {
+                counts.set(rule.class, (counts.get(rule.class) ?? 0) + 1);
+            }
+            return replaced;
+        });
+    }
+    const redactions = [...counts.entries()].map(([cls, count]) => ({
+        class: cls,
+        count,
+    }));
+    return {
+        text,
+        redactions,
+        state: redactions.length === 0 ? 'clean' : 'redacted',
+    };
+}
+const SENSITIVE_KEY_PATTERN = /(^|_|-)(password|passwd|pwd|secret|api[_-]?key|auth[_-]?token|bearer[_-]?token|access[_-]?token|refresh[_-]?token|client[_-]?secret|private[_-]?key|session[_-]?token|jwt|aws[_-]?secret|token)$/i;
+function isSensitiveKey(key) {
+    return SENSITIVE_KEY_PATTERN.test(key);
+}
+export function redactJson(value) {
+    const counts = new Map();
+    function walk(node, parentKey) {
+        if (node == null)
+            return node;
+        if (typeof node === 'string') {
+            // Try specific pattern redaction first so a value like
+            // { OPENAI_API_KEY: "sk-..." } is tagged openai_api_key, not the
+            // generic password_assignment class.
+            const r = redact(node);
+            if (r.redactions.length > 0) {
+                for (const hit of r.redactions) {
+                    counts.set(hit.class, (counts.get(hit.class) ?? 0) + hit.count);
+                }
+                return r.text;
+            }
+            if (parentKey && isSensitiveKey(parentKey) && node.length > 0) {
+                counts.set('password_assignment', (counts.get('password_assignment') ?? 0) + 1);
+                return '[REDACTED:password_assignment]';
+            }
+            return node;
+        }
+        if (Array.isArray(node)) {
+            return node.map(item => walk(item, parentKey));
+        }
+        if (typeof node === 'object') {
+            const out = {};
+            for (const [key, val] of Object.entries(node)) {
+                out[key] = walk(val, key);
+            }
+            return out;
+        }
+        return node;
+    }
+    const redactedValue = walk(value);
+    const redactions = [...counts.entries()].map(([cls, count]) => ({ class: cls, count }));
+    return {
+        value: redactedValue,
+        redactions,
+        state: redactions.length === 0 ? 'clean' : 'redacted',
+    };
+}
+export function summarizeRedactions(hits) {
+    if (hits.length === 0)
+        return 'clean';
+    return hits.map(h => `${h.class}:${h.count}`).join(',');
+}
+//# sourceMappingURL=redact.js.map

package/dist/src/redact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../src/redact.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAuCH,SAAS,gBAAgB,CAAC,SAAyB,EAAE,KAAa;IAChE,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACnD,OAAO,aAAa,SAAS,GAAG,MAAM,GAAG,CAAC;AAC5C,CAAC;AAED,MAAM,KAAK,GAAoB;IAC7B;QACE,KAAK,EAAE,gBAAgB;QACvB,OAAO,EAAE,uBAAuB;QAChC,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,CAAC,CAAC;KACxD;IACD;QACE,KAAK,EAAE,mBAAmB;QAC1B,OAAO,EAAE,gCAAgC;QACzC,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC,gBAAgB,CAAC,mBAAmB,EAAE,CAAC,CAAC;KAC3D;IACD;QACE,KAAK,EAAE,gBAAgB;QACvB,OAAO,EAAE,sCAAsC;QAC/C,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,CAAC,CAAC;KACxD;IACD;QACE,KAAK,EAAE,cAAc;QACrB,OAAO,EAAE,+CAA+C;QACxD,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC,gBAAgB,CAAC,cAAc,EAAE,CAAC,CAAC;KACtD;IACD;QACE,KAAK,EAAE,iBAAiB;QACxB,OAAO,EAAE,yCAAyC;QAClD,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC,gBAAgB,CAAC,iBAAiB,EAAE,CAAC,CAAC;KACzD;IACD;QACE,KAAK,EAAE,iBAAiB;QACxB,OAAO,EAAE,yCAAyC;QAClD,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC,gBAAgB,CAAC,iBAAiB,EAAE,CAAC,CAAC;KACzD;IACD;QACE,KAAK,EAAE,gBAAgB;QACvB,OAAO,EAAE,4BAA4B;QACrC,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,CAAC,CAAC;KACxD;IACD;QACE,KAAK,EAAE,aAAa;QACpB,OAAO,EAAE,mCAAmC;QAC5C,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC,gBAAgB,CAAC,aAAa,EAAE,CAAC,CAAC;KACrD;IACD;QACE,KAAK,EAAE,KAAK;QACZ,OAAO,EAAE,iEAAiE;QAC1E,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC,CAAC;KAC7C;IACD;QACE,KAAK,EAAE,mBAAmB;QAC1B,OAAO,EAAE,qJAAqJ;QAC9J,WAAW,EAAE,GAAG,EAAE,CAAC,8BAA8B;KAClD;IACD;QACE,KAAK,EAAE,iBAAiB;QACxB,OAAO,EAAE,qDAAqD;QAC9D,WAAW,EAAE,CAAC,KAAa,EAAE,EAAE;YAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;YAC/E,IAAI,CAAC,KAAK;gBAAE,OAAO,4BAA4B,CAAC;YAChD,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,8BAA8B,CAAC;QAC9D,CAAC;KACF;IACD;QACE,KAAK,EAAE,gBAAgB;QACvB,OAAO,EAAE,uCAAuC;QAChD,WAAW,EAAE,GAAG,EAAE,CAAC,kCAAkC;KACtD;IACD;QACE,KAAK,EAAE,oBAAoB;QAC3B,OAAO,EAAE,yBAAyB;QAClC,WAAW,EAAE,CAAC,KAAa,EAAE,EAAE;YAC7B,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YAC5C,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE;gBAAE,OAAO,KAAK,CAAC;YAC3D,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;gBAAE,OAAO,KAAK,CAAC;YACxC,OAAO,gBAAgB,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC;QACxD,CAAC;KACF;IACD;QACE,KAAK,EAAE,KAAK;QACZ,OAAO,EAAE,+CAA+C;QACxD,WAAW,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,gBAAgB,CAAC;KAC5E;IACD;QACE,KAAK,EAAE,QAAQ;QACf,OAAO,EAAE,wDAAwD;QACjE,WAAW,EAAE,GAAG,EAAE,CAAC,mBAAmB;KACvC;IACD;QACE,KAAK,EAAE,sBAAsB;QAC7B,OAAO,EAAE,2DAA2D;QACpE,WAAW,EAAE,CAAC,KAAa,EAAE,EAAE;YAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;YAC9E,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACrC,OAAO,GAAG,MAAM,iCAAiC,CAAC;QACpD,CAAC;KACF;IACD;QACE,KAAK,EAAE,gBAAgB;QACvB,OAAO,EAAE,uGAAuG;QAChH,WAAW,EAAE,CAAC,KAAa,EAAE,EAAE;YAC7B,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC9B,MAAM,IAAI,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YACrD,OAAO,GAAG,IAAI,2BAA2B,CAAC;QAC5C,CAAC;KACF;IACD;QACE,uEAAuE;QACvE,yEAAyE;QACzE,iEAAiE;QACjE,KAAK,EAAE,qBAAqB;QAC5B,OAAO,EAAE,wHAAwH;QACjI,WAAW,EAAE,CAAC,KAAa,EAAE,EAAE;YAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,uGAAuG,CAAC,CAAC;YACnI,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACrC,OAAO,GAAG,MAAM,gCAAgC,CAAC;QACnD,CAAC;KACF;CACF,CAAC;AAEF,SAAS,YAAY,CAAC,MAAc;IAClC,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACjC,IAAI,YAAY,EAAE,CAAC;YACjB,CAAC,IAAI,CAAC,CAAC;YACP,IAAI,CAAC,GAAG,CAAC;gBAAE,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;QACD,GAAG,IAAI,CAAC,CAAC;QACT,YAAY,GAAG,CAAC,YAAY,CAAC;IAC/B,CAAC;IACD,OAAO,GAAG,GAAG,EAAE,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,KAAa;IAClC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IACtD,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,GAAG,EAA0B,CAAC;IACjD,IAAI,IAAI,GAAG,KAAK,CAAC;IAEjB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAa,EAAE,EAAE;YAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACzC,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;gBACvB,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC5D,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,UAAU,GAAmB,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9E,KAAK,EAAE,GAAG;QACV,KAAK;KACN,CAAC,CAAC,CAAC;IAEJ,OAAO;QACL,IAAI;QACJ,UAAU;QACV,KAAK,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU;KACtD,CAAC;AACJ,CAAC;AAED,MAAM,qBAAqB,GAAG,mMAAmM,CAAC;AAElO,SAAS,cAAc,CAAC,GAAW;IACjC,OAAO,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,MAAM,MAAM,GAAG,IAAI,GAAG,EAA0B,CAAC;IAEjD,SAAS,IAAI,CAAC,IAAa,EAAE,SAAkB;QAC7C,IAAI,IAAI,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QAC9B,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,uDAAuD;YACvD,iEAAiE;YACjE,qCAAqC;YACrC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;YACvB,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5B,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;oBAC/B,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;gBAClE,CAAC;gBACD,OAAO,CAAC,CAAC,IAAI,CAAC;YAChB,CAAC;YACD,IAAI,SAAS,IAAI,cAAc,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9D,MAAM,CAAC,GAAG,CAAC,qBAAqB,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBAChF,OAAO,gCAAgC,CAAC;YAC1C,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;QACjD,CAAC;QACD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,GAAG,GAA4B,EAAE,CAAC;YACxC,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAA+B,CAAC,EAAE,CAAC;gBACzE,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC5B,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,UAAU,GAAmB,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACxG,OAAO;QACL,KAAK,EAAE,aAAa;QACpB,UAAU;QACV,KAAK,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU;KACtD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAoB;IACtD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IACtC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC"}

package/dist/src/rollback.d.ts

@@ -0,0 +1,8 @@
+import Database from 'better-sqlite3';
+import type { ConsolidationRunRow } from './types.js';
+export declare function getConsolidationHistory(db: Database.Database): ConsolidationRunRow[];
+export declare function rollbackConsolidation(db: Database.Database, runId: string): {
+    rolledBackMemories: number;
+    restoredEpisodes: number;
+};
+//# sourceMappingURL=rollback.d.ts.map

package/dist/src/rollback.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rollback.d.ts","sourceRoot":"","sources":["../../src/rollback.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AACtC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAGtD,wBAAgB,uBAAuB,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,mBAAmB,EAAE,CAMpF;AAED,wBAAgB,qBAAqB,CACnC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,KAAK,EAAE,MAAM,GACZ;IAAE,kBAAkB,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAA;CAAE,CAsB1D"}

package/dist/src/rollback.js

@@ -0,0 +1,33 @@
+import { safeJsonParse } from './utils.js';
+export function getConsolidationHistory(db) {
+    return db.prepare(`
+    SELECT id, checkpoint_cursor, input_episode_ids, output_memory_ids,
+           started_at, completed_at, status
+    FROM consolidation_runs ORDER BY started_at DESC
+  `).all();
+}
+export function rollbackConsolidation(db, runId) {
+    const run = db.prepare('SELECT * FROM consolidation_runs WHERE id = ?').get(runId);
+    if (!run)
+        throw new Error(`Consolidation run not found: ${runId}`);
+    if (run.status === 'rolled_back')
+        throw new Error(`Run already rolled back: ${runId}`);
+    const outputIds = safeJsonParse(run.output_memory_ids, []);
+    const inputIds = safeJsonParse(run.input_episode_ids, []);
+    const doRollback = db.transaction(() => {
+        const markSemantics = db.prepare('UPDATE semantics SET state = ? WHERE id = ?');
+        const markProcedures = db.prepare('UPDATE procedures SET state = ? WHERE id = ?');
+        for (const id of outputIds) {
+            markSemantics.run('rolled_back', id);
+            markProcedures.run('rolled_back', id);
+        }
+        const unmark = db.prepare('UPDATE episodes SET consolidated = 0 WHERE id = ?');
+        for (const id of inputIds) {
+            unmark.run(id);
+        }
+        db.prepare('UPDATE consolidation_runs SET status = ? WHERE id = ?').run('rolled_back', runId);
+    });
+    doRollback();
+    return { rolledBackMemories: outputIds.length, restoredEpisodes: inputIds.length };
+}
+//# sourceMappingURL=rollback.js.map

package/dist/src/rollback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rollback.js","sourceRoot":"","sources":["../../src/rollback.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE3C,MAAM,UAAU,uBAAuB,CAAC,EAAqB;IAC3D,OAAO,EAAE,CAAC,OAAO,CAAC;;;;GAIjB,CAAC,CAAC,GAAG,EAA2B,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,EAAqB,EACrB,KAAa;IAEb,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,+CAA+C,CAAC,CAAC,GAAG,CAAC,KAAK,CAAoC,CAAC;IACtH,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,KAAK,EAAE,CAAC,CAAC;IACnE,IAAI,GAAG,CAAC,MAAM,KAAK,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,KAAK,EAAE,CAAC,CAAC;IAEvF,MAAM,SAAS,GAAG,aAAa,CAAW,GAAG,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAG,aAAa,CAAW,GAAG,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;IAEpE,MAAM,UAAU,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;QACrC,MAAM,aAAa,GAAG,EAAE,CAAC,OAAO,CAAC,6CAA6C,CAAC,CAAC;QAChF,MAAM,cAAc,GAAG,EAAE,CAAC,OAAO,CAAC,8CAA8C,CAAC,CAAC;QAClF,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;YAC3B,aAAa,CAAC,GAAG,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;YACrC,cAAc,CAAC,GAAG,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,mDAAmD,CAAC,CAAC;QAC/E,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;YAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;QAC9C,EAAE,CAAC,OAAO,CAAC,uDAAuD,CAAC,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IAChG,CAAC,CAAC,CAAC;IAEH,UAAU,EAAE,CAAC;IACb,OAAO,EAAE,kBAAkB,EAAE,SAAS,CAAC,MAAM,EAAE,gBAAgB,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;AACrF,CAAC"}

package/dist/src/routes.d.ts

@@ -0,0 +1,7 @@
+import { Hono } from 'hono';
+import type { Audrey } from './audrey.js';
+export interface AppOptions {
+    apiKey?: string;
+}
+export declare function createApp(audrey: Audrey, options?: AppOptions): Hono;
+//# sourceMappingURL=routes.d.ts.map

package/dist/src/routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../src/routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAG1C,MAAM,WAAW,UAAU;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,UAAe,GAAG,IAAI,CAiOxE"}

package/dist/src/routes.js

@@ -0,0 +1,226 @@
+import { Hono } from 'hono';
+import { VERSION } from '../mcp-server/config.js';
+export function createApp(audrey, options = {}) {
+    const app = new Hono();
+    // Health check — no auth required.
+    // Fields kept for backward compatibility across Audrey client surfaces:
+    //   status  / healthy — original TS-era field names (tests/http-api.test.js)
+    //   ok      / version — Python SDK HealthResponse contract
+    //                       (python/audrey_memory/types.py)
+    app.get('/health', (c) => {
+        try {
+            const status = audrey.memoryStatus();
+            return c.json({
+                status: 'ok',
+                ok: true,
+                healthy: status.healthy,
+                version: VERSION,
+            });
+        }
+        catch {
+            return c.json({
+                status: 'error',
+                ok: false,
+                healthy: false,
+                version: VERSION,
+            }, 500);
+        }
+    });
+    // API key middleware — only if apiKey is configured
+    if (options.apiKey) {
+        app.use('/v1/*', async (c, next) => {
+            const auth = c.req.header('Authorization');
+            if (!auth || auth !== `Bearer ${options.apiKey}`) {
+                return c.json({ error: 'Unauthorized' }, 401);
+            }
+            await next();
+        });
+    }
+    // POST /v1/encode
+    app.post('/v1/encode', async (c) => {
+        try {
+            const body = await c.req.json();
+            const id = await audrey.encode({
+                content: body.content,
+                source: body.source,
+                tags: body.tags,
+                salience: body.salience,
+                context: body.context,
+                affect: body.affect,
+                private: body.private,
+            });
+            return c.json({ id, content: body.content, source: body.source, private: body.private ?? false });
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            return c.json({ error: message }, 400);
+        }
+    });
+    // POST /v1/recall
+    app.post('/v1/recall', async (c) => {
+        try {
+            const body = await c.req.json();
+            const { query, ...opts } = body;
+            const results = await audrey.recall(query, opts);
+            return c.json(results);
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            return c.json({ error: message }, 400);
+        }
+    });
+    // POST /v1/consolidate
+    app.post('/v1/consolidate', async (c) => {
+        try {
+            const body = await c.req.json().catch(() => ({}));
+            const result = await audrey.consolidate(body);
+            return c.json(result);
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            return c.json({ error: message }, 500);
+        }
+    });
+    // POST /v1/dream
+    app.post('/v1/dream', async (c) => {
+        try {
+            const body = await c.req.json().catch(() => ({}));
+            const result = await audrey.dream(body);
+            return c.json(result);
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            return c.json({ error: message }, 500);
+        }
+    });
+    // GET /v1/introspect
+    app.get('/v1/introspect', (c) => {
+        try {
+            const result = audrey.introspect();
+            return c.json(result);
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            return c.json({ error: message }, 500);
+        }
+    });
+    // POST /v1/resolve-truth
+    app.post('/v1/resolve-truth', async (c) => {
+        try {
+            const body = await c.req.json();
+            const result = await audrey.resolveTruth(body.contradiction_id);
+            return c.json(result);
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            return c.json({ error: message }, 400);
+        }
+    });
+    // GET /v1/export
+    app.get('/v1/export', (c) => {
+        try {
+            const snapshot = audrey.export();
+            return c.json(snapshot);
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            return c.json({ error: message }, 500);
+        }
+    });
+    // POST /v1/import
+    app.post('/v1/import', async (c) => {
+        try {
+            const body = await c.req.json();
+            await audrey.import(body.snapshot);
+            return c.json({ imported: true });
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            return c.json({ error: message }, 400);
+        }
+    });
+    // POST /v1/forget
+    app.post('/v1/forget', async (c) => {
+        try {
+            const body = await c.req.json();
+            const hasId = 'id' in body && body.id;
+            const hasQuery = 'query' in body && body.query;
+            if (hasId && hasQuery) {
+                return c.json({ error: 'Provide exactly one of "id" or "query", not both' }, 400);
+            }
+            if (!hasId && !hasQuery) {
+                return c.json({ error: 'Provide exactly one of "id" or "query"' }, 400);
+            }
+            if (hasId) {
+                const result = audrey.forget(body.id, { purge: body.purge });
+                return c.json(result);
+            }
+            else {
+                const result = await audrey.forgetByQuery(body.query, {
+                    minSimilarity: body.minSimilarity,
+                    purge: body.purge,
+                });
+                if (!result) {
+                    return c.json({ error: 'No matching memory found' }, 404);
+                }
+                return c.json(result);
+            }
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            return c.json({ error: message }, 400);
+        }
+    });
+    // POST /v1/decay
+    app.post('/v1/decay', async (c) => {
+        try {
+            const body = await c.req.json().catch(() => ({}));
+            const result = audrey.decay({
+                dormantThreshold: body.dormantThreshold,
+                halfLives: body.halfLives,
+            });
+            return c.json(result);
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            return c.json({ error: message }, 500);
+        }
+    });
+    // GET /v1/status
+    app.get('/v1/status', (c) => {
+        try {
+            const result = audrey.memoryStatus();
+            return c.json(result);
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            return c.json({ error: message }, 500);
+        }
+    });
+    // POST /v1/reflect
+    app.post('/v1/reflect', async (c) => {
+        try {
+            const body = await c.req.json();
+            const result = await audrey.reflect(body.turns);
+            return c.json(result);
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            return c.json({ error: message }, 400);
+        }
+    });
+    // POST /v1/greeting
+    app.post('/v1/greeting', async (c) => {
+        try {
+            const body = await c.req.json().catch(() => ({}));
+            const result = await audrey.greeting({ context: body.context });
+            return c.json(result);
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            return c.json({ error: message }, 500);
+        }
+    });
+    return app;
+}
+//# sourceMappingURL=routes.js.map

package/dist/src/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../src/routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAMlD,MAAM,UAAU,SAAS,CAAC,MAAc,EAAE,UAAsB,EAAE;IAChE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,mCAAmC;IACnC,wEAAwE;IACxE,6EAA6E;IAC7E,2DAA2D;IAC3D,wDAAwD;IACxD,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE;QACvB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,EAAE,CAAC;YACrC,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,IAAI;gBACZ,EAAE,EAAE,IAAI;gBACR,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,OAAO,EAAE,OAAO;aACjB,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,OAAO;gBACf,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,OAAO;aACjB,EAAE,GAAG,CAAC,CAAC;QACV,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,oDAAoD;IACpD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;YACjC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YAC3C,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,UAAU,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;gBACjD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;YAChD,CAAC;YACD,MAAM,IAAI,EAAE,CAAC;QACf,CAAC,CAAC,CAAC;IACL,CAAC;IAED,kBAAkB;IAClB,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACjC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAChC,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC;gBAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,OAAO,EAAE,IAAI,CAAC,OAAO;aACtB,CAAC,CAAC;YACH,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC;QACpG,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QACzC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,kBAAkB;IAClB,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACjC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAChC,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;YAChC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACjD,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QACzC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,uBAAuB;IACvB,GAAG,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACtC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAClD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAC9C,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QACzC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,iBAAiB;IACjB,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAChC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAClD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACxC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QACzC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,qBAAqB;IACrB,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,EAAE;QAC9B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;YACnC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QACzC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,yBAAyB;IACzB,GAAG,CAAC,IAAI,CAAC,mBAAmB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACxC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAChE,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QACzC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,iBAAiB;IACjB,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE;QAC1B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;YACjC,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QACzC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,kBAAkB;IAClB,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACjC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAChC,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACnC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QACzC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,kBAAkB;IAClB,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACjC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAChC,MAAM,KAAK,GAAG,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;YACtC,MAAM,QAAQ,GAAG,OAAO,IAAI,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC;YAE/C,IAAI,KAAK,IAAI,QAAQ,EAAE,CAAC;gBACtB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kDAAkD,EAAE,EAAE,GAAG,CAAC,CAAC;YACpF,CAAC;YACD,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACxB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wCAAwC,EAAE,EAAE,GAAG,CAAC,CAAC;YAC1E,CAAC;YAED,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC7D,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACxB,CAAC;iBAAM,CAAC;gBACN,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE;oBACpD,aAAa,EAAE,IAAI,CAAC,aAAa;oBACjC,KAAK,EAAE,IAAI,CAAC,KAAK;iBAClB,CAAC,CAAC;gBACH,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,EAAE,GAAG,CAAC,CAAC;gBAC5D,CAAC;gBACD,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QACzC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,iBAAiB;IACjB,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAChC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAClD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC;gBAC1B,gBAAgB,EAAG,IAAgC,CAAC,gBAAsC;gBAC1F,SAAS,EAAG,IAAgC,CAAC,SAA+C;aAC7F,CAAC,CAAC;YACH,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QACzC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,iBAAiB;IACjB,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE;QAC1B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,EAAE,CAAC;YACrC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QACzC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,mBAAmB;IACnB,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAClC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChD,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QACzC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,oBAAoB;IACpB,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAClD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAG,IAAgC,CAAC,OAA6B,EAAE,CAAC,CAAC;YACnH,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QACzC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/src/rules-compiler.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Rules compiler — turn PromotionCandidates into reviewable Markdown files.
+ *
+ * Each rule gets its own file under `.claude/rules/<slug>.md` with YAML
+ * front matter that records the source memory ids, confidence, evidence
+ * count, and promotion timestamp. That front matter is what makes the rule
+ * traceable: a later audit or revert can map the file back to the exact
+ * memories that produced it.
+ */
+import type { PromotionCandidate } from './promote.js';
+export interface RuleDoc {
+    title: string;
+    slug: string;
+    relativePath: string;
+    body: string;
+    frontmatter: Record<string, unknown>;
+}
+export declare function renderClaudeRule(candidate: PromotionCandidate, promotedAt: string): RuleDoc;
+export declare function renderAllRules(candidates: PromotionCandidate[], promotedAt: string): RuleDoc[];
+//# sourceMappingURL=rules-compiler.d.ts.map

package/dist/src/rules-compiler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules-compiler.d.ts","sourceRoot":"","sources":["../../src/rules-compiler.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAEvD,MAAM,WAAW,OAAO;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC;AA0DD,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CA0D3F;AAED,wBAAgB,cAAc,CAAC,UAAU,EAAE,kBAAkB,EAAE,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,EAAE,CAwB9F"}