context-gatekeeper 0.3.0

package/dist/utils/encryption.d.ts

@@ -0,0 +1,87 @@
+/**
+ * AES-256-GCM Encryption Utilities
+ * Provides at-rest encryption for sensitive memory content
+ */
+export interface EncryptionKey {
+    key: Buffer;
+    keyId: string;
+    createdAt: Date;
+}
+export interface EncryptedData {
+    ciphertext: string;
+    iv: string;
+    tag: string;
+    keyId: string;
+}
+export interface EncryptedField {
+    field: string;
+    encryptedData: EncryptedData;
+}
+declare const keyStore: Map<string, EncryptionKey>;
+/**
+ * Generate a new encryption key
+ */
+export declare function generateEncryptionKey(keyId?: string): EncryptionKey;
+/**
+ * Get an encryption key by ID
+ */
+export declare function getEncryptionKey(keyId: string): EncryptionKey | null;
+/**
+ * Derive a key from a password (PBKDF2)
+ */
+export declare function deriveKeyFromPassword(password: string, salt?: Buffer): {
+    key: Buffer;
+    salt: Buffer;
+};
+/**
+ * Encrypt data with AES-256-GCM
+ */
+export declare function encrypt(plaintext: string, key: Buffer): EncryptedData;
+/**
+ * Encrypt data with a specific key
+ */
+export declare function encryptWithKey(plaintext: string, encryptionKey: EncryptionKey): EncryptedData;
+/**
+ * Decrypt data with AES-256-GCM
+ */
+export declare function decrypt(encryptedData: EncryptedData, key: Buffer): string;
+/**
+ * Decrypt with key lookup
+ */
+export declare function decryptWithKeyId(encryptedData: EncryptedData): string | null;
+/**
+ * Encrypt multiple fields in an object
+ */
+export declare function encryptFields<T extends Record<string, unknown>>(data: T, fieldsToEncrypt: (keyof T)[], key: Buffer): T & {
+    _encrypted: string[];
+};
+/**
+ * Decrypt multiple fields in an object
+ */
+export declare function decryptFields<T extends Record<string, unknown>>(data: T, key: Buffer): T;
+/**
+ * Hash data for integrity verification
+ */
+export declare function hashData(data: string): string;
+/**
+ * Verify data integrity
+ */
+export declare function verifyIntegrity(data: string, expectedHash: string): boolean;
+/**
+ * Generate a secure random string
+ */
+export declare function generateSecureToken(length?: number): string;
+/**
+ * Key rotation support
+ */
+export interface KeyRotationResult {
+    newKeyId: string;
+    reEncryptedCount: number;
+    failedIds: string[];
+}
+export declare function rotateEncryptionKey(oldKeyId: string, fieldsToReencrypt: Array<{
+    id: string;
+    encryptedData: EncryptedData;
+}>, newKey: EncryptionKey): KeyRotationResult;
+export { keyStore };
+//# sourceMappingURL=encryption.d.ts.map

package/dist/utils/encryption.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption.d.ts","sourceRoot":"","sources":["../../src/utils/encryption.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,aAAa,CAAC;CAC9B;AAGD,QAAA,MAAM,QAAQ,4BAAmC,CAAC;AAElD;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,aAAa,CAanE;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAEpE;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAKpG;AAED;;GAEG;AACH,wBAAgB,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,aAAa,CAerE;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,aAAa,GAAG,aAAa,CAI7F;AAED;;GAEG;AACH,wBAAgB,OAAO,CAAC,aAAa,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAYzE;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,aAAa,EAAE,aAAa,GAAG,MAAM,GAAG,IAAI,CAW5E;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7D,IAAI,EAAE,CAAC,EACP,eAAe,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,EAC5B,GAAG,EAAE,MAAM,GACV,CAAC,GAAG;IAAE,UAAU,EAAE,MAAM,EAAE,CAAA;CAAE,CAiB9B;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7D,IAAI,EAAE,CAAC,EACP,GAAG,EAAE,MAAM,GACV,CAAC,CAsBH;AAED;;GAEG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE7C;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAG3E;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,GAAE,MAAW,GAAG,MAAM,CAE/D;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,MAAM,EAChB,iBAAiB,EAAE,KAAK,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,aAAa,CAAA;CAAE,CAAC,EACtE,MAAM,EAAE,aAAa,GACpB,iBAAiB,CA+BnB;AAGD,OAAO,EAAE,QAAQ,EAAE,CAAC"}

package/dist/utils/encryption.js

@@ -0,0 +1,175 @@
+/**
+ * AES-256-GCM Encryption Utilities
+ * Provides at-rest encryption for sensitive memory content
+ */
+import { createCipheriv, createDecipheriv, randomBytes, createHash } from 'crypto';
+// Key management
+const keyStore = new Map();
+/**
+ * Generate a new encryption key
+ */
+export function generateEncryptionKey(keyId) {
+    const id = keyId || `key-${Date.now()}-${randomBytes(4).toString('hex')}`;
+    const key = randomBytes(32); // 256 bits for AES-256
+    const encryptionKey = {
+        key,
+        keyId: id,
+        createdAt: new Date()
+    };
+    keyStore.set(id, encryptionKey);
+    return encryptionKey;
+}
+/**
+ * Get an encryption key by ID
+ */
+export function getEncryptionKey(keyId) {
+    return keyStore.get(keyId) || null;
+}
+/**
+ * Derive a key from a password (PBKDF2)
+ */
+export function deriveKeyFromPassword(password, salt) {
+    const saltBytes = salt || randomBytes(32);
+    const key = createHash('sha256').update(password + saltBytes.toString('hex')).digest();
+    return { key, salt: saltBytes };
+}
+/**
+ * Encrypt data with AES-256-GCM
+ */
+export function encrypt(plaintext, key) {
+    const iv = randomBytes(12); // 96 bits for GCM
+    const cipher = createCipheriv('aes-256-gcm', key, iv);
+    let ciphertext = cipher.update(plaintext, 'utf8', 'base64');
+    ciphertext += cipher.final('base64');
+    const tag = cipher.getAuthTag();
+    return {
+        ciphertext,
+        iv: iv.toString('base64'),
+        tag: tag.toString('base64'),
+        keyId: ''
+    };
+}
+/**
+ * Encrypt data with a specific key
+ */
+export function encryptWithKey(plaintext, encryptionKey) {
+    const result = encrypt(plaintext, encryptionKey.key);
+    result.keyId = encryptionKey.keyId;
+    return result;
+}
+/**
+ * Decrypt data with AES-256-GCM
+ */
+export function decrypt(encryptedData, key) {
+    const iv = Buffer.from(encryptedData.iv, 'base64');
+    const tag = Buffer.from(encryptedData.tag, 'base64');
+    const ciphertext = Buffer.from(encryptedData.ciphertext, 'base64');
+    const decipher = createDecipheriv('aes-256-gcm', key, iv);
+    decipher.setAuthTag(tag);
+    let plaintext = decipher.update(ciphertext);
+    plaintext = Buffer.concat([plaintext, decipher.final()]);
+    return plaintext.toString('utf8');
+}
+/**
+ * Decrypt with key lookup
+ */
+export function decryptWithKeyId(encryptedData) {
+    if (!encryptedData.keyId) {
+        return null;
+    }
+    const key = getEncryptionKey(encryptedData.keyId);
+    if (!key) {
+        return null;
+    }
+    return decrypt(encryptedData, key.key);
+}
+/**
+ * Encrypt multiple fields in an object
+ */
+export function encryptFields(data, fieldsToEncrypt, key) {
+    const encrypted = {};
+    for (const field of fieldsToEncrypt) {
+        const value = data[field];
+        if (typeof value === 'string') {
+            encrypted[field] = encrypt(value, key);
+        }
+    }
+    return {
+        ...data,
+        _encrypted: fieldsToEncrypt.map(f => String(f)),
+        ...Object.fromEntries(Object.entries(encrypted).map(([k, v]) => [k, JSON.stringify(v)]))
+    };
+}
+/**
+ * Decrypt multiple fields in an object
+ */
+export function decryptFields(data, key) {
+    const encryptedFields = data._encrypted || [];
+    const decrypted = { ...data };
+    for (const field of encryptedFields) {
+        const encryptedValue = data[field];
+        if (typeof encryptedValue === 'string') {
+            try {
+                const encryptedData = JSON.parse(encryptedValue);
+                decrypted[field] = decrypt(encryptedData, key);
+            }
+            catch {
+                // Decryption failed, keep original value
+            }
+        }
+    }
+    // Remove encryption metadata
+    const decryptedObj = decrypted;
+    delete decryptedObj['_encrypted'];
+    return decrypted;
+}
+/**
+ * Hash data for integrity verification
+ */
+export function hashData(data) {
+    return createHash('sha256').update(data).digest('hex');
+}
+/**
+ * Verify data integrity
+ */
+export function verifyIntegrity(data, expectedHash) {
+    const actualHash = hashData(data);
+    return actualHash === expectedHash;
+}
+/**
+ * Generate a secure random string
+ */
+export function generateSecureToken(length = 32) {
+    return randomBytes(Math.ceil(length * 0.75)).toString('base64').slice(0, length);
+}
+export function rotateEncryptionKey(oldKeyId, fieldsToReencrypt, newKey) {
+    const failedIds = [];
+    let reEncryptedCount = 0;
+    for (const item of fieldsToReencrypt) {
+        try {
+            // Decrypt with old key
+            const oldKey = getEncryptionKey(oldKeyId);
+            if (!oldKey) {
+                failedIds.push(item.id);
+                continue;
+            }
+            const plaintext = decrypt(item.encryptedData, oldKey.key);
+            // Re-encrypt with new key
+            // In a real implementation, update the stored encrypted data here
+            // updateEncryptedField(item.id, newEncrypted);
+            void plaintext; // Mark as used
+            reEncryptedCount++;
+        }
+        catch {
+            failedIds.push(item.id);
+        }
+    }
+    return {
+        newKeyId: newKey.keyId,
+        reEncryptedCount,
+        failedIds
+    };
+}
+// Export key management functions
+export { keyStore };
+//# sourceMappingURL=encryption.js.map

package/dist/utils/encryption.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption.js","sourceRoot":"","sources":["../../src/utils/encryption.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAoBnF,iBAAiB;AACjB,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAyB,CAAC;AAElD;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,MAAM,EAAE,GAAG,KAAK,IAAI,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IAC1E,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,uBAAuB;IAEpD,MAAM,aAAa,GAAkB;QACnC,GAAG;QACH,KAAK,EAAE,EAAE;QACT,SAAS,EAAE,IAAI,IAAI,EAAE;KACtB,CAAC;IAEF,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC;IAEhC,OAAO,aAAa,CAAC;AACvB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,OAAO,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;AACrC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAgB,EAAE,IAAa;IACnE,MAAM,SAAS,GAAG,IAAI,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAEvF,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AAClC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,OAAO,CAAC,SAAiB,EAAE,GAAW;IACpD,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,kBAAkB;IAC9C,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAEtD,IAAI,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC5D,UAAU,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAErC,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAEhC,OAAO;QACL,UAAU;QACV,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACzB,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC3B,KAAK,EAAE,EAAE;KACV,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,SAAiB,EAAE,aAA4B;IAC5E,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC;IACrD,MAAM,CAAC,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC;IACnC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,OAAO,CAAC,aAA4B,EAAE,GAAW;IAC/D,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAEnE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAC1D,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAEzB,IAAI,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC5C,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAEzD,OAAO,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACpC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,aAA4B;IAC3D,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,GAAG,GAAG,gBAAgB,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IAClD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;AACzC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAO,EACP,eAA4B,EAC5B,GAAW;IAEX,MAAM,SAAS,GAAkC,EAAE,CAAC;IAEpD,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,SAAS,CAAC,KAAe,CAAC,GAAG,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAED,OAAO;QACL,GAAG,IAAI;QACP,UAAU,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAwB;QACtE,GAAG,MAAM,CAAC,WAAW,CACnB,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAClE;KAC8B,CAAC;AACpC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAO,EACP,GAAW;IAEX,MAAM,eAAe,GAAI,IAAI,CAAC,UAAkC,IAAI,EAAE,CAAC;IAEvE,MAAM,SAAS,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;IAE9B,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;QACpC,MAAM,cAAc,GAAG,IAAI,CAAC,KAAgB,CAAC,CAAC;QAC9C,IAAI,OAAO,cAAc,KAAK,QAAQ,EAAE,CAAC;YACvC,IAAI,CAAC;gBACH,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAkB,CAAC;gBACjE,SAAqC,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;YAC9E,CAAC;YAAC,MAAM,CAAC;gBACP,yCAAyC;YAC3C,CAAC;QACH,CAAC;IACH,CAAC;IAED,6BAA6B;IAC7B,MAAM,YAAY,GAAG,SAAoC,CAAC;IAC1D,OAAO,YAAY,CAAC,YAAY,CAAC,CAAC;IAElC,OAAO,SAAc,CAAC;AACxB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,YAAoB;IAChE,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAClC,OAAO,UAAU,KAAK,YAAY,CAAC;AACrC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,SAAiB,EAAE;IACrD,OAAO,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AACnF,CAAC;AAWD,MAAM,UAAU,mBAAmB,CACjC,QAAgB,EAChB,iBAAsE,EACtE,MAAqB;IAErB,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,IAAI,gBAAgB,GAAG,CAAC,CAAC;IAEzB,KAAK,MAAM,IAAI,IAAI,iBAAiB,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,uBAAuB;YACvB,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACxB,SAAS;YACX,CAAC;YAED,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;YAE1D,0BAA0B;YAC1B,kEAAkE;YAClE,+CAA+C;YAE/C,KAAK,SAAS,CAAC,CAAC,eAAe;YAC/B,gBAAgB,EAAE,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACT,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,KAAK;QACtB,gBAAgB;QAChB,SAAS;KACV,CAAC;AACJ,CAAC;AAED,kCAAkC;AAClC,OAAO,EAAE,QAAQ,EAAE,CAAC"}

package/dist/utils/errors.d.ts

@@ -0,0 +1,35 @@
+export declare class ContextGatekeeperError extends Error {
+    readonly code: string;
+    readonly cause?: unknown | undefined;
+    constructor(message: string, code: string, cause?: unknown | undefined);
+}
+export declare class DatabaseError extends ContextGatekeeperError {
+    constructor(message: string, cause?: unknown);
+}
+export declare class LLMError extends ContextGatekeeperError {
+    constructor(message: string, cause?: unknown);
+}
+export declare class MCPError extends ContextGatekeeperError {
+    constructor(message: string, cause?: unknown);
+}
+export declare class CompressionError extends ContextGatekeeperError {
+    constructor(message: string, cause?: unknown);
+}
+export declare class MemoryNotFoundError extends ContextGatekeeperError {
+    constructor(memoryId: string);
+}
+export declare class ProjectNotFoundError extends ContextGatekeeperError {
+    constructor(projectId: string);
+}
+export declare enum RecoveryStrategy {
+    FALLBACK_TO_MEMORY = "FALLBACK_TO_MEMORY",// DB -> Memory
+    FALLBACK_TO_RULES = "FALLBACK_TO_RULES",// LLM -> Rules
+    GRACEFUL_DEGRADATION = "GRACEFUL_DEGRADATION",// Service -> Silent
+    RETAIN_ORIGINAL = "RETAIN_ORIGINAL"
+}
+export interface ErrorContext {
+    strategy: RecoveryStrategy;
+    fallbackValue?: unknown;
+    shouldLog: boolean;
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/utils/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/utils/errors.ts"],"names":[],"mappings":"AAEA,qBAAa,sBAAuB,SAAQ,KAAK;aAG7B,IAAI,EAAE,MAAM;aACZ,KAAK,CAAC,EAAE,OAAO;gBAF/B,OAAO,EAAE,MAAM,EACC,IAAI,EAAE,MAAM,EACZ,KAAK,CAAC,EAAE,OAAO,YAAA;CAKlC;AAED,qBAAa,aAAc,SAAQ,sBAAsB;gBAC3C,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO;CAI7C;AAED,qBAAa,QAAS,SAAQ,sBAAsB;gBACtC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO;CAI7C;AAED,qBAAa,QAAS,SAAQ,sBAAsB;gBACtC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO;CAI7C;AAED,qBAAa,gBAAiB,SAAQ,sBAAsB;gBAC9C,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO;CAI7C;AAED,qBAAa,mBAAoB,SAAQ,sBAAsB;gBACjD,QAAQ,EAAE,MAAM;CAI7B;AAED,qBAAa,oBAAqB,SAAQ,sBAAsB;gBAClD,SAAS,EAAE,MAAM;CAI9B;AAGD,oBAAY,gBAAgB;IAC1B,kBAAkB,uBAAuB,CAAO,eAAe;IAC/D,iBAAiB,sBAAsB,CAAS,eAAe;IAC/D,oBAAoB,yBAAyB,CAAG,oBAAoB;IACpE,eAAe,oBAAoB;CACpC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,SAAS,EAAE,OAAO,CAAC;CACpB"}

package/dist/utils/errors.js

@@ -0,0 +1,56 @@
+// Custom error classes for Context Gatekeeper
+export class ContextGatekeeperError extends Error {
+    code;
+    cause;
+    constructor(message, code, cause) {
+        super(message);
+        this.code = code;
+        this.cause = cause;
+        this.name = 'ContextGatekeeperError';
+    }
+}
+export class DatabaseError extends ContextGatekeeperError {
+    constructor(message, cause) {
+        super(message, 'DATABASE_ERROR', cause);
+        this.name = 'DatabaseError';
+    }
+}
+export class LLMError extends ContextGatekeeperError {
+    constructor(message, cause) {
+        super(message, 'LLM_ERROR', cause);
+        this.name = 'LLMError';
+    }
+}
+export class MCPError extends ContextGatekeeperError {
+    constructor(message, cause) {
+        super(message, 'MCP_ERROR', cause);
+        this.name = 'MCPError';
+    }
+}
+export class CompressionError extends ContextGatekeeperError {
+    constructor(message, cause) {
+        super(message, 'COMPRESSION_ERROR', cause);
+        this.name = 'CompressionError';
+    }
+}
+export class MemoryNotFoundError extends ContextGatekeeperError {
+    constructor(memoryId) {
+        super(`Memory not found: ${memoryId}`, 'MEMORY_NOT_FOUND');
+        this.name = 'MemoryNotFoundError';
+    }
+}
+export class ProjectNotFoundError extends ContextGatekeeperError {
+    constructor(projectId) {
+        super(`Project not found: ${projectId}`, 'PROJECT_NOT_FOUND');
+        this.name = 'ProjectNotFoundError';
+    }
+}
+// Error recovery strategies
+export var RecoveryStrategy;
+(function (RecoveryStrategy) {
+    RecoveryStrategy["FALLBACK_TO_MEMORY"] = "FALLBACK_TO_MEMORY";
+    RecoveryStrategy["FALLBACK_TO_RULES"] = "FALLBACK_TO_RULES";
+    RecoveryStrategy["GRACEFUL_DEGRADATION"] = "GRACEFUL_DEGRADATION";
+    RecoveryStrategy["RETAIN_ORIGINAL"] = "RETAIN_ORIGINAL"; // Compression -> Keep original
+})(RecoveryStrategy || (RecoveryStrategy = {}));
+//# sourceMappingURL=errors.js.map

package/dist/utils/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/utils/errors.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAE9C,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAG7B;IACA;IAHlB,YACE,OAAe,EACC,IAAY,EACZ,KAAe;QAE/B,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,SAAI,GAAJ,IAAI,CAAQ;QACZ,UAAK,GAAL,KAAK,CAAU;QAG/B,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAED,MAAM,OAAO,aAAc,SAAQ,sBAAsB;IACvD,YAAY,OAAe,EAAE,KAAe;QAC1C,KAAK,CAAC,OAAO,EAAE,gBAAgB,EAAE,KAAK,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AAED,MAAM,OAAO,QAAS,SAAQ,sBAAsB;IAClD,YAAY,OAAe,EAAE,KAAe;QAC1C,KAAK,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IACzB,CAAC;CACF;AAED,MAAM,OAAO,QAAS,SAAQ,sBAAsB;IAClD,YAAY,OAAe,EAAE,KAAe;QAC1C,KAAK,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IACzB,CAAC;CACF;AAED,MAAM,OAAO,gBAAiB,SAAQ,sBAAsB;IAC1D,YAAY,OAAe,EAAE,KAAe;QAC1C,KAAK,CAAC,OAAO,EAAE,mBAAmB,EAAE,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAED,MAAM,OAAO,mBAAoB,SAAQ,sBAAsB;IAC7D,YAAY,QAAgB;QAC1B,KAAK,CAAC,qBAAqB,QAAQ,EAAE,EAAE,kBAAkB,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,MAAM,OAAO,oBAAqB,SAAQ,sBAAsB;IAC9D,YAAY,SAAiB;QAC3B,KAAK,CAAC,sBAAsB,SAAS,EAAE,EAAE,mBAAmB,CAAC,CAAC;QAC9D,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED,4BAA4B;AAC5B,MAAM,CAAN,IAAY,gBAKX;AALD,WAAY,gBAAgB;IAC1B,6DAAyC,CAAA;IACzC,2DAAuC,CAAA;IACvC,iEAA6C,CAAA;IAC7C,uDAAmC,CAAA,CAAa,+BAA+B;AACjF,CAAC,EALW,gBAAgB,KAAhB,gBAAgB,QAK3B"}

package/dist/utils/logger.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Structured JSON Logger
+ *
+ * Features:
+ * - JSON output to stdout with configurable log levels
+ * - CG_LOG_LEVEL env var controls minimum level (trace, debug, info, warn, error)
+ * - CG_LOG_PRETTY env var enables pretty-printed output
+ * - CG_LOG_TO_FILE env var enables file-based logging
+ * - CG_LOG_FILE_PATH env var for custom file path
+ * - Graceful degradation on serialization failure
+ */
+export type LogLevel = 'trace' | 'debug' | 'info' | 'warn' | 'error';
+export declare class Logger {
+    private component?;
+    constructor(component?: string);
+    private log;
+    trace(message: string, data?: Record<string, unknown>): void;
+    debug(message: string, data?: Record<string, unknown>): void;
+    info(message: string, data?: Record<string, unknown>): void;
+    warn(message: string, data?: Record<string, unknown>): void;
+    error(message: string, dataOrError?: Record<string, unknown> | unknown): void;
+    /** Log a tool invocation with timing */
+    toolInvocation(toolName: string, latencyMs: number, success: boolean, error?: unknown): void;
+}
+export declare const logger: Logger;
+export declare function createLogger(component: string): Logger;
+//# sourceMappingURL=logger.d.ts.map

package/dist/utils/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAsHrE,qBAAa,MAAM;IACjB,OAAO,CAAC,SAAS,CAAC,CAAS;gBAEf,SAAS,CAAC,EAAE,MAAM;IAI9B,OAAO,CAAC,GAAG;IAuBX,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAI5D,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAI5D,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAI3D,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAI3D,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,GAAG,IAAI;IAmB7E,wCAAwC;IACxC,cAAc,CACZ,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,OAAO,EAChB,KAAK,CAAC,EAAE,OAAO,GACd,IAAI;CAcR;AAGD,eAAO,MAAM,MAAM,QAAe,CAAC;AAGnC,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEtD"}

package/dist/utils/logger.js

@@ -0,0 +1,177 @@
+/**
+ * Structured JSON Logger
+ *
+ * Features:
+ * - JSON output to stdout with configurable log levels
+ * - CG_LOG_LEVEL env var controls minimum level (trace, debug, info, warn, error)
+ * - CG_LOG_PRETTY env var enables pretty-printed output
+ * - CG_LOG_TO_FILE env var enables file-based logging
+ * - CG_LOG_FILE_PATH env var for custom file path
+ * - Graceful degradation on serialization failure
+ */
+import { appendFileSync } from 'fs';
+const LOG_LEVELS = {
+    trace: 0,
+    debug: 1,
+    info: 2,
+    warn: 3,
+    error: 4,
+};
+const DEFAULT_LEVEL = 'info';
+function parseLogLevel(envValue) {
+    if (!envValue)
+        return DEFAULT_LEVEL;
+    const level = envValue.toLowerCase();
+    return LOG_LEVELS[level] !== undefined ? level : DEFAULT_LEVEL;
+}
+function getMinLevel() {
+    return parseLogLevel(process.env.CG_LOG_LEVEL);
+}
+function isPrettyPrint() {
+    return process.env.CG_LOG_PRETTY === 'true' || process.env.CG_LOG_PRETTY === '1';
+}
+function getLogFilePath() {
+    if (process.env.CG_LOG_TO_FILE !== 'true' && process.env.CG_LOG_TO_FILE !== '1') {
+        return null;
+    }
+    return process.env.CG_LOG_FILE_PATH || 'context-gatekeeper.log';
+}
+function serializeError(error) {
+    if (error instanceof Error) {
+        return {
+            name: error.name,
+            message: error.message,
+            stack: error.stack,
+        };
+    }
+    return {
+        name: 'Error',
+        message: String(error),
+    };
+}
+function serializeErrorForData(error) {
+    if (error instanceof Error) {
+        return {
+            name: error.name,
+            message: error.message,
+            stack: error.stack,
+            ...Object.getOwnPropertyNames(error).reduce((acc, key) => {
+                try {
+                    acc[key] = error[key];
+                }
+                catch {
+                    // Skip non-serializable properties
+                }
+                return acc;
+            }, {}),
+        };
+    }
+    return { value: String(error) };
+}
+function shouldLog(level) {
+    return LOG_LEVELS[level] >= LOG_LEVELS[getMinLevel()];
+}
+function formatJson(entry, pretty) {
+    try {
+        if (pretty) {
+            return JSON.stringify(entry, null, 2);
+        }
+        return JSON.stringify(entry);
+    }
+    catch {
+        return JSON.stringify({
+            level: 'error',
+            timestamp: new Date().toISOString(),
+            message: 'Failed to serialize log entry',
+            data: { originalMessage: entry.message },
+        });
+    }
+}
+function output(line) {
+    const filePath = getLogFilePath();
+    if (filePath) {
+        try {
+            appendFileSync(filePath, line + '\n');
+        }
+        catch {
+            // Fallback to stdout on file write failure
+            process.stdout.write(line + '\n');
+        }
+    }
+    else {
+        process.stdout.write(line + '\n');
+    }
+}
+export class Logger {
+    component;
+    constructor(component) {
+        this.component = component;
+    }
+    log(level, message, data) {
+        if (!shouldLog(level))
+            return;
+        const entry = {
+            level,
+            timestamp: new Date().toISOString(),
+            message,
+        };
+        if (this.component) {
+            entry.data = { ...data, component: this.component };
+        }
+        else if (data) {
+            entry.data = data;
+        }
+        const pretty = isPrettyPrint();
+        output(formatJson(entry, pretty));
+    }
+    trace(message, data) {
+        this.log('trace', message, data);
+    }
+    debug(message, data) {
+        this.log('debug', message, data);
+    }
+    info(message, data) {
+        this.log('info', message, data);
+    }
+    warn(message, data) {
+        this.log('warn', message, data);
+    }
+    error(message, dataOrError) {
+        const data = {};
+        let extra;
+        if (dataOrError instanceof Error || (dataOrError && typeof dataOrError === 'object')) {
+            if (dataOrError instanceof Error) {
+                data.error = serializeError(dataOrError);
+                extra = serializeErrorForData(dataOrError);
+            }
+            else {
+                extra = dataOrError;
+            }
+        }
+        else if (dataOrError) {
+            data.error = serializeError(dataOrError);
+        }
+        const mergedData = extra ? { ...extra, ...data } : data;
+        this.log('error', message, Object.keys(mergedData).length > 0 ? mergedData : undefined);
+    }
+    /** Log a tool invocation with timing */
+    toolInvocation(toolName, latencyMs, success, error) {
+        const data = {
+            tool: toolName,
+            latencyMs,
+            success,
+        };
+        if (error) {
+            data.error = serializeErrorForData(error);
+        }
+        const level = success ? 'info' : 'error';
+        this.log(level, `Tool invocation: ${toolName}`, data);
+    }
+}
+// Default logger instance
+export const logger = new Logger();
+// Factory function for component-specific loggers
+export function createLogger(component) {
+    return new Logger(component);
+}
+//# sourceMappingURL=logger.js.map

package/dist/utils/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,IAAI,CAAC;AAIpC,MAAM,UAAU,GAA6B;IAC3C,KAAK,EAAE,CAAC;IACR,KAAK,EAAE,CAAC;IACR,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,CAAC;IACP,KAAK,EAAE,CAAC;CACT,CAAC;AAEF,MAAM,aAAa,GAAa,MAAM,CAAC;AAEvC,SAAS,aAAa,CAAC,QAA4B;IACjD,IAAI,CAAC,QAAQ;QAAE,OAAO,aAAa,CAAC;IACpC,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAc,CAAC;IACjD,OAAO,UAAU,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC;AACjE,CAAC;AAED,SAAS,WAAW;IAClB,OAAO,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,GAAG,CAAC;AACnF,CAAC;AAED,SAAS,cAAc;IACrB,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,GAAG,EAAE,CAAC;QAChF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,wBAAwB,CAAC;AAClE,CAAC;AAmBD,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO;YACL,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC;KACvB,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC3C,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO;YACL,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,GAAG,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;gBACvD,IAAI,CAAC;oBACF,GAA+B,CAAC,GAAG,CAAC,GAAI,KAA4C,CAAC,GAAG,CAAC,CAAC;gBAC7F,CAAC;gBAAC,MAAM,CAAC;oBACP,mCAAmC;gBACrC,CAAC;gBACD,OAAO,GAAG,CAAC;YACb,CAAC,EAAE,EAA6B,CAAC;SAClC,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,SAAS,CAAC,KAAe;IAChC,OAAO,UAAU,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,UAAU,CAAC,KAAe,EAAE,MAAe;IAClD,IAAI,CAAC;QACH,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACxC,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,SAAS,CAAC;YACpB,KAAK,EAAE,OAAO;YACd,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,OAAO,EAAE,+BAA+B;YACxC,IAAI,EAAE,EAAE,eAAe,EAAE,KAAK,CAAC,OAAO,EAAE;SACzC,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,IAAY;IAC1B,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC;IAElC,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC;YACH,cAAc,CAAC,QAAQ,EAAE,IAAI,GAAG,IAAI,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,2CAA2C;YAC3C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IACpC,CAAC;AACH,CAAC;AAED,MAAM,OAAO,MAAM;IACT,SAAS,CAAU;IAE3B,YAAY,SAAkB;QAC5B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IAEO,GAAG,CACT,KAAe,EACf,OAAe,EACf,IAA8B;QAE9B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;YAAE,OAAO;QAE9B,MAAM,KAAK,GAAa;YACtB,KAAK;YACL,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,OAAO;SACR,CAAC;QAEF,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,KAAK,CAAC,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;QACtD,CAAC;aAAM,IAAI,IAAI,EAAE,CAAC;YAChB,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;QACpB,CAAC;QAED,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;QAC/B,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,IAA8B;QACnD,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,IAA8B;QACnD,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,IAA8B;QAClD,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,IAA8B;QAClD,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,WAA+C;QACpE,MAAM,IAAI,GAA4B,EAAE,CAAC;QACzC,IAAI,KAA0C,CAAC;QAE/C,IAAI,WAAW,YAAY,KAAK,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,CAAC,EAAE,CAAC;YACrF,IAAI,WAAW,YAAY,KAAK,EAAE,CAAC;gBACjC,IAAI,CAAC,KAAK,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;gBACzC,KAAK,GAAG,qBAAqB,CAAC,WAAW,CAAC,CAAC;YAC7C,CAAC;iBAAM,CAAC;gBACN,KAAK,GAAG,WAAsC,CAAC;YACjD,CAAC;QACH,CAAC;aAAM,IAAI,WAAW,EAAE,CAAC;YACvB,IAAI,CAAC,KAAK,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;QAC3C,CAAC;QAED,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACxD,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC1F,CAAC;IAED,wCAAwC;IACxC,cAAc,CACZ,QAAgB,EAChB,SAAiB,EACjB,OAAgB,EAChB,KAAe;QAEf,MAAM,IAAI,GAA4B;YACpC,IAAI,EAAE,QAAQ;YACd,SAAS;YACT,OAAO;SACR,CAAC;QAEF,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,KAAK,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,KAAK,GAAa,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;QACnD,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,oBAAoB,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAC;IACxD,CAAC;CACF;AAED,0BAA0B;AAC1B,MAAM,CAAC,MAAM,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;AAEnC,kDAAkD;AAClD,MAAM,UAAU,YAAY,CAAC,SAAiB;IAC5C,OAAO,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC;AAC/B,CAAC"}

package/dist/utils/priority.d.ts

@@ -0,0 +1,26 @@
+import { Priority } from '../models/types.js';
+/**
+ * Calculate the decay factor based on memory age
+ */
+export declare function calculateTimeDecay(createdAt: Date, anchored: boolean): number;
+/**
+ * Calculate the priority score for a memory
+ *
+ * Formula: score = priority_weight * (1 + access_count * 0.1) * time_decay
+ *
+ * - Anchored memories: weight = 1.0, decay = 1.0 (permanent)
+ * - Constraint: weight = 0.8
+ * - Decision: weight = 0.6
+ * - Preference: weight = 0.4
+ * - Fact: weight = 0.2
+ */
+export declare function calculatePriorityScore(priority: Priority, accessCount: number, createdAt: Date, anchored: boolean): number;
+/**
+ * Get priority weight value
+ */
+export declare function getPriorityWeight(priority: Priority): number;
+/**
+ * Check if a priority level is high enough for quick matching
+ */
+export declare function isHighPriority(priority: Priority): boolean;
+//# sourceMappingURL=priority.d.ts.map

package/dist/utils/priority.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"priority.d.ts","sourceRoot":"","sources":["../../src/utils/priority.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAiE,MAAM,oBAAoB,CAAC;AAE7G;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,GAAG,MAAM,CAU7E;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,QAAQ,EAClB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,IAAI,EACf,QAAQ,EAAE,OAAO,GAChB,MAAM,CAMR;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,GAAG,MAAM,CAE5D;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAE1D"}

package/dist/utils/priority.js

@@ -0,0 +1,43 @@
+import { PRIORITY_WEIGHTS, ANCHORED_DECAY_FACTOR, DEFAULT_DECAY_FACTOR } from '../models/types.js';
+/**
+ * Calculate the decay factor based on memory age
+ */
+export function calculateTimeDecay(createdAt, anchored) {
+    if (anchored) {
+        return ANCHORED_DECAY_FACTOR;
+    }
+    const now = Date.now();
+    const ageInDays = (now - createdAt.getTime()) / (1000 * 60 * 60 * 24);
+    // Simple exponential decay: decay_factor^age
+    return Math.pow(DEFAULT_DECAY_FACTOR, ageInDays);
+}
+/**
+ * Calculate the priority score for a memory
+ *
+ * Formula: score = priority_weight * (1 + access_count * 0.1) * time_decay
+ *
+ * - Anchored memories: weight = 1.0, decay = 1.0 (permanent)
+ * - Constraint: weight = 0.8
+ * - Decision: weight = 0.6
+ * - Preference: weight = 0.4
+ * - Fact: weight = 0.2
+ */
+export function calculatePriorityScore(priority, accessCount, createdAt, anchored) {
+    const weight = PRIORITY_WEIGHTS[priority];
+    const decay = calculateTimeDecay(createdAt, anchored);
+    const accessBonus = 1 + accessCount * 0.1;
+    return weight * accessBonus * decay;
+}
+/**
+ * Get priority weight value
+ */
+export function getPriorityWeight(priority) {
+    return PRIORITY_WEIGHTS[priority];
+}
+/**
+ * Check if a priority level is high enough for quick matching
+ */
+export function isHighPriority(priority) {
+    return priority === 'anchored' || priority === 'constraint';
+}
+//# sourceMappingURL=priority.js.map