context-gatekeeper 0.3.0

package/dist/utils/priority.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"priority.js","sourceRoot":"","sources":["../../src/utils/priority.ts"],"names":[],"mappings":"AAAA,OAAO,EAAY,gBAAgB,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAE7G;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,SAAe,EAAE,QAAiB;IACnE,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,qBAAqB,CAAC;IAC/B,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,SAAS,GAAG,CAAC,GAAG,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IAEtE,6CAA6C;IAC7C,OAAO,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAAkB,EAClB,WAAmB,EACnB,SAAe,EACf,QAAiB;IAEjB,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,kBAAkB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACtD,MAAM,WAAW,GAAG,CAAC,GAAG,WAAW,GAAG,GAAG,CAAC;IAE1C,OAAO,MAAM,GAAG,WAAW,GAAG,KAAK,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAkB;IAClD,OAAO,gBAAgB,CAAC,QAAQ,CAAC,CAAC;AACpC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,QAAkB;IAC/C,OAAO,QAAQ,KAAK,UAAU,IAAI,QAAQ,KAAK,YAAY,CAAC;AAC9D,CAAC"}

package/dist/utils/watchdog.d.ts

@@ -0,0 +1,57 @@
+/**
+ * Watchdog 权限架构
+ *
+ * 核心设计：
+ * - 工具分为 read（只读）和 write（读写）两类
+ * - 主 agent 持只读 token，只能调用 read 工具
+ * - 特殊 token 可绕过限制（如 watchdog agent）
+ * - 权限检查在工具执行前进行
+ */
+/** 工具权限级别 */
+export type ToolPermission = 'read' | 'write';
+/** 权限配置 */
+export interface PermissionConfig {
+    /** 工具名称 */
+    tool: string;
+    /** 权限级别 */
+    permission: ToolPermission;
+    /** 描述 */
+    description?: string;
+}
+/** 所有工具的权限配置 */
+export declare const TOOL_PERMISSIONS: PermissionConfig[];
+/** 只读工具列表 */
+export declare const READ_ONLY_TOOLS: string[];
+/** 读写工具列表 */
+export declare const READ_WRITE_TOOLS: string[];
+/** 权限验证结果 */
+export interface PermissionCheckResult {
+    allowed: boolean;
+    tool: string;
+    token: string;
+    requiredPermission: ToolPermission;
+    reason?: string;
+}
+/** Watchdog Token 管理器 */
+export declare class WatchdogTokenManager {
+    private readToken;
+    private writeToken;
+    private watchdogToken;
+    constructor();
+    /** 设置 token */
+    setToken(type: 'read' | 'write' | 'watchdog', token: string): void;
+    /** 获取当前 token 类型 */
+    getCurrentTokenType(token: string): 'read' | 'write' | 'watchdog' | 'unknown';
+    /** 检查工具调用权限 */
+    checkPermission(tool: string, token: string): PermissionCheckResult;
+    /** 检查是否有任何 token 配置 */
+    hasTokens(): boolean;
+    /** 生成随机 token */
+    static generateToken(length?: number): string;
+}
+export declare function getWatchdogTokenManager(): WatchdogTokenManager;
+/** 便捷函数：检查工具权限 */
+export declare function checkPermission(tool: string, token: string): PermissionCheckResult;
+/** 重置 token 管理器（测试用） */
+export declare function resetWatchdogTokenManager(): void;
+//# sourceMappingURL=watchdog.d.ts.map

package/dist/utils/watchdog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"watchdog.d.ts","sourceRoot":"","sources":["../../src/utils/watchdog.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,aAAa;AACb,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,OAAO,CAAC;AAE9C,WAAW;AACX,MAAM,WAAW,gBAAgB;IAC/B,WAAW;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW;IACX,UAAU,EAAE,cAAc,CAAC;IAC3B,SAAS;IACT,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,gBAAgB;AAChB,eAAO,MAAM,gBAAgB,EAAE,gBAAgB,EAoB9C,CAAC;AAEF,aAAa;AACb,eAAO,MAAM,eAAe,UAAyE,CAAC;AAEtG,aAAa;AACb,eAAO,MAAM,gBAAgB,UAA0E,CAAC;AAExG,aAAa;AACb,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,kBAAkB,EAAE,cAAc,CAAC;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,yBAAyB;AACzB,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,SAAS,CAAc;IAC/B,OAAO,CAAC,UAAU,CAAc;IAChC,OAAO,CAAC,aAAa,CAAc;;IAQnC,eAAe;IACf,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAclE,oBAAoB;IACpB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,UAAU,GAAG,SAAS;IAO7E,eAAe;IACf,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,qBAAqB;IAsEnE,uBAAuB;IACvB,SAAS,IAAI,OAAO;IAIpB,iBAAiB;IACjB,MAAM,CAAC,aAAa,CAAC,MAAM,SAAK,GAAG,MAAM;CAQ1C;AAKD,wBAAgB,uBAAuB,IAAI,oBAAoB,CAK9D;AAED,kBAAkB;AAClB,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,qBAAqB,CAElF;AAED,wBAAwB;AACxB,wBAAgB,yBAAyB,IAAI,IAAI,CAEhD"}

package/dist/utils/watchdog.js

@@ -0,0 +1,164 @@
+/**
+ * Watchdog 权限架构
+ *
+ * 核心设计：
+ * - 工具分为 read（只读）和 write（读写）两类
+ * - 主 agent 持只读 token，只能调用 read 工具
+ * - 特殊 token 可绕过限制（如 watchdog agent）
+ * - 权限检查在工具执行前进行
+ */
+import { logger } from './logger.js';
+/** 所有工具的权限配置 */
+export const TOOL_PERMISSIONS = [
+    // 只读工具
+    { tool: 'memory_recall', permission: 'read', description: '读取记忆' },
+    { tool: 'memory_search', permission: 'read', description: '搜索记忆' },
+    { tool: 'memory_stats', permission: 'read', description: '获取统计' },
+    { tool: 'intelligent_recall', permission: 'read', description: '智能召回' },
+    { tool: 'dual_mode_execute', permission: 'read', description: '双模式执行（仅软引导）' },
+    { tool: 'data_summary', permission: 'read', description: '数据摘要（GDPR）' },
+    { tool: 'memory_extract', permission: 'read', description: '约束提取（仅分析）' },
+    // 读写工具
+    { tool: 'memory_store', permission: 'write', description: '存储记忆' },
+    { tool: 'memory_store_batch', permission: 'write', description: '批量存储' },
+    { tool: 'memory_delete_batch', permission: 'write', description: '批量删除' },
+    { tool: 'memory_anchor', permission: 'write', description: '锚定记忆' },
+    { tool: 'context_compress', permission: 'write', description: '压缩上下文' },
+    { tool: 'project_create', permission: 'write', description: '创建项目' },
+    { tool: 'configure_llm', permission: 'write', description: '配置 LLM' },
+    { tool: 'gdpr_export', permission: 'write', description: 'GDPR 导出' },
+    { tool: 'gdpr_delete', permission: 'write', description: 'GDPR 删除' },
+];
+/** 只读工具列表 */
+export const READ_ONLY_TOOLS = TOOL_PERMISSIONS.filter(p => p.permission === 'read').map(p => p.tool);
+/** 读写工具列表 */
+export const READ_WRITE_TOOLS = TOOL_PERMISSIONS.filter(p => p.permission === 'write').map(p => p.tool);
+/** Watchdog Token 管理器 */
+export class WatchdogTokenManager {
+    readToken = '';
+    writeToken = '';
+    watchdogToken = '';
+    constructor() {
+        this.readToken = process.env.CG_READ_TOKEN || '';
+        this.writeToken = process.env.CG_WRITE_TOKEN || '';
+        this.watchdogToken = process.env.CG_WATCHDOG_TOKEN || '';
+    }
+    /** 设置 token */
+    setToken(type, token) {
+        switch (type) {
+            case 'read':
+                this.readToken = token;
+                break;
+            case 'write':
+                this.writeToken = token;
+                break;
+            case 'watchdog':
+                this.watchdogToken = token;
+                break;
+        }
+    }
+    /** 获取当前 token 类型 */
+    getCurrentTokenType(token) {
+        if (token === this.watchdogToken && this.watchdogToken)
+            return 'watchdog';
+        if (token === this.writeToken && this.writeToken)
+            return 'write';
+        if (token === this.readToken && this.readToken)
+            return 'read';
+        return 'unknown';
+    }
+    /** 检查工具调用权限 */
+    checkPermission(tool, token) {
+        const start = performance.now();
+        const toolConfig = TOOL_PERMISSIONS.find(p => p.tool === tool);
+        if (!toolConfig) {
+            logger.debug('Permission check: unknown tool', { tool, tokenType: this.getCurrentTokenType(token) });
+            return {
+                allowed: false,
+                tool,
+                token,
+                requiredPermission: 'read',
+                reason: `Unknown tool: ${tool}`,
+            };
+        }
+        if (token === this.watchdogToken && this.watchdogToken) {
+            const latencyMs = Math.round(performance.now() - start);
+            logger.debug('Permission check: watchdog bypass', { tool, requiredPermission: toolConfig.permission, latencyMs });
+            return {
+                allowed: true,
+                tool,
+                token,
+                requiredPermission: toolConfig.permission,
+            };
+        }
+        const tokenType = this.getCurrentTokenType(token);
+        if (tokenType === 'unknown' || !token) {
+            if (toolConfig.permission === 'read') {
+                const latencyMs = Math.round(performance.now() - start);
+                logger.debug('Permission check: no token, read allowed', { tool, latencyMs });
+                return {
+                    allowed: true,
+                    tool,
+                    token: token || '(none)',
+                    requiredPermission: toolConfig.permission,
+                };
+            }
+            logger.debug('Permission check: no token, write denied', { tool, requiredPermission: toolConfig.permission });
+            return {
+                allowed: false,
+                tool,
+                token: token || '(none)',
+                requiredPermission: toolConfig.permission,
+                reason: `Tool '${tool}' requires write permission but no write token provided`,
+            };
+        }
+        if (tokenType === 'read' && toolConfig.permission === 'write') {
+            logger.debug('Permission check: read token cannot write', { tool, requiredPermission: toolConfig.permission });
+            return {
+                allowed: false,
+                tool,
+                token,
+                requiredPermission: toolConfig.permission,
+                reason: `Read-only token cannot execute write tool '${tool}'`,
+            };
+        }
+        const latencyMs = Math.round(performance.now() - start);
+        logger.debug('Permission check: allowed', { tool, tokenType, requiredPermission: toolConfig.permission, latencyMs });
+        return {
+            allowed: true,
+            tool,
+            token,
+            requiredPermission: toolConfig.permission,
+        };
+    }
+    /** 检查是否有任何 token 配置 */
+    hasTokens() {
+        return !!(this.readToken || this.writeToken || this.watchdogToken);
+    }
+    /** 生成随机 token */
+    static generateToken(length = 32) {
+        const chars = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789';
+        let result = '';
+        for (let i = 0; i < length; i++) {
+            result += chars.charAt(Math.floor(Math.random() * chars.length));
+        }
+        return result;
+    }
+}
+// 全局单例
+let _tokenManager = null;
+export function getWatchdogTokenManager() {
+    if (!_tokenManager) {
+        _tokenManager = new WatchdogTokenManager();
+    }
+    return _tokenManager;
+}
+/** 便捷函数：检查工具权限 */
+export function checkPermission(tool, token) {
+    return getWatchdogTokenManager().checkPermission(tool, token);
+}
+/** 重置 token 管理器（测试用） */
+export function resetWatchdogTokenManager() {
+    _tokenManager = null;
+}
+//# sourceMappingURL=watchdog.js.map

package/dist/utils/watchdog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"watchdog.js","sourceRoot":"","sources":["../../src/utils/watchdog.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAerC,gBAAgB;AAChB,MAAM,CAAC,MAAM,gBAAgB,GAAuB;IAClD,OAAO;IACP,EAAE,IAAI,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE;IAClE,EAAE,IAAI,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE;IAClE,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE;IACjE,EAAE,IAAI,EAAE,oBAAoB,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE;IACvE,EAAE,IAAI,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE;IAC7E,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE;IACvE,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE;IAExE,OAAO;IACP,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE;IAClE,EAAE,IAAI,EAAE,oBAAoB,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE;IACxE,EAAE,IAAI,EAAE,qBAAqB,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE;IACzE,EAAE,IAAI,EAAE,eAAe,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE;IACnE,EAAE,IAAI,EAAE,kBAAkB,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE;IACvE,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE;IACpE,EAAE,IAAI,EAAE,eAAe,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE;IACrE,EAAE,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE;IACpE,EAAE,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE;CACrE,CAAC;AAEF,aAAa;AACb,MAAM,CAAC,MAAM,eAAe,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAEtG,aAAa;AACb,MAAM,CAAC,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAWxG,yBAAyB;AACzB,MAAM,OAAO,oBAAoB;IACvB,SAAS,GAAW,EAAE,CAAC;IACvB,UAAU,GAAW,EAAE,CAAC;IACxB,aAAa,GAAW,EAAE,CAAC;IAEnC;QACE,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC;QACjD,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC;QACnD,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC;IAC3D,CAAC;IAED,eAAe;IACf,QAAQ,CAAC,IAAmC,EAAE,KAAa;QACzD,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,MAAM;gBACT,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;gBACvB,MAAM;YACR,KAAK,OAAO;gBACV,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;gBACxB,MAAM;YACR,KAAK,UAAU;gBACb,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;gBAC3B,MAAM;QACV,CAAC;IACH,CAAC;IAED,oBAAoB;IACpB,mBAAmB,CAAC,KAAa;QAC/B,IAAI,KAAK,KAAK,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,aAAa;YAAE,OAAO,UAAU,CAAC;QAC1E,IAAI,KAAK,KAAK,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU;YAAE,OAAO,OAAO,CAAC;QACjE,IAAI,KAAK,KAAK,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,MAAM,CAAC;QAC9D,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,eAAe;IACf,eAAe,CAAC,IAAY,EAAE,KAAa;QACzC,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAChC,MAAM,UAAU,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAE/D,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACrG,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,IAAI;gBACJ,KAAK;gBACL,kBAAkB,EAAE,MAAM;gBAC1B,MAAM,EAAE,iBAAiB,IAAI,EAAE;aAChC,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,KAAK,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;YACxD,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,UAAU,CAAC,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;YAClH,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,IAAI;gBACJ,KAAK;gBACL,kBAAkB,EAAE,UAAU,CAAC,UAAU;aAC1C,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAElD,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE,CAAC;YACtC,IAAI,UAAU,CAAC,UAAU,KAAK,MAAM,EAAE,CAAC;gBACrC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;gBACxD,MAAM,CAAC,KAAK,CAAC,0CAA0C,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;gBAC9E,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,IAAI;oBACJ,KAAK,EAAE,KAAK,IAAI,QAAQ;oBACxB,kBAAkB,EAAE,UAAU,CAAC,UAAU;iBAC1C,CAAC;YACJ,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,0CAA0C,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC;YAC9G,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,IAAI;gBACJ,KAAK,EAAE,KAAK,IAAI,QAAQ;gBACxB,kBAAkB,EAAE,UAAU,CAAC,UAAU;gBACzC,MAAM,EAAE,SAAS,IAAI,yDAAyD;aAC/E,CAAC;QACJ,CAAC;QAED,IAAI,SAAS,KAAK,MAAM,IAAI,UAAU,CAAC,UAAU,KAAK,OAAO,EAAE,CAAC;YAC9D,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC;YAC/G,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,IAAI;gBACJ,KAAK;gBACL,kBAAkB,EAAE,UAAU,CAAC,UAAU;gBACzC,MAAM,EAAE,8CAA8C,IAAI,GAAG;aAC9D,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;QACxD,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,kBAAkB,EAAE,UAAU,CAAC,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;QACrH,OAAO;YACL,OAAO,EAAE,IAAI;YACb,IAAI;YACJ,KAAK;YACL,kBAAkB,EAAE,UAAU,CAAC,UAAU;SAC1C,CAAC;IACJ,CAAC;IAED,uBAAuB;IACvB,SAAS;QACP,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,aAAa,CAAC,CAAC;IACrE,CAAC;IAED,iBAAiB;IACjB,MAAM,CAAC,aAAa,CAAC,MAAM,GAAG,EAAE;QAC9B,MAAM,KAAK,GAAG,gEAAgE,CAAC;QAC/E,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAED,OAAO;AACP,IAAI,aAAa,GAAgC,IAAI,CAAC;AAEtD,MAAM,UAAU,uBAAuB;IACrC,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,aAAa,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,CAAC;IACD,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,kBAAkB;AAClB,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,KAAa;IACzD,OAAO,uBAAuB,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,wBAAwB;AACxB,MAAM,UAAU,yBAAyB;IACvC,aAAa,GAAG,IAAI,CAAC;AACvB,CAAC"}

package/package.json

@@ -0,0 +1,78 @@
+{
+  "name": "context-gatekeeper",
+  "version": "0.3.0",
+  "description": "MCP context management with intelligent constraint detection. AutoSkill-style extraction, MemGate-style recall, MPR-style dual-mode execution. Universal install for Cursor / Claude Desktop / Claude Code / Cline / Continue.",
+  "type": "module",
+  "main": "dist/src/index.js",
+  "types": "dist/src/index.d.ts",
+  "bin": {
+    "context-gatekeeper": "dist/src/mcp/server.js",
+    "context-gatekeeper-cli": "bin/context-gatekeeper-cli.js"
+  },
+  "files": [
+    "dist",
+    "bin",
+    "README.md",
+    "README.zh.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc && node scripts/copy-for-publish.mjs",
+    "build:js": "tsc",
+    "copy:scripts": "node scripts/copy-for-publish.mjs",
+    "prepack": "npm run build",
+    "prepublishOnly": "npm run build",
+    "prepublish": "npm run build",
+    "dev": "tsc --watch",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "test:coverage": "vitest run --coverage",
+    "test:agents": "tsx scripts/cross-agent-test.ts",
+    "cli": "tsx scripts/cli.ts",
+    "lint": "eslint src --ext .ts"
+  },
+  "keywords": [
+    "mcp",
+    "context",
+    "agent",
+    "memory",
+    "constraint",
+    "autoskill",
+    "memgate",
+    "meta-policy",
+    "token",
+    "universal",
+    "cursor",
+    "claude",
+    "cline",
+    "continue"
+  ],
+  "author": "context-gatekeeper contributors",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/changebusiness/context-gatekeeper.git"
+  },
+  "bugs": {
+    "url": "https://github.com/changebusiness/context-gatekeeper/issues"
+  },
+  "homepage": "https://github.com/changebusiness/context-gatekeeper#readme",
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.29.0",
+    "sql.js": "^1.10.0",
+    "uuid": "^9.0.0",
+    "zod": "^3.22.0"
+  },
+  "devDependencies": {
+    "@types/node": "^20.10.0",
+    "@types/sql.js": "^1.4.9",
+    "@types/uuid": "^9.0.0",
+    "@vitest/coverage-v8": "^1.6.1",
+    "tsx": "^4.22.4",
+    "typescript": "^5.3.0",
+    "vitest": "^1.2.0"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  }
+}