cortex-mcp 1.0.1

package/dist/scanners/project-scanner.js

@@ -0,0 +1,398 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ProjectScanner = void 0;
+/**
+ * Project Scanner — Scans project on first activation.
+ * Solves the "Day 1 Empty Brain" problem.
+ *
+ * Pure Node.js — no VS Code dependency.
+ * Captures: package.json, README, directory structure, git log, config files.
+ */
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const child_process_1 = require("child_process");
+const types_1 = require("../types");
+class ProjectScanner {
+    memoryStore;
+    workspaceRoot;
+    constructor(memoryStore, workspaceRoot) {
+        this.memoryStore = memoryStore;
+        this.workspaceRoot = workspaceRoot;
+    }
+    /** Check if project was already scanned */
+    isAlreadyScanned() {
+        const existing = this.memoryStore.getByType(types_1.MemoryType.INSIGHT, 10);
+        return existing.some(m => m.intent.startsWith('Project structure'));
+    }
+    /** Full project scan — returns number of memories created */
+    async scan() {
+        if (this.isAlreadyScanned()) {
+            return 0;
+        }
+        let count = 0;
+        count += this.scanPackageJson();
+        count += this.scanReadme();
+        count += this.scanDirectoryStructure();
+        count += this.scanConfigFiles();
+        count += this.scanArchitecture();
+        count += this.scanEnvironment();
+        count += await this.scanGitLog();
+        return count;
+    }
+    /** Scan package.json for stack info */
+    scanPackageJson() {
+        const pkgPath = path.join(this.workspaceRoot, 'package.json');
+        if (!fs.existsSync(pkgPath))
+            return 0;
+        try {
+            const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf-8'));
+            const deps = Object.keys(pkg.dependencies || {}).slice(0, 15).join(', ');
+            const devDeps = Object.keys(pkg.devDependencies || {}).slice(0, 10).join(', ');
+            const intent = `Project dependencies: ${deps}`;
+            this.memoryStore.add({
+                type: types_1.MemoryType.DEPENDENCY,
+                intent: intent.slice(0, 300),
+                action: `Scanned package.json: ${pkg.name || 'unknown'}`,
+                reason: devDeps ? `Dev deps: ${devDeps}` : undefined,
+                tags: ['project-scan', 'dependencies'],
+                confidence: 0.9,
+                importance: 0.7,
+                timestamp: Date.now(),
+                isActive: true,
+                accessCount: 0,
+                createdAt: Date.now(),
+                id: '',
+            });
+            return 1;
+        }
+        catch {
+            return 0;
+        }
+    }
+    /** Scan README for project purpose */
+    scanReadme() {
+        const readmePaths = ['README.md', 'readme.md', 'README.txt'];
+        for (const name of readmePaths) {
+            const readmePath = path.join(this.workspaceRoot, name);
+            if (!fs.existsSync(readmePath))
+                continue;
+            try {
+                const content = fs.readFileSync(readmePath, 'utf-8');
+                // Get first 3 non-empty lines as summary
+                const summary = content.split('\n')
+                    .filter(l => l.trim().length > 0)
+                    .slice(0, 3)
+                    .join(' ')
+                    .slice(0, 300);
+                this.memoryStore.add({
+                    type: types_1.MemoryType.INSIGHT,
+                    intent: `Project README: ${summary}`,
+                    action: `Scanned ${name}`,
+                    tags: ['project-scan', 'readme'],
+                    confidence: 0.8,
+                    importance: 0.6,
+                    timestamp: Date.now(),
+                    isActive: true,
+                    accessCount: 0,
+                    createdAt: Date.now(),
+                    id: '',
+                });
+                return 1;
+            }
+            catch {
+                return 0;
+            }
+        }
+        return 0;
+    }
+    /** Scan directory structure (top 3 levels) */
+    scanDirectoryStructure() {
+        const tree = this.getDirectoryTree(this.workspaceRoot, 3);
+        if (!tree)
+            return 0;
+        this.memoryStore.add({
+            type: types_1.MemoryType.INSIGHT,
+            intent: `Project structure (top 3 levels)`,
+            action: tree.slice(0, 300),
+            tags: ['project-scan', 'structure'],
+            confidence: 0.9,
+            importance: 0.5,
+            timestamp: Date.now(),
+            isActive: true,
+            accessCount: 0,
+            createdAt: Date.now(),
+            id: '',
+        });
+        return 1;
+    }
+    /** Build directory tree string */
+    getDirectoryTree(dir, maxDepth, depth = 0, prefix = '') {
+        if (depth >= maxDepth)
+            return '';
+        const ignore = new Set(['node_modules', '.git', 'dist', '.ai', '.gemini', 'coverage', '.next']);
+        try {
+            const entries = fs.readdirSync(dir, { withFileTypes: true })
+                .filter(e => !ignore.has(e.name) && !e.name.startsWith('.'))
+                .sort((a, b) => {
+                if (a.isDirectory() && !b.isDirectory())
+                    return -1;
+                if (!a.isDirectory() && b.isDirectory())
+                    return 1;
+                return a.name.localeCompare(b.name);
+            })
+                .slice(0, 20);
+            let result = '';
+            for (const entry of entries) {
+                result += `${prefix}${entry.isDirectory() ? '[DIR]' : '[FILE]'} ${entry.name}\n`;
+                if (entry.isDirectory()) {
+                    result += this.getDirectoryTree(path.join(dir, entry.name), maxDepth, depth + 1, prefix + '  ');
+                }
+            }
+            return result;
+        }
+        catch {
+            return '';
+        }
+    }
+    /** Scan config files for conventions */
+    scanConfigFiles() {
+        const configs = ['tsconfig.json', '.eslintrc.json', '.prettierrc', 'next.config.js', 'vite.config.ts'];
+        let count = 0;
+        for (const name of configs) {
+            const configPath = path.join(this.workspaceRoot, name);
+            if (!fs.existsSync(configPath))
+                continue;
+            this.memoryStore.add({
+                type: types_1.MemoryType.CONVENTION,
+                intent: `Project uses ${name}`,
+                action: `Config file found: ${name}`,
+                tags: ['project-scan', 'config'],
+                confidence: 0.9,
+                importance: 0.4,
+                timestamp: Date.now(),
+                isActive: true,
+                accessCount: 0,
+                createdAt: Date.now(),
+                id: '',
+            });
+            count++;
+        }
+        return count;
+    }
+    /** Scan git log for recent history */
+    async scanGitLog() {
+        try {
+            const log = (0, child_process_1.execSync)('git log --oneline -10', {
+                cwd: this.workspaceRoot,
+                encoding: 'utf-8',
+                timeout: 5000,
+            }).trim();
+            if (!log)
+                return 0;
+            this.memoryStore.add({
+                type: types_1.MemoryType.INSIGHT,
+                intent: `Recent git history (last 10 commits)`,
+                action: log.slice(0, 300),
+                tags: ['project-scan', 'git'],
+                confidence: 0.9,
+                importance: 0.5,
+                timestamp: Date.now(),
+                isActive: true,
+                accessCount: 0,
+                createdAt: Date.now(),
+                id: '',
+            });
+            return 1;
+        }
+        catch {
+            return 0;
+        }
+    }
+    /** Scan import chains to build architecture flow */
+    scanArchitecture() {
+        const srcDirs = ['src', 'lib', 'app', 'pages', 'components'];
+        const sourceFiles = [];
+        for (const dir of srcDirs) {
+            const dirPath = path.join(this.workspaceRoot, dir);
+            if (!fs.existsSync(dirPath))
+                continue;
+            this.collectImports(dirPath, sourceFiles, 0);
+        }
+        if (sourceFiles.length === 0)
+            return 0;
+        // Build architecture map: which files import which
+        const flowLines = [];
+        const entryPoints = [];
+        const mostImported = new Map();
+        for (const { file, imports } of sourceFiles) {
+            for (const imp of imports) {
+                mostImported.set(imp, (mostImported.get(imp) || 0) + 1);
+            }
+            if (file.includes('index') || file.includes('main') || file.includes('app') || file.includes('server')) {
+                entryPoints.push(file);
+            }
+        }
+        // Top 10 most-imported files = core components
+        const sorted = [...mostImported.entries()].sort((a, b) => b[1] - a[1]).slice(0, 10);
+        if (sorted.length > 0) {
+            flowLines.push('Core components (most imported):');
+            for (const [file, count] of sorted) {
+                flowLines.push(`  ${file} (imported by ${count} files)`);
+            }
+        }
+        if (entryPoints.length > 0) {
+            flowLines.push(`Entry points: ${entryPoints.join(', ')}`);
+        }
+        flowLines.push(`Total source files: ${sourceFiles.length}`);
+        const flowText = flowLines.join('\n').slice(0, 500);
+        this.memoryStore.add({
+            type: types_1.MemoryType.INSIGHT,
+            intent: 'Architecture flow — component relationships',
+            action: flowText,
+            tags: ['project-scan', 'architecture'],
+            confidence: 0.85,
+            importance: 0.7,
+            timestamp: Date.now(),
+            isActive: true,
+            accessCount: 0,
+            createdAt: Date.now(),
+            id: '',
+        });
+        return 1;
+    }
+    /** Collect imports from source files */
+    collectImports(dir, results, depth) {
+        if (depth > 4)
+            return;
+        const ignore = new Set(['node_modules', '.git', 'dist', 'coverage', '__tests__', '__mocks__']);
+        try {
+            const entries = fs.readdirSync(dir, { withFileTypes: true });
+            for (const entry of entries) {
+                if (ignore.has(entry.name))
+                    continue;
+                const fullPath = path.join(dir, entry.name);
+                if (entry.isDirectory()) {
+                    this.collectImports(fullPath, results, depth + 1);
+                }
+                else if (/\.(ts|js|tsx|jsx)$/.test(entry.name) && !entry.name.endsWith('.d.ts')) {
+                    try {
+                        const content = fs.readFileSync(fullPath, 'utf-8').slice(0, 3000); // Only first 3KB
+                        const imports = [];
+                        const importRegex = /(?:import|require)\s*\(?['"]([^'"]+)['"]\)?/g;
+                        let match;
+                        while ((match = importRegex.exec(content)) !== null) {
+                            const imp = match[1];
+                            if (imp.startsWith('.') || imp.startsWith('/')) {
+                                imports.push(imp);
+                            }
+                        }
+                        const relPath = path.relative(this.workspaceRoot, fullPath).replace(/\\/g, '/');
+                        if (imports.length > 0) {
+                            results.push({ file: relPath, imports });
+                        }
+                    }
+                    catch { }
+                }
+            }
+        }
+        catch { }
+    }
+    /** Scan .env files for environment context */
+    scanEnvironment() {
+        const envFiles = ['.env', '.env.local', '.env.development', '.env.production', '.env.staging', '.env.example'];
+        const envVars = [];
+        for (const name of envFiles) {
+            const envPath = path.join(this.workspaceRoot, name);
+            if (!fs.existsSync(envPath))
+                continue;
+            try {
+                const content = fs.readFileSync(envPath, 'utf-8');
+                const keys = content.split('\n')
+                    .filter(l => l.trim() && !l.startsWith('#'))
+                    .map(l => l.split('=')[0].trim())
+                    .filter(k => k.length > 0);
+                if (keys.length > 0) {
+                    envVars.push(`${name}: ${keys.slice(0, 10).join(', ')}`);
+                }
+            }
+            catch { }
+        }
+        if (envVars.length === 0)
+            return 0;
+        this.memoryStore.add({
+            type: types_1.MemoryType.INSIGHT,
+            intent: `Environment config — ${envVars.length} env files found`,
+            action: envVars.join('\n').slice(0, 400),
+            tags: ['project-scan', 'environment'],
+            confidence: 0.9,
+            importance: 0.6,
+            timestamp: Date.now(),
+            isActive: true,
+            accessCount: 0,
+            createdAt: Date.now(),
+            id: '',
+        });
+        return 1;
+    }
+    /** Get list of all source files (for file verification) */
+    getSourceFiles() {
+        const files = [];
+        const ignore = new Set(['node_modules', '.git', 'dist', '.ai', '.gemini', 'coverage']);
+        const walk = (dir, depth = 0) => {
+            if (depth > 5)
+                return;
+            try {
+                const entries = fs.readdirSync(dir, { withFileTypes: true });
+                for (const entry of entries) {
+                    if (ignore.has(entry.name))
+                        continue;
+                    const full = path.join(dir, entry.name);
+                    if (entry.isDirectory()) {
+                        walk(full, depth + 1);
+                    }
+                    else {
+                        files.push(path.relative(this.workspaceRoot, full));
+                    }
+                }
+            }
+            catch { }
+        };
+        walk(this.workspaceRoot);
+        return files;
+    }
+}
+exports.ProjectScanner = ProjectScanner;
+//# sourceMappingURL=project-scanner.js.map

package/dist/scanners/project-scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-scanner.js","sourceRoot":"","sources":["../../src/scanners/project-scanner.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;;;;;;GAMG;AACH,uCAAyB;AACzB,2CAA6B;AAC7B,iDAAyC;AAEzC,oCAAsC;AAEtC,MAAa,cAAc;IACf,WAAW,CAAc;IACzB,aAAa,CAAS;IAE9B,YAAY,WAAwB,EAAE,aAAqB;QACvD,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;IACvC,CAAC;IAED,2CAA2C;IAC3C,gBAAgB;QACZ,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,kBAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACpE,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,6DAA6D;IAC7D,KAAK,CAAC,IAAI;QACN,IAAI,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC;YAC1B,OAAO,CAAC,CAAC;QACb,CAAC;QAED,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;QAChC,KAAK,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QAC3B,KAAK,IAAI,IAAI,CAAC,sBAAsB,EAAE,CAAC;QACvC,KAAK,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;QAChC,KAAK,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACjC,KAAK,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;QAChC,KAAK,IAAI,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACjC,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,uCAAuC;IAC/B,eAAe;QACnB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;QAC9D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO,CAAC,CAAC;QAEtC,IAAI,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;YAC1D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAE/E,MAAM,MAAM,GAAG,yBAAyB,IAAI,EAAE,CAAC;YAC/C,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;gBACjB,IAAI,EAAE,kBAAU,CAAC,UAAU;gBAC3B,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;gBAC5B,MAAM,EAAE,yBAAyB,GAAG,CAAC,IAAI,IAAI,SAAS,EAAE;gBACxD,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,aAAa,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS;gBACpD,IAAI,EAAE,CAAC,cAAc,EAAE,cAAc,CAAC;gBACtC,UAAU,EAAE,GAAG;gBACf,UAAU,EAAE,GAAG;gBACf,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;gBACrB,QAAQ,EAAE,IAAI;gBACd,WAAW,EAAE,CAAC;gBACd,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;gBACrB,EAAE,EAAE,EAAE;aACT,CAAC,CAAC;YACH,OAAO,CAAC,CAAC;QACb,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,CAAC,CAAC;QAAC,CAAC;IACzB,CAAC;IAED,sCAAsC;IAC9B,UAAU;QACd,MAAM,WAAW,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;QAC7D,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC7B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;YACvD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;gBAAE,SAAS;YAEzC,IAAI,CAAC;gBACD,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;gBACrD,yCAAyC;gBACzC,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;qBAC9B,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;qBAChC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;qBACX,IAAI,CAAC,GAAG,CAAC;qBACT,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBAEnB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;oBACjB,IAAI,EAAE,kBAAU,CAAC,OAAO;oBACxB,MAAM,EAAE,mBAAmB,OAAO,EAAE;oBACpC,MAAM,EAAE,WAAW,IAAI,EAAE;oBACzB,IAAI,EAAE,CAAC,cAAc,EAAE,QAAQ,CAAC;oBAChC,UAAU,EAAE,GAAG;oBACf,UAAU,EAAE,GAAG;oBACf,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;oBACrB,QAAQ,EAAE,IAAI;oBACd,WAAW,EAAE,CAAC;oBACd,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;oBACrB,EAAE,EAAE,EAAE;iBACT,CAAC,CAAC;gBACH,OAAO,CAAC,CAAC;YACb,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,CAAC,CAAC;YAAC,CAAC;QACzB,CAAC;QACD,OAAO,CAAC,CAAC;IACb,CAAC;IAED,8CAA8C;IACtC,sBAAsB;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC;QAEpB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;YACjB,IAAI,EAAE,kBAAU,CAAC,OAAO;YACxB,MAAM,EAAE,kCAAkC;YAC1C,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;YAC1B,IAAI,EAAE,CAAC,cAAc,EAAE,WAAW,CAAC;YACnC,UAAU,EAAE,GAAG;YACf,UAAU,EAAE,GAAG;YACf,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,QAAQ,EAAE,IAAI;YACd,WAAW,EAAE,CAAC;YACd,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,EAAE,EAAE,EAAE;SACT,CAAC,CAAC;QACH,OAAO,CAAC,CAAC;IACb,CAAC;IAED,kCAAkC;IAC1B,gBAAgB,CAAC,GAAW,EAAE,QAAgB,EAAE,QAAgB,CAAC,EAAE,SAAiB,EAAE;QAC1F,IAAI,KAAK,IAAI,QAAQ;YAAE,OAAO,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;QAEhG,IAAI,CAAC;YACD,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;iBACvD,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;iBAC3D,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;gBACX,IAAI,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE;oBAAE,OAAO,CAAC,CAAC,CAAC;gBACnD,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,WAAW,EAAE;oBAAE,OAAO,CAAC,CAAC;gBAClD,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACxC,CAAC,CAAC;iBACD,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAElB,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC1B,MAAM,IAAI,GAAG,MAAM,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC;gBACjF,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;oBACtB,MAAM,IAAI,IAAI,CAAC,gBAAgB,CAC3B,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,KAAK,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CACjE,CAAC;gBACN,CAAC;YACL,CAAC;YACD,OAAO,MAAM,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,EAAE,CAAC;QAAC,CAAC;IAC1B,CAAC;IAED,wCAAwC;IAChC,eAAe;QACnB,MAAM,OAAO,GAAG,CAAC,eAAe,EAAE,gBAAgB,EAAE,aAAa,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;QACvG,IAAI,KAAK,GAAG,CAAC,CAAC;QAEd,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YACzB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;YACvD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;gBAAE,SAAS;YAEzC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;gBACjB,IAAI,EAAE,kBAAU,CAAC,UAAU;gBAC3B,MAAM,EAAE,gBAAgB,IAAI,EAAE;gBAC9B,MAAM,EAAE,sBAAsB,IAAI,EAAE;gBACpC,IAAI,EAAE,CAAC,cAAc,EAAE,QAAQ,CAAC;gBAChC,UAAU,EAAE,GAAG;gBACf,UAAU,EAAE,GAAG;gBACf,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;gBACrB,QAAQ,EAAE,IAAI;gBACd,WAAW,EAAE,CAAC;gBACd,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;gBACrB,EAAE,EAAE,EAAE;aACT,CAAC,CAAC;YACH,KAAK,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,sCAAsC;IAC9B,KAAK,CAAC,UAAU;QACpB,IAAI,CAAC;YACD,MAAM,GAAG,GAAG,IAAA,wBAAQ,EAAC,uBAAuB,EAAE;gBAC1C,GAAG,EAAE,IAAI,CAAC,aAAa;gBACvB,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,IAAI;aAChB,CAAC,CAAC,IAAI,EAAE,CAAC;YAEV,IAAI,CAAC,GAAG;gBAAE,OAAO,CAAC,CAAC;YAEnB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;gBACjB,IAAI,EAAE,kBAAU,CAAC,OAAO;gBACxB,MAAM,EAAE,sCAAsC;gBAC9C,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;gBACzB,IAAI,EAAE,CAAC,cAAc,EAAE,KAAK,CAAC;gBAC7B,UAAU,EAAE,GAAG;gBACf,UAAU,EAAE,GAAG;gBACf,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;gBACrB,QAAQ,EAAE,IAAI;gBACd,WAAW,EAAE,CAAC;gBACd,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;gBACrB,EAAE,EAAE,EAAE;aACT,CAAC,CAAC;YACH,OAAO,CAAC,CAAC;QACb,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,CAAC,CAAC;QAAC,CAAC;IACzB,CAAC;IAED,oDAAoD;IAC5C,gBAAgB;QACpB,MAAM,OAAO,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;QAC7D,MAAM,WAAW,GAA+C,EAAE,CAAC;QAEnE,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;YACnD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;gBAAE,SAAS;YACtC,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;QACjD,CAAC;QAED,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QAEvC,mDAAmD;QACnD,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,MAAM,WAAW,GAAa,EAAE,CAAC;QACjC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;QAE/C,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,WAAW,EAAE,CAAC;YAC1C,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;gBACxB,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC5D,CAAC;YACD,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACrG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3B,CAAC;QACL,CAAC;QAED,+CAA+C;QAC/C,MAAM,MAAM,GAAG,CAAC,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACpF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,SAAS,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;YACnD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;gBACjC,SAAS,CAAC,IAAI,CAAC,KAAK,IAAI,iBAAiB,KAAK,SAAS,CAAC,CAAC;YAC7D,CAAC;QACL,CAAC;QAED,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,SAAS,CAAC,IAAI,CAAC,iBAAiB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC9D,CAAC;QAED,SAAS,CAAC,IAAI,CAAC,uBAAuB,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;QAE5D,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAEpD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;YACjB,IAAI,EAAE,kBAAU,CAAC,OAAO;YACxB,MAAM,EAAE,6CAA6C;YACrD,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,CAAC,cAAc,EAAE,cAAc,CAAC;YACtC,UAAU,EAAE,IAAI;YAChB,UAAU,EAAE,GAAG;YACf,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,QAAQ,EAAE,IAAI;YACd,WAAW,EAAE,CAAC;YACd,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,EAAE,EAAE,EAAE;SACT,CAAC,CAAC;QACH,OAAO,CAAC,CAAC;IACb,CAAC;IAED,wCAAwC;IAChC,cAAc,CAAC,GAAW,EAAE,OAAmD,EAAE,KAAa;QAClG,IAAI,KAAK,GAAG,CAAC;YAAE,OAAO;QACtB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;QAE/F,IAAI,CAAC;YACD,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC1B,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;oBAAE,SAAS;gBACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBAE5C,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;oBACtB,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;gBACtD,CAAC;qBAAM,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;oBAChF,IAAI,CAAC;wBACD,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,iBAAiB;wBACpF,MAAM,OAAO,GAAa,EAAE,CAAC;wBAC7B,MAAM,WAAW,GAAG,8CAA8C,CAAC;wBACnE,IAAI,KAAK,CAAC;wBACV,OAAO,CAAC,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;4BAClD,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;4BACrB,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gCAC7C,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;4BACtB,CAAC;wBACL,CAAC;wBACD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;wBAChF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;4BACrB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;wBAC7C,CAAC;oBACL,CAAC;oBAAC,MAAM,CAAC,CAAC,CAAC;gBACf,CAAC;YACL,CAAC;QACL,CAAC;QAAC,MAAM,CAAC,CAAC,CAAC;IACf,CAAC;IAED,8CAA8C;IACtC,eAAe;QACnB,MAAM,QAAQ,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;QAC/G,MAAM,OAAO,GAAa,EAAE,CAAC;QAE7B,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;YACpD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;gBAAE,SAAS;YAEtC,IAAI,CAAC;gBACD,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAClD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;qBAC3B,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;qBAC3C,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;qBAChC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;gBAE/B,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAClB,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC7D,CAAC;YACL,CAAC;YAAC,MAAM,CAAC,CAAC,CAAC;QACf,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QAEnC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;YACjB,IAAI,EAAE,kBAAU,CAAC,OAAO;YACxB,MAAM,EAAE,wBAAwB,OAAO,CAAC,MAAM,kBAAkB;YAChE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;YACxC,IAAI,EAAE,CAAC,cAAc,EAAE,aAAa,CAAC;YACrC,UAAU,EAAE,GAAG;YACf,UAAU,EAAE,GAAG;YACf,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,QAAQ,EAAE,IAAI;YACd,WAAW,EAAE,CAAC;YACd,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,EAAE,EAAE,EAAE;SACT,CAAC,CAAC;QACH,OAAO,CAAC,CAAC;IACb,CAAC;IAED,2DAA2D;IAC3D,cAAc;QACV,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;QAEvF,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,QAAgB,CAAC,EAAQ,EAAE;YAClD,IAAI,KAAK,GAAG,CAAC;gBAAE,OAAO;YACtB,IAAI,CAAC;gBACD,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC7D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;oBAC1B,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;wBAAE,SAAS;oBACrC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;oBACxC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;wBACtB,IAAI,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;oBAC1B,CAAC;yBAAM,CAAC;wBACJ,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC;oBACxD,CAAC;gBACL,CAAC;YACL,CAAC;YAAC,MAAM,CAAC,CAAC,CAAC;QACf,CAAC,CAAC;QAEF,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACzB,OAAO,KAAK,CAAC;IACjB,CAAC;CACJ;AAvWD,wCAuWC"}

package/dist/security/encryption.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Encrypt plaintext content.
+ * Returns a base64 string: iv:tag:ciphertext
+ */
+export declare function encrypt(plaintext: string): string;
+/**
+ * Decrypt encrypted content.
+ * Expects format: ENC:iv:tag:ciphertext
+ */
+export declare function decrypt(encrypted: string): string;
+/**
+ * Check if a string is encrypted
+ */
+export declare function isEncrypted(text: string): boolean;
+//# sourceMappingURL=encryption.d.ts.map

package/dist/security/encryption.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption.d.ts","sourceRoot":"","sources":["../../src/security/encryption.ts"],"names":[],"mappings":"AAgCA;;;GAGG;AACH,wBAAgB,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAajD;AAED;;;GAGG;AACH,wBAAgB,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAsBjD;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEjD"}

package/dist/security/encryption.js

@@ -0,0 +1,116 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.encrypt = encrypt;
+exports.decrypt = decrypt;
+exports.isEncrypted = isEncrypted;
+/**
+ * Memory Encryption — AES-256-GCM encryption at rest for sensitive memory content.
+ *
+ * Uses Node.js built-in crypto module (no external deps).
+ * Encryption key derived from a machine-specific seed using PBKDF2.
+ *
+ * When enabled:
+ * - Memory `intent` and `action` fields are encrypted before storage
+ * - Decrypted on read
+ * - FTS index uses plaintext (searched in-memory) — only DB at rest is encrypted
+ */
+const crypto = __importStar(require("crypto"));
+const os = __importStar(require("os"));
+const ALGORITHM = 'aes-256-gcm';
+const KEY_LENGTH = 32;
+const IV_LENGTH = 16;
+const TAG_LENGTH = 16;
+const SALT = 'cortex-memory-salt-v1';
+// Derive key from machine-specific info (hostname + username + homedir hash)
+function deriveKey() {
+    const seed = `${os.hostname()}:${os.userInfo().username}:${os.homedir()}`;
+    return crypto.pbkdf2Sync(seed, SALT, 100000, KEY_LENGTH, 'sha512');
+}
+let _key = null;
+function getKey() {
+    if (!_key)
+        _key = deriveKey();
+    return _key;
+}
+/**
+ * Encrypt plaintext content.
+ * Returns a base64 string: iv:tag:ciphertext
+ */
+function encrypt(plaintext) {
+    if (!plaintext)
+        return plaintext;
+    const key = getKey();
+    const iv = crypto.randomBytes(IV_LENGTH);
+    const cipher = crypto.createCipheriv(ALGORITHM, key, iv);
+    let encrypted = cipher.update(plaintext, 'utf8', 'base64');
+    encrypted += cipher.final('base64');
+    const tag = cipher.getAuthTag();
+    // Format: iv:tag:ciphertext (all base64)
+    return `ENC:${iv.toString('base64')}:${tag.toString('base64')}:${encrypted}`;
+}
+/**
+ * Decrypt encrypted content.
+ * Expects format: ENC:iv:tag:ciphertext
+ */
+function decrypt(encrypted) {
+    if (!encrypted || !encrypted.startsWith('ENC:'))
+        return encrypted;
+    try {
+        const parts = encrypted.split(':');
+        if (parts.length !== 4)
+            return encrypted;
+        const iv = Buffer.from(parts[1], 'base64');
+        const tag = Buffer.from(parts[2], 'base64');
+        const ciphertext = parts[3];
+        const key = getKey();
+        const decipher = crypto.createDecipheriv(ALGORITHM, key, iv);
+        decipher.setAuthTag(tag);
+        let decrypted = decipher.update(ciphertext, 'base64', 'utf8');
+        decrypted += decipher.final('utf8');
+        return decrypted;
+    }
+    catch {
+        // If decryption fails, return original (might be plaintext from before encryption was enabled)
+        return encrypted;
+    }
+}
+/**
+ * Check if a string is encrypted
+ */
+function isEncrypted(text) {
+    return text?.startsWith('ENC:') ?? false;
+}
+//# sourceMappingURL=encryption.js.map

package/dist/security/encryption.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption.js","sourceRoot":"","sources":["../../src/security/encryption.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoCA,0BAaC;AAMD,0BAsBC;AAKD,kCAEC;AApFD;;;;;;;;;;GAUG;AACH,+CAAiC;AACjC,uCAAyB;AAEzB,MAAM,SAAS,GAAG,aAAa,CAAC;AAChC,MAAM,UAAU,GAAG,EAAE,CAAC;AACtB,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,UAAU,GAAG,EAAE,CAAC;AACtB,MAAM,IAAI,GAAG,uBAAuB,CAAC;AAErC,6EAA6E;AAC7E,SAAS,SAAS;IACd,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC;IAC1E,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;AACvE,CAAC;AAED,IAAI,IAAI,GAAkB,IAAI,CAAC;AAC/B,SAAS,MAAM;IACX,IAAI,CAAC,IAAI;QAAE,IAAI,GAAG,SAAS,EAAE,CAAC;IAC9B,OAAO,IAAI,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,SAAgB,OAAO,CAAC,SAAiB;IACrC,IAAI,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IAEjC,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;IACrB,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAEzD,IAAI,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC3D,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAEhC,yCAAyC;IACzC,OAAO,OAAO,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,SAAS,EAAE,CAAC;AACjF,CAAC;AAED;;;GAGG;AACH,SAAgB,OAAO,CAAC,SAAiB;IACrC,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IAElE,IAAI,CAAC;QACD,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAEzC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC5C,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAE5B,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAC7D,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAEzB,IAAI,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC9D,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACpC,OAAO,SAAS,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACL,+FAA+F;QAC/F,OAAO,SAAS,CAAC;IACrB,CAAC;AACL,CAAC;AAED;;GAEG;AACH,SAAgB,WAAW,CAAC,IAAY;IACpC,OAAO,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC;AAC7C,CAAC"}

package/dist/security/feature-gate.d.ts

@@ -0,0 +1,30 @@
+export interface FeatureLimits {
+    maxMemories: number;
+    brainLayers: boolean;
+    autoLearn: boolean;
+    exportMap: boolean;
+    architectureGraph: boolean;
+    gitMemory: boolean;
+    contradictionDetection: boolean;
+    confidenceDecay: boolean;
+    memoryConsolidation: boolean;
+    attentionRanking: boolean;
+    anticipation: boolean;
+    knowledgeGaps: boolean;
+    temporalContext: boolean;
+    crossSessionThreading: boolean;
+}
+/** Get current feature limits based on license */
+export declare function getFeatureLimits(): FeatureLimits;
+/** Check if a specific feature is allowed */
+export declare function isFeatureAllowed(feature: keyof FeatureLimits): boolean;
+/** Check if user can store more memories */
+export declare function canStoreMemory(currentCount: number): {
+    allowed: boolean;
+    message: string;
+};
+/** Get upgrade message for gated features */
+export declare function getUpgradeMessage(feature: string): string;
+/** Format plan status for display */
+export declare function formatPlanStatus(): string;
+//# sourceMappingURL=feature-gate.d.ts.map

package/dist/security/feature-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"feature-gate.d.ts","sourceRoot":"","sources":["../../src/security/feature-gate.ts"],"names":[],"mappings":"AAgBA,MAAM,WAAW,aAAa;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,OAAO,CAAC;IACrB,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;IACnB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,SAAS,EAAE,OAAO,CAAC;IACnB,sBAAsB,EAAE,OAAO,CAAC;IAChC,eAAe,EAAE,OAAO,CAAC;IACzB,mBAAmB,EAAE,OAAO,CAAC;IAC7B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,YAAY,EAAE,OAAO,CAAC;IACtB,aAAa,EAAE,OAAO,CAAC;IACvB,eAAe,EAAE,OAAO,CAAC;IACzB,qBAAqB,EAAE,OAAO,CAAC;CAClC;AAoCD,kDAAkD;AAClD,wBAAgB,gBAAgB,IAAI,aAAa,CAEhD;AAED,6CAA6C;AAC7C,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,aAAa,GAAG,OAAO,CAKtE;AAED,4CAA4C;AAC5C,wBAAgB,cAAc,CAAC,YAAY,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAS1F;AAED,6CAA6C;AAC7C,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED,qCAAqC;AACrC,wBAAgB,gBAAgB,IAAI,MAAM,CASzC"}