cortex-mcp 1.0.1

package/dist/security/feature-gate.js

@@ -0,0 +1,91 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getFeatureLimits = getFeatureLimits;
+exports.isFeatureAllowed = isFeatureAllowed;
+exports.canStoreMemory = canStoreMemory;
+exports.getUpgradeMessage = getUpgradeMessage;
+exports.formatPlanStatus = formatPlanStatus;
+/**
+ * Feature Gate — Enforces free/paid limits based on license.
+ *
+ * FREE plan limits:
+ *   - Max 20 active memories
+ *   - Basic recall only (no brain layers)
+ *   - No auto-learn
+ *   - No export map / architecture graph
+ *   - No git memory
+ *   - No contradiction detection
+ *   - No confidence decay
+ *
+ * PRO plan: Everything unlocked, unlimited.
+ */
+const license_1 = require("./license");
+const FREE_LIMITS = {
+    maxMemories: 20,
+    brainLayers: false,
+    autoLearn: false,
+    exportMap: false,
+    architectureGraph: false,
+    gitMemory: false,
+    contradictionDetection: false,
+    confidenceDecay: false,
+    memoryConsolidation: false,
+    attentionRanking: false,
+    anticipation: false,
+    knowledgeGaps: false,
+    temporalContext: false,
+    crossSessionThreading: false,
+};
+const PRO_LIMITS = {
+    maxMemories: Infinity,
+    brainLayers: true,
+    autoLearn: true,
+    exportMap: true,
+    architectureGraph: true,
+    gitMemory: true,
+    contradictionDetection: true,
+    confidenceDecay: true,
+    memoryConsolidation: true,
+    attentionRanking: true,
+    anticipation: true,
+    knowledgeGaps: true,
+    temporalContext: true,
+    crossSessionThreading: true,
+};
+/** Get current feature limits based on license */
+function getFeatureLimits() {
+    return (0, license_1.isPro)() ? PRO_LIMITS : FREE_LIMITS;
+}
+/** Check if a specific feature is allowed */
+function isFeatureAllowed(feature) {
+    const limits = getFeatureLimits();
+    const value = limits[feature];
+    if (typeof value === 'boolean')
+        return value;
+    return true; // numeric limits are checked separately
+}
+/** Check if user can store more memories */
+function canStoreMemory(currentCount) {
+    const limits = getFeatureLimits();
+    if (currentCount >= limits.maxMemories) {
+        return {
+            allowed: false,
+            message: `[LOCKED] Free plan limit: ${limits.maxMemories} memories. Upgrade to PRO for unlimited. Set CORTEX_LICENSE_KEY or visit cortex-mcp.org`,
+        };
+    }
+    return { allowed: true, message: '' };
+}
+/** Get upgrade message for gated features */
+function getUpgradeMessage(feature) {
+    return `[LOCKED] "${feature}" is a PRO feature. Upgrade at cortex-mcp.org or set CORTEX_LICENSE_KEY to unlock.`;
+}
+/** Format plan status for display */
+function formatPlanStatus() {
+    const license = (0, license_1.getLicense)();
+    const limits = getFeatureLimits();
+    if (license.plan === 'PRO') {
+        return `[PRO] Cortex PRO — All features unlocked, unlimited memories.`;
+    }
+    return `[FREE] Cortex Free — ${limits.maxMemories} memories, basic features. Upgrade: set CORTEX_LICENSE_KEY`;
+}
+//# sourceMappingURL=feature-gate.js.map

package/dist/security/feature-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feature-gate.js","sourceRoot":"","sources":["../../src/security/feature-gate.ts"],"names":[],"mappings":";;AAoEA,4CAEC;AAGD,4CAKC;AAGD,wCASC;AAGD,8CAEC;AAGD,4CASC;AA3GD;;;;;;;;;;;;;GAaG;AACH,uCAA4D;AAmB5D,MAAM,WAAW,GAAkB;IAC/B,WAAW,EAAE,EAAE;IACf,WAAW,EAAE,KAAK;IAClB,SAAS,EAAE,KAAK;IAChB,SAAS,EAAE,KAAK;IAChB,iBAAiB,EAAE,KAAK;IACxB,SAAS,EAAE,KAAK;IAChB,sBAAsB,EAAE,KAAK;IAC7B,eAAe,EAAE,KAAK;IACtB,mBAAmB,EAAE,KAAK;IAC1B,gBAAgB,EAAE,KAAK;IACvB,YAAY,EAAE,KAAK;IACnB,aAAa,EAAE,KAAK;IACpB,eAAe,EAAE,KAAK;IACtB,qBAAqB,EAAE,KAAK;CAC/B,CAAC;AAEF,MAAM,UAAU,GAAkB;IAC9B,WAAW,EAAE,QAAQ;IACrB,WAAW,EAAE,IAAI;IACjB,SAAS,EAAE,IAAI;IACf,SAAS,EAAE,IAAI;IACf,iBAAiB,EAAE,IAAI;IACvB,SAAS,EAAE,IAAI;IACf,sBAAsB,EAAE,IAAI;IAC5B,eAAe,EAAE,IAAI;IACrB,mBAAmB,EAAE,IAAI;IACzB,gBAAgB,EAAE,IAAI;IACtB,YAAY,EAAE,IAAI;IAClB,aAAa,EAAE,IAAI;IACnB,eAAe,EAAE,IAAI;IACrB,qBAAqB,EAAE,IAAI;CAC9B,CAAC;AAEF,kDAAkD;AAClD,SAAgB,gBAAgB;IAC5B,OAAO,IAAA,eAAK,GAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC;AAC9C,CAAC;AAED,6CAA6C;AAC7C,SAAgB,gBAAgB,CAAC,OAA4B;IACzD,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;IAClC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9B,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7C,OAAO,IAAI,CAAC,CAAC,wCAAwC;AACzD,CAAC;AAED,4CAA4C;AAC5C,SAAgB,cAAc,CAAC,YAAoB;IAC/C,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;IAClC,IAAI,YAAY,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACrC,OAAO;YACH,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,6BAA6B,MAAM,CAAC,WAAW,yFAAyF;SACpJ,CAAC;IACN,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;AAC1C,CAAC;AAED,6CAA6C;AAC7C,SAAgB,iBAAiB,CAAC,OAAe;IAC7C,OAAO,aAAa,OAAO,oFAAoF,CAAC;AACpH,CAAC;AAED,qCAAqC;AACrC,SAAgB,gBAAgB;IAC5B,MAAM,OAAO,GAAG,IAAA,oBAAU,GAAE,CAAC;IAC7B,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;IAElC,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QACzB,OAAO,+DAA+D,CAAC;IAC3E,CAAC;IAED,OAAO,wBAAwB,MAAM,CAAC,WAAW,4DAA4D,CAAC;AAClH,CAAC"}

package/dist/security/license.d.ts

@@ -0,0 +1,24 @@
+export type Plan = 'FREE' | 'PRO';
+export interface LicenseInfo {
+    plan: Plan;
+    key: string | null;
+    valid: boolean;
+    message: string;
+}
+/** Get current license status (cached after first check) */
+export declare function getLicense(): LicenseInfo;
+/** Force re-check license (after user enters a new key) */
+export declare function refreshLicense(): LicenseInfo;
+/** Check if current plan is PRO */
+export declare function isPro(): boolean;
+/** Check if current plan is FREE */
+export declare function isFree(): boolean;
+/** Generate a valid license key (for your use when selling) */
+export declare function generateKey(email: string): string;
+/** Validate a license key format and checksum */
+export declare function validateKey(key: string): boolean;
+/** Generate a key with valid checksum (for selling) */
+export declare function generateValidKey(identifier: string): string;
+/** Save a license key to disk */
+export declare function saveKey(key: string): void;
+//# sourceMappingURL=license.d.ts.map

package/dist/security/license.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"license.d.ts","sourceRoot":"","sources":["../../src/security/license.ts"],"names":[],"mappings":"AAiBA,MAAM,MAAM,IAAI,GAAG,MAAM,GAAG,KAAK,CAAC;AAElC,MAAM,WAAW,WAAW;IACxB,IAAI,EAAE,IAAI,CAAC;IACX,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACnB;AAOD,4DAA4D;AAC5D,wBAAgB,UAAU,IAAI,WAAW,CAIxC;AAED,2DAA2D;AAC3D,wBAAgB,cAAc,IAAI,WAAW,CAG5C;AAED,mCAAmC;AACnC,wBAAgB,KAAK,IAAI,OAAO,CAE/B;AAED,oCAAoC;AACpC,wBAAgB,MAAM,IAAI,OAAO,CAEhC;AAED,+DAA+D;AAC/D,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CASjD;AAED,iDAAiD;AACjD,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAoBhD;AAED,uDAAuD;AACvD,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAiB3D;AAED,iCAAiC;AACjC,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAKzC"}

package/dist/security/license.js

@@ -0,0 +1,168 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getLicense = getLicense;
+exports.refreshLicense = refreshLicense;
+exports.isPro = isPro;
+exports.isFree = isFree;
+exports.generateKey = generateKey;
+exports.validateKey = validateKey;
+exports.generateValidKey = generateValidKey;
+exports.saveKey = saveKey;
+/**
+ * License System — Gates features behind free/paid plans.
+ *
+ * Key format: CORTEX-XXXX-XXXX-XXXX-XXXX (20 chars + dashes)
+ * Keys are validated with a simple hash check (offline-first).
+ *
+ * Environment: CORTEX_LICENSE_KEY or ~/.cortex/license file
+ *
+ * Plans:
+ *   FREE:  20 memories, basic recall, no brain layers
+ *   PRO:   Unlimited memories, all 14 brain layers, all features
+ */
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const os = __importStar(require("os"));
+const crypto = __importStar(require("crypto"));
+// Secret salt for key validation (change this before publishing)
+const KEY_SALT = 'cortex-mcp-2024-salt';
+let cachedLicense = null;
+/** Get current license status (cached after first check) */
+function getLicense() {
+    if (cachedLicense)
+        return cachedLicense;
+    cachedLicense = detectLicense();
+    return cachedLicense;
+}
+/** Force re-check license (after user enters a new key) */
+function refreshLicense() {
+    cachedLicense = null;
+    return getLicense();
+}
+/** Check if current plan is PRO */
+function isPro() {
+    return getLicense().plan === 'PRO';
+}
+/** Check if current plan is FREE */
+function isFree() {
+    return getLicense().plan === 'FREE';
+}
+/** Generate a valid license key (for your use when selling) */
+function generateKey(email) {
+    const raw = crypto.createHash('sha256')
+        .update(KEY_SALT + ':' + email.toLowerCase().trim())
+        .digest('hex')
+        .slice(0, 20)
+        .toUpperCase();
+    // Format: CORTEX-XXXX-XXXX-XXXX-XXXX
+    return `CORTEX-${raw.slice(0, 4)}-${raw.slice(4, 8)}-${raw.slice(8, 12)}-${raw.slice(12, 16)}`;
+}
+/** Validate a license key format and checksum */
+function validateKey(key) {
+    if (!key)
+        return false;
+    // Must match format: CORTEX-XXXX-XXXX-XXXX-XXXX
+    const pattern = /^CORTEX-[A-Z0-9]{4}-[A-Z0-9]{4}-[A-Z0-9]{4}-[A-Z0-9]{4}$/;
+    if (!pattern.test(key.trim().toUpperCase()))
+        return false;
+    // Extract the raw part (remove CORTEX- and dashes)
+    const raw = key.replace(/^CORTEX-/, '').replace(/-/g, '');
+    // Validate checksum: last 4 chars must be hash of first 12
+    const payload = raw.slice(0, 12);
+    const checksum = raw.slice(12, 16);
+    const expected = crypto.createHash('md5')
+        .update(KEY_SALT + ':' + payload)
+        .digest('hex')
+        .slice(0, 4)
+        .toUpperCase();
+    return checksum === expected;
+}
+/** Generate a key with valid checksum (for selling) */
+function generateValidKey(identifier) {
+    // Generate 12 random chars as payload
+    const payload = crypto.createHash('sha256')
+        .update(KEY_SALT + ':key:' + identifier + ':' + Date.now())
+        .digest('hex')
+        .slice(0, 12)
+        .toUpperCase();
+    // Generate checksum from payload
+    const checksum = crypto.createHash('md5')
+        .update(KEY_SALT + ':' + payload)
+        .digest('hex')
+        .slice(0, 4)
+        .toUpperCase();
+    const raw = payload + checksum;
+    return `CORTEX-${raw.slice(0, 4)}-${raw.slice(4, 8)}-${raw.slice(8, 12)}-${raw.slice(12, 16)}`;
+}
+/** Save a license key to disk */
+function saveKey(key) {
+    const dir = path.join(os.homedir(), '.cortex');
+    if (!fs.existsSync(dir))
+        fs.mkdirSync(dir, { recursive: true });
+    fs.writeFileSync(path.join(dir, 'license'), key.trim(), 'utf-8');
+    refreshLicense();
+}
+// ─── Internal ─────────────────────────────────────────────────────────────────
+function detectLicense() {
+    // Priority 1: Environment variable
+    const envKey = process.env.CORTEX_LICENSE_KEY?.trim();
+    if (envKey) {
+        if (validateKey(envKey)) {
+            return { plan: 'PRO', key: envKey, valid: true, message: '[OK] PRO license active (from env)' };
+        }
+        return { plan: 'FREE', key: envKey, valid: false, message: '[FAIL] Invalid license key in CORTEX_LICENSE_KEY' };
+    }
+    // Priority 2: License file at ~/.cortex/license
+    try {
+        const licFile = path.join(os.homedir(), '.cortex', 'license');
+        if (fs.existsSync(licFile)) {
+            const fileKey = fs.readFileSync(licFile, 'utf-8').trim();
+            if (validateKey(fileKey)) {
+                return { plan: 'PRO', key: fileKey, valid: true, message: '[OK] PRO license active (from ~/.cortex/license)' };
+            }
+            return { plan: 'FREE', key: fileKey, valid: false, message: '[FAIL] Invalid license key in ~/.cortex/license' };
+        }
+    }
+    catch { }
+    // No key found → FREE plan
+    return {
+        plan: 'FREE',
+        key: null,
+        valid: false,
+        message: 'Free plan (20 memories). Upgrade: cortex-mcp.org',
+    };
+}
+//# sourceMappingURL=license.js.map

package/dist/security/license.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"license.js","sourceRoot":"","sources":["../../src/security/license.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgCA,gCAIC;AAGD,wCAGC;AAGD,sBAEC;AAGD,wBAEC;AAGD,kCASC;AAGD,kCAoBC;AAGD,4CAiBC;AAGD,0BAKC;AAnHD;;;;;;;;;;;GAWG;AACH,uCAAyB;AACzB,2CAA6B;AAC7B,uCAAyB;AACzB,+CAAiC;AAWjC,iEAAiE;AACjE,MAAM,QAAQ,GAAG,sBAAsB,CAAC;AAExC,IAAI,aAAa,GAAuB,IAAI,CAAC;AAE7C,4DAA4D;AAC5D,SAAgB,UAAU;IACtB,IAAI,aAAa;QAAE,OAAO,aAAa,CAAC;IACxC,aAAa,GAAG,aAAa,EAAE,CAAC;IAChC,OAAO,aAAa,CAAC;AACzB,CAAC;AAED,2DAA2D;AAC3D,SAAgB,cAAc;IAC1B,aAAa,GAAG,IAAI,CAAC;IACrB,OAAO,UAAU,EAAE,CAAC;AACxB,CAAC;AAED,mCAAmC;AACnC,SAAgB,KAAK;IACjB,OAAO,UAAU,EAAE,CAAC,IAAI,KAAK,KAAK,CAAC;AACvC,CAAC;AAED,oCAAoC;AACpC,SAAgB,MAAM;IAClB,OAAO,UAAU,EAAE,CAAC,IAAI,KAAK,MAAM,CAAC;AACxC,CAAC;AAED,+DAA+D;AAC/D,SAAgB,WAAW,CAAC,KAAa;IACrC,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;SAClC,MAAM,CAAC,QAAQ,GAAG,GAAG,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;SACnD,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;SACZ,WAAW,EAAE,CAAC;IAEnB,qCAAqC;IACrC,OAAO,UAAU,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;AACnG,CAAC;AAED,iDAAiD;AACjD,SAAgB,WAAW,CAAC,GAAW;IACnC,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IAEvB,gDAAgD;IAChD,MAAM,OAAO,GAAG,0DAA0D,CAAC;IAC3E,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IAE1D,mDAAmD;IACnD,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAE1D,2DAA2D;IAC3D,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACjC,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC;SACpC,MAAM,CAAC,QAAQ,GAAG,GAAG,GAAG,OAAO,CAAC;SAChC,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;SACX,WAAW,EAAE,CAAC;IAEnB,OAAO,QAAQ,KAAK,QAAQ,CAAC;AACjC,CAAC;AAED,uDAAuD;AACvD,SAAgB,gBAAgB,CAAC,UAAkB;IAC/C,sCAAsC;IACtC,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;SACtC,MAAM,CAAC,QAAQ,GAAG,OAAO,GAAG,UAAU,GAAG,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;SAC1D,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;SACZ,WAAW,EAAE,CAAC;IAEnB,iCAAiC;IACjC,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC;SACpC,MAAM,CAAC,QAAQ,GAAG,GAAG,GAAG,OAAO,CAAC;SAChC,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;SACX,WAAW,EAAE,CAAC;IAEnB,MAAM,GAAG,GAAG,OAAO,GAAG,QAAQ,CAAC;IAC/B,OAAO,UAAU,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;AACnG,CAAC;AAED,iCAAiC;AACjC,SAAgB,OAAO,CAAC,GAAW;IAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;IAC/C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC;IACjE,cAAc,EAAE,CAAC;AACrB,CAAC;AAED,iFAAiF;AAEjF,SAAS,aAAa;IAClB,mCAAmC;IACnC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC;IACtD,IAAI,MAAM,EAAE,CAAC;QACT,IAAI,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;YACtB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC;QACpG,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,kDAAkD,EAAE,CAAC;IACpH,CAAC;IAED,gDAAgD;IAChD,IAAI,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAC9D,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;YACzD,IAAI,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,kDAAkD,EAAE,CAAC;YACnH,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,iDAAiD,EAAE,CAAC;QACpH,CAAC;IACL,CAAC;IAAC,MAAM,CAAC,CAAC,CAAC;IAEX,2BAA2B;IAC3B,OAAO;QACH,IAAI,EAAE,MAAM;QACZ,GAAG,EAAE,IAAI;QACT,KAAK,EAAE,KAAK;QACZ,OAAO,EAAE,kDAAkD;KAC9D,CAAC;AACN,CAAC"}

package/dist/security/rate-limiter.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Rate Limiter — Prevents unbounded memory storage per session.
+ *
+ * Limits:
+ * - Max 30 memories stored per session (resets on server restart)
+ * - Max 100 auto_learn calls per session
+ * - Max 500 total tool calls per session
+ */
+export declare function checkRateLimit(operation: 'store' | 'auto_learn' | 'call'): {
+    allowed: boolean;
+    reason?: string;
+};
+export declare function getRateLimitStats(): {
+    storeCount: number;
+    autoLearnCount: number;
+    totalCalls: number;
+    uptime: number;
+};
+export declare function resetRateLimits(): void;
+//# sourceMappingURL=rate-limiter.d.ts.map

package/dist/security/rate-limiter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limiter.d.ts","sourceRoot":"","sources":["../../src/security/rate-limiter.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAsBH,wBAAgB,cAAc,CAAC,SAAS,EAAE,OAAO,GAAG,YAAY,GAAG,MAAM,GAAG;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAsBhH;AAED,wBAAgB,iBAAiB,IAAI;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAOtH;AAED,wBAAgB,eAAe,IAAI,IAAI,CAOtC"}

package/dist/security/rate-limiter.js

@@ -0,0 +1,60 @@
+"use strict";
+/**
+ * Rate Limiter — Prevents unbounded memory storage per session.
+ *
+ * Limits:
+ * - Max 30 memories stored per session (resets on server restart)
+ * - Max 100 auto_learn calls per session
+ * - Max 500 total tool calls per session
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.checkRateLimit = checkRateLimit;
+exports.getRateLimitStats = getRateLimitStats;
+exports.resetRateLimits = resetRateLimits;
+const LIMITS = {
+    MAX_STORES_PER_SESSION: 30,
+    MAX_AUTO_LEARN_PER_SESSION: 100,
+    MAX_CALLS_PER_SESSION: 500,
+};
+let state = {
+    storeCount: 0,
+    autoLearnCount: 0,
+    totalCalls: 0,
+    sessionStart: Date.now(),
+};
+function checkRateLimit(operation) {
+    state.totalCalls++;
+    if (state.totalCalls > LIMITS.MAX_CALLS_PER_SESSION) {
+        return { allowed: false, reason: `Session limit reached (${LIMITS.MAX_CALLS_PER_SESSION} total calls). Restart server to reset.` };
+    }
+    if (operation === 'store') {
+        state.storeCount++;
+        if (state.storeCount > LIMITS.MAX_STORES_PER_SESSION) {
+            return { allowed: false, reason: `Memory store limit reached (${LIMITS.MAX_STORES_PER_SESSION}/session). Prevents DB bloat.` };
+        }
+    }
+    if (operation === 'auto_learn') {
+        state.autoLearnCount++;
+        if (state.autoLearnCount > LIMITS.MAX_AUTO_LEARN_PER_SESSION) {
+            return { allowed: false, reason: `Auto-learn limit reached (${LIMITS.MAX_AUTO_LEARN_PER_SESSION}/session).` };
+        }
+    }
+    return { allowed: true };
+}
+function getRateLimitStats() {
+    return {
+        storeCount: state.storeCount,
+        autoLearnCount: state.autoLearnCount,
+        totalCalls: state.totalCalls,
+        uptime: Math.floor((Date.now() - state.sessionStart) / 1000),
+    };
+}
+function resetRateLimits() {
+    state = {
+        storeCount: 0,
+        autoLearnCount: 0,
+        totalCalls: 0,
+        sessionStart: Date.now(),
+    };
+}
+//# sourceMappingURL=rate-limiter.js.map

package/dist/security/rate-limiter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limiter.js","sourceRoot":"","sources":["../../src/security/rate-limiter.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;AAsBH,wCAsBC;AAED,8CAOC;AAED,0CAOC;AArDD,MAAM,MAAM,GAAG;IACX,sBAAsB,EAAE,EAAE;IAC1B,0BAA0B,EAAE,GAAG;IAC/B,qBAAqB,EAAE,GAAG;CAC7B,CAAC;AAEF,IAAI,KAAK,GAAmB;IACxB,UAAU,EAAE,CAAC;IACb,cAAc,EAAE,CAAC;IACjB,UAAU,EAAE,CAAC;IACb,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE;CAC3B,CAAC;AAEF,SAAgB,cAAc,CAAC,SAA0C;IACrE,KAAK,CAAC,UAAU,EAAE,CAAC;IAEnB,IAAI,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,qBAAqB,EAAE,CAAC;QAClD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,MAAM,CAAC,qBAAqB,yCAAyC,EAAE,CAAC;IACvI,CAAC;IAED,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;QACxB,KAAK,CAAC,UAAU,EAAE,CAAC;QACnB,IAAI,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,sBAAsB,EAAE,CAAC;YACnD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,MAAM,CAAC,sBAAsB,+BAA+B,EAAE,CAAC;QACnI,CAAC;IACL,CAAC;IAED,IAAI,SAAS,KAAK,YAAY,EAAE,CAAC;QAC7B,KAAK,CAAC,cAAc,EAAE,CAAC;QACvB,IAAI,KAAK,CAAC,cAAc,GAAG,MAAM,CAAC,0BAA0B,EAAE,CAAC;YAC3D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,6BAA6B,MAAM,CAAC,0BAA0B,YAAY,EAAE,CAAC;QAClH,CAAC;IACL,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC7B,CAAC;AAED,SAAgB,iBAAiB;IAC7B,OAAO;QACH,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC;KAC/D,CAAC;AACN,CAAC;AAED,SAAgB,eAAe;IAC3B,KAAK,GAAG;QACJ,UAAU,EAAE,CAAC;QACb,cAAc,EAAE,CAAC;QACjB,UAAU,EAAE,CAAC;QACb,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE;KAC3B,CAAC;AACN,CAAC"}

package/dist/server/dashboard.d.ts

@@ -0,0 +1,3 @@
+import { MemoryStore } from '../db/memory-store';
+export declare function startDashboard(memoryStore: MemoryStore): void;
+//# sourceMappingURL=dashboard.d.ts.map

package/dist/server/dashboard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dashboard.d.ts","sourceRoot":"","sources":["../../src/server/dashboard.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAKjD,wBAAgB,cAAc,CAAC,WAAW,EAAE,WAAW,GAAG,IAAI,CA2B7D"}

package/dist/server/dashboard.js

@@ -0,0 +1,258 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.startDashboard = startDashboard;
+/**
+ * Cortex Web Dashboard — Simple localhost HTTP server for viewing memories.
+ *
+ * Starts on port 3456 (or CORTEX_PORT env var).
+ * Access at: http://localhost:3456
+ *
+ * Features:
+ * - View all active memories grouped by type
+ * - Search memories
+ * - Health check status
+ * - Export JSON download
+ */
+const http = __importStar(require("http"));
+const rate_limiter_1 = require("../security/rate-limiter");
+const PORT = parseInt(process.env.CORTEX_PORT || '3456', 10);
+function startDashboard(memoryStore) {
+    const server = http.createServer((req, res) => {
+        const url = new URL(req.url || '/', `http://localhost:${PORT}`);
+        // CORS — wildcard is safe here since dashboard runs on localhost only
+        res.setHeader('Access-Control-Allow-Origin', '*');
+        if (url.pathname === '/api/memories') {
+            return apiMemories(res, memoryStore, url);
+        }
+        else if (url.pathname === '/api/health') {
+            return apiHealth(res, memoryStore);
+        }
+        else if (url.pathname === '/api/export') {
+            return apiExport(res, memoryStore);
+        }
+        else {
+            return serveDashboard(res, memoryStore);
+        }
+    });
+    server.listen(PORT, '127.0.0.1', () => {
+        console.log(`[cortex-mcp] Dashboard: http://localhost:${PORT}`);
+    });
+    server.on('error', (err) => {
+        if (err.code === 'EADDRINUSE') {
+            console.log(`[cortex-mcp] Dashboard port ${PORT} in use, skipping.`);
+        }
+    });
+}
+function apiMemories(res, store, url) {
+    const type = url.searchParams.get('type');
+    const query = url.searchParams.get('q');
+    let memories = store.getActive(200);
+    if (type && type !== 'ALL') {
+        memories = memories.filter(m => m.type === type);
+    }
+    if (query) {
+        const q = query.toLowerCase();
+        memories = memories.filter(m => m.intent.toLowerCase().includes(q));
+    }
+    res.writeHead(200, { 'Content-Type': 'application/json' });
+    res.end(JSON.stringify(memories.map(m => ({
+        id: m.id,
+        type: m.type,
+        intent: m.intent,
+        reason: m.reason,
+        tags: m.tags,
+        confidence: m.confidence,
+        importance: m.importance,
+        accessCount: m.accessCount,
+        createdAt: m.createdAt,
+        age: Math.floor((Date.now() - m.createdAt) / (24 * 60 * 60 * 1000)) + 'd',
+    }))));
+}
+function apiHealth(res, store) {
+    const stats = (0, rate_limiter_1.getRateLimitStats)();
+    res.writeHead(200, { 'Content-Type': 'application/json' });
+    res.end(JSON.stringify({
+        status: 'healthy',
+        activeMemories: store.activeCount(),
+        ...stats,
+    }));
+}
+function apiExport(res, store) {
+    const memories = store.getActive(5000);
+    const bundle = {
+        version: 1,
+        exportedAt: new Date().toISOString(),
+        memoryCount: memories.length,
+        memories: memories.map(m => ({
+            id: m.id, type: m.type, intent: m.intent, action: m.action,
+            reason: m.reason, tags: m.tags, confidence: m.confidence,
+            importance: m.importance, createdAt: m.createdAt,
+        })),
+    };
+    res.writeHead(200, {
+        'Content-Type': 'application/json',
+        'Content-Disposition': 'attachment; filename="cortex-memories.json"',
+    });
+    res.end(JSON.stringify(bundle, null, 2));
+}
+function serveDashboard(res, store) {
+    const memories = store.getActive(200);
+    const types = ['CORRECTION', 'DECISION', 'CONVENTION', 'BUG_FIX', 'INSIGHT'];
+    const emoji = {
+        CORRECTION: '🔴', DECISION: '🔵', CONVENTION: '🟢',
+        BUG_FIX: '🟠', INSIGHT: '🟣',
+    };
+    const grouped = types.map(type => {
+        const items = memories.filter(m => m.type === type);
+        return { type, emoji: emoji[type] || '⚪', items };
+    }).filter(g => g.items.length > 0);
+    const stats = (0, rate_limiter_1.getRateLimitStats)();
+    const html = `<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>🧠 Cortex Memory Dashboard</title>
+    <style>
+        * { margin: 0; padding: 0; box-sizing: border-box; }
+        body { 
+            font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
+            background: #0a0a0f; color: #e0e0e0; min-height: 100vh;
+        }
+        .header {
+            background: linear-gradient(135deg, #1a1a2e 0%, #16213e 50%, #0f3460 100%);
+            padding: 2rem; border-bottom: 1px solid #2a2a4a;
+        }
+        .header h1 { font-size: 1.8rem; color: #fff; }
+        .header .stats { display: flex; gap: 2rem; margin-top: 1rem; flex-wrap: wrap; }
+        .stat { background: rgba(255,255,255,0.05); padding: 0.8rem 1.2rem; border-radius: 8px; }
+        .stat-value { font-size: 1.5rem; font-weight: bold; color: #60a5fa; }
+        .stat-label { font-size: 0.75rem; color: #888; text-transform: uppercase; }
+        .container { max-width: 1200px; margin: 0 auto; padding: 2rem; }
+        .search { 
+            width: 100%; padding: 0.8rem 1.2rem; background: #1a1a2e;
+            border: 1px solid #2a2a4a; border-radius: 8px; color: #fff;
+            font-size: 1rem; margin-bottom: 2rem; outline: none;
+        }
+        .search:focus { border-color: #60a5fa; }
+        .type-section { margin-bottom: 2rem; }
+        .type-header { 
+            font-size: 1.2rem; margin-bottom: 0.8rem; padding-bottom: 0.5rem;
+            border-bottom: 1px solid #2a2a4a; 
+        }
+        .memory-card {
+            background: #12121a; border: 1px solid #2a2a4a; border-radius: 8px;
+            padding: 1rem; margin-bottom: 0.5rem; transition: border-color 0.2s;
+        }
+        .memory-card:hover { border-color: #60a5fa; }
+        .memory-intent { font-weight: 500; color: #fff; }
+        .memory-meta { font-size: 0.75rem; color: #666; margin-top: 0.4rem; }
+        .memory-id { font-family: monospace; color: #4a4a6a; }
+        .memory-reason { font-style: italic; color: #888; font-size: 0.85rem; margin-top: 0.3rem; }
+        .actions { margin-top: 1rem; display: flex; gap: 0.5rem; }
+        .btn { 
+            padding: 0.5rem 1rem; background: #1a1a2e; border: 1px solid #2a2a4a;
+            border-radius: 6px; color: #60a5fa; cursor: pointer; font-size: 0.85rem;
+            text-decoration: none; transition: all 0.2s;
+        }
+        .btn:hover { background: #60a5fa; color: #000; }
+        .empty { text-align: center; padding: 4rem; color: #4a4a6a; }
+    </style>
+</head>
+<body>
+    <div class="header">
+        <h1>🧠 Cortex Memory Dashboard</h1>
+        <div class="stats">
+            <div class="stat">
+                <div class="stat-value">${memories.length}</div>
+                <div class="stat-label">Active Memories</div>
+            </div>
+            <div class="stat">
+                <div class="stat-value">${stats.storeCount}/30</div>
+                <div class="stat-label">Session Stores</div>
+            </div>
+            <div class="stat">
+                <div class="stat-value">${Math.floor(stats.uptime / 60)}m</div>
+                <div class="stat-label">Uptime</div>
+            </div>
+            <div class="stat">
+                <div class="stat-value">✅</div>
+                <div class="stat-label">Status</div>
+            </div>
+        </div>
+    </div>
+    <div class="container">
+        <input class="search" type="text" placeholder="🔍 Search memories..." oninput="filterMemories(this.value)">
+        <div class="actions">
+            <a class="btn" href="/api/export" download>📦 Export JSON</a>
+            <a class="btn" href="/api/health">🏥 Health API</a>
+        </div>
+        <br>
+        ${grouped.length === 0 ? '<div class="empty"><h2>No memories yet</h2><p>Start using Cortex and memories will appear here.</p></div>' : ''}
+        ${grouped.map(g => `
+            <div class="type-section" data-type="${g.type}">
+                <div class="type-header">${g.emoji} ${g.type} (${g.items.length})</div>
+                ${g.items.map(m => {
+        const age = Math.floor((Date.now() - m.createdAt) / (24 * 60 * 60 * 1000));
+        const accessed = m.accessCount > 0 ? ` · accessed ${m.accessCount}x` : '';
+        return `
+                    <div class="memory-card" data-search="${m.intent.toLowerCase()}">
+                        <div class="memory-intent">${m.intent}</div>
+                        ${m.reason ? `<div class="memory-reason">${m.reason}</div>` : ''}
+                        <div class="memory-meta">
+                            <span class="memory-id">${m.id}</span> · ${age}d old${accessed}
+                            · confidence: ${(m.confidence * 100).toFixed(0)}%
+                        </div>
+                    </div>`;
+    }).join('')}
+            </div>
+        `).join('')}
+    </div>
+    <script>
+        function filterMemories(q) {
+            const cards = document.querySelectorAll('.memory-card');
+            const ql = q.toLowerCase();
+            cards.forEach(c => {
+                c.style.display = c.dataset.search.includes(ql) ? '' : 'none';
+            });
+        }
+    </script>
+</body>
+</html>`;
+    res.writeHead(200, { 'Content-Type': 'text/html' });
+    res.end(html);
+}
+//# sourceMappingURL=dashboard.js.map