exovault 1.0.0

package/dist/server.js

@@ -0,0 +1,101 @@
+/**
+ * Fastify server factory for the ExoVault proxy.
+ */
+import { randomBytes } from "node:crypto";
+import { timingSafeEqual } from "node:crypto";
+import Fastify from "fastify";
+import { GatewayClient } from "./gateway-client.js";
+import { SessionState } from "./pipeline/session-state.js";
+import { registerHealthRoute } from "./routes/health.js";
+import { registerMessagesRoute } from "./routes/messages.js";
+import { registerMcpRoute } from "./routes/mcp.js";
+import { gracefulShutdown } from "./shutdown.js";
+/** Generate a random local auth token for inbound request verification. */
+function generateLocalToken() {
+    return randomBytes(32).toString("hex");
+}
+/** Constant-time comparison of auth tokens. */
+function verifyToken(provided, expected) {
+    const a = Buffer.from(provided);
+    const b = Buffer.from(expected);
+    if (a.length !== b.length)
+        return false;
+    return timingSafeEqual(a, b);
+}
+export async function createServer(config) {
+    const app = Fastify({
+        logger: false,
+        bodyLimit: 10 * 1024 * 1024, // 10MB
+    });
+    const gateway = new GatewayClient(config.apiUrl, config.agentKey);
+    const session = new SessionState();
+    // Generate local auth token — clients must send this to use the proxy
+    const localToken = process.env.EXOVAULT_LOCAL_TOKEN ?? generateLocalToken();
+    // Validate agent key on startup
+    console.log("Validating agent key...");
+    try {
+        const info = await gateway.info();
+        console.log(`Connected: ${info.agentType} (integration: ${info.integrationId.slice(0, 8)}...)`);
+        if (info.vaultId) {
+            console.log(`Vault-restricted: ${info.vaultId}`);
+        }
+    }
+    catch (error) {
+        console.error("Agent key validation failed:", error instanceof Error ? error.message : error);
+        process.exit(1);
+    }
+    // Auth guard — verify local token on all routes except /health
+    app.addHook("onRequest", async (request, reply) => {
+        if (request.url === "/health")
+            return;
+        const authHeader = request.headers["x-api-key"];
+        if (!authHeader || !verifyToken(authHeader, localToken)) {
+            return reply.status(401).send({ error: "Unauthorized — invalid or missing x-api-key header" });
+        }
+    });
+    // Parse JSON bodies as raw strings — both /v1/messages and /mcp handle parsing themselves
+    app.addContentTypeParser("application/json", { parseAs: "string" }, (_req, body, done) => {
+        done(null, body);
+    });
+    // Register routes
+    registerHealthRoute(app);
+    registerMcpRoute(app, gateway);
+    registerMessagesRoute(app, config, gateway, session);
+    return { app, gateway, session, localToken };
+}
+export async function startServer(config) {
+    const { app, gateway, session, localToken } = await createServer(config);
+    // Bind to localhost only — never expose on the network
+    const host = config.host ?? "127.0.0.1";
+    await app.listen({ port: config.port, host });
+    const startedAt = Date.now();
+    console.log();
+    console.log("╔═══════════════════════════════════════════════╗");
+    console.log("║   ExoVault — Running                          ║");
+    console.log("╚═══════════════════════════════════════════════╝");
+    console.log();
+    console.log(`  Listening:     http://${host}:${config.port}`);
+    console.log(`  Proxy:         http://${host}:${config.port}/v1/messages`);
+    console.log(`  MCP:           http://${host}:${config.port}/mcp`);
+    console.log(`  Upstream:      ${config.upstreamBaseUrl}`);
+    console.log(`  ExoVault API:  ${config.apiUrl}`);
+    console.log();
+    console.log(`  x-api-key:     ${localToken}`);
+    console.log(`  Set ANTHROPIC_API_KEY header to this value for authenticated access.`);
+    console.log();
+    console.log("  Your agent gets:");
+    console.log("    Active tools  — search, write, read memories via MCP");
+    console.log("    Auto-capture  — conversations stored automatically via proxy");
+    console.log();
+    // Graceful shutdown — write episodic summary + checkpoint before exit
+    let shuttingDown = false;
+    const onSignal = async (signal) => {
+        if (shuttingDown)
+            return; // Prevent double-shutdown
+        shuttingDown = true;
+        await gracefulShutdown({ signal, session, gateway, app, startedAt });
+        process.exit(0);
+    };
+    process.on("SIGINT", () => onSignal("SIGINT"));
+    process.on("SIGTERM", () => onSignal("SIGTERM"));
+}

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,OAAO,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEjD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAmB;IACpD,MAAM,GAAG,GAAG,OAAO,CAAC;QAClB,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,OAAO;KACrC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAClE,MAAM,OAAO,GAAG,IAAI,YAAY,EAAE,CAAC;IAEnC,gCAAgC;IAChC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,SAAS,kBAAkB,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;QAChG,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC9F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,0FAA0F;IAC1F,GAAG,CAAC,oBAAoB,CAAC,kBAAkB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;QACvF,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,kBAAkB;IAClB,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACzB,gBAAgB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC/B,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAErD,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AACnC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAmB;IACnD,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,CAAC;IAE7D,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;IACjE,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;IACjE,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;IACjE,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,qCAAqC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAChE,OAAO,CAAC,GAAG,CAAC,qCAAqC,MAAM,CAAC,IAAI,cAAc,CAAC,CAAC;IAC5E,OAAO,CAAC,GAAG,CAAC,qCAAqC,MAAM,CAAC,IAAI,MAAM,CAAC,CAAC;IACpE,OAAO,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC;IAC1D,OAAO,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAClC,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;IACxE,OAAO,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC;IAChF,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,sEAAsE;IACtE,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;QACxC,IAAI,YAAY;YAAE,OAAO,CAAC,0BAA0B;QACpD,YAAY,GAAG,IAAI,CAAC;QACpB,MAAM,gBAAgB,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;QACrE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/C,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;AACnD,CAAC"}

package/dist/setup.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Setup wizard for the ExoVault proxy.
+ * Validates agent key and writes config to ~/.exovault-proxy/config.json.
+ */
+export declare function runSetup(): Promise<void>;

package/dist/setup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup.d.ts","sourceRoot":"","sources":["../src/setup.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAWH,wBAAsB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CA6E9C"}

package/dist/setup.js

@@ -0,0 +1,90 @@
+/**
+ * Setup wizard for the ExoVault proxy.
+ * Validates agent key and writes config to ~/.exovault-proxy/config.json.
+ */
+import { mkdir, writeFile } from "node:fs/promises";
+import { join } from "node:path";
+import { homedir } from "node:os";
+import { parseArgs } from "node:util";
+import { GatewayClient } from "./gateway-client.js";
+const CONFIG_DIR = join(homedir(), ".exovault-proxy");
+const CONFIG_FILE = join(CONFIG_DIR, "config.json");
+export async function runSetup() {
+    let agentKey;
+    let apiUrl;
+    try {
+        const { values } = parseArgs({
+            options: {
+                "agent-key": { type: "string" },
+                "api-url": { type: "string" },
+                help: { type: "boolean", short: "h" },
+            },
+            strict: false,
+            args: process.argv.slice(3), // skip "node", "index.js", "setup"
+        });
+        if (values.help) {
+            printUsage();
+            process.exit(0);
+        }
+        agentKey = values["agent-key"];
+        apiUrl = values["api-url"];
+    }
+    catch {
+        console.error("Error: Invalid arguments.\n");
+        printUsage();
+        process.exit(1);
+    }
+    if (!agentKey) {
+        console.error("Error: --agent-key is required.\n");
+        printUsage();
+        process.exit(1);
+    }
+    const baseUrl = apiUrl ?? "https://exovault.co";
+    console.log("╔═══════════════════════════════════════╗");
+    console.log("║   ExoVault Proxy — Setup              ║");
+    console.log("╚═══════════════════════════════════════╝");
+    console.log();
+    console.log(`API URL: ${baseUrl}`);
+    console.log();
+    // Validate agent key
+    console.log("Validating agent key...");
+    const gateway = new GatewayClient(baseUrl, agentKey);
+    try {
+        const info = await gateway.info();
+        console.log(`Connected as integration: ${info.integrationId}`);
+        console.log(`Agent type: ${info.agentType}`);
+        console.log(`Scopes: ${info.scopes.join(", ")}`);
+        if (info.vaultId) {
+            console.log(`Vault-restricted: ${info.vaultId}`);
+        }
+    }
+    catch (err) {
+        console.error("Agent key validation failed:", err instanceof Error ? err.message : err);
+        process.exit(1);
+    }
+    // Write config
+    await mkdir(CONFIG_DIR, { recursive: true, mode: 0o700 });
+    const config = { agentKey, apiUrl: baseUrl };
+    await writeFile(CONFIG_FILE, JSON.stringify(config, null, 2), {
+        encoding: "utf-8",
+        mode: 0o600,
+    });
+    console.log();
+    console.log(`Config saved to: ${CONFIG_FILE}`);
+    console.log();
+    console.log("Start the proxy:");
+    console.log("  exovault-proxy start");
+    console.log();
+    console.log("Then set your environment:");
+    console.log("  export ANTHROPIC_BASE_URL=http://localhost:4100");
+    console.log();
+    console.log("Setup complete!");
+}
+function printUsage() {
+    console.log("Usage:");
+    console.log("  exovault-proxy setup --agent-key <key> [--api-url <url>]");
+    console.log();
+    console.log("Options:");
+    console.log("  --agent-key   Agent key from ExoVault Connect Wizard (exv_...)");
+    console.log("  --api-url     ExoVault API URL (default: https://exovault.co)");
+}

package/dist/setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup.js","sourceRoot":"","sources":["../src/setup.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,iBAAiB,CAAC,CAAC;AACtD,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;AAEpD,MAAM,CAAC,KAAK,UAAU,QAAQ;IAC5B,IAAI,QAA4B,CAAC;IACjC,IAAI,MAA0B,CAAC;IAE/B,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;YAC3B,OAAO,EAAE;gBACP,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC/B,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC7B,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE;aACtC;YACD,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,mCAAmC;SACjE,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAChB,UAAU,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAuB,CAAC;QACrD,MAAM,GAAG,MAAM,CAAC,SAAS,CAAuB,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;QAC7C,UAAU,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACnD,UAAU,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,IAAI,sBAAsB,CAAC;IAEjD,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,YAAY,OAAO,EAAE,CAAC,CAAC;IACnC,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,qBAAqB;IACrB,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACrD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,6BAA6B,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;QAC/D,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACxF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,eAAe;IACf,MAAM,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC7C,MAAM,SAAS,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;QAC5D,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,oBAAoB,WAAW,EAAE,CAAC,CAAC;IAC/C,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAChC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACtC,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;IAC1C,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;IACjE,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtB,OAAO,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;IAC1E,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACxB,OAAO,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC;IAChF,OAAO,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC;AAClF,CAAC"}

package/dist/shutdown.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Graceful shutdown handler for the ExoVault proxy.
+ *
+ * On SIGINT/SIGTERM:
+ * 1. Wait briefly for pending fire-and-forget calls to flush
+ * 2. Write episodic memory (stats only — turns already captured during session)
+ * 3. Call context_checkpoint to signal session completion
+ * 4. Log proxy.session_end pipeline event
+ * 5. Close Fastify
+ *
+ * No content is re-ingested — turns were already sent via proxyIngestTurn
+ * throughout the session. This only writes a summary + signals "done".
+ */
+import type { FastifyInstance } from "fastify";
+import type { GatewayClient } from "./gateway-client.js";
+import type { SessionState } from "./pipeline/session-state.js";
+export interface ShutdownOptions {
+    signal: string;
+    session: SessionState;
+    gateway: GatewayClient;
+    app: FastifyInstance;
+    startedAt: number;
+}
+export declare function gracefulShutdown(opts: ShutdownOptions): Promise<void>;

package/dist/shutdown.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shutdown.d.ts","sourceRoot":"","sources":["../src/shutdown.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAEhE,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,YAAY,CAAC;IACtB,OAAO,EAAE,aAAa,CAAC;IACvB,GAAG,EAAE,eAAe,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAsD3E"}

package/dist/shutdown.js

@@ -0,0 +1,63 @@
+/**
+ * Graceful shutdown handler for the ExoVault proxy.
+ *
+ * On SIGINT/SIGTERM:
+ * 1. Wait briefly for pending fire-and-forget calls to flush
+ * 2. Write episodic memory (stats only — turns already captured during session)
+ * 3. Call context_checkpoint to signal session completion
+ * 4. Log proxy.session_end pipeline event
+ * 5. Close Fastify
+ *
+ * No content is re-ingested — turns were already sent via proxyIngestTurn
+ * throughout the session. This only writes a summary + signals "done".
+ */
+export async function gracefulShutdown(opts) {
+    const { signal, session, gateway, app, startedAt } = opts;
+    console.log(`\n[proxy] ${signal} received — shutting down gracefully...`);
+    // Brief pause to let pending fire-and-forget calls (turn capture, pipeline events) flush
+    await new Promise((resolve) => setTimeout(resolve, 1500));
+    const requestCount = session.getRequestCount();
+    const memoryCount = session.getInjectedMemoryCount();
+    const durationMs = Date.now() - startedAt;
+    const durationMin = Math.round(durationMs / 60000);
+    // 1. Write episodic memory — stats only, no content duplication
+    if (requestCount > 0) {
+        try {
+            const summary = `Proxy session: ${requestCount} requests over ${durationMin}min, ${memoryCount} unique memories injected`;
+            await gateway.writeMemory({
+                content: summary,
+                memoryType: "episodic",
+                summary,
+                agentId: "proxy",
+                importance: 2,
+                confidence: 5,
+                dedup: true,
+            });
+            console.log("[proxy] Episodic memory written");
+        }
+        catch (e) {
+            console.error("[proxy] Failed to write episodic memory:", e instanceof Error ? e.message : e);
+        }
+    }
+    // 2. Context checkpoint — signals "session is done, process all ingested turns"
+    try {
+        await gateway.contextCheckpoint({
+            agentId: "proxy",
+            agentRunId: session.agentRunId,
+        });
+        console.log("[proxy] Context checkpoint saved");
+    }
+    catch (e) {
+        console.error("[proxy] Failed to save checkpoint:", e instanceof Error ? e.message : e);
+    }
+    // 3. Pipeline event (fire-and-forget — doesn't block shutdown)
+    gateway.logPipelineEvent({
+        eventType: "proxy.session_end",
+        payload: { requestCount, memoryCount, durationMs, signal },
+        sessionId: session.agentRunId,
+        durationMs,
+    });
+    // 4. Close Fastify (finishes in-flight requests)
+    await app.close();
+    console.log("[proxy] Shutdown complete");
+}

package/dist/shutdown.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shutdown.js","sourceRoot":"","sources":["../src/shutdown.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAcH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAqB;IAC1D,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IAE1D,OAAO,CAAC,GAAG,CAAC,aAAa,MAAM,yCAAyC,CAAC,CAAC;IAE1E,yFAAyF;IACzF,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IAE1D,MAAM,YAAY,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IAC/C,MAAM,WAAW,GAAG,OAAO,CAAC,sBAAsB,EAAE,CAAC;IACrD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IAC1C,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,CAAC;IAEnD,gEAAgE;IAChE,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,kBAAkB,YAAY,kBAAkB,WAAW,QAAQ,WAAW,2BAA2B,CAAC;YAC1H,MAAM,OAAO,CAAC,WAAW,CAAC;gBACxB,OAAO,EAAE,OAAO;gBAChB,UAAU,EAAE,UAAU;gBACtB,OAAO;gBACP,OAAO,EAAE,OAAO;gBAChB,UAAU,EAAE,CAAC;gBACb,UAAU,EAAE,CAAC;gBACb,KAAK,EAAE,IAAI;aACZ,CAAC,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,0CAA0C,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChG,CAAC;IACH,CAAC;IAED,gFAAgF;IAChF,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,iBAAiB,CAAC;YAC9B,OAAO,EAAE,OAAO;YAChB,UAAU,EAAE,OAAO,CAAC,UAAU;SAC/B,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1F,CAAC;IAED,+DAA+D;IAC/D,OAAO,CAAC,gBAAgB,CAAC;QACvB,SAAS,EAAE,mBAAmB;QAC9B,OAAO,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE;QAC1D,SAAS,EAAE,OAAO,CAAC,UAAU;QAC7B,UAAU;KACX,CAAC,CAAC;IAEH,iDAAiD;IACjD,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;IAClB,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;AAC3C,CAAC"}

package/dist/types/anthropic.d.ts

@@ -0,0 +1,66 @@
+/**
+ * Anthropic Messages API type definitions.
+ * Only the subset needed for proxy interception.
+ */
+/** Text content block in a message. */
+export interface TextBlock {
+    type: "text";
+    text: string;
+    cache_control?: CacheControl;
+}
+/** Image content block (passed through, not inspected). */
+export interface ImageBlock {
+    type: "image";
+    source: unknown;
+}
+/** Tool use/result blocks (passed through). */
+export interface ToolUseBlock {
+    type: "tool_use";
+    id: string;
+    name: string;
+    input: unknown;
+}
+export interface ToolResultBlock {
+    type: "tool_result";
+    tool_use_id: string;
+    content: string | ContentBlock[];
+}
+export type ContentBlock = TextBlock | ImageBlock | ToolUseBlock | ToolResultBlock;
+/** A message in the Anthropic Messages API. */
+export interface AnthropicMessage {
+    role: "user" | "assistant";
+    content: string | ContentBlock[];
+}
+/** Cache control for Anthropic prompt caching. */
+export interface CacheControl {
+    type: "ephemeral";
+    ttl?: string;
+}
+/** System content block (for array-style system prompts). */
+export interface SystemContentBlock {
+    type: "text";
+    text: string;
+    cache_control?: CacheControl;
+}
+/** Anthropic Messages API request body. */
+export interface MessagesRequest {
+    model: string;
+    messages: AnthropicMessage[];
+    system?: string | SystemContentBlock[];
+    max_tokens: number;
+    stream?: boolean;
+    [key: string]: unknown;
+}
+/** Anthropic Messages API response (non-streaming). */
+export interface MessagesResponse {
+    id: string;
+    type: "message";
+    role: "assistant";
+    content: ContentBlock[];
+    model: string;
+    stop_reason: string | null;
+    usage: {
+        input_tokens: number;
+        output_tokens: number;
+    };
+}

package/dist/types/anthropic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"anthropic.d.ts","sourceRoot":"","sources":["../../src/types/anthropic.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,uCAAuC;AACvC,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,CAAC,EAAE,YAAY,CAAC;CAC9B;AAED,2DAA2D;AAC3D,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,+CAA+C;AAC/C,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,UAAU,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,aAAa,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,GAAG,YAAY,EAAE,CAAC;CAClC;AAED,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,UAAU,GAAG,YAAY,GAAG,eAAe,CAAC;AAEnF,+CAA+C;AAC/C,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;IAC3B,OAAO,EAAE,MAAM,GAAG,YAAY,EAAE,CAAC;CAClC;AAED,kDAAkD;AAClD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,WAAW,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,6DAA6D;AAC7D,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,CAAC,EAAE,YAAY,CAAC;CAC9B;AAED,2CAA2C;AAC3C,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAC7B,MAAM,CAAC,EAAE,MAAM,GAAG,kBAAkB,EAAE,CAAC;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,uDAAuD;AACvD,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,SAAS,CAAC;IAChB,IAAI,EAAE,WAAW,CAAC;IAClB,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,KAAK,EAAE;QACL,YAAY,EAAE,MAAM,CAAC;QACrB,aAAa,EAAE,MAAM,CAAC;KACvB,CAAC;CACH"}

package/dist/types/anthropic.js

@@ -0,0 +1,5 @@
+/**
+ * Anthropic Messages API type definitions.
+ * Only the subset needed for proxy interception.
+ */
+export {};

package/dist/types/anthropic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"anthropic.js","sourceRoot":"","sources":["../../src/types/anthropic.ts"],"names":[],"mappings":"AAAA;;;GAGG"}

package/dist/types/config.d.ts

@@ -0,0 +1,64 @@
+/**
+ * Proxy configuration types.
+ */
+export interface ProxyConfig {
+    /** ExoVault agent key (exv_...). */
+    agentKey: string;
+    /** ExoVault API URL. Default: https://exovault.co */
+    apiUrl: string;
+    /** Local proxy host. Default: 127.0.0.1 (localhost only for security) */
+    host: string;
+    /** Local proxy port. Default: 4100 */
+    port: number;
+    /** Upstream Anthropic API base URL. Default: https://api.anthropic.com */
+    upstreamBaseUrl: string;
+    /** Max chars for memory injection block. Default: 2000 */
+    maxInjectionChars: number;
+}
+/** Info returned from ExoVault /api/agent/info. */
+export interface AgentInfo {
+    userId: string;
+    integrationId: string;
+    agentType: string;
+    scopes: string[];
+    vaultId: string | null;
+    restrictToVault: boolean;
+    /** Server-side override for memory injection budget (chars). */
+    maxInjectionChars?: number;
+}
+/** Memory hit from search results. */
+export interface MemoryHit {
+    id: string;
+    memoryType: string;
+    content: string;
+    contentTruncated?: boolean;
+    summary?: string | null;
+    importance: number;
+    confidence: number;
+    entities?: string[] | null;
+    relatedMemoryIds?: string[] | null;
+}
+/** Pending message delivered via session_start or context_checkpoint. */
+export interface PendingMessage {
+    id: string;
+    senderId: string;
+    senderType: string;
+    category: string;
+    priority: number;
+    subject: string | null;
+    content: string;
+    createdAt: string;
+}
+/** Session start response (subset). */
+export interface SessionStartResponse {
+    sessionContext: {
+        recentSessions: Array<{
+            id: string;
+            summary: string | null;
+        }>;
+        importantFacts: MemoryHit[];
+        activeTasks: MemoryHit[];
+        constraints: MemoryHit[];
+    };
+    pendingMessages?: PendingMessage[];
+}

package/dist/types/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/types/config.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,WAAW;IAC1B,oCAAoC;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,sDAAsD;IACtD,MAAM,EAAE,MAAM,CAAC;IACf,sCAAsC;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,0EAA0E;IAC1E,eAAe,EAAE,MAAM,CAAC;IACxB,0DAA0D;IAC1D,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,mDAAmD;AACnD,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,eAAe,EAAE,OAAO,CAAC;IACzB,gEAAgE;IAChE,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,sCAAsC;AACtC,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC3B,gBAAgB,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;CACpC;AAED,yEAAyE;AACzE,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,uCAAuC;AACvC,MAAM,WAAW,oBAAoB;IACnC,cAAc,EAAE;QACd,cAAc,EAAE,KAAK,CAAC;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE,CAAC,CAAC;QAC9D,cAAc,EAAE,SAAS,EAAE,CAAC;QAC5B,WAAW,EAAE,SAAS,EAAE,CAAC;QACzB,WAAW,EAAE,SAAS,EAAE,CAAC;KAC1B,CAAC;IACF,eAAe,CAAC,EAAE,cAAc,EAAE,CAAC;CACpC"}

package/dist/types/config.js

@@ -0,0 +1,4 @@
+/**
+ * Proxy configuration types.
+ */
+export {};

package/dist/types/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/types/config.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/package.json

@@ -0,0 +1,35 @@
+{
+  "name": "exovault",
+  "version": "1.0.0",
+  "type": "module",
+  "description": "ExoVault — unified proxy + MCP server for durable agent memory",
+  "main": "dist/index.js",
+  "bin": {
+    "exovault": "dist/index.js",
+    "exovault-proxy": "dist/index.js"
+  },
+  "files": [
+    "dist/",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "start": "node dist/index.js start",
+    "connect": "node dist/index.js connect",
+    "dev": "tsx src/index.ts",
+    "test": "vitest run",
+    "test:watch": "vitest"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.26.0",
+    "fastify": "^5.3.3",
+    "zod": "^4.3.6"
+  },
+  "devDependencies": {
+    "@types/node": "^22.15.3",
+    "tsx": "^4.19.4",
+    "typescript": "^5.8.3",
+    "vitest": "^4.0.18"
+  }
+}