kratos-memory 1.0.0

package/dist/security/pii-detector.d.ts

@@ -0,0 +1,61 @@
+export interface DetectionResult {
+    hasPII: boolean;
+    hasSecrets: boolean;
+    redactedText: string;
+    findings: Finding[];
+}
+export interface Finding {
+    type: 'pii' | 'secret' | 'high-entropy';
+    pattern: string;
+    confidence: number;
+    redacted: string;
+}
+/**
+ * PII and Secret Detection with entropy analysis
+ */
+export declare class PIIDetector {
+    private piiPatterns;
+    private secretPatterns;
+    private allowlist;
+    constructor(allowlist?: string[]);
+    /**
+     * Detect PII and secrets in text
+     */
+    detect(text: string): DetectionResult;
+    /**
+     * Calculate Shannon entropy
+     */
+    private calculateEntropy;
+    /**
+     * Check if string has high entropy (likely random/secret)
+     */
+    private hasHighEntropy;
+    /**
+     * Find high entropy strings in text
+     */
+    private findHighEntropyStrings;
+    /**
+     * Redact sensitive information
+     */
+    private redact;
+    /**
+     * Add items to allowlist
+     */
+    addToAllowlist(items: string[]): void;
+    /**
+     * Remove items from allowlist
+     */
+    removeFromAllowlist(items: string[]): void;
+    /**
+     * Get current allowlist
+     */
+    getAllowlist(): string[];
+    /**
+     * Scan and report (without redaction)
+     */
+    scan(text: string): {
+        findings: Finding[];
+        riskScore: number;
+    };
+}
+//# sourceMappingURL=pii-detector.d.ts.map

package/dist/security/pii-detector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pii-detector.d.ts","sourceRoot":"","sources":["../../src/security/pii-detector.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,EAAE,OAAO,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,OAAO,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,cAAc,CAAC;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,qBAAa,WAAW;IAEtB,OAAO,CAAC,WAAW,CAajB;IAGF,OAAO,CAAC,cAAc,CAqBpB;IAEF,OAAO,CAAC,SAAS,CAA0B;gBAE/B,SAAS,CAAC,EAAE,MAAM,EAAE;IAMhC;;OAEG;IACH,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe;IA2ErC;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAkBxB;;OAEG;IACH,OAAO,CAAC,cAAc;IAKtB;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAe9B;;OAEG;IACH,OAAO,CAAC,MAAM;IAkBd;;OAEG;IACH,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI;IAOrC;;OAEG;IACH,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI;IAO1C;;OAEG;IACH,YAAY,IAAI,MAAM,EAAE;IAIxB;;OAEG;IACH,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG;QAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE;CAkB/D"}

package/dist/security/pii-detector.js

@@ -0,0 +1,220 @@
+import { Logger } from '../utils/logger.js';
+const logger = new Logger('PIIDetector');
+/**
+ * PII and Secret Detection with entropy analysis
+ */
+export class PIIDetector {
+    // PII Patterns
+    piiPatterns = [
+        // SSN
+        { name: 'SSN', regex: /\b\d{3}-\d{2}-\d{4}\b/g, type: 'pii' },
+        // Credit Card
+        { name: 'Credit Card', regex: /\b(?:\d[ -]*?){13,16}\b/g, type: 'pii' },
+        // Email
+        { name: 'Email', regex: /\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Z|a-z]{2,}\b/g, type: 'pii' },
+        // Phone
+        { name: 'Phone', regex: /\b(?:\+?1[-.\s]?)?\(?\d{3}\)?[-.\s]?\d{3}[-.\s]?\d{4}\b/g, type: 'pii' },
+        // IP Address
+        { name: 'IP Address', regex: /\b(?:\d{1,3}\.){3}\d{1,3}\b/g, type: 'pii' },
+        // Date of Birth (various formats)
+        { name: 'DOB', regex: /\b(?:\d{1,2}[-/]\d{1,2}[-/]\d{2,4}|\d{4}[-/]\d{1,2}[-/]\d{1,2})\b/g, type: 'pii' },
+    ];
+    // Secret Patterns
+    secretPatterns = [
+        // API Keys (generic)
+        { name: 'API Key', regex: /\b[A-Za-z0-9]{32,}\b/g, type: 'secret' },
+        // AWS Keys
+        { name: 'AWS Access Key', regex: /AKIA[0-9A-Z]{16}/g, type: 'secret' },
+        { name: 'AWS Secret Key', regex: /[0-9a-zA-Z/+=]{40}/g, type: 'secret', entropyCheck: true },
+        // GitHub Token
+        { name: 'GitHub Token', regex: /ghp_[0-9a-zA-Z]{36}/g, type: 'secret' },
+        { name: 'GitHub Token', regex: /gho_[0-9a-zA-Z]{36}/g, type: 'secret' },
+        // JWT
+        { name: 'JWT', regex: /eyJ[A-Za-z0-9-_]+\.eyJ[A-Za-z0-9-_]+\.[A-Za-z0-9-_]+/g, type: 'secret' },
+        // Private Key
+        { name: 'Private Key', regex: /-----BEGIN (?:RSA |EC )?PRIVATE KEY-----/g, type: 'secret' },
+        // Password in config
+        { name: 'Password', regex: /(?:password|passwd|pwd|pass)[\s]*[:=][\s]*["']?([^"'\s]+)["']?/gi, type: 'secret' },
+        // Bearer Token
+        { name: 'Bearer Token', regex: /Bearer\s+[A-Za-z0-9-._~+/]+=*/g, type: 'secret' },
+        // Slack Token
+        { name: 'Slack Token', regex: /xox[baprs]-[0-9]{10,13}-[0-9]{10,13}-[a-zA-Z0-9]{24,34}/g, type: 'secret' },
+        // Stripe Key
+        { name: 'Stripe Key', regex: /(?:sk|pk)_(?:test|live)_[0-9a-zA-Z]{24,}/g, type: 'secret' },
+    ];
+    allowlist = new Set();
+    constructor(allowlist) {
+        if (allowlist) {
+            this.allowlist = new Set(allowlist);
+        }
+    }
+    /**
+     * Detect PII and secrets in text
+     */
+    detect(text) {
+        const findings = [];
+        let redactedText = text;
+        // Check PII patterns
+        for (const pattern of this.piiPatterns) {
+            const matches = text.matchAll(pattern.regex);
+            for (const match of matches) {
+                const value = match[0];
+                // Skip if in allowlist
+                if (this.allowlist.has(value))
+                    continue;
+                const redacted = this.redact(value, pattern.type);
+                findings.push({
+                    type: pattern.type,
+                    pattern: pattern.name,
+                    confidence: 0.9,
+                    redacted
+                });
+                redactedText = redactedText.replace(value, redacted);
+            }
+        }
+        // Check secret patterns
+        for (const pattern of this.secretPatterns) {
+            const matches = text.matchAll(pattern.regex);
+            for (const match of matches) {
+                const value = match[0];
+                // Skip if in allowlist
+                if (this.allowlist.has(value))
+                    continue;
+                // Check entropy if required
+                if (pattern.entropyCheck && !this.hasHighEntropy(value)) {
+                    continue;
+                }
+                const redacted = this.redact(value, pattern.type);
+                findings.push({
+                    type: pattern.type,
+                    pattern: pattern.name,
+                    confidence: pattern.entropyCheck ? 0.7 : 0.9,
+                    redacted
+                });
+                redactedText = redactedText.replace(value, redacted);
+            }
+        }
+        // Entropy-based detection for unknown secrets
+        const highEntropyStrings = this.findHighEntropyStrings(text);
+        for (const str of highEntropyStrings) {
+            if (this.allowlist.has(str))
+                continue;
+            const redacted = this.redact(str, 'secret');
+            findings.push({
+                type: 'high-entropy',
+                pattern: 'High Entropy String',
+                confidence: 0.6,
+                redacted
+            });
+            redactedText = redactedText.replace(str, redacted);
+        }
+        return {
+            hasPII: findings.some(f => f.type === 'pii'),
+            hasSecrets: findings.some(f => f.type === 'secret' || f.type === 'high-entropy'),
+            redactedText,
+            findings
+        };
+    }
+    /**
+     * Calculate Shannon entropy
+     */
+    calculateEntropy(str) {
+        const frequencies = new Map();
+        for (const char of str) {
+            frequencies.set(char, (frequencies.get(char) || 0) + 1);
+        }
+        let entropy = 0;
+        const len = str.length;
+        for (const freq of frequencies.values()) {
+            const p = freq / len;
+            entropy -= p * Math.log2(p);
+        }
+        return entropy;
+    }
+    /**
+     * Check if string has high entropy (likely random/secret)
+     */
+    hasHighEntropy(str, threshold = 4.5) {
+        if (str.length < 10)
+            return false;
+        return this.calculateEntropy(str) > threshold;
+    }
+    /**
+     * Find high entropy strings in text
+     */
+    findHighEntropyStrings(text) {
+        const results = [];
+        // Find continuous alphanumeric strings
+        const candidates = text.match(/[A-Za-z0-9+/=_-]{20,}/g) || [];
+        for (const candidate of candidates) {
+            if (this.hasHighEntropy(candidate)) {
+                results.push(candidate);
+            }
+        }
+        return results;
+    }
+    /**
+     * Redact sensitive information
+     */
+    redact(value, type) {
+        if (type === 'pii') {
+            // Show partial for PII
+            if (value.includes('@')) {
+                // Email - show domain
+                const parts = value.split('@');
+                return `[REDACTED_EMAIL]@${parts[1]}`;
+            }
+            if (value.length > 4) {
+                // Show last 4 chars
+                return `[REDACTED_${type.toUpperCase()}...${value.slice(-4)}]`;
+            }
+        }
+        // Complete redaction for secrets
+        return `[REDACTED_${type.toUpperCase()}]`;
+    }
+    /**
+     * Add items to allowlist
+     */
+    addToAllowlist(items) {
+        for (const item of items) {
+            this.allowlist.add(item);
+        }
+        logger.info(`Added ${items.length} items to allowlist`);
+    }
+    /**
+     * Remove items from allowlist
+     */
+    removeFromAllowlist(items) {
+        for (const item of items) {
+            this.allowlist.delete(item);
+        }
+        logger.info(`Removed ${items.length} items from allowlist`);
+    }
+    /**
+     * Get current allowlist
+     */
+    getAllowlist() {
+        return Array.from(this.allowlist);
+    }
+    /**
+     * Scan and report (without redaction)
+     */
+    scan(text) {
+        const result = this.detect(text);
+        // Calculate risk score
+        let riskScore = 0;
+        for (const finding of result.findings) {
+            if (finding.type === 'secret' || finding.type === 'high-entropy') {
+                riskScore += finding.confidence * 10;
+            }
+            else if (finding.type === 'pii') {
+                riskScore += finding.confidence * 5;
+            }
+        }
+        return {
+            findings: result.findings,
+            riskScore: Math.min(riskScore, 100)
+        };
+    }
+}
+//# sourceMappingURL=pii-detector.js.map

package/dist/security/pii-detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pii-detector.js","sourceRoot":"","sources":["../../src/security/pii-detector.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC;AAgBzC;;GAEG;AACH,MAAM,OAAO,WAAW;IACtB,eAAe;IACP,WAAW,GAAG;QACpB,MAAM;QACN,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,wBAAwB,EAAE,IAAI,EAAE,KAAK,EAAE;QAC7D,cAAc;QACd,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,0BAA0B,EAAE,IAAI,EAAE,KAAK,EAAE;QACvE,QAAQ;QACR,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,sDAAsD,EAAE,IAAI,EAAE,KAAK,EAAE;QAC7F,QAAQ;QACR,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,0DAA0D,EAAE,IAAI,EAAE,KAAK,EAAE;QACjG,aAAa;QACb,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,8BAA8B,EAAE,IAAI,EAAE,KAAK,EAAE;QAC1E,kCAAkC;QAClC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,oEAAoE,EAAE,IAAI,EAAE,KAAK,EAAE;KAC1G,CAAC;IAEF,kBAAkB;IACV,cAAc,GAAG;QACvB,qBAAqB;QACrB,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,uBAAuB,EAAE,IAAI,EAAE,QAAQ,EAAE;QACnE,WAAW;QACX,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,QAAQ,EAAE;QACtE,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,qBAAqB,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE;QAC5F,eAAe;QACf,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,sBAAsB,EAAE,IAAI,EAAE,QAAQ,EAAE;QACvE,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,sBAAsB,EAAE,IAAI,EAAE,QAAQ,EAAE;QACvE,MAAM;QACN,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,uDAAuD,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC/F,cAAc;QACd,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,2CAA2C,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC3F,qBAAqB;QACrB,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,kEAAkE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC/G,eAAe;QACf,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,gCAAgC,EAAE,IAAI,EAAE,QAAQ,EAAE;QACjF,cAAc;QACd,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,0DAA0D,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC1G,aAAa;QACb,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,2CAA2C,EAAE,IAAI,EAAE,QAAQ,EAAE;KAC3F,CAAC;IAEM,SAAS,GAAgB,IAAI,GAAG,EAAE,CAAC;IAE3C,YAAY,SAAoB;QAC9B,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC,SAAS,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,IAAY;QACjB,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,IAAI,YAAY,GAAG,IAAI,CAAC;QAExB,qBAAqB;QACrB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACvC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC7C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBAEvB,uBAAuB;gBACvB,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;oBAAE,SAAS;gBAExC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAwB,CAAC,CAAC;gBACtE,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,OAAO,CAAC,IAAwB;oBACtC,OAAO,EAAE,OAAO,CAAC,IAAI;oBACrB,UAAU,EAAE,GAAG;oBACf,QAAQ;iBACT,CAAC,CAAC;gBAEH,YAAY,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;QAED,wBAAwB;QACxB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC7C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBAEvB,uBAAuB;gBACvB,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;oBAAE,SAAS;gBAExC,4BAA4B;gBAC5B,IAAI,OAAO,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;oBACxD,SAAS;gBACX,CAAC;gBAED,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAwB,CAAC,CAAC;gBACtE,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,OAAO,CAAC,IAAwB;oBACtC,OAAO,EAAE,OAAO,CAAC,IAAI;oBACrB,UAAU,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;oBAC5C,QAAQ;iBACT,CAAC,CAAC;gBAEH,YAAY,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;QAED,8CAA8C;QAC9C,MAAM,kBAAkB,GAAG,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAC7D,KAAK,MAAM,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACrC,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YAEtC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC5C,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,qBAAqB;gBAC9B,UAAU,EAAE,GAAG;gBACf,QAAQ;aACT,CAAC,CAAC;YAEH,YAAY,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACrD,CAAC;QAED,OAAO;YACL,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC;YAC5C,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC;YAChF,YAAY;YACZ,QAAQ;SACT,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,GAAW;QAClC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;QAE9C,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;YACvB,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1D,CAAC;QAED,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC;QAEvB,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;YACxC,MAAM,CAAC,GAAG,IAAI,GAAG,GAAG,CAAC;YACrB,OAAO,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9B,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACK,cAAc,CAAC,GAAW,EAAE,YAAoB,GAAG;QACzD,IAAI,GAAG,CAAC,MAAM,GAAG,EAAE;YAAE,OAAO,KAAK,CAAC;QAClC,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;IAChD,CAAC;IAED;;OAEG;IACK,sBAAsB,CAAC,IAAY;QACzC,MAAM,OAAO,GAAa,EAAE,CAAC;QAE7B,uCAAuC;QACvC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,wBAAwB,CAAC,IAAI,EAAE,CAAC;QAE9D,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,IAAI,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC;gBACnC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACK,MAAM,CAAC,KAAa,EAAE,IAAuC;QACnE,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;YACnB,uBAAuB;YACvB,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,sBAAsB;gBACtB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC/B,OAAO,oBAAoB,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YACxC,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrB,oBAAoB;gBACpB,OAAO,aAAa,IAAI,CAAC,WAAW,EAAE,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;YACjE,CAAC;QACH,CAAC;QAED,iCAAiC;QACjC,OAAO,aAAa,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,KAAe;QAC5B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,MAAM,qBAAqB,CAAC,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,mBAAmB,CAAC,KAAe;QACjC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC9B,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,WAAW,KAAK,CAAC,MAAM,uBAAuB,CAAC,CAAC;IAC9D,CAAC;IAED;;OAEG;IACH,YAAY;QACV,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,IAAY;QACf,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAEjC,uBAAuB;QACvB,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACtC,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;gBACjE,SAAS,IAAI,OAAO,CAAC,UAAU,GAAG,EAAE,CAAC;YACvC,CAAC;iBAAM,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;gBAClC,SAAS,IAAI,OAAO,CAAC,UAAU,GAAG,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC;SACpC,CAAC;IACJ,CAAC;CACF"}

package/dist/types/index.d.ts

@@ -0,0 +1,151 @@
+export interface PRD {
+    id: string;
+    projectName: string;
+    version: string;
+    createdAt: Date;
+    updatedAt: Date;
+    pages: PageDefinition[];
+    apiEndpoints: APIEndpoint[];
+    dataStructures: DataStructure[];
+    userFlows: UserFlow[];
+    edgeCases: EdgeCase[];
+    integrations: Integration[];
+}
+export interface PageDefinition {
+    path: string;
+    name: string;
+    description: string;
+    components: string[];
+    dataRequirements: string[];
+}
+export interface APIEndpoint {
+    method: string;
+    path: string;
+    description: string;
+    requestBody?: object;
+    responseBody?: object;
+    authentication: boolean;
+}
+export interface DataStructure {
+    name: string;
+    schema: object;
+    relationships: string[];
+}
+export interface UserFlow {
+    name: string;
+    steps: string[];
+    entryPoint: string;
+    exitPoints: string[];
+}
+export interface EdgeCase {
+    scenario: string;
+    handling: string;
+    priority: 'low' | 'medium' | 'high';
+}
+export interface Integration {
+    name: string;
+    type: string;
+    configuration: object;
+}
+export interface Memory {
+    id: string;
+    type: 'architecture' | 'fixed-guide' | 'open-issue' | 'audit' | 'reference' | 'progress' | 'feature';
+    title: string;
+    content: string;
+    metadata: MemoryMetadata;
+    createdAt: Date;
+    updatedAt: Date;
+}
+export interface MemoryMetadata {
+    tags: string[];
+    relatedFiles: string[];
+    category?: string;
+    priority?: 'low' | 'medium' | 'high';
+    autoSaved: boolean;
+    conversationId?: string;
+}
+export interface PromptTemplate {
+    id: string;
+    name: string;
+    role: string;
+    stack: string[];
+    goal: string;
+    scopeConstraints: string[];
+    fileContext: string[];
+    plan: string[];
+    memoryRecall: string[];
+    verification: string[];
+}
+export interface ContextRule {
+    id: string;
+    name: string;
+    trigger: RuleTrigger;
+    action: RuleAction;
+    priority: number;
+    enabled: boolean;
+}
+export interface RuleTrigger {
+    type: 'always' | 'intelligent' | 'file-pattern' | 'manual';
+    patterns?: string[];
+    keywords?: string[];
+    conditions?: object;
+}
+export interface RuleAction {
+    type: 'inject-memory' | 'inject-prd' | 'inject-context' | 'warn';
+    targets: string[];
+    message?: string;
+}
+export interface AutoMemoryConfig {
+    enabled: boolean;
+    triggers: {
+        bugFixes: boolean;
+        architecture: boolean;
+        features: boolean;
+        optimizations: boolean;
+    };
+    excludePatterns: string[];
+    requireConfirmation: boolean;
+    smartMerge: boolean;
+}
+export interface ConversationAnalysis {
+    hasBugFix: boolean;
+    hasArchitectureDecision: boolean;
+    hasFeatureImplementation: boolean;
+    hasOptimization: boolean;
+    extractedTitle?: string;
+    extractedContent?: string;
+    suggestedType?: Memory['type'];
+    confidence: number;
+}
+export interface ConversationMemory {
+    id: string;
+    projectId: string;
+    timestamp: Date;
+    conversation: ConversationTurn[];
+    extractedInsights: ExtractedInsights;
+    tags: string[];
+    importance: 'low' | 'medium' | 'high';
+    summary?: string;
+}
+export interface ConversationTurn {
+    role: 'user' | 'assistant';
+    content: string;
+    timestamp: Date;
+}
+export interface ExtractedInsights {
+    decisions: string[];
+    implementations: string[];
+    problems: string[];
+    solutions: string[];
+    learnings: string[];
+    codeSnippets: CodeSnippet[];
+    dependencies: string[];
+    todos: string[];
+}
+export interface CodeSnippet {
+    language: string;
+    code: string;
+    description?: string;
+    file?: string;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/types/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,GAAG;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;IAEhB,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,YAAY,EAAE,WAAW,EAAE,CAAC;IAC5B,cAAc,EAAE,aAAa,EAAE,CAAC;IAChC,SAAS,EAAE,QAAQ,EAAE,CAAC;IACtB,SAAS,EAAE,QAAQ,EAAE,CAAC;IACtB,YAAY,EAAE,WAAW,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;CACrC;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,MAAM;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,cAAc,GAAG,aAAa,GAAG,YAAY,GAAG,OAAO,GAAG,WAAW,GAAG,UAAU,GAAG,SAAS,CAAC;IACrG,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,cAAc,CAAC;IACzB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IACrC,SAAS,EAAE,OAAO,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,WAAW,CAAC;IACrB,MAAM,EAAE,UAAU,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,QAAQ,GAAG,aAAa,GAAG,cAAc,GAAG,QAAQ,CAAC;IAC3D,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,eAAe,GAAG,YAAY,GAAG,gBAAgB,GAAG,MAAM,CAAC;IACjE,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE;QACR,QAAQ,EAAE,OAAO,CAAC;QAClB,YAAY,EAAE,OAAO,CAAC;QACtB,QAAQ,EAAE,OAAO,CAAC;QAClB,aAAa,EAAE,OAAO,CAAC;KACxB,CAAC;IACF,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,mBAAmB,EAAE,OAAO,CAAC;IAC7B,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,OAAO,CAAC;IACnB,uBAAuB,EAAE,OAAO,CAAC;IACjC,wBAAwB,EAAE,OAAO,CAAC;IAClC,eAAe,EAAE,OAAO,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,IAAI,CAAC;IAChB,YAAY,EAAE,gBAAgB,EAAE,CAAC;IACjC,iBAAiB,EAAE,iBAAiB,CAAC;IACrC,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,UAAU,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,YAAY,EAAE,WAAW,EAAE,CAAC;IAC5B,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf"}

package/dist/types/index.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.js.map

package/dist/types/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":""}

package/dist/utils/logger.d.ts

@@ -0,0 +1,9 @@
+export declare class Logger {
+    private prefix;
+    constructor(prefix: string);
+    info(...args: any[]): void;
+    warn(...args: any[]): void;
+    error(...args: any[]): void;
+    debug(...args: any[]): void;
+}
+//# sourceMappingURL=logger.d.ts.map

package/dist/utils/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":"AAAA,qBAAa,MAAM;IACjB,OAAO,CAAC,MAAM,CAAS;gBACX,MAAM,EAAE,MAAM;IAC1B,IAAI,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE;IACnB,IAAI,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE;IACnB,KAAK,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE;IACpB,KAAK,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE;CACrB"}

package/dist/utils/logger.js

@@ -0,0 +1,10 @@
+export class Logger {
+    prefix;
+    constructor(prefix) { this.prefix = prefix; }
+    info(...args) { console.error(`[${this.prefix}]`, ...args); }
+    warn(...args) { console.error(`[${this.prefix}] WARN:`, ...args); }
+    error(...args) { console.error(`[${this.prefix}] ERROR:`, ...args); }
+    debug(...args) { if (process.env.KRATOS_DEBUG === 'true')
+        console.error(`[${this.prefix}] DEBUG:`, ...args); }
+}
+//# sourceMappingURL=logger.js.map

package/dist/utils/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,MAAM;IACT,MAAM,CAAS;IACvB,YAAY,MAAc,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC;IACrD,IAAI,CAAC,GAAG,IAAW,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpE,IAAI,CAAC,GAAG,IAAW,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,SAAS,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1E,KAAK,CAAC,GAAG,IAAW,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,UAAU,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5E,KAAK,CAAC,GAAG,IAAW,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,MAAM;QAAE,OAAO,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,UAAU,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;CACtH"}

package/package.json

@@ -0,0 +1,54 @@
+{
+  "name": "kratos-memory",
+  "version": "1.0.0",
+  "description": "Persistent memory for AI coding agents — CLI-first, encrypted, local",
+  "main": "dist/cli/index.js",
+  "type": "module",
+  "bin": {
+    "kratos-memory": "./bin/kratos-cli",
+    "kratos": "./bin/kratos-cli"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/ceorkm/kratos-cli.git"
+  },
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsx src/cli/index.ts",
+    "start": "node dist/cli/index.js",
+    "prepublishOnly": "npm run build"
+  },
+  "keywords": ["cli", "ai-memory", "ai-agents", "claude-code", "codex", "cursor", "sqlite", "fts5", "memory", "persistent"],
+  "author": "",
+  "license": "MIT",
+  "dependencies": {
+    "better-sqlite3": "^9.2.2",
+    "chalk": "^5.3.0",
+    "commander": "^12.1.0",
+    "crypto-js": "^4.2.0",
+    "fs-extra": "^11.2.0",
+    "js-yaml": "^4.1.0",
+    "node-forge": "^1.3.1",
+    "sodium-native": "^5.0.6",
+    "winston": "^3.11.0",
+    "zod": "^3.22.4"
+  },
+  "devDependencies": {
+    "@types/better-sqlite3": "^7.6.8",
+    "@types/fs-extra": "^11.0.4",
+    "@types/js-yaml": "^4.0.9",
+    "@types/node": "^20.0.0",
+    "tsx": "^4.0.0",
+    "typescript": "^5.0.0"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "files": [
+    "dist/**/*",
+    "bin/**/*",
+    "README.md",
+    "LICENSE",
+    "AGENTS.md"
+  ]
+}