modular-studio 0.2.0

package/dist-server/server/services/githubIndexer.d.ts

@@ -0,0 +1,59 @@
+/**
+ * GitHub Repository Indexer
+ *
+ * Shallow-clones a GitHub repo (or any git URL) into a temp directory,
+ * runs the repo scanner, generates tree index, then cleans up.
+ *
+ * This is the bridge between "point at a GitHub URL" and
+ * "get a tree-indexed knowledge base for an agent."
+ */
+import { type RepoScan } from './repoIndexer.js';
+export interface LocalRepoIndexRequest {
+    path: string;
+    name?: string;
+    subdir?: string;
+}
+export interface GitHubIndexRequest {
+    /** GitHub URL (https://github.com/owner/repo) or any git clone URL */
+    url: string;
+    /** Specific branch/tag/commit to check out (default: HEAD) */
+    ref?: string;
+    /** Subdirectory within the repo to focus on (e.g. "packages/frontend") */
+    subdir?: string;
+    /** Keep the clone on disk (default: false, auto-cleanup) */
+    persist?: boolean;
+}
+export interface GitHubIndexResult {
+    /** Repo name (from package.json or URL) */
+    name: string;
+    /** Base GitHub blob URL for building file links */
+    baseUrl?: string;
+    /** Where it was cloned (only if persist=true) */
+    clonePath?: string;
+    /** Full repo scan data */
+    scan: RepoScan;
+    /** Generated markdown knowledge base (filename → content) */
+    knowledgeDocs: Map<string, string>;
+    /** Overview doc (ready for tree indexing) */
+    overviewMarkdown: string;
+    /** All knowledge docs concatenated (ready for tree indexing) */
+    fullMarkdown: string;
+    /** Timing */
+    timing: {
+        cloneMs: number;
+        scanMs: number;
+        generateMs: number;
+        totalMs: number;
+    };
+}
+export declare function indexLocalRepo(request: LocalRepoIndexRequest): Promise<GitHubIndexResult>;
+/**
+ * Clone a GitHub repo, scan it, generate tree-indexable knowledge, optionally clean up.
+ */
+export declare function indexGitHubRepo(request: GitHubIndexRequest): Promise<GitHubIndexResult>;
+/**
+ * Index multiple repos in parallel (for multi-agent scenarios).
+ * Returns a map of repo URL → index result.
+ */
+export declare function indexMultipleRepos(repos: GitHubIndexRequest[]): Promise<Map<string, GitHubIndexResult>>;
+//# sourceMappingURL=githubIndexer.d.ts.map

package/dist-server/server/services/githubIndexer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"githubIndexer.d.ts","sourceRoot":"","sources":["../../../server/services/githubIndexer.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH,OAAO,EAA8D,KAAK,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAI7G,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,sEAAsE;IACtE,GAAG,EAAE,MAAM,CAAC;IACZ,8DAA8D;IAC9D,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,0EAA0E;IAC1E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4DAA4D;IAC5D,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,2CAA2C;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,mDAAmD;IACnD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iDAAiD;IACjD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0BAA0B;IAC1B,IAAI,EAAE,QAAQ,CAAC;IACf,6DAA6D;IAC7D,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,6CAA6C;IAC7C,gBAAgB,EAAE,MAAM,CAAC;IACzB,gEAAgE;IAChE,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa;IACb,MAAM,EAAE;QACN,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;CACH;AA+BD,wBAAsB,cAAc,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAiC/F;AAID;;GAEG;AACH,wBAAsB,eAAe,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA4F7F;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,kBAAkB,EAAE,GAC1B,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAkBzC"}

package/dist-server/server/services/githubIndexer.js

@@ -0,0 +1,183 @@
+/**
+ * GitHub Repository Indexer
+ *
+ * Shallow-clones a GitHub repo (or any git URL) into a temp directory,
+ * runs the repo scanner, generates tree index, then cleans up.
+ *
+ * This is the bridge between "point at a GitHub URL" and
+ * "get a tree-indexed knowledge base for an agent."
+ */
+import { execSync } from 'node:child_process';
+import { mkdtempSync, rmSync, existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { tmpdir } from 'node:os';
+import { scanRepository, generateKnowledgeBase, generateOverviewDoc } from './repoIndexer.js';
+// ── Helpers ──
+function parseGitUrl(url) {
+    // Handle: https://github.com/owner/repo, https://github.com/owner/repo.git
+    // Also: git@github.com:owner/repo.git
+    const httpsMatch = url.match(/github\.com\/([^/]+)\/([^/.]+)/);
+    if (httpsMatch)
+        return { owner: httpsMatch[1], repo: httpsMatch[2] };
+    const sshMatch = url.match(/github\.com:([^/]+)\/([^/.]+)/);
+    if (sshMatch)
+        return { owner: sshMatch[1], repo: sshMatch[2] };
+    // Fallback: use last path segment
+    const segments = url.replace(/\.git$/, '').split('/');
+    return { owner: segments[segments.length - 2] || 'unknown', repo: segments[segments.length - 1] || 'unknown' };
+}
+function normalizeGitUrl(url) {
+    // Ensure it ends with .git for clone
+    if (!url.endsWith('.git'))
+        return `${url}.git`;
+    return url;
+}
+function buildGitHubBaseUrl(url, ref) {
+    if (!url.includes('github.com'))
+        return undefined;
+    const { owner, repo } = parseGitUrl(url);
+    const branch = ref || 'HEAD';
+    return `https://github.com/${owner}/${repo}/blob/${branch}/`;
+}
+export async function indexLocalRepo(request) {
+    const t0 = Date.now();
+    const { path, subdir } = request;
+    const scanRoot = subdir ? join(path, subdir) : path;
+    if (!existsSync(scanRoot)) {
+        throw new Error(`Subdirectory "${subdir}" not found in repository path`);
+    }
+    const scanStart = Date.now();
+    const scan = scanRepository(scanRoot);
+    if (request.name)
+        scan.name = request.name;
+    const scanMs = Date.now() - scanStart;
+    const genStart = Date.now();
+    const knowledgeDocs = generateKnowledgeBase(scan);
+    const overviewMarkdown = generateOverviewDoc(scan);
+    const sortedKeys = [...knowledgeDocs.keys()].sort();
+    const fullMarkdown = sortedKeys.map((k) => knowledgeDocs.get(k)).join('\n\n---\n\n');
+    const generateMs = Date.now() - genStart;
+    return {
+        name: scan.name,
+        scan,
+        knowledgeDocs,
+        overviewMarkdown,
+        fullMarkdown,
+        timing: {
+            cloneMs: 0,
+            scanMs,
+            generateMs,
+            totalMs: Date.now() - t0,
+        },
+    };
+}
+// ── Main ──
+/**
+ * Clone a GitHub repo, scan it, generate tree-indexable knowledge, optionally clean up.
+ */
+export async function indexGitHubRepo(request) {
+    const t0 = Date.now();
+    const { url, ref, subdir, persist } = request;
+    const { repo } = parseGitUrl(url);
+    const cloneUrl = normalizeGitUrl(url);
+    const baseUrl = buildGitHubBaseUrl(url, ref);
+    // 1. Clone into temp directory (shallow for speed)
+    const tempDir = mkdtempSync(join(tmpdir(), `modular-gh-${repo}-`));
+    try {
+        const cloneStart = Date.now();
+        const depthArg = '--depth 1';
+        const branchArg = ref ? `--branch ${ref}` : '';
+        try {
+            execSync(`git clone ${depthArg} ${branchArg} --single-branch "${cloneUrl}" "${tempDir}"`, { stdio: 'pipe', timeout: 60_000 });
+        }
+        catch (cloneErr) {
+            // On Windows, filenames with colons (e.g. timestamps) cause checkout
+            // failures even though the clone (object fetch) succeeds. Detect this
+            // and recover: the .git dir exists, just some files couldn't checkout.
+            const gitDir = join(tempDir, '.git');
+            if (existsSync(gitDir)) {
+                // Best-effort checkout of whatever files Windows can handle
+                try {
+                    execSync('git checkout HEAD -- .', { cwd: tempDir, stdio: 'pipe', timeout: 30_000 });
+                }
+                catch {
+                    // Some files still fail — that's fine, we index what we can
+                }
+            }
+            else {
+                // Genuine clone failure (network, auth, etc.)
+                throw cloneErr;
+            }
+        }
+        const cloneMs = Date.now() - cloneStart;
+        // 2. Determine scan root (may be a subdirectory)
+        const scanRoot = subdir ? join(tempDir, subdir) : tempDir;
+        if (!existsSync(scanRoot)) {
+            throw new Error(`Subdirectory "${subdir}" not found in cloned repo`);
+        }
+        // 3. Scan the repository
+        const scanStart = Date.now();
+        const scan = scanRepository(scanRoot);
+        // Override the name with the GitHub repo name
+        scan.name = repo;
+        const scanMs = Date.now() - scanStart;
+        // 4. Generate knowledge base markdown
+        const genStart = Date.now();
+        const knowledgeDocs = generateKnowledgeBase(scan);
+        const overviewMarkdown = generateOverviewDoc(scan);
+        // Concatenate all docs into a single markdown for tree indexing
+        const allDocs = [];
+        const sortedKeys = [...knowledgeDocs.keys()].sort();
+        for (const key of sortedKeys) {
+            allDocs.push(knowledgeDocs.get(key));
+        }
+        const fullMarkdown = allDocs.join('\n\n---\n\n');
+        const generateMs = Date.now() - genStart;
+        const result = {
+            name: repo,
+            baseUrl,
+            scan,
+            knowledgeDocs,
+            overviewMarkdown,
+            fullMarkdown,
+            timing: {
+                cloneMs,
+                scanMs,
+                generateMs,
+                totalMs: Date.now() - t0,
+            },
+        };
+        if (persist) {
+            result.clonePath = tempDir;
+        }
+        return result;
+    }
+    finally {
+        // Clean up unless persist requested
+        if (!persist) {
+            try {
+                rmSync(tempDir, { recursive: true, force: true });
+            }
+            catch { /* best effort */ }
+        }
+    }
+}
+/**
+ * Index multiple repos in parallel (for multi-agent scenarios).
+ * Returns a map of repo URL → index result.
+ */
+export async function indexMultipleRepos(repos) {
+    const results = new Map();
+    const settled = await Promise.allSettled(repos.map(async (req) => {
+        const result = await indexGitHubRepo(req);
+        return { url: req.url, result };
+    }));
+    for (const outcome of settled) {
+        if (outcome.status === 'fulfilled') {
+            results.set(outcome.value.url, outcome.value.result);
+        }
+        // Skip failed ones — caller can check which URLs are missing
+    }
+    return results;
+}
+//# sourceMappingURL=githubIndexer.js.map

package/dist-server/server/services/githubIndexer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"githubIndexer.js","sourceRoot":"","sources":["../../../server/services/githubIndexer.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC1D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,mBAAmB,EAAiB,MAAM,kBAAkB,CAAC;AA6C7G,gBAAgB;AAEhB,SAAS,WAAW,CAAC,GAAW;IAC9B,2EAA2E;IAC3E,sCAAsC;IACtC,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAC/D,IAAI,UAAU;QAAE,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IAErE,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC5D,IAAI,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IAE/D,kCAAkC;IAClC,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtD,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,SAAS,EAAE,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,SAAS,EAAE,CAAC;AACjH,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,qCAAqC;IACrC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,GAAG,GAAG,MAAM,CAAC;IAC/C,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAW,EAAE,GAAY;IACnD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,SAAS,CAAC;IAClD,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC;IAC7B,OAAO,sBAAsB,KAAK,IAAI,IAAI,SAAS,MAAM,GAAG,CAAC;AAC/D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAA8B;IACjE,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtB,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IACjC,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACpD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,iBAAiB,MAAM,gCAAgC,CAAC,CAAC;IAC3E,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,OAAO,CAAC,IAAI;QAAE,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IAEtC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC5B,MAAM,aAAa,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACnD,MAAM,UAAU,GAAG,CAAC,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACpD,MAAM,YAAY,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACtF,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC;IAEzC,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI;QACJ,aAAa;QACb,gBAAgB;QAChB,YAAY;QACZ,MAAM,EAAE;YACN,OAAO,EAAE,CAAC;YACV,MAAM;YACN,UAAU;YACV,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;SACzB;KACF,CAAC;AACJ,CAAC;AAED,aAAa;AAEb;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAA2B;IAC/D,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtB,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAC9C,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAE7C,mDAAmD;IACnD,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,cAAc,IAAI,GAAG,CAAC,CAAC,CAAC;IAEnE,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,WAAW,CAAC;QAC7B,MAAM,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,YAAY,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAE/C,IAAI,CAAC;YACH,QAAQ,CACN,aAAa,QAAQ,IAAI,SAAS,qBAAqB,QAAQ,MAAM,OAAO,GAAG,EAC/E,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CACnC,CAAC;QACJ,CAAC;QAAC,OAAO,QAAiB,EAAE,CAAC;YAC3B,qEAAqE;YACrE,sEAAsE;YACtE,uEAAuE;YACvE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACrC,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBACvB,4DAA4D;gBAC5D,IAAI,CAAC;oBACH,QAAQ,CAAC,wBAAwB,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;gBACvF,CAAC;gBAAC,MAAM,CAAC;oBACP,4DAA4D;gBAC9D,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,8CAA8C;gBAC9C,MAAM,QAAQ,CAAC;YACjB,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC;QAExC,iDAAiD;QACjD,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAC1D,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,iBAAiB,MAAM,4BAA4B,CAAC,CAAC;QACvE,CAAC;QAED,yBAAyB;QACzB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;QACtC,8CAA8C;QAC9C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAEtC,sCAAsC;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5B,MAAM,aAAa,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAEnD,gEAAgE;QAChE,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,CAAC,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACpD,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;YAC7B,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC;QAEzC,MAAM,MAAM,GAAsB;YAChC,IAAI,EAAE,IAAI;YACV,OAAO;YACP,IAAI;YACJ,aAAa;YACb,gBAAgB;YAChB,YAAY;YACZ,MAAM,EAAE;gBACN,OAAO;gBACP,MAAM;gBACN,UAAU;gBACV,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;aACzB;SACF,CAAC;QAEF,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,CAAC,SAAS,GAAG,OAAO,CAAC;QAC7B,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;YAAS,CAAC;QACT,oCAAoC;QACpC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC;gBAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAA2B;IAE3B,MAAM,OAAO,GAAG,IAAI,GAAG,EAA6B,CAAC;IAErD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CACtC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACtB,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;QAC1C,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC;IAClC,CAAC,CAAC,CACH,CAAC;IAEF,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;QAC9B,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACnC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACvD,CAAC;QACD,6DAA6D;IAC/D,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist-server/server/services/mcpOAuth.d.ts

@@ -0,0 +1,32 @@
+/**
+ * MCP OAuth 2.0 + PKCE service for Streamable HTTP servers.
+ *
+ * Flow: discover → register (dynamic) → authorize (popup) → callback → token storage
+ * Spec: MCP Streamable HTTP transport with OAuth as of 2025-03-26
+ */
+interface OAuthMetadata {
+    issuer: string;
+    authorization_endpoint: string;
+    token_endpoint: string;
+    registration_endpoint?: string;
+    token_endpoint_auth_methods_supported?: string[];
+    code_challenge_methods_supported?: string[];
+    scopes_supported?: string[];
+}
+export declare function discoverOAuth(serverUrl: string): Promise<OAuthMetadata>;
+export declare function startOAuthFlow(serverUrl: string, redirectUri: string, preregisteredClientId?: string): Promise<{
+    authUrl: string;
+    state: string;
+}>;
+export declare function handleCallback(code: string, state: string, redirectUri: string): Promise<{
+    serverUrl: string;
+}>;
+export declare function getToken(serverUrl: string): Promise<string | null>;
+export declare function getConnectionStatus(serverUrl: string): Promise<{
+    connected: boolean;
+    expiresAt?: number;
+}>;
+export declare function disconnect(serverUrl: string): Promise<void>;
+export declare function listConnectedServers(): Promise<string[]>;
+export {};
+//# sourceMappingURL=mcpOAuth.d.ts.map

package/dist-server/server/services/mcpOAuth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcpOAuth.d.ts","sourceRoot":"","sources":["../../../server/services/mcpOAuth.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAcH,UAAU,aAAa;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,sBAAsB,EAAE,MAAM,CAAC;IAC/B,cAAc,EAAE,MAAM,CAAC;IACvB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,qCAAqC,CAAC,EAAE,MAAM,EAAE,CAAC;IACjD,gCAAgC,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5C,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B;AA2DD,wBAAsB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAc7E;AAkDD,wBAAsB,cAAc,CAClC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,qBAAqB,CAAC,EAAE,MAAM,GAC7B,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAiD7C;AAID,wBAAsB,cAAc,CAClC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAiDhC;AAuDD,wBAAsB,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAkBxE;AAED,wBAAsB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;IACpE,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC,CAMD;AAED,wBAAsB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAQjE;AAED,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAO9D"}

package/dist-server/server/services/mcpOAuth.js

@@ -0,0 +1,264 @@
+/**
+ * MCP OAuth 2.0 + PKCE service for Streamable HTTP servers.
+ *
+ * Flow: discover → register (dynamic) → authorize (popup) → callback → token storage
+ * Spec: MCP Streamable HTTP transport with OAuth as of 2025-03-26
+ */
+import { randomBytes, createHash } from 'node:crypto';
+import { readFile, writeFile, mkdir } from 'node:fs/promises';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const DATA_DIR = join(__dirname, '..', 'data');
+const TOKEN_FILE = join(DATA_DIR, 'mcp-tokens.json');
+const CLIENT_FILE = join(DATA_DIR, 'mcp-clients.json');
+// ── State ──
+// SECURITY FIX: Limit pending OAuth flows to prevent memory exhaustion
+const MAX_PENDING_FLOWS = 100;
+const pendingFlows = new Map();
+// ── Persistence helpers ──
+async function ensureDataDir() {
+    await mkdir(DATA_DIR, { recursive: true });
+}
+async function loadJson(path) {
+    try {
+        return JSON.parse(await readFile(path, 'utf-8'));
+    }
+    catch {
+        return {};
+    }
+}
+async function saveJson(path, data) {
+    await ensureDataDir();
+    // SECURITY FIX: Set secure file permissions (owner read/write only)
+    // TODO: For production use, implement encryption at rest
+    await writeFile(path, JSON.stringify(data, null, 2), { mode: 0o600 });
+}
+// ── PKCE ──
+function generateCodeVerifier() {
+    return randomBytes(32).toString('base64url');
+}
+function generateCodeChallenge(verifier) {
+    return createHash('sha256').update(verifier).digest('base64url');
+}
+// ── Discovery ──
+export async function discoverOAuth(serverUrl) {
+    const base = new URL(serverUrl);
+    // Try MCP-standard well-known path first, then RFC 8414
+    const paths = [
+        `${base.origin}/.well-known/oauth-authorization-server`,
+        `${base.origin}/.well-known/openid-configuration`,
+    ];
+    for (const url of paths) {
+        try {
+            const resp = await fetch(url, { signal: AbortSignal.timeout(10_000) });
+            if (resp.ok)
+                return await resp.json();
+        }
+        catch { /* try next */ }
+    }
+    throw new Error(`OAuth discovery failed for ${serverUrl} — no .well-known endpoint found`);
+}
+// ── Dynamic Client Registration ──
+async function getOrRegisterClient(metadata, serverUrl, redirectUri) {
+    const cache = await loadJson(CLIENT_FILE);
+    if (cache[serverUrl])
+        return cache[serverUrl];
+    if (!metadata.registration_endpoint) {
+        throw new Error(`${serverUrl} does not support Dynamic Client Registration. ` +
+            `Configure a client_id manually in the registry entry.`);
+    }
+    const resp = await fetch(metadata.registration_endpoint, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({
+            client_name: 'Modular Patchbay',
+            redirect_uris: [redirectUri],
+            grant_types: ['authorization_code', 'refresh_token'],
+            response_types: ['code'],
+            token_endpoint_auth_method: 'none', // public client, PKCE
+        }),
+        signal: AbortSignal.timeout(10_000),
+    });
+    if (!resp.ok) {
+        const body = await resp.text();
+        throw new Error(`Client registration failed at ${metadata.registration_endpoint}: ${resp.status} — ${body}`);
+    }
+    const data = await resp.json();
+    const creds = {
+        client_id: data.client_id,
+        client_secret: data.client_secret,
+    };
+    cache[serverUrl] = creds;
+    await saveJson(CLIENT_FILE, cache);
+    return creds;
+}
+// ── Start Auth Flow ──
+export async function startOAuthFlow(serverUrl, redirectUri, preregisteredClientId) {
+    const metadata = await discoverOAuth(serverUrl);
+    let clientCredentials;
+    if (preregisteredClientId) {
+        clientCredentials = { client_id: preregisteredClientId };
+    }
+    else {
+        clientCredentials = await getOrRegisterClient(metadata, serverUrl, redirectUri);
+    }
+    // SECURITY FIX: Clean expired flows before adding new ones
+    for (const [k, v] of pendingFlows) {
+        if (Date.now() - v.createdAt > 600_000)
+            pendingFlows.delete(k);
+    }
+    // SECURITY FIX: Reject new flows if we're at the limit
+    if (pendingFlows.size >= MAX_PENDING_FLOWS) {
+        throw new Error('Too many pending OAuth flows. Please try again later.');
+    }
+    const codeVerifier = generateCodeVerifier();
+    const codeChallenge = generateCodeChallenge(codeVerifier);
+    const state = randomBytes(16).toString('hex');
+    const params = new URLSearchParams({
+        response_type: 'code',
+        client_id: clientCredentials.client_id,
+        redirect_uri: redirectUri,
+        code_challenge: codeChallenge,
+        code_challenge_method: 'S256',
+        state,
+    });
+    if (metadata.scopes_supported?.length) {
+        params.set('scope', metadata.scopes_supported.join(' '));
+    }
+    pendingFlows.set(state, {
+        serverUrl,
+        codeVerifier,
+        clientCredentials,
+        metadata,
+        createdAt: Date.now(),
+    });
+    return {
+        authUrl: `${metadata.authorization_endpoint}?${params}`,
+        state,
+    };
+}
+// ── Handle Callback ──
+export async function handleCallback(code, state, redirectUri) {
+    const flow = pendingFlows.get(state);
+    if (!flow)
+        throw new Error('Unknown or expired OAuth state');
+    pendingFlows.delete(state);
+    const body = {
+        grant_type: 'authorization_code',
+        code,
+        redirect_uri: redirectUri,
+        client_id: flow.clientCredentials.client_id,
+        code_verifier: flow.codeVerifier,
+    };
+    if (flow.clientCredentials.client_secret) {
+        body.client_secret = flow.clientCredentials.client_secret;
+    }
+    const resp = await fetch(flow.metadata.token_endpoint, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+        body: new URLSearchParams(body),
+        signal: AbortSignal.timeout(10_000),
+    });
+    if (!resp.ok) {
+        const errBody = await resp.text();
+        throw new Error(`Token exchange failed: ${resp.status} — ${errBody}`);
+    }
+    const tokenData = await resp.json();
+    const tokenSet = {
+        access_token: tokenData.access_token,
+        refresh_token: tokenData.refresh_token,
+        token_type: tokenData.token_type || 'Bearer',
+        scope: tokenData.scope,
+        expires_at: tokenData.expires_in
+            ? Date.now() + tokenData.expires_in * 1000
+            : undefined,
+    };
+    await storeToken(flow.serverUrl, tokenSet);
+    return { serverUrl: flow.serverUrl };
+}
+// ── Token Storage ──
+async function refreshToken(serverUrl, token) {
+    // We need the client credentials and token endpoint to refresh
+    const clients = await loadJson(CLIENT_FILE);
+    const client = clients[serverUrl];
+    if (!client)
+        throw new Error('No client credentials for refresh');
+    // Re-discover to get token_endpoint
+    const metadata = await discoverOAuth(serverUrl);
+    const body = {
+        grant_type: 'refresh_token',
+        refresh_token: token.refresh_token,
+        client_id: client.client_id,
+    };
+    if (client.client_secret)
+        body.client_secret = client.client_secret;
+    const resp = await fetch(metadata.token_endpoint, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+        body: new URLSearchParams(body),
+        signal: AbortSignal.timeout(10_000),
+    });
+    if (!resp.ok)
+        throw new Error('Token refresh failed: ' + resp.status);
+    const data = await resp.json();
+    const newToken = {
+        access_token: data.access_token,
+        refresh_token: data.refresh_token || token.refresh_token, // keep old refresh if none returned
+        token_type: data.token_type || 'Bearer',
+        scope: data.scope || token.scope,
+        expires_at: data.expires_in ? Date.now() + data.expires_in * 1000 : undefined,
+    };
+    await storeToken(serverUrl, newToken);
+    return newToken.access_token;
+}
+async function storeToken(serverUrl, token) {
+    const tokens = await loadJson(TOKEN_FILE);
+    tokens[serverUrl] = token;
+    await saveJson(TOKEN_FILE, tokens);
+}
+export async function getToken(serverUrl) {
+    const tokens = await loadJson(TOKEN_FILE);
+    const token = tokens[serverUrl];
+    if (!token)
+        return null;
+    // Check expiry with 60s buffer
+    if (token.expires_at && Date.now() > token.expires_at - 60_000) {
+        if (token.refresh_token) {
+            try {
+                return await refreshToken(serverUrl, token);
+            }
+            catch {
+                return null; // refresh failed, need re-auth
+            }
+        }
+        return null;
+    }
+    return token.access_token;
+}
+export async function getConnectionStatus(serverUrl) {
+    const tokens = await loadJson(TOKEN_FILE);
+    const token = tokens[serverUrl];
+    if (!token)
+        return { connected: false };
+    const expired = token.expires_at ? Date.now() > token.expires_at : false;
+    return { connected: !expired, expiresAt: token.expires_at };
+}
+export async function disconnect(serverUrl) {
+    const tokens = await loadJson(TOKEN_FILE);
+    delete tokens[serverUrl];
+    await saveJson(TOKEN_FILE, tokens);
+    const clients = await loadJson(CLIENT_FILE);
+    delete clients[serverUrl];
+    await saveJson(CLIENT_FILE, clients);
+}
+export async function listConnectedServers() {
+    const tokens = await loadJson(TOKEN_FILE);
+    return Object.keys(tokens).filter(url => {
+        const t = tokens[url];
+        if (t.expires_at && Date.now() > t.expires_at)
+            return false;
+        return true;
+    });
+}
+//# sourceMappingURL=mcpOAuth.js.map

package/dist-server/server/services/mcpOAuth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcpOAuth.js","sourceRoot":"","sources":["../../../server/services/mcpOAuth.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;AAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;AACrD,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;AAmCvD,cAAc;AAEd,uEAAuE;AACvE,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,YAAY,GAAG,IAAI,GAAG,EAAuB,CAAC;AAEpD,4BAA4B;AAE5B,KAAK,UAAU,aAAa;IAC1B,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAC7C,CAAC;AAED,KAAK,UAAU,QAAQ,CAAI,IAAY;IACrC,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IAAC,CAAC;IACzD,MAAM,CAAC;QAAC,OAAO,EAAO,CAAC;IAAC,CAAC;AAC3B,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,IAAa;IACjD,MAAM,aAAa,EAAE,CAAC;IACtB,oEAAoE;IACpE,yDAAyD;IACzD,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACxE,CAAC;AAED,aAAa;AAEb,SAAS,oBAAoB;IAC3B,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAgB;IAC7C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AACnE,CAAC;AAED,kBAAkB;AAElB,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,SAAiB;IACnD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IAChC,wDAAwD;IACxD,MAAM,KAAK,GAAG;QACZ,GAAG,IAAI,CAAC,MAAM,yCAAyC;QACvD,GAAG,IAAI,CAAC,MAAM,mCAAmC;KAClD,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACvE,IAAI,IAAI,CAAC,EAAE;gBAAE,OAAO,MAAM,IAAI,CAAC,IAAI,EAAmB,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC;IAC5B,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,8BAA8B,SAAS,kCAAkC,CAAC,CAAC;AAC7F,CAAC;AAED,oCAAoC;AAEpC,KAAK,UAAU,mBAAmB,CAChC,QAAuB,EACvB,SAAiB,EACjB,WAAmB;IAEnB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAoC,WAAW,CAAC,CAAC;IAC7E,IAAI,KAAK,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC,SAAS,CAAC,CAAC;IAE9C,IAAI,CAAC,QAAQ,CAAC,qBAAqB,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CACb,GAAG,SAAS,iDAAiD;YAC7D,uDAAuD,CACxD,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,qBAAqB,EAAE;QACvD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,WAAW,EAAE,kBAAkB;YAC/B,aAAa,EAAE,CAAC,WAAW,CAAC;YAC5B,WAAW,EAAE,CAAC,oBAAoB,EAAE,eAAe,CAAC;YACpD,cAAc,EAAE,CAAC,MAAM,CAAC;YACxB,0BAA0B,EAAE,MAAM,EAAE,sBAAsB;SAC3D,CAAC;QACF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;KACpC,CAAC,CAAC;IAEH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,iCAAiC,QAAQ,CAAC,qBAAqB,KAAK,IAAI,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;IAC/G,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAmD,CAAC;IAChF,MAAM,KAAK,GAAsB;QAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,aAAa,EAAE,IAAI,CAAC,aAAa;KAClC,CAAC;IAEF,KAAK,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC;IACzB,MAAM,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACnC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,wBAAwB;AAExB,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,SAAiB,EACjB,WAAmB,EACnB,qBAA8B;IAE9B,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;IAEhD,IAAI,iBAAoC,CAAC;IACzC,IAAI,qBAAqB,EAAE,CAAC;QAC1B,iBAAiB,GAAG,EAAE,SAAS,EAAE,qBAAqB,EAAE,CAAC;IAC3D,CAAC;SAAM,CAAC;QACN,iBAAiB,GAAG,MAAM,mBAAmB,CAAC,QAAQ,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IAClF,CAAC;IAED,2DAA2D;IAC3D,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,YAAY,EAAE,CAAC;QAClC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,SAAS,GAAG,OAAO;YAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,uDAAuD;IACvD,IAAI,YAAY,CAAC,IAAI,IAAI,iBAAiB,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IAED,MAAM,YAAY,GAAG,oBAAoB,EAAE,CAAC;IAC5C,MAAM,aAAa,GAAG,qBAAqB,CAAC,YAAY,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAE9C,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,aAAa,EAAE,MAAM;QACrB,SAAS,EAAE,iBAAiB,CAAC,SAAS;QACtC,YAAY,EAAE,WAAW;QACzB,cAAc,EAAE,aAAa;QAC7B,qBAAqB,EAAE,MAAM;QAC7B,KAAK;KACN,CAAC,CAAC;IAEH,IAAI,QAAQ,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE;QACtB,SAAS;QACT,YAAY;QACZ,iBAAiB;QACjB,QAAQ;QACR,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC,CAAC;IAEH,OAAO;QACL,OAAO,EAAE,GAAG,QAAQ,CAAC,sBAAsB,IAAI,MAAM,EAAE;QACvD,KAAK;KACN,CAAC;AACJ,CAAC;AAED,wBAAwB;AAExB,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAY,EACZ,KAAa,EACb,WAAmB;IAEnB,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAC7D,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAE3B,MAAM,IAAI,GAA2B;QACnC,UAAU,EAAE,oBAAoB;QAChC,IAAI;QACJ,YAAY,EAAE,WAAW;QACzB,SAAS,EAAE,IAAI,CAAC,iBAAiB,CAAC,SAAS;QAC3C,aAAa,EAAE,IAAI,CAAC,YAAY;KACjC,CAAC;IAEF,IAAI,IAAI,CAAC,iBAAiB,CAAC,aAAa,EAAE,CAAC;QACzC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC;IAC5D,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE;QACrD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;QAChE,IAAI,EAAE,IAAI,eAAe,CAAC,IAAI,CAAC;QAC/B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;KACpC,CAAC,CAAC;IAEH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,CAAC,MAAM,MAAM,OAAO,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,EAMhC,CAAC;IAEF,MAAM,QAAQ,GAAa;QACzB,YAAY,EAAE,SAAS,CAAC,YAAY;QACpC,aAAa,EAAE,SAAS,CAAC,aAAa;QACtC,UAAU,EAAE,SAAS,CAAC,UAAU,IAAI,QAAQ;QAC5C,KAAK,EAAE,SAAS,CAAC,KAAK;QACtB,UAAU,EAAE,SAAS,CAAC,UAAU;YAC9B,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,UAAU,GAAG,IAAI;YAC1C,CAAC,CAAC,SAAS;KACd,CAAC;IAEF,MAAM,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC3C,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;AACvC,CAAC;AAED,sBAAsB;AAEtB,KAAK,UAAU,YAAY,CAAC,SAAiB,EAAE,KAAe;IAC5D,+DAA+D;IAC/D,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAoC,WAAW,CAAC,CAAC;IAC/E,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAElE,oCAAoC;IACpC,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;IAEhD,MAAM,IAAI,GAA2B;QACnC,UAAU,EAAE,eAAe;QAC3B,aAAa,EAAE,KAAK,CAAC,aAAc;QACnC,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC;IACF,IAAI,MAAM,CAAC,aAAa;QAAE,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;IAEpE,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,cAAc,EAAE;QAChD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;QAChE,IAAI,EAAE,IAAI,eAAe,CAAC,IAAI,CAAC;QAC/B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;KACpC,CAAC,CAAC;IAEH,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAEtE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAM3B,CAAC;IAEF,MAAM,QAAQ,GAAa;QACzB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,KAAK,CAAC,aAAa,EAAE,oCAAoC;QAC9F,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,QAAQ;QACvC,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK;QAChC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS;KAC9E,CAAC;IAEF,MAAM,UAAU,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACtC,OAAO,QAAQ,CAAC,YAAY,CAAC;AAC/B,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,SAAiB,EAAE,KAAe;IAC1D,MAAM,MAAM,GAAG,MAAM,QAAQ,CAA2B,UAAU,CAAC,CAAC;IACpE,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC;IAC1B,MAAM,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,SAAiB;IAC9C,MAAM,MAAM,GAAG,MAAM,QAAQ,CAA2B,UAAU,CAAC,CAAC;IACpE,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IAChC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAExB,+BAA+B;IAC/B,IAAI,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,UAAU,GAAG,MAAM,EAAE,CAAC;QAC/D,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,OAAO,MAAM,YAAY,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC,CAAC,+BAA+B;YAC9C,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,CAAC,YAAY,CAAC;AAC5B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,SAAiB;IAIzD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAA2B,UAAU,CAAC,CAAC;IACpE,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IAChC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACxC,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC;IACzE,OAAO,EAAE,SAAS,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;AAC9D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,SAAiB;IAChD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAA2B,UAAU,CAAC,CAAC;IACpE,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC;IACzB,MAAM,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAEnC,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAoC,WAAW,CAAC,CAAC;IAC/E,OAAO,OAAO,CAAC,SAAS,CAAC,CAAC;IAC1B,MAAM,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACxC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAA2B,UAAU,CAAC,CAAC;IACpE,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;QACtC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACtB,IAAI,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU;YAAE,OAAO,KAAK,CAAC;QAC5D,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist-server/server/services/memoryScorer.d.ts

@@ -0,0 +1,19 @@
+import type { ExtractedFact } from './factExtractor.js';
+export interface ScoredFact extends ExtractedFact {
+    score: number;
+}
+export declare function scoreFact(fact: ExtractedFact, query: string, now?: number): number;
+export declare function rankFacts(facts: ExtractedFact[], query: string, limit?: number, now?: number): ExtractedFact[];
+export declare function computeStrength(fact: ExtractedFact, now?: number): number;
+export declare function textSimilarity(a: string, b: string): number;
+export interface ConsolidationResult {
+    kept: ExtractedFact[];
+    pruned: ExtractedFact[];
+    merged: Array<{
+        merged: ExtractedFact;
+        from: ExtractedFact[];
+    }>;
+    promoted: ExtractedFact[];
+}
+export declare function consolidateMemory(facts: ExtractedFact[], now?: number): ConsolidationResult;
+//# sourceMappingURL=memoryScorer.d.ts.map

package/dist-server/server/services/memoryScorer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memoryScorer.d.ts","sourceRoot":"","sources":["../../../server/services/memoryScorer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExD,MAAM,WAAW,UAAW,SAAQ,aAAa;IAC/C,KAAK,EAAE,MAAM,CAAC;CACf;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAqBlF;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,aAAa,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,aAAa,EAAE,CAsB9G;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,aAAa,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAezE;AAED,wBAAgB,cAAc,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAgB3D;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,aAAa,EAAE,CAAC;IACtB,MAAM,EAAE,aAAa,EAAE,CAAC;IACxB,MAAM,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,aAAa,CAAC;QAAC,IAAI,EAAE,aAAa,EAAE,CAAA;KAAE,CAAC,CAAC;IAChE,QAAQ,EAAE,aAAa,EAAE,CAAC;CAC3B;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,aAAa,EAAE,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,mBAAmB,CA2F3F"}