sandstream-kit 1.0.0

package/dist/bumblebee.d.ts

@@ -0,0 +1,143 @@
+/**
+ * Bumblebee — managed supply-chain exposure scanner.
+ *
+ * Downloads, verifies, and caches a pinned release of perplexityai/bumblebee
+ * (a read-only inventory scanner that flags installed packages matching known
+ * supply-chain compromise catalogs), then runs it against the machine/project.
+ *
+ * No Go toolchain is required: we fetch the prebuilt static binary from GitHub
+ * releases, verify it against a checksum embedded in this file, and cache it
+ * under ~/.kit/tools/bumblebee/<version>/. The release tarball also bundles
+ * the official threat_intel/ exposure catalogs, which --exposure-catalog reads.
+ */
+/** Raised when a downloaded artifact fails SHA-256 verification (possible tampering). */
+export declare class IntegrityError extends Error {
+    constructor(message: string);
+}
+/** Why a scanner install could not be produced. `integrity` is a security event. */
+export type EnsureFailureKind = "unsupported" | "config" | "network" | "integrity";
+export interface EnsureResult {
+    install?: ScannerInstall;
+    reason?: string;
+    kind?: EnsureFailureKind;
+}
+/**
+ * Pinned bumblebee release. Bump deliberately, and update TARBALL_CHECKSUMS to
+ * match the release's checksums.txt — the two MUST move together.
+ */
+export declare const BUMBLEBEE_VERSION = "0.1.1";
+/**
+ * SHA-256 of each release tarball, copied from the pinned release's
+ * checksums.txt. Embedding the digests here (rather than trusting a fetched
+ * checksums.txt) means tampering with a download alone cannot pass
+ * verification — an attacker would also have to compromise the published
+ * kit package itself.
+ */
+export declare const TARBALL_CHECKSUMS: Record<string, string>;
+export interface PlatformTarget {
+    os: "linux" | "darwin";
+    arch: "amd64" | "arm64";
+    assetName: string;
+    checksum: string;
+}
+/**
+ * Map Node's process.platform/arch to a bumblebee release asset.
+ * Returns null on unsupported platforms (bumblebee ships linux/darwin only).
+ */
+export declare function resolveTarget(platform?: NodeJS.Platform, arch?: string, version?: string): PlatformTarget | null;
+export declare function sha256(data: Buffer | Uint8Array): string;
+/**
+ * Clears the cached bumblebee binary so the next scan re-downloads + re-
+ * verifies. Use when a legitimate rebuild has invalidated the pinned
+ * checksum, or to recover from a transient corruption. Caller is expected
+ * to confirm intent — this is destructive in the sense that any modified
+ * local build is lost.
+ */
+export declare function clearBumblebeeCache(): Promise<{
+    removed: boolean;
+    path: string;
+}>;
+export interface ScannerInstall {
+    /** Path to the bumblebee executable. */
+    binPath: string;
+    /** Directory of *.json exposure catalogs (threat_intel). */
+    catalogDir: string;
+}
+export interface EnsureOptions {
+    /** Allow downloading the binary if it is not already cached. Default true. */
+    allowDownload?: boolean;
+    /** Network timeout for the download, ms. Default 120_000. */
+    timeoutMs?: number;
+    /** Stream to write a one-time "downloading" notice to. Default process.stderr. */
+    notice?: (message: string) => void;
+}
+/**
+ * Resolve a usable bumblebee install: an explicit override, a cached copy, or
+ * a freshly downloaded-and-verified release. Returns the install on success,
+ * or a human-readable `reason` when unavailable (never throws).
+ */
+export declare function ensureBumblebee(opts?: EnsureOptions): Promise<EnsureResult>;
+export interface BumblebeeFinding {
+    severity: string;
+    catalogId: string;
+    catalogName: string;
+    ecosystem: string;
+    packageName: string;
+    version: string;
+    sourceFile: string;
+    evidence: string;
+}
+export interface ScanOutcome {
+    /** scan_summary.status, e.g. "complete". "unknown" if no summary was seen. */
+    status: string;
+    timedOut: boolean;
+    summarySeen: boolean;
+    findings: BumblebeeFinding[];
+    /** Total packages inspected (emitted + suppressed). */
+    packagesScanned: number;
+}
+/**
+ * Parse bumblebee NDJSON stdout into findings + summary.
+ * Blank or unparseable lines are ignored. Diagnostics (on stderr) are not seen
+ * here. bumblebee exits 0 even when findings are present, so callers must judge
+ * exposure from the parsed findings, never from the process exit code.
+ */
+export declare function parseScanOutput(stdout: string): ScanOutcome;
+/**
+ * Highest-severity label among findings (preferring the original casing),
+ * or null when there are none.
+ */
+export declare function maxSeverity(findings: BumblebeeFinding[]): string | null;
+export interface CatalogStaleness {
+    stale: boolean;
+    ageDays: number;
+}
+/** Default age (days) after which the bundled catalogs are considered stale. */
+export declare const CATALOG_STALE_AFTER_DAYS = 60;
+/** Pure staleness check: how old the newest catalog is, and whether it crosses the threshold. */
+export declare function isCatalogStale(newestMtimeMs: number, nowMs: number, thresholdDays?: number): CatalogStaleness;
+/**
+ * Newest modification time (ms) among the *.json catalogs in `dir`, or null if
+ * none are found / the directory is unreadable. tar -xzf preserves the release
+ * file mtimes, so this reflects when the catalogs were authored upstream.
+ */
+export declare function newestCatalogMtime(dir: string): Promise<number | null>;
+export interface ScanRequest {
+    install: ScannerInstall;
+    /** bumblebee profile: baseline | project | deep. */
+    profile: string;
+    /** Explicit roots to scan (required for deep; optional otherwise). */
+    roots: string[];
+    /** Process timeout, ms. Default 120_000. */
+    timeoutMs?: number;
+    /** bumblebee --max-duration value (wall-clock cap). Default "90s". */
+    maxDuration?: string;
+}
+/**
+ * Run a bumblebee scan in findings-only mode against the bundled catalogs.
+ * Returns the parsed outcome, or an `error` string on operational failure.
+ */
+export declare function runScan(req: ScanRequest): Promise<{
+    outcome?: ScanOutcome;
+    error?: string;
+}>;

package/dist/bumblebee.js

@@ -0,0 +1,384 @@
+/**
+ * Bumblebee — managed supply-chain exposure scanner.
+ *
+ * Downloads, verifies, and caches a pinned release of perplexityai/bumblebee
+ * (a read-only inventory scanner that flags installed packages matching known
+ * supply-chain compromise catalogs), then runs it against the machine/project.
+ *
+ * No Go toolchain is required: we fetch the prebuilt static binary from GitHub
+ * releases, verify it against a checksum embedded in this file, and cache it
+ * under ~/.kit/tools/bumblebee/<version>/. The release tarball also bundles
+ * the official threat_intel/ exposure catalogs, which --exposure-catalog reads.
+ */
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+import { createHash } from "node:crypto";
+import { writeFile, mkdir, mkdtemp, rm, chmod, access, rename, readdir, stat, } from "node:fs/promises";
+import { homedir } from "node:os";
+import { join } from "node:path";
+const exec = promisify(execFile);
+/** Raised when a downloaded artifact fails SHA-256 verification (possible tampering). */
+export class IntegrityError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "IntegrityError";
+    }
+}
+/**
+ * Pinned bumblebee release. Bump deliberately, and update TARBALL_CHECKSUMS to
+ * match the release's checksums.txt — the two MUST move together.
+ */
+export const BUMBLEBEE_VERSION = "0.1.1";
+const RELEASE_BASE_URL = "https://github.com/perplexityai/bumblebee/releases/download";
+/**
+ * SHA-256 of each release tarball, copied from the pinned release's
+ * checksums.txt. Embedding the digests here (rather than trusting a fetched
+ * checksums.txt) means tampering with a download alone cannot pass
+ * verification — an attacker would also have to compromise the published
+ * kit package itself.
+ */
+export const TARBALL_CHECKSUMS = {
+    "bumblebee_0.1.1_darwin_amd64.tar.gz": "dd3b2573a974a2786f58215483420fa11cf62b39ff4032693f1440575940dc25",
+    "bumblebee_0.1.1_darwin_arm64.tar.gz": "dc0a620e54e85f998c2280b0323763c342973a25eda475d8036d16b01820a2bf",
+    "bumblebee_0.1.1_linux_amd64.tar.gz": "0ef1c56c85a67c10f7211883c0eb5fb902de705cc30bbca0bc6f4d60941547da",
+    "bumblebee_0.1.1_linux_arm64.tar.gz": "41aad0296bb6c88e746b237ed32eaa3b9b93c48770a51cd66f736f8a4d07a7d1",
+};
+/**
+ * Map Node's process.platform/arch to a bumblebee release asset.
+ * Returns null on unsupported platforms (bumblebee ships linux/darwin only).
+ */
+export function resolveTarget(platform = process.platform, arch = process.arch, version = BUMBLEBEE_VERSION) {
+    const os = platform === "linux" ? "linux" : platform === "darwin" ? "darwin" : null;
+    const a = arch === "x64" ? "amd64" : arch === "arm64" ? "arm64" : null;
+    if (!os || !a)
+        return null;
+    const assetName = `bumblebee_${version}_${os}_${a}.tar.gz`;
+    const checksum = TARBALL_CHECKSUMS[assetName];
+    if (!checksum)
+        return null;
+    return { os, arch: a, assetName, checksum };
+}
+export function sha256(data) {
+    return createHash("sha256").update(data).digest("hex");
+}
+/** F3 — stream-hash a file on disk. Used to re-verify cached scanner binary. */
+async function sha256File(filePath) {
+    const { createReadStream } = await import("node:fs");
+    const hash = createHash("sha256");
+    return new Promise((resolveHash, reject) => {
+        const stream = createReadStream(filePath);
+        stream.on("data", (chunk) => hash.update(chunk));
+        stream.on("end", () => resolveHash(hash.digest("hex")));
+        stream.on("error", reject);
+    });
+}
+async function pathExists(p) {
+    try {
+        await access(p);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function cacheParent() {
+    return join(homedir(), ".kit", "tools", "bumblebee");
+}
+function cacheRoot(version = BUMBLEBEE_VERSION) {
+    return join(cacheParent(), version);
+}
+/**
+ * Clears the cached bumblebee binary so the next scan re-downloads + re-
+ * verifies. Use when a legitimate rebuild has invalidated the pinned
+ * checksum, or to recover from a transient corruption. Caller is expected
+ * to confirm intent — this is destructive in the sense that any modified
+ * local build is lost.
+ */
+export async function clearBumblebeeCache() {
+    const path = cacheParent();
+    try {
+        await access(path);
+    }
+    catch {
+        return { removed: false, path };
+    }
+    await rm(path, { recursive: true, force: true });
+    return { removed: true, path };
+}
+/**
+ * Resolve a usable bumblebee install: an explicit override, a cached copy, or
+ * a freshly downloaded-and-verified release. Returns the install on success,
+ * or a human-readable `reason` when unavailable (never throws).
+ */
+export async function ensureBumblebee(opts = {}) {
+    // Explicit override for users who manage their own binary/catalog.
+    const envBin = process.env.KIT_BUMBLEBEE_BIN;
+    if (envBin) {
+        if (!(await pathExists(envBin))) {
+            return {
+                kind: "config",
+                reason: `KIT_BUMBLEBEE_BIN points to a missing file: ${envBin}`,
+            };
+        }
+        const catalogDir = process.env.KIT_BUMBLEBEE_CATALOG || join(cacheRoot(), "threat_intel");
+        return { install: { binPath: envBin, catalogDir } };
+    }
+    const target = resolveTarget();
+    if (!target) {
+        return {
+            kind: "unsupported",
+            reason: `unsupported platform (${process.platform}/${process.arch}); bumblebee ships linux/darwin on amd64/arm64`,
+        };
+    }
+    const root = cacheRoot();
+    const binPath = join(root, "bumblebee");
+    const catalogDir = join(root, "threat_intel");
+    if ((await pathExists(binPath)) && (await pathExists(catalogDir))) {
+        // F3 — re-verify the cached binary's SHA-256 against the pinned checksum
+        // before reuse. Catches tampering or accidental corruption since download.
+        try {
+            const actual = await sha256File(binPath);
+            if (actual !== target.checksum) {
+                return {
+                    kind: "integrity",
+                    reason: `cached binary checksum mismatch (expected ${target.checksum}, got ${actual}); clear ~/.kit/tools/bumblebee and retry`,
+                };
+            }
+        }
+        catch (err) {
+            return {
+                kind: "integrity",
+                reason: `cannot read cached binary for verification: ${err instanceof Error ? err.message : String(err)}`,
+            };
+        }
+        return { install: { binPath, catalogDir } };
+    }
+    if (opts.allowDownload === false) {
+        return {
+            kind: "network",
+            reason: "scanner not cached and downloads are disabled (KIT_NO_DOWNLOAD)",
+        };
+    }
+    try {
+        const notice = opts.notice ?? ((m) => process.stderr.write(m + "\n"));
+        notice(`kit: downloading supply-chain scanner bumblebee v${BUMBLEBEE_VERSION} (one-time)…`);
+        await downloadAndInstall(target, root, opts.timeoutMs ?? 120_000);
+        return { install: { binPath, catalogDir } };
+    }
+    catch (err) {
+        // A checksum mismatch is a potential tampering event — surface it distinctly
+        // (callers escalate to a hard failure) rather than as a routine "unavailable".
+        const isIntegrity = err instanceof IntegrityError;
+        return {
+            kind: isIntegrity ? "integrity" : "network",
+            reason: `${isIntegrity ? "integrity check failed" : "download failed"}: ${err instanceof Error ? err.message : String(err)}`,
+        };
+    }
+}
+async function downloadAndInstall(target, root, timeoutMs) {
+    const url = `${RELEASE_BASE_URL}/v${BUMBLEBEE_VERSION}/${target.assetName}`;
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), timeoutMs);
+    let buf;
+    try {
+        const res = await fetch(url, { signal: controller.signal, redirect: "follow" });
+        if (!res.ok) {
+            throw new Error(`HTTP ${res.status} fetching ${url}`);
+        }
+        // Even though the checksum below is authoritative for integrity, refuse a
+        // redirect that downgraded us off HTTPS before trusting the body.
+        if (!res.url.startsWith("https:")) {
+            throw new Error(`refusing non-https download URL after redirects: ${res.url}`);
+        }
+        buf = Buffer.from(await res.arrayBuffer());
+    }
+    finally {
+        clearTimeout(timer);
+    }
+    const digest = sha256(buf);
+    if (digest !== target.checksum) {
+        throw new IntegrityError(`checksum mismatch for ${target.assetName}: expected ${target.checksum}, got ${digest}`);
+    }
+    // Stage inside the cache parent (same filesystem) so the final rename is
+    // atomic, then swap it into place. mkdtemp gives a random suffix to avoid a
+    // symlink race on a predictable staging path.
+    await mkdir(cacheParent(), { recursive: true });
+    const staging = await mkdtemp(join(cacheParent(), ".tmp-"));
+    try {
+        const tarPath = join(staging, target.assetName);
+        await writeFile(tarPath, buf);
+        // bumblebee tarballs extract flat: ./bumblebee, ./threat_intel/, LICENSE, README.md
+        await exec("tar", ["-xzf", tarPath, "-C", staging], { timeout: 60_000 });
+        const stagedBin = join(staging, "bumblebee");
+        const stagedCatalog = join(staging, "threat_intel");
+        if (!(await pathExists(stagedBin))) {
+            throw new Error("extracted archive is missing the bumblebee binary");
+        }
+        if (!(await pathExists(stagedCatalog))) {
+            throw new Error("extracted archive is missing threat_intel catalogs");
+        }
+        await chmod(stagedBin, 0o755);
+        await rm(tarPath, { force: true });
+        await rm(root, { recursive: true, force: true });
+        await rename(staging, root);
+    }
+    catch (err) {
+        await rm(staging, { recursive: true, force: true }).catch(() => { });
+        throw err;
+    }
+}
+function str(rec, key) {
+    const v = rec[key];
+    return typeof v === "string" ? v : "";
+}
+function num(v) {
+    return typeof v === "number" && Number.isFinite(v) ? v : 0;
+}
+/**
+ * Parse bumblebee NDJSON stdout into findings + summary.
+ * Blank or unparseable lines are ignored. Diagnostics (on stderr) are not seen
+ * here. bumblebee exits 0 even when findings are present, so callers must judge
+ * exposure from the parsed findings, never from the process exit code.
+ */
+export function parseScanOutput(stdout) {
+    const outcome = {
+        status: "unknown",
+        timedOut: false,
+        summarySeen: false,
+        findings: [],
+        packagesScanned: 0,
+    };
+    for (const line of stdout.split("\n")) {
+        const trimmed = line.trim();
+        if (!trimmed)
+            continue;
+        let rec;
+        try {
+            rec = JSON.parse(trimmed);
+        }
+        catch {
+            continue;
+        }
+        if (rec.record_type === "finding") {
+            outcome.findings.push({
+                severity: str(rec, "severity") || "unknown",
+                catalogId: str(rec, "catalog_id"),
+                catalogName: str(rec, "catalog_name"),
+                ecosystem: str(rec, "ecosystem"),
+                packageName: str(rec, "package_name") || str(rec, "normalized_name"),
+                version: str(rec, "version"),
+                sourceFile: str(rec, "source_file"),
+                evidence: str(rec, "evidence"),
+            });
+        }
+        else if (rec.record_type === "scan_summary") {
+            outcome.summarySeen = true;
+            outcome.status = str(rec, "status") || "unknown";
+            outcome.timedOut = rec.timed_out === true;
+            const emitted = num(rec.package_records_emitted);
+            const suppressed = num(rec.package_records_suppressed);
+            const counts = rec.counts;
+            outcome.packagesScanned =
+                emitted + suppressed || num(counts?.package);
+        }
+    }
+    return outcome;
+}
+const SEVERITY_RANK = {
+    critical: 4,
+    high: 3,
+    medium: 2,
+    low: 1,
+};
+/**
+ * Highest-severity label among findings (preferring the original casing),
+ * or null when there are none.
+ */
+export function maxSeverity(findings) {
+    let best = null;
+    let bestRank = -1;
+    for (const f of findings) {
+        const rank = SEVERITY_RANK[f.severity.toLowerCase()] ?? 0;
+        if (rank > bestRank) {
+            bestRank = rank;
+            best = f.severity;
+        }
+    }
+    return best;
+}
+/** Default age (days) after which the bundled catalogs are considered stale. */
+export const CATALOG_STALE_AFTER_DAYS = 60;
+/** Pure staleness check: how old the newest catalog is, and whether it crosses the threshold. */
+export function isCatalogStale(newestMtimeMs, nowMs, thresholdDays = CATALOG_STALE_AFTER_DAYS) {
+    const ageDays = Math.max(0, Math.floor((nowMs - newestMtimeMs) / 86_400_000));
+    return { stale: ageDays > thresholdDays, ageDays };
+}
+/**
+ * Newest modification time (ms) among the *.json catalogs in `dir`, or null if
+ * none are found / the directory is unreadable. tar -xzf preserves the release
+ * file mtimes, so this reflects when the catalogs were authored upstream.
+ */
+export async function newestCatalogMtime(dir) {
+    let entries;
+    try {
+        entries = await readdir(dir);
+    }
+    catch {
+        return null;
+    }
+    let newest = null;
+    for (const name of entries) {
+        if (!name.endsWith(".json"))
+            continue;
+        try {
+            const s = await stat(join(dir, name));
+            if (newest === null || s.mtimeMs > newest)
+                newest = s.mtimeMs;
+        }
+        catch {
+            // skip unreadable entries
+        }
+    }
+    return newest;
+}
+/**
+ * Run a bumblebee scan in findings-only mode against the bundled catalogs.
+ * Returns the parsed outcome, or an `error` string on operational failure.
+ */
+export async function runScan(req) {
+    const args = [
+        "scan",
+        "-profile",
+        req.profile,
+        "-exposure-catalog",
+        req.install.catalogDir,
+        "-findings-only",
+        "-output",
+        "stdout",
+        "-max-duration",
+        req.maxDuration ?? "90s",
+    ];
+    for (const root of req.roots) {
+        args.push("-root", root);
+    }
+    try {
+        const { stdout } = await exec(req.install.binPath, args, {
+            timeout: req.timeoutMs ?? 120_000,
+            maxBuffer: 32 * 1024 * 1024,
+        });
+        return { outcome: parseScanOutput(stdout) };
+    }
+    catch (err) {
+        // bumblebee may exit non-zero on operational error; if it still produced a
+        // summary, the parsed output is authoritative.
+        if (err && typeof err === "object" && "stdout" in err) {
+            const outcome = parseScanOutput(String(err.stdout ?? ""));
+            if (outcome.summarySeen)
+                return { outcome };
+        }
+        return {
+            error: err instanceof Error ? err.message : String(err),
+        };
+    }
+}
+//# sourceMappingURL=bumblebee.js.map

package/dist/bumblebee.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bumblebee.js","sourceRoot":"","sources":["../src/bumblebee.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,SAAS,EACT,KAAK,EACL,OAAO,EACP,EAAE,EACF,KAAK,EACL,MAAM,EACN,MAAM,EACN,OAAO,EACP,IAAI,GACL,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAEjC,yFAAyF;AACzF,MAAM,OAAO,cAAe,SAAQ,KAAK;IACvC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAWD;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAEzC,MAAM,gBAAgB,GACpB,6DAA6D,CAAC;AAEhE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA2B;IACvD,qCAAqC,EACnC,kEAAkE;IACpE,qCAAqC,EACnC,kEAAkE;IACpE,oCAAoC,EAClC,kEAAkE;IACpE,oCAAoC,EAClC,kEAAkE;CACrE,CAAC;AASF;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,WAA4B,OAAO,CAAC,QAAQ,EAC5C,OAAe,OAAO,CAAC,IAAI,EAC3B,UAAkB,iBAAiB;IAEnC,MAAM,EAAE,GACN,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3E,MAAM,CAAC,GAAG,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IACvE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAE3B,MAAM,SAAS,GAAG,aAAa,OAAO,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;IAC3D,MAAM,QAAQ,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC9C,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAE3B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,IAAyB;IAC9C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED,gFAAgF;AAChF,KAAK,UAAU,UAAU,CAAC,QAAgB;IACxC,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,OAAO,IAAI,OAAO,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE;QACzC,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACjD,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACxD,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,CAAS;IACjC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,WAAW;IAClB,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,SAAS,CAAC,OAAO,GAAG,iBAAiB;IAC5C,OAAO,IAAI,CAAC,WAAW,EAAE,EAAE,OAAO,CAAC,CAAC;AACtC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAClC,CAAC;IACD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACjC,CAAC;AAkBD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAsB,EAAE;IAExB,mEAAmE;IACnE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAC7C,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YAChC,OAAO;gBACL,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE,+CAA+C,MAAM,EAAE;aAChE,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GACd,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,IAAI,CAAC,SAAS,EAAE,EAAE,cAAc,CAAC,CAAC;QACzE,OAAO,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC;IACtD,CAAC;IAED,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,IAAI,EAAE,aAAa;YACnB,MAAM,EAAE,yBAAyB,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,gDAAgD;SAClH,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;IACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACxC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAE9C,IAAI,CAAC,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QAClE,yEAAyE;QACzE,2EAA2E;QAC3E,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;YACzC,IAAI,MAAM,KAAK,MAAM,CAAC,QAAQ,EAAE,CAAC;gBAC/B,OAAO;oBACL,IAAI,EAAE,WAAW;oBACjB,MAAM,EAAE,6CAA6C,MAAM,CAAC,QAAQ,SAAS,MAAM,2CAA2C;iBAC/H,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,IAAI,EAAE,WAAW;gBACjB,MAAM,EAAE,+CAA+C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;aAC1G,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,CAAC;IAC9C,CAAC;IAED,IAAI,IAAI,CAAC,aAAa,KAAK,KAAK,EAAE,CAAC;QACjC,OAAO;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EACJ,iEAAiE;SACpE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;QAC9E,MAAM,CACJ,oDAAoD,iBAAiB,cAAc,CACpF,CAAC;QACF,MAAM,kBAAkB,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,CAAC;QAClE,OAAO,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,CAAC;IAC9C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,6EAA6E;QAC7E,+EAA+E;QAC/E,MAAM,WAAW,GAAG,GAAG,YAAY,cAAc,CAAC;QAClD,OAAO;YACL,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;YAC3C,MAAM,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,iBAAiB,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;SAC7H,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,MAAsB,EACtB,IAAY,EACZ,SAAiB;IAEjB,MAAM,GAAG,GAAG,GAAG,gBAAgB,KAAK,iBAAiB,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;IAE5E,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAC9D,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;QAChF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,MAAM,aAAa,GAAG,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,0EAA0E;QAC1E,kEAAkE;QAClE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,oDAAoD,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;IAC7C,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,MAAM,KAAK,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,cAAc,CACtB,yBAAyB,MAAM,CAAC,SAAS,cAAc,MAAM,CAAC,QAAQ,SAAS,MAAM,EAAE,CACxF,CAAC;IACJ,CAAC;IAED,yEAAyE;IACzE,4EAA4E;IAC5E,8CAA8C;IAC9C,MAAM,KAAK,CAAC,WAAW,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5D,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QAChD,MAAM,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC9B,oFAAoF;QACpF,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QAEzE,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAC7C,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QACpD,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC9B,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAEnC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,MAAM,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACpE,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAuBD,SAAS,GAAG,CAAC,GAA4B,EAAE,GAAW;IACpD,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACxC,CAAC;AAED,SAAS,GAAG,CAAC,CAAU;IACrB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,MAAM,OAAO,GAAgB;QAC3B,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,KAAK;QAClB,QAAQ,EAAE,EAAE;QACZ,eAAe,EAAE,CAAC;KACnB,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO;YAAE,SAAS;QAEvB,IAAI,GAA4B,CAAC;QACjC,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAA4B,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QAED,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACpB,QAAQ,EAAE,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,SAAS;gBAC3C,SAAS,EAAE,GAAG,CAAC,GAAG,EAAE,YAAY,CAAC;gBACjC,WAAW,EAAE,GAAG,CAAC,GAAG,EAAE,cAAc,CAAC;gBACrC,SAAS,EAAE,GAAG,CAAC,GAAG,EAAE,WAAW,CAAC;gBAChC,WAAW,EAAE,GAAG,CAAC,GAAG,EAAE,cAAc,CAAC,IAAI,GAAG,CAAC,GAAG,EAAE,iBAAiB,CAAC;gBACpE,OAAO,EAAE,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC;gBAC5B,UAAU,EAAE,GAAG,CAAC,GAAG,EAAE,aAAa,CAAC;gBACnC,QAAQ,EAAE,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC;aAC/B,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,GAAG,CAAC,WAAW,KAAK,cAAc,EAAE,CAAC;YAC9C,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;YAC3B,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,SAAS,CAAC;YACjD,OAAO,CAAC,QAAQ,GAAG,GAAG,CAAC,SAAS,KAAK,IAAI,CAAC;YAC1C,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;YACjD,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;YACvD,MAAM,MAAM,GAAG,GAAG,CAAC,MAA6C,CAAC;YACjE,OAAO,CAAC,eAAe;gBACrB,OAAO,GAAG,UAAU,IAAI,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,aAAa,GAA2B;IAC5C,QAAQ,EAAE,CAAC;IACX,IAAI,EAAE,CAAC;IACP,MAAM,EAAE,CAAC;IACT,GAAG,EAAE,CAAC;CACP,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,QAA4B;IACtD,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAC;IAClB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,IAAI,GAAG,QAAQ,EAAE,CAAC;YACpB,QAAQ,GAAG,IAAI,CAAC;YAChB,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAOD,gFAAgF;AAChF,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,CAAC;AAE3C,iGAAiG;AACjG,MAAM,UAAU,cAAc,CAC5B,aAAqB,EACrB,KAAa,EACb,gBAAwB,wBAAwB;IAEhD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,aAAa,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC;IAC9E,OAAO,EAAE,KAAK,EAAE,OAAO,GAAG,aAAa,EAAE,OAAO,EAAE,CAAC;AACrD,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAAW;IAClD,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,SAAS;QACtC,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;YACtC,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,OAAO,GAAG,MAAM;gBAAE,MAAM,GAAG,CAAC,CAAC,OAAO,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,0BAA0B;QAC5B,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAcD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,GAAgB;IAEhB,MAAM,IAAI,GAAG;QACX,MAAM;QACN,UAAU;QACV,GAAG,CAAC,OAAO;QACX,mBAAmB;QACnB,GAAG,CAAC,OAAO,CAAC,UAAU;QACtB,gBAAgB;QAChB,SAAS;QACT,QAAQ;QACR,eAAe;QACf,GAAG,CAAC,WAAW,IAAI,KAAK;KACzB,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE;YACvD,OAAO,EAAE,GAAG,CAAC,SAAS,IAAI,OAAO;YACjC,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;SAC5B,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;IAC9C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,2EAA2E;QAC3E,+CAA+C;QAC/C,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,QAAQ,IAAI,GAAG,EAAE,CAAC;YACtD,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAE,GAA4B,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;YACpF,IAAI,OAAO,CAAC,WAAW;gBAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QAC9C,CAAC;QACD,OAAO;YACL,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACxD,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/cache-manager.d.ts

@@ -0,0 +1,97 @@
+export interface CacheEntry<T = unknown> {
+    key: string;
+    value: T;
+    ttl?: number;
+    createdAt: string;
+    expiresAt?: string;
+    hits: number;
+}
+export interface CacheStats {
+    totalSize: number;
+    totalEntries: number;
+    hitRate: number;
+    evictions: number;
+}
+export interface CacheConfig {
+    maxSize: number;
+    defaultTtl: number;
+    strategy: "lru" | "lfu" | "fifo";
+}
+export declare class CacheManager {
+    private cache;
+    private hits;
+    private misses;
+    private evictions;
+    private config;
+    constructor(config?: CacheConfig);
+    /**
+     * Set cache entry.
+     */
+    set<T>(key: string, value: T, ttl?: number): void;
+    /**
+     * Get cache entry.
+     */
+    get<T>(key: string): T | null;
+    /**
+     * Check if key exists.
+     */
+    has(key: string): boolean;
+    /**
+     * Delete cache entry.
+     */
+    delete(key: string): boolean;
+    /**
+     * Clear all cache entries.
+     */
+    clear(): void;
+    /**
+     * Invalidate entries by pattern.
+     */
+    invalidatePattern(pattern: string): number;
+    /**
+     * Invalidate entries by prefix.
+     */
+    invalidatePrefix(prefix: string): number;
+    /**
+     * Clear expired entries.
+     */
+    cleanExpired(): number;
+    private evictEntry;
+    private findLRUKey;
+    private findLFUKey;
+    private findFIFOKey;
+    /**
+     * Get cache statistics.
+     */
+    getStats(): CacheStats;
+    /**
+     * Get hit count.
+     */
+    getHits(): number;
+    /**
+     * Get miss count.
+     */
+    getMisses(): number;
+    /**
+     * Get hit rate percentage.
+     */
+    getHitRate(): number;
+    /**
+     * Get all cache keys.
+     */
+    getKeys(): string[];
+    /**
+     * Get cache entry details.
+     */
+    getEntry<T>(key: string): CacheEntry<T> | null;
+    /**
+     * Get all entries.
+     */
+    getAllEntries(): CacheEntry[];
+    /**
+     * Get size in bytes (rough estimate).
+     */
+    getApproximateSize(): number;
+    getCacheMap(): Map<string, CacheEntry>;
+    getConfig(): CacheConfig;
+}