sdlc-agent-4-enterprise-server 1.0.0

package/dist/modules/memory/llm/TagAnalyzerService.js

@@ -0,0 +1,198 @@
+/**
+ * TagAnalyzerService — LLM-based automatic tag assignment for KB entries.
+ * Called internally during mem_ingest pipeline (NOT an MCP tool).
+ * Zero context token cost for agents.
+ */
+const DEFAULT_TAXONOMY = {
+    'business-domain': [
+        'authentication', 'payment', 'notification', 'reporting',
+        'user-management', 'scheduling', 'integration', 'messaging',
+        'configuration', 'admin-portal', 'knowledge-base', 'search',
+    ],
+    'technical': [
+        'architecture', 'api-design', 'database', 'security',
+        'performance', 'testing', 'caching', 'logging', 'monitoring',
+        'mcp', 'llm', 'embedding', 'onnx', 'vector-search', 'graph',
+        'websocket', 'sse', 'streaming', 'docker', 'ci-cd',
+    ],
+    'sdlc-phase': [
+        'requirements', 'design', 'implementation', 'testing', 'deployment',
+        'code-review', 'documentation', 'planning', 'retrospective',
+    ],
+    'document-type': [
+        'decision', 'error-pattern', 'procedure', 'architecture-note',
+        'meeting-note', 'tutorial', 'configuration', 'bugfix',
+        'feature-spec', 'api-contract', 'user-guide', 'release-note',
+    ],
+    'agent-workflow': [
+        'multi-agent', 'orchestration', 'pipeline', 'tool-call',
+        'prompt-engineering', 'context-management', 'memory-kb',
+        'jira', 'workflow', 'state-machine', 'transition',
+    ],
+    'code-pattern': [
+        'refactoring', 'design-pattern', 'anti-pattern', 'migration',
+        'dependency', 'module-structure', 'interface-design',
+        'error-handling', 'validation', 'serialization',
+    ],
+    'priority': ['critical', 'high', 'medium', 'low'],
+};
+const KNOWN_KEYWORDS = {
+    'auth': 'authentication', 'jwt': 'authentication', 'oauth': 'authentication',
+    'login': 'authentication', 'session': 'authentication', 'token': 'authentication',
+    'payment': 'payment', 'billing': 'payment', 'invoice': 'payment',
+    'api': 'api-design', 'rest': 'api-design', 'graphql': 'api-design', 'endpoint': 'api-design',
+    'database': 'database', 'sql': 'database', 'migration': 'database', 'sqlite': 'database',
+    'cache': 'caching', 'redis': 'caching', 'memcached': 'caching',
+    'security': 'security', 'vulnerability': 'security', 'xss': 'security',
+    'test': 'testing', 'unit test': 'testing', 'integration test': 'testing', 'e2e': 'testing',
+    'deploy': 'deployment', 'ci/cd': 'ci-cd', 'docker': 'docker', 'pipeline': 'pipeline',
+    'performance': 'performance', 'latency': 'performance', 'throughput': 'performance',
+    'mcp': 'mcp', 'model context protocol': 'mcp', 'tool call': 'tool-call',
+    'llm': 'llm', 'embedding': 'embedding', 'vector': 'vector-search',
+    'jira': 'jira', 'ticket': 'jira', 'sprint': 'planning',
+    'agent': 'multi-agent', 'orchestrat': 'orchestration', 'workflow': 'workflow',
+    'langgraph': 'orchestration', 'state machine': 'state-machine',
+    'architecture': 'architecture', 'design pattern': 'design-pattern',
+    'refactor': 'refactoring', 'bug': 'error-pattern', 'fix': 'bugfix',
+    'config': 'configuration', 'setting': 'configuration',
+};
+const SYSTEM_PROMPT = `You tag knowledge entries with SPECIFIC feature names. Output ONLY JSON.
+
+WRONG (too generic): "testing", "api-design", "configuration", "architecture", "llm", "bugfix"
+RIGHT (specific features): "admin-panel-routing-fix", "llm-config-ui-dropdown", "kb-entry-auto-tagging", "jira-ticket-comment-sync"
+
+Examples:
+Content: "Fixed admin page routing where sidebar items show wrong page"
+Output: {"tags":[{"tag":"admin-panel-page-routing","category":"feature","confidence":0.95,"reason":"fixes page navigation bug"}]}
+
+Content: "Added provider dropdown and model selector to LLM configuration page"
+Output: {"tags":[{"tag":"llm-config-ui","category":"feature","confidence":0.9,"reason":"new UI for LLM settings"},{"tag":"admin-portal-settings","category":"component","confidence":0.85,"reason":"part of admin portal"}]}
+
+Content: "User asked about how ingest pipeline uses LLM for tag analysis"
+Output: {"tags":[{"tag":"kb-llm-tag-analysis","category":"feature","confidence":0.9,"reason":"about auto-tagging feature"}]}
+
+Rules: max 3 tags, lowercase-hyphenated, 3-6 words each, confidence 0-1. Return ONLY {"tags":[...]}`;
+export class TagAnalyzerService {
+    llmService;
+    taxonomy;
+    allValidTags;
+    logger;
+    constructor(llmService, logger) {
+        this.llmService = llmService;
+        this.taxonomy = DEFAULT_TAXONOMY;
+        this.allValidTags = new Set(Object.values(this.taxonomy).flat());
+        this.logger = logger;
+    }
+    async analyzeTags(content, options) {
+        if (!content || content.trim().length < 10) {
+            return { appliedTags: [], suggestedTags: [], fallbackUsed: false };
+        }
+        const threshold = options?.threshold ?? 0.7;
+        const autoApply = options?.autoApply ?? true;
+        try {
+            const result = await this.analyzeWithLLM(content, options);
+            return this.applyThreshold(result, threshold, autoApply);
+        }
+        catch (err) {
+            this.logger?.warn({ err }, 'LLM tag analysis failed, using fallback');
+            return this.fallbackKeywordExtraction(content, threshold);
+        }
+    }
+    async analyzeWithLLM(content, options) {
+        const truncatedContent = content.slice(0, 2000);
+        const userPrompt = `/no_think\nTag this:\n${truncatedContent}`;
+        const messages = [
+            { role: 'system', content: SYSTEM_PROMPT },
+            { role: 'user', content: userPrompt },
+        ];
+        const response = await Promise.race([
+            this.llmService.complete(messages),
+            this.timeout(30000),
+        ]);
+        return this.parseResponse(response.content);
+    }
+    parseResponse(llmOutput) {
+        if (!llmOutput || llmOutput.trim().length === 0)
+            return [];
+        // Try JSON first
+        const jsonMatch = llmOutput.match(/\{[\s\S]*"tags"[\s\S]*\}/);
+        if (jsonMatch) {
+            try {
+                const parsed = JSON.parse(jsonMatch[0]);
+                const tags = parsed.tags || parsed.suggestions || [];
+                return tags
+                    .filter((t) => t.tag && t.confidence !== undefined)
+                    .map((t) => ({
+                    tag: String(t.tag).toLowerCase().trim().replace(/\s+/g, '-'),
+                    category: String(t.category || 'feature'),
+                    confidence: Number(t.confidence),
+                    reason: String(t.reason || ''),
+                }))
+                    .filter((t) => t.tag.length >= 3 && t.tag.length <= 50);
+            }
+            catch { /* fall through to regex extraction */ }
+        }
+        // Fallback: extract hyphenated tag patterns from reasoning/thinking text
+        const tagPattern = /["']([a-z][a-z0-9-]{4,40}[a-z0-9])["']/g;
+        const found = [];
+        let m;
+        while ((m = tagPattern.exec(llmOutput)) !== null) {
+            const tag = m[1];
+            if (tag.includes('-') && !['let-me', 'wait-the', 'so-maybe', 'that-s'].includes(tag)) {
+                found.push(tag);
+            }
+        }
+        // Deduplicate and take last 3 (final thinking = best answer)
+        const unique = [...new Set(found)].slice(-3);
+        return unique.map(tag => ({
+            tag, category: 'feature', confidence: 0.85, reason: 'extracted from reasoning',
+        }));
+    }
+    applyThreshold(suggestions, threshold, autoApply) {
+        const applied = autoApply
+            ? suggestions.filter(t => t.confidence >= threshold)
+            : [];
+        const suggested = suggestions.filter(t => t.confidence < threshold);
+        return {
+            appliedTags: applied.map(t => t.tag).slice(0, 6),
+            suggestedTags: suggested,
+            fallbackUsed: false,
+        };
+    }
+    fallbackKeywordExtraction(content, _threshold) {
+        const lower = content.toLowerCase();
+        const found = [];
+        for (const [keyword, tag] of Object.entries(KNOWN_KEYWORDS)) {
+            if (lower.includes(keyword) && !found.includes(tag)) {
+                found.push(tag);
+            }
+        }
+        if (lower.startsWith('decision:') || lower.includes('we decided')) {
+            if (!found.includes('decision'))
+                found.push('decision');
+        }
+        if (lower.includes('error') || lower.includes('bug') || lower.includes('fix')) {
+            if (!found.includes('error-pattern'))
+                found.push('error-pattern');
+        }
+        return {
+            appliedTags: found.slice(0, 6),
+            suggestedTags: [],
+            fallbackUsed: true,
+        };
+    }
+    filterTaxonomy(categories) {
+        if (!categories || categories.length === 0)
+            return this.taxonomy;
+        const filtered = {};
+        for (const cat of categories) {
+            if (this.taxonomy[cat])
+                filtered[cat] = this.taxonomy[cat];
+        }
+        return Object.keys(filtered).length > 0 ? filtered : this.taxonomy;
+    }
+    timeout(ms) {
+        return new Promise((_, reject) => setTimeout(() => reject(new Error('LLM timeout')), ms));
+    }
+}
+//# sourceMappingURL=TagAnalyzerService.js.map

package/dist/modules/memory/llm/TagAnalyzerService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TagAnalyzerService.js","sourceRoot":"","sources":["../../../../src/modules/memory/llm/TagAnalyzerService.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAyBH,MAAM,gBAAgB,GAA6B;IACjD,iBAAiB,EAAE;QACjB,gBAAgB,EAAE,SAAS,EAAE,cAAc,EAAE,WAAW;QACxD,iBAAiB,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW;QAC3D,eAAe,EAAE,cAAc,EAAE,gBAAgB,EAAE,QAAQ;KAC5D;IACD,WAAW,EAAE;QACX,cAAc,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU;QACpD,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY;QAC5D,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO;QAC3D,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO;KACnD;IACD,YAAY,EAAE;QACZ,cAAc,EAAE,QAAQ,EAAE,gBAAgB,EAAE,SAAS,EAAE,YAAY;QACnE,aAAa,EAAE,eAAe,EAAE,UAAU,EAAE,eAAe;KAC5D;IACD,eAAe,EAAE;QACf,UAAU,EAAE,eAAe,EAAE,WAAW,EAAE,mBAAmB;QAC7D,cAAc,EAAE,UAAU,EAAE,eAAe,EAAE,QAAQ;QACrD,cAAc,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc;KAC7D;IACD,gBAAgB,EAAE;QAChB,aAAa,EAAE,eAAe,EAAE,UAAU,EAAE,WAAW;QACvD,oBAAoB,EAAE,oBAAoB,EAAE,WAAW;QACvD,MAAM,EAAE,UAAU,EAAE,eAAe,EAAE,YAAY;KAClD;IACD,cAAc,EAAE;QACd,aAAa,EAAE,gBAAgB,EAAE,cAAc,EAAE,WAAW;QAC5D,YAAY,EAAE,kBAAkB,EAAE,kBAAkB;QACpD,gBAAgB,EAAE,YAAY,EAAE,eAAe;KAChD;IACD,UAAU,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC;CAClD,CAAC;AAEF,MAAM,cAAc,GAA2B;IAC7C,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAE,gBAAgB;IAC5E,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,gBAAgB,EAAE,OAAO,EAAE,gBAAgB;IACjF,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS;IAChE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY;IAC5F,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU;IACxF,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS;IAC9D,UAAU,EAAE,UAAU,EAAE,eAAe,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU;IACtE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,kBAAkB,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS;IAC1F,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU;IACpF,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa;IACnF,KAAK,EAAE,KAAK,EAAE,wBAAwB,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW;IACvE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE,eAAe;IACjE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU;IACtD,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,eAAe,EAAE,UAAU,EAAE,UAAU;IAC7E,WAAW,EAAE,eAAe,EAAE,eAAe,EAAE,eAAe;IAC9D,cAAc,EAAE,cAAc,EAAE,gBAAgB,EAAE,gBAAgB;IAClE,UAAU,EAAE,aAAa,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,QAAQ;IAClE,QAAQ,EAAE,eAAe,EAAE,SAAS,EAAE,eAAe;CACtD,CAAC;AAEF,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;oGAe8E,CAAC;AAErG,MAAM,OAAO,kBAAkB;IACrB,UAAU,CAAa;IACvB,QAAQ,CAA2B;IACnC,YAAY,CAAc;IAC1B,MAAM,CAAU;IAExB,YAAY,UAAsB,EAAE,MAAe;QACjD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,QAAQ,GAAG,gBAAgB,CAAC;QACjC,IAAI,CAAC,YAAY,GAAG,IAAI,GAAG,CACzB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CACpC,CAAC;QACF,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,WAAW,CACf,OAAe,EACf,OAA2B;QAE3B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YAC3C,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;QACrE,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,GAAG,CAAC;QAC5C,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,IAAI,CAAC;QAE7C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC3D,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,yCAAyC,CAAC,CAAC;YACtE,OAAO,IAAI,CAAC,yBAAyB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,cAAc,CAC1B,OAAe,EACf,OAA2B;QAE3B,MAAM,gBAAgB,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAEhD,MAAM,UAAU,GAAG,yBAAyB,gBAAgB,EAAE,CAAC;QAC/D,MAAM,QAAQ,GAAiB;YAC7B,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,EAAE;YAC1C,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE;SACtC,CAAC;QAEF,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;YAClC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAClC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;SACpB,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC9C,CAAC;IAEO,aAAa,CAAC,SAAiB;QACrC,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAE3D,iBAAiB;QACjB,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9D,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;gBACxC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC;gBACrD,OAAO,IAAI;qBACR,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC;qBACvD,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC;oBAChB,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;oBAC5D,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,IAAI,SAAS,CAAC;oBACzC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;oBAChC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC;iBAC/B,CAAC,CAAC;qBACF,MAAM,CAAC,CAAC,CAAgB,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;YAC3E,CAAC;YAAC,MAAM,CAAC,CAAC,sCAAsC,CAAC,CAAC;QACpD,CAAC;QAED,yEAAyE;QACzE,MAAM,UAAU,GAAG,yCAAyC,CAAC;QAC7D,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC;QACN,OAAO,CAAC,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACjD,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACjB,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrF,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QACD,6DAA6D;QAC7D,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7C,OAAO,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACxB,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,0BAA0B;SAC/E,CAAC,CAAC,CAAC;IACN,CAAC;IAEO,cAAc,CACpB,WAA4B,EAC5B,SAAiB,EACjB,SAAkB;QAElB,MAAM,OAAO,GAAG,SAAS;YACvB,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,IAAI,SAAS,CAAC;YACpD,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,GAAG,SAAS,CAAC,CAAC;QAEpE,OAAO;YACL,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YAChD,aAAa,EAAE,SAAS;YACxB,YAAY,EAAE,KAAK;SACpB,CAAC;IACJ,CAAC;IAEO,yBAAyB,CAC/B,OAAe,EACf,UAAkB;QAElB,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,KAAK,GAAa,EAAE,CAAC;QAE3B,KAAK,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;YAC5D,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACpD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QAED,IAAI,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YAClE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9E,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACpE,CAAC;QAED,OAAO;YACL,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YAC9B,aAAa,EAAE,EAAE;YACjB,YAAY,EAAE,IAAI;SACnB,CAAC;IACJ,CAAC;IAEO,cAAc,CACpB,UAAqB;QAErB,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC;QACjE,MAAM,QAAQ,GAA6B,EAAE,CAAC;QAC9C,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;YAC7B,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;IACrE,CAAC;IAEO,OAAO,CAAC,EAAU;QACxB,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAC/B,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CACvD,CAAC;IACJ,CAAC;CACF"}

package/dist/modules/memory/llm/index.d.ts

@@ -0,0 +1,2 @@
+export { LLMService } from './LLMService.js';
+export type { LLMConfig, LLMProvider, LLMMessage, LLMResponse, LLMAdapter } from './types.js';

package/dist/modules/memory/llm/index.js

@@ -0,0 +1,2 @@
+export { LLMService } from './LLMService.js';
+//# sourceMappingURL=index.js.map

package/dist/modules/memory/llm/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/modules/memory/llm/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/modules/memory/llm/ollama-adapter.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Ollama LLM adapter — local inference via REST API.
+ * Handles qwen3 "thinking" mode: appends /no_think and falls back to thinking field.
+ */
+import type { LLMAdapter, LLMConfig, LLMMessage, LLMResponse } from './types.js';
+export declare class OllamaAdapter implements LLMAdapter {
+    complete(messages: LLMMessage[], config: LLMConfig): Promise<LLMResponse>;
+    isAvailable(config: LLMConfig): Promise<boolean>;
+}

package/dist/modules/memory/llm/ollama-adapter.js

@@ -0,0 +1,55 @@
+/**
+ * Ollama LLM adapter — local inference via REST API.
+ * Handles qwen3 "thinking" mode: appends /no_think and falls back to thinking field.
+ */
+export class OllamaAdapter {
+    async complete(messages, config) {
+        const url = `${config.baseUrl}/api/chat`;
+        // For qwen3 models: disable thinking mode by appending /no_think
+        const isQwen3 = config.model.includes('qwen3');
+        const processedMessages = messages.map(m => {
+            if (isQwen3 && m.role === 'system') {
+                return { role: m.role, content: m.content + ' /no_think' };
+            }
+            return { role: m.role, content: m.content };
+        });
+        if (isQwen3 && !messages.some(m => m.role === 'system')) {
+            processedMessages.unshift({ role: 'system', content: 'Be concise. /no_think' });
+        }
+        const body = {
+            model: config.model,
+            messages: processedMessages,
+            stream: false,
+            options: {
+                temperature: config.temperature ?? 0.3,
+                num_predict: config.maxTokens ?? 200,
+            },
+        };
+        const res = await fetch(url, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify(body),
+        });
+        if (!res.ok)
+            throw new Error(`Ollama error: ${res.status} ${await res.text()}`);
+        const data = await res.json();
+        // qwen3 puts response in "thinking" when content is empty
+        const content = data.message?.content || data.message?.thinking || '';
+        return {
+            content,
+            model: config.model,
+            provider: 'ollama',
+            tokensUsed: data.eval_count,
+        };
+    }
+    async isAvailable(config) {
+        try {
+            const res = await fetch(`${config.baseUrl}/api/tags`, { signal: AbortSignal.timeout(3000) });
+            return res.ok;
+        }
+        catch {
+            return false;
+        }
+    }
+}
+//# sourceMappingURL=ollama-adapter.js.map

package/dist/modules/memory/llm/ollama-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ollama-adapter.js","sourceRoot":"","sources":["../../../../src/modules/memory/llm/ollama-adapter.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,OAAO,aAAa;IACxB,KAAK,CAAC,QAAQ,CAAC,QAAsB,EAAE,MAAiB;QACtD,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,OAAO,WAAW,CAAC;QAEzC,iEAAiE;QACjE,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,iBAAiB,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;YACzC,IAAI,OAAO,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACnC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,GAAG,YAAY,EAAE,CAAC;YAC7D,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QAC9C,CAAC,CAAC,CAAC;QACH,IAAI,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;YACxD,iBAAiB,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC,CAAC;QAClF,CAAC;QAED,MAAM,IAAI,GAAG;YACX,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,QAAQ,EAAE,iBAAiB;YAC3B,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACP,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,GAAG;gBACtC,WAAW,EAAE,MAAM,CAAC,SAAS,IAAI,GAAG;aACrC;SACF,CAAC;QAEF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,GAAG,CAAC,MAAM,IAAI,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAChF,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAS,CAAC;QAErC,0DAA0D;QAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE,CAAC;QAEtE,OAAO;YACL,OAAO;YACP,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,QAAQ,EAAE,QAAQ;YAClB,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,MAAiB;QACjC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,CAAC,OAAO,WAAW,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC7F,OAAO,GAAG,CAAC,EAAE,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;IAC3B,CAAC;CACF"}

package/dist/modules/memory/llm/openai-adapter.d.ts

@@ -0,0 +1,8 @@
+/**
+ * OpenAI-compatible adapter — works for OpenAI, Azure, vLLM, LM Studio, etc.
+ */
+import type { LLMAdapter, LLMConfig, LLMMessage, LLMResponse } from './types.js';
+export declare class OpenAIAdapter implements LLMAdapter {
+    complete(messages: LLMMessage[], config: LLMConfig): Promise<LLMResponse>;
+    isAvailable(config: LLMConfig): Promise<boolean>;
+}

package/dist/modules/memory/llm/openai-adapter.js

@@ -0,0 +1,43 @@
+/**
+ * OpenAI-compatible adapter — works for OpenAI, Azure, vLLM, LM Studio, etc.
+ */
+export class OpenAIAdapter {
+    async complete(messages, config) {
+        const url = `${config.baseUrl}/chat/completions`;
+        const body = {
+            model: config.model,
+            messages,
+            temperature: config.temperature ?? 0.3,
+            max_tokens: config.maxTokens ?? 500,
+            chat_template_kwargs: { enable_thinking: false },
+        };
+        const headers = { 'Content-Type': 'application/json' };
+        if (config.apiKey)
+            headers['Authorization'] = `Bearer ${config.apiKey}`;
+        const res = await fetch(url, { method: 'POST', headers, body: JSON.stringify(body) });
+        if (!res.ok)
+            throw new Error(`OpenAI error: ${res.status} ${await res.text()}`);
+        const data = await res.json();
+        const msg = data.choices?.[0]?.message;
+        const content = msg?.content || msg?.reasoning_content || '';
+        return {
+            content,
+            model: config.model,
+            provider: config.provider,
+            tokensUsed: data.usage?.total_tokens,
+        };
+    }
+    async isAvailable(config) {
+        try {
+            const headers = {};
+            if (config.apiKey)
+                headers['Authorization'] = `Bearer ${config.apiKey}`;
+            const res = await fetch(`${config.baseUrl}/models`, { headers, signal: AbortSignal.timeout(3000) });
+            return res.ok;
+        }
+        catch {
+            return false;
+        }
+    }
+}
+//# sourceMappingURL=openai-adapter.js.map

package/dist/modules/memory/llm/openai-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai-adapter.js","sourceRoot":"","sources":["../../../../src/modules/memory/llm/openai-adapter.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,MAAM,OAAO,aAAa;IACxB,KAAK,CAAC,QAAQ,CAAC,QAAsB,EAAE,MAAiB;QACtD,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,OAAO,mBAAmB,CAAC;QACjD,MAAM,IAAI,GAAwB;YAChC,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,QAAQ;YACR,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,GAAG;YACtC,UAAU,EAAE,MAAM,CAAC,SAAS,IAAI,GAAG;YACnC,oBAAoB,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE;SACjD,CAAC;QAEF,MAAM,OAAO,GAA2B,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;QAC/E,IAAI,MAAM,CAAC,MAAM;YAAE,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,MAAM,CAAC,MAAM,EAAE,CAAC;QAExE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtF,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,GAAG,CAAC,MAAM,IAAI,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAChF,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAS,CAAC;QAErC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC;QACvC,MAAM,OAAO,GAAG,GAAG,EAAE,OAAO,IAAI,GAAG,EAAE,iBAAiB,IAAI,EAAE,CAAC;QAE7D,OAAO;YACL,OAAO;YACP,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU,EAAE,IAAI,CAAC,KAAK,EAAE,YAAY;SACrC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,MAAiB;QACjC,IAAI,CAAC;YACH,MAAM,OAAO,GAA2B,EAAE,CAAC;YAC3C,IAAI,MAAM,CAAC,MAAM;gBAAE,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,MAAM,CAAC,MAAM,EAAE,CAAC;YACxE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,CAAC,OAAO,SAAS,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACpG,OAAO,GAAG,CAAC,EAAE,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;IAC3B,CAAC;CACF"}

package/dist/modules/memory/llm/types.d.ts

@@ -0,0 +1,26 @@
+/**
+ * LLM Provider types — multi-provider support.
+ */
+export type LLMProvider = 'ollama' | 'openai' | 'anthropic' | 'gemini' | 'lmstudio' | 'copilot';
+export interface LLMConfig {
+    provider: LLMProvider;
+    model: string;
+    baseUrl: string;
+    apiKey?: string;
+    temperature?: number;
+    maxTokens?: number;
+}
+export interface LLMMessage {
+    role: 'system' | 'user' | 'assistant';
+    content: string;
+}
+export interface LLMResponse {
+    content: string;
+    model: string;
+    provider: LLMProvider;
+    tokensUsed?: number;
+}
+export interface LLMAdapter {
+    complete(messages: LLMMessage[], config: LLMConfig): Promise<LLMResponse>;
+    isAvailable(config: LLMConfig): Promise<boolean>;
+}

package/dist/modules/memory/llm/types.js

@@ -0,0 +1,5 @@
+/**
+ * LLM Provider types — multi-provider support.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/modules/memory/llm/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/modules/memory/llm/types.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/modules/memory/masking/MaskingMiddleware.d.ts

@@ -0,0 +1,23 @@
+import { KnowledgeEntry } from '../models.js';
+import { AllowlistService } from './services/AllowlistService.js';
+import { AuditService } from './services/AuditService.js';
+import { ConfigCacheService } from './services/ConfigCacheService.js';
+import { MaskedEntry, MaskingOptions } from './models/MaskingTypes.js';
+/**
+ * Main orchestrator for the masking pipeline.
+ */
+export declare class MaskingMiddleware {
+    private piiDetector;
+    private credDetector;
+    private masker;
+    private allowlist;
+    private audit;
+    private configCache;
+    constructor(configCache: ConfigCacheService, allowlist: AllowlistService, audit: AuditService);
+    applyMasking(entries: KnowledgeEntry[], requesterRole: string, requesterId: string, options?: MaskingOptions): MaskedEntry[];
+    private processEntry;
+    private classifyEntry;
+    private canAccess;
+    private detectSafe;
+    private toMaskedEntry;
+}

package/dist/modules/memory/masking/MaskingMiddleware.js

@@ -0,0 +1,118 @@
+import { PiiDetector } from './detectors/PiiDetector.js';
+import { CredentialDetector } from './detectors/CredentialDetector.js';
+import { ContentMasker } from './maskers/ContentMasker.js';
+const ROLE_ACCESS = {
+    ADMIN: ['PUBLIC', 'INTERNAL', 'CONFIDENTIAL', 'RESTRICTED'],
+    DEVELOPER: ['PUBLIC'],
+    USER: ['PUBLIC'],
+    EXTERNAL: ['PUBLIC'],
+};
+/**
+ * Main orchestrator for the masking pipeline.
+ */
+export class MaskingMiddleware {
+    piiDetector;
+    credDetector;
+    masker;
+    allowlist;
+    audit;
+    configCache;
+    constructor(configCache, allowlist, audit) {
+        this.configCache = configCache;
+        this.allowlist = allowlist;
+        this.audit = audit;
+        this.masker = new ContentMasker();
+        this.piiDetector = new PiiDetector();
+        this.credDetector = new CredentialDetector();
+    }
+    applyMasking(entries, requesterRole, requesterId, options) {
+        const reveal = options?.reveal ?? false;
+        const results = [];
+        for (const entry of entries) {
+            const masked = this.processEntry(entry, requesterRole, requesterId, reveal);
+            if (!masked.hidden)
+                results.push(masked);
+        }
+        return results;
+    }
+    processEntry(entry, role, requesterId, reveal) {
+        if (this.allowlist.isAllowlisted(entry)) {
+            this.audit.logEvent({
+                entry_id: entry.id, requester_id: requesterId, requester_role: role,
+                action: 'skip_allowlist', patterns_matched: '', sensitivity_level: 'PUBLIC',
+            });
+            return this.toMaskedEntry(entry, 'PUBLIC', false, []);
+        }
+        const level = this.classifyEntry(entry);
+        if (!this.canAccess(role, level)) {
+            this.audit.logEvent({
+                entry_id: entry.id, requester_id: requesterId, requester_role: role,
+                action: 'hide', patterns_matched: '', sensitivity_level: level,
+            });
+            return { id: entry.id, content: '', summary: '', masking_applied: true,
+                sensitivity_level: level, masked_patterns: [], hidden: true };
+        }
+        const pii = this.detectSafe(() => this.piiDetector.detect(entry.content));
+        const creds = this.detectSafe(() => this.credDetector.detect(entry.content));
+        const all = [...pii, ...creds];
+        const patterns = [...new Set(all.map(d => d.type))];
+        let content = entry.content;
+        if (all.length > 0) {
+            const toMask = all.filter(d => {
+                if (d.category === 'credential')
+                    return !(reveal && role === 'ADMIN');
+                if (d.category === 'pii')
+                    return role !== 'ADMIN';
+                return true;
+            });
+            content = this.masker.applyMasking(content, toMask, role, level, reveal);
+        }
+        if (level === 'CONFIDENTIAL' && role !== 'ADMIN') {
+            this.audit.logEvent({
+                entry_id: entry.id, requester_id: requesterId, requester_role: role,
+                action: 'summary_only', patterns_matched: patterns.join(','), sensitivity_level: level,
+            });
+            return this.toMaskedEntry(entry, level, true, patterns, entry.summary);
+        }
+        if (all.length > 0) {
+            const action = reveal ? 'reveal' : creds.length > 0 ? 'mask_credential' : 'mask_pii';
+            this.audit.logEvent({
+                entry_id: entry.id, requester_id: requesterId, requester_role: role,
+                action, patterns_matched: patterns.join(','), sensitivity_level: level,
+            });
+        }
+        return this.toMaskedEntry(entry, level, all.length > 0, patterns, content);
+    }
+    classifyEntry(entry) {
+        const creds = this.credDetector.detect(entry.content);
+        if (creds.length > 0)
+            return 'RESTRICTED';
+        const pii = this.piiDetector.detect(entry.content);
+        if (pii.length > 0)
+            return 'INTERNAL';
+        return 'PUBLIC';
+    }
+    canAccess(role, level) {
+        if (role === 'ADMIN')
+            return true;
+        if (level === 'RESTRICTED')
+            return false;
+        return true;
+    }
+    detectSafe(fn) {
+        try {
+            return fn();
+        }
+        catch {
+            return [];
+        }
+    }
+    toMaskedEntry(e, level, masked, patterns, content) {
+        return {
+            id: e.id, content: content ?? e.content, summary: e.summary,
+            masking_applied: masked, sensitivity_level: level,
+            masked_patterns: patterns, hidden: false,
+        };
+    }
+}
+//# sourceMappingURL=MaskingMiddleware.js.map

package/dist/modules/memory/masking/MaskingMiddleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MaskingMiddleware.js","sourceRoot":"","sources":["../../../../src/modules/memory/masking/MaskingMiddleware.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAS3D,MAAM,WAAW,GAAuC;IACtD,KAAK,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,cAAc,EAAE,YAAY,CAAC;IAC3D,SAAS,EAAE,CAAC,QAAQ,CAAC;IACrB,IAAI,EAAE,CAAC,QAAQ,CAAC;IAChB,QAAQ,EAAE,CAAC,QAAQ,CAAC;CACrB,CAAC;AAEF;;GAEG;AACH,MAAM,OAAO,iBAAiB;IACpB,WAAW,CAAc;IACzB,YAAY,CAAqB;IACjC,MAAM,CAAgB;IACtB,SAAS,CAAmB;IAC5B,KAAK,CAAe;IACpB,WAAW,CAAqB;IAExC,YACE,WAA+B,EAC/B,SAA2B,EAC3B,KAAmB;QAEnB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QAClC,IAAI,CAAC,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;QACrC,IAAI,CAAC,YAAY,GAAG,IAAI,kBAAkB,EAAE,CAAC;IAC/C,CAAC;IAED,YAAY,CACV,OAAyB,EACzB,aAAqB,EACrB,WAAmB,EACnB,OAAwB;QAExB,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,KAAK,CAAC;QACxC,MAAM,OAAO,GAAkB,EAAE,CAAC;QAClC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;YAC5E,IAAI,CAAC,MAAM,CAAC,MAAM;gBAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3C,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,YAAY,CAClB,KAAqB,EAAE,IAAY,EAAE,WAAmB,EAAE,MAAe;QAEzE,IAAI,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YACxC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAClB,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,IAAI;gBACnE,MAAM,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,EAAE,EAAE,iBAAiB,EAAE,QAAQ;aAC5E,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACxD,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAExC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAClB,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,IAAI;gBACnE,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,EAAE,EAAE,iBAAiB,EAAE,KAAK;aAC/D,CAAC,CAAC;YACH,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,eAAe,EAAE,IAAI;gBACpE,iBAAiB,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAClE,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAC1E,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7E,MAAM,GAAG,GAAG,CAAC,GAAG,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;QAC/B,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAEpD,IAAI,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QAC5B,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;gBAC5B,IAAI,CAAC,CAAC,QAAQ,KAAK,YAAY;oBAAE,OAAO,CAAC,CAAC,MAAM,IAAI,IAAI,KAAK,OAAO,CAAC,CAAC;gBACtE,IAAI,CAAC,CAAC,QAAQ,KAAK,KAAK;oBAAE,OAAO,IAAI,KAAK,OAAO,CAAC;gBAClD,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QAC3E,CAAC;QAED,IAAI,KAAK,KAAK,cAAc,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACjD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAClB,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,IAAI;gBACnE,MAAM,EAAE,cAAc,EAAE,gBAAgB,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,iBAAiB,EAAE,KAAK;aACvF,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACzE,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnB,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,UAAU,CAAC;YACrF,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAClB,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,IAAI;gBACnE,MAAM,EAAE,gBAAgB,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,iBAAiB,EAAE,KAAK;aACvE,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC7E,CAAC;IAEO,aAAa,CAAC,KAAqB;QACzC,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,YAAY,CAAC;QAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnD,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,UAAU,CAAC;QACtC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,SAAS,CAAC,IAAY,EAAE,KAAuB;QACrD,IAAI,IAAI,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC;QAClC,IAAI,KAAK,KAAK,YAAY;YAAE,OAAO,KAAK,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,UAAU,CAAC,EAA2B;QAC5C,IAAI,CAAC;YAAC,OAAO,EAAE,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,EAAE,CAAC;QAAC,CAAC;IAC3C,CAAC;IAEO,aAAa,CACnB,CAAiB,EAAE,KAAuB,EAC1C,MAAe,EAAE,QAAkB,EAAE,OAAgB;QAErD,OAAO;YACL,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO;YAC3D,eAAe,EAAE,MAAM,EAAE,iBAAiB,EAAE,KAAK;YACjD,eAAe,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK;SACzC,CAAC;IACJ,CAAC;CACF"}

package/dist/modules/memory/masking/__tests__/CredentialDetector.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/modules/memory/masking/__tests__/CredentialDetector.test.js

@@ -0,0 +1,41 @@
+import { describe, it, expect } from 'vitest';
+import { CredentialDetector } from '../detectors/CredentialDetector.js';
+describe('CredentialDetector', () => {
+    const detector = new CredentialDetector();
+    it('detects sk- API key', () => {
+        const r = detector.detect('key: sk-abc123xyz789abcdefghijklm');
+        expect(r.length).toBeGreaterThanOrEqual(1);
+        expect(r[0].type).toBe('api_key');
+    });
+    it('detects ghp_ GitHub PAT', () => {
+        const r = detector.detect('ghp_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx');
+        expect(r.length).toBeGreaterThanOrEqual(1);
+        expect(r[0].type).toBe('api_key');
+    });
+    it('detects JWT token', () => {
+        const jwt = 'eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiIxMjM0NTY3ODkwIn0.dozjgNryP4J3jVmNHl0w5N';
+        const r = detector.detect(jwt);
+        const jwts = r.filter(d => d.type === 'jwt');
+        expect(jwts.length).toBe(1);
+    });
+    it('detects password in config', () => {
+        const r = detector.detect('password=MyS3cr3tP@ss');
+        const pwds = r.filter(d => d.type === 'password');
+        expect(pwds.length).toBe(1);
+    });
+    it('detects connection string', () => {
+        const r = detector.detect('postgres://admin:secret@db.host:5432/mydb');
+        const conns = r.filter(d => d.type === 'connection_string');
+        expect(conns.length).toBe(1);
+    });
+    it('detects private key header', () => {
+        const r = detector.detect('-----BEGIN RSA PRIVATE KEY-----');
+        const keys = r.filter(d => d.type === 'private_key');
+        expect(keys.length).toBe(1);
+    });
+    it('returns empty for clean text', () => {
+        const r = detector.detect('Normal text without credentials');
+        expect(r.length).toBe(0);
+    });
+});
+//# sourceMappingURL=CredentialDetector.test.js.map

package/dist/modules/memory/masking/__tests__/CredentialDetector.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CredentialDetector.test.js","sourceRoot":"","sources":["../../../../../src/modules/memory/masking/__tests__/CredentialDetector.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAExE,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,MAAM,QAAQ,GAAG,IAAI,kBAAkB,EAAE,CAAC;IAE1C,EAAE,CAAC,qBAAqB,EAAE,GAAG,EAAE;QAC7B,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,mCAAmC,CAAC,CAAC;QAC/D,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACjC,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,0CAA0C,CAAC,CAAC;QACtE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mBAAmB,EAAE,GAAG,EAAE;QAC3B,MAAM,GAAG,GAAG,yEAAyE,CAAC;QACtF,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;QAClD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,2CAA2C,CAAC,CAAC;QACvE,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC;QAC5D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,iCAAiC,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,iCAAiC,CAAC,CAAC;QAC7D,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/modules/memory/masking/__tests__/MaskingMiddleware.test.d.ts

@@ -0,0 +1 @@
+export {};