vesper-memory 0.3.0

package/dist/config/rate-limits.d.ts

@@ -0,0 +1,76 @@
+/**
+ * Rate Limiting Configuration
+ *
+ * Defines tier-based rate limits for MCP tools.
+ * Configurable via environment variables.
+ *
+ * Security: Implements SEC-HIGH-001 from security audit
+ */
+import { RateLimitConfig } from "../utils/rate-limiter.js";
+/**
+ * Available rate limit tiers
+ *
+ * Note: "unlimited" is the highest tier (not "enterprise")
+ * This matches the tier naming in auth.ts and postgres-auth-schema.sql
+ */
+export type TierName = "standard" | "premium" | "unlimited";
+/**
+ * Tier-based rate limits for all MCP operations
+ *
+ * Limits are per-minute unless otherwise specified.
+ *
+ * | Tier | store_memory | retrieve_memory | list_recent | get_stats |
+ * |------|-------------|-----------------|-------------|-----------|
+ * | standard | 100/min | 300/min | 60/min | 30/min |
+ * | premium | 500/min | 1000/min | 200/min | 100/min |
+ * | unlimited | no limit | no limit | no limit | no limit |
+ */
+export declare const TIER_LIMITS: Record<TierName, Record<string, RateLimitConfig>>;
+/**
+ * Legacy export for backwards compatibility
+ */
+export declare const RATE_LIMIT_TIERS: Record<TierName, Record<string, RateLimitConfig>>;
+/**
+ * Get rate limits for a specific tier
+ *
+ * @param tier - The tier name
+ * @returns Rate limit configuration for all operations
+ */
+export declare function getTierLimits(tier: TierName): Record<string, RateLimitConfig>;
+/**
+ * Configuration from environment variables
+ */
+export interface RateLimitEnvConfig {
+    /** Default tier for users without explicit tier assignment */
+    defaultTier: TierName;
+    /** Whether to allow requests when Redis is unavailable (default: false - fail closed) */
+    failOpen: boolean;
+    /** Custom limits that override tier defaults */
+    customLimits?: Record<string, number>;
+    /** Emergency fallback limit when Redis is down (only used with failOpen: false) */
+    emergencyLimit: number;
+}
+/**
+ * Read rate limit configuration from environment variables
+ *
+ * Environment variables:
+ * - RATE_LIMIT_DEFAULT_TIER: Default tier (standard|premium|unlimited)
+ * - RATE_LIMIT_FAIL_OPEN: Whether to allow requests when Redis is down (true|false)
+ * - RATE_LIMIT_STORE_MEMORY: Override store_memory limit
+ * - RATE_LIMIT_RETRIEVE_MEMORY: Override retrieve_memory limit
+ * - RATE_LIMIT_LIST_RECENT: Override list_recent limit
+ * - RATE_LIMIT_GET_STATS: Override get_stats limit
+ * - RATE_LIMIT_EMERGENCY: Emergency in-memory limit when Redis is down
+ *
+ * @returns Rate limit configuration
+ */
+export declare function getRateLimitConfigFromEnv(): RateLimitEnvConfig;
+/**
+ * Build rate limit configuration by merging tier defaults with custom limits
+ *
+ * @param tier - Base tier
+ * @param customLimits - Custom limit overrides
+ * @returns Merged rate limit configuration
+ */
+export declare function buildRateLimitConfig(tier: TierName, customLimits?: Record<string, number>): Record<string, RateLimitConfig>;
+//# sourceMappingURL=rate-limits.d.ts.map

package/dist/config/rate-limits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limits.d.ts","sourceRoot":"","sources":["../../src/config/rate-limits.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAE3D;;;;;GAKG;AACH,MAAM,MAAM,QAAQ,GAAG,UAAU,GAAG,SAAS,GAAG,WAAW,CAAC;AAE5D;;;;;;;;;;GAUG;AACH,eAAO,MAAM,WAAW,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAyDzE,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,gBAAgB,mDAAc,CAAC;AAE5C;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAE7E;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,8DAA8D;IAC9D,WAAW,EAAE,QAAQ,CAAC;IAEtB,yFAAyF;IACzF,QAAQ,EAAE,OAAO,CAAC;IAElB,gDAAgD;IAChD,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEtC,mFAAmF;IACnF,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,yBAAyB,IAAI,kBAAkB,CA0C9D;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,QAAQ,EACd,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACpC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAoBjC"}

package/dist/config/rate-limits.js

@@ -0,0 +1,161 @@
+/**
+ * Rate Limiting Configuration
+ *
+ * Defines tier-based rate limits for MCP tools.
+ * Configurable via environment variables.
+ *
+ * Security: Implements SEC-HIGH-001 from security audit
+ */
+/**
+ * Tier-based rate limits for all MCP operations
+ *
+ * Limits are per-minute unless otherwise specified.
+ *
+ * | Tier | store_memory | retrieve_memory | list_recent | get_stats |
+ * |------|-------------|-----------------|-------------|-----------|
+ * | standard | 100/min | 300/min | 60/min | 30/min |
+ * | premium | 500/min | 1000/min | 200/min | 100/min |
+ * | unlimited | no limit | no limit | no limit | no limit |
+ */
+export const TIER_LIMITS = {
+    standard: {
+        store_memory: {
+            maxRequests: 100,
+            windowSeconds: 60,
+        },
+        retrieve_memory: {
+            maxRequests: 300,
+            windowSeconds: 60,
+        },
+        list_recent: {
+            maxRequests: 60,
+            windowSeconds: 60,
+        },
+        get_stats: {
+            maxRequests: 30,
+            windowSeconds: 60,
+        },
+    },
+    premium: {
+        store_memory: {
+            maxRequests: 500,
+            windowSeconds: 60,
+        },
+        retrieve_memory: {
+            maxRequests: 1000,
+            windowSeconds: 60,
+        },
+        list_recent: {
+            maxRequests: 200,
+            windowSeconds: 60,
+        },
+        get_stats: {
+            maxRequests: 100,
+            windowSeconds: 60,
+        },
+    },
+    unlimited: {
+        // Use very high values (effectively no limit) for unlimited tier
+        // We avoid actual infinity to prevent edge cases in Redis
+        store_memory: {
+            maxRequests: 1000000,
+            windowSeconds: 60,
+        },
+        retrieve_memory: {
+            maxRequests: 1000000,
+            windowSeconds: 60,
+        },
+        list_recent: {
+            maxRequests: 1000000,
+            windowSeconds: 60,
+        },
+        get_stats: {
+            maxRequests: 1000000,
+            windowSeconds: 60,
+        },
+    },
+};
+/**
+ * Legacy export for backwards compatibility
+ */
+export const RATE_LIMIT_TIERS = TIER_LIMITS;
+/**
+ * Get rate limits for a specific tier
+ *
+ * @param tier - The tier name
+ * @returns Rate limit configuration for all operations
+ */
+export function getTierLimits(tier) {
+    return TIER_LIMITS[tier] || TIER_LIMITS.standard;
+}
+/**
+ * Read rate limit configuration from environment variables
+ *
+ * Environment variables:
+ * - RATE_LIMIT_DEFAULT_TIER: Default tier (standard|premium|unlimited)
+ * - RATE_LIMIT_FAIL_OPEN: Whether to allow requests when Redis is down (true|false)
+ * - RATE_LIMIT_STORE_MEMORY: Override store_memory limit
+ * - RATE_LIMIT_RETRIEVE_MEMORY: Override retrieve_memory limit
+ * - RATE_LIMIT_LIST_RECENT: Override list_recent limit
+ * - RATE_LIMIT_GET_STATS: Override get_stats limit
+ * - RATE_LIMIT_EMERGENCY: Emergency in-memory limit when Redis is down
+ *
+ * @returns Rate limit configuration
+ */
+export function getRateLimitConfigFromEnv() {
+    const defaultTier = (process.env.RATE_LIMIT_DEFAULT_TIER || "standard");
+    // Security: Default to fail closed (deny requests when Redis is unavailable)
+    const failOpenEnv = process.env.RATE_LIMIT_FAIL_OPEN;
+    const failOpen = failOpenEnv === "true";
+    // Parse custom limits from environment
+    const customLimits = {};
+    const storeMemoryLimit = process.env.RATE_LIMIT_STORE_MEMORY;
+    if (storeMemoryLimit) {
+        customLimits.store_memory = parseInt(storeMemoryLimit, 10);
+    }
+    const retrieveMemoryLimit = process.env.RATE_LIMIT_RETRIEVE_MEMORY;
+    if (retrieveMemoryLimit) {
+        customLimits.retrieve_memory = parseInt(retrieveMemoryLimit, 10);
+    }
+    const listRecentLimit = process.env.RATE_LIMIT_LIST_RECENT;
+    if (listRecentLimit) {
+        customLimits.list_recent = parseInt(listRecentLimit, 10);
+    }
+    const getStatsLimit = process.env.RATE_LIMIT_GET_STATS;
+    if (getStatsLimit) {
+        customLimits.get_stats = parseInt(getStatsLimit, 10);
+    }
+    // Emergency limit for in-memory fallback (very conservative)
+    const emergencyLimit = parseInt(process.env.RATE_LIMIT_EMERGENCY || "10", 10);
+    return {
+        defaultTier,
+        failOpen,
+        customLimits: Object.keys(customLimits).length > 0 ? customLimits : undefined,
+        emergencyLimit,
+    };
+}
+/**
+ * Build rate limit configuration by merging tier defaults with custom limits
+ *
+ * @param tier - Base tier
+ * @param customLimits - Custom limit overrides
+ * @returns Merged rate limit configuration
+ */
+export function buildRateLimitConfig(tier, customLimits) {
+    const tierLimits = getTierLimits(tier);
+    if (!customLimits) {
+        return tierLimits;
+    }
+    // Merge custom limits with tier defaults
+    const merged = { ...tierLimits };
+    for (const [operation, maxRequests] of Object.entries(customLimits)) {
+        if (merged[operation]) {
+            merged[operation] = {
+                ...merged[operation],
+                maxRequests,
+            };
+        }
+    }
+    return merged;
+}
+//# sourceMappingURL=rate-limits.js.map

package/dist/config/rate-limits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limits.js","sourceRoot":"","sources":["../../src/config/rate-limits.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAYH;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,WAAW,GAAsD;IAC5E,QAAQ,EAAE;QACR,YAAY,EAAE;YACZ,WAAW,EAAE,GAAG;YAChB,aAAa,EAAE,EAAE;SAClB;QACD,eAAe,EAAE;YACf,WAAW,EAAE,GAAG;YAChB,aAAa,EAAE,EAAE;SAClB;QACD,WAAW,EAAE;YACX,WAAW,EAAE,EAAE;YACf,aAAa,EAAE,EAAE;SAClB;QACD,SAAS,EAAE;YACT,WAAW,EAAE,EAAE;YACf,aAAa,EAAE,EAAE;SAClB;KACF;IACD,OAAO,EAAE;QACP,YAAY,EAAE;YACZ,WAAW,EAAE,GAAG;YAChB,aAAa,EAAE,EAAE;SAClB;QACD,eAAe,EAAE;YACf,WAAW,EAAE,IAAI;YACjB,aAAa,EAAE,EAAE;SAClB;QACD,WAAW,EAAE;YACX,WAAW,EAAE,GAAG;YAChB,aAAa,EAAE,EAAE;SAClB;QACD,SAAS,EAAE;YACT,WAAW,EAAE,GAAG;YAChB,aAAa,EAAE,EAAE;SAClB;KACF;IACD,SAAS,EAAE;QACT,iEAAiE;QACjE,0DAA0D;QAC1D,YAAY,EAAE;YACZ,WAAW,EAAE,OAAO;YACpB,aAAa,EAAE,EAAE;SAClB;QACD,eAAe,EAAE;YACf,WAAW,EAAE,OAAO;YACpB,aAAa,EAAE,EAAE;SAClB;QACD,WAAW,EAAE;YACX,WAAW,EAAE,OAAO;YACpB,aAAa,EAAE,EAAE;SAClB;QACD,SAAS,EAAE;YACT,WAAW,EAAE,OAAO;YACpB,aAAa,EAAE,EAAE;SAClB;KACF;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,WAAW,CAAC;AAE5C;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,IAAc;IAC1C,OAAO,WAAW,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC;AACnD,CAAC;AAmBD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,yBAAyB;IACvC,MAAM,WAAW,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,UAAU,CAAa,CAAC;IAEpF,6EAA6E;IAC7E,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IACrD,MAAM,QAAQ,GAAG,WAAW,KAAK,MAAM,CAAC;IAExC,uCAAuC;IACvC,MAAM,YAAY,GAA2B,EAAE,CAAC;IAEhD,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;IAC7D,IAAI,gBAAgB,EAAE,CAAC;QACrB,YAAY,CAAC,YAAY,GAAG,QAAQ,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,mBAAmB,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;IACnE,IAAI,mBAAmB,EAAE,CAAC;QACxB,YAAY,CAAC,eAAe,GAAG,QAAQ,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;IAC3D,IAAI,eAAe,EAAE,CAAC;QACpB,YAAY,CAAC,WAAW,GAAG,QAAQ,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IACvD,IAAI,aAAa,EAAE,CAAC;QAClB,YAAY,CAAC,SAAS,GAAG,QAAQ,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,6DAA6D;IAC7D,MAAM,cAAc,GAAG,QAAQ,CAC7B,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,IAAI,EACxC,EAAE,CACH,CAAC;IAEF,OAAO;QACL,WAAW;QACX,QAAQ;QACR,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;QAC7E,cAAc;KACf,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAAc,EACd,YAAqC;IAErC,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAEvC,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,yCAAyC;IACzC,MAAM,MAAM,GAAoC,EAAE,GAAG,UAAU,EAAE,CAAC;IAElE,KAAK,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QACpE,IAAI,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YACtB,MAAM,CAAC,SAAS,CAAC,GAAG;gBAClB,GAAG,MAAM,CAAC,SAAS,CAAC;gBACpB,WAAW;aACZ,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/config 2/rate-limits.d.ts

@@ -0,0 +1,76 @@
+/**
+ * Rate Limiting Configuration
+ *
+ * Defines tier-based rate limits for MCP tools.
+ * Configurable via environment variables.
+ *
+ * Security: Implements SEC-HIGH-001 from security audit
+ */
+import { RateLimitConfig } from "../utils/rate-limiter.js";
+/**
+ * Available rate limit tiers
+ *
+ * Note: "unlimited" is the highest tier (not "enterprise")
+ * This matches the tier naming in auth.ts and postgres-auth-schema.sql
+ */
+export type TierName = "standard" | "premium" | "unlimited";
+/**
+ * Tier-based rate limits for all MCP operations
+ *
+ * Limits are per-minute unless otherwise specified.
+ *
+ * | Tier | store_memory | retrieve_memory | list_recent | get_stats |
+ * |------|-------------|-----------------|-------------|-----------|
+ * | standard | 100/min | 300/min | 60/min | 30/min |
+ * | premium | 500/min | 1000/min | 200/min | 100/min |
+ * | unlimited | no limit | no limit | no limit | no limit |
+ */
+export declare const TIER_LIMITS: Record<TierName, Record<string, RateLimitConfig>>;
+/**
+ * Legacy export for backwards compatibility
+ */
+export declare const RATE_LIMIT_TIERS: Record<TierName, Record<string, RateLimitConfig>>;
+/**
+ * Get rate limits for a specific tier
+ *
+ * @param tier - The tier name
+ * @returns Rate limit configuration for all operations
+ */
+export declare function getTierLimits(tier: TierName): Record<string, RateLimitConfig>;
+/**
+ * Configuration from environment variables
+ */
+export interface RateLimitEnvConfig {
+    /** Default tier for users without explicit tier assignment */
+    defaultTier: TierName;
+    /** Whether to allow requests when Redis is unavailable (default: false - fail closed) */
+    failOpen: boolean;
+    /** Custom limits that override tier defaults */
+    customLimits?: Record<string, number>;
+    /** Emergency fallback limit when Redis is down (only used with failOpen: false) */
+    emergencyLimit: number;
+}
+/**
+ * Read rate limit configuration from environment variables
+ *
+ * Environment variables:
+ * - RATE_LIMIT_DEFAULT_TIER: Default tier (standard|premium|unlimited)
+ * - RATE_LIMIT_FAIL_OPEN: Whether to allow requests when Redis is down (true|false)
+ * - RATE_LIMIT_STORE_MEMORY: Override store_memory limit
+ * - RATE_LIMIT_RETRIEVE_MEMORY: Override retrieve_memory limit
+ * - RATE_LIMIT_LIST_RECENT: Override list_recent limit
+ * - RATE_LIMIT_GET_STATS: Override get_stats limit
+ * - RATE_LIMIT_EMERGENCY: Emergency in-memory limit when Redis is down
+ *
+ * @returns Rate limit configuration
+ */
+export declare function getRateLimitConfigFromEnv(): RateLimitEnvConfig;
+/**
+ * Build rate limit configuration by merging tier defaults with custom limits
+ *
+ * @param tier - Base tier
+ * @param customLimits - Custom limit overrides
+ * @returns Merged rate limit configuration
+ */
+export declare function buildRateLimitConfig(tier: TierName, customLimits?: Record<string, number>): Record<string, RateLimitConfig>;
+//# sourceMappingURL=rate-limits.d.ts.map

package/dist/config 2/rate-limits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limits.d.ts","sourceRoot":"","sources":["../../src/config/rate-limits.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAE3D;;;;;GAKG;AACH,MAAM,MAAM,QAAQ,GAAG,UAAU,GAAG,SAAS,GAAG,WAAW,CAAC;AAE5D;;;;;;;;;;GAUG;AACH,eAAO,MAAM,WAAW,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAyDzE,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,gBAAgB,mDAAc,CAAC;AAE5C;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAE7E;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,8DAA8D;IAC9D,WAAW,EAAE,QAAQ,CAAC;IAEtB,yFAAyF;IACzF,QAAQ,EAAE,OAAO,CAAC;IAElB,gDAAgD;IAChD,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEtC,mFAAmF;IACnF,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,yBAAyB,IAAI,kBAAkB,CA0C9D;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,QAAQ,EACd,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACpC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAoBjC"}

package/dist/config 2/rate-limits.js

@@ -0,0 +1,161 @@
+/**
+ * Rate Limiting Configuration
+ *
+ * Defines tier-based rate limits for MCP tools.
+ * Configurable via environment variables.
+ *
+ * Security: Implements SEC-HIGH-001 from security audit
+ */
+/**
+ * Tier-based rate limits for all MCP operations
+ *
+ * Limits are per-minute unless otherwise specified.
+ *
+ * | Tier | store_memory | retrieve_memory | list_recent | get_stats |
+ * |------|-------------|-----------------|-------------|-----------|
+ * | standard | 100/min | 300/min | 60/min | 30/min |
+ * | premium | 500/min | 1000/min | 200/min | 100/min |
+ * | unlimited | no limit | no limit | no limit | no limit |
+ */
+export const TIER_LIMITS = {
+    standard: {
+        store_memory: {
+            maxRequests: 100,
+            windowSeconds: 60,
+        },
+        retrieve_memory: {
+            maxRequests: 300,
+            windowSeconds: 60,
+        },
+        list_recent: {
+            maxRequests: 60,
+            windowSeconds: 60,
+        },
+        get_stats: {
+            maxRequests: 30,
+            windowSeconds: 60,
+        },
+    },
+    premium: {
+        store_memory: {
+            maxRequests: 500,
+            windowSeconds: 60,
+        },
+        retrieve_memory: {
+            maxRequests: 1000,
+            windowSeconds: 60,
+        },
+        list_recent: {
+            maxRequests: 200,
+            windowSeconds: 60,
+        },
+        get_stats: {
+            maxRequests: 100,
+            windowSeconds: 60,
+        },
+    },
+    unlimited: {
+        // Use very high values (effectively no limit) for unlimited tier
+        // We avoid actual infinity to prevent edge cases in Redis
+        store_memory: {
+            maxRequests: 1000000,
+            windowSeconds: 60,
+        },
+        retrieve_memory: {
+            maxRequests: 1000000,
+            windowSeconds: 60,
+        },
+        list_recent: {
+            maxRequests: 1000000,
+            windowSeconds: 60,
+        },
+        get_stats: {
+            maxRequests: 1000000,
+            windowSeconds: 60,
+        },
+    },
+};
+/**
+ * Legacy export for backwards compatibility
+ */
+export const RATE_LIMIT_TIERS = TIER_LIMITS;
+/**
+ * Get rate limits for a specific tier
+ *
+ * @param tier - The tier name
+ * @returns Rate limit configuration for all operations
+ */
+export function getTierLimits(tier) {
+    return TIER_LIMITS[tier] || TIER_LIMITS.standard;
+}
+/**
+ * Read rate limit configuration from environment variables
+ *
+ * Environment variables:
+ * - RATE_LIMIT_DEFAULT_TIER: Default tier (standard|premium|unlimited)
+ * - RATE_LIMIT_FAIL_OPEN: Whether to allow requests when Redis is down (true|false)
+ * - RATE_LIMIT_STORE_MEMORY: Override store_memory limit
+ * - RATE_LIMIT_RETRIEVE_MEMORY: Override retrieve_memory limit
+ * - RATE_LIMIT_LIST_RECENT: Override list_recent limit
+ * - RATE_LIMIT_GET_STATS: Override get_stats limit
+ * - RATE_LIMIT_EMERGENCY: Emergency in-memory limit when Redis is down
+ *
+ * @returns Rate limit configuration
+ */
+export function getRateLimitConfigFromEnv() {
+    const defaultTier = (process.env.RATE_LIMIT_DEFAULT_TIER || "standard");
+    // Security: Default to fail closed (deny requests when Redis is unavailable)
+    const failOpenEnv = process.env.RATE_LIMIT_FAIL_OPEN;
+    const failOpen = failOpenEnv === "true";
+    // Parse custom limits from environment
+    const customLimits = {};
+    const storeMemoryLimit = process.env.RATE_LIMIT_STORE_MEMORY;
+    if (storeMemoryLimit) {
+        customLimits.store_memory = parseInt(storeMemoryLimit, 10);
+    }
+    const retrieveMemoryLimit = process.env.RATE_LIMIT_RETRIEVE_MEMORY;
+    if (retrieveMemoryLimit) {
+        customLimits.retrieve_memory = parseInt(retrieveMemoryLimit, 10);
+    }
+    const listRecentLimit = process.env.RATE_LIMIT_LIST_RECENT;
+    if (listRecentLimit) {
+        customLimits.list_recent = parseInt(listRecentLimit, 10);
+    }
+    const getStatsLimit = process.env.RATE_LIMIT_GET_STATS;
+    if (getStatsLimit) {
+        customLimits.get_stats = parseInt(getStatsLimit, 10);
+    }
+    // Emergency limit for in-memory fallback (very conservative)
+    const emergencyLimit = parseInt(process.env.RATE_LIMIT_EMERGENCY || "10", 10);
+    return {
+        defaultTier,
+        failOpen,
+        customLimits: Object.keys(customLimits).length > 0 ? customLimits : undefined,
+        emergencyLimit,
+    };
+}
+/**
+ * Build rate limit configuration by merging tier defaults with custom limits
+ *
+ * @param tier - Base tier
+ * @param customLimits - Custom limit overrides
+ * @returns Merged rate limit configuration
+ */
+export function buildRateLimitConfig(tier, customLimits) {
+    const tierLimits = getTierLimits(tier);
+    if (!customLimits) {
+        return tierLimits;
+    }
+    // Merge custom limits with tier defaults
+    const merged = { ...tierLimits };
+    for (const [operation, maxRequests] of Object.entries(customLimits)) {
+        if (merged[operation]) {
+            merged[operation] = {
+                ...merged[operation],
+                maxRequests,
+            };
+        }
+    }
+    return merged;
+}
+//# sourceMappingURL=rate-limits.js.map

package/dist/config 2/rate-limits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limits.js","sourceRoot":"","sources":["../../src/config/rate-limits.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAYH;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,WAAW,GAAsD;IAC5E,QAAQ,EAAE;QACR,YAAY,EAAE;YACZ,WAAW,EAAE,GAAG;YAChB,aAAa,EAAE,EAAE;SAClB;QACD,eAAe,EAAE;YACf,WAAW,EAAE,GAAG;YAChB,aAAa,EAAE,EAAE;SAClB;QACD,WAAW,EAAE;YACX,WAAW,EAAE,EAAE;YACf,aAAa,EAAE,EAAE;SAClB;QACD,SAAS,EAAE;YACT,WAAW,EAAE,EAAE;YACf,aAAa,EAAE,EAAE;SAClB;KACF;IACD,OAAO,EAAE;QACP,YAAY,EAAE;YACZ,WAAW,EAAE,GAAG;YAChB,aAAa,EAAE,EAAE;SAClB;QACD,eAAe,EAAE;YACf,WAAW,EAAE,IAAI;YACjB,aAAa,EAAE,EAAE;SAClB;QACD,WAAW,EAAE;YACX,WAAW,EAAE,GAAG;YAChB,aAAa,EAAE,EAAE;SAClB;QACD,SAAS,EAAE;YACT,WAAW,EAAE,GAAG;YAChB,aAAa,EAAE,EAAE;SAClB;KACF;IACD,SAAS,EAAE;QACT,iEAAiE;QACjE,0DAA0D;QAC1D,YAAY,EAAE;YACZ,WAAW,EAAE,OAAO;YACpB,aAAa,EAAE,EAAE;SAClB;QACD,eAAe,EAAE;YACf,WAAW,EAAE,OAAO;YACpB,aAAa,EAAE,EAAE;SAClB;QACD,WAAW,EAAE;YACX,WAAW,EAAE,OAAO;YACpB,aAAa,EAAE,EAAE;SAClB;QACD,SAAS,EAAE;YACT,WAAW,EAAE,OAAO;YACpB,aAAa,EAAE,EAAE;SAClB;KACF;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,WAAW,CAAC;AAE5C;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,IAAc;IAC1C,OAAO,WAAW,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC;AACnD,CAAC;AAmBD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,yBAAyB;IACvC,MAAM,WAAW,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,UAAU,CAAa,CAAC;IAEpF,6EAA6E;IAC7E,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IACrD,MAAM,QAAQ,GAAG,WAAW,KAAK,MAAM,CAAC;IAExC,uCAAuC;IACvC,MAAM,YAAY,GAA2B,EAAE,CAAC;IAEhD,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;IAC7D,IAAI,gBAAgB,EAAE,CAAC;QACrB,YAAY,CAAC,YAAY,GAAG,QAAQ,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,mBAAmB,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;IACnE,IAAI,mBAAmB,EAAE,CAAC;QACxB,YAAY,CAAC,eAAe,GAAG,QAAQ,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;IAC3D,IAAI,eAAe,EAAE,CAAC;QACpB,YAAY,CAAC,WAAW,GAAG,QAAQ,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IACvD,IAAI,aAAa,EAAE,CAAC;QAClB,YAAY,CAAC,SAAS,GAAG,QAAQ,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,6DAA6D;IAC7D,MAAM,cAAc,GAAG,QAAQ,CAC7B,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,IAAI,EACxC,EAAE,CACH,CAAC;IAEF,OAAO;QACL,WAAW;QACX,QAAQ;QACR,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;QAC7E,cAAc;KACf,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAAc,EACd,YAAqC;IAErC,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAEvC,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,yCAAyC;IACzC,MAAM,MAAM,GAAoC,EAAE,GAAG,UAAU,EAAE,CAAC;IAElE,KAAK,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QACpE,IAAI,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YACtB,MAAM,CAAC,SAAS,CAAC,GAAG;gBAClB,GAAG,MAAM,CAAC,SAAS,CAAC;gBACpB,WAAW;aACZ,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/consolidation/pipeline.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Consolidation Pipeline - v3.0 Implementation
+ *
+ * Nightly process: working → semantic memory transformation.
+ * Runs at 3 AM, extracts knowledge, applies decay, detects conflicts.
+ */
+import { WorkingMemoryLayer } from '../memory-layers/working-memory.js';
+import { SemanticMemoryLayer } from '../memory-layers/semantic-memory.js';
+import { SkillLibrary } from '../memory-layers/skill-library.js';
+import Database from 'better-sqlite3';
+export interface ConsolidationStats {
+    memoriesProcessed: number;
+    entitiesExtracted: number;
+    relationshipsCreated: number;
+    conflictsDetected: number;
+    memoriesPruned: number;
+    skillsExtracted: number;
+    duration: number;
+}
+export declare class ConsolidationPipeline {
+    private workingMemory;
+    private semanticMemory;
+    private skillLibrary;
+    private db;
+    constructor(workingMemory: WorkingMemoryLayer, semanticMemory: SemanticMemoryLayer, skillLibrary: SkillLibrary, db: Database.Database);
+    /**
+     * Run full consolidation cycle
+     */
+    consolidate(): Promise<ConsolidationStats>;
+    /**
+     * Extract entities and relationships from memory
+     * Simple keyword-based extraction (will enhance with LLM later)
+     */
+    private extractKnowledge;
+    /**
+     * Detect simple conflicts (temporal impossibilities, contradictions)
+     */
+    private detectConflicts;
+    /**
+     * Prune low-value memories
+     */
+    private pruneMemories;
+    /**
+     * Extract skills from positive interactions
+     */
+    private extractSkills;
+    /**
+     * Create backup for rollback capability
+     */
+    private createBackup;
+}
+//# sourceMappingURL=pipeline.d.ts.map

package/dist/consolidation/pipeline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipeline.d.ts","sourceRoot":"","sources":["../../src/consolidation/pipeline.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AACxE,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AACjE,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AAEtC,MAAM,WAAW,kBAAkB;IACjC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,qBAAa,qBAAqB;IAChC,OAAO,CAAC,aAAa,CAAqB;IAC1C,OAAO,CAAC,cAAc,CAAsB;IAC5C,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,EAAE,CAAoB;gBAG5B,aAAa,EAAE,kBAAkB,EACjC,cAAc,EAAE,mBAAmB,EACnC,YAAY,EAAE,YAAY,EAC1B,EAAE,EAAE,QAAQ,CAAC,QAAQ;IAQvB;;OAEG;IACG,WAAW,IAAI,OAAO,CAAC,kBAAkB,CAAC;IA8DhD;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IAuCxB;;OAEG;IACH,OAAO,CAAC,eAAe;IA+CvB;;OAEG;IACH,OAAO,CAAC,aAAa;IAsBrB;;OAEG;IACH,OAAO,CAAC,aAAa;IAwBrB;;OAEG;IACH,OAAO,CAAC,YAAY;CAcrB"}