Memory Classification

// Priority 1: Restricted - PII / payment keywords in content
/\b(ssn|social security|credit card|pci|pii)\b/i

// Priority 2a: Confidential - auth/secrets file paths
/\/(auth|secrets|credentials|keys)\//i
/\/\.env(\b|$)/i

// Priority 2b: Confidential - credential keywords in content
/\b(password|api[_-]?key|token|private[_-]?key|secret)\b/i

// Priority 3: Internal - compliance decision + compliance keywords
// Only applies when sourceType === 'decision'
/\b(compliance|security|audit|policy|sox|sr[-_ ]?11[-_ ]?7|gdpr|hipaa)\b/i

// Priority 4: Public - only public/docs paths, no sensitive content
/\/(public|docs)\//i

// Default: internal

import { classifyObservation } from '@/lib/memory/classification'

const tier = classifyObservation({
  content: 'Added OAuth token rotation to auth middleware',
  sourceFiles: ['src/auth/token-rotation.ts'],
  sourceType: 'decision',
})
// => 'confidential'  (auth/ path match)

const tier2 = classifyObservation({
  content: 'Updated API documentation for user endpoints',
  sourceFiles: ['public/docs/api-reference.md'],
  sourceType: 'fact',
})
// => 'public'  (all paths are public/docs paths, no sensitive content)

interface ClassifyObservationInput {
  content: string
  sourceFiles?: string[]       // file paths from which the observation was derived
  sourceType?: 'decision' | 'fact' | 'preference' | 'tool_result'
}

import { aligns } from '@/lib/memory/classification'

aligns('public')       // => 'low'
aligns('internal')     // => 'medium'
aligns('confidential') // => 'high'
aligns('restricted')   // => 'critical'

// pg-observation-store.ts: deriveClassification
function deriveClassification(meta: Record<string, unknown>): MemoryClassification {
  const c = meta.classification
  if (typeof c === 'string' && VALID_CLASSIFICATIONS.has(c)) {
    return c as MemoryClassification
  }
  return 'internal'  // safe default
}