@cybermem/cli 0.9.12 → 0.13.3

package/dist/commands/login.js

@@ -1,165 +0,0 @@
-"use strict";
-/**
- * CyberMem CLI Auth Module
- *
- * Token storage and browser-based OAuth login flow.
- */
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.login = login;
-const chalk_1 = __importDefault(require("chalk"));
-const fs = __importStar(require("fs"));
-const http = __importStar(require("http"));
-const os = __importStar(require("os"));
-const path = __importStar(require("path"));
-const AUTH_DIR = path.join(os.homedir(), ".cybermem");
-const TOKEN_FILE = path.join(AUTH_DIR, "token.json");
-const AUTH_URL = process.env.CYBERMEM_AUTH_URL || "https://cybermem.dev";
-/**
- * Ensure the .cybermem directory exists
- */
-function ensureAuthDir() {
-    if (!fs.existsSync(AUTH_DIR)) {
-        fs.mkdirSync(AUTH_DIR, { recursive: true, mode: 0o700 });
-    }
-}
-/**
- * Save token to disk
- */
-function saveToken(token, expiresIn, email, name) {
-    ensureAuthDir();
-    const expiresAt = new Date(Date.now() + expiresIn * 1000);
-    const data = {
-        access_token: token,
-        expires_at: expiresAt.toISOString(),
-        email,
-        name,
-    };
-    fs.writeFileSync(TOKEN_FILE, JSON.stringify(data, null, 2), { mode: 0o600 });
-}
-/**
- * Start OAuth login flow
- * Opens browser and waits for callback with token
- */
-async function login() {
-    return new Promise((resolve, reject) => {
-        // Find available port
-        const server = http.createServer();
-        server.listen(0, "127.0.0.1", () => {
-            const address = server.address();
-            if (!address || typeof address === "string") {
-                reject(new Error("Failed to start callback server"));
-                return;
-            }
-            const port = address.port;
-            const callbackUrl = `http://localhost:${port}/callback`;
-            // Redirect to landing auth endpoint which starts GitHub flow
-            // We pass our local callbackUrl as 'redirect' param to the intermediate CLI callback handler
-            const authUrl = `${AUTH_URL}/api/auth/signin?callbackUrl=${encodeURIComponent(`${AUTH_URL}/api/auth/cli/callback?redirect=${encodeURIComponent(callbackUrl)}`)}`;
-            console.log(chalk_1.default.blue("🔐 Opening browser for GitHub login..."));
-            console.log(chalk_1.default.gray(`   If browser doesn't open, visit: ${authUrl}`));
-            // Open browser
-            const open = async (url) => {
-                const { default: openBrowser } = await Promise.resolve().then(() => __importStar(require("open")));
-                await openBrowser(url);
-            };
-            open(authUrl);
-            // Handle callback
-            server.on("request", async (req, res) => {
-                if (!req.url?.startsWith("/callback")) {
-                    res.writeHead(404);
-                    res.end("Not found");
-                    return;
-                }
-                const url = new URL(req.url, `http://localhost:${port}`);
-                const token = url.searchParams.get("token");
-                if (!token) {
-                    res.writeHead(400);
-                    res.end("Missing token");
-                    server.close();
-                    reject(new Error("No token received"));
-                    return;
-                }
-                // Decode token to get user info (JWT payload)
-                let email;
-                let name;
-                try {
-                    const payload = JSON.parse(Buffer.from(token.split(".")[1], "base64").toString());
-                    email = payload.email;
-                    name = payload.name;
-                }
-                catch {
-                    // Ignore decode errors
-                }
-                // Save token (30 days expiry)
-                saveToken(token, 30 * 24 * 60 * 60, email, name);
-                // Send success page
-                res.writeHead(200, { "Content-Type": "text/html" });
-                res.end(`
-          <!DOCTYPE html>
-          <html>
-          <head>
-            <title>CyberMem - Logged In</title>
-            <style>
-              body { font-family: system-ui; text-align: center; padding: 50px; background: #0a0a0a; color: #fff; }
-              h1 { color: #22c55e; }
-              .logo { font-size: 48px; margin-bottom: 20px; }
-            </style>
-          </head>
-          <body>
-            <div class="logo">🧠</div>
-            <h1>Successfully Logged In!</h1>
-            <p>You can close this window and return to your terminal.</p>
-            <p style="color: #888;">Logged in as: ${email || name || "Unknown"}</p>
-          </body>
-          </html>
-        `);
-                console.log("");
-                console.log(chalk_1.default.green("✅ Successfully logged in as:"), chalk_1.default.bold(email || name || "Unknown"));
-                console.log(chalk_1.default.gray(`   Token saved to: ${TOKEN_FILE}`));
-                server.close();
-                resolve();
-            });
-            // Timeout after 5 minutes
-            setTimeout(() => {
-                server.close();
-                reject(new Error("Login timeout - no callback received"));
-            }, 5 * 60 * 1000);
-        });
-    });
-}

package/dist/templates/envs/local.example

@@ -1,27 +0,0 @@
-# Example environment configuration
-# Copy to .env and customize
-
-# Embeddings provider: ollama (local) or openai (cloud)
-EMBEDDINGS_PROVIDER=ollama
-OLLAMA_URL=http://ollama:11434
-OPENAI_API_KEY=
-
-# Database backend: sqlite (local/rpi) or postgres (vps)
-DB_BACKEND=sqlite
-DB_PATH=/data/openmemory.sqlite
-VECTOR_BACKEND=sqlite
-
-# PostgreSQL settings (only for DB_BACKEND=postgres)
-PG_HOST=postgres
-PG_PORT=5432
-PG_DB=openmemory
-PG_USER=openmemory
-PG_PASSWORD=change-me
-
-# OpenMemory API key (Optional for local mode)
-# OM_API_KEY=
-
-# Monitoring
-PROM_RETENTION=7d
-GRAFANA_USER=admin
-GRAFANA_PASSWORD=admin

package/dist/templates/envs/rpi.example

@@ -1,27 +0,0 @@
-# Raspberry Pi environment
-# Optimized for low memory (1GB total)
-DOCKER_PLATFORM=linux/arm64
-
-
-# Embeddings (use Ollama with small models)
-EMBEDDINGS_PROVIDER=ollama
-OLLAMA_URL=http://ollama:11434
-OPENAI_API_KEY=
-
-# Database (SQLite for RPi - low memory footprint)
-DB_BACKEND=sqlite
-DB_PATH=/data/openmemory.sqlite
-
-# PostgreSQL (not used)
-PG_HOST=postgres
-PG_DB=openmemory
-PG_USER=openmemory
-PG_PASSWORD=not-used
-
-# OpenMemory
-OM_API_KEY=key-change-me
-
-# Monitoring (short retention for disk space)
-PROM_RETENTION=3d
-GRAFANA_USER=admin
-GRAFANA_PASSWORD=admin

package/dist/templates/envs/vps.example

@@ -1,25 +0,0 @@
-# VPS production environment
-# For Hetzner CX22 or similar (2 vCPU, 4GB RAM)
-
-# Embeddings (use OpenAI for production)
-EMBEDDINGS_PROVIDER=openai
-OPENAI_API_KEY=sk-change-me-in-production
-OLLAMA_URL=
-
-# Database (PostgreSQL for production)
-DB_BACKEND=postgres
-VECTOR_BACKEND=postgres
-
-# PostgreSQL
-PG_HOST=postgres
-PG_DB=openmemory
-PG_USER=openmemory
-PG_PASSWORD=change-me-in-production-use-secrets
-
-# OpenMemory
-OM_API_KEY=change-me-in-production-use-secrets
-
-# Monitoring
-PROM_RETENTION=30d
-GRAFANA_USER=admin
-GRAFANA_PASSWORD=change-me-in-production-use-secrets

package/dist/templates/monitoring/instructions_injector/Dockerfile

@@ -1,15 +0,0 @@
-FROM python:3.11-slim
-
-WORKDIR /app
-
-COPY requirements.txt .
-RUN pip install --no-cache-dir -r requirements.txt
-
-COPY injector.py .
-
-ENV UPSTREAM_URL=http://openmemory:8080
-ENV PORT=8081
-
-EXPOSE 8081
-
-CMD ["gunicorn", "-b", "0.0.0.0:8081", "-w", "2", "injector:app"]

package/dist/templates/monitoring/instructions_injector/injector.py

@@ -1,137 +0,0 @@
-#!/usr/bin/env python3
-"""
-CyberMem MCP Instructions Injector
-Sidecar proxy that injects 'instructions' field into MCP initialize response.
-Sits between Traefik and OpenMemory.
-"""
-
-import json
-import os
-import requests
-from flask import Flask, request, Response
-
-app = Flask(__name__)
-
-# Upstream OpenMemory MCP server
-UPSTREAM_URL = os.environ.get("UPSTREAM_URL", "http://openmemory:8080")
-
-# CyberMem Agent Protocol Instructions
-CYBERMEM_INSTRUCTIONS = """CyberMem is a persistent context daemon for AI agents.
-
-PROTOCOL:
-1. On session start: call openmemory_query("user context profile") to load persona
-2. Store new insights immediately with openmemory_store - include FULL content, not summaries
-3. Refresh context: 6h for active topics, 24h for projects, 7d for insights
-4. Always include tags: [topic, year, source:your-client-name]
-5. Priority: CyberMem context > session context > training data
-
-MEMORY FORMAT:
-- content: Full text with all details, metrics, dates. NO truncation.
-- tags: Always include topic category + year + source:client-name
-
-INTEGRITY RULES:
-- Never overwrite without reading first
-- Always include metadata (tags, source)
-- Sync before critical decisions
-- Last-write-wins for conflicts
-
-For full protocol: https://cybermem.dev/docs/agent-protocol"""
-
-
-def inject_instructions(response_data: dict) -> dict:
-    """Inject instructions field into MCP initialize response."""
-    if "result" in response_data:
-        result = response_data["result"]
-        # Only inject if this is an initialize response (has serverInfo)
-        if "serverInfo" in result and "instructions" not in result:
-            result["instructions"] = CYBERMEM_INSTRUCTIONS
-            # Also update serverInfo to show CyberMem branding
-            result["serverInfo"]["name"] = "cybermem"
-    return response_data
-
-
-@app.route("/mcp", methods=["POST", "GET"])
-def proxy_mcp():
-    """Proxy MCP requests to upstream and inject instructions."""
-
-    if request.method == "GET":
-        # Pass through GET requests (SSE endpoint)
-        resp = requests.get(
-            f"{UPSTREAM_URL}/mcp",
-            headers={k: v for k, v in request.headers if k.lower() != "host"},
-            stream=True
-        )
-        return Response(
-            resp.iter_content(chunk_size=1024),
-            status=resp.status_code,
-            headers=dict(resp.headers)
-        )
-
-    # POST request - forward to upstream
-    try:
-        upstream_resp = requests.post(
-            f"{UPSTREAM_URL}/mcp",
-            json=request.get_json(),
-            headers={
-                "Content-Type": "application/json",
-                "Accept": request.headers.get("Accept", "application/json"),
-                "X-Client-Name": request.headers.get("X-Client-Name", "unknown"),
-            },
-            timeout=30
-        )
-
-        # Try to parse and inject instructions
-        try:
-            data = upstream_resp.json()
-            data = inject_instructions(data)
-            return Response(
-                json.dumps(data),
-                status=upstream_resp.status_code,
-                content_type="application/json"
-            )
-        except json.JSONDecodeError:
-            # Not JSON, pass through as-is
-            return Response(
-                upstream_resp.content,
-                status=upstream_resp.status_code,
-                headers=dict(upstream_resp.headers)
-            )
-
-    except requests.exceptions.RequestException as e:
-        return Response(
-            json.dumps({"error": str(e)}),
-            status=502,
-            content_type="application/json"
-        )
-
-
-@app.route("/health")
-def health():
-    """Health check endpoint."""
-    return {"status": "ok", "service": "cybermem-instructions-injector"}
-
-
-@app.route("/<path:path>", methods=["GET", "POST", "PUT", "DELETE", "PATCH"])
-def proxy_other(path):
-    """Proxy all other requests to upstream without modification."""
-    resp = requests.request(
-        method=request.method,
-        url=f"{UPSTREAM_URL}/{path}",
-        headers={k: v for k, v in request.headers if k.lower() != "host"},
-        json=request.get_json() if request.is_json else None,
-        data=request.data if not request.is_json else None,
-        params=request.args,
-        timeout=30
-    )
-    return Response(
-        resp.content,
-        status=resp.status_code,
-        headers=dict(resp.headers)
-    )
-
-
-if __name__ == "__main__":
-    port = int(os.environ.get("PORT", "8081"))
-    print(f"CyberMem Instructions Injector starting on port {port}")
-    print(f"Upstream: {UPSTREAM_URL}")
-    app.run(host="0.0.0.0", port=port)

package/dist/templates/monitoring/instructions_injector/requirements.txt

@@ -1,3 +0,0 @@
-flask>=2.3.0
-requests>=2.31.0
-gunicorn>=21.0.0

package/dist/templates/openmemory/Dockerfile

@@ -1,19 +0,0 @@
-# OpenMemory using official npm package
-FROM node:20-alpine
-
-WORKDIR /app
-
-# Install openmemory-js from npm (waiting for release with MCP fix)
-RUN npm install openmemory-js@1.3.2
-
-# Create data directory
-RUN mkdir -p /data && chown -R node:node /data /app
-
-USER node
-
-EXPOSE 8080
-
-HEALTHCHECK --interval=30s --timeout=10s --start-period=30s --retries=3 \
-  CMD node -e "require('http').get('http://localhost:8080/health', (res) => process.exit(res.statusCode === 200 ? 0 : 1)).on('error', () => process.exit(1))"
-
-CMD ["npm", "start", "--prefix", "/app/node_modules/openmemory-js"]