@schift-io/memory 0.1.0 → 0.1.1

package/hooks/session-start

@@ -18,7 +18,7 @@ ENDJSON
 fi
 
 # Validate key is not empty/expired
-api_key=$(python3 -c "import json; print(json.load(open('${AUTH_FILE}'))['api_key'])" 2>/dev/null || echo "")
+api_key=$(node -e "try{const d=JSON.parse(require('fs').readFileSync('${AUTH_FILE}','utf-8'));process.stdout.write(d.api_key||'')}catch{}" 2>/dev/null || echo "")
 if [ -z "$api_key" ]; then
   cat <<ENDJSON
 {

package/mcp-server.js

@@ -92,7 +92,9 @@ const TOOLS = [
 
 async function handleToolCall(name, args) {
   switch (name) {
-    case 'save_url':
+    case 'save_url': {
+      try { new URL(args.url); } catch { throw new Error(`Invalid URL: ${args.url}`); }
+      if (!/^https?:$/.test(new URL(args.url).protocol)) throw new Error('Only http/https URLs are supported');
       return apiCall('/v1/memory/ingest-url', {
         url: args.url,
         domain: args.domain || 'ops',
@@ -100,7 +102,7 @@ async function handleToolCall(name, args) {
         summary: args.summary,
         context: args.context,
         findings: args.findings,
-      });
+      });}
 
     case 'save_note':
       return apiCall('/v1/memory/compact', {
@@ -122,7 +124,9 @@ async function handleToolCall(name, args) {
       const auth = loadAuth();
       if (!auth) return { status: 'not_authenticated', message: 'Run: npx @schift-io/memory login' };
       try {
-        const resp = await fetch(`${auth.url}/health`);
+        const resp = await fetch(`${auth.url}/v1/organizations/me`, {
+          headers: { 'Authorization': `Bearer ${auth.key}` },
+        });
         return { status: 'connected', cloud_url: auth.url, healthy: resp.ok };
       } catch (e) {
         return { status: 'error', message: e.message };

package/package.json

@@ -1,9 +1,12 @@
 {
   "name": "@schift-io/memory",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Second brain for Claude Code - saves conversations and web content to Schift Cloud",
   "type": "module",
   "license": "MIT",
+  "engines": {
+    "node": ">=18"
+  },
   "bin": {
     "schift-memory-mcp": "./mcp-server.js"
   },

package/scripts/auto-ingest-url.sh

@@ -1,22 +1,30 @@
 #!/usr/bin/env bash
-# Post-WebFetch hook: detects URLs from tool output and offers to save
-# This runs async after WebFetch calls - it queues the URL for next prompt
+# Post-WebFetch hook: queues URLs for save prompt
 set -euo pipefail
 
-SCHIFT_API="${SCHIFT_API_URL:-http://localhost:8787}"
-SCHIFT_KEY="${SCHIFT_API_KEY:-local}"
 QUEUE_FILE="$HOME/.schift/memory/queue/pending-urls.jsonl"
 
 # Read tool input from stdin (Claude Code passes hook context)
 input=$(cat 2>/dev/null || echo "{}")
-url=$(echo "$input" | python3 -c "import sys,json; d=json.load(sys.stdin); print(d.get('tool_input',{}).get('url',''))" 2>/dev/null || echo "")
 
-if [ -z "$url" ] || [ "$url" = "None" ]; then
+# Use node (guaranteed in Claude Code) instead of python3
+url=$(node -e "
+  try {
+    const d = JSON.parse(process.argv[1]);
+    const u = (d.tool_input || {}).url || '';
+    if (u) process.stdout.write(u);
+  } catch {}
+" "$input" 2>/dev/null || echo "")
+
+if [ -z "$url" ]; then
   exit 0
 fi
 
-# Queue the URL for the assistant to ask about
+# Safe JSON serialization via node
 mkdir -p "$(dirname "$QUEUE_FILE")"
-echo "{\"url\": \"${url}\", \"timestamp\": \"$(date -u +%Y-%m-%dT%H:%M:%SZ)\"}" >> "$QUEUE_FILE"
+node -e "
+  const line = JSON.stringify({ url: process.argv[1], timestamp: new Date().toISOString() });
+  process.stdout.write(line + '\n');
+" "$url" >> "$QUEUE_FILE"
 
 exit 0

package/scripts/init.sh

@@ -21,7 +21,7 @@ if [ ! -f "$AUTH_FILE" ]; then
   exit 1
 fi
 
-api_key=$(python3 -c "import json; print(json.load(open('${AUTH_FILE}'))['api_key'])" 2>/dev/null || echo "")
+api_key=$(node -e "try{process.stdout.write(JSON.parse(require('fs').readFileSync('${AUTH_FILE}','utf-8')).api_key||'')}catch{}" 2>/dev/null || echo "")
 if [ -z "$api_key" ]; then
   echo "  Auth file exists but API key is missing."
   echo "  Run: npx @schift-io/memory login"
@@ -30,10 +30,10 @@ fi
 
 # --- Step 2: Validate key against Schift Cloud ---
 echo "  Validating Schift account..."
-cloud_url=$(python3 -c "import json; print(json.load(open('${AUTH_FILE}')).get('cloud_url','${SCHIFT_CLOUD}'))" 2>/dev/null || echo "${SCHIFT_CLOUD}")
+cloud_url=$(node -e "try{process.stdout.write(JSON.parse(require('fs').readFileSync('${AUTH_FILE}','utf-8')).cloud_url||'${SCHIFT_CLOUD}')}catch{process.stdout.write('${SCHIFT_CLOUD}')}" 2>/dev/null || echo "${SCHIFT_CLOUD}")
 validate=$(curl -sf -o /dev/null -w "%{http_code}" \
   -H "Authorization: Bearer ${api_key}" \
-  "${cloud_url}/v1/me" 2>/dev/null || echo "000")
+  "${cloud_url}/v1/organizations/me" 2>/dev/null || echo "000")
 
 if [ "$validate" != "200" ]; then
   echo "  API key is invalid or expired."
@@ -49,7 +49,7 @@ mkdir -p "$HOME/.schift/memory"/{config,sources/web,compact/session,compact/topi
 
 # --- Step 4: Bootstrap bucket on Schift Cloud ---
 echo "  Creating knowledge bucket on Schift Cloud..."
-curl -sf -X POST "${cloud_url}/v1/local-memory/bootstrap" \
+curl -sf -X POST "${cloud_url}/v1/memory/bootstrap" \
   -H "Content-Type: application/json" \
   -H "Authorization: Bearer ${api_key}" > /dev/null 2>&1 || true
 

package/scripts/login.sh

@@ -13,11 +13,11 @@ echo ""
 
 # Check if already logged in
 if [ -f "$AUTH_FILE" ]; then
-  existing_key=$(python3 -c "import json; print(json.load(open('${AUTH_FILE}'))['api_key'])" 2>/dev/null || echo "")
+  existing_key=$(node -e "try{process.stdout.write(JSON.parse(require('fs').readFileSync('${AUTH_FILE}','utf-8')).api_key||'')}catch{}" 2>/dev/null || echo "")
   if [ -n "$existing_key" ]; then
     validate=$(curl -sf -o /dev/null -w "%{http_code}" \
       -H "Authorization: Bearer ${existing_key}" \
-      "${SCHIFT_CLOUD}/v1/me" 2>/dev/null || echo "000")
+      "${SCHIFT_CLOUD}/v1/organizations/me" 2>/dev/null || echo "000")
     if [ "$validate" = "200" ]; then
       echo "  Already logged in. Account is valid."
       echo "  To re-login, delete: ${AUTH_FILE}"
@@ -41,7 +41,7 @@ fi
 echo "  Validating..."
 validate=$(curl -sf -o /dev/null -w "%{http_code}" \
   -H "Authorization: Bearer ${api_key}" \
-  "${SCHIFT_CLOUD}/v1/me" 2>/dev/null || echo "000")
+  "${SCHIFT_CLOUD}/v1/organizations/me" 2>/dev/null || echo "000")
 
 if [ "$validate" != "200" ]; then
   echo "  Invalid API key. Check your key and try again."