@tpsdev-ai/adk-flair 0.40.0

package/LICENSE

@@ -0,0 +1,19 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   Copyright 2026 TPS Dev AI
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -0,0 +1,112 @@
+# adk-flair — Flair memory backend for Google ADK (JS/TS)
+
+`@tpsdev-ai/adk-flair` is a TypeScript memory service that backs
+[Google ADK](https://github.com/google/adk-js) agents with
+[Flair](https://github.com/tpsdev-ai/flair) — a self-hosted, federated
+semantic memory engine. Keep your agent memory yours.
+
+```bash
+npm install @tpsdev-ai/adk-flair
+```
+
+## Quickstart
+
+Swap the memory service in your ADK agent:
+
+```typescript
+import { FlairMemoryService } from "@tpsdev-ai/adk-flair";
+import { Runner } from "@google/adk";
+
+const memoryService = new FlairMemoryService({
+  url: "http://localhost:19926",
+  agentId: "my-adk-app",
+  keyfile: "~/.flair/keys/my-adk-app.key",
+});
+
+const runner = new Runner({
+  agent,
+  appName: "my-app",
+  sessionService,
+  memoryService,
+});
+```
+
+### Dev UI (AdkApiServer)
+
+```typescript
+import { AdkApiServer } from "@google/adk";
+
+const server = new AdkApiServer({
+  memoryService: new FlairMemoryService(),
+});
+server.start();
+```
+
+## Configuration
+
+| Variable | Required | Default | Description |
+|---|---|---|---|
+| `FLAIR_URL` | No | `http://localhost:19926` | Flair HTTP endpoint |
+| `FLAIR_AGENT_ID` | Yes | — | Flair agent identity |
+| `FLAIR_KEYFILE` | Yes | — | Path to Ed25519 PKCS8 base64 keyfile |
+| `FLAIR_ALLOW_REMOTE_URL` | No | — | Set to `1` to allow non-localhost URLs |
+
+All values can also be passed directly to the constructor.
+
+## Architecture
+
+### Scope model
+
+Each ADK app authenticates as **one Flair agent** (its service identity).
+Per-user isolation is enforced by a **compound tag** — `adk:<app_name>:<user_id>`
+— attached to every record and filtered on every search. Colons in `app_name`
+or `user_id` are replaced with underscores to prevent delimiter breakage.
+
+### Search path
+
+- `user_id` is mandatory — empty/missing returns empty, never searches unscoped
+- Every hit is re-verified against the compound tag before mapping to `MemoryEntry`
+- Timeout budget: 2s total (connect 500ms, read 1500ms), one attempt, no retry
+- Search failures degrade silently with a structured warning (host, elapsed, phase)
+
+### Write path
+
+- Deterministic record IDs: `app:user:session:eventId` — re-ingestion upserts
+- Write failures log a structured warning (session id, event count, HTTP status)
+- No-text events are filtered (Vertex parity)
+
+## Security
+
+### Raw text is sent to the configured Flair instance
+
+All memory content — session transcripts, user messages, agent responses —
+is transmitted as raw text to the Flair instance at the configured URL.
+The Flair operator (which may be you) has full access to this data.
+Do not point `FLAIR_URL` at an instance you do not trust.
+
+### Metadata-level isolation, not cryptographic isolation
+
+All users of one ADK app share one Flair principal. Per-user isolation is
+enforced by tag-based server-side filtering, not cryptographic key separation.
+A bug in that filter would leak cross-user memories. For key-level isolation,
+use per-org Flair principals (the org layer).
+
+## API
+
+### `FlairMemoryService`
+
+Implements `BaseMemoryService` from `@google/adk`.
+
+#### Required methods (called by ADK)
+
+- **`addSessionToMemory(session)`** — batch-write session events to Flair
+- **`searchMemory(request)`** — semantic search with compound-tag scoping
+
+#### Extra methods (Vertex parity, not called by ADK)
+
+- **`addEventsToMemory(appName, userId, events, sessionId)`** — incremental per-turn writes
+- **`addMemory(appName, userId, memories)`** — direct memory writes
+
+## License
+
+Apache-2.0

package/dist/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * adk-flair — Flair as the memory backend for Google ADK (JS/TS).
+ *
+ * @packageDocumentation
+ */
+export { FlairMemoryService } from "./memory_service.js";
+export { compoundTag, sanitizeTagSegment } from "./tag.js";
+export { loadEd25519Key, signRequest } from "./signing.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC"}

package/dist/index.js

@@ -0,0 +1,9 @@
+/**
+ * adk-flair — Flair as the memory backend for Google ADK (JS/TS).
+ *
+ * @packageDocumentation
+ */
+export { FlairMemoryService } from "./memory_service.js";
+export { compoundTag, sanitizeTagSegment } from "./tag.js";
+export { loadEd25519Key, signRequest } from "./signing.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC"}

package/dist/memory_service.d.ts

@@ -0,0 +1,65 @@
+/**
+ * FlairMemoryService — Flair as the memory backend for Google ADK (JS/TS).
+ *
+ * Implements @google/adk's `BaseMemoryService` interface (2 required methods)
+ * plus the Vertex-parity extras (`addEventsToMemory`, `addMemory`).
+ *
+ * Ported from the Python `adk-flair` package. See specs/ADK-FLAIR-ADAPTER.md
+ * in the tpsdev-ai/cli repo for the full design.
+ */
+import type { BaseMemoryService, SearchMemoryRequest, SearchMemoryResponse } from "@google/adk";
+import type { MemoryEntry } from "@google/adk";
+import type { Session } from "@google/adk";
+import type { Event } from "@google/adk";
+export declare class FlairMemoryService implements BaseMemoryService {
+    private readonly _url;
+    private readonly _agentId;
+    private readonly _privateKey;
+    private readonly _timeoutMs;
+    /** Per-session state for custom_metadata warn-once (Python parity). */
+    private _warnedSessions;
+    /**
+     * @param url - Flair HTTP URL (default: FLAIR_URL env or http://localhost:19926)
+     * @param agentId - Flair agent ID (default: FLAIR_AGENT_ID env)
+     * @param keyfile - Path to Ed25519 PKCS8 base64 keyfile (default: FLAIR_KEYFILE env)
+     * @param timeoutMs - Total request timeout in ms (default: 2000)
+     */
+    constructor(opts?: {
+        url?: string;
+        agentId?: string;
+        keyfile?: string;
+        timeoutMs?: number;
+    });
+    addSessionToMemory(session: Session): Promise<void>;
+    searchMemory(request: SearchMemoryRequest): Promise<SearchMemoryResponse>;
+    /**
+     * Add events to memory incrementally (the quickstart's after_agent_callback path).
+     * Not called by ADK — use in after_agent_callback or directly.
+     *
+     * @param customMetadata - If provided, logs a once-per-session warning that
+     *   custom_metadata is not supported by adk-flair (Python parity).
+     */
+    addEventsToMemory(appName: string, userId: string, events: Event[], sessionId: string, customMetadata?: Record<string, unknown>): Promise<void>;
+    /**
+     * Add memory entries directly.
+     * Not called by ADK — use for direct memory writes.
+     *
+     * @param customMetadata - If provided, logs a once-per-session warning that
+     *   custom_metadata is not supported by adk-flair (Python parity).
+     */
+    addMemory(appName: string, userId: string, memories: MemoryEntry[], customMetadata?: Record<string, unknown>): Promise<void>;
+    /**
+     * Write a single record to Flair via PUT /Memory/{recordId}.
+     *
+     * The deterministic record ID is embedded in the URL path so the server
+     * can perform an idempotent upsert. The signing payload covers the full
+     * path (METHOD:pathname), so the path MUST include the record ID.
+     */
+    private _writeRecord;
+    /**
+     * Close the service. No-op for the HTTP-based implementation;
+     * provided for API compatibility with the Python package.
+     */
+    close(): Promise<void>;
+}
+//# sourceMappingURL=memory_service.d.ts.map

package/dist/memory_service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory_service.d.ts","sourceRoot":"","sources":["../src/memory_service.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAChG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAiDzC,qBAAa,kBAAmB,YAAW,iBAAiB;IAC1D,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAmB;IAC/C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,uEAAuE;IACvE,OAAO,CAAC,eAAe,CAA0B;IAEjD;;;;;OAKG;gBACS,IAAI,CAAC,EAAE;QACjB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB;IAqCK,kBAAkB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAqCnD,YAAY,CAChB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,oBAAoB,CAAC;IAmGhC;;;;;;OAMG;IACG,iBAAiB,CACrB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,KAAK,EAAE,EACf,SAAS,EAAE,MAAM,EACjB,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACvC,OAAO,CAAC,IAAI,CAAC;IAgDhB;;;;;;OAMG;IACG,SAAS,CACb,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,WAAW,EAAE,EACvB,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACvC,OAAO,CAAC,IAAI,CAAC;IAqDhB;;;;;;OAMG;YACW,YAAY;IAqC1B;;;OAGG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAG7B"}

package/dist/memory_service.js

@@ -0,0 +1,326 @@
+/**
+ * FlairMemoryService — Flair as the memory backend for Google ADK (JS/TS).
+ *
+ * Implements @google/adk's `BaseMemoryService` interface (2 required methods)
+ * plus the Vertex-parity extras (`addEventsToMemory`, `addMemory`).
+ *
+ * Ported from the Python `adk-flair` package. See specs/ADK-FLAIR-ADAPTER.md
+ * in the tpsdev-ai/cli repo for the full design.
+ */
+import * as crypto from "node:crypto";
+import { loadEd25519Key, signRequest } from "./signing.js";
+import { compoundTag } from "./tag.js";
+// ─── Constants ──────────────────────────────────────────────────────────────
+const LOCALHOST_HOSTS = new Set(["localhost", "127.0.0.1", "::1", "[::1]"]);
+const ALLOW_REMOTE_ENV = "FLAIR_ALLOW_REMOTE_URL";
+const DEFAULT_FLAIR_URL = "http://localhost:19926";
+// ─── Helpers ────────────────────────────────────────────────────────────────
+function isLocalhost(hostname) {
+    return LOCALHOST_HOSTS.has(hostname);
+}
+function resolveUrl(raw) {
+    let url;
+    try {
+        url = new URL(raw);
+    }
+    catch {
+        throw new Error(`FLAIR_URL: invalid URL: ${raw}`);
+    }
+    if (url.protocol !== "http:" && url.protocol !== "https:") {
+        throw new Error(`FLAIR_URL: unsupported protocol "${url.protocol}" — must be http or https`);
+    }
+    return url;
+}
+function epochMsToIso(ms) {
+    return new Date(ms).toISOString();
+}
+function extractText(content) {
+    if (!content || !content.parts)
+        return "";
+    return content.parts
+        .map((p) => p.text ?? "")
+        .filter(Boolean)
+        .join(" ");
+}
+// ─── FlairMemoryService ─────────────────────────────────────────────────────
+export class FlairMemoryService {
+    _url;
+    _agentId;
+    _privateKey;
+    _timeoutMs;
+    /** Per-session state for custom_metadata warn-once (Python parity). */
+    _warnedSessions = new Set();
+    /**
+     * @param url - Flair HTTP URL (default: FLAIR_URL env or http://localhost:19926)
+     * @param agentId - Flair agent ID (default: FLAIR_AGENT_ID env)
+     * @param keyfile - Path to Ed25519 PKCS8 base64 keyfile (default: FLAIR_KEYFILE env)
+     * @param timeoutMs - Total request timeout in ms (default: 2000)
+     */
+    constructor(opts) {
+        const rawUrl = opts?.url ?? process.env["FLAIR_URL"] ?? DEFAULT_FLAIR_URL;
+        const parsed = resolveUrl(rawUrl);
+        // URL gate: non-localhost requires explicit opt-in
+        if (!isLocalhost(parsed.hostname)) {
+            if (process.env[ALLOW_REMOTE_ENV] !== "1") {
+                throw new Error(`FLAIR_URL: refused non-localhost URL "${rawUrl}" — ` +
+                    `set ${ALLOW_REMOTE_ENV}=1 to allow remote Flair instances`);
+            }
+        }
+        this._url = parsed.origin;
+        const agentId = opts?.agentId ?? process.env["FLAIR_AGENT_ID"];
+        if (!agentId) {
+            throw new Error("FLAIR_AGENT_ID: missing — set FLAIR_AGENT_ID or pass agentId to constructor");
+        }
+        this._agentId = agentId;
+        const keyfile = opts?.keyfile ?? process.env["FLAIR_KEYFILE"];
+        if (!keyfile) {
+            throw new Error("FLAIR_KEYFILE: missing — set FLAIR_KEYFILE or pass keyfile to constructor");
+        }
+        this._privateKey = loadEd25519Key(keyfile);
+        this._timeoutMs = opts?.timeoutMs ?? 2000;
+    }
+    // ─── BaseMemoryService required methods ───────────────────────────────────
+    async addSessionToMemory(session) {
+        const { appName, userId, events } = session;
+        if (!events || events.length === 0)
+            return;
+        const tag = compoundTag(appName, userId);
+        let written = 0;
+        for (const event of events) {
+            const text = extractText(event.content);
+            if (!text)
+                continue; // filter no-text events (Vertex parity)
+            const recordId = `${appName}:${userId}:${session.id}:${event.id}`;
+            const body = {
+                id: recordId,
+                agentId: this._agentId,
+                content: text,
+                type: "session",
+                durability: "standard",
+                tags: [tag],
+                createdAt: epochMsToIso(event.timestamp),
+            };
+            try {
+                await this._writeRecord(recordId, body);
+                written++;
+            }
+            catch (err) {
+                const msg = err instanceof Error ? err.message : String(err);
+                console.warn(`[adk-flair] write failed for session ${session.id} event ${event.id} ` +
+                    `(written=${written}/${events.length}): ${msg}`);
+            }
+        }
+        if (written === 0)
+            return;
+    }
+    async searchMemory(request) {
+        const { appName, userId, query } = request;
+        // Mandatory userId: empty ⇒ return empty, never search unscoped
+        if (!userId) {
+            return { memories: [] };
+        }
+        const tag = compoundTag(appName, userId);
+        const path = "/SemanticSearch";
+        const body = JSON.stringify({
+            agentId: this._agentId,
+            q: query,
+            tag,
+            limit: 20,
+        });
+        const start = Date.now();
+        let phase = "connect";
+        try {
+            const authHeader = signRequest(this._privateKey, this._agentId, "POST", path);
+            const controller = new AbortController();
+            const timeoutId = setTimeout(() => controller.abort(), this._timeoutMs);
+            try {
+                phase = "connect";
+                const resp = await fetch(`${this._url}${path}`, {
+                    method: "POST",
+                    headers: {
+                        "Authorization": authHeader,
+                        "Content-Type": "application/json",
+                    },
+                    body,
+                    signal: controller.signal,
+                });
+                phase = "read";
+                if (!resp.ok) {
+                    const elapsed = Date.now() - start;
+                    console.warn(`[adk-flair] searchMemory HTTP ${resp.status}: ` +
+                        `host=${this._url} elapsed=${elapsed}ms phase=${phase}`);
+                    return { memories: [] };
+                }
+                const data = (await resp.json());
+                const results = data.results ?? [];
+                const memories = [];
+                for (const hit of results) {
+                    // Per-hit tag re-verification: drop hits missing the compound tag
+                    const hitTags = hit.tags ?? [];
+                    if (!hitTags.includes(tag))
+                        continue;
+                    const content = {
+                        role: "user",
+                        parts: [{ text: hit.content ?? "" }],
+                    };
+                    memories.push({
+                        content,
+                        author: hit.author,
+                        timestamp: hit.timestamp,
+                    });
+                }
+                return { memories };
+            }
+            finally {
+                clearTimeout(timeoutId);
+            }
+        }
+        catch (err) {
+            const elapsed = Date.now() - start;
+            const msg = err instanceof Error ? err.message : String(err);
+            console.warn(`[adk-flair] searchMemory failed: host=${this._url} ` +
+                `elapsed=${elapsed}ms phase=${phase} error="${msg}"`);
+            return { memories: [] };
+        }
+    }
+    // ─── Vertex-parity extras (not called by ADK, documented for direct use) ──
+    /**
+     * Add events to memory incrementally (the quickstart's after_agent_callback path).
+     * Not called by ADK — use in after_agent_callback or directly.
+     *
+     * @param customMetadata - If provided, logs a once-per-session warning that
+     *   custom_metadata is not supported by adk-flair (Python parity).
+     */
+    async addEventsToMemory(appName, userId, events, sessionId, customMetadata) {
+        if (!events || events.length === 0)
+            return;
+        // custom_metadata warn-once per session (Python parity)
+        if (customMetadata) {
+            const sessionKey = `${appName}:${userId}:${sessionId}`;
+            if (!this._warnedSessions.has(sessionKey)) {
+                this._warnedSessions.add(sessionKey);
+                console.warn("adk-flair: custom_metadata ignored — adk-flair does not " +
+                    `support custom_metadata keys (session=${sessionKey})`);
+            }
+        }
+        const tag = compoundTag(appName, userId);
+        let written = 0;
+        for (const event of events) {
+            const text = extractText(event.content);
+            if (!text)
+                continue;
+            const recordId = `${appName}:${userId}:${sessionId}:${event.id}`;
+            const body = {
+                id: recordId,
+                agentId: this._agentId,
+                content: text,
+                type: "session",
+                durability: "standard",
+                tags: [tag],
+                createdAt: epochMsToIso(event.timestamp),
+            };
+            try {
+                await this._writeRecord(recordId, body);
+                written++;
+            }
+            catch (err) {
+                const msg = err instanceof Error ? err.message : String(err);
+                console.warn(`[adk-flair] write failed for session ${sessionId} event ${event.id} ` +
+                    `(written=${written}/${events.length}): ${msg}`);
+            }
+        }
+        if (written === 0)
+            return;
+    }
+    /**
+     * Add memory entries directly.
+     * Not called by ADK — use for direct memory writes.
+     *
+     * @param customMetadata - If provided, logs a once-per-session warning that
+     *   custom_metadata is not supported by adk-flair (Python parity).
+     */
+    async addMemory(appName, userId, memories, customMetadata) {
+        if (!memories || memories.length === 0)
+            return;
+        // custom_metadata warn-once (Python parity)
+        if (customMetadata) {
+            const sessionKey = `${appName}:${userId}:direct`;
+            if (!this._warnedSessions.has(sessionKey)) {
+                this._warnedSessions.add(sessionKey);
+                console.warn("adk-flair: custom_metadata ignored — adk-flair does not " +
+                    "support custom_metadata keys");
+            }
+        }
+        const tag = compoundTag(appName, userId);
+        let written = 0;
+        for (const mem of memories) {
+            const text = extractText(mem.content);
+            if (!text)
+                continue;
+            const recordId = `${appName}:${userId}:direct:${crypto.randomUUID()}`;
+            const body = {
+                id: recordId,
+                agentId: this._agentId,
+                content: text,
+                type: "session",
+                durability: "standard",
+                tags: [tag],
+                createdAt: mem.timestamp ?? new Date().toISOString(),
+            };
+            if (mem.author) {
+                body.author = mem.author;
+            }
+            try {
+                await this._writeRecord(recordId, body);
+                written++;
+            }
+            catch (err) {
+                const msg = err instanceof Error ? err.message : String(err);
+                console.warn(`[adk-flair] direct memory write failed for id ${recordId} ` +
+                    `(written=${written}/${memories.length}): ${msg}`);
+            }
+        }
+        if (written === 0)
+            return;
+    }
+    // ─── Internal ─────────────────────────────────────────────────────────────
+    /**
+     * Write a single record to Flair via PUT /Memory/{recordId}.
+     *
+     * The deterministic record ID is embedded in the URL path so the server
+     * can perform an idempotent upsert. The signing payload covers the full
+     * path (METHOD:pathname), so the path MUST include the record ID.
+     */
+    async _writeRecord(recordId, body) {
+        const path = `/Memory/${recordId}`;
+        const authHeader = signRequest(this._privateKey, this._agentId, "PUT", path);
+        const controller = new AbortController();
+        const timeoutId = setTimeout(() => controller.abort(), this._timeoutMs);
+        try {
+            const resp = await fetch(`${this._url}${path}`, {
+                method: "PUT",
+                headers: {
+                    "Authorization": authHeader,
+                    "Content-Type": "application/json",
+                },
+                body: JSON.stringify(body),
+                signal: controller.signal,
+            });
+            if (!resp.ok) {
+                const text = await resp.text().catch(() => "");
+                throw new Error(`HTTP ${resp.status}${text ? `: ${text.slice(0, 200)}` : ""}`);
+            }
+        }
+        finally {
+            clearTimeout(timeoutId);
+        }
+    }
+    /**
+     * Close the service. No-op for the HTTP-based implementation;
+     * provided for API compatibility with the Python package.
+     */
+    async close() {
+        // no-op: no persistent connections to close
+    }
+}
+//# sourceMappingURL=memory_service.js.map

package/dist/memory_service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory_service.js","sourceRoot":"","sources":["../src/memory_service.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAOH,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAEvC,+EAA+E;AAE/E,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;AAC5E,MAAM,gBAAgB,GAAG,wBAAwB,CAAC;AAClD,MAAM,iBAAiB,GAAG,wBAAwB,CAAC;AAEnD,+EAA+E;AAE/E,SAAS,WAAW,CAAC,QAAgB;IACnC,OAAO,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,2BAA2B,GAAG,EAAE,CACjC,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CACb,oCAAoC,GAAG,CAAC,QAAQ,2BAA2B,CAC5E,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CAAC,EAAU;IAC9B,OAAO,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,WAAW,CAAC,OAA4B;IAC/C,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IAC1C,OAAO,OAAO,CAAC,KAAK;SACjB,GAAG,CAAC,CAAC,CAAoB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;SAC3C,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,+EAA+E;AAE/E,MAAM,OAAO,kBAAkB;IACZ,IAAI,CAAS;IACb,QAAQ,CAAS;IACjB,WAAW,CAAmB;IAC9B,UAAU,CAAS;IACpC,uEAAuE;IAC/D,eAAe,GAAgB,IAAI,GAAG,EAAE,CAAC;IAEjD;;;;;OAKG;IACH,YAAY,IAKX;QACC,MAAM,MAAM,GAAG,IAAI,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,iBAAiB,CAAC;QAC1E,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QAElC,mDAAmD;QACnD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClC,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,GAAG,EAAE,CAAC;gBAC1C,MAAM,IAAI,KAAK,CACb,yCAAyC,MAAM,MAAM;oBACrD,OAAO,gBAAgB,oCAAoC,CAC5D,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC;QAE1B,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAC/D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,6EAA6E,CAC9E,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QAExB,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAC9D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,2EAA2E,CAC5E,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QAE3C,IAAI,CAAC,UAAU,GAAG,IAAI,EAAE,SAAS,IAAI,IAAI,CAAC;IAC5C,CAAC;IAED,6EAA6E;IAE7E,KAAK,CAAC,kBAAkB,CAAC,OAAgB;QACvC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QAC5C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAE3C,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACzC,IAAI,OAAO,GAAG,CAAC,CAAC;QAEhB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACxC,IAAI,CAAC,IAAI;gBAAE,SAAS,CAAC,wCAAwC;YAE7D,MAAM,QAAQ,GAAG,GAAG,OAAO,IAAI,MAAM,IAAI,OAAO,CAAC,EAAE,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC;YAClE,MAAM,IAAI,GAA4B;gBACpC,EAAE,EAAE,QAAQ;gBACZ,OAAO,EAAE,IAAI,CAAC,QAAQ;gBACtB,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,SAAS;gBACf,UAAU,EAAE,UAAU;gBACtB,IAAI,EAAE,CAAC,GAAG,CAAC;gBACX,SAAS,EAAE,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC;aACzC,CAAC;YAEF,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;gBACxC,OAAO,EAAE,CAAC;YACZ,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7D,OAAO,CAAC,IAAI,CACV,wCAAwC,OAAO,CAAC,EAAE,UAAU,KAAK,CAAC,EAAE,GAAG;oBACvE,YAAY,OAAO,IAAI,MAAM,CAAC,MAAM,MAAM,GAAG,EAAE,CAChD,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,OAAO,KAAK,CAAC;YAAE,OAAO;IAC5B,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,OAA4B;QAE5B,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAE3C,gEAAgE;QAChE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QAC1B,CAAC;QAED,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,iBAAiB,CAAC;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;YAC1B,OAAO,EAAE,IAAI,CAAC,QAAQ;YACtB,CAAC,EAAE,KAAK;YACR,GAAG;YACH,KAAK,EAAE,EAAE;SACV,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,IAAI,KAAK,GAAG,SAAS,CAAC;QAEtB,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,WAAW,CAC5B,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,QAAQ,EACb,MAAM,EACN,IAAI,CACL,CAAC;YAEF,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;YAExE,IAAI,CAAC;gBACH,KAAK,GAAG,SAAS,CAAC;gBAClB,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,EAAE,EAAE;oBAC9C,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE;wBACP,eAAe,EAAE,UAAU;wBAC3B,cAAc,EAAE,kBAAkB;qBACnC;oBACD,IAAI;oBACJ,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC,CAAC;gBAEH,KAAK,GAAG,MAAM,CAAC;gBACf,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;oBACb,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;oBACnC,OAAO,CAAC,IAAI,CACV,iCAAiC,IAAI,CAAC,MAAM,IAAI;wBAChD,QAAQ,IAAI,CAAC,IAAI,YAAY,OAAO,YAAY,KAAK,EAAE,CACxD,CAAC;oBACF,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;gBAC1B,CAAC;gBAED,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAO9B,CAAC;gBAEF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;gBACnC,MAAM,QAAQ,GAAkB,EAAE,CAAC;gBAEnC,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;oBAC1B,kEAAkE;oBAClE,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;oBAC/B,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;wBAAE,SAAS;oBAErC,MAAM,OAAO,GAAY;wBACvB,IAAI,EAAE,MAAM;wBACZ,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;qBAC1B,CAAC;oBAEb,QAAQ,CAAC,IAAI,CAAC;wBACZ,OAAO;wBACP,MAAM,EAAE,GAAG,CAAC,MAAM;wBAClB,SAAS,EAAE,GAAG,CAAC,SAAS;qBACzB,CAAC,CAAC;gBACL,CAAC;gBAED,OAAO,EAAE,QAAQ,EAAE,CAAC;YACtB,CAAC;oBAAS,CAAC;gBACT,YAAY,CAAC,SAAS,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;YACnC,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO,CAAC,IAAI,CACV,yCAAyC,IAAI,CAAC,IAAI,GAAG;gBACrD,WAAW,OAAO,YAAY,KAAK,WAAW,GAAG,GAAG,CACrD,CAAC;YACF,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,6EAA6E;IAE7E;;;;;;OAMG;IACH,KAAK,CAAC,iBAAiB,CACrB,OAAe,EACf,MAAc,EACd,MAAe,EACf,SAAiB,EACjB,cAAwC;QAExC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAE3C,wDAAwD;QACxD,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,UAAU,GAAG,GAAG,OAAO,IAAI,MAAM,IAAI,SAAS,EAAE,CAAC;YACvD,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC1C,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBACrC,OAAO,CAAC,IAAI,CACV,0DAA0D;oBAC1D,yCAAyC,UAAU,GAAG,CACvD,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACzC,IAAI,OAAO,GAAG,CAAC,CAAC;QAEhB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACxC,IAAI,CAAC,IAAI;gBAAE,SAAS;YAEpB,MAAM,QAAQ,GAAG,GAAG,OAAO,IAAI,MAAM,IAAI,SAAS,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC;YACjE,MAAM,IAAI,GAA4B;gBACpC,EAAE,EAAE,QAAQ;gBACZ,OAAO,EAAE,IAAI,CAAC,QAAQ;gBACtB,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,SAAS;gBACf,UAAU,EAAE,UAAU;gBACtB,IAAI,EAAE,CAAC,GAAG,CAAC;gBACX,SAAS,EAAE,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC;aACzC,CAAC;YAEF,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;gBACxC,OAAO,EAAE,CAAC;YACZ,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7D,OAAO,CAAC,IAAI,CACV,wCAAwC,SAAS,UAAU,KAAK,CAAC,EAAE,GAAG;oBACtE,YAAY,OAAO,IAAI,MAAM,CAAC,MAAM,MAAM,GAAG,EAAE,CAChD,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,OAAO,KAAK,CAAC;YAAE,OAAO;IAC5B,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,SAAS,CACb,OAAe,EACf,MAAc,EACd,QAAuB,EACvB,cAAwC;QAExC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAE/C,4CAA4C;QAC5C,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,UAAU,GAAG,GAAG,OAAO,IAAI,MAAM,SAAS,CAAC;YACjD,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC1C,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBACrC,OAAO,CAAC,IAAI,CACV,0DAA0D;oBAC1D,8BAA8B,CAC/B,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACzC,IAAI,OAAO,GAAG,CAAC,CAAC;QAEhB,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACtC,IAAI,CAAC,IAAI;gBAAE,SAAS;YAEpB,MAAM,QAAQ,GAAG,GAAG,OAAO,IAAI,MAAM,WAAW,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC;YACtE,MAAM,IAAI,GAA4B;gBACpC,EAAE,EAAE,QAAQ;gBACZ,OAAO,EAAE,IAAI,CAAC,QAAQ;gBACtB,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,SAAS;gBACf,UAAU,EAAE,UAAU;gBACtB,IAAI,EAAE,CAAC,GAAG,CAAC;gBACX,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACrD,CAAC;YACF,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;YAC3B,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;gBACxC,OAAO,EAAE,CAAC;YACZ,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7D,OAAO,CAAC,IAAI,CACV,iDAAiD,QAAQ,GAAG;oBAC5D,YAAY,OAAO,IAAI,QAAQ,CAAC,MAAM,MAAM,GAAG,EAAE,CAClD,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,OAAO,KAAK,CAAC;YAAE,OAAO;IAC5B,CAAC;IAED,6EAA6E;IAE7E;;;;;;OAMG;IACK,KAAK,CAAC,YAAY,CACxB,QAAgB,EAChB,IAA6B;QAE7B,MAAM,IAAI,GAAG,WAAW,QAAQ,EAAE,CAAC;QACnC,MAAM,UAAU,GAAG,WAAW,CAC5B,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,QAAQ,EACb,KAAK,EACL,IAAI,CACL,CAAC;QAEF,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAExE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,EAAE,EAAE;gBAC9C,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE;oBACP,eAAe,EAAE,UAAU;oBAC3B,cAAc,EAAE,kBAAkB;iBACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAC1B,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACb,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC/C,MAAM,IAAI,KAAK,CACb,QAAQ,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9D,CAAC;YACJ,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,SAAS,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK;QACT,4CAA4C;IAC9C,CAAC;CACF"}

package/dist/signing.d.ts

@@ -0,0 +1,33 @@
+/**
+ * TPS-Ed25519 request signing for adk-flair.
+ *
+ * Loads a PKCS8 base64-encoded Ed25519 private key from a keyfile and
+ * produces `TPS-Ed25519 <agent-id>:<timestamp>:<nonce>:<base64-sig>`
+ * Authorization headers for Flair API requests.
+ */
+import * as crypto from "node:crypto";
+/**
+ * Load and validate an Ed25519 private key from a PKCS8 base64 keyfile.
+ *
+ * Parses the key material in the constructor path so that a bad keyfile
+ * fails immediately (before ADK's exception-swallowing search path can
+ * turn it into permanent silent empty recall).
+ *
+ * @param keyfilePath - Path to the keyfile (PKCS8 DER, base64-encoded)
+ * @returns A Node.js KeyObject for the Ed25519 private key
+ * @throws If the keyfile is missing, unreadable, or contains invalid key material
+ */
+export declare function loadEd25519Key(keyfilePath: string): crypto.KeyObject;
+/**
+ * Build the TPS-Ed25519 Authorization header value.
+ *
+ * Format: `TPS-Ed25519 <agent-id>:<timestamp>:<nonce>:<base64-sig>`
+ *
+ * @param privateKey - The loaded Ed25519 private key
+ * @param agentId - The Flair agent ID
+ * @param method - HTTP method (e.g. "POST")
+ * @param path - Request path (e.g. "/SemanticSearch")
+ * @returns The Authorization header value
+ */
+export declare function signRequest(privateKey: crypto.KeyObject, agentId: string, method: string, path: string): string;
+//# sourceMappingURL=signing.d.ts.map

package/dist/signing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signing.d.ts","sourceRoot":"","sources":["../src/signing.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAGtC;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAAC,SAAS,CAgDpE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,WAAW,CACzB,UAAU,EAAE,MAAM,CAAC,SAAS,EAC5B,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,GACX,MAAM,CAOR"}

package/dist/signing.js

@@ -0,0 +1,80 @@
+/**
+ * TPS-Ed25519 request signing for adk-flair.
+ *
+ * Loads a PKCS8 base64-encoded Ed25519 private key from a keyfile and
+ * produces `TPS-Ed25519 <agent-id>:<timestamp>:<nonce>:<base64-sig>`
+ * Authorization headers for Flair API requests.
+ */
+import * as crypto from "node:crypto";
+import * as fs from "node:fs";
+/**
+ * Load and validate an Ed25519 private key from a PKCS8 base64 keyfile.
+ *
+ * Parses the key material in the constructor path so that a bad keyfile
+ * fails immediately (before ADK's exception-swallowing search path can
+ * turn it into permanent silent empty recall).
+ *
+ * @param keyfilePath - Path to the keyfile (PKCS8 DER, base64-encoded)
+ * @returns A Node.js KeyObject for the Ed25519 private key
+ * @throws If the keyfile is missing, unreadable, or contains invalid key material
+ */
+export function loadEd25519Key(keyfilePath) {
+    let b64;
+    try {
+        b64 = fs.readFileSync(keyfilePath, "utf-8").trim();
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        throw new Error(`FLAIR_KEYFILE: cannot read keyfile: ${msg}`);
+    }
+    if (b64.length === 0) {
+        throw new Error("FLAIR_KEYFILE: keyfile is empty");
+    }
+    let der;
+    try {
+        der = Buffer.from(b64, "base64");
+    }
+    catch {
+        throw new Error("FLAIR_KEYFILE: keyfile is not valid base64");
+    }
+    if (der.length === 0) {
+        throw new Error("FLAIR_KEYFILE: keyfile decoded to empty key material");
+    }
+    let key;
+    try {
+        key = crypto.createPrivateKey({
+            key: der,
+            format: "der",
+            type: "pkcs8",
+        });
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        throw new Error(`FLAIR_KEYFILE: invalid Ed25519 key material: ${msg}`);
+    }
+    // Verify it's actually an Ed25519 key
+    if (key.asymmetricKeyType !== "ed25519") {
+        throw new Error(`FLAIR_KEYFILE: expected Ed25519 key, got ${key.asymmetricKeyType ?? "unknown"}`);
+    }
+    return key;
+}
+/**
+ * Build the TPS-Ed25519 Authorization header value.
+ *
+ * Format: `TPS-Ed25519 <agent-id>:<timestamp>:<nonce>:<base64-sig>`
+ *
+ * @param privateKey - The loaded Ed25519 private key
+ * @param agentId - The Flair agent ID
+ * @param method - HTTP method (e.g. "POST")
+ * @param path - Request path (e.g. "/SemanticSearch")
+ * @returns The Authorization header value
+ */
+export function signRequest(privateKey, agentId, method, path) {
+    const ts = String(Date.now());
+    const nonce = crypto.randomUUID();
+    const payload = `${agentId}:${ts}:${nonce}:${method}:${path}`;
+    const sig = crypto.sign(null, Buffer.from(payload, "utf-8"), privateKey);
+    const sigB64 = sig.toString("base64");
+    return `TPS-Ed25519 ${agentId}:${ts}:${nonce}:${sigB64}`;
+}
+//# sourceMappingURL=signing.js.map

package/dist/signing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signing.js","sourceRoot":"","sources":["../src/signing.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAE9B;;;;;;;;;;GAUG;AACH,MAAM,UAAU,cAAc,CAAC,WAAmB;IAChD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IACrD,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,MAAM,IAAI,KAAK,CACb,uCAAuC,GAAG,EAAE,CAC7C,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IAED,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IAED,IAAI,GAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,CAAC,gBAAgB,CAAC;YAC5B,GAAG,EAAE,GAAG;YACR,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,OAAO;SACd,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,MAAM,IAAI,KAAK,CACb,gDAAgD,GAAG,EAAE,CACtD,CAAC;IACJ,CAAC;IAED,sCAAsC;IACtC,IAAI,GAAG,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CACb,4CAA4C,GAAG,CAAC,iBAAiB,IAAI,SAAS,EAAE,CACjF,CAAC;IACJ,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,WAAW,CACzB,UAA4B,EAC5B,OAAe,EACf,MAAc,EACd,IAAY;IAEZ,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,GAAG,OAAO,IAAI,EAAE,IAAI,KAAK,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;IAC9D,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,UAAU,CAAC,CAAC;IACzE,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACtC,OAAO,eAAe,OAAO,IAAI,EAAE,IAAI,KAAK,IAAI,MAAM,EAAE,CAAC;AAC3D,CAAC"}

package/dist/tag.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Compound tag helpers for adk-flair.
+ *
+ * Builds the `adk:<app_name>:<user_id>` compound tag used for per-user
+ * scoping in Flair. Colons in segments are replaced with underscores to
+ * prevent delimiter breakage.
+ */
+/**
+ * Sanitize a tag segment by replacing colons with underscores.
+ * A colon in a segment would break the compound tag delimiter.
+ */
+export declare function sanitizeTagSegment(segment: string): string;
+/**
+ * Build the compound tag `adk:<app_name>:<user_id>`.
+ * Both segments are sanitized to prevent delimiter breakage.
+ */
+export declare function compoundTag(appName: string, userId: string): string;
+//# sourceMappingURL=tag.d.ts.map

package/dist/tag.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tag.d.ts","sourceRoot":"","sources":["../src/tag.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAEnE"}

package/dist/tag.js

@@ -0,0 +1,23 @@
+/**
+ * Compound tag helpers for adk-flair.
+ *
+ * Builds the `adk:<app_name>:<user_id>` compound tag used for per-user
+ * scoping in Flair. Colons in segments are replaced with underscores to
+ * prevent delimiter breakage.
+ */
+const TAG_PREFIX = "adk";
+/**
+ * Sanitize a tag segment by replacing colons with underscores.
+ * A colon in a segment would break the compound tag delimiter.
+ */
+export function sanitizeTagSegment(segment) {
+    return segment.replace(/:/g, "_");
+}
+/**
+ * Build the compound tag `adk:<app_name>:<user_id>`.
+ * Both segments are sanitized to prevent delimiter breakage.
+ */
+export function compoundTag(appName, userId) {
+    return `${TAG_PREFIX}:${sanitizeTagSegment(appName)}:${sanitizeTagSegment(userId)}`;
+}
+//# sourceMappingURL=tag.js.map

package/dist/tag.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tag.js","sourceRoot":"","sources":["../src/tag.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,UAAU,GAAG,KAAK,CAAC;AAEzB;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AACpC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,OAAe,EAAE,MAAc;IACzD,OAAO,GAAG,UAAU,IAAI,kBAAkB,CAAC,OAAO,CAAC,IAAI,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;AACtF,CAAC"}

package/package.json

@@ -0,0 +1,43 @@
+{
+  "name": "@tpsdev-ai/adk-flair",
+  "version": "0.40.0",
+  "description": "Flair memory backend for Google ADK — self-hosted, federated, portable agent memory",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "files": [
+    "dist/",
+    "LICENSE",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc --noCheck",
+    "prepublishOnly": "npm run build",
+    "test": "bun test"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "keywords": [
+    "adk",
+    "google-adk",
+    "flair",
+    "memory",
+    "agent",
+    "semantic-search"
+  ],
+  "homepage": "https://github.com/tpsdev-ai/flair/tree/main/packages/adk-flair-js",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/tpsdev-ai/flair.git",
+    "directory": "packages/adk-flair-js"
+  },
+  "license": "Apache-2.0",
+  "dependencies": {
+    "@google/adk": "^1.6.0",
+    "@google/genai": "^1.52.0"
+  }
+}