@tpsdev-ai/flair-client 0.22.1 → 0.23.0

package/dist/client.d.ts

@@ -14,6 +14,10 @@ export declare class FlairClient {
     readonly memory: MemoryApi;
     readonly relationship: RelationshipApi;
     readonly soul: SoulApi;
+    /** flair#718 authorship-provenance — see FlairClientConfig.claimedClient's
+     *  doc (types.ts). `undefined` when neither config nor FLAIR_CLIENT is set;
+     *  MemoryApi reads this to (optionally) stamp memory write payloads. */
+    readonly claimedClient: string | undefined;
     private privateKey;
     private keyResolved;
     private keyPath;

package/dist/client.js

@@ -17,6 +17,10 @@ export class FlairClient {
     memory;
     relationship;
     soul;
+    /** flair#718 authorship-provenance — see FlairClientConfig.claimedClient's
+     *  doc (types.ts). `undefined` when neither config nor FLAIR_CLIENT is set;
+     *  MemoryApi reads this to (optionally) stamp memory write payloads. */
+    claimedClient;
     privateKey = null;
     keyResolved = false;
     keyPath;
@@ -30,6 +34,7 @@ export class FlairClient {
         if (config.privateKey !== undefined) {
             this.rawPrivateKey = config.privateKey;
         }
+        this.claimedClient = config.claimedClient || process.env.FLAIR_CLIENT || undefined;
         this.timeoutMs = config.timeoutMs ?? DEFAULT_TIMEOUT;
         // Basic auth fallback for standalone deployments without Ed25519 keys
         const adminUser = config.adminUser ?? process.env.FLAIR_ADMIN_USER;
@@ -143,6 +148,12 @@ class MemoryApi {
             record.dedup = opts.dedup;
         if (opts.dedupThreshold !== undefined)
             record.dedupThreshold = opts.dedupThreshold;
+        // flair#718 authorship-provenance: forward this process's claimed client
+        // label (config.claimedClient / FLAIR_CLIENT env) only when set — the
+        // server folds it into provenance.claimed.client and strips it from the
+        // row (resources/Memory.ts). Absent = omitted, zero behavior change.
+        if (this.client.claimedClient)
+            record.claimedClient = this.client.claimedClient;
         const response = await this.client.request("PUT", `/Memory/${id}`, record);
         // Merge the server response (deduplicated/matchedId/matchConfidence/
         // written, plus any echoed fields) over the locally-constructed record —
@@ -191,6 +202,9 @@ class MemoryApi {
             delete record.validTo;
             delete record.archivedAt;
             delete record.deduped;
+            // flair#718 authorship-provenance — see write()'s identical comment above.
+            if (this.client.claimedClient)
+                record.claimedClient = this.client.claimedClient;
             // The Memory schema does not expose a working HTTP POST route (see
             // resources/Memory.ts) — Memory.post() is only reachable in-process
             // (resources/mcp-tools.ts). So the supersede-link write goes through
@@ -208,6 +222,9 @@ class MemoryApi {
         delete merged.embedding;
         delete merged.embeddingModel;
         delete merged.deduped;
+        // flair#718 authorship-provenance — see write()'s identical comment above.
+        if (this.client.claimedClient)
+            merged.claimedClient = this.client.claimedClient;
         const response = await this.client.request("PUT", `/Memory/${id}`, merged);
         return { ...merged, id, ...(response ?? {}) };
     }

package/dist/types.d.ts

@@ -77,7 +77,7 @@ export interface Relationship {
     createdAt: string;
     updatedAt?: string;
     /** JSON blob, same shape as Memory.provenance — { v, verified: { agentId,
-     *  timestamp }, claimed?: { model } }. Absent on rows written before this
+     *  timestamp }, claimed?: { model, client } }. Absent on rows written before this
      *  field existed (migration-equivalence: additive/nullable). */
     provenance?: string;
     /** Always true after a successful write() — the server never suppresses a
@@ -137,4 +137,15 @@ export interface FlairClientConfig {
     adminUser?: string;
     /** Admin password for Basic auth fallback (standalone deployments). Falls back to FLAIR_ADMIN_PASSWORD env var. */
     adminPassword?: string;
+    /**
+     * flair#718 authorship-provenance: a label identifying WHICH CLIENT this
+     * process is (e.g. "claude-code", "codex", "gemini", "cursor") — recorded
+     * as unverified `provenance.claimed.client` on memory writes, distinct from
+     * `agentId` (ownership) and ungoverned by any authority (never enters
+     * read-scope, attribution, or dedup decisions — server-enforced in
+     * resources/provenance.ts). Falls back to the `FLAIR_CLIENT` env var.
+     * Absent (both here and in the env) = omitted entirely; zero behavior
+     * change for existing installs.
+     */
+    claimedClient?: string;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tpsdev-ai/flair-client",
-  "version": "0.22.1",
+  "version": "0.23.0",
   "description": "Lightweight client for Flair — identity, memory, and soul for AI agents. Zero heavy dependencies.",
   "type": "module",
   "main": "dist/index.js",