@tpsdev-ai/flair 0.3.17 → 0.3.19

package/resources/MemoryReflect.ts

@@ -1,122 +0,0 @@
-/**
- * POST /MemoryReflect
- *
- * Gathers recent memories for an agent and returns a structured reflection
- * prompt. The agent feeds the prompt + memories to its LLM and writes
- * insights back as persistent memories (with derivedFrom linking).
- *
- * Request:
- *   agentId      string   — which agent to reflect on
- *   scope        string   — "recent" | "tagged" | "all" (default: "recent")
- *   since        string?  — ISO timestamp lower bound (default: 24h ago)
- *   maxMemories  number?  — cap (default: 50)
- *   focus        string?  — "lessons_learned" | "patterns" | "decisions" | "errors" (default: "lessons_learned")
- *   tag          string?  — required when scope="tagged"
- *
- * Response:
- *   memories       Memory[]   — source memories included in the prompt
- *   prompt         string     — structured LLM prompt
- *   suggestedTags  string[]   — tags Flair detected in the source set
- *   count          number     — number of memories included
- */
-
-import { Resource, databases } from "@harperfast/harper";
-import { isAdmin } from "./auth-middleware.js";
-import { patchRecordSilent } from "./table-helpers.js";
-
-const FOCUS_PROMPTS: Record<string, string> = {
-  lessons_learned:
-    "Review these memories and identify concrete lessons learned. For each lesson: what happened, what you learned, and how it should change future behavior. Write atomic memories with durability=persistent.",
-  patterns:
-    "Identify recurring patterns across these memories. What themes, approaches, or outcomes appear multiple times? Extract each pattern as a persistent memory.",
-  decisions:
-    "Catalog the key decisions made and their outcomes. For each: what was decided, why, and what resulted. Promote important decisions to persistent.",
-  errors:
-    "Extract errors, bugs, and failures. For each: what failed, root cause, and fix applied. These are high-value persistent memories.",
-};
-
-export class ReflectMemories extends Resource {
-  async post(data: any) {
-    const {
-      agentId,
-      scope = "recent",
-      since,
-      maxMemories = 50,
-      focus = "lessons_learned",
-      tag,
-    } = data || {};
-
-    if (!agentId) return new Response(JSON.stringify({ error: "agentId required" }), { status: 400 });
-
-    // Auth: agent can only reflect on own memories unless admin
-    const actorId = (this as any).request?.tpsAgent;
-    if (actorId && actorId !== agentId && !(await isAdmin(actorId))) {
-      return new Response(JSON.stringify({ error: "forbidden: can only reflect on own memories" }), { status: 403 });
-    }
-
-    const sinceDate = since ? new Date(since) : new Date(Date.now() - 24 * 3600_000);
-    const memories: any[] = [];
-
-    for await (const record of (databases as any).flair.Memory.search()) {
-      if (record.agentId !== agentId) continue;
-      if (record.archived) continue;
-      if (record.durability === "permanent") continue; // permanent memories don't need reflection
-
-      if (scope === "tagged") {
-        if (!tag || !(record.tags ?? []).includes(tag)) continue;
-      } else if (scope === "recent") {
-        if (!record.createdAt || new Date(record.createdAt) < sinceDate) continue;
-      }
-      // scope="all" passes everything
-
-      const { embedding, ...rest } = record;
-      memories.push(rest);
-      if (memories.length >= maxMemories) break;
-    }
-
-    memories.sort((a, b) => (a.createdAt ?? "").localeCompare(b.createdAt ?? ""));
-
-    // Collect tags present in source memories
-    const tagSet = new Set<string>();
-    for (const m of memories) {
-      for (const t of m.tags ?? []) tagSet.add(t);
-    }
-
-    // Build prompt
-    const focusText = FOCUS_PROMPTS[focus] ?? FOCUS_PROMPTS.lessons_learned;
-    const memorySummary = memories
-      .map((m, i) => `[${i + 1}] (${m.id}) ${m.createdAt?.slice(0, 10) ?? "?"}: ${m.content.slice(0, 300)}`)
-      .join("\n");
-
-    const prompt = `# Memory Reflection — ${agentId}
-Focus: ${focus}
-Scope: ${scope} (since ${sinceDate.toISOString()})
-Memories: ${memories.length}
-
-## Task
-${focusText}
-
-## Source Memories
-${memorySummary || "(none)"}
-
-## Instructions
-For each insight:
-1. Write a new memory with durability=persistent
-2. Set derivedFrom=[<source memory ids>]
-3. Set tags from the source memories where relevant
-4. Keep each memory atomic — one insight per record`;
-
-    // Update lastReflected on source memories (read-modify-write to preserve embeddings)
-    const now = new Date().toISOString();
-    for (const m of memories) {
-      patchRecordSilent((databases as any).flair.Memory, m.id, { lastReflected: now });
-    }
-
-    return {
-      memories,
-      prompt,
-      suggestedTags: [...tagSet].slice(0, 20),
-      count: memories.length,
-    };
-  }
-}

package/resources/OrgEvent.ts

@@ -1,63 +0,0 @@
-/**
- * OrgEvent.ts — Harper table resource for org-wide activity events.
- *
- * Auth: Ed25519 middleware sets request.tpsAgent.
- * Write: authorId must match authenticated agent (or admin).
- * Read: any authenticated participant can read (org-scoped).
- */
-
-import { databases } from "@harperfast/harper";
-
-export class OrgEvent extends (databases as any).flair.OrgEvent {
-  async post(content: any, context?: any) {
-    const agentId = context?.request?.tpsAgent;
-
-    // authorId must match authenticated agent (unless admin)
-    if (agentId && !context?.request?.tpsAgentIsAdmin && content.authorId !== agentId) {
-      return new Response(
-        JSON.stringify({ error: "forbidden: authorId must match authenticated agent" }),
-        { status: 403, headers: { "Content-Type": "application/json" } },
-      );
-    }
-
-    // Generate composite ID if not provided
-    if (!content.id) {
-      content.id = `${content.authorId}-${Date.now()}`;
-    }
-
-    content.createdAt = new Date().toISOString();
-
-    // Harper 5: table resources use put() for create/upsert (post() removed)
-    return (databases as any).flair.OrgEvent.put(content);
-  }
-
-  async put(content: any, context?: any) {
-    const agentId = context?.request?.tpsAgent;
-
-    if (agentId && !context?.request?.tpsAgentIsAdmin && content.authorId !== agentId) {
-      return new Response(
-        JSON.stringify({ error: "forbidden: authorId must match authenticated agent" }),
-        { status: 403, headers: { "Content-Type": "application/json" } },
-      );
-    }
-
-    return (databases as any).flair.OrgEvent.put(content);
-  }
-
-  async delete(id: any, context?: any) {
-    const agentId = context?.request?.tpsAgent;
-    if (!agentId) return super.delete(id, context);
-
-    const record = await this.get(id);
-    if (!record) return super.delete(id, context);
-
-    if (!context?.request?.tpsAgentIsAdmin && record.authorId !== agentId) {
-      return new Response(
-        JSON.stringify({ error: "forbidden: cannot delete events authored by another agent" }),
-        { status: 403, headers: { "Content-Type": "application/json" } },
-      );
-    }
-
-    return super.delete(id, context);
-  }
-}

package/resources/OrgEventCatchup.ts

@@ -1,89 +0,0 @@
-/**
- * OrgEventCatchup.ts — Custom resource for filtered event retrieval.
- *
- * GET /OrgEventCatchup/{participantId}?since=<ISO timestamp>
- *
- * Returns events where:
- *   - targetIds includes participantId OR targetIds is empty/null
- *   - createdAt >= since
- * Sorted by createdAt ascending (oldest first for in-order processing).
- * Limit 50 events max.
- */
-
-import { Resource, databases } from "@harperfast/harper";
-
-export class OrgEventCatchup extends Resource {
-  // HarperDB calls get(pathInfo, context) where pathInfo is the URL segment after /OrgEventCatchup/
-  async get(pathInfo?: any) {
-    const request = (this as any).request;
-    const callerAgent = request?.tpsAgent;
-    const callerIsAdmin = request?.tpsAgentIsAdmin === true;
-
-    // Harper routes /OrgEventCatchup/{id} with pathInfo.id as the path segment
-    const participantId: string | null =
-      (typeof pathInfo === "object" && pathInfo !== null ? (pathInfo as any).id : null) ??
-      (typeof pathInfo === "string" ? pathInfo : null) ??
-      (this as any).getId?.() ??
-      null;
-
-    if (!participantId) {
-      return new Response(
-        JSON.stringify({ error: "participantId required in path: GET /OrgEventCatchup/{participantId}" }),
-        { status: 400, headers: { "Content-Type": "application/json" } },
-      );
-    }
-
-    // Auth: requesting agent must match participantId (or admin)
-    if (callerAgent && !callerIsAdmin && callerAgent !== participantId) {
-      return new Response(
-        JSON.stringify({ error: "forbidden: can only fetch events for yourself" }),
-        { status: 403, headers: { "Content-Type": "application/json" } },
-      );
-    }
-
-    // Harper parses query params into pathInfo.conditions array:
-    // e.g. ?since=value → conditions: [{attribute:"since", value:"...", comparator:"equals"}]
-    // pathInfo.id is the URL path segment (participantId).
-    const since: string | null =
-      (typeof pathInfo === "object" && pathInfo !== null
-        ? (pathInfo as any).conditions?.find((c: any) => c.attribute === "since")?.value ?? null
-        : null);
-    if (!since) {
-      return new Response(
-        JSON.stringify({ error: "since query parameter required (ISO timestamp)" }),
-        { status: 400, headers: { "Content-Type": "application/json" } },
-      );
-    }
-
-    const sinceDate = new Date(since);
-    if (isNaN(sinceDate.getTime())) {
-      return new Response(
-        JSON.stringify({ error: "invalid since timestamp" }),
-        { status: 400, headers: { "Content-Type": "application/json" } },
-      );
-    }
-
-    // Query all OrgEvents and filter in-memory
-    const results: any[] = [];
-    for await (const event of (databases as any).flair.OrgEvent.search()) {
-      // Filter by createdAt >= since
-      if (!event.createdAt || event.createdAt < since) continue;
-
-      // Filter by targetIds: includes participantId OR empty/null
-      const targets = event.targetIds;
-      const isTargeted = !targets || targets.length === 0 || targets.includes(participantId);
-      if (!isTargeted) continue;
-
-      // Skip expired events
-      if (event.expiresAt && new Date(event.expiresAt) < new Date()) continue;
-
-      results.push(event);
-    }
-
-    // Sort ascending by createdAt (oldest first)
-    results.sort((a: any, b: any) => (a.createdAt || "").localeCompare(b.createdAt || ""));
-
-    // Limit to 50
-    return results.slice(0, 50);
-  }
-}

package/resources/OrgEventMaintenance.ts

@@ -1,37 +0,0 @@
-/**
- * OrgEventMaintenance.ts — Maintenance worker for expired OrgEvents.
- *
- * POST /OrgEventMaintenance/ — deletes all records where expiresAt < now.
- * Auth: admin only.
- */
-
-import { Resource, databases } from "@harperfast/harper";
-
-export class OrgEventMaintenance extends Resource {
-  async post(_data: any, context?: any) {
-    // Admin-only
-    if (!context?.request?.tpsAgentIsAdmin) {
-      return new Response(
-        JSON.stringify({ error: "forbidden: admin only" }),
-        { status: 403, headers: { "Content-Type": "application/json" } },
-      );
-    }
-
-    const now = new Date().toISOString();
-    const toDelete: string[] = [];
-
-    for await (const event of (databases as any).flair.OrgEvent.search()) {
-      if (event.expiresAt && event.expiresAt < now) {
-        toDelete.push(event.id);
-      }
-    }
-
-    for (const id of toDelete) {
-      try {
-        await (databases as any).flair.OrgEvent.delete(id);
-      } catch {}
-    }
-
-    return { deleted: toDelete.length };
-  }
-}

package/resources/SemanticSearch.ts

@@ -1,197 +0,0 @@
-import { Resource, databases } from "@harperfast/harper";
-import { getEmbedding, getMode } from "./embeddings-provider.js";
-import { patchRecord } from "./table-helpers.js";
-
-function cosineSimilarity(a: number[], b: number[]): number {
-  let dot = 0;
-  const len = Math.min(a.length, b.length);
-  for (let i = 0; i < len; i++) dot += a[i] * b[i];
-  return dot;
-}
-
-// ─── Temporal Decay + Relevance Scoring ─────────────────────────────────────
-
-const DURABILITY_WEIGHTS: Record<string, number> = {
-  permanent: 1.0,
-  persistent: 0.9,
-  standard: 0.7,
-  ephemeral: 0.4,
-};
-
-// Half-life in days for exponential decay per durability level
-const DECAY_HALF_LIFE_DAYS: Record<string, number> = {
-  permanent: Infinity, // never decays
-  persistent: 90,
-  standard: 30,
-  ephemeral: 7,
-};
-
-function recencyFactor(createdAt: string, durability: string): number {
-  const halfLife = DECAY_HALF_LIFE_DAYS[durability] ?? 30;
-  if (halfLife === Infinity) return 1.0;
-  const ageDays = (Date.now() - Date.parse(createdAt)) / (1000 * 60 * 60 * 24);
-  const lambda = Math.LN2 / halfLife;
-  return Math.exp(-lambda * ageDays);
-}
-
-function retrievalBoost(retrievalCount: number): number {
-  if (!retrievalCount || retrievalCount <= 0) return 1.0;
-  return 1.0 + 0.1 * Math.log2(retrievalCount); // gentle boost: 10 retrievals → ~1.33x
-}
-
-function compositeScore(
-  semanticScore: number,
-  record: { durability?: string; createdAt?: string; retrievalCount?: number; supersedes?: string },
-): number {
-  const durability = record.durability ?? "standard";
-  const dWeight = DURABILITY_WEIGHTS[durability] ?? 0.7;
-  const rFactor = record.createdAt ? recencyFactor(record.createdAt, durability) : 1.0;
-  const rBoost = retrievalBoost(record.retrievalCount ?? 0);
-  return semanticScore * dWeight * rFactor * rBoost;
-}
-
-export class SemanticSearch extends Resource {
-  async post(data: any) {
-    const { agentId, q, queryEmbedding, tag, subject, subjects, limit = 10, includeSuperseded = false, scoring = "composite", minScore = 0, since } = data || {};
-    const subjectFilter = subjects
-      ? new Set((subjects as string[]).map((s: string) => s.toLowerCase()))
-      : subject
-        ? new Set([(subject as string).toLowerCase()])
-        : null;
-
-    // Defense-in-depth: verify agentId matches authenticated agent.
-    // The middleware already enforces this for non-admins, but double-check here
-    // so direct Harper API calls (e.g., admin scripts) are also scoped correctly.
-    const authenticatedAgent: string | undefined = (this as any).request?.headers?.get?.("x-tps-agent");
-    const callerIsAdmin: boolean = (this as any).request?.tpsAgentIsAdmin === true;
-    if (authenticatedAgent && !callerIsAdmin && agentId && agentId !== authenticatedAgent) {
-      return new Response(JSON.stringify({
-        error: "forbidden: agentId must match authenticated agent",
-      }), { status: 403, headers: { "Content-Type": "application/json" } });
-    }
-
-    // Determine searchable agent IDs (own + granted)
-    const searchAgentIds = new Set<string>();
-    if (agentId) searchAgentIds.add(agentId);
-
-    if (agentId) {
-      try {
-        for await (const grant of (databases as any).flair.MemoryGrant.search({
-          conditions: [{ attribute: "granteeId", comparator: "equals", value: agentId }],
-        })) {
-          if (grant.scope === "search" || grant.scope === "read") {
-            searchAgentIds.add(grant.ownerId);
-          }
-        }
-      } catch { /* MemoryGrant may not exist */ }
-    }
-
-    // Generate query embedding
-    let qEmb = queryEmbedding;
-    if (!qEmb && q) {
-      if (getMode() !== "none") {
-        try { qEmb = await getEmbedding(String(q).slice(0, 500)); } catch {}
-      }
-    }
-
-    // ─── Temporal intent detection ────────────────────────────────────────────
-    // If the query implies a time window and no explicit `since` was provided,
-    // auto-detect and apply a recency boost.
-    let sinceDate: Date | null = since ? new Date(since) : null;
-    let temporalBoost = 1.0;
-    if (q && !sinceDate) {
-      const lq = String(q).toLowerCase();
-      if (/\btoday\b|\bthis morning\b|\bthis afternoon\b/.test(lq)) {
-        const d = new Date(); d.setHours(0, 0, 0, 0);
-        sinceDate = d;
-        temporalBoost = 1.5; // boost recent results for temporal queries
-      } else if (/\byesterday\b/.test(lq)) {
-        const d = new Date(); d.setDate(d.getDate() - 1); d.setHours(0, 0, 0, 0);
-        sinceDate = d;
-        temporalBoost = 1.3;
-      } else if (/\bthis week\b|\blast few days\b/.test(lq)) {
-        sinceDate = new Date(Date.now() - 7 * 24 * 3600_000);
-        temporalBoost = 1.2;
-      } else if (/\blast week\b/.test(lq)) {
-        sinceDate = new Date(Date.now() - 14 * 24 * 3600_000);
-        temporalBoost = 1.1;
-      } else if (/\brecently\b|\blately\b/.test(lq)) {
-        sinceDate = new Date(Date.now() - 3 * 24 * 3600_000);
-        temporalBoost = 1.3;
-      }
-    }
-
-    const results: any[] = [];
-
-    // Iterate ALL memories, filter by agent ID set
-    for await (const record of (databases as any).flair.Memory.search()) {
-      // Filter by agent
-      if (searchAgentIds.size > 0 && !searchAgentIds.has(record.agentId)) {
-        if (record.visibility !== "office") continue;
-      }
-
-      if (record.archived === true) continue;
-      if (record.expiresAt && Date.parse(record.expiresAt) < Date.now()) continue;
-      if (tag && !(record.tags || []).includes(tag)) continue;
-      if (subjectFilter && record.subject && !subjectFilter.has(String(record.subject).toLowerCase())) continue;
-      // Time window filter
-      if (sinceDate && record.createdAt && new Date(record.createdAt) < sinceDate) continue;
-
-      let semanticScore = 0;
-      let keywordHit = false;
-      if (q && String(record.content || "").toLowerCase().includes(String(q).toLowerCase())) {
-        keywordHit = true;
-      }
-      if (qEmb && record.embedding && qEmb.length === record.embedding.length) {
-        semanticScore = cosineSimilarity(qEmb, record.embedding);
-      }
-      // Keyword match is a small tiebreaker (5%), not a primary signal.
-      // This prevents weak semantic matches from ranking high just because
-      // a query word appears in the content.
-      const rawScore = semanticScore + (keywordHit ? 0.05 : 0);
-      if (q && rawScore === 0) continue;
-
-      // Apply composite scoring (temporal decay + durability + retrieval boost + temporal intent)
-      let finalScore = scoring === "raw" ? rawScore : compositeScore(rawScore, record);
-      if (temporalBoost > 1.0) finalScore *= temporalBoost;
-
-      const { embedding, ...rest } = record;
-      results.push({
-        ...rest,
-        _score: Math.round(finalScore * 1000) / 1000,
-        _rawScore: scoring !== "raw" ? Math.round(rawScore * 1000) / 1000 : undefined,
-        _source: record.agentId !== agentId ? record.agentId : undefined,
-      });
-    }
-
-    // Build superseded set and filter (unless caller opts in to see full history)
-    let filteredResults = results;
-    if (!includeSuperseded) {
-      const supersededIds = new Set<string>();
-      for (const r of results) {
-        if (r.supersedes) supersededIds.add(r.supersedes);
-      }
-      filteredResults = results.filter((r: any) => !supersededIds.has(r.id));
-    }
-
-    // Apply minimum score filter
-    if (minScore > 0) {
-      filteredResults = filteredResults.filter((r: any) => r._score >= minScore);
-    }
-
-    filteredResults.sort((a: any, b: any) => b._score - a._score);
-    const topResults = filteredResults.slice(0, limit);
-
-    // Async hit tracking — don't block the response
-    // Use patchRecord to avoid wiping other fields (embedding, content, etc.)
-    const now = new Date().toISOString();
-    for (const r of topResults) {
-      patchRecord((databases as any).flair.Memory, r.id, {
-        retrievalCount: (r.retrievalCount || 0) + 1,
-        lastRetrieved: now,
-      }).catch(() => {});
-    }
-
-    return { results: topResults };
-  }
-}

package/resources/SkillScan.ts

@@ -1,146 +0,0 @@
-import { Resource } from "@harperfast/harper";
-
-/**
- * POST /SkillScan/
- *
- * Static analysis of skill content for security violations.
- * Scans for shell commands, network calls, fs writes, env access,
- * encoded payloads, zero-width chars, and homoglyphs.
- *
- * Request:  { content: string }
- * Response: { safe, violations, riskLevel }
- *
- * Auth: any authenticated agent (read-only analysis).
- * Size limit: 8KB (8192 bytes).
- */
-
-interface Violation {
-  type: string;
-  line: number;
-  content: string;
-}
-
-type RiskLevel = "low" | "medium" | "high" | "critical";
-
-const SHELL_PATTERNS = [
-  { regex: /\bexec\s*\(/, type: "shell_command" },
-  { regex: /\bspawn\s*\(/, type: "shell_command" },
-  { regex: /\bsystem\s*\(/, type: "shell_command" },
-  { regex: /`[^`]*`/, type: "shell_backtick" },
-  { regex: /\bchild_process\b/, type: "shell_command" },
-];
-
-const NETWORK_PATTERNS = [
-  { regex: /\bfetch\s*\(/, type: "network_call" },
-  { regex: /\bcurl\b/, type: "network_call" },
-  { regex: /https?:\/\//, type: "url_reference" },
-  { regex: /\bXMLHttpRequest\b/, type: "network_call" },
-  { regex: /\baxios\b/, type: "network_call" },
-];
-
-const FS_PATTERNS = [
-  { regex: /\bfs\.write/, type: "fs_write" },
-  { regex: /\bwriteFile/, type: "fs_write" },
-  { regex: />[>]?\s*[\/~]/, type: "fs_redirect" },
-];
-
-const ENV_PATTERNS = [
-  { regex: /\bprocess\.env\b/, type: "env_access" },
-  { regex: /\$ENV\b/, type: "env_access" },
-  { regex: /\$\{?\w+\}?/, type: "env_variable" },
-];
-
-const ENCODING_PATTERNS = [
-  { regex: /\batob\s*\(/, type: "base64_decode" },
-  { regex: /\bbtoa\s*\(/, type: "base64_encode" },
-  { regex: /Buffer\.from\s*\([^)]*,\s*['"]base64['"]/, type: "base64_decode" },
-  { regex: /Buffer\.from\s*\([^)]*,\s*['"]hex['"]/, type: "hex_decode" },
-  { regex: /\\x[0-9a-fA-F]{2}/, type: "hex_escape" },
-  { regex: /\\u200[b-f]|\\u2060|\\ufeff/, type: "zero_width_char" },
-];
-
-// Unicode zero-width and homoglyph detection (raw chars)
-const UNICODE_PATTERNS = [
-  { regex: /[\u200B-\u200F\u2060\uFEFF]/, type: "zero_width_char" },
-  { regex: /[\u0410-\u044F]/, type: "cyrillic_homoglyph" },  // Cyrillic chars that look like Latin
-];
-
-const ALL_PATTERNS = [
-  ...SHELL_PATTERNS,
-  ...NETWORK_PATTERNS,
-  ...FS_PATTERNS,
-  ...ENV_PATTERNS,
-  ...ENCODING_PATTERNS,
-  ...UNICODE_PATTERNS,
-];
-
-function assessRisk(violations: Violation[]): RiskLevel {
-  if (violations.length === 0) return "low";
-
-  const types = new Set(violations.map((v) => v.type));
-  const hasShell = types.has("shell_command") || types.has("shell_backtick");
-  const hasNetwork = types.has("network_call");
-  const hasFs = types.has("fs_write") || types.has("fs_redirect");
-  const hasZeroWidth = types.has("zero_width_char");
-  const hasHomoglyph = types.has("cyrillic_homoglyph");
-
-  // Critical: shell + encoding, or zero-width/homoglyph obfuscation
-  if ((hasShell && (types.has("base64_decode") || types.has("hex_decode"))) ||
-      hasZeroWidth || hasHomoglyph) {
-    return "critical";
-  }
-
-  // High: direct shell commands or fs writes
-  if (hasShell || hasFs) return "high";
-
-  // Medium: network calls or encoding without shell
-  if (hasNetwork || types.has("base64_decode") || types.has("hex_decode")) return "medium";
-
-  return "low";
-}
-
-export class SkillScan extends Resource {
-  async post(data: any, context?: any) {
-    const { content } = data || {};
-
-    if (!content || typeof content !== "string") {
-      return new Response(
-        JSON.stringify({ error: "content (string) required" }),
-        { status: 400, headers: { "Content-Type": "application/json" } },
-      );
-    }
-
-    // 8KB size limit
-    const byteLength = new TextEncoder().encode(content).length;
-    if (byteLength > 8192) {
-      return new Response(
-        JSON.stringify({ error: `Content exceeds 8KB limit (${byteLength} bytes)` }),
-        { status: 413, headers: { "Content-Type": "application/json" } },
-      );
-    }
-
-    const lines = content.split("\n");
-    const violations: Violation[] = [];
-
-    for (let i = 0; i < lines.length; i++) {
-      const line = lines[i];
-      for (const pattern of ALL_PATTERNS) {
-        if (pattern.regex.test(line)) {
-          violations.push({
-            type: pattern.type,
-            line: i + 1,
-            content: line.trim().slice(0, 200),
-          });
-        }
-      }
-    }
-
-    const riskLevel = assessRisk(violations);
-
-    return {
-      safe: violations.length === 0,
-      violations,
-      riskLevel,
-    };
-  }
-}

package/resources/Soul.ts

@@ -1,10 +0,0 @@
-import { databases } from "@harperfast/harper";
-
-export class Soul extends (databases as any).flair.Soul {
-  async post(content: any, context?: any) {
-    content.durability ||= "permanent";
-    content.createdAt = new Date().toISOString();
-    content.updatedAt = content.createdAt;
-    return super.post(content, context);
-  }
-}

package/resources/SoulFeed.ts

@@ -1,15 +0,0 @@
-import { Resource, databases } from '@harperfast/harper';
-
-export class FeedSouls extends Resource {
-  async *connect(target: any, incomingMessages: any) {
-    const subscription = await (databases as any).flair.Soul.subscribe(target);
-    
-    if (!incomingMessages) {
-      return subscription;
-    }
-
-    for await (const event of subscription) {
-      yield event;
-    }
-  }
-}