@tpsdev-ai/flair 0.4.8 → 0.4.12

package/dist/cli.js

@@ -377,6 +377,68 @@ program
         console.log("Waiting for Harper health check...");
         await waitForHealth(httpPort, adminUser, adminPass, STARTUP_TIMEOUT_MS);
         console.log("Harper is healthy ✓");
+        // Register launchd service on macOS so Harper survives reboots
+        // and `flair restart` / `flair stop` work via launchctl.
+        if (process.platform === "darwin") {
+            const label = "ai.tpsdev.flair";
+            const plistDir = join(homedir(), "Library", "LaunchAgents");
+            mkdirSync(plistDir, { recursive: true });
+            const plistPath = join(plistDir, `${label}.plist`);
+            const plist = `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>Label</key><string>${label}</string>
+  <key>ProgramArguments</key>
+  <array>
+    <string>${process.execPath}</string>
+    <string>${bin}</string>
+    <string>run</string>
+    <string>.</string>
+  </array>
+  <key>WorkingDirectory</key><string>${flairPackageDir()}</string>
+  <key>EnvironmentVariables</key>
+  <dict>
+    <key>ROOTPATH</key><string>${dataDir}</string>
+    <key>HARPER_SET_CONFIG</key><string>${harperSetConfig.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/"/g, "&quot;")}</string>
+    <key>DEFAULTS_MODE</key><string>dev</string>
+    <key>HDB_ADMIN_USERNAME</key><string>${adminUser}</string>
+    <key>HDB_ADMIN_PASSWORD</key><string>${adminPass}</string>
+    <key>THREADS_COUNT</key><string>1</string>
+    <key>NODE_HOSTNAME</key><string>localhost</string>
+    <key>HTTP_PORT</key><string>${httpPort}</string>
+    <key>OPERATIONSAPI_NETWORK_PORT</key><string>${opsPort}</string>
+    <key>LOCAL_STUDIO</key><string>false</string>
+  </dict>
+  <key>RunAtLoad</key><true/>
+  <key>KeepAlive</key><true/>
+  <key>StandardOutPath</key><string>${join(dataDir, "log", "launchd-stdout.log")}</string>
+  <key>StandardErrorPath</key><string>${join(dataDir, "log", "launchd-stderr.log")}</string>
+</dict>
+</plist>`;
+            writeFileSync(plistPath, plist);
+            try {
+                const { execSync } = await import("node:child_process");
+                // Stop the detached process — launchd will manage it from here
+                try {
+                    const lsof = execSync(`lsof -ti :${httpPort}`, { encoding: "utf-8" }).trim();
+                    if (lsof)
+                        for (const pid of lsof.split("\n"))
+                            try {
+                                process.kill(Number(pid.trim()), "SIGTERM");
+                            }
+                            catch { }
+                    await new Promise(r => setTimeout(r, 1000));
+                }
+                catch { }
+                execSync(`launchctl load "${plistPath}"`, { stdio: "pipe" });
+                await waitForHealth(httpPort, adminUser, adminPass, STARTUP_TIMEOUT_MS);
+                console.log("Launchd service registered ✓");
+            }
+            catch (err) {
+                console.log(`Note: launchd registration failed (${err.message}) — Harper is running but won't auto-start on reboot`);
+            }
+        }
     }
     // Persist port to config so other commands can find this instance
     writeConfig(httpPort);
@@ -462,10 +524,39 @@ program
     }
     console.log(`\n   Claude Code: Add to your CLAUDE.md:`);
     console.log(`     At the start of every session, run mcp__flair__bootstrap before responding.`);
-    const mcpEnv = { FLAIR_AGENT_ID: agentId };
-    mcpEnv.FLAIR_URL = httpUrl;
-    console.log(`\n   MCP config (.mcp.json):`);
-    console.log(`     { "mcpServers": { "flair": { "command": "npx", "args": ["@tpsdev-ai/flair-mcp"], "env": ${JSON.stringify(mcpEnv)} } } }`);
+    // Auto-wire MCP config into ~/.claude.json if Claude Code is installed
+    const claudeJsonPath = join(homedir(), ".claude.json");
+    const mcpEnv = { FLAIR_AGENT_ID: agentId, FLAIR_URL: httpUrl };
+    const flairMcpConfig = {
+        type: "stdio",
+        command: "flair-mcp",
+        args: [],
+        env: mcpEnv,
+    };
+    try {
+        if (existsSync(claudeJsonPath)) {
+            const claudeJson = JSON.parse(readFileSync(claudeJsonPath, "utf-8"));
+            const existing = claudeJson.mcpServers?.flair;
+            if (existing && existing.env?.FLAIR_URL === httpUrl && existing.env?.FLAIR_AGENT_ID === agentId) {
+                console.log(`\n   MCP config already set in ~/.claude.json ✓`);
+            }
+            else {
+                claudeJson.mcpServers = claudeJson.mcpServers || {};
+                claudeJson.mcpServers.flair = flairMcpConfig;
+                writeFileSync(claudeJsonPath, JSON.stringify(claudeJson, null, 2));
+                console.log(`\n   MCP config written to ~/.claude.json ✓`);
+                console.log(`   Restart Claude Code to pick up the new config.`);
+            }
+        }
+        else {
+            console.log(`\n   MCP config (add to ~/.claude.json):`);
+            console.log(`     { "mcpServers": { "flair": ${JSON.stringify(flairMcpConfig)} } }`);
+        }
+    }
+    catch {
+        console.log(`\n   MCP config (add manually to ~/.claude.json):`);
+        console.log(`     { "mcpServers": { "flair": ${JSON.stringify(flairMcpConfig)} } }`);
+    }
 });
 // ─── flair agent ─────────────────────────────────────────────────────────────
 const agent = program.command("agent").description("Manage Flair agents");

package/dist/resources/SemanticSearch.js

@@ -89,12 +89,10 @@ export class SemanticSearch extends Resource {
         if (!qEmb && q) {
             // Always attempt embedding generation — getEmbedding() handles init internally.
             // Don't gate on getMode() which may return "none" before init completes in worker threads.
-            {
-                try {
-                    qEmb = await getEmbedding(String(q).slice(0, 8000));
-                }
-                catch { }
+            try {
+                qEmb = await getEmbedding(String(q).slice(0, 8000));
             }
+            catch { }
         }
         // ─── Temporal intent detection ────────────────────────────────────────────
         let sinceDate = since ? new Date(since) : null;
@@ -145,8 +143,6 @@ export class SemanticSearch extends Resource {
             agentConditions.push({ attribute: "visibility", comparator: "equals", value: "office" });
             conditions.push({ operator: "or", conditions: agentConditions });
         }
-        // Exclude archived records. Use "not equals true" instead of "equals false"
-        // so records without the archived field (default: not archived) are included.
         // Exclude archived records. Use "not_equal" (Harper v5 comparator) instead of
         // "equals false" so records without the archived field are included.
         conditions.push({ attribute: "archived", comparator: "not_equal", value: true });

package/dist/resources/Soul.js

@@ -1,9 +1,29 @@
 import { databases } from "@harperfast/harper";
+function enforceAgentScope(self, data) {
+    const authenticatedAgent = self.request?.headers?.get?.("x-tps-agent");
+    const callerIsAdmin = self.request?.tpsAgentIsAdmin === true;
+    if (authenticatedAgent && !callerIsAdmin && data?.agentId && data.agentId !== authenticatedAgent) {
+        return new Response(JSON.stringify({
+            error: "forbidden: agentId must match authenticated agent",
+        }), { status: 403, headers: { "Content-Type": "application/json" } });
+    }
+    return null;
+}
 export class Soul extends databases.flair.Soul {
     async post(content, context) {
+        const denied = enforceAgentScope(this, content);
+        if (denied)
+            return denied;
         content.durability ||= "permanent";
         content.createdAt = new Date().toISOString();
         content.updatedAt = content.createdAt;
         return super.post(content, context);
     }
+    async put(content, context) {
+        const denied = enforceAgentScope(this, content);
+        if (denied)
+            return denied;
+        content.updatedAt = new Date().toISOString();
+        return super.put(content, context);
+    }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tpsdev-ai/flair",
-  "version": "0.4.8",
+  "version": "0.4.12",
   "description": "Identity, memory, and soul for AI agents. Cryptographic identity (Ed25519), semantic memory with local embeddings, and persistent personality — all in a single process.",
   "type": "module",
   "license": "Apache-2.0",