@tpsdev-ai/flair 0.52.0 → 0.54.1

package/node_modules/@tpsdev-ai/flair-tool-descriptors/package.json

@@ -0,0 +1,46 @@
+{
+  "name": "@tpsdev-ai/flair-tool-descriptors",
+  "version": "0.54.1",
+  "description": "Transport-agnostic MCP tool descriptors for Flair — name, description, inputSchema, output shape. No Harper, no FlairClient.",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist/",
+    "LICENSE",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc --noCheck",
+    "test": "bun test",
+    "prepublishOnly": "npm run build"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/tpsdev-ai/flair.git",
+    "directory": "packages/flair-tool-descriptors"
+  },
+  "homepage": "https://tps.dev/#flair",
+  "keywords": [
+    "flair",
+    "mcp",
+    "tools",
+    "descriptors"
+  ],
+  "devDependencies": {
+    "typescript": "5.9.3"
+  }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tpsdev-ai/flair",
-  "version": "0.52.0",
+  "version": "0.54.1",
   "packageManager": "bun@1.3.10",
   "description": "Identity, memory, and soul for AI agents. Cryptographic identity (Ed25519), semantic memory with local embeddings, and persistent personality — all in a single process.",
   "type": "module",
@@ -46,9 +46,10 @@
   ],
   "scripts": {
     "clean": "node -e \"require('fs').rmSync('dist',{recursive:true,force:true})\"",
-    "prebuild": "npm run clean",
+    "prebuild": "npm run clean && cd packages/flair-tool-descriptors && npm run build",
     "build": "tsc -p tsconfig.json --noCheck && node scripts/write-build-info.mjs",
     "build:cli": "tsc -p tsconfig.cli.json --noCheck && node scripts/write-build-info.mjs",
+    "prepack": "node scripts/materialize-bundled-descriptors.mjs",
     "prepublishOnly": "npm run build && npm run build:cli",
     "test": "bun run test:unit",
     "test:unit": "bun scripts/test-unit.ts",
@@ -71,8 +72,12 @@
     "jose": "6.2.2",
     "js-yaml": "^4.3.2",
     "tar": "^7.5.22",
-    "tweetnacl": "1.0.3"
+    "tweetnacl": "1.0.3",
+    "@tpsdev-ai/flair-tool-descriptors": "0.54.1"
   },
+  "bundleDependencies": [
+    "@tpsdev-ai/flair-tool-descriptors"
+  ],
   "overrides": {
     "react-native-fs": "npm:empty-npm-package@1.0.0",
     "brace-expansion": "^5.0.9",
@@ -80,7 +85,7 @@
     "fast-uri": "^4.1.3",
     "hono": "^4.13.5",
     "js-yaml": "^4.3.2",
-    "adm-zip": "^0.6.0",
+    "adm-zip": "^0.6.1",
     "@opentelemetry/core": "^2.8.0",
     "uuid": "^11.1.1",
     "tar": "^7.5.22",

package/schemas/agent.graphql

@@ -76,3 +76,18 @@ type Integration @table(database: "flair") @export {
   createdAt: String!
   updatedAt: String
 }
+
+# Per-agent read-position (watermark) — durable catch-up cursor (flair#931).
+# A monotonic position per (agent, stream), not a wall-clock `since`. Reused
+# by OrgEventCatchup today and the light-comms board later (#1583); the stream
+# name is the only table-specific part. Not @export: agents use
+# /AgentReadPosition and /OrgEventCatchup, never raw-table REST. Owner-scoped
+# (each agent reads/advances only its own). Advance-on-ack, never silently
+# truncated. See resources/agent-read-position-lib.ts.
+type AgentReadPosition @table(database: "flair") {
+  id: ID @primaryKey          # `${agentId}:${stream}`
+  agentId: String! @indexed
+  stream: String! @indexed    # e.g. "org-event"
+  position: String!           # opaque total-order watermark; lexicographic compare
+  updatedAt: String!
+}

package/templates/launchd/start-flair-with-admin-pass.sh

@@ -0,0 +1,73 @@
+#!/bin/sh
+# start-flair-with-admin-pass.sh — product-owned launchd launcher (flair#1573).
+#
+# Reads the Flair admin password from a 0600 file and execs Harper
+# NON-INTERACTIVELY. The secret never appears in the launchd plist: it enters
+# the process environment here, from the file, at start time. This is the
+# product shape of the no-inline-secret pattern — the plist's ProgramArguments
+# point at this launcher instead of embedding HDB_ADMIN_PASSWORD.
+#
+# Usage: start-flair-with-admin-pass.sh <admin-pass-file> <node> <harper-bin>
+#
+#   admin-pass-file  path to the 0600 file holding the admin password
+#   node             the node binary to exec
+#   harper-bin       Harper's entrypoint (harper.js)
+#
+# HDB_ADMIN_USERNAME is already in the launchd environment (it is not a
+# secret); only the password is read from the file here. HOME, PATH and the
+# Harper config (HARPER_SET_CONFIG / ROOTPATH / FLAIR_MODELS_DIR) are also
+# supplied by the plist's EnvironmentVariables, so Harper boots without ever
+# hitting its interactive readline prompt under launchd's minimal env.
+
+set -eu
+
+ADMIN_PASS_FILE="$1"
+NODE="$2"
+HARPER_BIN="$3"
+
+if [ ! -f "$ADMIN_PASS_FILE" ]; then
+  echo "start-flair-with-admin-pass: admin-pass file not found: $ADMIN_PASS_FILE" >&2
+  exit 1
+fi
+
+if [ ! -r "$ADMIN_PASS_FILE" ]; then
+  echo "start-flair-with-admin-pass: admin-pass file not readable: $ADMIN_PASS_FILE" >&2
+  exit 1
+fi
+
+# Re-verify owner-only (0600) at READ time, not just at `flair init` write
+# time. A file that drifted to 0644 after init (umask change, backup tool,
+# tar restore) would leak the secret to any reader on the host. Mirrors
+# readSecretFileSecure (src/lib/auth-resolve.ts), which refuses any group/other
+# permission bit. `stat -f %Lp` is macOS (the launchd host); `stat -c %a` is
+# Linux (the unit-test host). The two syntaxes are mutually exclusive, so
+# branch on the OS rather than chaining with `||` — on Linux `stat -f %Lp`
+# prints filesystem info to stdout *and* exits non-zero, which would pollute
+# the captured mode. Fail CLOSED: an unreadable mode (empty) refuses rather
+# than proceeding on a guess.
+case "$(uname -s)" in
+  Darwin) MODE="$(stat -f %Lp "$ADMIN_PASS_FILE" 2>/dev/null)" ;;
+  *)      MODE="$(stat -c %a "$ADMIN_PASS_FILE" 2>/dev/null)" ;;
+esac
+case "$MODE" in
+  *00) : ;;
+  *)
+    echo "start-flair-with-admin-pass: admin-pass file permissions '${MODE:-unknown}' are too open (expected 600): $ADMIN_PASS_FILE" >&2
+    exit 1
+    ;;
+esac
+
+# Read the secret. Command substitution strips a trailing newline, which is
+# what `flair init` writes (base64url + "\n"); the value itself is preserved
+# verbatim by the double quotes.
+ADMIN_PASS="$(cat "$ADMIN_PASS_FILE")"
+if [ -z "$ADMIN_PASS" ]; then
+  echo "start-flair-with-admin-pass: admin-pass file is empty: $ADMIN_PASS_FILE" >&2
+  exit 1
+fi
+
+export HDB_ADMIN_PASSWORD="$ADMIN_PASS"
+
+# exec (not spawn) so launchd tracks Harper itself — the job's PID is Harper's
+# PID, and KeepAlive restarts the real service rather than a dead launcher.
+exec "$NODE" "$HARPER_BIN" run .