@wipcomputer/memory-crystal 0.7.34-alpha.3 → 0.7.34-alpha.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/memory-crystal",
-  "version": "0.7.34-alpha.3",
+  "version": "0.7.34-alpha.4",
   "description": "Sovereign memory system — local-first with ephemeral encrypted relay. Your memory, your machine, your rules.",
   "repository": {
     "type": "git",
@@ -19,7 +19,10 @@
   },
   "files": [
     "dist/",
-    "scripts/",
+    "scripts/crystal-capture.sh",
+    "scripts/deploy-cloud.sh",
+    "scripts/ldm-backup.sh",
+    "scripts/migrate-lance-to-sqlite.mjs",
     "skills/",
     "migrations/",
     "cloud/",
@@ -32,8 +35,8 @@
   ],
   "scripts": {
     "prepublishOnly": "npm run build",
-    "build": "tsup src/core.ts src/cli.ts src/mcp-server.ts src/openclaw.ts src/migrate.ts src/cc-hook.ts src/cc-poller.ts src/crypto.ts src/pair.ts src/poller.ts src/mirror-sync.ts src/file-sync.ts src/ldm.ts src/summarize.ts src/role.ts src/doctor.ts src/bridge.ts src/discover.ts src/bulk-copy.ts src/oc-backfill.ts src/dream-weaver.ts src/crystal-serve.ts src/staging.ts src/installer.ts --format esm --dts --outDir dist --no-splitting && tsup src/worker.ts --format esm --outDir dist --no-dts --no-splitting && cp scripts/crystal-capture.sh scripts/ldm-backup.sh dist/",
-    "build:local": "tsup src/core.ts src/cli.ts src/mcp-server.ts src/openclaw.ts src/migrate.ts src/cc-hook.ts src/cc-poller.ts src/crypto.ts src/pair.ts src/poller.ts src/mirror-sync.ts src/file-sync.ts src/ldm.ts src/summarize.ts src/role.ts src/doctor.ts src/bridge.ts src/discover.ts src/bulk-copy.ts src/oc-backfill.ts src/dream-weaver.ts src/crystal-serve.ts src/staging.ts src/installer.ts --format esm --dts --outDir dist --no-splitting",
+    "build": "tsup src/core.ts src/cli.ts src/mcp-server.ts src/openclaw.ts src/migrate.ts src/cc-hook.ts src/cc-poller.ts src/crypto.ts src/pair.ts src/poller.ts src/mirror-sync.ts src/file-sync.ts src/ldm.ts src/summarize.ts src/role.ts src/doctor.ts src/bridge.ts src/discover.ts src/bulk-copy.ts src/oc-backfill.ts src/dream-weaver.ts src/crystal-serve.ts src/staging.ts src/installer.ts --format esm --dts --outDir dist --no-splitting --clean && tsup src/worker.ts --format esm --outDir dist --no-dts --no-splitting && cp scripts/crystal-capture.sh scripts/ldm-backup.sh dist/",
+    "build:local": "tsup src/core.ts src/cli.ts src/mcp-server.ts src/openclaw.ts src/migrate.ts src/cc-hook.ts src/cc-poller.ts src/crypto.ts src/pair.ts src/poller.ts src/mirror-sync.ts src/file-sync.ts src/ldm.ts src/summarize.ts src/role.ts src/doctor.ts src/bridge.ts src/discover.ts src/bulk-copy.ts src/oc-backfill.ts src/dream-weaver.ts src/crystal-serve.ts src/staging.ts src/installer.ts --format esm --dts --outDir dist --no-splitting --clean",
     "build:worker": "tsup src/worker.ts --format esm --outDir dist --no-dts",
     "build:cloud": "tsup src/worker-mcp.ts src/cloud-crystal.ts --format esm --outDir dist --no-dts",
     "deploy:cloud": "bash -c 'git diff --quiet HEAD -- src/ wrangler-mcp.toml || (echo \"ERROR: uncommitted changes. commit before deploying.\" && exit 1)' && wrangler deploy --config wrangler-mcp.toml",

package/dist/chunk-25LXQJ4Z.js

@@ -1,110 +0,0 @@
-import {
-  init_ldm,
-  resolveSecretPath
-} from "./chunk-PSQZURHO.js";
-
-// src/crypto.ts
-init_ldm();
-import { readFileSync, existsSync } from "fs";
-import { createCipheriv, createDecipheriv, createHmac, randomBytes, hkdfSync } from "crypto";
-import { createHash } from "crypto";
-var KEY_PATH = process.env.CRYSTAL_RELAY_KEY_PATH || resolveSecretPath("crystal-relay-key");
-function loadRelayKey() {
-  if (!existsSync(KEY_PATH)) {
-    throw new Error(
-      `Relay key not found at ${KEY_PATH}
-Generate one: openssl rand -base64 32 > ${KEY_PATH} && chmod 600 ${KEY_PATH}
-Copy the same key to all trusted machines.`
-    );
-  }
-  const raw = readFileSync(KEY_PATH, "utf-8").trim();
-  const key = Buffer.from(raw, "base64");
-  if (key.length !== 32) {
-    throw new Error(`Relay key must be 32 bytes (256 bits). Got ${key.length} bytes. Regenerate with: openssl rand -base64 32`);
-  }
-  return key;
-}
-function deriveSigningKey(masterKey) {
-  return Buffer.from(hkdfSync("sha256", masterKey, "", "crystal-relay-sign", 32));
-}
-function encrypt(plaintext, masterKey) {
-  const nonce = randomBytes(12);
-  const cipher = createCipheriv("aes-256-gcm", masterKey, nonce);
-  const ciphertext = Buffer.concat([cipher.update(plaintext), cipher.final()]);
-  const tag = cipher.getAuthTag();
-  const signingKey = deriveSigningKey(masterKey);
-  const hmacData = Buffer.concat([nonce, ciphertext, tag]);
-  const hmac = createHmac("sha256", signingKey).update(hmacData).digest("hex");
-  return {
-    v: 1,
-    nonce: nonce.toString("base64"),
-    ciphertext: ciphertext.toString("base64"),
-    tag: tag.toString("base64"),
-    hmac
-  };
-}
-function decrypt(payload, masterKey) {
-  if (payload.v !== 1) {
-    throw new Error(`Unknown payload version: ${payload.v}`);
-  }
-  const nonce = Buffer.from(payload.nonce, "base64");
-  const ciphertext = Buffer.from(payload.ciphertext, "base64");
-  const tag = Buffer.from(payload.tag, "base64");
-  const signingKey = deriveSigningKey(masterKey);
-  const hmacData = Buffer.concat([nonce, ciphertext, tag]);
-  const expectedHmac = createHmac("sha256", signingKey).update(hmacData).digest("hex");
-  if (payload.hmac !== expectedHmac) {
-    throw new Error("HMAC verification failed \u2014 blob rejected (tampered or wrong key)");
-  }
-  const decipher = createDecipheriv("aes-256-gcm", masterKey, nonce);
-  decipher.setAuthTag(tag);
-  return Buffer.concat([decipher.update(ciphertext), decipher.final()]);
-}
-function encryptJSON(data, masterKey) {
-  const plaintext = Buffer.from(JSON.stringify(data), "utf-8");
-  return encrypt(plaintext, masterKey);
-}
-function decryptJSON(payload, masterKey) {
-  const plaintext = decrypt(payload, masterKey);
-  return JSON.parse(plaintext.toString("utf-8"));
-}
-function encryptFile(filePath, masterKey) {
-  const plaintext = readFileSync(filePath);
-  return encrypt(plaintext, masterKey);
-}
-var RELAY_KEY_PATH = KEY_PATH;
-function generateRelayKey() {
-  return randomBytes(32);
-}
-function encodePairingString(key) {
-  if (key.length !== 32) throw new Error("Key must be 32 bytes");
-  return `mc1:${key.toString("base64")}`;
-}
-function decodePairingString(str) {
-  const trimmed = str.trim();
-  if (!trimmed.startsWith("mc1:")) {
-    throw new Error("Invalid pairing string (expected mc1: prefix)");
-  }
-  const key = Buffer.from(trimmed.slice(4), "base64");
-  if (key.length !== 32) {
-    throw new Error(`Invalid key length: expected 32 bytes, got ${key.length}`);
-  }
-  return key;
-}
-function hashBuffer(data) {
-  return createHash("sha256").update(data).digest("hex");
-}
-
-export {
-  loadRelayKey,
-  encrypt,
-  decrypt,
-  encryptJSON,
-  decryptJSON,
-  encryptFile,
-  RELAY_KEY_PATH,
-  generateRelayKey,
-  encodePairingString,
-  decodePairingString,
-  hashBuffer
-};

package/dist/chunk-2DRXIRQW.js

@@ -1,97 +0,0 @@
-import {
-  getAgentId,
-  ldmPaths,
-  resolveSecretPath,
-  resolveStatePath,
-  stateWritePath
-} from "./chunk-DACSKLY6.js";
-
-// src/role.ts
-import { existsSync, readFileSync, writeFileSync } from "fs";
-var STATE_FILE = "crystal-role.json";
-function loadRoleState() {
-  try {
-    const path = resolveStatePath(STATE_FILE);
-    if (existsSync(path)) {
-      return JSON.parse(readFileSync(path, "utf-8"));
-    }
-  } catch {
-  }
-  return null;
-}
-function saveRoleState(state) {
-  const writePath = stateWritePath(STATE_FILE);
-  writeFileSync(writePath, JSON.stringify(state, null, 2) + "\n");
-}
-function hasLocalEmbeddingProvider() {
-  if (process.env.OPENAI_API_KEY) return true;
-  if (process.env.GOOGLE_API_KEY && process.env.CRYSTAL_EMBEDDING_PROVIDER === "google") return true;
-  if (process.env.CRYSTAL_EMBEDDING_PROVIDER === "ollama") return true;
-  return false;
-}
-function hasRelayKey() {
-  const keyPath = resolveSecretPath("crystal-relay-key");
-  return existsSync(keyPath);
-}
-function detectRole() {
-  const agentId = getAgentId();
-  const paths = ldmPaths(agentId);
-  const relayUrl = process.env.CRYSTAL_RELAY_URL || null;
-  const relayToken = !!process.env.CRYSTAL_RELAY_TOKEN;
-  const relayKeyExists = hasRelayKey();
-  const localEmbeddings = hasLocalEmbeddingProvider();
-  const localDb = existsSync(paths.crystalDb);
-  const state = loadRoleState();
-  if (state && state.override) {
-    return {
-      role: state.role,
-      source: "state-file",
-      relayUrl,
-      relayToken,
-      relayKeyExists,
-      agentId,
-      hasLocalEmbeddings: localEmbeddings,
-      hasLocalDb: localDb
-    };
-  }
-  let role = "standalone";
-  if (relayUrl && !localEmbeddings) {
-    role = "node";
-  } else if (relayUrl && localEmbeddings) {
-    role = "core";
-  }
-  return {
-    role,
-    source: "auto-detected",
-    relayUrl,
-    relayToken,
-    relayKeyExists,
-    agentId,
-    hasLocalEmbeddings: localEmbeddings,
-    hasLocalDb: localDb
-  };
-}
-function promoteToCore() {
-  saveRoleState({
-    role: "core",
-    override: true,
-    agentId: getAgentId(),
-    setAt: (/* @__PURE__ */ new Date()).toISOString()
-  });
-}
-function demoteToNode(relayUrl) {
-  saveRoleState({
-    role: "node",
-    override: true,
-    relayUrl,
-    agentId: getAgentId(),
-    setAt: (/* @__PURE__ */ new Date()).toISOString()
-  });
-}
-
-export {
-  loadRoleState,
-  detectRole,
-  promoteToCore,
-  demoteToNode
-};