mercury-agent 0.5.11 → 0.5.12

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mercury-agent",
-  "version": "0.5.11",
+  "version": "0.5.12",
   "description": "Personal AI assistant for chat platforms (WhatsApp, Slack, Discord, Telegram)",
   "license": "MIT",
   "author": "Avishai Tsabari",

package/src/cli/mercury.ts

@@ -2207,6 +2207,33 @@ profilesCommand
     console.log(`\nUse with: mercury setup --profile ${absOutput}`);
   });
 
+profilesCommand
+  .command("apply <source>")
+  .description("Apply an external profile (non-interactive)")
+  .action(async (source: string) => {
+    const { resolveProfileSource, loadProfileFromDir, applyProfile } =
+      await import("../core/profiles.js");
+
+    let cleanup = () => {};
+    try {
+      const resolved = resolveProfileSource(source, PROFILES_DIR);
+      cleanup = resolved.cleanup;
+      const profile = loadProfileFromDir(resolved.dir);
+      applyProfile(profile, resolved.dir, CWD);
+      console.log(`Profile "${profile.name}" applied.`);
+      console.log(
+        "Run 'mercury service install' to rebuild the container image.",
+      );
+    } catch (err) {
+      console.error(
+        `Failed to apply profile: ${err instanceof Error ? err.message : String(err)}`,
+      );
+      process.exit(1);
+    } finally {
+      cleanup();
+    }
+  });
+
 const spacesCommand = program.command("spaces").description("Manage spaces");
 
 spacesCommand

package/src/core/api-types.ts

@@ -3,6 +3,7 @@ import type { AgentContainerRunner } from "../agent/container-runner.js";
 import type { AppConfig } from "../config.js";
 import type { ConfigRegistry } from "../extensions/config-registry.js";
 import type { ExtensionRegistry } from "../extensions/loader.js";
+import { logger } from "../logger.js";
 import type { Db } from "../storage/db.js";
 import type { TradeStationFetch } from "../tradestation/host-api.js";
 import { hasPermission } from "./permissions.js";
@@ -49,6 +50,7 @@ export const checkPerm = (
   const { db } = c.get("apiCtx");
 
   if (!hasPermission(db, spaceId, role, permission)) {
+    logger.warn("Permission denied", { spaceId, role, permission });
     return c.json(
       { error: `Forbidden: requires '${permission}' permission` },
       403,

package/src/core/routes/capability.ts

@@ -33,6 +33,13 @@ capability.post("/:name/:action", async (c) => {
   const { callerId, spaceId } = getAuth(c);
   const { db, config, registry } = getApiCtx(c);
 
+  logger.info("Capability request", {
+    capability: name,
+    action,
+    callerId,
+    spaceId,
+  });
+
   // Authorization reuses the permission whose name equals the capability, so a
   // single grant (e.g. "barber" in member_permissions) gates both the CLI and
   // this route.