nlm-memory 0.5.0 → 0.5.1

package/src/install/hermes.ts

@@ -1,78 +0,0 @@
-/**
- * `nlm connect hermes` / `nlm disconnect hermes` — writes the nlm-memory
- * MCP server entry into ~/.hermes/config.yaml.
- *
- * Uses yaml's Document API (parseDocument / doc.setIn / doc.toString) to
- * preserve any comments the user has written in their config file. Round-
- * tripping through parse+stringify would silently destroy comments.
- */
-
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
-import { homedir } from "node:os";
-import { dirname, join } from "node:path";
-import { Document as YamlDocument, parseDocument as parseYamlDocument } from "yaml";
-
-export interface ConnectHermesOptions {
-  readonly nlmBinPath: string;
-  readonly nodeExecPath: string;
-  readonly dryRun?: boolean;
-}
-
-export interface ConnectHermesReport {
-  readonly configPath: string;
-  readonly alreadyPresent: boolean;
-  readonly written: boolean;
-  readonly dryRun: boolean;
-}
-
-export interface DisconnectHermesReport {
-  readonly configPath: string;
-  readonly removed: boolean;
-  readonly dryRun: boolean;
-}
-
-export function hermesConfigPath(): string {
-  return process.env["NLM_HERMES_CONFIG"] ?? join(homedir(), ".hermes", "config.yaml");
-}
-
-function readDocument(path: string): YamlDocument {
-  if (!existsSync(path)) return new YamlDocument();
-  try {
-    return parseYamlDocument(readFileSync(path, "utf8"));
-  } catch {
-    throw new Error(`${path} is not valid YAML. Fix or remove it, then re-run \`nlm connect hermes\`.`);
-  }
-}
-
-export function connectHermes(opts: ConnectHermesOptions): ConnectHermesReport {
-  const configPath = hermesConfigPath();
-  const doc = readDocument(configPath);
-  const alreadyPresent = doc.getIn(["mcp_servers", "nlm-memory"]) !== undefined;
-
-  if (!opts.dryRun) {
-    doc.setIn(["mcp_servers", "nlm-memory"], {
-      command: opts.nodeExecPath,
-      args: [opts.nlmBinPath, "mcp"],
-    });
-    mkdirSync(dirname(configPath), { recursive: true });
-    writeFileSync(configPath, doc.toString(), "utf8");
-  }
-
-  return { configPath, alreadyPresent, written: !opts.dryRun, dryRun: opts.dryRun ?? false };
-}
-
-export function disconnectHermes(opts?: { dryRun?: boolean }): DisconnectHermesReport {
-  const configPath = hermesConfigPath();
-  const doc = readDocument(configPath);
-
-  if (doc.getIn(["mcp_servers", "nlm-memory"]) === undefined) {
-    return { configPath, removed: false, dryRun: opts?.dryRun ?? false };
-  }
-
-  if (!opts?.dryRun) {
-    doc.deleteIn(["mcp_servers", "nlm-memory"]);
-    writeFileSync(configPath, doc.toString(), "utf8");
-  }
-
-  return { configPath, removed: true, dryRun: opts?.dryRun ?? false };
-}

package/src/install/nlm-dir-perms.ts

@@ -1,55 +0,0 @@
-/**
- * Idempotent permission hardening for ~/.nlm/.
- *
- * Recursively sets owner-only perms on the daemon's working directory:
- *   directories → 0o700
- *   files       → 0o600
- *
- * Run at every `nlm setup`, `nlm install`, and `nlm start` so installs
- * predating v0.4.2 (when explicit chmod was added) self-heal on next
- * launch. No-op on Windows — ACLs are the POSIX equivalent and out of
- * scope here.
- */
-
-import { chmodSync, existsSync, readdirSync, statSync } from "node:fs";
-import { homedir } from "node:os";
-import { join } from "node:path";
-
-export interface PermsHardenResult {
-  readonly nlmDir: string;
-  readonly filesHardened: number;
-  readonly dirsHardened: number;
-  readonly skipped: number;
-}
-
-export function hardenNlmDirPermissions(
-  nlmDir: string = join(homedir(), ".nlm"),
-): PermsHardenResult {
-  const result = { nlmDir, filesHardened: 0, dirsHardened: 0, skipped: 0 };
-  if (process.platform === "win32") return result;
-  if (!existsSync(nlmDir)) return result;
-  walk(nlmDir, result);
-  return result;
-}
-
-interface MutableResult {
-  filesHardened: number;
-  dirsHardened: number;
-  skipped: number;
-}
-
-function walk(path: string, r: MutableResult): void {
-  try {
-    const s = statSync(path);
-    if (s.isDirectory()) {
-      chmodSync(path, 0o700);
-      r.dirsHardened += 1;
-      for (const name of readdirSync(path)) walk(join(path, name), r);
-    } else if (s.isFile()) {
-      chmodSync(path, 0o600);
-      r.filesHardened += 1;
-    }
-  } catch {
-    r.skipped += 1;
-  }
-}

package/src/install/ollama.ts

@@ -1,284 +0,0 @@
-/**
- * Ollama preflight helpers for `nlm setup`.
- *
- * Three cases handled:
- *   1. Ollama not installed     → install it
- *   2. Ollama installed, server not responding → start the server
- *   3. Embedding model missing  → pull it
- *
- * Platform support:
- *   macOS  — brew install / Ollama.app / brew services / open -a
- *   Linux  — official install.sh / systemctl / detached spawn
- *   Windows — winget install / detached spawn
- */
-
-import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
-import { homedir, platform } from "node:os";
-import { join } from "node:path";
-import { spawnSync, spawn } from "node:child_process";
-import { randomBytes } from "node:crypto";
-
-export const EMBEDDING_MODEL = "nomic-embed-text";
-const OS = platform();
-
-export interface OllamaResult {
-  readonly ok: boolean;
-  readonly output: string;
-}
-
-// ── Detection ─────────────────────────────────────────────────────────────
-
-export function ollamaBinaryAvailable(): boolean {
-  const r = spawnSync("ollama", ["--version"], { encoding: "utf8" });
-  return r.status === 0;
-}
-
-/** Returns true if the Ollama server is accepting API requests. */
-export function ollamaServerRunning(): boolean {
-  const r = spawnSync("ollama", ["list"], { encoding: "utf8" });
-  return r.status === 0;
-}
-
-/** Returns true if nomic-embed-text is present in `ollama list`. */
-export function embeddingModelPresent(): boolean {
-  const r = spawnSync("ollama", ["list"], { encoding: "utf8" });
-  if (r.status !== 0) return false;
-  return r.stdout.includes(EMBEDDING_MODEL);
-}
-
-function brewAvailable(): boolean {
-  return spawnSync("brew", ["--version"], { encoding: "utf8" }).status === 0;
-}
-
-function ollamaAppInstalled(): boolean {
-  return existsSync("/Applications/Ollama.app");
-}
-
-function wingetAvailable(): boolean {
-  return spawnSync("winget", ["--version"], { encoding: "utf8", shell: true }).status === 0;
-}
-
-function systemctlAvailable(): boolean {
-  return spawnSync("systemctl", ["--version"], { encoding: "utf8" }).status === 0;
-}
-
-// ── Install ───────────────────────────────────────────────────────────────
-
-/**
- * Install Ollama using the best available method for the current platform.
- * Returns { ok: false } if no automated path exists — caller shows manual instructions.
- */
-export function installOllama(): OllamaResult {
-  if (OS === "darwin") {
-    if (brewAvailable()) {
-      const r = spawnSync("brew", ["install", "ollama"], { encoding: "utf8" });
-      return { ok: r.status === 0, output: (r.stdout + r.stderr).trim() };
-    }
-    return {
-      ok: false,
-      output: "Homebrew not found. Download Ollama from https://ollama.com/download and re-run setup.",
-    };
-  }
-
-  if (OS === "linux") {
-    // Runs: curl -fsSL https://ollama.com/install.sh | sh
-    // The official Ollama installer — sets up the binary and a systemd service.
-    // Requires sudo internally and may modify /etc/systemd/. The caller is
-    // responsible for confirming this with the user before calling.
-    const r = spawnSync("sh", ["-c", "curl -fsSL --proto '=https' https://ollama.com/install.sh | sh"], {
-      encoding: "utf8",
-      timeout: 120_000,
-    });
-    return { ok: r.status === 0, output: (r.stdout + r.stderr).trim() };
-  }
-
-  if (OS === "win32") {
-    if (wingetAvailable()) {
-      const r = spawnSync("winget", ["install", "Ollama.Ollama"], { encoding: "utf8", shell: true });
-      return { ok: r.status === 0, output: (r.stdout + r.stderr).trim() };
-    }
-    return {
-      ok: false,
-      output: "Download Ollama from https://ollama.com/download and re-run setup.",
-    };
-  }
-
-  return { ok: false, output: `Unsupported platform: ${OS}. Install from https://ollama.com/download.` };
-}
-
-// ── Server start ──────────────────────────────────────────────────────────
-
-/**
- * Start the Ollama server in the background.
- *
- * Platform preference:
- *   macOS + brew    → brew services start ollama
- *   macOS + app     → open -a Ollama
- *   Linux + systemd → systemctl start ollama (needs sudo; falls back to spawn)
- *   All others      → detached spawn of `ollama serve`
- */
-export function startOllamaServer(): OllamaResult {
-  if (OS === "darwin") {
-    if (brewAvailable()) {
-      const r = spawnSync("brew", ["services", "start", "ollama"], { encoding: "utf8" });
-      if (r.status === 0) return { ok: true, output: "Started via brew services" };
-    }
-    if (ollamaAppInstalled()) {
-      const r = spawnSync("open", ["-a", "Ollama"], { encoding: "utf8" });
-      if (r.status === 0) return { ok: true, output: "Started via Ollama.app" };
-    }
-  }
-
-  if (OS === "linux" && systemctlAvailable()) {
-    // systemctl requires root — try without sudo first (works in user sessions
-    // where the service is installed under the current user), fall through on failure.
-    const r = spawnSync("systemctl", ["start", "ollama"], { encoding: "utf8" });
-    if (r.status === 0) return { ok: true, output: "Started via systemctl" };
-  }
-
-  // Universal fallback: detach `ollama serve`.
-  try {
-    mkdirSync(join(homedir(), ".nlm", "logs"), { recursive: true });
-    const child = spawn("ollama", ["serve"], {
-      detached: true,
-      stdio: "ignore",
-    });
-    child.unref();
-    return { ok: true, output: `ollama serve started (pid ${child.pid})` };
-  } catch (e) {
-    return { ok: false, output: e instanceof Error ? e.message : String(e) };
-  }
-}
-
-/**
- * Poll until the Ollama server is accepting requests or maxAttempts is reached.
- * Returns true if the server came up, false on timeout.
- */
-export async function waitForOllamaServer(
-  maxAttempts = 15,
-  intervalMs = 1000,
-): Promise<boolean> {
-  for (let i = 0; i < maxAttempts; i++) {
-    if (ollamaServerRunning()) return true;
-    await new Promise((res) => setTimeout(res, intervalMs));
-  }
-  return false;
-}
-
-// ── Model pull ────────────────────────────────────────────────────────────
-
-/**
- * Pull the embedding model. Blocks until complete (~1–3 min on first run, a
- * few seconds on subsequent runs). The caller shows a spinner during this call.
- */
-export function pullEmbeddingModel(): OllamaResult {
-  // Give the server a moment to accept connections if it was just started.
-  const r = spawnSync("ollama", ["pull", EMBEDDING_MODEL], { encoding: "utf8" });
-  return { ok: r.status === 0, output: (r.stdout + r.stderr).trim() };
-}
-
-// ── API key / classifier config ───────────────────────────────────────────
-
-export type ClassifierChoice = "deepseek" | "ollama-offline";
-
-export interface ClassifierConfigInput {
-  readonly choice: ClassifierChoice;
-  readonly model?: string;
-  readonly apiKey?: string;
-}
-
-/**
- * Write classifier config to ~/.nlm/.env. Merges into the existing file —
- * only the lines we manage are updated; anything the user added by hand stays.
- *
- * Manages three keys: DEEPSEEK_API_KEY, NLM_CLASSIFIER, NLM_CLASSIFIER_MODEL.
- * Backwards-compatible: passing positional (choice, apiKey) still works.
- */
-export function writeClassifierConfig(
-  choiceOrInput: ClassifierChoice | ClassifierConfigInput,
-  apiKey?: string,
-): void {
-  const input: ClassifierConfigInput =
-    typeof choiceOrInput === "string"
-      ? { choice: choiceOrInput, ...(apiKey !== undefined ? { apiKey } : {}) }
-      : choiceOrInput;
-
-  const envPath = join(homedir(), ".nlm", ".env");
-  const nlmDir = join(homedir(), ".nlm");
-  mkdirSync(nlmDir, { recursive: true, mode: 0o700 });
-  chmodSync(nlmDir, 0o700);
-
-  const existing = existsSync(envPath) ? readFileSync(envPath, "utf8") : "";
-  const kept = existing
-    .split("\n")
-    .filter(
-      (l) =>
-        !l.startsWith("DEEPSEEK_API_KEY=") &&
-        !l.startsWith("NLM_CLASSIFIER=") &&
-        !l.startsWith("NLM_CLASSIFIER_MODEL="),
-    )
-    .join("\n")
-    .replace(/\n{3,}/g, "\n\n")
-    .trim();
-
-  const additions: string[] = [];
-  if (input.choice === "deepseek") {
-    additions.push("NLM_CLASSIFIER=deepseek");
-    if (input.apiKey) {
-      // Strip newlines that clipboard paste can introduce.
-      const sanitized = input.apiKey.replace(/[\r\n]/g, "").trim();
-      additions.push(`DEEPSEEK_API_KEY=${sanitized}`);
-    }
-  }
-  if (input.choice === "ollama-offline") additions.push("NLM_CLASSIFIER=ollama");
-  if (input.model) additions.push(`NLM_CLASSIFIER_MODEL=${input.model}`);
-
-  writeFileSync(envPath, [kept, ...additions].filter(Boolean).join("\n") + "\n", { mode: 0o600 });
-  chmodSync(envPath, 0o600);
-}
-
-const TOKEN_BYTES = 32;
-
-/**
- * Generate and persist an NLM_MCP_TOKEN if one isn't already set. Returns
- * the token that's active for this process. Called during setup and on
- * `nlm start` so installs that pre-date token-gated /api/* still get
- * Bearer-protected without operator intervention.
- *
- * Token is hex-encoded crypto.randomBytes — 64 chars, 256 bits of entropy.
- */
-export function ensureMcpToken(): string {
-  const existing = process.env["NLM_MCP_TOKEN"];
-  if (existing) return existing;
-
-  const token = randomBytes(TOKEN_BYTES).toString("hex");
-
-  const envPath = join(homedir(), ".nlm", ".env");
-  const nlmDir = join(homedir(), ".nlm");
-  mkdirSync(nlmDir, { recursive: true, mode: 0o700 });
-  chmodSync(nlmDir, 0o700);
-
-  const fileExisting = existsSync(envPath) ? readFileSync(envPath, "utf8") : "";
-  // Idempotent re-read: another setup run could have written the token
-  // between our env check and now. Prefer the persisted value.
-  for (const line of fileExisting.split("\n")) {
-    if (line.startsWith("NLM_MCP_TOKEN=")) {
-      const persisted = line.slice("NLM_MCP_TOKEN=".length).trim();
-      if (persisted) {
-        process.env["NLM_MCP_TOKEN"] = persisted;
-        return persisted;
-      }
-    }
-  }
-
-  const kept = fileExisting
-    .split("\n")
-    .filter((l) => !l.startsWith("NLM_MCP_TOKEN="))
-    .join("\n")
-    .replace(/\n{3,}/g, "\n\n")
-    .trim();
-  writeFileSync(envPath, [kept, `NLM_MCP_TOKEN=${token}`].filter(Boolean).join("\n") + "\n", { mode: 0o600 });
-  chmodSync(envPath, 0o600);
-  process.env["NLM_MCP_TOKEN"] = token;
-  return token;
-}