@cachly-dev/mcp-server 0.10.24 → 0.10.25

package/dist/__tests__/auth.test.js

@@ -1,107 +0,0 @@
-import { describe, it, expect } from 'vitest';
-import { ErrorCode } from '@modelcontextprotocol/sdk/types.js';
-import { jwtExpiryMs, checkJwt, handleApiError } from '../auth.js';
-function makeJwt(payload) {
-    const header = Buffer.from(JSON.stringify({ alg: 'HS256', typ: 'JWT' })).toString('base64url');
-    const body = Buffer.from(JSON.stringify(payload)).toString('base64url');
-    return `${header}.${body}.fakesig`;
-}
-const nowSec = () => Math.floor(Date.now() / 1000);
-describe('jwtExpiryMs', () => {
-    it('returns null for an empty string', () => {
-        expect(jwtExpiryMs('')).toBeNull();
-    });
-    it('returns null for a plain (non-JWT) string', () => {
-        expect(jwtExpiryMs('not-a-token')).toBeNull();
-    });
-    it('returns null when the JWT has only two parts', () => {
-        expect(jwtExpiryMs('header.payload')).toBeNull();
-    });
-    it('returns null when the JWT has four parts', () => {
-        expect(jwtExpiryMs('a.b.c.d')).toBeNull();
-    });
-    it('returns null when the payload base64 is invalid', () => {
-        expect(jwtExpiryMs('header.!!!.sig')).toBeNull();
-    });
-    it('returns null when the payload has no exp field', () => {
-        expect(jwtExpiryMs(makeJwt({ sub: 'user-123', iat: nowSec() }))).toBeNull();
-    });
-    it('returns null when exp is 0', () => {
-        expect(jwtExpiryMs(makeJwt({ exp: 0 }))).toBeNull();
-    });
-    it('converts exp (seconds) to milliseconds', () => {
-        const expSec = nowSec() + 3600;
-        expect(jwtExpiryMs(makeJwt({ exp: expSec }))).toBe(expSec * 1000);
-    });
-    it('returns a past timestamp for an expired token', () => {
-        expect(jwtExpiryMs(makeJwt({ exp: nowSec() - 300 }))).toBeLessThan(Date.now());
-    });
-    it('returns a future timestamp for a valid token', () => {
-        expect(jwtExpiryMs(makeJwt({ exp: nowSec() + 86400 }))).toBeGreaterThan(Date.now());
-    });
-    it('handles a token expiring in less than 60 minutes', () => {
-        const expSec = nowSec() + 30 * 60;
-        const result = jwtExpiryMs(makeJwt({ exp: expSec }));
-        const minsLeft = Math.floor((result - Date.now()) / 60_000);
-        expect(minsLeft).toBeGreaterThanOrEqual(29);
-        expect(minsLeft).toBeLessThanOrEqual(30);
-    });
-    it('ignores extra claims', () => {
-        const expSec = nowSec() + 3600;
-        expect(jwtExpiryMs(makeJwt({ sub: 'u', iat: nowSec(), exp: expSec, plan: 'free' }))).toBe(expSec * 1000);
-    });
-    it('handles padding-free base64url payloads', () => {
-        // base64url (no =) — Buffer.from handles this natively
-        const expSec = nowSec() + 7200;
-        expect(jwtExpiryMs(makeJwt({ exp: expSec, x: 'a' }))).toBe(expSec * 1000);
-    });
-});
-describe('checkJwt', () => {
-    it('throws InvalidRequest when jwt is empty', () => {
-        expect(() => checkJwt('')).toThrowError(expect.objectContaining({ code: ErrorCode.InvalidRequest, message: expect.stringContaining('CACHLY_JWT env var not set') }));
-    });
-    it('throws with setup URL when jwt is missing', () => {
-        expect(() => checkJwt('')).toThrowError(expect.objectContaining({ message: expect.stringContaining('cachly.dev/setup-ai') }));
-    });
-    it('throws InvalidRequest with expiry timestamp for an expired token', () => {
-        const expSec = nowSec() - 60;
-        const token = makeJwt({ exp: expSec });
-        expect(() => checkJwt(token)).toThrowError(expect.objectContaining({
-            code: ErrorCode.InvalidRequest,
-            message: expect.stringContaining('expired at'),
-        }));
-    });
-    it('does not throw for a valid non-expired token', () => {
-        expect(() => checkJwt(makeJwt({ exp: nowSec() + 3600 }))).not.toThrow();
-    });
-    it('does not throw for a token with no exp claim', () => {
-        expect(() => checkJwt(makeJwt({ sub: 'user' }))).not.toThrow();
-    });
-});
-describe('handleApiError', () => {
-    it('throws InvalidRequest for 401 with the detail message', () => {
-        expect(() => handleApiError(401, 'token expired')).toThrowError(expect.objectContaining({
-            code: ErrorCode.InvalidRequest,
-            message: expect.stringContaining('Authentication failed (401): token expired'),
-        }));
-    });
-    it('throws InvalidRequest for 403 with the detail message', () => {
-        expect(() => handleApiError(403, 'plan limit reached')).toThrowError(expect.objectContaining({
-            code: ErrorCode.InvalidRequest,
-            message: expect.stringContaining('Access denied (403): plan limit reached'),
-        }));
-    });
-    it('throws InternalError for other status codes', () => {
-        expect(() => handleApiError(500, 'server crash')).toThrowError(expect.objectContaining({
-            code: ErrorCode.InternalError,
-            message: expect.stringContaining('cachly API error 500: server crash'),
-        }));
-    });
-    it('includes the cachly.dev/setup-ai link for 401 errors', () => {
-        expect(() => handleApiError(401, 'Unauthorized')).toThrowError(expect.objectContaining({ message: expect.stringContaining('cachly.dev/setup-ai') }));
-    });
-    it('includes account access hint for 403 errors', () => {
-        expect(() => handleApiError(403, 'Forbidden')).toThrowError(expect.objectContaining({ message: expect.stringContaining('access to this resource') }));
-    });
-});
-//# sourceMappingURL=auth.test.js.map

package/dist/__tests__/auth.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.test.js","sourceRoot":"","sources":["../../src/__tests__/auth.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAY,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEnE,SAAS,OAAO,CAAC,OAAgC;IAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC/F,MAAM,IAAI,GAAK,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC1E,OAAO,GAAG,MAAM,IAAI,IAAI,UAAU,CAAC;AACrC,CAAC;AAED,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;AAEnD,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC;QAC/B,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,MAAM,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAE,CAAC;QACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC;QAC5D,MAAM,CAAC,QAAQ,CAAC,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;QAC5C,MAAM,CAAC,QAAQ,CAAC,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,MAAM,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC;QAC/B,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC3G,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,uDAAuD;QACvD,MAAM,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC;QAC/B,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;IACxB,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CACrC,MAAM,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,cAAc,EAAE,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,4BAA4B,CAAC,EAAE,CAAC,CAC5H,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CACrC,MAAM,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,EAAE,CAAC,CACrF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,MAAM,GAAG,MAAM,EAAE,GAAG,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAI,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;QACxC,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CACxC,MAAM,CAAC,gBAAgB,CAAC;YACtB,IAAI,EAAE,SAAS,CAAC,cAAc;YAC9B,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,YAAY,CAAC;SAC/C,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACjE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC,CAAC,YAAY,CAC7D,MAAM,CAAC,gBAAgB,CAAC;YACtB,IAAI,EAAE,SAAS,CAAC,cAAc;YAC9B,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,4CAA4C,CAAC;SAC/E,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC,CAAC,YAAY,CAClE,MAAM,CAAC,gBAAgB,CAAC;YACtB,IAAI,EAAE,SAAS,CAAC,cAAc;YAC9B,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,yCAAyC,CAAC;SAC5E,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC,YAAY,CAC5D,MAAM,CAAC,gBAAgB,CAAC;YACtB,IAAI,EAAE,SAAS,CAAC,aAAa;YAC7B,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,oCAAoC,CAAC;SACvE,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC,YAAY,CAC5D,MAAM,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,EAAE,CAAC,CACrF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC,YAAY,CACzD,MAAM,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,yBAAyB,CAAC,EAAE,CAAC,CACzF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/glama.json

@@ -1,36 +0,0 @@
-{
-  "$schema": "https://glama.ai/mcp/schemas/server.json",
-  "maintainers": [
-    "HeinrichNebula"
-  ],
-  "categories": [
-    "memory",
-    "developer-tools",
-    "productivity",
-    "knowledge-management",
-    "team-collaboration"
-  ],
-  "keywords": [
-    "persistent-memory",
-    "ai-memory",
-    "mcp-server",
-    "claude-code",
-    "cursor",
-    "copilot",
-    "windsurf",
-    "cline",
-    "zed",
-    "causal-trace",
-    "brain-predict",
-    "smart-recall",
-    "knowledge-graph",
-    "team-brain",
-    "brain-from-git",
-    "failure-prediction",
-    "memory-crystals",
-    "gdpr",
-    "free-tier",
-    "readme-badge",
-    "incremental-learning"
-  ]
-}

package/llms.txt

@@ -1,155 +0,0 @@
-# cachly AI Brain — MCP Server
-
-> Persistent memory layer for AI coding assistants. Gives Claude Code, Cursor, GitHub Copilot, Windsurf, Cline and Zed a permanent brain that learns from every session, bug fix, git commit, and CI run — automatically.
-
-## What cachly is
-
-cachly is an MCP (Model Context Protocol) server that adds long-term memory to AI coding assistants. Unlike conversation-window context, cachly memory persists forever across sessions, projects, and team members.
-
-It works by maintaining a Causal Knowledge Graph (CKG) — a structured store of lessons, bug fixes, architecture decisions, deployment commands, and failure patterns. On every session start, the AI receives a briefing with relevant lessons. On every fix or commit, new lessons are automatically stored.
-
-**Key differentiator**: causal_trace — given any error or problem description, traces the causal chain through the graph (root cause → intermediate causes → known fix). No other memory system does this.
-
-## Installation (zero config)
-
-```bash
-npx @cachly-dev/mcp-server@latest setup
-```
-
-This command: authenticates via OAuth device flow (one browser click), auto-detects all installed editors, writes the correct MCP config for each, creates CLAUDE.md with Brain rules, installs a git post-commit hook.
-
-Free tier: 25 MB, no credit card, German servers (GDPR).
-
-## Supported editors
-
-Claude Code, Cursor, Windsurf, VS Code, GitHub Copilot, Cline, Zed, Continue.dev
-
-## How memory works
-
-1. Session starts → AI receives: last session summary, open failures, relevant lessons, memory crystal (compressed history)
-2. During work → AI stores: WIP state, architecture decisions, file summaries
-3. Bug fixed → lesson stored: what failed, what worked, commands used, severity, file paths
-4. Editor closes → session summary saved, git log analyzed, ambient lessons extracted
-5. Next session → AI arrives pre-briefed
-
-## Tool catalog (89 tools)
-
-### Session & Memory
-- session_start: Single-call session briefing — last summary, open failures, recent lessons, brain health
-- session_end: Save session summary when finishing work
-- session_handoff: Detailed handoff for next chat window
-- session_ping: Lightweight checkpoint every ~5 tool calls
-- auto_learn_session: Auto-learn from session observations without explicit calls
-- sync_file_changes: Associate recent file changes with brain knowledge
-
-### Lesson Storage & Recall
-- learn_from_attempts: Store structured lesson from any fix, deploy, or discovery
-- recall_best_solution: Best known solution for a topic with success/failure history
-- smart_recall: BM25+ semantic search across all brain data (11 languages: EN DE FR ES IT PT ZH JA KO AR HE)
-- brain_search: Full-text search over all brain data
-- recall_at: Brain archaeology — see what a lesson looked like at a point in time
-
-### Causal Analysis & Prediction
-- causal_trace: Root Cause Analysis through memory — problem → causal chain → known fix
-- brain_predict: Predictive pre-fetch — predicts likely failures given current context, returns fixes
-- brain_predict_failures: Pre-deploy failure prediction with probability percentages
-- trace_dependency: Find all lessons that depend on a given prerequisite
-- knowledge_decay: Confidence scoring for every lesson
-
-### Context Management
-- remember_context: Save architecture findings, decisions, file summaries
-- recall_context: Retrieve saved context by key (supports glob)
-- list_remembered: List all cached context entries
-- forget_context: Delete cached context entries
-- compact_recover: Reconstruct full context from Memory Crystal after context limit
-
-### Memory Maintenance
-- memory_consolidate: Weekly garbage collector — deduplicates, detects contradictions, expires stale lessons
-- memory_crystalize: Compress sessions into dense Memory Crystal snapshot
-- crystal_view: Inspect current Memory Crystal
-- brain_diff: See exactly what changed in the brain since a point in time
-- brain_doctor: Health check — lesson count, IQ boost %, open failures, recommendations
-- brain_from_git: Bootstrap brain lessons from existing git history
-
-### Team Brain
-- team_learn: Store lesson in shared team brain
-- team_recall: Recall from shared team brain (shows who learned what)
-- team_synthesize: Merge multiple contributors' lessons on same topic into canonical version
-- madc_deliberate: Multi-Agent Deliberation Chamber — 6 specialist agents vote on conflicting lessons
-
-### Knowledge Commons (Global)
-- syndicate: Contribute verified lesson to global Knowledge Commons
-- syndicate_search: Search global Knowledge Commons
-- syndicate_trending: Trending lessons globally
-- fedbrain_contribute: Contribute with cryptographic knowledge certificate
-- fedbrain_search: Context-weighted search of global commons
-- fedbrain_confirm: Confirm a syndicated lesson worked for you
-- publish_lesson: Publish lesson to Cachly Public Brain
-- import_public_brain: Import community lessons for a framework
-- global_learn: Store lesson that applies across all your projects
-- global_recall: Retrieve cross-project lessons
-
-### Continuous Learning Stream
-- cls_ingest: Ingest learning signals from git commits, CI runs, IDE diagnostics without session_end
-- cls_install_hooks: Generate git post-commit hook and GitHub Actions step for automatic learning
-
-### Autopilot — self-managing AI instructions
-- autopilot: Generate a CLAUDE.md / copilot-instructions.md / .github/copilot-instructions.md from actual Brain content. Supports Claude, Cursor, Copilot, Windsurf, Gemini. style="minimal" for just the hooks, style="full" for complete ruleset with examples. Re-run as the Brain learns more to continuously upgrade the instructions file.
-
-### Roadmap & Planning
-- roadmap_add: Add item to persistent project roadmap stored in Brain
-- roadmap_update: Update roadmap item status, priority, details
-- roadmap_list: List roadmap items filtered by status, priority, tag, milestone
-- roadmap_next: Get the single most important next actionable item
-
-### Cache & Infrastructure
-- list_instances / create_instance / delete_instance: Manage Brain instances
-- cache_get / cache_set / cache_delete: Standard Redis/Valkey cache operations
-- cache_mget / cache_mset: Bulk pipeline (single round-trip)
-- cache_exists / cache_ttl / cache_keys / cache_stats: Cache introspection
-- semantic_search: Find cached entries by semantic similarity
-- cache_warmup: Pre-warm semantic cache with prompt/value pairs
-- cache_lock_acquire / cache_lock_release: Distributed locking
-- cache_stream_set / cache_stream_get: LLM token stream caching
-- index_project: Index source files for semantic search
-- detect_namespace: Classify prompts into semantic namespaces
-- get_connection_string: Get Redis/Valkey connection string
-- get_api_status: Full diagnostic — call when anything is broken
-
-### Organization & Teams
-- list_orgs / create_org / invite_member / get_org_plan: Multi-tenant organization management
-- ckg_inspect: Inspect Causal Knowledge Graph for a concept
-- autopilot: Generate CLAUDE.md / copilot-instructions.md for self-managing AI
-- setup_ai_memory: One-shot setup of 3-layer AI Memory system
-- brain_federate: Private org knowledge transfer
-
-## Comparison to alternatives
-
-| Feature | cachly | mem0 | Plain CLAUDE.md |
-|---------|--------|------|-----------------|
-| Persistent across sessions | ✅ | ✅ | Manual |
-| Causal root cause analysis | ✅ | ❌ | ❌ |
-| Automatic (no explicit calls) | ✅ | ❌ | ❌ |
-| Team knowledge sharing | ✅ | Paid | ❌ |
-| Failure prediction | ✅ | ❌ | ❌ |
-| Git-ambient learning | ✅ | ❌ | ❌ |
-| 11-language search | ✅ | ❌ | ❌ |
-| Free tier forever | ✅ | Limited | ✅ |
-| GDPR / EU servers | ✅ | ❌ | ✅ |
-
-## Pricing
-
-- Free: 25 MB, 1 instance, €0/month forever
-- Dev: 200 MB, €19/month
-- Pro: 900 MB, team features, €49/month
-- Speed: 900 MB + Dragonfly engine, €79/month
-- Business: 7 GB, €199/month
-
-All plans: German servers, GDPR-compliant, 99.9% SLA.
-
-## Links
-
-- npm: https://www.npmjs.com/package/@cachly-dev/mcp-server
-- GitHub: https://github.com/cachly-dev/cachly-mcp
-- Docs: https://cachly.dev/docs/ai-memory
-- Dashboard: https://cachly.dev

package/src/__tests__/auth.test.ts

@@ -1,147 +0,0 @@
-import { describe, it, expect } from 'vitest';
-import { ErrorCode, McpError } from '@modelcontextprotocol/sdk/types.js';
-import { jwtExpiryMs, checkJwt, handleApiError } from '../auth.js';
-
-function makeJwt(payload: Record<string, unknown>): string {
-  const header = Buffer.from(JSON.stringify({ alg: 'HS256', typ: 'JWT' })).toString('base64url');
-  const body   = Buffer.from(JSON.stringify(payload)).toString('base64url');
-  return `${header}.${body}.fakesig`;
-}
-
-const nowSec = () => Math.floor(Date.now() / 1000);
-
-describe('jwtExpiryMs', () => {
-  it('returns null for an empty string', () => {
-    expect(jwtExpiryMs('')).toBeNull();
-  });
-
-  it('returns null for a plain (non-JWT) string', () => {
-    expect(jwtExpiryMs('not-a-token')).toBeNull();
-  });
-
-  it('returns null when the JWT has only two parts', () => {
-    expect(jwtExpiryMs('header.payload')).toBeNull();
-  });
-
-  it('returns null when the JWT has four parts', () => {
-    expect(jwtExpiryMs('a.b.c.d')).toBeNull();
-  });
-
-  it('returns null when the payload base64 is invalid', () => {
-    expect(jwtExpiryMs('header.!!!.sig')).toBeNull();
-  });
-
-  it('returns null when the payload has no exp field', () => {
-    expect(jwtExpiryMs(makeJwt({ sub: 'user-123', iat: nowSec() }))).toBeNull();
-  });
-
-  it('returns null when exp is 0', () => {
-    expect(jwtExpiryMs(makeJwt({ exp: 0 }))).toBeNull();
-  });
-
-  it('converts exp (seconds) to milliseconds', () => {
-    const expSec = nowSec() + 3600;
-    expect(jwtExpiryMs(makeJwt({ exp: expSec }))).toBe(expSec * 1000);
-  });
-
-  it('returns a past timestamp for an expired token', () => {
-    expect(jwtExpiryMs(makeJwt({ exp: nowSec() - 300 }))).toBeLessThan(Date.now());
-  });
-
-  it('returns a future timestamp for a valid token', () => {
-    expect(jwtExpiryMs(makeJwt({ exp: nowSec() + 86400 }))).toBeGreaterThan(Date.now());
-  });
-
-  it('handles a token expiring in less than 60 minutes', () => {
-    const expSec = nowSec() + 30 * 60;
-    const result = jwtExpiryMs(makeJwt({ exp: expSec }))!;
-    const minsLeft = Math.floor((result - Date.now()) / 60_000);
-    expect(minsLeft).toBeGreaterThanOrEqual(29);
-    expect(minsLeft).toBeLessThanOrEqual(30);
-  });
-
-  it('ignores extra claims', () => {
-    const expSec = nowSec() + 3600;
-    expect(jwtExpiryMs(makeJwt({ sub: 'u', iat: nowSec(), exp: expSec, plan: 'free' }))).toBe(expSec * 1000);
-  });
-
-  it('handles padding-free base64url payloads', () => {
-    // base64url (no =) — Buffer.from handles this natively
-    const expSec = nowSec() + 7200;
-    expect(jwtExpiryMs(makeJwt({ exp: expSec, x: 'a' }))).toBe(expSec * 1000);
-  });
-});
-
-describe('checkJwt', () => {
-  it('throws InvalidRequest when jwt is empty', () => {
-    expect(() => checkJwt('')).toThrowError(
-      expect.objectContaining({ code: ErrorCode.InvalidRequest, message: expect.stringContaining('CACHLY_JWT env var not set') }),
-    );
-  });
-
-  it('throws with setup URL when jwt is missing', () => {
-    expect(() => checkJwt('')).toThrowError(
-      expect.objectContaining({ message: expect.stringContaining('cachly.dev/setup-ai') }),
-    );
-  });
-
-  it('throws InvalidRequest with expiry timestamp for an expired token', () => {
-    const expSec = nowSec() - 60;
-    const token  = makeJwt({ exp: expSec });
-    expect(() => checkJwt(token)).toThrowError(
-      expect.objectContaining({
-        code: ErrorCode.InvalidRequest,
-        message: expect.stringContaining('expired at'),
-      }),
-    );
-  });
-
-  it('does not throw for a valid non-expired token', () => {
-    expect(() => checkJwt(makeJwt({ exp: nowSec() + 3600 }))).not.toThrow();
-  });
-
-  it('does not throw for a token with no exp claim', () => {
-    expect(() => checkJwt(makeJwt({ sub: 'user' }))).not.toThrow();
-  });
-});
-
-describe('handleApiError', () => {
-  it('throws InvalidRequest for 401 with the detail message', () => {
-    expect(() => handleApiError(401, 'token expired')).toThrowError(
-      expect.objectContaining({
-        code: ErrorCode.InvalidRequest,
-        message: expect.stringContaining('Authentication failed (401): token expired'),
-      }),
-    );
-  });
-
-  it('throws InvalidRequest for 403 with the detail message', () => {
-    expect(() => handleApiError(403, 'plan limit reached')).toThrowError(
-      expect.objectContaining({
-        code: ErrorCode.InvalidRequest,
-        message: expect.stringContaining('Access denied (403): plan limit reached'),
-      }),
-    );
-  });
-
-  it('throws InternalError for other status codes', () => {
-    expect(() => handleApiError(500, 'server crash')).toThrowError(
-      expect.objectContaining({
-        code: ErrorCode.InternalError,
-        message: expect.stringContaining('cachly API error 500: server crash'),
-      }),
-    );
-  });
-
-  it('includes the cachly.dev/setup-ai link for 401 errors', () => {
-    expect(() => handleApiError(401, 'Unauthorized')).toThrowError(
-      expect.objectContaining({ message: expect.stringContaining('cachly.dev/setup-ai') }),
-    );
-  });
-
-  it('includes account access hint for 403 errors', () => {
-    expect(() => handleApiError(403, 'Forbidden')).toThrowError(
-      expect.objectContaining({ message: expect.stringContaining('access to this resource') }),
-    );
-  });
-});