@cybermem/cli 0.6.13 → 0.7.7

package/dist/commands/upgrade.js

@@ -0,0 +1,141 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.upgrade = upgrade;
+const chalk_1 = __importDefault(require("chalk"));
+const execa_1 = __importDefault(require("execa"));
+const fs_1 = __importDefault(require("fs"));
+const inquirer_1 = __importDefault(require("inquirer"));
+const os_1 = __importDefault(require("os"));
+const path_1 = __importDefault(require("path"));
+async function upgrade(options) {
+    let target = "local";
+    if (options.rpi)
+        target = "rpi";
+    if (options.vps)
+        target = "vps";
+    console.log(chalk_1.default.blue(`Upgrading CyberMem (${target})...`));
+    try {
+        if (target === "local") {
+            console.log(chalk_1.default.blue("Pulling latest Docker images..."));
+            // Re-use logic: find compose file from template if needed, OR use installed ~/.cybermem one?
+            // "upgrade" implies updating running instance.
+            // running instance uses ~/.cybermem/docker-compose.yml (if init copied it?)
+            // Wait, init uses template directly?
+            // "deploy/init" logic for local:
+            // "docker-compose -f composeFile ...". composeFile was from templateDir.
+            // It did NOT copy compose file to ~/.cybermem for local.
+            // It uses the installed package's template.
+            // So for upgrade (which might be run from newer CLI version), we use the NEW CLI's template.
+            // Resolve Template Directory (Same logic as init)
+            let templateDir = path_1.default.resolve(__dirname, "../../templates");
+            if (!fs_1.default.existsSync(templateDir)) {
+                templateDir = path_1.default.resolve(__dirname, "../../../templates");
+            }
+            if (!fs_1.default.existsSync(templateDir)) {
+                templateDir = path_1.default.resolve(process.cwd(), "packages/cli/templates");
+            }
+            if (!fs_1.default.existsSync(templateDir)) {
+                templateDir = path_1.default.resolve(__dirname, "../templates");
+            }
+            if (!fs_1.default.existsSync(templateDir)) {
+                throw new Error(`Templates not found at ${templateDir}.`);
+            }
+            const composeFile = path_1.default.join(templateDir, "docker-compose.yml");
+            const homeDir = os_1.default.homedir();
+            const configDir = path_1.default.join(homeDir, ".cybermem");
+            const envFile = path_1.default.join(configDir, ".env");
+            const dataDir = path_1.default.join(configDir, "data");
+            // Pull images
+            await (0, execa_1.default)("docker-compose", [
+                "-f",
+                composeFile,
+                "--env-file",
+                envFile,
+                "--project-name",
+                "cybermem",
+                "pull",
+            ], {
+                stdio: "inherit",
+                env: {
+                    ...process.env,
+                    DATA_DIR: dataDir,
+                    CYBERMEM_ENV_PATH: envFile,
+                    OM_API_KEY: "", // Local bypass
+                },
+            });
+            // Up (recreate)
+            console.log(chalk_1.default.blue("Restarting services..."));
+            await (0, execa_1.default)("docker-compose", [
+                "-f",
+                composeFile,
+                "--env-file",
+                envFile,
+                "--project-name",
+                "cybermem",
+                "up",
+                "-d",
+                "--remove-orphans",
+            ], {
+                stdio: "inherit",
+                env: {
+                    ...process.env,
+                    DATA_DIR: dataDir,
+                    CYBERMEM_ENV_PATH: envFile,
+                    OM_API_KEY: "", // Local bypass
+                },
+            });
+            console.log(chalk_1.default.green("✅ Upgrade complete!"));
+        }
+        else if (target === "rpi" || target === "vps") {
+            // Remote upgrade
+            let sshHost = options.host;
+            if (!sshHost) {
+                const answers = await inquirer_1.default.prompt([
+                    {
+                        type: "input",
+                        name: "host",
+                        message: "Enter SSH Host (e.g. pi@raspberrypi.local):",
+                        validate: (input) => input.includes("@") ? true : "Format must be user@host",
+                    },
+                ]);
+                sshHost = answers.host;
+            }
+            console.log(chalk_1.default.blue(`Upgrading remote host ${sshHost}...`));
+            // 1. Upload NEW docker-compose.yml (from this CLI version)
+            // Resolve Template Directory
+            let templateDir = path_1.default.resolve(__dirname, "../../templates");
+            if (!fs_1.default.existsSync(templateDir)) {
+                templateDir = path_1.default.resolve(__dirname, "../../../templates");
+            }
+            if (!fs_1.default.existsSync(templateDir)) {
+                templateDir = path_1.default.resolve(process.cwd(), "packages/cli/templates");
+            }
+            if (!fs_1.default.existsSync(templateDir)) {
+                templateDir = path_1.default.resolve(__dirname, "../templates");
+            }
+            const composeFile = path_1.default.join(templateDir, "docker-compose.yml");
+            console.log(chalk_1.default.blue("Uploading newest definitions..."));
+            await (0, execa_1.default)("scp", [
+                composeFile,
+                `${sshHost}:~/.cybermem/docker-compose.yml`,
+            ]);
+            // 2. Pull and Up on Remote
+            const remoteCmd = `
+                export CYBERMEM_ENV_PATH=~/.cybermem/.env
+                export DATA_DIR=~/.cybermem/data
+                export DOCKER_DEFAULT_PLATFORM=linux/arm64
+                docker-compose -f ~/.cybermem/docker-compose.yml pull
+                docker-compose -f ~/.cybermem/docker-compose.yml up -d --remove-orphans
+            `;
+            await (0, execa_1.default)("ssh", [sshHost, remoteCmd], { stdio: "inherit" });
+            console.log(chalk_1.default.green("✅ Remote upgrade complete!"));
+        }
+    }
+    catch (error) {
+        console.error(chalk_1.default.red("Upgrade failed:"), error);
+        process.exit(1);
+    }
+}

package/dist/index.js

@@ -3,33 +3,54 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 const commander_1 = require("commander");
 const backup_1 = require("./commands/backup");
-const deploy_1 = require("./commands/deploy");
+const dashboard_1 = require("./commands/dashboard");
+const init_1 = require("./commands/init");
+const login_1 = require("./commands/login");
 const reset_1 = require("./commands/reset");
 const restore_1 = require("./commands/restore");
+const upgrade_1 = require("./commands/upgrade");
 const program = new commander_1.Command();
 program
-    .name('mcp')
-    .description('CyberMem - Deploy your AI memory server in one command')
-    .version('1.0.0');
-// Default Command: Deploy
+    .name("mcp")
+    .description("CyberMem - Deploy your AI memory server in one command")
+    .version("1.0.0");
+// Command: Login
 program
-    .command('deploy', { isDefault: true })
-    .description('Deploy CyberMem (Default)')
-    .option('--rpi', 'Deploy to Raspberry Pi (default: local)')
-    .option('--vps', 'Deploy to VPS/Cloud server')
-    .option('--remote-access', 'Enable Tailscale Funnel for HTTPS remote access')
-    .action(deploy_1.deploy);
+    .command("login")
+    .description("Login to CyberMem via GitHub (OAuth)")
+    .action(login_1.login);
+// Command: Init (formerly deploy)
 program
-    .command('backup')
-    .description('Backup CyberMem data to a tarball')
+    .command("init")
+    .description("Initialize CyberMem (Scaffold & Start)")
+    .option("--rpi", "Deploy to Raspberry Pi")
+    .option("--vps", "Deploy to VPS/Cloud server")
+    .option("--remote-access", "Enable Tailscale Funnel for HTTPS remote access")
+    .action(init_1.init);
+// Command: Upgrade
+program
+    .command("upgrade")
+    .description("Upgrade CyberMem instance (pull latest images)")
+    .option("--local", "Upgrade local instance (default)")
+    .option("--rpi", "Upgrade remote RPi")
+    .option("--vps", "Upgrade remote VPS")
+    .option("--host <host>", "SSH host for remote upgrade (e.g. pi@raspberrypi.local)")
+    .action(upgrade_1.upgrade);
+program
+    .command("backup")
+    .description("Backup CyberMem data to a tarball")
     .action(backup_1.backup);
 program
-    .command('restore')
-    .description('Restore CyberMem data from a backup file')
-    .argument('<file>', 'Backup file to restore')
+    .command("restore")
+    .description("Restore CyberMem data from a backup file")
+    .argument("<file>", "Backup file to restore")
     .action(restore_1.restore);
 program
-    .command('reset')
-    .description('Reset (wipe) the CyberMem database - DESTRUCTIVE!')
+    .command("reset")
+    .description("Reset (wipe) the CyberMem database - DESTRUCTIVE!")
     .action(reset_1.reset);
+program
+    .command("dashboard")
+    .description("Open the CyberMem dashboard and check stack status")
+    .action(dashboard_1.dashboard);
 program.parse(process.argv);

package/dist/templates/auth-sidecar/server.js

@@ -97,7 +97,7 @@ function isLocalRequest(req) {
 }
 
 // ForwardAuth handler
-const server = http.createServer((req, res) => {
+const server = http.createServer(async (req, res) => {
   // Health check
   if (req.url === "/health") {
     res.writeHead(200, { "Content-Type": "application/json" });
@@ -108,9 +108,22 @@ const server = http.createServer((req, res) => {
   const authHeader = req.headers["authorization"];
   const apiKeyHeader = req.headers["x-api-key"];
 
-  // 1. Check JWT (Authorization: Bearer <token>)
+  // 1. Check Bearer token (JWT or API Key)
   if (authHeader?.startsWith("Bearer ")) {
     const token = authHeader.substring(7);
+
+    // 1a. Check if Bearer token is actually an API key (MCP clients like Claude Desktop)
+    const expectedKey = loadApiKey();
+    if (expectedKey && token === expectedKey) {
+      console.log("Auth OK: Bearer API Key");
+      res.writeHead(200, {
+        "X-Auth-Method": "bearer-api-key",
+      });
+      res.end();
+      return;
+    }
+
+    // 1b. Try JWT RS256 validation
     const payload = validateJwt(token);
 
     if (payload) {
@@ -124,6 +137,45 @@ const server = http.createServer((req, res) => {
       res.end();
       return;
     }
+
+    // 1c. Try GitHub OAuth token verification
+    try {
+      const https = require("https");
+      const ghRes = await new Promise((resolve, reject) => {
+        const req = https.get(
+          "https://api.github.com/user",
+          {
+            headers: {
+              Authorization: `Bearer ${token}`,
+              "User-Agent": "CyberMem-Auth-Sidecar/1.0",
+              Accept: "application/vnd.github+json",
+            },
+          },
+          (res) => {
+            let data = "";
+            res.on("data", (chunk) => (data += chunk));
+            res.on("end", () => resolve({ status: res.statusCode, data }));
+          },
+        );
+        req.on("error", reject);
+        req.end();
+      });
+
+      if (ghRes.status === 200) {
+        const user = JSON.parse(ghRes.data);
+        console.log(`Auth OK: GitHub OAuth (${user.login})`);
+        res.writeHead(200, {
+          "X-User-Id": String(user.id),
+          "X-User-Email": user.email || "",
+          "X-User-Name": user.login,
+          "X-Auth-Method": "github-oauth",
+        });
+        res.end();
+        return;
+      }
+    } catch (err) {
+      // GitHub verification failed, continue to other methods
+    }
   }
 
   // 2. Check API Key (deprecated fallback)

package/dist/templates/docker-compose.yml

@@ -1,3 +1,4 @@
+# yaml-language-server: $schema=https://raw.githubusercontent.com/compose-spec/compose-spec/master/schema/compose-spec.json
 # CyberMem - OpenMemory + DevOps monitoring stack
 # For local development only
 # Production deployment: use Helm chart (charts/cybermem/)
@@ -24,28 +25,53 @@ services:
       - traefik-logs:/var/log/traefik
     labels:
       - traefik.enable=true
+      - traefik.http.middlewares.auth-check.forwardauth.address=http://auth-sidecar:3001/auth
+      - traefik.http.middlewares.auth-check.forwardauth.authResponseHeaders=X-User-Id,X-User-Email,X-User-Name,X-Auth-Method
     restart: unless-stopped
 
   # MCP Server (Node.js/SDK)
   mcp-server:
+    build:
+      context: ../../mcp
+      dockerfile: Dockerfile
     image: ghcr.io/mikhailkogan17/cybermem-mcp:latest
+    # Note: platform omitted - docker auto-detects (amd64 for CI, arm64 for RPi)
     restart: unless-stopped
     container_name: cybermem-mcp
     environment:
+      OM_TIER: "hybrid"
       PORT: "8080"
+      OM_PORT: "0"
       OM_DB_PATH: /data/openmemory.sqlite
     volumes:
       - ${CYBERMEM_ENV_PATH:-${HOME}/.cybermem/.env}:/.env
       - ${HOME}/.cybermem/data:/data
+    depends_on:
+      - traefik
+      - auth-sidecar
     labels:
       - traefik.enable=true
-      - traefik.http.routers.mcp.rule=Host(`raspberrypi.local`) && (PathPrefix(`/mcp`) || PathPrefix(`/sse`))
+      # Middleware definitions (must be on a service that starts BEFORE routes reference them)
+      - traefik.http.middlewares.strip-cybermem.stripprefix.prefixes=/cybermem
+      # Authenticated routes
+      - traefik.http.routers.mcp.rule=PathPrefix(`/cybermem/mcp`) || PathPrefix(`/cybermem/sse`) || PathPrefix(`/mcp`) || PathPrefix(`/sse`)
       - traefik.http.routers.mcp.entrypoints=web
-      - traefik.http.services.mcp.loadbalancer.server.port=8080
+      - traefik.http.routers.mcp.priority=100
+      - traefik.http.routers.mcp.service=mcp-service
+      - traefik.http.routers.mcp.middlewares=auth-check,strip-cybermem
+      # Public routes (Health/Metrics)
+      - traefik.http.routers.mcp-public.rule=PathPrefix(`/cybermem/health`) || PathPrefix(`/cybermem/metrics`) || PathPrefix(`/health`) || PathPrefix(`/metrics`)
+      - traefik.http.routers.mcp-public.entrypoints=web
+      - traefik.http.routers.mcp-public.priority=100
+      - traefik.http.routers.mcp-public.service=mcp-service
+      - traefik.http.routers.mcp-public.middlewares=strip-cybermem
+      - traefik.http.services.mcp-service.loadbalancer.server.port=8080
       # Legacy API support (for simple REST clients)
-      - traefik.http.routers.legacy-api.rule=Host(`raspberrypi.local`) && (PathPrefix(`/add`) || PathPrefix(`/query`) || PathPrefix(`/all`))
+      - traefik.http.routers.legacy-api.rule=PathPrefix(`/cybermem/add`) || PathPrefix(`/cybermem/query`) || PathPrefix(`/cybermem/all`) || PathPrefix(`/add`) || PathPrefix(`/query`) || PathPrefix(`/all`)
       - traefik.http.routers.legacy-api.entrypoints=web
-      - traefik.http.services.legacy-api.loadbalancer.server.port=8080
+      - traefik.http.routers.legacy-api.priority=100
+      - traefik.http.routers.legacy-api.service=mcp-service
+      - traefik.http.routers.legacy-api.middlewares=auth-check,strip-cybermem
 
   # Auth sidecar for JWT/API key validation (ForwardAuth)
   auth-sidecar:
@@ -58,9 +84,6 @@ services:
       - ${CYBERMEM_ENV_PATH:-${HOME}/.cybermem/.env}:/.env:ro
     labels:
       - traefik.enable=true
-      # ForwardAuth middleware
-      - traefik.http.middlewares.auth-check.forwardauth.address=http://auth-sidecar:3001/auth
-      - traefik.http.middlewares.auth-check.forwardauth.authResponseHeaders=X-User-Id,X-User-Email,X-User-Name,X-Auth-Method
     healthcheck:
       test:
         [
@@ -76,9 +99,8 @@ services:
       retries: 3
     restart: unless-stopped
 
-  # NOTE: openmemory container REMOVED
-  # Memory now handled by @cybermem/mcp with embedded openmemory-js SDK
-  # SQLite stored at ~/.cybermem/data/openmemory.sqlite
+  # Memory engine (MCP + Persistence)
+  # Uses embedded SQLite stored at ~/.cybermem/data/openmemory.sqlite
 
   db-exporter:
     image: ghcr.io/mikhailkogan17/cybermem-db_exporter:latest
@@ -130,22 +152,6 @@ services:
     profiles:
       - postgres
 
-  postgres-exporter:
-    image: prometheuscommunity/postgres-exporter:v0.15.0
-    container_name: cybermem-postgres-exporter
-    environment:
-      DATA_SOURCE_NAME: postgresql://${PG_USER:-openmemory}:${PG_PASSWORD:-postgres}@postgres:5432/${PG_DB:-openmemory}?sslmode=disable
-      PG_EXPORTER_EXTEND_QUERY_PATH: /queries.yml
-    ports:
-      - "9187:9187"
-    volumes:
-      - ./monitoring/postgres_exporter/queries.yml:/queries.yml:ro
-    restart: unless-stopped
-    depends_on:
-      - postgres
-    profiles:
-      - postgres
-
   ollama:
     image: ollama/ollama:latest
     container_name: cybermem-ollama
@@ -157,55 +163,37 @@ services:
     profiles:
       - ollama
 
-  prometheus:
-    image: prom/prometheus:v2.48.0
-    container_name: cybermem-prometheus
-    command:
-      - --config.file=/etc/prometheus/prometheus.yml
-      - --storage.tsdb.path=/prometheus
-      - --storage.tsdb.retention.time=${PROM_RETENTION:-7d}
-      - --web.console.libraries=/usr/share/prometheus/console_libraries
-      - --web.console.templates=/usr/share/prometheus/consoles
-    ports:
-      - "9092:9090"
-    volumes:
-      - ./monitoring/prometheus/prometheus.yml:/etc/prometheus/prometheus.yml:ro
-      - prometheus-data:/prometheus
-    restart: unless-stopped
-    depends_on:
-      - db-exporter
-
   dashboard:
     image: ghcr.io/mikhailkogan17/cybermem-dashboard:latest
+    # Note: platform omitted - docker auto-detects (amd64 for CI, arm64 for RPi)
     container_name: cybermem-dashboard
     environment:
       DB_EXPORTER_URL: http://db-exporter:8000
-      NEXT_PUBLIC_PROMETHEUS_URL: http://prometheus:9090
-      PROMETHEUS_URL: http://prometheus:9090
+      # Required for Health Check to find the MCP API internally
+      CYBERMEM_URL: http://mcp-server:8080
+      OM_DB_PATH: /data/openmemory.sqlite
       OM_API_KEY: ${OM_API_KEY:-dev-secret-key}
-      # WATCHPACK_POLLING: "true" # Enable if hot reload blocks (high CPU usage)
     ports:
       - "3000:3000"
     volumes:
-      - openmemory-data:/data
+      - ${HOME}/.cybermem/data:/data
       - /var/run/docker.sock:/var/run/docker.sock
       - ${CYBERMEM_ENV_PATH:-${HOME}/.cybermem/.env}:/app/shared.env
     labels:
       - traefik.enable=true
       # Dashboard route: /cybermem -> dashboard on port 3000
       - traefik.http.routers.dashboard.entrypoints=web
-      - traefik.http.routers.dashboard.rule=PathPrefix(`/cybermem`)
-      - traefik.http.routers.dashboard.middlewares=strip-cybermem
-      - traefik.http.middlewares.strip-cybermem.stripprefix.prefixes=/cybermem
+      - traefik.http.routers.dashboard.rule=PathPrefix(`/cybermem`) && !PathPrefix(`/cybermem/mcp`) && !PathPrefix(`/cybermem/health`)
+      - traefik.http.routers.dashboard.priority=10
+      - traefik.http.routers.dashboard.middlewares=auth-check,strip-cybermem
       - traefik.http.services.dashboard.loadbalancer.server.port=3000
     restart: unless-stopped
     depends_on:
-      - prometheus
       - db-exporter
 
 volumes:
   openmemory-data:
-    name: cybermem-openmemory-data
+    name: cybermem-data
     driver: local
   postgres-data:
     name: cybermem-postgres-data
@@ -213,9 +201,6 @@ volumes:
   ollama-models:
     name: cybermem-ollama-models
     driver: local
-  prometheus-data:
-    name: cybermem-prometheus-data
-    driver: local
   traefik-logs:
     name: cybermem-traefik-logs
     driver: local

package/dist/templates/envs/local.env

@@ -0,0 +1,17 @@
+# Environment: LOCAL (Dev)
+# No API key required for localhost access.
+# Used by: npx @cybermem/cli init --local
+
+# Application Settings
+LOG_LEVEL=info
+NEXT_PUBLIC_APP_URL=http://localhost:3000
+
+# Database (SQLite)
+# OM_DB_PATH is mounted to /data/openmemory.sqlite in Docker
+
+# Security
+# OM_API_KEY is intentionally empty for local development to bypass auth.
+OM_API_KEY=
+
+# Optional: Add your OpenAI Key if using cloud embeddings
+# OPENAI_API_KEY=

package/dist/templates/envs/rpi-tailscale.env

@@ -0,0 +1,23 @@
+# Environment: RPi + Tailscale (Remote Access)
+# Secured via Tailscale Funnel.
+# Used by: npx @cybermem/cli init --rpi --remote-access
+
+# Application Settings
+LOG_LEVEL=info
+
+# Database (SQLite)
+# OM_DB_PATH is mounted to /data/openmemory.sqlite in Docker
+
+# Security
+# GENERATED AUTOMATICALLY BY CLI
+OM_API_KEY=
+
+# Tailscale Configuration
+# Ensure "tailscale serve" is running (handled by CLI)
+TS_HOSTNAME=raspberrypi
+
+# Dashboard
+NEXT_PUBLIC_APP_URL=https://raspberrypi.tailnet-name.ts.net
+
+# Optional: Local LLM
+OLLAMA_URL=http://ollama:11434

package/dist/templates/envs/rpi.env

@@ -0,0 +1,22 @@
+# Environment: RPi (Local Network)
+# Internal API key required.
+# Used by: npx @cybermem/cli init --rpi
+
+# Application Settings
+LOG_LEVEL=info
+
+# Database (SQLite)
+# OM_DB_PATH is mounted to /data/openmemory.sqlite in Docker
+
+# Security
+# GENERATED AUTOMATICALLY BY CLI
+# DO NOT SHARE THIS KEY. It is for internal service communication.
+OM_API_KEY=
+
+# Dashboard
+# Clients connecting via MCP must use OAuth or this key (if configured for direct access).
+# OAUTH_CLIENT_ID=...
+# OAUTH_CLIENT_SECRET=...
+
+# Optional: Local LLM
+OLLAMA_URL=http://ollama:11434

package/dist/templates/envs/vps.env

@@ -0,0 +1,29 @@
+# Environment: VPS (Public Cloud)
+# High security setup.
+# Used by: npx @cybermem/cli init --vps
+
+# Application Settings
+LOG_LEVEL=warn
+# Set your domain here
+NEXT_PUBLIC_APP_URL=https://cybermem.yourdomain.com
+
+# Database (PostgreSQL recommended for VPS, but SQLite default)
+# To use Postgres:
+# DB_TYPE=postgres
+# POSTGRES_URL=postgresql://user:pass@db:5432/cybermem
+
+# Security
+# GENERATED AUTOMATICALLY BY CLI
+OM_API_KEY=
+
+# Auth Sidecar (JWT)
+# Generate a random secret: openssl rand -hex 32
+JWT_SECRET=
+JWT_PRIVATE_KEY=
+
+# GitHub OAuth (Recommended for dashboard access)
+OAUTH_CLIENT_ID=
+OAUTH_CLIENT_SECRET=
+
+# OpenAI (Recommended for VPS performance)
+OPENAI_API_KEY=

package/dist/templates/monitoring/db_exporter/exporter.py

@@ -123,11 +123,16 @@ def collect_metrics():
             FROM memories
             GROUP BY user_id
         """)
-        for row in cursor.fetchall():
-            client = row["client"] or "anonymous"
-            memories_total.labels(client=client).set(row["count"])
+        rows = cursor.fetchall()
+        if not rows:
+            # Emit a default anonymous:0 if no data
+            memories_total.labels(client="anonymous").set(0)
+        else:
+            for row in rows:
+                client = row["client"] or "anonymous"
+                memories_total.labels(client=client).set(row["count"])
 
-        logger.debug(f"Collected total memories for {cursor.rowcount} clients")
+        logger.debug(f"Collected total memories for {len(rows)} clients")
 
         # Metric 2: Recent memories (24h)
         # Note: created_at is stored as milliseconds since epoch

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cybermem/cli",
-  "version": "0.6.13",
+  "version": "0.7.7",
   "description": "CyberMem — Universal Long-Term Memory for AI Agents",
   "homepage": "https://cybermem.dev",
   "repository": {
@@ -17,6 +17,7 @@
   ],
   "scripts": {
     "build": "tsc && cp -r templates dist/",
+    "lint": "eslint src/ --ext .ts",
     "start": "ts-node src/index.ts",
     "test:e2e": "ts-node e2e/test-mcp.ts",
     "prepublishOnly": "npm run build"
@@ -34,16 +35,21 @@
   },
   "type": "commonjs",
   "dependencies": {
+    "@types/open": "^6.1.0",
     "chalk": "^4.1.2",
     "commander": "^9.0.0",
     "dotenv": "^16.0.0",
     "execa": "^5.1.1",
     "inquirer": "^8.2.0",
+    "open": "^11.0.0",
     "ora": "^5.4.1"
   },
   "devDependencies": {
     "@types/inquirer": "^9.0.3",
     "@types/node": "^18.0.0",
+    "@typescript-eslint/eslint-plugin": "^8.52.0",
+    "@typescript-eslint/parser": "^8.52.0",
+    "eslint": "^9.39.2",
     "ts-node": "^10.9.1",
     "typescript": "^5.0.0"
   }