@nepopsx/cli 0.0.23 → 0.0.25

package/dist/licensing/license-manager.js

@@ -1,134 +1,56 @@
 /**
- * License manager — handles license activation, validation,
- * online refresh, and tier-based feature gating.
+ * Auth/session helpers. Post-migration the CLI has ONE credential: the opaque
+ * device token from `nepopsx login`, stored in the GLOBAL `~/.nepopsx/config.json`
+ * (never in the repo — see {@link readAuth}). The `License` shape is kept as a thin
+ * compatibility view — `.key` IS the device token — so existing commands send the
+ * right Bearer credential unchanged. Auth and entitlement are server-authoritative
+ * now (the backend 401/402s); there is no license.json, no machine binding, and no
+ * online validate/refresh.
  */
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
-import { join } from 'node:path';
-import { TIER_LIMITS, generateMachineId, generateFingerprint, checkExpiry, } from '@nepopsx/core';
-import { resolveApiBase } from '../config/api-config.js';
-import { fetchWithTimeout } from '../utils/fetch.js';
+import { TIER_LIMITS, generateMachineId, generateFingerprint, } from '@nepopsx/core';
+import { readAuth, resolveOrgForPath } from '../config/global-config.js';
 import { fetchPlanManifest } from '../utils/fetch-plan-manifest.js';
-import { API_TIMEOUT_MS } from '../constants.js';
 import { readWorkspaceNameFromDisk } from './workspace-name.js';
-import { getCachedEntitlement, setCachedEntitlement } from './entitlement-cache.js';
-const LICENSE_DIR = '.nepopsx';
-const LICENSE_FILE = 'license.json';
-// ─── License file operations ────────────────────────────────
+import { getCachedEntitlement } from './entitlement-cache.js';
+// ─── Session (device token) ─────────────────────────────────
 /**
- * Read the local license file. Returns null if not found or invalid.
+ * Build a `License`-shaped view from the stored device token. `.key` IS the opaque
+ * `opsx_dvc_…` token sent as a Bearer credential; `org`/`tier` come from the plan
+ * captured at login; `workspace` is the live local name. Returns null if not
+ * logged in. (No license.json — the device token in config.json is the credential.)
  */
 export function readLicense(rootDir) {
-    const licensePath = join(rootDir, LICENSE_DIR, LICENSE_FILE);
-    if (!existsSync(licensePath))
+    const auth = readAuth(rootDir);
+    if (!auth?.token)
         return null;
-    try {
-        const raw = readFileSync(licensePath, 'utf-8');
-        const data = JSON.parse(raw);
-        // Basic shape validation
-        if (!data.key || !data.org || !data.tier || !data.valid_until || !data.machine_id) {
-            return null;
-        }
-        return data;
-    }
-    catch {
-        return null;
-    }
+    return {
+        key: auth.token,
+        // Project-specific org (registry) wins over the machine default from login.
+        org: resolveOrgForPath(rootDir, auth.org),
+        tier: auth.plan ?? 'free',
+        valid_until: '',
+        refresh_token: '',
+        machine_id: generateMachineId(),
+        workspace: readWorkspaceNameFromDisk(rootDir) ?? 'unknown',
+        activated_at: '',
+        last_refreshed: '',
+    };
 }
-/**
- * Write license to disk. Creates .nepopsx/ if needed.
- */
-export function writeLicense(rootDir, license) {
-    const dir = join(rootDir, LICENSE_DIR);
-    if (!existsSync(dir)) {
-        mkdirSync(dir, { recursive: true });
-    }
-    writeFileSync(join(dir, LICENSE_FILE), JSON.stringify(license, null, 2) + '\n', 'utf-8');
+/** No-op: the workspace is sourced live from disk in `readLicense` now. */
+export function reconcileLicenseWorkspace(_rootDir, license) {
+    return license;
 }
-/**
- * Heal the license's `workspace` field against the live `workspace.yaml`.
- *
- * The license is activated before `workspace.yaml` exists, so it is born with
- * `workspace: "unknown"`. Once the real config exists, reconcile the in-memory
- * license (and persist it) so every downstream `license.workspace` read — and
- * every backend call derived from it — uses the live workspace name instead of
- * the stale snapshot. Best-effort: returns the license unchanged when the config
- * is absent or already matches. Accepts/returns `null` for the no-license path.
- */
-export function reconcileLicenseWorkspace(rootDir, license) {
-    if (!license)
-        return license;
-    const liveName = readWorkspaceNameFromDisk(rootDir);
-    if (!liveName || liveName === license.workspace)
-        return license;
-    const reconciled = { ...license, workspace: liveName };
-    try {
-        writeLicense(rootDir, reconciled);
-    }
-    catch {
-        // Persisting is best-effort — the in-memory heal is what callers rely on.
-    }
-    return reconciled;
+/** No-op kept for callers: there is no license.json to write any more. */
+export function writeLicense(_rootDir, _license) {
+    /* the device token is written to config.json by `nepopsx login` */
 }
+// ─── Validation (local, advisory) ───────────────────────────
 /**
- * Activate a license key for this machine + workspace.
- * Calls the remote API to validate the key and bind it.
+ * Confirm a device token is present. Auth + entitlement are enforced by the
+ * backend (401/402) — this no longer calls the server.
  */
-export async function activateLicense(rootDir, licenseKey, workspaceName) {
-    const machineId = generateMachineId();
-    const apiBase = resolveApiBase(rootDir);
-    try {
-        const response = await fetchWithTimeout(`${apiBase}/license/activate`, {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/json' },
-            body: JSON.stringify({
-                key: licenseKey,
-                machine_id: machineId,
-                workspace: workspaceName,
-            }),
-        }, API_TIMEOUT_MS);
-        if (!response.ok) {
-            const body = await response.text();
-            return {
-                success: false,
-                error: `Activation failed (${response.status}): ${body}`,
-            };
-        }
-        const data = await response.json();
-        const license = {
-            key: licenseKey,
-            org: data.org,
-            tier: data.tier,
-            valid_until: data.valid_until,
-            refresh_token: data.refresh_token,
-            machine_id: machineId,
-            workspace: workspaceName,
-            activated_at: new Date().toISOString(),
-            last_refreshed: new Date().toISOString(),
-        };
-        writeLicense(rootDir, license);
-        return { success: true, license };
-    }
-    catch (err) {
-        // Network failure — might be offline
-        return {
-            success: false,
-            error: `Cannot reach NEPOPSX API: ${err instanceof Error ? err.message : String(err)}. Check your internet connection.`,
-        };
-    }
-}
-// ─── Validation ─────────────────────────────────────────────
-/**
- * Validate the current license. Attempts online refresh if expired.
- * Returns detailed status.
- */
-export async function validateLicense(rootDir, config) {
-    // Heal a stale `workspace: "unknown"` against the live config before any
-    // backend call uses it. validateLicense always runs with a loaded config, so
-    // this self-heals license.json and every later readLicense() returns the
-    // correct workspace.
-    const license = reconcileLicenseWorkspace(rootDir, readLicense(rootDir));
-    const apiBase = resolveApiBase(rootDir);
-    // No license file
+export async function validateLicense(rootDir, _config) {
+    const license = readLicense(rootDir);
     if (!license) {
         return {
             valid: false,
@@ -137,159 +59,24 @@ export async function validateLicense(rootDir, config) {
             tier: 'free',
             org: '',
             fingerprint: '',
-            message: 'No license found. Run `nepopsx activate <key>` to activate.',
-        };
-    }
-    // Machine binding check
-    const currentMachineId = generateMachineId();
-    if (license.machine_id !== currentMachineId) {
-        return {
-            valid: false,
-            expired: false,
-            days_remaining: 0,
-            tier: license.tier,
-            org: license.org,
-            fingerprint: '',
-            message: 'License is bound to a different machine. Run `nepopsx activate <key>` to re-activate.',
-        };
-    }
-    const { expired, daysRemaining } = checkExpiry(license.valid_until);
-    const fingerprint = generateFingerprint(license.org, license.key, license.workspace);
-    // Still valid — return immediately
-    if (!expired) {
-        try {
-            const response = await fetchWithTimeout(`${apiBase}/license/validate`, {
-                method: 'POST',
-                headers: { 'Content-Type': 'application/json' },
-                body: JSON.stringify({
-                    key: license.key,
-                    machine_id: license.machine_id,
-                    workspace: license.workspace,
-                }),
-            }, API_TIMEOUT_MS);
-            if (response.ok) {
-                const data = await response.json();
-                if (data.valid) {
-                    const updatedLicense = {
-                        ...license,
-                        org: data.org,
-                        tier: data.tier,
-                        valid_until: data.valid_until,
-                        last_refreshed: new Date().toISOString(),
-                    };
-                    writeLicense(rootDir, updatedLicense);
-                    if (data.entitlement) {
-                        setCachedEntitlement(rootDir, updatedLicense.key, data.entitlement);
-                    }
-                    const onlineExpiry = checkExpiry(updatedLicense.valid_until);
-                    return {
-                        valid: true,
-                        expired: false,
-                        days_remaining: onlineExpiry.daysRemaining,
-                        tier: updatedLicense.tier,
-                        org: updatedLicense.org,
-                        fingerprint,
-                        message: data.message,
-                        entitlement: data.entitlement,
-                    };
-                }
-                return {
-                    valid: false,
-                    expired: false,
-                    days_remaining: daysRemaining,
-                    tier: license.tier,
-                    org: license.org,
-                    fingerprint,
-                    message: data.message,
-                };
-            }
-        }
-        catch {
-            // Fall back to local validation when offline or backend is unavailable.
-        }
-        return {
-            valid: true,
-            expired: false,
-            days_remaining: daysRemaining,
-            tier: license.tier,
-            org: license.org,
-            fingerprint,
-            message: daysRemaining <= 7
-                ? `License expires in ${daysRemaining} day(s). Renew at nepopsx.dev.`
-                : `Licensed to ${license.org} (${license.tier}).`,
+            message: 'Not logged in. Run `nepopsx login` to authorize this machine.',
         };
     }
-    // Expired — attempt online refresh
-    const refreshed = await refreshLicense(rootDir, license);
-    if (refreshed) {
-        const { license: refreshedLicense, entitlement } = refreshed;
-        const newExpiry = checkExpiry(refreshedLicense.valid_until);
-        return {
-            valid: true,
-            expired: false,
-            days_remaining: newExpiry.daysRemaining,
-            tier: refreshedLicense.tier,
-            org: refreshedLicense.org,
-            fingerprint,
-            message: `License refreshed. Valid until ${refreshedLicense.valid_until}.`,
-            entitlement,
-        };
-    }
-    // Refresh failed — license is truly expired
     return {
-        valid: false,
-        expired: true,
-        days_remaining: daysRemaining,
+        valid: true,
+        expired: false,
+        days_remaining: 365,
         tier: license.tier,
         org: license.org,
-        fingerprint,
-        message: `License expired on ${license.valid_until}. Renew at nepopsx.dev or run \`nepopsx activate <key>\`.`,
+        fingerprint: generateFingerprint(license.org, license.key, license.workspace),
+        message: `Logged in to ${license.org || 'your org'} (${license.tier}).`,
     };
 }
-/**
- * Attempt to refresh the license via the remote API.
- * Returns the updated license (+ entitlement when the backend provides it) on success,
- * null on failure.
- */
-async function refreshLicense(rootDir, license) {
-    const apiBase = resolveApiBase(rootDir);
-    try {
-        const response = await fetchWithTimeout(`${apiBase}/license/refresh`, {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/json' },
-            body: JSON.stringify({
-                refresh_token: license.refresh_token,
-                machine_id: license.machine_id,
-            }),
-        }, API_TIMEOUT_MS);
-        if (!response.ok)
-            return null;
-        const data = await response.json();
-        const updated = {
-            ...license,
-            tier: data.tier,
-            valid_until: data.valid_until,
-            refresh_token: data.refresh_token,
-            last_refreshed: new Date().toISOString(),
-        };
-        writeLicense(rootDir, updated);
-        if (data.entitlement) {
-            setCachedEntitlement(rootDir, updated.key, data.entitlement);
-        }
-        return { license: updated, entitlement: data.entitlement };
-    }
-    catch {
-        // Network failure — can't refresh
-        return null;
-    }
-}
 // ─── Resolved entitlement (display / advisory) ──────────────
 /**
- * Resolve the org's entitlement for DISPLAY: cache → synthesized from the plan manifest +
- * the license's (denormalized) tier when offline or on an older backend. Never throws.
- *
- * This is advisory only — the backend's 402 responses are the single hard authority. Use it
- * to show the user their current plan/limits, not to allow/deny an operation locally.
+ * Resolve the org's entitlement for DISPLAY: cache → synthesized from the plan
+ * manifest + the session's plan. Advisory only — the backend's 402s are the hard
+ * authority. Never throws.
  */
 export async function resolveEntitlement(rootDir, license) {
     const cached = getCachedEntitlement(rootDir, license.key);
@@ -302,22 +89,18 @@ export async function resolveEntitlement(rootDir, license) {
         status: license.tier === 'free' ? 'free' : 'active',
         limits: spec.limits,
         features: spec.features,
-        validUntil: license.valid_until || null,
+        validUntil: null,
         trialEndsAt: null,
     };
 }
 /**
- * Check whether the workspace config exceeds the license tier's scale limits.
- *
- * **Advisory only (ADR 0001/0002):** the server is the enforcement authority. Callers should
- * surface violations as a *warning* + upgrade hint and proceed; they must not hard-block on
- * this result. Agent quality (customs, philosophy, prompts) is identical across all tiers —
- * the differentiators are scale (services / agent packages) and tooling access (LLM scan).
+ * Check whether the workspace config exceeds the tier's scale limits.
+ * **Advisory only** — the server is the enforcement authority (402). Surface as a
+ * warning + upgrade hint and proceed; never hard-block on this result.
  */
 export function enforceTierLimits(config, tier) {
     const limits = TIER_LIMITS[tier];
     const violations = [];
-    // Service count
     if (config.services.length > limits.max_services) {
         violations.push({
             feature: 'services',
@@ -326,7 +109,6 @@ export function enforceTierLimits(config, tier) {
             required_tier: tier === 'free' ? 'team' : 'enterprise',
         });
     }
-    // Agent count
     if (config.agents) {
         const enabledAgents = Object.values(config.agents).filter((a) => a.enabled).length;
         if (enabledAgents > limits.max_agents) {
@@ -341,10 +123,7 @@ export function enforceTierLimits(config, tier) {
     return violations;
 }
 // ─── Dev mode bypass ────────────────────────────────────────
-/**
- * Check if the CLI is running in dev mode (for NEPOPSX agent developers).
- * Set NEPOPSX_DEV=1 to bypass license checks.
- */
+/** Set NEPOPSX_DEV=1 to bypass auth checks (for NEPOPSX agent developers). */
 export function isDevMode() {
     return process.env.NEPOPSX_DEV === '1';
 }

package/dist/licensing/license-manager.js.map

@@ -1 +1 @@
-{"version":3,"file":"license-manager.js","sourceRoot":"","sources":["../../src/licensing/license-manager.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAW,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAGL,WAAW,EACX,iBAAiB,EAAE,mBAAmB,EAAE,WAAW,GACpD,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAEpF,MAAM,WAAW,GAAG,UAAU,CAAC;AAC/B,MAAM,YAAY,GAAG,cAAc,CAAC;AAEpC,+DAA+D;AAE/D;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;IAC7D,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IAE1C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAE7B,yBAAyB;QACzB,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YAClF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,IAAe,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,OAAgB;IAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACvC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IACD,aAAa,CACX,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,EACvB,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EACvC,OAAO,CACR,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,yBAAyB,CACvC,OAAe,EACf,OAAU;IAEV,IAAI,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC;IAC7B,MAAM,QAAQ,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;IACpD,IAAI,CAAC,QAAQ,IAAI,QAAQ,KAAK,OAAO,CAAC,SAAS;QAAE,OAAO,OAAO,CAAC;IAChE,MAAM,UAAU,GAAG,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;IACvD,IAAI,CAAC;QACH,YAAY,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;IAC5E,CAAC;IACD,OAAO,UAAe,CAAC;AACzB,CAAC;AAUD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAe,EACf,UAAkB,EAClB,aAAqB;IAErB,MAAM,SAAS,GAAG,iBAAiB,EAAE,CAAC;IACtC,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IAExC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,GAAG,OAAO,mBAAmB,EAAE;YACrE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,GAAG,EAAE,UAAU;gBACf,UAAU,EAAE,SAAS;gBACrB,SAAS,EAAE,aAAa;aACzB,CAAC;SACH,EAAE,cAAc,CAAC,CAAC;QAEnB,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,sBAAsB,QAAQ,CAAC,MAAM,MAAM,IAAI,EAAE;aACzD,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAK/B,CAAC;QAEF,MAAM,OAAO,GAAY;YACvB,GAAG,EAAE,UAAU;YACf,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,UAAU,EAAE,SAAS;YACrB,SAAS,EAAE,aAAa;YACxB,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACtC,cAAc,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACzC,CAAC;QAEF,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAE/B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACpC,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,qCAAqC;QACrC,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,6BAA6B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,mCAAmC;SACxH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,+DAA+D;AAE/D;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAe,EACf,MAAuB;IAEvB,yEAAyE;IACzE,6EAA6E;IAC7E,yEAAyE;IACzE,qBAAqB;IACrB,MAAM,OAAO,GAAG,yBAAyB,CAAC,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IAExC,kBAAkB;IAClB,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,OAAO,EAAE,IAAI;YACb,cAAc,EAAE,CAAC;YACjB,IAAI,EAAE,MAAM;YACZ,GAAG,EAAE,EAAE;YACP,WAAW,EAAE,EAAE;YACf,OAAO,EAAE,6DAA6D;SACvE,CAAC;IACJ,CAAC;IAED,wBAAwB;IACxB,MAAM,gBAAgB,GAAG,iBAAiB,EAAE,CAAC;IAC7C,IAAI,OAAO,CAAC,UAAU,KAAK,gBAAgB,EAAE,CAAC;QAC5C,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,OAAO,EAAE,KAAK;YACd,cAAc,EAAE,CAAC;YACjB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,WAAW,EAAE,EAAE;YACf,OAAO,EAAE,uFAAuF;SACjG,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,WAAW,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACpE,MAAM,WAAW,GAAG,mBAAmB,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAErF,mCAAmC;IACnC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,GAAG,OAAO,mBAAmB,EAAE;gBACrE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,GAAG,EAAE,OAAO,CAAC,GAAG;oBAChB,UAAU,EAAE,OAAO,CAAC,UAAU;oBAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;iBAC7B,CAAC;aACH,EAAE,cAAc,CAAC,CAAC;YAEnB,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAChB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAQ/B,CAAC;gBAEF,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;oBACf,MAAM,cAAc,GAAY;wBAC9B,GAAG,OAAO;wBACV,GAAG,EAAE,IAAI,CAAC,GAAG;wBACb,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,WAAW,EAAE,IAAI,CAAC,WAAW;wBAC7B,cAAc,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;qBACzC,CAAC;oBACF,YAAY,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;oBACtC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;wBACrB,oBAAoB,CAAC,OAAO,EAAE,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;oBACtE,CAAC;oBAED,MAAM,YAAY,GAAG,WAAW,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;oBAC7D,OAAO;wBACL,KAAK,EAAE,IAAI;wBACX,OAAO,EAAE,KAAK;wBACd,cAAc,EAAE,YAAY,CAAC,aAAa;wBAC1C,IAAI,EAAE,cAAc,CAAC,IAAI;wBACzB,GAAG,EAAE,cAAc,CAAC,GAAG;wBACvB,WAAW;wBACX,OAAO,EAAE,IAAI,CAAC,OAAO;wBACrB,WAAW,EAAE,IAAI,CAAC,WAAW;qBAC9B,CAAC;gBACJ,CAAC;gBAED,OAAO;oBACL,KAAK,EAAE,KAAK;oBACZ,OAAO,EAAE,KAAK;oBACd,cAAc,EAAE,aAAa;oBAC7B,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,GAAG,EAAE,OAAO,CAAC,GAAG;oBAChB,WAAW;oBACX,OAAO,EAAE,IAAI,CAAC,OAAO;iBACtB,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;QAC1E,CAAC;QAED,OAAO;YACL,KAAK,EAAE,IAAI;YACX,OAAO,EAAE,KAAK;YACd,cAAc,EAAE,aAAa;YAC7B,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,WAAW;YACX,OAAO,EAAE,aAAa,IAAI,CAAC;gBACzB,CAAC,CAAC,sBAAsB,aAAa,gCAAgC;gBACrE,CAAC,CAAC,eAAe,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,IAAI,IAAI;SACpD,CAAC;IACJ,CAAC;IAED,mCAAmC;IACnC,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACzD,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,GAAG,SAAS,CAAC;QAC7D,MAAM,SAAS,GAAG,WAAW,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAC5D,OAAO;YACL,KAAK,EAAE,IAAI;YACX,OAAO,EAAE,KAAK;YACd,cAAc,EAAE,SAAS,CAAC,aAAa;YACvC,IAAI,EAAE,gBAAgB,CAAC,IAAI;YAC3B,GAAG,EAAE,gBAAgB,CAAC,GAAG;YACzB,WAAW;YACX,OAAO,EAAE,kCAAkC,gBAAgB,CAAC,WAAW,GAAG;YAC1E,WAAW;SACZ,CAAC;IACJ,CAAC;IAED,4CAA4C;IAC5C,OAAO;QACL,KAAK,EAAE,KAAK;QACZ,OAAO,EAAE,IAAI;QACb,cAAc,EAAE,aAAa;QAC7B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,WAAW;QACX,OAAO,EAAE,sBAAsB,OAAO,CAAC,WAAW,2DAA2D;KAC9G,CAAC;AACJ,CAAC;AAUD;;;;GAIG;AACH,KAAK,UAAU,cAAc,CAAC,OAAe,EAAE,OAAgB;IAC7D,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IAExC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,GAAG,OAAO,kBAAkB,EAAE;YACpE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,UAAU,EAAE,OAAO,CAAC,UAAU;aAC/B,CAAC;SACH,EAAE,cAAc,CAAC,CAAC;QAEnB,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAE9B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAM/B,CAAC;QAEF,MAAM,OAAO,GAAY;YACvB,GAAG,OAAO;YACV,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,cAAc,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACzC,CAAC;QAEF,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC/B,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,kCAAkC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,+DAA+D;AAE/D;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAAe,EAAE,OAAgB;IACxE,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1D,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACpF,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,MAAM,EAAE,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;QACnD,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,UAAU,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI;QACvC,WAAW,EAAE,IAAI;KAClB,CAAC;AACJ,CAAC;AAWD;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAuB,EAAE,IAAiB;IAC1E,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,UAAU,GAAoB,EAAE,CAAC;IAEvC,gBAAgB;IAChB,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,YAAY,EAAE,CAAC;QACjD,UAAU,CAAC,IAAI,CAAC;YACd,OAAO,EAAE,UAAU;YACnB,KAAK,EAAE,GAAG,MAAM,CAAC,YAAY,EAAE;YAC/B,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE;YACnC,aAAa,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY;SACvD,CAAC,CAAC;IACL,CAAC;IAED,cAAc;IACd,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;QACnF,IAAI,aAAa,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;YACtC,UAAU,CAAC,IAAI,CAAC;gBACd,OAAO,EAAE,QAAQ;gBACjB,KAAK,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE;gBAC7B,MAAM,EAAE,GAAG,aAAa,EAAE;gBAC1B,aAAa,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY;aACvD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,+DAA+D;AAE/D;;;GAGG;AACH,MAAM,UAAU,SAAS;IACvB,OAAO,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,GAAG,CAAC;AACzC,CAAC"}
+{"version":3,"file":"license-manager.js","sourceRoot":"","sources":["../../src/licensing/license-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAML,WAAW,EACX,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AACzE,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAE9D,+DAA+D;AAE/D;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI,EAAE,KAAK;QAAE,OAAO,IAAI,CAAC;IAC9B,OAAO;QACL,GAAG,EAAE,IAAI,CAAC,KAAK;QACf,4EAA4E;QAC5E,GAAG,EAAE,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC;QACzC,IAAI,EAAG,IAAI,CAAC,IAAoB,IAAI,MAAM;QAC1C,WAAW,EAAE,EAAE;QACf,aAAa,EAAE,EAAE;QACjB,UAAU,EAAE,iBAAiB,EAAE;QAC/B,SAAS,EAAE,yBAAyB,CAAC,OAAO,CAAC,IAAI,SAAS;QAC1D,YAAY,EAAE,EAAE;QAChB,cAAc,EAAE,EAAE;KACnB,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,yBAAyB,CACvC,QAAgB,EAChB,OAAU;IAEV,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,YAAY,CAAC,QAAgB,EAAE,QAAiB;IAC9D,mEAAmE;AACrE,CAAC;AAED,+DAA+D;AAE/D;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAe,EACf,OAAwB;IAExB,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,OAAO,EAAE,IAAI;YACb,cAAc,EAAE,CAAC;YACjB,IAAI,EAAE,MAAM;YACZ,GAAG,EAAE,EAAE;YACP,WAAW,EAAE,EAAE;YACf,OAAO,EAAE,+DAA+D;SACzE,CAAC;IACJ,CAAC;IACD,OAAO;QACL,KAAK,EAAE,IAAI;QACX,OAAO,EAAE,KAAK;QACd,cAAc,EAAE,GAAG;QACnB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,WAAW,EAAE,mBAAmB,CAC9B,OAAO,CAAC,GAAG,EACX,OAAO,CAAC,GAAG,EACX,OAAO,CAAC,SAAS,CAClB;QACD,OAAO,EAAE,gBAAgB,OAAO,CAAC,GAAG,IAAI,UAAU,KAAK,OAAO,CAAC,IAAI,IAAI;KACxE,CAAC;AACJ,CAAC;AAED,+DAA+D;AAE/D;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAe,EACf,OAAgB;IAEhB,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1D,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACpF,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,MAAM,EAAE,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;QACnD,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,UAAU,EAAE,IAAI;QAChB,WAAW,EAAE,IAAI;KAClB,CAAC;AACJ,CAAC;AAWD;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAAuB,EACvB,IAAiB;IAEjB,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,UAAU,GAAoB,EAAE,CAAC;IAEvC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,YAAY,EAAE,CAAC;QACjD,UAAU,CAAC,IAAI,CAAC;YACd,OAAO,EAAE,UAAU;YACnB,KAAK,EAAE,GAAG,MAAM,CAAC,YAAY,EAAE;YAC/B,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE;YACnC,aAAa,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY;SACvD,CAAC,CAAC;IACL,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CACvD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CACjB,CAAC,MAAM,CAAC;QACT,IAAI,aAAa,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;YACtC,UAAU,CAAC,IAAI,CAAC;gBACd,OAAO,EAAE,QAAQ;gBACjB,KAAK,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE;gBAC7B,MAAM,EAAE,GAAG,aAAa,EAAE;gBAC1B,aAAa,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY;aACvD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,+DAA+D;AAE/D,8EAA8E;AAC9E,MAAM,UAAU,SAAS;IACvB,OAAO,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,GAAG,CAAC;AACzC,CAAC"}

package/dist/licensing/workspace-name.d.ts

@@ -2,7 +2,7 @@
  * Workspace-name resolution.
  *
  * The license file (`.nepopsx/license.json`) carries a `workspace` field that is
- * written ONCE at `nepopsx login` / `nepopsx activate` time. At first run the
+ * written ONCE at `nepopsx login` time. At first run the
  * workspace config doesn't exist yet, so it is stored as the literal `"unknown"`.
  * `nepopsx up` later creates `.nepopsx/workspace.yaml` with the real name, but the
  * license file is not rewritten — so any command that sends `license.workspace`

package/dist/licensing/workspace-name.js

@@ -2,7 +2,7 @@
  * Workspace-name resolution.
  *
  * The license file (`.nepopsx/license.json`) carries a `workspace` field that is
- * written ONCE at `nepopsx login` / `nepopsx activate` time. At first run the
+ * written ONCE at `nepopsx login` time. At first run the
  * workspace config doesn't exist yet, so it is stored as the literal `"unknown"`.
  * `nepopsx up` later creates `.nepopsx/workspace.yaml` with the real name, but the
  * license file is not rewritten — so any command that sends `license.workspace`

package/dist/mcp/config-generator.d.ts

@@ -4,12 +4,12 @@
  * `learning_search` / `learning_store` for governed team recall.
  *
  * Claude Code's remote HTTP MCP form is `{ type: "http", url, headers }`, and it
- * expands `${VAR}` in the config — so we embed the license key as an env
- * placeholder (`${NEPOPSX_LICENSE_KEY}`) rather than the raw secret, keeping the
- * committed `.mcp.json` shareable across the team without leaking the key.
+ * expands `${VAR}` in the config — so we embed the device token as an env
+ * placeholder (`${NEPOPSX_DEVICE_TOKEN}`) rather than the raw secret, keeping the
+ * committed `.mcp.json` shareable across the team without leaking the token.
  */
 export declare const MEMORY_SERVER_NAME = "nepopsx-memory";
-export declare const LICENSE_ENV_VAR = "NEPOPSX_LICENSE_KEY";
+export declare const LICENSE_ENV_VAR = "NEPOPSX_DEVICE_TOKEN";
 export interface McpHttpServer {
     type: 'http';
     url: string;
@@ -23,9 +23,9 @@ export interface McpSetupOptions {
     rootDir: string;
     /** Backend API base, including `/v1` (e.g. http://localhost:3100/v1). */
     apiUrl: string;
-    /** Raw license key — only embedded when `inlineKey` is true (dev convenience). */
+    /** Raw device token — only embedded when `inlineKey` is true (dev convenience). */
     licenseKey?: string;
-    /** Embed the raw key instead of the `${NEPOPSX_LICENSE_KEY}` placeholder. */
+    /** Embed the raw token instead of the `${NEPOPSX_DEVICE_TOKEN}` placeholder. */
     inlineKey?: boolean;
 }
 /** Build the `nepopsx-memory` HTTP server entry for `.mcp.json`. */

package/dist/mcp/config-generator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config-generator.d.ts","sourceRoot":"","sources":["../../src/mcp/config-generator.ts"],"names":[],"mappings":"AAGA;;;;;;;;;GASG;AAEH,eAAO,MAAM,kBAAkB,mBAAmB,CAAC;AACnD,eAAO,MAAM,eAAe,wBAAwB,CAAC;AAErD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC1C,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,yEAAyE;IACzE,MAAM,EAAE,MAAM,CAAC;IACf,kFAAkF;IAClF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,oEAAoE;AACpE,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,MAAM,EACd,IAAI,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAO,GACtD,aAAa,CAWf;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,eAAe,GAAG,MAAM,EAAE,CA4BpE"}
+{"version":3,"file":"config-generator.d.ts","sourceRoot":"","sources":["../../src/mcp/config-generator.ts"],"names":[],"mappings":"AAGA;;;;;;;;;GASG;AAEH,eAAO,MAAM,kBAAkB,mBAAmB,CAAC;AACnD,eAAO,MAAM,eAAe,yBAAyB,CAAC;AAEtD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC1C,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,yEAAyE;IACzE,MAAM,EAAE,MAAM,CAAC;IACf,mFAAmF;IACnF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gFAAgF;IAChF,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,oEAAoE;AACpE,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,MAAM,EACd,IAAI,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAO,GACtD,aAAa,CAWf;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,eAAe,GAAG,MAAM,EAAE,CA4BpE"}

package/dist/mcp/config-generator.js

@@ -6,12 +6,12 @@ import { join } from 'node:path';
  * `learning_search` / `learning_store` for governed team recall.
  *
  * Claude Code's remote HTTP MCP form is `{ type: "http", url, headers }`, and it
- * expands `${VAR}` in the config — so we embed the license key as an env
- * placeholder (`${NEPOPSX_LICENSE_KEY}`) rather than the raw secret, keeping the
- * committed `.mcp.json` shareable across the team without leaking the key.
+ * expands `${VAR}` in the config — so we embed the device token as an env
+ * placeholder (`${NEPOPSX_DEVICE_TOKEN}`) rather than the raw secret, keeping the
+ * committed `.mcp.json` shareable across the team without leaking the token.
  */
 export const MEMORY_SERVER_NAME = 'nepopsx-memory';
-export const LICENSE_ENV_VAR = 'NEPOPSX_LICENSE_KEY';
+export const LICENSE_ENV_VAR = 'NEPOPSX_DEVICE_TOKEN';
 /** Build the `nepopsx-memory` HTTP server entry for `.mcp.json`. */
 export function buildMemoryServerEntry(apiUrl, opts = {}) {
     const base = apiUrl.replace(/\/+$/, '');

package/dist/mcp/config-generator.js.map

@@ -1 +1 @@
-{"version":3,"file":"config-generator.js","sourceRoot":"","sources":["../../src/mcp/config-generator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC;;;;;;;;;GASG;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,gBAAgB,CAAC;AACnD,MAAM,CAAC,MAAM,eAAe,GAAG,qBAAqB,CAAC;AAuBrD,oEAAoE;AACpE,MAAM,UAAU,sBAAsB,CACpC,MAAc,EACd,OAAqD,EAAE;IAEvD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACxC,MAAM,KAAK,GACT,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU;QAC/B,CAAC,CAAC,IAAI,CAAC,UAAU;QACjB,CAAC,CAAC,IAAI,GAAG,eAAe,GAAG,GAAG,CAAC;IACnC,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,GAAG,EAAE,GAAG,IAAI,MAAM;QAClB,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;KAC9C,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAwB;IACxD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAEtD,IAAI,QAAQ,GAAkB,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IACjD,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAY,CAAC;YACrE,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;gBACnC,MAAM,GAAG,GAAG,GAA8B,CAAC;gBAC3C,MAAM,OAAO,GACX,GAAG,CAAC,UAAU,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ;oBAClD,CAAC,CAAE,GAAG,CAAC,UAA4C;oBACnD,CAAC,CAAC,EAAE,CAAC;gBACT,QAAQ,GAAG,EAAE,GAAG,GAAG,EAAE,UAAU,EAAE,EAAE,GAAG,OAAO,EAAE,EAAE,CAAC;YACpD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,mEAAmE;YACnE,QAAQ,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;QAChC,CAAC;IACH,CAAC;IAED,QAAQ,CAAC,UAAU,CAAC,kBAAkB,CAAC,GAAG,sBAAsB,CAC9D,OAAO,CAAC,MAAM,EACd,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CACjE,CAAC;IAEF,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IAC7E,OAAO,CAAC,WAAW,CAAC,CAAC;AACvB,CAAC"}
+{"version":3,"file":"config-generator.js","sourceRoot":"","sources":["../../src/mcp/config-generator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC;;;;;;;;;GASG;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,gBAAgB,CAAC;AACnD,MAAM,CAAC,MAAM,eAAe,GAAG,sBAAsB,CAAC;AAuBtD,oEAAoE;AACpE,MAAM,UAAU,sBAAsB,CACpC,MAAc,EACd,OAAqD,EAAE;IAEvD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACxC,MAAM,KAAK,GACT,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU;QAC/B,CAAC,CAAC,IAAI,CAAC,UAAU;QACjB,CAAC,CAAC,IAAI,GAAG,eAAe,GAAG,GAAG,CAAC;IACnC,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,GAAG,EAAE,GAAG,IAAI,MAAM;QAClB,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;KAC9C,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAwB;IACxD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAEtD,IAAI,QAAQ,GAAkB,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IACjD,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAY,CAAC;YACrE,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;gBACnC,MAAM,GAAG,GAAG,GAA8B,CAAC;gBAC3C,MAAM,OAAO,GACX,GAAG,CAAC,UAAU,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ;oBAClD,CAAC,CAAE,GAAG,CAAC,UAA4C;oBACnD,CAAC,CAAC,EAAE,CAAC;gBACT,QAAQ,GAAG,EAAE,GAAG,GAAG,EAAE,UAAU,EAAE,EAAE,GAAG,OAAO,EAAE,EAAE,CAAC;YACpD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,mEAAmE;YACnE,QAAQ,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;QAChC,CAAC;IACH,CAAC;IAED,QAAQ,CAAC,UAAU,CAAC,kBAAkB,CAAC,GAAG,sBAAsB,CAC9D,OAAO,CAAC,MAAM,EACd,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CACjE,CAAC;IAEF,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IAC7E,OAAO,CAAC,WAAW,CAAC,CAAC;AACvB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nepopsx/cli",
-  "version": "0.0.23",
+  "version": "0.0.25",
   "description": "NEPOPSX CLI — generate AI agent workspaces from configuration",
   "license": "UNLICENSED",
   "type": "module",