@nxuss/lemma 1.43.0 → 1.45.0

package/dist/cjs/cloud/CloudBrainClient.d.ts

@@ -0,0 +1,52 @@
+import type { CreateMemoryRequest, CreateMemoryResponse, EntitlementResponse, ForgetResponse, RecallRequest, RecallResponse, UsageResponse, VerifyRequest, VerifyResponse } from '../contracts/api-v2.types';
+export interface CloudConfig {
+    /** Origin + path prefix ending in /v2, no trailing slash. */
+    baseUrl: string;
+    apiKey: string;
+    timeoutMs: number;
+    /** Where the pair came from. The URL and the key always come from the SAME source. */
+    source?: 'env' | 'file';
+    /** Only meaningful for 'file': what `lemma cloud login` recorded about sharing. */
+    autoshare?: boolean;
+}
+export type CloudConfigStatus = {
+    config: CloudConfig;
+}
+/** `problem` is null when Cloud is simply not configured, and a sentence when it is configured wrongly. */
+ | {
+    config: null;
+    problem: string | null;
+};
+export declare const DEFAULT_TIMEOUT_MS = 4000;
+export declare function cloudConfigStatus(env?: NodeJS.ProcessEnv): CloudConfigStatus;
+/**
+ * Whether stores are shared without being asked. An explicit LEMMA_CLOUD_AUTOSHARE wins ('1' on,
+ * '0' off); otherwise it follows what `lemma cloud login` recorded for the saved connection.
+ * Lives here, not in the Brain module, so the CLI can answer it without loading the Brain.
+ */
+export declare function autoShareFor(status: CloudConfigStatus, env?: NodeJS.ProcessEnv): boolean;
+export declare class CloudError extends Error {
+    /** HTTP status, or 0 when no response arrived (network, timeout). */
+    readonly status: number;
+    readonly code: string;
+    constructor(
+    /** HTTP status, or 0 when no response arrived (network, timeout). */
+    status: number, code: string, message: string);
+}
+export declare class CloudBrainClient {
+    private readonly config;
+    private readonly fetchImpl;
+    constructor(config: CloudConfig, fetchImpl?: typeof fetch);
+    remember(request: CreateMemoryRequest): Promise<CreateMemoryResponse>;
+    recall(request: RecallRequest): Promise<RecallResponse>;
+    verify(request: VerifyRequest): Promise<VerifyResponse>;
+    /** Cheapest authenticated call: the "is this key good and is the server there" check. */
+    usage(): Promise<UsageResponse>;
+    /** What this key's plan includes. A server from before the endpoint existed answers 404. */
+    entitlement(): Promise<EntitlementResponse>;
+    forget(id: string): Promise<ForgetResponse>;
+    private call;
+}
+/** A CloudError (or any error) as one short line for a tool reply, with no URL and no key. */
+export declare function describeCloudFailure(err: unknown): string;
+//# sourceMappingURL=CloudBrainClient.d.ts.map

package/dist/cjs/cloud/CloudBrainClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CloudBrainClient.d.ts","sourceRoot":"","sources":["../../../src/cloud/CloudBrainClient.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EACV,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,cAAc,EACd,aAAa,EACb,cAAc,EACd,aAAa,EACb,aAAa,EACb,cAAc,EACf,MAAM,2BAA2B,CAAC;AAEnC,MAAM,WAAW,WAAW;IAC1B,6DAA6D;IAC7D,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,sFAAsF;IACtF,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IACxB,mFAAmF;IACnF,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,MAAM,iBAAiB,GACzB;IAAE,MAAM,EAAE,WAAW,CAAA;CAAE;AACzB,2GAA2G;GACzG;IAAE,MAAM,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;AAI7C,eAAO,MAAM,kBAAkB,OAAO,CAAC;AAEvC,wBAAgB,iBAAiB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,iBAAiB,CAmBzF;AAuBD;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,iBAAiB,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAKrG;AAED,qBAAa,UAAW,SAAQ,KAAK;IAEjC,qEAAqE;IACrE,QAAQ,CAAC,MAAM,EAAE,MAAM;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM;;IAFrB,qEAAqE;IAC5D,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACrB,OAAO,EAAE,MAAM;CAKlB;AAED,qBAAa,gBAAgB;IAEzB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,SAAS;gBADT,MAAM,EAAE,WAAW,EACnB,SAAS,GAAE,OAAO,KAAa;IAGlD,QAAQ,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAIrE,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC;IAIvD,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC;IAIvD,yFAAyF;IACzF,KAAK,IAAI,OAAO,CAAC,aAAa,CAAC;IAI/B,4FAA4F;IAC5F,WAAW,IAAI,OAAO,CAAC,mBAAmB,CAAC;IAI3C,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;YAI7B,IAAI;CAgCnB;AAED,8FAA8F;AAC9F,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAOzD"}

package/dist/cjs/cloud/CloudBrainClient.js

@@ -0,0 +1,161 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CloudBrainClient = exports.CloudError = exports.DEFAULT_TIMEOUT_MS = void 0;
+exports.cloudConfigStatus = cloudConfigStatus;
+exports.autoShareFor = autoShareFor;
+exports.describeCloudFailure = describeCloudFailure;
+/**
+ * Lemma Cloud — the MCP's client for the /v2 API.
+ *
+ * Deliberately small and unforgiving about what it may do to the caller: every request has a
+ * hard timeout, nothing is retried (a slow Cloud must never make a local memory call slow), and
+ * a failure surfaces as a CloudError the caller can turn into one line of text. The API key is
+ * read from the environment and only ever placed in the Authorization header: it is never
+ * logged, never part of an error message, and never sent over plain http to a non-local host.
+ */
+const CloudConfig_1 = require("./CloudConfig");
+const KEY_SHAPE = /^lk_(live|test)_[0-9a-f]{32,64}$/;
+const LOCAL_HOSTS = new Set(['localhost', '127.0.0.1', '[::1]']);
+exports.DEFAULT_TIMEOUT_MS = 4000;
+function cloudConfigStatus(env = process.env) {
+    const envUrl = env.LEMMA_CLOUD_URL?.trim();
+    const envKey = env.LEMMA_CLOUD_KEY?.trim();
+    if (!envUrl && !envKey) {
+        // Nothing in the environment: use what `lemma cloud login` saved. The pair is taken whole
+        // from the file, so a key can never be sent to a URL it was not issued for.
+        const saved = (0, CloudConfig_1.readUserConfig)(env);
+        if (!saved.found)
+            return { config: null, problem: null };
+        if ('problem' in saved)
+            return { config: null, problem: saved.problem };
+        const checked = validate(saved.config.url, saved.config.key, env, { url: 'the saved Cloud URL', key: 'the saved Cloud key' });
+        return checked.config
+            ? { config: { ...checked.config, source: 'file', autoshare: saved.config.autoshare } }
+            : checked;
+    }
+    if (!envUrl)
+        return { config: null, problem: 'LEMMA_CLOUD_KEY is set but LEMMA_CLOUD_URL is not.' };
+    if (!envKey)
+        return { config: null, problem: 'LEMMA_CLOUD_URL is set but LEMMA_CLOUD_KEY is not.' };
+    const checked = validate(envUrl, envKey, env, { url: 'LEMMA_CLOUD_URL', key: 'LEMMA_CLOUD_KEY' });
+    return checked.config ? { config: { ...checked.config, source: 'env' } } : checked;
+}
+function validate(rawUrl, apiKey, env, name) {
+    if (!KEY_SHAPE.test(apiKey))
+        return { config: null, problem: `${name.key} is not a Lemma API key (expected lk_live_… or lk_test_…).` };
+    let url;
+    try {
+        url = new URL(rawUrl);
+    }
+    catch {
+        return { config: null, problem: `${name.url} is not a valid URL.` };
+    }
+    const local = LOCAL_HOSTS.has(url.hostname);
+    if (url.protocol !== 'https:' && !(url.protocol === 'http:' && local)) {
+        return { config: null, problem: `${name.url} must be https (plain http is only allowed for localhost).` };
+    }
+    if (url.username || url.password)
+        return { config: null, problem: `${name.url} must not contain credentials.` };
+    const prefix = url.pathname.replace(/\/+$/, '').replace(/\/v2$/, '');
+    const asked = Number(env.LEMMA_CLOUD_TIMEOUT_MS);
+    const timeoutMs = Number.isFinite(asked) && asked >= 500 && asked <= 30000 ? Math.floor(asked) : exports.DEFAULT_TIMEOUT_MS;
+    return { config: { baseUrl: `${url.origin}${prefix}/v2`, apiKey, timeoutMs } };
+}
+/**
+ * Whether stores are shared without being asked. An explicit LEMMA_CLOUD_AUTOSHARE wins ('1' on,
+ * '0' off); otherwise it follows what `lemma cloud login` recorded for the saved connection.
+ * Lives here, not in the Brain module, so the CLI can answer it without loading the Brain.
+ */
+function autoShareFor(status, env = process.env) {
+    if (!status.config)
+        return false;
+    if (env.LEMMA_CLOUD_AUTOSHARE === '1')
+        return true;
+    if (env.LEMMA_CLOUD_AUTOSHARE === '0')
+        return false;
+    return status.config.source === 'file' && status.config.autoshare === true;
+}
+class CloudError extends Error {
+    constructor(
+    /** HTTP status, or 0 when no response arrived (network, timeout). */
+    status, code, message) {
+        super(message);
+        this.status = status;
+        this.code = code;
+        this.name = 'CloudError';
+    }
+}
+exports.CloudError = CloudError;
+class CloudBrainClient {
+    constructor(config, fetchImpl = fetch) {
+        this.config = config;
+        this.fetchImpl = fetchImpl;
+    }
+    remember(request) {
+        return this.call('POST', '/memories', request);
+    }
+    recall(request) {
+        return this.call('POST', '/recall', request);
+    }
+    verify(request) {
+        return this.call('POST', '/verify', request);
+    }
+    /** Cheapest authenticated call: the "is this key good and is the server there" check. */
+    usage() {
+        return this.call('GET', '/usage');
+    }
+    /** What this key's plan includes. A server from before the endpoint existed answers 404. */
+    entitlement() {
+        return this.call('GET', '/entitlement');
+    }
+    forget(id) {
+        return this.call('DELETE', `/memories/${encodeURIComponent(id)}`);
+    }
+    async call(method, path, body) {
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), this.config.timeoutMs);
+        let res;
+        try {
+            res = await this.fetchImpl(this.config.baseUrl + path, {
+                method,
+                headers: { Authorization: `Bearer ${this.config.apiKey}`, 'Content-Type': 'application/json' },
+                body: body === undefined ? undefined : JSON.stringify(body),
+                signal: controller.signal,
+            });
+        }
+        catch (err) {
+            const aborted = err?.name === 'AbortError';
+            // Not err.message: a network error's text can quote the URL, and nothing here should echo config.
+            throw new CloudError(0, aborted ? 'timeout' : 'network', aborted ? `no answer within ${this.config.timeoutMs} ms` : 'could not reach Lemma Cloud');
+        }
+        finally {
+            clearTimeout(timer);
+        }
+        let json = null;
+        try {
+            json = await res.json();
+        }
+        catch {
+            /* an error page or an empty body */
+        }
+        if (!res.ok) {
+            const code = typeof json?.error?.code === 'string' ? json.error.code : `http_${res.status}`;
+            const message = typeof json?.error?.message === 'string' ? json.error.message : `HTTP ${res.status}`;
+            throw new CloudError(res.status, code, message);
+        }
+        return json;
+    }
+}
+exports.CloudBrainClient = CloudBrainClient;
+/** A CloudError (or any error) as one short line for a tool reply, with no URL and no key. */
+function describeCloudFailure(err) {
+    if (err instanceof CloudError) {
+        if (err.status === 401)
+            return 'the Cloud API key was rejected (revoked or wrong)';
+        if (err.status === 429)
+            return `Cloud limit reached (${err.message})`;
+        return err.status === 0 ? err.message : `${err.code}: ${err.message}`;
+    }
+    return 'unexpected error talking to Lemma Cloud';
+}
+//# sourceMappingURL=CloudBrainClient.js.map

package/dist/cjs/cloud/CloudBrainClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CloudBrainClient.js","sourceRoot":"","sources":["../../../src/cloud/CloudBrainClient.ts"],"names":[],"mappings":";;;AA0CA,8CAmBC;AA4BD,oCAKC;AAiFD,oDAOC;AAtLD;;;;;;;;GAQG;AACH,+CAA+C;AA6B/C,MAAM,SAAS,GAAG,kCAAkC,CAAC;AACrD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;AACpD,QAAA,kBAAkB,GAAG,IAAI,CAAC;AAEvC,SAAgB,iBAAiB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACpE,MAAM,MAAM,GAAG,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC;IAC3C,MAAM,MAAM,GAAG,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC;IAE3C,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,0FAA0F;QAC1F,4EAA4E;QAC5E,MAAM,KAAK,GAAG,IAAA,4BAAc,EAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK,CAAC,KAAK;YAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACzD,IAAI,SAAS,IAAI,KAAK;YAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QACxE,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,qBAAqB,EAAE,GAAG,EAAE,qBAAqB,EAAE,CAAC,CAAC;QAC9H,OAAO,OAAO,CAAC,MAAM;YACnB,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE;YACtF,CAAC,CAAC,OAAO,CAAC;IACd,CAAC;IACD,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,oDAAoD,EAAE,CAAC;IACpG,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,oDAAoD,EAAE,CAAC;IACpG,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,iBAAiB,EAAE,GAAG,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAClG,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;AACrF,CAAC;AAED,SAAS,QAAQ,CAAC,MAAc,EAAE,MAAc,EAAE,GAAsB,EAAE,IAAkC;IAC1G,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,4DAA4D,EAAE,CAAC;IAEvI,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,sBAAsB,EAAE,CAAC;IACtE,CAAC;IACD,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC5C,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,KAAK,CAAC,EAAE,CAAC;QACtE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,4DAA4D,EAAE,CAAC;IAC5G,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ;QAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,gCAAgC,EAAE,CAAC;IAEhH,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACrE,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,GAAG,IAAI,KAAK,IAAI,KAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,0BAAkB,CAAC;IACrH,OAAO,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,MAAM,GAAG,MAAM,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC;AACjF,CAAC;AAED;;;;GAIG;AACH,SAAgB,YAAY,CAAC,MAAyB,EAAE,MAAyB,OAAO,CAAC,GAAG;IAC1F,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACjC,IAAI,GAAG,CAAC,qBAAqB,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IACnD,IAAI,GAAG,CAAC,qBAAqB,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IACpD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC;AAC7E,CAAC;AAED,MAAa,UAAW,SAAQ,KAAK;IACnC;IACE,qEAAqE;IAC5D,MAAc,EACd,IAAY,EACrB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAJN,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAQ;QAIrB,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;IAC3B,CAAC;CACF;AAVD,gCAUC;AAED,MAAa,gBAAgB;IAC3B,YACmB,MAAmB,EACnB,YAA0B,KAAK;QAD/B,WAAM,GAAN,MAAM,CAAa;QACnB,cAAS,GAAT,SAAS,CAAsB;IAC/C,CAAC;IAEJ,QAAQ,CAAC,OAA4B;QACnC,OAAO,IAAI,CAAC,IAAI,CAAuB,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,CAAC,OAAsB;QAC3B,OAAO,IAAI,CAAC,IAAI,CAAiB,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,CAAC,OAAsB;QAC3B,OAAO,IAAI,CAAC,IAAI,CAAiB,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAC/D,CAAC;IAED,yFAAyF;IACzF,KAAK;QACH,OAAO,IAAI,CAAC,IAAI,CAAgB,KAAK,EAAE,QAAQ,CAAC,CAAC;IACnD,CAAC;IAED,4FAA4F;IAC5F,WAAW;QACT,OAAO,IAAI,CAAC,IAAI,CAAsB,KAAK,EAAE,cAAc,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,CAAC,EAAU;QACf,OAAO,IAAI,CAAC,IAAI,CAAiB,QAAQ,EAAE,aAAa,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACpF,CAAC;IAEO,KAAK,CAAC,IAAI,CAAI,MAAc,EAAE,IAAY,EAAE,IAAc;QAChE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC1E,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,GAAG,IAAI,EAAE;gBACrD,MAAM;gBACN,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC9F,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAC3D,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAI,GAAyB,EAAE,IAAI,KAAK,YAAY,CAAC;YAClE,kGAAkG;YAClG,MAAM,IAAI,UAAU,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,oBAAoB,IAAI,CAAC,MAAM,CAAC,SAAS,KAAK,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC;QACrJ,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QAED,IAAI,IAAI,GAAQ,IAAI,CAAC;QACrB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,oCAAoC;QACtC,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,OAAO,IAAI,EAAE,KAAK,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;YAC5F,MAAM,OAAO,GAAG,OAAO,IAAI,EAAE,KAAK,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;YACrG,MAAM,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,IAAS,CAAC;IACnB,CAAC;CACF;AAhED,4CAgEC;AAED,8FAA8F;AAC9F,SAAgB,oBAAoB,CAAC,GAAY;IAC/C,IAAI,GAAG,YAAY,UAAU,EAAE,CAAC;QAC9B,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,mDAAmD,CAAC;QACnF,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,wBAAwB,GAAG,CAAC,OAAO,GAAG,CAAC;QACtE,OAAO,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC;IACxE,CAAC;IACD,OAAO,yCAAyC,CAAC;AACnD,CAAC"}

package/dist/cjs/cloud/CloudConfig.d.ts

@@ -0,0 +1,41 @@
+export interface UserCloudConfig {
+    url: string;
+    key: string;
+    /** Share every stored memory with the team without being asked. */
+    autoshare: boolean;
+}
+export type UserConfigRead = {
+    found: false;
+} | {
+    found: true;
+    config: UserCloudConfig;
+} | {
+    found: true;
+    problem: string;
+};
+export declare const MARKER_FILE = ".lemma-cloud.json";
+export declare function userConfigPath(env?: NodeJS.ProcessEnv): string;
+export declare function readUserConfig(env?: NodeJS.ProcessEnv): UserConfigRead;
+/** Atomic write, owner-only. Never leaves a half-written or world-readable credential behind. */
+export declare function writeUserConfig(config: UserCloudConfig, env?: NodeJS.ProcessEnv): string;
+/** True when a config existed and was removed. */
+export declare function removeUserConfig(env?: NodeJS.ProcessEnv): boolean;
+export interface CloudMarker {
+    url: string;
+}
+export declare function markerPath(root: string): string;
+export declare function readMarker(root: string): CloudMarker | null;
+/**
+ * The marker of the repo `start` lives in: the nearest one going up, stopping at the repo root (the
+ * first directory with a .git) or the filesystem root. Plain file reads, no subprocess: this runs on
+ * every search_memory for every user, Cloud or not, and spawning `git rev-parse` there cost ~9 ms a call.
+ */
+export declare function findMarker(start: string): CloudMarker | null;
+export declare function writeMarker(root: string, url: string): string;
+/**
+ * The host of a marker URL, safe to print into the agent's context. The marker is repo content
+ * anybody can edit, so only a validated host ever reaches a tool reply: no free text, no path,
+ * no control characters.
+ */
+export declare function markerHost(marker: CloudMarker): string;
+//# sourceMappingURL=CloudConfig.d.ts.map

package/dist/cjs/cloud/CloudConfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CloudConfig.d.ts","sourceRoot":"","sources":["../../../src/cloud/CloudConfig.ts"],"names":[],"mappings":"AAgBA,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,mEAAmE;IACnE,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,MAAM,cAAc,GACtB;IAAE,KAAK,EAAE,KAAK,CAAA;CAAE,GAChB;IAAE,KAAK,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,eAAe,CAAA;CAAE,GACxC;IAAE,KAAK,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAErC,eAAO,MAAM,WAAW,sBAAsB,CAAC;AAE/C,wBAAgB,cAAc,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAG3E;AAED,wBAAgB,cAAc,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,cAAc,CAsBnF;AAED,iGAAiG;AACjG,wBAAgB,eAAe,CAAC,MAAM,EAAE,eAAe,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAQrG;AAED,kDAAkD;AAClD,wBAAgB,gBAAgB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAO9E;AAID,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;CACb;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAW3D;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAW5D;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAI7D;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAEtD"}

package/dist/cjs/cloud/CloudConfig.js

@@ -0,0 +1,133 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MARKER_FILE = void 0;
+exports.userConfigPath = userConfigPath;
+exports.readUserConfig = readUserConfig;
+exports.writeUserConfig = writeUserConfig;
+exports.removeUserConfig = removeUserConfig;
+exports.markerPath = markerPath;
+exports.readMarker = readMarker;
+exports.findMarker = findMarker;
+exports.writeMarker = writeMarker;
+exports.markerHost = markerHost;
+/**
+ * Lemma Cloud — where a dev's connection settings live.
+ *
+ *   ~/.lemma/cloud.json   personal, 0600: { url, key, autoshare }. Written by `lemma cloud login`.
+ *   <repo>/.lemma-cloud.json   committed, NO secret: { url }. Written by `lemma cloud link`.
+ *
+ * The two are deliberately not interchangeable. The key in the personal file is bound to the URL
+ * it was issued for and is only ever sent there. The repo marker is untrusted input (anyone who
+ * can push to the repo controls it), so it may suggest a default for `login` and trigger a hint,
+ * but it never decides where a key is sent: otherwise a hostile repo would point the URL at its
+ * own server and collect the key of every dev who opens it.
+ */
+const fs_1 = __importDefault(require("fs"));
+const os_1 = __importDefault(require("os"));
+const path_1 = __importDefault(require("path"));
+exports.MARKER_FILE = '.lemma-cloud.json';
+function userConfigPath(env = process.env) {
+    const override = env.LEMMA_CLOUD_CONFIG?.trim();
+    return override || path_1.default.join(os_1.default.homedir(), '.lemma', 'cloud.json');
+}
+function readUserConfig(env = process.env) {
+    const file = userConfigPath(env);
+    let stat;
+    try {
+        stat = fs_1.default.statSync(file);
+    }
+    catch {
+        return { found: false };
+    }
+    // The file holds a credential: if other users on this machine can read it, refuse to use it
+    // and say how to fix it, rather than quietly sending a key that is already exposed.
+    if (process.platform !== 'win32' && (stat.mode & 0o077) !== 0) {
+        return { found: true, problem: `${file} is readable by other users: run chmod 600 on it (or \`lemma cloud login\` again)` };
+    }
+    try {
+        const parsed = JSON.parse(fs_1.default.readFileSync(file, 'utf8'));
+        if (typeof parsed?.url !== 'string' || typeof parsed?.key !== 'string' || !parsed.url || !parsed.key) {
+            return { found: true, problem: `${file} is missing "url" or "key": run \`lemma cloud login\`` };
+        }
+        return { found: true, config: { url: parsed.url, key: parsed.key, autoshare: parsed.autoshare === true } };
+    }
+    catch {
+        return { found: true, problem: `${file} is not valid JSON: run \`lemma cloud login\`` };
+    }
+}
+/** Atomic write, owner-only. Never leaves a half-written or world-readable credential behind. */
+function writeUserConfig(config, env = process.env) {
+    const file = userConfigPath(env);
+    fs_1.default.mkdirSync(path_1.default.dirname(file), { recursive: true, mode: 0o700 });
+    const tmp = `${file}.${process.pid}.tmp`;
+    fs_1.default.writeFileSync(tmp, JSON.stringify(config, null, 2) + '\n', { mode: 0o600 });
+    fs_1.default.chmodSync(tmp, 0o600); // the umask can only have removed bits, but be explicit
+    fs_1.default.renameSync(tmp, file);
+    return file;
+}
+/** True when a config existed and was removed. */
+function removeUserConfig(env = process.env) {
+    try {
+        fs_1.default.unlinkSync(userConfigPath(env));
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function markerPath(root) {
+    return path_1.default.join(root, exports.MARKER_FILE);
+}
+function readMarker(root) {
+    try {
+        const parsed = JSON.parse(fs_1.default.readFileSync(markerPath(root), 'utf8'));
+        if (typeof parsed?.url !== 'string')
+            return null;
+        const u = new URL(parsed.url);
+        if (u.protocol !== 'https:' && !(u.protocol === 'http:' && ['localhost', '127.0.0.1', '[::1]'].includes(u.hostname)))
+            return null;
+        if (u.username || u.password)
+            return null;
+        return { url: u.origin + u.pathname.replace(/\/+$/, '') };
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * The marker of the repo `start` lives in: the nearest one going up, stopping at the repo root (the
+ * first directory with a .git) or the filesystem root. Plain file reads, no subprocess: this runs on
+ * every search_memory for every user, Cloud or not, and spawning `git rev-parse` there cost ~9 ms a call.
+ */
+function findMarker(start) {
+    let dir = path_1.default.resolve(start);
+    for (let depth = 0; depth < 64; depth++) {
+        const marker = readMarker(dir);
+        if (marker)
+            return marker;
+        if (fs_1.default.existsSync(path_1.default.join(dir, '.git')))
+            return null;
+        const parent = path_1.default.dirname(dir);
+        if (parent === dir)
+            return null;
+        dir = parent;
+    }
+    return null;
+}
+function writeMarker(root, url) {
+    const file = markerPath(root);
+    fs_1.default.writeFileSync(file, JSON.stringify({ url }, null, 2) + '\n', 'utf8');
+    return file;
+}
+/**
+ * The host of a marker URL, safe to print into the agent's context. The marker is repo content
+ * anybody can edit, so only a validated host ever reaches a tool reply: no free text, no path,
+ * no control characters.
+ */
+function markerHost(marker) {
+    return new URL(marker.url).host.replace(/[^a-zA-Z0-9.:\-[\]]/g, '');
+}
+//# sourceMappingURL=CloudConfig.js.map

package/dist/cjs/cloud/CloudConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CloudConfig.js","sourceRoot":"","sources":["../../../src/cloud/CloudConfig.ts"],"names":[],"mappings":";;;;;;AA8BA,wCAGC;AAED,wCAsBC;AAGD,0CAQC;AAGD,4CAOC;AAQD,gCAEC;AAED,gCAWC;AAOD,gCAWC;AAED,kCAIC;AAOD,gCAEC;AAtID;;;;;;;;;;;GAWG;AACH,4CAAoB;AACpB,4CAAoB;AACpB,gDAAwB;AAcX,QAAA,WAAW,GAAG,mBAAmB,CAAC;AAE/C,SAAgB,cAAc,CAAC,MAAyB,OAAO,CAAC,GAAG;IACjE,MAAM,QAAQ,GAAG,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC;IAChD,OAAO,QAAQ,IAAI,cAAI,CAAC,IAAI,CAAC,YAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;AACrE,CAAC;AAED,SAAgB,cAAc,CAAC,MAAyB,OAAO,CAAC,GAAG;IACjE,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,IAAc,CAAC;IACnB,IAAI,CAAC;QACH,IAAI,GAAG,YAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC1B,CAAC;IACD,4FAA4F;IAC5F,oFAAoF;IACpF,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9D,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,mFAAmF,EAAE,CAAC;IAC9H,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QACzD,IAAI,OAAO,MAAM,EAAE,GAAG,KAAK,QAAQ,IAAI,OAAO,MAAM,EAAE,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;YACrG,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,uDAAuD,EAAE,CAAC;QAClG,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,KAAK,IAAI,EAAE,EAAE,CAAC;IAC7G,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,+CAA+C,EAAE,CAAC;IAC1F,CAAC;AACH,CAAC;AAED,iGAAiG;AACjG,SAAgB,eAAe,CAAC,MAAuB,EAAE,MAAyB,OAAO,CAAC,GAAG;IAC3F,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACjC,YAAE,CAAC,SAAS,CAAC,cAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnE,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IACzC,YAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/E,YAAE,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,wDAAwD;IAClF,YAAE,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACzB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,kDAAkD;AAClD,SAAgB,gBAAgB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACnE,IAAI,CAAC;QACH,YAAE,CAAC,UAAU,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAQD,SAAgB,UAAU,CAAC,IAAY;IACrC,OAAO,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,mBAAW,CAAC,CAAC;AACtC,CAAC;AAED,SAAgB,UAAU,CAAC,IAAY;IACrC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAE,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACrE,IAAI,OAAO,MAAM,EAAE,GAAG,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACjD,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAClI,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC1C,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAgB,UAAU,CAAC,KAAa;IACtC,IAAI,GAAG,GAAG,cAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,IAAI,YAAE,CAAC,UAAU,CAAC,cAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACvD,MAAM,MAAM,GAAG,cAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAChC,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAgB,WAAW,CAAC,IAAY,EAAE,GAAW;IACnD,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC9B,YAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IACxE,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,SAAgB,UAAU,CAAC,MAAmB;IAC5C,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,sBAAsB,EAAE,EAAE,CAAC,CAAC;AACtE,CAAC"}

package/dist/cjs/cloud/CloudEntitlement.d.ts

@@ -0,0 +1,55 @@
+import { type CloudConfig } from './CloudBrainClient';
+import type { EntitlementResponse } from '../contracts/api-v2.types';
+/** How long the last answer keeps working when the server cannot be reached. */
+export declare const GRACE_MS: number;
+/** An answer older than this is asked for again. */
+export declare const REFRESH_AFTER_MS: number;
+export interface StoredEntitlement {
+    v: 1;
+    /** Which connection (URL + key) this answer is for. */
+    binding: string;
+    plan: string;
+    includesPro: boolean;
+    /** The server answered 401: the seat was taken away. */
+    revoked: boolean;
+    checkedAt: number;
+}
+export declare function entitlementPath(env?: NodeJS.ProcessEnv): string;
+/** A short fingerprint of the connection. Not the server's key hash: it is salted with the URL. */
+export declare function bindingFor(config: Pick<CloudConfig, 'baseUrl' | 'apiKey'>): string;
+export declare function readStored(env?: NodeJS.ProcessEnv): StoredEntitlement | null;
+/** For tests: forget the one-second memo of {@link cloudGrantsPro}. */
+export declare function resetEntitlementMemo(): void;
+/**
+ * Whether the connection this machine is logged in with currently carries Pro. Synchronous, no
+ * network, false whenever anything is missing or does not match.
+ */
+export declare function cloudGrantsPro(env?: NodeJS.ProcessEnv, now?: number): boolean;
+/** Keep the server's answer for this connection. */
+export declare function recordEntitlement(config: Pick<CloudConfig, 'baseUrl' | 'apiKey'>, answer: EntitlementResponse, env?: NodeJS.ProcessEnv, now?: number): void;
+/** Forget the entitlement (logout). True when there was one. */
+export declare function clearEntitlement(env?: NodeJS.ProcessEnv): boolean;
+export type RefreshState = 
+/** The server says this seat includes Pro. */
+'granted'
+/** The server knows the key and the plan does not include Pro (free). */
+ | 'not-included'
+/** The server rejected the key (401): the seat is gone, Pro from Cloud is off now. */
+ | 'revoked'
+/** An older server without the endpoint (404): nothing is recorded or changed. */
+ | 'unsupported'
+/** No usable answer (network, timeout, 5xx, 429, unreadable body): the last answer stands until the grace runs out. */
+ | 'unreachable';
+export interface RefreshResult {
+    state: RefreshState;
+    plan?: string;
+}
+/** Ask the server and record what it says. Never throws. */
+export declare function refreshEntitlement(config: CloudConfig, env?: NodeJS.ProcessEnv, fetchImpl?: typeof fetch, now?: number): Promise<RefreshResult>;
+/**
+ * For the long-lived MCP server: refresh when the saved answer is missing or older than an hour,
+ * and look again every half hour. Does nothing, and costs nothing, while Cloud is not configured.
+ * The timer is unref'd so it never keeps a process alive. Returns a function that stops it.
+ */
+export declare function startEntitlementRefresh(env?: NodeJS.ProcessEnv, fetchImpl?: typeof fetch): () => void;
+//# sourceMappingURL=CloudEntitlement.d.ts.map

package/dist/cjs/cloud/CloudEntitlement.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CloudEntitlement.d.ts","sourceRoot":"","sources":["../../../src/cloud/CloudEntitlement.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAmD,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEvG,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAErE,gFAAgF;AAChF,eAAO,MAAM,QAAQ,QAA0B,CAAC;AAChD,oDAAoD;AACpD,eAAO,MAAM,gBAAgB,QAAiB,CAAC;AAS/C,MAAM,WAAW,iBAAiB;IAChC,CAAC,EAAE,CAAC,CAAC;IACL,uDAAuD;IACvD,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,OAAO,CAAC;IACrB,wDAAwD;IACxD,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,eAAe,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAE5E;AAED,mGAAmG;AACnG,wBAAgB,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,GAAG,QAAQ,CAAC,GAAG,MAAM,CAElF;AAED,wBAAgB,UAAU,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,iBAAiB,GAAG,IAAI,CAkBzF;AAYD,uEAAuE;AACvE,wBAAgB,oBAAoB,IAAI,IAAI,CAE3C;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,EAAE,GAAG,GAAE,MAAmB,GAAG,OAAO,CAMtG;AAYD,oDAAoD;AACpD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,GAAG,QAAQ,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,EAAE,GAAG,GAAE,MAAmB,GAAG,IAAI,CAEpL;AAED,gEAAgE;AAChE,wBAAgB,gBAAgB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAQ9E;AAED,MAAM,MAAM,YAAY;AACtB,8CAA8C;AAC5C,SAAS;AACX,yEAAyE;GACvE,cAAc;AAChB,sFAAsF;GACpF,SAAS;AACX,kFAAkF;GAChF,aAAa;AACf,uHAAuH;GACrH,aAAa,CAAC;AAElB,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,YAAY,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAOD,4DAA4D;AAC5D,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,WAAW,EACnB,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,SAAS,CAAC,EAAE,OAAO,KAAK,EACxB,GAAG,GAAE,MAAmB,GACvB,OAAO,CAAC,aAAa,CAAC,CAgBxB;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,EAAE,SAAS,CAAC,EAAE,OAAO,KAAK,GAAG,MAAM,IAAI,CAYlH"}

package/dist/cjs/cloud/CloudEntitlement.js

@@ -0,0 +1,174 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.REFRESH_AFTER_MS = exports.GRACE_MS = void 0;
+exports.entitlementPath = entitlementPath;
+exports.bindingFor = bindingFor;
+exports.readStored = readStored;
+exports.resetEntitlementMemo = resetEntitlementMemo;
+exports.cloudGrantsPro = cloudGrantsPro;
+exports.recordEntitlement = recordEntitlement;
+exports.clearEntitlement = clearEntitlement;
+exports.refreshEntitlement = refreshEntitlement;
+exports.startEntitlementRefresh = startEntitlementRefresh;
+/**
+ * Lemma Cloud — what a seat entitles this machine to.
+ *
+ * A seat on a paid Cloud plan also unlocks the local Pro tools. The client does not decide that: it
+ * asks the server (GET /v2/entitlement) and keeps the last answer in ~/.lemma/cloud-entitlement.json
+ * next to the connection it belongs to. The file is only a cache of the server's answer and, like
+ * ~/.lemma-cache/license.json, it can be edited by whoever owns the machine; what it adds is that an
+ * answer for one connection is never honoured for another.
+ *
+ * Three rules, each from a way this has gone wrong before:
+ *  - Only an explicit 401 takes the entitlement away. A timeout, a 5xx, a 429 or a body we cannot
+ *    read keeps the last answer until it is older than the grace period (a KeyManager that treated
+ *    "anything but valid" as "cancelled" once deleted a paying user's license).
+ *  - Reading is synchronous and touches two small files, never the network: the host hooks are
+ *    short-lived processes with a latency budget. Only the long-lived MCP server refreshes.
+ *  - The answer is bound to the URL and key it was fetched with, so logging in as someone else, or
+ *    pointing at another server, starts from "no entitlement" instead of inheriting the old one.
+ */
+const crypto_1 = __importDefault(require("crypto"));
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const CloudBrainClient_1 = require("./CloudBrainClient");
+const CloudConfig_1 = require("./CloudConfig");
+/** How long the last answer keeps working when the server cannot be reached. */
+exports.GRACE_MS = 7 * 24 * 60 * 60 * 1000;
+/** An answer older than this is asked for again. */
+exports.REFRESH_AFTER_MS = 60 * 60 * 1000;
+/** The MCP checks whether a refresh is due this often. */
+const TICK_MS = 30 * 60 * 1000;
+/** A recorded time this far ahead of the clock is not believed. */
+const FUTURE_SKEW_MS = 5 * 60 * 1000;
+/** Tool gates call this on every request; re-reading two files each time buys nothing. */
+const MEMO_MS = 1000;
+const REFRESH_TIMEOUT_MS = 8000;
+function entitlementPath(env = process.env) {
+    return path_1.default.join(path_1.default.dirname((0, CloudConfig_1.userConfigPath)(env)), 'cloud-entitlement.json');
+}
+/** A short fingerprint of the connection. Not the server's key hash: it is salted with the URL. */
+function bindingFor(config) {
+    return crypto_1.default.createHash('sha256').update(`${config.baseUrl}\n${config.apiKey}`).digest('hex').slice(0, 16);
+}
+function readStored(env = process.env) {
+    try {
+        const p = JSON.parse(fs_1.default.readFileSync(entitlementPath(env), 'utf8'));
+        if (p?.v !== 1 ||
+            typeof p.binding !== 'string' ||
+            typeof p.plan !== 'string' ||
+            typeof p.includesPro !== 'boolean' ||
+            typeof p.revoked !== 'boolean' ||
+            typeof p.checkedAt !== 'number' ||
+            !Number.isFinite(p.checkedAt)) {
+            return null;
+        }
+        return p;
+    }
+    catch {
+        return null;
+    }
+}
+function writeStored(s, env) {
+    const file = entitlementPath(env);
+    fs_1.default.mkdirSync(path_1.default.dirname(file), { recursive: true, mode: 0o700 });
+    const tmp = `${file}.${process.pid}.tmp`;
+    fs_1.default.writeFileSync(tmp, JSON.stringify(s, null, 2) + '\n', { mode: 0o600 });
+    fs_1.default.renameSync(tmp, file);
+    memo = null;
+}
+let memo = null;
+/** For tests: forget the one-second memo of {@link cloudGrantsPro}. */
+function resetEntitlementMemo() {
+    memo = null;
+}
+/**
+ * Whether the connection this machine is logged in with currently carries Pro. Synchronous, no
+ * network, false whenever anything is missing or does not match.
+ */
+function cloudGrantsPro(env = process.env, now = Date.now()) {
+    const useMemo = env === process.env;
+    if (useMemo && memo && now - memo.at < MEMO_MS)
+        return memo.value;
+    const value = compute(env, now);
+    if (useMemo)
+        memo = { at: now, value };
+    return value;
+}
+function compute(env, now) {
+    const status = (0, CloudBrainClient_1.cloudConfigStatus)(env);
+    if (!status.config)
+        return false;
+    const s = readStored(env);
+    if (!s || s.revoked || !s.includesPro)
+        return false;
+    if (s.binding !== bindingFor(status.config))
+        return false;
+    if (s.checkedAt > now + FUTURE_SKEW_MS)
+        return false;
+    return now - s.checkedAt < exports.GRACE_MS;
+}
+/** Keep the server's answer for this connection. */
+function recordEntitlement(config, answer, env = process.env, now = Date.now()) {
+    writeStored({ v: 1, binding: bindingFor(config), plan: answer.plan, includesPro: answer.includesPro, revoked: false, checkedAt: now }, env);
+}
+/** Forget the entitlement (logout). True when there was one. */
+function clearEntitlement(env = process.env) {
+    memo = null;
+    try {
+        fs_1.default.unlinkSync(entitlementPath(env));
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function isAnswer(x) {
+    const a = x;
+    return !!a && typeof a.plan === 'string' && typeof a.includesPro === 'boolean';
+}
+/** Ask the server and record what it says. Never throws. */
+async function refreshEntitlement(config, env = process.env, fetchImpl, now = Date.now()) {
+    try {
+        const answer = await new CloudBrainClient_1.CloudBrainClient({ ...config, timeoutMs: Math.max(config.timeoutMs, REFRESH_TIMEOUT_MS) }, fetchImpl).entitlement();
+        if (!isAnswer(answer))
+            return { state: 'unreachable' };
+        recordEntitlement(config, answer, env, now);
+        return { state: answer.includesPro ? 'granted' : 'not-included', plan: answer.plan };
+    }
+    catch (err) {
+        if (err instanceof CloudBrainClient_1.CloudError) {
+            if (err.status === 401) {
+                writeStored({ v: 1, binding: bindingFor(config), plan: 'free', includesPro: false, revoked: true, checkedAt: now }, env);
+                return { state: 'revoked' };
+            }
+            if (err.status === 404)
+                return { state: 'unsupported' };
+        }
+        return { state: 'unreachable' };
+    }
+}
+/**
+ * For the long-lived MCP server: refresh when the saved answer is missing or older than an hour,
+ * and look again every half hour. Does nothing, and costs nothing, while Cloud is not configured.
+ * The timer is unref'd so it never keeps a process alive. Returns a function that stops it.
+ */
+function startEntitlementRefresh(env = process.env, fetchImpl) {
+    const tick = () => {
+        const status = (0, CloudBrainClient_1.cloudConfigStatus)(env);
+        if (!status.config)
+            return;
+        const s = readStored(env);
+        if (s && s.binding === bindingFor(status.config) && Date.now() - s.checkedAt < exports.REFRESH_AFTER_MS)
+            return;
+        void refreshEntitlement(status.config, env, fetchImpl).catch(() => { });
+    };
+    tick();
+    const timer = setInterval(tick, TICK_MS);
+    timer.unref();
+    return () => clearInterval(timer);
+}
+//# sourceMappingURL=CloudEntitlement.js.map