brainjar 0.3.1220 → 0.3.1222

package/brainjar.js

@@ -107,7 +107,7 @@ var CLI_VERSION, CACHE, DAY;
 var init_version_check = __esm({
   "packages/cli/src/version-check.ts"() {
     "use strict";
-    CLI_VERSION = "0.3.1220";
+    CLI_VERSION = "0.3.1222";
     CACHE = path.join(os.homedir(), ".brainjar", "version-check.json");
     DAY = 864e5;
   }
@@ -558,9 +558,9 @@ var require_postgres_date = __commonJS({
       if (type === "Z") {
         return 0;
       }
-      var sign = type === "-" ? -1 : 1;
+      var sign2 = type === "-" ? -1 : 1;
       var offset = parseInt(zone[2], 10) * 3600 + parseInt(zone[3] || 0, 10) * 60 + parseInt(zone[4] || 0, 10);
-      return offset * sign * 1e3;
+      return offset * sign2 * 1e3;
     }
     function bcYearToNegativeYear(year) {
       return -(year - 1);
@@ -925,11 +925,11 @@ var require_pg_int8 = __commonJS({
     function readInt8(buffer) {
       var high = buffer.readInt32BE(0);
       var low = buffer.readUInt32BE(4);
-      var sign = "";
+      var sign2 = "";
       if (high < 0) {
         high = ~high + (low === 0);
         low = ~low + 1 >>> 0;
-        sign = "-";
+        sign2 = "-";
       }
       var result = "";
       var carry;
@@ -945,7 +945,7 @@ var require_pg_int8 = __commonJS({
         low = t / BASE >>> 0;
         digits = "" + (t - BASE * low);
         if (low === 0 && high === 0) {
-          return sign + digits + result;
+          return sign2 + digits + result;
         }
         pad = "";
         l = 6 - digits.length;
@@ -961,7 +961,7 @@ var require_pg_int8 = __commonJS({
         low = t / BASE >>> 0;
         digits = "" + (t - BASE * low);
         if (low === 0 && high === 0) {
-          return sign + digits + result;
+          return sign2 + digits + result;
         }
         pad = "";
         l = 6 - digits.length;
@@ -977,7 +977,7 @@ var require_pg_int8 = __commonJS({
         low = t / BASE >>> 0;
         digits = "" + (t - BASE * low);
         if (low === 0 && high === 0) {
-          return sign + digits + result;
+          return sign2 + digits + result;
         }
         pad = "";
         l = 6 - digits.length;
@@ -990,7 +990,7 @@ var require_pg_int8 = __commonJS({
         carry = high % BASE;
         t = 4294967296 * carry + low;
         digits = "" + t % BASE;
-        return sign + digits + result;
+        return sign2 + digits + result;
       }
     }
     module.exports = readInt8;
@@ -1039,7 +1039,7 @@ var require_binaryParsers = __commonJS({
     };
     var parseFloatFromBits = function(data, precisionBits, exponentBits) {
       var bias = Math.pow(2, exponentBits - 1) - 1;
-      var sign = parseBits(data, 1);
+      var sign2 = parseBits(data, 1);
       var exponent = parseBits(data, exponentBits, 1);
       if (exponent === 0) {
         return 0;
@@ -1060,11 +1060,11 @@ var require_binaryParsers = __commonJS({
       var mantissa = parseBits(data, precisionBits, exponentBits + 1, false, parsePrecisionBits);
       if (exponent == Math.pow(2, exponentBits + 1) - 1) {
         if (mantissa === 0) {
-          return sign === 0 ? Infinity : -Infinity;
+          return sign2 === 0 ? Infinity : -Infinity;
         }
         return NaN;
       }
-      return (sign === 0 ? 1 : -1) * Math.pow(2, exponent - bias) * mantissa;
+      return (sign2 === 0 ? 1 : -1) * Math.pow(2, exponent - bias) * mantissa;
     };
     var parseInt16 = function(value) {
       if (parseBits(value, 1) == 1) {
@@ -1085,8 +1085,8 @@ var require_binaryParsers = __commonJS({
       return parseFloatFromBits(value, 52, 11);
     };
     var parseNumeric = function(value) {
-      var sign = parseBits(value, 16, 32);
-      if (sign == 49152) {
+      var sign2 = parseBits(value, 16, 32);
+      if (sign2 == 49152) {
         return NaN;
       }
       var weight = Math.pow(1e4, parseBits(value, 16, 16));
@@ -1098,12 +1098,12 @@ var require_binaryParsers = __commonJS({
         weight /= 1e4;
       }
       var scale = Math.pow(10, parseBits(value, 16, 48));
-      return (sign === 0 ? 1 : -1) * Math.round(result * scale) / scale;
+      return (sign2 === 0 ? 1 : -1) * Math.round(result * scale) / scale;
     };
     var parseDate = function(isUTC, value) {
-      var sign = parseBits(value, 1);
+      var sign2 = parseBits(value, 1);
       var rawValue = parseBits(value, 63, 1);
-      var result = new Date((sign === 0 ? 1 : -1) * rawValue / 1e3 + 9466848e5);
+      var result = new Date((sign2 === 0 ? 1 : -1) * rawValue / 1e3 + 9466848e5);
       if (!isUTC) {
         result.setTime(result.getTime() + result.getTimezoneOffset() * 6e4);
       }
@@ -5895,6 +5895,9 @@ function loadEnv() {
   }
   return { ...cachedFileVars, ...process.env };
 }
+function environmentOf(env = loadEnv()) {
+  return env.ENVIRONMENT?.trim().toLowerCase() === "saas" ? "saas" : "local";
+}
 function recommendedRoute(task, keys) {
   return task.recommended.find(
     (r) => r.provider === "openai" ? keys.hasOpenaiKey : keys.hasAnthropicKey
@@ -6067,7 +6070,7 @@ var init_config = __esm({
       #env;
       constructor(env) {
         this.#env = env;
-        this.environment = env.ENVIRONMENT?.trim().toLowerCase() === "saas" ? "saas" : "local";
+        this.environment = environmentOf(env);
         if (this.environment === "saas") {
           const url = env.BRAINJAR_SAAS_DATABASE_URL?.trim();
           if (!url) {
@@ -6401,6 +6404,154 @@ var init_audit_origin = __esm({
   }
 });
 
+// packages/db/src/settings.ts
+function isAppSettingKey(k) {
+  return APP_SETTING_KEYS.includes(k);
+}
+async function getAppSettings(pool2 = getPool()) {
+  const rows = (await pool2.query(
+    "SELECT key, value FROM app_setting"
+  )).rows;
+  const out = {};
+  for (const r of rows) if (isAppSettingKey(r.key)) out[r.key] = r.value;
+  return out;
+}
+async function swapAppSetting(key, value, pool2 = getPool()) {
+  const r = await pool2.query(
+    `INSERT INTO app_setting (key, value) VALUES ($1, $2)
+     ON CONFLICT (tenant_id, key) DO UPDATE SET value = EXCLUDED.value, updated_at = now()
+       WHERE app_setting.value IS DISTINCT FROM EXCLUDED.value
+     RETURNING 1`,
+    [key, value]
+  );
+  return (r.rowCount ?? 0) > 0;
+}
+async function resolveSetting(key, envValue, pool2 = getPool()) {
+  const fromEnv = envValue?.trim();
+  if (fromEnv) return fromEnv;
+  try {
+    return (await getAppSettings(pool2))[key];
+  } catch {
+    return void 0;
+  }
+}
+async function resolveModelChoice(workload, envPin, pool2 = getPool()) {
+  const pin = envPin?.trim();
+  if (pin) return pin;
+  const task = aiTaskOf(workload);
+  if (!task) return void 0;
+  return (await resolveSetting(`model_${task.key}`, void 0, pool2))?.trim() || void 0;
+}
+async function resolveProviderApiKey(provider, envKey, pool2 = getPool()) {
+  const fromEnv = envKey?.trim();
+  if (fromEnv) return fromEnv;
+  try {
+    const r = await pool2.query(
+      "SELECT value FROM app_setting WHERE key = $1",
+      [PROVIDER_KEY_SETTINGS[provider]]
+    );
+    return r.rows[0]?.value?.trim() || null;
+  } catch {
+    return null;
+  }
+}
+var APP_SETTING_KEYS, PROVIDER_KEY_SETTINGS;
+var init_settings = __esm({
+  "packages/db/src/settings.ts"() {
+    "use strict";
+    init_src();
+    init_pool();
+    APP_SETTING_KEYS = [
+      "capture_mode",
+      // transcript privacy: full | distilled | off
+      // The model per AI task (AI_TASKS, 2026-09-25); empty or absent = Recommended.
+      "model_doku",
+      "model_ask",
+      "model_verify",
+      "model_deepscan",
+      "model_extraction",
+      "public_url",
+      // this server's address as clients reach it (wizard command, MCP config)
+      // Outgoing mail (BJ-103); the password is a secret and lives next to the provider keys.
+      "smtp_host",
+      "smtp_port",
+      "smtp_user",
+      "smtp_secure",
+      // "1" = TLS from the start (465), else STARTTLS (587)
+      "mail_from",
+      // Sign in with a provider (BJ-112); the client secrets are secrets, see below.
+      "google_client_id",
+      "github_client_id",
+      // The emergency brake on new accounts (2026-09-26): "true" pauses every sign-up path.
+      "signups_paused",
+      // The legal pages the signup checkbox links to (BJ-113).
+      "terms_url",
+      "privacy_url",
+      // Voice chat (voice handoff, 2026-09-21): an explicit "true" or "false"; absent means on.
+      "voice_enabled",
+      // The GPT-Live voice (voice picker, 2026-09-22): an id from VOICE_OPTIONS; absent = default.
+      "voice_name",
+      // AI cost cap (BJ-139), set on the Operator page; env overrides, defaults in ingest/allowance.
+      "ai_contingent",
+      // "on" | "off": monthly contingent per workspace (default on in SaaS)
+      "ai_free_monthly_usd",
+      // Free workspace, USD per month
+      "ai_team_seat_monthly_usd",
+      // Team, USD per seat and month (applies once licenses exist)
+      "ai_operator_exempt",
+      // "true" | "false": operator accounts are never capped
+      "ai_daily_budget_usd",
+      // the instance's emergency brake on the company key; empty = off
+      "ai_budget_released_day",
+      // YYYY-MM-DD the operator lifted today's brake
+      "ai_budget_alerted_day",
+      // YYYY-MM-DD the operator was told the brake tripped
+      // Health alarms (BJ-143): the thresholds on the Operator page; empty = default, "0" = off.
+      "alert_queue_minutes",
+      // a runnable job waited longer than this
+      "alert_failure_percent",
+      // share of the last hour's finished jobs that failed
+      "alert_budget_percent",
+      // share of the daily AI budget spent
+      "alert_provider_percent",
+      // a provider limit has less than this share left
+      // The self-host license token (BJ-132), pasted on Operator > Plan; BRAINJAR_LICENSE_TOKEN
+      // overrides. Signed, so it is checked on every read, never trusted as stored.
+      "license_token"
+    ];
+    PROVIDER_KEY_SETTINGS = {
+      anthropic: "anthropic_api_key",
+      openai: "openai_api_key"
+    };
+  }
+});
+
+// packages/db/src/license-key.ts
+var LICENSE_PUBLIC_KEY;
+var init_license_key = __esm({
+  "packages/db/src/license-key.ts"() {
+    "use strict";
+    LICENSE_PUBLIC_KEY = `-----BEGIN PUBLIC KEY-----
+MCowBQYDK2VwAyEAKOUWx/Qgav+dKg78fIlckGby22CRKeuMWR5tkT1rYuw=
+-----END PUBLIC KEY-----
+`;
+  }
+});
+
+// packages/db/src/plan.ts
+import { createPublicKey, sign, verify } from "node:crypto";
+var trustedKeys;
+var init_plan = __esm({
+  "packages/db/src/plan.ts"() {
+    "use strict";
+    init_src();
+    init_pool();
+    init_settings();
+    init_license_key();
+    trustedKeys = [createPublicKey(LICENSE_PUBLIC_KEY)];
+  }
+});
+
 // packages/db/src/repository.ts
 async function getBrain(id, pool2 = getPool()) {
   return (await pool2.query("SELECT * FROM brain WHERE id = $1", [id])).rows[0] ?? null;
@@ -6416,6 +6567,7 @@ var init_repository = __esm({
     init_pool();
     init_audit_origin();
     init_vector();
+    init_plan();
     MO_COLUMNS = "id, brain_id, type, title, body, why, status, confidence, version, created_by, verified_by, created_at, occurred_at, updated_at, last_verified_at";
     MO_COLUMNS_MO = MO_COLUMNS.split(", ").map((c) => `mo.${c}`).join(", ");
     evAgg = (ref) => `(SELECT count(*)::int FROM evidence_link ev WHERE ev.memory_object_id = ${ref}.id) AS evidence_count, (SELECT bool_or(ev.artifact_uri IS NOT NULL AND ev.artifact_uri <> '') FROM evidence_link ev WHERE ev.memory_object_id = ${ref}.id) AS evidence_uri`;
@@ -7808,6 +7960,7 @@ var init_auth = __esm({
     "use strict";
     init_src();
     init_pool();
+    init_plan();
     init_ratelimit();
     init_auth_event();
     init_email_token();
@@ -7877,6 +8030,7 @@ var init_team = __esm({
     "use strict";
     init_pool();
     init_auth();
+    init_plan();
   }
 });
 
@@ -7890,125 +8044,6 @@ var init_rbac = __esm({
   }
 });
 
-// packages/db/src/settings.ts
-function isAppSettingKey(k) {
-  return APP_SETTING_KEYS.includes(k);
-}
-async function getAppSettings(pool2 = getPool()) {
-  const rows = (await pool2.query(
-    "SELECT key, value FROM app_setting"
-  )).rows;
-  const out = {};
-  for (const r of rows) if (isAppSettingKey(r.key)) out[r.key] = r.value;
-  return out;
-}
-async function swapAppSetting(key, value, pool2 = getPool()) {
-  const r = await pool2.query(
-    `INSERT INTO app_setting (key, value) VALUES ($1, $2)
-     ON CONFLICT (tenant_id, key) DO UPDATE SET value = EXCLUDED.value, updated_at = now()
-       WHERE app_setting.value IS DISTINCT FROM EXCLUDED.value
-     RETURNING 1`,
-    [key, value]
-  );
-  return (r.rowCount ?? 0) > 0;
-}
-async function resolveSetting(key, envValue, pool2 = getPool()) {
-  const fromEnv = envValue?.trim();
-  if (fromEnv) return fromEnv;
-  try {
-    return (await getAppSettings(pool2))[key];
-  } catch {
-    return void 0;
-  }
-}
-async function resolveModelChoice(workload, envPin, pool2 = getPool()) {
-  const pin = envPin?.trim();
-  if (pin) return pin;
-  const task = aiTaskOf(workload);
-  if (!task) return void 0;
-  return (await resolveSetting(`model_${task.key}`, void 0, pool2))?.trim() || void 0;
-}
-async function resolveProviderApiKey(provider, envKey, pool2 = getPool()) {
-  const fromEnv = envKey?.trim();
-  if (fromEnv) return fromEnv;
-  try {
-    const r = await pool2.query(
-      "SELECT value FROM app_setting WHERE key = $1",
-      [PROVIDER_KEY_SETTINGS[provider]]
-    );
-    return r.rows[0]?.value?.trim() || null;
-  } catch {
-    return null;
-  }
-}
-var APP_SETTING_KEYS, PROVIDER_KEY_SETTINGS;
-var init_settings = __esm({
-  "packages/db/src/settings.ts"() {
-    "use strict";
-    init_src();
-    init_pool();
-    APP_SETTING_KEYS = [
-      "capture_mode",
-      // transcript privacy: full | distilled | off
-      // The model per AI task (AI_TASKS, 2026-09-25); empty or absent = Recommended.
-      "model_doku",
-      "model_ask",
-      "model_verify",
-      "model_deepscan",
-      "model_extraction",
-      "public_url",
-      // this server's address as clients reach it (wizard command, MCP config)
-      // Outgoing mail (BJ-103); the password is a secret and lives next to the provider keys.
-      "smtp_host",
-      "smtp_port",
-      "smtp_user",
-      "smtp_secure",
-      // "1" = TLS from the start (465), else STARTTLS (587)
-      "mail_from",
-      // Sign in with a provider (BJ-112); the client secrets are secrets, see below.
-      "google_client_id",
-      "github_client_id",
-      // The emergency brake on new accounts (2026-09-26): "true" pauses every sign-up path.
-      "signups_paused",
-      // The legal pages the signup checkbox links to (BJ-113).
-      "terms_url",
-      "privacy_url",
-      // Voice chat (voice handoff, 2026-09-21): an explicit "true" or "false"; absent means on.
-      "voice_enabled",
-      // The GPT-Live voice (voice picker, 2026-09-22): an id from VOICE_OPTIONS; absent = default.
-      "voice_name",
-      // AI cost cap (BJ-139), set on the Operator page; env overrides, defaults in ingest/allowance.
-      "ai_contingent",
-      // "on" | "off": monthly contingent per workspace (default on in SaaS)
-      "ai_free_monthly_usd",
-      // Free workspace, USD per month
-      "ai_team_seat_monthly_usd",
-      // Team, USD per seat and month (applies once licenses exist)
-      "ai_operator_exempt",
-      // "true" | "false": operator accounts are never capped
-      "ai_daily_budget_usd",
-      // the instance's emergency brake on the company key; empty = off
-      "ai_budget_released_day",
-      // YYYY-MM-DD the operator lifted today's brake
-      "ai_budget_alerted_day",
-      // YYYY-MM-DD the operator was told the brake tripped
-      // Health alarms (BJ-143): the thresholds on the Operator page; empty = default, "0" = off.
-      "alert_queue_minutes",
-      // a runnable job waited longer than this
-      "alert_failure_percent",
-      // share of the last hour's finished jobs that failed
-      "alert_budget_percent",
-      // share of the daily AI budget spent
-      "alert_provider_percent"
-      // a provider limit has less than this share left
-    ];
-    PROVIDER_KEY_SETTINGS = {
-      anthropic: "anthropic_api_key",
-      openai: "openai_api_key"
-    };
-  }
-});
-
 // packages/db/src/jobs.ts
 async function enqueueJob(brainId, kind, payload = {}, opts = {}, pool2 = getPool()) {
   const key = opts.dedupeKey ?? "";
@@ -8319,6 +8354,7 @@ var init_src2 = __esm({
     init_jobs();
     init_health();
     init_spend();
+    init_plan();
     init_provider_rate();
     init_ruleset();
     init_usage();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "brainjar",
-  "version": "0.3.1220",
+  "version": "0.3.1222",
   "description": "BrainJar CLI: turn a repository into a live, self-documenting Brain.",
   "type": "module",
   "bin": {