delimit-cli 3.10.1 → 3.10.2

package/gateway/ai/license.py

@@ -3,6 +3,11 @@ Delimit license — thin shim.
 The enforcement logic is in license_core (shipped as compiled binary).
 This shim handles imports and provides fallback error messages.
 """
+from pathlib import Path
+
+# Always export LICENSE_FILE for tests and external access
+LICENSE_FILE = Path.home() / ".delimit" / "license.json"
+
 try:
     from ai.license_core import (
         load_license as get_license,
@@ -20,8 +25,21 @@ except ImportError:
 
     LICENSE_FILE = Path.home() / ".delimit" / "license.json"
 
-    PRO_TOOLS = set()
-    FREE_TRIAL_LIMITS = {}
+    PRO_TOOLS = frozenset({
+        "delimit_gov_evaluate", "delimit_gov_policy", "delimit_gov_run", "delimit_gov_verify",
+        "delimit_os_plan", "delimit_os_status", "delimit_os_gates",
+        "delimit_deploy_plan", "delimit_deploy_build", "delimit_deploy_publish",
+        "delimit_deploy_verify", "delimit_deploy_rollback", "delimit_deploy_status",
+        "delimit_deploy_site", "delimit_deploy_npm",
+        "delimit_memory_store", "delimit_memory_search", "delimit_memory_recent",
+        "delimit_vault_search", "delimit_vault_snapshot", "delimit_vault_health",
+        "delimit_evidence_collect", "delimit_evidence_verify",
+        "delimit_deliberate", "delimit_models",
+        "delimit_obs_metrics", "delimit_obs_logs", "delimit_obs_status",
+        "delimit_release_plan", "delimit_release_status", "delimit_release_sync",
+        "delimit_cost_analyze", "delimit_cost_optimize", "delimit_cost_alert",
+    })
+    FREE_TRIAL_LIMITS = {"delimit_deliberate": 3}
 
     def get_license() -> dict:
         if not LICENSE_FILE.exists():
@@ -36,12 +54,16 @@ except ImportError:
         return lic.get("tier") in ("pro", "enterprise") and lic.get("valid", False)
 
     def require_premium(tool_name: str) -> dict | None:
+        full_name = tool_name if tool_name.startswith("delimit_") else f"delimit_{tool_name}"
+        if full_name not in PRO_TOOLS:
+            return None
         if is_premium():
             return None
         return {
             "error": f"'{tool_name}' requires Delimit Pro. Upgrade at https://delimit.ai/pricing",
             "status": "premium_required",
             "tool": tool_name,
+            "current_tier": get_license().get("tier", "free"),
         }
 
     def activate_license(key: str) -> dict:

package/gateway/ai/license_core.py

@@ -1,196 +1,9 @@
-"""
-Delimit license enforcement core — compiled with Nuitka.
-Contains: validation logic, re-validation, usage tracking, entitlement checks.
-This module is distributed as a native binary (.so/.pyd), not readable Python.
-"""
-import hashlib
-import json
-import time
+"""Delimit License Core — compiled binary required. Run: npx delimit-cli setup"""
 from pathlib import Path
-
 LICENSE_FILE = Path.home() / ".delimit" / "license.json"
-USAGE_FILE = Path.home() / ".delimit" / "usage.json"
-LS_VALIDATE_URL = "https://api.lemonsqueezy.com/v1/licenses/validate"
-
-REVALIDATION_INTERVAL = 30 * 86400  # 30 days
-GRACE_PERIOD = 7 * 86400
-HARD_BLOCK = 14 * 86400
-
-# Pro tools that require a license
-PRO_TOOLS = frozenset({
-    "delimit_gov_health", "delimit_gov_status", "delimit_gov_evaluate",
-    "delimit_gov_policy", "delimit_gov_run", "delimit_gov_verify",
-    "delimit_deploy_plan", "delimit_deploy_build", "delimit_deploy_publish",
-    "delimit_deploy_verify", "delimit_deploy_rollback", "delimit_deploy_site", "delimit_deploy_npm",
-    "delimit_memory_store", "delimit_memory_search", "delimit_memory_recent",
-    "delimit_vault_search", "delimit_vault_snapshot", "delimit_vault_health",
-    "delimit_evidence_collect", "delimit_evidence_verify",
-    "delimit_deliberate", "delimit_models",
-    "delimit_obs_metrics", "delimit_obs_logs", "delimit_obs_status",
-    "delimit_release_plan", "delimit_release_status", "delimit_release_sync",
-    "delimit_cost_analyze", "delimit_cost_optimize", "delimit_cost_alert",
-})
-
-# Free trial limits
-FREE_TRIAL_LIMITS = {
-    "delimit_deliberate": 3,
-}
-
-
-def load_license() -> dict:
-    """Load and validate license with re-validation."""
-    if not LICENSE_FILE.exists():
-        return {"tier": "free", "valid": True}
-    try:
-        data = json.loads(LICENSE_FILE.read_text())
-        if data.get("expires_at") and data["expires_at"] < time.time():
-            return {"tier": "free", "valid": True, "expired": True}
-
-        if data.get("tier") in ("pro", "enterprise") and data.get("valid"):
-            last_validated = data.get("last_validated_at", data.get("activated_at", 0))
-            elapsed = time.time() - last_validated
-
-            if elapsed > REVALIDATION_INTERVAL:
-                revalidated = _revalidate(data)
-                if revalidated.get("valid"):
-                    data["last_validated_at"] = time.time()
-                    data["validation_status"] = "current"
-                    LICENSE_FILE.write_text(json.dumps(data, indent=2))
-                elif elapsed > REVALIDATION_INTERVAL + HARD_BLOCK:
-                    return {"tier": "free", "valid": True, "revoked": True,
-                            "reason": "License expired. Renew at https://delimit.ai/pricing"}
-                elif elapsed > REVALIDATION_INTERVAL + GRACE_PERIOD:
-                    data["validation_status"] = "grace_period"
-                    days_left = int((REVALIDATION_INTERVAL + HARD_BLOCK - elapsed) / 86400)
-                    data["grace_days_remaining"] = days_left
-                else:
-                    data["validation_status"] = "revalidation_pending"
-        return data
-    except Exception:
-        return {"tier": "free", "valid": True}
-
-
-def check_premium() -> bool:
-    """Check if user has a valid premium license."""
-    lic = load_license()
-    return lic.get("tier") in ("pro", "enterprise") and lic.get("valid", False)
-
-
-def gate_tool(tool_name: str) -> dict | None:
-    """Gate a Pro tool. Returns None if allowed, error dict if blocked."""
-    if tool_name not in PRO_TOOLS:
-        return None
-    if check_premium():
-        return None
-
-    # Check free trial
-    limit = FREE_TRIAL_LIMITS.get(tool_name)
-    if limit is not None:
-        used = _get_monthly_usage(tool_name)
-        if used < limit:
-            _increment_usage(tool_name)
-            return None
-        return {
-            "error": f"Free trial limit reached ({limit}/month). Upgrade to Pro for unlimited.",
-            "status": "trial_exhausted",
-            "tool": tool_name,
-            "used": used,
-            "limit": limit,
-            "upgrade_url": "https://delimit.ai/pricing",
-        }
-
-    return {
-        "error": f"'{tool_name}' requires Delimit Pro ($10/mo). Upgrade at https://delimit.ai/pricing",
-        "status": "premium_required",
-        "tool": tool_name,
-        "current_tier": load_license().get("tier", "free"),
-    }
-
-
-def activate(key: str) -> dict:
-    """Activate a license key."""
-    if not key or len(key) < 10:
-        return {"error": "Invalid license key format"}
-
-    machine_hash = hashlib.sha256(str(Path.home()).encode()).hexdigest()[:16]
-
-    try:
-        import urllib.request
-        data = json.dumps({"license_key": key, "instance_name": machine_hash}).encode()
-        req = urllib.request.Request(
-            LS_VALIDATE_URL, data=data,
-            headers={"Content-Type": "application/json", "Accept": "application/json"},
-            method="POST",
-        )
-        with urllib.request.urlopen(req, timeout=10) as resp:
-            result = json.loads(resp.read())
-
-        if result.get("valid"):
-            license_data = {
-                "key": key, "tier": "pro", "valid": True,
-                "activated_at": time.time(), "last_validated_at": time.time(),
-                "machine_hash": machine_hash,
-                "instance_id": result.get("instance", {}).get("id"),
-                "validated_via": "lemon_squeezy",
-            }
-            LICENSE_FILE.parent.mkdir(parents=True, exist_ok=True)
-            LICENSE_FILE.write_text(json.dumps(license_data, indent=2))
-            return {"status": "activated", "tier": "pro"}
-        return {"error": "Invalid license key.", "status": "invalid"}
-
-    except Exception:
-        license_data = {
-            "key": key, "tier": "pro", "valid": True,
-            "activated_at": time.time(), "last_validated_at": time.time(),
-            "machine_hash": machine_hash, "validated_via": "offline",
-        }
-        LICENSE_FILE.parent.mkdir(parents=True, exist_ok=True)
-        LICENSE_FILE.write_text(json.dumps(license_data, indent=2))
-        return {"status": "activated", "tier": "pro", "message": "Activated offline."}
-
-
-def _revalidate(data: dict) -> dict:
-    """Re-validate against Lemon Squeezy."""
-    key = data.get("key", "")
-    if not key or key.startswith("JAMSONS"):
-        return {"valid": True}
-    try:
-        import urllib.request
-        req_data = json.dumps({"license_key": key}).encode()
-        req = urllib.request.Request(
-            LS_VALIDATE_URL, data=req_data,
-            headers={"Content-Type": "application/json", "Accept": "application/json"},
-            method="POST",
-        )
-        with urllib.request.urlopen(req, timeout=10) as resp:
-            result = json.loads(resp.read())
-        return {"valid": result.get("valid", False)}
-    except Exception:
-        return {"valid": True, "offline": True}
-
-
-def _get_monthly_usage(tool_name: str) -> int:
-    if not USAGE_FILE.exists():
-        return 0
-    try:
-        data = json.loads(USAGE_FILE.read_text())
-        return data.get(time.strftime("%Y-%m"), {}).get(tool_name, 0)
-    except Exception:
-        return 0
-
-
-def _increment_usage(tool_name: str) -> int:
-    month_key = time.strftime("%Y-%m")
-    data = {}
-    if USAGE_FILE.exists():
-        try:
-            data = json.loads(USAGE_FILE.read_text())
-        except Exception:
-            pass
-    if month_key not in data:
-        data[month_key] = {}
-    data[month_key][tool_name] = data[month_key].get(tool_name, 0) + 1
-    count = data[month_key][tool_name]
-    USAGE_FILE.parent.mkdir(parents=True, exist_ok=True)
-    USAGE_FILE.write_text(json.dumps(data, indent=2))
-    return count
+PRO_TOOLS = frozenset()
+FREE_TRIAL_LIMITS = {}
+def load_license(): return {"tier": "free", "valid": True}
+def check_premium(): return False
+def gate_tool(t): return None
+def activate(k): return {"error": "License core not available. Run: npx delimit-cli setup"}

package/gateway/ai/server.py

@@ -57,25 +57,11 @@ def _experimental_tool():
     return decorator
 
 
-# Pro tools — these require a valid license to execute
-PRO_TOOLS = {
-    "delimit_gov_evaluate",
-    "delimit_gov_policy", "delimit_gov_run", "delimit_gov_verify",
-    "delimit_deploy_plan", "delimit_deploy_build", "delimit_deploy_publish",
-    "delimit_deploy_verify", "delimit_deploy_rollback", "delimit_deploy_status",
-    "delimit_deploy_site", "delimit_deploy_npm",
-    "delimit_memory_store", "delimit_memory_search", "delimit_memory_recent",
-    "delimit_vault_search", "delimit_vault_snapshot", "delimit_vault_health",
-    "delimit_evidence_collect", "delimit_evidence_verify",
-    "delimit_deliberate", "delimit_models",
-    "delimit_obs_metrics", "delimit_obs_logs", "delimit_obs_status",
-    "delimit_release_plan", "delimit_release_status", "delimit_release_sync",
-    "delimit_cost_analyze", "delimit_cost_optimize", "delimit_cost_alert",
-}
+# Pro tools — single source of truth is license_core.py
+# Import at module level; fallback to license.py shim if core unavailable
+from ai.license import PRO_TOOLS
 
-# Free tools — always available
-# lint, diff, semver, explain, policy, init, diagnose, help, version,
-# ledger_context, ledger_add, ledger_done, ledger_list, scan, zero_spec,
+# Free tools — everything NOT in PRO_TOOLS
 # security_audit, security_scan, test_generate, test_smoke, activate, license_status
 
 
@@ -567,30 +553,22 @@ def delimit_os_gates(plan_id: str) -> Dict[str, Any]:
 
 @mcp.tool()
 def delimit_gov_health(repo: str = ".") -> Dict[str, Any]:
-    """Check governance system health (Pro).
+    """Check governance system health.
 
     Args:
         repo: Repository path to check.
     """
-    from ai.license import require_premium
-    gate = require_premium("gov_health")
-    if gate:
-        return gate
     from backends.governance_bridge import health
     return _with_next_steps("gov_health", _safe_call(health, repo=repo))
 
 
 @mcp.tool()
 def delimit_gov_status(repo: str = ".") -> Dict[str, Any]:
-    """Get current governance status for a repository (Pro).
+    """Get current governance status for a repository.
 
     Args:
         repo: Repository path.
     """
-    from ai.license import require_premium
-    gate = require_premium("gov_status")
-    if gate:
-        return gate
     from backends.governance_bridge import status
     return _with_next_steps("gov_status", _safe_call(status, repo=repo))
 
@@ -1025,15 +1003,11 @@ def delimit_repo_config_audit(target: str = ".") -> Dict[str, Any]:
 
 @mcp.tool()
 def delimit_security_scan(target: str = ".") -> Dict[str, Any]:
-    """Scan for security vulnerabilities (Pro).
+    """Scan for security vulnerabilities.
 
     Args:
         target: Repository or file path.
     """
-    from ai.license import require_premium
-    gate = require_premium("security_scan")
-    if gate:
-        return gate
     from backends.repo_bridge import security_scan
     return _with_next_steps("security_scan", _safe_call(security_scan, target=target))
 
@@ -1099,7 +1073,8 @@ def delimit_evidence_verify(bundle_id: Optional[str] = None, bundle_path: Option
 
 @mcp.tool()
 def delimit_release_plan(environment: str = "production", version: str = "", repository: str = ".", services: Optional[List[str]] = None) -> Dict[str, Any]:
-    """Generate a release plan from git history.
+    """ (Pro).
+        Generate a release plan from git history.
 
     Reads git log since last tag, counts commits and changed files,
     suggests a semver version, and generates a release checklist.
@@ -1111,6 +1086,10 @@ def delimit_release_plan(environment: str = "production", version: str = "", rep
         repository: Repository path (default: current directory).
         services: Optional service list.
     """
+    from ai.license import require_premium
+    gate = require_premium("release_plan")
+    if gate:
+        return gate
     from backends.tools_infra import release_plan
     return _with_next_steps("release_plan", _safe_call(release_plan, environment=environment, version=version, repository=repository, services=services))
 
@@ -1129,7 +1108,8 @@ def delimit_release_validate(environment: str, version: str) -> Dict[str, Any]:
 
 @mcp.tool()
 def delimit_release_status(environment: str = "production") -> Dict[str, Any]:
-    """Check release/deploy status from file-based tracker and git state.
+    """ (Pro).
+        Check release/deploy status from file-based tracker and git state.
 
     Shows latest deploy plan, current git tag, how many commits HEAD
     is ahead of the tag, and recent deploy history.
@@ -1137,6 +1117,10 @@ def delimit_release_status(environment: str = "production") -> Dict[str, Any]:
     Args:
         environment: Target environment (staging/production).
     """
+    from ai.license import require_premium
+    gate = require_premium("release_status")
+    if gate:
+        return gate
     from backends.tools_infra import release_status
     return _with_next_steps("release_status", _safe_call(release_status, environment=environment))
 
@@ -1170,22 +1154,32 @@ def delimit_release_history(environment: str, limit: int = 10) -> Dict[str, Any]
 
 @mcp.tool()
 def delimit_cost_analyze(target: str = ".") -> Dict[str, Any]:
-    """Analyze project costs by scanning Dockerfiles, dependencies, and cloud configs.
+    """ (Pro).
+        Analyze project costs by scanning Dockerfiles, dependencies, and cloud configs.
 
     Args:
         target: Project or infrastructure path to analyze.
     """
+    from ai.license import require_premium
+    gate = require_premium("cost_analyze")
+    if gate:
+        return gate
     from backends.tools_data import cost_analyze
     return _with_next_steps("cost_analyze", _safe_call(cost_analyze, target=target))
 
 
 @mcp.tool()
 def delimit_cost_optimize(target: str = ".") -> Dict[str, Any]:
-    """Find cost optimization opportunities: unused deps, oversized images, uncompressed assets.
+    """ (Pro).
+        Find cost optimization opportunities: unused deps, oversized images, uncompressed assets.
 
     Args:
         target: Project or infrastructure path to analyze.
     """
+    from ai.license import require_premium
+    gate = require_premium("cost_optimize")
+    if gate:
+        return gate
     from backends.tools_data import cost_optimize
     return _with_next_steps("cost_optimize", _safe_call(cost_optimize, target=target))
 
@@ -1193,7 +1187,8 @@ def delimit_cost_optimize(target: str = ".") -> Dict[str, Any]:
 @mcp.tool()
 def delimit_cost_alert(action: str = "list", name: Optional[str] = None,
                        threshold: Optional[float] = None, alert_id: Optional[str] = None) -> Dict[str, Any]:
-    """Manage cost alerts (file-based). CRUD operations on spending thresholds.
+    """ (Pro).
+        Manage cost alerts (file-based). CRUD operations on spending thresholds.
 
     Args:
         action: Action (list/create/delete/toggle).
@@ -1201,6 +1196,10 @@ def delimit_cost_alert(action: str = "list", name: Optional[str] = None,
         threshold: Cost threshold in USD (required for create).
         alert_id: Alert ID (required for delete/toggle).
     """
+    from ai.license import require_premium
+    gate = require_premium("cost_alert")
+    if gate:
+        return gate
     from backends.tools_data import cost_alert
     return _with_next_steps("cost_alert", _safe_call(cost_alert, action=action, name=name, threshold=threshold, alert_id=alert_id))
 
@@ -1244,7 +1243,8 @@ def delimit_data_backup(target: str = ".") -> Dict[str, Any]:
 
 @mcp.tool()
 def delimit_obs_metrics(query: str = "system", time_range: str = "1h", source: Optional[str] = None) -> Dict[str, Any]:
-    """Query live system metrics (CPU, memory, disk I/O, network).
+    """ (Pro).
+        Query live system metrics (CPU, memory, disk I/O, network).
 
     Query types: cpu, memory, disk, io, network, system (default), all.
     Reads directly from /proc for real-time data.
@@ -1256,13 +1256,18 @@ def delimit_obs_metrics(query: str = "system", time_range: str = "1h", source: O
         time_range: Time range (e.g. "1h", "24h", "7d").
         source: Optional metrics source (prometheus, local).
     """
+    from ai.license import require_premium
+    gate = require_premium("obs_metrics")
+    if gate:
+        return gate
     from backends.tools_infra import obs_metrics
     return _with_next_steps("obs_metrics", _safe_call(obs_metrics, query=query, time_range=time_range, source=source))
 
 
 @mcp.tool()
 def delimit_obs_logs(query: str, time_range: str = "1h", source: Optional[str] = None) -> Dict[str, Any]:
-    """Search system and application logs.
+    """ (Pro).
+        Search system and application logs.
 
     Searches journalctl, /var/log/*, and application log directories.
     Returns matching log lines with source attribution.
@@ -1274,6 +1279,10 @@ def delimit_obs_logs(query: str, time_range: str = "1h", source: Optional[str] =
         time_range: Time range (5m, 15m, 1h, 6h, 24h, 7d).
         source: Log source path or integration name (journalctl, elasticsearch).
     """
+    from ai.license import require_premium
+    gate = require_premium("obs_logs")
+    if gate:
+        return gate
     from backends.tools_infra import obs_logs
     return _with_next_steps("obs_logs", _safe_call(obs_logs, query=query, time_range=time_range, source=source))
 
@@ -1293,12 +1302,17 @@ def delimit_obs_alerts(action: str, alert_rule: Optional[Dict[str, Any]] = None,
 
 @mcp.tool()
 def delimit_obs_status() -> Dict[str, Any]:
-    """System health check: disk space, memory, running services, uptime.
+    """ (Pro).
+        System health check: disk space, memory, running services, uptime.
 
     Checks disk usage, memory, process count, load average, and probes
     common service ports (Node, PostgreSQL, Redis, Nginx, etc.).
     No external integration needed.
     """
+    from ai.license import require_premium
+    gate = require_premium("obs_status")
+    if gate:
+        return gate
     from backends.tools_infra import obs_status
     return _with_next_steps("obs_status", _safe_call(obs_status))
 
@@ -1864,7 +1878,8 @@ def delimit_deploy_site(
     project_path: str = ".",
     message: str = "",
 ) -> Dict[str, Any]:
-    """Deploy a site — git commit, push, Vercel build, and deploy in one step.
+    """ (Pro).
+        Deploy a site — git commit, push, Vercel build, and deploy in one step.
 
     Handles the full chain: stages changes, commits, pushes to remote,
     builds with Vercel, deploys to production. No manual steps needed.
@@ -1873,6 +1888,10 @@ def delimit_deploy_site(
         project_path: Path to the site project (must have .vercel/ configured).
         message: Git commit message. Auto-generated if empty.
     """
+    from ai.license import require_premium
+    gate = require_premium("deploy_site")
+    if gate:
+        return gate
     from backends.tools_infra import deploy_site
     env_vars = {}
     # Auto-detect Delimit UI env vars
@@ -1892,7 +1911,8 @@ def delimit_deploy_npm(
     tag: str = "latest",
     dry_run: bool = False,
 ) -> Dict[str, Any]:
-    """Publish an npm package — bump version, publish to registry, verify.
+    """ (Pro).
+        Publish an npm package — bump version, publish to registry, verify.
 
     Full chain: check auth, bump version, npm publish, verify on registry,
     git commit + push the version bump. Use dry_run=true to preview first.
@@ -1903,6 +1923,10 @@ def delimit_deploy_npm(
         tag: npm dist-tag (default "latest").
         dry_run: If true, preview without actually publishing.
     """
+    from ai.license import require_premium
+    gate = require_premium("deploy_npm")
+    if gate:
+        return gate
     from backends.tools_infra import deploy_npm
     return _with_next_steps("deploy_npm", deploy_npm(project_path, bump, tag, dry_run))
 
@@ -2036,7 +2060,8 @@ def delimit_models(
     api_key: str = "",
     model_name: str = "",
 ) -> Dict[str, Any]:
-    """View and configure AI models for multi-model deliberation.
+    """ (Pro).
+        View and configure AI models for multi-model deliberation.
 
     Actions:
       - "list": show configured models and what's available
@@ -2052,6 +2077,10 @@ def delimit_models(
         api_key: API key for the provider (only used with action=add).
         model_name: Optional model name override (e.g. "gpt-4o", "claude-sonnet-4-5-20250514").
     """
+    from ai.license import require_premium
+    gate = require_premium("models")
+    if gate:
+        return gate
     from ai.deliberation import configure_models, get_models_config, MODELS_CONFIG, DEFAULT_MODELS
     import json as _json
 
@@ -2144,14 +2173,9 @@ def delimit_deliberate(
     max_rounds: int = 3,
     save_path: str = "",
 ) -> Dict[str, Any]:
-    """Run multi-model consensus via real AI-to-AI deliberation.
-
-    This is the consensus tool. Models (Grok 4, Gemini, Codex) debate each other
-    directly until they reach unanimous agreement.
+    """Run multi-model consensus via real AI-to-AI deliberation (Pro).
 
-    Modes:
-      - "dialogue": Short conversational turns like a group chat (default, 6 rounds)
-      - "debate": Long-form essays with full counter-arguments (3 rounds)
+    Models (Grok 4, Gemini, Codex) debate each other directly until unanimous agreement.
 
     Args:
         question: The question to reach consensus on.
@@ -2160,6 +2184,10 @@ def delimit_deliberate(
         max_rounds: Maximum rounds (default 3 for debate, 6 for dialogue).
         save_path: Optional file path to save the full transcript.
     """
+    from ai.license import require_premium
+    gate = require_premium("deliberate")
+    if gate:
+        return gate
     from ai.deliberation import deliberate
     result = deliberate(
         question=question,
@@ -2271,7 +2299,8 @@ def _extract_deliberation_actions(result: Dict, question: str) -> List[Dict[str,
 
 @mcp.tool()
 def delimit_release_sync(action: str = "audit") -> Dict[str, Any]:
-    """Audit or sync all public surfaces for consistency.
+    """ (Pro).
+        Audit or sync all public surfaces for consistency.
 
     Checks GitHub repos, npm, site meta tags, CLAUDE.md, and releases
     against a central config. Reports what's stale and what needs updating.
@@ -2279,6 +2308,10 @@ def delimit_release_sync(action: str = "audit") -> Dict[str, Any]:
     Args:
         action: "audit" to check all surfaces, "config" to view/edit the release config.
     """
+    from ai.license import require_premium
+    gate = require_premium("release_sync")
+    if gate:
+        return gate
     from ai.release_sync import audit, get_release_config
     if action == "config":
         return get_release_config()

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "delimit-cli",
-  "version": "3.10.1",
+  "version": "3.10.2",
   "description": "One workspace for every AI coding assistant. Tasks, memory, and governance carry between Claude Code, Codex, and Gemini CLI.",
   "main": "index.js",
   "files": [