delimit-cli 4.5.13 → 4.6.0

package/lib/delimit-template.js

@@ -51,6 +51,17 @@ Non-trivial engineering work routes through in-session subagents, not in-thread
 - **Session end or idle**: call \`delimit_soul_capture\` + \`delimit_session_handoff\`
 - If returning user, summarize what's pending. If new project, call \`delimit_scan\`.
 
+### Memory Rules
+Delimit captures routine code changes from git automatically. You do NOT need to call \`memory_store\` for normal work.
+
+Use \`delimit_memory_store\` when capturing:
+- **Failed approaches** — "tried X, it didn't work because Y" (git only shows what survived, not dead ends)
+- **Architecture decisions** — "chose PostgreSQL over Redis for sessions because Z"
+- **Key context** — customer requirements, API constraints, deployment gotchas
+- **Things that will confuse the next session** — non-obvious setups, workarounds, tech debt
+
+Do NOT store: routine code changes, file lists, commit messages, status updates — these are in git.
+
 ### Code Development (debounced per edit batch)
 - After editing UI/CSS: call \`delimit_design_validate_responsive\`
 - After editing API specs: call \`delimit_lint\` + \`delimit_drift_check\`

package/lib/migration-2092-banner.js

@@ -0,0 +1,213 @@
+// lib/migration-2092-banner.js
+//
+// LED-2095: one-time migration banner shown to existing Free-tier users
+// who have BYOK deliberation configured. Surfaces the LED-2092 / LED-2093
+// gateway behavior change: Free-tier BYOK deliberation is now operationally
+// ephemeral (no persistent transcript, no signed attestation, no replay
+// URL). Pro-tier behavior is unchanged.
+//
+// Trigger conditions (ALL must be true):
+//   1. ~/.delimit/models.json exists with at least one BYOK entry
+//      (entry.enabled === true AND entry.api_key truthy)
+//   2. User is on the Free tier (no Pro/Premium/Enterprise license active
+//      per the same check used by lib/wrap-engine.js)
+//   3. The flag file ~/.delimit/migration_2092.shown does not exist yet
+//
+// On trigger: print the banner to stdout/stderr (caller's choice — we
+// return the banner string and let the caller handle output) and write
+// the flag file with `{ shown_at: ISO8601, version: <package version> }`
+// so the banner never fires again on the same machine.
+//
+// Scope: trigger on the next deliberation-adjacent CLI call (deliberate,
+// models). Do NOT trigger on every CLI call (would be noise). Do NOT
+// trigger for Pro customers (no behavior change for them). Do NOT
+// trigger for Free users without BYOK (they had no transcripts to lose).
+
+const fs = require('fs');
+const path = require('path');
+const { delimitHome, homeSubpath } = require('./delimit-home');
+
+const FLAG_FILE_BASENAME = 'migration_2092.shown';
+const MODELS_CONFIG_BASENAME = 'models.json';
+const LICENSE_FILE_BASENAME = 'license.json';
+
+// Banner copy — locked. No em-dashes (per LED-2095 brief). No founder
+// identity strings. Positive tone. The Pro upsell is a single line at
+// the end with the pricing URL; do not expand without coordinated copy
+// review.
+const BANNER_BODY = [
+    '',
+    'Free deliberations now print to stdout only.',
+    '',
+    'Your existing transcripts under ~/.delimit/memory/deliberations/ are preserved.',
+    'New deliberations on Free tier are ephemeral by design.',
+    '',
+    'Pro turns every deliberation into a signed, replayable attestation',
+    'with 365-day retention: delimit.ai/pricing',
+    '',
+].join('\n');
+
+function flagFilePath() {
+    return homeSubpath(FLAG_FILE_BASENAME);
+}
+
+function modelsConfigPath() {
+    return homeSubpath(MODELS_CONFIG_BASENAME);
+}
+
+function licenseFilePath() {
+    return homeSubpath(LICENSE_FILE_BASENAME);
+}
+
+/**
+ * Detect whether the user has at least one BYOK model entry configured.
+ * Mirrors the truthiness rule used by bin/delimit-cli.js::getModelStatus:
+ * `entry.enabled === true AND entry.api_key truthy`.
+ */
+function hasByokConfigured() {
+    const p = modelsConfigPath();
+    if (!fs.existsSync(p)) return false;
+    let config;
+    try {
+        config = JSON.parse(fs.readFileSync(p, 'utf-8'));
+    } catch {
+        return false;
+    }
+    if (!config || typeof config !== 'object' || Array.isArray(config)) {
+        return false;
+    }
+    for (const entry of Object.values(config)) {
+        if (entry && typeof entry === 'object' && entry.enabled && entry.api_key) {
+            return true;
+        }
+    }
+    return false;
+}
+
+/**
+ * Detect whether the user has an active Pro/Premium/Enterprise license.
+ * Mirrors the rule used by lib/wrap-engine.js::checkQuota — keep these in
+ * lockstep. A missing/malformed license.json means Free.
+ */
+function hasProLicense() {
+    const p = licenseFilePath();
+    if (!fs.existsSync(p)) return false;
+    try {
+        const lic = JSON.parse(fs.readFileSync(p, 'utf-8'));
+        if (lic && lic.valid && ['pro', 'premium', 'enterprise'].includes(lic.tier)) {
+            return true;
+        }
+    } catch {
+        return false;
+    }
+    return false;
+}
+
+/**
+ * Check whether the migration flag file has already been written. Once
+ * written, the banner is suppressed forever on this machine (the file is
+ * the source of truth — even a corrupt JSON body counts as "shown" so a
+ * partially-written flag does not re-trigger the banner).
+ */
+function hasShownBanner() {
+    return fs.existsSync(flagFilePath());
+}
+
+/**
+ * Should the banner trigger right now? All three conditions must hold:
+ * BYOK configured, no Pro license, flag file absent.
+ */
+function shouldShowBanner() {
+    if (hasShownBanner()) return false;
+    if (hasProLicense()) return false;
+    if (!hasByokConfigured()) return false;
+    return true;
+}
+
+/**
+ * Persist the flag file so the banner never fires again. Best-effort:
+ * directory is created at 0700 if missing, file is written at default
+ * mode (no secrets in this file — just a timestamp + version).
+ *
+ * @param {object} [args]
+ * @param {string} [args.now]      ISO8601 override for tests
+ * @param {string} [args.version]  CLI version string
+ */
+function writeShownFlag(args) {
+    const opts = args || {};
+    const home = delimitHome();
+    if (!fs.existsSync(home)) {
+        fs.mkdirSync(home, { recursive: true, mode: 0o700 });
+    }
+    const payload = {
+        shown_at: opts.now || new Date().toISOString(),
+        version: opts.version || resolveCliVersion(),
+        led: 'LED-2095',
+    };
+    const tmpPath = flagFilePath() + '.tmp';
+    fs.writeFileSync(tmpPath, JSON.stringify(payload, null, 2));
+    fs.renameSync(tmpPath, flagFilePath());
+}
+
+function resolveCliVersion() {
+    try {
+        // package.json sits two levels up from lib/migration-2092-banner.js
+        const pkg = require(path.join(__dirname, '..', 'package.json'));
+        return pkg.version || 'unknown';
+    } catch {
+        return 'unknown';
+    }
+}
+
+/**
+ * The exact banner text shown to triggered users. Exposed so tests can
+ * snapshot it without re-running the trigger logic.
+ */
+function bannerText() {
+    return BANNER_BODY;
+}
+
+/**
+ * Composite entry point used by the CLI. If conditions are met, returns
+ * the banner string AND writes the flag file. If conditions are not met,
+ * returns "" and does not touch the filesystem.
+ *
+ * The CLI is responsible for printing the returned string. Returning the
+ * string (rather than printing here) keeps this module side-effect-light
+ * and lets tests assert on the output without capturing stdout.
+ *
+ * @param {object} [args]
+ * @param {string} [args.now]      ISO8601 override for the flag-file
+ *                                 timestamp (deterministic tests)
+ * @param {string} [args.version]  Override the CLI version string
+ * @returns {{ shown: boolean, text: string }}
+ */
+function maybeShowMigrationBanner(args) {
+    if (!shouldShowBanner()) {
+        return { shown: false, text: '' };
+    }
+    try {
+        writeShownFlag(args);
+    } catch {
+        // If we cannot persist the flag, do NOT show the banner —
+        // showing it without persisting would re-fire on every call.
+        return { shown: false, text: '' };
+    }
+    return { shown: true, text: bannerText() };
+}
+
+module.exports = {
+    FLAG_FILE_BASENAME,
+    MODELS_CONFIG_BASENAME,
+    LICENSE_FILE_BASENAME,
+    flagFilePath,
+    modelsConfigPath,
+    licenseFilePath,
+    hasByokConfigured,
+    hasProLicense,
+    hasShownBanner,
+    shouldShowBanner,
+    writeShownFlag,
+    bannerText,
+    maybeShowMigrationBanner,
+};

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "delimit-cli",
   "mcpName": "io.github.delimit-ai/delimit-mcp-server",
-  "version": "4.5.13",
+  "version": "4.6.0",
   "description": "Unify Claude Code, Codex, Cursor, and Gemini CLI with persistent context, governance, and multi-model debate.",
   "main": "index.js",
   "files": [
@@ -56,7 +56,7 @@
     "postinstall": "node scripts/postinstall.js",
     "sync-gateway": "bash scripts/sync-gateway.sh",
     "prepublishOnly": "bash scripts/publish-ci-guard.sh && npm run sync-gateway && bash scripts/build-license-core.sh && bash scripts/security-check.sh",
-    "test": "node --test tests/setup-onboarding.test.js tests/setup-matrix.test.js tests/setup-no-clobber.test.js tests/config-export-import.test.js tests/cross-model-hooks.test.js tests/golden-path.test.js tests/v420-features.test.js tests/v43-wrap-engine.test.js tests/v43-trust-page-engine.test.js tests/v43-ai-sbom-engine.test.js tests/attest-mcp.test.js tests/delimit-home.test.js tests/postinstall-hardening.test.js"
+    "test": "node --test tests/setup-onboarding.test.js tests/setup-matrix.test.js tests/setup-no-clobber.test.js tests/config-export-import.test.js tests/cross-model-hooks.test.js tests/golden-path.test.js tests/v420-features.test.js tests/v43-wrap-engine.test.js tests/v43-trust-page-engine.test.js tests/v43-ai-sbom-engine.test.js tests/attest-mcp.test.js tests/delimit-home.test.js tests/postinstall-hardening.test.js tests/auth-signin.test.js tests/auth-signout.test.js tests/migration-2092-banner.test.js"
   },
   "keywords": [
     "openapi",

package/server.json

@@ -1,19 +1,19 @@
 {
   "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
   "name": "io.github.delimit-ai/delimit-mcp-server",
-  "title": "Delimit — API Governance for AI Coding Assistants",
-  "description": "API governance for AI coding assistants. Breaking changes, policies, cross-model context.",
+  "title": "Delimit — The merge gate for AI-written code",
+  "description": "The merge gate for AI-written code. Cross-vendor adjudication of every AI-assisted merge with a signed, replayable attestation. Persistent ledger and multi-model deliberation across Claude, Codex, Cursor, and Gemini CLI.",
   "repository": {
     "url": "https://github.com/delimit-ai/delimit-mcp-server",
     "source": "github"
   },
-  "version": "4.1.40",
+  "version": "4.5.13",
   "websiteUrl": "https://delimit.ai",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "delimit-cli",
-      "version": "4.1.40",
+      "version": "4.5.13",
       "transport": {
         "type": "stdio"
       }