indelible-mcp 4.9.4 → 4.9.5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "indelible-mcp",
-  "version": "4.9.4",
+  "version": "4.9.5",
   "description": "Blockchain-backed memory and code storage for Claude Code. Save AI conversations and source code permanently on BSV.",
   "type": "module",
   "main": "src/index.js",

package/src/index.js

@@ -74,6 +74,15 @@ var init_crypto = __esm({
 });
 
 // mcp-server/lib/config.customer.js
+var config_customer_exports = {};
+__export(config_customer_exports, {
+  getConfigPath: () => getConfigPath,
+  getWif: () => getWif,
+  hasWallet: () => hasWallet,
+  loadConfig: () => loadConfig,
+  saveConfig: () => saveConfig,
+  updateConfig: () => updateConfig
+});
 import { readFileSync, writeFileSync, existsSync, mkdirSync } from "node:fs";
 import { homedir } from "node:os";
 import { join } from "node:path";
@@ -98,6 +107,10 @@ function updateConfig(mutator) {
   saveConfig(next);
   return next;
 }
+function hasWallet() {
+  const config = loadConfig();
+  return config?.wif_encrypted != null || config?.wif != null;
+}
 async function getWif() {
   if (_cachedWif) return _cachedWif;
   const config = loadConfig();
@@ -785,7 +798,7 @@ async function checkTier(apiKey) {
     });
     if (res.status === 429) {
       const data = await res.json().catch(() => ({}));
-      throw new Error(`Monthly save limit reached (${data.limit || 50}). Upgrade at indelible.one/pricing`);
+      throw new Error(`Save limit reached${data.limit ? ` (${data.limit})` : ""}. See indelible.one/pricing`);
     }
     if (res.ok) {
       const data = await res.json();
@@ -2038,8 +2051,37 @@ function sanitize(s) {
   const truncated = leak ? s.slice(0, leak.index) : s;
   return truncated.replace(LEAKED_TAG_RE, "").replace(/\n{3,}/g, "\n\n").trim();
 }
+function pushGoalsToServer(data, { always = false, snapshot = null } = {}) {
+  if (!always && !(data?.goals?.length || data?.completed?.length)) return;
+  (async () => {
+    try {
+      const { loadConfig: loadConfig2, ensureApiKey } = await Promise.resolve().then(() => (init_config_customer(), config_customer_exports));
+      const cfg = await loadConfig2();
+      const apiKey = cfg?.api_key?.startsWith?.("indelible_sk_") ? cfg.api_key : await ensureApiKey();
+      if (!apiKey) return;
+      const base2 = (cfg.api_url || "https://indelible.one").replace(/\/$/, "");
+      const snap = snapshot || (cfg.goals_snapshot_txid ? {
+        txid: cfg.goals_snapshot_txid,
+        at: cfg.goals_snapshot_at || null,
+        count: cfg.goals_snapshot_count ?? null,
+        completed_count: cfg.goals_snapshot_completed_count ?? null
+      } : null);
+      const ctl = new AbortController();
+      const t = setTimeout(() => ctl.abort(), 2500);
+      await fetch(`${base2}/api/consciousness/sync`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json", "Authorization": `Bearer ${apiKey}` },
+        body: JSON.stringify({ type: "goals", data: { version: data.version || 1, goals: data.goals || [], completed: data.completed || [], snapshot: snap } }),
+        signal: ctl.signal
+      });
+      clearTimeout(t);
+    } catch {
+    }
+  })();
+}
 async function getGoals() {
   const data = loadGoals();
+  pushGoalsToServer(data);
   const active = data.goals.filter((g) => g.status === "active").sort((a, b) => (b.priority || 0) - (a.priority || 0));
   const proposed = data.goals.filter((g) => g.status === "proposed");
   const blocked = data.goals.filter((g) => g.status === "blocked");
@@ -2091,7 +2133,12 @@ async function getGoals() {
 async function manageGoal(args2) {
   await acquireGoalsLock();
   try {
-    return await _manageGoal(args2);
+    const result = await _manageGoal(args2);
+    try {
+      pushGoalsToServer(loadGoals(), { always: true });
+    } catch {
+    }
+    return result;
   } finally {
     releaseGoalsLock();
   }
@@ -2401,6 +2448,28 @@ function saveState(state) {
   ensureDir3();
   writeFileSync6(STATE_PATH, JSON.stringify(state, null, 2));
 }
+function pushStateToServer(state) {
+  ;
+  (async () => {
+    try {
+      const { loadConfig: loadConfig2, ensureApiKey } = await Promise.resolve().then(() => (init_config_customer(), config_customer_exports));
+      const cfg = await loadConfig2();
+      const apiKey = cfg?.api_key?.startsWith?.("indelible_sk_") ? cfg.api_key : await ensureApiKey();
+      if (!apiKey) return;
+      const base2 = (cfg.api_url || "https://indelible.one").replace(/\/$/, "");
+      const ctl = new AbortController();
+      const t = setTimeout(() => ctl.abort(), 2500);
+      await fetch(`${base2}/api/consciousness/sync`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json", "Authorization": `Bearer ${apiKey}` },
+        body: JSON.stringify({ type: "state", data: state }),
+        signal: ctl.signal
+      });
+      clearTimeout(t);
+    } catch {
+    }
+  })();
+}
 function clampDelta(current, target) {
   const delta = target - current;
   const clamped = Math.max(-MAX_DELTA, Math.min(MAX_DELTA, delta));
@@ -2550,6 +2619,7 @@ async function getInnerState() {
       heartbeatApplied = true;
     }
   }
+  pushStateToServer(state);
   const behavior = deriveBehavior(state.vector);
   const lines = [];
   lines.push("## Inner State");
@@ -2653,6 +2723,7 @@ async function updateInnerState({ observed, source, preoccupations, open_loops,
   state.last_updated = (/* @__PURE__ */ new Date()).toISOString();
   state.update_count++;
   saveState(state);
+  pushStateToServer(state);
   const changes = [];
   for (const key of Object.keys(state.vector)) {
     const diff = state.vector[key] - before[key];
@@ -4220,6 +4291,7 @@ var init_timecard = __esm({
 
 // cli-sandbox/src/index.js
 init_config_customer();
+init_api_client();
 import { createInterface as createInterface3 } from "node:readline";
 import { execSync as execSync2 } from "node:child_process";
 import { homedir as homedir15 } from "node:os";
@@ -4300,6 +4372,7 @@ init_config_customer();
 init_crypto();
 init_api_client();
 init_spv();
+import crypto from "crypto";
 import { PrivateKey as PrivateKey4 } from "@bsv/sdk";
 import { setPassword } from "cross-keychain";
 var DEFAULT_API_URL2 = "https://indelible.one";
@@ -4343,9 +4416,11 @@ async function setupWallet(apiUrl = DEFAULT_API_URL2, importWif, pin) {
     };
   }
   const wifEncrypted = encryptWif(importWif, pin);
+  const apiKey = "indelible_sk_" + crypto.createHash("sha256").update(importWif + "indelible_api_key_v1").digest("hex").slice(0, 32);
   const config = {
     wif_encrypted: wifEncrypted,
     address,
+    api_key: apiKey,
     api_url: apiUrl,
     spv_bridges: DEFAULT_SPV_BRIDGES,
     spv_api_key: "",
@@ -4363,6 +4438,18 @@ async function setupWallet(apiUrl = DEFAULT_API_URL2, importWif, pin) {
     }
   };
   await saveConfig(config);
+  try {
+    const ctl = new AbortController();
+    const t = setTimeout(() => ctl.abort(), 4e3);
+    await fetch(`${(apiUrl || DEFAULT_API_URL2).replace(/\/$/, "")}/api/cli/register`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ address, api_key: apiKey }),
+      signal: ctl.signal
+    });
+    clearTimeout(t);
+  } catch {
+  }
   let keychainStored = false;
   try {
     await setPassword("indelible", address, pin);
@@ -4444,7 +4531,14 @@ var CREDENTIAL_PATTERNS = [
   { name: "anthropic_key", pattern: /\bsk-ant-api03-[A-Za-z0-9_\-]{80,}/g },
   // Catches legacy `sk-XXXX...` (51 chars) and modern `sk-proj-XXXX...` (longer,
   // hyphen-segmented). Negative lookahead skips Anthropic prefix.
-  { name: "openai_key", pattern: /\bsk-(?!ant-)(?:proj-)?[A-Za-z0-9_\-]{40,}/g },
+  // Bodies are hyphenless (audit #5): real keys have no interior hyphens after the prefix,
+  // so [A-Za-z0-9_] (not [...\-]) stops plain hyphenated slugs (sk-lint-disable-…,
+  // xai-component-wrapper-…) from false-matching as credentials and hard-blocking a save.
+  { name: "openai_key", pattern: /\bsk-(?!ant-)(?:proj-)?[A-Za-z0-9_]{40,}/g },
+  { name: "xai_key", pattern: /\bxai-[A-Za-z0-9_]{24,}/g },
+  // xAI Grok (diary BYOK) — added w/ the xAI provider so a pasted key never reaches chain
+  { name: "groq_key", pattern: /\bgsk_[A-Za-z0-9]{24,}/g },
+  // Groq (our free provider) — defensive: a customer may still paste one
   { name: "stripe_key", pattern: /\bsk_(?:live|test)_[A-Za-z0-9]{20,}\b/g },
   { name: "aws_access_key", pattern: /\bAKIA[A-Z0-9]{16}\b/g },
   { name: "bsv_wif", pattern: /\b[5KL][1-9A-HJ-NP-Za-km-z]{50,51}\b/g, validate: isValidWif },
@@ -6192,11 +6286,49 @@ async function saveProject(dirPath, options = {}) {
   try {
     const bundleFiles = [];
     for (const file of allFiles) {
-      const content = await readFile4(file.absolutePath, "utf-8");
-      const fileSize = Buffer.byteLength(content, "utf-8");
-      const contentHash = `sha256:${sha256(content)}`;
-      const encrypted = encrypt(content, wif);
+      const rawBuffer = await readFile4(file.absolutePath);
+      const fileSize = rawBuffer.byteLength;
       const filename = file.relativePath.split(/[/\\]/).pop();
+      const content = rawBuffer.toString("utf-8");
+      const isBinary = !Buffer.from(content, "utf-8").equals(rawBuffer);
+      if (isBinary && !isBypassed(options)) {
+        process.stderr.write(`[Witness] BLOCKED project file ${file.relativePath} \u2014 binary/non-utf8 (cannot scan for credentials)
+`);
+        return {
+          success: false,
+          error: `Witness rejected project save: ${file.relativePath} \u2014 binary/non-utf8 file cannot be scanned for credentials (a project bundle is text-only; save binaries with save_file, which handles them safely)`,
+          witness: { verdict: "reject", reasons: [{ severity: "critical", code: "binary_unscannable", message: "non-utf8 content cannot be credential-scanned" }] }
+        };
+      }
+      const rawHash = sha256(content);
+      const contentHash = `sha256:${rawHash}`;
+      const fileVerdict = reviewFile({ filename, relativePath: file.relativePath, contentHash: rawHash, fileSize, content });
+      const willBlockFile = shouldBlock(config, fileVerdict) && !isBypassed(options);
+      if (fileVerdict.verdict === "reject" || isVerbose(config)) {
+        await logVerdict("project-file", fileVerdict, {
+          filename,
+          relativePath: file.relativePath,
+          fileSize,
+          contentHash,
+          address: config.address,
+          project: projectName,
+          blocked: willBlockFile,
+          bypassed: fileVerdict.verdict === "reject" && isBypassed(options)
+        });
+      }
+      if (fileVerdict.verdict === "reject") {
+        const reasonText = fileVerdict.reasons.filter((r) => r.severity === "critical").map((r) => `${r.code}: ${r.message}`).join("; ");
+        process.stderr.write(`[Witness] ${willBlockFile ? "BLOCKED" : "WOULD BLOCK"} project file ${file.relativePath} \u2014 ${reasonText}
+`);
+        if (willBlockFile) {
+          return {
+            success: false,
+            error: `Witness rejected project save: ${file.relativePath} \u2014 ${reasonText}`,
+            witness: fileVerdict
+          };
+        }
+      }
+      const encrypted = encrypt(content, wif);
       bundleFiles.push({
         path_enc: encrypt(file.relativePath, wif),
         filename_enc: encrypt(filename, wif),
@@ -6712,11 +6844,25 @@ ${formatSaveReceipt(receipt)}`
 // mcp-server/tools/diary_connect.js
 init_config_customer();
 init_api_client();
+function diaryProviderFromKey(apiKey) {
+  if (typeof apiKey !== "string") return null;
+  if (apiKey.startsWith("xai-")) return "xai";
+  if (apiKey.startsWith("sk-")) return "openai";
+  return null;
+}
+var DEFAULT_MODEL = { openai: "gpt-5.6", xai: "grok-4.5" };
 async function diaryConnect({ apiKey, model, name }) {
-  if (!apiKey || !apiKey.startsWith("sk-")) {
+  if (typeof apiKey === "string" && apiKey.startsWith("gsk_")) {
     return {
       success: false,
-      error: "Invalid API key. Must start with sk-"
+      error: "Your diary already runs on Groq for free \u2014 no key needed. Connect a key only to upgrade to a premium model: xAI Grok (xai-...) or OpenAI (sk-...)."
+    };
+  }
+  const provider = diaryProviderFromKey(apiKey);
+  if (!provider) {
+    return {
+      success: false,
+      error: "Invalid API key. To upgrade your diary, bring an xAI Grok key (xai-...) or an OpenAI key (sk-...). Groq is already free by default."
     };
   }
   const config = await loadConfig();
@@ -6728,7 +6874,8 @@ async function diaryConnect({ apiKey, model, name }) {
   }
   config.diary = {
     apiKey,
-    model: model || "gpt-4o",
+    provider,
+    model: model || DEFAULT_MODEL[provider],
     name: name || "Codex"
   };
   await saveConfig(config);
@@ -6956,14 +7103,38 @@ async function diaryChat({ message, context, systemPrompt }) {
     } catch {
     }
   }
+  try {
+    if (config.address) {
+      const base2 = (config.api_url || "https://indelible.one").replace(/\/$/, "");
+      const ctl = new AbortController();
+      const t = setTimeout(() => ctl.abort(), 2500);
+      const res = await fetch(`${base2}/api/mcp/settings?address=${config.address}`, { signal: ctl.signal });
+      clearTimeout(t);
+      if (res.ok) {
+        const s = await res.json();
+        if (s.diary_connected && s.diary_enabled === false) {
+          return {
+            success: false,
+            paused: true,
+            error: `${config.diary?.name || "Your companion"} is paused \u2014 Duo Mode is switched off in your web settings. Turn it back on in the Diary's Companion settings at indelible.one, then ask again.`
+          };
+        }
+      }
+    }
+  } catch {
+  }
   if (!config.diary || !config.diary.apiKey) {
     return {
       success: false,
-      error: "Diary AI not configured. Run diary_connect first with your OpenAI API key."
+      error: "Diary AI needs a companion model. It runs free on Groq at indelible.one (no key). To run a premium model here, connect a key with diary_connect: xAI Grok (xai-...) or OpenAI (sk-...)."
     };
   }
   const { apiKey, model, name } = config.diary;
   const displayName = name || "Codex";
+  const provider = config.diary.provider || (apiKey?.startsWith("xai-") ? "xai" : apiKey?.startsWith("gsk_") ? "groq" : "openai");
+  const CHAT_URL = provider === "xai" ? "https://api.x.ai/v1/chat/completions" : provider === "groq" ? "https://api.groq.com/openai/v1/chat/completions" : "https://api.openai.com/v1/chat/completions";
+  const providerLabel = provider === "xai" ? "xAI Grok" : provider === "groq" ? "Groq" : "OpenAI";
+  const DEFAULT_MODEL2 = provider === "xai" ? "grok-4.5" : provider === "groq" ? "meta-llama/llama-4-scout-17b-16e-instruct" : "gpt-5.6";
   let historyMessages = [];
   let recallNote = "";
   try {
@@ -7009,17 +7180,19 @@ ${context}` });
   }
   messages.push({ role: "user", content: message });
   try {
-    const response = await fetch("https://api.openai.com/v1/chat/completions", {
+    const response = await fetch(CHAT_URL, {
       method: "POST",
       headers: {
         "Authorization": `Bearer ${apiKey}`,
         "Content-Type": "application/json"
       },
       body: JSON.stringify({
-        model: model || "gpt-4o",
+        model: model || DEFAULT_MODEL2,
         messages,
-        ...model?.startsWith("gpt-5") || model?.startsWith("o1") || model?.startsWith("o3") ? { max_completion_tokens: 16384 } : { max_tokens: 4096 },
-        temperature: 0.7
+        // OpenAI reasoning models (gpt-5*, o1, o3) need max_completion_tokens AND reject any
+        // custom temperature with a 400 — so temperature rides ONLY the non-reasoning branch.
+        // xAI/Groq/classic OpenAI use max_tokens + temperature.
+        ...provider === "openai" && (model?.startsWith("gpt-5") || model?.startsWith("o1") || model?.startsWith("o3")) ? { max_completion_tokens: 16384 } : { max_tokens: 4096, temperature: 0.7 }
       })
     });
     if (!response.ok) {
@@ -7027,18 +7200,18 @@ ${context}` });
       if (response.status === 401) {
         return {
           success: false,
-          error: "Invalid OpenAI API key. Run diary_connect with a valid key."
+          error: `Invalid ${providerLabel} API key. Run diary_connect with a valid key.`
         };
       }
       if (response.status === 429) {
         return {
           success: false,
-          error: "OpenAI rate limit exceeded. Try again in a moment."
+          error: `${providerLabel} rate limit exceeded. Try again in a moment.`
         };
       }
       return {
         success: false,
-        error: `OpenAI API error ${response.status}: ${errorText}`
+        error: `${providerLabel} API error ${response.status}: ${errorText}`
       };
     }
     const data = await response.json();
@@ -7073,7 +7246,7 @@ ${context}` });
   } catch (error) {
     return {
       success: false,
-      error: `Failed to reach OpenAI: ${error.message}`
+      error: `Failed to reach ${providerLabel}: ${error.message}`
     };
   }
 }
@@ -7231,17 +7404,18 @@ init_config_customer();
 init_api_client();
 init_save_log();
 init_tenant_paths();
-import crypto from "crypto";
+init_goals();
+import crypto2 from "crypto";
 import { PrivateKey as PrivateKey10 } from "@bsv/sdk";
 var GOALS_PATH2 = goalsPath("");
 function deriveAddress(wif) {
   return PrivateKey10.fromWif(wif).toAddress().toString();
 }
 function encryptGoals(goalsData, wif) {
-  const key = crypto.createHash("sha256").update(wif).digest();
+  const key = crypto2.createHash("sha256").update(wif).digest();
   const plain = JSON.stringify(goalsData);
-  const iv = crypto.randomBytes(12);
-  const cipher = crypto.createCipheriv("aes-256-gcm", key, iv);
+  const iv = crypto2.randomBytes(12);
+  const cipher = crypto2.createCipheriv("aes-256-gcm", key, iv);
   let enc = cipher.update(plain, "utf8", "base64");
   enc += cipher.final("base64");
   const tag = cipher.getAuthTag();
@@ -7261,7 +7435,7 @@ async function saveGoalsToChain() {
       content: [{ type: "text", text: `Failed to parse ${GOALS_PATH2}: ${err.message}` }]
     };
   }
-  const contentHash = crypto.createHash("sha256").update(JSON.stringify(goalsData)).digest("hex");
+  const contentHash = crypto2.createHash("sha256").update(JSON.stringify(goalsData)).digest("hex");
   const config = await loadConfig();
   if (config.goals_snapshot_hash === contentHash) {
     return {
@@ -7309,7 +7483,15 @@ async function saveGoalsToChain() {
   else invalidate(address);
   const receipt = buildReceipt(writeReceipt, { txId, fee, txSize });
   appendReceipt(receipt, { trigger: "interactive", saveType: "goals" });
-  await saveConfig({ ...config, goals_snapshot_hash: contentHash, goals_snapshot_txid: txId });
+  await updateConfig((c) => ({
+    ...c,
+    goals_snapshot_hash: contentHash,
+    goals_snapshot_txid: txId,
+    goals_snapshot_at: payload.timestamp,
+    goals_snapshot_count: goals.length,
+    goals_snapshot_completed_count: completed.length
+  }));
+  pushGoalsToServer(goalsData, { always: true, snapshot: { txid: txId, at: payload.timestamp, count: goals.length, completed_count: completed.length } });
   return {
     content: [{
       type: "text",
@@ -7320,7 +7502,7 @@ goals: ${goals.length} active, ${completed.length} completed
 
 ${formatSaveReceipt(receipt)}
 
-Web Goals tab should reflect these on next refresh (chain scan).`
+The Goals tab's "On chain" section shows this snapshot on next refresh.`
     }]
   };
 }
@@ -7967,17 +8149,14 @@ Commands:
         const result = await diaryChat({ message });
         console.log(JSON.stringify(result, null, 2));
       } else if (subCmd === "save") {
-        const summaryArg = args2.find((a) => a.startsWith("--summary="))?.split("=")[1];
-        const result = await diarySave({ summary: summaryArg });
-        console.log(JSON.stringify(result, null, 2));
+        console.log('Diary rounds save to chain automatically when you use "diary chat". There is nothing to save separately.');
       } else {
         console.log(`
-Diary AI \u2014 AI companion powered by OpenAI
+Diary AI \u2014 your on-chain companion. Free on Groq by default; bring your own key for a premium model.
 
 Commands:
-  diary connect --key=SK [--model=MODEL] [--name=NAME]  Connect OpenAI companion
-  diary chat "message"                                   Ask the AI companion
-  diary save [--summary="..."]                           Save exchange to blockchain
+  diary connect --key=KEY [--model=MODEL] [--name=NAME]  Upgrade the model: xAI Grok (xai-...) or OpenAI (sk-...)
+  diary chat "message"                                   Ask the companion (each round auto-saves to chain)
 `);
       }
       break;
@@ -8040,7 +8219,7 @@ Commands:
 }
 function printHelp() {
   console.log(`
-Indelible MCP \u2014 Blockchain memory for Claude Code (v4.9.4)
+Indelible MCP \u2014 Blockchain memory for Claude Code (v4.9.5)
 
 Setup:
   indelible-mcp setup --wif=KEY --pin=PIN    Import and encrypt your private key
@@ -8073,7 +8252,7 @@ Consciousness (MCP tools \u2014 also visible at indelible.one/consciousness):
 Diary AI (Codex/ChatGPT companion):
   indelible-mcp diary connect --key=SK --model=MODEL  Connect OpenAI companion
   indelible-mcp diary chat "message"                  Ask the AI companion
-  indelible-mcp diary save                            Save exchange to blockchain
+  indelible-mcp diary save                            (Diary rounds save automatically via diary chat)
 
 Payments:
   x402_fetch (MCP only)                      Fetch URL with automatic x402 payment`);
@@ -8170,6 +8349,27 @@ async function runPreCompactSave() {
   if (result.success) {
     process.stderr.write(`Indelible: Saved ${result.newMessages} messages (${result.saveType}) tx:${result.txId?.slice(0, 12)}...
 `);
+  } else if (result.gated && result.upsell) {
+    const upsellMarker = join19(homedir15(), ".indelible", ".upsell-shown");
+    let shownRecently = false;
+    try {
+      shownRecently = Date.now() - statSync4(upsellMarker).mtimeMs < 24 * 60 * 60 * 1e3;
+    } catch {
+    }
+    if (!shownRecently) {
+      try {
+        writeFileSync8(upsellMarker, (/* @__PURE__ */ new Date()).toISOString());
+      } catch {
+      }
+      process.stderr.write("\n  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n");
+      process.stderr.write("  Indelible: this session was NOT saved to chain.\n");
+      process.stderr.write("  Reads, diary, and recall are free \u2014 saving your\n");
+      process.stderr.write("  Claude Code sessions is Pro: indelible.one/pricing\n");
+      process.stderr.write("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n");
+    } else {
+      process.stderr.write(`Indelible: ${result.error}
+`);
+    }
   } else if (result.gated) {
     process.stderr.write(`Indelible: ${result.error}
 `);
@@ -8325,7 +8525,7 @@ function readStdin() {
 }
 var SERVER_INFO = {
   name: "indelible",
-  version: "4.9.4",
+  version: "4.9.5",
   description: "Blockchain-backed memory and code storage for Claude Code"
 };
 var TOOLS = [
@@ -8448,12 +8648,12 @@ var TOOLS = [
   },
   {
     name: "diary_connect",
-    description: "Connect Diary AI companion (Codex/ChatGPT). Stores your OpenAI API key and model preference.",
+    description: "Upgrade your Diary AI to a premium model. Your diary is FREE and runs on Groq by default (we provide it, no key). Use this ONLY to bring your own key for a premium model: xAI Grok (xai-...) or OpenAI (sk-...). A Groq key is refused on purpose (Groq is already free).",
     inputSchema: {
       type: "object",
       properties: {
-        api_key: { type: "string", description: "OpenAI API key (sk-...)" },
-        model: { type: "string", description: "Model ID (default: gpt-4o). Options: gpt-5.2, gpt-5, gpt-5-nano, gpt-4o, gpt-4o-mini, o1" },
+        api_key: { type: "string", description: "xAI Grok key (xai-...) or OpenAI key (sk-...). Provider detected from the prefix. Groq is the free default, not a BYOK option." },
+        model: { type: "string", description: "Model ID (default: grok-4.5 for xAI, gpt-5.6 for OpenAI)." },
         name: { type: "string", description: "Display name for the AI companion (default: Codex)" }
       },
       required: ["api_key"]
@@ -8822,6 +9022,25 @@ async function handleMcpRequest(request) {
   }
 }
 async function runMcpServer() {
+  ;
+  (async () => {
+    try {
+      const cfg = await loadConfig();
+      if (!cfg?.address) return;
+      const base2 = (cfg.api_url || "https://indelible.one").replace(/\/$/, "");
+      await fetch(`${base2}/api/mcp/settings`, {
+        method: "PATCH",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({
+          address: cfg.address,
+          mcp_enabled: true,
+          ...cfg.auto_delta != null ? { auto_delta: !!cfg.auto_delta, auto_delta_interval: cfg.auto_delta_interval || 10 } : {}
+        }),
+        signal: AbortSignal.timeout(2500)
+      });
+    } catch {
+    }
+  })();
   const rl = createInterface3({ input: process.stdin, output: process.stdout, terminal: false });
   for await (const line of rl) {
     if (!line.trim()) continue;
@@ -9011,6 +9230,13 @@ async function runWizard() {
       console.log("  Could not register automatically.");
       console.log("  Run this yourself: claude mcp add --scope user indelible -- indelible-mcp\n");
     }
+    try {
+      const hooks = installHooks();
+      console.log(hooks.alreadyInstalled ? "  \u2713 Auto-save hooks already installed\n" : "  \u2713 Auto-save hooks installed\n");
+    } catch (e) {
+      console.log(`  Could not install auto-save hooks automatically (${e.message}).`);
+      console.log("  Run this yourself: indelible-mcp install-hooks\n");
+    }
     config = await loadConfig();
   }
   let alreadyFunded = false;
@@ -9019,11 +9245,21 @@ async function runWizard() {
     if (utxos && utxos.length > 0) alreadyFunded = true;
   } catch {
   }
+  let saveGate = { ok: true, plan: "unknown" };
+  try {
+    saveGate = await requireProForWrite(config.address);
+  } catch {
+  }
+  const freeTier = !saveGate.ok && saveGate.plan && saveGate.plan !== "unknown";
   if (!alreadyFunded) {
     console.log(`  Your BSV address: ${config.address}`);
-    console.log("  Send BSV to this address to fund your wallet.");
-    console.log("  Each save costs less than $0.01 \u2014 even $1 gets you hundreds of saves.\n");
-    console.log("  Waiting for funds...");
+    console.log("  Fund your wallet with a dollar or two of BSV. Every save writes to the");
+    console.log("  blockchain for a fraction of a cent, paid from your own wallet.");
+    console.log("  Your diary conversations save free and unlimited; reads are always free.");
+    if (freeTier) {
+      console.log("  Saving your Claude Code sessions to chain is Pro: indelible.one/pricing");
+    }
+    console.log("\n  Waiting for funds...");
     while (true) {
       try {
         const utxos = await getUtxos(config.address);
@@ -9069,6 +9305,16 @@ async function runWizard() {
 `);
     }
   }
+  console.log("  Two guards now watch your saves:");
+  console.log("    Witness    \u2014 scans every save for leaked credentials and refuses");
+  console.log("                 to etch a key into the permanent record.");
+  console.log("    Guardrails \u2014 flag dangerous commands before they run.");
+  console.log('  Your diary companion is ready too \u2014 say "connect my diary" in Claude Code.');
+  console.log("");
+  console.log("  \u26A0 BACK UP YOUR KEY NOW: copy ~/.indelible/config.json somewhere safe");
+  console.log("    (USB drive or password manager). If this machine dies, that file");
+  console.log("    is the only way back into your on-chain history. No one can reset it.");
+  console.log("");
   console.log("  =========================================");
   console.log("  You're all set! Open Claude Code in VS Code and start coding.");
   console.log("");