myagentmemory 0.4.15 → 0.4.17

package/dist/plugin-service.js

@@ -18,29 +18,27 @@ const MISSING_ENTITLEMENT = {
     state: "missing",
     features: [],
     capabilities: {},
-    reason: "Enter an email address to activate the free daily session allowance",
+    reason: "Install the no-account Pro preview to activate local recall and learning",
 };
 function cloneEntitlement(value) {
     return structuredClone(value);
 }
-function freeEntitlement(dailySessionLimit) {
+function freeEntitlement() {
     return {
         plan: "free",
         state: "active",
         features: ["session-intelligence", "web-console"],
         capabilities: {
             "session-index": { enabled: true },
-            "session-worker": {
-                enabled: true,
-                quota: { limit: dailySessionLimit, window: "day", scope: "account" },
-            },
-            learning: { enabled: true },
+            recall: { enabled: true, quota: { limit: 10, window: "day", scope: "device" } },
+            "session-worker": { enabled: false },
+            learning: { enabled: true, quota: { limit: 1, window: "day", scope: "device" } },
             "retrieval-evaluation": { enabled: true },
             "operational-metrics": { enabled: true },
             "web-console": { enabled: true },
             "memory-explorer": { enabled: true },
         },
-        reason: `${dailySessionLimit} free agent sessions per UTC day`,
+        reason: "Free preview: 10 recalls and 1 learning scan per local day; indexing and dashboard access remain available",
     };
 }
 function isEmail(value) {
@@ -57,12 +55,102 @@ function securityHeaders(contentType) {
         "X-Content-Type-Options": "nosniff",
     };
 }
+const ACTIVATION_PAGE_STYLES = `
+:root{color-scheme:light;font-family:Inter,ui-sans-serif,-apple-system,BlinkMacSystemFont,"Segoe UI",sans-serif;color:#172033;background:#f4f7fb;font-synthesis:none}
+*{box-sizing:border-box}
+body{min-height:100vh;margin:0;padding:2rem 1.25rem;display:grid;place-items:center;background:radial-gradient(circle at 12% 0%,#e8f0ff 0,transparent 38rem),radial-gradient(circle at 100% 100%,#eef2ff 0,transparent 32rem),#f7f9fc}
+main{width:min(100%,34rem)}
+.skip-link{position:fixed;z-index:1;top:1rem;left:1rem;padding:.65rem .8rem;border-radius:.55rem;background:#172033;color:#fff;font-weight:700;transform:translateY(-200%)}
+.skip-link:focus{transform:translateY(0)}
+.brand{display:flex;align-items:center;gap:.75rem;margin:0 0 1.25rem .25rem;color:#33415c;font-size:.875rem;font-weight:700;letter-spacing:.01em}
+.mark{width:2.25rem;height:2.25rem;display:grid;place-items:center;border-radius:.7rem;background:linear-gradient(145deg,#172033,#3159b8);color:#fff;box-shadow:0 .5rem 1.25rem rgba(35,65,130,.2);font-size:1.05rem;letter-spacing:-.08em}
+.card{padding:clamp(1.5rem,5vw,2.5rem);border:1px solid rgba(205,216,231,.9);border-radius:1.5rem;background:rgba(255,255,255,.94);box-shadow:0 1.5rem 4rem rgba(32,51,84,.12),0 .125rem .375rem rgba(32,51,84,.06);backdrop-filter:blur(1rem)}
+.eyebrow{display:inline-flex;align-items:center;gap:.45rem;margin:0 0 1rem;padding:.42rem .7rem;border:1px solid #d9e4f7;border-radius:999px;background:#f3f7ff;color:#315798;font-size:.78rem;font-weight:750;letter-spacing:.03em;text-transform:uppercase}
+.eyebrow::before{content:"";width:.45rem;height:.45rem;border-radius:50%;background:#2b67d1;box-shadow:0 0 0 .22rem #dbe8ff}
+h1{margin:0;color:#141d2c;font-size:clamp(2rem,7vw,2.75rem);line-height:1.06;letter-spacing:-.045em;text-wrap:balance}
+.intro{margin:.9rem 0 1.75rem;color:#526176;font-size:1.05rem;line-height:1.55}
+form{display:grid;gap:.75rem}
+label{color:#29364a;font-size:.9rem;font-weight:700}
+input{width:100%;min-height:3.25rem;padding:.8rem 3.5rem .8rem 1rem;border:1px solid #bcc8d8;border-radius:.8rem;background:#fff;color:#172033;font:inherit;box-shadow:inset 0 1px 2px rgba(24,39,65,.04)}
+input::placeholder{color:#8a96a7}
+input:hover{border-color:#92a2b8}
+input:focus-visible{outline:0;border-color:#2b67d1;box-shadow:0 0 0 .25rem rgba(43,103,209,.15)}
+button{min-height:3.35rem;margin-top:.25rem;padding:.85rem 1rem;border:1px solid #172033;border-radius:.8rem;background:linear-gradient(180deg,#24334a,#172033);color:#fff;font:inherit;font-weight:750;cursor:pointer;box-shadow:0 .55rem 1.2rem rgba(23,32,51,.18);touch-action:manipulation;transition:transform .15s}
+button:hover{background:linear-gradient(180deg,#2d405c,#1d2a40);box-shadow:0 .7rem 1.4rem rgba(23,32,51,.23);transform:translateY(-1px)}
+button:active{transform:translateY(0)}
+button:focus-visible,summary:focus-visible{outline:.2rem solid rgba(43,103,209,.32);outline-offset:.18rem}
+.terminal-note{margin:.8rem 0 0;color:#6a7789;font-size:.85rem;text-align:center}
+.error{margin:0 0 1rem;padding:.8rem 1rem;border:1px solid #efb8bd;border-radius:.75rem;background:#fff3f4;color:#982631;font-size:.9rem;line-height:1.45}
+details{margin-top:1.5rem;padding-top:1.25rem;border-top:1px solid #e2e8f0;color:#5b687a;font-size:.85rem;line-height:1.55}
+summary{color:#46566d;font-weight:700;cursor:pointer;list-style-position:outside;touch-action:manipulation}
+details p{margin:.8rem 0 0}
+.never-sent{padding:.75rem .85rem;border-radius:.65rem;background:#f5f7fa;color:#536176}
+.success{display:grid;place-items:center;width:3.5rem;height:3.5rem;margin-bottom:1.4rem;border-radius:1rem;background:#eaf7ef;color:#197542;font-size:1.65rem;font-weight:800;box-shadow:inset 0 0 0 1px #c9ead6}
+.completion .intro{margin-bottom:0}
+@media (max-width:30rem){body{padding:1rem}.brand{margin-left:.1rem}.card{border-radius:1.15rem}h1{font-size:2rem}}
+@media (prefers-reduced-motion:reduce){input,button{transition:none}}
+`;
 function activationPage(action, error) {
-    const errorHtml = error ? `<p class="error">${error}</p>` : "";
-    return `<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width"><title>Activate AgentMemory</title><style>body{font:16px system-ui;max-width:34rem;margin:10vh auto;padding:0 1.5rem;color:#18212b}form{display:grid;gap:1rem}input,button{font:inherit;padding:.8rem;border-radius:.5rem;border:1px solid #aab4bf}button{background:#18212b;color:#fff;cursor:pointer}.muted{color:#586574}.error{color:#a21d24}</style></head><body><h1>Activate AgentMemory</h1><p>Enter an email address to enable the free daily agent-session allowance on this device.</p>${errorHtml}<form method="post" action="${action}"><label>Email <input type="email" name="email" autocomplete="email" maxlength="254" required autofocus></label><button type="submit">Activate and return to terminal</button></form><p class="muted">The AgentMemory CLI sends your email plus core, bundle, platform, architecture, and release-channel metadata to the private activation service. D1 stores a daily count of opaque SessionStart operations for your normalized email. The request never includes memory, session content, queries, repository paths, raw agent session identifiers, IP addresses, or user-agent strings. Activation records expire after 365 days without use.</p></body></html>`;
+    const errorHtml = error ? `<p class="error" id="activation-error" role="alert">${error}</p>` : "";
+    const describedBy = error ? "activation-error terminal-note" : "terminal-note";
+    const autofocus = error ? " autofocus" : "";
+    return `<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8">
+	<meta name="viewport" content="width=device-width, initial-scale=1">
+	<meta name="theme-color" content="#f4f7fb">
+	<title>Activate AgentMemory</title>
+	<style>${ACTIVATION_PAGE_STYLES}</style>
+</head>
+<body>
+	<a class="skip-link" href="#activation">Skip to Activation</a>
+	<main id="activation">
+		<div class="brand" translate="no"><span class="mark" aria-hidden="true">AM</span><span>AgentMemory</span></div>
+		<section class="card" aria-labelledby="activation-title">
+			<p class="eyebrow">Free daily allowance</p>
+			<h1 id="activation-title">Activate This Device</h1>
+			<p class="intro">Use your email to enable AgentMemory Pro for your local agent sessions.</p>
+			<form method="post" action="${action}">
+				<label for="email">Email address</label>
+				${errorHtml}
+				<input id="email" type="email" name="email" autocomplete="email" inputmode="email" spellcheck="false" placeholder="you@example.com…" maxlength="254" required${autofocus} aria-describedby="${describedBy}">
+				<button type="submit">Activate AgentMemory</button>
+			</form>
+			<p class="terminal-note" id="terminal-note">Your terminal will finish setup after activation.</p>
+			<details>
+				<summary>What’s shared during activation</summary>
+				<p>Your email identifies your free daily allowance. The CLI also sends core and bundle versions, platform, architecture, and release channel. The service stores a daily count of opaque session-start operations. Activation records expire after 365 days without use.</p>
+				<p class="never-sent"><strong>Never sent:</strong> The request never includes memory, session content, queries, repository paths, raw agent session identifiers, IP addresses, or user-agent strings.</p>
+			</details>
+		</section>
+	</main>
+</body>
+</html>`;
 }
 function completionPage() {
-    return '<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width"><title>AgentMemory activated</title></head><body><h1>Activation complete</h1><p>You can close this tab and return to the terminal.</p></body></html>';
+    return `<!doctype html>
+<html lang="en">
+<head>
+	<meta charset="utf-8">
+	<meta name="viewport" content="width=device-width, initial-scale=1">
+	<meta name="theme-color" content="#f4f7fb">
+	<title>AgentMemory activated</title>
+	<style>${ACTIVATION_PAGE_STYLES}</style>
+</head>
+<body>
+	<a class="skip-link" href="#completion">Skip to Activation Status</a>
+	<main id="completion">
+		<div class="brand" translate="no"><span class="mark" aria-hidden="true">AM</span><span>AgentMemory</span></div>
+		<section class="card completion" aria-labelledby="completion-title">
+			<div class="success" aria-hidden="true">✓</div>
+			<p class="eyebrow">Device activated</p>
+			<h1 id="completion-title">You’re All Set</h1>
+			<p class="intro">Return to your terminal to finish installing AgentMemory Pro. You can close this tab.</p>
+		</section>
+	</main>
+</body>
+</html>`;
 }
 function send(response, status, body, contentType = "text/html; charset=utf-8") {
     response.writeHead(status, securityHeaders(contentType));
@@ -256,41 +344,27 @@ export class TemporaryPluginBackend {
         this.artifactOrigin = options.artifactOrigin ?? ARTIFACT_ORIGIN;
         this.fetchImplementation = options.fetch ?? globalThis.fetch;
         this.openUrl = options.openUrl ?? openLoopbackUrl;
-        this.activate = options.activate ?? (() => collectTemporaryActivation(this.openUrl));
+        this.activate = options.activate ?? (async () => `am_install_${randomBytes(24).toString("base64url")}`);
     }
     async getLocalEntitlement() {
         const activation = this.readActivation();
-        return activation ? freeEntitlement(activation.dailySessionLimit) : cloneEntitlement(MISSING_ENTITLEMENT);
+        return activation ? freeEntitlement() : cloneEntitlement(MISSING_ENTITLEMENT);
     }
     async resolveAccess(request) {
         const activation = this.readActivation();
-        let email = activation?.email;
-        if (!email) {
-            if (!request.allowAuthentication)
-                return {
-                    kind: "auth_required",
-                    entitlement: cloneEntitlement(MISSING_ENTITLEMENT),
-                    nextAction: {
-                        kind: "authenticate",
-                        url: "https://jayzeng.github.io/agentmemory/",
-                        message: "Run plugin install in an interactive terminal to enter an email address",
-                    },
-                };
-            email = await this.activate();
-        }
+        const installationId = activation?.installationId ?? (await this.activate());
         const response = await this.request(`${this.apiOrigin}/v1/plugin/access`, {
             method: "POST",
             headers: { "Content-Type": "application/json" },
             body: JSON.stringify({
-                schemaVersion: 1,
-                email,
+                schemaVersion: 2,
+                installationId,
                 bundleId: request.bundleId,
                 installedVersion: request.installedVersion ?? null,
                 coreVersion: this.coreVersion,
                 channel: request.channel,
                 platform: process.platform,
                 architecture: process.arch,
-                consentVersion: "activation-v2",
             }),
         });
         const value = (await readJson(response));
@@ -299,14 +373,20 @@ export class TemporaryPluginBackend {
             throw new PluginBootstrapFailure("service_response_invalid", "The access response omitted its artifact grant");
         if (typeof value.usageCredential !== "string" || !ACTIVATION_CREDENTIAL.test(value.usageCredential))
             throw new PluginBootstrapFailure("service_response_invalid", "The access response omitted its usage credential");
-        const freeQuota = value.entitlement.capabilities["session-worker"]?.quota;
+        const recallQuota = value.entitlement.capabilities.recall?.quota;
+        const learningQuota = value.entitlement.capabilities.learning?.quota;
         if (value.entitlement.plan !== "free" ||
             value.entitlement.state !== "active" ||
-            !freeQuota ||
-            freeQuota.scope !== "account" ||
-            freeQuota.window !== "day")
-            throw new PluginBootstrapFailure("service_response_invalid", "The free session policy is invalid");
-        this.writeActivation(email, value.usageCredential, freeQuota.limit);
+            !recallQuota ||
+            recallQuota.scope !== "device" ||
+            recallQuota.window !== "day" ||
+            !learningQuota ||
+            learningQuota.scope !== "device" ||
+            learningQuota.window !== "day" ||
+            value.entitlement.capabilities["session-index"]?.enabled !== true ||
+            value.entitlement.capabilities["web-console"]?.enabled !== true)
+            throw new PluginBootstrapFailure("service_response_invalid", "The free preview policy is invalid");
+        this.writeActivation(installationId, value.usageCredential, 1);
         return { kind: "granted", entitlement: value.entitlement, artifactGrant: value.artifactGrant };
     }
     async reserveSession(operationId) {
@@ -361,8 +441,9 @@ export class TemporaryPluginBackend {
             if (!stat.isFile() || stat.isSymbolicLink() || (process.platform !== "win32" && (stat.mode & 0o077) !== 0))
                 return null;
             const value = JSON.parse(fs.readFileSync(activationPath, "utf-8"));
-            if (value.schemaVersion !== 2 ||
-                !isEmail(value.email) ||
+            if (value.schemaVersion !== 3 ||
+                typeof value.installationId !== "string" ||
+                !/^am_install_[A-Za-z0-9_-]{32}$/.test(value.installationId) ||
                 !Number.isFinite(Date.parse(value.activatedAt)) ||
                 !ACTIVATION_CREDENTIAL.test(value.usageCredential) ||
                 !Number.isSafeInteger(value.dailySessionLimit) ||
@@ -375,9 +456,9 @@ export class TemporaryPluginBackend {
             return null;
         }
     }
-    writeActivation(email, usageCredential, dailySessionLimit) {
-        if (!isEmail(email))
-            throw new PluginBootstrapFailure("email_invalid", "Enter a valid email address");
+    writeActivation(installationId, usageCredential, dailySessionLimit) {
+        if (!/^am_install_[A-Za-z0-9_-]{32}$/.test(installationId))
+            throw new PluginBootstrapFailure("activation_failed", "The installation identifier is invalid");
         if (!ACTIVATION_CREDENTIAL.test(usageCredential))
             throw new PluginBootstrapFailure("activation_failed", "The activation credential is invalid");
         if (!Number.isSafeInteger(dailySessionLimit) || dailySessionLimit <= 0 || dailySessionLimit > 10_000)
@@ -394,7 +475,13 @@ export class TemporaryPluginBackend {
         if (!directoryStat.isDirectory() || directoryStat.isSymbolicLink())
             throw new PluginBootstrapFailure("activation_path_invalid", "The plugin activation directory is unsafe");
         const temporary = `${target}.tmp-${process.pid}-${randomUUID()}`;
-        fs.writeFileSync(temporary, `${JSON.stringify({ schemaVersion: 2, email, activatedAt: new Date().toISOString(), usageCredential, dailySessionLimit }, null, 2)}\n`, { mode: 0o600, flag: "wx" });
+        fs.writeFileSync(temporary, `${JSON.stringify({
+            schemaVersion: 3,
+            installationId,
+            activatedAt: new Date().toISOString(),
+            usageCredential,
+            dailySessionLimit,
+        }, null, 2)}\n`, { mode: 0o600, flag: "wx" });
         fs.renameSync(temporary, target);
     }
     async sessionUsage(action, operationId) {

package/docs/official-plugin-bootstrap.md

@@ -2,7 +2,7 @@
 
 ## Status
 
-Accepted design on 2026-08-16 and revised on 2026-08-17. The public core implements host types, loopback email activation, live catalog and artifact retrieval, Ed25519 release verification, bounded package validation, transactional install, bundle health checks, paid-command dispatch, and SessionStart hook dispatch. The free plan grants a configurable number of agent sessions per normalized email and UTC day; durable account authentication, payment, renewal, and account management remain deferred.
+Accepted design on 2026-08-16 and revised on 2026-08-17. The public core implements host types, anonymous preview activation, live catalog and artifact retrieval, Ed25519 release verification, bounded package validation, transactional install, bundle health checks, paid-command dispatch, and SessionStart hook dispatch. The free preview grants 10 device-local recalls and one device-local learning scan per local day while keeping indexing and Memory Dashboard visibility available. Account authentication, payment, renewal, and account management remain deferred.
 
 The public `agentmemory` repository and `myagentmemory` npm package remain the free, MIT-licensed core. The public bootstrap client and host contracts are also MIT-licensed. Official commercial implementations and browser assets are built and distributed separately from the private `agent-memory-plugin` workspace under their own terms. Pricing, the billing provider, device limits, offline-grace duration, and Enterprise contract terms are intentionally not decided here. The temporary beta currently uses allowlisted `*.agentmemory.paperpilot.me` service origins; changing those origins is a public-client release change.
 
@@ -10,10 +10,10 @@ The public `agentmemory` repository and `myagentmemory` npm package remain the f
 
 The public core will provide a small bootstrap and host surface for signed first-party plugins. It will not contain paid implementations, browser assets, commercial entitlement logic, or a general third-party marketplace.
 
-The primary user command is:
+The primary product-facing command is:
 
 ```bash
-agent-memory plugin install
+agent-memory pro install
 ```
 
 `plugin install` is an idempotent reconcile operation:
@@ -23,11 +23,11 @@ agent-memory plugin install
 | Plugin absent | Active or grace | Install the compatible signed bundle |
 | Plugin older than the selected release | Active or grace | Upgrade atomically |
 | Plugin current | Active or grace | Report that it is current |
-| Any | Missing | Start loopback email activation in an interactive terminal |
+| Any | Missing | Request an anonymous free-preview entitlement and signed artifact grant |
 | Any | Expired | Direct the user to renewal; leave core available |
 | Incompatible bundle | Any | Leave the current version untouched and explain the required core version |
 
-An absent plugin cannot activate itself. The public bootstrap collects an email locally, obtains a server-issued usage credential and short-lived artifact grant, and verifies the release and artifact. The credential is persisted only after the service accepts activation. After installation, the public host reconstructs the free account-metered capability policy in core code and checks required capabilities before commands and hooks. Signed long-lived entitlements can extend this credential when authentication and payment ship.
+An absent plugin cannot activate itself. The public bootstrap creates a random installation identifier, obtains a server-issued free-preview policy and short-lived artifact grant, and verifies the release and artifact. A mode-0600 activation record is persisted only after the service accepts the request. After installation, the public host reconstructs the free capability policy in core code and checks required capabilities before commands and hooks. Signed long-lived paid entitlements can extend this record when authentication and payment ship.
 
 ## Ownership boundary
 
@@ -67,6 +67,12 @@ Core memory operations must continue to work when the service is unreachable, a
 ### Bootstrap commands
 
 ```text
+agent-memory pro
+agent-memory pro install
+agent-memory pro status
+agent-memory pro upgrade
+agent-memory pro manage
+
 agent-memory plugin
 agent-memory plugin list
 agent-memory plugin status
@@ -76,6 +82,8 @@ agent-memory plugin uninstall [--yes]
 agent-memory plugin manage [--no-browser]
 ```
 
+The `pro` namespace is the user-facing surface. The `plugin` namespace remains supported for low-level administration and compatibility.
+
 - `plugin` with no subcommand prints a discovery summary and the next relevant command.
 - `list` reports known official plugins and whether each is installed and available. It does not download artifacts or inspect memory.
 - `status` is read-only. It reports the installed bundle, selected channel, compatibility, entitlement state, and update availability.
@@ -84,7 +92,7 @@ agent-memory plugin manage [--no-browser]
 - `uninstall` removes executable plugin material and the active receipt. It preserves core memory, plugin state, and the permission-restricted activation credential.
 - `manage` remains unavailable until authenticated account and billing management exists.
 
-Installed plugins contribute top-level commands such as `recall`, `learn`, `worker`, and `web`. Bootstrap command names are reserved by the core and cannot be replaced by a plugin.
+Installed plugins contribute top-level commands including `recall` and `learn`; `dashboard` is a product-facing alias for the lower-level `web` command. Bootstrap command names are reserved by the core and cannot be replaced by a plugin.
 
 The current private compatibility CLI uses `plugin install` and `plugin uninstall` for skill files only. During migration, those meanings move to `install-skills --plugin-only` and `uninstall-skills --plugin-only`; the bootstrap command names above become authoritative.
 
@@ -93,13 +101,13 @@ The current private compatibility CLI uses `plugin install` and `plugin uninstal
 After a successful interactive `agent-memory init`, the core may print one informational line:
 
 ```text
-Optional: AgentMemory Pro adds session recall and a local Web Console.
-Run: agent-memory plugin install
+Core remembers what you save. Pro learns from what you do.
+Run: agent-memory pro install
 ```
 
-Top-level help includes an `Optional official plugins` section. Human-readable `status` may include the same recommendation while no official plugin is installed. Routine `context`, `read`, `write`, `search`, and scratchpad commands never show commercial prompts.
+Top-level help includes a Pro section. Human-readable `status` may include the same recommendation while Pro is not installed. Routine `context`, `read`, `write`, `search`, and scratchpad commands never show commercial prompts.
 
-The core must not open a browser during package installation, `init`, `help`, `status`, or any normal memory operation. A browser may open only after an explicit interactive `plugin install`. `--no-browser`, non-interactive execution, and `--json` fail closed with `auth_required` when no activation record exists.
+The free preview does not open a browser or request identity. Browsers remain restricted to explicit `dashboard`, future `pro manage`, and future paid upgrade/authentication flows. Non-interactive and `--json` installs use the same anonymous access request and still fail closed when the commercial service is unavailable.
 
 ### Machine-readable output
 
@@ -133,17 +141,17 @@ Every bootstrap command supports `--json` and emits one JSON document with a ver
 
 `result` is one of `not_installed`, `installed`, `upgraded`, `current`, `update_available`, `uninstalled`, `auth_required`, `renewal_required`, or `unavailable`. Failures use `ok: false` plus a stable `error.code` and redacted `error.message`. Output must never contain access tokens, download credentials, signed entitlement contents, local memory paths, or URLs containing bearer credentials.
 
-## Free activation flow
+## Anonymous free-preview flow
 
-1. `agent-memory plugin install` starts an HTTP server bound to `127.0.0.1` on an ephemeral port.
-2. The CLI prints and opens a nonce-bearing local URL. The page accepts one email address with bounded input, an exact Host and nonce path, same-origin browser request validation, restrictive response headers, and a five-minute deadline.
-3. Submission returns a completion page but does not create a local credential yet.
-4. The waiting CLI sends the email plus core, installed-bundle, platform, architecture, release-channel, and consent-version fields to the private control plane. Its activation database stores none of the user's memory, session content, queries, repository paths, raw agent session identifiers, IP address, or user-agent string.
-5. The service normalizes the email, stores only a hash of a random usage credential, and returns the credential, a free account-metered entitlement, and a short-lived object-bound artifact grant. Only then does the CLI atomically write a mode-0600 activation record.
+1. `agent-memory pro install` creates a random installation identifier locally when no activation record exists.
+2. The CLI sends that identifier plus core, installed-bundle, platform, architecture, and release-channel fields to the private control plane. It sends no email, memory, session content, query, repository path, raw agent session identifier, IP address, or user-agent string.
+3. The service stores the pseudonymous identifier and only the hash of a random compatibility credential, then returns a free-preview capability policy and short-lived object-bound artifact grant.
+4. The CLI validates the explicit free policy: local indexing and Memory Dashboard access, 10 device-local recalls per day, one device-local learning scan per day, and no free automatic background worker.
+5. Only then does the CLI atomically write a mode-0600 activation record.
 6. The CLI verifies the Ed25519-signed release plus package digest and limits, imports it for health checks, and atomically activates the receipt.
-7. Each paid SessionStart hook reserves one opaque operation against the email's UTC-day allowance, commits after useful hook work, and releases on failure. Exhaustion skips paid hook work without affecting public-core context.
+7. Device-local quota operations reserve before work, commit after useful work, and release on abstention or failure. A zero-result recall does not consume allowance.
 
-Email ownership is not verified in this free flow. Authentication, payment, renewal, account management, and signed paid entitlements are not implemented yet.
+Authentication, payment, renewal, account management, and signed paid entitlements are not implemented yet.
 
 ## Future authentication and purchase flow
 
@@ -163,12 +171,12 @@ An Enterprise administrator may pre-provision an organization entitlement or man
 
 The service exposes:
 
-- `POST /v1/plugin/access` for a free account-metered entitlement, a usage credential, and a short-lived artifact grant;
-- `POST /v1/plugin/sessions/reserve|commit|release` for atomic daily allowance enforcement;
+- `POST /v1/plugin/access` for an anonymous free-preview policy, compatibility credential, and short-lived artifact grant;
+- `POST /v1/plugin/sessions/reserve|commit|release` for migration compatibility with activation-v2 clients;
 - `GET /v1/plugin/releases` for an Ed25519-signed release selected from the private R2 catalog;
 - `GET|HEAD /v1/artifacts/download` for the exact content-addressed object authorized by the bearer grant.
 
-The access request contains the submitted email plus the bounded core, bundle, platform, architecture, release-channel, and consent-version fields described above. Session metering sends only a random operation ID and bearer credential; D1 associates those values with a normalized email and UTC-day counter. Application payloads contain no memory content, search query, session content, path, repository name, raw agent session identifier, qmd data, IP address, or user-agent string. The activation database stores neither IP addresses nor user-agent strings. Future authenticated service responsibilities include:
+The access request contains a random installation identifier plus the bounded core, bundle, platform, architecture, and release-channel fields described above. Application payloads contain no email, memory content, search query, session content, path, repository name, raw agent session identifier, qmd data, IP address, or user-agent string. The activation database stores neither IP addresses nor user-agent strings. Future authenticated service responsibilities include:
 
 - create and poll a device authorization;
 - read the authenticated principal's effective entitlement;

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "myagentmemory",
-	"version": "0.4.15",
+	"version": "0.4.17",
 	"description": "agentmemory (agent-memory) is persistent memory for coding agents (Claude Code, OpenAI Codex, Cursor, Agent) with qmd-powered semantic search across daily logs, long-term memory, and scratchpad",
 	"main": "./dist/core.js",
 	"types": "./dist/core.d.ts",

package/src/cli-spec.ts

@@ -23,6 +23,10 @@ export const COMMANDS = [
 	"install-hooks",
 	"uninstall-hooks",
 	"completion",
+	"pro",
+	"recall",
+	"learn",
+	"dashboard",
 	"plugin",
 	"version",
 	"help",
@@ -48,9 +52,13 @@ export const COMMAND_DESCRIPTIONS: Record<(typeof COMMANDS)[number], string> = {
 	"install-hooks": "install automatic SessionStart indexing and context hooks",
 	"uninstall-hooks": "remove only SessionStart hooks managed by agent-memory",
 	completion: "install or print Bash, Zsh, Fish, or PowerShell completion",
-	plugin: "index, recall, learn from, and evaluate prior agent sessions",
+	pro: "install, inspect, or upgrade AgentMemory Pro",
+	recall: "recall decisions and context from prior coding sessions with Pro",
+	learn: "find repeated corrections worth remembering with Pro",
+	dashboard: "open the private local Memory Dashboard",
+	plugin: "discover, install, update, or remove optional official plugins",
 	version: "print the installed agent-memory version",
-	help: "show top-level, command, or nested plugin help",
+	help: "show this command overview",
 };
 
 export const PLUGIN_COMMAND_DESCRIPTIONS: Record<(typeof PLUGIN_COMMANDS)[number], string> = {
@@ -89,6 +97,10 @@ export const COMMAND_OPTIONS: Record<string, readonly string[]> = {
 	"install-hooks": ["--yes", "--all", "--only"],
 	"uninstall-hooks": ["--only"],
 	completion: ["--stdout"],
+	pro: [],
+	recall: ["--scope", "--cwd", "--limit", "--context"],
+	learn: [],
+	dashboard: ["--no-browser"],
 	version: [],
 	help: [],
 };