myceliumail 1.0.6 → 1.0.8

package/CHANGELOG.md

@@ -18,7 +18,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   - Urgent detection: messages with "urgent" in subject get status 2
 - Updated README with status notification documentation
 
-## [1.0.5]
+## [1.0.5] - 2025-12-20
 
 ### Added
 - Comprehensive architecture documentation for public release
@@ -27,6 +27,30 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Changed
 - Complete README rewrite for public release messaging
 
+## [1.0.4] - 2025-12-20
+
+### Fixed
+- Partial ID lookup bug in `mycmail read` command for Supabase storage
+- Applied same fix to `myceliumail-mcp` server
+
+## [1.0.3] - 2025-12-18
+
+### Fixed
+- Agent ID case normalization (all IDs now lowercase)
+- Key import and send commands now handle case correctly
+
+## [1.0.2] - 2025-12-18
+
+### Fixed
+- Desktop notification sound and click behavior
+- Dashboard real-time connection stability
+
+## [1.0.1] - 2025-12-18
+
+### Fixed
+- npm package bin paths corrected
+- Missing dependencies in published package
+
 ## [1.0.0] - 2025-12-18
 
 ### Added
@@ -78,6 +102,19 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## MCP Server Releases
 
+> See [mcp-server/CHANGELOG.md](mcp-server/CHANGELOG.md) for full history.
+
+### [myceliumail-mcp@1.0.11] - 2025-12-21
+
+#### Fixed
+- DMG installer and desktop app fixes
+- Improved error handling in MCP tools
+
+### [myceliumail-mcp@1.0.9] - 2025-12-20
+
+#### Fixed
+- Partial ID lookup for message reading
+
 ### [myceliumail-mcp@1.0.7] - 2025-12-18
 
 #### Fixed

package/CODEX_SETUP.md

@@ -9,8 +9,8 @@
 export MYCELIUMAIL_AGENT_ID=your-agent-name
 
 # 2. Set Supabase credentials (provided by user)
-export SUPABASE_URL="<provided by user>"
-export SUPABASE_ANON_KEY="<provided by user>"
+export SUPABASE_URL="https://your-project.supabase.co"
+export SUPABASE_ANON_KEY="eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..."  # JWT format!
 
 # 3. Generate your encryption keys
 mycmail keygen
@@ -23,6 +23,17 @@ mycmail inbox
 mycmail send <other-agent> "Hello!"
 ```
 
+## ⚠️ Key Format Warning
+
+**Use JWT anon keys, NOT publishable keys:**
+
+| Format | Example | Works? |
+|--------|---------|--------|
+| ✅ JWT anon | `eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...` | Yes |
+| ❌ Publishable | `sb_publishable_...` | No |
+
+Find the correct key in Supabase Dashboard → Settings → API → "anon public" (the long JWT string).
+
 ## Why environment variables?
 
 Environment variables **override** the config file. This lets multiple agents share `~/.myceliumail/` (for keys and data) but have different identities.

package/README.md

@@ -34,6 +34,43 @@ Myceliumail is named after mycelium—the underground fungal network that lets t
 
 ---
 
+## 💎 Free vs Pro
+
+Myceliumail works as a **generous free tier** — upgrade when you need more power.
+
+| Feature | Free | Pro ($9/mo) |
+|---------|------|-------------|
+| Core messaging | ✅ Unlimited | ✅ Unlimited |
+| Encryption | ✅ Full E2E | ✅ Full E2E |
+| Imported keys | 5 max | ✅ Unlimited |
+| MCP Server | ❌ | ✅ |
+| Cloud key backup | ❌ | ✅ Coming soon |
+| Priority support | ❌ | ✅ |
+
+**Activate Pro:**
+```bash
+mycmail activate <your-license-key>
+mycmail license  # Check status
+```
+
+Get a license: [myceliumail.dev/pro](https://myceliumail.dev/pro)
+
+> **Note:** One Pro license unlocks the entire Treebird ecosystem (Myceliumail + Spidersan).
+
+---
+
+## 🗣️ Feedback & Support
+
+We're building this in public and want to hear from you!
+
+- **Issues & Features:** [GitHub Issues](https://github.com/treebird7/myceliumail/issues)
+- **Email:** treebird7@proton.me
+- **Twitter/X:** [@treebird7](https://twitter.com/treebird7)
+
+Tell us what's working, what's broken, and what you'd love to see next.
+
+---
+
 ## Quick Start
 
 ### CLI Installation
@@ -98,10 +135,12 @@ Create `~/.myceliumail/config.json`:
 {
   "agent_id": "my-agent",
   "supabase_url": "https://xxx.supabase.co",
-  "supabase_key": "eyJ..."
+  "supabase_key": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..."
 }
 ```
 
+> **⚠️ Key Format:** Use the JWT anon key (starts with `eyJ...`), NOT the publishable key (`sb_publishable_...`). Find it in Supabase Dashboard → Settings → API → "anon public".
+
 ### Storage Modes
 
 | Mode | Backend | Use Case |
@@ -303,6 +342,51 @@ For cloud sync and multi-machine messaging:
 
 ---
 
+## Troubleshooting
+
+### "Invalid API key" Error
+
+**Cause:** Using the wrong key format.
+
+| Key Type | Format | Works? |
+|----------|--------|--------|
+| ✅ JWT anon key | `eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...` | Yes |
+| ❌ Publishable key | `sb_publishable_...` | No |
+
+**Fix:** Go to Supabase Dashboard → Settings → API → copy the "anon public" key (the long JWT string starting with `eyJ...`).
+
+### Version Mismatch (`-V` shows old version)
+
+**Cause:** npm global install caching.
+
+**Fix:**
+```bash
+npm uninstall -g myceliumail
+npm install -g myceliumail@latest
+```
+
+### "Connection refused" or timeout errors
+
+**Cause:** Supabase project paused or incorrect URL.
+
+**Fix:**
+1. Verify your `SUPABASE_URL` is correct
+2. Check if the project is active at [supabase.com/dashboard](https://supabase.com/dashboard)
+3. Try `mycmail inbox` with `MYCELIUMAIL_STORAGE=local` to test locally
+
+### Encryption errors
+
+**Cause:** Missing or mismatched keys.
+
+**Fix:**
+```bash
+mycmail keygen          # Generate your keypair
+mycmail key-announce    # Share your public key
+mycmail keys            # Verify keys are present
+```
+
+---
+
 ## Roadmap
 
 Myceliumail is part of the **Treebird ecosystem**—a suite of tools for AI agent coordination.

package/dist/bin/myceliumail.js

@@ -21,6 +21,7 @@ import { createBroadcastCommand } from '../commands/broadcast.js';
 import { createWatchCommand } from '../commands/watch.js';
 import { createExportCommand } from '../commands/export.js';
 import { createStatusCommand } from '../commands/status.js';
+import { createActivateCommand, createLicenseStatusCommand } from '../commands/activate.js';
 const program = new Command();
 program
     .name('mycmail')
@@ -45,6 +46,9 @@ program.addCommand(createBroadcastCommand());
 program.addCommand(createWatchCommand());
 program.addCommand(createExportCommand());
 program.addCommand(createStatusCommand());
+// License management
+program.addCommand(createActivateCommand());
+program.addCommand(createLicenseStatusCommand());
 // Parse and run
 program.parse();
 //# sourceMappingURL=myceliumail.js.map

package/dist/bin/myceliumail.js.map

@@ -1 +1 @@
-{"version":3,"file":"myceliumail.js","sourceRoot":"","sources":["../../src/bin/myceliumail.ts"],"names":[],"mappings":";AAEA;;;;GAIG;AAEH,4CAA4C;AAC5C,OAAO,eAAe,CAAC;AAEvB,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,kBAAkB;AAClB,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAE5D,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACF,IAAI,CAAC,SAAS,CAAC;KACf,WAAW,CAAC,+DAA+D,CAAC;KAC5E,OAAO,CAAC,OAAO,CAAC,CAAC;AAEtB,6BAA6B;AAC7B,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;AAC5B,OAAO,CAAC,WAAW,CAAC,OAAO,EAAE;iBACZ,MAAM,CAAC,OAAO;;CAE9B,CAAC,CAAC;AAEH,oBAAoB;AACpB,OAAO,CAAC,UAAU,CAAC,mBAAmB,EAAE,CAAC,CAAC;AAC1C,OAAO,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC,CAAC;AACxC,OAAO,CAAC,UAAU,CAAC,sBAAsB,EAAE,CAAC,CAAC;AAC7C,OAAO,CAAC,UAAU,CAAC,wBAAwB,EAAE,CAAC,CAAC;AAC/C,OAAO,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC,CAAC;AACxC,OAAO,CAAC,UAAU,CAAC,kBAAkB,EAAE,CAAC,CAAC;AACzC,OAAO,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC,CAAC;AACxC,OAAO,CAAC,UAAU,CAAC,sBAAsB,EAAE,CAAC,CAAC;AAC7C,OAAO,CAAC,UAAU,CAAC,sBAAsB,EAAE,CAAC,CAAC;AAC7C,OAAO,CAAC,UAAU,CAAC,kBAAkB,EAAE,CAAC,CAAC;AACzC,OAAO,CAAC,UAAU,CAAC,mBAAmB,EAAE,CAAC,CAAC;AAC1C,OAAO,CAAC,UAAU,CAAC,mBAAmB,EAAE,CAAC,CAAC;AAE1C,gBAAgB;AAChB,OAAO,CAAC,KAAK,EAAE,CAAC"}
+{"version":3,"file":"myceliumail.js","sourceRoot":"","sources":["../../src/bin/myceliumail.ts"],"names":[],"mappings":";AAEA;;;;GAIG;AAEH,4CAA4C;AAC5C,OAAO,eAAe,CAAC;AAEvB,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,kBAAkB;AAClB,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AAE5F,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACF,IAAI,CAAC,SAAS,CAAC;KACf,WAAW,CAAC,+DAA+D,CAAC;KAC5E,OAAO,CAAC,OAAO,CAAC,CAAC;AAEtB,6BAA6B;AAC7B,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;AAC5B,OAAO,CAAC,WAAW,CAAC,OAAO,EAAE;iBACZ,MAAM,CAAC,OAAO;;CAE9B,CAAC,CAAC;AAEH,oBAAoB;AACpB,OAAO,CAAC,UAAU,CAAC,mBAAmB,EAAE,CAAC,CAAC;AAC1C,OAAO,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC,CAAC;AACxC,OAAO,CAAC,UAAU,CAAC,sBAAsB,EAAE,CAAC,CAAC;AAC7C,OAAO,CAAC,UAAU,CAAC,wBAAwB,EAAE,CAAC,CAAC;AAC/C,OAAO,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC,CAAC;AACxC,OAAO,CAAC,UAAU,CAAC,kBAAkB,EAAE,CAAC,CAAC;AACzC,OAAO,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC,CAAC;AACxC,OAAO,CAAC,UAAU,CAAC,sBAAsB,EAAE,CAAC,CAAC;AAC7C,OAAO,CAAC,UAAU,CAAC,sBAAsB,EAAE,CAAC,CAAC;AAC7C,OAAO,CAAC,UAAU,CAAC,kBAAkB,EAAE,CAAC,CAAC;AACzC,OAAO,CAAC,UAAU,CAAC,mBAAmB,EAAE,CAAC,CAAC;AAC1C,OAAO,CAAC,UAAU,CAAC,mBAAmB,EAAE,CAAC,CAAC;AAE1C,qBAAqB;AACrB,OAAO,CAAC,UAAU,CAAC,qBAAqB,EAAE,CAAC,CAAC;AAC5C,OAAO,CAAC,UAAU,CAAC,0BAA0B,EAAE,CAAC,CAAC;AAEjD,gBAAgB;AAChB,OAAO,CAAC,KAAK,EAAE,CAAC"}

package/dist/commands/activate.d.ts

@@ -0,0 +1,10 @@
+/**
+ * License Activation Command
+ *
+ * Activates a Pro license key.
+ * Usage: mycmail activate <license-key>
+ */
+import { Command } from 'commander';
+export declare function createActivateCommand(): Command;
+export declare function createLicenseStatusCommand(): Command;
+//# sourceMappingURL=activate.d.ts.map

package/dist/commands/activate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"activate.d.ts","sourceRoot":"","sources":["../../src/commands/activate.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIpC,wBAAgB,qBAAqB,IAAI,OAAO,CA0C/C;AAED,wBAAgB,0BAA0B,IAAI,OAAO,CA6BpD"}

package/dist/commands/activate.js

@@ -0,0 +1,77 @@
+/**
+ * License Activation Command
+ *
+ * Activates a Pro license key.
+ * Usage: mycmail activate <license-key>
+ */
+import { Command } from 'commander';
+import { verifyLicense, saveLicense, getLicenseStatus, FREE_TIER_LIMITS } from '../lib/license.js';
+import { loadKnownKeys } from '../lib/crypto.js';
+export function createActivateCommand() {
+    return new Command('activate')
+        .description('Activate a Pro license key')
+        .argument('<license-key>', 'Your license key from myceliumail.dev/pro')
+        .action(async (licenseKey) => {
+        console.log('🍄 Activating license...\n');
+        // Verify the license
+        const license = verifyLicense(licenseKey);
+        if (!license) {
+            console.error('❌ Invalid license key');
+            console.error('   Please check your key and try again.');
+            console.error('   Get a license at: myceliumail.dev/pro');
+            process.exit(1);
+        }
+        if (license.isExpired) {
+            console.error('❌ This license has expired');
+            console.error(`   Expired on: ${new Date(license.data.expiresAt).toLocaleDateString()}`);
+            console.error('   Renew at: myceliumail.dev/pro');
+            process.exit(1);
+        }
+        // Save the license
+        const saved = saveLicense(licenseKey);
+        if (!saved) {
+            console.error('❌ Failed to save license');
+            console.error('   Please check file permissions for ~/.myceliumail/');
+            process.exit(1);
+        }
+        // Show success
+        const status = getLicenseStatus();
+        console.log('✅ Pro License activated!\n');
+        console.log(`   Email:    ${status.email}`);
+        console.log(`   Plan:     ${status.plan.toUpperCase()}`);
+        console.log(`   Expires:  ${new Date(status.expiresAt).toLocaleDateString()}`);
+        console.log(`   Features: ${status.features.join(', ')}`);
+        console.log('');
+        console.log('🍄 Thank you for supporting Myceliumail!');
+    });
+}
+export function createLicenseStatusCommand() {
+    return new Command('license')
+        .description('Show license status and plan details')
+        .action(async () => {
+        const status = getLicenseStatus();
+        const knownKeys = loadKnownKeys();
+        const keyCount = Object.keys(knownKeys).length;
+        console.log('🍄 Myceliumail License Status\n');
+        if (status.plan === 'pro') {
+            console.log(`   Plan:      💎 Pro`);
+            console.log(`   Email:     ${status.email}`);
+            console.log(`   Expires:   ${new Date(status.expiresAt).toLocaleDateString()} (${status.daysRemaining} days)`);
+            console.log(`   Features:  ${status.features.join(', ')}`);
+            console.log(`   Keys:      ${keyCount} imported (unlimited)`);
+        }
+        else {
+            console.log(`   Plan:      Free`);
+            console.log(`   Keys:      ${keyCount}/${FREE_TIER_LIMITS.maxImportedKeys} imported`);
+            console.log('');
+            console.log('   💎 Upgrade to Pro for:');
+            console.log('      • Unlimited imported keys');
+            console.log('      • MCP Server integration');
+            console.log('      • Cloud key backup/restore');
+            console.log('      • Real-time notifications');
+            console.log('');
+            console.log('   Get Pro: myceliumail.dev/pro');
+        }
+    });
+}
+//# sourceMappingURL=activate.js.map

package/dist/commands/activate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"activate.js","sourceRoot":"","sources":["../../src/commands/activate.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACnG,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,MAAM,UAAU,qBAAqB;IACjC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC;SACzB,WAAW,CAAC,4BAA4B,CAAC;SACzC,QAAQ,CAAC,eAAe,EAAE,2CAA2C,CAAC;SACtE,MAAM,CAAC,KAAK,EAAE,UAAkB,EAAE,EAAE;QACjC,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;QAE1C,qBAAqB;QACrB,MAAM,OAAO,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;QAE1C,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;YACvC,OAAO,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;YACzD,OAAO,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;QAED,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACpB,OAAO,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;YAC5C,OAAO,CAAC,KAAK,CAAC,kBAAkB,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;YACzF,OAAO,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;YAClD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;QAED,mBAAmB;QACnB,MAAM,KAAK,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,OAAO,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAC1C,OAAO,CAAC,KAAK,CAAC,sDAAsD,CAAC,CAAC;YACtE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;QAED,eAAe;QACf,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,IAAI,CAAC,MAAM,CAAC,SAAU,CAAC,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;QAChF,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACX,CAAC;AAED,MAAM,UAAU,0BAA0B;IACtC,OAAO,IAAI,OAAO,CAAC,SAAS,CAAC;SACxB,WAAW,CAAC,sCAAsC,CAAC;SACnD,MAAM,CAAC,KAAK,IAAI,EAAE;QACf,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC;QAE/C,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QAE/C,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,IAAI,CAAC,MAAM,CAAC,SAAU,CAAC,CAAC,kBAAkB,EAAE,KAAK,MAAM,CAAC,aAAa,QAAQ,CAAC,CAAC;YAChH,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC3D,OAAO,CAAC,GAAG,CAAC,iBAAiB,QAAQ,uBAAuB,CAAC,CAAC;QAClE,CAAC;aAAM,CAAC;YACJ,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,iBAAiB,QAAQ,IAAI,gBAAgB,CAAC,eAAe,WAAW,CAAC,CAAC;YACtF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;YAC9C,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;YAChD,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QACnD,CAAC;IACL,CAAC,CAAC,CAAC;AACX,CAAC"}

package/dist/commands/key-import.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"key-import.d.ts","sourceRoot":"","sources":["../../src/commands/key-import.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,wBAAgB,sBAAsB,IAAI,OAAO,CA2BhD"}
+{"version":3,"file":"key-import.d.ts","sourceRoot":"","sources":["../../src/commands/key-import.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIpC,wBAAgB,sBAAsB,IAAI,OAAO,CAgChD"}

package/dist/commands/key-import.js

@@ -3,6 +3,7 @@
  */
 import { Command } from 'commander';
 import { saveKnownKey, getKnownKey } from '../lib/crypto.js';
+import { checkKeyLimit } from '../lib/license.js';
 export function createKeyImportCommand() {
     return new Command('key-import')
         .description('Import a peer agent\'s public key')
@@ -22,6 +23,10 @@ export function createKeyImportCommand() {
             console.log('\nUse --force to overwrite');
             return;
         }
+        // Check key limit for free tier (only for new keys)
+        if (!existing) {
+            checkKeyLimit();
+        }
         saveKnownKey(agentId, publicKey);
         console.log(`✅ Imported public key for ${agentId}`);
         console.log(`Key: ${publicKey.slice(0, 20)}...`);

package/dist/commands/key-import.js.map

@@ -1 +1 @@
-{"version":3,"file":"key-import.js","sourceRoot":"","sources":["../../src/commands/key-import.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE7D,MAAM,UAAU,sBAAsB;IAClC,OAAO,IAAI,OAAO,CAAC,YAAY,CAAC;SAC3B,WAAW,CAAC,mCAAmC,CAAC;SAChD,QAAQ,CAAC,SAAS,EAAE,4BAA4B,CAAC;SACjD,QAAQ,CAAC,OAAO,EAAE,2BAA2B,CAAC;SAC9C,MAAM,CAAC,aAAa,EAAE,wBAAwB,CAAC;SAC/C,MAAM,CAAC,KAAK,EAAE,OAAe,EAAE,SAAiB,EAAE,OAAO,EAAE,EAAE;QAC1D,oCAAoC;QACpC,IAAI,SAAS,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACxB,OAAO,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC;YAChF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;QAED,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,QAAQ,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,8BAA8B,OAAO,EAAE,CAAC,CAAC;YACrD,OAAO,CAAC,GAAG,CAAC,iBAAiB,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;YACzD,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;YAC1C,OAAO;QACX,CAAC;QAED,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAEjC,OAAO,CAAC,GAAG,CAAC,6BAA6B,OAAO,EAAE,CAAC,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,QAAQ,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;AACX,CAAC"}
+{"version":3,"file":"key-import.js","sourceRoot":"","sources":["../../src/commands/key-import.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAElD,MAAM,UAAU,sBAAsB;IAClC,OAAO,IAAI,OAAO,CAAC,YAAY,CAAC;SAC3B,WAAW,CAAC,mCAAmC,CAAC;SAChD,QAAQ,CAAC,SAAS,EAAE,4BAA4B,CAAC;SACjD,QAAQ,CAAC,OAAO,EAAE,2BAA2B,CAAC;SAC9C,MAAM,CAAC,aAAa,EAAE,wBAAwB,CAAC;SAC/C,MAAM,CAAC,KAAK,EAAE,OAAe,EAAE,SAAiB,EAAE,OAAO,EAAE,EAAE;QAC1D,oCAAoC;QACpC,IAAI,SAAS,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACxB,OAAO,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC;YAChF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;QAED,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,QAAQ,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,8BAA8B,OAAO,EAAE,CAAC,CAAC;YACrD,OAAO,CAAC,GAAG,CAAC,iBAAiB,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;YACzD,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;YAC1C,OAAO;QACX,CAAC;QAED,oDAAoD;QACpD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,aAAa,EAAE,CAAC;QACpB,CAAC;QAED,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAEjC,OAAO,CAAC,GAAG,CAAC,6BAA6B,OAAO,EAAE,CAAC,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,QAAQ,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;AACX,CAAC"}

package/dist/lib/license.d.ts

@@ -0,0 +1,61 @@
+/**
+ * Myceliumail License Verification
+ *
+ * Ed25519-based license verification for Pro features.
+ * Public key is embedded; private key is kept by treebird for signing.
+ */
+export declare const FREE_TIER_LIMITS: {
+    maxImportedKeys: number;
+};
+export type ProFeature = 'unlimited_keys' | 'mcp_server' | 'cloud_sync' | 'key_backup' | 'realtime_watch';
+export interface LicenseData {
+    email: string;
+    plan: 'free' | 'pro';
+    expiresAt: string;
+    issuedAt: string;
+    features: ProFeature[];
+}
+export interface License {
+    data: LicenseData;
+    isValid: boolean;
+    isExpired: boolean;
+}
+/**
+ * Verify a license string using Ed25519 detached signature
+ */
+export declare function verifyLicense(licenseString: string): License | null;
+/**
+ * Save a license key to disk
+ */
+export declare function saveLicense(licenseString: string): boolean;
+/**
+ * Load the saved license from disk
+ */
+export declare function loadLicense(): License | null;
+/**
+ * Check if user has a valid Pro license
+ */
+export declare function isPro(): boolean;
+/**
+ * Check if a specific Pro feature is enabled
+ */
+export declare function hasFeature(feature: ProFeature): boolean;
+/**
+ * Get license status summary
+ */
+export declare function getLicenseStatus(): {
+    plan: 'free' | 'pro';
+    email?: string;
+    expiresAt?: string;
+    features: ProFeature[];
+    daysRemaining?: number;
+};
+/**
+ * Check imported key limit and throw if exceeded (for free tier)
+ */
+export declare function checkKeyLimit(): void;
+/**
+ * Print Pro upsell message (soft sell)
+ */
+export declare function printProUpsell(feature: string): void;
+//# sourceMappingURL=license.d.ts.map

package/dist/lib/license.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"license.d.ts","sourceRoot":"","sources":["../../src/lib/license.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAkBH,eAAO,MAAM,gBAAgB;;CAE5B,CAAC;AAGF,MAAM,MAAM,UAAU,GAChB,gBAAgB,GAChB,YAAY,GACZ,YAAY,GACZ,YAAY,GACZ,gBAAgB,CAAC;AAEvB,MAAM,WAAW,WAAW;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,GAAG,KAAK,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,UAAU,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,OAAO;IACpB,IAAI,EAAE,WAAW,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;CACtB;AAyBD;;GAEG;AACH,wBAAgB,aAAa,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CA6BnE;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAQ1D;AAED;;GAEG;AACH,wBAAgB,WAAW,IAAI,OAAO,GAAG,IAAI,CAS5C;AAED;;GAEG;AACH,wBAAgB,KAAK,IAAI,OAAO,CAM/B;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAIvD;AAED;;GAEG;AACH,wBAAgB,gBAAgB,IAAI;IAChC,IAAI,EAAE,MAAM,GAAG,KAAK,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,UAAU,EAAE,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;CAC1B,CAqBA;AAED;;GAEG;AACH,wBAAgB,aAAa,IAAI,IAAI,CAepC;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAMpD"}

package/dist/lib/license.js

@@ -0,0 +1,173 @@
+/**
+ * Myceliumail License Verification
+ *
+ * Ed25519-based license verification for Pro features.
+ * Public key is embedded; private key is kept by treebird for signing.
+ */
+import nacl from 'tweetnacl';
+import util from 'tweetnacl-util';
+import { existsSync, readFileSync, writeFileSync, mkdirSync } from 'fs';
+import { join } from 'path';
+import { homedir } from 'os';
+import { loadKnownKeys } from './crypto.js';
+// License storage location
+const LICENSE_DIR = join(homedir(), '.myceliumail');
+const LICENSE_FILE = join(LICENSE_DIR, 'license.key');
+// Treebird's public key for license verification (Ed25519)
+// Use the same key as Spidersan for unified licensing
+const TREEBIRD_PUBLIC_KEY = 'XqIqSlybZGKkKemgLKKl8P9MepnObhcJcxxZHtgG8/o=';
+// Free tier limits
+export const FREE_TIER_LIMITS = {
+    maxImportedKeys: 5,
+};
+/**
+ * Ensure license directory exists
+ */
+function ensureLicenseDir() {
+    if (!existsSync(LICENSE_DIR)) {
+        mkdirSync(LICENSE_DIR, { recursive: true });
+    }
+}
+/**
+ * Parse a license string into components
+ * Format: LICENSE_V1.BASE64_DATA.BASE64_SIGNATURE
+ */
+function parseLicenseString(licenseString) {
+    const parts = licenseString.trim().split('.');
+    if (parts.length !== 3)
+        return null;
+    const [version, data, signature] = parts;
+    if (version !== 'LICENSE_V1')
+        return null;
+    return { version, data, signature };
+}
+/**
+ * Verify a license string using Ed25519 detached signature
+ */
+export function verifyLicense(licenseString) {
+    try {
+        const parsed = parseLicenseString(licenseString);
+        if (!parsed)
+            return null;
+        const dataBytes = util.decodeBase64(parsed.data);
+        // Verify detached Ed25519 signature
+        const publicKey = util.decodeBase64(TREEBIRD_PUBLIC_KEY);
+        const signatureBytes = util.decodeBase64(parsed.signature);
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any
+        const isValid = nacl.sign.detached.verify(dataBytes, signatureBytes, publicKey);
+        if (!isValid)
+            return null;
+        const dataString = util.encodeUTF8(dataBytes);
+        const data = JSON.parse(dataString);
+        const expiresAt = new Date(data.expiresAt);
+        const isExpired = expiresAt < new Date();
+        return {
+            data,
+            isValid: true,
+            isExpired,
+        };
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Save a license key to disk
+ */
+export function saveLicense(licenseString) {
+    try {
+        ensureLicenseDir();
+        writeFileSync(LICENSE_FILE, licenseString.trim(), { mode: 0o600 });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Load the saved license from disk
+ */
+export function loadLicense() {
+    if (!existsSync(LICENSE_FILE))
+        return null;
+    try {
+        const licenseString = readFileSync(LICENSE_FILE, 'utf-8');
+        return verifyLicense(licenseString);
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Check if user has a valid Pro license
+ */
+export function isPro() {
+    const license = loadLicense();
+    if (!license)
+        return false;
+    if (!license.isValid)
+        return false;
+    if (license.isExpired)
+        return false;
+    return license.data.plan === 'pro';
+}
+/**
+ * Check if a specific Pro feature is enabled
+ */
+export function hasFeature(feature) {
+    const license = loadLicense();
+    if (!license || !license.isValid || license.isExpired)
+        return false;
+    return license.data.features.includes(feature);
+}
+/**
+ * Get license status summary
+ */
+export function getLicenseStatus() {
+    const license = loadLicense();
+    if (!license || !license.isValid || license.isExpired) {
+        return {
+            plan: 'free',
+            features: [],
+        };
+    }
+    const expiresAt = new Date(license.data.expiresAt);
+    const now = new Date();
+    const daysRemaining = Math.ceil((expiresAt.getTime() - now.getTime()) / (1000 * 60 * 60 * 24));
+    return {
+        plan: license.data.plan,
+        email: license.data.email,
+        expiresAt: license.data.expiresAt,
+        features: license.data.features,
+        daysRemaining,
+    };
+}
+/**
+ * Check imported key limit and throw if exceeded (for free tier)
+ */
+export function checkKeyLimit() {
+    if (isPro())
+        return; // Pro has unlimited
+    const knownKeys = loadKnownKeys();
+    const keyCount = Object.keys(knownKeys).length;
+    if (keyCount >= FREE_TIER_LIMITS.maxImportedKeys) {
+        console.error(`\n🍄 Free tier limit reached: ${keyCount}/${FREE_TIER_LIMITS.maxImportedKeys} imported keys`);
+        console.error('');
+        console.error('   Options:');
+        console.error('   • Remove unused keys from ~/.myceliumail/keys/known_keys.json');
+        console.error('   • Upgrade: myceliumail.dev/pro for unlimited keys');
+        console.error('');
+        process.exit(1);
+    }
+}
+/**
+ * Print Pro upsell message (soft sell)
+ */
+export function printProUpsell(feature) {
+    if (isPro())
+        return;
+    console.log('');
+    console.log(`💎 Pro tip: Upgrade for ${feature}`);
+    console.log('   myceliumail.dev/pro');
+}
+//# sourceMappingURL=license.js.map

package/dist/lib/license.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"license.js","sourceRoot":"","sources":["../../src/lib/license.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,IAAI,MAAM,gBAAgB,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACxE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,2BAA2B;AAC3B,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,CAAC;AACpD,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;AAEtD,2DAA2D;AAC3D,sDAAsD;AACtD,MAAM,mBAAmB,GAAG,8CAA8C,CAAC;AAE3E,mBAAmB;AACnB,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC5B,eAAe,EAAE,CAAC;CACrB,CAAC;AAwBF;;GAEG;AACH,SAAS,gBAAgB;IACrB,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC3B,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,SAAS,kBAAkB,CAAC,aAAqB;IAC7C,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEpC,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC;IACzC,IAAI,OAAO,KAAK,YAAY;QAAE,OAAO,IAAI,CAAC;IAE1C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AACxC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,aAAqB;IAC/C,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,kBAAkB,CAAC,aAAa,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAEzB,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAEjD,oCAAoC;QACpC,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC,CAAC;QACzD,MAAM,cAAc,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAE3D,8DAA8D;QAC9D,MAAM,OAAO,GAAI,IAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;QACzF,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAE1B,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAgB,CAAC;QAEnD,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,SAAS,GAAG,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAEzC,OAAO;YACH,IAAI;YACJ,OAAO,EAAE,IAAI;YACb,SAAS;SACZ,CAAC;IACN,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,IAAI,CAAC;IAChB,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,aAAqB;IAC7C,IAAI,CAAC;QACD,gBAAgB,EAAE,CAAC;QACnB,aAAa,CAAC,YAAY,EAAE,aAAa,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACnE,OAAO,IAAI,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,KAAK,CAAC;IACjB,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW;IACvB,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IAE3C,IAAI,CAAC;QACD,MAAM,aAAa,GAAG,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QAC1D,OAAO,aAAa,CAAC,aAAa,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,IAAI,CAAC;IAChB,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,KAAK;IACjB,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,IAAI,CAAC,OAAO,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,OAAO,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IACpC,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC;AACvC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,OAAmB;IAC1C,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IACpE,OAAO,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AACnD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB;IAO5B,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAE9B,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACpD,OAAO;YACH,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,EAAE;SACf,CAAC;IACN,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IAE/F,OAAO;QACH,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI;QACvB,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK;QACzB,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS;QACjC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ;QAC/B,aAAa;KAChB,CAAC;AACN,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa;IACzB,IAAI,KAAK,EAAE;QAAE,OAAO,CAAC,oBAAoB;IAEzC,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;IAClC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC;IAE/C,IAAI,QAAQ,IAAI,gBAAgB,CAAC,eAAe,EAAE,CAAC;QAC/C,OAAO,CAAC,KAAK,CAAC,iCAAiC,QAAQ,IAAI,gBAAgB,CAAC,eAAe,gBAAgB,CAAC,CAAC;QAC7G,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAC7B,OAAO,CAAC,KAAK,CAAC,kEAAkE,CAAC,CAAC;QAClF,OAAO,CAAC,KAAK,CAAC,sDAAsD,CAAC,CAAC;QACtE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe;IAC1C,IAAI,KAAK,EAAE;QAAE,OAAO;IAEpB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,2BAA2B,OAAO,EAAE,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;AAC1C,CAAC"}

package/mcp-server/CHANGELOG.md

@@ -0,0 +1,68 @@
+# Changelog - Myceliumail MCP Server
+
+All notable changes to the MCP server will be documented in this file.
+
+## [1.0.11] - 2025-12-21
+
+### Fixed
+- DMG installer and desktop app fixes
+- Improved error handling in MCP tools
+
+## [1.0.9] - 2025-12-20
+
+### Fixed
+- Partial ID lookup for message reading (matches main CLI fix)
+
+## [1.0.8] - 2025-12-20
+
+### Added
+- Sync with main myceliumail package updates
+
+## [1.0.7] - 2025-12-18
+
+### Fixed
+- Supabase column names to match actual schema (`to_agent` vs `recipient`)
+- Added error logging (removed silent catch blocks)
+- Config file support (`~/.myceliumail/config.json`)
+
+## [1.0.6] - 2025-12-18
+
+### Fixed
+- Agent ID case normalization (all lowercase)
+
+## [1.0.5] - 2025-12-18
+
+### Fixed
+- Key import handling improvements
+
+## [1.0.4] - 2025-12-18
+
+### Fixed
+- Encryption/decryption edge cases
+
+## [1.0.3] - 2025-12-17
+
+### Fixed
+- Message sending reliability improvements
+
+## [1.0.2] - 2025-12-16
+
+### Fixed
+- Initial bug fixes after launch
+
+## [1.0.0] - 2025-12-16
+
+### Added
+- Initial MCP server release
+- 8 messaging tools for Claude Desktop:
+  - `check_inbox` - List received messages
+  - `read_message` - Read and decrypt messages
+  - `send_message` - Send messages to other agents
+  - `reply_message` - Reply to messages
+  - `generate_keys` - Create encryption keypair
+  - `list_keys` - Show available keys
+  - `import_key` - Import peer public keys
+  - `archive_message` - Archive messages
+- End-to-end encryption support (NaCl/TweetNaCl.js)
+- Local and Supabase storage backends
+- Automatic fallback from cloud to local storage

package/mcp-server/package-lock.json

@@ -1,12 +1,12 @@
 {
     "name": "myceliumail-mcp",
-    "version": "1.0.11",
+    "version": "1.0.12",
     "lockfileVersion": 3,
     "requires": true,
     "packages": {
         "": {
             "name": "myceliumail-mcp",
-            "version": "1.0.11",
+            "version": "1.0.12",
             "license": "MIT",
             "dependencies": {
                 "@modelcontextprotocol/sdk": "^1.0.0",

package/mcp-server/package.json

@@ -1,6 +1,6 @@
 {
     "name": "myceliumail-mcp",
-    "version": "1.0.11",
+    "version": "1.0.12",
     "description": "MCP server for Myceliumail - End-to-End Encrypted Messaging for AI Agents",
     "type": "module",
     "main": "dist/server.js",

package/mcp-server/src/lib/license.ts

@@ -0,0 +1,147 @@
+/**
+ * Myceliumail MCP License Verification
+ * 
+ * Ed25519-based license verification for MCP Pro features.
+ * MCP server is a Pro feature - requires valid license to start.
+ */
+
+import nacl from 'tweetnacl';
+import util from 'tweetnacl-util';
+import { existsSync, readFileSync } from 'fs';
+import { join } from 'path';
+import { homedir } from 'os';
+
+// License storage location (shared with CLI)
+const LICENSE_FILE = join(homedir(), '.myceliumail', 'license.key');
+
+// Treebird's public key for license verification (Ed25519)
+const TREEBIRD_PUBLIC_KEY = 'XqIqSlybZGKkKemgLKKl8P9MepnObhcJcxxZHtgG8/o=';
+
+export interface LicenseData {
+    email: string;
+    plan: 'free' | 'pro';
+    expiresAt: string;
+    issuedAt: string;
+    features: string[];
+}
+
+export interface License {
+    data: LicenseData;
+    isValid: boolean;
+    isExpired: boolean;
+}
+
+/**
+ * Parse a license string into components
+ */
+function parseLicenseString(licenseString: string): { version: string; data: string; signature: string } | null {
+    const parts = licenseString.trim().split('.');
+    if (parts.length !== 3) return null;
+
+    const [version, data, signature] = parts;
+    if (version !== 'LICENSE_V1') return null;
+
+    return { version, data, signature };
+}
+
+/**
+ * Verify a license string using Ed25519 detached signature
+ */
+export function verifyLicense(licenseString: string): License | null {
+    try {
+        const parsed = parseLicenseString(licenseString);
+        if (!parsed) return null;
+
+        const dataBytes = util.decodeBase64(parsed.data);
+        const publicKey = util.decodeBase64(TREEBIRD_PUBLIC_KEY);
+        const signatureBytes = util.decodeBase64(parsed.signature);
+
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any
+        const isValid = (nacl as any).sign.detached.verify(dataBytes, signatureBytes, publicKey);
+        if (!isValid) return null;
+
+        const dataString = util.encodeUTF8(dataBytes);
+        const data = JSON.parse(dataString) as LicenseData;
+
+        const expiresAt = new Date(data.expiresAt);
+        const isExpired = expiresAt < new Date();
+
+        return {
+            data,
+            isValid: true,
+            isExpired,
+        };
+    } catch {
+        return null;
+    }
+}
+
+/**
+ * Load and verify license from disk
+ */
+export function loadLicense(): License | null {
+    if (!existsSync(LICENSE_FILE)) return null;
+
+    try {
+        const licenseString = readFileSync(LICENSE_FILE, 'utf-8');
+        return verifyLicense(licenseString);
+    } catch {
+        return null;
+    }
+}
+
+/**
+ * Check if user has a valid Pro license
+ */
+export function isPro(): boolean {
+    const license = loadLicense();
+    if (!license) return false;
+    if (!license.isValid) return false;
+    if (license.isExpired) return false;
+    return license.data.plan === 'pro';
+}
+
+/**
+ * Check if MCP feature is enabled
+ */
+export function hasMcpAccess(): boolean {
+    const license = loadLicense();
+    if (!license || !license.isValid || license.isExpired) return false;
+    return license.data.features.includes('mcp_server');
+}
+
+/**
+ * Verify Pro license or exit with upgrade message
+ */
+export function requireProLicense(): void {
+    const license = loadLicense();
+
+    if (!license) {
+        console.error('━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━');
+        console.error('🍄 Myceliumail MCP Server - Pro Feature');
+        console.error('━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━');
+        console.error('');
+        console.error('This feature requires a Pro license.');
+        console.error('');
+        console.error('Activate with: mycmail activate <license-key>');
+        console.error('Get a license: myceliumail.dev/pro');
+        console.error('');
+        console.error('━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━');
+        process.exit(1);
+    }
+
+    if (!license.isValid) {
+        console.error('❌ Invalid license. Please re-activate.');
+        console.error('   mycmail activate <license-key>');
+        process.exit(1);
+    }
+
+    if (license.isExpired) {
+        console.error('❌ License expired on', new Date(license.data.expiresAt).toLocaleDateString());
+        console.error('   Renew at: myceliumail.dev/pro');
+        process.exit(1);
+    }
+
+    // Valid Pro license - show confirmation
+    console.error(`🍄 Myceliumail MCP (Pro) - ${license.data.email}`);
+}

package/mcp-server/src/server.ts

@@ -14,6 +14,7 @@ import { z } from 'zod';
 import * as crypto from './lib/crypto.js';
 import * as storage from './lib/storage.js';
 import { getAgentId } from './lib/config.js';
+import { requireProLicense } from './lib/license.js';
 
 // Create the MCP server
 const server = new McpServer({
@@ -379,6 +380,9 @@ server.tool(
 
 // Start the server
 async function main() {
+    // Verify Pro license before starting
+    requireProLicense();
+
     const transport = new StdioServerTransport();
     await server.connect(transport);
     console.error('Myceliumail MCP server running');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "myceliumail",
-  "version": "1.0.6",
+  "version": "1.0.8",
   "description": "End-to-End Encrypted Messaging for AI Agents",
   "main": "dist/index.js",
   "type": "module",

package/src/bin/myceliumail.ts

@@ -25,6 +25,7 @@ import { createBroadcastCommand } from '../commands/broadcast.js';
 import { createWatchCommand } from '../commands/watch.js';
 import { createExportCommand } from '../commands/export.js';
 import { createStatusCommand } from '../commands/status.js';
+import { createActivateCommand, createLicenseStatusCommand } from '../commands/activate.js';
 
 const program = new Command();
 
@@ -54,5 +55,10 @@ program.addCommand(createWatchCommand());
 program.addCommand(createExportCommand());
 program.addCommand(createStatusCommand());
 
+// License management
+program.addCommand(createActivateCommand());
+program.addCommand(createLicenseStatusCommand());
+
 // Parse and run
 program.parse();
+

package/src/commands/activate.ts

@@ -0,0 +1,85 @@
+/**
+ * License Activation Command
+ * 
+ * Activates a Pro license key.
+ * Usage: mycmail activate <license-key>
+ */
+
+import { Command } from 'commander';
+import { verifyLicense, saveLicense, getLicenseStatus, FREE_TIER_LIMITS } from '../lib/license.js';
+import { loadKnownKeys } from '../lib/crypto.js';
+
+export function createActivateCommand(): Command {
+    return new Command('activate')
+        .description('Activate a Pro license key')
+        .argument('<license-key>', 'Your license key from myceliumail.dev/pro')
+        .action(async (licenseKey: string) => {
+            console.log('🍄 Activating license...\n');
+
+            // Verify the license
+            const license = verifyLicense(licenseKey);
+
+            if (!license) {
+                console.error('❌ Invalid license key');
+                console.error('   Please check your key and try again.');
+                console.error('   Get a license at: myceliumail.dev/pro');
+                process.exit(1);
+            }
+
+            if (license.isExpired) {
+                console.error('❌ This license has expired');
+                console.error(`   Expired on: ${new Date(license.data.expiresAt).toLocaleDateString()}`);
+                console.error('   Renew at: myceliumail.dev/pro');
+                process.exit(1);
+            }
+
+            // Save the license
+            const saved = saveLicense(licenseKey);
+            if (!saved) {
+                console.error('❌ Failed to save license');
+                console.error('   Please check file permissions for ~/.myceliumail/');
+                process.exit(1);
+            }
+
+            // Show success
+            const status = getLicenseStatus();
+            console.log('✅ Pro License activated!\n');
+            console.log(`   Email:    ${status.email}`);
+            console.log(`   Plan:     ${status.plan.toUpperCase()}`);
+            console.log(`   Expires:  ${new Date(status.expiresAt!).toLocaleDateString()}`);
+            console.log(`   Features: ${status.features.join(', ')}`);
+            console.log('');
+            console.log('🍄 Thank you for supporting Myceliumail!');
+        });
+}
+
+export function createLicenseStatusCommand(): Command {
+    return new Command('license')
+        .description('Show license status and plan details')
+        .action(async () => {
+            const status = getLicenseStatus();
+            const knownKeys = loadKnownKeys();
+            const keyCount = Object.keys(knownKeys).length;
+
+            console.log('🍄 Myceliumail License Status\n');
+
+            if (status.plan === 'pro') {
+                console.log(`   Plan:      💎 Pro`);
+                console.log(`   Email:     ${status.email}`);
+                console.log(`   Expires:   ${new Date(status.expiresAt!).toLocaleDateString()} (${status.daysRemaining} days)`);
+                console.log(`   Features:  ${status.features.join(', ')}`);
+                console.log(`   Keys:      ${keyCount} imported (unlimited)`);
+            } else {
+                console.log(`   Plan:      Free`);
+                console.log(`   Keys:      ${keyCount}/${FREE_TIER_LIMITS.maxImportedKeys} imported`);
+                console.log('');
+                console.log('   💎 Upgrade to Pro for:');
+                console.log('      • Unlimited imported keys');
+                console.log('      • MCP Server integration');
+                console.log('      • Cloud key backup/restore');
+                console.log('      • Real-time notifications');
+                console.log('');
+                console.log('   Get Pro: myceliumail.dev/pro');
+            }
+        });
+}

package/src/commands/key-import.ts

@@ -4,6 +4,7 @@
 
 import { Command } from 'commander';
 import { saveKnownKey, getKnownKey } from '../lib/crypto.js';
+import { checkKeyLimit } from '../lib/license.js';
 
 export function createKeyImportCommand(): Command {
     return new Command('key-import')
@@ -26,6 +27,11 @@ export function createKeyImportCommand(): Command {
                 return;
             }
 
+            // Check key limit for free tier (only for new keys)
+            if (!existing) {
+                checkKeyLimit();
+            }
+
             saveKnownKey(agentId, publicKey);
 
             console.log(`✅ Imported public key for ${agentId}`);
@@ -33,3 +39,4 @@ export function createKeyImportCommand(): Command {
             console.log('\n🔐 You can now send encrypted messages to this agent');
         });
 }
+

package/src/lib/license.ts

@@ -0,0 +1,215 @@
+/**
+ * Myceliumail License Verification
+ * 
+ * Ed25519-based license verification for Pro features.
+ * Public key is embedded; private key is kept by treebird for signing.
+ */
+
+import nacl from 'tweetnacl';
+import util from 'tweetnacl-util';
+import { existsSync, readFileSync, writeFileSync, mkdirSync } from 'fs';
+import { join } from 'path';
+import { homedir } from 'os';
+import { loadKnownKeys } from './crypto.js';
+
+// License storage location
+const LICENSE_DIR = join(homedir(), '.myceliumail');
+const LICENSE_FILE = join(LICENSE_DIR, 'license.key');
+
+// Treebird's public key for license verification (Ed25519)
+// Use the same key as Spidersan for unified licensing
+const TREEBIRD_PUBLIC_KEY = 'XqIqSlybZGKkKemgLKKl8P9MepnObhcJcxxZHtgG8/o=';
+
+// Free tier limits
+export const FREE_TIER_LIMITS = {
+    maxImportedKeys: 5,
+};
+
+// Pro features
+export type ProFeature =
+    | 'unlimited_keys'
+    | 'mcp_server'
+    | 'cloud_sync'
+    | 'key_backup'
+    | 'realtime_watch';
+
+export interface LicenseData {
+    email: string;
+    plan: 'free' | 'pro';
+    expiresAt: string;    // ISO date
+    issuedAt: string;     // ISO date
+    features: ProFeature[];
+}
+
+export interface License {
+    data: LicenseData;
+    isValid: boolean;
+    isExpired: boolean;
+}
+
+/**
+ * Ensure license directory exists
+ */
+function ensureLicenseDir(): void {
+    if (!existsSync(LICENSE_DIR)) {
+        mkdirSync(LICENSE_DIR, { recursive: true });
+    }
+}
+
+/**
+ * Parse a license string into components
+ * Format: LICENSE_V1.BASE64_DATA.BASE64_SIGNATURE
+ */
+function parseLicenseString(licenseString: string): { version: string; data: string; signature: string } | null {
+    const parts = licenseString.trim().split('.');
+    if (parts.length !== 3) return null;
+
+    const [version, data, signature] = parts;
+    if (version !== 'LICENSE_V1') return null;
+
+    return { version, data, signature };
+}
+
+/**
+ * Verify a license string using Ed25519 detached signature
+ */
+export function verifyLicense(licenseString: string): License | null {
+    try {
+        const parsed = parseLicenseString(licenseString);
+        if (!parsed) return null;
+
+        const dataBytes = util.decodeBase64(parsed.data);
+
+        // Verify detached Ed25519 signature
+        const publicKey = util.decodeBase64(TREEBIRD_PUBLIC_KEY);
+        const signatureBytes = util.decodeBase64(parsed.signature);
+
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any
+        const isValid = (nacl as any).sign.detached.verify(dataBytes, signatureBytes, publicKey);
+        if (!isValid) return null;
+
+        const dataString = util.encodeUTF8(dataBytes);
+        const data = JSON.parse(dataString) as LicenseData;
+
+        const expiresAt = new Date(data.expiresAt);
+        const isExpired = expiresAt < new Date();
+
+        return {
+            data,
+            isValid: true,
+            isExpired,
+        };
+    } catch {
+        return null;
+    }
+}
+
+/**
+ * Save a license key to disk
+ */
+export function saveLicense(licenseString: string): boolean {
+    try {
+        ensureLicenseDir();
+        writeFileSync(LICENSE_FILE, licenseString.trim(), { mode: 0o600 });
+        return true;
+    } catch {
+        return false;
+    }
+}
+
+/**
+ * Load the saved license from disk
+ */
+export function loadLicense(): License | null {
+    if (!existsSync(LICENSE_FILE)) return null;
+
+    try {
+        const licenseString = readFileSync(LICENSE_FILE, 'utf-8');
+        return verifyLicense(licenseString);
+    } catch {
+        return null;
+    }
+}
+
+/**
+ * Check if user has a valid Pro license
+ */
+export function isPro(): boolean {
+    const license = loadLicense();
+    if (!license) return false;
+    if (!license.isValid) return false;
+    if (license.isExpired) return false;
+    return license.data.plan === 'pro';
+}
+
+/**
+ * Check if a specific Pro feature is enabled
+ */
+export function hasFeature(feature: ProFeature): boolean {
+    const license = loadLicense();
+    if (!license || !license.isValid || license.isExpired) return false;
+    return license.data.features.includes(feature);
+}
+
+/**
+ * Get license status summary
+ */
+export function getLicenseStatus(): {
+    plan: 'free' | 'pro';
+    email?: string;
+    expiresAt?: string;
+    features: ProFeature[];
+    daysRemaining?: number;
+} {
+    const license = loadLicense();
+
+    if (!license || !license.isValid || license.isExpired) {
+        return {
+            plan: 'free',
+            features: [],
+        };
+    }
+
+    const expiresAt = new Date(license.data.expiresAt);
+    const now = new Date();
+    const daysRemaining = Math.ceil((expiresAt.getTime() - now.getTime()) / (1000 * 60 * 60 * 24));
+
+    return {
+        plan: license.data.plan,
+        email: license.data.email,
+        expiresAt: license.data.expiresAt,
+        features: license.data.features,
+        daysRemaining,
+    };
+}
+
+/**
+ * Check imported key limit and throw if exceeded (for free tier)
+ */
+export function checkKeyLimit(): void {
+    if (isPro()) return; // Pro has unlimited
+
+    const knownKeys = loadKnownKeys();
+    const keyCount = Object.keys(knownKeys).length;
+
+    if (keyCount >= FREE_TIER_LIMITS.maxImportedKeys) {
+        console.error(`\n🍄 Free tier limit reached: ${keyCount}/${FREE_TIER_LIMITS.maxImportedKeys} imported keys`);
+        console.error('');
+        console.error('   Options:');
+        console.error('   • Remove unused keys from ~/.myceliumail/keys/known_keys.json');
+        console.error('   • Upgrade: myceliumail.dev/pro for unlimited keys');
+        console.error('');
+        process.exit(1);
+    }
+}
+
+/**
+ * Print Pro upsell message (soft sell)
+ */
+export function printProUpsell(feature: string): void {
+    if (isPro()) return;
+
+    console.log('');
+    console.log(`💎 Pro tip: Upgrade for ${feature}`);
+    console.log('   myceliumail.dev/pro');
+}