oortmem 0.0.0-stage → 0.1.1

package/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -1,3 +1,22 @@
-# Temporary Holding Version
+# oortmem
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+The `oort` command line. It gives your coding agent a memory that stays correct as facts change.
+
+```sh
+npm install -g oortmem
+oort setup
+```
+
+`oort setup` finds your agents (Claude Code, Claude Desktop, Codex, Cursor, VS Code, Gemini CLI), connects them and checks that recall works.
+
+Other commands you will use:
+
+- `oort doctor` checks keys, hooks, connectors and the store.
+- `oort mcp` runs the local MCP server for any MCP client.
+- `oort connect <host>` and `oort disconnect <host>` add or remove one agent.
+- `oort login` uses Oort Pro, so you need no vendor keys.
+- `oort keys set <provider>` stores your own Voyage, TypeSafe or Anthropic key.
+
+Your memories stay on your machine, in `~/.oort`. Needs Node.js 22.15 or later.
+
+Part of [Oort](https://github.com/oortmem/oort), open-source memory for AI agents. See the [main README](https://github.com/oortmem/oort#readme) for how the pieces fit. Apache-2.0.

package/dist/cloud-remote.d.ts

@@ -0,0 +1,9 @@
+import type { RemoteMemory } from '@oortmem/claude-code';
+import { type CloudClient } from './cloud.js';
+export declare function cloudTurnRef(ref: string): string;
+/**
+ * The hooks' view of Oort Cloud. Recall and save go to the API; every failure rejects (the hooks
+ * then inject nothing, and the drain keeps account-level refusals queued). With no client (no Oort
+ * key, a bad URL), every call rejects the same way.
+ */
+export declare function cloudRemote(client: CloudClient | undefined, problem?: string): RemoteMemory;

package/dist/cloud-remote.js

@@ -0,0 +1,72 @@
+import { createHash } from 'node:crypto';
+import { OortCloudError } from './cloud.js';
+/** The API's turnRef cap; a longer ref is replaced by its hash (still stable across retries). */
+const TURN_REF_MAX = 128;
+export function cloudTurnRef(ref) {
+    return ref.length <= TURN_REF_MAX && /^[\x20-\x7e]+$/.test(ref)
+        ? ref
+        : createHash('sha256').update(ref).digest('hex');
+}
+/** Pinned and hot memories SessionStart injects: at most this many of each from the API. */
+const SESSION_LIMIT = 100;
+/**
+ * The hooks' view of Oort Cloud. Recall and save go to the API; every failure rejects (the hooks
+ * then inject nothing, and the drain keeps account-level refusals queued). With no client (no Oort
+ * key, a bad URL), every call rejects the same way.
+ */
+export function cloudRemote(client, problem) {
+    const missing = () => {
+        throw Object.assign(new Error(problem ?? 'Oort Cloud is not set up on this machine.'), {
+            holdQueue: true,
+        });
+    };
+    if (client === undefined) {
+        return {
+            recall: async () => missing(),
+            sessionMemories: async () => missing(),
+            observe: async () => missing(),
+        };
+    }
+    return {
+        recall: ({ text, projectId }) => client.recall({ text, ...(projectId !== undefined && { project: projectId }), k: 10 }),
+        sessionMemories: async ({ projectId }) => {
+            const project = projectId !== undefined && { project: projectId };
+            // Pinned first (any tier), then the hot tier; a memory in both appears once.
+            const [pinned, hot] = await Promise.all([
+                client.list({ ...project, pinned: true, limit: SESSION_LIMIT }),
+                client.list({ ...project, tier: 'hot', limit: SESSION_LIMIT }),
+            ]);
+            const seen = new Set();
+            const out = [];
+            for (const m of [...pinned.memories, ...hot.memories]) {
+                if (seen.has(m.id))
+                    continue;
+                seen.add(m.id);
+                out.push(m);
+            }
+            return out;
+        },
+        observe: async (obs, projectId, turnRef) => {
+            try {
+                // A repeat of the same turnRef answers `duplicate: true`: already saved, so success.
+                await client.observe({
+                    ...(projectId !== undefined && { project: projectId }),
+                    ...(turnRef !== undefined && { turnRef: cloudTurnRef(turnRef) }),
+                    observation: {
+                        user: obs.userText,
+                        assistant: obs.assistantText,
+                        at: obs.at,
+                        ...(obs.sessionId !== undefined && { session: obs.sessionId }),
+                        ...(obs.toolSummaries.length > 0 && { tools: obs.toolSummaries }),
+                    },
+                });
+            }
+            catch (e) {
+                if (e instanceof OortCloudError)
+                    throw e; // carries holdQueue
+                throw Object.assign(new Error('Oort Cloud save failed.'), { holdQueue: true });
+            }
+        },
+    };
+}
+//# sourceMappingURL=cloud-remote.js.map

package/dist/cloud.d.ts

@@ -0,0 +1,139 @@
+import type { Memory, RecallResult, Tier } from '@oortmem/core';
+import type { Env } from './io.js';
+import { Refusal } from './util.js';
+/**
+ * Oort Cloud, as the CLI sees it: where the API is, which store this machine uses, and what the
+ * API's refusals mean. The API itself lives in the private oortcloud repo (apps/cloud); the routes
+ * and shapes the CLI relies on are pinned in `test/cloud-contract.json`.
+ */
+export declare const DEFAULT_CLOUD_URL = "https://api.oortcloud.dev";
+/**
+ * The API root: `OORT_CLOUD_URL` when set and non-empty (local dev against `wrangler dev`), else
+ * `DEFAULT_CLOUD_URL`. Only https, or http to a loopback host: the Oort key travels in every
+ * request.
+ */
+export declare function cloudUrl(env: Env): {
+    url: string;
+} | {
+    error: string;
+};
+export type StoreMode = 'local' | 'cloud';
+export interface ImportProgress {
+    /** A fingerprint of the export being uploaded (count and first and last id). */
+    fingerprint: string;
+    /** Memory lines already accepted by the cloud. */
+    done: number;
+    total: number;
+    updatedAt: string;
+}
+export interface CloudSettings {
+    store: StoreMode;
+    import?: ImportProgress;
+}
+export declare const cloudSettingsPath: (home: string) => string;
+export declare function readCloudSettings(home: string): CloudSettings;
+export declare function writeCloudSettings(home: string, s: CloudSettings): void;
+export type CloudErrorKind = 'unauthorized' | 'payment-required' | 'not-enabled' | 'rate-limit' | 'too-large' | 'not-found' | 'ambiguous-prefix' | 'bad-request' | 'busy' | 'network';
+/**
+ * A refusal from Oort Cloud the user can act on: one line saying what happened and the fix. It
+ * never carries the key or the request. The API's own message is used where it explains a limit
+ * (the monthly cap says which and when it resets).
+ */
+export declare class OortCloudError extends Refusal {
+    readonly kind: CloudErrorKind;
+    readonly status: number;
+    /** The drain keeps the line queued instead of counting an attempt. */
+    readonly holdQueue: boolean;
+    constructor(kind: CloudErrorKind, status: number, apiMessage?: string);
+}
+/** The kind an API status (and `{ error: { code } }`) stands for. */
+export declare function cloudErrorKind(status: number, code?: string): CloudErrorKind;
+export type CloudMemory = Omit<Memory, 'embedding'>;
+export interface CloudStats {
+    tiers: Record<Tier, number>;
+    memories: number;
+    databaseBytes: number;
+    lastConsolidatedAt: string | null;
+}
+export interface CloudObservation {
+    user: string;
+    assistant: string;
+    at?: string;
+    session?: string;
+    tools?: string[];
+}
+export interface CloudObserveResult {
+    outcome: string;
+    memories: {
+        id?: string;
+        action: string;
+    }[];
+    counts: Record<string, number>;
+    /** The turnRef was seen before: the turn is already saved and nothing was done. */
+    duplicate?: true;
+}
+export interface CloudImportResult {
+    imported: number;
+    skipped: number;
+    reembedded: number;
+    next?: number;
+}
+export interface CloudClient {
+    readonly url: string;
+    whoami(): Promise<{
+        account: string;
+        plan: string;
+        via: string;
+    }>;
+    recall(q: {
+        text: string;
+        project?: string;
+        k?: number;
+        asOf?: string;
+    }): Promise<RecallResult>;
+    /** `turnRef` makes a retry safe: the API saves each turn once and answers `duplicate`. */
+    observe(b: {
+        project?: string;
+        observation: CloudObservation;
+        turnRef?: string;
+    }): Promise<CloudObserveResult>;
+    list(q?: {
+        project?: string;
+        tier?: Tier;
+        type?: string;
+        q?: string;
+        pinned?: boolean;
+        cursor?: string;
+        limit?: number;
+    }): Promise<{
+        memories: CloudMemory[];
+        next?: string;
+    }>;
+    /** By id, or by a unique prefix of at least 8 characters (409 `ambiguous` when several match). */
+    get(ref: string): Promise<CloudMemory>;
+    forget(id: string): Promise<void>;
+    pin(id: string, pinned: boolean): Promise<void>;
+    stats(): Promise<CloudStats>;
+    /** The v1 export, as JSON Lines text. */
+    exportText(): Promise<string>;
+    /**
+     * Posts export lines (the first is the manifest). One call imports at most 1,000 lines; when
+     * `next` is set, post the same lines again with `from = next` to continue.
+     */
+    importLines(lines: string[], from?: number): Promise<CloudImportResult>;
+}
+export interface CloudClientOptions {
+    url: string;
+    key: string;
+    fetch?: typeof fetch;
+    /** Per-request timeout; the hooks pass their own budget. */
+    timeoutMs?: number;
+}
+export declare function createCloudClient(opts: CloudClientOptions): CloudClient;
+/** The shortest id prefix the API looks up (it answers 404 below this). */
+export declare const MIN_ID_PREFIX = 8;
+/**
+ * A memory by id or unique id prefix (what `oort inspect` prints), looked up by the API itself:
+ * a prefix that matches several memories is refused with a clear message.
+ */
+export declare function findCloudMemory(client: CloudClient, ref: string): Promise<CloudMemory>;

package/dist/cloud.js

@@ -0,0 +1,223 @@
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import { ACCOUNT_URL } from './relay.js';
+import { Refusal, writeOwnerOnly } from './util.js';
+/**
+ * Oort Cloud, as the CLI sees it: where the API is, which store this machine uses, and what the
+ * API's refusals mean. The API itself lives in the private oortcloud repo (apps/cloud); the routes
+ * and shapes the CLI relies on are pinned in `test/cloud-contract.json`.
+ */
+export const DEFAULT_CLOUD_URL = 'https://api.oortcloud.dev';
+const LOOPBACK = new Set(['localhost', '127.0.0.1', '[::1]']);
+/**
+ * The API root: `OORT_CLOUD_URL` when set and non-empty (local dev against `wrangler dev`), else
+ * `DEFAULT_CLOUD_URL`. Only https, or http to a loopback host: the Oort key travels in every
+ * request.
+ */
+export function cloudUrl(env) {
+    const raw = env['OORT_CLOUD_URL'];
+    if (raw === undefined || raw === '')
+        return { url: DEFAULT_CLOUD_URL };
+    let u;
+    try {
+        u = new URL(raw);
+    }
+    catch {
+        return { error: 'OORT_CLOUD_URL is not a URL; unset it to use Oort Cloud.' };
+    }
+    const ok = u.protocol === 'https:' || (u.protocol === 'http:' && LOOPBACK.has(u.hostname));
+    if (!ok || u.username !== '' || u.password !== '' || u.search !== '' || u.hash !== '') {
+        return {
+            error: 'OORT_CLOUD_URL must be an https URL (or http to localhost) with no credentials or query; unset it to use Oort Cloud.',
+        };
+    }
+    return { url: `${u.origin}${u.pathname.replace(/\/+$/, '')}` };
+}
+export const cloudSettingsPath = (home) => path.join(home, 'cloud.json');
+export function readCloudSettings(home) {
+    let raw;
+    try {
+        raw = JSON.parse(fs.readFileSync(cloudSettingsPath(home), 'utf8'));
+    }
+    catch {
+        return { store: 'local' };
+    }
+    const r = raw;
+    const store = r?.store === 'cloud' ? 'cloud' : 'local';
+    const imp = r?.import;
+    const progress = imp !== undefined &&
+        typeof imp.fingerprint === 'string' &&
+        typeof imp.done === 'number' &&
+        typeof imp.total === 'number'
+        ? {
+            fingerprint: imp.fingerprint,
+            done: imp.done,
+            total: imp.total,
+            updatedAt: typeof imp.updatedAt === 'string' ? imp.updatedAt : '',
+        }
+        : undefined;
+    return { store, ...(progress !== undefined && { import: progress }) };
+}
+export function writeCloudSettings(home, s) {
+    fs.mkdirSync(home, { recursive: true, mode: 0o700 });
+    writeOwnerOnly(cloudSettingsPath(home), `${JSON.stringify(s, null, 2)}\n`, true);
+}
+/** Kinds the account has to fix, or that pass with time: a hook's queue waits instead. */
+const HOLD = new Set([
+    'unauthorized',
+    'payment-required',
+    'not-enabled',
+    'rate-limit',
+    'busy',
+    'network',
+]);
+/**
+ * A refusal from Oort Cloud the user can act on: one line saying what happened and the fix. It
+ * never carries the key or the request. The API's own message is used where it explains a limit
+ * (the monthly cap says which and when it resets).
+ */
+export class OortCloudError extends Refusal {
+    kind;
+    status;
+    /** The drain keeps the line queued instead of counting an attempt. */
+    holdQueue;
+    constructor(kind, status, apiMessage) {
+        super(messageFor(kind, status, apiMessage));
+        this.name = 'OortCloudError';
+        this.kind = kind;
+        this.status = status;
+        this.holdQueue = HOLD.has(kind);
+    }
+}
+function messageFor(kind, status, api) {
+    switch (kind) {
+        case 'unauthorized':
+            return `Oort Cloud rejected the Oort key (HTTP ${status}): it is unknown or revoked. Run \`oort login\` again.`;
+        case 'payment-required':
+            return `Oort Pro is not active on this account (HTTP 402). Subscribe or update billing at ${ACCOUNT_URL}, or run \`oort cloud use --local\`. \`oort cloud export\` still works.`;
+        case 'not-enabled':
+            return 'Oort Cloud is not enabled for this account yet (HTTP 403). Your memories stay on this machine; run `oort cloud use --local`.';
+        case 'rate-limit':
+            return `Oort Cloud limit reached (HTTP 429)${api !== undefined ? `: ${api}` : '.'} Usage is at ${ACCOUNT_URL}.`;
+        case 'too-large':
+            return `Oort Cloud refused a request that is too large (HTTP 413)${api !== undefined ? `: ${api}` : '.'}`;
+        case 'not-found':
+            return 'No such memory in Oort Cloud.';
+        case 'ambiguous-prefix':
+            return 'That id prefix matches more than one memory in Oort Cloud; give more of the id.';
+        case 'bad-request':
+            return `Oort Cloud refused the request (HTTP ${status})${api !== undefined ? `: ${api}` : '.'}`;
+        case 'busy':
+            return `Oort Cloud is busy or down, try again shortly (HTTP ${status}).`;
+        case 'network':
+            return 'Oort Cloud is unreachable: check your network, then try again.';
+    }
+}
+/** The kind an API status (and `{ error: { code } }`) stands for. */
+export function cloudErrorKind(status, code) {
+    if (status === 401)
+        return 'unauthorized';
+    if (status === 402)
+        return 'payment-required';
+    if (status === 403)
+        return code === 'cloud_not_enabled' ? 'not-enabled' : 'unauthorized';
+    if (status === 404)
+        return 'not-found';
+    if (status === 409 && code === 'ambiguous')
+        return 'ambiguous-prefix';
+    if (status === 413)
+        return 'too-large';
+    if (status === 429)
+        return 'rate-limit';
+    if (status >= 500)
+        return 'busy';
+    return 'bad-request';
+}
+const DEFAULT_TIMEOUT_MS = 30_000;
+export function createCloudClient(opts) {
+    const doFetch = opts.fetch ?? globalThis.fetch;
+    const timeout = opts.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    async function call(method, route, body) {
+        const abort = new AbortController();
+        const timer = setTimeout(() => abort.abort(), timeout);
+        const headers = { authorization: `Bearer ${opts.key}` };
+        let payload;
+        if (body?.json !== undefined) {
+            headers['content-type'] = 'application/json';
+            payload = JSON.stringify(body.json);
+        }
+        else if (body?.text !== undefined) {
+            headers['content-type'] = 'application/x-ndjson';
+            payload = body.text;
+        }
+        let res;
+        try {
+            res = await doFetch(`${opts.url}${route}`, {
+                method,
+                headers,
+                ...(payload !== undefined && { body: payload }),
+                signal: abort.signal,
+                redirect: 'error',
+            });
+        }
+        catch {
+            throw new OortCloudError('network', 0);
+        }
+        finally {
+            clearTimeout(timer);
+        }
+        if (!res.ok) {
+            const err = (await res.json().catch(() => ({})));
+            const code = typeof err.error?.code === 'string' ? err.error.code : undefined;
+            const message = typeof err.error?.message === 'string' ? err.error.message : undefined;
+            throw new OortCloudError(cloudErrorKind(res.status, code), res.status, message);
+        }
+        return res;
+    }
+    const json = async (method, route, body) => (await (await call(method, route, body === undefined ? undefined : { json: body })).json());
+    const idPath = (id) => `/v1/memories/${encodeURIComponent(id)}`;
+    return {
+        url: opts.url,
+        whoami: () => json('GET', '/v1/whoami'),
+        recall: (q) => json('POST', '/v1/recall', q),
+        observe: (b) => json('POST', '/v1/observe', b),
+        list: (q = {}) => {
+            const p = new URLSearchParams();
+            for (const [k, v] of Object.entries(q))
+                if (v !== undefined)
+                    p.set(k, String(v));
+            const qs = p.toString();
+            return json('GET', `/v1/memories${qs === '' ? '' : `?${qs}`}`);
+        },
+        get: (id) => json('GET', idPath(id)),
+        forget: async (id) => {
+            await call('DELETE', idPath(id));
+        },
+        pin: async (id, pinned) => {
+            await call('POST', `${idPath(id)}/${pinned ? 'pin' : 'unpin'}`);
+        },
+        stats: () => json('GET', '/v1/stats'),
+        exportText: async () => (await call('GET', '/v1/export')).text(),
+        importLines: async (lines, from = 0) => (await (await call('POST', `/v1/import?from=${from}`, {
+            text: lines.map((l) => `${l}\n`).join(''),
+        })).json()),
+    };
+}
+/** The shortest id prefix the API looks up (it answers 404 below this). */
+export const MIN_ID_PREFIX = 8;
+/**
+ * A memory by id or unique id prefix (what `oort inspect` prints), looked up by the API itself:
+ * a prefix that matches several memories is refused with a clear message.
+ */
+export async function findCloudMemory(client, ref) {
+    try {
+        return await client.get(ref);
+    }
+    catch (e) {
+        if (e instanceof OortCloudError && e.kind === 'not-found' && ref.length < MIN_ID_PREFIX) {
+            throw new Refusal(`Give at least ${MIN_ID_PREFIX} characters of the memory id.`);
+        }
+        throw e;
+    }
+}
+//# sourceMappingURL=cloud.js.map