wyrm-mcp 7.0.3 → 7.2.0

package/LICENSE

@@ -661,7 +661,7 @@ For more information on this, and how to apply and follow the GNU AGPL, see
 <https://www.gnu.org/licenses/>.
 
 ---
-Copyright (c) 2024-2026 Ghost Protocol (Pvt) Ltd
+Copyright (c) 2026 Ghost Protocol (Pvt) Ltd
 https://ghosts.lk
 
 For commercial licensing inquiries: ghosts.lk@proton.me

package/NOTICE

@@ -0,0 +1,40 @@
+Wyrm — Persistent Memory for AI Agents
+Copyright © 2026 Ghost Protocol (Pvt) Ltd. All rights reserved.
+
+This software ("Wyrm", published as the npm package "wyrm-mcp") and its source
+code, documentation, and associated materials are the original work and
+intellectual property of Ghost Protocol (Pvt) Ltd, Colombo, Sri Lanka.
+
+LICENSE — dual-licensed:
+
+  1. Open source: GNU Affero General Public License, version 3 or later
+     (AGPL-3.0-or-later). See the LICENSE file for the full terms. Note in
+     particular AGPL section 13: if you run a modified version of this software
+     to provide a network service, you must offer the complete corresponding
+     source code of your modified version to the users of that service.
+
+  2. Commercial: a separate, non-copyleft commercial license is available for
+     embedding Wyrm in a closed-source product, or operating it as a managed
+     service without AGPL's source-sharing obligations. Contact:
+     ghosts.lk@proton.me
+
+Official distribution — account required: the official Wyrm builds published by
+Ghost Protocol (the "wyrm-mcp" package on npm and signed releases) and the Wyrm
+hosted services (wyrm.ghosts.lk, mcp.wyrm.ghosts.lk, account.ghosts.lk) require a
+free account and are subject to the Wyrm Terms of Service. The official build
+validates a short-lived, account-bound license locally ("wyrm login"); your
+memory stays on your machine. This account requirement governs the official
+distribution and services — it does not restrict your AGPL rights in the source,
+which remains free to build and run without an account. Circumventing, disabling,
+or removing the activation requirement and redistributing the result under the
+"Wyrm" name or marks is not permitted.
+
+Trademarks: "Wyrm", "Ghost Protocol", and the silver-dragon mark are trademarks
+of Ghost Protocol (Pvt) Ltd. Use of the AGPL license does not grant any
+trademark rights.
+
+Unauthorized copying, reverse engineering to circumvent the license, or
+distribution of derivative works outside the terms above is prohibited and may
+infringe the copyright and other rights of Ghost Protocol (Pvt) Ltd.
+
+Ghost Protocol (Pvt) Ltd · Colombo, Sri Lanka · ghosts.lk · ghosts.lk@proton.me

package/dist/activation.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Activation gate for account-required builds.
+ *
+ * OFF by default in the AGPL source — self-hosters and the test suite are
+ * unaffected, and the open-standard (WMP) ecosystem keeps working without an
+ * account. The OFFICIAL distribution bakes `WYRM_REQUIRE_ACTIVATION=1`, so the
+ * free tier needs a (free) account: `wyrm login` fetches a short-lived,
+ * account-bound signed license that's validated locally by license.ts. A
+ * suspended account can't refresh, so access lapses at expiry. Memory is local
+ * either way — login only ties usage to a revocable identity.
+ *
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
+ * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me.
+ */
+/**
+ * Whether the account-required gate is enabled on this build. ON when this is the
+ * official published artifact (OFFICIAL_BUILD baked true at release), OR when the
+ * operator opts in via WYRM_REQUIRE_ACTIVATION. OFF in AGPL source + tests.
+ */
+export declare const REQUIRE_ACTIVATION: boolean;
+/**
+ * True when tool execution is permitted. Always true unless the build requires
+ * activation AND no valid (free or paid) account-bound license is loaded.
+ * Re-checked live so a mid-session `wyrm login` takes effect without a restart.
+ */
+export declare function activationSatisfied(): boolean;
+/** The MCP error result returned for any tool call while activation is unmet. */
+export declare function activationGateResult(): {
+    content: Array<{
+        type: 'text';
+        text: string;
+    }>;
+    isError: true;
+};
+//# sourceMappingURL=activation.d.ts.map

package/dist/activation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"activation.d.ts","sourceRoot":"","sources":["../src/activation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAKH;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,SACyD,CAAC;AAEzF;;;;GAIG;AACH,wBAAgB,mBAAmB,IAAI,OAAO,CAE7C;AAED,iFAAiF;AACjF,wBAAgB,oBAAoB,IAAI;IAAE,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAAC,OAAO,EAAE,IAAI,CAAA;CAAE,CAWxG"}

package/dist/activation.js

@@ -0,0 +1,44 @@
+/**
+ * Activation gate for account-required builds.
+ *
+ * OFF by default in the AGPL source — self-hosters and the test suite are
+ * unaffected, and the open-standard (WMP) ecosystem keeps working without an
+ * account. The OFFICIAL distribution bakes `WYRM_REQUIRE_ACTIVATION=1`, so the
+ * free tier needs a (free) account: `wyrm login` fetches a short-lived,
+ * account-bound signed license that's validated locally by license.ts. A
+ * suspended account can't refresh, so access lapses at expiry. Memory is local
+ * either way — login only ties usage to a revocable identity.
+ *
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
+ * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me.
+ */
+import { getLicenseInfo } from './license.js';
+import { OFFICIAL_BUILD } from './build-flags.js';
+/**
+ * Whether the account-required gate is enabled on this build. ON when this is the
+ * official published artifact (OFFICIAL_BUILD baked true at release), OR when the
+ * operator opts in via WYRM_REQUIRE_ACTIVATION. OFF in AGPL source + tests.
+ */
+export const REQUIRE_ACTIVATION = OFFICIAL_BUILD || /^(1|true|yes|on)$/i.test(process.env.WYRM_REQUIRE_ACTIVATION ?? '');
+/**
+ * True when tool execution is permitted. Always true unless the build requires
+ * activation AND no valid (free or paid) account-bound license is loaded.
+ * Re-checked live so a mid-session `wyrm login` takes effect without a restart.
+ */
+export function activationSatisfied() {
+    return !REQUIRE_ACTIVATION || getLicenseInfo().valid;
+}
+/** The MCP error result returned for any tool call while activation is unmet. */
+export function activationGateResult() {
+    return {
+        content: [{
+                type: 'text',
+                text: '🔒 Wyrm requires a free account on this build.\n\n'
+                    + 'Run `wyrm login` in your terminal to sign in and activate (free). '
+                    + 'Your memory stays local — login just ties usage to an account so it can be managed.\n\n'
+                    + 'Already logged in? Your activation may have expired — run `wyrm login` again to refresh.',
+            }],
+        isError: true,
+    };
+}
+//# sourceMappingURL=activation.js.map

package/dist/activation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"activation.js","sourceRoot":"","sources":["../src/activation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAElD;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAC7B,cAAc,IAAI,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,EAAE,CAAC,CAAC;AAEzF;;;;GAIG;AACH,MAAM,UAAU,mBAAmB;IACjC,OAAO,CAAC,kBAAkB,IAAI,cAAc,EAAE,CAAC,KAAK,CAAC;AACvD,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,oBAAoB;IAClC,OAAO;QACL,OAAO,EAAE,CAAC;gBACR,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,oDAAoD;sBACtD,oEAAoE;sBACpE,yFAAyF;sBACzF,0FAA0F;aAC/F,CAAC;QACF,OAAO,EAAE,IAAI;KACd,CAAC;AACJ,CAAC"}

package/dist/agent-daemon.d.ts

@@ -15,7 +15,7 @@
  * alive, `start()` refuses (no fork-bomb). `restart()` is provided as
  * an explicit operation.
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  */
 import type Database from 'better-sqlite3';

package/dist/agent-daemon.js

@@ -15,7 +15,7 @@
  * alive, `start()` refuses (no fork-bomb). `restart()` is provided as
  * an explicit operation.
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  */
 import { spawn } from 'child_process';

package/dist/agent-loop.d.ts

@@ -26,7 +26,7 @@
  *   {"thought":"...","action":"done","summary":"..."} or
  *   {"thought":"...","action":"block","reason":"..."}
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  */
 import type Database from 'better-sqlite3';

package/dist/agent-loop.js

@@ -26,7 +26,7 @@
  *   {"thought":"...","action":"done","summary":"..."} or
  *   {"thought":"...","action":"block","reason":"..."}
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  */
 import { Goals } from './goals.js';

package/dist/analytics.d.ts

@@ -1,7 +1,7 @@
 /**
  * Wyrm Analytics — Persistent Usage Tracking & Cost Monitoring
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  * @module analytics
  * @version 3.2.0

package/dist/analytics.js

@@ -1,7 +1,7 @@
 /**
  * Wyrm Analytics — Persistent Usage Tracking & Cost Monitoring
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  * @module analytics
  * @version 3.2.0

package/dist/audit.d.ts

@@ -59,7 +59,7 @@
  * unsigned, byte-identical to 6.x behavior. `WYRM_AUDIT_SIGNING_KEY` holds a
  * PEM-encoded (pkcs8) Ed25519 private key, or a path to one.
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  */
 import type Database from 'better-sqlite3';

package/dist/audit.js

@@ -59,7 +59,7 @@
  * unsigned, byte-identical to 6.x behavior. `WYRM_AUDIT_SIGNING_KEY` holds a
  * PEM-encoded (pkcs8) Ed25519 private key, or a path to one.
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  */
 import { createHash, createPrivateKey, createPublicKey, sign as edSign, verify as edVerify, } from 'crypto';

package/dist/auto-capture.js

@@ -12,7 +12,7 @@
  * stored with needs_review=1 so the operator vets them (wyrm_review) — nothing
  * auto-trusted, matching Wyrm's distillation-queue discipline.
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  */
 import { classifyCapture } from './capture.js';

package/dist/auto-orchestrator.d.ts

@@ -10,7 +10,7 @@
  * - Task Decomposition: Large features via subtasks + parallel execution
  * - Verification: High-risk code changes via multi-angle review
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  */
 export type TaskType = 'decision' | 'generation' | 'research' | 'verification' | 'decomposition';

package/dist/auto-orchestrator.js

@@ -10,7 +10,7 @@
  * - Task Decomposition: Large features via subtasks + parallel execution
  * - Verification: High-risk code changes via multi-angle review
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  */
 /**

package/dist/autoconfig.d.ts

@@ -5,7 +5,7 @@
  * Cursor, Windsurf, Zed, etc.) and configures Wyrm's MCP server in each.
  * Handles provider switching seamlessly — change your AI, Wyrm follows.
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  * @module autoconfig
  * @version 3.0.0

package/dist/autoconfig.js

@@ -5,7 +5,7 @@
  * Cursor, Windsurf, Zed, etc.) and configures Wyrm's MCP server in each.
  * Handles provider switching seamlessly — change your AI, Wyrm follows.
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  * @module autoconfig
  * @version 3.0.0

package/dist/buddy-runner.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Companion-buddy runner (v7 F4 T036 - extracted from the index.ts monolith).
+ * The buddy fold's ONE implementation: wyrm_buddy calls it directly and the
+ * well-known `buddy` tool calls it when any companion param is present. Lifted
+ * VERBATIM behind a factory that captures the same singletons it always closed
+ * over (db / mcpClient / our version string for cycle-prevention).
+ *
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
+ * @license AGPL-3.0-or-later
+ */
+import type { WyrmDB } from "./database.js";
+import type { OutboundMcpClient } from "./mcp-client.js";
+export interface BuddyRunnerDeps {
+    db: WyrmDB;
+    mcpClient: OutboundMcpClient;
+    version: string;
+}
+export declare function makeRunCompanionBuddy(deps: BuddyRunnerDeps): (args: Record<string, unknown>) => Promise<{
+    content: Array<{
+        type: string;
+        text: string;
+    }>;
+}>;
+//# sourceMappingURL=buddy-runner.d.ts.map

package/dist/buddy-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"buddy-runner.d.ts","sourceRoot":"","sources":["../src/buddy-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAIzD,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,iBAAiB,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,eAAe,UA0DpB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,OAAO,CAAC;IAAE,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,CAAC,CAoC3H"}

package/dist/buddy-runner.js

@@ -0,0 +1,109 @@
+/**
+ * Companion-buddy runner (v7 F4 T036 - extracted from the index.ts monolith).
+ * The buddy fold's ONE implementation: wyrm_buddy calls it directly and the
+ * well-known `buddy` tool calls it when any companion param is present. Lifted
+ * VERBATIM behind a factory that captures the same singletons it always closed
+ * over (db / mcpClient / our version string for cycle-prevention).
+ *
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
+ * @license AGPL-3.0-or-later
+ */
+import { gatherBuddyInputs, buildBuddyOutput } from "./buddy.js";
+export function makeRunCompanionBuddy(deps) {
+    const { db, mcpClient, version } = deps;
+    /**
+     * Spec 015 — buddy federation.
+     *
+     * For each registered + enabled outbound MCP server, list its tools and
+     * call any whose name matches /^(buddy_|.+_buddy$)/ (case-insensitive).
+     * Collects up to 3 replies; budget-frugal, best-effort.
+     */
+    async function collectExternalBuddyReplies(projectId) {
+        const replies = [];
+        const servers = mcpClient.list().filter((r) => r.enabled);
+        // Identify ourselves for cycle prevention per Buddy Protocol v1.0 §4.
+        const fromBuddy = `wyrm@${version}`;
+        // Try to give peers context — name of the project the local buddy is on.
+        let projectHint;
+        try {
+            const row = db.getDatabase().prepare('SELECT name FROM projects WHERE id = ?').get(projectId);
+            projectHint = row?.name;
+        }
+        catch { /* fine */ }
+        for (const srv of servers) {
+            if (replies.length >= 3)
+                break;
+            let tools = null;
+            try {
+                tools = await mcpClient.listTools(srv.server_name);
+            }
+            catch {
+                continue;
+            }
+            if (!tools)
+                continue;
+            // Prefer well-known `buddy` (Buddy Protocol v1.0); fall back to `*_buddy` / `buddy_*` patterns.
+            const wellKnown = tools.find((t) => t.name.toLowerCase() === 'buddy');
+            const buddyTools = wellKnown
+                ? [wellKnown]
+                : tools.filter((t) => /^(buddy_|.*_buddy)$/i.test(t.name));
+            for (const t of buddyTools) {
+                if (replies.length >= 3)
+                    break;
+                try {
+                    const r = await mcpClient.call(srv.server_name, t.name, {
+                        from_buddy: fromBuddy,
+                        project_hint: projectHint,
+                        size: 'compact',
+                    });
+                    const text = typeof r.result === 'string' ? r.result : JSON.stringify(r.result).slice(0, 800);
+                    if (text)
+                        replies.push({ server: srv.server_name, tool: t.name, reply: text });
+                }
+                catch { /* skip on error */ }
+            }
+        }
+        return replies;
+    }
+    /**
+     * v7 F3 (T021) — the companion buddy code path, extracted VERBATIM from the
+     * wyrm_buddy switch case so the buddy fold shares ONE implementation:
+     * `wyrm_buddy` calls it directly, and the well-known `buddy` tool calls it
+     * whenever any companion param (persona/persona_name/mood/federate/
+     * project_path — handlers/alias-adapters.ts) is present. Never a duplicate;
+     * the alias spine routes wyrm_buddy → buddy with an argument adapter and the
+     * golden replay CI proves both entries byte-equivalent.
+     */
+    async function runCompanionBuddy(args) {
+        const { project_path: bdPath, mood: bdMood, persona: bdPersona, persona_name: bdPersonaName, federate: bdFederate, size: bdSize } = args;
+        // Resolve project: explicit path > cwd > nothing
+        const cwd = bdPath ?? process.cwd();
+        const project = db.getProject(cwd);
+        if (!project) {
+            return {
+                content: [{
+                        type: 'text',
+                        text: `󱅝 I don't see *${cwd}* in my hoard yet — scan it first with \`wyrm_scan_projects\`, then come back.`,
+                    }],
+            };
+        }
+        const persona = bdPersona ?? process.env.WYRM_BUDDY_DEFAULT_PERSONA ?? 'wyrm';
+        const inputs = gatherBuddyInputs(db.getDatabase(), project.id);
+        // Federate with other "*_buddy" tools on registered external MCPs.
+        // Skipped in quiet mode (token-frugal) and on explicit federate:false.
+        if (bdFederate !== false && bdMood !== 'quiet') {
+            try {
+                const externals = await collectExternalBuddyReplies(project.id);
+                if (externals.length > 0)
+                    inputs.externalBuddies = externals;
+            }
+            catch {
+                // Federation is best-effort. Don't fail the local buddy on a remote hiccup.
+            }
+        }
+        const out = buildBuddyOutput(inputs, { mood: bdMood, persona, personaName: bdPersonaName, size: bdSize });
+        return { content: [{ type: 'text', text: out.markdown }] };
+    }
+    return runCompanionBuddy;
+}
+//# sourceMappingURL=buddy-runner.js.map

package/dist/buddy-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"buddy-runner.js","sourceRoot":"","sources":["../src/buddy-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AASjE,MAAM,UAAU,qBAAqB,CAAC,IAAqB;IACzD,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAC1C;;;;;;OAMG;IACH,KAAK,UAAU,2BAA2B,CAAC,SAAiB;QAC1D,MAAM,OAAO,GAA2D,EAAE,CAAC;QAC3E,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC1D,sEAAsE;QACtE,MAAM,SAAS,GAAG,QAAQ,OAAO,EAAE,CAAC;QACpC,yEAAyE;QACzE,IAAI,WAA+B,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAiC,CAAC;YAC9H,WAAW,GAAG,GAAG,EAAE,IAAI,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;QAEtB,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC;gBAAE,MAAM;YAC/B,IAAI,KAAK,GAAyD,IAAI,CAAC;YACvE,IAAI,CAAC;gBACH,KAAK,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACrD,CAAC;YAAC,MAAM,CAAC;gBAAC,SAAS;YAAC,CAAC;YACrB,IAAI,CAAC,KAAK;gBAAE,SAAS;YACrB,gGAAgG;YAChG,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,CAAC;YACtE,MAAM,UAAU,GAAG,SAAS;gBAC1B,CAAC,CAAC,CAAC,SAAS,CAAC;gBACb,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAC7D,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;gBAC3B,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC;oBAAE,MAAM;gBAC/B,IAAI,CAAC;oBACH,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE;wBACtD,UAAU,EAAE,SAAS;wBACrB,YAAY,EAAE,WAAW;wBACzB,IAAI,EAAE,SAAS;qBAChB,CAAC,CAAC;oBACH,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;oBAC9F,IAAI,IAAI;wBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACjF,CAAC;gBAAC,MAAM,CAAC,CAAC,mBAAmB,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,UAAU,iBAAiB,CAAC,IAA6B;QAC5D,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAEnI,CAAC;QAEF,iDAAiD;QACjD,MAAM,GAAG,GAAG,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,mBAAmB,GAAG,gFAAgF;qBAC7G,CAAC;aACH,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAiB,SAAS,IAAK,OAAO,CAAC,GAAG,CAAC,0BAA2C,IAAI,MAAM,CAAC;QAC9G,MAAM,MAAM,GAAG,iBAAiB,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;QAE/D,mEAAmE;QACnE,uEAAuE;QACvE,IAAI,UAAU,KAAK,KAAK,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YAC/C,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,MAAM,2BAA2B,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBAChE,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;oBAAE,MAAM,CAAC,eAAe,GAAG,SAAS,CAAC;YAC/D,CAAC;YAAC,MAAM,CAAC;gBACP,4EAA4E;YAC9E,CAAC;QACH,CAAC;QAED,MAAM,GAAG,GAAG,gBAAgB,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1G,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC;IAC7D,CAAC;IAEC,OAAO,iBAAiB,CAAC;AAC3B,CAAC"}

package/dist/buddy.d.ts

@@ -10,7 +10,7 @@
  * `buddy_*` is queried via `wyrm_call_external` and its output is
  * folded into the response.
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  */
 import type Database from 'better-sqlite3';

package/dist/buddy.js

@@ -10,7 +10,7 @@
  * `buddy_*` is queried via `wyrm_call_external` and its output is
  * folded into the response.
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  */
 import { ICON } from './icons.js';

package/dist/build-flags.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Build-time flags.
+ *
+ * `OFFICIAL_BUILD` is **false in source** (so the test suite, self-hosters, and
+ * `import`ing the server module stay open — no account required). The release
+ * pipeline bakes `true` into the *published* `dist/` artifact only (see the
+ * `build:official` step), so the official `wyrm-mcp` npm package is
+ * account-required while the AGPL source remains free. A fork can flip this back
+ * to false (AGPL permits it) — but only as an unbranded build under its own
+ * terms (see NOTICE / the Trademark Policy).
+ *
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
+ * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me.
+ */
+/** True only in Ghost Protocol's official published artifact. */
+export declare const OFFICIAL_BUILD = false;
+//# sourceMappingURL=build-flags.d.ts.map

package/dist/build-flags.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-flags.d.ts","sourceRoot":"","sources":["../src/build-flags.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,iEAAiE;AACjE,eAAO,MAAM,cAAc,QAAQ,CAAC"}

package/dist/build-flags.js

@@ -0,0 +1,17 @@
+/**
+ * Build-time flags.
+ *
+ * `OFFICIAL_BUILD` is **false in source** (so the test suite, self-hosters, and
+ * `import`ing the server module stay open — no account required). The release
+ * pipeline bakes `true` into the *published* `dist/` artifact only (see the
+ * `build:official` step), so the official `wyrm-mcp` npm package is
+ * account-required while the AGPL source remains free. A fork can flip this back
+ * to false (AGPL permits it) — but only as an unbranded build under its own
+ * terms (see NOTICE / the Trademark Policy).
+ *
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
+ * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me.
+ */
+/** True only in Ghost Protocol's official published artifact. */
+export const OFFICIAL_BUILD = true;
+//# sourceMappingURL=build-flags.js.map

package/dist/build-flags.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-flags.js","sourceRoot":"","sources":["../src/build-flags.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,iEAAiE;AACjE,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,CAAC"}

package/dist/capabilities.d.ts

@@ -10,7 +10,7 @@
  * Also used as the body of the `wyrm_capabilities` MCP tool, the
  * `wyrm_inject_prompt` block, and the postinstall pitch.
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  */
 import type Database from 'better-sqlite3';

package/dist/capabilities.js

@@ -10,7 +10,7 @@
  * Also used as the body of the `wyrm_capabilities` MCP tool, the
  * `wyrm_inject_prompt` block, and the postinstall pitch.
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  */
 import { homedir } from 'os';

package/dist/capture.d.ts

@@ -1,7 +1,7 @@
 /**
  * Wyrm Capture Helpers — Classification logic for unified auto-capture.
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  */
 export type CaptureType = 'quest' | 'truth' | 'memory';

package/dist/capture.js

@@ -1,7 +1,7 @@
 /**
  * Wyrm Capture Helpers — Classification logic for unified auto-capture.
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  */
 /**

package/dist/causality.d.ts

@@ -9,7 +9,7 @@
  * ground truth flips to stale or gets superseded, the invalidation
  * cascade walks the edge graph and flags downstream decisions.
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  */
 import type Database from 'better-sqlite3';

package/dist/causality.js

@@ -9,7 +9,7 @@
  * ground truth flips to stale or gets superseded, the invalidation
  * cascade walks the edge graph and flags downstream decisions.
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  */
 import { emitEvent } from './events.js';

package/dist/cli.d.ts

@@ -1,7 +1,7 @@
 /**
  * Wyrm CLI - Beautiful command-line interface
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  * @module cli
  * @version 3.0.0

package/dist/cli.js

@@ -1,7 +1,7 @@
 /**
  * Wyrm CLI - Beautiful command-line interface
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  * @module cli
  * @version 3.0.0

package/dist/cloud-backup.d.ts

@@ -1,7 +1,7 @@
 /**
  * Wyrm Cloud Backup — Encrypted backup/restore to Cloudflare R2
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  * @module cloud-backup
  * @version 3.2.0

package/dist/cloud-backup.js

@@ -1,7 +1,7 @@
 /**
  * Wyrm Cloud Backup — Encrypted backup/restore to Cloudflare R2
  *
- * @copyright 2024-2026 Ghost Protocol (Pvt) Ltd.
+ * @copyright 2026 Ghost Protocol (Pvt) Ltd.
  * @license AGPL-3.0-or-later — dual-licensed; commercial terms: ghosts.lk@proton.me. See LICENSE.
  * @module cloud-backup
  * @version 3.2.0