aria-code 0.164.0__tar.gz → 0.166.0__tar.gz

{aria_code-0.164.0/src/aria_code.egg-info → aria_code-0.166.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: aria-code
-Version: 0.164.0
+Version: 0.166.0
 Summary: Open-source AI agent for coding, financial analysis and logistics operations: numbers you can check, client data kept apart, actions a person approves
 License: Apache-2.0
 Project-URL: Homepage, https://github.com/artheras/aria-code
@@ -36,24 +36,30 @@ Requires-Dist: aiofiles>=23.2.0
 Requires-Dist: websockets>=12.0
 Requires-Dist: apscheduler>=3.10.0
 Requires-Dist: ddgs>=9.0
-Requires-Dist: numpy>=1.26.0
-Requires-Dist: pandas>=2.2.0
-Requires-Dist: scipy>=1.13.0
-Requires-Dist: pandas_ta>=0.4.67b0; python_version >= "3.12"
-Requires-Dist: yfinance>=0.2.55
 Requires-Dist: pyobjc-framework-WebKit>=10.0; sys_platform == "darwin"
 Requires-Dist: markdown>=3.6
+Provides-Extra: finance
+Requires-Dist: numpy>=1.26.0; extra == "finance"
+Requires-Dist: pandas>=2.2.0; extra == "finance"
+Requires-Dist: scipy>=1.13.0; extra == "finance"
+Requires-Dist: pandas_ta>=0.4.67b0; python_version >= "3.12" and extra == "finance"
+Requires-Dist: yfinance>=0.2.55; extra == "finance"
 Provides-Extra: cn
 Requires-Dist: akshare>=1.14.68; extra == "cn"
+Requires-Dist: pandas>=2.2.0; extra == "cn"
 Provides-Extra: crypto
 Requires-Dist: ccxt>=4.4.0; extra == "crypto"
+Requires-Dist: pandas>=2.2.0; extra == "crypto"
 Provides-Extra: charts
 Requires-Dist: mplfinance>=0.12.10b0; extra == "charts"
+Requires-Dist: pandas>=2.2.0; extra == "charts"
 Provides-Extra: google
 Requires-Dist: google-genai>=1.0.0; extra == "google"
 Provides-Extra: data
 Requires-Dist: duckdb>=0.10.3; extra == "data"
+Requires-Dist: pandas>=2.2.0; extra == "data"
 Provides-Extra: files
+Requires-Dist: pandas>=2.2.0; extra == "files"
 Requires-Dist: pdfplumber>=0.11.0; extra == "files"
 Requires-Dist: pypdf>=4.3.0; extra == "files"
 Requires-Dist: python-docx>=1.1.2; extra == "files"
@@ -87,6 +93,7 @@ Requires-Dist: longbridge>=1.0.22; extra == "brokers"
 Requires-Dist: alpaca-py>=0.35.0; extra == "brokers"
 Provides-Extra: backtest
 Requires-Dist: vectorbt>=0.26.2; extra == "backtest"
+Requires-Dist: yfinance>=0.2.55; extra == "backtest"
 Provides-Extra: image-gen
 Requires-Dist: torch>=2.2.0; extra == "image-gen"
 Requires-Dist: diffusers>=0.30.0; extra == "image-gen"
@@ -99,11 +106,19 @@ Requires-Dist: playwright>=1.44.0; extra == "browser"
 Provides-Extra: desktop
 Requires-Dist: mss>=9.0.1; extra == "desktop"
 Requires-Dist: pyautogui>=0.9.54; extra == "desktop"
+Requires-Dist: pillow>=10.0; extra == "desktop"
+Requires-Dist: pyperclip>=1.9; extra == "desktop"
 Provides-Extra: sports
 Requires-Dist: understat>=0.1.0; extra == "sports"
+Requires-Dist: numpy>=1.26.0; extra == "sports"
 Provides-Extra: lsp
 Requires-Dist: python-lsp-server[all]>=1.10.0; extra == "lsp"
 Provides-Extra: dev
+Requires-Dist: numpy>=1.26.0; extra == "dev"
+Requires-Dist: pandas>=2.2.0; extra == "dev"
+Requires-Dist: scipy>=1.13.0; extra == "dev"
+Requires-Dist: pandas_ta>=0.4.67b0; python_version >= "3.12" and extra == "dev"
+Requires-Dist: yfinance>=0.2.55; extra == "dev"
 Requires-Dist: pytest>=8.2.0; extra == "dev"
 Requires-Dist: pytest-asyncio>=0.23.7; extra == "dev"
 Requires-Dist: pytest-timeout>=2.3.0; extra == "dev"
@@ -112,7 +127,16 @@ Requires-Dist: mypy>=1.10.0; extra == "dev"
 Requires-Dist: fastapi>=0.110.0; extra == "dev"
 Requires-Dist: uvicorn>=0.29.0; extra == "dev"
 Requires-Dist: python-multipart>=0.0.9; extra == "dev"
+Provides-Extra: service
+Requires-Dist: fastapi>=0.110.0; extra == "service"
+Requires-Dist: uvicorn>=0.29.0; extra == "service"
+Requires-Dist: python-multipart>=0.0.9; extra == "service"
 Provides-Extra: full
+Requires-Dist: numpy>=1.26.0; extra == "full"
+Requires-Dist: pandas>=2.2.0; extra == "full"
+Requires-Dist: scipy>=1.13.0; extra == "full"
+Requires-Dist: pandas_ta>=0.4.67b0; python_version >= "3.12" and extra == "full"
+Requires-Dist: yfinance>=0.2.55; extra == "full"
 Requires-Dist: google-genai>=1.0.0; extra == "full"
 Requires-Dist: akshare>=1.14.68; extra == "full"
 Requires-Dist: ccxt>=4.4.0; extra == "full"
@@ -127,6 +151,11 @@ Requires-Dist: beautifulsoup4>=4.12.3; extra == "full"
 Requires-Dist: Pillow>=10.4.0; extra == "full"
 Requires-Dist: ddgs>=9.0; extra == "full"
 Provides-Extra: all
+Requires-Dist: numpy>=1.26.0; extra == "all"
+Requires-Dist: pandas>=2.2.0; extra == "all"
+Requires-Dist: scipy>=1.13.0; extra == "all"
+Requires-Dist: pandas_ta>=0.4.67b0; python_version >= "3.12" and extra == "all"
+Requires-Dist: yfinance>=0.2.55; extra == "all"
 Requires-Dist: google-genai>=1.0.0; extra == "all"
 Requires-Dist: akshare>=1.14.68; extra == "all"
 Requires-Dist: ccxt>=4.4.0; extra == "all"
@@ -157,8 +186,8 @@ Dynamic: license-file
 
 <p align="center">
   <picture>
-    <source media="(prefers-color-scheme: dark)" srcset="docs/assets/aria-code-icon.png">
-    <img src="docs/assets/aria-code-icon-light.png" alt="Aria Code icon" width="88">
+    <source media="(prefers-color-scheme: dark)" srcset="docs/assets/aria-aplus-dark.png">
+    <img src="docs/assets/aria-aplus-light.png" alt="Aria Code icon" width="88">
   </picture>
 </p>
 
@@ -172,7 +201,7 @@ Numbers you can check, client data kept apart, actions a person approves.</p>
 <p align="center">
   <a href="https://www.npmjs.com/package/@artheras/aria-code"><img src="https://img.shields.io/npm/v/@artheras/aria-code/latest?style=flat-square&logo=npm&label=npm" alt="npm version"></a>
   <!-- Release automation pins PyPI: the default endpoint still selects legacy 4.x. -->
-  <a href="https://pypi.org/project/aria-code/0.164.0/"><img src="https://img.shields.io/badge/dynamic/json?url=https%3A%2F%2Fpypi.org%2Fpypi%2Faria-code%2F0.164.0%2Fjson&amp;query=%24.info.version&amp;prefix=v&amp;style=flat-square&amp;logo=pypi&amp;label=PyPI&amp;color=blue&amp;cacheSeconds=300" alt="PyPI version"></a>
+  <a href="https://pypi.org/project/aria-code/0.166.0/"><img src="https://img.shields.io/badge/dynamic/json?url=https%3A%2F%2Fpypi.org%2Fpypi%2Faria-code%2F0.166.0%2Fjson&amp;query=%24.info.version&amp;prefix=v&amp;style=flat-square&amp;logo=pypi&amp;label=PyPI&amp;color=blue&amp;cacheSeconds=300" alt="PyPI version"></a>
   <a href="https://github.com/artheras/aria-code/actions/workflows/ci.yml"><img src="https://img.shields.io/github/actions/workflow/status/artheras/aria-code/ci.yml?branch=main&style=flat-square&logo=githubactions&label=CI" alt="CI status"></a>
   <a href="LICENSE"><img src="https://img.shields.io/badge/license-Apache%202.0-64748b?style=flat-square" alt="Apache License 2.0"></a>
 </p>
@@ -225,6 +254,8 @@ The installer downloads the binary for your OS from the latest [GitHub release](
 
 Alternative package-manager installs: `npm install -g @artheras/aria-code` (requires npm) or `python3 -m pip install --upgrade "aria-code<4"` (requires Python 3.10+; the `<4` skips an older 4.x numbering that PyPI still lists). For development from source, see [CONTRIBUTING.md](CONTRIBUTING.md).
 
+The pip base install supports coding and chat without the financial data stack. Add it with `python3 -m pip install "aria-code[finance]<4"`; `full`, `all`, and `dev` retain finance dependencies. Native/npm releases retain their bundled financial tools. See [optional finance installation](docs/optional-finance.md).
+
 ### Updates
 
 Aria checks for a newer stable version in the background at startup, at most once per day. Cached notices appear immediately; network checks never delay the prompt. It checks GitHub Releases, or scoped npm for npm installs. Pip updates pin the GitHub version and verify that version is available on PyPI, avoiding the older 4.x numbering still listed as PyPI's latest. Source checkouts receive Git update instructions.
@@ -295,3 +326,5 @@ For the current command-line flags, run `aria-code --help`. For help inside the
 Contributions are welcome; see [CONTRIBUTING.md](CONTRIBUTING.md). Aria Code is open source under the [Apache License, Version 2.0](LICENSE).
 
 Releases 4.2.0 through 4.4.5 were published under the Business Source License 1.1 and remain available under those terms; releases up to and including 4.1.2 were MIT. A license grant cannot be withdrawn from someone who already has it, so each version keeps the license it shipped with — see [NOTICE](NOTICE).
+
+Shared financial tools can also run independently through the [Financial Service MCP integration](docs/financial-service.md), with a reusable Finance workflow in [Aria Plugins](https://github.com/artheras/aria-plugins). Legacy financial commands remain available.

{aria_code-0.164.0 → aria_code-0.166.0}/README.md

@@ -1,7 +1,7 @@
 <p align="center">
   <picture>
-    <source media="(prefers-color-scheme: dark)" srcset="docs/assets/aria-code-icon.png">
-    <img src="docs/assets/aria-code-icon-light.png" alt="Aria Code icon" width="88">
+    <source media="(prefers-color-scheme: dark)" srcset="docs/assets/aria-aplus-dark.png">
+    <img src="docs/assets/aria-aplus-light.png" alt="Aria Code icon" width="88">
   </picture>
 </p>
 
@@ -15,7 +15,7 @@ Numbers you can check, client data kept apart, actions a person approves.</p>
 <p align="center">
   <a href="https://www.npmjs.com/package/@artheras/aria-code"><img src="https://img.shields.io/npm/v/@artheras/aria-code/latest?style=flat-square&logo=npm&label=npm" alt="npm version"></a>
   <!-- Release automation pins PyPI: the default endpoint still selects legacy 4.x. -->
-  <a href="https://pypi.org/project/aria-code/0.164.0/"><img src="https://img.shields.io/badge/dynamic/json?url=https%3A%2F%2Fpypi.org%2Fpypi%2Faria-code%2F0.164.0%2Fjson&amp;query=%24.info.version&amp;prefix=v&amp;style=flat-square&amp;logo=pypi&amp;label=PyPI&amp;color=blue&amp;cacheSeconds=300" alt="PyPI version"></a>
+  <a href="https://pypi.org/project/aria-code/0.166.0/"><img src="https://img.shields.io/badge/dynamic/json?url=https%3A%2F%2Fpypi.org%2Fpypi%2Faria-code%2F0.166.0%2Fjson&amp;query=%24.info.version&amp;prefix=v&amp;style=flat-square&amp;logo=pypi&amp;label=PyPI&amp;color=blue&amp;cacheSeconds=300" alt="PyPI version"></a>
   <a href="https://github.com/artheras/aria-code/actions/workflows/ci.yml"><img src="https://img.shields.io/github/actions/workflow/status/artheras/aria-code/ci.yml?branch=main&style=flat-square&logo=githubactions&label=CI" alt="CI status"></a>
   <a href="LICENSE"><img src="https://img.shields.io/badge/license-Apache%202.0-64748b?style=flat-square" alt="Apache License 2.0"></a>
 </p>
@@ -68,6 +68,8 @@ The installer downloads the binary for your OS from the latest [GitHub release](
 
 Alternative package-manager installs: `npm install -g @artheras/aria-code` (requires npm) or `python3 -m pip install --upgrade "aria-code<4"` (requires Python 3.10+; the `<4` skips an older 4.x numbering that PyPI still lists). For development from source, see [CONTRIBUTING.md](CONTRIBUTING.md).
 
+The pip base install supports coding and chat without the financial data stack. Add it with `python3 -m pip install "aria-code[finance]<4"`; `full`, `all`, and `dev` retain finance dependencies. Native/npm releases retain their bundled financial tools. See [optional finance installation](docs/optional-finance.md).
+
 ### Updates
 
 Aria checks for a newer stable version in the background at startup, at most once per day. Cached notices appear immediately; network checks never delay the prompt. It checks GitHub Releases, or scoped npm for npm installs. Pip updates pin the GitHub version and verify that version is available on PyPI, avoiding the older 4.x numbering still listed as PyPI's latest. Source checkouts receive Git update instructions.
@@ -138,3 +140,5 @@ For the current command-line flags, run `aria-code --help`. For help inside the
 Contributions are welcome; see [CONTRIBUTING.md](CONTRIBUTING.md). Aria Code is open source under the [Apache License, Version 2.0](LICENSE).
 
 Releases 4.2.0 through 4.4.5 were published under the Business Source License 1.1 and remain available under those terms; releases up to and including 4.1.2 were MIT. A license grant cannot be withdrawn from someone who already has it, so each version keeps the license it shipped with — see [NOTICE](NOTICE).
+
+Shared financial tools can also run independently through the [Financial Service MCP integration](docs/financial-service.md), with a reusable Finance workflow in [Aria Plugins](https://github.com/artheras/aria-plugins). Legacy financial commands remain available.

{aria_code-0.164.0 → aria_code-0.166.0}/pyproject.toml

@@ -4,11 +4,11 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "aria-code"
-version = "0.164.0"
+version = "0.166.0"
 description = "Open-source AI agent for coding, financial analysis and logistics operations: numbers you can check, client data kept apart, actions a person approves"
 readme = "README.md"
 license = { text = "Apache-2.0" }
-# Upper bound is real, not defensive: the core dep pandas_ta pulls numba, and
+# Upper bound is real, not defensive: the finance/full extras include pandas_ta, which pulls numba, and
 # numba hard-refuses to build on 3.14 ("only versions >=3.10,<3.14 are
 # supported"). Without this bound pip happily starts the install on 3.14 and
 # fails deep in the dependency tree on a numba source build — an error that
@@ -66,12 +66,6 @@ dependencies = [
     "websockets>=12.0",
     "apscheduler>=3.10.0",
     "ddgs>=9.0",            # keyless web_search fallback — tiny, kept in core so search works even on a slim/degraded install
-    # Quant core (used across indicators, risk, formatting)
-    "numpy>=1.26.0",
-    "pandas>=2.2.0",
-    "scipy>=1.13.0",
-    "pandas_ta>=0.4.67b0; python_version >= '3.12'",  # PyPI removed 0.3.x; 0.4.x is 3.12-only. Optional — code has graceful fallback (find_spec/try-except).
-    "yfinance>=0.2.55",
     # macOS native PDF engine for /report --pdf (WKWebView.createPDF; no browser
     # required). Non-darwin platforms use headless Chrome / weasyprint instead.
     "pyobjc-framework-WebKit>=10.0; sys_platform == 'darwin'",
@@ -81,19 +75,29 @@ dependencies = [
 
 [project.optional-dependencies]
 
+# Optional financial data and numerical tools; coding/chat do not require them.
+finance = [
+    "numpy>=1.26.0",
+    "pandas>=2.2.0",
+    "scipy>=1.13.0",
+    "pandas_ta>=0.4.67b0; python_version >= '3.12'",
+    "yfinance>=0.2.55",
+]
+
 # ── Data sources (heavy / region-specific) ────────────────────────────────────
-cn = ["akshare>=1.14.68"]          # China A-share / HK market data (large dep tree)
-crypto = ["ccxt>=4.4.0"]           # crypto exchanges (large dep tree)
+cn = ["akshare>=1.14.68", "pandas>=2.2.0"]          # China A-share / HK market data (large dep tree)
+crypto = ["ccxt>=4.4.0", "pandas>=2.2.0"]           # crypto exchanges (large dep tree)
 
 # ── Feature add-ons ────────────────────────────────────────────────────────────
-charts = ["mplfinance>=0.12.10b0"]    # candlestick charts in /report /chart
+charts = ["mplfinance>=0.12.10b0", "pandas>=2.2.0"]    # candlestick charts in /report /chart
 
 # Gemini / Vertex AI. Now a core dependency (see the top of `dependencies`);
 # the extra is kept so `pip install 'aria-code[google]'` in existing scripts
 # and docs keeps working.
 google = ["google-genai>=1.0.0"]
-data = ["duckdb>=0.10.3"]          # in-process SQL: /data sql "SELECT …"
+data = ["duckdb>=0.10.3", "pandas>=2.2.0"]          # in-process SQL: /data sql "SELECT …"
 files = [                          # /file load + /file analyze document parsing
+    "pandas>=2.2.0",                 # CSV/Excel analysis also needs dataframes
     "pdfplumber>=0.11.0",
     "pypdf>=4.3.0",
     "python-docx>=1.1.2",
@@ -128,7 +132,7 @@ brokers = [
 ]
 
 # ── Enhanced backtesting ───────────────────────────────────────────────────────
-backtest = ["vectorbt>=0.26.2"]
+backtest = ["vectorbt>=0.26.2", "yfinance>=0.2.55"]
 
 # ── Local, self-hosted image generation (no API key, no per-call cost) ─────────
 image_gen = [
@@ -141,14 +145,20 @@ image_gen = [
 # ── Web search / browser / desktop automation ──────────────────────────────────
 web = ["ddgs>=9.0"]                                # zero-config web_search fallback
 browser = ["playwright>=1.44.0"]                   # headless browser (/browser)
-desktop = ["mss>=9.0.1", "pyautogui>=0.9.54"]      # screen capture + GUI automation
-sports = ["understat>=0.1.0"]                       # football xG data
+desktop = ["mss>=9.0.1", "pyautogui>=0.9.54", "pillow>=10.0", "pyperclip>=1.9"]      # screen capture + GUI automation
+sports = ["understat>=0.1.0", "numpy>=1.26.0"]                       # football xG data
 
 # ── Language-server diagnostics (/lsp, lsp_autocheck) ──────────────────────────
 lsp = ["python-lsp-server[all]>=1.10.0"]
 
 # ── Developer tools ────────────────────────────────────────────────────────────
 dev = [
+    # Existing developer suites include finance/quant regression fixtures.
+    "numpy>=1.26.0",
+    "pandas>=2.2.0",
+    "scipy>=1.13.0",
+    "pandas_ta>=0.4.67b0; python_version >= '3.12'",
+    "yfinance>=0.2.55",
     "pytest>=8.2.0",
     "pytest-asyncio>=0.23.7",
     # test.yml's pytest job installs the suite through this extra and passes
@@ -165,10 +175,23 @@ dev = [
     "python-multipart>=0.0.9",
 ]
 
+# ── Project-review HTTP service (Dockerfile.review installs ".[service]") ─────
+# Kept in step with the fastapi/uvicorn/python-multipart pins in `dev` above.
+service = [
+    "fastapi>=0.110.0",
+    "uvicorn>=0.29.0",
+    "python-multipart>=0.0.9",
+]
+
 # ── Full feature set (what the bootstrap installers install by default) ────────
 # Everything a normal user wants — all data sources + files + charts + SQL —
 # but no brokers / dev / backtest extras.
 full = [
+    "numpy>=1.26.0",
+    "pandas>=2.2.0",
+    "scipy>=1.13.0",
+    "pandas_ta>=0.4.67b0; python_version >= '3.12'",
+    "yfinance>=0.2.55",
     "google-genai>=1.0.0",
     "akshare>=1.14.68",
     "ccxt>=4.4.0",
@@ -186,6 +209,11 @@ full = [
 
 # ── Everything (full + brokers + backtest + automation + dev) ─────────────────
 all = [
+    "numpy>=1.26.0",
+    "pandas>=2.2.0",
+    "scipy>=1.13.0",
+    "pandas_ta>=0.4.67b0; python_version >= '3.12'",
+    "yfinance>=0.2.55",
     "google-genai>=1.0.0",
     "akshare>=1.14.68",
     "ccxt>=4.4.0",
@@ -218,6 +246,7 @@ all = [
 aria-code = "aria_code.apps.cli.main:main"
 aria = "aria_code.apps.cli.main:main"
 aria-code-mcp = "aria_code.aria_mcp_server:main"
+aria-computer-use = "aria_code.computer_use_server:main"
 
 [project.urls]
 Homepage = "https://github.com/artheras/aria-code"
@@ -370,3 +399,4 @@ python_files = ["test_*.py"]
 filterwarnings = [
     "ignore:datetime\\.datetime\\.utcfromtimestamp\\(\\) is deprecated:DeprecationWarning:google\\.protobuf\\.internal\\.well_known_types",
 ]
+

{aria_code-0.164.0 → aria_code-0.166.0}/src/aria_code/_version.py

@@ -3,7 +3,7 @@
 __version__ used to live in aria_cli.py, which meant anything wanting the
 version string had to import the whole interactive CLI — prompt_toolkit,
 bootstrap hooks, the tool registry, all of it. The three consumers each worked
-around that differently: crash_report and a diagnostics accessor imported
+around that differently: a crash reporter (since removed) and a diagnostics accessor imported
 aria_cli anyway, and the MCP server went to importlib.metadata instead, with a
 comment explaining that pulling in aria_cli was too heavy for a binary whose
 job is speaking JSON-RPC over stdio.
@@ -17,4 +17,4 @@ from __future__ import annotations
 
 __all__ = ["__version__"]
 
-__version__ = "0.164.0"
+__version__ = "0.166.0"

aria_code-0.166.0/src/aria_code/account_memory.py

@@ -0,0 +1,296 @@
+"""Account-scoped durable memory: a cloud snapshot plus a retryable outbox.
+
+Only newly captured account facts are queued. Legacy files and repository
+instructions are never uploaded. A failed request never becomes a success.
+"""
+
+from __future__ import annotations
+
+import uuid
+import os
+from contextlib import contextmanager
+import json
+import threading
+import time
+from typing import Callable
+
+from aria_code.account_session import account_id, account_root, get_account_token, read_config
+from aria_code.cloud_memory import CloudMemoryClient
+from aria_code.packages.aria_core.secure_file import write_secret_json
+
+_LOCKS: dict[str, threading.RLock] = {}
+_SYNC_LOCKS: dict[str, threading.Lock] = {}
+_LOCK = threading.Lock()
+
+
+def _lock_for(table, key, factory):
+    with _LOCK:
+        return table.setdefault(str(key), factory())
+
+
+@contextmanager
+def _state_lock(path):
+    """Protect read-modify-write across CLI windows as well as threads."""
+    with _lock_for(_LOCKS, path, threading.RLock):
+        path.parent.mkdir(parents=True, exist_ok=True)
+        descriptor = os.open(str(path) + ".lock", os.O_CREAT | os.O_RDWR, 0o600)
+        with os.fdopen(descriptor, "r+b") as handle:
+            if os.name == "nt":
+                import msvcrt
+
+                handle.seek(0, 2)
+                if handle.tell() == 0:
+                    handle.write(b"0")
+                    handle.flush()
+                handle.seek(0)
+                msvcrt.locking(handle.fileno(), msvcrt.LK_LOCK, 1)
+                try:
+                    yield
+                finally:
+                    handle.seek(0)
+                    msvcrt.locking(handle.fileno(), msvcrt.LK_UNLCK, 1)
+            else:
+                import fcntl
+
+                fcntl.flock(handle, fcntl.LOCK_EX)
+                try:
+                    yield
+                finally:
+                    fcntl.flock(handle, fcntl.LOCK_UN)
+
+
+def _write_state(path, data):
+    temporary = path.with_name(f".{path.name}.{os.getpid()}.{threading.get_ident()}.tmp")
+    try:
+        write_secret_json(temporary, data)
+        os.replace(temporary, path)
+    finally:
+        temporary.unlink(missing_ok=True)
+
+
+class AccountMemory:
+    def __init__(self, config: dict | Callable[[], dict] | None = None, save=None):
+        self._config = config if config is not None else read_config
+        self.save = save
+
+    def config(self):
+        return self._config() if callable(self._config) else self._config
+
+    def _owner(self):
+        config = self.config()
+        uid = account_id(config)
+        return config, uid, account_root(config) / "cloud-memory.json"
+
+    @staticmethod
+    def _read(path):
+        try:
+            data = json.loads(path.read_text(encoding="utf-8"))
+            return data if isinstance(data, dict) else {}
+        except (OSError, ValueError):
+            return {}
+
+    def status(self):
+        config, uid, path = self._owner()
+        with _state_lock(path):
+            data = self._read(path)
+        return {
+            "account_id": uid,
+            "email": config.get("email") or "",
+            "enabled": data.get("preferences", {}).get("enabled", True),
+            "pending": len(data.get("outbox", [])),
+            "last_synced": data.get("last_synced"),
+            "error": data.get("error"),
+        }
+
+    def facts(self, *, include_disabled=False):
+        _, uid, path = self._owner()
+        if not uid:
+            return []
+        with _state_lock(path):
+            data = self._read(path)
+        if not include_disabled and data.get("preferences", {}).get("enabled") is False:
+            return []
+        outbox = data.get("outbox", [])
+        hidden = {op["id"] for op in outbox if op.get("op") == "delete"}
+        cancelled = set(data.get("cancelled_adds", []))
+        facts = [
+            f
+            for f in data.get("facts", [])
+            if f.get("id") not in hidden and (f.get("metadata") or {}).get("client_id") not in cancelled
+        ]
+        seen = {f.get("content") for f in facts}
+        for op in outbox:
+            if op.get("op") == "add" and op.get("content") not in seen:
+                facts.append({"id": op["id"], "content": op["content"], "pending": True})
+                seen.add(op["content"])
+        return facts
+
+    def context(self, max_chars=800):
+        _, uid, path = self._owner()
+        if not uid:
+            return ""
+        with _state_lock(path):
+            preferences = self._read(path).get("preferences", {})
+        if preferences.get("enabled") is False:
+            return ""
+        lines = [str(preferences[key]).strip() for key in ("nickname", "occupation", "about") if preferences.get(key)]
+        lines.extend(str(f.get("content", "")) for f in self.facts())
+        text = "\n".join(dict.fromkeys(lines))[:max_chars]
+        return f"## Account Memory\n{text}\n" if text else ""
+
+    def add(self, content: str):
+        config, uid, path = self._owner()
+        content = content.strip()[:4000]
+        if not uid or not content:
+            return False
+        # Stable per queued operation, so a retry is idempotent but an explicit
+        # re-add after deletion can create a new fact.
+        item_id = uuid.uuid4().hex
+        with _state_lock(path):
+            data = self._read(path)
+            if data.get("preferences", {}).get("enabled") is False or account_id(self.config()) != uid:
+                return False
+            if any(f.get("content") == content for f in data.get("facts", [])):
+                return True
+            outbox = data.setdefault("outbox", [])
+            if not any(op.get("op") == "add" and op.get("content") == content for op in outbox):
+                outbox.append({"op": "add", "id": item_id, "content": content})
+            _write_state(path, data)
+        return True
+
+    def forget(self, item_id):
+        _, uid, path = self._owner()
+        if not uid:
+            return False
+        with _state_lock(path):
+            data = self._read(path)
+            pending = data.setdefault("outbox", [])
+            local = any(op.get("id") == item_id and op.get("op") == "add" for op in pending)
+            if local:
+                data["cancelled_adds"] = list(set(data.get("cancelled_adds", [])) | {item_id})
+            data["outbox"] = [op for op in pending if op.get("id") != item_id]
+            if not local and any(f.get("id") == item_id for f in data.get("facts", [])):
+                data["outbox"].append({"op": "delete", "id": item_id})
+            _write_state(path, data)
+        return True
+
+    def sync(self, *, force=False):
+        config, uid, path = self._owner()
+        if not uid:
+            return {"ok": False, "reason": "sign-in-required"}
+        lock = _lock_for(_SYNC_LOCKS, path, threading.Lock)
+        if not lock.acquire(blocking=False):
+            return {"ok": False, "reason": "in-progress"}
+        state_lock = lambda: _state_lock(path)
+        original = config.get("auth_token")
+
+        def current():
+            now = self.config()
+            return account_id(now) == uid and now.get("auth_token") == original
+
+        def update(**fields):
+            if not current():
+                return
+            with state_lock():
+                data = self._read(path)
+                data.update(fields)
+                _write_state(path, data)
+
+        try:
+            with state_lock():
+                data = self._read(path)
+            if not force and time.time() - data.get("last_attempt", 0) < 60:
+                return {"ok": not data.get("error"), "cached": True}
+            update(last_attempt=time.time())
+            token = get_account_token(config, self.save)
+            if token:
+                original = token
+            if not token or not current():
+                update(error="sign-in-required")
+                return {"ok": False, "reason": "sign-in-required"}
+            from aria_code.apps.cli.endpoint_migration import PRODUCTION_API_URL
+
+            client = CloudMemoryClient(str(config.get("api_url") or PRODUCTION_API_URL), token)
+            preferences = client.get_preferences()
+            if not preferences or not current():
+                reason = "sign-in-required" if client.last_status == 401 else "service-unavailable"
+                update(error=reason)
+                return {"ok": False, "reason": reason}
+            # A newly disabled switch takes effect even if the next read fails.
+            update(preferences=preferences)
+            summary = client._request("GET", "/api/v2/memory/summary")
+            if summary is None:
+                update(error="service-unavailable")
+                return {"ok": False, "reason": "service-unavailable"}
+            if not current():
+                return {"ok": False, "reason": "account-changed"}
+            facts = summary.get("facts", [])
+            facts = [f for f in facts if isinstance(f, dict) and f.get("id") and isinstance(f.get("content"), str)]
+            update(preferences=preferences, facts=facts)
+            enabled = preferences.get("enabled") is not False
+            with state_lock():
+                latest = self._read(path)
+                cancelled = set(latest.get("cancelled_adds", []))
+                outbox = latest.setdefault("outbox", [])
+                for fact in facts:
+                    if (fact.get("metadata") or {}).get("client_id") in cancelled:
+                        deletion = {"op": "delete", "id": fact["id"]}
+                        if deletion not in outbox:
+                            outbox.append(deletion)
+                _write_state(path, latest)
+                pending = list(outbox)
+            failed = False
+            for op in pending[:10]:
+                if not enabled and op["op"] == "add":
+                    continue
+                if not current():
+                    return {"ok": False, "reason": "account-changed"}
+                if op["op"] == "add":
+                    existing = next(
+                        (
+                            f
+                            for f in facts
+                            if (f.get("metadata") or {}).get("client_id") == op["id"]
+                            or f.get("content") == op["content"]
+                        ),
+                        None,
+                    )
+                    item = existing or client._request(
+                        "POST",
+                        "/api/v2/memory/items",
+                        body={
+                            "content": op["content"],
+                            "client_id": op["id"],
+                            "scope": "user",
+                            "kind": "durable",
+                            "metadata": {"source": "aria-code", "client_id": op["id"]},
+                        },
+                    )
+                    success = isinstance(item, dict) and bool(item.get("id"))
+                    if success and not existing and not item.get("deleted_at"):
+                        facts.append(item)
+                else:
+                    success = client.delete_item(op["id"])
+                    if success:
+                        facts = [f for f in facts if f.get("id") != op["id"]]
+                if not current():
+                    return {"ok": False, "reason": "account-changed"}
+                if not success:
+                    failed = True
+                    break
+                with state_lock():
+                    latest = self._read(path)
+                    latest["outbox"] = [item for item in latest.get("outbox", []) if item != op]
+                    if op["op"] == "add" and op["id"] in latest.get("cancelled_adds", []) and item.get("id"):
+                        deletion = {"op": "delete", "id": item["id"]}
+                        if deletion not in latest["outbox"]:
+                            latest["outbox"].append(deletion)
+                    latest["facts"] = facts
+                    _write_state(path, latest)
+            update(last_synced=time.time(), error="pending-retry" if failed else None)
+            return {"ok": not failed, "pending": self.status()["pending"], "enabled": enabled}
+        except Exception:
+            update(error="service-unavailable")
+            return {"ok": False, "reason": "service-unavailable"}
+        finally:
+            lock.release()