cortexdb-cli 0.2.0__py3-none-any.whl

cortexdb_cli/__init__.py

@@ -0,0 +1,3 @@
+"""CortexDB CLI — command-line interface for the v1 memory API."""
+
+__version__ = "0.2.0"

cortexdb_cli/client.py

@@ -0,0 +1,92 @@
+"""HTTP client for the CortexDB v1 API.
+
+Thin wrapper around httpx that reads credentials + endpoint from the CLI
+context and stamps every request with both `Authorization: Bearer …` and
+`X-Cortex-Actor: …`. The actor header is mandatory on v1 — missing it
+returns 401 ACTOR_MISMATCH no matter how valid the token is.
+
+We deliberately don't depend on the cortexdbai SDK: keeping the CLI a
+straight HTTP client makes the install fast and lets us pin httpx
+independently from the SDK's release cadence.
+"""
+
+from __future__ import annotations
+
+from contextlib import contextmanager
+from typing import Any, Generator
+
+import httpx
+
+from cortexdb_cli import __version__
+
+DEFAULT_ENDPOINT = "https://api-v1.cortexdb.ai"
+
+
+class CortexClient:
+    """Synchronous HTTP client for the CortexDB v1 API."""
+
+    def __init__(
+        self,
+        endpoint: str,
+        api_key: str,
+        actor: str = "",
+        timeout: float = 30.0,
+    ) -> None:
+        self.endpoint = endpoint.rstrip("/")
+        self.api_key = api_key
+        self.actor = actor
+        headers: dict[str, str] = {
+            "Content-Type": "application/json",
+            "User-Agent": f"cortexdb-cli/{__version__}",
+        }
+        if api_key:
+            headers["Authorization"] = f"Bearer {api_key}"
+        if actor:
+            headers["X-Cortex-Actor"] = actor
+        self._http = httpx.Client(
+            base_url=self.endpoint,
+            headers=headers,
+            timeout=timeout,
+        )
+
+    def close(self) -> None:
+        self._http.close()
+
+    def get(self, path: str, params: dict[str, Any] | None = None) -> httpx.Response:
+        return self._http.get(path, params=params)
+
+    def post(
+        self,
+        path: str,
+        json: dict[str, Any] | None = None,
+        params: dict[str, Any] | None = None,
+    ) -> httpx.Response:
+        return self._http.post(path, json=json, params=params)
+
+    def delete(self, path: str, params: dict[str, Any] | None = None) -> httpx.Response:
+        return self._http.delete(path, params=params)
+
+
+def signup(endpoint: str = DEFAULT_ENDPOINT, timeout: float = 30.0) -> dict[str, Any]:
+    """Call POST /v1/auth/signup and return {token, user_id, scope, expires_at, tier}.
+
+    The endpoint is public — no auth required. Free tier; 7-day TTL.
+    """
+    with httpx.Client(timeout=timeout) as http:
+        resp = http.post(f"{endpoint.rstrip('/')}/v1/auth/signup", json={})
+        resp.raise_for_status()
+        return resp.json()
+
+
+@contextmanager
+def get_client(ctx: dict[str, Any]) -> Generator[CortexClient, None, None]:
+    """Create a CortexClient from CLI context."""
+    client = CortexClient(
+        endpoint=ctx.get("endpoint", DEFAULT_ENDPOINT),
+        api_key=ctx.get("api_key", ""),
+        actor=ctx.get("actor", ""),
+    )
+    try:
+        yield client
+    finally:
+        client.close()

cortexdb_cli/commands/__init__.py

@@ -0,0 +1 @@
+"""CortexDB CLI command modules."""

cortexdb_cli/commands/admin.py

@@ -0,0 +1,83 @@
+"""cortexdb admin — health, usage, layer stats."""
+
+from __future__ import annotations
+
+import click
+
+from cortexdb_cli.client import get_client
+from cortexdb_cli.errors import handle_errors
+from cortexdb_cli.output import (
+    is_json_mode,
+    print_health,
+    print_ontology,
+    print_usage,
+    spinner,
+)
+
+
+@click.group("admin")
+def admin_group() -> None:
+    """Diagnostics — reachability, identity, rate-limit, layer status."""
+
+
+@admin_group.command("health")
+@click.pass_context
+@handle_errors
+def admin_health(ctx: click.Context) -> None:
+    """Auth + reachability check (GET /v1/auth/whoami)."""
+    cfg = ctx.obj
+    with get_client(cfg) as client:
+        resp = client.get("/v1/auth/whoami")
+        resp.raise_for_status()
+        body = resp.json()
+        # Normalise into the shape print_health expects.
+        body.setdefault("status", "ok")
+        print_health(body, cfg)
+
+
+@admin_group.command("usage")
+@click.pass_context
+@handle_errors
+def admin_usage(ctx: click.Context) -> None:
+    """Tier, capabilities, rate-limit headroom, token expiry."""
+    cfg = ctx.obj
+    with get_client(cfg) as client:
+        if not is_json_mode(cfg):
+            with spinner("Loading usage..."):
+                resp = client.get("/v1/auth/whoami")
+        else:
+            resp = client.get("/v1/auth/whoami")
+        resp.raise_for_status()
+        body = resp.json()
+        # Fold rate-limit + expiry response headers into the body so the
+        # output formatter can render them in one block.
+        for k in (
+            "X-RateLimit-Limit",
+            "X-RateLimit-Reset",
+            "X-RateLimit-Remaining",
+            "X-Cortex-Token-Expires-In",
+            "X-Cortex-Token-Expires-At",
+        ):
+            if k in resp.headers:
+                body[k] = resp.headers[k]
+        print_usage(body, cfg)
+
+
+@admin_group.command("layers")
+@click.pass_context
+@handle_errors
+def admin_layers(ctx: click.Context) -> None:
+    """Per-layer counts and synthesis lag (GET /v1/admin/layers/stats).
+
+    Stability: experimental — the endpoint is gated by the
+    `admin.layers.stats` capability and may not be present on the free tier.
+    """
+    cfg = ctx.obj
+    with get_client(cfg) as client:
+        if not is_json_mode(cfg):
+            with spinner("Loading layer stats..."):
+                resp = client.get("/v1/admin/layers/stats")
+        else:
+            resp = client.get("/v1/admin/layers/stats")
+        resp.raise_for_status()
+        print_ontology(resp.json(), cfg)

cortexdb_cli/commands/answer.py

@@ -0,0 +1,98 @@
+"""cortexdb answer — POST /v1/answer (recall + LLM answer)."""
+
+from __future__ import annotations
+
+from typing import Any
+
+import click
+
+from cortexdb_cli.client import get_client
+from cortexdb_cli.errors import handle_errors
+from cortexdb_cli.output import console, is_json_mode, print_json, spinner
+
+
+@click.command("answer")
+@click.argument("question")
+@click.option("--scope", "-S", help="Scope path (defaults to your default scope)")
+@click.option(
+    "--view",
+    type=click.Choice(["raw", "granular", "structured", "holistic", "descend"]),
+    default="holistic",
+    show_default=True,
+)
+@click.option("--temporal", help='Natural-language time window, e.g. "last 30 days"')
+@click.option("--answer-model", help="Override the answer model (paid tier only).")
+@click.option(
+    "--diagnostics",
+    type=click.Choice(["none", "summary", "full"]),
+    default="none",
+    show_default=True,
+)
+@click.pass_context
+@handle_errors
+def answer_cmd(
+    ctx: click.Context,
+    question: str,
+    scope: str | None,
+    view: str,
+    temporal: str | None,
+    answer_model: str | None,
+    diagnostics: str,
+) -> None:
+    """Ask a question — server recalls context and an LLM answers it.
+
+    Counts against the tenant's LLM quota. Requires the `llm.invoke`
+    capability (granted by default on every tier including Free).
+
+        cortexdb answer "Did Acme renew?" --temporal "last 30 days"
+    """
+    cfg = ctx.obj
+    target_scope = scope or cfg.get("scope") or cfg.get("actor")
+    if not target_scope:
+        raise click.UsageError(
+            "No scope configured. Run `cortexdb init` first, or pass --scope explicitly."
+        )
+
+    body: dict[str, Any] = {
+        "scope": target_scope,
+        "question": question,
+        "view": view,
+        "diagnostics": diagnostics,
+    }
+    if temporal:
+        body["temporal"] = {"natural": temporal}
+    if answer_model:
+        body["answer_model"] = answer_model
+
+    with get_client(cfg) as client:
+        if not is_json_mode(cfg):
+            with spinner("Answering..."):
+                resp = client.post("/v1/answer", json=body)
+        else:
+            resp = client.post("/v1/answer", json=body)
+        resp.raise_for_status()
+        data = resp.json()
+
+    if is_json_mode(cfg):
+        print_json(data)
+        return
+
+    from rich.markup import escape
+    from rich.panel import Panel
+
+    text = data.get("answer") or data.get("text") or "(no answer returned)"
+    cites = data.get("citations") or []
+
+    console.print(
+        Panel(
+            escape(str(text)),
+            title="[header]Answer[/header]",
+            border_style="cyan",
+            padding=(1, 2),
+        )
+    )
+    if cites:
+        console.print(f"\n[dim]{len(cites)} citation(s):[/dim]")
+        for c in cites[:10]:
+            eid = c.get("event_id") or c.get("id") or ""
+            console.print(f"  [dim]· {escape(eid)}[/dim]")

cortexdb_cli/commands/auth.py

@@ -0,0 +1,128 @@
+"""cortexdb auth — /v1/auth/{whoami,signup,tokens,revoke}."""
+
+from __future__ import annotations
+
+import click
+
+from cortexdb_cli.client import DEFAULT_ENDPOINT, get_client, signup as signup_call
+from cortexdb_cli.config import config_path, save_config
+from cortexdb_cli.errors import handle_errors
+from cortexdb_cli.output import console, is_json_mode, print_json, print_health, spinner
+from cortexdb_cli.state import save_state, state_path
+
+
+@click.group("auth")
+def auth_group() -> None:
+    """Identity, token mint, revoke, anonymous signup."""
+
+
+@auth_group.command("whoami")
+@click.pass_context
+@handle_errors
+def auth_whoami(ctx: click.Context) -> None:
+    """GET /v1/auth/whoami — caller, tenant, effective capabilities."""
+    cfg = ctx.obj
+    with get_client(cfg) as client:
+        resp = client.get("/v1/auth/whoami")
+        resp.raise_for_status()
+        body = resp.json()
+        body.setdefault("status", "ok")
+        print_health(body, cfg)
+
+
+@auth_group.command("signup")
+@click.option(
+    "--endpoint",
+    default=DEFAULT_ENDPOINT,
+    show_default=True,
+    help="CortexDB v1 API base URL.",
+)
+@click.option("--save", "save_state_flag", is_flag=True, help="Persist to ~/.cortexdb/state.json")
+@click.pass_context
+@handle_errors
+def auth_signup(ctx: click.Context, endpoint: str, save_state_flag: bool) -> None:
+    """POST /v1/auth/signup — anonymous free-tier token.
+
+    Without --save, prints the response and exits — useful when you want
+    to feed the token into a CI env var. With --save, behaves like
+    `cortexdb init` and writes ~/.cortexdb/state.json.
+    """
+    resp = signup_call(endpoint)
+    if save_state_flag:
+        save_state(
+            {
+                "token": resp["token"],
+                "user_id": resp["user_id"],
+                "scope": resp.get("scope") or resp["user_id"],
+                "expires_at": resp.get("expires_at"),
+                "tier": resp.get("tier", "free"),
+                "source": "signup",
+            }
+        )
+        save_config("default", {"endpoint": endpoint})
+        if is_json_mode(ctx.obj):
+            print_json(resp)
+        else:
+            console.print(
+                f"[success]Saved state[/success] to {state_path()}\n"
+                f"  Actor: {resp['user_id']}\n"
+                f"  Scope: {resp.get('scope') or resp['user_id']}\n"
+                f"  Expires: {resp.get('expires_at', '?')}"
+            )
+    else:
+        print_json(resp)
+
+
+@auth_group.command("tokens")
+@click.option("--subject", required=True, help="`sub` claim on the minted token, e.g. user:alice")
+@click.option(
+    "--ttl",
+    "ttl_seconds",
+    type=int,
+    default=3600,
+    show_default=True,
+    help="Token lifetime in seconds (server enforces a tenant ceiling).",
+)
+@click.option("--scope", "scopes", multiple=True, help="`scopes` claim — repeat for multiple.")
+@click.pass_context
+@handle_errors
+def auth_tokens(
+    ctx: click.Context, subject: str, ttl_seconds: int, scopes: tuple[str, ...]
+) -> None:
+    """POST /v1/auth/tokens — mint a service-account token.
+
+    Requires the `auth.mint` capability. Free-tier anonymous tokens do not
+    have it — you must hold an IdP-issued token (or a token previously
+    minted by an account that does).
+
+        cortexdb auth tokens --subject user:alice --ttl 3600 --scope org:acme/user:alice
+    """
+    cfg = ctx.obj
+    body: dict[str, object] = {"subject": subject, "ttl_seconds": ttl_seconds}
+    if scopes:
+        body["scopes"] = list(scopes)
+    with get_client(cfg) as client:
+        if not is_json_mode(cfg):
+            with spinner("Minting..."):
+                resp = client.post("/v1/auth/tokens", json=body)
+        else:
+            resp = client.post("/v1/auth/tokens", json=body)
+        resp.raise_for_status()
+        print_json(resp.json())
+
+
+@auth_group.command("revoke")
+@click.option("--jti", required=True, help="Token jti claim to add to the revocation list.")
+@click.option("--reason", required=True, help="Audit reason (e.g. 'token leaked').")
+@click.pass_context
+@handle_errors
+def auth_revoke(ctx: click.Context, jti: str, reason: str) -> None:
+    """POST /v1/auth/revoke — invalidate a token by jti."""
+    cfg = ctx.obj
+    with get_client(cfg) as client:
+        resp = client.post("/v1/auth/revoke", json={"jti": jti, "reason": reason})
+        resp.raise_for_status()
+        if is_json_mode(cfg):
+            print_json({"revoked": jti})
+        else:
+            console.print(f"[success]Revoked[/success] jti={jti}")

cortexdb_cli/commands/beliefs.py

@@ -0,0 +1,121 @@
+"""cortexdb beliefs — GET /v1/beliefs + /v1/beliefs/why + POST /v1/beliefs/build."""
+
+from __future__ import annotations
+
+import click
+
+from cortexdb_cli.client import get_client
+from cortexdb_cli.errors import handle_errors
+from cortexdb_cli.output import (
+    console,
+    escape,
+    is_json_mode,
+    print_json,
+    spinner,
+)
+
+
+@click.group("beliefs")
+def beliefs_group() -> None:
+    """Beliefs — aggregated, confidence-weighted views over facts."""
+
+
+def _scope_or_die(cfg: dict, scope: str | None) -> str:
+    s = scope or cfg.get("scope") or cfg.get("actor")
+    if not s:
+        raise click.UsageError(
+            "No scope configured. Run `cortexdb init` first, or pass --scope explicitly."
+        )
+    return s
+
+
+@beliefs_group.command("list")
+@click.option("--scope", "-S", help="Scope path (defaults to your default scope)")
+@click.option("--limit", "-l", default=50, show_default=True)
+@click.pass_context
+@handle_errors
+def beliefs_list(ctx: click.Context, scope: str | None, limit: int) -> None:
+    """List active beliefs in a scope."""
+    cfg = ctx.obj
+    s = _scope_or_die(cfg, scope)
+    with get_client(cfg) as client:
+        if not is_json_mode(cfg):
+            with spinner("Loading beliefs..."):
+                resp = client.get("/v1/beliefs", params={"scope": s, "limit": limit})
+        else:
+            resp = client.get("/v1/beliefs", params={"scope": s, "limit": limit})
+        resp.raise_for_status()
+
+    data = resp.json()
+    if is_json_mode(cfg):
+        print_json(data)
+        return
+
+    items = data.get("items", data) if isinstance(data, dict) else data
+    if not items:
+        console.print(
+            "[dim]No beliefs yet — the consolidator builds these from facts asynchronously.[/dim]"
+        )
+        return
+
+    from rich.table import Table
+
+    table = Table(title="[header]Beliefs[/header]", border_style="blue")
+    table.add_column("Belief ID", style="dim", max_width=16)
+    table.add_column("Predicate", style="magenta", max_width=24)
+    table.add_column("Object", style="bold")
+    table.add_column("Conf", justify="right", width=6)
+    table.add_column("Support", justify="right", width=8)
+    for b in items:
+        table.add_row(
+            escape(str(b.get("belief_id") or b.get("id", ""))[:16]),
+            escape(str(b.get("predicate", ""))),
+            escape(str(b.get("object", ""))),
+            f"{(b.get('confidence') or 0):.0%}",
+            str(b.get("support_count") or len(b.get("supports") or [])),
+        )
+    console.print(table)
+
+
+@beliefs_group.command("why")
+@click.argument("belief_id")
+@click.pass_context
+@handle_errors
+def beliefs_why(ctx: click.Context, belief_id: str) -> None:
+    """Show the facts + events that ground a belief.
+
+        cortexdb beliefs why belief_01HX...
+    """
+    cfg = ctx.obj
+    with get_client(cfg) as client:
+        if not is_json_mode(cfg):
+            with spinner("Tracing provenance..."):
+                resp = client.get("/v1/beliefs/why", params={"belief_id": belief_id})
+        else:
+            resp = client.get("/v1/beliefs/why", params={"belief_id": belief_id})
+        resp.raise_for_status()
+        print_json(resp.json())
+
+
+@beliefs_group.command("build")
+@click.option("--scope", "-S", help="Scope path (defaults to your default scope)")
+@click.pass_context
+@handle_errors
+def beliefs_build(ctx: click.Context, scope: str | None) -> None:
+    """Trigger an on-demand belief rebuild for a scope.
+
+    Useful right after a large `experience bulk` ingest if you don't want
+    to wait for the next scheduler tick.
+    """
+    cfg = ctx.obj
+    s = _scope_or_die(cfg, scope)
+    with get_client(cfg) as client:
+        resp = client.post("/v1/beliefs/build", json={"scope": s})
+        resp.raise_for_status()
+        if is_json_mode(cfg):
+            print_json(resp.json())
+        else:
+            console.print(
+                "[success]Belief build scheduled[/success] — check back with "
+                "[bold]cortexdb beliefs list[/bold] in a minute or two."
+            )

cortexdb_cli/commands/config_cmd.py

@@ -0,0 +1,50 @@
+"""cortexdb config -- View and edit configuration."""
+
+from __future__ import annotations
+
+import click
+
+from cortexdb_cli.config import config_path, load_config, save_config
+from cortexdb_cli.output import console, print_json, is_json_mode
+
+
+@click.group("config")
+def config_group() -> None:
+    """View and manage CLI configuration."""
+
+
+@config_group.command("show")
+@click.pass_context
+def config_show(ctx: click.Context) -> None:
+    """Show current configuration."""
+    cfg = load_config()
+    if is_json_mode(ctx.obj):
+        # Redact API key in JSON output
+        safe = dict(cfg)
+        if "api_key" in safe:
+            key = safe["api_key"]
+            safe["api_key"] = key[:8] + "..." + key[-4:] if len(key) > 12 else "***"
+        print_json(safe)
+    else:
+        console.print(f"[dim]Config file: {config_path()}[/dim]\n")
+        for k, v in cfg.items():
+            if k == "api_key" and v:
+                v = v[:8] + "..." + v[-4:] if len(v) > 12 else "***"
+            console.print(f"  [bold]{k}[/bold] = {v}")
+        console.print()
+
+
+@config_group.command("set")
+@click.argument("key")
+@click.argument("value")
+def config_set(key: str, value: str) -> None:
+    """Set a configuration value.
+
+        cortexdb config set api_key cx_live_...
+
+        cortexdb config set endpoint https://api.cortexdb.ai
+    """
+    cfg = load_config()
+    cfg[key] = value
+    save_config("default", cfg)
+    console.print(f"[success]Set {key}[/success]")