cortexdb-cli 0.5.1__py3-none-any.whl → 0.5.3__py3-none-any.whl

cortexdb_cli/__init__.py

@@ -1,3 +1,3 @@
 """CortexDB CLI - command-line interface for the v1 memory API."""
 
-__version__ = "0.5.1"
+__version__ = "0.5.3"

cortexdb_cli/commands/init.py

@@ -5,10 +5,12 @@ from __future__ import annotations
 import click
 import httpx
 
+from datetime import datetime, timezone
+
 from cortexdb_cli.client import DEFAULT_ENDPOINT, signup
-from cortexdb_cli.config import config_path, save_config
-from cortexdb_cli.output import console
-from cortexdb_cli.state import save_state, state_path
+from cortexdb_cli.config import config_path, resolve_config_dir, save_config
+from cortexdb_cli.output import console, err_console
+from cortexdb_cli.state import load_state, save_state, state_path
 
 
 def _inherit_group_flag(
@@ -38,6 +40,49 @@ def _inherit_group_flag(
     return own_value if own_value is not None else group_value
 
 
+def _existing_identity() -> tuple[dict, str] | None:
+    """Return `(state, status)` for a usable identity already on disk.
+
+    KAN-145/156: `init` used to mint and overwrite unconditionally. Running
+    it twice in one directory replaced a working identity with a brand-new
+    anonymous one - and because the actor and scope change, everything
+    written under the old identity becomes unreachable from this machine.
+    Nothing warned, and nothing had to fail for it to happen: the second
+    `init` looked exactly as successful as the first.
+
+    `status` is "valid" or "expired"; both are treated as "do not silently
+    replace this", because an expired token still names the brain the user's
+    data is in.
+    """
+    state = load_state()
+    if not state.get("token"):
+        return None
+    expires = state.get("expires_at")
+    status = "valid"
+    if expires:
+        try:
+            when = datetime.fromisoformat(str(expires).replace("Z", "+00:00"))
+            if when.tzinfo is None:
+                when = when.replace(tzinfo=timezone.utc)
+            if when <= datetime.now(timezone.utc):
+                status = "expired"
+        except (TypeError, ValueError):
+            # An unparseable expiry is not evidence of expiry. Prefer the
+            # conservative reading: something is here, do not clobber it.
+            status = "valid"
+    return state, status
+
+
+def _report_existing(state: dict, status: str) -> None:
+    console.print(f"  [success]Existing identity reused[/success] ({status})")
+    console.print(f"  [success]Actor:[/success] {state.get('user_id', '?')}")
+    console.print(f"  [success]Default scope:[/success] {state.get('scope', '?')}")
+    if state.get("expires_at"):
+        console.print(f"  [dim]Token expires: {state['expires_at']}[/dim]")
+    console.print(f"")
+    console.print(f"[dim]State directory: {resolve_config_dir()}[/dim]")
+
+
 @click.command("init")
 @click.option(
     "--endpoint",
@@ -59,6 +104,13 @@ def _inherit_group_flag(
     default=None,
     help="Default scope path. Defaults to the actor.",
 )
+@click.option(
+    "--force",
+    is_flag=True,
+    help="Replace an existing identity. Backs the old one up first. "
+    "A new identity is a NEW brain: memories written under the old actor "
+    "stay where they are and are no longer reachable from this config.",
+)
 @click.pass_context
 def init_cmd(
     ctx: click.Context,
@@ -66,6 +118,7 @@ def init_cmd(
     api_key: str | None,
     actor: str | None,
     scope: str | None,
+    force: bool,
 ) -> None:
     """Set up CortexDB CLI.
 
@@ -81,6 +134,54 @@ def init_cmd(
 
     console.print("\n[header]CortexDB CLI setup[/header]\n")
 
+    # Guard BEFORE any signup call or state write. `init` is read-only when a
+    # usable identity already exists: reuse and report it, never replace it
+    # silently. Reminting is a data-reachability event, not a retry.
+    existing = _existing_identity()
+    if existing and not force:
+        state, status = existing
+        if status == "valid":
+            _report_existing(state, status)
+            console.print(
+                "\n[dim]Nothing changed. Use --force to replace this identity, "
+                "or --config-dir / CORTEXDB_HOME for a separate one.[/dim]\n"
+            )
+            return
+        # Expired: still refuse. The token names the brain the user's data is
+        # in, so a silent remint strands it. Say so and make them choose.
+        err_console.print(
+            f"[error]The stored token for {state.get('user_id', '?')} has expired "
+            f"({state.get('expires_at')}).[/error]"
+        )
+        err_console.print(
+            "Refusing to mint a new identity automatically: a new identity is a "
+            "NEW brain, and memories written under the old actor would no longer "
+            "be reachable from this config."
+        )
+        err_console.print(
+            "  To deliberately start a new brain:  cortexdb init --force"
+        )
+        err_console.print(
+            "  To use a token you already hold:    "
+            "cortexdb init --api-key <token> --actor <actor>"
+        )
+        raise SystemExit(3)
+
+    if existing and force:
+        backup = state_path().with_suffix(".json.replaced")
+        try:
+            backup.write_text(
+                state_path().read_text(encoding="utf-8"), encoding="utf-8", newline="\n"
+            )
+            console.print(
+                f"[warning]Replacing the existing identity; "
+                f"previous state saved to {backup}[/warning]"
+            )
+        except OSError as exc:
+            console.print(
+                f"[warning]Could not back up existing state ({exc}); continuing[/warning]"
+            )
+
     if api_key:
         if not actor:
             raise click.UsageError("--actor is required when --api-key is supplied.")

{cortexdb_cli-0.5.1.dist-info → cortexdb_cli-0.5.3.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: cortexdb-cli
-Version: 0.5.1
+Version: 0.5.3
 Summary: Command-line interface for CortexDB — the long-term memory layer for AI.
 Project-URL: Homepage, https://cortexdb.ai
 Project-URL: Documentation, https://cortexdb.ai/docs
@@ -62,8 +62,22 @@ cortexdb recall "Q3 revenue?"
 cortexdb
 ```
 
-The signup token has a 7-day TTL on the free tier. Re-run `cortexdb init`
-to refresh, or pass `--api-key` + `--actor` to use a token from your IdP.
+The signup token has a 7-day TTL on the free tier.
+
+**Re-running `cortexdb init` does not refresh it.** `init` reuses an existing
+identity and changes nothing; against an expired one it refuses and exits 3.
+That is deliberate: a new identity is a new *brain*, and memories written
+under the old actor stay where they are, unreachable from the new config.
+
+When a token expires you have two safe options:
+
+- `cortexdb init --api-key <token> --actor <actor>` — keep the same brain
+  with a token you already hold (e.g. from your IdP).
+- `cortexdb init --force` — deliberately start a NEW brain. The previous
+  identity is backed up to `state.json.replaced` first.
+
+For a second brain alongside the first, isolate instead of replacing:
+`cortexdb --config-dir <dir> init`, or set `CORTEXDB_HOME`.
 
 ## Commands
 
@@ -112,7 +126,9 @@ Force JSON mode any time with `--json`.
 - The v1 API requires both `Authorization: Bearer <PASETO>` and `X-Cortex-Actor`.
   The CLI stamps both on every request — you never need to pass them by hand.
 - 401s show the specific error code (`TOKEN_EXPIRED`, `actor_mismatch`, …)
-  and the remediation: usually `cortexdb init`.
+  and the remediation. Note that `TOKEN_EXPIRED` is **not** fixed by re-running
+  `cortexdb init` — see the identity note above; that would mint a different
+  brain rather than restore access to yours.
 - 403s cite the missing capability and the policy tier that denied. If a
   recall returns `diagnostics.read denied`, pass `--diagnostics none` —
   free-tier tokens don't carry the `diagnostics.read` capability.

{cortexdb_cli-0.5.1.dist-info → cortexdb_cli-0.5.3.dist-info}/RECORD

@@ -1,4 +1,4 @@
-cortexdb_cli/__init__.py,sha256=lVn29OeWqhqDSv21Nj0l6DQV1Ai5_EmOTQGIodTvogw,90
+cortexdb_cli/__init__.py,sha256=2UYu9wmxTQpfORew0gzovY5bYQAyLW6hmnIR-bQps9E,90
 cortexdb_cli/client.py,sha256=CQwGo4Gn7cHDnfLUlJBZMsZ9-AyGVz8W6bJKxNMwlRA,2862
 cortexdb_cli/config.py,sha256=ee1qmOfqMwilL81ujaqjf6TjjlrFG7WZAHRIgeyif9U,5690
 cortexdb_cli/errors.py,sha256=xwxAWYY7KtNa-e7dyLQECnsKcciVcKC41CXFFF_-0VU,3924
@@ -25,7 +25,7 @@ cortexdb_cli/commands/export_cmd.py,sha256=IFkALD-zu2fVrpt1R_L4yvOgCEzZ9gPwcsQdF
 cortexdb_cli/commands/facts.py,sha256=R21T2x6fyKn8Mvg-tskoURBBiXtsIoiooT9WXRSrGzc,5401
 cortexdb_cli/commands/forget.py,sha256=fPGXqw-KetuuemirHfV7FUmKPihSAX8VEVjrVs3CgP8,5060
 cortexdb_cli/commands/import_cmd.py,sha256=wnV1bsf54z8W8alQOBj_ExfdV1nUYzl_Ghxv-atBRHA,8386
-cortexdb_cli/commands/init.py,sha256=S-A9V_xpdFdjYwcb2R1WLKHAjOVxHsh5oHKQoM8e7XY,4597
+cortexdb_cli/commands/init.py,sha256=4hIaqqzMzddutBiOo8zJB8bhd00bsfGmgN8fszn-Sw0,8905
 cortexdb_cli/commands/interactive.py,sha256=_xDPMKQ_VnpLUMJn6pZL4aJ3VpY7ti5XDqKGC657zSI,9514
 cortexdb_cli/commands/onboard.py,sha256=Mz_pQUH0WC8IKcVm6B3CVQNuez0KqZlPvezOE4uOvIU,27414
 cortexdb_cli/commands/policy.py,sha256=FFBiVKNZJcUjTRL07yYQ8zsIWasGeF_jhM124hIKWeI,3354
@@ -34,7 +34,7 @@ cortexdb_cli/commands/scopes.py,sha256=Cx_zV-zyIrnDxwp_I4AX_Teh7UFu4EdvDOYe9hTEF
 cortexdb_cli/commands/search.py,sha256=4wsgNU47deb0x5o7xC9eWlhwdIIbz56q7ne8GIiCmYo,1953
 cortexdb_cli/commands/understanding.py,sha256=BktqOn-GloOzSSGJGK9xh5kGCpxcrwkNogtXhjj4pBI,5371
 cortexdb_cli/commands/wire.py,sha256=M3UUHScmvr_MDrX_RaMBg-YLTcHKUq9woNkT4KHJKfs,8131
-cortexdb_cli-0.5.1.dist-info/METADATA,sha256=7OGflYmFEJrIgfUJrG7OdlDN5S-b7GdtQNnVzGXfM3o,4429
-cortexdb_cli-0.5.1.dist-info/WHEEL,sha256=zOwg4jB6zX2kU910N-cMawjivD6tO8NEWvE12je1bVk,87
-cortexdb_cli-0.5.1.dist-info/entry_points.txt,sha256=h3sEbdqqvtv8LBbRLUgybYPo9N2lpU85fQUSh5ToEvs,51
-cortexdb_cli-0.5.1.dist-info/RECORD,,
+cortexdb_cli-0.5.3.dist-info/METADATA,sha256=pHC6gxm4OoeXGAaxtiJ-zDrbsuVGbbQfC_Cj2GQTmvM,5234
+cortexdb_cli-0.5.3.dist-info/WHEEL,sha256=zOwg4jB6zX2kU910N-cMawjivD6tO8NEWvE12je1bVk,87
+cortexdb_cli-0.5.3.dist-info/entry_points.txt,sha256=h3sEbdqqvtv8LBbRLUgybYPo9N2lpU85fQUSh5ToEvs,51
+cortexdb_cli-0.5.3.dist-info/RECORD,,