cortexdb-cli 0.5.4__tar.gz → 0.6.0__tar.gz

{cortexdb_cli-0.5.4 → cortexdb_cli-0.6.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: cortexdb-cli
-Version: 0.5.4
+Version: 0.6.0
 Summary: Command-line interface for CortexDB — the long-term memory layer for AI.
 Project-URL: Homepage, https://cortexdb.ai
 Project-URL: Documentation, https://cortexdb.ai/docs

{cortexdb_cli-0.5.4 → cortexdb_cli-0.6.0}/cortexdb_cli/__init__.py

@@ -1,3 +1,3 @@
-"""CortexDB CLI - command-line interface for the v1 memory API."""
-
-__version__ = "0.5.4"
+"""CortexDB CLI - command-line interface for the v1 memory API."""
+
+__version__ = "0.6.0"

{cortexdb_cli-0.5.4 → cortexdb_cli-0.6.0}/cortexdb_cli/commands/__init__.py

@@ -1 +1 @@
-"""CortexDB CLI command modules."""
+"""CortexDB CLI command modules."""

{cortexdb_cli-0.5.4 → cortexdb_cli-0.6.0}/cortexdb_cli/commands/auth.py

@@ -83,11 +83,29 @@ def auth_signup(ctx: click.Context, endpoint: str, save_state_flag: bool) -> Non
     show_default=True,
     help="Token lifetime in seconds (server enforces a tenant ceiling).",
 )
-@click.option("--scope", "scopes", multiple=True, help="`scopes` claim - repeat for multiple.")
+@click.option(
+    "--scope",
+    "scope",
+    default=None,
+    help="Scope path where YOUR auth.mint is checked (omit for a deployment-wide "
+    "check). Does not confine the minted token - use --confine.",
+)
+@click.option(
+    "--confine",
+    "confine",
+    multiple=True,
+    metavar="CAP:PREFIX",
+    help="Confine a capability (or capability prefix) to a scope subtree, e.g. "
+    "scope.read:org:acme/team:b/* - repeat for multiple. Sent as the `scopes` claim.",
+)
 @click.pass_context
 @handle_errors
 def auth_tokens(
-    ctx: click.Context, subject: str, ttl_seconds: int, scopes: tuple[str, ...]
+    ctx: click.Context,
+    subject: str,
+    ttl_seconds: int,
+    scope: str | None,
+    confine: tuple[str, ...],
 ) -> None:
     """POST /v1/auth/tokens - mint a service-account token.
 
@@ -95,12 +113,27 @@ def auth_tokens(
     have it - you must hold an IdP-issued token (or a token previously
     minted by an account that does).
 
-        cortexdb auth tokens --subject user:alice --ttl 3600 --scope org:acme/user:alice
+    --scope only says where your auth.mint is evaluated. The token is
+    confined only by --confine entries (CAP:PREFIX); the server rejects an
+    entry whose capability part names no capability.
+
+        cortexdb auth tokens --subject agent:b --confine scope.read:org:acme/team:b/*
     """
+    # Before --confine existed, --scope carried `scopes` entries. A value
+    # that starts with a capability (dots before the first ':') is one of
+    # those, not a scope path; point at the right flag instead of letting
+    # the server 422 on the scope grammar.
+    if scope is not None and "." in scope.split(":", 1)[0]:
+        raise click.UsageError(
+            f"--scope {scope!r} looks like a CAP:PREFIX confinement entry; "
+            "pass it with --confine"
+        )
     cfg = ctx.obj
     body: dict[str, object] = {"subject": subject, "ttl_seconds": ttl_seconds}
-    if scopes:
-        body["scopes"] = list(scopes)
+    if scope is not None:
+        body["scope"] = scope
+    if confine:
+        body["scopes"] = list(confine)
     with get_client(cfg) as client:
         if not is_json_mode(cfg):
             with spinner("Minting..."):

{cortexdb_cli-0.5.4 → cortexdb_cli-0.6.0}/cortexdb_cli/commands/config_cmd.py

@@ -1,50 +1,50 @@
-"""cortexdb config -- View and edit configuration."""
-
-from __future__ import annotations
-
-import click
-
-from cortexdb_cli.config import config_path, load_config, save_config
-from cortexdb_cli.output import console, print_json, is_json_mode
-
-
-@click.group("config")
-def config_group() -> None:
-    """View and manage CLI configuration."""
-
-
-@config_group.command("show")
-@click.pass_context
-def config_show(ctx: click.Context) -> None:
-    """Show current configuration."""
-    cfg = load_config()
-    if is_json_mode(ctx.obj):
-        # Redact API key in JSON output
-        safe = dict(cfg)
-        if "api_key" in safe:
-            key = safe["api_key"]
-            safe["api_key"] = key[:8] + "..." + key[-4:] if len(key) > 12 else "***"
-        print_json(safe)
-    else:
-        console.print(f"[dim]Config file: {config_path()}[/dim]\n")
-        for k, v in cfg.items():
-            if k == "api_key" and v:
-                v = v[:8] + "..." + v[-4:] if len(v) > 12 else "***"
-            console.print(f"  [bold]{k}[/bold] = {v}")
-        console.print()
-
-
-@config_group.command("set")
-@click.argument("key")
-@click.argument("value")
-def config_set(key: str, value: str) -> None:
-    """Set a configuration value.
-
-        cortexdb config set api_key cx_live_...
-
-        cortexdb config set endpoint https://api-v1.cortexdb.ai
-    """
-    cfg = load_config()
-    cfg[key] = value
-    save_config("default", cfg)
-    console.print(f"[success]Set {key}[/success]")
+"""cortexdb config -- View and edit configuration."""
+
+from __future__ import annotations
+
+import click
+
+from cortexdb_cli.config import config_path, load_config, save_config
+from cortexdb_cli.output import console, print_json, is_json_mode
+
+
+@click.group("config")
+def config_group() -> None:
+    """View and manage CLI configuration."""
+
+
+@config_group.command("show")
+@click.pass_context
+def config_show(ctx: click.Context) -> None:
+    """Show current configuration."""
+    cfg = load_config()
+    if is_json_mode(ctx.obj):
+        # Redact API key in JSON output
+        safe = dict(cfg)
+        if "api_key" in safe:
+            key = safe["api_key"]
+            safe["api_key"] = key[:8] + "..." + key[-4:] if len(key) > 12 else "***"
+        print_json(safe)
+    else:
+        console.print(f"[dim]Config file: {config_path()}[/dim]\n")
+        for k, v in cfg.items():
+            if k == "api_key" and v:
+                v = v[:8] + "..." + v[-4:] if len(v) > 12 else "***"
+            console.print(f"  [bold]{k}[/bold] = {v}")
+        console.print()
+
+
+@config_group.command("set")
+@click.argument("key")
+@click.argument("value")
+def config_set(key: str, value: str) -> None:
+    """Set a configuration value.
+
+        cortexdb config set api_key cx_live_...
+
+        cortexdb config set endpoint https://api-v1.cortexdb.ai
+    """
+    cfg = load_config()
+    cfg[key] = value
+    save_config("default", cfg)
+    console.print(f"[success]Set {key}[/success]")

{cortexdb_cli-0.5.4 → cortexdb_cli-0.6.0}/cortexdb_cli/errors.py

@@ -1,96 +1,96 @@
-"""Error handling for CortexDB CLI commands."""
-
-from __future__ import annotations
-
-import functools
-import sys
-from typing import Any, Callable
-
-import click
-import httpx
-
-from cortexdb_cli.output import err_console
-
-
-def escape_safe(s: Any) -> str:
-    """Rich-safe escape used in the error decorator (avoids circular imports)."""
-    from rich.markup import escape
-
-    return escape(str(s))
-
-
-def handle_errors(fn: Callable[..., Any]) -> Callable[..., Any]:
-    """Decorator that catches common errors and prints friendly messages."""
-
-    @functools.wraps(fn)
-    def wrapper(*args: Any, **kwargs: Any) -> Any:
-        try:
-            return fn(*args, **kwargs)
-        except httpx.HTTPStatusError as exc:
-            status = exc.response.status_code
-            body: dict[str, Any] = {}
-            try:
-                body = exc.response.json()
-            except Exception:
-                body = {}
-            code = body.get("error_code") or body.get("code") or ""
-            msg = body.get("message") or body.get("error") or exc.response.text[:200]
-
-            if status == 401:
-                if code in ("TOKEN_EXPIRED", "INVALID_TOKEN_SIGNATURE", "MISSING_TOKEN"):
-                    err_console.print(
-                        f"[error]Token rejected ({code}).[/error] "
-                        "Run [bold]cortexdb init[/bold] to mint a fresh one."
-                    )
-                elif code == "actor_mismatch":
-                    err_console.print(
-                        "[error]Actor mismatch.[/error] The X-Cortex-Actor header "
-                        "doesn't match the token's subject. Re-run "
-                        "[bold]cortexdb init[/bold] to re-bind."
-                    )
-                else:
-                    err_console.print(
-                        f"[error]Authentication failed:[/error] {msg}\n"
-                        "Run [bold]cortexdb init[/bold] to set up credentials."
-                    )
-            elif status == 403:
-                # The v1 surface always cites the missing capability.
-                details = body.get("details") or {}
-                cap = details.get("capability") or ""
-                tier = details.get("decided_by_tier") or ""
-                if cap:
-                    err_console.print(
-                        f"[error]Denied by {escape_safe(tier)}:[/error] "
-                        f"missing capability [bold]{escape_safe(cap)}[/bold]."
-                    )
-                    if cap == "diagnostics.read":
-                        err_console.print(
-                            "[dim]Hint: pass [bold]--diagnostics none[/bold] (free tier).[/dim]"
-                        )
-                else:
-                    err_console.print(f"[error]Forbidden:[/error] {msg}")
-            elif status == 429:
-                retry = exc.response.headers.get("Retry-After", "?")
-                err_console.print(f"[error]Rate limited.[/error] Retry after {retry}s.")
-            elif status == 402:
-                err_console.print(f"[warning]Feature not available on your tier.[/warning] {msg}")
-            else:
-                err_console.print(f"[error]API error (HTTP {status}, {code}):[/error] {msg}")
-            sys.exit(1)
-        except httpx.ConnectError:
-            err_console.print(
-                "[error]Cannot connect to CortexDB.[/error] "
-                "Check your endpoint and network."
-            )
-            sys.exit(2)
-        except httpx.TimeoutException:
-            err_console.print("[error]Request timed out.[/error]")
-            sys.exit(2)
-        except click.Abort:
-            err_console.print("\n[dim]Aborted.[/dim]")
-            sys.exit(130)
-        except KeyboardInterrupt:
-            err_console.print("\n[dim]Interrupted.[/dim]")
-            sys.exit(130)
-
-    return wrapper
+"""Error handling for CortexDB CLI commands."""
+
+from __future__ import annotations
+
+import functools
+import sys
+from typing import Any, Callable
+
+import click
+import httpx
+
+from cortexdb_cli.output import err_console
+
+
+def escape_safe(s: Any) -> str:
+    """Rich-safe escape used in the error decorator (avoids circular imports)."""
+    from rich.markup import escape
+
+    return escape(str(s))
+
+
+def handle_errors(fn: Callable[..., Any]) -> Callable[..., Any]:
+    """Decorator that catches common errors and prints friendly messages."""
+
+    @functools.wraps(fn)
+    def wrapper(*args: Any, **kwargs: Any) -> Any:
+        try:
+            return fn(*args, **kwargs)
+        except httpx.HTTPStatusError as exc:
+            status = exc.response.status_code
+            body: dict[str, Any] = {}
+            try:
+                body = exc.response.json()
+            except Exception:
+                body = {}
+            code = body.get("error_code") or body.get("code") or ""
+            msg = body.get("message") or body.get("error") or exc.response.text[:200]
+
+            if status == 401:
+                if code in ("TOKEN_EXPIRED", "INVALID_TOKEN_SIGNATURE", "MISSING_TOKEN"):
+                    err_console.print(
+                        f"[error]Token rejected ({code}).[/error] "
+                        "Run [bold]cortexdb init[/bold] to mint a fresh one."
+                    )
+                elif code == "actor_mismatch":
+                    err_console.print(
+                        "[error]Actor mismatch.[/error] The X-Cortex-Actor header "
+                        "doesn't match the token's subject. Re-run "
+                        "[bold]cortexdb init[/bold] to re-bind."
+                    )
+                else:
+                    err_console.print(
+                        f"[error]Authentication failed:[/error] {msg}\n"
+                        "Run [bold]cortexdb init[/bold] to set up credentials."
+                    )
+            elif status == 403:
+                # The v1 surface always cites the missing capability.
+                details = body.get("details") or {}
+                cap = details.get("capability") or ""
+                tier = details.get("decided_by_tier") or ""
+                if cap:
+                    err_console.print(
+                        f"[error]Denied by {escape_safe(tier)}:[/error] "
+                        f"missing capability [bold]{escape_safe(cap)}[/bold]."
+                    )
+                    if cap == "diagnostics.read":
+                        err_console.print(
+                            "[dim]Hint: pass [bold]--diagnostics none[/bold] (free tier).[/dim]"
+                        )
+                else:
+                    err_console.print(f"[error]Forbidden:[/error] {msg}")
+            elif status == 429:
+                retry = exc.response.headers.get("Retry-After", "?")
+                err_console.print(f"[error]Rate limited.[/error] Retry after {retry}s.")
+            elif status == 402:
+                err_console.print(f"[warning]Feature not available on your tier.[/warning] {msg}")
+            else:
+                err_console.print(f"[error]API error (HTTP {status}, {code}):[/error] {msg}")
+            sys.exit(1)
+        except httpx.ConnectError:
+            err_console.print(
+                "[error]Cannot connect to CortexDB.[/error] "
+                "Check your endpoint and network."
+            )
+            sys.exit(2)
+        except httpx.TimeoutException:
+            err_console.print("[error]Request timed out.[/error]")
+            sys.exit(2)
+        except click.Abort:
+            err_console.print("\n[dim]Aborted.[/dim]")
+            sys.exit(130)
+        except KeyboardInterrupt:
+            err_console.print("\n[dim]Interrupted.[/dim]")
+            sys.exit(130)
+
+    return wrapper

{cortexdb_cli-0.5.4 → cortexdb_cli-0.6.0}/pyproject.toml

@@ -1,56 +1,56 @@
-[build-system]
-requires = ["hatchling"]
-build-backend = "hatchling.build"
-
-[project]
-name = "cortexdb-cli"
-version = "0.5.4"
-description = "Command-line interface for CortexDB — the long-term memory layer for AI."
-readme = "README.md"
-license = "Apache-2.0"
-requires-python = ">=3.10"
-authors = [
-    { name = "CortexDB Team", email = "team@cortexdb.ai" },
-]
-keywords = ["ai", "memory", "cli", "cortexdb", "agents", "llm"]
-classifiers = [
-    "Development Status :: 4 - Beta",
-    "Environment :: Console",
-    "Intended Audience :: Developers",
-    "License :: OSI Approved :: Apache Software License",
-    "Programming Language :: Python :: 3",
-    "Programming Language :: Python :: 3.10",
-    "Programming Language :: Python :: 3.11",
-    "Programming Language :: Python :: 3.12",
-    "Programming Language :: Python :: 3.13",
-    "Topic :: Scientific/Engineering :: Artificial Intelligence",
-    "Topic :: Database",
-]
-dependencies = [
-    "click>=8.1",
-    "rich>=13.0",
-    "rich-click>=1.7",
-    "httpx>=0.27",
-    "prompt-toolkit>=3.0",
-    "tomli>=2.0; python_version < '3.11'",
-    "tomli-w>=1.0",
-]
-
-[project.scripts]
-cortexdb = "cortexdb_cli.main:cli"
-
-[project.urls]
-Homepage = "https://cortexdb.ai"
-Documentation = "https://cortexdb.ai/docs"
-Repository = "https://github.com/cortexdb/cortexdb"
-Issues = "https://github.com/cortexdb/cortexdb/issues"
-
-[tool.hatch.build.targets.wheel]
-packages = ["cortexdb_cli"]
-
-[tool.hatch.build.targets.sdist]
-include = ["cortexdb_cli", "README.md", "LICENSE"]
-
-[tool.ruff]
-target-version = "py310"
-line-length = 100
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[project]
+name = "cortexdb-cli"
+version = "0.6.0"
+description = "Command-line interface for CortexDB — the long-term memory layer for AI."
+readme = "README.md"
+license = "Apache-2.0"
+requires-python = ">=3.10"
+authors = [
+    { name = "CortexDB Team", email = "team@cortexdb.ai" },
+]
+keywords = ["ai", "memory", "cli", "cortexdb", "agents", "llm"]
+classifiers = [
+    "Development Status :: 4 - Beta",
+    "Environment :: Console",
+    "Intended Audience :: Developers",
+    "License :: OSI Approved :: Apache Software License",
+    "Programming Language :: Python :: 3",
+    "Programming Language :: Python :: 3.10",
+    "Programming Language :: Python :: 3.11",
+    "Programming Language :: Python :: 3.12",
+    "Programming Language :: Python :: 3.13",
+    "Topic :: Scientific/Engineering :: Artificial Intelligence",
+    "Topic :: Database",
+]
+dependencies = [
+    "click>=8.1",
+    "rich>=13.0",
+    "rich-click>=1.7",
+    "httpx>=0.27",
+    "prompt-toolkit>=3.0",
+    "tomli>=2.0; python_version < '3.11'",
+    "tomli-w>=1.0",
+]
+
+[project.scripts]
+cortexdb = "cortexdb_cli.main:cli"
+
+[project.urls]
+Homepage = "https://cortexdb.ai"
+Documentation = "https://cortexdb.ai/docs"
+Repository = "https://github.com/cortexdb/cortexdb"
+Issues = "https://github.com/cortexdb/cortexdb/issues"
+
+[tool.hatch.build.targets.wheel]
+packages = ["cortexdb_cli"]
+
+[tool.hatch.build.targets.sdist]
+include = ["cortexdb_cli", "README.md", "LICENSE"]
+
+[tool.ruff]
+target-version = "py310"
+line-length = 100

cortexdb_cli-0.5.4/.gitignore

@@ -1,109 +0,0 @@
-# Rust
-/target
-**/*.rs.bk
-
-# Environment / secrets
-.env
-.env.local
-.env*.local
-*.pem
-*.key
-.npmrc
-
-# SQLite database
-*.sqlite
-*.sqlite-wal
-*.sqlite-shm
-
-# OS
-.DS_Store
-Thumbs.db
-desktop.ini
-
-# IDE
-.idea/
-.vscode/
-*.swp
-*.swo
-
-# Data directories
-cortexdb_data*/
-/data/
-# Per-bench tenant stores (RocksDB + Tantivy + HNSW state; regeneratable per run)
-/data_*/
-# Experimental per-branch stores (not tracked on this branch but left gitignored
-# so checkout from other branches doesn't surface them in git status)
-/event_memory_store/
-/llm_cache/
-
-# Benchmark inputs and per-run outputs (kept local, regenerated each run)
-benchmarks/longmemeval/data/
-benchmarks/longmemeval/server_results/
-benchmarks/longmemeval/fast_results/
-benchmarks/longmemeval/micro_results/
-benchmarks/longmemeval/server_logs/
-benchmarks/longmemeval/*.log
-benchmarks/locomo/locomo_results*.json
-benchmarks/locomo/server_results/
-benchmarks/locomo/*.log
-/answer_out.json
-
-# Local Claude Code state
-.claude/
-.tmp/
-
-# Python
-__pycache__/
-*.pyc
-.venv/
-venv/
-
-# Node
-node_modules/
-dist/
-.next/
-
-# Egg info
-*.egg-info/
-
-# Scratch/debug text files at root
-/*.txt
-/*.log
-
-# Local debug / marketing / private content (not for repo)
-harness/.reports/
-harness_data_*/
-blog/
-sales/
-videos/
-local-instance/
-
-# doc-claims verifier scratch output
-tools/verifier_out*/
-
-# Generated benchmark / runtime data (audit M-10: hundreds of untracked
-# data dirs at the workspace root slow every git status/search and risk
-# being packaged; results JSONs are artifacts, never source)
-benchmarks/data_*/
-benchmarks/**/fast_results/
-data_*/
-*_data/
-*_data_20*/
-cortexdb_data*/
-server_results/
-*.log
-docker_build.log
-
-# local gate/bench data stores
-gate*_data_*/
-
-# Code-plane benchmark local run outputs (official results are committed deliberately)
-benchmarks/codeplane/runs/
-
-# Deliberately untracked, four times over: `git add docs/` keeps sweeping the
-# investor deck sources and the 2.7 MB OpenClaw design PDF back in (7dda2a51,
-# 3a778b5e, then again in the 2026-09-09 checkpoint). They live on disk; they do
-# not belong in the repo. Stage explicit paths, never a directory.
-docs/investor_deck/
-docs/CORTEX_OPENCLAW_AGENT_OS_DESIGN.md
-docs/CORTEX_OPENCLAW_AGENT_OS_DESIGN.pdf