@codebakers/cli 2.9.0 → 3.0.0

package/dist/lib/fingerprint.js

@@ -0,0 +1,136 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getDeviceFingerprint = getDeviceFingerprint;
+exports.canCreateFingerprint = canCreateFingerprint;
+const os = __importStar(require("os"));
+const crypto = __importStar(require("crypto"));
+const child_process_1 = require("child_process");
+/**
+ * Get a stable machine identifier based on OS
+ * - Windows: MachineGuid from registry
+ * - macOS: IOPlatformUUID from system
+ * - Linux: /etc/machine-id
+ */
+function getMachineId() {
+    try {
+        const platform = os.platform();
+        if (platform === 'win32') {
+            // Windows: Use MachineGuid from registry
+            const output = (0, child_process_1.execSync)('reg query "HKLM\\SOFTWARE\\Microsoft\\Cryptography" /v MachineGuid', { encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'] });
+            const match = output.match(/MachineGuid\s+REG_SZ\s+(.+)/);
+            if (match && match[1]) {
+                return match[1].trim();
+            }
+        }
+        else if (platform === 'darwin') {
+            // macOS: Use hardware UUID
+            const output = (0, child_process_1.execSync)('ioreg -rd1 -c IOPlatformExpertDevice | grep IOPlatformUUID', { encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'] });
+            const match = output.match(/"IOPlatformUUID"\s*=\s*"(.+)"/);
+            if (match && match[1]) {
+                return match[1];
+            }
+        }
+        else {
+            // Linux: Use machine-id
+            const output = (0, child_process_1.execSync)('cat /etc/machine-id', {
+                encoding: 'utf-8',
+                stdio: ['pipe', 'pipe', 'pipe'],
+            });
+            return output.trim();
+        }
+    }
+    catch {
+        // Fallback handled below
+    }
+    // Fallback: Create a stable hash from hostname + username + home directory
+    // This is less reliable but works when we can't access system IDs
+    const fallbackData = [
+        os.hostname(),
+        os.userInfo().username,
+        os.homedir(),
+        os.platform(),
+        os.arch(),
+    ].join('|');
+    return crypto.createHash('sha256').update(fallbackData).digest('hex').slice(0, 36);
+}
+/**
+ * Get a complete device fingerprint
+ * The deviceHash is the primary identifier used for trial tracking
+ */
+function getDeviceFingerprint() {
+    const machineId = getMachineId();
+    // Collect stable machine characteristics
+    const fingerprintData = {
+        machineId,
+        hostname: os.hostname(),
+        username: os.userInfo().username,
+        platform: os.platform(),
+        arch: os.arch(),
+        cpuModel: os.cpus()[0]?.model || 'unknown',
+        totalMemory: Math.floor(os.totalmem() / (1024 * 1024 * 1024)), // GB rounded
+        homeDir: os.homedir(),
+    };
+    // Create a stable hash from all characteristics
+    const deviceHash = crypto
+        .createHash('sha256')
+        .update(JSON.stringify(fingerprintData))
+        .digest('hex');
+    return {
+        machineId,
+        deviceHash,
+        platform: os.platform(),
+        hostname: os.hostname(),
+    };
+}
+/**
+ * Validate that we can create a fingerprint
+ * Used for diagnostics
+ */
+function canCreateFingerprint() {
+    try {
+        const fp = getDeviceFingerprint();
+        if (fp.deviceHash && fp.deviceHash.length === 64) {
+            return { success: true };
+        }
+        return { success: false, error: 'Invalid fingerprint generated' };
+    }
+    catch (error) {
+        return {
+            success: false,
+            error: error instanceof Error ? error.message : 'Unknown error',
+        };
+    }
+}

package/dist/mcp/server.js

@@ -53,11 +53,15 @@ class CodeBakersServer {
     server;
     apiKey;
     apiUrl;
+    trialState;
+    authMode;
     autoUpdateChecked = false;
     autoUpdateInProgress = false;
     constructor() {
         this.apiKey = (0, config_js_1.getApiKey)();
         this.apiUrl = (0, config_js_1.getApiUrl)();
+        this.trialState = (0, config_js_1.getTrialState)();
+        this.authMode = (0, config_js_1.getAuthMode)();
         this.server = new index_js_1.Server({
             name: 'codebakers',
             version: '1.0.0',
@@ -72,12 +76,25 @@ class CodeBakersServer {
             // Silently ignore errors - don't interrupt user
         });
     }
+    /**
+     * Get authorization headers for API requests
+     * Supports both API key (paid users) and trial ID (free users)
+     */
+    getAuthHeaders() {
+        if (this.apiKey) {
+            return { 'Authorization': `Bearer ${this.apiKey}` };
+        }
+        if (this.trialState?.trialId) {
+            return { 'X-Trial-Id': this.trialState.trialId };
+        }
+        return {};
+    }
     /**
      * Automatically check for and apply pattern updates
      * Runs silently in background - no user intervention needed
      */
     async checkAndAutoUpdate() {
-        if (this.autoUpdateChecked || this.autoUpdateInProgress || !this.apiKey) {
+        if (this.autoUpdateChecked || this.autoUpdateInProgress || this.authMode === 'none') {
             return;
         }
         this.autoUpdateInProgress = true;
@@ -110,7 +127,7 @@ class CodeBakersServer {
             }
             // Fetch latest version
             const response = await fetch(`${this.apiUrl}/api/content/version`, {
-                headers: { 'Authorization': `Bearer ${this.apiKey}` },
+                headers: this.getAuthHeaders(),
             });
             if (!response.ok) {
                 this.autoUpdateInProgress = false;
@@ -128,7 +145,7 @@ class CodeBakersServer {
             }
             // Fetch full content and update
             const contentResponse = await fetch(`${this.apiUrl}/api/content`, {
-                headers: { 'Authorization': `Bearer ${this.apiKey}` },
+                headers: this.getAuthHeaders(),
             });
             if (!contentResponse.ok) {
                 this.autoUpdateInProgress = false;
@@ -362,7 +379,7 @@ class CodeBakersServer {
         let latest = null;
         try {
             const response = await fetch(`${this.apiUrl}/api/content/version`, {
-                headers: this.apiKey ? { 'Authorization': `Bearer ${this.apiKey}` } : {},
+                headers: this.getAuthHeaders(),
             });
             if (response.ok) {
                 latest = await response.json();
@@ -805,8 +822,26 @@ class CodeBakersServer {
         }));
         // Handle tool calls
         this.server.setRequestHandler(types_js_1.CallToolRequestSchema, async (request) => {
-            if (!this.apiKey) {
-                throw new types_js_1.McpError(types_js_1.ErrorCode.InvalidRequest, 'Not logged in. Run `codebakers login` first.');
+            // Check access: API key OR valid trial
+            if (this.authMode === 'none') {
+                throw new types_js_1.McpError(types_js_1.ErrorCode.InvalidRequest, 'Not logged in. Run `codebakers go` to start a free trial, or `codebakers setup` if you have an account.');
+            }
+            // Check if trial expired
+            if (this.authMode === 'trial' && (0, config_js_1.isTrialExpired)()) {
+                const trialState = (0, config_js_1.getTrialState)();
+                if (trialState?.stage === 'anonymous') {
+                    throw new types_js_1.McpError(types_js_1.ErrorCode.InvalidRequest, 'Trial expired. Run `codebakers extend` to add 7 more days with GitHub, or `codebakers billing` to upgrade.');
+                }
+                else {
+                    throw new types_js_1.McpError(types_js_1.ErrorCode.InvalidRequest, 'Trial expired. Run `codebakers billing` to upgrade to a paid plan.');
+                }
+            }
+            // Show warning if trial expiring soon
+            if (this.authMode === 'trial') {
+                const daysRemaining = (0, config_js_1.getTrialDaysRemaining)();
+                if (daysRemaining <= 2) {
+                    console.error(`[CodeBakers] Trial expires in ${daysRemaining} day${daysRemaining !== 1 ? 's' : ''}. Run 'codebakers extend' or 'codebakers billing'.`);
+                }
             }
             const { name, arguments: args } = request.params;
             switch (name) {
@@ -872,7 +907,7 @@ class CodeBakersServer {
             method: 'POST',
             headers: {
                 'Content-Type': 'application/json',
-                Authorization: `Bearer ${this.apiKey}`,
+                ...this.getAuthHeaders(),
             },
             body: JSON.stringify({
                 prompt: userRequest,
@@ -981,9 +1016,7 @@ Show the user what their simple request was expanded into, then proceed with the
     async handleListPatterns() {
         const response = await fetch(`${this.apiUrl}/api/patterns`, {
             method: 'GET',
-            headers: {
-                Authorization: `Bearer ${this.apiKey}`,
-            },
+            headers: this.getAuthHeaders(),
         });
         if (!response.ok) {
             const error = await response.json().catch(() => ({}));
@@ -1026,7 +1059,7 @@ Show the user what their simple request was expanded into, then proceed with the
             method: 'POST',
             headers: {
                 'Content-Type': 'application/json',
-                Authorization: `Bearer ${this.apiKey}`,
+                ...this.getAuthHeaders(),
             },
             body: JSON.stringify({ patterns }),
         });
@@ -1043,7 +1076,7 @@ Show the user what their simple request was expanded into, then proceed with the
             method: 'POST',
             headers: {
                 'Content-Type': 'application/json',
-                Authorization: `Bearer ${this.apiKey}`,
+                ...this.getAuthHeaders(),
             },
             body: JSON.stringify({ query }),
         });
@@ -1291,7 +1324,7 @@ Show the user what their simple request was expanded into, then proceed with the
             results.push('\n## Installing CodeBakers Patterns...\n');
             const response = await fetch(`${this.apiUrl}/api/content`, {
                 method: 'GET',
-                headers: { Authorization: `Bearer ${this.apiKey}` },
+                headers: this.getAuthHeaders(),
             });
             if (response.ok) {
                 const content = await response.json();
@@ -1671,7 +1704,7 @@ Or if user declines, call without fullDeploy:
         try {
             const response = await fetch(`${this.apiUrl}/api/content`, {
                 method: 'GET',
-                headers: { Authorization: `Bearer ${this.apiKey}` },
+                headers: this.getAuthHeaders(),
             });
             if (!response.ok) {
                 throw new Error('Failed to fetch patterns from API');
@@ -2678,7 +2711,7 @@ Just describe what you want to build! I'll automatically:
                 method: 'POST',
                 headers: {
                     'Content-Type': 'application/json',
-                    Authorization: `Bearer ${this.apiKey}`,
+                    ...this.getAuthHeaders(),
                 },
                 body: JSON.stringify({
                     category,
@@ -2725,7 +2758,7 @@ Just describe what you want to build! I'll automatically:
                 method: 'POST',
                 headers: {
                     'Content-Type': 'application/json',
-                    Authorization: `Bearer ${this.apiKey}`,
+                    ...this.getAuthHeaders(),
                 },
                 body: JSON.stringify({
                     eventType,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@codebakers/cli",
-  "version": "2.9.0",
+  "version": "3.0.0",
   "description": "CodeBakers CLI - Production patterns for AI-assisted development",
   "main": "dist/index.js",
   "bin": {

package/src/commands/billing.ts

@@ -0,0 +1,99 @@
+import chalk from 'chalk';
+import { execSync } from 'child_process';
+import { getApiUrl, getApiKey, getTrialState, isTrialExpired, getTrialDaysRemaining } from '../config.js';
+
+/**
+ * Open a URL in the default browser
+ */
+function openBrowser(url: string): void {
+  const platform = process.platform;
+
+  try {
+    if (platform === 'win32') {
+      execSync(`start "" "${url}"`, { stdio: 'ignore', shell: 'cmd.exe' });
+    } else if (platform === 'darwin') {
+      execSync(`open "${url}"`, { stdio: 'ignore' });
+    } else {
+      execSync(`xdg-open "${url}" || sensible-browser "${url}" || x-www-browser "${url}"`, {
+        stdio: 'ignore',
+        shell: '/bin/sh',
+      });
+    }
+  } catch {
+    console.log(chalk.yellow(`\n  Could not open browser automatically.`));
+    console.log(chalk.gray(`  Please open this URL manually:\n`));
+    console.log(chalk.cyan(`  ${url}\n`));
+  }
+}
+
+/**
+ * Open billing page for subscription management
+ */
+export async function billing(): Promise<void> {
+  console.log(chalk.blue(`
+  ╔═══════════════════════════════════════════════════════════╗
+  ║                                                           ║
+  ║   ${chalk.bold.white('CodeBakers Billing & Subscription')}                   ║
+  ║                                                           ║
+  ╚═══════════════════════════════════════════════════════════╝
+  `));
+
+  // Check current status
+  const apiKey = getApiKey();
+  const trial = getTrialState();
+
+  if (apiKey) {
+    console.log(chalk.green('  ✓ You have an active subscription\n'));
+    console.log(chalk.gray('  Opening settings page to manage your subscription...\n'));
+
+    const apiUrl = getApiUrl();
+    const settingsUrl = `${apiUrl}/settings`;
+
+    openBrowser(settingsUrl);
+    console.log(chalk.gray(`  ${settingsUrl}\n`));
+    return;
+  }
+
+  if (trial) {
+    if (isTrialExpired()) {
+      console.log(chalk.yellow('  ⚠️  Your trial has expired\n'));
+    } else {
+      const daysRemaining = getTrialDaysRemaining();
+      console.log(chalk.gray(`  Trial: ${daysRemaining} day${daysRemaining !== 1 ? 's' : ''} remaining\n`));
+    }
+  }
+
+  // Show pricing
+  console.log(chalk.white('  Choose your plan:\n'));
+
+  console.log(chalk.cyan('  Pro     ') + chalk.white('- $49/month  ') + chalk.gray('(1 seat)'));
+  console.log(chalk.gray('           All 40 pattern modules'));
+  console.log(chalk.gray('           Unlimited projects'));
+  console.log(chalk.gray('           Priority support\n'));
+
+  console.log(chalk.cyan('  Team    ') + chalk.white('- $149/month ') + chalk.gray('(5 seats)'));
+  console.log(chalk.gray('           Everything in Pro'));
+  console.log(chalk.gray('           Team collaboration'));
+  console.log(chalk.gray('           Shared API keys\n'));
+
+  console.log(chalk.cyan('  Agency  ') + chalk.white('- $349/month ') + chalk.gray('(unlimited seats)'));
+  console.log(chalk.gray('           Everything in Team'));
+  console.log(chalk.gray('           White-label option'));
+  console.log(chalk.gray('           Dedicated support\n'));
+
+  console.log(chalk.gray('  Enterprise pricing available for large teams.\n'));
+
+  // Open billing page
+  const apiUrl = getApiUrl();
+  const billingUrl = `${apiUrl}/billing`;
+
+  console.log(chalk.white('  Opening billing page...\n'));
+
+  openBrowser(billingUrl);
+
+  console.log(chalk.gray(`  ${billingUrl}\n`));
+
+  console.log(chalk.gray('  After subscribing, run:'));
+  console.log(chalk.cyan('    codebakers setup\n'));
+  console.log(chalk.gray('  to configure your API key.\n'));
+}

package/src/commands/extend.ts

@@ -0,0 +1,157 @@
+import chalk from 'chalk';
+import ora from 'ora';
+import { execSync } from 'child_process';
+import {
+  getTrialState,
+  setTrialState,
+  getApiUrl,
+  getApiKey,
+  isTrialExpired,
+  type TrialState,
+} from '../config.js';
+
+/**
+ * Open a URL in the default browser
+ */
+function openBrowser(url: string): void {
+  const platform = process.platform;
+
+  try {
+    if (platform === 'win32') {
+      execSync(`start "" "${url}"`, { stdio: 'ignore', shell: 'cmd.exe' });
+    } else if (platform === 'darwin') {
+      execSync(`open "${url}"`, { stdio: 'ignore' });
+    } else {
+      // Linux - try common browsers
+      execSync(`xdg-open "${url}" || sensible-browser "${url}" || x-www-browser "${url}"`, {
+        stdio: 'ignore',
+        shell: '/bin/sh',
+      });
+    }
+  } catch {
+    console.log(chalk.yellow(`\n  Could not open browser automatically.`));
+    console.log(chalk.gray(`  Please open this URL manually:\n`));
+    console.log(chalk.cyan(`  ${url}\n`));
+  }
+}
+
+/**
+ * Sleep for a specified number of milliseconds
+ */
+function sleep(ms: number): Promise<void> {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+
+/**
+ * Extend trial by connecting GitHub account
+ */
+export async function extend(): Promise<void> {
+  console.log(chalk.blue(`
+  ╔═══════════════════════════════════════════════════════════╗
+  ║                                                           ║
+  ║   ${chalk.bold.white('Extend Your Trial with GitHub')}                       ║
+  ║                                                           ║
+  ╚═══════════════════════════════════════════════════════════╝
+  `));
+
+  // Check if user already has an API key (paid user)
+  const apiKey = getApiKey();
+  if (apiKey) {
+    console.log(chalk.green('  ✓ You\'re already logged in with an API key!\n'));
+    console.log(chalk.gray('  You have unlimited access. No extension needed.\n'));
+    return;
+  }
+
+  // Check for existing trial
+  const trial = getTrialState();
+
+  if (!trial) {
+    console.log(chalk.yellow('  No trial found.\n'));
+    console.log(chalk.white('  Start your free trial first:\n'));
+    console.log(chalk.cyan('    codebakers go\n'));
+    return;
+  }
+
+  // Check if already extended
+  if (trial.stage === 'extended') {
+    console.log(chalk.yellow('  Your trial has already been extended.\n'));
+
+    if (isTrialExpired()) {
+      console.log(chalk.white('  Ready to upgrade? $49/month for unlimited access:\n'));
+      console.log(chalk.cyan('    codebakers upgrade\n'));
+    } else {
+      const expiresAt = new Date(trial.expiresAt);
+      const daysRemaining = Math.max(0, Math.ceil((expiresAt.getTime() - Date.now()) / (1000 * 60 * 60 * 24)));
+      console.log(chalk.gray(`  ${daysRemaining} day${daysRemaining !== 1 ? 's' : ''} remaining.\n`));
+    }
+    return;
+  }
+
+  // Check if converted
+  if (trial.stage === 'converted') {
+    console.log(chalk.green('  ✓ You\'ve upgraded to a paid plan!\n'));
+    console.log(chalk.gray('  Run ') + chalk.cyan('codebakers setup') + chalk.gray(' to configure your API key.\n'));
+    return;
+  }
+
+  // Open browser for GitHub OAuth
+  const apiUrl = getApiUrl();
+  const authUrl = `${apiUrl}/api/auth/github?trial_id=${trial.trialId}`;
+
+  console.log(chalk.white('  Opening browser for GitHub authorization...\n'));
+
+  openBrowser(authUrl);
+
+  console.log(chalk.gray('  Waiting for authorization...'));
+  console.log(chalk.gray('  (This may take a moment)\n'));
+
+  // Poll for completion
+  const spinner = ora('Checking authorization status...').start();
+  let extended = false;
+  let pollCount = 0;
+  const maxPolls = 60; // 2 minutes max
+
+  while (pollCount < maxPolls && !extended) {
+    await sleep(2000);
+    pollCount++;
+
+    try {
+      const response = await fetch(`${apiUrl}/api/trial/status?trialId=${trial.trialId}`);
+      const data = await response.json();
+
+      if (data.stage === 'extended') {
+        extended = true;
+
+        // Update local trial state
+        const updatedTrial: TrialState = {
+          ...trial,
+          stage: 'extended',
+          expiresAt: data.expiresAt,
+          extendedAt: new Date().toISOString(),
+          ...(data.githubUsername && { githubUsername: data.githubUsername }),
+        };
+
+        setTrialState(updatedTrial);
+        spinner.succeed('Trial extended!');
+      }
+    } catch {
+      // Ignore polling errors
+    }
+  }
+
+  if (extended) {
+    console.log(chalk.green(`
+  ╔═══════════════════════════════════════════════════════════╗
+  ║  ✅ Trial Extended!                                       ║
+  ║                                                           ║
+  ║  ${chalk.white('You have 7 more days to build with CodeBakers.')}         ║
+  ║                                                           ║
+  ║  ${chalk.gray('Keep building - your project is waiting!')}                ║
+  ╚═══════════════════════════════════════════════════════════╝
+    `));
+  } else {
+    spinner.warn('Authorization timed out');
+    console.log(chalk.yellow('\n  Please try again or authorize manually:\n'));
+    console.log(chalk.cyan(`  ${authUrl}\n`));
+  }
+}