@nepopsx/cli 0.0.21 → 0.0.23

package/dist/utils/fetch-plan-manifest.js

@@ -0,0 +1,93 @@
+/**
+ * Fetch + cache the plan manifest from the public, read-only `GET /v1/plans` endpoint.
+ *
+ * The manifest is the backend's source of truth for plan limits/features (ADR 0002). The
+ * CLI consumes it for DISPLAY only. When the endpoint is unreachable or the backend predates
+ * it (404), we synthesize a manifest from core's `TIER_LIMITS` so the CLI never hard-fails —
+ * this keeps Phase 1 a no-op against the current backend (rollout step 1).
+ */
+import { TIER_LIMITS, } from '@nepopsx/core';
+import { resolveApiBase } from '../config/api-config.js';
+import { fetchWithTimeout } from './fetch.js';
+import { API_TIMEOUT_MS } from '../constants.js';
+import { readDiskCache, writeDiskCache } from './disk-cache.js';
+const MANIFEST_CACHE_FILE = 'plan-manifest.json';
+/** Plan copy changes rarely; an hour of display caching is plenty. */
+const MANIFEST_CACHE_TTL_MS = 60 * 60 * 1000;
+/** `Infinity` (core's "unlimited") → `null` (the manifest wire encoding). */
+function toQuota(n) {
+    return Number.isFinite(n) ? n : null;
+}
+/** Display-only seat defaults for the offline fallback (real values come from the API). */
+const FALLBACK_SEATS = { free: 1, team: 5, enterprise: null };
+function fallbackSpec(id, sortOrder) {
+    const t = TIER_LIMITS[id];
+    const paid = id !== 'free';
+    const limits = {
+        seats: FALLBACK_SEATS[id],
+        workspaces: toQuota(t.max_workspaces),
+        servicesPerWorkspace: toQuota(t.max_services),
+        agentPackages: toQuota(t.max_agents),
+        apiRatePerMin: t.api_rate_per_min,
+        marketplacePublishesPerMonth: t.publish_allowed ? null : 0,
+    };
+    const features = {
+        marketplacePublish: t.publish_allowed,
+        governanceLab: paid,
+        liveRecallMcp: paid,
+        githubSync: paid,
+        aiScan: t.scan_allowed,
+        auditExport: id === 'enterprise',
+        sso: id === 'enterprise',
+        selfHosted: id === 'enterprise',
+        webhooks: id === 'enterprise',
+    };
+    return {
+        id,
+        label: id.charAt(0).toUpperCase() + id.slice(1),
+        pricing: id === 'enterprise'
+            ? { salesLed: true, priceNpr: null, period: null }
+            : { salesLed: false, priceNpr: 0, period: 'month' },
+        sortOrder,
+        limits,
+        features,
+        isActive: true,
+    };
+}
+/** A manifest derived from core `TIER_LIMITS` — used when the API is unreachable/old. */
+export function fallbackManifest() {
+    return {
+        version: 0, // 0 = synthesized fallback (not a real server version)
+        updatedAt: new Date(0).toISOString(),
+        updatedBy: null,
+        trial: { tier: 'team', days: 14, oncePerOrg: true },
+        plans: [fallbackSpec('free', 0), fallbackSpec('team', 1), fallbackSpec('enterprise', 2)],
+    };
+}
+/**
+ * Return the plan manifest: cache → API → `TIER_LIMITS` fallback. Never throws.
+ */
+export async function fetchPlanManifest(rootDir, opts = {}) {
+    if (!opts.force) {
+        const cached = readDiskCache(rootDir, MANIFEST_CACHE_FILE);
+        if (cached?.plans?.length)
+            return cached;
+    }
+    const apiBase = resolveApiBase(rootDir);
+    try {
+        const res = await fetchWithTimeout(`${apiBase}/plans`, { method: 'GET', headers: { Accept: 'application/json' } }, API_TIMEOUT_MS);
+        if (res.ok) {
+            const manifest = (await res.json());
+            if (manifest?.plans?.length) {
+                writeDiskCache(rootDir, MANIFEST_CACHE_FILE, manifest, MANIFEST_CACHE_TTL_MS);
+                return manifest;
+            }
+        }
+        // 404 (older backend) or empty → fall through to fallback.
+    }
+    catch {
+        // offline / timeout → fall through to fallback.
+    }
+    return fallbackManifest();
+}
+//# sourceMappingURL=fetch-plan-manifest.js.map

package/dist/utils/fetch-plan-manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch-plan-manifest.js","sourceRoot":"","sources":["../../src/utils/fetch-plan-manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAOL,WAAW,GACZ,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEhE,MAAM,mBAAmB,GAAG,oBAAoB,CAAC;AACjD,sEAAsE;AACtE,MAAM,qBAAqB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE7C,6EAA6E;AAC7E,SAAS,OAAO,CAAC,CAAS;IACxB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACvC,CAAC;AAED,2FAA2F;AAC3F,MAAM,cAAc,GAA+B,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AAE1F,SAAS,YAAY,CAAC,EAAe,EAAE,SAAiB;IACtD,MAAM,CAAC,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC1B,MAAM,IAAI,GAAG,EAAE,KAAK,MAAM,CAAC;IAC3B,MAAM,MAAM,GAAe;QACzB,KAAK,EAAE,cAAc,CAAC,EAAE,CAAC;QACzB,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC;QACrC,oBAAoB,EAAE,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC;QAC7C,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;QACpC,aAAa,EAAE,CAAC,CAAC,gBAAgB;QACjC,4BAA4B,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;KAC3D,CAAC;IACF,MAAM,QAAQ,GAAiB;QAC7B,kBAAkB,EAAE,CAAC,CAAC,eAAe;QACrC,aAAa,EAAE,IAAI;QACnB,aAAa,EAAE,IAAI;QACnB,UAAU,EAAE,IAAI;QAChB,MAAM,EAAE,CAAC,CAAC,YAAY;QACtB,WAAW,EAAE,EAAE,KAAK,YAAY;QAChC,GAAG,EAAE,EAAE,KAAK,YAAY;QACxB,UAAU,EAAE,EAAE,KAAK,YAAY;QAC/B,QAAQ,EAAE,EAAE,KAAK,YAAY;KAC9B,CAAC;IACF,OAAO;QACL,EAAE;QACF,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/C,OAAO,EAAE,EAAE,KAAK,YAAY;YAC1B,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;YAClD,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE;QACrD,SAAS;QACT,MAAM;QACN,QAAQ;QACR,QAAQ,EAAE,IAAI;KACf,CAAC;AACJ,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,gBAAgB;IAC9B,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,uDAAuD;QACnE,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;QACpC,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE;QACnD,KAAK,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,YAAY,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;KACzF,CAAC;AACJ,CAAC;AAOD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAe,EACf,OAA6B,EAAE;IAE/B,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAChB,MAAM,MAAM,GAAG,aAAa,CAAe,OAAO,EAAE,mBAAmB,CAAC,CAAC;QACzE,IAAI,MAAM,EAAE,KAAK,EAAE,MAAM;YAAE,OAAO,MAAM,CAAC;IAC3C,CAAC;IAED,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAChC,GAAG,OAAO,QAAQ,EAClB,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,EAC1D,cAAc,CACf,CAAC;QACF,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;YACX,MAAM,QAAQ,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAiB,CAAC;YACpD,IAAI,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;gBAC5B,cAAc,CAAC,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,qBAAqB,CAAC,CAAC;gBAC9E,OAAO,QAAQ,CAAC;YAClB,CAAC;QACH,CAAC;QACD,2DAA2D;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,gDAAgD;IAClD,CAAC;IACD,OAAO,gBAAgB,EAAE,CAAC;AAC5B,CAAC"}

package/dist/utils/handle-402.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Render the backend's `402 Payment Required` entitlement error (ADR 0002 §2.7) as a friendly
+ * upgrade prompt. The server is the single hard authority; the CLI never denies locally, it just
+ * surfaces the server's decision. The `reason` field is the stable discriminator (not the status).
+ */
+export interface EntitlementErrorBody {
+    reason?: 'feature_locked' | 'quota_exceeded';
+    key?: string;
+    requiredTier?: string;
+    message?: string;
+}
+/**
+ * If `res` is a 402, print an upgrade prompt and return `true` (caller should stop). Otherwise
+ * return `false`. Safe to call on any response; never throws.
+ */
+export declare function reportIfPaymentRequired(res: Response): Promise<boolean>;
+//# sourceMappingURL=handle-402.d.ts.map

package/dist/utils/handle-402.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handle-402.d.ts","sourceRoot":"","sources":["../../src/utils/handle-402.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,MAAM,WAAW,oBAAoB;IACnC,MAAM,CAAC,EAAE,gBAAgB,GAAG,gBAAgB,CAAC;IAC7C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAqB7E"}

package/dist/utils/handle-402.js

@@ -0,0 +1,31 @@
+/**
+ * Render the backend's `402 Payment Required` entitlement error (ADR 0002 §2.7) as a friendly
+ * upgrade prompt. The server is the single hard authority; the CLI never denies locally, it just
+ * surfaces the server's decision. The `reason` field is the stable discriminator (not the status).
+ */
+import chalk from 'chalk';
+/**
+ * If `res` is a 402, print an upgrade prompt and return `true` (caller should stop). Otherwise
+ * return `false`. Safe to call on any response; never throws.
+ */
+export async function reportIfPaymentRequired(res) {
+    if (res.status !== 402)
+        return false;
+    let body = {};
+    try {
+        body = (await res.clone().json());
+    }
+    catch {
+        // non-JSON 402 — fall back to generic copy
+    }
+    const subject = body.key ? ` (${body.key})` : '';
+    const requires = body.requiredTier ? ` Requires the ${body.requiredTier} plan.` : '';
+    const headline = body.message ??
+        (body.reason === 'quota_exceeded'
+            ? 'You have reached your plan limit'
+            : 'This feature needs a higher plan');
+    console.error(chalk.yellow(`\n🔒 ${headline}${subject}.${requires}`));
+    console.log(chalk.dim('   Upgrade at https://nepopsx.dev/pricing\n'));
+    return true;
+}
+//# sourceMappingURL=handle-402.js.map

package/dist/utils/handle-402.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handle-402.js","sourceRoot":"","sources":["../../src/utils/handle-402.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAS1B;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,GAAa;IACzD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IAErC,IAAI,IAAI,GAAyB,EAAE,CAAC;IACpC,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAyB,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,2CAA2C;IAC7C,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,iBAAiB,IAAI,CAAC,YAAY,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IACrF,MAAM,QAAQ,GACZ,IAAI,CAAC,OAAO;QACZ,CAAC,IAAI,CAAC,MAAM,KAAK,gBAAgB;YAC/B,CAAC,CAAC,kCAAkC;YACpC,CAAC,CAAC,kCAAkC,CAAC,CAAC;IAE1C,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,QAAQ,GAAG,OAAO,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC;IACtE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC,CAAC;IACtE,OAAO,IAAI,CAAC;AACd,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nepopsx/cli",
-  "version": "0.0.21",
+  "version": "0.0.23",
   "description": "NEPOPSX CLI — generate AI agent workspaces from configuration",
   "license": "UNLICENSED",
   "type": "module",
@@ -28,7 +28,7 @@
     "inquirer": "^12.3.2",
     "ora": "^8.2.0",
     "yaml": "^2.7.0",
-    "@nepopsx/core": "^0.0.11"
+    "@nepopsx/core": "^0.0.12"
   },
   "devDependencies": {
     "@types/archiver": "^7.0.0",