@phnx-labs/agents-cli 1.22.44 → 1.22.46

package/dist/commands/auth.js

@@ -1,112 +1,227 @@
 import chalk from 'chalk';
+import { PhoenixApiError, clearSession, createSpace, createSpaceInvite, fetchWhoAmI, listSpaceMembers, listSpaces, pollDeviceToken, readSession, removeSpaceMember, resolveMemberFromList, resolveSpaceFromList, slugify, startDeviceAuthorization, updateSpaceMemberRole, writeSession, } from '../lib/identity/index.js';
 import { setHelpSections } from '../lib/help.js';
 import { runOrDie } from '../lib/format.js';
-import { clearPrixSession, fetchWhoAmI, pollDeviceToken, PrixApiError, readPrixSession, resolvePrixToken, startDeviceAuthorization, writePrixSession, } from '../lib/prix-account.js';
-import { registerAuthSpaceCommand } from './org.js';
-function sleep(ms) {
-    return new Promise(resolve => setTimeout(resolve, ms));
-}
 /**
- * `agents auth login` — RFC 8628 device-code flow against the already-shipped
- * `/api/v1/auth/device/*` routes. If the live API rejects the request shape
- * (a route this spec missed, or the endpoint moved), this fails loud with the
- * `rush login` fallback rather than silently stubbing a fake session.
+ * `agents auth` — sign in to Phoenix ID, the account layer behind teams and
+ * plan tiers. Everything here goes through `lib/identity`; this file builds no
+ * URLs and reads no credential files of its own.
  */
-export async function runAuthLogin() {
-    let authorization;
-    try {
-        authorization = await startDeviceAuthorization();
-    }
-    catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
-        const existing = resolvePrixToken();
-        if (existing?.source === 'rush') {
-            console.log(chalk.yellow(`Device login is unavailable right now (${message}), but you're already signed in via 'rush login'.`));
-            console.log("Run 'agents auth whoami' to confirm.");
-            return;
-        }
-        throw new Error(`Device login is unavailable right now (${message}). Run 'rush login' instead, then 'agents auth whoami' to confirm.`);
-    }
-    console.log(`To sign in, open:\n\n  ${chalk.cyan(authorization.verification_uri_complete)}\n`);
-    console.log(chalk.gray(`(code: ${authorization.user_code})`));
-    const deadline = Date.now() + authorization.expires_in * 1000;
-    let interval = Math.max(authorization.interval, 1) * 1000;
+function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+async function login() {
+    const grant = await startDeviceAuthorization();
+    console.log('');
+    console.log(`  Your code:  ${chalk.bold.cyan(grant.user_code)}`);
+    console.log(`  Open:       ${chalk.underline(grant.verification_uri_complete)}`);
+    console.log('');
+    console.log(chalk.gray('  Waiting for you to approve it in the browser…'));
+    // The server sets the pace; `slow_down` widens it (RFC 8628 §3.5).
+    let interval = Math.max(1, grant.interval) * 1000;
+    const deadline = Date.now() + grant.expires_in * 1000;
     while (Date.now() < deadline) {
         await sleep(interval);
-        const poll = await pollDeviceToken(authorization.device_code);
-        if (poll.status === 'pending')
-            continue;
+        const poll = await pollDeviceToken(grant.device_code);
+        if (poll.status === 'authorized') {
+            writeSession({ access_token: poll.access_token, email: poll.user.email, userId: poll.user.id });
+            console.log(chalk.green(`\n  Signed in as ${poll.user.email}.`));
+            return;
+        }
         if (poll.status === 'slow_down') {
-            interval += 1000;
+            interval += 5000;
             continue;
         }
-        if (poll.status === 'expired')
-            throw new Error('Login code expired. Run `agents auth login` again.');
         if (poll.status === 'denied')
-            throw new Error('Login was denied.');
-        writePrixSession({
-            access_token: poll.access_token,
-            refresh_token: poll.refresh_token,
-            expires_at: poll.expires_in ? Date.now() + poll.expires_in * 1000 : undefined,
-            email: poll.user.email,
-            userId: poll.user.id,
-        });
-        console.log(chalk.green(`Signed in as ${poll.user.email}.`));
-        return;
+            throw new Error('Sign-in was denied in the browser.');
+        if (poll.status === 'expired')
+            throw new Error("That code expired. Run 'agents auth login' again.");
     }
-    throw new Error('Login code expired. Run `agents auth login` again.');
+    throw new Error("Timed out waiting for approval. Run 'agents auth login' again.");
 }
-async function runAuthWhoami(json) {
-    const resolved = resolvePrixToken();
-    if (!resolved)
-        throw new Error("Not signed in. Run 'agents auth login' first.");
-    let who;
+async function whoami(json) {
+    const session = readSession();
+    if (!session) {
+        if (json) {
+            console.log(JSON.stringify({ signedIn: false }, null, 2));
+            return;
+        }
+        console.log(chalk.gray("Not signed in. Run 'agents auth login'."));
+        process.exitCode = 1;
+        return;
+    }
     try {
-        who = await fetchWhoAmI(resolved.token);
+        const me = await fetchWhoAmI();
+        if (json) {
+            console.log(JSON.stringify({ signedIn: true, ...me }, null, 2));
+            return;
+        }
+        console.log(`${chalk.bold(me.email)}  ${chalk.gray(me.userId)}`);
     }
     catch (err) {
-        if (err instanceof PrixApiError && err.status === 401) {
-            throw new Error(`Signed-in token is no longer valid (${resolved.source === 'agents' ? "run 'agents auth login'" : "run 'rush login'"} again).`);
+        if (err instanceof PhoenixApiError && err.status === 401) {
+            throw new Error("Your session is no longer valid. Run 'agents auth login' again.");
         }
         throw err;
     }
-    if (json) {
-        console.log(JSON.stringify({ ...who, source: resolved.source }, null, 2));
-        return;
-    }
-    console.log(`${chalk.bold(who.email)}  ${chalk.gray(who.userId)}`);
-    console.log(chalk.gray(`signed in via ${resolved.source === 'agents' ? "'agents auth login'" : "'rush login' (shared session)"}`));
 }
-function runAuthLogout() {
-    const cleared = clearPrixSession();
-    const rushRemains = resolvePrixToken()?.source === 'rush';
-    if (!cleared && !readPrixSession()) {
-        console.log(chalk.gray('Not signed in via `agents auth login` — nothing to clear.'));
+function printSpaces(spaces) {
+    if (!spaces.length) {
+        console.log(chalk.gray("  No spaces yet. Create one with 'agents auth space create <name>'."));
+        return;
     }
-    else {
-        console.log(chalk.green('Signed out.'));
+    for (const space of spaces) {
+        console.log(`  ${chalk.cyan(space.slug)}  ${space.name}  ${chalk.gray(space.user_role)}`);
     }
-    if (rushRemains) {
-        console.log(chalk.gray("You're still signed in via `rush login` — `agents auth whoami` will use that session. Run `rush logout` to clear it too."));
+}
+/** Resolve a space reference (or the caller's only space) to a concrete space. */
+async function requireSpace(ref) {
+    const spaces = await listSpaces();
+    const space = resolveSpaceFromList(spaces, ref);
+    if (space)
+        return space;
+    if (!ref) {
+        throw new Error(spaces.length
+            ? `You are in ${spaces.length} spaces — name one: ${spaces.map((s) => s.slug).join(', ')}.`
+            : "You are not in a space yet. Create one with 'agents auth space create <name>'.");
     }
+    throw new Error(`No space named '${ref}'.`);
 }
 export function registerAuthCommand(program) {
-    const auth = program.command('auth').description('Sign in to your Prix account (spaces, paid tiers)');
-    auth.command('login').description('Sign in via the device-code flow').action(() => runOrDie(() => runAuthLogin()));
-    auth.command('whoami').description('Show the signed-in account').option('--json', 'Machine-readable output')
+    const auth = program
+        .command('auth')
+        .description('Sign in to Phoenix ID — the account layer behind spaces and plan tiers');
+    setHelpSections(auth, {
+        examples: `agents auth login                         # device-code sign-in via your browser
+agents auth whoami                        # who this machine is signed in as
+agents auth space create "Design Team"    # start a space
+agents auth space invite ada@example.com  # add a teammate
+agents auth logout                        # clear this machine only`,
+        notes: `Sign-in is Google-only and opens a Phoenix-branded page; the CLI never sees a password.
+The session lives in this machine's agents state dir, so logging out here signs out nothing else.
+Point at a different backend with PHOENIX_ID_BASE (defaults to the production service).`,
+    });
+    auth
+        .command('login')
+        .description('Sign in with the device-code flow')
+        .action(() => runOrDie(() => login()));
+    auth
+        .command('whoami')
+        .description('Show the signed-in account')
+        .option('--json', 'Machine-readable output')
         .action((o, command) => {
-        const json = !!(o.json || command.optsWithGlobals().json);
-        return runOrDie(() => runAuthWhoami(json), { json });
+        const json = !!o.json || !!command.optsWithGlobals().json;
+        return runOrDie(() => whoami(json), { json });
     });
-    auth.command('logout').description('Clear the local `agents auth login` session').action(() => runOrDie(() => runAuthLogout()));
-    registerAuthSpaceCommand(auth);
-    setHelpSections(auth, {
-        examples: `agents auth login
-agents auth whoami
-agents auth whoami --json
-agents auth logout
-agents auth space create acme-team
-agents auth space invite dev@example.com --role admin`,
-        notes: "`agents auth login` writes its own session, separate from \`rush login\`'s \`~/.rush/user.yaml\` — \`agents auth logout\` never signs you out of \`rush\`. If you're already signed in via \`rush login\`, \`agents auth whoami\`/\`agents auth space\` use that session automatically; no separate login is required. \`agents org\` is a deprecated alias of \`agents auth space\`.",
+    auth
+        .command('logout')
+        .description("Clear this machine's session (no other device is affected)")
+        .action(() => runOrDie(() => {
+        const session = readSession();
+        clearSession();
+        console.log(session ? chalk.green(`Signed out ${session.email ?? 'this machine'}.`) : chalk.gray('Already signed out.'));
+    }));
+    const space = auth.command('space').description('Spaces — share work with teammates');
+    space
+        .command('list', { isDefault: true })
+        .description('Spaces you belong to')
+        .option('--json', 'Machine-readable output')
+        .action((o, command) => {
+        const json = !!o.json || !!command.optsWithGlobals().json;
+        return runOrDie(async () => {
+            const spaces = await listSpaces();
+            if (json)
+                return console.log(JSON.stringify(spaces, null, 2));
+            printSpaces(spaces);
+        }, { json });
+    });
+    space
+        .command('create <name>')
+        .description('Create a space')
+        .option('--slug <slug>', 'URL-safe name (defaults to a slug of <name>)')
+        .option('--json', 'Machine-readable output')
+        .action((name, o, command) => {
+        const json = !!o.json || !!command.optsWithGlobals().json;
+        return runOrDie(async () => {
+            const created = await createSpace({ name, slug: o.slug ?? slugify(name) });
+            if (json)
+                return console.log(JSON.stringify(created, null, 2));
+            console.log(chalk.green(`Created ${created.name} (${created.slug}).`));
+        }, { json });
+    });
+    space
+        .command('members [space]')
+        .description('Who is in a space')
+        .option('--json', 'Machine-readable output')
+        .action((ref, o, command) => {
+        const json = !!o.json || !!command.optsWithGlobals().json;
+        return runOrDie(async () => {
+            const target = await requireSpace(ref);
+            const members = await listSpaceMembers(target.id);
+            if (json)
+                return console.log(JSON.stringify(members, null, 2));
+            for (const m of members)
+                console.log(`  ${m.email}  ${chalk.gray(m.role)}`);
+        }, { json });
+    });
+    space
+        .command('invite <email>')
+        .description('Invite someone to a space')
+        .option('--space <space>', 'Which space (defaults to your only one)')
+        .option('--role <role>', 'admin or member', 'member')
+        .option('--json', 'Machine-readable output')
+        .action((email, o, command) => {
+        const json = !!o.json || !!command.optsWithGlobals().json;
+        return runOrDie(async () => {
+            if (o.role !== 'admin' && o.role !== 'member') {
+                throw new Error(`--role must be admin or member (got '${o.role}').`);
+            }
+            const target = await requireSpace(o.space);
+            const result = await createSpaceInvite(target.id, { email, role: o.role });
+            if (json)
+                return console.log(JSON.stringify(result, null, 2));
+            console.log(result.member_added
+                ? chalk.green(`Added ${email} to ${target.name} as ${o.role}.`)
+                : chalk.green(`Invited ${email} to ${target.name} as ${o.role}. Invite code: ${result.invite_code}`));
+        }, { json });
+    });
+    space
+        .command('role <email> <role>')
+        .description('Change a member\'s role (owner only for admin)')
+        .option('--space <space>', 'Which space (defaults to your only one)')
+        .option('--json', 'Machine-readable output')
+        .action((email, role, o, command) => {
+        const json = !!o.json || !!command.optsWithGlobals().json;
+        return runOrDie(async () => {
+            if (role !== 'admin' && role !== 'member') {
+                throw new Error(`role must be admin or member (got '${role}').`);
+            }
+            const target = await requireSpace(o.space);
+            const member = resolveMemberFromList(await listSpaceMembers(target.id), email);
+            if (!member)
+                throw new Error(`${email} is not in ${target.name}.`);
+            const updated = await updateSpaceMemberRole(target.id, member.user_id, role);
+            if (json)
+                return console.log(JSON.stringify(updated, null, 2));
+            console.log(chalk.green(`${email} is now ${role} in ${target.name}.`));
+        }, { json });
+    });
+    space
+        .command('remove <email>')
+        .description('Remove a member (or yourself) from a space')
+        .option('--space <space>', 'Which space (defaults to your only one)')
+        .option('--json', 'Machine-readable output')
+        .action((email, o, command) => {
+        const json = !!o.json || !!command.optsWithGlobals().json;
+        return runOrDie(async () => {
+            const target = await requireSpace(o.space);
+            const member = resolveMemberFromList(await listSpaceMembers(target.id), email);
+            if (!member)
+                throw new Error(`${email} is not in ${target.name}.`);
+            await removeSpaceMember(target.id, member.user_id);
+            if (json)
+                return console.log(JSON.stringify({ removed: true, email, space: target.slug }, null, 2));
+            console.log(chalk.green(`Removed ${email} from ${target.name}.`));
+        }, { json });
     });
 }

package/dist/commands/insights.js

@@ -49,24 +49,7 @@ import { terminalWidth, truncateToWidth, stringWidth, padToWidth } from '../lib/
 import { registerMixCommands } from '../lib/analytics/mix-commands.js';
 import { registerCostCommand } from './cost.js';
 import { registerOutputCommand } from './output.js';
-import { getTier } from '../lib/entitlement.js';
 const execFileAsync = promisify(execFile);
-/**
- * Plan-tier gate for the behavioural report (RUSH-2424). Free keeps top-line
- * counts and the harness mix (and `insights mix` / `agents perf`, which never
- * enter this file's gating since they're separate command trees); the
- * friction/correction-signal sections, grouping `--by account`, and
- * `--narrative` are paid. `insights mix`/`cost`/`output` are unaffected — this
- * gate applies only to the default behavioural report.
- */
-const PAID_PLAN_NOTICE = 'Friction and account-split analysis are on the paid plan.';
-function resolveInsightsGate(tier, dim) {
-    return {
-        tier,
-        groupGated: !tier.isPaid && dim === 'account',
-        frictionGated: !tier.isPaid,
-    };
-}
 function collectAgent(value, previous) {
     return [...previous, value];
 }
@@ -225,7 +208,7 @@ function renderHours(hours, out) {
     out.push(`  ${chalk.cyan(spark)}`);
     out.push(`  ${chalk.gray('0h'.padEnd(6))}${chalk.gray('6h'.padEnd(6))}${chalk.gray('12h'.padEnd(6))}${chalk.gray('18h'.padEnd(5))}${chalk.gray('23h')}`);
 }
-function renderReport(groups, dim, meta, actions, harnesses, gate) {
+function renderReport(groups, dim, meta, actions, harnesses) {
     const out = [];
     const scope = meta.since ? `last ${meta.since}` : 'all time';
     out.push(chalk.bold('Insights') + chalk.gray(`  ${scope} · ${meta.analyzed} of ${meta.scanned} sessions`));
@@ -235,44 +218,28 @@ function renderReport(groups, dim, meta, actions, harnesses, gate) {
         console.log(out.join('\n'));
         return;
     }
-    let noticePrinted = false;
-    const printPlanNotice = () => {
-        if (noticePrinted)
-            return;
-        noticePrinted = true;
-        out.push('');
-        out.push(chalk.gray(`  ${PAID_PLAN_NOTICE}`));
-    };
     // Per-group table — the headline, and the thing no sibling command produces.
     // Includes silent-stall counts so harness/account laziness is visible without --json.
-    // Gated on the free plan when grouped `--by account` (the default) — see resolveInsightsGate.
-    if (gate.groupGated) {
-        printPlanNotice();
-    }
-    else {
-        out.push('');
-        out.push(chalk.bold(`By ${dim}`));
-        const labelW = Math.min(Math.max(...groups.map((g) => stringWidth(g.label)), 5), Math.max(16, terminalWidth() - 58));
-        const sessW = Math.max(...groups.map((g) => String(g.sessions).length), 3);
-        // Friction-derived — never shown on the free plan, even when grouping by
-        // something other than account (gate.groupGated only covers `--by account`).
-        const stallOf = (g) => Object.entries(g.facets.frictionSignals)
-            .filter(([k]) => k.startsWith('silent stall:'))
-            .reduce((n, [, c]) => n + c, 0);
-        const resumeOf = (g) => g.facets.correctionSignals['resume after silent stall'] ?? 0;
-        const stallW = gate.frictionGated ? 6 : Math.max(...groups.map((g) => String(stallOf(g)).length), 5);
-        out.push(chalk.gray(`  ${padToWidth('', labelW)}  ${''.padStart(sessW)}       ` +
-            `${''.padStart(9)}  ${''.padStart(8)}  ${gate.frictionGated ? ''.padStart(stallW) : 'stalls'.padStart(stallW)}  ${gate.frictionGated ? '' : 'resume'}`));
-        for (const g of groups) {
-            const cost = g.costUsd > 0 ? formatUsd(g.costUsd) : '—';
-            const dur = g.durationMs > 0 ? formatDuration(g.durationMs) : '—';
-            const stalls = gate.frictionGated ? '—' : String(stallOf(g));
-            const resumes = gate.frictionGated ? '' : String(resumeOf(g));
-            out.push(`  ${padToWidth(truncateToWidth(g.label, labelW), labelW)}  ` +
-                `${chalk.gray(String(g.sessions).padStart(sessW))} ${chalk.gray('sess')}  ` +
-                `${chalk.green(padToWidth(cost, 9))}  ${chalk.gray(padToWidth(dur, 8))}  ` +
-                `${chalk.cyan(stalls.padStart(stallW))}  ${chalk.cyan(resumes)}`);
-        }
+    out.push('');
+    out.push(chalk.bold(`By ${dim}`));
+    const labelW = Math.min(Math.max(...groups.map((g) => stringWidth(g.label)), 5), Math.max(16, terminalWidth() - 58));
+    const sessW = Math.max(...groups.map((g) => String(g.sessions).length), 3);
+    const stallOf = (g) => Object.entries(g.facets.frictionSignals)
+        .filter(([k]) => k.startsWith('silent stall:'))
+        .reduce((n, [, c]) => n + c, 0);
+    const resumeOf = (g) => g.facets.correctionSignals['resume after silent stall'] ?? 0;
+    const stallW = Math.max(...groups.map((g) => String(stallOf(g)).length), 5);
+    out.push(chalk.gray(`  ${padToWidth('', labelW)}  ${''.padStart(sessW)}       ` +
+        `${''.padStart(9)}  ${''.padStart(8)}  ${'stalls'.padStart(stallW)}  resume`));
+    for (const g of groups) {
+        const cost = g.costUsd > 0 ? formatUsd(g.costUsd) : '—';
+        const dur = g.durationMs > 0 ? formatDuration(g.durationMs) : '—';
+        const stalls = String(stallOf(g));
+        const resumes = String(resumeOf(g));
+        out.push(`  ${padToWidth(truncateToWidth(g.label, labelW), labelW)}  ` +
+            `${chalk.gray(String(g.sessions).padStart(sessW))} ${chalk.gray('sess')}  ` +
+            `${chalk.green(padToWidth(cost, 9))}  ${chalk.gray(padToWidth(dur, 8))}  ` +
+            `${chalk.cyan(stalls.padStart(stallW))}  ${chalk.cyan(resumes)}`);
     }
     // Everything below is the whole scope folded together; per-group detail is in --json.
     const all = newFacetAccumulator();
@@ -281,64 +248,54 @@ function renderReport(groups, dim, meta, actions, harnesses, gate) {
     renderCounts('Top tools', topEntries(all.toolCounts, 8), out);
     renderCounts('Languages', topEntries(all.languages, 6), out);
     renderCounts('Models', topEntries(all.models, 6), out);
-    // Friction — the section that earns the command. Paid plan only (RUSH-2424);
-    // top-line counts and harness mix above/below stay free.
-    if (gate.frictionGated) {
-        printPlanNotice();
+    // Friction — the section that earns the command.
+    renderCounts('Silent stalls by model', topEntries(all.silentStallsByModel ?? {}, 8), out);
+    const gaps = all.responseGaps;
+    const silentStalls = Object.entries(all.frictionSignals)
+        .filter(([k]) => k.startsWith('silent stall:'))
+        .reduce((n, [, c]) => n + c, 0);
+    const resumeNudges = all.correctionSignals['resume after silent stall'] ?? 0;
+    out.push('');
+    out.push(chalk.bold('Friction'));
+    out.push(`  ${padToWidth('interruptions', 18)}  ${chalk.cyan(String(all.interruptions))}` +
+        chalk.gray('   turns you cut short'));
+    out.push(`  ${padToWidth('tool errors', 18)}  ${chalk.cyan(String(all.errorCount))}`);
+    if (gaps.length > 0) {
+        // Same timestamps as silent stalls; this line is the distribution. Silent
+        // stalls (below) are the agent-attributed long gaps after the model stopped.
+        out.push(`  ${padToWidth('gap until next msg', 18)}  ` +
+            chalk.cyan(`p50 ${Math.round(percentile(gaps, 50))}s`) + chalk.gray(` · p90 ${Math.round(percentile(gaps, 90))}s`) +
+            chalk.gray('   after assistant last spoke'));
     }
-    else {
-        renderCounts('Silent stalls by model', topEntries(all.silentStallsByModel ?? {}, 8), out);
-        const gaps = all.responseGaps;
-        const silentStalls = Object.entries(all.frictionSignals)
-            .filter(([k]) => k.startsWith('silent stall:'))
-            .reduce((n, [, c]) => n + c, 0);
-        const resumeNudges = all.correctionSignals['resume after silent stall'] ?? 0;
-        out.push('');
-        out.push(chalk.bold('Friction'));
-        out.push(`  ${padToWidth('interruptions', 18)}  ${chalk.cyan(String(all.interruptions))}` +
-            chalk.gray('   turns you cut short'));
-        out.push(`  ${padToWidth('tool errors', 18)}  ${chalk.cyan(String(all.errorCount))}`);
-        if (gaps.length > 0) {
-            // Same timestamps as silent stalls; this line is the distribution. Silent
-            // stalls (below) are the agent-attributed long gaps after the model stopped.
-            out.push(`  ${padToWidth('gap until next msg', 18)}  ` +
-                chalk.cyan(`p50 ${Math.round(percentile(gaps, 50))}s`) + chalk.gray(` · p90 ${Math.round(percentile(gaps, 90))}s`) +
-                chalk.gray('   after assistant last spoke'));
-        }
-        if (silentStalls > 0) {
-            out.push(`  ${padToWidth('silent stalls', 18)}  ${chalk.cyan(String(silentStalls))}` +
-                chalk.gray('   agent idle ≥5m until you resumed (also in By ' + dim + ' table)'));
-        }
-        if (resumeNudges > 0) {
-            out.push(`  ${padToWidth('resume nudges', 18)}  ${chalk.cyan(String(resumeNudges))}` +
-                chalk.gray('   "continue"/"keep going" after a silent stall'));
-        }
-        const errs = topEntries(all.errorCategories, 6);
-        if (errs.length > 0) {
-            for (const e of errs)
-                out.push(`    ${chalk.gray('·')} ${padToWidth(e.name, 16)} ${chalk.gray(String(e.count))}`);
-        }
-        renderCounts('Friction / thrash', topEntries(all.frictionSignals, 10), out);
-        renderCounts('Dissatisfaction / corrections', topEntries(all.correctionSignals, 10), out);
+    if (silentStalls > 0) {
+        out.push(`  ${padToWidth('silent stalls', 18)}  ${chalk.cyan(String(silentStalls))}` +
+            chalk.gray('   agent idle ≥5m until you resumed (also in By ' + dim + ' table)'));
+    }
+    if (resumeNudges > 0) {
+        out.push(`  ${padToWidth('resume nudges', 18)}  ${chalk.cyan(String(resumeNudges))}` +
+            chalk.gray('   "continue"/"keep going" after a silent stall'));
+    }
+    const errs = topEntries(all.errorCategories, 6);
+    if (errs.length > 0) {
+        for (const e of errs)
+            out.push(`    ${chalk.gray('·')} ${padToWidth(e.name, 16)} ${chalk.gray(String(e.count))}`);
     }
+    renderCounts('Friction / thrash', topEntries(all.frictionSignals, 10), out);
+    renderCounts('Dissatisfaction / corrections', topEntries(all.correctionSignals, 10), out);
     renderCounts('Automatable repeats', topEntries(all.automationSignals, 10), out);
     renderCounts('Harness split', harnesses, out);
     // Actions are built from frictionSignals/correctionSignals/automationSignals
-    // together (buildInsightActions) — evidence counts, sample session ids, and
-    // the action text itself describe the same paid friction/correction
-    // categories gated above, so the whole section is paid too (RUSH-2424).
-    if (!gate.frictionGated) {
-        out.push('');
-        out.push(chalk.bold('Actions'));
-        if (actions.length === 0) {
-            out.push(chalk.gray('  No repeated action pattern met the evidence threshold in this window.'));
-        }
-        else {
-            out.push(chalk.gray('  pri     category    evidence  sample sessions  action'));
-            for (const action of actions.slice(0, 12)) {
-                out.push(`  ${padToWidth(action.priority, 7)} ${padToWidth(action.category, 11)} ` +
-                    `${String(action.evidenceCount).padStart(8)}  ${padToWidth(action.sampleSessionIds.join(', '), 25)} ${action.action}`);
-            }
+    // together (buildInsightActions).
+    out.push('');
+    out.push(chalk.bold('Actions'));
+    if (actions.length === 0) {
+        out.push(chalk.gray('  No repeated action pattern met the evidence threshold in this window.'));
+    }
+    else {
+        out.push(chalk.gray('  pri     category    evidence  sample sessions  action'));
+        for (const action of actions.slice(0, 12)) {
+            out.push(`  ${padToWidth(action.priority, 7)} ${padToWidth(action.category, 11)} ` +
+                `${String(action.evidenceCount).padStart(8)}  ${padToWidth(action.sampleSessionIds.join(', '), 25)} ${action.action}`);
         }
     }
     // Output
@@ -394,9 +351,7 @@ function renderReport(groups, dim, meta, actions, harnesses, gate) {
             out.push('');
         out.push(chalk.yellow(`  ${meta.unreadable} transcripts could not be read; their behaviour is missing from these totals.`));
     }
-    // Friction-derived (gapsOverCeiling is a PAID_FACET_KEYS entry) and names
-    // "silent stall" outright — must not render on the free plan.
-    if (!gate.frictionGated && all.gapsOverCeiling > 0) {
+    if (all.gapsOverCeiling > 0) {
         out.push(chalk.gray(`  ${all.gapsOverCeiling} gaps over an hour excluded from p50/p90 (still counted as silent stall: 1h+ when the assistant last spoke).`));
     }
     out.push('');
@@ -451,23 +406,8 @@ async function renderNarrative(payload) {
         process.exitCode = 1;
     }
 }
-/** Facet keys that belong to the paid friction/correction sections — stripped from `--json` on free (RUSH-2424). */
-const PAID_FACET_KEYS = new Set([
-    'frictionSignals', 'correctionSignals', 'silentStallsByModel',
-    'interruptions', 'errorCount', 'errorCategories', 'responseGaps', 'gapsOverCeiling',
-]);
-function freeFacetSubset(facets) {
-    const out = {};
-    for (const [key, value] of Object.entries(facets)) {
-        if (!PAID_FACET_KEYS.has(key))
-            out[key] = value;
-    }
-    return out;
-}
 async function insightsAction(options) {
     const dim = resolveGroup(options.by);
-    const tier = await getTier();
-    const gate = resolveInsightsGate(tier, dim);
     const minMessages = Number.parseInt(options.minMessages ?? '2', 10);
     if (!Number.isFinite(minMessages) || minMessages < 0) {
         console.error(chalk.red('error: --min-messages must be a non-negative integer'));
@@ -533,37 +473,31 @@ async function insightsAction(options) {
             unreadable,
             minMessages,
             by: dim,
-            plan: { tierName: tier.tierName, isPaid: tier.isPaid },
-            ...(gate.groupGated || gate.frictionGated ? { notice: PAID_PLAN_NOTICE } : {}),
             overlap,
             // Built from frictionSignals/correctionSignals/automationSignals together
             // (buildInsightActions) — same paid friction/correction data as above.
-            actions: gate.frictionGated ? null : actions,
+            actions,
             harnesses,
-            groups: gate.groupGated ? null : groups.map((g) => ({
+            groups: groups.map((g) => ({
                 key: g.key,
                 label: g.label,
                 sessions: g.sessions,
                 costUsd: g.costUsd,
                 durationMs: g.durationMs,
                 outputTokens: g.outputTokens,
-                ...(gate.frictionGated ? freeFacetSubset(g.facets) : {
+                ...{
                     ...g.facets,
                     responseGapP50: Math.round(percentile(g.facets.responseGaps, 50)),
                     responseGapP90: Math.round(percentile(g.facets.responseGaps, 90)),
                     responseGapBuckets: bucketGaps(g.facets.responseGaps),
                     // The raw sample is large and uninteresting once bucketed.
                     responseGaps: undefined,
-                }),
+                },
             })),
         };
         console.log(JSON.stringify(payload, null, 2));
-        if (options.narrative) {
-            if (!tier.isPaid)
-                console.error(chalk.gray(`  ${PAID_PLAN_NOTICE}`));
-            else
-                await renderNarrative(payload);
-        }
+        if (options.narrative)
+            await renderNarrative(payload);
         return;
     }
     renderReport(groups, dim, {
@@ -574,24 +508,18 @@ async function insightsAction(options) {
         unreadable,
         minMessages,
         overlap,
-    }, actions, harnesses, gate);
+    }, actions, harnesses);
     if (options.narrative) {
-        if (!tier.isPaid) {
-            console.log('');
-            console.log(chalk.gray(`  ${PAID_PLAN_NOTICE}`));
-        }
-        else {
-            await renderNarrative(groups.map((g) => ({
-                account: g.label, sessions: g.sessions, costUsd: g.costUsd,
-                topTools: topEntries(g.facets.toolCounts, 8),
-                languages: topEntries(g.facets.languages, 6),
-                errorCategories: topEntries(g.facets.errorCategories, 6),
-                interruptions: g.facets.interruptions,
-                linesTouchedAfter: g.facets.linesTouchedAfter, linesTouchedBefore: g.facets.linesTouchedBefore,
-                gitCommits: g.facets.gitCommits,
-                replyP50s: Math.round(percentile(g.facets.responseGaps, 50)),
-            })));
-        }
+        await renderNarrative(groups.map((g) => ({
+            account: g.label, sessions: g.sessions, costUsd: g.costUsd,
+            topTools: topEntries(g.facets.toolCounts, 8),
+            languages: topEntries(g.facets.languages, 6),
+            errorCategories: topEntries(g.facets.errorCategories, 6),
+            interruptions: g.facets.interruptions,
+            linesTouchedAfter: g.facets.linesTouchedAfter, linesTouchedBefore: g.facets.linesTouchedBefore,
+            gitCommits: g.facets.gitCommits,
+            replyP50s: Math.round(percentile(g.facets.responseGaps, 50)),
+        })));
     }
 }
 function configureInsightsCommand(cmd) {