@pretense/cli 0.6.23 → 0.6.25

package/dist/{chunk-Y7SXGTHU.js → chunk-XYBJ63JG.js}

@@ -17,7 +17,7 @@ function versionFromPackageJson() {
     return void 0;
   }
 }
-var PRETENSE_VERSION = (true ? "0.6.23" : void 0) ?? versionFromPackageJson() ?? "0.0.0-unknown";
+var PRETENSE_VERSION = (true ? "0.6.25" : void 0) ?? versionFromPackageJson() ?? "0.0.0-unknown";
 
 export {
   PRETENSE_VERSION

package/dist/index.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   PRETENSE_VERSION
-} from "./chunk-Y7SXGTHU.js";
+} from "./chunk-XYBJ63JG.js";
 import {
   __commonJS,
   __toESM,
@@ -16657,11 +16657,11 @@ function versionFromCliPackageJson() {
   return void 0;
 }
 function productVersion() {
-  return override ?? (true ? "0.6.23" : void 0) ?? versionFromCliPackageJson() ?? "0.0.0-unknown";
+  return override ?? (true ? "0.6.25" : void 0) ?? versionFromCliPackageJson() ?? "0.0.0-unknown";
 }
 var UNKNOWN_COMMIT = "unknown";
 function bakedCommitSha() {
-  return "3bc1a6f92239a8ea27af2a6558e968baf4b94d71".length > 0 ? "3bc1a6f92239a8ea27af2a6558e968baf4b94d71" : UNKNOWN_COMMIT;
+  return "24595f8f691656d511f75ed2d8b59f98069779ac".length > 0 ? "24595f8f691656d511f75ed2d8b59f98069779ac" : UNKNOWN_COMMIT;
 }
 var FEATURE_TIERS = {
   compliance_export: "pro",
@@ -18634,6 +18634,29 @@ function planToTier(plan) {
       return null;
   }
 }
+var SUBSCRIPTION_STATUS_SHAPE = /^[A-Za-z][A-Za-z0-9_-]{0,31}$/;
+function parseSubscriptionStatus(raw2) {
+  if (raw2 === null) return null;
+  if (typeof raw2 !== "string") return void 0;
+  const trimmed = raw2.trim();
+  return SUBSCRIPTION_STATUS_SHAPE.test(trimmed) ? trimmed : void 0;
+}
+function parseEntitlement(body) {
+  const raw2 = body["entitlement"];
+  if (!raw2 || typeof raw2 !== "object") return void 0;
+  const e = raw2;
+  const effectivePlan = planToTier(e["effectivePlan"]);
+  const planOnRecord = planToTier(e["planOnRecord"]);
+  if (effectivePlan === null && planOnRecord === null) return void 0;
+  const subscriptionStatus = parseSubscriptionStatus(e["subscriptionStatus"]);
+  return {
+    effectivePlan,
+    planOnRecord,
+    comped: e["comped"] === true,
+    hasActiveSubscription: e["hasActiveSubscription"] === true,
+    ...subscriptionStatus !== void 0 ? { subscriptionStatus } : {}
+  };
+}
 async function tierFromBackend(apiKey) {
   const url = `${getConfiguredApiRoot()}/api/cli/auth/validate`;
   const controller = new AbortController();
@@ -18668,7 +18691,7 @@ async function tierFromBackend(apiKey) {
         detail: "the plan service did not report a recognizable plan"
       };
     }
-    return { tier, source: "backend" };
+    return { tier, source: "backend", entitlement: parseEntitlement(body) };
   } catch (err) {
     const aborted = err?.name === "AbortError";
     return {
@@ -18743,8 +18766,56 @@ function tierLabel(tier) {
   if (tier === "free") return "Free";
   return `${tierName(tier)} (${priceLabel(tier)})`;
 }
+function entitlementMismatchLines(ent) {
+  const paidOnRecord = ent.planOnRecord === "pro" || ent.planOnRecord === "enterprise";
+  if (ent.effectivePlan !== "free" || !paidOnRecord) return [];
+  const planName = ent.planOnRecord === "enterprise" ? "Enterprise" : "Pro";
+  const status = ent.subscriptionStatus;
+  if (status === void 0) {
+    return [
+      `${planName} plan on record, but this key resolves to Free.`,
+      "This server did not report the reason \u2014 a paid org without an entitling",
+      "subscription or comp resolves to Free; see pretense.ai/dashboard/settings."
+    ];
+  }
+  if (status === null) {
+    if (ent.comped) {
+      return [
+        `${planName} plan on record and the org is comped with no subscription record,`,
+        "yet this key resolves to Free \u2014 that combination is unexpected.",
+        "Please contact support with this output \u2014 pretense.ai/dashboard/settings."
+      ];
+    }
+    return [
+      `${planName} plan present, but no active subscription or comp \u2014 running as Free.`,
+      "Attach a Stripe subscription or set the org comp flag \u2014 pretense.ai/dashboard/settings."
+    ];
+  }
+  if (ent.hasActiveSubscription) {
+    return [
+      `${planName} plan on record with a ${status} subscription the server reports as`,
+      "active, yet this key resolves to Free \u2014 that combination is unexpected.",
+      "Please contact support with this output \u2014 pretense.ai/dashboard/settings."
+    ];
+  }
+  if (ent.comped) {
+    return [
+      `${planName} plan on record and the org IS comped, but a ${status} subscription`,
+      "record is overriding the comp \u2014 running as Free.",
+      `Remove or replace that ${status} subscription record \u2014 pretense.ai/dashboard/settings.`
+    ];
+  }
+  return [
+    `${planName} plan on record, but its subscription is ${status} \u2014 running as Free.`,
+    "Replace it with a live subscription \u2014 pretense.ai/dashboard/settings."
+  ];
+}
 function planMismatchHint(resolution) {
-  if (resolution.tier !== "free" || resolution.source !== "backend") return [];
+  if (resolution.source !== "backend") return [];
+  if (resolution.entitlement) {
+    return entitlementMismatchLines(resolution.entitlement);
+  }
+  if (resolution.tier !== "free") return [];
   return [
     "Not the plan you expected? An org flagged PRO without an active",
     "subscription/comp resolves to Free \u2014 see pretense.ai/dashboard/settings or contact support."
@@ -20376,7 +20447,7 @@ async function verifyApiKey(apiKey) {
       return { outcome: "rejected", url, detail: "the API reported the key as not valid" };
     }
     const plan = typeof body["plan"] === "string" ? body["plan"] : void 0;
-    return { outcome: "valid", url, plan };
+    return { outcome: "valid", url, plan, entitlement: parseEntitlement(body) };
   } catch (err) {
     const aborted = err?.name === "AbortError";
     return {
@@ -20495,14 +20566,15 @@ function authCommand() {
       };
       writeCredentials(creds);
       if (verified) {
-        const planIsFree = String(verification.plan ?? "").trim().toLowerCase() === "free";
+        const mismatchLines = verification.entitlement ? entitlementMismatchLines(verification.entitlement) : String(verification.plan ?? "").trim().toLowerCase() === "free" ? [
+          "Not the plan you expected? A PRO-flagged org without an active",
+          "subscription/comp resolves to Free \u2014 see pretense.ai/dashboard/settings."
+        ] : [];
         console.log(
           chalk10.green("\n  Authenticated. The key was verified by the Pretense API.") + chalk10.dim(`
   Key:    ${maskApiKey(opts.apiKey)}`) + chalk10.dim(`
   Server: ${verification.url}`) + (verification.plan ? chalk10.dim(`
-  Plan:   ${verification.plan}`) : "") + (planIsFree ? chalk10.dim(
-            "\n  Not the plan you expected? A PRO-flagged org without an active\n  subscription/comp resolves to Free \u2014 see pretense.ai/dashboard/settings."
-          ) : "") + "\n" + storageNotice()
+  Plan:   ${verification.plan}`) : "") + (mismatchLines.length > 0 ? chalk10.dim("\n  " + mismatchLines.join("\n  ")) : "") + "\n" + storageNotice()
         );
         return;
       }

package/dist/postinstall.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   PRETENSE_VERSION
-} from "./chunk-Y7SXGTHU.js";
+} from "./chunk-XYBJ63JG.js";
 import {
   init_esm_shims
 } from "./chunk-TWMRHZGM.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pretense/cli",
-  "version": "0.6.23",
+  "version": "0.6.25",
   "description": "Local-first AI firewall that mutates proprietary code before sending to LLM APIs",
   "type": "module",
   "bin": {
@@ -23,15 +23,15 @@
     "tsx": "^4.0.0",
     "typescript": "^5.4.0",
     "vitest": "^1.0.0",
-    "@pretense/compliance-engine": "0.1.0",
-    "@pretense/protocol": "0.1.0",
+    "@pretense/billing": "0.1.0",
     "@pretense/learner": "0.2.0",
+    "@pretense/compliance-engine": "0.1.0",
     "@pretense/mutator": "0.2.0",
     "@pretense/proxy": "0.1.0",
     "@pretense/scanner": "0.2.0",
     "@pretense/scanner-rs": "0.2.0",
-    "@pretense/billing": "0.1.0",
-    "@pretense/store": "0.2.0"
+    "@pretense/store": "0.2.0",
+    "@pretense/protocol": "0.1.0"
   },
   "publishConfig": {
     "access": "public",