@revturbine/cli 0.16.3 → 0.16.4

package/dist/cli.js

@@ -1869,7 +1869,14 @@ var ClientContextCapabilitiesSchema = z9.object({
 );
 var ClientContextPlanSchema = z9.object({
   /** The customer's current plan handle (`plans.unique_handle`). */
-  handle: z9.string().min(1).optional().meta({ ...Unrestricted6, ...ClientSafe })
+  handle: z9.string().min(1).optional().meta({ ...Unrestricted6, ...ClientSafe }),
+  /**
+   * The plan's display name, resolved server-side from the plan record so
+   * client UI can render it without a Playbook lookup (plan 179 TASK-1 —
+   * Q-2 ruling: `{ handle, name }`). Plan names are already client-visible
+   * in every Playbook; no new exposure.
+   */
+  name: z9.string().min(1).optional().meta({ ...Unrestricted6, ...ClientSafe })
 }).meta(
   { id: "ClientContextPlan", "x-revturbine-schema-persistence": Transient6, "x-revturbine-schema-exposure": Internal5 }
 );
@@ -5940,6 +5947,18 @@ var CATALOG = {
     message: "These rules for the same entitlement target the same plan and segment \u2014 only one will apply.",
     specRef: "config-validation.md \xA75.3 (provisional \u2014 plan 73 Q-1)"
   },
+  // limit rule with unset enforcement. Promoted from §5.8 (plan 179 Q-6,
+  // Kent 2026-08-12): unset enforcement silently means "hard-block at the
+  // cap" (evaluator default since plan 34) — an author who wanted degrade or
+  // allow_overage gets a hard stop without being told. Explicitness warn on
+  // the corrected premise (the old "never blocks" mechanism was the SDK
+  // ignoring allowed:false, fixed in sdk 0.2.75).
+  "VAL-PLN-07": {
+    id: "VAL-PLN-07",
+    severity: "warning",
+    message: "This limit rule sets no enforcement \u2014 at the cap it blocks by default. Set enforcement explicitly (hard_block, soft_block, degrade, allow_overage) if that isn't the intent.",
+    specRef: "config-validation.md \xA75.8 (promoted \u2014 plan 179 Q-6)"
+  },
   // multiple public variations. Origin: `*_variation.multiple_public`.
   "VAL-PLN-06": {
     id: "VAL-PLN-06",
@@ -5976,11 +5995,33 @@ function runSemanticRules(graph) {
   return [
     ...checkPlansHaveStripePrice(graph),
     ...checkRuleOverlaps(graph),
+    ...checkLimitRuleEnforcement(graph),
     ...checkPublicVariationCollisions(graph),
     ...checkPayloadCtaOverflow(graph),
     ...checkTrialRuleWidestAudience(graph)
   ];
 }
+function checkLimitRuleEnforcement(graph) {
+  const findings = [];
+  const CAP_FIELDS = ["limit_value", "allowance_value", "included_count"];
+  for (const rule of graph.entitlement_rules ?? []) {
+    if (rule.enforcement !== void 0 && rule.enforcement !== null) continue;
+    const cappedField = CAP_FIELDS.find((f) => typeof rule[f] === "number" && Number.isFinite(rule[f]));
+    if (!cappedField) continue;
+    const id = String(rule.handle ?? rule.id ?? "");
+    const name = String(rule.name ?? id);
+    findings.push(
+      finding(
+        "VAL-PLN-07",
+        { object_type: "entitlement_rule", object_id: id, field: "enforcement", studio: "plans-entitlements" },
+        {
+          message: `Limit rule '${name}' sets no enforcement \u2014 at the cap it blocks by default. Set enforcement explicitly (hard_block, soft_block, degrade, allow_overage) if that isn't the intent.`
+        }
+      )
+    );
+  }
+  return findings;
+}
 function surfaceCtas(surface) {
   if (!surface || typeof surface !== "object") return 0;
   const ctas = surface.ctas;
@@ -8923,7 +8964,7 @@ function repairDeprecatedFields(config, schema = PlaybookObjectSchema2) {
 }
 
 // src/schema/version.ts
-var SCHEMA_VERSION = "0.1.167";
+var SCHEMA_VERSION = "0.1.168";
 
 // src/lib/credentials.ts
 import { chmodSync, existsSync, mkdirSync, readFileSync, statSync, writeFileSync } from "fs";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@revturbine/cli",
-  "version": "0.16.3",
+  "version": "0.16.4",
   "description": "revturbine — validate RevTurbine Playbooks and ship them to a RevTurbine instance through the playbook-version lifecycle (draft → Release).",
   "license": "MIT",
   "repository": {