@skillsmith/cli 0.4.1 → 0.4.3

package/dist/src/utils/require-tier.js

@@ -0,0 +1,74 @@
+/**
+ * @fileoverview requireTier — CLI license tier gate helper
+ * @module @skillsmith/cli/utils/require-tier
+ * @see SMI-skill-version-tracking Wave 1
+ *
+ * Throws a user-friendly error when the current license tier is below
+ * the minimum required for a CLI command or flag.
+ *
+ * Security properties:
+ *  - Fail-secure: key present + validation failure → block, never fall back
+ *    to community to silently allow access
+ *  - SKILLSMITH_SKIP_LICENSE_CHECK=true is a CI/dev escape hatch only; it
+ *    must use bracket notation per TypeScript/ESLint index-signature rules
+ *  - SKILLSMITH_LICENSE_KEY is read from env but never logged
+ */
+import { getLicenseStatus } from './license-validation.js';
+/**
+ * Ordered license tiers, lowest to highest.
+ * Used for tier comparison arithmetic.
+ */
+const TIER_ORDER = ['community', 'individual', 'team', 'enterprise'];
+/**
+ * Prices for use in upgrade messages
+ */
+const TIER_PRICING = {
+    community: '$0/month',
+    individual: '$9.99/month',
+    team: '$25/user/month',
+    enterprise: '$55/user/month',
+};
+/**
+ * Throw if the current license tier is below minimumTier.
+ *
+ * Call this at the top of any CLI command or action that requires a paid tier.
+ *
+ * @param minimumTier - Minimum tier required to use the feature
+ * @throws Error with an upgrade prompt when the tier requirement is not met
+ * @throws Error when a license key is present but fails validation (fail-secure)
+ *
+ * @example
+ * ```typescript
+ * export function createOutdatedCommand(): Command {
+ *   return new Command('outdated')
+ *     .action(async () => {
+ *       await requireTier('individual')
+ *       // ... rest of command
+ *     })
+ * }
+ * ```
+ */
+export async function requireTier(minimumTier) {
+    // CI / dev escape hatch — must use bracket notation (TS index-signature rule)
+    if (process.env['SKILLSMITH_SKIP_LICENSE_CHECK'] === 'true') {
+        return;
+    }
+    const status = await getLicenseStatus();
+    // Fail-secure: key present + validation failure → block
+    // Never silently fall back to community when a key was supplied
+    const hasKey = Boolean(process.env['SKILLSMITH_LICENSE_KEY']);
+    if (hasKey && !status.valid) {
+        throw new Error(`License validation failed. ` +
+            `Please check your SKILLSMITH_LICENSE_KEY or visit https://skillsmith.app/account to manage your license.`);
+    }
+    const currentTier = (status.tier ?? 'community');
+    const currentIndex = TIER_ORDER.indexOf(currentTier);
+    const requiredIndex = TIER_ORDER.indexOf(minimumTier);
+    if (currentIndex < requiredIndex) {
+        const pricing = TIER_PRICING[minimumTier];
+        throw new Error(`This feature requires ${minimumTier} tier or higher (${pricing}). ` +
+            `You are currently on the ${currentTier} tier. ` +
+            `Upgrade at https://skillsmith.app/upgrade?tier=${minimumTier}`);
+    }
+}
+//# sourceMappingURL=require-tier.js.map

package/dist/src/utils/require-tier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-tier.js","sourceRoot":"","sources":["../../../src/utils/require-tier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAG1D;;;GAGG;AACH,MAAM,UAAU,GAAkB,CAAC,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,CAAC,CAAA;AAEnF;;GAEG;AACH,MAAM,YAAY,GAAgC;IAChD,SAAS,EAAE,UAAU;IACrB,UAAU,EAAE,aAAa;IACzB,IAAI,EAAE,gBAAgB;IACtB,UAAU,EAAE,gBAAgB;CAC7B,CAAA;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,WAAwB;IACxD,8EAA8E;IAC9E,IAAI,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,KAAK,MAAM,EAAE,CAAC;QAC5D,OAAM;IACR,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,gBAAgB,EAAE,CAAA;IAEvC,wDAAwD;IACxD,gEAAgE;IAChE,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAA;IAC7D,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,6BAA6B;YAC3B,0GAA0G,CAC7G,CAAA;IACH,CAAC;IAED,MAAM,WAAW,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,WAAW,CAAgB,CAAA;IAC/D,MAAM,YAAY,GAAG,UAAU,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;IACpD,MAAM,aAAa,GAAG,UAAU,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;IAErD,IAAI,YAAY,GAAG,aAAa,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,YAAY,CAAC,WAAW,CAAC,CAAA;QACzC,MAAM,IAAI,KAAK,CACb,yBAAyB,WAAW,oBAAoB,OAAO,KAAK;YAClE,4BAA4B,WAAW,SAAS;YAChD,kDAAkD,WAAW,EAAE,CAClE,CAAA;IACH,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skillsmith/cli",
-  "version": "0.4.1",
+  "version": "0.4.3",
   "description": "CLI tools for Skillsmith skill discovery and authentication",
   "type": "module",
   "bin": {
@@ -16,7 +16,7 @@
   },
   "dependencies": {
     "@inquirer/prompts": "7.10.1",
-    "@skillsmith/core": "0.4.11",
+    "@skillsmith/core": "0.4.14",
     "chalk": "5.6.2",
     "cli-table3": "0.6.5",
     "commander": "12.1.0",