@velaro/cli 0.1.2 → 0.3.0

package/lib/oauth.js

@@ -22,7 +22,8 @@
  */
 
 const TENANT_ID  = '61de45b3-458d-49a5-913c-501247a6fe4f';
-const AUTHORITY  = `https://login.microsoftonline.com/${TENANT_ID}`;
+// CIAM tenant uses login.velaro.com, not login.microsoftonline.com
+const AUTHORITY  = `https://login.velaro.com/${TENANT_ID}`;
 const CLIENT_ID  = process.env.VELARO_CLI_CLIENT_ID || 'c0fdce54-e9b4-4427-a021-b2605855ff8b';
 
 const SCOPE = [

package/lib/run.js

@@ -1,8 +1,13 @@
-/** Wraps a yargs command handler with consistent error reporting. */
+import { track } from './track.js';
+
+/** Wraps a yargs command handler with consistent error reporting and usage tracking. */
 export function runCommand(fn) {
   return async (argv) => {
     try {
       await fn(argv);
+      // Fire-and-forget tracking after successful command — never awaited, never blocks
+      const action = argv._.join('.') || 'unknown';
+      track(action);
     } catch (err) {
       console.error(`Error: ${err.message}`);
       process.exit(1);

package/lib/subscription.js

@@ -0,0 +1,39 @@
+/**
+ * Subscription helpers for CLI commands.
+ * Provides a clean gate that prints a plan upgrade message instead of
+ * throwing a confusing 403/400 from the API.
+ */
+
+import { get } from './api.js';
+
+let _cachedSub = null;
+
+export async function getSubscription() {
+  if (!_cachedSub) {
+    _cachedSub = await get('/Subscription');
+  }
+  return _cachedSub;
+}
+
+/**
+ * Throws an Error with a friendly upgrade message if the feature flag is off.
+ * Usage: await requireFeature('enableAI', 'AI Bots');
+ */
+export async function requireFeature(flag, featureName) {
+  const sub = await getSubscription();
+  if (!sub[flag]) {
+    throw new Error(
+      `${featureName} is not enabled on your plan.\n` +
+      `  Upgrade at https://velaro.com/pricing or contact sales@velaro.com.`
+    );
+  }
+  return sub;
+}
+
+/**
+ * Returns true/false without throwing — for check/status commands.
+ */
+export async function hasFeature(flag) {
+  const sub = await getSubscription();
+  return sub[flag] === true;
+}

package/lib/track.js

@@ -0,0 +1,35 @@
+/**
+ * Fire-and-forget CLI usage tracker.
+ * Posts a single event to /ToolUsage/cli after each command.
+ * Never throws, never blocks — silently dropped on any failure.
+ */
+import { readConfig } from './config.js';
+import { createRequire } from 'module';
+
+const require = createRequire(import.meta.url);
+const { version: CLI_VERSION } = require('../package.json');
+
+/**
+ * Track a CLI action. Call after a command succeeds.
+ * @param {string} action  e.g. "login", "bot.push", "workflow.pull"
+ */
+export function track(action) {
+  setImmediate(async () => {
+    try {
+      const creds = readConfig();
+      if (!creds?.velaroToken || !creds?.apiBase) return;
+
+      await fetch(`${creds.apiBase}/ToolUsage/cli`, {
+        method: 'POST',
+        headers: {
+          Authorization: `Bearer ${creds.velaroToken}`,
+          'Content-Type': 'application/json',
+        },
+        body: JSON.stringify({ action, cliVersion: CLI_VERSION }),
+        signal: AbortSignal.timeout(3000),
+      });
+    } catch {
+      // Silently drop — tracking must never surface errors to the user
+    }
+  });
+}

package/lib/update-check.js

@@ -0,0 +1,64 @@
+/**
+ * Non-blocking update checker.
+ * Fetches the latest version from npm once per day (cached in ~/.velaro/config.json).
+ * Prints a one-line notice AFTER the command completes if a newer version is available.
+ */
+
+import { readConfig, writeConfig } from './config.js';
+import { createRequire }           from 'module';
+
+const require = createRequire(import.meta.url);
+const { version: currentVersion } = require('../package.json');
+
+const NPM_REGISTRY      = 'https://registry.npmjs.org/@velaro/cli/latest';
+const CHECK_INTERVAL_MS = 24 * 60 * 60 * 1000; // once per day
+
+/**
+ * Starts the update check in the background.
+ * Returns a function you await AFTER your command finishes to print any notice.
+ */
+export function startUpdateCheck() {
+  const cfg      = readConfig();
+  const lastCheck = cfg._lastUpdateCheck ?? 0;
+  const now       = Date.now();
+
+  if (now - lastCheck < CHECK_INTERVAL_MS) {
+    // Use cached result — no network call
+    return async () => printNoticeIfStale(cfg._latestVersion);
+  }
+
+  // Fire off the network request without awaiting it here
+  const fetchPromise = fetch(NPM_REGISTRY, { signal: AbortSignal.timeout(4000) })
+    .then((r) => r.json())
+    .then((data) => {
+      const latest = data?.version ?? null;
+      writeConfig({ ...readConfig(), _lastUpdateCheck: now, _latestVersion: latest });
+      return latest;
+    })
+    .catch(() => null); // never block the CLI on a network failure
+
+  return async () => {
+    const latest = await fetchPromise;
+    printNoticeIfStale(latest);
+  };
+}
+
+function printNoticeIfStale(latest) {
+  if (!latest || latest === currentVersion) return;
+  if (!isNewer(latest, currentVersion)) return;
+
+  process.stderr.write(
+    `\n  Update available: ${currentVersion} → ${latest}\n` +
+    `  Run: npm install -g @velaro/cli@latest\n\n`
+  );
+}
+
+function isNewer(a, b) {
+  const pa = a.split('.').map(Number);
+  const pb = b.split('.').map(Number);
+  for (let i = 0; i < 3; i++) {
+    if ((pa[i] ?? 0) > (pb[i] ?? 0)) return true;
+    if ((pa[i] ?? 0) < (pb[i] ?? 0)) return false;
+  }
+  return false;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@velaro/cli",
-  "version": "0.1.2",
+  "version": "0.3.0",
   "description": "Velaro Workspace v20 — command-line interface for managing bots, knowledge base ingestion, and MCP API keys.",
   "type": "module",
   "bin": {