@vibecheckai/cli 2.5.6 → 2.7.0

package/dist/index.js

@@ -48,7 +48,7 @@ const fs_1 = require("fs");
 const path_2 = require("path");
 // Use package.json version instead of hardcoding
 const { version: CLI_VERSION = '0.0.0' } = require('../package.json');
-const vibecheck_security_1 = require('./bundles/vibecheck-security');
+const security_1 = require('./bundles/vibecheck-security');
 const creds_1 = require("./runtime/creds");
 const client_1 = require("./runtime/client");
 const exit_codes_1 = require("./runtime/exit-codes");
@@ -486,6 +486,43 @@ async function delay(ms) {
 // Config file path for storing API key
 const CONFIG_DIR = (0, path_2.join)(process.env.HOME || process.env.USERPROFILE || '.', '.vibecheck');
 const CONFIG_FILE = (0, path_2.join)(CONFIG_DIR, 'credentials.json');
+const FREE_SCANS_PER_MONTH = 5;
+// Get current month key (YYYY-MM)
+function getCurrentMonthKey() {
+    const now = new Date();
+    return `${now.getFullYear()}-${String(now.getMonth() + 1).padStart(2, '0')}`;
+}
+// Check and track free tier usage
+function checkFreeTierUsage() {
+    const config = loadConfig();
+    const currentMonth = getCurrentMonthKey();
+    // Reset counter if new month
+    if (config.freeScansResetDate !== currentMonth) {
+        config.freeScansUsed = 0;
+        config.freeScansResetDate = currentMonth;
+        saveConfig(config);
+    }
+    const used = config.freeScansUsed || 0;
+    const remaining = FREE_SCANS_PER_MONTH - used;
+    return {
+        allowed: remaining > 0,
+        remaining,
+        used,
+    };
+}
+// Increment free tier usage
+function incrementFreeTierUsage() {
+    const config = loadConfig();
+    const currentMonth = getCurrentMonthKey();
+    if (config.freeScansResetDate !== currentMonth) {
+        config.freeScansUsed = 1;
+        config.freeScansResetDate = currentMonth;
+    }
+    else {
+        config.freeScansUsed = (config.freeScansUsed || 0) + 1;
+    }
+    saveConfig(config);
+}
 function loadConfig() {
     try {
         if ((0, fs_1.existsSync)(CONFIG_FILE)) {
@@ -551,11 +588,34 @@ async function requireAuthAsync(requiredTier) {
     const state = cachedAuthState || await (0, creds_1.loadAuthState)();
     cachedAuthState = state;
     if (!state.apiKey && !state.accessToken) {
-        console.error(`\n${c.critical('ERROR')} Authentication required\n`);
-        console.log(`  ${c.dim('Run')} ${c.bold('vibecheck auth --key YOUR_API_KEY')} ${c.dim('to authenticate')}`);
-        console.log(`  ${c.dim('Get your API key from')} ${c.info('https://vibecheckai.dev/api-key')}\n`);
-        console.log(`  ${c.dim('Or use')} ${c.bold('--demo')} ${c.dim('for local testing')}\n`);
-        (0, exit_codes_1.exitWith)(exit_codes_1.ExitCode.AUTH_FAILURE);
+        // Premium features always require auth
+        if (requiredTier && requiredTier !== 'free') {
+            console.error(`\n${c.critical('ERROR')} ${requiredTier.toUpperCase()} tier required\n`);
+            console.log(`  ${c.dim('Run')} ${c.bold('vibecheck auth --key YOUR_API_KEY')} ${c.dim('to authenticate')}`);
+            console.log(`  ${c.dim('Get your API key from')} ${c.info('https://vibecheckai.dev/api-key')}\n`);
+            (0, exit_codes_1.exitWith)(exit_codes_1.ExitCode.AUTH_FAILURE);
+        }
+        // Check free tier usage
+        const usage = checkFreeTierUsage();
+        if (usage.allowed) {
+            // Increment usage and allow
+            incrementFreeTierUsage();
+            console.log(`  ${c.dim('Free tier:')} ${c.info(`${usage.remaining - 1} scans remaining this month`)}`);
+            console.log(`  ${c.dim('Get unlimited scans at')} ${c.info('https://vibecheckai.dev/pricing')}\n`);
+            return {
+                tier: 'free',
+                authenticatedAt: new Date().toISOString(),
+            };
+        }
+        else {
+            // Free tier exhausted
+            console.error(`\n${c.critical('FREE TIER LIMIT REACHED')} You've used all ${FREE_SCANS_PER_MONTH} free scans this month\n`);
+            console.log(`  ${c.dim('Options:')}`);
+            console.log(`    ${c.bold('1.')} Get an API key at ${c.info('https://vibecheckai.dev/api-key')}`);
+            console.log(`    ${c.bold('2.')} Upgrade for unlimited scans at ${c.info('https://vibecheckai.dev/pricing')}`);
+            console.log(`    ${c.bold('3.')} Wait until next month for free scans to reset\n`);
+            (0, exit_codes_1.exitWith)(exit_codes_1.ExitCode.AUTH_FAILURE);
+        }
     }
     // Check if cached entitlements are still valid
     if ((0, creds_1.isCacheValid)(state) && state.tier) {
@@ -613,19 +673,45 @@ function requireAuth(tier) {
         };
     }
     const config = loadConfig();
+    // If no API key, check free tier allowance (only for basic commands, not premium tiers)
     if (!config.apiKey) {
-        console.error(`\n${c.critical('ERROR')} Authentication required\n`);
-        console.log(`  ${c.dim('Run')} ${c.bold('vibecheck auth --key YOUR_API_KEY')} ${c.dim('to authenticate')}`);
-        console.log(`  ${c.dim('Get your API key from')} ${c.info('https://vibecheckai.dev/api-key')}\n`);
-        console.log(`  ${c.dim('Or use')} ${c.bold('--demo')} ${c.dim('for local testing')}\n`);
-        (0, exit_codes_1.exitWith)(exit_codes_1.ExitCode.AUTH_FAILURE);
+        // Premium features always require auth
+        if (tier && tier !== 'free') {
+            console.error(`\n${c.critical('ERROR')} ${tier.toUpperCase()} tier required\n`);
+            console.log(`  ${c.dim('Run')} ${c.bold('vibecheck auth --key YOUR_API_KEY')} ${c.dim('to authenticate')}`);
+            console.log(`  ${c.dim('Get your API key from')} ${c.info('https://vibecheckai.dev/api-key')}\n`);
+            (0, exit_codes_1.exitWith)(exit_codes_1.ExitCode.AUTH_FAILURE);
+        }
+        // Check free tier usage
+        const usage = checkFreeTierUsage();
+        if (usage.allowed) {
+            // Increment usage and allow
+            incrementFreeTierUsage();
+            console.log(`  ${c.dim('Free tier:')} ${c.info(`${usage.remaining - 1} scans remaining this month`)}`);
+            console.log(`  ${c.dim('Get unlimited scans at')} ${c.info('https://vibecheckai.dev/pricing')}\n`);
+            return {
+                tier: 'free',
+                authenticatedAt: new Date().toISOString(),
+            };
+        }
+        else {
+            // Free tier exhausted
+            console.error(`\n${c.critical('FREE TIER LIMIT REACHED')} You've used all ${FREE_SCANS_PER_MONTH} free scans this month\n`);
+            console.log(`  ${c.dim('Options:')}`);
+            console.log(`    ${c.bold('1.')} Get an API key at ${c.info('https://vibecheckai.dev/api-key')}`);
+            console.log(`    ${c.bold('2.')} Upgrade for unlimited scans at ${c.info('https://vibecheckai.dev/pricing')}`);
+            console.log(`    ${c.bold('3.')} Wait until next month for free scans to reset\n`);
+            (0, exit_codes_1.exitWith)(exit_codes_1.ExitCode.AUTH_FAILURE);
+        }
     }
     if (tier) {
-        const tierLevels = { free: 0, starter: 1, pro: 2, enterprise: 3 };
+        // Tier levels: free=0, starter=1, pro=2, compliance=3 (enterprise is alias for compliance)
+        const tierLevels = { free: 0, starter: 1, pro: 2, compliance: 3, enterprise: 3 };
         const requiredLevel = tierLevels[tier] || 0;
         const currentLevel = tierLevels[config.tier || 'free'] || 0;
         if (currentLevel < requiredLevel) {
-            console.error(`\n${c.critical('UPGRADE REQUIRED')} This feature requires ${c.bold(tier.toUpperCase())} tier\n`);
+            const tierName = tier === 'enterprise' ? 'COMPLIANCE' : tier.toUpperCase();
+            console.error(`\n${c.critical('UPGRADE REQUIRED')} This feature requires ${c.bold(tierName)} tier\n`);
             console.log(`  ${c.dim('Current tier:')} ${c.info(config.tier || 'free')}`);
             console.log(`  ${c.dim('Upgrade at')} ${c.info('https://vibecheckai.dev/pricing')}\n`);
             (0, exit_codes_1.exitWith)(exit_codes_1.ExitCode.AUTH_FAILURE);
@@ -2972,7 +3058,7 @@ function countFiles(dir) {
 }
 async function generateFindings(projectPath) {
     const findings = [];
-    const guardian = new vibecheck_security_1.SecretsGuardian();
+    const guardian = new security_1.SecretsGuardian();
     // File extensions to scan for secrets
     const scanExtensions = ['.ts', '.js', '.tsx', '.jsx', '.json', '.env', '.yaml', '.yml', '.toml', '.py', '.rb'];
     // Recursively get files to scan
@@ -3069,7 +3155,7 @@ async function generateFindings(projectPath) {
 }
 async function scanSecrets(projectPath, options) {
     const s = spinner('Scanning for hardcoded secrets...');
-    const guardian = new vibecheck_security_1.SecretsGuardian();
+    const guardian = new security_1.SecretsGuardian();
     // Use enterprise-grade scanProject instead of custom file walking
     // Handles: ignores, binary files, size caps, concurrency, dedupe
     const report = await guardian.scanProject(projectPath, 'cli-scan', {
@@ -3245,7 +3331,7 @@ async function scanCompliance(projectPath, options) {
 }
 async function generateSBOM(projectPath, options) {
     const s = spinner('Generating Software Bill of Materials...');
-    const sbomGenerator = new vibecheck_security_1.SBOMGenerator();
+    const sbomGenerator = new security_1.SBOMGenerator();
     try {
         const sbom = await sbomGenerator.generate(projectPath, {
             format: options.format || 'cyclonedx',
@@ -3321,7 +3407,7 @@ async function generateSBOM(projectPath, options) {
 }
 async function generateContainerSBOM(imageName, options) {
     const s = spinner('Generating container SBOM...');
-    const sbomGenerator = new vibecheck_security_1.SBOMGenerator();
+    const sbomGenerator = new security_1.SBOMGenerator();
     try {
         const sbom = await sbomGenerator.generateContainerSBOM(imageName, {
             format: options.format || 'cyclonedx',