@vibecheckai/cli 3.1.2 → 3.1.4

package/bin/runners/runStatus.js

@@ -13,17 +13,7 @@
 
 const fs = require("fs");
 const path = require("path");
-
-const c = {
-  reset: "\x1b[0m",
-  bold: "\x1b[1m",
-  dim: "\x1b[2m",
-  red: "\x1b[31m",
-  green: "\x1b[32m",
-  yellow: "\x1b[33m",
-  cyan: "\x1b[36m",
-  blue: "\x1b[34m",
-};
+const { formatStatusOutput } = require("./lib/status-output");
 
 function readJsonSafe(p) {
   try {
@@ -34,29 +24,6 @@ function readJsonSafe(p) {
   }
 }
 
-function timeAgo(dateStr) {
-  if (!dateStr) return "never";
-  const d = new Date(dateStr);
-  const now = Date.now();
-  const diff = now - d.getTime();
-  
-  if (diff < 60000) return "just now";
-  if (diff < 3600000) return `${Math.round(diff / 60000)}m ago`;
-  if (diff < 86400000) return `${Math.round(diff / 3600000)}h ago`;
-  return `${Math.round(diff / 86400000)}d ago`;
-}
-
-function verdictIcon(v) {
-  if (v === "SHIP") return `${c.green}✓ SHIP${c.reset}`;
-  if (v === "WARN") return `${c.yellow}⚠ WARN${c.reset}`;
-  if (v === "BLOCK") return `${c.red}✗ BLOCK${c.reset}`;
-  return `${c.dim}—${c.reset}`;
-}
-
-function checkExists(p) {
-  return fs.existsSync(p) ? `${c.green}✓${c.reset}` : `${c.dim}—${c.reset}`;
-}
-
 async function runStatus({ repoRoot, json = false } = {}) {
   const root = repoRoot || process.cwd();
   
@@ -95,40 +62,21 @@ async function runStatus({ repoRoot, json = false } = {}) {
     return 0;
   }
 
-  console.log(`
-${c.cyan}${c.bold}╔════════════════════════════════════════════════════════════╗
-║  📊 vibecheck status                                         ║
-╚════════════════════════════════════════════════════════════╝${c.reset}
-
-${c.bold}Verdict${c.reset}
-  Current:    ${verdictIcon(lastShip?.meta?.verdict)}
-  Last ship:  ${c.dim}${timeAgo(lastShip?.meta?.generatedAt)}${c.reset}
-
-${c.bold}Findings${c.reset}
-  BLOCK:      ${blocks ? c.red + blocks + c.reset : c.green + "0" + c.reset}
-  WARN:       ${warns ? c.yellow + warns + c.reset : c.green + "0" + c.reset}
-
-${c.bold}Truth Pack${c.reset}
-  Routes:     ${routes}
-  Env vars:   ${envVars}
-  Gaps:       ${gaps ? c.yellow + gaps + c.reset : c.green + "0" + c.reset}
-
-${c.bold}Reality${c.reset}
-  Last run:   ${c.dim}${timeAgo(lastReality?.meta?.startedAt)}${c.reset}
-  Coverage:   ${coverage != null ? coverage + "%" : c.dim + "—" + c.reset}
-
-${c.bold}Files${c.reset}
-  .vibecheck/config.json:      ${checkExists(path.join(root, ".vibecheck", "config.json"))}
-  .vibecheck/truth/truthpack:  ${checkExists(path.join(root, ".vibecheck", "truth", "truthpack.json"))}
-  .vibecheck/last_ship.json:   ${checkExists(path.join(root, ".vibecheck", "last_ship.json"))}
-  .env.example:                ${checkExists(path.join(root, ".env.example")) || checkExists(path.join(root, ".env.template"))}
-
-${c.bold}Quick Actions${c.reset}
-  ${lastShip?.meta?.verdict === "BLOCK" ? `${c.yellow}→ Run: vibecheck fix --apply${c.reset}` : ""}
-  ${!truthpack ? `${c.yellow}→ Run: vibecheck install${c.reset}` : ""}
-  ${!lastReality ? `${c.yellow}→ Run: vibecheck reality --url <your-app>${c.reset}` : ""}
-  ${lastShip?.meta?.verdict === "SHIP" ? `${c.green}✓ Ready to deploy!${c.reset}` : ""}
-`);
+  const status = {
+    verdict: lastShip?.meta?.verdict || null,
+    lastShipAt: lastShip?.meta?.generatedAt || null,
+    blockers: blocks,
+    warnings: warns,
+    routes,
+    envVars,
+    gaps,
+    lastRealityAt: lastReality?.meta?.startedAt || null,
+    coverage: coverage || null,
+    hasTruthpack: !!truthpack,
+    hasReality: !!lastReality,
+  };
+
+  console.log(formatStatusOutput(status, { root }));
 
   // Exit 0 when showing status successfully (even if no ship yet)
   // Only return non-zero if explicitly checking for BLOCK

package/bin/runners/utils.js

@@ -114,10 +114,11 @@ function detectProjectFeatures(projectPath) {
   return features;
 }
 
-function writeArtifacts(outputDir, results) {
+function writeArtifacts(outputDir, results, options = {}) {
   ensureOutputDir(outputDir);
 
   const timestamp = new Date().toISOString();
+  const skipHtmlReport = options.skipHtmlReport || false;
 
   // Always write summary.json (machine-readable)
   const summary = {
@@ -138,9 +139,8 @@ function writeArtifacts(outputDir, results) {
   const md = generateMarkdownSummary(results);
   fs.writeFileSync(path.join(outputDir, "summary.md"), md);
 
-  // Write report.html (shareable)
-  const html = generateHtmlReport(results);
-  fs.writeFileSync(path.join(outputDir, "report.html"), html);
+  // Note: HTML reports are generated by 'vibecheck report' command, not here
+  // This function only writes JSON and Markdown artifacts
 
   // Write per-module artifacts
   const artifactsDir = path.join(outputDir, "artifacts");
@@ -341,7 +341,7 @@ function printResults(results, format) {
     `  ${c.dim}━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━${c.reset}`,
   );
   console.log(
-    `  ${c.dim}📄 Full report:${c.reset} ${c.cyan}${results.outputDir}/report.html${c.reset}`,
+    `  ${c.dim}📄 Generate report:${c.reset} ${c.cyan}vibecheck report${c.reset}`,
   );
   console.log(
     `  ${c.dim}🔧 Fix issues:${c.reset}  ${c.cyan}vibecheck fix${c.reset}`,

package/bin/vibecheck.js

@@ -325,15 +325,18 @@ function printHelp() {
   printBanner();
   
   // Categories ordered as specified
-  const categoryOrder = ["proof", "setup", "truth", "ci", "automation", "account", "extras"];
+  const categoryOrder = ["setup", "analysis", "proof", "quality", "truth", "output", "ci", "automation", "account", "extras"];
   const categories = {
+    setup: { name: "SETUP", color: c.yellow, icon: sym.gear },
+    analysis: { name: "ANALYSIS", color: c.cyan, icon: sym.chart },
     proof: { name: "PROOF LOOP", color: c.green, icon: sym.shield },
-    setup: { name: "SETUP & DX", color: c.yellow, icon: sym.gear },
+    quality: { name: "QUALITY", color: c.brightGreen, icon: sym.star },
     truth: { name: "AI TRUTH", color: c.magenta, icon: sym.lightning },
+    output: { name: "OUTPUT", color: c.blue, icon: sym.file },
     ci: { name: "CI & COLLABORATION", color: c.cyan, icon: sym.rocket },
-    automation: { name: "AUTOMATION", color: c.blue, icon: sym.fire },
+    automation: { name: "AUTOMATION", color: c.brightBlue, icon: sym.fire },
     account: { name: "ACCOUNT", color: c.dim, icon: sym.key },
-    extras: { name: "EXTRAS", color: c.dim, icon: sym.star },
+    extras: { name: "EXTRAS", color: c.dim, icon: sym.starEmpty },
   };
   
   // Group commands
@@ -375,15 +378,17 @@ ${c.dim}${sym.boxHorizontal.repeat(64)}${c.reset}
 
 ${c.green}TIERS${c.reset}
 
-  ${c.green}FREE${c.reset}      $0       scan, ship, ctx, doctor, report (HTML/MD)
-  ${c.cyan}STARTER${c.reset}   $29/mo   + gate, launch, pr, badge, mcp, reality full
-  ${c.magenta}PRO${c.reset}       $99/mo   + prove, fix apply, share, ai-test, compliance
+  ${c.green}FREE${c.reset}      $0       init --local, scan, ship (static), report (HTML/MD), doctor, polish
+  ${c.cyan}STARTER${c.reset}   $39/mo   + init --connect, scan --autofix, report (SARIF/CSV), mcp, PR comments
+  ${c.magenta}PRO${c.reset}       $99/mo   + prove, fix --apply, checkpoint (hallucination), reality (advanced)
 
-${c.green}QUICK START${c.reset}
+${c.green}QUICK START - The 5-Step Journey${c.reset}
 
-  ${c.bold}"Check my repo"${c.reset}     ${c.cyan}vibecheck scan${c.reset}
-  ${c.bold}"Can I ship?"${c.reset}       ${c.cyan}vibecheck ship${c.reset}
-  ${c.bold}"Full proof loop"${c.reset}   ${c.cyan}vibecheck prove --url http://localhost:3000${c.reset} ${c.magenta}[PRO]${c.reset}
+  1. ${c.bold}Setup${c.reset}         ${c.cyan}vibecheck init --local${c.reset}
+  2. ${c.bold}Scan${c.reset}          ${c.cyan}vibecheck scan${c.reset}
+  3. ${c.bold}Fix${c.reset}           ${c.cyan}vibecheck scan --autofix${c.reset} ${c.cyan}[STARTER]${c.reset}
+  4. ${c.bold}Prove${c.reset}         ${c.cyan}vibecheck prove${c.reset} ${c.magenta}[PRO]${c.reset}
+  5. ${c.bold}Ship${c.reset}          ${c.cyan}vibecheck ship${c.reset}
 
 ${c.dim}Run 'vibecheck <command> --help' for command-specific help.${c.reset}
 ${c.dim}Pricing: https://vibecheckai.dev/pricing${c.reset}
@@ -551,6 +556,15 @@ async function main() {
         else if (cmdArgs[0] === "search") { const { runContext } = require("./runners/runContext"); exitCode = await runContext(["--search", ...cmdArgs.slice(1)]); }
         else { exitCode = await runner(cmdArgs, context); }
         break;
+      case "runtime":
+        exitCode = await runner(cmdArgs, context);
+        break;
+      case "export":
+        exitCode = await runner(cmdArgs, context);
+        break;
+      case "security":
+        exitCode = await runner(cmdArgs, context);
+        break;
       case "install": exitCode = await runner(cmdArgs, context); break;
       case "status": exitCode = await runner({ ...context, json: cmdArgs.includes("--json") }); break;
       case "pr": exitCode = await runner(cmdArgs, context); break;

package/mcp-server/index.js

@@ -89,6 +89,9 @@ import { TRUTH_FIREWALL_TOOLS, handleTruthFirewallTool } from "./truth-firewall-
 // Import Consolidated Tools (15 focused tools - recommended surface)
 import { CONSOLIDATED_TOOLS, handleConsolidatedTool } from "./consolidated-tools.js";
 
+// Import tier auth for entitlement checking
+import { checkFeatureAccess } from "./tier-auth.js";
+
 // ============================================================================
 // TOOL DEFINITIONS - Public Tools (Clean Product Surface)
 // ============================================================================
@@ -300,7 +303,7 @@ const TOOLS = USE_CONSOLIDATED_TOOLS ? [
   // 3. GATE - Enforce truth in CI
   {
     name: "vibecheck.gate",
-    description: "🚦 Enforce truth in CI — fail builds on policy violations",
+    description: "🚦 Enforce truth in CI — fail builds on policy violations (STARTER tier)",
     inputSchema: {
       type: "object",
       properties: {
@@ -327,7 +330,7 @@ const TOOLS = USE_CONSOLIDATED_TOOLS ? [
   {
     name: "vibecheck.fix",
     description:
-      "🔧 Fix Missions v1 — AI-powered surgical fixes with proof verification loop",
+      "🔧 Fix Missions v1 — AI-powered surgical fixes with proof verification loop. --apply and --autopilot require PRO tier ($99/mo).",
     inputSchema: {
       type: "object",
       properties: {
@@ -396,7 +399,7 @@ const TOOLS = USE_CONSOLIDATED_TOOLS ? [
   // 7. PROVE - One Command Reality Proof (orchestrates ctx → reality → ship → fix)
   {
     name: "vibecheck.prove",
-    description: "🔬 One Command Reality Proof — orchestrates ctx → reality → ship → fix loop until SHIP or stuck",
+    description: "🔬 One Command Reality Proof — orchestrates ctx → reality → ship → fix loop until SHIP or stuck (PRO tier)",
     inputSchema: {
       type: "object",
       properties: {
@@ -593,11 +596,11 @@ const TOOLS = USE_CONSOLIDATED_TOOLS ? [
     },
   },
 
-  // 13. AUTOPILOT PLAN - Generate fix plan (Pro/Compliance)
+  // 13. AUTOPILOT PLAN - Generate fix plan (PRO tier)
   {
     name: "vibecheck.autopilot_plan",
     description:
-      "🤖 Autopilot Plan — scan codebase, group issues into fix packs, estimate risk (Pro/Compliance)",
+      "🤖 Autopilot Plan — scan codebase, group issues into fix packs, estimate risk (PRO tier)",
     inputSchema: {
       type: "object",
       properties: {
@@ -620,11 +623,11 @@ const TOOLS = USE_CONSOLIDATED_TOOLS ? [
     },
   },
 
-  // 14. AUTOPILOT APPLY - Apply fixes (Pro/Compliance)
+  // 14. AUTOPILOT APPLY - Apply fixes (PRO tier)
   {
     name: "vibecheck.autopilot_apply",
     description:
-      "🔧 Autopilot Apply — apply fix packs with verification, re-scan to confirm (Pro/Compliance)",
+      "🔧 Autopilot Apply — apply fix packs with verification, re-scan to confirm (PRO tier)",
     inputSchema: {
       type: "object",
       properties: {
@@ -661,7 +664,7 @@ const TOOLS = USE_CONSOLIDATED_TOOLS ? [
   {
     name: "vibecheck.badge",
     description:
-      "🏅 Ship Badge — generate a badge for README/PR showing scan status",
+      "🏅 Ship Badge — generate a badge for README/PR showing scan status (STARTER tier)",
     inputSchema: {
       type: "object",
       properties: {
@@ -1046,8 +1049,27 @@ class VibecheckMCP {
     return { content: [{ type: "text", text }] };
   }
 
-  error(text) {
-    return { content: [{ type: "text", text: `❌ ${text}` }], isError: true };
+  error(text, options = {}) {
+    const { code, suggestion, nextSteps = [] } = options;
+    
+    let errorText = `❌ ${text}`;
+    
+    if (code) {
+      errorText += `\n\n**Error Code:** \`${code}\``;
+    }
+    
+    if (suggestion) {
+      errorText += `\n\n💡 **Suggestion:** ${suggestion}`;
+    }
+    
+    if (nextSteps.length > 0) {
+      errorText += `\n\n**Next Steps:**\n`;
+      nextSteps.forEach((step, i) => {
+        errorText += `${i + 1}. ${step}\n`;
+      });
+    }
+    
+    return { content: [{ type: "text", text: errorText }], isError: true };
   }
 
   // Validate project path exists and is accessible
@@ -1055,11 +1077,29 @@ class VibecheckMCP {
     try {
       const stats = require("fs").statSync(projectPath);
       if (!stats.isDirectory()) {
-        return { valid: false, error: `Path is not a directory: ${projectPath}` };
+        return { 
+          valid: false, 
+          error: `Path is not a directory: ${projectPath}`,
+          suggestion: "Provide a directory path, not a file",
+          nextSteps: [
+            "Check the path you provided",
+            "Ensure it points to a project directory",
+          ],
+        };
       }
       return { valid: true };
     } catch (e) {
-      return { valid: false, error: `Cannot access path: ${projectPath} (${e.code || e.message})` };
+      return { 
+        valid: false, 
+        error: `Cannot access path: ${projectPath}`,
+        code: e.code || "PATH_ACCESS_ERROR",
+        suggestion: "Check that the path exists and you have read permissions",
+        nextSteps: [
+          "Verify the path is correct",
+          "Check file permissions",
+          "Ensure the directory exists",
+        ],
+      };
     }
   }
 
@@ -1067,6 +1107,16 @@ class VibecheckMCP {
   // SCAN
   // ============================================================================
   async handleScan(projectPath, args) {
+    // Validate project path first
+    const validation = this.validateProjectPath(projectPath);
+    if (!validation.valid) {
+      return this.error(validation.error, {
+        code: validation.code || "INVALID_PATH",
+        suggestion: validation.suggestion,
+        nextSteps: validation.nextSteps || [],
+      });
+    }
+
     const profile = args?.profile || "quick";
     const format = args?.format || "text";
     const only = args?.only;
@@ -1105,18 +1155,38 @@ class VibecheckMCP {
       }
 
       output += `\n📄 **Report:** .vibecheck/report.html\n`;
+      output += "\n---\n_Context Enhanced by vibecheck AI_\n";
+      return this.success(output);
     } catch (err) {
-      output += `\n⚠️ Scan error: ${err.message}\n`;
+      return this.error(`Scan failed: ${err.message}`, {
+        code: "SCAN_ERROR",
+        suggestion: "Check that the project path is valid and contains scanable code",
+        nextSteps: [
+          "Verify the project path is correct",
+          "Ensure you have read permissions",
+          "Check that required dependencies are installed",
+          "Try running: vibecheck scan --help",
+        ],
+      });
     }
-
-    output += "\n---\n_Context Enhanced by vibecheck AI_\n";
-    return this.success(output);
   }
 
   // ============================================================================
   // GATE
   // ============================================================================
   async handleGate(projectPath, args) {
+    // Check tier access (STARTER tier required)
+    const access = await checkFeatureAccess("gate", args?.apiKey);
+    if (!access.hasAccess) {
+      return {
+        content: [{
+          type: "text",
+          text: `🚫 UPGRADE REQUIRED\n\n${access.reason}\n\nCurrent tier: ${access.tier}\nUpgrade at: ${access.upgradeUrl}`
+        }],
+        isError: true
+      };
+    }
+
     const policy = args?.policy || "strict";
 
     let output = "# 🚦 vibecheck Gate\n\n";
@@ -1148,6 +1218,20 @@ class VibecheckMCP {
   // FIX MISSIONS v1
   // ============================================================================
   async handleFix(projectPath, args) {
+    // Check tier access for --apply and --autopilot (PRO tier required)
+    if (args?.apply || args?.autopilot) {
+      const access = await checkFeatureAccess("fix.apply_patches", args?.apiKey);
+      if (!access.hasAccess) {
+        return {
+          content: [{
+            type: "text",
+            text: `🚫 UPGRADE REQUIRED\n\n${access.reason}\n\nCurrent tier: ${access.tier}\nUpgrade at: ${access.upgradeUrl}\n\nNote: --prompt-only mode is available for FREE tier.`
+          }],
+          isError: true
+        };
+      }
+    }
+
     const mode = args?.autopilot ? "Autopilot" : 
                  args?.apply ? "Apply" : 
                  args?.promptOnly ? "Prompt Only" : "Plan";
@@ -1319,6 +1403,18 @@ class VibecheckMCP {
   // PROVE - One Command Reality Proof
   // ============================================================================
   async handleProve(projectPath, args) {
+    // Check tier access (PRO tier required)
+    const access = await checkFeatureAccess("prove", args?.apiKey);
+    if (!access.hasAccess) {
+      return {
+        content: [{
+          type: "text",
+          text: `🚫 UPGRADE REQUIRED\n\n${access.reason}\n\nCurrent tier: ${access.tier}\nUpgrade at: ${access.upgradeUrl}`
+        }],
+        isError: true
+      };
+    }
+
     let output = "# 🔬 vibecheck prove\n\n";
     output += `**URL:** ${args?.url || "(static only)"}\n`;
     output += `**Max Fix Rounds:** ${args?.maxFixRounds || 3}\n\n`;
@@ -1787,9 +1883,21 @@ class VibecheckMCP {
   }
 
   // ============================================================================
-  // AUTOPILOT PLAN - Generate fix plan (Pro/Compliance)
+  // AUTOPILOT PLAN - Generate fix plan (PRO tier)
   // ============================================================================
   async handleAutopilotPlan(projectPath, args) {
+    // Check tier access (PRO tier required)
+    const access = await checkFeatureAccess("fix.apply_patches", args?.apiKey);
+    if (!access.hasAccess) {
+      return {
+        content: [{
+          type: "text",
+          text: `🚫 UPGRADE REQUIRED\n\n${access.reason}\n\nCurrent tier: ${access.tier}\nUpgrade at: ${access.upgradeUrl}`
+        }],
+        isError: true
+      };
+    }
+
     let output = "# 🤖 vibecheck Autopilot Plan\n\n";
     output += `**Path:** ${projectPath}\n`;
     output += `**Profile:** ${args?.profile || "ship"}\n\n`;
@@ -1865,9 +1973,21 @@ class VibecheckMCP {
   }
 
   // ============================================================================
-  // AUTOPILOT APPLY - Apply fixes (Pro/Compliance)
+  // AUTOPILOT APPLY - Apply fixes (PRO tier)
   // ============================================================================
   async handleAutopilotApply(projectPath, args) {
+    // Check tier access (PRO tier required)
+    const access = await checkFeatureAccess("fix.apply_patches", args?.apiKey);
+    if (!access.hasAccess) {
+      return {
+        content: [{
+          type: "text",
+          text: `🚫 UPGRADE REQUIRED\n\n${access.reason}\n\nCurrent tier: ${access.tier}\nUpgrade at: ${access.upgradeUrl}`
+        }],
+        isError: true
+      };
+    }
+
     let output = "# 🔧 vibecheck Autopilot Apply\n\n";
     output += `**Path:** ${projectPath}\n`;
     output += `**Profile:** ${args?.profile || "ship"}\n`;
@@ -1919,6 +2039,18 @@ class VibecheckMCP {
   // BADGE - Generate ship badge
   // ============================================================================
   async handleBadge(projectPath, args) {
+    // Check tier access (STARTER tier required)
+    const access = await checkFeatureAccess("badge", args?.apiKey);
+    if (!access.hasAccess) {
+      return {
+        content: [{
+          type: "text",
+          text: `🚫 UPGRADE REQUIRED\n\n${access.reason}\n\nCurrent tier: ${access.tier}\nUpgrade at: ${access.upgradeUrl}`
+        }],
+        isError: true
+      };
+    }
+
     const format = args?.format || "svg";
 
     let output = "# 🏅 vibecheck Badge\n\n";

package/mcp-server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vibecheck-mcp-server",
-  "version": "3.0.10",
+  "version": "3.1.4",
   "description": "Professional MCP server for vibecheck - Intelligent development environment vibechecks",
   "type": "module",
   "main": "index.js",
@@ -21,7 +21,7 @@
     "architecture"
   ],
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^0.5.0"
+    "@modelcontextprotocol/sdk": "^1.0.0"
   },
   "engines": {
     "node": ">=18.0.0"

package/mcp-server/premium-tools.js

@@ -417,19 +417,19 @@ export async function handlePremiumTool(name, args, logger) {
   
   // Map premium tools to required features (all require starter+)
   const featureMap = {
-    'run_ship': 'smells', // ship check requires starter+
-    'run_reality': 'smells', // reality mode requires starter+
-    'run_mockproof': 'smells', // mockproof requires starter+
-    'run_airlock': 'breaking', // supply chain analysis requires pro+
-    'get_last_run': 'verify', // basic access
-    'open_artifact': 'verify', // basic access
-    'rerun_last_check': 'verify', // basic access
-    'run_doctor': 'verify', // basic access
-    'edit_policies': 'breaking', // policy editing requires pro+
-    'explain_finding': 'quality', // explanations require starter+
-    'policy_patch': 'smells', // patching requires starter+
-    'enter_fix_mode': 'smells', // fix mode requires starter+
-    'get_status': 'verify' // status check is free
+    'run_ship': 'ship', // ship check is FREE (static-only)
+    'run_reality': 'reality.preview', // reality preview is FREE, full requires STARTER+
+    'run_mockproof': 'reality.full', // mockproof requires STARTER+
+    'run_airlock': 'prove', // supply chain analysis requires PRO
+    'get_last_run': 'scan', // basic access - FREE
+    'open_artifact': 'scan', // basic access - FREE
+    'rerun_last_check': 'scan', // basic access - FREE
+    'run_doctor': 'doctor', // doctor is FREE
+    'edit_policies': 'gate', // policy editing requires STARTER
+    'explain_finding': 'scan', // explanations are FREE
+    'policy_patch': 'gate', // patching requires STARTER
+    'enter_fix_mode': 'fix.plan_only', // fix mode planning is FREE, apply requires PRO
+    'get_status': 'status' // status check is FREE
   };
 
   const requiredFeature = featureMap[name];