chati-dev 4.0.7 → 4.0.9

package/framework/hooks/license-guard.js

@@ -7,21 +7,23 @@
  *
  * Behavior:
  * - No key configured  → allow (orchestrator handles inline activation)
- * - Cache VALID < 24h  → allow silently
+ * - Cache VALID < 24h  → allow silently + session ping (once/day/project)
  * - Cache EXPIRED/INVALID < 24h → block with renewal message
  * - Cache stale (> 24h) → call API, refresh cache, then allow or block
  * - API unreachable    → fail open (allow), never block work
  */
 
 import { existsSync, readFileSync, writeFileSync, mkdirSync } from 'fs';
-import { join } from 'path';
+import { join, basename } from 'path';
 import { homedir } from 'os';
 
 const API_BASE = 'https://chati.dev/api';
+const TELEMETRY_ENDPOINT = 'https://chati.dev/api/telemetry';
 const CACHE_TTL_MS = 24 * 60 * 60 * 1000; // 24 hours
 
 const GLOBAL_DIR = join(homedir(), '.chati-dev');
 const LICENSE_PATH = join(GLOBAL_DIR, 'license.yaml');
+const PINGS_PATH = join(GLOBAL_DIR, 'pings.yaml');
 
 async function main() {
   let input = '';
@@ -48,7 +50,10 @@ async function main() {
     const age = checkedAt ? Date.now() - new Date(checkedAt).getTime() : Infinity;
 
     if (age < CACHE_TTL_MS) {
-      if (status === 'VALID') { allow(); return; }
+      if (status === 'VALID') {
+        await allowWithPing(licenseKey);
+        return;
+      }
       if (status === 'EXPIRED' || status === 'INVALID') {
         block(buildMessage(status, readYamlField(licenseRaw, 'reason')));
         return;
@@ -78,7 +83,10 @@ async function main() {
       mkdirSync(GLOBAL_DIR, { recursive: true });
       writeFileSync(LICENSE_PATH, dumpYaml(updated));
 
-      if (data.status === 'VALID') { allow(); return; }
+      if (data.status === 'VALID') {
+        await allowWithPing(licenseKey);
+        return;
+      }
       block(buildMessage(data.status, data.reason));
     } catch {
       allow(); // Fail open — API unreachable
@@ -88,6 +96,69 @@ async function main() {
   }
 }
 
+// ---------------------------------------------------------------------------
+// Session Ping (once per day per project)
+// ---------------------------------------------------------------------------
+
+async function allowWithPing(licenseKey) {
+  const projectPath = process.cwd();
+  const projectName = basename(projectPath) || 'unknown';
+
+  if (shouldPing(projectPath)) {
+    recordPing(projectPath); // sync — prevents duplicate pings even if fetch fails
+    const pingPromise = sendSessionPing(licenseKey, projectName);
+    allow();
+    await pingPromise; // keep process alive until ping completes (max 3s)
+  } else {
+    allow();
+  }
+}
+
+function shouldPing(projectPath) {
+  try {
+    if (!existsSync(PINGS_PATH)) return true;
+    const content = readFileSync(PINGS_PATH, 'utf-8');
+    const today = new Date().toISOString().substring(0, 10);
+    const escaped = projectPath.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+    const match = content.match(new RegExp(`^${escaped}:\\s*(.+)$`, 'm'));
+    return !match || match[1].trim() !== today;
+  } catch { return false; } // fail closed — don't add latency on parse error
+}
+
+function recordPing(projectPath) {
+  try {
+    mkdirSync(GLOBAL_DIR, { recursive: true });
+    const today = new Date().toISOString().substring(0, 10);
+    let content = existsSync(PINGS_PATH) ? readFileSync(PINGS_PATH, 'utf-8') : '';
+    const escaped = projectPath.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+    if (new RegExp(`^${escaped}:`, 'm').test(content)) {
+      content = content.replace(new RegExp(`^(${escaped}:).*$`, 'm'), `$1 ${today}`);
+    } else {
+      content += `${projectPath}: ${today}\n`;
+    }
+    writeFileSync(PINGS_PATH, content);
+  } catch {} // fail silently
+}
+
+async function sendSessionPing(licenseKey, projectName) {
+  try {
+    await fetch(TELEMETRY_ENDPOINT, {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({
+        license_key: licenseKey,
+        project_name: projectName,
+        events: [{ type: 'session_active', timestamp: new Date().toISOString() }],
+      }),
+      signal: AbortSignal.timeout(3000),
+    });
+  } catch {} // fire-and-forget, always fail silently
+}
+
+// ---------------------------------------------------------------------------
+// Decision helpers
+// ---------------------------------------------------------------------------
+
 function allow() {
   process.stdout.write(JSON.stringify({ decision: 'allow' }));
 }
@@ -103,6 +174,10 @@ function buildMessage(status, reason) {
   return `chati.dev license invalid${reason ? ` (${reason})` : ''}.\nRun: npx chati-dev activate --key=YOUR-KEY\nOr visit https://chati.dev/pricing`;
 }
 
+// ---------------------------------------------------------------------------
+// YAML helpers (no external deps)
+// ---------------------------------------------------------------------------
+
 function readYamlField(raw, field) {
   const match = raw.match(new RegExp(`^${field}:\\s*(.+)$`, 'm'));
   return match ? match[1].trim().replace(/^["']|["']$/g, '') : null;
@@ -125,6 +200,10 @@ function dumpYaml(obj) {
     .join('\n') + '\n';
 }
 
+// ---------------------------------------------------------------------------
+// Machine ID
+// ---------------------------------------------------------------------------
+
 async function computeMachineId() {
   const { createHash } = await import('crypto');
   const os = await import('os');

package/framework/orchestrator/chati.md

@@ -18,39 +18,6 @@ You are the **Chati.dev Orchestrator**, the single entry point for the Chati.dev
 
 When the user invokes `/chati`, execute this sequence:
 
-### Pre-Flight: License Check
-
-FIRST — before anything else:
-
-```
-1. Read ~/.chati-dev/license.yaml
-
-If file is MISSING or status = "MISSING":
-  Say:
-    "Welcome to chati.dev! Before we start, I need to activate your license.
-
-    Option 1 — Paste your license key below.
-    Option 2 — Get a free 14-day trial: https://chati.dev/pricing
-
-    Enter your key (or press Enter if you just received one via email):"
-
-  → User provides key
-  → Run: `npx chati-dev activate --key={key}`
-  → Re-read ~/.chati-dev/license.yaml
-  → If status = VALID: "✓ Activated! Let's build." → proceed to Step 1
-  → If error: show error message, ask to try again (max 3 attempts, then stop)
-
-If status = "EXPIRED":
-  Say:
-    "Your chati.dev license has expired.
-    Renew at https://chati.dev/pricing
-    After renewing, run: npx chati-dev activate --key=YOUR-KEY"
-  → STOP. Do not proceed.
-
-If status = "VALID":
-  → Proceed silently. Zero mention of license in normal flow.
-```
-
 ### Step 1: Load Context
 ```
 1. Read .chati/session.yaml

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "chati-dev",
-  "version": "4.0.7",
+  "version": "4.0.9",
   "description": "AI-Powered Multi-Agent Orchestration System — Structured vibe coding for Full Stack Development",
   "type": "module",
   "bin": {