content-grade 1.0.38 → 1.0.41

package/bin/content-grade.js

@@ -21,7 +21,7 @@ import { fileURLToPath } from 'url';
 import { promisify } from 'util';
 import { get as httpsGet } from 'https';
 import { get as httpGet } from 'http';
-import { initTelemetry, recordEvent, disableTelemetry, enableTelemetry, telemetryStatus, isOptedOut } from './telemetry.js';
+import { initTelemetry, recordEvent, ping, disableTelemetry, enableTelemetry, telemetryStatus, isOptedOut } from './telemetry.js';
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
 const root = resolve(__dirname, '..');
@@ -160,7 +160,7 @@ function showFreeTierCTA(count) {
   } else {
     // Runs available — always visible count + clear Pro benefits + Stripe link
     console.log(`  ${WH}${count}/${limit} runs used · ${remaining} remaining${R}`);
-    console.log(`  ${D}  Pro: unlimited runs · batch analysis · priority support${R}`);
+    console.log(`  ${WH}  Pro: unlimited runs · batch analysis · priority support${R}`);
     console.log(`  ${MG}→ Upgrade ($9/mo): ${CY}${UPGRADE_LINKS.free}${R}`);
   }
   hr();
@@ -276,20 +276,20 @@ function checkFreeTierLimit() {
 
   blank();
   hr();
-  console.log(`  ${WH}${B}You've used all ${limit} free runs — Pro gives you unlimited.${R}`);
+  console.log(`  ${WH}${B}You've used all ${limit} free analyses.${R}`);
   blank();
-  console.log(`  ${WH}Pro unlocks:${R}`);
-  console.log(`  ${D}  · Unlimited runs — no daily cap, no lifetime cap${R}`);
-  console.log(`  ${D}  · Batch analysis — grade entire /posts/ directories at once${R}`);
-  console.log(`  ${D}  · Priority support — direct response within 24h${R}`);
-  console.log(`  ${D}  · CI integration — exit codes, JSON/HTML output${R}`);
+  console.log(`  ${WH}${B}Pro removes the limit — unlimited runs, forever.${R}`);
+  console.log(`  ${WH}  · Unlimited runs — no cap, no counter${R}`);
+  console.log(`  ${WH}  · Batch analysis — grade entire /posts/ directories at once${R}`);
+  console.log(`  ${WH}  · Priority support — direct response within 24h${R}`);
+  console.log(`  ${WH}  · CI integration — exit codes, JSON/HTML output${R}`);
   blank();
   console.log(`  ${MG}${B}→ Get Pro ($9/mo): ${CY}${UPGRADE_LINKS.free}${R}`);
   blank();
-  console.log(`  ${D}After checkout — running again in 2 minutes:${R}`);
+  console.log(`  ${D}After purchase — activate in 2 steps:${R}`);
   console.log(`  ${D}  1. Get your key:  ${CY}https://content-grade.onrender.com/my-license${R}`);
-  console.log(`  ${D}  2. Activate:      ${CY}content-grade activate <your-key>${R}`);
-  console.log(`  ${D}  3. Re-run — no cap, no counter.${R}`);
+  console.log(`  ${D}  2. Run:           ${CY}content-grade activate <your-key>${R}`);
+  console.log(`  ${D}  Already have a key? Run step 2 now.${R}`);
   hr();
   blank();
   return true;
@@ -2163,6 +2163,10 @@ if (_telem.isNew) {
   recordEvent({ event: 'install' });
 }
 
+// Fire-and-forget ping on every run — 500ms timeout, never blocks.
+// Sends { command, version, timestamp, anonymous_id } to /ping.
+ping(cmd || 'none');
+
 // ── License key startup validation ───────────────────────────────────────────
 // Background check: re-validate stored license key against server every 7 days.
 // Non-blocking — never delays the CLI. Clears invalid/revoked keys silently.

package/bin/telemetry.js

@@ -9,7 +9,7 @@
  */
 
 import { existsSync, readFileSync, writeFileSync, appendFileSync, mkdirSync } from 'fs';
-import { homedir } from 'os';
+import { homedir, hostname } from 'os';
 import { join, resolve, dirname } from 'path';
 import { createHash } from 'crypto';
 import { fileURLToPath } from 'url';
@@ -27,9 +27,11 @@ const EVENTS_FILE  = join(CONFIG_DIR, 'events.jsonl');
 
 // Telemetry endpoint: CLI events are forwarded here when telemetry is enabled.
 // Set CONTENT_GRADE_TELEMETRY_URL to enable remote aggregation (e.g. self-hosted endpoint).
-// Default: local-only (events stored at ~/.content-grade/events.jsonl, no remote send).
 const REMOTE_URL = process.env.CONTENT_GRADE_TELEMETRY_URL || 'https://content-grade.onrender.com/api/telemetry';
 
+// Lightweight ping endpoint — one POST per CLI run, 500ms hard timeout.
+const DEFAULT_PING_URL = 'https://content-grade.onrender.com/api/ping';
+
 // ── Internal helpers ──────────────────────────────────────────────────────────
 
 function ensureDir() {
@@ -53,6 +55,21 @@ function generateId() {
     .slice(0, 16);
 }
 
+/**
+ * Returns a stable, anonymous machine ID — no PII.
+ * Tries /etc/machine-id (Linux), falls back to hashing hostname.
+ * Same machine always produces the same ID. Survives reinstalls.
+ */
+function getAnonymousId() {
+  let source = '';
+  try { source = readFileSync('/etc/machine-id', 'utf8').trim(); } catch {}
+  if (!source) {
+    try { source = readFileSync('/var/lib/dbus/machine-id', 'utf8').trim(); } catch {}
+  }
+  if (!source) source = hostname();
+  return createHash('sha256').update(source).digest('hex').slice(0, 32);
+}
+
 // ── Public API ────────────────────────────────────────────────────────────────
 
 /**
@@ -232,6 +249,44 @@ export function telemetryStatus() {
   };
 }
 
+/**
+ * Fire-and-forget ping on each CLI run.
+ * Sends { command, version, timestamp, anonymous_id } to /ping.
+ * 500ms hard timeout — never blocks the CLI.
+ * URL reads from config (telemetryPingUrl), falls back to DEFAULT_PING_URL.
+ */
+export async function ping(command) {
+  if (isOptedOut()) return;
+  const cfg = loadConfig();
+  const url = cfg?.telemetryPingUrl || DEFAULT_PING_URL;
+
+  // Persist URL in config if not already set (one-time write)
+  if (!cfg?.telemetryPingUrl) {
+    saveConfig({ ...(cfg || {}), telemetryPingUrl: DEFAULT_PING_URL });
+  }
+
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), 500);
+  try {
+    await fetch(url, {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({
+        command,
+        version: _pkgVersion,
+        timestamp: new Date().toISOString(),
+        anonymous_id: getAnonymousId(),
+        platform: process.platform,
+      }),
+      signal: controller.signal,
+    });
+  } catch {
+    // Network failure — silently ignore, never interrupt the CLI
+  } finally {
+    clearTimeout(timer);
+  }
+}
+
 // ── Rate limiting ─────────────────────────────────────────────────────────────
 
 const FREE_LIFETIME_LIMIT = 15;
@@ -290,7 +345,7 @@ function _write(event) {
 
 async function _sendRemote(event) {
   const controller = new AbortController();
-  const timer = setTimeout(() => controller.abort(), 3000);
+  const timer = setTimeout(() => controller.abort(), 500);
   try {
     await fetch(REMOTE_URL, {
       method: 'POST',

package/dist-server/server/routes/analytics.js

@@ -31,6 +31,29 @@ function thirtyDaysAgo() {
     return d.toISOString().slice(0, 10);
 }
 export function registerAnalyticsRoutes(app) {
+    // ── Lightweight ping — fire-and-forget per CLI run ────────────────────────
+    // Receives { command, version, timestamp, anonymous_id } from CLI.
+    // No PII. Maps anonymous_id → install_id for unique user counts.
+    // Always returns 200 — never interrupt a CLI session.
+    app.post('/api/ping', async (req) => {
+        try {
+            const body = req.body;
+            const anonymousId = body?.anonymous_id ? String(body.anonymous_id).slice(0, 64) : null;
+            if (!anonymousId)
+                return { ok: true };
+            const db = getDb();
+            const b = body;
+            db.prepare(`
+        INSERT INTO cli_telemetry
+          (install_id, event, command, version, platform, created_at)
+        VALUES (?, 'ping', ?, ?, ?, CURRENT_TIMESTAMP)
+      `).run(anonymousId, b.command ? String(b.command).slice(0, 64) : null, b.version ? String(b.version).slice(0, 32) : null, b.platform ? String(b.platform).slice(0, 32) : null);
+        }
+        catch {
+            // never fail — telemetry is non-critical
+        }
+        return { ok: true };
+    });
     // ── CLI telemetry receiver ────────────────────────────────────────────────
     // Receives events from CLI users who have opted in to telemetry.
     // Always returns 200 — never interrupt a CLI session for analytics.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "content-grade",
-  "version": "1.0.38",
+  "version": "1.0.41",
   "description": "AI-powered content analysis CLI. Score any blog post, landing page, or ad copy in under 30 seconds — runs on Claude CLI, no API key needed.",
   "type": "module",
   "bin": {