kubeagent 0.1.23 → 0.1.24

package/README.md

@@ -24,10 +24,15 @@ kubeagent watch
 
 | Command | Description |
 |---------|-------------|
-| `status` | Quick cluster health check |
+| `status` | Quick cluster health check (no LLM) |
 | `onboard` | Scan cluster + codebases, generate knowledge base |
 | `watch` | Continuous monitoring with auto-remediation |
 | `diagnose <resource>` | One-shot diagnosis of a pod/deployment/service |
+| `scan <directory>` | Match local project directories to cluster deployments |
+| `notify` | Manage notification channels (`list`, `add`, `remove`, `test`) |
+| `login` | Log in to KubeAgent (browser or `--device` for headless) |
+| `account` | Show account info and token balance |
+| `logout` | Clear saved credentials |
 | `<prompt>` | Ask a freeform question about your cluster |
 
 ### Common Options
@@ -35,6 +40,7 @@ kubeagent watch
 - `-c, --context <name>` — Kubernetes context (defaults to current)
 - `-n, --namespace <name>` — Namespace (for `diagnose`)
 - `-i, --interval <seconds>` — Check interval for `watch` (default: 300)
+- `--no-interactive` — Auto-deny all approvals, skip questions (for `watch` in background/CI)
 
 ## Knowledge Base
 
@@ -64,25 +70,25 @@ Actions are classified into tiers:
 
 ## Notifications
 
-Configure notification channels from the dashboard at [app.kubeagent.net](https://app.kubeagent.net):
+Add and manage channels from the CLI:
+
+```bash
+kubeagent notify add       # interactive setup
+kubeagent notify list      # show configured channels
+kubeagent notify test      # send a test alert to all channels
+kubeagent notify remove 1  # remove channel by index
+```
+
+Supported channels:
 
 | Channel | Setup |
 |---------|-------|
-| **Slack** | Connect via OAuth from the dashboard |
+| **Slack** | Connect via OAuth from the dashboard at [app.kubeagent.net](https://app.kubeagent.net), or paste a webhook URL |
 | **PagerDuty** | Add your integration key — verified automatically |
 | **Discord** | Paste a Discord webhook URL |
 | **Microsoft Teams** | Paste a Teams incoming webhook URL |
 | **Custom Webhook** | Any HTTP endpoint that accepts JSON payloads |
 
-You can also configure webhooks manually in `~/.kubeagent/config.yaml`:
-
-```yaml
-webhooks:
-  - url: https://hooks.slack.com/services/T.../B.../xxx
-    type: slack
-    severityFilter: critical
-```
-
 ## Requirements
 
 - Node.js >= 20
@@ -105,7 +111,7 @@ Each instance operates independently and reports incidents to the same account.
 Safe actions (pod restarts, rollout restarts, scaling up) are applied automatically. Anything potentially destructive pauses and waits for your approval.
 
 **Where is my API key stored?**
-Credentials are stored locally at `~/.kubeagent/config.yaml` and are never sent anywhere except the KubeAgent API.
+Credentials are stored locally at `~/.kubeagent/auth.json` and are never sent anywhere except the KubeAgent API.
 
 ## License
 

package/dist/auth.d.ts

@@ -15,10 +15,15 @@ export declare function createApiKey(auth: AuthState, name: string): Promise<{
     key: string;
     prefix: string;
 }>;
+export interface BalanceInfo {
+    monthlyRemaining: number;
+    extraRemaining: number;
+    totalRemaining: number;
+    resetsAt: string;
+    plan: string | null;
+    planName: string | null;
+    monthlyTotal: number;
+}
 export declare function showAccount(auth: AuthState): Promise<{
-    balance: {
-        monthlyRemaining: number;
-        extraRemaining: number;
-        totalRemaining: number;
-    };
+    balance: BalanceInfo;
 }>;

package/dist/cli.js

@@ -92,6 +92,23 @@ program
         preflight.fail(`Cannot reach cluster: ${err.message}`);
         process.exit(1);
     }
+    // Load auth early so it's available for balance check and Slack merge below
+    const auth = loadAuth();
+    // Pre-flight: warn if token balance is low (< 20% of monthly allocation)
+    if (auth?.apiKey) {
+        try {
+            const { balance } = await showAccount(auth);
+            if (balance.monthlyTotal > 0 && balance.monthlyRemaining < balance.monthlyTotal * 0.2) {
+                const pct = Math.round((balance.monthlyRemaining / balance.monthlyTotal) * 100);
+                const upgradeUrl = `${auth.appUrl ?? auth.serverUrl}/billing`;
+                console.log(chalk.yellow(`  ⚠ Low token balance: ${pct}% remaining (${balance.monthlyRemaining.toLocaleString()} tokens).`));
+                console.log(chalk.dim(`  Upgrade at: `) + chalk.cyan(upgradeUrl) + "\n");
+            }
+        }
+        catch {
+            // Non-fatal — balance check failure should not prevent monitoring
+        }
+    }
     const intervalLabel = intervalSec >= 60
         ? `${Math.floor(intervalSec / 60)}m`
         : `${intervalSec}s`;
@@ -107,7 +124,6 @@ program
         console.log(chalk.dim("  Non-interactive mode — approvals auto-denied, questions skipped\n"));
     }
     // Merge server-stored Slack webhook (from dashboard "Add to Slack") into local config channels
-    const auth = loadAuth();
     if (auth?.apiKey) {
         const serverSlack = await fetchSlackWebhook(auth);
         if (serverSlack.connected && serverSlack.webhookUrl) {
@@ -421,10 +437,33 @@ program
     }
     try {
         const { balance } = await showAccount(auth);
-        console.log(chalk.bold("Token Balance"));
-        console.log(`  Monthly remaining: ${balance.monthlyRemaining.toLocaleString()}`);
-        console.log(`  Extra credits:     ${balance.extraRemaining.toLocaleString()}`);
-        console.log(`  Total:             ${balance.totalRemaining.toLocaleString()}`);
+        const upgradeUrl = `${auth.appUrl ?? auth.serverUrl}/billing`;
+        console.log(chalk.bold("\nToken Balance"));
+        if (balance.planName) {
+            console.log(`  Plan:              ${chalk.cyan(balance.planName)}`);
+        }
+        if (balance.monthlyTotal > 0) {
+            const usedPct = Math.round(((balance.monthlyTotal - balance.monthlyRemaining) / balance.monthlyTotal) * 100);
+            console.log(`  Monthly tokens:    ${balance.monthlyRemaining.toLocaleString()} / ${balance.monthlyTotal.toLocaleString()} (${usedPct}% used)`);
+        }
+        else {
+            console.log(`  Monthly remaining: ${balance.monthlyRemaining.toLocaleString()}`);
+        }
+        if (balance.extraRemaining > 0) {
+            console.log(`  Extra credits:     ${balance.extraRemaining.toLocaleString()}`);
+        }
+        console.log(`  Total remaining:   ${balance.totalRemaining.toLocaleString()}`);
+        if (balance.resetsAt) {
+            const resetDate = new Date(balance.resetsAt).toLocaleDateString(undefined, { month: "short", day: "numeric", year: "numeric" });
+            console.log(`  Resets:            ${resetDate}`);
+        }
+        // Low-balance warning: < 20% of monthly allocation remaining
+        if (balance.monthlyTotal > 0 && balance.monthlyRemaining < balance.monthlyTotal * 0.2) {
+            const pct = Math.round((balance.monthlyRemaining / balance.monthlyTotal) * 100);
+            console.log("\n" + chalk.yellow(`  ⚠ Low balance: ${pct}% of monthly tokens remaining.`));
+            console.log(chalk.dim(`  Upgrade or buy extra credits: `) + chalk.cyan(upgradeUrl));
+        }
+        console.log();
     }
     catch (err) {
         console.error(chalk.red(err.message));
@@ -461,8 +500,9 @@ program
     }
     catch (err) {
         const e = err;
-        if (e.status === 429) {
-            console.error(chalk.red("Token balance exhausted.") + " " + chalk.dim("Run: kubeagent account") + " to check your balance, then upgrade at " + chalk.cyan("https://app.kubeagent.net"));
+        if (e.status === 402 || e.code === "token_exhausted") {
+            const upgradeUrl = `${auth.appUrl ?? auth.serverUrl}/billing`;
+            console.error(chalk.red("Token balance exhausted (402).") + " " + chalk.dim("Run: ") + chalk.cyan("kubeagent account") + chalk.dim(" to check, or upgrade at ") + chalk.cyan(upgradeUrl));
         }
         else if (e.status === 401) {
             console.error(chalk.red("Not authenticated.") + " " + chalk.dim("Run: kubeagent login"));

package/dist/proxy-client.js

@@ -28,6 +28,16 @@ export async function proxyRequest(auth, body) {
         dbg("proxy", `response ${res.status} from ${url}`);
         if (res.status !== 429 && res.status !== 503)
             break;
+        // 402 is handled above (not 429/503), but peek 429 bodies to avoid
+        // retrying when tokens are permanently exhausted.
+        if (res.status === 429) {
+            const clone = res.clone();
+            const body429 = await clone.json().catch(() => ({}));
+            if (body429.code === "token_exhausted") {
+                dbg("proxy", "token exhausted — not retrying");
+                break;
+            }
+        }
         dbg("proxy", `transient error ${res.status}, will retry`);
         lastErr = res;
     }
@@ -41,6 +51,7 @@ export async function proxyRequest(auth, body) {
             : "";
         throw Object.assign(new Error(`KubeAgent proxy: ${message}${hint}`), {
             status: res.status,
+            code: errBody.code,
         });
     }
     return (await res.json());

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kubeagent",
-  "version": "0.1.23",
+  "version": "0.1.24",
   "description": "AI-powered Kubernetes management CLI",
   "license": "SEE LICENSE IN LICENSE",
   "type": "module",