local-model-suitability-mcp 1.1.18 → 1.1.20

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## [1.1.20] - 2026-06-20
+- feat: email notification on free tier gate hit
+
+## [1.1.19] - 2026-06-18
+- feat: revoke API key on Stripe refund
+
 ## [1.1.18] - 2026-06-17
 - fix: Resend fetch now logs HTTP error responses; was silently swallowing non-2xx failures
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "local-model-suitability-mcp",
   "mcpName": "io.github.OjasKord/local-model-suitability-mcp",
-  "version": "1.1.18",
+  "version": "1.1.20",
   "description": "AI model router for agents. Checks whether a local model can handle the task before calling cloud inference. LOCAL/CLOUD verdict saves cost on every call.",
   "main": "src/server.js",
   "type": "module",

package/src/server.js

@@ -3,7 +3,7 @@ import { createHmac, timingSafeEqual } from 'crypto';
 import { readFileSync, writeFileSync } from 'fs';
 import Anthropic from '@anthropic-ai/sdk';
 
-const VERSION = '1.1.18';
+const VERSION = '1.1.20';
 const PRO_UPGRADE_URL = 'https://buy.stripe.com/cNibJ08wd7zf6NS0h2ebu0p';
 const ENTERPRISE_UPGRADE_URL = 'https://buy.stripe.com/28E9AS27PbPvfkoe7Sebu0q';
 const ALLOWED_PAYMENT_LINK_IDS = ['plink_1TQzCBD6WvRe6sn3H1q5t2LF', 'plink_1TQzDSD6WvRe6sn3UM2G1EgX'];
@@ -105,6 +105,23 @@ function checkAccess(ip, apiKey) {
   return { allowed: true, tier: 'free', remaining, count };
 }
 
+function truncateIp(ip) {
+  const parts = (ip || '').split('.');
+  return parts.length === 4 ? parts.slice(0, 3).join('.') + '.0' : ip;
+}
+
+function notifyGateHit(serverName, ip, toolName, totalCalls, stripeUrl) {
+  if (!process.env.RESEND_API_KEY) return;
+  const maskedIp = truncateIp(ip);
+  const html = '<p>Server: ' + serverName + '</p><p>IP: ' + maskedIp + '</p><p>Tool: ' + (toolName || 'unknown') + '</p><p>Calls this month: ' + totalCalls + '</p><p>Time: ' + new Date().toISOString() + '</p><p>Upgrade: ' + stripeUrl + '</p>';
+  fetch('https://api.resend.com/emails', {
+    method: 'POST',
+    headers: { 'Authorization': `Bearer ${process.env.RESEND_API_KEY}`, 'Content-Type': 'application/json' },
+    body: JSON.stringify({ from: 'Kord Agencies <ojas@kordagencies.com>', to: 'ojas@kordagencies.com', subject: '[Gate Hit] ' + serverName + ' — ' + maskedIp + ' hit free tier limit', html })
+  }).then(r => { if (!r.ok) r.text().then(t => console.error('[GateNotify] failed: HTTP ' + r.status + ' ' + t)); })
+    .catch(e => console.error('[GateNotify] network error:', e.message));
+}
+
 function logCall(tool, tier, ip) {
   stats.tool_usage[tool] = (stats.tool_usage[tool] || 0) + 1;
   stats.recent_calls.push({ tool, tier, time: nowISO(), ip });
@@ -161,6 +178,26 @@ async function redisKeys(pattern) {
   } catch(e) { return []; }
 }
 
+async function redisDelete(key) {
+  try {
+    const res = await fetch(
+      `${UPSTASH_URL}/del/${encodeURIComponent(key)}`,
+      { method: 'POST', headers: { Authorization: `Bearer ${UPSTASH_TOKEN}` } }
+    );
+    const data = await res.json();
+    if (data.error) console.error('[Redis] redisDelete error:', data.error, 'key:', key);
+  } catch(e) { console.error('[Redis] redisDelete failed:', e); }
+}
+
+async function findCheckoutSessionEmail(paymentIntentId) {
+  const res = await fetch(
+    `https://api.stripe.com/v1/checkout/sessions?payment_intent=${encodeURIComponent(paymentIntentId)}`,
+    { headers: { Authorization: `Bearer ${process.env.STRIPE_SECRET_KEY}` } }
+  );
+  const data = await res.json();
+  return data.data?.[0]?.customer_details?.email || data.data?.[0]?.customer_email || null;
+}
+
 async function appendSessionLog(ip, tool) {
   try {
     const ipSafe = ip.replace(/:/g, '_').replace(/\s/g, '');
@@ -411,6 +448,41 @@ async function handleStripeWebhook(body, sig) {
     }
   }
 
+  if (event.type === 'charge.refunded') {
+    if (!process.env.STRIPE_SECRET_KEY) {
+      console.error('[lms] STRIPE_SECRET_KEY not set — cannot revoke key on refund');
+      return { received: true, ignored: true, status: 200 };
+    }
+    const paymentIntentId = event.data.object.payment_intent;
+    if (!paymentIntentId) {
+      console.log('[lms] charge.refunded missing payment_intent — ignoring.');
+      return { received: true, ignored: true, status: 200 };
+    }
+    try {
+      const email = await findCheckoutSessionEmail(paymentIntentId);
+      if (!email) {
+        console.log('[lms] No checkout session/email found for refunded payment_intent ' + paymentIntentId);
+        return { received: true, ignored: true, status: 200 };
+      }
+      let revokedKey = null;
+      for (const [key, record] of apiKeys.entries()) {
+        if (record.email === email) { revokedKey = key; break; }
+      }
+      if (!revokedKey) {
+        console.log('[lms] No API key found for ' + email + ' — refund received, nothing to revoke');
+        return { received: true, ignored: true, status: 200 };
+      }
+      apiKeys.delete(revokedKey);
+      await redisDelete(`${REDIS_PREFIX}:key:${revokedKey}`);
+      saveStats();
+      console.log('[Webhook] API key revoked for ' + email + ' — refund received');
+      return { received: true, revoked: true, status: 200 };
+    } catch(e) {
+      console.error('[lms] charge.refunded handling error:', e.message);
+      return { received: true, ignored: true, status: 200 };
+    }
+  }
+
   return { received: true, status: 200 };
 }
 
@@ -658,6 +730,7 @@ const server = createServer(async (req, res) => {
             const access = checkAccess(clientIp, apiKey);
 
             if (!access.allowed) {
+              notifyGateHit('Local Model Suitability', clientIp, 'check_local_viability', getFreeTierCount(clientIp), PRO_UPGRADE_URL);
               response = {
                 jsonrpc: '2.0', id: request.id,
                 result: { content: [{ type: 'text', text: JSON.stringify({ error: `Free tier limit reached. Get 500 calls for $20 at ${PRO_UPGRADE_URL} -- calls never expire.`, likely_cause: 'free tier monthly limit reached', retryable: false, retry_after_ms: null, fallback_tool: null, agent_action: `Inform user free tier quota is exhausted. Get 500 calls for $20 at ${PRO_UPGRADE_URL} -- calls never expire.`, category: 'rate_limit', trace_id: nowISO(), upgrade_url: PRO_UPGRADE_URL }) }] }