moltengine-cli 0.1.5 → 0.1.6

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "moltengine-cli",
-  "version": "0.1.5",
+  "version": "0.1.6",
   "description": "CLI for Moltengine - The WP Engine for AI Agents",
   "type": "module",
   "license": "MIT",

package/src/moltengine.js

@@ -122,7 +122,7 @@ function checkPaymentRequired(tenant) {
     console.log();
     print("Plans", colors.bold);
     print("─".repeat(40), colors.muted);
-    console.log(`  ${colors.accent}Starter${colors.reset}    ${PLAN_PRICES.starter}   — 1 agent, Safe Mode`);
+    console.log(`  ${colors.accent}Starter${colors.reset}    ${PLAN_PRICES.starter}   — 1 agent, all tools, approvals`);
     console.log(`  ${colors.accent}Team${colors.reset}       ${PLAN_PRICES.team}  — 5 agents, approvals`);
     console.log(`  ${colors.accent}Business${colors.reset}   ${PLAN_PRICES.business}  — 25 agents, SIEM, RBAC`);
     console.log(`  ${colors.accent}Enterprise${colors.reset} ${PLAN_PRICES.enterprise}   — SSO, VPC, compliance`);
@@ -178,7 +178,7 @@ function showAuthRequired() {
   console.log();
   print("Plans", colors.bold);
   print("─".repeat(40), colors.muted);
-  console.log(`  ${colors.accent}Starter${colors.reset}    ${PLAN_PRICES.starter}   — 1 agent, Safe Mode`);
+  console.log(`  ${colors.accent}Starter${colors.reset}    ${PLAN_PRICES.starter}   — 1 agent, all tools, approvals`);
   console.log(`  ${colors.accent}Team${colors.reset}       ${PLAN_PRICES.team}  — 5 agents, approvals`);
   console.log(`  ${colors.accent}Business${colors.reset}   ${PLAN_PRICES.business}  — 25 agents, SIEM, RBAC`);
   console.log();
@@ -607,7 +607,7 @@ async function cmdCheckout(plan) {
   
   print("Plans", colors.bold);
   print("─".repeat(40), colors.muted);
-  console.log(`  ${colors.accent}starter${colors.reset}     ${PLAN_PRICES.starter}   — 1 agent, Safe Mode`);
+  console.log(`  ${colors.accent}starter${colors.reset}     ${PLAN_PRICES.starter}   — 1 agent, all tools, approvals`);
   console.log(`  ${colors.accent}team${colors.reset}        ${PLAN_PRICES.team}  — 5 agents, approvals`);
   console.log(`  ${colors.accent}business${colors.reset}    ${PLAN_PRICES.business}  — 25 agents, SIEM, RBAC`);
   console.log(`  ${colors.accent}enterprise${colors.reset}  ${PLAN_PRICES.enterprise}   — SSO, VPC, compliance`);
@@ -676,8 +676,8 @@ function showHelp() {
   console.log(`  ${colors.accent}approvals${colors.reset}    List and manage pending approvals`);
   console.log(`  ${colors.accent}deployments${colors.reset}  List recent deployments`);
   console.log(`  ${colors.accent}upgrade${colors.reset}      Upgrade to a higher plan`);
-  console.log(`  ${colors.accent}audit${colors.reset}        Search and export audit logs (Team+)`);
-  console.log(`  ${colors.accent}policies${colors.reset}     Manage security policies (Team+)`);
+  console.log(`  ${colors.accent}audit${colors.reset}        Search and export audit logs`);
+  console.log(`  ${colors.accent}policies${colors.reset}     Manage security policies`);
   console.log(`  ${colors.accent}help${colors.reset}         Show this help message`);
   console.log();
   
@@ -782,16 +782,14 @@ async function cmdStatus() {
   }
   
   const plan = tenant.plan || "starter";
-  const hasApprovals = plan !== "starter";
+  // All plans have approvals
   
   // Print logo
   console.log(ASCII_LOGO_COMPACT);
   
   // Tenant Status section
   printHeader("Tenant Status");
-  const planDisplay = plan === "starter" 
-    ? `Starter (${PLAN_PRICES.starter}) — ${colors.warning}Safe Mode${colors.reset}`
-    : `${plan.charAt(0).toUpperCase() + plan.slice(1)} (${PLAN_PRICES[plan] || ""})`;
+  const planDisplay = `${plan.charAt(0).toUpperCase() + plan.slice(1)} (${PLAN_PRICES[plan] || ""})`;
   console.log(`  ${colors.muted}Plan:${colors.reset}     ${planDisplay}`);
   
   const statusIcon = tenant.status === "active" ? "●" : "○";
@@ -819,67 +817,38 @@ async function cmdStatus() {
   const runsPct = limits.runs > 0 ? (usage.runs / limits.runs) * 100 : 0;
   const eventsPct = limits.events > 0 ? (usage.events / limits.events) * 100 : 0;
   
-  // Approvals section (for Team+ plans)
-  if (hasApprovals) {
-    const pendingApprovals = approvals.filter(a => a.status === "pending");
-    const pendingCount = pendingApprovals.length;
-    
-    console.log();
-    if (pendingCount > 0) {
-      print(`Approvals                           ${colors.warning}⚠ ${pendingCount} pending${colors.reset}`, colors.bold);
-    } else {
-      print(`Approvals                           ${colors.success}✓ none pending${colors.reset}`, colors.bold);
-    }
-    print("─".repeat(40), colors.muted);
-    
-    if (pendingCount > 0) {
-      // Show up to 5 pending approvals
-      const toShow = pendingApprovals.slice(0, 5);
-      for (let i = 0; i < toShow.length; i++) {
-        const a = toShow[i];
-        const actionType = (a.action_type || "ACTION").toUpperCase().padEnd(5);
-        const target = truncate(a.action_path || a.description || "unknown", 28);
-        const time = formatRelativeTime(a.created_at);
-        console.log(`  ${colors.muted}[${i + 1}]${colors.reset} ${actionType} ${target.padEnd(28)} ${colors.muted}${time}${colors.reset}`);
-      }
-      
-      if (pendingCount > 5) {
-        console.log(`  ${colors.muted}... and ${pendingCount - 5} more${colors.reset}`);
-      }
-      
-      console.log();
-      console.log(`  ${colors.info}→ moltctl approvals approve <id>${colors.reset}`);
-      console.log(`  ${colors.info}→ moltctl approvals list --all${colors.reset}`);
-    } else {
-      console.log(`  ${colors.muted}No actions waiting for approval${colors.reset}`);
-    }
+  // Approvals section (available on all plans)
+  const pendingApprovals = approvals.filter(a => a.status === "pending");
+  const pendingCount = pendingApprovals.length;
+  
+  console.log();
+  if (pendingCount > 0) {
+    print(`Approvals                           ${colors.warning}⚠ ${pendingCount} pending${colors.reset}`, colors.bold);
   } else {
-    // Starter plan - show blocked actions
-    const blockedCount = blockedActions.length || 0;
-    const todayBlocked = usage.blocked_today || blockedCount || 0;
-    
-    console.log();
-    if (todayBlocked > 0) {
-      print(`Blocked Today                       ${colors.error}⛔ ${todayBlocked} actions${colors.reset}`, colors.bold);
-    } else {
-      print(`Blocked Today                       ${colors.success}✓ none${colors.reset}`, colors.bold);
+    print(`Approvals                           ${colors.success}✓ none pending${colors.reset}`, colors.bold);
+  }
+  print("─".repeat(40), colors.muted);
+  
+  if (pendingCount > 0) {
+    // Show up to 5 pending approvals
+    const toShow = pendingApprovals.slice(0, 5);
+    for (let i = 0; i < toShow.length; i++) {
+      const a = toShow[i];
+      const actionType = (a.action_type || "ACTION").toUpperCase().padEnd(5);
+      const target = truncate(a.action_path || a.description || "unknown", 28);
+      const time = formatRelativeTime(a.created_at);
+      console.log(`  ${colors.muted}[${i + 1}]${colors.reset} ${actionType} ${target.padEnd(28)} ${colors.muted}${time}${colors.reset}`);
     }
-    print("─".repeat(40), colors.muted);
     
-    if (todayBlocked > 0 && blockedActions.length > 0) {
-      // Show recent blocked actions
-      const toShow = blockedActions.slice(0, 3);
-      for (const b of toShow) {
-        const actionType = (b.action_type || "ACTION").toUpperCase().padEnd(5);
-        const target = truncate(b.action_path || b.description || "unknown", 28);
-        const time = formatRelativeTime(b.created_at);
-        console.log(`  ${actionType} ${target.padEnd(28)} ${colors.muted}${time}${colors.reset}`);
-      }
-      console.log();
+    if (pendingCount > 5) {
+      console.log(`  ${colors.muted}... and ${pendingCount - 5} more${colors.reset}`);
     }
     
-    console.log(`  ${colors.muted}Risky actions are blocked in Safe Mode.${colors.reset}`);
-    console.log(`  ${colors.info}→ Upgrade to enable approvals: ${colors.accent}moltctl upgrade team${colors.reset}`);
+    console.log();
+    console.log(`  ${colors.info}→ moltctl approvals approve <id>${colors.reset}`);
+    console.log(`  ${colors.info}→ moltctl approvals list --all${colors.reset}`);
+  } else {
+    console.log(`  ${colors.muted}No high-risk actions waiting for approval${colors.reset}`);
   }
   
   // Show warning if approaching limits
@@ -1010,7 +979,7 @@ async function cmdUpgrade(targetPlan) {
     console.log();
     print("Choose a Plan", colors.bold);
     print("─".repeat(40), colors.muted);
-    console.log(`  ${colors.accent}Starter${colors.reset}    ${PLAN_PRICES.starter}   — 1 agent, Safe Mode`);
+    console.log(`  ${colors.accent}Starter${colors.reset}    ${PLAN_PRICES.starter}   — 1 agent, all tools, approvals`);
     console.log(`  ${colors.accent}Team${colors.reset}       ${PLAN_PRICES.team}  — 5 agents, approvals`);
     console.log(`  ${colors.accent}Business${colors.reset}   ${PLAN_PRICES.business}  — 25 agents, SIEM, RBAC`);
     console.log(`  ${colors.accent}Enterprise${colors.reset} ${PLAN_PRICES.enterprise}   — SSO, VPC, compliance`);
@@ -1029,7 +998,7 @@ async function cmdUpgrade(targetPlan) {
   console.log(ASCII_LOGO_COMPACT);
   
   const plans = [
-    { id: "starter", price: "$49/mo", agents: 1, runs: "100/day", highlight: "Safe Mode" },
+    { id: "starter", price: "$49/mo", agents: 1, runs: "100/day", highlight: "All Tools" },
     { id: "team", price: "$299/mo", agents: 5, runs: "1,000/day", highlight: "Human-in-the-loop approvals" },
     { id: "business", price: "$999/mo", agents: 25, runs: "10,000/day", highlight: "SIEM export, RBAC" },
     { id: "enterprise", price: "Custom", agents: 100, runs: "100,000/day", highlight: "SSO, VPC, compliance" }
@@ -1100,6 +1069,7 @@ async function cmdUpgrade(targetPlan) {
 
 /**
  * Approvals command - list, approve, or deny pending approvals
+ * Available on all plans (required for high-risk actions)
  */
 async function cmdApprovals(subcommand, id) {
   const tenant = await apiGet("/tenant/me");
@@ -1109,27 +1079,7 @@ async function cmdApprovals(subcommand, id) {
     return;
   }
   
-  const plan = tenant.plan || "starter";
-  
-  // Check if plan supports approvals
-  if (plan === "starter") {
-    console.log(ASCII_LOGO_COMPACT);
-    console.log();
-    print(`${colors.error}⛔ Approvals require Team plan or higher${colors.reset}`, colors.bold);
-    console.log();
-    console.log(`  Your current plan (Starter) runs in Safe Mode where`);
-    console.log(`  risky actions are automatically blocked.`);
-    console.log();
-    console.log(`  ${colors.info}Team plan includes:${colors.reset}`);
-    console.log(`  • Human-in-the-loop approvals`);
-    console.log(`  • Audit log search & export`);
-    console.log(`  • Policy editor`);
-    console.log(`  • Email alerts`);
-    console.log();
-    console.log(`  ${colors.info}→ Upgrade: ${colors.accent}moltctl upgrade team${colors.reset}`);
-    console.log();
-    return;
-  }
+  // Approvals available on all plans
   
   // Handle subcommands
   switch (subcommand) {
@@ -1222,7 +1172,8 @@ async function denyAction(id) {
 }
 
 /**
- * Audit command - search and export audit logs (Team+ only)
+ * Audit command - search and export audit logs
+ * Available on all plans
  */
 async function cmdAudit(subcommand, ...args) {
   const tenant = await apiGet("/tenant/me");
@@ -1232,25 +1183,7 @@ async function cmdAudit(subcommand, ...args) {
     return;
   }
   
-  const plan = tenant.plan || "starter";
-  
-  if (plan === "starter") {
-    console.log(ASCII_LOGO_COMPACT);
-    console.log();
-    print(`${colors.error}⛔ Audit search requires Team plan or higher${colors.reset}`, colors.bold);
-    console.log();
-    console.log(`  Your current plan (Starter) stores audit logs but`);
-    console.log(`  search and export require an upgrade.`);
-    console.log();
-    console.log(`  ${colors.info}Team plan includes:${colors.reset}`);
-    console.log(`  • Audit log search`);
-    console.log(`  • CSV/JSON export`);
-    console.log(`  • 90-day retention (vs 7 days)`);
-    console.log();
-    console.log(`  ${colors.info}→ Upgrade: ${colors.accent}moltctl upgrade team${colors.reset}`);
-    console.log();
-    return;
-  }
+  // Audit available on all plans
   
   // Handle subcommands
   switch (subcommand) {
@@ -1388,7 +1321,8 @@ async function auditStats() {
 }
 
 /**
- * Policies command - manage security policies (Team+ only)
+ * Policies command - manage security policies
+ * Available on all plans
  */
 async function cmdPolicies(subcommand, ...args) {
   const tenant = await apiGet("/tenant/me");
@@ -1398,25 +1332,7 @@ async function cmdPolicies(subcommand, ...args) {
     return;
   }
   
-  const plan = tenant.plan || "starter";
-  
-  if (plan === "starter") {
-    console.log(ASCII_LOGO_COMPACT);
-    console.log();
-    print(`${colors.error}⛔ Policy editor requires Team plan or higher${colors.reset}`, colors.bold);
-    console.log();
-    console.log(`  Your current plan (Starter) uses default security`);
-    console.log(`  policies. Custom policies require an upgrade.`);
-    console.log();
-    console.log(`  ${colors.info}Team plan includes:${colors.reset}`);
-    console.log(`  • Tool allowlist/blocklist`);
-    console.log(`  • Network domain policies`);
-    console.log(`  • Filesystem access rules`);
-    console.log();
-    console.log(`  ${colors.info}→ Upgrade: ${colors.accent}moltctl upgrade team${colors.reset}`);
-    console.log();
-    return;
-  }
+  // Policy editor available on all plans
   
   // Handle subcommands
   switch (subcommand) {
@@ -1463,9 +1379,9 @@ async function policiesList() {
       console.log(`  ${colors.muted}Using secure defaults${colors.reset}`);
       console.log();
       console.log(`  ${colors.info}Default policy:${colors.reset}`);
-      console.log(`  • Dangerous tools blocked (shell, browser)`);
+      console.log(`  • All tools available (high-risk actions require approval)`);
       console.log(`  • Network requests allowed (except blocked domains)`);
-      console.log(`  • Filesystem writes restricted to /data/*, /exports/*`);
+      console.log(`  • Sandboxing enabled by default (user-configurable)`);
       console.log();
       return;
     }