repowisestage 0.0.26 → 0.0.27

package/dist/bin/repowise.js

@@ -1831,6 +1831,101 @@ import { dirname as dirname6, join as join18 } from "path";
 import chalk5 from "chalk";
 import ora from "ora";
 
+// ../../packages/shared/src/constants/tiers.ts
+var SUBSCRIPTION_TIERS = {
+  STARTER: "starter",
+  PRO: "pro",
+  TEAM: "team"
+};
+var TIER_LIMITS = {
+  [SUBSCRIPTION_TIERS.STARTER]: {
+    maxRepos: 1,
+    maxSeats: 1,
+    maxSyncsPerMonth: 10,
+    maxConcurrentSyncs: 1,
+    bedrockEndpoint: "public"
+  },
+  [SUBSCRIPTION_TIERS.PRO]: {
+    maxRepos: 2,
+    maxSeats: 1,
+    maxSyncsPerMonth: 30,
+    maxConcurrentSyncs: 2,
+    bedrockEndpoint: "public"
+  },
+  [SUBSCRIPTION_TIERS.TEAM]: {
+    maxRepos: 3,
+    maxSeats: 999999,
+    maxSyncsPerMonth: 30,
+    maxConcurrentSyncs: 10,
+    bedrockEndpoint: "public"
+  }
+};
+
+// ../../packages/shared/src/constants/roles.ts
+var ROLES = {
+  OWNER: "owner",
+  ADMIN: "admin",
+  REPO_MANAGER: "repo_manager",
+  MEMBER: "member"
+};
+var PERMISSIONS = {
+  [ROLES.OWNER]: {
+    connectRepos: true,
+    viewSync: true,
+    triggerRetry: true,
+    configWatcher: true,
+    inviteMembers: true,
+    manageBilling: true,
+    configAiTools: true,
+    manageTeam: true
+  },
+  [ROLES.ADMIN]: {
+    connectRepos: true,
+    viewSync: true,
+    triggerRetry: true,
+    configWatcher: true,
+    inviteMembers: true,
+    manageBilling: false,
+    configAiTools: true,
+    manageTeam: true
+  },
+  [ROLES.REPO_MANAGER]: {
+    connectRepos: true,
+    viewSync: true,
+    triggerRetry: true,
+    configWatcher: true,
+    inviteMembers: false,
+    manageBilling: false,
+    configAiTools: true,
+    manageTeam: false
+  },
+  [ROLES.MEMBER]: {
+    connectRepos: false,
+    viewSync: true,
+    triggerRetry: true,
+    configWatcher: false,
+    inviteMembers: false,
+    manageBilling: false,
+    configAiTools: true,
+    manageTeam: false
+  }
+};
+function hasPermission(role, permission) {
+  return PERMISSIONS[role][permission];
+}
+var ROLE_PRIORITY = [
+  ROLES.OWNER,
+  ROLES.ADMIN,
+  ROLES.REPO_MANAGER,
+  ROLES.MEMBER
+];
+function resolveRole(groups) {
+  for (const role of ROLE_PRIORITY) {
+    if (groups.includes(role)) return role;
+  }
+  return ROLES.MEMBER;
+}
+
 // src/lib/auth.ts
 import { createHash, randomBytes } from "crypto";
 import { readFile as readFile7, writeFile as writeFile9, mkdir as mkdir9, chmod as chmod4, unlink as unlink7 } from "fs/promises";
@@ -2110,7 +2205,11 @@ function decodeIdToken(idToken) {
     const parts = idToken.split(".");
     if (parts.length < 2) return { email: "unknown" };
     const payload = JSON.parse(Buffer.from(parts[1], "base64url").toString());
-    return { email: payload.email ?? "unknown", tenantId: payload["custom:tenant_id"] };
+    return {
+      email: payload.email ?? "unknown",
+      tenantId: payload["custom:tenant_id"],
+      groups: payload["cognito:groups"]
+    };
   } catch {
     return { email: "unknown" };
   }
@@ -2922,26 +3021,51 @@ async function create() {
     try {
       const pricing = await apiRequest(`/v1/repos/${repoId}/rescan-pricing`);
       if (pricing.lastFullScanAt) {
-        if (pricing.allowed && pricing.isFree) {
-          spinner.succeed(chalk5.cyan("Free rescan available. Will trigger a full rescan."));
-          useFreeRescan = true;
-        } else {
+        const { groups } = decodeIdToken(credentials.idToken);
+        const role = resolveRole(groups ?? []);
+        const canRescan = hasPermission(role, "connectRepos");
+        if (!canRescan) {
           spinner.fail(chalk5.red("This repository already has context generated."));
           console.log(
             chalk5.cyan(
               `
-  If you're a team member, run: ${chalk5.bold("repowise member")}
+  As a team member, run: ${chalk5.bold("repowise member")}
   This will download context and configure your AI tools.
 `
             )
           );
+          process.exitCode = 1;
+          return;
+        }
+        if (pricing.allowed && pricing.isFree) {
+          spinner.succeed(chalk5.cyan("Free rescan available. Will trigger a full rescan."));
+          useFreeRescan = true;
+        } else if (pricing.allowed) {
+          spinner.stop();
+          const costText = pricing.estimatedCost && pricing.estimatedCost > 0 ? `$${pricing.estimatedCost.toFixed(2)}` : "pay-as-you-go (based on actual processing cost)";
           console.log(
-            chalk5.dim(
-              `  To trigger a new full scan, visit: https://app.repowise.ai/repos/${repoId}
-  To sync recent changes, use: repowise sync
-`
+            chalk5.yellow(
+              `
+  This repository already has context generated.
+  A full rescan will cost: ${chalk5.bold(costText)}`
             )
           );
+          if (pricing.costWarning) {
+            console.log(chalk5.dim(`  ${pricing.costWarning}`));
+          }
+          const { confirm: confirm2 } = await import("@inquirer/prompts");
+          const proceed = await confirm2({
+            message: "Proceed with paid full rescan?",
+            default: false
+          });
+          if (!proceed) {
+            console.log(chalk5.dim("\n  To sync recent changes, use: repowise sync\n"));
+            process.exitCode = 0;
+            return;
+          }
+          useFreeRescan = true;
+        } else {
+          spinner.fail(chalk5.red(pricing.reason ?? "Cannot rescan at this time."));
           process.exitCode = 1;
           return;
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "repowisestage",
-  "version": "0.0.26",
+  "version": "0.0.27",
   "type": "module",
   "description": "AI-optimized codebase context generator",
   "bin": {