shieldcortex 2.17.1 → 2.19.0

package/dist/license/__tests__/feature-gating.test.js

@@ -0,0 +1,188 @@
+/**
+ * Feature Gating Tests
+ *
+ * Verifies tier-based feature access:
+ *  - Free tier: isFeatureEnabled returns false, requireFeature throws FeatureGatedError
+ *  - Pro tier: all Pro features enabled, requireFeature doesn't throw
+ *  - FeatureGatedResponse contract matches frontend expectations
+ */
+import { describe, it, expect, beforeEach, afterEach } from '@jest/globals';
+// We test the gate module by temporarily removing the license file.
+// getLicenseTier() → getLicense() reads from ~/.shieldcortex/license.json.
+describe('Feature Gating', () => {
+    let originalEnv;
+    beforeEach(() => {
+        originalEnv = process.env.SHIELDCORTEX_LICENSE_TIER;
+    });
+    afterEach(() => {
+        if (originalEnv !== undefined) {
+            process.env.SHIELDCORTEX_LICENSE_TIER = originalEnv;
+        }
+        else {
+            delete process.env.SHIELDCORTEX_LICENSE_TIER;
+        }
+    });
+    describe('FeatureGatedError', () => {
+        it('should include feature name and required tier', async () => {
+            const { FeatureGatedError } = await import('../gate.js');
+            const err = new FeatureGatedError('custom_firewall_rules', 'pro');
+            expect(err.feature).toBe('custom_firewall_rules');
+            expect(err.requiredTier).toBe('pro');
+            expect(err.name).toBe('FeatureGatedError');
+            expect(err.message).toContain('Pro');
+        });
+        it('should include upgrade URL in message', async () => {
+            const { FeatureGatedError } = await import('../gate.js');
+            const err = new FeatureGatedError('audit_export', 'pro');
+            expect(err.message).toContain('shieldcortex.ai/pricing');
+        });
+        it('should include activate command hint', async () => {
+            const { FeatureGatedError } = await import('../gate.js');
+            const err = new FeatureGatedError('skill_scanner_deep', 'pro');
+            expect(err.message).toContain('license activate');
+        });
+    });
+    describe('isFeatureEnabled', () => {
+        it('should return false for Pro features on free tier', async () => {
+            const { isFeatureEnabled } = await import('../gate.js');
+            const { clearLicenseCache } = await import('../store.js');
+            const { existsSync, renameSync } = await import('fs');
+            const { join } = await import('path');
+            const { homedir } = await import('os');
+            const licensePath = join(homedir(), '.shieldcortex', 'license.json');
+            const backupPath = licensePath + '.test-backup-1';
+            let backed = false;
+            if (existsSync(licensePath)) {
+                renameSync(licensePath, backupPath);
+                backed = true;
+            }
+            clearLicenseCache();
+            try {
+                const proFeatures = [
+                    'custom_injection_patterns',
+                    'custom_iron_dome_policies',
+                    'custom_firewall_rules',
+                    'audit_export',
+                    'skill_scanner_deep',
+                ];
+                for (const feature of proFeatures) {
+                    expect(isFeatureEnabled(feature)).toBe(false);
+                }
+            }
+            finally {
+                if (backed) {
+                    renameSync(backupPath, licensePath);
+                }
+                clearLicenseCache();
+            }
+        });
+    });
+    describe('requireFeature', () => {
+        it('should throw FeatureGatedError for Pro features on free tier', async () => {
+            const { requireFeature, FeatureGatedError } = await import('../gate.js');
+            const { clearLicenseCache } = await import('../store.js');
+            const { existsSync, renameSync } = await import('fs');
+            const { join } = await import('path');
+            const { homedir } = await import('os');
+            const licensePath = join(homedir(), '.shieldcortex', 'license.json');
+            const backupPath = licensePath + '.test-backup-2';
+            let backed = false;
+            if (existsSync(licensePath)) {
+                renameSync(licensePath, backupPath);
+                backed = true;
+            }
+            clearLicenseCache();
+            try {
+                expect(() => requireFeature('custom_firewall_rules')).toThrow(FeatureGatedError);
+                expect(() => requireFeature('audit_export')).toThrow(FeatureGatedError);
+                expect(() => requireFeature('skill_scanner_deep')).toThrow(FeatureGatedError);
+                expect(() => requireFeature('custom_injection_patterns')).toThrow(FeatureGatedError);
+                expect(() => requireFeature('custom_iron_dome_policies')).toThrow(FeatureGatedError);
+            }
+            finally {
+                if (backed) {
+                    renameSync(backupPath, licensePath);
+                }
+                clearLicenseCache();
+            }
+        });
+        it('should not throw for Pro features when Pro tier is active', async () => {
+            const { requireFeature } = await import('../gate.js');
+            const { clearLicenseCache } = await import('../store.js');
+            const { existsSync } = await import('fs');
+            const { join } = await import('path');
+            const { homedir } = await import('os');
+            const licensePath = join(homedir(), '.shieldcortex', 'license.json');
+            // This test only works if a valid Pro license is installed
+            if (!existsSync(licensePath)) {
+                // Skip - no license file available for Pro tier testing
+                return;
+            }
+            clearLicenseCache();
+            try {
+                // If the license is Pro, these should not throw
+                const { getLicenseTier } = await import('../store.js');
+                const tier = getLicenseTier();
+                if (tier === 'pro' || tier === 'team' || tier === 'enterprise') {
+                    expect(() => requireFeature('custom_firewall_rules')).not.toThrow();
+                    expect(() => requireFeature('audit_export')).not.toThrow();
+                    expect(() => requireFeature('skill_scanner_deep')).not.toThrow();
+                }
+            }
+            finally {
+                clearLicenseCache();
+            }
+        });
+    });
+    describe('getRequiredTier', () => {
+        it('should return pro for all 5 Pro features', async () => {
+            const { getRequiredTier } = await import('../gate.js');
+            expect(getRequiredTier('custom_injection_patterns')).toBe('pro');
+            expect(getRequiredTier('custom_iron_dome_policies')).toBe('pro');
+            expect(getRequiredTier('custom_firewall_rules')).toBe('pro');
+            expect(getRequiredTier('audit_export')).toBe('pro');
+            expect(getRequiredTier('skill_scanner_deep')).toBe('pro');
+        });
+        it('should return team for team features', async () => {
+            const { getRequiredTier } = await import('../gate.js');
+            expect(getRequiredTier('cloud_sync')).toBe('team');
+            expect(getRequiredTier('team_management')).toBe('team');
+        });
+    });
+    describe('listFeatures', () => {
+        it('should list all features with tier, availability, and description', async () => {
+            const { listFeatures } = await import('../gate.js');
+            const features = listFeatures();
+            expect(features.length).toBeGreaterThanOrEqual(8);
+            for (const f of features) {
+                expect(f).toHaveProperty('feature');
+                expect(f).toHaveProperty('requiredTier');
+                expect(f).toHaveProperty('enabled');
+                expect(f).toHaveProperty('description');
+                expect(typeof f.description).toBe('string');
+                expect(f.description.length).toBeGreaterThan(0);
+            }
+        });
+    });
+    describe('FeatureGatedResponse contract', () => {
+        it('should match the shared type shape used by frontend gatedFetch', async () => {
+            const { FeatureGatedError } = await import('../gate.js');
+            const err = new FeatureGatedError('custom_firewall_rules', 'pro');
+            // Simulate what requireProFeature middleware builds
+            const body = {
+                error: 'Feature requires upgrade',
+                code: 'FEATURE_GATED',
+                feature: err.feature,
+                requiredTier: err.requiredTier,
+                upgradeUrl: 'https://shieldcortex.ai/pricing',
+            };
+            // Frontend gatedFetch checks: response.status === 403 && body.code === 'FEATURE_GATED'
+            expect(body.code).toBe('FEATURE_GATED');
+            expect(body.feature).toBe('custom_firewall_rules');
+            expect(body.requiredTier).toBe('pro');
+            expect(body.upgradeUrl).toContain('shieldcortex.ai');
+            expect(body.error).toBeTruthy();
+        });
+    });
+});
+//# sourceMappingURL=feature-gating.test.js.map

package/dist/license/__tests__/feature-gating.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feature-gating.test.js","sourceRoot":"","sources":["../../../src/license/__tests__/feature-gating.test.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE5E,oEAAoE;AACpE,2EAA2E;AAE3E,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,IAAI,WAA+B,CAAC;IAEpC,UAAU,CAAC,GAAG,EAAE;QACd,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,yBAAyB,GAAG,WAAW,CAAC;QACtD,CAAC;aAAM,CAAC;YACN,OAAO,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;QAC/C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;QACjC,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;YAC7D,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;YACzD,MAAM,GAAG,GAAG,IAAI,iBAAiB,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC;YAClE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;YAClD,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YAC3C,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;YACrD,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;YACzD,MAAM,GAAG,GAAG,IAAI,iBAAiB,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;YACzD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;YACpD,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;YACzD,MAAM,GAAG,GAAG,IAAI,iBAAiB,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAC;YAC/D,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;QAChC,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;YACjE,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;YACxD,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;YAC1D,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;YACtD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;YACtC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;YACvC,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,eAAe,EAAE,cAAc,CAAC,CAAC;YACrE,MAAM,UAAU,GAAG,WAAW,GAAG,gBAAgB,CAAC;YAClD,IAAI,MAAM,GAAG,KAAK,CAAC;YAEnB,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC5B,UAAU,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;gBACpC,MAAM,GAAG,IAAI,CAAC;YAChB,CAAC;YACD,iBAAiB,EAAE,CAAC;YAEpB,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG;oBAClB,2BAA2B;oBAC3B,2BAA2B;oBAC3B,uBAAuB;oBACvB,cAAc;oBACd,oBAAoB;iBACZ,CAAC;gBAEX,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;oBAClC,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAChD,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,IAAI,MAAM,EAAE,CAAC;oBACX,UAAU,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;gBACtC,CAAC;gBACD,iBAAiB,EAAE,CAAC;YACtB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;QAC9B,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;YAC5E,MAAM,EAAE,cAAc,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;YACzE,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;YAC1D,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;YACtD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;YACtC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;YACvC,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,eAAe,EAAE,cAAc,CAAC,CAAC;YACrE,MAAM,UAAU,GAAG,WAAW,GAAG,gBAAgB,CAAC;YAClD,IAAI,MAAM,GAAG,KAAK,CAAC;YAEnB,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC5B,UAAU,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;gBACpC,MAAM,GAAG,IAAI,CAAC;YAChB,CAAC;YACD,iBAAiB,EAAE,CAAC;YAEpB,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,uBAAuB,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;gBACjF,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;gBACxE,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,oBAAoB,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;gBAC9E,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,2BAA2B,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;gBACrF,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,2BAA2B,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;YACvF,CAAC;oBAAS,CAAC;gBACT,IAAI,MAAM,EAAE,CAAC;oBACX,UAAU,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;gBACtC,CAAC;gBACD,iBAAiB,EAAE,CAAC;YACtB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;YACzE,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;YACtD,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;YAC1D,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;YAC1C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;YACtC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;YACvC,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,eAAe,EAAE,cAAc,CAAC,CAAC;YAErE,2DAA2D;YAC3D,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC7B,wDAAwD;gBACxD,OAAO;YACT,CAAC;YAED,iBAAiB,EAAE,CAAC;YAEpB,IAAI,CAAC;gBACH,gDAAgD;gBAChD,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;gBACvD,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;gBAC9B,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;oBAC/D,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,uBAAuB,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;oBACpE,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;oBAC3D,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,oBAAoB,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;gBACnE,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,iBAAiB,EAAE,CAAC;YACtB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;QAC/B,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;YACxD,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;YACvD,MAAM,CAAC,eAAe,CAAC,2BAA2B,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjE,MAAM,CAAC,eAAe,CAAC,2BAA2B,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjE,MAAM,CAAC,eAAe,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC7D,MAAM,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpD,MAAM,CAAC,eAAe,CAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;YACpD,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;YACvD,MAAM,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACnD,MAAM,CAAC,eAAe,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;QAC5B,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;YACjF,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;YACpD,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;YAChC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;YAClD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;gBACzB,MAAM,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;gBACpC,MAAM,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC;gBACzC,MAAM,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;gBACpC,MAAM,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;gBACxC,MAAM,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC5C,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YAClD,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;QAC7C,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;YAC9E,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;YACzD,MAAM,GAAG,GAAG,IAAI,iBAAiB,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC;YAElE,oDAAoD;YACpD,MAAM,IAAI,GAAG;gBACX,KAAK,EAAE,0BAA0B;gBACjC,IAAI,EAAE,eAAwB;gBAC9B,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,YAAY,EAAE,GAAG,CAAC,YAAY;gBAC9B,UAAU,EAAE,iCAAiC;aAC9C,CAAC;YAEF,uFAAuF;YACvF,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YACxC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;YACnD,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACtC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;YACrD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,CAAC;QAClC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/license/cli.d.ts

@@ -0,0 +1,9 @@
+/**
+ * CLI commands for license management.
+ *
+ * shieldcortex license activate <key>
+ * shieldcortex license status
+ * shieldcortex license deactivate
+ */
+export declare function handleLicenseCommand(args: string[]): Promise<void>;
+//# sourceMappingURL=cli.d.ts.map

package/dist/license/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../src/license/cli.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAgIH,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAwBxE"}

package/dist/license/cli.js

@@ -0,0 +1,141 @@
+/**
+ * CLI commands for license management.
+ *
+ * shieldcortex license activate <key>
+ * shieldcortex license status
+ * shieldcortex license deactivate
+ */
+import { activateLicense, deactivateLicense, getLicense, getLicenseFile } from './store.js';
+import { listFeatures } from './gate.js';
+import { validateOnceNow } from './validate.js';
+const bold = '\x1b[1m';
+const reset = '\x1b[0m';
+const green = '\x1b[32m';
+const red = '\x1b[31m';
+const yellow = '\x1b[33m';
+const cyan = '\x1b[36m';
+const dim = '\x1b[2m';
+function tierBadge(tier) {
+    switch (tier) {
+        case 'enterprise': return `${bold}${cyan}Enterprise${reset}`;
+        case 'team': return `${bold}${cyan}Team${reset}`;
+        case 'pro': return `${bold}${green}Pro${reset}`;
+        default: return `${dim}Free${reset}`;
+    }
+}
+// ── Activate ─────────────────────────────────────────────
+async function handleActivate(key) {
+    if (!key) {
+        console.error('Usage: shieldcortex license activate <key>');
+        console.error('');
+        console.error('Get your licence key at https://shieldcortex.ai/pricing');
+        process.exit(1);
+    }
+    try {
+        const info = activateLicense(key);
+        console.log(`\n${bold}Licence Activated${reset}`);
+        console.log('═'.repeat(40));
+        console.log(`  Tier:    ${tierBadge(info.tier)}`);
+        console.log(`  Email:   ${info.email}`);
+        if (info.expiresAt) {
+            console.log(`  Expires: ${info.expiresAt.toLocaleDateString()} (${info.daysUntilExpiry} days)`);
+        }
+        // Run one-time online validation
+        console.log(`\n  ${dim}Validating online...${reset}`);
+        const status = await validateOnceNow();
+        if (status === 'valid') {
+            console.log(`  ${green}✓${reset} Licence confirmed active`);
+        }
+        else if (status === 'revoked') {
+            console.log(`  ${red}✗${reset} Licence has been revoked`);
+        }
+        else {
+            console.log(`  ${yellow}!${reset} Could not reach validation server (licence works offline)`);
+        }
+        // Show unlocked features
+        console.log(`\n${bold}Features:${reset}`);
+        const features = listFeatures();
+        for (const f of features) {
+            const icon = f.enabled ? `${green}[✓]${reset}` : `${dim}[ ]${reset}`;
+            const tierLabel = f.enabled ? '' : ` ${dim}(${f.requiredTier})${reset}`;
+            console.log(`  ${icon} ${f.description}${tierLabel}`);
+        }
+        console.log();
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        console.error(`\n${red}Activation failed:${reset} ${message}`);
+        process.exit(1);
+    }
+}
+// ── Status ───────────────────────────────────────────────
+function handleStatus() {
+    const info = getLicense();
+    const file = getLicenseFile();
+    console.log(`\n${bold}ShieldCortex Licence${reset}`);
+    console.log('═'.repeat(40));
+    console.log(`  Tier:       ${tierBadge(info.tier)}`);
+    if (info.tier === 'free') {
+        console.log(`\n  No licence activated.`);
+        console.log(`  Upgrade at ${cyan}https://shieldcortex.ai/pricing${reset}`);
+        console.log(`  Activate:  shieldcortex license activate <key>\n`);
+        return;
+    }
+    console.log(`  Email:      ${info.email}`);
+    if (info.expiresAt) {
+        const daysStr = info.daysUntilExpiry !== null && info.daysUntilExpiry > 0
+            ? `(${info.daysUntilExpiry} days remaining)`
+            : info.daysUntilExpiry !== null && info.daysUntilExpiry <= 0
+                ? `${red}(expired)${reset}`
+                : '';
+        console.log(`  Expires:    ${info.expiresAt.toLocaleDateString()} ${daysStr}`);
+    }
+    if (file?.lastValidatedAt) {
+        console.log(`  Validated:  ${new Date(file.lastValidatedAt).toLocaleString()}`);
+    }
+    if (file?.validationStatus) {
+        const statusColor = file.validationStatus === 'valid' ? green :
+            file.validationStatus === 'revoked' ? red : yellow;
+        console.log(`  Status:     ${statusColor}${file.validationStatus}${reset}`);
+    }
+    console.log(`\n${bold}Features:${reset}`);
+    const features = listFeatures();
+    for (const f of features) {
+        const icon = f.enabled ? `${green}[✓]${reset}` : `${dim}[ ]${reset}`;
+        const tierLabel = f.enabled ? '' : ` ${dim}(${f.requiredTier})${reset}`;
+        console.log(`  ${icon} ${f.description}${tierLabel}`);
+    }
+    console.log();
+}
+// ── Deactivate ───────────────────────────────────────────
+function handleDeactivate() {
+    deactivateLicense();
+    console.log(`\n${bold}Licence deactivated.${reset}`);
+    console.log(`All features reverted to Free tier.\n`);
+}
+// ── Router ───────────────────────────────────────────────
+export async function handleLicenseCommand(args) {
+    const subcommand = args[0];
+    switch (subcommand) {
+        case 'activate':
+            await handleActivate(args[1]);
+            break;
+        case 'status':
+            handleStatus();
+            break;
+        case 'deactivate':
+            handleDeactivate();
+            break;
+        default:
+            console.log(`\n${bold}ShieldCortex Licence${reset}`);
+            console.log('');
+            console.log('  shieldcortex license activate <key>  Activate a licence key');
+            console.log('  shieldcortex license status          Show current licence');
+            console.log('  shieldcortex license deactivate      Remove licence');
+            console.log('');
+            console.log(`  Get your key at ${cyan}https://shieldcortex.ai/pricing${reset}`);
+            console.log();
+            break;
+    }
+}
+//# sourceMappingURL=cli.js.map

package/dist/license/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../src/license/cli.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5F,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAGhD,MAAM,IAAI,GAAG,SAAS,CAAC;AACvB,MAAM,KAAK,GAAG,SAAS,CAAC;AACxB,MAAM,KAAK,GAAG,UAAU,CAAC;AACzB,MAAM,GAAG,GAAG,UAAU,CAAC;AACvB,MAAM,MAAM,GAAG,UAAU,CAAC;AAC1B,MAAM,IAAI,GAAG,UAAU,CAAC;AACxB,MAAM,GAAG,GAAG,SAAS,CAAC;AAEtB,SAAS,SAAS,CAAC,IAAiB;IAClC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,YAAY,CAAC,CAAC,OAAO,GAAG,IAAI,GAAG,IAAI,aAAa,KAAK,EAAE,CAAC;QAC7D,KAAK,MAAM,CAAC,CAAC,OAAO,GAAG,IAAI,GAAG,IAAI,OAAO,KAAK,EAAE,CAAC;QACjD,KAAK,KAAK,CAAC,CAAC,OAAO,GAAG,IAAI,GAAG,KAAK,MAAM,KAAK,EAAE,CAAC;QAChD,OAAO,CAAC,CAAC,OAAO,GAAG,GAAG,OAAO,KAAK,EAAE,CAAC;IACvC,CAAC;AACH,CAAC;AAED,4DAA4D;AAE5D,KAAK,UAAU,cAAc,CAAC,GAAuB;IACnD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAC5D,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAAC;QACzE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QAElC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,oBAAoB,KAAK,EAAE,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,cAAc,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACxC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,SAAS,CAAC,kBAAkB,EAAE,KAAK,IAAI,CAAC,eAAe,QAAQ,CAAC,CAAC;QAClG,CAAC;QAED,iCAAiC;QACjC,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,uBAAuB,KAAK,EAAE,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,MAAM,eAAe,EAAE,CAAC;QACvC,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,IAAI,KAAK,2BAA2B,CAAC,CAAC;QAC9D,CAAC;aAAM,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,IAAI,KAAK,2BAA2B,CAAC,CAAC;QAC5D,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,IAAI,KAAK,4DAA4D,CAAC,CAAC;QAChG,CAAC;QAED,yBAAyB;QACzB,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,YAAY,KAAK,EAAE,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;QAChC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,KAAK,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,MAAM,KAAK,EAAE,CAAC;YACrE,MAAM,SAAS,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,YAAY,IAAI,KAAK,EAAE,CAAC;YACxE,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,WAAW,GAAG,SAAS,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,qBAAqB,KAAK,IAAI,OAAO,EAAE,CAAC,CAAC;QAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,4DAA4D;AAE5D,SAAS,YAAY;IACnB,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;IAE9B,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,uBAAuB,KAAK,EAAE,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,iBAAiB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAErD,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,kCAAkC,KAAK,EAAE,CAAC,CAAC;QAC3E,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;QAClE,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAC3C,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,KAAK,IAAI,IAAI,IAAI,CAAC,eAAe,GAAG,CAAC;YACvE,CAAC,CAAC,IAAI,IAAI,CAAC,eAAe,kBAAkB;YAC5C,CAAC,CAAC,IAAI,CAAC,eAAe,KAAK,IAAI,IAAI,IAAI,CAAC,eAAe,IAAI,CAAC;gBAC1D,CAAC,CAAC,GAAG,GAAG,YAAY,KAAK,EAAE;gBAC3B,CAAC,CAAC,EAAE,CAAC;QACT,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,CAAC,SAAS,CAAC,kBAAkB,EAAE,IAAI,OAAO,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,IAAI,IAAI,EAAE,eAAe,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,IAAI,EAAE,gBAAgB,EAAE,CAAC;QAC3B,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;QACvE,OAAO,CAAC,GAAG,CAAC,iBAAiB,WAAW,GAAG,IAAI,CAAC,gBAAgB,GAAG,KAAK,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,YAAY,KAAK,EAAE,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,KAAK,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,MAAM,KAAK,EAAE,CAAC;QACrE,MAAM,SAAS,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,YAAY,IAAI,KAAK,EAAE,CAAC;QACxE,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,WAAW,GAAG,SAAS,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,CAAC,GAAG,EAAE,CAAC;AAChB,CAAC;AAED,4DAA4D;AAE5D,SAAS,gBAAgB;IACvB,iBAAiB,EAAE,CAAC;IACpB,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,uBAAuB,KAAK,EAAE,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;AACvD,CAAC;AAED,4DAA4D;AAE5D,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAAc;IACvD,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAE3B,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,UAAU;YACb,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9B,MAAM;QACR,KAAK,QAAQ;YACX,YAAY,EAAE,CAAC;YACf,MAAM;QACR,KAAK,YAAY;YACf,gBAAgB,EAAE,CAAC;YACnB,MAAM;QACR;YACE,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,uBAAuB,KAAK,EAAE,CAAC,CAAC;YACrD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC;YAC7E,OAAO,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC;YAC3E,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;YACrE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,kCAAkC,KAAK,EAAE,CAAC,CAAC;YAChF,OAAO,CAAC,GAAG,EAAE,CAAC;YACd,MAAM;IACV,CAAC;AACH,CAAC"}

package/dist/license/gate.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Feature gating — the central guard for Pro/Team features.
+ *
+ * Usage:
+ *   requireFeature('custom_injection_patterns');  // throws FeatureGatedError if not Pro+
+ *   isFeatureEnabled('cloud_sync');               // returns boolean (soft check)
+ */
+import { type LicenseTier } from './keys.js';
+export type GatedFeature = 'custom_injection_patterns' | 'custom_iron_dome_policies' | 'custom_firewall_rules' | 'audit_export' | 'skill_scanner_deep' | 'cloud_sync' | 'team_management' | 'shared_patterns';
+export declare class FeatureGatedError extends Error {
+    feature: GatedFeature;
+    requiredTier: LicenseTier;
+    constructor(feature: GatedFeature, requiredTier: LicenseTier);
+}
+/**
+ * Check if a feature is enabled under the current licence tier.
+ * Use for soft checks (e.g. hiding UI elements, silent returns).
+ */
+export declare function isFeatureEnabled(feature: GatedFeature): boolean;
+/**
+ * Require a feature — throws FeatureGatedError if the current licence
+ * doesn't include it. Use at the entry point of gated features.
+ */
+export declare function requireFeature(feature: GatedFeature): void;
+/**
+ * Get the minimum tier required for a feature.
+ */
+export declare function getRequiredTier(feature: GatedFeature): LicenseTier;
+/**
+ * List all features with their required tier and current availability.
+ */
+export declare function listFeatures(): Array<{
+    feature: GatedFeature;
+    requiredTier: LicenseTier;
+    enabled: boolean;
+    description: string;
+}>;
+//# sourceMappingURL=gate.d.ts.map

package/dist/license/gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate.d.ts","sourceRoot":"","sources":["../../src/license/gate.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAa,KAAK,WAAW,EAAE,MAAM,WAAW,CAAC;AAIxD,MAAM,MAAM,YAAY,GACpB,2BAA2B,GAC3B,2BAA2B,GAC3B,uBAAuB,GACvB,cAAc,GACd,oBAAoB,GACpB,YAAY,GACZ,iBAAiB,GACjB,iBAAiB,CAAC;AA0BtB,qBAAa,iBAAkB,SAAQ,KAAK;IAEjC,OAAO,EAAE,YAAY;IACrB,YAAY,EAAE,WAAW;gBADzB,OAAO,EAAE,YAAY,EACrB,YAAY,EAAE,WAAW;CAYnC;AAID;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAI/D;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,YAAY,GAAG,IAAI,CAI1D;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,YAAY,GAAG,WAAW,CAElE;AAED;;GAEG;AACH,wBAAgB,YAAY,IAAI,KAAK,CAAC;IACpC,OAAO,EAAE,YAAY,CAAC;IACtB,YAAY,EAAE,WAAW,CAAC;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC,CAUD"}

package/dist/license/gate.js

@@ -0,0 +1,84 @@
+/**
+ * Feature gating — the central guard for Pro/Team features.
+ *
+ * Usage:
+ *   requireFeature('custom_injection_patterns');  // throws FeatureGatedError if not Pro+
+ *   isFeatureEnabled('cloud_sync');               // returns boolean (soft check)
+ */
+import { getLicenseTier } from './store.js';
+import { TIER_RANK } from './keys.js';
+const FEATURE_TIERS = {
+    custom_injection_patterns: 'pro',
+    custom_iron_dome_policies: 'pro',
+    custom_firewall_rules: 'pro',
+    audit_export: 'pro',
+    skill_scanner_deep: 'pro',
+    cloud_sync: 'team',
+    team_management: 'team',
+    shared_patterns: 'team',
+};
+const FEATURE_DESCRIPTIONS = {
+    custom_injection_patterns: 'Define up to 50 custom regex patterns for detecting domain-specific threats.',
+    custom_iron_dome_policies: 'Create custom Iron Dome policies with tailored action gates and trust levels.',
+    custom_firewall_rules: 'Add custom firewall rules to block or allow specific content patterns.',
+    audit_export: 'Export your full audit trail as JSON or CSV for compliance reporting.',
+    skill_scanner_deep: 'Deep skill scanning with multi-file analysis and semantic intent detection.',
+    cloud_sync: 'Sync audit data across devices for centralised team visibility.',
+    team_management: 'Manage team members, invites, and shared security policies.',
+    shared_patterns: 'Share custom injection patterns and policies across your team.',
+};
+// ── Error class ──────────────────────────────────────────
+export class FeatureGatedError extends Error {
+    feature;
+    requiredTier;
+    constructor(feature, requiredTier) {
+        const tierLabel = requiredTier.charAt(0).toUpperCase() + requiredTier.slice(1);
+        const desc = FEATURE_DESCRIPTIONS[feature];
+        super(`This feature requires a ${tierLabel} licence.\n\n` +
+            `${desc}\n\n` +
+            `  Upgrade:  https://shieldcortex.ai/pricing\n` +
+            `  Activate: shieldcortex license activate <key>`);
+        this.feature = feature;
+        this.requiredTier = requiredTier;
+        this.name = 'FeatureGatedError';
+    }
+}
+// ── Guards ────────────────────────────────────────────────
+/**
+ * Check if a feature is enabled under the current licence tier.
+ * Use for soft checks (e.g. hiding UI elements, silent returns).
+ */
+export function isFeatureEnabled(feature) {
+    const requiredTier = FEATURE_TIERS[feature];
+    const currentTier = getLicenseTier();
+    return TIER_RANK[currentTier] >= TIER_RANK[requiredTier];
+}
+/**
+ * Require a feature — throws FeatureGatedError if the current licence
+ * doesn't include it. Use at the entry point of gated features.
+ */
+export function requireFeature(feature) {
+    if (!isFeatureEnabled(feature)) {
+        throw new FeatureGatedError(feature, FEATURE_TIERS[feature]);
+    }
+}
+/**
+ * Get the minimum tier required for a feature.
+ */
+export function getRequiredTier(feature) {
+    return FEATURE_TIERS[feature];
+}
+/**
+ * List all features with their required tier and current availability.
+ */
+export function listFeatures() {
+    const currentTier = getLicenseTier();
+    const currentRank = TIER_RANK[currentTier];
+    return Object.keys(FEATURE_TIERS).map((feature) => ({
+        feature,
+        requiredTier: FEATURE_TIERS[feature],
+        enabled: currentRank >= TIER_RANK[FEATURE_TIERS[feature]],
+        description: FEATURE_DESCRIPTIONS[feature],
+    }));
+}
+//# sourceMappingURL=gate.js.map

package/dist/license/gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate.js","sourceRoot":"","sources":["../../src/license/gate.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAoB,MAAM,WAAW,CAAC;AAcxD,MAAM,aAAa,GAAsC;IACvD,yBAAyB,EAAE,KAAK;IAChC,yBAAyB,EAAE,KAAK;IAChC,qBAAqB,EAAE,KAAK;IAC5B,YAAY,EAAE,KAAK;IACnB,kBAAkB,EAAE,KAAK;IACzB,UAAU,EAAE,MAAM;IAClB,eAAe,EAAE,MAAM;IACvB,eAAe,EAAE,MAAM;CACxB,CAAC;AAEF,MAAM,oBAAoB,GAAiC;IACzD,yBAAyB,EAAE,8EAA8E;IACzG,yBAAyB,EAAE,+EAA+E;IAC1G,qBAAqB,EAAE,wEAAwE;IAC/F,YAAY,EAAE,uEAAuE;IACrF,kBAAkB,EAAE,6EAA6E;IACjG,UAAU,EAAE,iEAAiE;IAC7E,eAAe,EAAE,6DAA6D;IAC9E,eAAe,EAAE,gEAAgE;CAClF,CAAC;AAEF,4DAA4D;AAE5D,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAEjC;IACA;IAFT,YACS,OAAqB,EACrB,YAAyB;QAEhC,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/E,MAAM,IAAI,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAC3C,KAAK,CACH,2BAA2B,SAAS,eAAe;YACnD,GAAG,IAAI,MAAM;YACb,+CAA+C;YAC/C,iDAAiD,CAClD,CAAC;QAVK,YAAO,GAAP,OAAO,CAAc;QACrB,iBAAY,GAAZ,YAAY,CAAa;QAUhC,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED,6DAA6D;AAE7D;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAqB;IACpD,MAAM,YAAY,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IACrC,OAAO,SAAS,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC,YAAY,CAAC,CAAC;AAC3D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,OAAqB;IAClD,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,iBAAiB,CAAC,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,OAAqB;IACnD,OAAO,aAAa,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY;IAM1B,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IACrC,MAAM,WAAW,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;IAE3C,OAAQ,MAAM,CAAC,IAAI,CAAC,aAAa,CAAoB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACtE,OAAO;QACP,YAAY,EAAE,aAAa,CAAC,OAAO,CAAC;QACpC,OAAO,EAAE,WAAW,IAAI,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACzD,WAAW,EAAE,oBAAoB,CAAC,OAAO,CAAC;KAC3C,CAAC,CAAC,CAAC;AACN,CAAC"}

package/dist/license/index.d.ts

@@ -0,0 +1,13 @@
+/**
+ * License module — re-exports for public API and internal use.
+ */
+export { getLicense, getLicenseTier, getLicenseFile, clearLicenseCache } from './store.js';
+export { verifyLicenseKey, parseLicensePayload } from './verify.js';
+export { isFeatureEnabled, requireFeature, getRequiredTier, listFeatures, FeatureGatedError, } from './gate.js';
+export { scheduleOnlineValidation } from './validate.js';
+export type { LicenseTier, LicenseInfo, LicensePayload, LicenseFile } from './keys.js';
+export type { GatedFeature } from './gate.js';
+export type { FeatureGatedResponse } from './types.js';
+export { TIER_RANK, KEY_PREFIXES, EXPIRY_GRACE_DAYS } from './keys.js';
+export { handleLicenseCommand } from './cli.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/license/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/license/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC3F,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AACpE,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,YAAY,EACZ,iBAAiB,GAClB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAGzD,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACvF,YAAY,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAC9C,YAAY,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAGvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAC"}

package/dist/license/index.js

@@ -0,0 +1,12 @@
+/**
+ * License module — re-exports for public API and internal use.
+ */
+// ── Public API (exported from lib.ts) ────────────────────
+export { getLicense, getLicenseTier, getLicenseFile, clearLicenseCache } from './store.js';
+export { verifyLicenseKey, parseLicensePayload } from './verify.js';
+export { isFeatureEnabled, requireFeature, getRequiredTier, listFeatures, FeatureGatedError, } from './gate.js';
+export { scheduleOnlineValidation } from './validate.js';
+export { TIER_RANK, KEY_PREFIXES, EXPIRY_GRACE_DAYS } from './keys.js';
+// ── CLI (imported lazily from src/index.ts) ──────────────
+export { handleLicenseCommand } from './cli.js';
+//# sourceMappingURL=index.js.map

package/dist/license/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/license/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,4DAA4D;AAC5D,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC3F,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AACpE,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,YAAY,EACZ,iBAAiB,GAClB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAMzD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAEvE,4DAA4D;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAC"}

package/dist/license/keys.d.ts

@@ -0,0 +1,50 @@
+/**
+ * License key types, constants, and the Ed25519 public key used to verify licence keys offline.
+ *
+ * The private key lives ONLY in the SaaS API (Fly.io secrets).
+ * This public key can verify signatures but cannot create them.
+ */
+/**
+ * Ed25519 public key in DER (SPKI) hex format.
+ * Generated once; the matching private key is stored in Fly.io as LICENSE_SIGNING_KEY.
+ */
+export declare const LICENSE_PUBLIC_KEY_HEX = "302a300506032b65700321005a6eff26e79a9010983cdb86dab56f26151110a870100608163441d7d71d7add";
+export type LicenseTier = 'free' | 'pro' | 'team' | 'enterprise';
+/** The signed payload embedded inside a license key. */
+export interface LicensePayload {
+    tier: Exclude<LicenseTier, 'free'>;
+    teamId: number;
+    email: string;
+    /** Expiry — Unix seconds */
+    exp: number;
+    /** Issued-at — Unix seconds */
+    iat: number;
+    /** Stripe subscription ID — used for online revocation checks */
+    sid: string;
+}
+/** The result of verifying a license key. */
+export interface LicenseInfo {
+    valid: boolean;
+    tier: LicenseTier;
+    email: string | null;
+    expiresAt: Date | null;
+    daysUntilExpiry: number | null;
+    teamId: number | null;
+    subscriptionId: string | null;
+}
+/** Stored in ~/.shieldcortex/license.json */
+export interface LicenseFile {
+    key: string;
+    activatedAt: string;
+    lastValidatedAt: string | null;
+    validationStatus: 'valid' | 'expired' | 'revoked' | 'unvalidated';
+}
+/** Key prefix convention: sc_{tier}_ */
+export declare const KEY_PREFIXES: Record<Exclude<LicenseTier, 'free'>, string>;
+/** Tier rank for comparison (higher = more permissive) */
+export declare const TIER_RANK: Record<LicenseTier, number>;
+/** Grace period after expiry (days) — covers Stripe dunning retries */
+export declare const EXPIRY_GRACE_DAYS = 7;
+/** How often to run online validation (ms) */
+export declare const ONLINE_VALIDATION_INTERVAL_MS: number;
+//# sourceMappingURL=keys.d.ts.map

package/dist/license/keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../../src/license/keys.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;GAGG;AACH,eAAO,MAAM,sBAAsB,6FACyD,CAAC;AAI7F,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,YAAY,CAAC;AAEjE,wDAAwD;AACxD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,4BAA4B;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,+BAA+B;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,iEAAiE;IACjE,GAAG,EAAE,MAAM,CAAC;CACb;AAED,6CAA6C;AAC7C,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,6CAA6C;AAC7C,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,gBAAgB,EAAE,OAAO,GAAG,SAAS,GAAG,SAAS,GAAG,aAAa,CAAC;CACnE;AAID,wCAAwC;AACxC,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,MAAM,CAIrE,CAAC;AAEF,0DAA0D;AAC1D,eAAO,MAAM,SAAS,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAKjD,CAAC;AAEF,uEAAuE;AACvE,eAAO,MAAM,iBAAiB,IAAI,CAAC;AAEnC,8CAA8C;AAC9C,eAAO,MAAM,6BAA6B,QAAsB,CAAC"}

package/dist/license/keys.js

@@ -0,0 +1,30 @@
+/**
+ * License key types, constants, and the Ed25519 public key used to verify licence keys offline.
+ *
+ * The private key lives ONLY in the SaaS API (Fly.io secrets).
+ * This public key can verify signatures but cannot create them.
+ */
+/**
+ * Ed25519 public key in DER (SPKI) hex format.
+ * Generated once; the matching private key is stored in Fly.io as LICENSE_SIGNING_KEY.
+ */
+export const LICENSE_PUBLIC_KEY_HEX = '302a300506032b65700321005a6eff26e79a9010983cdb86dab56f26151110a870100608163441d7d71d7add';
+// ── Constants ────────────────────────────────────────────
+/** Key prefix convention: sc_{tier}_ */
+export const KEY_PREFIXES = {
+    pro: 'sc_pro_',
+    team: 'sc_team_',
+    enterprise: 'sc_ent_',
+};
+/** Tier rank for comparison (higher = more permissive) */
+export const TIER_RANK = {
+    free: 0,
+    pro: 1,
+    team: 2,
+    enterprise: 3,
+};
+/** Grace period after expiry (days) — covers Stripe dunning retries */
+export const EXPIRY_GRACE_DAYS = 7;
+/** How often to run online validation (ms) */
+export const ONLINE_VALIDATION_INTERVAL_MS = 24 * 60 * 60 * 1000; // 24 hours
+//# sourceMappingURL=keys.js.map

package/dist/license/keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../src/license/keys.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GACjC,0FAA0F,CAAC;AAsC7F,4DAA4D;AAE5D,wCAAwC;AACxC,MAAM,CAAC,MAAM,YAAY,GAAiD;IACxE,GAAG,EAAE,SAAS;IACd,IAAI,EAAE,UAAU;IAChB,UAAU,EAAE,SAAS;CACtB,CAAC;AAEF,0DAA0D;AAC1D,MAAM,CAAC,MAAM,SAAS,GAAgC;IACpD,IAAI,EAAE,CAAC;IACP,GAAG,EAAE,CAAC;IACN,IAAI,EAAE,CAAC;IACP,UAAU,EAAE,CAAC;CACd,CAAC;AAEF,uEAAuE;AACvE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAEnC,8CAA8C;AAC9C,MAAM,CAAC,MAAM,6BAA6B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW"}