vibecheck-mcp-server 3.1.9 → 3.2.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vibecheck-mcp-server",
-  "version": "3.1.9",
+  "version": "3.2.0",
   "description": "Professional MCP server for vibecheck - Intelligent development environment vibechecks",
   "type": "module",
   "main": "index.js",

package/tier-auth.js

@@ -169,8 +169,8 @@ async function loadUserConfig() {
  * Determine tier from API key
  * Matches CLI entitlements-v2.js logic
  */
-function getTierFromApiKey(apiKey) {
-  if (!apiKey) return 'free';
+async function getTierFromApiKey(apiKey) {
+  if (!apiKey) return null; // No API key = no access
   
   // Check API key prefix patterns (matches CLI)
   if (apiKey.startsWith('gr_starter_')) return 'starter';
@@ -178,16 +178,43 @@ function getTierFromApiKey(apiKey) {
   if (apiKey.startsWith('gr_compliance_') || apiKey.startsWith('gr_ent_')) return 'compliance';
   if (apiKey.startsWith('gr_free_')) return 'free';
   
-  // Try to fetch from API (same as CLI)
-  // For now, default to free - API lookup would happen in production
-  return 'free'; // default for unknown keys
-}
+  // Try to validate with API
+  try {
+    const response = await fetch('https://api.vibecheckai.dev/whoami', {
+      headers: {
+        'Authorization': `Bearer ${apiKey}`,
+        'Content-Type': 'application/json',
+      },
+    });
+    
+    if (!response.ok) {
+      return null; // Invalid API key
+    }
+    
+    const data = await response.json();
+    
+    // Map API response to tier
+    switch (data.plan?.toLowerCase()) {
+      case 'starter':
+        return 'starter';
+      case 'pro':
+        return 'pro';
+      case 'compliance':
+        return 'compliance';
+      default:
+        return 'free';
+    }
+  } catch (error) {
+    console.error('API validation failed:', error);
+    return null; // On error, deny access
+  }
+} // default for unknown keys
 
 /**
  * Check if user has access to a specific feature
  * Matches CLI entitlements-v2.js logic
  */
-export async function checkFeatureAccess(featureName, providedApiKey = null) {
+export async function getFeatureAccessStatus(featureName, providedApiKey = null) {
   // Try to load user config
   const userConfig = await loadUserConfig();
   const apiKey = providedApiKey || userConfig?.apiKey;
@@ -195,13 +222,22 @@ export async function checkFeatureAccess(featureName, providedApiKey = null) {
   if (!apiKey) {
     return {
       hasAccess: false,
-      tier: 'free',
-      reason: 'No API key provided. Run: vibecheck auth --key YOUR_API_KEY',
+      tier: null,
+      reason: 'No API key provided. Please set your API key with `vibecheck login`.',
       upgradeUrl: 'https://vibecheckai.dev'
     };
   }
   
-  const currentTier = getTierFromApiKey(apiKey);
+  const currentTier = await getTierFromApiKey(apiKey);
+  
+  if (!currentTier) {
+    return {
+      hasAccess: false,
+      tier: null,
+      reason: 'Invalid API key. Please check your API key or get a new one at https://vibecheckai.dev',
+      upgradeUrl: 'https://vibecheckai.dev'
+    };
+  }
   const currentTierConfig = TIERS[currentTier];
   
   // Find which tier has this feature
@@ -273,11 +309,30 @@ export function withTierCheck(featureName, handler) {
  * Check if user has access to a specific MCP tool
  * MCP tools have specific tier requirements separate from CLI features
  */
-export async function checkMcpToolAccess(toolName, providedApiKey = null) {
+export async function getMcpToolAccess(toolName, providedApiKey = null) {
   const userConfig = await loadUserConfig();
   const apiKey = providedApiKey || userConfig?.apiKey;
   
-  const currentTier = getTierFromApiKey(apiKey);
+  if (!apiKey) {
+    return {
+      hasAccess: false,
+      tier: null,
+      reason: 'No API key provided. Please set your API key with `vibecheck login`.',
+      upgradeUrl: 'https://vibecheckai.dev'
+    };
+  }
+  
+  const currentTier = await getTierFromApiKey(apiKey);
+  
+  if (!currentTier) {
+    return {
+      hasAccess: false,
+      tier: null,
+      reason: 'Invalid API key. Please check your API key or get a new one at https://vibecheckai.dev',
+      upgradeUrl: 'https://vibecheckai.dev'
+    };
+  }
+  
   const currentTierConfig = TIERS[currentTier];
   
   // Check if tool is allowed for current tier