Merge feat/free-tier-gate-and-badge into main

Free tier for public repos:
- Workspace tier + repository_usage migration
- WorkspaceTier, oss_free kind, RepositoryUsageRecord types
- Repository usage tracking in DB layer
- Installation webhook, visibility gate, rate limiting
- "Reviewed by CodeVetter" badge footer on free-tier reviews
- Thread reviewTier through review worker
- Switch DB from Postgres to D1/Cloudflare
- Remove dead tests, add free tier strategy doc

Author: sarthakagrawal927

apps/desktop/src-tauri/gen/schemas/capabilities.json

@@ -1 +1 @@
-{"default":{"identifier":"default","description":"Default permissions for the main window","local":true,"windows":["main"],"permissions":["core:default","core:event:default","core:event:allow-listen","core:event:allow-emit","core:window:default","core:window:allow-close","core:window:allow-set-size","core:window:allow-set-title","dialog:default","dialog:allow-open","notification:default","notification:allow-is-permission-granted","notification:allow-request-permission","notification:allow-notify","process:allow-restart","updater:default","updater:allow-check","updater:allow-download-and-install"]}}
+{"default":{"identifier":"default","description":"Default permissions for the main window","local":true,"windows":["main"],"permissions":["core:default","core:event:default","core:event:allow-listen","core:event:allow-emit","core:window:default","core:window:allow-close","core:window:allow-set-size","core:window:allow-set-title","dialog:default","dialog:allow-open","notification:default","notification:allow-is-permission-granted","notification:allow-request-permission","notification:allow-notify","process:allow-restart","process:allow-exit"]}}

packages/db/migrations/0003_free_tier.sql

@@ -0,0 +1,15 @@
+-- Free tier support: workspace tiers and per-repo usage tracking
+
+ALTER TABLE workspaces ADD COLUMN tier TEXT NOT NULL DEFAULT 'free';
+
+-- Track monthly review counts per repository for rate limiting
+CREATE TABLE IF NOT EXISTS repository_usage (
+  id TEXT PRIMARY KEY,
+  repository_id TEXT NOT NULL REFERENCES repositories(id),
+  period TEXT NOT NULL,
+  review_count INTEGER NOT NULL DEFAULT 0,
+  last_review_at TEXT,
+  UNIQUE (repository_id, period)
+);
+
+CREATE INDEX IF NOT EXISTS idx_repository_usage_repo ON repository_usage(repository_id);

packages/db/package.json

@@ -9,11 +9,10 @@
     "test": "node --test --import tsx src/**/*.test.ts"
   },
   "devDependencies": {
-    "@types/pg": "^8.15.6",
+    "@cloudflare/workers-types": "^4.20260329.1",
     "tsx": "^4.21.0"
   },
   "dependencies": {
-    "@code-reviewer/shared-types": "file:../shared-types",
-    "pg": "^8.16.3"
+    "@code-reviewer/shared-types": "file:../shared-types"
   }
 }

packages/db/src/controlPlane.ts

@@ -7,6 +7,7 @@ import {
   PullRequestRecord,
   RepositoryConnection,
   RepositoryRuleOverride,
+  RepositoryUsageRecord,
   ReviewFindingRecord,
   ReviewRunRecord,
   SemanticChunkRecord,
@@ -253,6 +254,11 @@ export interface ControlPlaneDatabase {
   listSemanticChunks(repositoryId: string, sourceRef: string): Promise<SemanticChunkRecord[]>;
   deleteIndexedData(repositoryId: string, sourceRef?: string): Promise<{ filesDeleted: number; chunksDeleted: number }>;
   getIndexingStats(repositoryId: string): Promise<{ totalFiles: number; totalChunks: number; languages: Record<string, number>; lastIndexedAt?: string }>;
+
+  getRepositoryUsage(repositoryId: string, period: string): Promise<RepositoryUsageRecord | undefined>;
+  incrementRepositoryUsage(repositoryId: string, period: string): Promise<RepositoryUsageRecord>;
+
+  getWorkspaceForRepository(repositoryId: string): Promise<WorkspaceRecord | undefined>;
 }
 
 export class InMemoryControlPlaneDatabase implements ControlPlaneDatabase {
@@ -274,6 +280,7 @@ export class InMemoryControlPlaneDatabase implements ControlPlaneDatabase {
   private workspaceSecrets = new Map<string, WorkspaceSecretRecord>();
   private indexedFiles = new Map<string, IndexedFileRecord>();
   private semanticChunks = new Map<string, SemanticChunkRecord>();
+  private repositoryUsage = new Map<string, RepositoryUsageRecord>();
 
   async upsertUserFromGithub(input: UpsertGithubUserInput): Promise<UserRecord> {
     const existing = Array.from(this.users.values()).find(user => user.githubUserId === input.githubUserId);
@@ -375,6 +382,7 @@ export class InMemoryControlPlaneDatabase implements ControlPlaneDatabase {
       slug: input.slug,
       name: input.name,
       kind: input.kind,
+      tier: input.kind === 'oss_free' ? 'free' : 'free',
       githubAccountType: input.githubAccountType,
       githubAccountId: input.githubAccountId,
       createdByUserId: input.createdByUserId,
@@ -966,4 +974,30 @@ export class InMemoryControlPlaneDatabase implements ControlPlaneDatabase {
 
     return { totalFiles: files.length, totalChunks: chunks.length, languages, lastIndexedAt };
   }
+
+  async getRepositoryUsage(repositoryId: string, period: string): Promise<RepositoryUsageRecord | undefined> {
+    const key = `${repositoryId}:${period}`;
+    const record = this.repositoryUsage.get(key);
+    return record ? clone(record) : undefined;
+  }
+
+  async incrementRepositoryUsage(repositoryId: string, period: string): Promise<RepositoryUsageRecord> {
+    const key = `${repositoryId}:${period}`;
+    const existing = this.repositoryUsage.get(key);
+    const record: RepositoryUsageRecord = {
+      id: existing?.id || id('ru'),
+      repositoryId,
+      period,
+      reviewCount: (existing?.reviewCount || 0) + 1,
+      lastReviewAt: nowIso()
+    };
+    this.repositoryUsage.set(key, record);
+    return clone(record);
+  }
+
+  async getWorkspaceForRepository(repositoryId: string): Promise<WorkspaceRecord | undefined> {
+    const repo = this.repositories.get(repositoryId);
+    if (!repo) return undefined;
+    return this.getWorkspaceById(repo.workspaceId);
+  }
 }

packages/db/src/d1ControlPlane.ts

@@ -7,6 +7,7 @@ import {
   PullRequestRecord,
   RepositoryConnection,
   RepositoryRuleOverride,
+  RepositoryUsageRecord,
   ReviewFindingRecord,
   ReviewRunRecord,
   SemanticChunkRecord,
@@ -193,6 +194,7 @@ function mapWorkspace(row: Row): WorkspaceRecord {
     slug: String(row.slug),
     name: String(row.name),
     kind: row.kind as WorkspaceRecord['kind'],
+    tier: (row.tier as WorkspaceRecord['tier']) || 'free',
     githubAccountType: (row.github_account_type as WorkspaceRecord['githubAccountType']) || undefined,
     githubAccountId: toOptionalString(row.github_account_id),
     createdByUserId: String(row.created_by_user_id),
@@ -1494,6 +1496,51 @@ export class D1ControlPlaneDatabase implements ControlPlaneDatabase {
       lastIndexedAt: lastRow?.last_indexed as string | undefined
     };
   }
+  async getRepositoryUsage(repositoryId: string, period: string): Promise<RepositoryUsageRecord | undefined> {
+    const row = await this.queryOne<Row>(
+      `SELECT * FROM repository_usage WHERE repository_id = ?1 AND period = ?2 LIMIT 1`,
+      [repositoryId, period]
+    );
+    if (!row) return undefined;
+    return {
+      id: String(row.id),
+      repositoryId: String(row.repository_id),
+      period: String(row.period),
+      reviewCount: toNumber(row.review_count),
+      lastReviewAt: toOptionalString(row.last_review_at)
+    };
+  }
+
+  async incrementRepositoryUsage(repositoryId: string, period: string): Promise<RepositoryUsageRecord> {
+    const row = await this.queryOne<Row>(
+      `INSERT INTO repository_usage (id, repository_id, period, review_count, last_review_at)
+       VALUES (?1, ?2, ?3, 1, ?4)
+       ON CONFLICT (repository_id, period)
+       DO UPDATE SET review_count = review_count + 1, last_review_at = ?4
+       RETURNING *`,
+      [id('ru'), repositoryId, period, nowIso()]
+    );
+    if (!row) {
+      throw new Error('Failed to increment repository usage.');
+    }
+    return {
+      id: String(row.id),
+      repositoryId: String(row.repository_id),
+      period: String(row.period),
+      reviewCount: toNumber(row.review_count),
+      lastReviewAt: toOptionalString(row.last_review_at)
+    };
+  }
+
+  async getWorkspaceForRepository(repositoryId: string): Promise<WorkspaceRecord | undefined> {
+    const row = await this.queryOne<Row>(
+      `SELECT w.* FROM workspaces w
+       JOIN repositories r ON r.workspace_id = w.id
+       WHERE r.id = ?1 LIMIT 1`,
+      [repositoryId]
+    );
+    return row ? mapWorkspace(row) : undefined;
+  }
 }
 
 // ── Factory ────────────────────────────────────────────────────────────────────

packages/db/src/index.ts

@@ -1,5 +1,5 @@
 export * from './controlPlane';
+export * from './d1ControlPlane';
 export * from './migrations';
-export * from './postgresControlPlane';
 export * from './queryHelpers';
 export * from './schema';

packages/db/src/migrations.ts

@@ -7,5 +7,9 @@ export const CONTROL_PLANE_MIGRATIONS: MigrationDefinition[] = [
   {
     id: '0001_init',
     path: 'migrations/0001_init.sql'
+  },
+  {
+    id: '0003_free_tier',
+    path: 'migrations/0003_free_tier.sql'
   }
 ];

packages/db/src/schema.ts

@@ -15,7 +15,8 @@ export const TABLES = {
   indexingRuns: 'indexing_runs',
   webhookEvents: 'webhook_events',
   auditLogs: 'audit_logs',
-  workspaceSecrets: 'workspace_secrets'
+  workspaceSecrets: 'workspace_secrets',
+  repositoryUsage: 'repository_usage'
 } as const;
 
 export type TableName = (typeof TABLES)[keyof typeof TABLES];

packages/db/tsconfig.json

@@ -8,7 +8,9 @@
     "strict": true,
     "esModuleInterop": true,
     "skipLibCheck": true,
-    "forceConsistentCasingInFileNames": true
+    "forceConsistentCasingInFileNames": true,
+    "types": ["@cloudflare/workers-types"]
   },
-  "include": ["src/**/*"]
+  "include": ["src/**/*"],
+  "exclude": ["src/**/*.test.ts"]
 }

packages/review-core/src/formatting.ts

@@ -1,4 +1,4 @@
-import { ReviewAction, ReviewFindingRecord } from '@code-reviewer/shared-types';
+import { ReviewAction, ReviewFindingRecord, WorkspaceTier } from '@code-reviewer/shared-types';
 import { computeFindingFingerprint } from './scoring';
 
 type StructuredReviewData = {
@@ -27,7 +27,8 @@ export function buildOverallBody(
   score: number,
   reviewRunId: string | undefined,
   action: ReviewAction,
-  resolvedFindings?: ReviewFindingRecord[]
+  resolvedFindings?: ReviewFindingRecord[],
+  reviewTier?: WorkspaceTier
 ): string {
   const counts: Record<string, number> = {
     critical: 0,
@@ -53,7 +54,17 @@ export function buildOverallBody(
     }
   }
 
-  body += `\n\n*Automated review by CodeVetter*`;
+  // Footer: badge + CTA for free tier, clean for paid
+  const tier = reviewTier || 'free';
+  if (tier === 'free') {
+    const scoreColor = score >= 80 ? 'brightgreen' : score >= 60 ? 'yellow' : 'red';
+    body += `\n\n---\n`;
+    body += `\n![Score](https://img.shields.io/badge/score-${score.toFixed(0)}%2F100-${scoreColor}) `;
+    body += `**[Reviewed by CodeVetter](https://codevetter.com)**\n\n`;
+    body += `*Free automated PR review for open source — [get CodeVetter for your repo](https://codevetter.com/install)*`;
+  } else {
+    body += `\n\n*Automated review by CodeVetter*`;
+  }
 
   // Embed structured data for agents
   if (reviewRunId) {