Adoption-first pricing, hosted URL defaults, and a publishable npm name - #32
Merged
Conversation
Three changes aimed at making Crosscode installable and adoptable. Pricing (apps/service): replace the draft ladder with Free $0 / Essential $2.50 / Pro $5 / Unlimited $7.50 plus a per-seat Team tier. Semantic review becomes unlimited on every plan including free -- it runs on the member's own connected MCP agent and costs Crosscode nothing, so metering it was arbitrary friction. Seats stop being the wall below Team (a workspace is worth more the more people are in it), free gains auto-if-clean, and auto-always becomes the paid wall. Adds historyRetentionDays as the axis that actually bounds cost, reported by `crosscode billing status`. Migration 011 adds the `team` plan. Hosted defaults (apps/daemon/src/hosted.ts): compile in api.getcrosscode.dev and www.getcrosscode.dev, resolved as flag > worktree config > env > default. `--service` is no longer required on login/signup and WEB_URL_REQUIRED is unreachable, so bare `crosscode login` works. Neither host is deployed yet. npm name: the unscoped `crosscode` name belongs to an unrelated project that also ships a `crosscode` bin, so `npm publish` could never have worked. The published package becomes @crosscode/cli (scope was free) with publishConfig.access public; both binaries keep their short names. The private workspace package apps/cli is renamed @crosscode/cli-src to free the name. Landing page: adds a pricing section with a monthly/annual toggle, a "what you're doing now" comparison table, solo-multi-agent-first hero copy, and FAQ entries on cost, whether a team is required, and where AI review runs. Verified: pnpm build, pnpm test (297 passed), pnpm test:postgres (19 passed). Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
Three conflicts, all in the `crosscode login` web-URL resolution that both sides changed: - browser-login.ts: main centralized the precedence chain into configuredWebUrl() (shared with the MCP bootstrap) and added a one-time stderr deprecation notice for CROSSCODE_DASHBOARD_URL; this branch added a compiled-in hosted default. Kept both -- resolveWebUrl now reads `explicit ?? configuredWebUrl() ?? DEFAULT_WEB_URL`, so the deprecation warning and the single-source precedence survive and WEB_URL_REQUIRED stays unreachable. - browser-login.test.ts: both sides added cases to the same describe block. Kept both; dropped the now-unused BrowserLoginError import. - BUILD_INSTRUCTIONS.md: both rewrote the login contract line and the Phase 10 "Shipped" paragraph. Kept main's correction that assertSeatCapAvailable and assertPlanAllowsAutonomyTier are enforced end-to-end and its rationale for leaving assertSemanticReviewCallAvailable unwired, merged with this branch's team plan, historyRetentionDays, and the unenforced-retention gap. Verified main's --version fix and the merged URL precedence still behave: flag > CROSSCODE_WEB_URL > deprecated CROSSCODE_DASHBOARD_URL > hosted default. pnpm build, pnpm test (302 passed), pnpm test:postgres (19 passed). Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
This was referenced Aug 4, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What this changes
Coordination service: replaces the draft pricing ladder with Free $0 / Essential $2.50 / Pro $5 / Unlimited $7.50 plus a per-seat Team tier, makes semantic review unlimited on every plan, adds
historyRetentionDaysas a plan axis (reported bycrosscode billing status), and adds migration011_team_plan.sql. Daemon: newapps/daemon/src/hosted.tscompiles inapi.getcrosscode.dev/www.getcrosscode.dev, resolved as flag > worktree config > env > default, so--serviceis no longer required on login/signup and barecrosscode loginworks. Packaging: the published package becomes@crosscode/clibecause the unscopedcrosscodename belongs to an unrelated project that also ships acrosscodebin — both binaries keep their short names, and the privateapps/cliworkspace package is renamed@crosscode/cli-src. Docs site: adds a pricing section with a monthly/annual toggle, a "what you're doing now" comparison table, solo-multi-agent-first hero copy, and three new FAQ entries.Why
npm publishcould never have succeeded under the old name, and--service/--webbeing required meant no one could reach a hosted service even once one exists — both blocked adoption outright. The pricing changes drop two walls that cost Crosscode nothing to give away: semantic review runs on the member's own connected MCP agent (so metering it would have meant adding a network round-trip purely to bill), and seats are the growth loop rather than a cost driver.Testing
pnpm buildpassespnpm testpasses (297 passed, 19 skipped)pnpm test:postgrespasses (19 passed, against a local postgres:16 container)Integration tests updated for the new free-plan caps (5 seats, auto-if-clean allowed, auto-always still gated).
Security / trust-boundary impact
Two things worth a reviewer's attention. First,
WEB_URL_REQUIREDis now unreachable: with no flag or env var,crosscode loginopens a browser at the compiled-inDEFAULT_WEB_URLinstead of failing fast, so the CLI now has a default outbound host. The loopback callback,statecheck, and "tokens are never printed" guarantees are unchanged. Second, migration 011 widens theworkspaces_plan_checkCHECK constraint to admitteam; RLS policies, auth, checkpoint/materialization safety, and excluded-path handling are untouched. Plan limits remain enforced server-side inside the same transaction as the write they guard.Related issues
None.
Known gaps
api.getcrosscode.devandwww.getcrosscode.devare not deployed yet, so those paths fail with a DNS error until they are.historyRetentionDaysis declared and surfaced but nothing prunes against it —apps/service/src/prune.tsdeliberately refuses to touchoperationsbecause cursor-based reconnect depends on them, so storage is still unbounded pending a resync-protocol design.