@amirhosseinnateghi/vibed-cli 0.1.8 → 0.2.0

package/dist/index.js

@@ -5973,8 +5973,8 @@ var require_dist = __commonJS({
 });
 
 // src/index.ts
-import { resolve as resolve2, join as join3 } from "node:path";
-import { writeFile as writeFile2 } from "node:fs/promises";
+import { resolve as resolve2, join as join4 } from "node:path";
+import { writeFile as writeFile3 } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { pathToFileURL } from "node:url";
 
@@ -6121,6 +6121,9 @@ var config = {
   // completion the server drops a notification (§7.1) — so a slow build never
   // traps them staring at a spinner.
   BUILDER_SLOW_MS: intEnv("BUILDER_SLOW_MS", 12e3),
+  /** Lite edits (ف۷) kill switch: set to "off" to force every edit turn back to
+   *  whole-file regeneration without deploying code. */
+  BUILDER_LITE_EDITS: strEnv("BUILDER_LITE_EDITS", "on"),
   DEFAULT_LOCALE: strEnv("DEFAULT_LOCALE", "en")
 };
 function strEnv(key, fallback) {
@@ -10260,10 +10263,11 @@ var STORAGE = {
   /** Max records returnable in one query page. */
   QUERY_MAX_LIMIT: intEnv("STORE_QUERY_MAX_LIMIT", 100),
   /**
-   * Platform kill-switch for anonymous shared writes. ON by default: the real
-   * gate is per-post owner opt-in (`anon_writes` + writePolicy `anyone`), so a
-   * post only accepts guest writes when its owner turns them on. Set the env to
-   * `false` to disable anon writes platform-wide regardless of per-post config.
+   * Platform kill-switch for anonymous shared writes. ON by default. The real
+   * gate is the per-post config (`anon_writes` + writePolicy `anyone`), which is
+   * guest-writable BY DEFAULT (a shared vibe should work for whoever opens the
+   * link) — an owner can lock it down per post. Set the env to `false` to disable
+   * anon writes platform-wide regardless of per-post config.
    */
   ANON_WRITES_AVAILABLE: boolEnv("STORE_ANON_WRITES_AVAILABLE", true)
 };
@@ -10377,9 +10381,39 @@ var patchExperienceSchema = external_exports.object({
   visibility: visibilitySchema.optional(),
   coverMode: coverModeSchema.optional()
 });
+var COMMENT_MEDIA = {
+  quality: 0.82,
+  maxEdge: 1600,
+  maxBytes: 8 * 1024 * 1024,
+  // video/* is the compressed comment clip (client-side MediaRecorder → mp4 on
+  // iOS, webm on Chromium); the client never sends a raw camera video as-is.
+  types: ["image/webp", "image/jpeg", "image/png", "image/gif", "video/mp4", "video/webm"]
+};
+var COMMENT_VIDEO = {
+  maxDurationSec: 60,
+  maxEdge: 720,
+  // 1 Mbps → a 60s clip is ~7.5MB, comfortably under the 10MB request-body cap.
+  bitsPerSecond: 1e6,
+  crf: 30,
+  maxUploadBytes: 120 * 1024 * 1024
+};
+var commentMediaSchema = external_exports.object({
+  key: external_exports.string().min(1).max(300),
+  type: external_exports.enum(COMMENT_MEDIA.types),
+  w: external_exports.number().int().positive().max(2e4),
+  h: external_exports.number().int().positive().max(2e4)
+});
+var commentVideoSchema = external_exports.object({ key: external_exports.string().min(1).max(300) });
 var commentSchema = external_exports.object({
-  body: external_exports.string().min(1).max(500),
-  parentId: external_exports.string().uuid().optional()
+  body: external_exports.string().max(500),
+  parentId: external_exports.string().uuid().optional(),
+  media: commentMediaSchema.optional(),
+  // ready image/GIF (compressed client-side)
+  video: commentVideoSchema.optional()
+  // raw video → transcoded async in the worker
+}).refine((d) => d.body.trim().length > 0 || !!d.media || !!d.video, {
+  message: "Write something or attach a photo or video.",
+  path: ["body"]
 });
 var eventSchema = external_exports.object({
   // "record"/"screenshot" fire when a viewer captures the vibe (see the in-iframe
@@ -10410,6 +10444,9 @@ var createTurnRequestSchema = external_exports.object({
   // A voice turn carries no text yet — the worker transcribes `voice` first (م۷).
   voice: voiceInputSchema.optional(),
   model: external_exports.string().max(100).optional()
+  // No editMode: lite edits (ف۷) proved themselves, so every edit takes that
+  // path and the server decides — a client can't ask for the slow rewrite.
+  // BUILDER_LITE_EDITS=off remains the fleet-wide kill switch.
 }).refine((v) => v.content.trim().length > 0 || (v.attachments?.length ?? 0) > 0 || !!v.voice, {
   message: "Send a message, an attachment, or a voice recording."
 });
@@ -10514,6 +10551,183 @@ var notifPrefsPatchSchema = external_exports.object({
   groups: external_exports.record(external_exports.enum(NOTIF_PREF_GROUPS), external_exports.boolean()).optional()
 });
 
+// ../shared/src/remix.ts
+var REMIX_GUIDE = `# Make it remix-friendly
+
+On vibed every published vibe is **remixable**: anyone can fork it and make it
+theirs, and the AI builder can be asked to change it. A vibe is only *really*
+remixable if a stranger \u2014 or a model editing it \u2014 can find the knobs without
+reading the whole file. Treat this as part of shipping, like mobile-first.
+
+It pays off twice: edits to a well-structured file are applied as small precise
+patches instead of regenerating the whole thing, which is faster, cheaper, and
+far less likely to break what already worked.
+
+## 1. One CONFIG block, at the top
+
+Every tunable lives in a single object at the top of the script \u2014 the first
+thing anyone sees:
+
+\`\`\`js
+const CONFIG = {
+  // --- Feel ---
+  gravity: 0.6,
+  jumpForce: -11,
+  pipeGap: 160,
+  pipeSpeed: 2.4,
+  // --- Look ---
+  skyColor: "#7ec8ff",
+  birdColor: "#ffd166",
+  // --- Words (all user-facing text) ---
+  title: "Tap to Fly",
+  gameOverText: "Ouch! Tap to try again",
+  scoreLabel: "Score",
+};
+\`\`\`
+
+Rules that make it useful:
+- **Literal values only** \u2014 numbers, strings, colors. No computed expressions.
+- **Everything reads from CONFIG.** If a number appears twice in the logic, it
+  belongs in CONFIG once.
+- **All user-facing text goes here too**, so rewording or translating a vibe is
+  one edit, not a hunt.
+
+## 2. Content separate from logic
+
+Questions, levels, items, cards, prompts \u2014 a labelled array right after CONFIG:
+
+\`\`\`js
+const QUESTIONS = [
+  { q: "Pick a color", options: ["Red", "Blue"], answer: 0 },
+  // add more here \u2014 same shape
+];
+\`\`\`
+
+Now "add five more questions" is a data edit anyone can make.
+
+## 3. Predictable section order
+
+Lay the script out in this order, each with a one-line banner comment:
+
+\`\`\`js
+// ============ CONFIG ============
+// ============ CONTENT ===========
+// ============ STATE =============
+// ============ HELPERS ===========
+// ============ RENDER ============
+// ============ INPUT =============
+// ============ INIT ==============
+\`\`\`
+
+A remixer (and a patching model) then knows where a change belongs before
+reading a single line.
+
+## 4. Write it plainly
+
+- Descriptive names: \`spawnEnemy()\`, not \`se()\`; \`playerSpeed\`, not \`ps\`.
+- Small functions that do one thing. One \`init()\` entry point, one game loop.
+- Two-space indent, no minification, no bundler output, no clever one-liners or
+  chained ternaries.
+- A short comment at each seam someone would want to change:
+  \`// Win condition \u2014 swap this for a timer, a score target, ...\`
+- Stable \`id\`/\`class\` names on the elements a remixer would target.
+- No dead code, and no copy-pasted near-identical blocks \u2014 factor them into one
+  function. (Duplicated blocks also make an automated edit ambiguous, so it
+  fails or lands in the wrong place.)
+
+## 5. Quick self-check before publishing
+
+- Could someone change the colors, speed, and all the words by editing only
+  CONFIG?
+- Could they add one more level/question/item by editing only the content array?
+- Is there any magic number or user-facing string outside those two blocks?
+- Would a stranger know where to add a feature within ten seconds of scrolling?
+
+If the answer to any of those is no, fix it before you publish \u2014 that is the
+difference between a vibe people fork and one they scroll past.`;
+var SMALL_VIBE_CHARS = 1200;
+var SMALL_VIBE_LINES = 40;
+var COMMENT_EXPECTED_LINES = 60;
+var SECTIONS_EXPECTED_LINES = 120;
+var MINIFIED_LINE_CHARS = 400;
+var MINIFIED_AVG_LINE_CHARS = 160;
+function authorScript(html) {
+  const parts = [];
+  const re = /<script\b([^>]*)>([\s\S]*?)<\/script\s*>/gi;
+  let m;
+  while (m = re.exec(html)) {
+    const attrs = m[1] ?? "";
+    if (/data-vibed-bridge/i.test(attrs)) continue;
+    if (/\bsrc=/i.test(attrs)) continue;
+    parts.push(m[2] ?? "");
+  }
+  return parts.join("\n");
+}
+function remixAudit(html) {
+  const script = authorScript(html ?? "");
+  const lines = script.split(/\r?\n/);
+  const codeLines = lines.filter((l) => l.trim() !== "");
+  const scriptLines = codeLines.length;
+  const scriptChars = codeLines.reduce((n, l) => n + l.trim().length, 0);
+  const avgLine = scriptLines > 0 ? scriptChars / scriptLines : 0;
+  const findings = [];
+  const longest = codeLines.reduce((n, l) => Math.max(n, l.trim().length), 0);
+  const denselyPacked = scriptChars > 600 && avgLine > MINIFIED_AVG_LINE_CHARS;
+  if (longest > MINIFIED_LINE_CHARS || denselyPacked) {
+    findings.push({
+      code: "MINIFIED",
+      blocking: true,
+      message: `The script averages ${Math.round(avgLine)} characters per line (longest ${longest}) \u2014 this looks minified or bundled.`,
+      fix: "Publish readable source: turn off minification for the vibe build, or inline the unminified code."
+    });
+  }
+  if (scriptLines >= SMALL_VIBE_LINES || scriptChars >= SMALL_VIBE_CHARS) {
+    if (!/\b(?:const|let|var)\s+CONFIG\s*=/.test(script)) {
+      findings.push({
+        code: "NO_CONFIG",
+        blocking: true,
+        message: "No `const CONFIG = { ... }` block \u2014 a remixer has to hunt through the logic to change anything.",
+        fix: "Move every tunable (speeds, sizes, colors, counts, durations) AND all user-facing text into one CONFIG object at the top, and read from it everywhere."
+      });
+    }
+    const cryptic = /* @__PURE__ */ new Set();
+    const decl = /\b(?:const|let|var)\s+([A-Za-z_$])\b(?!\s*[,)])/g;
+    let d;
+    while (d = decl.exec(script)) {
+      const name = d[1];
+      if (!"ijknxyt_".includes(name)) cryptic.add(name);
+    }
+    if (cryptic.size >= 5) {
+      findings.push({
+        code: "CRYPTIC_NAMES",
+        blocking: true,
+        message: `${cryptic.size} single-letter variables (${[...cryptic].slice(0, 6).join(", ")}) \u2014 the code reads as machine output.`,
+        fix: "Give variables and functions descriptive names (`playerSpeed`, not `p`)."
+      });
+    }
+    if (scriptLines >= COMMENT_EXPECTED_LINES) {
+      const comments = codeLines.filter((l) => /^\s*(\/\/|\/\*|\*)/.test(l)).length;
+      if (comments === 0) {
+        findings.push({
+          code: "NO_COMMENTS",
+          blocking: false,
+          message: "The script has no comments at all.",
+          fix: "Add a short note at each seam a remixer would change (the win condition, the spawn rule, the scoring)."
+        });
+      }
+    }
+    if (scriptLines >= SECTIONS_EXPECTED_LINES && !/CONFIG\s*=+\s*$|=== *CONFIG|-- *CONFIG/im.test(script)) {
+      findings.push({
+        code: "NO_SECTIONS",
+        blocking: false,
+        message: "No section banners in a long script.",
+        fix: "Split it with banner comments: CONFIG \u2192 CONTENT \u2192 STATE \u2192 helpers \u2192 render \u2192 input \u2192 init."
+      });
+    }
+  }
+  return { ok: !findings.some((f) => f.blocking), findings, scriptLines };
+}
+
 // ../shared/src/builderEvents.ts
 var BUILD_EVENT_VERSION = 1;
 var BUILD_PHASES = [
@@ -11171,8 +11385,10 @@ async function bundleProject(projectDir, opts = {}) {
     allowedOrigins
   });
   const result = validate(html, { maxBytes, allowedOrigins, policy: opts.policy });
+  const remix = remixAudit(html);
   return {
-    ok: result.ok,
+    ok: result.ok && remix.ok,
+    remix,
     html,
     policy: opts.policy,
     entry: resolved.entry,
@@ -11233,12 +11449,28 @@ function formatReport(result) {
     result.sizeBytes != null ? `size: ${fmtSize(result.sizeBytes)}` : null
   ].filter(Boolean).join("  \xB7  ");
   if (where) out2.push(where);
+  const remixBlockers = (result.remix?.findings ?? []).filter((f) => f.blocking);
   if (result.ok) {
     out2.push("\u2713 Vibeable \u2014 this project can be published to vibed.");
-  } else {
+  } else if (result.blockers.length > 0) {
     out2.push(`\u2717 Not vibeable yet \u2014 ${result.blockers.length} blocker(s):`);
     out2.push(...summarize(result).lines);
   }
+  if (remixBlockers.length > 0) {
+    out2.push("");
+    out2.push(`\u2717 Not remixable yet \u2014 ${remixBlockers.length} thing(s) to fix before publishing:`);
+    for (const f of remixBlockers) {
+      out2.push(`  \u2022 ${f.message}`);
+      out2.push(`    \u2192 ${f.fix}`);
+    }
+    out2.push("  Run `vibed remixable` for the full guide.");
+  }
+  const remixAdvice = (result.remix?.findings ?? []).filter((f) => !f.blocking);
+  if (remixAdvice.length > 0) {
+    out2.push("");
+    out2.push("Remix polish (not blocking):");
+    for (const f of remixAdvice) out2.push(`  \u2022 ${f.message} \u2192 ${f.fix}`);
+  }
   if (result.policy && ruleActive("no_vertical_scroll", result.policy)) {
     out2.push(
       "",
@@ -11520,6 +11752,82 @@ const m  = await vibed.storage.meta();      // { postId, ... } \u2014 this post'
 5. Re-run \`vibed check\` \u2014 the \`BROWSER_STORAGE\` warning should be gone.
 `;
 
+// src/version.ts
+import { homedir as homedir2 } from "node:os";
+import { join as join3 } from "node:path";
+import { mkdir as mkdir2, readFile as readFile3, writeFile as writeFile2 } from "node:fs/promises";
+var VERSION = true ? "0.2.0" : "0.0.0-dev";
+var PKG = "@amirhosseinnateghi/vibed-cli";
+var REGISTRY = `https://registry.npmjs.org/${PKG}/latest`;
+var CHECK_INTERVAL_MS = 24 * 60 * 60 * 1e3;
+var FETCH_TIMEOUT_MS = 2e3;
+var stateFile = () => join3(homedir2(), ".vibed", "update-check.json");
+function isOutdated(current, latest) {
+  const parse4 = (v) => {
+    const core = v.trim().replace(/^v/, "").split("-")[0];
+    if (!core || !/^\d+(\.\d+)*$/.test(core)) return null;
+    return core.split(".").map(Number);
+  };
+  const a = parse4(current);
+  const b = parse4(latest);
+  if (!a || !b) return false;
+  for (let i = 0; i < Math.max(a.length, b.length); i++) {
+    const x = a[i] ?? 0;
+    const y = b[i] ?? 0;
+    if (y > x) return true;
+    if (y < x) return false;
+  }
+  return false;
+}
+function updateCheckEnabled(argv, env) {
+  if (argv.includes("--json")) return false;
+  if (env.VIBED_NO_UPDATE_CHECK === "1" || env.NO_UPDATE_NOTIFIER === "1") return false;
+  if (env.CI) return false;
+  if (VERSION === "0.0.0-dev") return false;
+  return true;
+}
+function updateHint(latest, env) {
+  const viaPlugin = !!env.CLAUDE_PLUGIN_ROOT;
+  const how = viaPlugin ? "update it with:  /plugin update make-it-vibed" : `update it with:  npm i -g ${PKG}`;
+  return `vibed ${VERSION} is out of date (latest ${latest}) \u2014 ${how}`;
+}
+async function readState() {
+  try {
+    return JSON.parse(await readFile3(stateFile(), "utf8"));
+  } catch {
+    return {};
+  }
+}
+async function writeState(latest) {
+  try {
+    await mkdir2(join3(homedir2(), ".vibed"), { recursive: true });
+    await writeFile2(stateFile(), JSON.stringify({ checkedAt: Date.now(), latest }), "utf8");
+  } catch {
+  }
+}
+async function checkForUpdate(argv = process.argv, env = process.env) {
+  if (!updateCheckEnabled(argv, env)) return null;
+  const state = await readState();
+  if (state.checkedAt && Date.now() - state.checkedAt < CHECK_INTERVAL_MS) {
+    return state.latest && isOutdated(VERSION, state.latest) ? updateHint(state.latest, env) : null;
+  }
+  let latest = null;
+  try {
+    const res = await fetch(REGISTRY, {
+      headers: { accept: "application/vnd.npm.install-v1+json, application/json" },
+      signal: AbortSignal.timeout?.(FETCH_TIMEOUT_MS)
+    });
+    if (res.ok) {
+      const body = await res.json();
+      if (typeof body.version === "string") latest = body.version;
+    }
+  } catch {
+  }
+  if (!latest) return null;
+  await writeState(latest);
+  return isOutdated(VERSION, latest) ? updateHint(latest, env) : null;
+}
+
 // src/index.ts
 function parseArgs(argv) {
   const _ = [];
@@ -11553,6 +11861,7 @@ Usage:
   vibed login                 Authenticate this machine (opens the browser)
   vibed check [path]          Check if a project can be published (no network)
   vibed storage               Print the persistence guide (leaderboards, saves, shared state)
+  vibed remixable             Print the remix-friendly authoring guide (CONFIG block, readable code)
   vibed preview [path]        Bundle + open the artifact locally (no publish)
   vibed draft [path]          Upload a private, hosted preview link (no publish)
   vibed publish [path]        Bundle the project and publish it to vibed
@@ -11560,6 +11869,7 @@ Usage:
   vibed delete <id|url>       Delete one of your posts
   vibed whoami                Show the signed-in account
   vibed logout                Remove the saved token
+  vibed version               Print the connector version (--version works too)
 
 Flags:
   --api <url>                 API base (or VIBED_API env). Default: production
@@ -11609,8 +11919,8 @@ async function cmdPreview(args) {
     if (json) out(json, "", { ok: false, fatal: result.fatal });
     return 1;
   }
-  const file2 = join3(tmpdir(), `vibed-preview-${result.sizeBytes ?? 0}.html`);
-  await writeFile2(file2, result.html, "utf8");
+  const file2 = join4(tmpdir(), `vibed-preview-${result.sizeBytes ?? 0}.html`);
+  await writeFile3(file2, result.html, "utf8");
   const url = pathToFileURL(file2).href;
   if (json) {
     out(json, "", { ok: result.ok, previewFile: file2, previewUrl: url });
@@ -11709,7 +12019,7 @@ async function cmdPublish(args) {
   });
   if (!result.ok || !result.html) {
     out(json, formatReport(result), { ...result, html: void 0 });
-    console.error("\nFix the blockers above, then run `vibed publish` again.");
+    console.error("\nFix everything above, then run `vibed publish` again.");
     return 1;
   }
   if (!json) console.log(formatReport(result));
@@ -11790,7 +12100,12 @@ async function cmdLogout() {
   return 0;
 }
 async function main() {
-  const args = parseArgs(process.argv.slice(2));
+  const raw = process.argv.slice(2);
+  if (raw.includes("--version") || raw.includes("-v")) {
+    console.log(VERSION);
+    return 0;
+  }
+  const args = parseArgs(raw);
   const cmd = args._[0];
   switch (cmd) {
     case "login":
@@ -11804,6 +12119,9 @@ async function main() {
     case "storage":
       console.log(STORAGE_GUIDE);
       return 0;
+    case "remixable":
+      console.log(REMIX_GUIDE);
+      return 0;
     case "preview":
       return cmdPreview(args);
     case "draft":
@@ -11813,6 +12131,11 @@ async function main() {
     case "delete":
     case "rm":
       return cmdDelete(args);
+    case "version":
+    case "--version":
+    case "-v":
+      console.log(VERSION);
+      return 0;
     case void 0:
     case "help":
     case "--help":
@@ -11825,7 +12148,15 @@ ${USAGE}`);
       return 1;
   }
 }
-main().then((code) => process.exit(code)).catch((e) => {
+main().then(async (code) => {
+  const nudge = await Promise.race([
+    checkForUpdate().catch(() => null),
+    new Promise((r) => setTimeout(() => r(null), 2500))
+  ]);
+  if (nudge) console.error(`
+${nudge}`);
+  process.exit(code);
+}).catch((e) => {
   console.error(e instanceof Error ? e.message : String(e));
   process.exit(1);
 });

package/dist/vibed.cjs

@@ -5974,9 +5974,9 @@ var require_dist = __commonJS({
 });
 
 // src/index.ts
-var import_node_path4 = require("node:path");
-var import_promises3 = require("node:fs/promises");
-var import_node_os3 = require("node:os");
+var import_node_path5 = require("node:path");
+var import_promises4 = require("node:fs/promises");
+var import_node_os4 = require("node:os");
 var import_node_url = require("node:url");
 
 // src/config.ts
@@ -6122,6 +6122,9 @@ var config = {
   // completion the server drops a notification (§7.1) — so a slow build never
   // traps them staring at a spinner.
   BUILDER_SLOW_MS: intEnv("BUILDER_SLOW_MS", 12e3),
+  /** Lite edits (ف۷) kill switch: set to "off" to force every edit turn back to
+   *  whole-file regeneration without deploying code. */
+  BUILDER_LITE_EDITS: strEnv("BUILDER_LITE_EDITS", "on"),
   DEFAULT_LOCALE: strEnv("DEFAULT_LOCALE", "en")
 };
 function strEnv(key, fallback) {
@@ -10261,10 +10264,11 @@ var STORAGE = {
   /** Max records returnable in one query page. */
   QUERY_MAX_LIMIT: intEnv("STORE_QUERY_MAX_LIMIT", 100),
   /**
-   * Platform kill-switch for anonymous shared writes. ON by default: the real
-   * gate is per-post owner opt-in (`anon_writes` + writePolicy `anyone`), so a
-   * post only accepts guest writes when its owner turns them on. Set the env to
-   * `false` to disable anon writes platform-wide regardless of per-post config.
+   * Platform kill-switch for anonymous shared writes. ON by default. The real
+   * gate is the per-post config (`anon_writes` + writePolicy `anyone`), which is
+   * guest-writable BY DEFAULT (a shared vibe should work for whoever opens the
+   * link) — an owner can lock it down per post. Set the env to `false` to disable
+   * anon writes platform-wide regardless of per-post config.
    */
   ANON_WRITES_AVAILABLE: boolEnv("STORE_ANON_WRITES_AVAILABLE", true)
 };
@@ -10378,9 +10382,39 @@ var patchExperienceSchema = external_exports.object({
   visibility: visibilitySchema.optional(),
   coverMode: coverModeSchema.optional()
 });
+var COMMENT_MEDIA = {
+  quality: 0.82,
+  maxEdge: 1600,
+  maxBytes: 8 * 1024 * 1024,
+  // video/* is the compressed comment clip (client-side MediaRecorder → mp4 on
+  // iOS, webm on Chromium); the client never sends a raw camera video as-is.
+  types: ["image/webp", "image/jpeg", "image/png", "image/gif", "video/mp4", "video/webm"]
+};
+var COMMENT_VIDEO = {
+  maxDurationSec: 60,
+  maxEdge: 720,
+  // 1 Mbps → a 60s clip is ~7.5MB, comfortably under the 10MB request-body cap.
+  bitsPerSecond: 1e6,
+  crf: 30,
+  maxUploadBytes: 120 * 1024 * 1024
+};
+var commentMediaSchema = external_exports.object({
+  key: external_exports.string().min(1).max(300),
+  type: external_exports.enum(COMMENT_MEDIA.types),
+  w: external_exports.number().int().positive().max(2e4),
+  h: external_exports.number().int().positive().max(2e4)
+});
+var commentVideoSchema = external_exports.object({ key: external_exports.string().min(1).max(300) });
 var commentSchema = external_exports.object({
-  body: external_exports.string().min(1).max(500),
-  parentId: external_exports.string().uuid().optional()
+  body: external_exports.string().max(500),
+  parentId: external_exports.string().uuid().optional(),
+  media: commentMediaSchema.optional(),
+  // ready image/GIF (compressed client-side)
+  video: commentVideoSchema.optional()
+  // raw video → transcoded async in the worker
+}).refine((d) => d.body.trim().length > 0 || !!d.media || !!d.video, {
+  message: "Write something or attach a photo or video.",
+  path: ["body"]
 });
 var eventSchema = external_exports.object({
   // "record"/"screenshot" fire when a viewer captures the vibe (see the in-iframe
@@ -10411,6 +10445,9 @@ var createTurnRequestSchema = external_exports.object({
   // A voice turn carries no text yet — the worker transcribes `voice` first (م۷).
   voice: voiceInputSchema.optional(),
   model: external_exports.string().max(100).optional()
+  // No editMode: lite edits (ف۷) proved themselves, so every edit takes that
+  // path and the server decides — a client can't ask for the slow rewrite.
+  // BUILDER_LITE_EDITS=off remains the fleet-wide kill switch.
 }).refine((v) => v.content.trim().length > 0 || (v.attachments?.length ?? 0) > 0 || !!v.voice, {
   message: "Send a message, an attachment, or a voice recording."
 });
@@ -10515,6 +10552,183 @@ var notifPrefsPatchSchema = external_exports.object({
   groups: external_exports.record(external_exports.enum(NOTIF_PREF_GROUPS), external_exports.boolean()).optional()
 });
 
+// ../shared/src/remix.ts
+var REMIX_GUIDE = `# Make it remix-friendly
+
+On vibed every published vibe is **remixable**: anyone can fork it and make it
+theirs, and the AI builder can be asked to change it. A vibe is only *really*
+remixable if a stranger \u2014 or a model editing it \u2014 can find the knobs without
+reading the whole file. Treat this as part of shipping, like mobile-first.
+
+It pays off twice: edits to a well-structured file are applied as small precise
+patches instead of regenerating the whole thing, which is faster, cheaper, and
+far less likely to break what already worked.
+
+## 1. One CONFIG block, at the top
+
+Every tunable lives in a single object at the top of the script \u2014 the first
+thing anyone sees:
+
+\`\`\`js
+const CONFIG = {
+  // --- Feel ---
+  gravity: 0.6,
+  jumpForce: -11,
+  pipeGap: 160,
+  pipeSpeed: 2.4,
+  // --- Look ---
+  skyColor: "#7ec8ff",
+  birdColor: "#ffd166",
+  // --- Words (all user-facing text) ---
+  title: "Tap to Fly",
+  gameOverText: "Ouch! Tap to try again",
+  scoreLabel: "Score",
+};
+\`\`\`
+
+Rules that make it useful:
+- **Literal values only** \u2014 numbers, strings, colors. No computed expressions.
+- **Everything reads from CONFIG.** If a number appears twice in the logic, it
+  belongs in CONFIG once.
+- **All user-facing text goes here too**, so rewording or translating a vibe is
+  one edit, not a hunt.
+
+## 2. Content separate from logic
+
+Questions, levels, items, cards, prompts \u2014 a labelled array right after CONFIG:
+
+\`\`\`js
+const QUESTIONS = [
+  { q: "Pick a color", options: ["Red", "Blue"], answer: 0 },
+  // add more here \u2014 same shape
+];
+\`\`\`
+
+Now "add five more questions" is a data edit anyone can make.
+
+## 3. Predictable section order
+
+Lay the script out in this order, each with a one-line banner comment:
+
+\`\`\`js
+// ============ CONFIG ============
+// ============ CONTENT ===========
+// ============ STATE =============
+// ============ HELPERS ===========
+// ============ RENDER ============
+// ============ INPUT =============
+// ============ INIT ==============
+\`\`\`
+
+A remixer (and a patching model) then knows where a change belongs before
+reading a single line.
+
+## 4. Write it plainly
+
+- Descriptive names: \`spawnEnemy()\`, not \`se()\`; \`playerSpeed\`, not \`ps\`.
+- Small functions that do one thing. One \`init()\` entry point, one game loop.
+- Two-space indent, no minification, no bundler output, no clever one-liners or
+  chained ternaries.
+- A short comment at each seam someone would want to change:
+  \`// Win condition \u2014 swap this for a timer, a score target, ...\`
+- Stable \`id\`/\`class\` names on the elements a remixer would target.
+- No dead code, and no copy-pasted near-identical blocks \u2014 factor them into one
+  function. (Duplicated blocks also make an automated edit ambiguous, so it
+  fails or lands in the wrong place.)
+
+## 5. Quick self-check before publishing
+
+- Could someone change the colors, speed, and all the words by editing only
+  CONFIG?
+- Could they add one more level/question/item by editing only the content array?
+- Is there any magic number or user-facing string outside those two blocks?
+- Would a stranger know where to add a feature within ten seconds of scrolling?
+
+If the answer to any of those is no, fix it before you publish \u2014 that is the
+difference between a vibe people fork and one they scroll past.`;
+var SMALL_VIBE_CHARS = 1200;
+var SMALL_VIBE_LINES = 40;
+var COMMENT_EXPECTED_LINES = 60;
+var SECTIONS_EXPECTED_LINES = 120;
+var MINIFIED_LINE_CHARS = 400;
+var MINIFIED_AVG_LINE_CHARS = 160;
+function authorScript(html) {
+  const parts = [];
+  const re = /<script\b([^>]*)>([\s\S]*?)<\/script\s*>/gi;
+  let m;
+  while (m = re.exec(html)) {
+    const attrs = m[1] ?? "";
+    if (/data-vibed-bridge/i.test(attrs)) continue;
+    if (/\bsrc=/i.test(attrs)) continue;
+    parts.push(m[2] ?? "");
+  }
+  return parts.join("\n");
+}
+function remixAudit(html) {
+  const script = authorScript(html ?? "");
+  const lines = script.split(/\r?\n/);
+  const codeLines = lines.filter((l) => l.trim() !== "");
+  const scriptLines = codeLines.length;
+  const scriptChars = codeLines.reduce((n, l) => n + l.trim().length, 0);
+  const avgLine = scriptLines > 0 ? scriptChars / scriptLines : 0;
+  const findings = [];
+  const longest = codeLines.reduce((n, l) => Math.max(n, l.trim().length), 0);
+  const denselyPacked = scriptChars > 600 && avgLine > MINIFIED_AVG_LINE_CHARS;
+  if (longest > MINIFIED_LINE_CHARS || denselyPacked) {
+    findings.push({
+      code: "MINIFIED",
+      blocking: true,
+      message: `The script averages ${Math.round(avgLine)} characters per line (longest ${longest}) \u2014 this looks minified or bundled.`,
+      fix: "Publish readable source: turn off minification for the vibe build, or inline the unminified code."
+    });
+  }
+  if (scriptLines >= SMALL_VIBE_LINES || scriptChars >= SMALL_VIBE_CHARS) {
+    if (!/\b(?:const|let|var)\s+CONFIG\s*=/.test(script)) {
+      findings.push({
+        code: "NO_CONFIG",
+        blocking: true,
+        message: "No `const CONFIG = { ... }` block \u2014 a remixer has to hunt through the logic to change anything.",
+        fix: "Move every tunable (speeds, sizes, colors, counts, durations) AND all user-facing text into one CONFIG object at the top, and read from it everywhere."
+      });
+    }
+    const cryptic = /* @__PURE__ */ new Set();
+    const decl = /\b(?:const|let|var)\s+([A-Za-z_$])\b(?!\s*[,)])/g;
+    let d;
+    while (d = decl.exec(script)) {
+      const name = d[1];
+      if (!"ijknxyt_".includes(name)) cryptic.add(name);
+    }
+    if (cryptic.size >= 5) {
+      findings.push({
+        code: "CRYPTIC_NAMES",
+        blocking: true,
+        message: `${cryptic.size} single-letter variables (${[...cryptic].slice(0, 6).join(", ")}) \u2014 the code reads as machine output.`,
+        fix: "Give variables and functions descriptive names (`playerSpeed`, not `p`)."
+      });
+    }
+    if (scriptLines >= COMMENT_EXPECTED_LINES) {
+      const comments = codeLines.filter((l) => /^\s*(\/\/|\/\*|\*)/.test(l)).length;
+      if (comments === 0) {
+        findings.push({
+          code: "NO_COMMENTS",
+          blocking: false,
+          message: "The script has no comments at all.",
+          fix: "Add a short note at each seam a remixer would change (the win condition, the spawn rule, the scoring)."
+        });
+      }
+    }
+    if (scriptLines >= SECTIONS_EXPECTED_LINES && !/CONFIG\s*=+\s*$|=== *CONFIG|-- *CONFIG/im.test(script)) {
+      findings.push({
+        code: "NO_SECTIONS",
+        blocking: false,
+        message: "No section banners in a long script.",
+        fix: "Split it with banner comments: CONFIG \u2192 CONTENT \u2192 STATE \u2192 helpers \u2192 render \u2192 input \u2192 init."
+      });
+    }
+  }
+  return { ok: !findings.some((f) => f.blocking), findings, scriptLines };
+}
+
 // ../shared/src/builderEvents.ts
 var BUILD_EVENT_VERSION = 1;
 var BUILD_PHASES = [
@@ -11172,8 +11386,10 @@ async function bundleProject(projectDir, opts = {}) {
     allowedOrigins
   });
   const result = validate(html, { maxBytes, allowedOrigins, policy: opts.policy });
+  const remix = remixAudit(html);
   return {
-    ok: result.ok,
+    ok: result.ok && remix.ok,
+    remix,
     html,
     policy: opts.policy,
     entry: resolved.entry,
@@ -11234,12 +11450,28 @@ function formatReport(result) {
     result.sizeBytes != null ? `size: ${fmtSize(result.sizeBytes)}` : null
   ].filter(Boolean).join("  \xB7  ");
   if (where) out2.push(where);
+  const remixBlockers = (result.remix?.findings ?? []).filter((f) => f.blocking);
   if (result.ok) {
     out2.push("\u2713 Vibeable \u2014 this project can be published to vibed.");
-  } else {
+  } else if (result.blockers.length > 0) {
     out2.push(`\u2717 Not vibeable yet \u2014 ${result.blockers.length} blocker(s):`);
     out2.push(...summarize(result).lines);
   }
+  if (remixBlockers.length > 0) {
+    out2.push("");
+    out2.push(`\u2717 Not remixable yet \u2014 ${remixBlockers.length} thing(s) to fix before publishing:`);
+    for (const f of remixBlockers) {
+      out2.push(`  \u2022 ${f.message}`);
+      out2.push(`    \u2192 ${f.fix}`);
+    }
+    out2.push("  Run `vibed remixable` for the full guide.");
+  }
+  const remixAdvice = (result.remix?.findings ?? []).filter((f) => !f.blocking);
+  if (remixAdvice.length > 0) {
+    out2.push("");
+    out2.push("Remix polish (not blocking):");
+    for (const f of remixAdvice) out2.push(`  \u2022 ${f.message} \u2192 ${f.fix}`);
+  }
   if (result.policy && ruleActive("no_vertical_scroll", result.policy)) {
     out2.push(
       "",
@@ -11521,6 +11753,82 @@ const m  = await vibed.storage.meta();      // { postId, ... } \u2014 this post'
 5. Re-run \`vibed check\` \u2014 the \`BROWSER_STORAGE\` warning should be gone.
 `;
 
+// src/version.ts
+var import_node_os3 = require("node:os");
+var import_node_path4 = require("node:path");
+var import_promises3 = require("node:fs/promises");
+var VERSION = true ? "0.2.0" : "0.0.0-dev";
+var PKG = "@amirhosseinnateghi/vibed-cli";
+var REGISTRY = `https://registry.npmjs.org/${PKG}/latest`;
+var CHECK_INTERVAL_MS = 24 * 60 * 60 * 1e3;
+var FETCH_TIMEOUT_MS = 2e3;
+var stateFile = () => (0, import_node_path4.join)((0, import_node_os3.homedir)(), ".vibed", "update-check.json");
+function isOutdated(current, latest) {
+  const parse4 = (v) => {
+    const core = v.trim().replace(/^v/, "").split("-")[0];
+    if (!core || !/^\d+(\.\d+)*$/.test(core)) return null;
+    return core.split(".").map(Number);
+  };
+  const a = parse4(current);
+  const b = parse4(latest);
+  if (!a || !b) return false;
+  for (let i = 0; i < Math.max(a.length, b.length); i++) {
+    const x = a[i] ?? 0;
+    const y = b[i] ?? 0;
+    if (y > x) return true;
+    if (y < x) return false;
+  }
+  return false;
+}
+function updateCheckEnabled(argv, env) {
+  if (argv.includes("--json")) return false;
+  if (env.VIBED_NO_UPDATE_CHECK === "1" || env.NO_UPDATE_NOTIFIER === "1") return false;
+  if (env.CI) return false;
+  if (VERSION === "0.0.0-dev") return false;
+  return true;
+}
+function updateHint(latest, env) {
+  const viaPlugin = !!env.CLAUDE_PLUGIN_ROOT;
+  const how = viaPlugin ? "update it with:  /plugin update make-it-vibed" : `update it with:  npm i -g ${PKG}`;
+  return `vibed ${VERSION} is out of date (latest ${latest}) \u2014 ${how}`;
+}
+async function readState() {
+  try {
+    return JSON.parse(await (0, import_promises3.readFile)(stateFile(), "utf8"));
+  } catch {
+    return {};
+  }
+}
+async function writeState(latest) {
+  try {
+    await (0, import_promises3.mkdir)((0, import_node_path4.join)((0, import_node_os3.homedir)(), ".vibed"), { recursive: true });
+    await (0, import_promises3.writeFile)(stateFile(), JSON.stringify({ checkedAt: Date.now(), latest }), "utf8");
+  } catch {
+  }
+}
+async function checkForUpdate(argv = process.argv, env = process.env) {
+  if (!updateCheckEnabled(argv, env)) return null;
+  const state = await readState();
+  if (state.checkedAt && Date.now() - state.checkedAt < CHECK_INTERVAL_MS) {
+    return state.latest && isOutdated(VERSION, state.latest) ? updateHint(state.latest, env) : null;
+  }
+  let latest = null;
+  try {
+    const res = await fetch(REGISTRY, {
+      headers: { accept: "application/vnd.npm.install-v1+json, application/json" },
+      signal: AbortSignal.timeout?.(FETCH_TIMEOUT_MS)
+    });
+    if (res.ok) {
+      const body = await res.json();
+      if (typeof body.version === "string") latest = body.version;
+    }
+  } catch {
+  }
+  if (!latest) return null;
+  await writeState(latest);
+  return isOutdated(VERSION, latest) ? updateHint(latest, env) : null;
+}
+
 // src/index.ts
 function parseArgs(argv) {
   const _ = [];
@@ -11554,6 +11862,7 @@ Usage:
   vibed login                 Authenticate this machine (opens the browser)
   vibed check [path]          Check if a project can be published (no network)
   vibed storage               Print the persistence guide (leaderboards, saves, shared state)
+  vibed remixable             Print the remix-friendly authoring guide (CONFIG block, readable code)
   vibed preview [path]        Bundle + open the artifact locally (no publish)
   vibed draft [path]          Upload a private, hosted preview link (no publish)
   vibed publish [path]        Bundle the project and publish it to vibed
@@ -11561,6 +11870,7 @@ Usage:
   vibed delete <id|url>       Delete one of your posts
   vibed whoami                Show the signed-in account
   vibed logout                Remove the saved token
+  vibed version               Print the connector version (--version works too)
 
 Flags:
   --api <url>                 API base (or VIBED_API env). Default: production
@@ -11572,7 +11882,7 @@ Publish only:
   tags (pick from): ${TAGS.join(", ")}`;
 async function cmdCheck(args) {
   const json = isTrue(args.flags.json);
-  const dir2 = (0, import_node_path4.resolve)(args._[1] ?? ".");
+  const dir2 = (0, import_node_path5.resolve)(args._[1] ?? ".");
   const cfg = await loadConfig({ api: str(args.flags.api) });
   const policy = isTrue(args.flags["local-policy"]) ? void 0 : await fetchPolicy(cfg.apiBase);
   if (!json && policy) console.error(`Rules: ${cfg.apiBase}`);
@@ -11596,7 +11906,7 @@ async function cmdCheck(args) {
 }
 async function cmdPreview(args) {
   const json = isTrue(args.flags.json);
-  const dir2 = (0, import_node_path4.resolve)(args._[1] ?? ".");
+  const dir2 = (0, import_node_path5.resolve)(args._[1] ?? ".");
   const cfg = await loadConfig({ api: str(args.flags.api) });
   const policy = isTrue(args.flags["local-policy"]) ? void 0 : await fetchPolicy(cfg.apiBase);
   const result = await bundleProject(dir2, {
@@ -11610,8 +11920,8 @@ async function cmdPreview(args) {
     if (json) out(json, "", { ok: false, fatal: result.fatal });
     return 1;
   }
-  const file2 = (0, import_node_path4.join)((0, import_node_os3.tmpdir)(), `vibed-preview-${result.sizeBytes ?? 0}.html`);
-  await (0, import_promises3.writeFile)(file2, result.html, "utf8");
+  const file2 = (0, import_node_path5.join)((0, import_node_os4.tmpdir)(), `vibed-preview-${result.sizeBytes ?? 0}.html`);
+  await (0, import_promises4.writeFile)(file2, result.html, "utf8");
   const url = (0, import_node_url.pathToFileURL)(file2).href;
   if (json) {
     out(json, "", { ok: result.ok, previewFile: file2, previewUrl: url });
@@ -11648,7 +11958,7 @@ function reportPublishError(e) {
 }
 async function cmdDraft(args) {
   const json = isTrue(args.flags.json);
-  const dir2 = (0, import_node_path4.resolve)(args._[1] ?? ".");
+  const dir2 = (0, import_node_path5.resolve)(args._[1] ?? ".");
   const cfg = await loadConfig({ api: str(args.flags.api) });
   if (!cfg.token) {
     console.error("Not signed in. Run `vibed login` first.");
@@ -11700,7 +12010,7 @@ async function cmdPublish(args) {
       return reportPublishError(e);
     }
   }
-  const dir2 = (0, import_node_path4.resolve)(args._[1] ?? ".");
+  const dir2 = (0, import_node_path5.resolve)(args._[1] ?? ".");
   const policy = await fetchPolicy(cfg.apiBase);
   const result = await bundleProject(dir2, {
     entry: str(args.flags.entry),
@@ -11710,7 +12020,7 @@ async function cmdPublish(args) {
   });
   if (!result.ok || !result.html) {
     out(json, formatReport(result), { ...result, html: void 0 });
-    console.error("\nFix the blockers above, then run `vibed publish` again.");
+    console.error("\nFix everything above, then run `vibed publish` again.");
     return 1;
   }
   if (!json) console.log(formatReport(result));
@@ -11791,7 +12101,12 @@ async function cmdLogout() {
   return 0;
 }
 async function main() {
-  const args = parseArgs(process.argv.slice(2));
+  const raw = process.argv.slice(2);
+  if (raw.includes("--version") || raw.includes("-v")) {
+    console.log(VERSION);
+    return 0;
+  }
+  const args = parseArgs(raw);
   const cmd = args._[0];
   switch (cmd) {
     case "login":
@@ -11805,6 +12120,9 @@ async function main() {
     case "storage":
       console.log(STORAGE_GUIDE);
       return 0;
+    case "remixable":
+      console.log(REMIX_GUIDE);
+      return 0;
     case "preview":
       return cmdPreview(args);
     case "draft":
@@ -11814,6 +12132,11 @@ async function main() {
     case "delete":
     case "rm":
       return cmdDelete(args);
+    case "version":
+    case "--version":
+    case "-v":
+      console.log(VERSION);
+      return 0;
     case void 0:
     case "help":
     case "--help":
@@ -11826,7 +12149,15 @@ ${USAGE}`);
       return 1;
   }
 }
-main().then((code) => process.exit(code)).catch((e) => {
+main().then(async (code) => {
+  const nudge = await Promise.race([
+    checkForUpdate().catch(() => null),
+    new Promise((r) => setTimeout(() => r(null), 2500))
+  ]);
+  if (nudge) console.error(`
+${nudge}`);
+  process.exit(code);
+}).catch((e) => {
   console.error(e instanceof Error ? e.message : String(e));
   process.exit(1);
 });

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@amirhosseinnateghi/vibed-cli",
-  "version": "0.1.8",
-  "description": "make it vibed — check, bundle, and publish a project to vibed from the terminal",
+  "version": "0.2.0",
+  "description": "make it vibed \u2014 check, bundle, and publish a project to vibed from the terminal",
   "license": "MIT",
   "type": "module",
   "bin": {
@@ -19,8 +19,8 @@
     "access": "public"
   },
   "scripts": {
-    "build": "esbuild src/index.ts --bundle --platform=node --target=node20 --format=esm --outfile=dist/index.js && chmod +x dist/index.js",
-    "build:cjs": "esbuild src/index.ts --bundle --platform=node --target=node20 --format=cjs --outfile=dist/vibed.cjs && chmod +x dist/vibed.cjs",
+    "build": "esbuild src/index.ts --bundle --platform=node --target=node20 --format=esm --define:__VIBED_VERSION__='\"0.2.0\"' --outfile=dist/index.js && chmod +x dist/index.js",
+    "build:cjs": "esbuild src/index.ts --bundle --platform=node --target=node20 --format=cjs --define:__VIBED_VERSION__='\"0.2.0\"' --outfile=dist/vibed.cjs && chmod +x dist/vibed.cjs",
     "prepublishOnly": "pnpm build",
     "dev": "tsx src/index.ts",
     "test": "vitest run",