@forvibe/cli 1.1.0 → 1.1.1

package/dist/index.js

@@ -5,6 +5,8 @@ import { Command } from "commander";
 
 // src/commands/analyze.ts
 import { createInterface } from "readline";
+import { readFileSync as readFileSync5, statSync as statSync6 } from "fs";
+import { basename as basename3, extname as extname4, relative as relative4 } from "path";
 import chalk from "chalk";
 import ora from "ora";
 
@@ -1885,8 +1887,7 @@ function generateProjectTree(rootDir, maxDepth = 5, maxEntries = 300) {
 // src/analyzers/asset-scanner.ts
 import { readFileSync as readFileSync4, existsSync as existsSync5, readdirSync as readdirSync7, statSync as statSync5 } from "fs";
 import { join as join8, extname as extname3, relative as relative3, basename as basename2 } from "path";
-var MAX_ASSET_SIZE = 1 * 1024 * 1024;
-var MAX_TOTAL_BASE64_SIZE = 3 * 1024 * 1024;
+var MAX_ASSET_SIZE = 5 * 1024 * 1024;
 var MAX_TOTAL_ASSETS = 10;
 var MAX_SCREENSHOTS = 5;
 var MIN_ASSET_SIZE = 500;
@@ -2090,9 +2091,6 @@ function getPromotionalPaths(rootDir, techStack) {
   }
   return paths;
 }
-function totalBase64Size(assets) {
-  return assets.reduce((sum, a) => sum + a.base64_data.length, 0);
-}
 function scanAppAssets(rootDir, techStack) {
   const assets = [];
   const screenshotDirs = getScreenshotDirs(rootDir, techStack);
@@ -2131,17 +2129,7 @@ function scanAppAssets(rootDir, techStack) {
       break;
     }
   }
-  const result = assets.slice(0, MAX_TOTAL_ASSETS);
-  while (result.length > 0 && totalBase64Size(result) > MAX_TOTAL_BASE64_SIZE) {
-    let largestIdx = 0;
-    for (let i = 1; i < result.length; i++) {
-      if (result[i].base64_data.length > result[largestIdx].base64_data.length) {
-        largestIdx = i;
-      }
-    }
-    result.splice(largestIdx, 1);
-  }
-  return result;
+  return assets.slice(0, MAX_TOTAL_ASSETS);
 }
 
 // src/api/forvibe-client.ts
@@ -2239,6 +2227,59 @@ var ForvibeClient = class {
     }
     return await response.json();
   }
+  /**
+   * Request signed upload URLs for app assets. CLI uploads the binaries
+   * directly to Supabase Storage, avoiding Vercel's 4.5MB body limit on
+   * the report endpoint.
+   */
+  async getAssetUploadUrls(assets) {
+    if (!this.sessionToken) {
+      throw new Error("Not connected. Please validate OTC code first.");
+    }
+    const response = await fetchWithAuth(
+      `${this.baseUrl}/api/agent/assets/presign`,
+      {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+          Authorization: `Bearer ${this.sessionToken}`
+        },
+        body: JSON.stringify({ assets })
+      }
+    );
+    if (!response.ok) {
+      const bodyText = await response.text().catch(() => "");
+      let errorMessage;
+      try {
+        errorMessage = JSON.parse(bodyText).error;
+      } catch {
+      }
+      throw new Error(
+        errorMessage || `Failed to get upload URLs (HTTP ${response.status}: ${bodyText.substring(0, 200)})`
+      );
+    }
+    return await response.json();
+  }
+  /**
+   * PUT a binary asset directly to a Supabase Storage signed upload URL.
+   * Do NOT send our Bearer token — the signed URL carries its own auth.
+   */
+  async uploadAssetToSignedUrl(signedUrl, buffer, mimeType) {
+    const response = await fetch(signedUrl, {
+      method: "PUT",
+      headers: {
+        "Content-Type": mimeType,
+        "x-upsert": "true"
+      },
+      body: new Uint8Array(buffer)
+    });
+    if (!response.ok) {
+      const bodyText = await response.text().catch(() => "");
+      throw new Error(
+        `Supabase Storage upload failed (HTTP ${response.status}: ${bodyText.substring(0, 200)})`
+      );
+    }
+  }
   /**
    * Submit codebase review results for combined analysis
    */
@@ -2410,6 +2451,79 @@ function getAvailableProviders(deep = false) {
 }
 
 // src/commands/analyze.ts
+function mimeForPath(p) {
+  const ext = extname4(p).toLowerCase();
+  if (ext === ".jpg" || ext === ".jpeg") return "image/jpeg";
+  if (ext === ".webp") return "image/webp";
+  return "image/png";
+}
+async function uploadAssetsToStorage(client, rootDir, assets, appIconPath) {
+  const pending = [];
+  for (const asset of assets) {
+    if (!asset.base64_data) continue;
+    pending.push({
+      asset,
+      buffer: Buffer.from(asset.base64_data, "base64")
+    });
+  }
+  if (appIconPath) {
+    try {
+      const stat = statSync6(appIconPath);
+      if (stat.isFile() && stat.size <= 5 * 1024 * 1024) {
+        const buffer = readFileSync5(appIconPath);
+        pending.push({
+          asset: {
+            asset_type: "app_icon",
+            file_name: basename3(appIconPath),
+            mime_type: mimeForPath(appIconPath),
+            width: null,
+            height: null,
+            source_path: relative4(rootDir, appIconPath)
+          },
+          buffer
+        });
+      }
+    } catch {
+    }
+  }
+  if (pending.length === 0) return [];
+  const { uploads } = await client.getAssetUploadUrls(
+    pending.map((p) => ({
+      asset_type: p.asset.asset_type,
+      file_name: p.asset.file_name,
+      mime_type: p.asset.mime_type
+    }))
+  );
+  if (uploads.length !== pending.length) {
+    throw new Error(
+      `Upload slot count mismatch: requested ${pending.length}, got ${uploads.length}`
+    );
+  }
+  const concurrency = 3;
+  for (let i = 0; i < pending.length; i += concurrency) {
+    const chunk = pending.slice(i, i + concurrency);
+    const slots = uploads.slice(i, i + concurrency);
+    await Promise.all(
+      chunk.map(
+        (p, idx) => client.uploadAssetToSignedUrl(
+          slots[idx].signed_url,
+          p.buffer,
+          p.asset.mime_type
+        )
+      )
+    );
+  }
+  return pending.map((p, i) => ({
+    asset_type: p.asset.asset_type,
+    file_name: uploads[i].file_name,
+    mime_type: p.asset.mime_type,
+    width: p.asset.width,
+    height: p.asset.height,
+    source_path: p.asset.source_path,
+    storage_bucket: uploads[i].bucket,
+    storage_path: uploads[i].storage_path
+  }));
+}
 function askQuestion(question) {
   const rl = createInterface({
     input: process.stdin,
@@ -2848,6 +2962,36 @@ async function analyzeCommand(options) {
     console.log(chalk.gray("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
   }
   console.log();
+  try {
+    const uploadCount = (report.app_assets?.length ?? 0) + (branding.app_icon_path ? 1 : 0);
+    if (uploadCount > 0) {
+      const uploadSpinner = ora({
+        text: `Uploading ${uploadCount} asset${uploadCount === 1 ? "" : "s"}...`,
+        prefixText: "  "
+      }).start();
+      try {
+        const uploaded = await uploadAssetsToStorage(
+          client,
+          rootDir,
+          report.app_assets ?? [],
+          branding.app_icon_path
+        );
+        report.app_assets = uploaded;
+        report.app_icon_base64 = null;
+        uploadSpinner.succeed(chalk.green(`Uploaded ${uploaded.length} asset${uploaded.length === 1 ? "" : "s"}`));
+      } catch (uploadError) {
+        uploadSpinner.fail(
+          chalk.red(
+            `Asset upload failed: ${uploadError instanceof Error ? uploadError.message : "Unknown error"}`
+          )
+        );
+        process.exit(1);
+      }
+    }
+  } catch (e) {
+    console.error(chalk.red(`Asset upload error: ${e instanceof Error ? e.message : String(e)}`));
+    process.exit(1);
+  }
   const sendSpinner = ora({
     text: "Sending report to Forvibe...",
     prefixText: "  "
@@ -2956,7 +3100,7 @@ function parseFeatureAnalysis(response) {
 }
 
 // src/review/rag-selector.ts
-import { readFileSync as readFileSync5 } from "fs";
+import { readFileSync as readFileSync6 } from "fs";
 import { fileURLToPath } from "url";
 import path from "path";
 var DATA_FILES = [
@@ -2979,7 +3123,7 @@ function getDataDir() {
   ];
   for (const dir of candidates) {
     try {
-      readFileSync5(path.join(dir, "safety.json"));
+      readFileSync6(path.join(dir, "safety.json"));
       return dir;
     } catch {
     }
@@ -2992,7 +3136,7 @@ function loadAllStories() {
   const stories = [];
   for (const file of DATA_FILES) {
     try {
-      const content = readFileSync5(path.join(dataDir, file), "utf-8");
+      const content = readFileSync6(path.join(dataDir, file), "utf-8");
       const parsed = JSON.parse(content);
       stories.push(...parsed);
     } catch {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@forvibe/cli",
-  "version": "1.1.0",
+  "version": "1.1.1",
   "description": "Forvibe CLI - AI-powered project analyzer for App Store automation",
   "type": "module",
   "bin": {