@modelstatus/cli 0.1.25 → 0.1.27

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@modelstatus/cli",
-  "version": "0.1.25",
+  "version": "0.1.27",
   "description": "Track which AI models you use, where, and never get surprised by a retirement. Free offline model-health for any repo (mm status), browser sign-in for cloud inventory + alerts.",
   "keywords": [
     "llm",

package/src/detect/core.js

@@ -3,9 +3,11 @@
  * returns the model strings found per line. No I/O. */
 
 // File extensions / TLDs the family globs accidentally swallow
-// (e.g. "command-2.0.0.tgz", "grok-free.app"). Used to reject generic matches.
+// (e.g. "command-2.0.0.tgz", "grok-free.app", "llama-3.gguf"). Used to reject
+// generic matches. Includes model-WEIGHT/data/media extensions so a weight-file
+// reference (llama-3.safetensors) isn't mistaken for a model usage.
 const BANNED_TAIL =
-  /\.(tgz|tar|gz|zip|js|ts|tsx|jsx|mjs|py|go|rb|json|md|lock|sh|css|html|txt|log|yaml|yml|toml|ini|conf|cfg|env|pem|crt|key|csv|xml|pdf|sql|app|com|net|io|dev|org|ai|co)\b/;
+  /\.(tgz|tar|gz|zip|js|ts|tsx|jsx|mjs|py|go|rb|json|md|lock|sh|css|html|txt|log|yaml|yml|toml|ini|conf|cfg|env|pem|crt|key|csv|xml|pdf|sql|gguf|safetensors|bin|onnx|pt|pth|ckpt|h5|npz|parquet|arrow|jpeg|jpg|png|gif|webp|bmp|svg|mp4|wav|app|com|net|io|dev|org|ai|co)\b/;
 
 /** Trim leading/trailing separators a greedy family glob can capture. */
 function cleanGeneric(s) {
@@ -19,17 +21,31 @@ function isTokenChar(ch) {
   return /[A-Za-z0-9._/:-]/.test(ch);
 }
 
-/** True when `term` occurs in `haystack` at a word-ish boundary (not embedded
- * inside a longer identifier). Both are already lower-cased. This is what stops
- * the alias "gpt-4" from matching inside "gpt-4o-mini" (→ wrong, older model). */
+// Provider prefixes legitimately precede an id ("anthropic.claude-…", "ft:gpt-…",
+// "us.anthropic.…", "openrouter/…"), so '.' ':' '/' on the LEFT is still a boundary.
+function isPrefixSep(ch) {
+  return ch === "." || ch === ":" || ch === "/";
+}
+// Known model-id SUFFIXES seen in real configs: Bedrock ':0'/'-v1', dated
+// '-20250514' snapshots, '@version'. The remainder starting with one is still a
+// boundary — so "claude-opus-4-20250514" resolves inside a Bedrock ARN, while
+// "gpt-4" still does NOT match inside "gpt-4o". Kept identical to scan-pr.ts.
+const MODEL_SUFFIX = /^(:|-v[0-9]|-[0-9]{6,}|@)/;
+
+/** True when `term` occurs in `haystack` at a model-id boundary — tolerating
+ * provider prefixes + known version/region/snapshot suffixes, but NOT a plain
+ * embedded match. Both are already lower-cased. */
 function matchesAtBoundary(haystack, term) {
   let from = 0;
   for (;;) {
     const at = haystack.indexOf(term, from);
     if (at < 0) return false;
     const before = at > 0 ? haystack[at - 1] : "";
-    const after = at + term.length < haystack.length ? haystack[at + term.length] : "";
-    if ((before === "" || !isTokenChar(before)) && (after === "" || !isTokenChar(after))) return true;
+    const rest = haystack.slice(at + term.length);
+    const after = rest[0] ?? "";
+    const boundedLeft = before === "" || !isTokenChar(before) || isPrefixSep(before);
+    const boundedRight = after === "" || !isTokenChar(after) || MODEL_SUFFIX.test(rest);
+    if (boundedLeft && boundedRight) return true;
     from = at + 1; // a later occurrence may be bounded
   }
 }
@@ -45,7 +61,10 @@ function looksLikeModel(s) {
 export function compilePatterns(patterns) {
   const exact = [];
   for (const ms of patterns.model_strings || []) {
-    if (ms.match && ms.match.length >= 4) exact.push(ms.match.toLowerCase());
+    // Registry strings are curated, and the boundary matcher prevents embedded
+    // matches — so a low floor is safe and lets short real ids (o1, o3) resolve.
+    // (The old >=4 floor silently dropped the entire OpenAI o-series.)
+    if (ms.match && ms.match.length >= 2) exact.push(ms.match.toLowerCase());
   }
   const generic = (patterns.generic_model_regexes || []).map((r) => new RegExp(r, "gi"));
   return { exact, generic };

package/src/index.js

@@ -4,6 +4,7 @@ import path from "node:path";
 import { resolveAuth, loadConfig, saveConfig, clearAuth, configFilePath } from "./config.js";
 import { createClient } from "./api.js";
 import { collectFrom, availability, ALL_SOURCE_IDS } from "./sources/index.js";
+import { redactValue } from "./redact.js";
 import { loginViaBrowser } from "./auth.js";
 import { maybeCheckForUpdate } from "./updater.js";
 import { track, maybeAnalyticsNotice } from "./telemetry.js";
@@ -170,7 +171,9 @@ async function cmdScan(positional, flags) {
 
   const usages = rows.map((r) => ({
     model_id: r.model_id ?? undefined,
-    custom_model_name: r.model_id ? undefined : r.model_string,
+    // Redact + bound the custom id: a generic-glob hit on an .env line can over-
+    // capture a secret-ish fragment, and only the snippet was being redacted.
+    custom_model_name: r.model_id ? undefined : redactValue(r.model_string).slice(0, 120),
     environment: r.environment,
     location_label: r.location_label,
     source_repo: ghRepoSlug() || undefined,
@@ -241,7 +244,7 @@ async function ciReport(dir, flags, res) {
     seen.add(k);
     usages.push({
       model_id: r?.model_id ?? undefined,
-      custom_model_name: r?.model_id ? undefined : c.model_string,
+      custom_model_name: r?.model_id ? undefined : redactValue(c.model_string).slice(0, 120),
       environment: c.environment,
       location_label: c.location_label,
       source_path: c.source_path,

package/src/tui/app.js

@@ -171,8 +171,8 @@ export function App({ apiBase, apiKey, dir, initialView, onSignedIn, fresh }) {
   } else if (showSignInGate) {
     body = h(EmptyCard, {
       icon: GLYPH.spark,
-      title: `${current2.label} needs a sign-in`,
-      lines: ["Press 7 for Account to sign in with your browser.", "Tabs 1-2 (Here, What's New) work without an account."],
+      title: "Track your AI models across every project",
+      lines: [`${current2.label} syncs with your account — press 7 to sign in with your browser.`, "No account needed: tabs 1-2 (Here, What's New) work offline."],
       width: W,
     });
     keys = GATE_KEYS;

package/src/tui/ui.js

@@ -614,11 +614,17 @@ export function ModelDetailBar({ title, health, model, refs = [], width, height
   const W = Math.max(20, width);
   const focused = refCursor >= 0;
   const rt = model && model.retires_date ? relativeTime(model.retires_date) : null;
+  // A model retiring within 7 days earns a quiet ✦ on its detail header — a rare,
+  // earned "this one's hot" marker. Static (no animation); ASCII-safe (GLYPH.spark → *).
+  const retiresInDays = model && model.retires_date
+    ? Math.round((new Date(model.retires_date).getTime() - Date.now()) / 86_400_000)
+    : null;
+  const imminent = retiresInDays !== null && retiresInDays >= 0 && retiresInDays <= 7;
   const lines = [];
   // separator rule
   lines.push(h(Text, { key: "rule", color: C.BORDER }, "─".repeat(W)));
   // header: health glyph + slug (strong) + health word, padded to W
-  const hg = `${healthGlyph(health)} `;
+  const hg = `${imminent ? `${GLYPH.spark} ` : ""}${healthGlyph(health)} `;
   const hw = `  ${health}`;
   const slugW = Math.max(8, W - hg.length - hw.length);
   lines.push(

package/src/tui/views/alerts.js

@@ -135,7 +135,7 @@ export function AlertsView({ client, ui, active, width = 78, height = 14 }) {
     body = h(StateLine, { kind: "loading", spin: SPINNER[tick % SPINNER.length], text: tab === 0 ? "loading rules…" : "loading channels…" });
   } else if (tab === 0) {
     if (!ruleList.length) {
-      body = h(EmptyCard, { title: "No alert rules", lines: ["A rule notifies you when models you use are deprecated/retired or get a replacement.", "Press n for a sensible default (your models · in-app + email · 90/30/7/1-day lead times)."], width });
+      body = h(EmptyCard, { title: "No alert rules yet", lines: ["Stay ahead of your model timeline — a heads-up 90, 30, 7, and 1 day before anything you use is deprecated or retired.", "Press n to set the sensible default (your models · in-app + email · those lead times)."], width });
     } else {
       const curIdx = clampCursor(cursor, ruleList.length);
       const fixed = 2 + 26 + 1 + 10 + 1; // glyph + name + gap + delivery + gap

package/src/tui/views/inventory.js

@@ -95,8 +95,11 @@ export function InventoryView({ client, ui, dir = ".", active, width = 78, heigh
   if (!usages.length)
     return h(EmptyCard, {
       icon: GLYPH.spark,
-      title: "No tracked usages yet",
-      lines: ["Press 4 Scan to import a repo, or 5 Add to enter one."],
+      title: "Let's find your AI models",
+      lines: [
+        "Press 4 Scan to auto-detect every model used in this repo.",
+        "Or press 5 Add to enter one by name — takes about 30 seconds.",
+      ],
       width,
     });
 

package/src/tui/views/local.js

@@ -220,7 +220,15 @@ export function LocalView({ dir, ui, width = 78, height = 14, active = true, fre
     Box,
     { flexDirection: "column" },
     strip,
-    emptyDone ? h(Text, { color: C.FG_DIM }, search.query ? `  no matches for "${search.query}"` : "  No AI model references found here.") : null,
+    emptyDone
+      ? h(
+          Text,
+          { color: C.FG_DIM },
+          search.query
+            ? `  No matches for "${search.query}" — try a broader term, or esc to clear.`
+            : "  No AI model calls here yet — this folder looks clean.",
+        )
+      : null,
     ...rowNodes,
     showingLine,
     cur ? h(ModelDetailBar, { title: cur.slug, health: cur.health, model: cur.model, refs: cur.refs, width, height: panelH, refCursor: focus === "refs" ? clampCursor(refIdx, drefs.length) : -1, snippet }) : null,

package/src/tui/views/scan.js

@@ -240,7 +240,7 @@ export function ScanView({ client, dir, ui, active, width = 78, height = 14, fre
   if (scan.phase === "error") return h(StateLine, { kind: "error", text: scan.error });
   if (running && !items.length) return h(StateLine, { kind: "scanning", spin: SPINNER[tick % SPINNER.length], text: `scanning ${dir}…` });
   if (!items.length)
-    return h(EmptyCard, { icon: GLYPH.spark, title: `No model usage found in ${path.basename(dir)}`, lines: ["Press g to rescan, or 5 Add to enter one manually."], width });
+    return h(EmptyCard, { icon: GLYPH.spark, title: `No models found in ${path.basename(dir)} — yet`, lines: ["We looked through code, config, and prompt files for model ids.", "Press g to rescan, 1 Here to try another project, or 5 Add to enter one by hand."], width });
 
   const L = layout(width);
   const view = filtered.slice(nav.start, nav.start + pageSize);