@patchstack/connect 0.3.13 → 0.3.14

package/dist/cli.js

@@ -1577,7 +1577,7 @@ function renderGuideChecklist(state, useColor) {
     lines.push(done(`@patchstack/connect installed (${state.installed.version}, ${state.installed.section})`));
   } else {
     lines.push(todo("Install @patchstack/connect as a dev dependency"));
-    lines.push(detail(`\u2192 ${installCommand(state.packageManager)}`));
+    lines.push(detail(`Run \u2192 ${installCommand(state.packageManager)}`));
     if (state.packageManager === "bun") {
       lines.push(detail(`(if bun isn't available here, ${INSTALL_COMMANDS.npm} works too)`));
     }
@@ -1586,22 +1586,22 @@ function renderGuideChecklist(state, useColor) {
     lines.push(done(`Site provisioned (${state.siteUuid})`));
   } else {
     lines.push(todo("Provision the site \u2014 run the first scan"));
-    lines.push(detail("\u2192 npx @patchstack/connect scan"));
-    lines.push(detail("Reads the lockfile, registers the project, writes .patchstackrc.json,"));
+    lines.push(detail("Run \u2192 npx @patchstack/connect scan"));
+    lines.push(detail("reads the lockfile, registers the project, writes .patchstackrc.json,"));
     lines.push(detail("and prints a claim URL \u2014 show that URL to the user; never open it yourself."));
   }
   if (state.prebuildWired && state.postbuildWired) {
     lines.push(done("Build hooks wired (scan before builds, mark-build after)"));
   } else if (state.packageManager === "bun") {
-    lines.push(todo("Wire builds \u2014 chain into the package.json build script (bun skips pre/post hooks)"));
-    lines.push(detail('\u2192 "build": "patchstack-connect scan && <existing build command> && patchstack-connect mark-build"'));
+    lines.push(todo('Wire the build hooks yourself \u2014 edit package.json (bun skips pre/post hooks, so chain inside "build")'));
+    lines.push(detail('Edit package.json \u2192 "build": "patchstack-connect scan && <existing build command> && patchstack-connect mark-build"'));
   } else {
-    lines.push(todo("Wire builds \u2014 add to package.json scripts (chain with && if a hook exists)"));
+    lines.push(todo('Wire the build hooks yourself \u2014 edit package.json "scripts" (chain with && if a hook already exists)'));
     if (!state.prebuildWired) {
-      lines.push(detail('\u2192 "prebuild": "patchstack-connect scan"'));
+      lines.push(detail('Edit package.json \u2192 "prebuild": "patchstack-connect scan"'));
     }
     if (!state.postbuildWired) {
-      lines.push(detail('\u2192 "postbuild": "patchstack-connect mark-build"'));
+      lines.push(detail('Edit package.json \u2192 "postbuild": "patchstack-connect mark-build"'));
     }
   }
   const widgetOk = state.widgetInstalled && state.widgetTokenMatches !== false;
@@ -1610,16 +1610,16 @@ function renderGuideChecklist(state, useColor) {
   } else if (widgetOk) {
     lines.push(done("Disclosure widget installed"));
   } else if (state.widgetInstalled) {
-    lines.push(todo("Disclosure widget found, but its site UUID doesn't match this project's"));
-    lines.push(detail(`\u2192 a wrong site UUID makes the widget silently no-op; set data-site-uuid (or userToken) to '${state.siteUuid}'`));
+    lines.push(todo("Fix the disclosure widget yourself \u2014 its site UUID doesn't match this project's"));
+    lines.push(detail(`Edit the widget tag \u2192 set data-site-uuid (or userToken) to '${state.siteUuid}' (a wrong UUID makes the widget silently no-op)`));
   } else if (state.siteUuid === null) {
     lines.push(todo('Add the "Report a vulnerability" widget \u2014 the first scan does this for you'));
-    lines.push(detail("\u2192 `npx @patchstack/connect scan` provisions the site and adds the widget tag"));
-    lines.push(detail("  to the root HTML shell (index.html / public/index.html / src/app.html)."));
+    lines.push(detail("Run \u2192 npx @patchstack/connect scan  (provisions the site and adds the widget tag"));
+    lines.push(detail("  to the root HTML shell: index.html / public/index.html / src/app.html)"));
   } else {
-    lines.push(todo('Add the "Report a vulnerability" widget'));
-    lines.push(detail("\u2192 a normal `scan` adds this tag to a plain HTML shell automatically;"));
-    const placement = state.widgetFileHint !== null ? `  for this project put it in ${state.widgetFileHint}, just before </body>:` : "  put it just before </body> via the framework's HTML/layout mechanism (never a JS entry point):";
+    lines.push(todo('Add the "Report a vulnerability" widget yourself \u2014 this root is code, not a plain HTML shell'));
+    lines.push(detail("Note \u2192 a normal `scan` adds this tag to a plain HTML shell automatically; add it by hand here:"));
+    const placement = state.widgetFileHint !== null ? `Edit ${state.widgetFileHint} \u2192 put it just before </body>:` : "Edit your root layout \u2192 put it just before </body> (the framework's HTML/layout mechanism, never a JS entry point):";
     lines.push(detail(placement));
     lines.push(detail(`  ${buildWidgetTag(state.siteUuid)}`));
     lines.push(detail("The site UUID is public by design \u2014 it ships in client-side HTML."));
@@ -1723,25 +1723,6 @@ function scaffold(cwd) {
   copyFileSync(join(TEMPLATES, "rules.json"), join(dst, "rules.json"));
   log("scaffolded guard.ts + rules.json");
 }
-function bakeSiteUuid(cwd) {
-  const rc = join(cwd, ".patchstackrc.json");
-  if (!existsSync4(rc)) return log("no .patchstackrc.json \u2014 guard uses PATCHSTACK_SITE_UUID env or the bundled fallback");
-  let uuid;
-  try {
-    uuid = JSON.parse(read(rc)).siteUuid;
-  } catch {
-    return log(".patchstackrc.json unreadable \u2014 skipping site-UUID bake");
-  }
-  if (!uuid || !/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(uuid)) {
-    return log(".patchstackrc.json siteUuid missing or malformed \u2014 guard uses PATCHSTACK_SITE_UUID env or the bundled fallback");
-  }
-  const p = join(cwd, "src/integrations/patchstack/guard.ts");
-  if (!existsSync4(p)) return;
-  const s = read(p);
-  if (!s.includes("__PATCHSTACK_SITE_UUID__")) return log("guard.ts site UUID already baked");
-  writeFileSync2(p, s.replace("__PATCHSTACK_SITE_UUID__", uuid));
-  log("baked site UUID into guard.ts \u2014 live rules from the Patchstack API");
-}
 function patchClient(cwd) {
   const p = join(cwd, "src/integrations/supabase/client.ts");
   let s = read(p);
@@ -1796,7 +1777,6 @@ function runProtect(cwd) {
     return;
   }
   scaffold(cwd);
-  bakeSiteUuid(cwd);
   patchClient(cwd);
   patchStart(cwd);
   log("done \u2014 guard wired and always-on (blocks by default). Set PATCHSTACK_MODE=dry-run for log-only.");
@@ -1977,6 +1957,19 @@ async function runScan(args) {
       console.log("  (this URL inherits the endpoint override above)");
     }
   }
+  try {
+    const state = await collectGuideState(process.cwd());
+    const remaining = countRemainingSteps(state);
+    if (remaining > 0) {
+      const hooksMissing = !(state.prebuildWired && state.postbuildWired);
+      console.log("");
+      console.log(
+        `Setup not complete \u2014 ${remaining} step(s) remaining${hooksMissing ? ", including the package.json build hooks (which scan can't wire)" : ""}.`
+      );
+      console.log("Run `npx @patchstack/connect guide` for the exact steps to finish for this project.");
+    }
+  } catch {
+  }
   return 0;
 }
 function reportSourceWidget(siteUuid) {