@prave/cli 1.4.0 → 1.4.1

package/dist/commands/list.js

@@ -5,6 +5,7 @@ import { tokenTier } from '@prave/shared';
 import { track } from '../lib/analytics.js';
 import { api } from '../lib/api.js';
 import { CONFIG } from '../lib/config.js';
+import { nudgeIfAnonymous } from '../lib/nudge.js';
 import { log } from '../utils/logger.js';
 const TIER_EMOJI = {
     lean: '🟢',
@@ -68,6 +69,7 @@ export async function listCommand(opts = {}) {
             console.log(`  ${chalk.cyan('•')} ${name}`);
         }
         log.dim(`\n${localSlugs.length} local skill${localSlugs.length === 1 ? '' : 's'} in ${CONFIG.skillsDir}`);
+        await nudgeIfAnonymous('list');
         return;
     }
     // Enriched path — pull intelligence and merge by slug (best-effort).

package/dist/commands/search.js

@@ -1,6 +1,7 @@
 import chalk from 'chalk';
 import { track } from '../lib/analytics.js';
 import { api } from '../lib/api.js';
+import { nudgeIfAnonymous } from '../lib/nudge.js';
 import { log } from '../utils/logger.js';
 const SLUG_COL = 32;
 function formatInstalls(n) {
@@ -41,4 +42,5 @@ export async function searchCommand(query) {
     if (skills.length > 0) {
         console.log(chalk.dim('  → prave install <slug>'));
     }
+    await nudgeIfAnonymous('search');
 }

package/dist/commands/uninstall.js

@@ -2,15 +2,23 @@ import { rm } from 'node:fs/promises';
 import { join, resolve, sep } from 'node:path';
 import ora from 'ora';
 import { track } from '../lib/analytics.js';
+import { api, ApiError } from '../lib/api.js';
 import { CONFIG } from '../lib/config.js';
+import { loadCredentials } from '../lib/credentials.js';
 import { assertSlug, InvalidSlugError } from '../lib/slug.js';
 /**
- * `prave uninstall <slug>` — removes ~/.claude/skills/<slug> recursively.
- * No remote call: uninstalls are local-only; the install record stays
- * for analytics + history.
+ * `prave uninstall <slug>` — removes ~/.claude/skills/<slug> AND tells
+ * the server to drop the corresponding install record so the
+ * dashboard counter goes down.
  *
- * Slug is validated against [a-z0-9][a-z0-9-]{0,63} before any path math
- * so a hostile arg like `../../etc` cannot escape the skills directory.
+ * The remote DELETE is best-effort: a network failure or "not logged
+ * in" state still lets the local rm succeed (so the user isn't stuck
+ * with dead files when offline). The mismatch then heals on the next
+ * `prave sync` or manual dashboard cleanup.
+ *
+ * Slug is validated against [a-z0-9][a-z0-9-]{0,63} before any path
+ * math so a hostile arg like `../../etc` cannot escape the skills
+ * directory.
  */
 export async function uninstallCommand(slug) {
     track('cli_uninstall', { slug });
@@ -37,10 +45,33 @@ export async function uninstallCommand(slug) {
     const spinner = ora(`Removing ${slug}…`).start();
     try {
         await rm(dir, { recursive: true, force: true });
-        spinner.succeed(`Removed ${dir}`);
     }
     catch (err) {
-        spinner.fail(`Couldn’t remove ${slug}: ${err.message}`);
+        spinner.fail(`Couldn't remove ${slug}: ${err.message}`);
         process.exitCode = 1;
+        return;
+    }
+    // Best-effort server-side ledger sweep. We only attempt it when the
+    // user is logged in — anonymous CLI usage (running before
+    // `prave login`) still does the local rm and exits cleanly.
+    const creds = await loadCredentials();
+    if (creds) {
+        try {
+            await api.del(`/api/v1/skills/${encodeURIComponent(slug)}/install`, true);
+            spinner.succeed(`Removed ${slug} (local + server install record)`);
+        }
+        catch (err) {
+            // 404 = install record already absent (matches our idempotent
+            // server behaviour). Anything else is a soft warning.
+            if (err instanceof ApiError && err.status === 404) {
+                spinner.succeed(`Removed ${slug} (local; server had no install record)`);
+            }
+            else {
+                spinner.warn(`Removed ${slug} locally — server ledger update failed (${err.message}). Run \`prave sync\` later to reconcile.`);
+            }
+        }
+    }
+    else {
+        spinner.succeed(`Removed ${slug} (local only — not signed in)`);
     }
 }

package/dist/commands/whatdoes.js

@@ -3,6 +3,7 @@ import ora from 'ora';
 import { tokenTier } from '@prave/shared';
 import { track } from '../lib/analytics.js';
 import { api, ApiError } from '../lib/api.js';
+import { nudgeIfAnonymous } from '../lib/nudge.js';
 import { log } from '../utils/logger.js';
 const TIER_BADGE = {
     lean: chalk.green('🟢 Lean'),
@@ -71,6 +72,7 @@ export async function whatdoesCommand(skillName) {
         console.log(`🔗 Requires:      ${requires}`);
         console.log(`${data.conflicts.length > 0 ? chalk.yellow('⚠️ ') : '⚠️ '}Conflicts:     ${conflicts}`);
         console.log(chalk.dim(RULE));
+        await nudgeIfAnonymous('whatdoes');
     }
     catch (err) {
         spinner.stop();

package/dist/lib/nudge.js

@@ -0,0 +1,61 @@
+import chalk from 'chalk';
+import { loadCredentials } from './credentials.js';
+let alreadyNudged = false;
+export async function nudgeIfAnonymous(context = 'generic') {
+    if (alreadyNudged)
+        return;
+    if (process.env.PRAVE_QUIET === '1')
+        return;
+    if (process.env.PRAVE_TELEMETRY === '0')
+        return; // user opted out of analytics
+    // CI / non-interactive shells are unlikely to act on a nudge — and
+    // the noise breaks pipe-parsing scripts.
+    if (!process.stdout.isTTY)
+        return;
+    const creds = await loadCredentials();
+    if (creds)
+        return; // logged-in → no nudge
+    alreadyNudged = true;
+    const cta = chalk.cyan('prave login');
+    const url = chalk.dim('— takes 10 seconds, free forever');
+    const message = (() => {
+        switch (context) {
+            case 'search':
+                return `${chalk.dim('Save these to your library, get token costs + conflicts.')}\n${chalk.dim('→')} ${cta} ${url}`;
+            case 'whatdoes':
+                return `${chalk.dim('Want the full audit — triggers, conflicts, token cost?')}\n${chalk.dim('→')} ${cta} ${url}`;
+            case 'list':
+                return `${chalk.dim('Sign in to see AI descriptions, conflicts and token cost.')}\n${chalk.dim('→')} ${cta} ${url}`;
+            case 'overview':
+                return `${chalk.dim('Track this over time on prave.app.')}\n${chalk.dim('→')} ${cta} ${url}`;
+            case 'generic':
+            default:
+                return `${chalk.dim('Get the full Skill Intelligence on prave.app.')}\n${chalk.dim('→')} ${cta} ${url}`;
+        }
+    })();
+    // One blank line so the nudge isn't glued to the command's main
+    // output. Two `console.log` calls so the chalk styles survive the
+    // pipeline cleanly.
+    console.log();
+    console.log(message);
+}
+/**
+ * Post-install banner used by package.json's `postinstall` script.
+ * Runs once after `npm i -g @prave/cli`. Stays short — npm's install
+ * log is already crowded.
+ */
+export function printPostInstallBanner() {
+    if (process.env.CI)
+        return;
+    if (process.env.PRAVE_QUIET === '1')
+        return;
+    console.log();
+    console.log(chalk.bold(`  Prave CLI installed.`));
+    console.log();
+    console.log(`  ${chalk.cyan('prave login')}        ${chalk.dim('— create your free account (browser)')}`);
+    console.log(`  ${chalk.cyan('prave search <q>')}   ${chalk.dim('— find any Claude Skill')}`);
+    console.log(`  ${chalk.cyan('prave docs')}         ${chalk.dim('— open the docs')}`);
+    console.log();
+    console.log(chalk.dim('  Docs: https://prave.app/docs · Issues: github.com/eppstudio/prave'));
+    console.log();
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@prave/cli",
-  "version": "1.4.0",
+  "version": "1.4.1",
   "description": "Prave CLI — discover, install, version, test, and ship Claude Skills. The developer platform for the complete Skill lifecycle.",
   "type": "module",
   "keywords": [
@@ -43,7 +43,8 @@
   },
   "main": "dist/index.js",
   "files": [
-    "dist"
+    "dist",
+    "scripts/postinstall.mjs"
   ],
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
@@ -53,7 +54,7 @@
     "ora": "^8.0.1",
     "tar": "^7.4.3",
     "undici": "^6.18.0",
-    "@prave/shared": "1.4.0"
+    "@prave/shared": "1.4.1"
   },
   "devDependencies": {
     "@types/node": "^20.12.7",
@@ -69,6 +70,7 @@
     "cli": "tsx src/index.ts",
     "build": "tsc -p tsconfig.json && node scripts/inject-config.mjs",
     "typecheck": "tsc -p tsconfig.json --noEmit",
-    "lint": "tsc -p tsconfig.json --noEmit"
+    "lint": "tsc -p tsconfig.json --noEmit",
+    "postinstall": "node scripts/postinstall.mjs"
   }
 }

package/scripts/postinstall.mjs

@@ -0,0 +1,31 @@
+#!/usr/bin/env node
+/**
+ * npm postinstall hook. Runs once after `npm i -g @prave/cli` (and on
+ * upgrades). Prints a small "you're set — what now?" banner so the
+ * thousands of CLI installs we're seeing actually find the dashboard
+ * + the docs.
+ *
+ * Silent in CI / non-interactive shells / when PRAVE_QUIET=1 is set.
+ * Also silent on dependent installs — npm sets `npm_config_global` to
+ * 'false' or unset when we're being installed as a dependency, and
+ * the banner is only useful for the global-install user.
+ */
+if (process.env.CI) process.exit(0)
+if (process.env.PRAVE_QUIET === '1') process.exit(0)
+// `npm_config_global` is `'true'` only for `npm i -g`. Skip for local
+// dependency installs (e.g. when our worker container builds).
+if (process.env.npm_config_global !== 'true') process.exit(0)
+
+const dim = (s) => `\x1b[2m${s}\x1b[0m`
+const bold = (s) => `\x1b[1m${s}\x1b[0m`
+const cyan = (s) => `\x1b[36m${s}\x1b[0m`
+
+console.log()
+console.log(`  ${bold('Prave CLI installed.')}`)
+console.log()
+console.log(`  ${cyan('prave login')}        ${dim('— create your free account (browser)')}`)
+console.log(`  ${cyan('prave search <q>')}   ${dim('— find any Claude Skill')}`)
+console.log(`  ${cyan('prave docs')}         ${dim('— open the docs')}`)
+console.log()
+console.log(dim('  Docs: https://prave.app/docs · Issues: github.com/eppstudio/prave'))
+console.log()