@rankcli/cli 0.0.30 → 0.0.32

package/README.md

@@ -157,7 +157,11 @@ The gates are opt-in: without them, a completed audit exits `0` however many iss
 
 #### AI analysis (`--ai`)
 
-AI analysis runs on your own provider - nothing goes through RankCLI. With no `--ai-provider`, the first key found wins, in this order (OpenRouter first):
+AI analysis runs on your own provider - nothing goes through RankCLI.
+
+**On a Mac with Apple Intelligence, it's the default.** On macOS 26 or later on Apple silicon with Apple Intelligence turned on, `--ai` uses Apple's on-device model: free, private, no key and no network round trip. The first run builds a small Swift helper with the Xcode command-line tools (a few seconds, cached in `~/Library/Caches/rankcli`). The on-device model has a small context window, so it sees the 25 most severe issues. To use another provider, pass `--ai-provider`, or set it once with `RANKCLI_AI_PROVIDER=openrouter` (any provider id below).
+
+Otherwise, with no `--ai-provider`, the first key found wins, in this order (OpenRouter first):
 
 | Provider | Env var | Base URL | Default model |
 |----------|---------|----------|---------------|
@@ -256,10 +260,10 @@ jobs:
       - run: rankcli audit --url "$SITE_URL" --fail-on error --min-score 80 -o json > "$RUNNER_TEMP/audit.json"
         env:
           SITE_URL: ${{ vars.SITE_URL }}
-          RANKCLI_API_KEY: ${{ secrets.RANKCLI_API_KEY }}   # optional: paid-plan checks + dashboard sync
+          RANKCLI_API_KEY: ${{ secrets.RANKCLI_API_KEY }}   # optional: dashboard sync + your plan's limits
 ```
 
-`rankcli setup --github-action --url https://yoursite.com [--sync]` writes a scheduled workflow that files the report as an issue (and, with `--sync` and a Solo+ key, opens auto-fix PRs).
+`rankcli setup --github-action --url https://yoursite.com [--sync]` writes a scheduled workflow that files the report as an issue (and, with `--sync` and a RankCLI API key, opens auto-fix PRs - 3 a month on Free).
 
 ## Environment Variables
 
@@ -278,11 +282,13 @@ The npm package needs **Node 20.19+ or 22.12+** (any 23+ works). The CLI is a Co
 
 | Feature | Free | Solo+ (from $9/mo) |
 |---------|------|--------------|
-| SEO Checks | 100 | 280+ |
-| GEO Analysis | Basic | Full |
-| Framework Fixes | - | ✅ 25+ |
-| Auto-Fix PRs | - | ✅ |
-| Sites | 1 | 3+ |
+| SEO + GEO checks | All 280+ | All 280+ |
+| Local fixes (`rankcli fix`, 25+ frameworks) | ✅ | ✅ |
+| Auto-fix PRs (GitHub App) | 3 a month | ✅ |
+| Hosted sites | 1, audited weekly | 3+, weekly or daily |
+| Slack & Discord alerts | - | ✅ |
+
+See [rankcli.dev/pricing](https://rankcli.dev/pricing).
 
 ## Links
 

package/dist/index.js

@@ -45,19 +45,19 @@ var import_node_crypto = require("crypto");
 var import_supabase_js = require("@supabase/supabase-js");
 var INJECTED_CONFIG = {"supabaseUrl":"https://bspljbxwbjiqueeyzyat.supabase.co","supabaseAnonKey":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6ImJzcGxqYnh3YmppcXVlZXl6eWF0Iiwicm9sZSI6ImFub24iLCJpYXQiOjE3NjkyNzQ1NTksImV4cCI6MjA4NDg1MDU1OX0.7gprxM2gT9cZ99sjZURLltrln78dEnwyFFKYpTzBaUU","webAppUrl":"https://rankcli.dev","decryptPassphrase":"lKFLeIw/xGPa6E8c4XswZX/oiLtJf/yLF/Y6zwovte8="};
 function getSupabaseUrl() {
-  const url = process.env.RANKCLI_SUPABASE_URL || process.env.VITE_SUPABASE_URL || INJECTED_CONFIG?.supabaseUrl;
+  const url = process.env.RANKCLI_SUPABASE_URL || INJECTED_CONFIG?.supabaseUrl;
   if (!url) {
     throw new Error(
-      "Supabase URL not configured. Set RANKCLI_SUPABASE_URL environment variable.\nSee: https://rankcli.dev/docs/cli-setup"
+      "Supabase URL not configured. Set RANKCLI_SUPABASE_URL environment variable.\nSee: https://rankcli.dev/docs#getting-started"
     );
   }
   return url;
 }
 function getSupabaseAnonKey() {
-  const key = process.env.RANKCLI_SUPABASE_ANON_KEY || process.env.VITE_SUPABASE_ANON_KEY || INJECTED_CONFIG?.supabaseAnonKey;
+  const key = process.env.RANKCLI_SUPABASE_ANON_KEY || INJECTED_CONFIG?.supabaseAnonKey;
   if (!key) {
     throw new Error(
-      "Supabase anon key not configured. Set RANKCLI_SUPABASE_ANON_KEY environment variable.\nSee: https://rankcli.dev/docs/cli-setup"
+      "Supabase anon key not configured. Set RANKCLI_SUPABASE_ANON_KEY environment variable.\nSee: https://rankcli.dev/docs#getting-started"
     );
   }
   return key;
@@ -1110,23 +1110,25 @@ var import_chalk4 = __toESM(require("chalk"));
 var import_chalk3 = __toESM(require("chalk"));
 var WEB_APP_URL2 = "https://rankcli.dev";
 var TIER_LIMITS = {
+  // Every plan runs every check (pricing-tiers.json: free_audit / free_registered 280). Plans
+  // differ in sites, schedules, pages per audit, PRs and alerts - not in what an audit checks.
   free_anon: {
-    checks: 50,
+    checks: 280,
     sites: 0,
     domains_per_month: 1,
-    features: { geo: false, auto_fix: false, github: false, ai: false }
+    features: { geo: true, auto_fix: true, github: false, ai: false }
   },
   free: {
-    checks: 100,
+    checks: 280,
     sites: 1,
     domains_per_month: 2,
-    features: { geo: "basic", auto_fix: false, github: false, ai: false }
+    features: { geo: true, auto_fix: true, github: true, ai: false }
   },
   solo: {
     checks: 280,
     sites: 3,
     domains_per_month: 5,
-    features: { geo: true, auto_fix: true, github: false, ai: true }
+    features: { geo: true, auto_fix: true, github: true, ai: true }
   },
   pro: {
     checks: 280,
@@ -1152,21 +1154,14 @@ var UPSELL_MESSAGES = {
   free_audit_complete: () => [
     "",
     import_chalk3.default.yellow("\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501"),
-    import_chalk3.default.yellow.bold("  \u{1F680} Get 2x more checks + audit history"),
-    import_chalk3.default.dim("  Create a free account to unlock 100 checks and save your results."),
+    import_chalk3.default.yellow.bold("  \u{1F680} Keep this site audited, free"),
+    import_chalk3.default.dim("  A free account audits one site weekly, keeps the history and"),
+    import_chalk3.default.dim("  emails you a weekly report."),
     "",
     import_chalk3.default.cyan(`  \u2192 rankcli login`),
     import_chalk3.default.yellow("\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501"),
     ""
   ],
-  // When checks limit is reached
-  checks_limit: (ctx) => [
-    "",
-    import_chalk3.default.yellow(`\u26A0\uFE0F  Running ${ctx.current || 50} of ${TIER_LIMITS.solo.checks} available checks`),
-    import_chalk3.default.dim(`   Unlock all ${TIER_LIMITS.solo.checks}+ checks with Solo ($9/mo)`),
-    import_chalk3.default.cyan(`   \u2192 ${WEB_APP_URL2}/pricing?from=cli_checks`),
-    ""
-  ],
   // When domain limit is reached
   domain_limit: (ctx) => [
     "",
@@ -1179,18 +1174,6 @@ var UPSELL_MESSAGES = {
     import_chalk3.default.red("\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501"),
     ""
   ],
-  // When GEO features are limited
-  geo_limited: (ctx) => [
-    "",
-    import_chalk3.default.yellow("\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501"),
-    import_chalk3.default.yellow.bold("  \u{1F916} Full GEO analysis requires Solo"),
-    import_chalk3.default.dim("  You're seeing basic AI crawler access checks."),
-    import_chalk3.default.dim("  Full analysis includes: LLM signals, citation readiness, content structure"),
-    "",
-    import_chalk3.default.cyan(`  \u2192 ${WEB_APP_URL2}/pricing?from=cli_geo`),
-    import_chalk3.default.yellow("\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501"),
-    ""
-  ],
   // When auto-fix is attempted without access
   auto_fix_blocked: () => [
     "",
@@ -1291,10 +1274,6 @@ function showUpsell(messageKey, context) {
   const lines = messageFn(ctx);
   lines.forEach((line) => console.log(line));
 }
-function hasFeature(tier, feature) {
-  const limits = TIER_LIMITS[tier];
-  return limits?.features?.[feature] ?? false;
-}
 
 // src/wasm-engine.ts
 var vm = __toESM(require("vm"));
@@ -1474,6 +1453,177 @@ var TOGETHER_DEFAULT = "openai/gpt-oss-120b";
 var FIREWORKS_DEFAULT = "accounts/fireworks/models/gpt-oss-120b";
 var CEREBRAS_DEFAULT = "gpt-oss-120b";
 
+// src/lib/apple-ai.ts
+var import_node_child_process = require("child_process");
+var import_node_crypto2 = require("crypto");
+var import_node_fs = require("fs");
+var import_node_os = require("os");
+var import_node_path = require("path");
+
+// src/lib/apple-ai-source.ts
+var APPLE_AI_SWIFT_SOURCE = String.raw`import Foundation
+import FoundationModels
+
+func reply(_ object: [String: Any], code: Int32 = 0) -> Never {
+    let data = (try? JSONSerialization.data(withJSONObject: object)) ?? Data("{\"error\":\"could not encode the reply\"}".utf8)
+    FileHandle.standardOutput.write(data)
+    exit(code)
+}
+
+let model = SystemLanguageModel.default
+
+if CommandLine.arguments.contains("--check") {
+    switch model.availability {
+    case .available:
+        reply(["available": true])
+    case .unavailable(let reason):
+        switch reason {
+        case .deviceNotEligible: reply(["available": false, "reason": "deviceNotEligible"])
+        case .appleIntelligenceNotEnabled: reply(["available": false, "reason": "appleIntelligenceNotEnabled"])
+        case .modelNotReady: reply(["available": false, "reason": "modelNotReady"])
+        @unknown default: reply(["available": false, "reason": "unavailable"])
+        }
+    @unknown default:
+        reply(["available": false, "reason": "unavailable"])
+    }
+}
+
+struct Request: Decodable {
+    let system: String?
+    let prompt: String
+    let maxTokens: Int?
+}
+
+let input = FileHandle.standardInput.readDataToEndOfFile()
+guard let request = try? JSONDecoder().decode(Request.self, from: input) else {
+    reply(["error": "expected a JSON request on stdin"], code: 2)
+}
+
+let session: LanguageModelSession
+if let system = request.system {
+    session = LanguageModelSession(instructions: system)
+} else {
+    session = LanguageModelSession()
+}
+
+do {
+    let response = try await session.respond(
+        to: request.prompt,
+        options: GenerationOptions(maximumResponseTokens: request.maxTokens)
+    )
+    reply(["text": response.content])
+} catch let error as LanguageModelSession.GenerationError {
+    switch error {
+    case .exceededContextWindowSize:
+        reply(["error": "the prompt is too long for the on-device model"], code: 1)
+    case .guardrailViolation:
+        reply(["error": "the on-device model's guardrails declined the request"], code: 1)
+    case .assetsUnavailable:
+        reply(["error": "the on-device model isn't downloaded yet"], code: 1)
+    default:
+        reply(["error": String(describing: error)], code: 1)
+    }
+} catch {
+    reply(["error": String(describing: error)], code: 1)
+}
+`;
+
+// src/lib/apple-ai.ts
+function isAppleIntelligenceCapable(platform = process.platform, arch = process.arch, darwinRelease = (0, import_node_os.release)()) {
+  return platform === "darwin" && arch === "arm64" && Number(darwinRelease.split(".")[0]) >= 25;
+}
+var REASONS = {
+  deviceNotEligible: "this Mac doesn't support Apple Intelligence",
+  appleIntelligenceNotEnabled: "Apple Intelligence is turned off (System Settings > Apple Intelligence & Siri)",
+  modelNotReady: "the on-device model is still downloading"
+};
+function run(file, args, opts) {
+  return new Promise((resolve) => {
+    const child = (0, import_node_child_process.spawn)(file, args, { stdio: ["pipe", "pipe", "pipe"] });
+    let stdout = "";
+    let stderr = "";
+    let timedOut = false;
+    const timer = setTimeout(() => {
+      timedOut = true;
+      child.kill("SIGKILL");
+    }, opts.timeoutMs);
+    child.stdout.on("data", (d) => stdout += d);
+    child.stderr.on("data", (d) => stderr += d);
+    child.on("error", (error) => {
+      clearTimeout(timer);
+      resolve({ code: null, stdout, stderr: stderr || error.message, timedOut });
+    });
+    child.on("close", (code) => {
+      clearTimeout(timer);
+      resolve({ code, stdout, stderr, timedOut });
+    });
+    child.stdin.on("error", () => {
+    });
+    child.stdin.end(opts.input ?? "");
+  });
+}
+function hasDeveloperTools() {
+  return new Promise((resolve) => (0, import_node_child_process.execFile)("xcode-select", ["-p"], (error) => resolve(!error)));
+}
+var helperPromise = null;
+function ensureHelper(env) {
+  if (env.RANKCLI_APPLE_AI_HELPER) return Promise.resolve({ helper: env.RANKCLI_APPLE_AI_HELPER });
+  helperPromise ??= (async () => {
+    const hash = (0, import_node_crypto2.createHash)("sha256").update(APPLE_AI_SWIFT_SOURCE).digest("hex").slice(0, 12);
+    const dir = (0, import_node_path.join)((0, import_node_os.homedir)(), "Library", "Caches", "rankcli", `apple-ai-${hash}`);
+    const helper = (0, import_node_path.join)(dir, "rankcli-apple-ai");
+    if ((0, import_node_fs.existsSync)(helper)) return { helper };
+    const failed = (0, import_node_path.join)(dir, "build-failed");
+    if ((0, import_node_fs.existsSync)(failed) && Date.now() - (0, import_node_fs.statSync)(failed).mtimeMs < 7 * 24 * 60 * 60 * 1e3) {
+      return { error: (0, import_node_fs.readFileSync)(failed, "utf8") };
+    }
+    if (!await hasDeveloperTools()) {
+      return { error: "using it needs the Xcode command-line tools (xcode-select --install)" };
+    }
+    (0, import_node_fs.mkdirSync)(dir, { recursive: true });
+    const source = (0, import_node_path.join)(dir, "main.swift");
+    (0, import_node_fs.writeFileSync)(source, APPLE_AI_SWIFT_SOURCE);
+    process.stderr.write("Preparing Apple Intelligence for RankCLI (one-time build of a small helper)...\n");
+    const tmp = `${helper}.${process.pid}`;
+    const build = await run("xcrun", ["swiftc", "-O", "-target", "arm64-apple-macos26.0", source, "-o", tmp], { timeoutMs: 18e4 });
+    if (build.code !== 0 || !(0, import_node_fs.existsSync)(tmp)) {
+      const firstError = build.stderr.split("\n").find((line) => /error:/.test(line))?.trim();
+      const error = `the helper didn't build${firstError ? ` (${firstError})` : ""} - it needs the macOS 26 SDK (update Xcode or its command-line tools)`;
+      (0, import_node_fs.writeFileSync)(failed, error);
+      return { error };
+    }
+    (0, import_node_fs.renameSync)(tmp, helper);
+    return { helper };
+  })();
+  return helperPromise;
+}
+async function checkAppleAI(env = process.env) {
+  if (!env.RANKCLI_APPLE_AI_HELPER && !isAppleIntelligenceCapable()) {
+    return { available: false, reason: "it needs macOS 26 or later on Apple silicon" };
+  }
+  const ensured = await ensureHelper(env);
+  if ("error" in ensured) return { available: false, reason: ensured.error };
+  const check = await run(ensured.helper, ["--check"], { timeoutMs: 15e3 });
+  try {
+    const status = JSON.parse(check.stdout);
+    if (status.available) return { available: true, helper: ensured.helper };
+    return { available: false, reason: REASONS[status.reason ?? ""] ?? "Apple Intelligence is unavailable" };
+  } catch {
+    return { available: false, reason: `the helper failed (${(check.stderr || check.stdout).trim().slice(0, 120) || `exit ${check.code}`})` };
+  }
+}
+async function generateWithAppleAI(helper, request, timeoutMs = 12e4) {
+  const result = await run(helper, [], { input: JSON.stringify(request), timeoutMs });
+  if (result.timedOut) return { error: `timed out after ${Math.round(timeoutMs / 1e3)}s` };
+  try {
+    const reply = JSON.parse(result.stdout);
+    if (typeof reply.text === "string") return { text: reply.text };
+    return { error: reply.error || "no reply" };
+  } catch {
+    return { error: (result.stderr || result.stdout).trim().slice(0, 200) || `exit ${result.code}` };
+  }
+}
+
 // src/lib/ai.ts
 var AI_PROVIDERS = {
   // Hosted
@@ -1488,6 +1638,7 @@ var AI_PROVIDERS = {
   together: { label: "Together", baseUrl: "https://api.together.xyz/v1", model: TOGETHER_DEFAULT, envKeys: ["TOGETHER_API_KEY"] },
   fireworks: { label: "Fireworks", baseUrl: "https://api.fireworks.ai/inference/v1", model: FIREWORKS_DEFAULT, envKeys: ["FIREWORKS_API_KEY"] },
   // Local / self-hosted
+  apple: { label: "Apple Intelligence", model: "on-device", envKeys: [], local: true },
   ollama: { label: "Ollama", baseUrl: "http://localhost:11434/v1", envKeys: [], local: true },
   lmstudio: { label: "LM Studio", baseUrl: "http://localhost:1234/v1", envKeys: [], local: true },
   llamacpp: { label: "llama.cpp", baseUrl: "http://localhost:8080/v1", envKeys: [], local: true },
@@ -1552,28 +1703,62 @@ async function firstServerModel(baseUrl, apiKey) {
 }
 function noProviderHints() {
   return [
+    "On a Mac with Apple Intelligence (macOS 26+), the on-device model is used automatically",
     `Set one of ${AI_ENV_KEYS.join(", ")}, or pass --ai-key`,
     "Or run a local model: start Ollama (https://ollama.com) and `ollama pull llama3.2` - it is picked up automatically",
     "Or point at any OpenAI-compatible server: --ai-base-url http://localhost:8080/v1 --ai-model <name>"
   ];
 }
-async function resolveAIProvider(opts, env = process.env, probe = probeOllama) {
-  let provider = opts.aiProvider?.trim().toLowerCase();
+function appleResolution(status, notice) {
+  const preset = AI_PROVIDERS.apple;
+  return {
+    ok: true,
+    ai: {
+      provider: "apple",
+      label: preset.label,
+      baseUrl: "",
+      model: preset.model,
+      jsonMode: false,
+      anthropic: false,
+      local: true,
+      helper: status.helper,
+      notice
+    }
+  };
+}
+async function resolveAIProvider(opts, env = process.env, probe = probeOllama, probeApple = checkAppleAI) {
+  const requested = opts.aiProvider?.trim() || (!opts.aiKey && !opts.aiBaseUrl ? env.RANKCLI_AI_PROVIDER?.trim() : void 0);
+  let provider = requested?.toLowerCase();
   let notice;
   let ollamaModels = null;
   if (provider && !AI_PROVIDERS[provider]) {
     return {
       ok: false,
-      error: `Unknown AI provider "${opts.aiProvider}"`,
+      error: `Unknown AI provider "${requested}"`,
       hints: [`Choose one of: ${AI_PROVIDER_IDS.join(", ")}`]
     };
   }
+  if (provider === "apple") {
+    const apple = await probeApple(env);
+    if (!apple.available) {
+      return {
+        ok: false,
+        error: `Apple Intelligence isn't available: ${apple.reason}`,
+        hints: ["Choose another provider with --ai-provider (e.g. openrouter, ollama)"]
+      };
+    }
+    return appleResolution(apple);
+  }
   if (!provider) {
     if (opts.aiBaseUrl) {
       provider = "custom";
     } else if (opts.aiKey) {
       provider = providerFromKey(opts.aiKey) ?? "openai";
     } else {
+      const apple = await probeApple(env);
+      if (apple.available) {
+        return appleResolution(apple, "Using Apple Intelligence on this Mac (on-device, free) - pass --ai-provider to use another");
+      }
       provider = DETECT_ORDER.find((id) => AI_PROVIDERS[id].envKeys.some((k) => env[k]));
     }
   }
@@ -1713,9 +1898,11 @@ function normalizeAnalysis(raw) {
 }
 var SEVERITY_ORDER = { critical: 0, error: 1, warning: 2, notice: 3, info: 3 };
 var MAX_ISSUES_IN_PROMPT = 60;
-function buildPrompt(url, issues) {
+var APPLE_MAX_ISSUES = 25;
+var APPLE_MAX_TOKENS = 1200;
+function buildPrompt(url, issues, maxIssues = MAX_ISSUES_IN_PROMPT) {
   const ranked = [...issues].sort((a, b) => (SEVERITY_ORDER[a.severity] ?? 4) - (SEVERITY_ORDER[b.severity] ?? 4));
-  const shown = ranked.slice(0, MAX_ISSUES_IN_PROMPT);
+  const shown = ranked.slice(0, maxIssues);
   const more = ranked.length > shown.length ? `
 (${ranked.length - shown.length} lower-severity issues omitted)` : "";
   return `Analyze these SEO audit results and provide prioritized recommendations:
@@ -1735,8 +1922,17 @@ Respond with only this JSON object - no prose, no code fences:
 }`;
 }
 async function runAIAnalysis(url, issues, ai) {
-  const prompt = buildPrompt(url, issues);
   const system = "You are an SEO expert. Respond with valid JSON only.";
+  if (ai.provider === "apple" && ai.helper) {
+    const reply = await generateWithAppleAI(ai.helper, {
+      system,
+      prompt: buildPrompt(url, issues, APPLE_MAX_ISSUES),
+      maxTokens: APPLE_MAX_TOKENS
+    });
+    if ("error" in reply) return { error: `${ai.label} request failed: ${reply.error}` };
+    return parseAnalysis(reply.text, ai);
+  }
+  const prompt = buildPrompt(url, issues);
   const timeoutMs = ai.local ? 3e5 : 9e4;
   const maxTokens = 4096;
   const headers = { "Content-Type": "application/json" };
@@ -1786,6 +1982,9 @@ async function runAIAnalysis(url, issues, ai) {
   if (!content) {
     return { error: `${ai.label} returned no content (a reasoning model may have used its whole token budget - try another --ai-model)` };
   }
+  return parseAnalysis(content, ai);
+}
+function parseAnalysis(content, ai) {
   const parsed = extractJsonObject(content);
   const analysis = parsed ? normalizeAnalysis(parsed) : null;
   if (!analysis) {
@@ -1991,7 +2190,7 @@ async function audit(options) {
     const tierId = tierFromPlanId(planId) ?? (loggedIn ? "free" : "free_anon");
     const checksLimit = TIER_LIMITS[tierId].checks;
     let premiumChecks;
-    if (checksLimit > TIER_LIMITS.free.checks) {
+    {
       const passphrase = getDecryptPassphrase();
       if (passphrase) {
         try {
@@ -2202,17 +2401,6 @@ async function audit(options) {
         }
       }
       console.log("\n" + import_chalk4.default.bold("\u2550".repeat(60)));
-      const isFreeTier = tierId === "free" || tierId === "free_anon";
-      if (isFreeTier) {
-        const checksRun = mergedIssues.length > 0 ? loggedIn ? 100 : 50 : 0;
-        showUpsell("checks_limit", {
-          tier: loggedIn ? "free" : "free_anon",
-          current: checksRun
-        });
-      }
-      if (options.geo && isFreeTier) {
-        showUpsell("geo_limited", { tier: loggedIn ? "free" : "free_anon" });
-      }
       if (loggedIn) {
         const syncSpinner = (0, import_ora2.default)("Syncing to cloud...").start();
         const syncResult = await syncToCloud(url, primaryReport, mergedIssues, successCount, aiAnalysis, totalTime, actualChecksRun);
@@ -2326,14 +2514,6 @@ async function apply(options) {
   }
   console.log("\n\u{1F680} RankCLI - Apply Fixes");
   console.log("\u2550".repeat(50));
-  const loggedIn = isLoggedIn();
-  const userInfo = getUserInfo();
-  const tier = userInfo.planName?.toLowerCase() || "free";
-  const hasAutoFix = loggedIn && hasFeature(tier, "auto_fix");
-  if (!hasAutoFix) {
-    showUpsell("auto_fix_blocked");
-    return;
-  }
   console.log("\n\u{1F50D} Detecting framework...");
   const frameworkResult = await (0, import_agent_runtime3.detectFramework)({ cwd });
   const framework = frameworkResult.success ? frameworkResult.data : { name: "Unknown", metaPattern: "html-head" };
@@ -2589,16 +2769,6 @@ async function runFix(options) {
   if (loggedIn) await ensureApiKeyPlan();
   const userInfo = getUserInfo();
   const tier = tierFromPlanId(userInfo.planId) ?? tierFromPlanId(userInfo.planName) ?? "free";
-  const hasAutoFix = loggedIn && hasFeature(tier, "auto_fix");
-  if (!options.dryRun && !hasAutoFix) {
-    if (options.output !== "json") {
-      showUpsell("auto_fix_blocked");
-    }
-    return {
-      success: false,
-      error: "Auto-fix requires Solo tier or higher. Please upgrade at " + WEB_APP_URL + "/account"
-    };
-  }
   if (options.output !== "json") {
     console.log("\n\u{1F527} RankCLI Fix - Agentic SEO Fixer");
     console.log("\u2550".repeat(50));
@@ -3917,7 +4087,7 @@ async function alerts(options) {
     if (options.list) {
       console.log("\u{1F4CB} Current alert configurations:\n");
       console.log("   (Alert configs are stored in your RankCLI account)");
-      console.log("   Run `rankcli auth login` first, then manage alerts at https://rankcli.dev/account/alerts\n");
+      console.log("   Run `rankcli login` first, then manage alerts at https://rankcli.dev/account?tab=notifications\n");
       rl.close();
       return;
     }
@@ -3992,8 +4162,8 @@ async function alerts(options) {
     }
     console.log("");
     console.log("To save this configuration:");
-    console.log("1. Log in with `rankcli auth login`");
-    console.log("2. Add alert config at https://rankcli.dev/account/alerts");
+    console.log("1. Log in with `rankcli login`");
+    console.log("2. Add alert config at https://rankcli.dev/account?tab=notifications");
     console.log("");
     console.log("Or use the API:");
     console.log(`   POST /api/alerts with webhook_url and settings`);
@@ -4052,7 +4222,7 @@ async function testWebhook(channel, webhookUrl) {
 }
 
 // src/version.ts
-var VERSION = "0.0.30";
+var VERSION = "0.0.32";
 
 // src/index.ts
 var program = new import_commander.Command();
@@ -4064,7 +4234,7 @@ program.command("logout").description("Log out of your RankCLI account").action(
 program.command("whoami").description("Show current logged in user").action(whoami);
 program.command("init").description("Set up RankCLI in your project (detects framework, git/GitHub, AI keys)").option("-y, --yes", "Skip prompts and use defaults").action(init);
 program.command("analyze").description("AI analyzes your codebase for SEO opportunities").option("-v, --verbose", "Show detailed output").action(analyze);
-program.command("audit").description("Run a comprehensive SEO audit (200+ checks, Ahrefs-level)").option("-u, --url <url>", "URL to audit").option("-o, --output <format>", "Output format (json, console)", "console").option("--check-links", "Check for broken internal/external links (slower)").option("--max-pages <n>", "Max pages to crawl (default: 5)").option("--fail-on <level>", "CI gate: exit 1 if any issue is at or above this severity (error, warning, notice)").option("--min-score <n>", "CI gate: exit 1 if the overall score is below n (0-100)").option("--ai", "Enable AI analysis (your own key, or a local model)").option("--ai-provider <provider>", "AI provider (auto-detected if omitted): openrouter, openai, anthropic, groq, gemini, deepseek, mistral, cerebras, together, fireworks, ollama, lmstudio, llamacpp, vllm, custom").option("--ai-key <key>", "AI provider API key (or set the provider's env var, e.g. OPENROUTER_API_KEY)").option("--ai-model <model>", "Model id (defaults to a cheap model per provider, or the local server's loaded model)").option("--ai-base-url <url>", "OpenAI-compatible base URL, e.g. http://localhost:8080/v1 (implies --ai-provider custom)").addHelpText("after", AUDIT_HELP_TEXT).action(async (options) => {
+program.command("audit").description("Run an SEO + GEO audit (280+ checks)").option("-u, --url <url>", "URL to audit").option("-o, --output <format>", "Output format (json, console)", "console").option("--check-links", "Check for broken internal/external links (slower)").option("--max-pages <n>", "Max pages to crawl (default: 5)").option("--fail-on <level>", "CI gate: exit 1 if any issue is at or above this severity (error, warning, notice)").option("--min-score <n>", "CI gate: exit 1 if the overall score is below n (0-100)").option("--ai", "Enable AI analysis (your own key, or a local model)").option("--ai-provider <provider>", "AI provider (auto-detected if omitted; Apple Intelligence on a Mac that has it, or set RANKCLI_AI_PROVIDER): apple, openrouter, openai, anthropic, groq, gemini, deepseek, mistral, cerebras, together, fireworks, ollama, lmstudio, llamacpp, vllm, custom").option("--ai-key <key>", "AI provider API key (or set the provider's env var, e.g. OPENROUTER_API_KEY)").option("--ai-model <model>", "Model id (defaults to a cheap model per provider, or the local server's loaded model)").option("--ai-base-url <url>", "OpenAI-compatible base URL, e.g. http://localhost:8080/v1 (implies --ai-provider custom)").addHelpText("after", AUDIT_HELP_TEXT).action(async (options) => {
   process.exitCode = await audit(options);
 });
 program.command("apply").description("Analyze a live URL and apply SEO fixes to your codebase").option("-u, --url <url>", "URL to analyze").option("--auto", "Auto-apply fixes without confirmation").option("--dry-run", "Preview changes without applying").action(apply);

package/dist/index.mjs

@@ -26,19 +26,19 @@ import { createHash } from "crypto";
 import { createClient } from "@supabase/supabase-js";
 const INJECTED_CONFIG = {"supabaseUrl":"https://bspljbxwbjiqueeyzyat.supabase.co","supabaseAnonKey":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6ImJzcGxqYnh3YmppcXVlZXl6eWF0Iiwicm9sZSI6ImFub24iLCJpYXQiOjE3NjkyNzQ1NTksImV4cCI6MjA4NDg1MDU1OX0.7gprxM2gT9cZ99sjZURLltrln78dEnwyFFKYpTzBaUU","webAppUrl":"https://rankcli.dev","decryptPassphrase":"lKFLeIw/xGPa6E8c4XswZX/oiLtJf/yLF/Y6zwovte8="};
 function getSupabaseUrl() {
-  const url = process.env.RANKCLI_SUPABASE_URL || process.env.VITE_SUPABASE_URL || INJECTED_CONFIG?.supabaseUrl;
+  const url = process.env.RANKCLI_SUPABASE_URL || INJECTED_CONFIG?.supabaseUrl;
   if (!url) {
     throw new Error(
-      "Supabase URL not configured. Set RANKCLI_SUPABASE_URL environment variable.\nSee: https://rankcli.dev/docs/cli-setup"
+      "Supabase URL not configured. Set RANKCLI_SUPABASE_URL environment variable.\nSee: https://rankcli.dev/docs#getting-started"
     );
   }
   return url;
 }
 function getSupabaseAnonKey() {
-  const key = process.env.RANKCLI_SUPABASE_ANON_KEY || process.env.VITE_SUPABASE_ANON_KEY || INJECTED_CONFIG?.supabaseAnonKey;
+  const key = process.env.RANKCLI_SUPABASE_ANON_KEY || INJECTED_CONFIG?.supabaseAnonKey;
   if (!key) {
     throw new Error(
-      "Supabase anon key not configured. Set RANKCLI_SUPABASE_ANON_KEY environment variable.\nSee: https://rankcli.dev/docs/cli-setup"
+      "Supabase anon key not configured. Set RANKCLI_SUPABASE_ANON_KEY environment variable.\nSee: https://rankcli.dev/docs#getting-started"
     );
   }
   return key;
@@ -1097,23 +1097,25 @@ import chalk4 from "chalk";
 import chalk3 from "chalk";
 var WEB_APP_URL2 = "https://rankcli.dev";
 var TIER_LIMITS = {
+  // Every plan runs every check (pricing-tiers.json: free_audit / free_registered 280). Plans
+  // differ in sites, schedules, pages per audit, PRs and alerts - not in what an audit checks.
   free_anon: {
-    checks: 50,
+    checks: 280,
     sites: 0,
     domains_per_month: 1,
-    features: { geo: false, auto_fix: false, github: false, ai: false }
+    features: { geo: true, auto_fix: true, github: false, ai: false }
   },
   free: {
-    checks: 100,
+    checks: 280,
     sites: 1,
     domains_per_month: 2,
-    features: { geo: "basic", auto_fix: false, github: false, ai: false }
+    features: { geo: true, auto_fix: true, github: true, ai: false }
   },
   solo: {
     checks: 280,
     sites: 3,
     domains_per_month: 5,
-    features: { geo: true, auto_fix: true, github: false, ai: true }
+    features: { geo: true, auto_fix: true, github: true, ai: true }
   },
   pro: {
     checks: 280,
@@ -1139,21 +1141,14 @@ var UPSELL_MESSAGES = {
   free_audit_complete: () => [
     "",
     chalk3.yellow("\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501"),
-    chalk3.yellow.bold("  \u{1F680} Get 2x more checks + audit history"),
-    chalk3.dim("  Create a free account to unlock 100 checks and save your results."),
+    chalk3.yellow.bold("  \u{1F680} Keep this site audited, free"),
+    chalk3.dim("  A free account audits one site weekly, keeps the history and"),
+    chalk3.dim("  emails you a weekly report."),
     "",
     chalk3.cyan(`  \u2192 rankcli login`),
     chalk3.yellow("\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501"),
     ""
   ],
-  // When checks limit is reached
-  checks_limit: (ctx) => [
-    "",
-    chalk3.yellow(`\u26A0\uFE0F  Running ${ctx.current || 50} of ${TIER_LIMITS.solo.checks} available checks`),
-    chalk3.dim(`   Unlock all ${TIER_LIMITS.solo.checks}+ checks with Solo ($9/mo)`),
-    chalk3.cyan(`   \u2192 ${WEB_APP_URL2}/pricing?from=cli_checks`),
-    ""
-  ],
   // When domain limit is reached
   domain_limit: (ctx) => [
     "",
@@ -1166,18 +1161,6 @@ var UPSELL_MESSAGES = {
     chalk3.red("\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501"),
     ""
   ],
-  // When GEO features are limited
-  geo_limited: (ctx) => [
-    "",
-    chalk3.yellow("\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501"),
-    chalk3.yellow.bold("  \u{1F916} Full GEO analysis requires Solo"),
-    chalk3.dim("  You're seeing basic AI crawler access checks."),
-    chalk3.dim("  Full analysis includes: LLM signals, citation readiness, content structure"),
-    "",
-    chalk3.cyan(`  \u2192 ${WEB_APP_URL2}/pricing?from=cli_geo`),
-    chalk3.yellow("\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501"),
-    ""
-  ],
   // When auto-fix is attempted without access
   auto_fix_blocked: () => [
     "",
@@ -1278,10 +1261,6 @@ function showUpsell(messageKey, context) {
   const lines = messageFn(ctx);
   lines.forEach((line) => console.log(line));
 }
-function hasFeature(tier, feature) {
-  const limits = TIER_LIMITS[tier];
-  return limits?.features?.[feature] ?? false;
-}
 
 // src/models.ts
 var OPENAI_FAST = "gpt-5.6-luna";
@@ -1295,6 +1274,177 @@ var TOGETHER_DEFAULT = "openai/gpt-oss-120b";
 var FIREWORKS_DEFAULT = "accounts/fireworks/models/gpt-oss-120b";
 var CEREBRAS_DEFAULT = "gpt-oss-120b";
 
+// src/lib/apple-ai.ts
+import { execFile, spawn } from "child_process";
+import { createHash as createHash2 } from "crypto";
+import { existsSync as existsSync4, mkdirSync, readFileSync as readFileSync4, renameSync, statSync as statSync2, writeFileSync as writeFileSync3 } from "fs";
+import { homedir, release } from "os";
+import { join as join4 } from "path";
+
+// src/lib/apple-ai-source.ts
+var APPLE_AI_SWIFT_SOURCE = String.raw`import Foundation
+import FoundationModels
+
+func reply(_ object: [String: Any], code: Int32 = 0) -> Never {
+    let data = (try? JSONSerialization.data(withJSONObject: object)) ?? Data("{\"error\":\"could not encode the reply\"}".utf8)
+    FileHandle.standardOutput.write(data)
+    exit(code)
+}
+
+let model = SystemLanguageModel.default
+
+if CommandLine.arguments.contains("--check") {
+    switch model.availability {
+    case .available:
+        reply(["available": true])
+    case .unavailable(let reason):
+        switch reason {
+        case .deviceNotEligible: reply(["available": false, "reason": "deviceNotEligible"])
+        case .appleIntelligenceNotEnabled: reply(["available": false, "reason": "appleIntelligenceNotEnabled"])
+        case .modelNotReady: reply(["available": false, "reason": "modelNotReady"])
+        @unknown default: reply(["available": false, "reason": "unavailable"])
+        }
+    @unknown default:
+        reply(["available": false, "reason": "unavailable"])
+    }
+}
+
+struct Request: Decodable {
+    let system: String?
+    let prompt: String
+    let maxTokens: Int?
+}
+
+let input = FileHandle.standardInput.readDataToEndOfFile()
+guard let request = try? JSONDecoder().decode(Request.self, from: input) else {
+    reply(["error": "expected a JSON request on stdin"], code: 2)
+}
+
+let session: LanguageModelSession
+if let system = request.system {
+    session = LanguageModelSession(instructions: system)
+} else {
+    session = LanguageModelSession()
+}
+
+do {
+    let response = try await session.respond(
+        to: request.prompt,
+        options: GenerationOptions(maximumResponseTokens: request.maxTokens)
+    )
+    reply(["text": response.content])
+} catch let error as LanguageModelSession.GenerationError {
+    switch error {
+    case .exceededContextWindowSize:
+        reply(["error": "the prompt is too long for the on-device model"], code: 1)
+    case .guardrailViolation:
+        reply(["error": "the on-device model's guardrails declined the request"], code: 1)
+    case .assetsUnavailable:
+        reply(["error": "the on-device model isn't downloaded yet"], code: 1)
+    default:
+        reply(["error": String(describing: error)], code: 1)
+    }
+} catch {
+    reply(["error": String(describing: error)], code: 1)
+}
+`;
+
+// src/lib/apple-ai.ts
+function isAppleIntelligenceCapable(platform = process.platform, arch = process.arch, darwinRelease = release()) {
+  return platform === "darwin" && arch === "arm64" && Number(darwinRelease.split(".")[0]) >= 25;
+}
+var REASONS = {
+  deviceNotEligible: "this Mac doesn't support Apple Intelligence",
+  appleIntelligenceNotEnabled: "Apple Intelligence is turned off (System Settings > Apple Intelligence & Siri)",
+  modelNotReady: "the on-device model is still downloading"
+};
+function run(file, args, opts) {
+  return new Promise((resolve) => {
+    const child = spawn(file, args, { stdio: ["pipe", "pipe", "pipe"] });
+    let stdout = "";
+    let stderr = "";
+    let timedOut = false;
+    const timer = setTimeout(() => {
+      timedOut = true;
+      child.kill("SIGKILL");
+    }, opts.timeoutMs);
+    child.stdout.on("data", (d) => stdout += d);
+    child.stderr.on("data", (d) => stderr += d);
+    child.on("error", (error) => {
+      clearTimeout(timer);
+      resolve({ code: null, stdout, stderr: stderr || error.message, timedOut });
+    });
+    child.on("close", (code) => {
+      clearTimeout(timer);
+      resolve({ code, stdout, stderr, timedOut });
+    });
+    child.stdin.on("error", () => {
+    });
+    child.stdin.end(opts.input ?? "");
+  });
+}
+function hasDeveloperTools() {
+  return new Promise((resolve) => execFile("xcode-select", ["-p"], (error) => resolve(!error)));
+}
+var helperPromise = null;
+function ensureHelper(env) {
+  if (env.RANKCLI_APPLE_AI_HELPER) return Promise.resolve({ helper: env.RANKCLI_APPLE_AI_HELPER });
+  helperPromise ??= (async () => {
+    const hash = createHash2("sha256").update(APPLE_AI_SWIFT_SOURCE).digest("hex").slice(0, 12);
+    const dir = join4(homedir(), "Library", "Caches", "rankcli", `apple-ai-${hash}`);
+    const helper = join4(dir, "rankcli-apple-ai");
+    if (existsSync4(helper)) return { helper };
+    const failed = join4(dir, "build-failed");
+    if (existsSync4(failed) && Date.now() - statSync2(failed).mtimeMs < 7 * 24 * 60 * 60 * 1e3) {
+      return { error: readFileSync4(failed, "utf8") };
+    }
+    if (!await hasDeveloperTools()) {
+      return { error: "using it needs the Xcode command-line tools (xcode-select --install)" };
+    }
+    mkdirSync(dir, { recursive: true });
+    const source = join4(dir, "main.swift");
+    writeFileSync3(source, APPLE_AI_SWIFT_SOURCE);
+    process.stderr.write("Preparing Apple Intelligence for RankCLI (one-time build of a small helper)...\n");
+    const tmp = `${helper}.${process.pid}`;
+    const build = await run("xcrun", ["swiftc", "-O", "-target", "arm64-apple-macos26.0", source, "-o", tmp], { timeoutMs: 18e4 });
+    if (build.code !== 0 || !existsSync4(tmp)) {
+      const firstError = build.stderr.split("\n").find((line) => /error:/.test(line))?.trim();
+      const error = `the helper didn't build${firstError ? ` (${firstError})` : ""} - it needs the macOS 26 SDK (update Xcode or its command-line tools)`;
+      writeFileSync3(failed, error);
+      return { error };
+    }
+    renameSync(tmp, helper);
+    return { helper };
+  })();
+  return helperPromise;
+}
+async function checkAppleAI(env = process.env) {
+  if (!env.RANKCLI_APPLE_AI_HELPER && !isAppleIntelligenceCapable()) {
+    return { available: false, reason: "it needs macOS 26 or later on Apple silicon" };
+  }
+  const ensured = await ensureHelper(env);
+  if ("error" in ensured) return { available: false, reason: ensured.error };
+  const check = await run(ensured.helper, ["--check"], { timeoutMs: 15e3 });
+  try {
+    const status = JSON.parse(check.stdout);
+    if (status.available) return { available: true, helper: ensured.helper };
+    return { available: false, reason: REASONS[status.reason ?? ""] ?? "Apple Intelligence is unavailable" };
+  } catch {
+    return { available: false, reason: `the helper failed (${(check.stderr || check.stdout).trim().slice(0, 120) || `exit ${check.code}`})` };
+  }
+}
+async function generateWithAppleAI(helper, request, timeoutMs = 12e4) {
+  const result = await run(helper, [], { input: JSON.stringify(request), timeoutMs });
+  if (result.timedOut) return { error: `timed out after ${Math.round(timeoutMs / 1e3)}s` };
+  try {
+    const reply = JSON.parse(result.stdout);
+    if (typeof reply.text === "string") return { text: reply.text };
+    return { error: reply.error || "no reply" };
+  } catch {
+    return { error: (result.stderr || result.stdout).trim().slice(0, 200) || `exit ${result.code}` };
+  }
+}
+
 // src/lib/ai.ts
 var AI_PROVIDERS = {
   // Hosted
@@ -1309,6 +1459,7 @@ var AI_PROVIDERS = {
   together: { label: "Together", baseUrl: "https://api.together.xyz/v1", model: TOGETHER_DEFAULT, envKeys: ["TOGETHER_API_KEY"] },
   fireworks: { label: "Fireworks", baseUrl: "https://api.fireworks.ai/inference/v1", model: FIREWORKS_DEFAULT, envKeys: ["FIREWORKS_API_KEY"] },
   // Local / self-hosted
+  apple: { label: "Apple Intelligence", model: "on-device", envKeys: [], local: true },
   ollama: { label: "Ollama", baseUrl: "http://localhost:11434/v1", envKeys: [], local: true },
   lmstudio: { label: "LM Studio", baseUrl: "http://localhost:1234/v1", envKeys: [], local: true },
   llamacpp: { label: "llama.cpp", baseUrl: "http://localhost:8080/v1", envKeys: [], local: true },
@@ -1373,28 +1524,62 @@ async function firstServerModel(baseUrl, apiKey) {
 }
 function noProviderHints() {
   return [
+    "On a Mac with Apple Intelligence (macOS 26+), the on-device model is used automatically",
     `Set one of ${AI_ENV_KEYS.join(", ")}, or pass --ai-key`,
     "Or run a local model: start Ollama (https://ollama.com) and `ollama pull llama3.2` - it is picked up automatically",
     "Or point at any OpenAI-compatible server: --ai-base-url http://localhost:8080/v1 --ai-model <name>"
   ];
 }
-async function resolveAIProvider(opts, env = process.env, probe = probeOllama) {
-  let provider = opts.aiProvider?.trim().toLowerCase();
+function appleResolution(status, notice) {
+  const preset = AI_PROVIDERS.apple;
+  return {
+    ok: true,
+    ai: {
+      provider: "apple",
+      label: preset.label,
+      baseUrl: "",
+      model: preset.model,
+      jsonMode: false,
+      anthropic: false,
+      local: true,
+      helper: status.helper,
+      notice
+    }
+  };
+}
+async function resolveAIProvider(opts, env = process.env, probe = probeOllama, probeApple = checkAppleAI) {
+  const requested = opts.aiProvider?.trim() || (!opts.aiKey && !opts.aiBaseUrl ? env.RANKCLI_AI_PROVIDER?.trim() : void 0);
+  let provider = requested?.toLowerCase();
   let notice;
   let ollamaModels = null;
   if (provider && !AI_PROVIDERS[provider]) {
     return {
       ok: false,
-      error: `Unknown AI provider "${opts.aiProvider}"`,
+      error: `Unknown AI provider "${requested}"`,
       hints: [`Choose one of: ${AI_PROVIDER_IDS.join(", ")}`]
     };
   }
+  if (provider === "apple") {
+    const apple = await probeApple(env);
+    if (!apple.available) {
+      return {
+        ok: false,
+        error: `Apple Intelligence isn't available: ${apple.reason}`,
+        hints: ["Choose another provider with --ai-provider (e.g. openrouter, ollama)"]
+      };
+    }
+    return appleResolution(apple);
+  }
   if (!provider) {
     if (opts.aiBaseUrl) {
       provider = "custom";
     } else if (opts.aiKey) {
       provider = providerFromKey(opts.aiKey) ?? "openai";
     } else {
+      const apple = await probeApple(env);
+      if (apple.available) {
+        return appleResolution(apple, "Using Apple Intelligence on this Mac (on-device, free) - pass --ai-provider to use another");
+      }
       provider = DETECT_ORDER.find((id) => AI_PROVIDERS[id].envKeys.some((k) => env[k]));
     }
   }
@@ -1534,9 +1719,11 @@ function normalizeAnalysis(raw) {
 }
 var SEVERITY_ORDER = { critical: 0, error: 1, warning: 2, notice: 3, info: 3 };
 var MAX_ISSUES_IN_PROMPT = 60;
-function buildPrompt(url, issues) {
+var APPLE_MAX_ISSUES = 25;
+var APPLE_MAX_TOKENS = 1200;
+function buildPrompt(url, issues, maxIssues = MAX_ISSUES_IN_PROMPT) {
   const ranked = [...issues].sort((a, b) => (SEVERITY_ORDER[a.severity] ?? 4) - (SEVERITY_ORDER[b.severity] ?? 4));
-  const shown = ranked.slice(0, MAX_ISSUES_IN_PROMPT);
+  const shown = ranked.slice(0, maxIssues);
   const more = ranked.length > shown.length ? `
 (${ranked.length - shown.length} lower-severity issues omitted)` : "";
   return `Analyze these SEO audit results and provide prioritized recommendations:
@@ -1556,8 +1743,17 @@ Respond with only this JSON object - no prose, no code fences:
 }`;
 }
 async function runAIAnalysis(url, issues, ai) {
-  const prompt = buildPrompt(url, issues);
   const system = "You are an SEO expert. Respond with valid JSON only.";
+  if (ai.provider === "apple" && ai.helper) {
+    const reply = await generateWithAppleAI(ai.helper, {
+      system,
+      prompt: buildPrompt(url, issues, APPLE_MAX_ISSUES),
+      maxTokens: APPLE_MAX_TOKENS
+    });
+    if ("error" in reply) return { error: `${ai.label} request failed: ${reply.error}` };
+    return parseAnalysis(reply.text, ai);
+  }
+  const prompt = buildPrompt(url, issues);
   const timeoutMs = ai.local ? 3e5 : 9e4;
   const maxTokens = 4096;
   const headers = { "Content-Type": "application/json" };
@@ -1607,6 +1803,9 @@ async function runAIAnalysis(url, issues, ai) {
   if (!content) {
     return { error: `${ai.label} returned no content (a reasoning model may have used its whole token budget - try another --ai-model)` };
   }
+  return parseAnalysis(content, ai);
+}
+function parseAnalysis(content, ai) {
   const parsed = extractJsonObject(content);
   const analysis = parsed ? normalizeAnalysis(parsed) : null;
   if (!analysis) {
@@ -1812,7 +2011,7 @@ async function audit(options) {
     const tierId = tierFromPlanId(planId) ?? (loggedIn ? "free" : "free_anon");
     const checksLimit = TIER_LIMITS[tierId].checks;
     let premiumChecks;
-    if (checksLimit > TIER_LIMITS.free.checks) {
+    {
       const passphrase = getDecryptPassphrase();
       if (passphrase) {
         try {
@@ -2023,17 +2222,6 @@ async function audit(options) {
         }
       }
       console.log("\n" + chalk4.bold("\u2550".repeat(60)));
-      const isFreeTier = tierId === "free" || tierId === "free_anon";
-      if (isFreeTier) {
-        const checksRun = mergedIssues.length > 0 ? loggedIn ? 100 : 50 : 0;
-        showUpsell("checks_limit", {
-          tier: loggedIn ? "free" : "free_anon",
-          current: checksRun
-        });
-      }
-      if (options.geo && isFreeTier) {
-        showUpsell("geo_limited", { tier: loggedIn ? "free" : "free_anon" });
-      }
       if (loggedIn) {
         const syncSpinner = ora2("Syncing to cloud...").start();
         const syncResult = await syncToCloud(url, primaryReport, mergedIssues, successCount, aiAnalysis, totalTime, actualChecksRun);
@@ -2091,8 +2279,8 @@ Examples:
 `;
 
 // src/commands/apply.ts
-import { existsSync as existsSync4, readFileSync as readFileSync4, writeFileSync as writeFileSync3 } from "fs";
-import { join as join4 } from "path";
+import { existsSync as existsSync5, readFileSync as readFileSync5, writeFileSync as writeFileSync4 } from "fs";
+import { join as join5 } from "path";
 import {
   runAuditWithFixes,
   generateFixes,
@@ -2126,11 +2314,11 @@ function truncate(str, maxLen) {
 }
 async function apply(options) {
   const cwd = process.cwd();
-  const configPath = join4(cwd, "rankcli.config.json");
+  const configPath = join5(cwd, "rankcli.config.json");
   let config2 = null;
-  if (existsSync4(configPath)) {
+  if (existsSync5(configPath)) {
     try {
-      config2 = JSON.parse(readFileSync4(configPath, "utf-8"));
+      config2 = JSON.parse(readFileSync5(configPath, "utf-8"));
     } catch {
     }
   }
@@ -2152,14 +2340,6 @@ async function apply(options) {
   }
   console.log("\n\u{1F680} RankCLI - Apply Fixes");
   console.log("\u2550".repeat(50));
-  const loggedIn = isLoggedIn();
-  const userInfo = getUserInfo();
-  const tier = userInfo.planName?.toLowerCase() || "free";
-  const hasAutoFix = loggedIn && hasFeature(tier, "auto_fix");
-  if (!hasAutoFix) {
-    showUpsell("auto_fix_blocked");
-    return;
-  }
   console.log("\n\u{1F50D} Detecting framework...");
   const frameworkResult = await detectFramework3({ cwd });
   const framework = frameworkResult.success ? frameworkResult.data : { name: "Unknown", metaPattern: "html-head" };
@@ -2262,7 +2442,7 @@ async function apply(options) {
   }
   if (config2 && !config2.url) {
     config2.url = url;
-    writeFileSync3(configPath, JSON.stringify(config2, null, 2));
+    writeFileSync4(configPath, JSON.stringify(config2, null, 2));
     console.log("\n\u{1F4BE} Updated config with URL.");
   }
   console.log("\n" + "\u2500".repeat(50));
@@ -2420,16 +2600,6 @@ async function runFix(options) {
   if (loggedIn) await ensureApiKeyPlan();
   const userInfo = getUserInfo();
   const tier = tierFromPlanId(userInfo.planId) ?? tierFromPlanId(userInfo.planName) ?? "free";
-  const hasAutoFix = loggedIn && hasFeature(tier, "auto_fix");
-  if (!options.dryRun && !hasAutoFix) {
-    if (options.output !== "json") {
-      showUpsell("auto_fix_blocked");
-    }
-    return {
-      success: false,
-      error: "Auto-fix requires Solo tier or higher. Please upgrade at " + WEB_APP_URL + "/account"
-    };
-  }
   if (options.output !== "json") {
     console.log("\n\u{1F527} RankCLI Fix - Agentic SEO Fixer");
     console.log("\u2550".repeat(50));
@@ -3773,7 +3943,7 @@ async function alerts(options) {
     if (options.list) {
       console.log("\u{1F4CB} Current alert configurations:\n");
       console.log("   (Alert configs are stored in your RankCLI account)");
-      console.log("   Run `rankcli auth login` first, then manage alerts at https://rankcli.dev/account/alerts\n");
+      console.log("   Run `rankcli login` first, then manage alerts at https://rankcli.dev/account?tab=notifications\n");
       rl.close();
       return;
     }
@@ -3848,8 +4018,8 @@ async function alerts(options) {
     }
     console.log("");
     console.log("To save this configuration:");
-    console.log("1. Log in with `rankcli auth login`");
-    console.log("2. Add alert config at https://rankcli.dev/account/alerts");
+    console.log("1. Log in with `rankcli login`");
+    console.log("2. Add alert config at https://rankcli.dev/account?tab=notifications");
     console.log("");
     console.log("Or use the API:");
     console.log(`   POST /api/alerts with webhook_url and settings`);
@@ -3908,7 +4078,7 @@ async function testWebhook(channel, webhookUrl) {
 }
 
 // src/version.ts
-var VERSION = "0.0.30";
+var VERSION = "0.0.32";
 
 // src/index.ts
 var program = new Command();
@@ -3920,7 +4090,7 @@ program.command("logout").description("Log out of your RankCLI account").action(
 program.command("whoami").description("Show current logged in user").action(whoami);
 program.command("init").description("Set up RankCLI in your project (detects framework, git/GitHub, AI keys)").option("-y, --yes", "Skip prompts and use defaults").action(init);
 program.command("analyze").description("AI analyzes your codebase for SEO opportunities").option("-v, --verbose", "Show detailed output").action(analyze);
-program.command("audit").description("Run a comprehensive SEO audit (200+ checks, Ahrefs-level)").option("-u, --url <url>", "URL to audit").option("-o, --output <format>", "Output format (json, console)", "console").option("--check-links", "Check for broken internal/external links (slower)").option("--max-pages <n>", "Max pages to crawl (default: 5)").option("--fail-on <level>", "CI gate: exit 1 if any issue is at or above this severity (error, warning, notice)").option("--min-score <n>", "CI gate: exit 1 if the overall score is below n (0-100)").option("--ai", "Enable AI analysis (your own key, or a local model)").option("--ai-provider <provider>", "AI provider (auto-detected if omitted): openrouter, openai, anthropic, groq, gemini, deepseek, mistral, cerebras, together, fireworks, ollama, lmstudio, llamacpp, vllm, custom").option("--ai-key <key>", "AI provider API key (or set the provider's env var, e.g. OPENROUTER_API_KEY)").option("--ai-model <model>", "Model id (defaults to a cheap model per provider, or the local server's loaded model)").option("--ai-base-url <url>", "OpenAI-compatible base URL, e.g. http://localhost:8080/v1 (implies --ai-provider custom)").addHelpText("after", AUDIT_HELP_TEXT).action(async (options) => {
+program.command("audit").description("Run an SEO + GEO audit (280+ checks)").option("-u, --url <url>", "URL to audit").option("-o, --output <format>", "Output format (json, console)", "console").option("--check-links", "Check for broken internal/external links (slower)").option("--max-pages <n>", "Max pages to crawl (default: 5)").option("--fail-on <level>", "CI gate: exit 1 if any issue is at or above this severity (error, warning, notice)").option("--min-score <n>", "CI gate: exit 1 if the overall score is below n (0-100)").option("--ai", "Enable AI analysis (your own key, or a local model)").option("--ai-provider <provider>", "AI provider (auto-detected if omitted; Apple Intelligence on a Mac that has it, or set RANKCLI_AI_PROVIDER): apple, openrouter, openai, anthropic, groq, gemini, deepseek, mistral, cerebras, together, fireworks, ollama, lmstudio, llamacpp, vllm, custom").option("--ai-key <key>", "AI provider API key (or set the provider's env var, e.g. OPENROUTER_API_KEY)").option("--ai-model <model>", "Model id (defaults to a cheap model per provider, or the local server's loaded model)").option("--ai-base-url <url>", "OpenAI-compatible base URL, e.g. http://localhost:8080/v1 (implies --ai-provider custom)").addHelpText("after", AUDIT_HELP_TEXT).action(async (options) => {
   process.exitCode = await audit(options);
 });
 program.command("apply").description("Analyze a live URL and apply SEO fixes to your codebase").option("-u, --url <url>", "URL to analyze").option("--auto", "Auto-apply fixes without confirmation").option("--dry-run", "Preview changes without applying").action(apply);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rankcli/cli",
-  "version": "0.0.30",
+  "version": "0.0.32",
   "description": "RankCLI - Ship code, get ranked. SEO meets CI/CD.",
   "homepage": "https://rankcli.dev",
   "main": "dist/index.js",
@@ -45,7 +45,7 @@
     "update-version": "node scripts/update-version.js"
   },
   "dependencies": {
-    "@rankcli/agent-runtime": "^0.0.21",
+    "@rankcli/agent-runtime": "^0.0.23",
     "@supabase/supabase-js": "^2.98.0",
     "chalk": "^5.3.0",
     "commander": "^12.0.0",