@rankcli/cli 0.0.32 → 0.0.34

package/README.md

@@ -211,7 +211,7 @@ rankcli apply --url https://mysite.com --auto      # Auto-apply
 
 ### `rankcli keywords`
 
-AI-powered keyword research.
+AI-powered keyword research. `--ai` runs on the same provider as `audit --ai` (Apple Intelligence on a Mac that has it, else your key, else a local Ollama) and takes the same `--ai-provider` / `--ai-key` / `--ai-model` / `--ai-base-url` flags. Keyword clustering uses embeddings on OpenAI and term vectors everywhere else; local models judge 5 tool ideas instead of 15.
 
 ```bash
 rankcli keywords --url https://mysite.com --ai

package/dist/index.js

@@ -1922,19 +1922,27 @@ Respond with only this JSON object - no prose, no code fences:
 }`;
 }
 async function runAIAnalysis(url, issues, ai) {
-  const system = "You are an SEO expert. Respond with valid JSON only.";
+  const reply = await completeWithAI(ai, {
+    system: "You are an SEO expert. Respond with valid JSON only.",
+    prompt: buildPrompt(url, issues, ai.provider === "apple" ? APPLE_MAX_ISSUES : MAX_ISSUES_IN_PROMPT),
+    json: true
+  });
+  if ("error" in reply) return reply;
+  return parseAnalysis(reply.text, ai);
+}
+async function completeWithAI(ai, request) {
+  const { system, prompt } = request;
   if (ai.provider === "apple" && ai.helper) {
     const reply = await generateWithAppleAI(ai.helper, {
       system,
-      prompt: buildPrompt(url, issues, APPLE_MAX_ISSUES),
-      maxTokens: APPLE_MAX_TOKENS
+      prompt,
+      maxTokens: Math.min(request.maxTokens ?? APPLE_MAX_TOKENS, APPLE_MAX_TOKENS)
     });
     if ("error" in reply) return { error: `${ai.label} request failed: ${reply.error}` };
-    return parseAnalysis(reply.text, ai);
+    return reply;
   }
-  const prompt = buildPrompt(url, issues);
   const timeoutMs = ai.local ? 3e5 : 9e4;
-  const maxTokens = 4096;
+  const maxTokens = Math.max(request.maxTokens ?? 4096, 4096);
   const headers = { "Content-Type": "application/json" };
   let endpoint;
   let body;
@@ -1942,7 +1950,7 @@ async function runAIAnalysis(url, issues, ai) {
     endpoint = `${ai.baseUrl}/messages`;
     headers["x-api-key"] = ai.apiKey || "";
     headers["anthropic-version"] = "2023-06-01";
-    body = { model: ai.model, max_tokens: maxTokens, system, messages: [{ role: "user", content: prompt }] };
+    body = { model: ai.model, max_tokens: maxTokens, ...system ? { system } : {}, messages: [{ role: "user", content: prompt }] };
   } else {
     endpoint = `${ai.baseUrl}/chat/completions`;
     if (ai.apiKey) headers["Authorization"] = `Bearer ${ai.apiKey}`;
@@ -1953,12 +1961,12 @@ async function runAIAnalysis(url, issues, ai) {
     body = {
       model: ai.model,
       messages: [
-        { role: "system", content: system },
+        ...system ? [{ role: "system", content: system }] : [],
         { role: "user", content: prompt }
       ],
       // OpenAI's GPT-5.6 rejects max_tokens (and temperature); everyone else expects max_tokens.
       ...ai.provider === "openai" && !ai.local ? { max_completion_tokens: maxTokens } : { max_tokens: maxTokens },
-      ...ai.jsonMode ? { response_format: { type: "json_object" } } : {}
+      ...ai.jsonMode && request.json ? { response_format: { type: "json_object" } } : {}
     };
   }
   let response;
@@ -1982,7 +1990,7 @@ async function runAIAnalysis(url, issues, ai) {
   if (!content) {
     return { error: `${ai.label} returned no content (a reasoning model may have used its whole token budget - try another --ai-model)` };
   }
-  return parseAnalysis(content, ai);
+  return { text: content };
 }
 function parseAnalysis(content, ai) {
   const parsed = extractJsonObject(content);
@@ -3077,8 +3085,7 @@ async function trackAdd(options) {
       spinner.fail("Could not find or create project");
       return { success: false, error: "Project not found" };
     }
-    const { planName } = getUserInfo();
-    const tier = planName?.toLowerCase() || "free";
+    const tier = tierFromPlanId(getUserInfo().planId) ?? "free";
     const { maxKeywords } = getTierLimits(tier);
     const supabase = await getAuthenticatedClient();
     if (!supabase) {
@@ -3238,7 +3245,7 @@ async function trackHistory(options) {
     }
     const days = options.days || 30;
     const cutoff = new Date(Date.now() - days * 24 * 60 * 60 * 1e3);
-    const { data: historyData, error } = await supabase.from("rankings").select("position, url, recorded_at").eq("keyword_id", keywordData.id).gte("recorded_at", cutoff.toISOString()).order("recorded_at", { ascending: false });
+    const { data: historyData, error } = await supabase.from("keyword_position_history").select("position, url, checked_at").eq("keyword_id", keywordData.id).gte("checked_at", cutoff.toISOString()).order("checked_at", { ascending: false });
     if (error) {
       spinner.fail(`Failed to load history: ${error.message}`);
       return { success: false, error: error.message };
@@ -3247,7 +3254,7 @@ async function trackHistory(options) {
     const history = (historyData || []).map((row) => ({
       position: row.position,
       url: row.url,
-      recordedAt: new Date(row.recorded_at)
+      recordedAt: new Date(row.checked_at)
     }));
     if (options.output === "json") {
       console.log(JSON.stringify({ keyword: options.keyword, history }, null, 2));
@@ -3255,7 +3262,9 @@ async function trackHistory(options) {
       console.log("\n" + import_chalk6.default.bold(`\u{1F4C8} History: "${options.keyword}"`));
       console.log("\u2550".repeat(50));
       if (history.length === 0) {
-        console.log(import_chalk6.default.dim("\nNo history available yet.\n"));
+        console.log(import_chalk6.default.dim(`
+No checks recorded yet. Run 'rankcli track check --url <your site>' to record one.
+`));
       } else {
         const positions = history.slice(0, 30).reverse().map((h) => h.position || 101);
         const sparkline = positions.map((p) => {
@@ -3266,7 +3275,7 @@ async function trackHistory(options) {
         }).join("");
         console.log(`
   ${sparkline}  (last ${positions.length} checks)`);
-        console.log(import_chalk6.default.dim("  \u2190 newer                    older \u2192\n"));
+        console.log(import_chalk6.default.dim("  \u2190 older                    newer \u2192\n"));
         const recent = history.slice(0, 10);
         for (const entry of recent) {
           console.log(`  ${entry.recordedAt.toLocaleDateString()}  ${formatPosition(entry.position)}`);
@@ -3357,8 +3366,7 @@ async function trackCheck(options) {
     if (!project) {
       return { success: false, error: "Project not found" };
     }
-    const { planName } = getUserInfo();
-    const tier = planName?.toLowerCase() || "free";
+    const tier = tierFromPlanId(getUserInfo().planId) ?? "free";
     const { checksPerDay } = getTierLimits(tier);
     if (!options.force && project.lastRankCheckAt) {
       const hoursSinceCheck = (Date.now() - project.lastRankCheckAt.getTime()) / (1e3 * 60 * 60);
@@ -3580,6 +3588,40 @@ async function geo(options) {
 // src/commands/keywords.ts
 var readline2 = __toESM(require("readline"));
 var import_agent_runtime7 = require("@rankcli/agent-runtime");
+
+// src/lib/keyword-llm.ts
+async function openAIEmbeddings(ai, texts) {
+  const response = await fetch(`${ai.baseUrl}/embeddings`, {
+    method: "POST",
+    headers: { "Content-Type": "application/json", Authorization: `Bearer ${ai.apiKey}` },
+    body: JSON.stringify({ model: "text-embedding-3-small", input: texts }),
+    signal: AbortSignal.timeout(6e4)
+  });
+  if (!response.ok) throw new Error(`OpenAI embeddings returned HTTP ${response.status}`);
+  const data = await response.json();
+  return data.data.map((item) => item.embedding);
+}
+function keywordLLMFromAI(ai) {
+  const llm = {
+    async complete(prompt, opts = {}) {
+      const reply = await completeWithAI(ai, { system: opts.system, prompt, maxTokens: opts.maxTokens, json: true });
+      if ("error" in reply) throw new Error(reply.error);
+      return reply.text;
+    }
+  };
+  if (ai.provider === "openai" && ai.apiKey && ai.jsonMode) {
+    llm.embed = (texts) => openAIEmbeddings(ai, texts);
+  }
+  if (ai.provider === "apple") {
+    llm.maxContentChars = 5e3;
+    llm.maxToolIdeas = 5;
+  } else if (ai.local) {
+    llm.maxToolIdeas = 5;
+  }
+  return llm;
+}
+
+// src/commands/keywords.ts
 async function keywords(options) {
   console.log("\n\u{1F511} RankCLI - Keyword Research\n");
   console.log("This tool helps you find keywords you can actually rank for,");
@@ -3740,65 +3782,37 @@ async function keywordsQuick(url, providedSeeds) {
 `);
   }
 }
-var SUPABASE_URL = "https://eqzlmjbvrtrglknphdai.supabase.co";
 async function keywordsAI(url, options = {}) {
   console.log("\n\u{1F916} AI-Powered Keyword Research\n");
-  console.log("This uses GPT-4 to analyze your site and generate keyword recommendations");
-  console.log("with competitive analysis and free tool ideas.\n");
-  const openaiApiKey = options.openaiApiKey || process.env.OPENAI_API_KEY;
   try {
     const parsed = new URL(url.startsWith("http") ? url : `https://${url}`);
     url = parsed.href;
-    console.log(`\u{1F4CD} Analyzing: ${url}`);
-    console.log("");
-    if (!options.forceLocal) {
-      console.log("\u{1F517} Connecting to RankCLI cloud...");
-      try {
-        const response = await fetch(`${SUPABASE_URL}/functions/v1/ai-keywords`, {
-          method: "POST",
-          headers: {
-            "Content-Type": "application/json"
-            // Auth header would go here if user is logged in
-          },
-          body: JSON.stringify({
-            url,
-            mode: "analyze"
-          })
-        });
-        if (response.ok) {
-          const result2 = await response.json();
-          if (result2.tier === "free" && result2.teaser) {
-            console.log("\n" + "\u2500".repeat(60));
-            console.log("\u{1F512} FREE TIER - Limited Preview");
-            console.log("\u2500".repeat(60));
-            console.log(`Found ${result2.teaser.totalKeywordsFound} keywords`);
-            console.log(`Top keywords: ${result2.teaser.topKeywords.join(", ")}`);
-            console.log(`
-${result2.teaser.upgradeMessage}`);
-            console.log('\n\u{1F4A1} Run "rankcli login" to access your paid plan features.\n');
-            return;
-          }
-          displayAIKeywordResults(result2);
-          return;
-        } else {
-          const errorText = await response.text();
-          console.log(`\u26A0\uFE0F  Cloud request failed, running locally...
-`);
-        }
-      } catch (err) {
-        console.log("\u26A0\uFE0F  Cloud unavailable, running locally...\n");
-      }
+    const resolution = await resolveAIProvider(options);
+    if (!resolution.ok) {
+      console.log(`\u274C ${resolution.error}`);
+      for (const hint of resolution.hints) console.log(`   ${hint}`);
+      console.log("");
+      process.exitCode = 1;
+      return;
     }
-    if (!openaiApiKey) {
-      console.log("\u274C OpenAI API key required for local processing.");
-      console.log('   Set OPENAI_API_KEY environment variable, or use "rankcli login" for cloud processing.\n');
+    const { ai } = resolution;
+    if (ai.notice) console.log(ai.notice);
+    const check = await completeWithAI(ai, { prompt: 'Reply with the JSON object {"ok": true} and nothing else.', maxTokens: 50, json: true });
+    if ("error" in check) {
+      console.log(`\u274C ${check.error}`);
+      console.log("   Choose another provider with --ai-provider, or fix the key or model and try again.\n");
+      process.exitCode = 1;
       return;
     }
-    console.log("\u{1F52C} Running local AI analysis (this may take a minute)...\n");
+    console.log(`\u{1F4CD} Analyzing: ${url}`);
+    console.log(`\u{1F9E0} Model: ${ai.label} (${ai.model})
+`);
+    console.log(`\u{1F52C} Running AI analysis (${ai.local ? "a few minutes on a local model" : "this may take a minute"})...
+`);
     const result = await (0, import_agent_runtime7.runAIKeywordResearch)({
       url,
       tier: "solo",
-      openaiApiKey,
+      llm: keywordLLMFromAI(ai),
       enableEnhancedToolIdeas: true,
       competitiveSearchKeys: {
         braveApiKey: process.env.BRAVE_API_KEY,
@@ -3811,6 +3825,7 @@ ${result2.teaser.upgradeMessage}`);
     console.log(`
 \u274C Error: ${error instanceof Error ? error.message : "Unknown error"}
 `);
+    process.exitCode = 1;
   }
 }
 function displayAIKeywordResults(result) {
@@ -4222,7 +4237,7 @@ async function testWebhook(channel, webhookUrl) {
 }
 
 // src/version.ts
-var VERSION = "0.0.32";
+var VERSION = "0.0.34";
 
 // src/index.ts
 var program = new import_commander.Command();
@@ -4253,11 +4268,13 @@ program.command("fix").description("Agentic SEO fixer - detect, fix, commit, and
   }
 });
 program.command("geo").description("GEO analysis - Check AI search visibility (ChatGPT, Perplexity, Claude)").option("-u, --url <url>", "URL to analyze").option("-o, --output <format>", "Output format (json, console)", "console").action(geo);
-program.command("keywords").description("AI-powered keyword research with actionable suggestions").option("-u, --url <url>", "Your website URL").option("-s, --seed <keywords>", "Seed keywords (comma-separated)").option("--auto", "Auto-extract seed keywords from your page").option("--quick", "Quick mode - skip questions, use defaults").option("--ai", "Use GPT-4 for enhanced analysis with free tool ideas").option("--local", "Force local processing (skip cloud worker)").option("--competitor", "Competitor gap analysis mode (SpyFu Kombat-style)").option("-c, --competitors <domains>", "Competitor domains (comma-separated)").action(async (options) => {
+program.command("keywords").description("AI-powered keyword research with actionable suggestions").option("-u, --url <url>", "Your website URL").option("-s, --seed <keywords>", "Seed keywords (comma-separated)").option("--auto", "Auto-extract seed keywords from your page").option("--quick", "Quick mode - skip questions, use defaults").option("--ai", "AI keyword research with free tool ideas, on your own provider (Apple Intelligence on a Mac that has it)").option("--ai-provider <provider>", "AI provider for --ai (auto-detected if omitted, or set RANKCLI_AI_PROVIDER)").option("--ai-key <key>", "AI provider API key (or the provider's env var)").option("--ai-model <model>", "Override the provider's default model").option("--ai-base-url <url>", "Any OpenAI-compatible server (implies --ai-provider custom)").option("--local", "No effect; --ai always runs locally on your provider (kept for old scripts)").option("--competitor", "Competitor gap analysis mode (SpyFu Kombat-style)").option("-c, --competitors <domains>", "Competitor domains (comma-separated)").action(async (options) => {
   if (options.ai && options.url) {
     await keywordsAI(options.url, {
-      forceLocal: options.local,
-      openaiApiKey: process.env.OPENAI_API_KEY
+      aiProvider: options.aiProvider,
+      aiKey: options.aiKey,
+      aiModel: options.aiModel,
+      aiBaseUrl: options.aiBaseUrl
     });
   } else if (options.competitor && options.url && options.seed) {
     const seeds = options.seed.split(",").map((s) => s.trim());

package/dist/index.mjs

@@ -1743,19 +1743,27 @@ Respond with only this JSON object - no prose, no code fences:
 }`;
 }
 async function runAIAnalysis(url, issues, ai) {
-  const system = "You are an SEO expert. Respond with valid JSON only.";
+  const reply = await completeWithAI(ai, {
+    system: "You are an SEO expert. Respond with valid JSON only.",
+    prompt: buildPrompt(url, issues, ai.provider === "apple" ? APPLE_MAX_ISSUES : MAX_ISSUES_IN_PROMPT),
+    json: true
+  });
+  if ("error" in reply) return reply;
+  return parseAnalysis(reply.text, ai);
+}
+async function completeWithAI(ai, request) {
+  const { system, prompt } = request;
   if (ai.provider === "apple" && ai.helper) {
     const reply = await generateWithAppleAI(ai.helper, {
       system,
-      prompt: buildPrompt(url, issues, APPLE_MAX_ISSUES),
-      maxTokens: APPLE_MAX_TOKENS
+      prompt,
+      maxTokens: Math.min(request.maxTokens ?? APPLE_MAX_TOKENS, APPLE_MAX_TOKENS)
     });
     if ("error" in reply) return { error: `${ai.label} request failed: ${reply.error}` };
-    return parseAnalysis(reply.text, ai);
+    return reply;
   }
-  const prompt = buildPrompt(url, issues);
   const timeoutMs = ai.local ? 3e5 : 9e4;
-  const maxTokens = 4096;
+  const maxTokens = Math.max(request.maxTokens ?? 4096, 4096);
   const headers = { "Content-Type": "application/json" };
   let endpoint;
   let body;
@@ -1763,7 +1771,7 @@ async function runAIAnalysis(url, issues, ai) {
     endpoint = `${ai.baseUrl}/messages`;
     headers["x-api-key"] = ai.apiKey || "";
     headers["anthropic-version"] = "2023-06-01";
-    body = { model: ai.model, max_tokens: maxTokens, system, messages: [{ role: "user", content: prompt }] };
+    body = { model: ai.model, max_tokens: maxTokens, ...system ? { system } : {}, messages: [{ role: "user", content: prompt }] };
   } else {
     endpoint = `${ai.baseUrl}/chat/completions`;
     if (ai.apiKey) headers["Authorization"] = `Bearer ${ai.apiKey}`;
@@ -1774,12 +1782,12 @@ async function runAIAnalysis(url, issues, ai) {
     body = {
       model: ai.model,
       messages: [
-        { role: "system", content: system },
+        ...system ? [{ role: "system", content: system }] : [],
         { role: "user", content: prompt }
       ],
       // OpenAI's GPT-5.6 rejects max_tokens (and temperature); everyone else expects max_tokens.
       ...ai.provider === "openai" && !ai.local ? { max_completion_tokens: maxTokens } : { max_tokens: maxTokens },
-      ...ai.jsonMode ? { response_format: { type: "json_object" } } : {}
+      ...ai.jsonMode && request.json ? { response_format: { type: "json_object" } } : {}
     };
   }
   let response;
@@ -1803,7 +1811,7 @@ async function runAIAnalysis(url, issues, ai) {
   if (!content) {
     return { error: `${ai.label} returned no content (a reasoning model may have used its whole token budget - try another --ai-model)` };
   }
-  return parseAnalysis(content, ai);
+  return { text: content };
 }
 function parseAnalysis(content, ai) {
   const parsed = extractJsonObject(content);
@@ -2908,8 +2916,7 @@ async function trackAdd(options) {
       spinner.fail("Could not find or create project");
       return { success: false, error: "Project not found" };
     }
-    const { planName } = getUserInfo();
-    const tier = planName?.toLowerCase() || "free";
+    const tier = tierFromPlanId(getUserInfo().planId) ?? "free";
     const { maxKeywords } = getTierLimits(tier);
     const supabase = await getAuthenticatedClient();
     if (!supabase) {
@@ -3069,7 +3076,7 @@ async function trackHistory(options) {
     }
     const days = options.days || 30;
     const cutoff = new Date(Date.now() - days * 24 * 60 * 60 * 1e3);
-    const { data: historyData, error } = await supabase.from("rankings").select("position, url, recorded_at").eq("keyword_id", keywordData.id).gte("recorded_at", cutoff.toISOString()).order("recorded_at", { ascending: false });
+    const { data: historyData, error } = await supabase.from("keyword_position_history").select("position, url, checked_at").eq("keyword_id", keywordData.id).gte("checked_at", cutoff.toISOString()).order("checked_at", { ascending: false });
     if (error) {
       spinner.fail(`Failed to load history: ${error.message}`);
       return { success: false, error: error.message };
@@ -3078,7 +3085,7 @@ async function trackHistory(options) {
     const history = (historyData || []).map((row) => ({
       position: row.position,
       url: row.url,
-      recordedAt: new Date(row.recorded_at)
+      recordedAt: new Date(row.checked_at)
     }));
     if (options.output === "json") {
       console.log(JSON.stringify({ keyword: options.keyword, history }, null, 2));
@@ -3086,7 +3093,9 @@ async function trackHistory(options) {
       console.log("\n" + chalk6.bold(`\u{1F4C8} History: "${options.keyword}"`));
       console.log("\u2550".repeat(50));
       if (history.length === 0) {
-        console.log(chalk6.dim("\nNo history available yet.\n"));
+        console.log(chalk6.dim(`
+No checks recorded yet. Run 'rankcli track check --url <your site>' to record one.
+`));
       } else {
         const positions = history.slice(0, 30).reverse().map((h) => h.position || 101);
         const sparkline = positions.map((p) => {
@@ -3097,7 +3106,7 @@ async function trackHistory(options) {
         }).join("");
         console.log(`
   ${sparkline}  (last ${positions.length} checks)`);
-        console.log(chalk6.dim("  \u2190 newer                    older \u2192\n"));
+        console.log(chalk6.dim("  \u2190 older                    newer \u2192\n"));
         const recent = history.slice(0, 10);
         for (const entry of recent) {
           console.log(`  ${entry.recordedAt.toLocaleDateString()}  ${formatPosition(entry.position)}`);
@@ -3188,8 +3197,7 @@ async function trackCheck(options) {
     if (!project) {
       return { success: false, error: "Project not found" };
     }
-    const { planName } = getUserInfo();
-    const tier = planName?.toLowerCase() || "free";
+    const tier = tierFromPlanId(getUserInfo().planId) ?? "free";
     const { checksPerDay } = getTierLimits(tier);
     if (!options.force && project.lastRankCheckAt) {
       const hoursSinceCheck = (Date.now() - project.lastRankCheckAt.getTime()) / (1e3 * 60 * 60);
@@ -3421,6 +3429,40 @@ import {
   formatTopicReport,
   runAIKeywordResearch
 } from "@rankcli/agent-runtime";
+
+// src/lib/keyword-llm.ts
+async function openAIEmbeddings(ai, texts) {
+  const response = await fetch(`${ai.baseUrl}/embeddings`, {
+    method: "POST",
+    headers: { "Content-Type": "application/json", Authorization: `Bearer ${ai.apiKey}` },
+    body: JSON.stringify({ model: "text-embedding-3-small", input: texts }),
+    signal: AbortSignal.timeout(6e4)
+  });
+  if (!response.ok) throw new Error(`OpenAI embeddings returned HTTP ${response.status}`);
+  const data = await response.json();
+  return data.data.map((item) => item.embedding);
+}
+function keywordLLMFromAI(ai) {
+  const llm = {
+    async complete(prompt, opts = {}) {
+      const reply = await completeWithAI(ai, { system: opts.system, prompt, maxTokens: opts.maxTokens, json: true });
+      if ("error" in reply) throw new Error(reply.error);
+      return reply.text;
+    }
+  };
+  if (ai.provider === "openai" && ai.apiKey && ai.jsonMode) {
+    llm.embed = (texts) => openAIEmbeddings(ai, texts);
+  }
+  if (ai.provider === "apple") {
+    llm.maxContentChars = 5e3;
+    llm.maxToolIdeas = 5;
+  } else if (ai.local) {
+    llm.maxToolIdeas = 5;
+  }
+  return llm;
+}
+
+// src/commands/keywords.ts
 async function keywords(options) {
   console.log("\n\u{1F511} RankCLI - Keyword Research\n");
   console.log("This tool helps you find keywords you can actually rank for,");
@@ -3581,65 +3623,37 @@ async function keywordsQuick(url, providedSeeds) {
 `);
   }
 }
-var SUPABASE_URL = "https://eqzlmjbvrtrglknphdai.supabase.co";
 async function keywordsAI(url, options = {}) {
   console.log("\n\u{1F916} AI-Powered Keyword Research\n");
-  console.log("This uses GPT-4 to analyze your site and generate keyword recommendations");
-  console.log("with competitive analysis and free tool ideas.\n");
-  const openaiApiKey = options.openaiApiKey || process.env.OPENAI_API_KEY;
   try {
     const parsed = new URL(url.startsWith("http") ? url : `https://${url}`);
     url = parsed.href;
-    console.log(`\u{1F4CD} Analyzing: ${url}`);
-    console.log("");
-    if (!options.forceLocal) {
-      console.log("\u{1F517} Connecting to RankCLI cloud...");
-      try {
-        const response = await fetch(`${SUPABASE_URL}/functions/v1/ai-keywords`, {
-          method: "POST",
-          headers: {
-            "Content-Type": "application/json"
-            // Auth header would go here if user is logged in
-          },
-          body: JSON.stringify({
-            url,
-            mode: "analyze"
-          })
-        });
-        if (response.ok) {
-          const result2 = await response.json();
-          if (result2.tier === "free" && result2.teaser) {
-            console.log("\n" + "\u2500".repeat(60));
-            console.log("\u{1F512} FREE TIER - Limited Preview");
-            console.log("\u2500".repeat(60));
-            console.log(`Found ${result2.teaser.totalKeywordsFound} keywords`);
-            console.log(`Top keywords: ${result2.teaser.topKeywords.join(", ")}`);
-            console.log(`
-${result2.teaser.upgradeMessage}`);
-            console.log('\n\u{1F4A1} Run "rankcli login" to access your paid plan features.\n');
-            return;
-          }
-          displayAIKeywordResults(result2);
-          return;
-        } else {
-          const errorText = await response.text();
-          console.log(`\u26A0\uFE0F  Cloud request failed, running locally...
-`);
-        }
-      } catch (err) {
-        console.log("\u26A0\uFE0F  Cloud unavailable, running locally...\n");
-      }
+    const resolution = await resolveAIProvider(options);
+    if (!resolution.ok) {
+      console.log(`\u274C ${resolution.error}`);
+      for (const hint of resolution.hints) console.log(`   ${hint}`);
+      console.log("");
+      process.exitCode = 1;
+      return;
     }
-    if (!openaiApiKey) {
-      console.log("\u274C OpenAI API key required for local processing.");
-      console.log('   Set OPENAI_API_KEY environment variable, or use "rankcli login" for cloud processing.\n');
+    const { ai } = resolution;
+    if (ai.notice) console.log(ai.notice);
+    const check = await completeWithAI(ai, { prompt: 'Reply with the JSON object {"ok": true} and nothing else.', maxTokens: 50, json: true });
+    if ("error" in check) {
+      console.log(`\u274C ${check.error}`);
+      console.log("   Choose another provider with --ai-provider, or fix the key or model and try again.\n");
+      process.exitCode = 1;
       return;
     }
-    console.log("\u{1F52C} Running local AI analysis (this may take a minute)...\n");
+    console.log(`\u{1F4CD} Analyzing: ${url}`);
+    console.log(`\u{1F9E0} Model: ${ai.label} (${ai.model})
+`);
+    console.log(`\u{1F52C} Running AI analysis (${ai.local ? "a few minutes on a local model" : "this may take a minute"})...
+`);
     const result = await runAIKeywordResearch({
       url,
       tier: "solo",
-      openaiApiKey,
+      llm: keywordLLMFromAI(ai),
       enableEnhancedToolIdeas: true,
       competitiveSearchKeys: {
         braveApiKey: process.env.BRAVE_API_KEY,
@@ -3652,6 +3666,7 @@ ${result2.teaser.upgradeMessage}`);
     console.log(`
 \u274C Error: ${error instanceof Error ? error.message : "Unknown error"}
 `);
+    process.exitCode = 1;
   }
 }
 function displayAIKeywordResults(result) {
@@ -4078,7 +4093,7 @@ async function testWebhook(channel, webhookUrl) {
 }
 
 // src/version.ts
-var VERSION = "0.0.32";
+var VERSION = "0.0.34";
 
 // src/index.ts
 var program = new Command();
@@ -4109,11 +4124,13 @@ program.command("fix").description("Agentic SEO fixer - detect, fix, commit, and
   }
 });
 program.command("geo").description("GEO analysis - Check AI search visibility (ChatGPT, Perplexity, Claude)").option("-u, --url <url>", "URL to analyze").option("-o, --output <format>", "Output format (json, console)", "console").action(geo);
-program.command("keywords").description("AI-powered keyword research with actionable suggestions").option("-u, --url <url>", "Your website URL").option("-s, --seed <keywords>", "Seed keywords (comma-separated)").option("--auto", "Auto-extract seed keywords from your page").option("--quick", "Quick mode - skip questions, use defaults").option("--ai", "Use GPT-4 for enhanced analysis with free tool ideas").option("--local", "Force local processing (skip cloud worker)").option("--competitor", "Competitor gap analysis mode (SpyFu Kombat-style)").option("-c, --competitors <domains>", "Competitor domains (comma-separated)").action(async (options) => {
+program.command("keywords").description("AI-powered keyword research with actionable suggestions").option("-u, --url <url>", "Your website URL").option("-s, --seed <keywords>", "Seed keywords (comma-separated)").option("--auto", "Auto-extract seed keywords from your page").option("--quick", "Quick mode - skip questions, use defaults").option("--ai", "AI keyword research with free tool ideas, on your own provider (Apple Intelligence on a Mac that has it)").option("--ai-provider <provider>", "AI provider for --ai (auto-detected if omitted, or set RANKCLI_AI_PROVIDER)").option("--ai-key <key>", "AI provider API key (or the provider's env var)").option("--ai-model <model>", "Override the provider's default model").option("--ai-base-url <url>", "Any OpenAI-compatible server (implies --ai-provider custom)").option("--local", "No effect; --ai always runs locally on your provider (kept for old scripts)").option("--competitor", "Competitor gap analysis mode (SpyFu Kombat-style)").option("-c, --competitors <domains>", "Competitor domains (comma-separated)").action(async (options) => {
   if (options.ai && options.url) {
     await keywordsAI(options.url, {
-      forceLocal: options.local,
-      openaiApiKey: process.env.OPENAI_API_KEY
+      aiProvider: options.aiProvider,
+      aiKey: options.aiKey,
+      aiModel: options.aiModel,
+      aiBaseUrl: options.aiBaseUrl
     });
   } else if (options.competitor && options.url && options.seed) {
     const seeds = options.seed.split(",").map((s) => s.trim());

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rankcli/cli",
-  "version": "0.0.32",
+  "version": "0.0.34",
   "description": "RankCLI - Ship code, get ranked. SEO meets CI/CD.",
   "homepage": "https://rankcli.dev",
   "main": "dist/index.js",
@@ -33,7 +33,7 @@
     "build": "npm run build:checks && npm run build:wasm && npm run build:js",
     "build:js": "npm run update-version && tsup src/index.ts src/wasm-engine.ts --format cjs,esm --dts",
     "build:checks": "test -d ../agent-runtime && (cd ../agent-runtime && pnpm build:wasm) || echo 'agent-runtime not present as a monorepo sibling - build.rs will fall back to the node_modules-installed bundle'",
-    "build:wasm": "cd native && wasm-pack build --target nodejs --release && cp -r pkg ../wasm",
+    "build:wasm": "cd native && wasm-pack build --target nodejs --release && mkdir -p ../wasm && cp -r pkg/* ../wasm/ && node ../scripts/verify-wasm.js",
     "build:wasm:dev": "cd native && wasm-pack build --target nodejs --dev && mkdir -p ../wasm && cp -r pkg/* ../wasm/",
     "prebuild:wasm": "mkdir -p wasm",
     "inject-config": "node scripts/inject-config.js",
@@ -45,7 +45,7 @@
     "update-version": "node scripts/update-version.js"
   },
   "dependencies": {
-    "@rankcli/agent-runtime": "^0.0.23",
+    "@rankcli/agent-runtime": "^0.0.24",
     "@supabase/supabase-js": "^2.98.0",
     "chalk": "^5.3.0",
     "commander": "^12.0.0",

package/wasm/rankcli_audit_engine.d.ts

@@ -24,8 +24,21 @@ export function get_encrypted_size(): number;
 export function get_tier(): string;
 
 /**
- * Initialize the engine with a license key.
+ * Initialize the engine with the build-time decrypt passphrase.
  * Decrypts the embedded checks and stores them for execution.
+ *
+ * The `license_key` parameter is misleadingly named for what it does
+ * now: entitlement (is this user actually paid?) is decided in
+ * TypeScript, from the real Supabase-backed apiKey/plan the CLI already
+ * validates on login - not by anything checkable here. The caller only
+ * invokes this at all once it has confirmed a paid apiKey, always
+ * passing the single build-embedded passphrase (see
+ * scripts/inject-config.js), never a user-supplied string. This
+ * decryption step exists purely to keep the premium check source out of
+ * static analysis of the shipped binary; get_tier()/get_checks_limit()/
+ * validate_license() below are legacy from an earlier signed-license
+ * design that was never finished and should not be trusted as an
+ * entitlement source.
  */
 export function init_engine(license_key: string): boolean;
 

package/wasm/rankcli_audit_engine.js

@@ -1,7 +1,5 @@
 /* @ts-self-types="./rankcli_audit_engine.d.ts" */
 
-//#region exports
-
 /**
  * Get checks limit for current tier
  * @returns {number}
@@ -22,18 +20,24 @@ function get_decrypted_code() {
     let deferred2_0;
     let deferred2_1;
     try {
-        const ret = wasm.get_decrypted_code();
-        var ptr1 = ret[0];
-        var len1 = ret[1];
-        if (ret[3]) {
+        const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+        wasm.get_decrypted_code(retptr);
+        var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+        var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+        var r2 = getDataViewMemory0().getInt32(retptr + 4 * 2, true);
+        var r3 = getDataViewMemory0().getInt32(retptr + 4 * 3, true);
+        var ptr1 = r0;
+        var len1 = r1;
+        if (r3) {
             ptr1 = 0; len1 = 0;
-            throw takeFromExternrefTable0(ret[2]);
+            throw takeObject(r2);
         }
         deferred2_0 = ptr1;
         deferred2_1 = len1;
         return getStringFromWasm0(ptr1, len1);
     } finally {
-        wasm.__wbindgen_free(deferred2_0, deferred2_1, 1);
+        wasm.__wbindgen_add_to_stack_pointer(16);
+        wasm.__wbindgen_export(deferred2_0, deferred2_1, 1);
     }
 }
 exports.get_decrypted_code = get_decrypted_code;
@@ -56,30 +60,55 @@ function get_tier() {
     let deferred1_0;
     let deferred1_1;
     try {
-        const ret = wasm.get_tier();
-        deferred1_0 = ret[0];
-        deferred1_1 = ret[1];
-        return getStringFromWasm0(ret[0], ret[1]);
+        const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+        wasm.get_tier(retptr);
+        var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+        var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+        deferred1_0 = r0;
+        deferred1_1 = r1;
+        return getStringFromWasm0(r0, r1);
     } finally {
-        wasm.__wbindgen_free(deferred1_0, deferred1_1, 1);
+        wasm.__wbindgen_add_to_stack_pointer(16);
+        wasm.__wbindgen_export(deferred1_0, deferred1_1, 1);
     }
 }
 exports.get_tier = get_tier;
 
 /**
- * Initialize the engine with a license key.
+ * Initialize the engine with the build-time decrypt passphrase.
  * Decrypts the embedded checks and stores them for execution.
+ *
+ * The `license_key` parameter is misleadingly named for what it does
+ * now: entitlement (is this user actually paid?) is decided in
+ * TypeScript, from the real Supabase-backed apiKey/plan the CLI already
+ * validates on login - not by anything checkable here. The caller only
+ * invokes this at all once it has confirmed a paid apiKey, always
+ * passing the single build-embedded passphrase (see
+ * scripts/inject-config.js), never a user-supplied string. This
+ * decryption step exists purely to keep the premium check source out of
+ * static analysis of the shipped binary; get_tier()/get_checks_limit()/
+ * validate_license() below are legacy from an earlier signed-license
+ * design that was never finished and should not be trusted as an
+ * entitlement source.
  * @param {string} license_key
  * @returns {boolean}
  */
 function init_engine(license_key) {
-    const ptr0 = passStringToWasm0(license_key, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
-    const len0 = WASM_VECTOR_LEN;
-    const ret = wasm.init_engine(ptr0, len0);
-    if (ret[2]) {
-        throw takeFromExternrefTable0(ret[1]);
+    try {
+        const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+        const ptr0 = passStringToWasm0(license_key, wasm.__wbindgen_export2, wasm.__wbindgen_export3);
+        const len0 = WASM_VECTOR_LEN;
+        wasm.init_engine(retptr, ptr0, len0);
+        var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+        var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+        var r2 = getDataViewMemory0().getInt32(retptr + 4 * 2, true);
+        if (r2) {
+            throw takeObject(r1);
+        }
+        return r0 !== 0;
+    } finally {
+        wasm.__wbindgen_add_to_stack_pointer(16);
     }
-    return ret[0] !== 0;
 }
 exports.init_engine = init_engine;
 
@@ -102,14 +131,18 @@ function validate_license(license_key) {
     let deferred2_0;
     let deferred2_1;
     try {
-        const ptr0 = passStringToWasm0(license_key, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+        const ptr0 = passStringToWasm0(license_key, wasm.__wbindgen_export2, wasm.__wbindgen_export3);
         const len0 = WASM_VECTOR_LEN;
-        const ret = wasm.validate_license(ptr0, len0);
-        deferred2_0 = ret[0];
-        deferred2_1 = ret[1];
-        return getStringFromWasm0(ret[0], ret[1]);
+        wasm.validate_license(retptr, ptr0, len0);
+        var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+        var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+        deferred2_0 = r0;
+        deferred2_1 = r1;
+        return getStringFromWasm0(r0, r1);
     } finally {
-        wasm.__wbindgen_free(deferred2_0, deferred2_1, 1);
+        wasm.__wbindgen_add_to_stack_pointer(16);
+        wasm.__wbindgen_export(deferred2_0, deferred2_1, 1);
     }
 }
 exports.validate_license = validate_license;
@@ -122,39 +155,30 @@ function version() {
     let deferred1_0;
     let deferred1_1;
     try {
-        const ret = wasm.version();
-        deferred1_0 = ret[0];
-        deferred1_1 = ret[1];
-        return getStringFromWasm0(ret[0], ret[1]);
+        const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+        wasm.version(retptr);
+        var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+        var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+        deferred1_0 = r0;
+        deferred1_1 = r1;
+        return getStringFromWasm0(r0, r1);
     } finally {
-        wasm.__wbindgen_free(deferred1_0, deferred1_1, 1);
+        wasm.__wbindgen_add_to_stack_pointer(16);
+        wasm.__wbindgen_export(deferred1_0, deferred1_1, 1);
     }
 }
 exports.version = version;
 
-//#endregion
-
-//#region wasm imports
-
 function __wbg_get_imports() {
     const import0 = {
         __proto__: null,
-        __wbg_Error_8c4e43fe74559d73: function() { return logError(function (arg0, arg1) {
+        __wbg_Error_8c4e43fe74559d73: function(arg0, arg1) {
             const ret = Error(getStringFromWasm0(arg0, arg1));
-            return ret;
-        }, arguments); },
+            return addHeapObject(ret);
+        },
         __wbg___wbindgen_throw_be289d5034ed271b: function(arg0, arg1) {
             throw new Error(getStringFromWasm0(arg0, arg1));
         },
-        __wbindgen_init_externref_table: function() {
-            const table = wasm.__wbindgen_externrefs;
-            const offset = table.grow(4);
-            table.set(0, undefined);
-            table.set(offset + 0, undefined);
-            table.set(offset + 1, null);
-            table.set(offset + 2, true);
-            table.set(offset + 3, false);
-        },
     };
     return {
         __proto__: null,
@@ -162,10 +186,29 @@ function __wbg_get_imports() {
     };
 }
 
+function addHeapObject(obj) {
+    if (heap_next === heap.length) heap.push(heap.length + 1);
+    const idx = heap_next;
+    heap_next = heap[idx];
+
+    heap[idx] = obj;
+    return idx;
+}
+
+function dropObject(idx) {
+    if (idx < 132) return;
+    heap[idx] = heap_next;
+    heap_next = idx;
+}
 
-//#endregion
+let cachedDataViewMemory0 = null;
+function getDataViewMemory0() {
+    if (cachedDataViewMemory0 === null || cachedDataViewMemory0.buffer.detached === true || (cachedDataViewMemory0.buffer.detached === undefined && cachedDataViewMemory0.buffer !== wasm.memory.buffer)) {
+        cachedDataViewMemory0 = new DataView(wasm.memory.buffer);
+    }
+    return cachedDataViewMemory0;
+}
 
-//#region intrinsics
 function getStringFromWasm0(ptr, len) {
     ptr = ptr >>> 0;
     return decodeText(ptr, len);
@@ -179,24 +222,14 @@ function getUint8ArrayMemory0() {
     return cachedUint8ArrayMemory0;
 }
 
-function logError(f, args) {
-    try {
-        return f.apply(this, args);
-    } catch (e) {
-        let error = (function () {
-            try {
-                return e instanceof Error ? `${e.message}\n\nStack:\n${e.stack}` : e.toString();
-            } catch(_) {
-                return "<failed to stringify thrown value>";
-            }
-        }());
-        console.error("wasm-bindgen: imported JS function that was not marked as `catch` threw an error:", error);
-        throw e;
-    }
-}
+function getObject(idx) { return heap[idx]; }
+
+let heap = new Array(128).fill(undefined);
+heap.push(undefined, null, true, false);
+
+let heap_next = heap.length;
 
 function passStringToWasm0(arg, malloc, realloc) {
-    if (typeof(arg) !== 'string') throw new Error(`expected a string argument, found ${typeof(arg)}`);
     if (realloc === undefined) {
         const buf = cachedTextEncoder.encode(arg);
         const ptr = malloc(buf.length, 1) >>> 0;
@@ -224,7 +257,7 @@ function passStringToWasm0(arg, malloc, realloc) {
         ptr = realloc(ptr, len, len = offset + arg.length * 3, 1) >>> 0;
         const view = getUint8ArrayMemory0().subarray(ptr + offset, ptr + len);
         const ret = cachedTextEncoder.encodeInto(arg, view);
-        if (ret.read !== arg.length) throw new Error('failed to pass whole string');
+
         offset += ret.written;
         ptr = realloc(ptr, len, offset, 1) >>> 0;
     }
@@ -233,10 +266,10 @@ function passStringToWasm0(arg, malloc, realloc) {
     return ptr;
 }
 
-function takeFromExternrefTable0(idx) {
-    const value = wasm.__wbindgen_externrefs.get(idx);
-    wasm.__externref_table_dealloc(idx);
-    return value;
+function takeObject(idx) {
+    const ret = getObject(idx);
+    dropObject(idx);
+    return ret;
 }
 
 let cachedTextDecoder = new TextDecoder('utf-8', { ignoreBOM: true, fatal: true });
@@ -260,15 +293,7 @@ if (!('encodeInto' in cachedTextEncoder)) {
 
 let WASM_VECTOR_LEN = 0;
 
-
-//#endregion
-
-//#region wasm loading
 const wasmPath = `${__dirname}/rankcli_audit_engine_bg.wasm`;
 const wasmBytes = require('fs').readFileSync(wasmPath);
 const wasmModule = new WebAssembly.Module(wasmBytes);
 const wasm = new WebAssembly.Instance(wasmModule, __wbg_get_imports()).exports;
-wasm.__wbindgen_start();
-
-//#endregion
-exports.__wasm = wasm;

package/wasm/rankcli_audit_engine_bg.wasm.d.ts

@@ -2,16 +2,14 @@
 /* eslint-disable */
 export const memory: WebAssembly.Memory;
 export const get_checks_limit: () => number;
-export const get_decrypted_code: () => [number, number, number, number];
+export const get_decrypted_code: (a: number) => void;
 export const get_encrypted_size: () => number;
-export const get_tier: () => [number, number];
-export const init_engine: (a: number, b: number) => [number, number, number];
+export const get_tier: (a: number) => void;
+export const init_engine: (a: number, b: number, c: number) => void;
 export const is_initialized: () => number;
-export const validate_license: (a: number, b: number) => [number, number];
-export const version: () => [number, number];
-export const __wbindgen_externrefs: WebAssembly.Table;
-export const __externref_table_dealloc: (a: number) => void;
-export const __wbindgen_free: (a: number, b: number, c: number) => void;
-export const __wbindgen_malloc: (a: number, b: number) => number;
-export const __wbindgen_realloc: (a: number, b: number, c: number, d: number) => number;
-export const __wbindgen_start: () => void;
+export const validate_license: (a: number, b: number, c: number) => void;
+export const version: (a: number) => void;
+export const __wbindgen_add_to_stack_pointer: (a: number) => number;
+export const __wbindgen_export: (a: number, b: number, c: number) => void;
+export const __wbindgen_export2: (a: number, b: number) => number;
+export const __wbindgen_export3: (a: number, b: number, c: number, d: number) => number;