@vertaaux/cli 0.3.2 → 0.4.0

package/README.md

@@ -147,7 +147,7 @@ The `--machine` global flag enables strict machine-readable mode:
 ```json
 {
   "meta": {
-    "version": "0.1.0",
+    "version": "0.4.0",
     "timestamp": "2026-02-08T12:00:00.000Z",
     "command": "audit",
     "args": ["https://example.com", "--format", "json"]
@@ -210,6 +210,10 @@ These options work with any command:
 | `-q, --quiet` | Suppress banner and non-essential output |
 | `--no-banner` | Hide the V-mark banner |
 | `--machine` | Strict machine-readable output mode |
+| `--color` | Force colored output |
+| `--no-color` | Disable colored output |
+| `--dashboard` | Force live dashboard during audit --wait |
+| `--no-dashboard` | Disable live dashboard (use spinner instead) |
 | `--dry-run` | Show what would happen without executing |
 | `-y, --yes` | Auto-confirm all interactive prompts |
 | `--verbose` | Expand output with additional details |
@@ -338,6 +342,9 @@ JSON envelope output automatically filters CLI arguments containing API keys or
 | `VERTAAUX_API_KEY` | API authentication key |
 | `VERTAAUX_TOKEN` | Alternative auth token (checked first) |
 | `VERTAAUX_API_BASE` | API base URL override |
+| `VERTAAUX_AUTH_BASE` | Auth endpoint override (default: `https://vertaaux.ai`) |
+| `VERTAAUX_LOG_LEVEL` | Log verbosity: `debug\|info\|warn\|error` (default: `info`) |
+| `VERTAAUX_LOG_JSON` | Structured JSON logs (default: `false`) |
 | `NO_COLOR` | Disable colored output |
 | `FORCE_COLOR` | Force colored output |
 

package/dist/auth/ci-token.d.ts

@@ -20,6 +20,12 @@ interface TokenValidationResponse {
     valid: boolean;
     /** User or organization ID */
     user_id?: string;
+    /** User display name */
+    name?: string;
+    /** User email */
+    email?: string;
+    /** Subscription tier */
+    tier?: string;
     /** Organization name */
     organization?: string;
     /** Scopes granted to token */

package/dist/auth/ci-token.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ci-token.d.ts","sourceRoot":"","sources":["../../src/auth/ci-token.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAQH;;;;;;GAMG;AACH,wBAAgB,UAAU,IAAI,MAAM,GAAG,IAAI,CAQ1C;AAED;;GAEG;AACH,UAAU,uBAAuB;IAC/B,6BAA6B;IAC7B,KAAK,EAAE,OAAO,CAAC;IACf,8BAA8B;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wBAAwB;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,8BAA8B;IAC9B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,gCAAgC;IAChC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+BAA+B;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAOD;;;;;;GAMG;AACH,wBAAsB,eAAe,CACnC,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,MAAyB,GACjC,OAAO,CAAC,OAAO,CAAC,CAoBlB;AAED;;;;;;GAMG;AACH,wBAAsB,YAAY,CAChC,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,MAAyB,GACjC,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAkBzC"}
+{"version":3,"file":"ci-token.d.ts","sourceRoot":"","sources":["../../src/auth/ci-token.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAQH;;;;;;GAMG;AACH,wBAAgB,UAAU,IAAI,MAAM,GAAG,IAAI,CAQ1C;AAED;;GAEG;AACH,UAAU,uBAAuB;IAC/B,6BAA6B;IAC7B,KAAK,EAAE,OAAO,CAAC;IACf,8BAA8B;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wBAAwB;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iBAAiB;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wBAAwB;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,wBAAwB;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,8BAA8B;IAC9B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,gCAAgC;IAChC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+BAA+B;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAOD;;;;;;GAMG;AACH,wBAAsB,eAAe,CACnC,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,MAAyB,GACjC,OAAO,CAAC,OAAO,CAAC,CAoBlB;AAED;;;;;;GAMG;AACH,wBAAsB,YAAY,CAChC,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,MAAyB,GACjC,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAkBzC"}

package/dist/commands/audit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/commands/audit.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAyFpC,MAAM,WAAW,mBAAmB;IAElC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IAGrB,IAAI,CAAC,EAAE,OAAO,GAAG,UAAU,GAAG,MAAM,CAAC;IACrC,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAGlB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,UAAU,GAAG,UAAU,GAAG,OAAO,CAAC;IAG5C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAGlB,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,GAAG,MAAM,CAAC;IAC/C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAGlB,WAAW,CAAC,EAAE,OAAO,CAAC;IAGtB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,YAAY,CAAC,EAAE,OAAO,CAAC;IAGvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,OAAO,CAAC;IAGhB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IAGf,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IAGpB,MAAM,CAAC,EAAE,OAAO,GAAG,UAAU,GAAG,MAAM,CAAC;IAGvC,MAAM,CAAC,EAAE,MAAM,CAAC;IAGhB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,YAAY,CAAC,EAAE,OAAO,CAAC;IAGvB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAGlB,QAAQ,CAAC,EAAE,OAAO,CAAC;IAGnB,OAAO,CAAC,EAAE,OAAO,CAAC;IAGlB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAw5BD;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAmT3D"}
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/commands/audit.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA2FpC,MAAM,WAAW,mBAAmB;IAElC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IAGrB,IAAI,CAAC,EAAE,OAAO,GAAG,UAAU,GAAG,MAAM,CAAC;IACrC,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAGlB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,UAAU,GAAG,UAAU,GAAG,OAAO,CAAC;IAG5C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAGlB,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,GAAG,MAAM,CAAC;IAC/C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAGlB,WAAW,CAAC,EAAE,OAAO,CAAC;IAGtB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,YAAY,CAAC,EAAE,OAAO,CAAC;IAGvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,OAAO,CAAC;IAGhB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IAGf,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IAGpB,MAAM,CAAC,EAAE,OAAO,GAAG,UAAU,GAAG,MAAM,CAAC;IAGvC,MAAM,CAAC,EAAE,MAAM,CAAC;IAGhB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,YAAY,CAAC,EAAE,OAAO,CAAC;IAGvB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAGlB,QAAQ,CAAC,EAAE,OAAO,CAAC;IAGnB,OAAO,CAAC,EAAE,OAAO,CAAC;IAGlB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AA8/BD;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAsT3D"}

package/dist/commands/audit.js

@@ -26,6 +26,8 @@ import { loadPolicy, resolveBranchPolicy, } from "../policy/index.js";
 import { detectMonorepo, getAuditableApps, generateMatrixConfig, aggregateResults, formatAggregatedResults, } from "../monorepo/index.js";
 import { createLogger } from "../utils/logger.js";
 import { validateBranchName, assertPathContainment } from "../utils/sanitize.js";
+import { isLocalUrl } from "../utils/url-classify.js";
+import { captureLocalPage } from "../utils/local-capture.js";
 import chalk from "chalk";
 import semver from "semver";
 // Artifact directory
@@ -356,6 +358,178 @@ function saveArtifactBundle(jobId, result, issues, exitCode, quiet) {
     }
     return artifactsPath;
 }
+/**
+ * Output results in fire-and-forget mode (--no-wait).
+ */
+function outputFireAndForget(created, format, formatter, options, quiet) {
+    if (format === "json") {
+        if (options.output) {
+            const output = JSON.stringify(createEnvelope(created, "audit"), null, 2);
+            const filePath = writeOutputToFile(output, options.output);
+            if (filePath && !quiet) {
+                console.error(`Report written to: ${filePath}`);
+            }
+        }
+        else {
+            writeJsonOutput(created, "audit");
+        }
+    }
+    else {
+        const output = formatter.formatResult(created);
+        const defaultPath = getDefaultOutputPath(format);
+        const filePath = writeOutputToFile(output, options.output, defaultPath);
+        if (filePath && !quiet) {
+            console.error(`Report written to: ${filePath}`);
+        }
+        else if (!filePath) {
+            writeStdout(output);
+        }
+    }
+}
+/**
+ * Load and resolve a policy file with branch-specific overrides.
+ */
+async function loadAndResolvePolicy(options, quiet) {
+    let resolvedPolicy = null;
+    let policyPath = null;
+    try {
+        const policyResult = await loadPolicy(options.policy ? path.dirname(options.policy) : undefined);
+        if (options.policy) {
+            const { loadPolicyFile } = await import("../policy/index.js");
+            resolvedPolicy = await loadPolicyFile(options.policy);
+            policyPath = options.policy;
+        }
+        else if (policyResult.path) {
+            resolvedPolicy = policyResult.policy;
+            policyPath = policyResult.path;
+        }
+        if (resolvedPolicy) {
+            const currentBranch = detectCurrentBranch();
+            if (currentBranch) {
+                resolvedPolicy = resolveBranchPolicy(resolvedPolicy, currentBranch);
+            }
+            if (!quiet && policyPath) {
+                console.error(chalk.dim(`Using policy: ${policyPath}`));
+            }
+            if (resolvedPolicy.required_version) {
+                if (!semver.satisfies(CLI_VERSION, resolvedPolicy.required_version)) {
+                    console.error(chalk.red(`Policy requires CLI version ${resolvedPolicy.required_version}, ` +
+                        `but current version is ${CLI_VERSION}`));
+                    process.exit(ExitCode.ERROR);
+                }
+            }
+        }
+    }
+    catch (error) {
+        if (options.policy) {
+            throw error;
+        }
+        if (!quiet) {
+            console.error(chalk.yellow(`Warning: Failed to load policy: ${error instanceof Error ? error.message : String(error)}`));
+        }
+    }
+    return { policy: resolvedPolicy, path: policyPath };
+}
+/**
+ * Run the inline AI explanation for audit issues.
+ */
+async function runInlineExplanation(issues, result, targetUrl, options, config) {
+    try {
+        const explainBase = resolveApiBase(options.base);
+        const explainKey = getApiKey(config.apiKey);
+        const explainIssues = issues.map((i) => ({
+            id: i.id || null,
+            title: i.title || i.description || null,
+            description: i.description || null,
+            severity: i.severity || null,
+            category: i.category || null,
+            selector: i.selector || null,
+            wcag_reference: i.wcag_reference || null,
+            recommendation: i.recommendation || i.recommended_fix || null,
+        }));
+        const explainPayload = {
+            job_id: result.job_id || null,
+            url: targetUrl || null,
+            scores: result.scores || null,
+            issues: explainIssues,
+        };
+        const explainSpinner = createSpinner("Generating AI explanation...");
+        const explainResponse = await apiRequest(explainBase, "/cli/ai/explain", { method: "POST", body: { audit: explainPayload } }, explainKey);
+        succeedSpinner(explainSpinner, "Explanation ready");
+        console.error("");
+        console.error(chalk.bold("AI Explanation"));
+        console.error(chalk.dim("─".repeat(40)));
+        for (const bullet of explainResponse.data.summary) {
+            console.error(`  ${chalk.cyan("*")} ${bullet}`);
+        }
+    }
+    catch (explainErr) {
+        console.error(chalk.dim(`\n(AI explanation unavailable: ${explainErr instanceof Error ? explainErr.message : String(explainErr)})`));
+    }
+}
+/**
+ * Print quality gate result to stderr.
+ */
+function outputQualityGateResult(gateResult) {
+    console.error("");
+    if (gateResult.bypassed) {
+        console.error(chalk.yellow(`Quality gate bypassed: ${gateResult.bypassReason}`));
+    }
+    else if (gateResult.passed) {
+        console.error(chalk.green("Quality gate: PASSED"));
+    }
+    else {
+        console.error(chalk.red("Quality gate: FAILED"));
+        for (const violation of gateResult.violations) {
+            console.error(chalk.red(`  - ${violation.message}`));
+        }
+    }
+    console.error("");
+    console.error(`New issues: ${gateResult.summary.newIssues.error} errors, ` +
+        `${gateResult.summary.newIssues.warning} warnings, ` +
+        `${gateResult.summary.newIssues.info} info`);
+    if (gateResult.summary.fixedIssues > 0) {
+        console.error(chalk.green(`Fixed: ${gateResult.summary.fixedIssues} issues`));
+    }
+    if (gateResult.summary.existingIssues > 0) {
+        console.error(chalk.dim(`Existing (baselined): ${gateResult.summary.existingIssues} issues`));
+    }
+}
+/**
+ * Write formatted audit results to output or stdout.
+ */
+function outputFormattedResults(filteredResult, format, formatter, groupBy, options, quiet) {
+    const formatOptions = {
+        human: {
+            groupBy,
+            showScores: true,
+            showSummary: true,
+        },
+    };
+    if (format === "json") {
+        if (options.output) {
+            const jsonStr = JSON.stringify(createEnvelope(filteredResult, "audit"), null, 2);
+            const filePath = writeOutputToFile(jsonStr, options.output);
+            if (filePath && !quiet) {
+                console.error(`Report written to: ${filePath}`);
+            }
+        }
+        else {
+            writeJsonOutput(filteredResult, "audit");
+        }
+    }
+    else {
+        const output = formatter.formatResult(filteredResult, formatOptions);
+        const defaultPath = getDefaultOutputPath(format);
+        const filePath = writeOutputToFile(output, options.output, defaultPath);
+        if (filePath && !quiet) {
+            console.error(`Report written to: ${filePath}`);
+        }
+        else if (!filePath) {
+            writeStdout(output);
+        }
+    }
+}
 /**
  * Execute the audit command.
  */
@@ -413,39 +587,47 @@ async function executeAudit(targetUrl, options, config) {
     try {
         // Start spinner (dashboard renders on first update)
         spinner?.start();
-        // Create audit job (server runs audit synchronously and returns results)
-        const created = await apiRequest(base, "/audit", {
-            method: "POST",
-            body: { url: targetUrl, mode },
-        }, apiKey);
+        // Route based on URL type: local URLs are captured client-side
+        let created;
+        if (isLocalUrl(targetUrl)) {
+            // Local URL — capture HTML on this machine, send to /analyze
+            if (!quiet) {
+                console.error(chalk.cyan("Local URL detected — capturing page locally..."));
+                console.error(chalk.dim("Note: Local audits use static analysis. Some checks " +
+                    "(keyboard nav, visual hierarchy) are unavailable."));
+            }
+            if (spinner) {
+                updateSpinner(spinner, "Fetching local page...", 10, 100);
+            }
+            let captured;
+            try {
+                captured = await captureLocalPage(targetUrl, { timeoutMs: timeout });
+            }
+            catch (captureErr) {
+                throw new Error(`Cannot reach ${targetUrl}. Ensure your local server is running.\n` +
+                    `  ${captureErr instanceof Error ? captureErr.message : String(captureErr)}`);
+            }
+            if (spinner) {
+                updateSpinner(spinner, "Analyzing captured page...", 40, 100);
+            }
+            created = await apiRequest(base, "/analyze", {
+                method: "POST",
+                body: { html: captured.html, url: targetUrl, mode },
+            }, apiKey);
+        }
+        else {
+            // Public URL — send to cloud API for full audit
+            created = await apiRequest(base, "/audit", {
+                method: "POST",
+                body: { url: targetUrl, mode },
+            }, apiKey);
+        }
         // If not waiting, just output the job info
         if (!wait) {
             spinner?.stop();
             renderer?.dispose();
             keyboard?.dispose();
-            if (format === "json") {
-                if (options.output) {
-                    const output = JSON.stringify(createEnvelope(created, "audit"), null, 2);
-                    const filePath = writeOutputToFile(output, options.output);
-                    if (filePath && !quiet) {
-                        console.error(`Report written to: ${filePath}`);
-                    }
-                }
-                else {
-                    writeJsonOutput(created, "audit");
-                }
-            }
-            else {
-                const output = formatter.formatResult(created);
-                const defaultPath = getDefaultOutputPath(format);
-                const filePath = writeOutputToFile(output, options.output, defaultPath);
-                if (filePath && !quiet) {
-                    console.error(`Report written to: ${filePath}`);
-                }
-                else if (!filePath) {
-                    writeStdout(output);
-                }
-            }
+            outputFireAndForget(created, format, formatter, options, quiet);
             return;
         }
         // Determine if the server returned results synchronously (status 200)
@@ -526,48 +708,7 @@ async function executeAudit(targetUrl, options, config) {
             issues,
         };
         // Load and apply policy (CICD-17)
-        let resolvedPolicy = null;
-        let policyPath = null;
-        try {
-            const policyResult = await loadPolicy(options.policy ? path.dirname(options.policy) : undefined);
-            if (options.policy) {
-                // User specified a policy file, load it specifically
-                const { loadPolicyFile } = await import("../policy/index.js");
-                resolvedPolicy = await loadPolicyFile(options.policy);
-                policyPath = options.policy;
-            }
-            else if (policyResult.path) {
-                resolvedPolicy = policyResult.policy;
-                policyPath = policyResult.path;
-            }
-            // If policy found, resolve branch-specific overrides
-            if (resolvedPolicy) {
-                const currentBranch = detectCurrentBranch();
-                if (currentBranch) {
-                    resolvedPolicy = resolveBranchPolicy(resolvedPolicy, currentBranch);
-                }
-                if (!quiet && policyPath) {
-                    console.error(chalk.dim(`Using policy: ${policyPath}`));
-                }
-                // Check required CLI version
-                if (resolvedPolicy.required_version) {
-                    if (!semver.satisfies(CLI_VERSION, resolvedPolicy.required_version)) {
-                        console.error(chalk.red(`Policy requires CLI version ${resolvedPolicy.required_version}, ` +
-                            `but current version is ${CLI_VERSION}`));
-                        process.exit(ExitCode.ERROR);
-                    }
-                }
-            }
-        }
-        catch (error) {
-            // Policy loading errors should be reported but not fatal if no explicit policy specified
-            if (options.policy) {
-                throw error; // Re-throw if user explicitly specified a policy
-            }
-            if (!quiet) {
-                console.error(chalk.yellow(`Warning: Failed to load policy: ${error instanceof Error ? error.message : String(error)}`));
-            }
-        }
+        await loadAndResolvePolicy(options, quiet);
         // Build quality gate config and evaluate
         const gateConfig = buildQualityGateConfig(config, options);
         // Load baseline if provided
@@ -588,97 +729,14 @@ async function executeAudit(targetUrl, options, config) {
         // Use quality gate exit code
         const exitCode = gateResult.exitCode;
         // Format and output results
-        const formatOptions = {
-            human: {
-                groupBy,
-                showScores: true,
-                showSummary: true,
-            },
-        };
-        if (format === "json") {
-            if (options.output) {
-                const jsonStr = JSON.stringify(createEnvelope(filteredResult, "audit"), null, 2);
-                const filePath = writeOutputToFile(jsonStr, options.output);
-                if (filePath && !quiet) {
-                    console.error(`Report written to: ${filePath}`);
-                }
-            }
-            else {
-                writeJsonOutput(filteredResult, "audit");
-            }
-        }
-        else {
-            const output = formatter.formatResult(filteredResult, formatOptions);
-            const defaultPath = getDefaultOutputPath(format);
-            const filePath = writeOutputToFile(output, options.output, defaultPath);
-            if (filePath && !quiet) {
-                console.error(`Report written to: ${filePath}`);
-            }
-            else if (!filePath) {
-                writeStdout(output);
-            }
-        }
+        outputFormattedResults(filteredResult, format, formatter, groupBy, options, quiet);
         // Inline AI explanation (--explain flag, PROG-04)
         if (options.explain && issues.length > 0) {
-            try {
-                const explainBase = resolveApiBase(options.base);
-                const explainKey = getApiKey(config.apiKey);
-                const explainIssues = issues.map((i) => ({
-                    id: i.id || null,
-                    title: i.title || i.description || null,
-                    description: i.description || null,
-                    severity: i.severity || null,
-                    category: i.category || null,
-                    selector: i.selector || null,
-                    wcag_reference: i.wcag_reference || null,
-                    recommendation: i.recommendation || i.recommended_fix || null,
-                }));
-                const explainPayload = {
-                    job_id: result.job_id || null,
-                    url: targetUrl || null,
-                    scores: result.scores || null,
-                    issues: explainIssues,
-                };
-                const explainSpinner = createSpinner("Generating AI explanation...");
-                const explainResponse = await apiRequest(explainBase, "/cli/ai/explain", { method: "POST", body: { audit: explainPayload } }, explainKey);
-                succeedSpinner(explainSpinner, "Explanation ready");
-                console.error("");
-                console.error(chalk.bold("AI Explanation"));
-                console.error(chalk.dim("─".repeat(40)));
-                for (const bullet of explainResponse.data.summary) {
-                    console.error(`  ${chalk.cyan("*")} ${bullet}`);
-                }
-            }
-            catch (explainErr) {
-                console.error(chalk.dim(`\n(AI explanation unavailable: ${explainErr instanceof Error ? explainErr.message : String(explainErr)})`));
-            }
+            await runInlineExplanation(issues, result, targetUrl, options, config);
         }
         // Output quality gate result
         if (!quiet) {
-            console.error(""); // Blank line before gate result
-            if (gateResult.bypassed) {
-                console.error(chalk.yellow(`Quality gate bypassed: ${gateResult.bypassReason}`));
-            }
-            else if (gateResult.passed) {
-                console.error(chalk.green("Quality gate: PASSED"));
-            }
-            else {
-                console.error(chalk.red("Quality gate: FAILED"));
-                for (const violation of gateResult.violations) {
-                    console.error(chalk.red(`  - ${violation.message}`));
-                }
-            }
-            // Summary
-            console.error("");
-            console.error(`New issues: ${gateResult.summary.newIssues.error} errors, ` +
-                `${gateResult.summary.newIssues.warning} warnings, ` +
-                `${gateResult.summary.newIssues.info} info`);
-            if (gateResult.summary.fixedIssues > 0) {
-                console.error(chalk.green(`Fixed: ${gateResult.summary.fixedIssues} issues`));
-            }
-            if (gateResult.summary.existingIssues > 0) {
-                console.error(chalk.dim(`Existing (baselined): ${gateResult.summary.existingIssues} issues`));
-            }
+            outputQualityGateResult(gateResult);
         }
         // Save CI artifact bundle if requested
         if (options.uploadArtifacts && created.job_id) {
@@ -781,7 +839,8 @@ function countTotalIssues(issues) {
 export function registerAuditCommand(program) {
     program
         .command("audit [url]")
-        .description("Run UX and accessibility audit")
+        .description("Run UX and accessibility audit. Localhost and private URLs are " +
+        "captured locally and analyzed via static HTML analysis.")
         .option("-u, --url <url>", "URL to audit")
         .option("--repo <repo>", "GitHub repository to audit (owner/repo)")
         .option("--storybook <url>", "Storybook URL to audit")

package/dist/commands/explain.js

@@ -278,7 +278,7 @@ async function handleAiMode(options, config, format, verbose) {
     let rawIssues = [];
     if (options.job) {
         // Fetch full audit from API
-        const base = resolveApiBase(options.base, undefined);
+        const base = resolveApiBase(options.base);
         const apiKey = getApiKey(config.apiKey);
         const result = await apiRequest(base, `/audit/${options.job}`, { method: "GET" }, apiKey);
         rawIssues = normalizeIssues(result.issues);
@@ -337,7 +337,7 @@ async function handleAiMode(options, config, format, verbose) {
         process.exit(ExitCode.ERROR);
     }
     // Call the LLM explain API
-    const base = resolveApiBase(options.base, undefined);
+    const base = resolveApiBase(options.base);
     const apiKey = getApiKey(config.apiKey);
     const spinner = createSpinner("Analyzing findings...");
     try {

package/dist/commands/login.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA6OzC;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA+B3D"}
+{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAgPzC;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA+B3D"}

package/dist/commands/login.js

@@ -167,16 +167,18 @@ async function handleWhoami(options) {
         return;
     }
     // Display auth status
-    console.error(chalk.green("Authenticated"));
+    const displayName = info.name || info.email || info.user_id || "Unknown";
+    console.error(chalk.green(`Authenticated as ${chalk.bold(displayName)}`));
     console.error("");
-    console.error(`  Source: ${tokenSource}`);
-    console.error(`  Type: ${storedToken?.type || "ci"}`);
+    if (info.email) {
+        console.error(`  Email: ${info.email}`);
+    }
+    if (info.tier) {
+        console.error(`  Plan: ${info.tier.charAt(0).toUpperCase() + info.tier.slice(1)}`);
+    }
     if (info.organization) {
         console.error(`  Organization: ${info.organization}`);
     }
-    if (info.user_id) {
-        console.error(`  User ID: ${info.user_id}`);
-    }
     if (info.scopes && info.scopes.length > 0) {
         console.error(`  Scopes: ${info.scopes.join(", ")}`);
     }

package/dist/output/factory.d.ts

@@ -22,6 +22,13 @@ export interface AuditResult {
     scores?: Record<string, unknown>;
     issues?: unknown;
     error?: string;
+    analysis_type?: string;
+    metadata?: {
+        partial?: boolean;
+        source?: string;
+        unavailable_checks?: string[];
+        [key: string]: unknown;
+    };
 }
 export interface FormatOptions {
     /** Human output options */

package/dist/output/factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../../src/output/factory.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAoB,KAAK,kBAAkB,EAAE,MAAM,YAAY,CAAC;AACvE,OAAO,EAAmB,KAAK,iBAAiB,EAAE,MAAM,WAAW,CAAC;AACpE,OAAO,EAAmB,KAAK,iBAAiB,EAAE,MAAM,WAAW,CAAC;AACpE,OAAO,EAAe,KAAK,YAAY,EAAE,MAAM,YAAY,CAAC;AAC5D,OAAO,EAAe,KAAK,YAAY,EAAE,MAAM,YAAY,CAAC;AAC5D,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAE/E,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,2BAA2B;IAC3B,KAAK,CAAC,EAAE,kBAAkB,CAAC;IAC3B,0BAA0B;IAC1B,IAAI,CAAC,EAAE,iBAAiB,CAAC;IACzB,0BAA0B;IAC1B,IAAI,CAAC,EAAE,iBAAiB,CAAC;IACzB,2BAA2B;IAC3B,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,2BAA2B;IAC3B,KAAK,CAAC,EAAE,YAAY,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,iCAAiC;IACjC,MAAM,EAAE,YAAY,CAAC;IACrB;;;;;OAKG;IACH,YAAY,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,aAAa,GAAG,MAAM,CAAC;CACpE;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,MAAM,GAAE,YAAY,GAAG,MAAe,GAAG,SAAS,CA4B9E;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAC1B,MAAM,EAAE,WAAW,EACnB,cAAc,CAAC,EAAE,MAAM,EACvB,OAAO,CAAC,EAAE,aAAa,GACtB,MAAM,CAIR;AAGD,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../../src/output/factory.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAoB,KAAK,kBAAkB,EAAE,MAAM,YAAY,CAAC;AACvE,OAAO,EAAmB,KAAK,iBAAiB,EAAE,MAAM,WAAW,CAAC;AACpE,OAAO,EAAmB,KAAK,iBAAiB,EAAE,MAAM,WAAW,CAAC;AACpE,OAAO,EAAe,KAAK,YAAY,EAAE,MAAM,YAAY,CAAC;AAC5D,OAAO,EAAe,KAAK,YAAY,EAAE,MAAM,YAAY,CAAC;AAC5D,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAE/E,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE;QACT,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;QAC9B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;CACH;AAED,MAAM,WAAW,aAAa;IAC5B,2BAA2B;IAC3B,KAAK,CAAC,EAAE,kBAAkB,CAAC;IAC3B,0BAA0B;IAC1B,IAAI,CAAC,EAAE,iBAAiB,CAAC;IACzB,0BAA0B;IAC1B,IAAI,CAAC,EAAE,iBAAiB,CAAC;IACzB,2BAA2B;IAC3B,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,2BAA2B;IAC3B,KAAK,CAAC,EAAE,YAAY,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,iCAAiC;IACjC,MAAM,EAAE,YAAY,CAAC;IACrB;;;;;OAKG;IACH,YAAY,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,aAAa,GAAG,MAAM,CAAC;CACpE;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,MAAM,GAAE,YAAY,GAAG,MAAe,GAAG,SAAS,CA4B9E;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAC1B,MAAM,EAAE,WAAW,EACnB,cAAc,CAAC,EAAE,MAAM,EACvB,OAAO,CAAC,EAAE,aAAa,GACtB,MAAM,CAIR;AAGD,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC"}

package/dist/output/human.d.ts

@@ -17,6 +17,13 @@ export interface AuditResult {
     scores?: Record<string, unknown>;
     issues?: unknown;
     error?: string;
+    analysis_type?: string;
+    metadata?: {
+        partial?: boolean;
+        source?: string;
+        unavailable_checks?: string[];
+        [key: string]: unknown;
+    };
 }
 export interface FormatHumanOptions {
     groupBy?: "severity" | "category" | "route";

package/dist/output/human.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"human.d.ts","sourceRoot":"","sources":["../../src/output/human.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AASH,OAAO,EAOL,KAAK,kBAAkB,EACxB,MAAM,gBAAgB,CAAC;AAExB,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,UAAU,GAAG,UAAU,GAAG,OAAO,CAAC;IAC5C,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,YAAY,CAAC,EAAE,kBAAkB,CAAC;CACnC;AAuND;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,WAAW,EACnB,OAAO,GAAE,kBAAuB,GAC/B,MAAM,CAuCR"}
+{"version":3,"file":"human.d.ts","sourceRoot":"","sources":["../../src/output/human.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AASH,OAAO,EAOL,KAAK,kBAAkB,EACxB,MAAM,gBAAgB,CAAC;AAExB,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE;QACT,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;QAC9B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;CACH;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,UAAU,GAAG,UAAU,GAAG,OAAO,CAAC;IAC5C,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,YAAY,CAAC,EAAE,kBAAkB,CAAC;CACnC;AAuND;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,WAAW,EACnB,OAAO,GAAE,kBAAuB,GAC/B,MAAM,CA4DR"}

package/dist/output/human.js

@@ -198,5 +198,19 @@ export function formatAuditHuman(result, options = {}) {
     if (showSummary) {
         sections.push(formatSummary(issues, result.scores));
     }
+    // Partial result annotation for local/static analysis audits
+    if (result.metadata?.partial || result.analysis_type === "static_html") {
+        const checks = result.metadata?.unavailable_checks ?? [];
+        const lines = [];
+        lines.push("");
+        lines.push(text.dim("─".repeat(Math.min(getTerminalWidth(), 80))));
+        lines.push(text.dim("This audit ran in static analysis mode (local URL)."));
+        if (checks.length > 0) {
+            lines.push(text.dim("Unavailable checks: " +
+                checks.map((c) => c.replace(/_/g, " ")).join(", ")));
+        }
+        lines.push(text.dim("Deploy to a public URL for a full browser-based audit."));
+        sections.push(lines.join("\n"));
+    }
     return sections.join("\n") + "\n";
 }

package/dist/ui/banner.d.ts

@@ -1,7 +1,7 @@
 /**
- * V-mark ASCII banner for VertaaUX CLI.
+ * Arrow-mark ASCII banner for VertaaUX CLI.
  *
- * Displays a subtle gradient from lime to teal/cyan.
+ * Displays a compact arrow wedge in teal/mint gradient.
  * Can be suppressed via --quiet, --no-banner, or non-TTY environments.
  */
 export interface BannerOptions {
@@ -13,7 +13,7 @@ export interface BannerOptions {
     noBanner?: boolean;
 }
 /**
- * Show the V-mark banner with version and working directory.
+ * Show the arrow-mark banner with version and working directory.
  *
  * Banner is suppressed if:
  * - --quiet or -q flag is set

package/dist/ui/banner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"banner.d.ts","sourceRoot":"","sources":["../../src/ui/banner.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAwCH,MAAM,WAAW,aAAa;IAC5B,6BAA6B;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,uCAAuC;IACvC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,qCAAqC;IACrC,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED;;;;;;;;;GASG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,CA0BvD;AAED;;;GAGG;AACH,wBAAgB,UAAU,IAAI,MAAM,CAOnC"}
+{"version":3,"file":"banner.d.ts","sourceRoot":"","sources":["../../src/ui/banner.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAqBH,MAAM,WAAW,aAAa;IAC5B,6BAA6B;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,uCAAuC;IACvC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,qCAAqC;IACrC,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED;;;;;;;;;GASG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,CA+BvD;AAED;;;GAGG;AACH,wBAAgB,UAAU,IAAI,MAAM,CAOnC"}

package/dist/ui/banner.js

@@ -1,7 +1,7 @@
 /**
- * V-mark ASCII banner for VertaaUX CLI.
+ * Arrow-mark ASCII banner for VertaaUX CLI.
  *
- * Displays a subtle gradient from lime to teal/cyan.
+ * Displays a compact arrow wedge in teal/mint gradient.
  * Can be suppressed via --quiet, --no-banner, or non-TTY environments.
  */
 import chalk from "chalk";
@@ -9,35 +9,18 @@ import { createRequire } from "module";
 import { isTTY, shouldUseColor } from "../utils/detect-env.js";
 // For JSON imports in ESM
 const require = createRequire(import.meta.url);
-// V-mark ASCII art (3 lines)
-const V_MARK = [" \u2588\u2588\u2557   \u2588\u2588\u2557", " \u255a\u2588\u2588\u2557 \u2588\u2588\u2554\u255d", "  \u255a\u2588\u2588\u2588\u2588\u2554\u255d"];
-// Gradient colors: lime -> teal/cyan
-const GRADIENT_COLORS = [
-    "#78FFB4", // Lime
-    "#6BEEBD", // Light teal
-    "#5EDDC6", // Teal
-    "#51CCCE", // Cyan-ish teal
+// Arrow-mark ASCII art (compact 5-line wedge matching brand)
+const ARROW_MARK = [
+    "      ██████████▀",
+    "      ████████▀",
+    " ▀██████████▀",
+    "   ▀██████▀",
+    "     ▀██▀",
 ];
+const TEAL = "#5EE4C4";
+const MINT = "#90EECE";
 /**
- * Apply gradient to text by coloring each character.
- */
-function applyGradient(text, colors) {
-    const colorCount = colors.length;
-    let result = "";
-    let colorIndex = 0;
-    for (const char of text) {
-        if (char !== " ") {
-            result += chalk.hex(colors[colorIndex % colorCount])(char);
-            colorIndex++;
-        }
-        else {
-            result += char;
-        }
-    }
-    return result;
-}
-/**
- * Show the V-mark banner with version and working directory.
+ * Show the arrow-mark banner with version and working directory.
  *
  * Banner is suppressed if:
  * - --quiet or -q flag is set
@@ -54,20 +37,27 @@ export function showBanner(options) {
     }
     const useColor = shouldUseColor();
     const cwd = process.cwd();
-    // Build banner lines
-    const lines = useColor
-        ? [
-            `${applyGradient(V_MARK[0], GRADIENT_COLORS)}  ${chalk.bold("VertaaUX")} v${version}`,
-            `${applyGradient(V_MARK[1], GRADIENT_COLORS)}  ${chalk.dim(cwd)}`,
-            `${applyGradient(V_MARK[2], GRADIENT_COLORS)}`,
-        ]
-        : [
-            `${V_MARK[0]}  VertaaUX v${version}`,
-            `${V_MARK[1]}  ${cwd}`,
-            `${V_MARK[2]}`,
+    if (useColor) {
+        const logo = ARROW_MARK.map((line) => chalk.hex(TEAL)(line));
+        const lines = [
+            `${logo[0]}  ${chalk.hex(MINT).bold("VertaaUX")} v${version}`,
+            `${logo[1]}  ${chalk.dim(cwd)}`,
+            `${logo[2]}`,
+            `${logo[3]}`,
+            `${logo[4]}`,
         ];
-    // Write to stderr to avoid mixing with command output
-    process.stderr.write(lines.join("\n") + "\n\n");
+        process.stderr.write(lines.join("\n") + "\n\n");
+    }
+    else {
+        const lines = [
+            `${ARROW_MARK[0]}  VertaaUX v${version}`,
+            `${ARROW_MARK[1]}  ${cwd}`,
+            `${ARROW_MARK[2]}`,
+            `${ARROW_MARK[3]}`,
+            `${ARROW_MARK[4]}`,
+        ];
+        process.stderr.write(lines.join("\n") + "\n\n");
+    }
 }
 /**
  * Get version from package.json.

package/dist/utils/local-capture.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Local page capture for localhost/private URL auditing.
+ *
+ * Fetches HTML content from a local URL using Node's native fetch,
+ * so the CLI can send pre-captured content to the cloud API for analysis.
+ */
+export interface CapturedPage {
+    html: string;
+    url: string;
+    statusCode: number;
+    headers: Record<string, string>;
+    fetchTimeMs: number;
+}
+/**
+ * Fetch a local/private URL and capture its rendered HTML.
+ *
+ * @param url - The local URL to capture (e.g., http://localhost:3000/)
+ * @param options - Optional configuration
+ * @returns Captured page content and metadata
+ * @throws Error with user-friendly message on connection failures
+ */
+export declare function captureLocalPage(url: string, options?: {
+    timeoutMs?: number;
+}): Promise<CapturedPage>;
+//# sourceMappingURL=local-capture.d.ts.map

package/dist/utils/local-capture.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-capture.d.ts","sourceRoot":"","sources":["../../src/utils/local-capture.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAC/B,OAAO,CAAC,YAAY,CAAC,CAmDvB"}

package/dist/utils/local-capture.js

@@ -0,0 +1,57 @@
+/**
+ * Local page capture for localhost/private URL auditing.
+ *
+ * Fetches HTML content from a local URL using Node's native fetch,
+ * so the CLI can send pre-captured content to the cloud API for analysis.
+ */
+/**
+ * Fetch a local/private URL and capture its rendered HTML.
+ *
+ * @param url - The local URL to capture (e.g., http://localhost:3000/)
+ * @param options - Optional configuration
+ * @returns Captured page content and metadata
+ * @throws Error with user-friendly message on connection failures
+ */
+export async function captureLocalPage(url, options) {
+    const timeoutMs = options?.timeoutMs ?? 15_000;
+    const start = Date.now();
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), timeoutMs);
+    try {
+        const response = await fetch(url, {
+            signal: controller.signal,
+            headers: {
+                "User-Agent": "VertaaUX-CLI (local-capture)",
+                Accept: "text/html,application/xhtml+xml,*/*",
+            },
+            redirect: "follow",
+        });
+        const html = await response.text();
+        const headers = {};
+        response.headers.forEach((value, key) => {
+            headers[key] = value;
+        });
+        return {
+            html,
+            url,
+            statusCode: response.status,
+            headers,
+            fetchTimeMs: Date.now() - start,
+        };
+    }
+    catch (err) {
+        if (err instanceof DOMException && err.name === "AbortError") {
+            throw new Error(`Timed out after ${timeoutMs}ms trying to reach ${url}. ` +
+                "Ensure your local server is running and responsive.");
+        }
+        const message = err instanceof Error ? err.message : String(err);
+        if (message.includes("ECONNREFUSED")) {
+            throw new Error(`Connection refused at ${url}. ` +
+                "Ensure your local development server is running.");
+        }
+        throw new Error(`Failed to capture local page at ${url}: ${message}`);
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}

package/dist/utils/url-classify.d.ts

@@ -0,0 +1,18 @@
+/**
+ * URL classification for local vs. public URLs.
+ *
+ * Mirrors the SSRF guard logic from lib/ssrf.ts on the client side
+ * to determine routing strategy (cloud API vs local capture).
+ */
+export type UrlKind = "public" | "localhost" | "private";
+/**
+ * Classify a URL as public, localhost, or private-network.
+ * Used to decide whether the CLI should capture the page locally.
+ */
+export declare function classifyUrl(urlString: string): UrlKind;
+/**
+ * Check if a URL points to a local or private address
+ * (unreachable from the cloud API).
+ */
+export declare function isLocalUrl(urlString: string): boolean;
+//# sourceMappingURL=url-classify.d.ts.map

package/dist/utils/url-classify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"url-classify.d.ts","sourceRoot":"","sources":["../../src/utils/url-classify.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,MAAM,MAAM,OAAO,GAAG,QAAQ,GAAG,WAAW,GAAG,SAAS,CAAC;AAEzD;;;GAGG;AACH,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CA2BtD;AA4CD;;;GAGG;AACH,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAGrD"}

package/dist/utils/url-classify.js

@@ -0,0 +1,85 @@
+/**
+ * URL classification for local vs. public URLs.
+ *
+ * Mirrors the SSRF guard logic from lib/ssrf.ts on the client side
+ * to determine routing strategy (cloud API vs local capture).
+ */
+import net from "net";
+/**
+ * Classify a URL as public, localhost, or private-network.
+ * Used to decide whether the CLI should capture the page locally.
+ */
+export function classifyUrl(urlString) {
+    let parsed;
+    try {
+        parsed = new URL(urlString);
+    }
+    catch {
+        return "public"; // Let the API decide for malformed URLs
+    }
+    const hostname = parsed.hostname.toLowerCase();
+    // Localhost variants (URL parser keeps brackets on IPv6)
+    if (hostname === "localhost" ||
+        hostname === "::1" ||
+        hostname === "[::1]" ||
+        hostname.endsWith(".localhost")) {
+        return "localhost";
+    }
+    // IP literal check
+    if (net.isIP(hostname)) {
+        if (isPrivateIp(hostname))
+            return "private";
+        return "public";
+    }
+    return "public";
+}
+/**
+ * Check common private/reserved IPv4 ranges.
+ */
+function isPrivateIp(address) {
+    const version = net.isIP(address);
+    if (version === 6) {
+        const lower = address.toLowerCase();
+        return (lower === "::" ||
+            lower === "::1" ||
+            lower.startsWith("fc") ||
+            lower.startsWith("fd") ||
+            lower.startsWith("fe8") ||
+            lower.startsWith("fe9") ||
+            lower.startsWith("fea") ||
+            lower.startsWith("feb"));
+    }
+    if (version !== 4)
+        return false;
+    const parts = address.split(".").map(Number);
+    if (parts.length !== 4 || parts.some((n) => !Number.isFinite(n)))
+        return false;
+    const [a, b] = parts;
+    // 127.0.0.0/8 — loopback
+    if (a === 127)
+        return true;
+    // 10.0.0.0/8
+    if (a === 10)
+        return true;
+    // 172.16.0.0/12
+    if (a === 172 && b >= 16 && b <= 31)
+        return true;
+    // 192.168.0.0/16
+    if (a === 192 && b === 168)
+        return true;
+    // 169.254.0.0/16 — link-local
+    if (a === 169 && b === 254)
+        return true;
+    // 0.0.0.0/8
+    if (a === 0)
+        return true;
+    return false;
+}
+/**
+ * Check if a URL points to a local or private address
+ * (unreachable from the cloud API).
+ */
+export function isLocalUrl(urlString) {
+    const kind = classifyUrl(urlString);
+    return kind === "localhost" || kind === "private";
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vertaaux/cli",
-  "version": "0.3.2",
+  "version": "0.4.0",
   "description": "Run automated UX audits, accessibility checks, and performance analysis from the terminal or CI pipelines. Supports policy gating, SARIF output, and multi-page crawling. See https://github.com/PetriLahdelma/vertaa/tree/main/cli#readme for full docs.",
   "type": "module",
   "main": "dist/index.js",