@vibecodr/cli 1.0.10 → 1.0.13

package/docs/VALIDATION-MATRIX.md

@@ -11,9 +11,9 @@ artifacts and tests.
 | CLI login and auth diagnostics | `vibecodr login`, `vibecodr auth status`, `vibecodr auth diagnose`, `vibecodr auth export-agent-env`, safe generic credential file/stdin forms | tests verify browser/device auth starts when no credential is provided, `start` recovers from unreadable stored approval state by opening the normal browser login path, cost-bearing browser commands treat unreadable stored approval as missing auth instead of failing on credential storage shape, the private device code is never printed or stored, approval metadata points to `/settings/vc-tools/approve`, `--no-input` refuses interactive login without network calls, direct token grant caching, generic credential classification for Clerk OAuth/API-key exchange through Vibecodr Auth, durable API-key/OAuth local storage, expired grant refresh from stored API keys, file/stdin credential paths, one-off env credential auth without persistence, status reporting for active credential sources without exposing internal profiles, ambiguous credential denial, redaction, optional API verification, explicit file-store test mode, friendly expired-login errors, isolated config warnings, strict-permission agent credential-file export without printing the secret, and no stored-token forwarding to insecure local API URLs unless explicitly allowed |
 | Remote agent connection setup | `vibecodr agent connect`, advanced `vibecodr connect` | tests verify Streamable HTTP metadata, agent-native tool names, no token leakage, and refusal to write bare named-client configs for `tools.vibecodr.space/mcp` until a supported `vc_tools` client auth flow is proven |
 | Remote MCP tool server | `/mcp` in `src/hosted/worker.ts` | tests verify protected-resource discovery, Bearer `WWW-Authenticate` challenge metadata, MCP `initialize`, `tools/list`, and `tools/call` JSON-RPC contract flow with agent-native `browser.*`, `computer.*`, `work.*`, `proof.*`, and `usage.status` tool names mapped to hosted canonical capabilities |
-| Browser render/screenshot/markdown/PDF tests, crawl, snapshot, and paid agent tasks | `vibecodr browser *`, advanced `vibecodr tools test browser.*` | tests verify capability aliases including `browser.snapshot`, canonical browser and crawl payloads, default submit/wait behavior, `--out` proof saving without exposed IDs, Creator `browser.agent_task` acceptance up to 20 minutes, Pro acceptance up to 1 hour, Free denial, Quick Actions staying short, HTTPS-only validation, localhost/private/internal denial with safe-next-action messaging, URL credential denial, direct cookie/header/storage-state auth material denial, IPv4/IPv6 private, link-local, mapped, NAT64, and 6to4 denial, hosted unsafe redirect-chain denial before cost-bearing dispatch, and Workflow dispatch for paid browser agent tasks |
-| Agent Computer run/tests | `vibecodr computer run/test`, advanced `vibecodr tools test sandbox.*`, hosted Sandbox SDK queue execution | tests verify no local shell execution, bounded command payload, default submit/wait behavior, `--out` proof saving without exposed IDs, public HTTP(S) package/docs egress by default for paid Agent Computer jobs, explicit `--network public`/`--network off` payloads, no private-network opt-in flag, no per-command host allowlist requirement, Cloudflare host policy plus hosted outbound handler denial for private/local/internal destinations and private-resolving DNS, per-command Sandbox SDK timeout forwarding, timeout/fork-storm failure cleanup through sandbox teardown, minimal sandbox env injection, stdout/stderr truncation, sandbox-returned files/output-file paths ignored in favor of one fixed transcript artifact, artifact storage accounting, and sandbox-minute metering |
-| Proof store/read/save/delete | `vibecodr proof list/show/save/delete`, advanced `vibecodr artifacts list/get/pull/create/delete` | tests verify metadata shape, bounded list limits, safe filenames, overwrite guard, explicit in-workspace pull file targets, automatic proof saving from browser/computer aliases and `work follow --out`, explicit confirmation before delete, actor-scoped hosted deletion of D1 shelf rows plus R2 bytes, hosted plan-owned upload caps, hard total artifact storage caps, R2 cleanup after D1 reservation races, workspace-bounded upload/download paths, and symlink/junction escape denial |
+| Browser render/screenshot/markdown/PDF tests, crawl, snapshot, and paid agent tasks | `vibecodr browser *`, advanced `vibecodr tools test browser.*` | tests verify capability aliases including `browser.snapshot`, canonical browser and crawl payloads, default submit/wait behavior, artifact handles and ready-to-run proof commands in completed output, `--local` default proof saving, `--out` destination proof saving, Creator `browser.agent_task` acceptance up to 20 minutes, Pro acceptance up to 1 hour, Free denial, Quick Actions staying short, HTTPS-only validation, localhost/private/internal denial with safe-next-action messaging, URL credential denial, direct cookie/header/storage-state auth material denial, IPv4/IPv6 private, link-local, mapped, NAT64, and 6to4 denial, hosted unsafe redirect-chain denial before cost-bearing dispatch, and Workflow dispatch for paid browser agent tasks |
+| Agent Computer run/tests | `vibecodr computer run/test`, advanced `vibecodr tools test sandbox.*`, hosted Sandbox SDK queue execution | tests verify no local shell execution, bounded command payload, default submit/wait behavior, artifact handles and ready-to-run proof commands in completed output, `--local` default proof saving, `--out` destination proof saving, public HTTP(S) package/docs egress by default for paid Agent Computer jobs, explicit `--network public`/`--network off` payloads, no private-network opt-in flag, no per-command host allowlist requirement, Cloudflare host policy plus hosted outbound handler denial for private/local/internal destinations and private-resolving DNS, per-command Sandbox SDK timeout forwarding, timeout/fork-storm failure cleanup through sandbox teardown, minimal sandbox env injection, stdout/stderr truncation, sandbox-returned files/output-file paths ignored in favor of one fixed transcript artifact, artifact storage accounting, and sandbox-minute metering |
+| Proof store/read/save/delete | `vibecodr proof list/show/save/delete`, advanced `vibecodr artifacts list/get/pull/create/delete` | tests verify metadata shape, bounded list limits, safe filenames, overwrite guard, explicit in-workspace pull file targets, automatic proof saving from browser/computer aliases and `work follow --local`/`--out`, explicit confirmation before delete, actor-scoped hosted deletion of D1 shelf rows plus R2 bytes, hosted plan-owned upload caps, hard total artifact storage caps, R2 cleanup after D1 reservation races, workspace-bounded upload/download paths, and symlink/junction escape denial |
 | Work status/cancel/list | `vibecodr work list/show/follow/cancel`, advanced `vibecodr jobs list/status/cancel` | tests verify list limit propagation, ID validation, alias routing, real follow polling until terminal status, optional terminal proof saving, queued fairness-delay metadata in status output, and `--yes` on cancellation |
 | Usage quotas and limits | `vibecodr usage`, `vibecodr limits`, `usage.status`/`usage.read` MCP tools | tests verify stable JSON output, human quota bars, alias routing, warning preservation, and no operator-only alert/account-pressure metadata in user-facing usage payloads |
 | Open-source client authority boundary | `vibecodr plans`, `/v1/plans`, `/v1/usage`, `/v1/health`, `/v1/mcp/connection`, `usage.read`, docs/SECURITY.md | tests verify local plan fallback is marked non-authoritative, hosted plan packaging is not actor entitlement authority, usage snapshots are read-only/not client-mutable, default product JSON excludes internal/future/operator/provider/auth metadata, and internal/future launch metadata plus overage-meter details are actor/operator-scoped instead of global while keeping operator readiness on operator-scoped endpoints |

package/docs/commands.md

@@ -109,22 +109,23 @@ Prints (`--print`) the MCP connection details for the hosted Agent Computer. The
 
 ### `vibecodr browser <subcommand>`
 
-- `browser read <https-url> [--out ./proof] [--no-wait] [--details]`
-- `browser screenshot <https-url> [--format png|jpg] [--out ./proof] [--no-wait] [--details]`
-- `browser render <https-url> [--out ./proof] [--no-wait] [--details]`
-- `browser pdf <https-url> [--out ./proof] [--no-wait] [--details]`
-- `browser crawl <https-url> [--max-pages n] [--max-depth n] [--out ./proof]`
-- `browser snapshot <https-url> [--instructions <text>] [--out ./proof]`
-- `browser ask <https-url> --instructions <text>`
+- `browser read <https-url> [--local|--out ./proof] [--no-wait] [--details]`
+- `browser screenshot <https-url> [--format png|jpg] [--local|--out ./proof] [--no-wait] [--details]`
+- `browser render <https-url> [--local|--out ./proof] [--no-wait] [--details]`
+- `browser pdf <https-url> [--local|--out ./proof] [--no-wait] [--details]`
+- `browser crawl <https-url> [--max-pages n] [--max-depth n] [--local|--out ./proof]`
+- `browser snapshot <https-url> [--local|--out ./proof]`
+- advanced compatibility: `browser ask <https-url> --note <text> [--local|--out ./proof]`
 
 Public HTTPS URLs only. Localhost, private network ranges, URL credentials, and internal hostnames are blocked before any hosted work is submitted. `--no-wait` returns immediately with a `jobId` you can follow via `vibecodr work follow`. `--details` includes capability metadata in the response.
+Use `--local` to save the completed output into `./vibecodr-proof` automatically, or `--out` when you want to choose the destination. `browser snapshot` captures page state; it does not prompt an agent or model. The old `browser ask` compatibility form only saves your note with the snapshot; it is not a chat answerer.
 
 ## Hosted computer (H)
 
 ### `vibecodr computer <subcommand>`
 
-- `computer run <command> [--out ./proof] [--no-wait]`
-- `computer test <command> [--out ./proof] [--no-wait]`
+- `computer run <command> [--local|--out ./proof] [--no-wait]`
+- `computer test <command> [--local|--out ./proof] [--no-wait]`
 - `computer status`
 
 `run` and `test` submit bounded commands to the hosted sandbox container (Sandbox or ProSandbox class depending on plan). Public HTTP(S) network is enabled for sandbox tests; private/metadata networks remain blocked.
@@ -134,7 +135,7 @@ Public HTTPS URLs only. Localhost, private network ranges, URL credentials, and
 ### `vibecodr work <subcommand>`
 
 - `work list`
-- `work follow <jobId> [--no-wait] [--timeout-sec <n>]`
+- `work follow <jobId> [--local|--out ./proof] [--timeout-sec <n>]`
 - `work show <jobId>`
 - `work cancel <jobId>`
 - `work submit <command-spec>`
@@ -147,7 +148,7 @@ Public HTTPS URLs only. Localhost, private network ranges, URL credentials, and
 - `proof download <artifactId> --out <path>`
 - `proof delete <artifactId>`
 
-Artifact output is workspace-bounded: downloaded bytes can only be written to files you intentionally target inside the current workspace. Use `--out ./artifacts`, `--out ./artifacts/report.pdf`, or `cd` to the intended workspace and use `--out .`.
+Artifact output is workspace-bounded: downloaded bytes can only be written to files you intentionally target inside the current workspace. Use `--local` for the default `./vibecodr-proof` folder, `--out ./artifacts`, `--out ./artifacts/report.pdf`, or `cd` to the intended workspace and use `--out .`.
 
 ### `vibecodr jobs <subcommand>` / `vibecodr artifacts <subcommand>`
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vibecodr/cli",
-  "version": "1.0.10",
+  "version": "1.0.13",
   "description": "The official Vibecodr CLI: hosted browser, hosted computer, capsule uploads, Pulse operations, and agent-client MCP setup under one command.",
   "license": "Apache-2.0",
   "type": "module",
@@ -44,6 +44,8 @@
   },
   "scripts": {
     "preinstall": "node preinstall-check.mjs",
+    "prepack": "node scripts/clean-pack-artifacts.mjs",
+    "clean:pack-artifacts": "node scripts/clean-pack-artifacts.mjs",
     "build": "tsc -p tsconfig.build.json",
     "check": "npm run check:cli && npm run check:worker",
     "check:cli": "tsc -p tsconfig.json --noEmit",

package/dist/dryrun/README.md

@@ -1 +0,0 @@
-This folder contains the built output assets for the worker "vc-tools-api" generated at 2026-05-30T08:35:46.089Z.