@viberaven/cli 0.1.0-beta.3 → 0.1.0-beta.6

package/dist/report/station.css

@@ -3586,6 +3586,10 @@ html[data-surface="panel"] [data-section='file-pulse'].deck-card__body {
   padding: 18px;
 }
 
+.studio-setup-panel__inner {
+  container-type: inline-size;
+}
+
 .studio-setup-panel__head {
   min-width: 0;
   display: flex;
@@ -3751,6 +3755,24 @@ html[data-surface="panel"] [data-section='file-pulse'].deck-card__body {
   fill: currentColor;
 }
 
+.provider-logo--cloudflare svg {
+  width: 24px;
+  height: 24px;
+  transform: scale(1.12);
+  transform-origin: center;
+}
+
+.studio-choice-tile__icon.provider-logo--cloudflare svg {
+  width: 26px;
+  height: 26px;
+}
+
+.studio-node__logo.provider-logo--cloudflare svg,
+.mc3-provider-tile__icon.provider-logo--cloudflare svg {
+  width: 26px;
+  height: 26px;
+}
+
 .provider-logo__img {
   display: block;
   box-sizing: border-box;
@@ -3883,6 +3905,23 @@ body.station-results-active .studio-node__logo:not(.provider-logo--brand) svg pa
   cursor: default;
 }
 
+@container (min-width: 430px) {
+  .studio-choice-list {
+    grid-template-columns: repeat(2, minmax(0, 1fr));
+  }
+
+  .studio-choice-tile {
+    min-height: 94px;
+    align-content: start;
+    grid-template-columns: 44px minmax(0, 1fr);
+    grid-template-rows: auto auto 1fr;
+  }
+
+  .studio-choice-tile__status {
+    align-self: end;
+  }
+}
+
 .studio-code-preview {
   min-width: 0;
   max-width: 100%;
@@ -10209,12 +10248,17 @@ html[data-skin="editorial"] body.station-results-active .studio-choice-tile__ico
   background: #fff8e8 !important;
 }
 
-html[data-skin="editorial"] body.station-results-active .provider-logo--cloudflare svg,
+html[data-skin="editorial"] body.station-results-active .provider-logo--cloudflare svg {
+  width: 24px !important;
+  height: 24px !important;
+  filter: none !important;
+}
+
 html[data-skin="editorial"] body.station-results-active .studio-choice-tile__icon.provider-logo--cloudflare svg,
 html[data-skin="editorial"] body.station-results-active .studio-node__logo.provider-logo--cloudflare svg,
 .mc3-provider-tile__icon.provider-logo--cloudflare svg {
-  width: 88% !important;
-  height: 88% !important;
+  width: 26px !important;
+  height: 26px !important;
   filter: none !important;
 }
 
@@ -10336,6 +10380,160 @@ html[data-skin="editorial"] body.station-results-active .studio-node__logo.provi
   opacity: 1 !important;
 }
 
+.provider-truth {
+  display: grid;
+  gap: 8px;
+  min-width: 0;
+  box-sizing: border-box;
+  padding: 10px;
+  border: 1px solid rgba(17, 24, 39, 0.14);
+  border-radius: 8px;
+  background: #fffdf7;
+  box-shadow: 0 12px 30px rgba(17, 24, 39, 0.055);
+  overflow: hidden;
+}
+
+.provider-truth__head,
+.provider-truth-row__top {
+  display: grid;
+  grid-template-columns: minmax(0, 1fr) auto;
+  gap: 8px;
+  align-items: center;
+  min-width: 0;
+}
+
+.provider-truth__head strong,
+.provider-truth-row__top strong,
+.provider-truth-alert strong,
+.provider-truth-next-action strong {
+  min-width: 0;
+  color: #111827;
+  font-size: 11px;
+  font-weight: 950;
+  line-height: 1.15;
+  overflow-wrap: anywhere;
+}
+
+.provider-truth__using-now {
+  min-width: 0;
+  color: #047857;
+  font-family: var(--font-mono);
+  font-size: 9px;
+  font-weight: 900;
+  line-height: 1.2;
+  text-transform: uppercase;
+  overflow-wrap: anywhere;
+}
+
+.provider-truth-row {
+  display: grid;
+  gap: 7px;
+  min-width: 0;
+  padding: 8px;
+  border: 1px solid rgba(17, 24, 39, 0.1);
+  border-radius: 8px;
+  background: rgba(255, 255, 255, 0.72);
+}
+
+.provider-truth-row__meta {
+  min-width: 0;
+  color: rgba(17, 24, 39, 0.58);
+  font-family: var(--font-mono);
+  font-size: 9px;
+  font-weight: 800;
+  line-height: 1.2;
+  text-align: right;
+  text-transform: uppercase;
+  overflow-wrap: anywhere;
+}
+
+.provider-truth-badges {
+  display: flex;
+  flex-wrap: wrap;
+  gap: 5px;
+  min-width: 0;
+}
+
+.provider-truth-badge {
+  display: inline-grid;
+  place-items: center;
+  min-width: 0;
+  max-width: 100%;
+  padding: 4px 6px;
+  border: 1px solid rgba(100, 116, 139, 0.18);
+  border-radius: 999px;
+  background: rgba(100, 116, 139, 0.09);
+  color: #475569;
+  font-size: 9px;
+  font-weight: 950;
+  line-height: 1;
+  text-transform: uppercase;
+  overflow-wrap: anywhere;
+}
+
+.provider-truth-badge--live {
+  border-color: rgba(22, 166, 106, 0.24);
+  background: rgba(22, 166, 106, 0.12);
+  color: #047857;
+}
+
+.provider-truth-badge--mcp {
+  border-color: rgba(2, 132, 199, 0.2);
+  background: rgba(2, 132, 199, 0.1);
+  color: #0369a1;
+}
+
+.provider-truth-badge--manual {
+  border-color: rgba(146, 64, 14, 0.22);
+  background: rgba(245, 158, 11, 0.12);
+  color: #92400e;
+}
+
+.provider-truth-badge--warn {
+  border-color: rgba(185, 28, 28, 0.2);
+  background: rgba(255, 241, 242, 0.92);
+  color: #b91c1c;
+}
+
+.provider-truth-badge--repo,
+.provider-truth-badge--using {
+  border-color: rgba(17, 24, 39, 0.18);
+  background: rgba(17, 24, 39, 0.07);
+  color: #111827;
+}
+
+.provider-truth-alert,
+.provider-truth-next-action {
+  display: grid;
+  gap: 4px;
+  min-width: 0;
+  padding: 8px;
+  border-radius: 8px;
+  overflow-wrap: anywhere;
+}
+
+.provider-truth-alert {
+  border: 1px solid rgba(185, 28, 28, 0.18);
+  border-left: 4px solid #b91c1c;
+  background: rgba(255, 241, 242, 0.92);
+}
+
+.provider-truth-next-action {
+  border: 1px solid rgba(17, 24, 39, 0.14);
+  border-left: 4px solid #111827;
+  background: rgba(255, 248, 232, 0.72);
+}
+
+.provider-truth-alert span,
+.provider-truth-next-action span {
+  min-width: 0;
+  color: rgba(17, 24, 39, 0.66);
+  font-size: 11px;
+  font-weight: 760;
+  line-height: 1.35;
+  overflow-wrap: anywhere;
+}
+
 .studio-sidebar-contract {
   display: grid;
   gap: 11px;
@@ -10736,6 +10934,43 @@ html[data-skin="editorial"] body.station-results-active .studio-node__logo.provi
   text-transform: uppercase;
 }
 
+.studio-sidebar-contract__generic-evidence {
+  display: grid;
+  gap: 8px;
+  min-width: 0;
+  padding: 10px;
+  border: 1px solid rgba(17, 24, 39, 0.12);
+  border-radius: 8px;
+  background: rgba(255, 255, 255, 0.76);
+}
+
+.studio-sidebar-contract__generic-evidence h4 {
+  margin: 0;
+  color: #111827;
+  font-size: 12px;
+  font-weight: 950;
+  line-height: 1.15;
+}
+
+.studio-sidebar-contract__generic-evidence p {
+  margin: 0;
+  color: rgba(17, 24, 39, 0.66);
+  font-size: 11px;
+  font-weight: 700;
+  line-height: 1.35;
+}
+
+.studio-sidebar-contract__generic-evidence ul {
+  display: grid;
+  gap: 6px;
+  margin: 0;
+  padding: 0 0 0 14px;
+  color: #111827;
+  font-size: 11px;
+  font-weight: 800;
+  line-height: 1.25;
+}
+
 .studio-sidebar-contract__next-action,
 .studio-sidebar-contract__heading,
 .studio-sidebar-contract__item {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@viberaven/cli",
-  "version": "0.1.0-beta.3",
+  "version": "0.1.0-beta.6",
   "description": "VibeRaven launch readiness for Claude Code, Codex, and terminal agents — scan, map, and agent-ready prompts.",
   "license": "UNLICENSED",
   "author": "VibeRaven",
@@ -31,6 +31,7 @@
   },
   "files": [
     "dist",
+    "playbooks",
     "assets/report",
     "AGENTS.md",
     "SECURITY.md",
@@ -55,7 +56,9 @@
     "picocolors": "^1.1.1"
   },
   "devDependencies": {
+    "@types/node": "^25.9.2",
     "esbuild": "^0.25.0",
+    "jsdom": "^29.1.1",
     "typescript": "^5.8.0",
     "vitest": "^3.2.0"
   }

package/playbooks/_stack-default.json

@@ -0,0 +1,11 @@
+{
+  "id": "stack-default",
+  "recommendation": {
+    "frontend": "react",
+    "ui": "tailwind + shadcn/ui",
+    "database": "supabase",
+    "auth": "supabase",
+    "deploy": "vercel",
+    "reason": "Highest agent training density; lowest friction for autonomous deploy loop"
+  }
+}

package/playbooks/auth-supabase.json

@@ -0,0 +1,31 @@
+{
+  "id": "auth-supabase",
+  "provider": "auth-supabase",
+  "title": "Supabase Auth providers",
+  "steps": [
+    {
+      "id": "auth-providers",
+      "title": "Enable providers",
+      "instruction": "Enable Email and any OAuth providers your app uses (Google, GitHub, etc.).",
+      "openUrl": "https://supabase.com/dashboard/project/_/auth/providers"
+    },
+    {
+      "id": "auth-urls",
+      "title": "Redirect URLs",
+      "instruction": "Site URL and Redirect URLs must include your Vercel deployment URL.",
+      "openUrl": "https://supabase.com/dashboard/project/_/auth/url-configuration"
+    },
+    {
+      "id": "auth-email-templates",
+      "title": "Email templates",
+      "instruction": "Customize confirm signup and magic link templates if your app uses email auth.",
+      "openUrl": "https://supabase.com/dashboard/project/_/auth/templates"
+    },
+    {
+      "id": "auth-jwt",
+      "title": "JWT settings",
+      "instruction": "Confirm JWT expiry matches your session strategy. Use service role key only on the server.",
+      "openUrl": "https://supabase.com/dashboard/project/_/settings/api"
+    }
+  ]
+}

package/playbooks/stripe.json

@@ -0,0 +1,60 @@
+{
+  "id": "stripe-launch",
+  "provider": "stripe",
+  "title": "Configure Stripe billing",
+  "steps": [
+    {
+      "id": "stripe-dashboard",
+      "title": "Stripe dashboard",
+      "instruction": "Open Stripe. For development, turn Test mode ON.",
+      "openUrl": "https://dashboard.stripe.com/"
+    },
+    {
+      "id": "stripe-keys",
+      "title": "API keys",
+      "instruction": "Copy test (or live) keys into .env. Never commit secret keys.",
+      "openUrl": "https://dashboard.stripe.com/test/apikeys",
+      "pasteTarget": {
+        "file": ".env",
+        "keys": ["STRIPE_SECRET_KEY", "NEXT_PUBLIC_STRIPE_PUBLISHABLE_KEY"]
+      }
+    },
+    {
+      "id": "stripe-product",
+      "title": "Product and price",
+      "instruction": "Create a product with a recurring price for your Pro or paid tier.",
+      "openUrl": "https://dashboard.stripe.com/test/products"
+    },
+    {
+      "id": "stripe-price-id",
+      "title": "Price ID",
+      "instruction": "Copy the Price ID (price_...) into .env as STRIPE_PRICE_ID."
+    },
+    {
+      "id": "stripe-webhook",
+      "title": "Webhook endpoint",
+      "instruction": "Add endpoint URL: {APP_URL}/api/webhooks/stripe (replace {APP_URL} with your Vercel URL).",
+      "openUrl": "https://dashboard.stripe.com/test/webhooks"
+    },
+    {
+      "id": "stripe-webhook-events",
+      "title": "Webhook events",
+      "instruction": "Subscribe to these events at minimum.",
+      "events": [
+        "checkout.session.completed",
+        "customer.subscription.updated",
+        "customer.subscription.deleted",
+        "invoice.payment_failed"
+      ]
+    },
+    {
+      "id": "stripe-signing-secret",
+      "title": "Signing secret",
+      "instruction": "Copy the webhook signing secret into .env as STRIPE_WEBHOOK_SECRET.",
+      "pasteTarget": {
+        "file": ".env",
+        "keys": ["STRIPE_WEBHOOK_SECRET"]
+      }
+    }
+  ]
+}

package/playbooks/supabase.json

@@ -0,0 +1,51 @@
+{
+  "id": "supabase-launch",
+  "provider": "supabase",
+  "title": "Configure Supabase",
+  "steps": [
+    {
+      "id": "supabase-project",
+      "title": "Open Supabase dashboard",
+      "instruction": "Create a project or open your existing Supabase project.",
+      "openUrl": "https://supabase.com/dashboard"
+    },
+    {
+      "id": "supabase-api-keys",
+      "title": "API keys",
+      "instruction": "Copy Project URL and anon/public key into .env.",
+      "openUrl": "https://supabase.com/dashboard/project/_/settings/api",
+      "pasteTarget": {
+        "file": ".env",
+        "keys": ["NEXT_PUBLIC_SUPABASE_URL", "NEXT_PUBLIC_SUPABASE_ANON_KEY"]
+      }
+    },
+    {
+      "id": "supabase-db-url",
+      "title": "Database connection",
+      "instruction": "Copy the connection string (use pooler for serverless). Server-side only — never expose in client code.",
+      "openUrl": "https://supabase.com/dashboard/project/_/settings/database",
+      "pasteTarget": {
+        "file": ".env",
+        "keys": ["DATABASE_URL"]
+      }
+    },
+    {
+      "id": "supabase-auth-urls",
+      "title": "Auth URL configuration",
+      "instruction": "Set Site URL to your Vercel preview or production URL. Add the same URL to Redirect URLs with /** wildcard.",
+      "openUrl": "https://supabase.com/dashboard/project/_/auth/url-configuration"
+    },
+    {
+      "id": "supabase-rls",
+      "title": "Row Level Security",
+      "instruction": "Enable RLS on tables that hold user data. Add policies for authenticated users.",
+      "openUrl": "https://supabase.com/dashboard/project/_/auth/policies"
+    },
+    {
+      "id": "supabase-migrate",
+      "title": "Apply migrations",
+      "instruction": "Run supabase db push or apply SQL migrations so production schema matches the repo.",
+      "openUrl": "https://supabase.com/docs/guides/cli"
+    }
+  ]
+}

package/playbooks/vercel.json

@@ -0,0 +1,42 @@
+{
+  "id": "vercel-launch",
+  "provider": "vercel",
+  "title": "Deploy on Vercel",
+  "steps": [
+    {
+      "id": "vercel-signup",
+      "title": "Sign in to Vercel",
+      "instruction": "Create or sign in to your Vercel account.",
+      "openUrl": "https://vercel.com/signup"
+    },
+    {
+      "id": "vercel-import",
+      "title": "Import repository",
+      "instruction": "Import your Git repository. Connect GitHub or GitLab if prompted.",
+      "openUrl": "https://vercel.com/new"
+    },
+    {
+      "id": "vercel-env",
+      "title": "Environment variables",
+      "instruction": "Project → Settings → Environment Variables. Add every key from .env.example for Production and Preview.",
+      "openUrl": "https://vercel.com/docs/projects/environment-variables"
+    },
+    {
+      "id": "vercel-deploy",
+      "title": "Deploy",
+      "instruction": "Push to your production branch or click Redeploy in the Vercel dashboard.",
+      "openUrl": "https://vercel.com/docs/deployments"
+    },
+    {
+      "id": "vercel-preview",
+      "title": "Copy live URL",
+      "instruction": "Copy the Production or Preview URL from Vercel. Set NEXT_PUBLIC_APP_URL (or your app's public URL env) in .env and Vercel env settings."
+    },
+    {
+      "id": "vercel-domains",
+      "title": "Custom domain (optional)",
+      "instruction": "Add a custom domain when you are ready for production traffic.",
+      "openUrl": "https://vercel.com/docs/projects/domains"
+    }
+  ]
+}

package/templates/AGENTS.snippet.md

@@ -15,17 +15,18 @@ When the user asks if their AI-built app is production-ready, launch-ready, or w
 
 1. If not signed in: `npx -y @viberaven/cli@beta login` (browser device approval, once)
 2. `npx -y @viberaven/cli@beta scan` — agents do not need `--open`
-3. Read `.viberaven/agent-summary.md` — briefing for you
-4. `npx -y @viberaven/cli@beta prompt` — copy-ready prompt for the top gap
-5. Implement in the repo
-6. `npx -y @viberaven/cli@beta scan` — verify readiness improved
+3. Read `.viberaven/agent-summary.md` and `.viberaven/launch-playbook.md`
+4. `npx -y @viberaven/cli@beta next --json` — one action at a time
+5. If type=repo-fix: implement, then `viberaven report` (free) or `scan` (uses quota)
+6. If type=provider-guide: `viberaven guide <provider> --step N` and `viberaven open <provider>`
+7. Repeat 4–6 until done; `viberaven status --json` before each new scan
 
 Also available:
 
 - `.viberaven/last-scan.json` — full mission map + gaps
 - `.viberaven/report.html` — visual map for the user (use `scan --open` when the user wants the browser map)
 
-Repeat steps 4–6 until critical gaps are resolved.
+Free plan: 2 lifetime scans, 6/12 mission map lanes. Pro: 50 scans/month, all 12 lanes.
 
 If scan output says `LOGIN_REQUIRED`, stop and ask the user to complete:
 
@@ -33,21 +34,7 @@ If scan output says `LOGIN_REQUIRED`, stop and ask the user to complete:
 npx -y @viberaven/cli@beta login
 ```
 
-Then rerun:
-
-```bash
-npx -y @viberaven/cli@beta scan
-```
-
-Stable scan labels:
-
-- `READY` — scan finished; read `.viberaven/agent-summary.md` before changing code.
-- `LOGIN_REQUIRED` — stop and ask the user to complete login.
-- `UPGRADE_REQUIRED` — stop; the user must upgrade or wait for quota reset.
-- `MANUAL_ACTION_REQUIRED` — provider dashboard, billing, DNS, webhook, MCP, or live verification needs user/provider action.
-- `ERROR` — report the error and retry only when the cause is clear.
-
-Run `viberaven prompt` or `viberaven prompt --gap <id>` for repo-code fixes.
+Run `viberaven prompt` or `viberaven prompt --gap <id>` for repo-code fixes.
 
 Do not claim human-provider actions as repo-code fixes. Human-provider actions include dashboard setup, billing/product configuration, DNS, webhooks, provider credentials, quota upgrades, and read-only MCP/provider-live verification.