@viberaven/cli 0.1.0-beta.6 → 0.1.0-beta.7

package/AGENTS.md

@@ -36,31 +36,17 @@ npx -y @viberaven/cli@beta scan
 
 
 
-If not signed in:
-
-
-
-```bash
-
-npx -y @viberaven/cli@beta login
-
-```
-
-
-
-Then scan again. Agents should use `scan` without `--open`; open the report only when the user wants the browser map.
-
-If scan output says `LOGIN_REQUIRED`, stop and ask the user to complete:
-
-```bash
-npx -y @viberaven/cli@beta login
-```
-
-Then rerun:
-
-```bash
-npx -y @viberaven/cli@beta scan
-```
+If not signed in, `scan` starts VibeRaven sign-in, opens the browser approval page when possible, waits for the user to approve the editor/agent connection, then continues the scan.
+
+If the local agent environment cannot open a browser, show the printed `Open:` URL to the user. After approval, rerun `npx -y @viberaven/cli@beta scan`.
+
+Manual fallback if the scan flow cannot start login:
+
+```bash
+npx -y @viberaven/cli@beta login
+```
+
+Agents should use `scan` without `--open`; open the report only when the user wants the browser map.
 
 
 

package/README.md

@@ -13,21 +13,29 @@ Sign in once, then scan with `--open` to view `.viberaven/report.html` in the br
 
 Uses the **same VibeRaven account and scan quota** as the VS Code extension. **Does not use your `OPENAI_API_KEY`** — scans go through the managed API after login. See [SECURITY.md](./SECURITY.md).
 
-## For coding agents
-
-Use VibeRaven when the user asks whether an AI-built app is launch-ready, production-ready, or missing auth/database/payments/deployment/security work.
-
-```bash
-npx -y @viberaven/cli@beta scan
-```
-
-If output includes `LOGIN_REQUIRED`, ask the user to run:
+## For coding agents
+
+Use VibeRaven when the user asks whether an AI-built app is launch-ready, production-ready, or missing auth/database/payments/deployment/security work.
 
 ```bash
-npx -y @viberaven/cli@beta login
-```
-
-After login, run scan. Read `.viberaven/agent-summary.md` and `.viberaven/launch-playbook.md`. Loop:
+npx -y @viberaven/cli@beta scan
+```
+
+If login is missing, `scan` starts VibeRaven sign-in, opens the browser approval page when possible, waits for the user to approve the connection, then continues the scan.
+
+If the local agent environment cannot open a browser, show the printed `Open:` URL to the user. After they approve it, rerun:
+
+```bash
+npx -y @viberaven/cli@beta scan
+```
+
+Manual fallback:
+
+```bash
+npx -y @viberaven/cli@beta login
+```
+
+Read `.viberaven/agent-summary.md` and `.viberaven/launch-playbook.md`. Loop:
 
 1. `viberaven next --json`
 2. Repo fix → `viberaven prompt --gap <id>` → implement → `viberaven report` (free) or `scan`

package/assets/report/assets/provider-authjs.svg

@@ -1,5 +1,5 @@
-<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 64" aria-hidden="true">
-  <path fill="#412991" d="M32 5 11 16.8v13.7c0 12.2 8.9 23.3 21 27 12.1-3.7 21-14.8 21-27V16.8L32 5Z"/>
-  <path fill="#EB5424" d="M32 5v48.7c-3.1-1.1-6.1-2.7-8.7-4.7L32 5Z"/>
-  <path fill="#FBC22C" d="m32 5 8.7 44c-2.6 2-5.6 3.6-8.7 4.7V5Z"/>
-</svg>
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 64" aria-hidden="true">
+  <path fill="#412991" d="M32 5 11 16.8v13.7c0 12.2 8.9 23.3 21 27 12.1-3.7 21-14.8 21-27V16.8L32 5Z"/>
+  <path fill="#EB5424" d="M32 5v48.7c-3.1-1.1-6.1-2.7-8.7-4.7L32 5Z"/>
+  <path fill="#FBC22C" d="m32 5 8.7 44c-2.6 2-5.6 3.6-8.7 4.7V5Z"/>
+</svg>

package/assets/report/assets/provider-aws.svg

@@ -1,5 +1,5 @@
-<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 96 64" aria-hidden="true">
-  <text x="48" y="31" text-anchor="middle" font-family="Arial, Helvetica, sans-serif" font-size="21" font-weight="800" letter-spacing="-1.4" fill="#111827">AWS</text>
-  <path fill="#FF9900" d="M23.6 42.4c13.9 7.5 31.5 7.5 45.1-.1 1.1-.6 2.2.8 1.3 1.7-12.3 12.5-34.3 12.6-47.2.8-.9-.8-.3-2.9.8-2.4Z"/>
-  <path fill="#FF9900" d="M66.8 39.8c2.4-.3 7.8-.8 8.8 1 .9 1.6-1 5.8-2.5 8.2-.5.8-1.7.4-1.5-.6.5-2.1 1.3-4.8.5-5.8-.8-1-3.8-.8-5.4-.6-1 .1-1.2-2-.1-2.2h.2Z"/>
-</svg>
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 96 64" aria-hidden="true">
+  <text x="48" y="31" text-anchor="middle" font-family="Arial, Helvetica, sans-serif" font-size="21" font-weight="800" letter-spacing="-1.4" fill="#111827">AWS</text>
+  <path fill="#FF9900" d="M23.6 42.4c13.9 7.5 31.5 7.5 45.1-.1 1.1-.6 2.2.8 1.3 1.7-12.3 12.5-34.3 12.6-47.2.8-.9-.8-.3-2.9.8-2.4Z"/>
+  <path fill="#FF9900" d="M66.8 39.8c2.4-.3 7.8-.8 8.8 1 .9 1.6-1 5.8-2.5 8.2-.5.8-1.7.4-1.5-.6.5-2.1 1.3-4.8.5-5.8-.8-1-3.8-.8-5.4-.6-1 .1-1.2-2-.1-2.2h.2Z"/>
+</svg>

package/assets/report/assets/provider-logrocket.svg

@@ -1,4 +1,4 @@
-<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 64" aria-hidden="true">
-  <path fill="#764ABC" fill-rule="evenodd" clip-rule="evenodd" d="M26.8 12.9A20.8 20.8 0 0 1 32.3 7a20.5 20.5 0 0 1 5.5 5.8 29.3 29.3 0 0 1 5.1 17.1c1.1.9 2.3 1.8 3.4 2.7a6.2 6.2 0 0 1 2 5.7c-.5 2.6-1.1 5.2-1.6 7.8a2.2 2.2 0 0 1-3.3 1.1c-1.8-1.5-3.6-3-5.4-4.5a8.4 8.4 0 0 1-5.2 2.3 8.5 8.5 0 0 1-6.1-2.2c-1.3 1-2.5 2.1-3.8 3.2-.6.6-1.2 1-1.9 1.4a2.2 2.2 0 0 1-2.9-1.4c-.6-2.5-1.2-5.1-1.8-7.6a6.3 6.3 0 0 1 2.1-6c1-.8 2-1.6 3-2.3.3-.2.1-.5.2-.7a29.3 29.3 0 0 1 5.2-16.5Zm2.2 8.2a4.3 4.3 0 0 0 .4 5.8 4.8 4.8 0 0 0 6.5.1 4.3 4.3 0 0 0 1.1-4.8 4.4 4.4 0 0 0-3.9-2.9 4.5 4.5 0 0 0-4.1 1.8Zm3.3 4.9a2.1 2.1 0 1 0 0-4.2 2.1 2.1 0 0 0 0 4.2Z"/>
-  <path fill="#764ABC" d="M26.4 48.1a1.1 1.1 0 0 1 1.6-.9 10.4 10.4 0 0 0 9 0 1.1 1.1 0 0 1 1.6.8v4.8a1.1 1.1 0 0 1-1.7.8c-.5-.4-.9-.9-1.4-1.3-.7 1.4-1.4 2.8-2.1 4.1a1.1 1.1 0 0 1-1.8 0c-.8-1.4-1.4-2.8-2.2-4.1-.4.4-.9.9-1.3 1.3a1.1 1.1 0 0 1-1.7-.8v-4.7Z"/>
-</svg>
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 64" aria-hidden="true">
+  <path fill="#764ABC" fill-rule="evenodd" clip-rule="evenodd" d="M26.8 12.9A20.8 20.8 0 0 1 32.3 7a20.5 20.5 0 0 1 5.5 5.8 29.3 29.3 0 0 1 5.1 17.1c1.1.9 2.3 1.8 3.4 2.7a6.2 6.2 0 0 1 2 5.7c-.5 2.6-1.1 5.2-1.6 7.8a2.2 2.2 0 0 1-3.3 1.1c-1.8-1.5-3.6-3-5.4-4.5a8.4 8.4 0 0 1-5.2 2.3 8.5 8.5 0 0 1-6.1-2.2c-1.3 1-2.5 2.1-3.8 3.2-.6.6-1.2 1-1.9 1.4a2.2 2.2 0 0 1-2.9-1.4c-.6-2.5-1.2-5.1-1.8-7.6a6.3 6.3 0 0 1 2.1-6c1-.8 2-1.6 3-2.3.3-.2.1-.5.2-.7a29.3 29.3 0 0 1 5.2-16.5Zm2.2 8.2a4.3 4.3 0 0 0 .4 5.8 4.8 4.8 0 0 0 6.5.1 4.3 4.3 0 0 0 1.1-4.8 4.4 4.4 0 0 0-3.9-2.9 4.5 4.5 0 0 0-4.1 1.8Zm3.3 4.9a2.1 2.1 0 1 0 0-4.2 2.1 2.1 0 0 0 0 4.2Z"/>
+  <path fill="#764ABC" d="M26.4 48.1a1.1 1.1 0 0 1 1.6-.9 10.4 10.4 0 0 0 9 0 1.1 1.1 0 0 1 1.6.8v4.8a1.1 1.1 0 0 1-1.7.8c-.5-.4-.9-.9-1.4-1.3-.7 1.4-1.4 2.8-2.1 4.1a1.1 1.1 0 0 1-1.8 0c-.8-1.4-1.4-2.8-2.2-4.1-.4.4-.9.9-1.3 1.3a1.1 1.1 0 0 1-1.7-.8v-4.7Z"/>
+</svg>

package/dist/cli.js

@@ -31,9 +31,9 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 ));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
-// node_modules/picocolors/picocolors.js
+// ../../node_modules/picocolors/picocolors.js
 var require_picocolors = __commonJS({
-  "node_modules/picocolors/picocolors.js"(exports2, module2) {
+  "../../node_modules/picocolors/picocolors.js"(exports2, module2) {
     var p2 = process || {};
     var argv = p2.argv || [];
     var env = p2.env || {};
@@ -103,9 +103,9 @@ var require_picocolors = __commonJS({
   }
 });
 
-// node_modules/sisteransi/src/index.js
+// ../../node_modules/sisteransi/src/index.js
 var require_src = __commonJS({
-  "node_modules/sisteransi/src/index.js"(exports2, module2) {
+  "../../node_modules/sisteransi/src/index.js"(exports2, module2) {
     "use strict";
     var ESC = "\x1B";
     var CSI = `${ESC}[`;
@@ -163,7 +163,8 @@ var require_src = __commonJS({
 var cli_exports = {};
 __export(cli_exports, {
   formatScanJsonStdout: () => formatScanJsonStdout,
-  parseArgs: () => parseArgs
+  parseArgs: () => parseArgs,
+  runScanCommand: () => runScanCommand
 });
 module.exports = __toCommonJS(cli_exports);
 var import_node_path12 = require("node:path");
@@ -506,6 +507,8 @@ var BackendHttpError = class extends Error {
     this.status = status;
     this.upgradeUrl = upgradeUrl;
   }
+  status;
+  upgradeUrl;
 };
 function isNonEmptyString(value) {
   return typeof value === "string" && value.trim().length > 0;
@@ -589,6 +592,44 @@ function formatScanLimitMessage(upgradeUrl) {
   ].join("\n");
 }
 
+// src/openBrowser.ts
+var import_node_child_process = require("node:child_process");
+async function openWithSystemDefault(target) {
+  let command;
+  let args;
+  if (process.platform === "win32") {
+    command = "cmd";
+    args = ["/c", "start", "", target];
+  } else if (process.platform === "darwin") {
+    command = "open";
+    args = [target];
+  } else {
+    command = "xdg-open";
+    args = [target];
+  }
+  await new Promise((resolve4, reject) => {
+    const child = (0, import_node_child_process.spawn)(command, args, { stdio: "ignore", shell: process.platform === "win32" });
+    child.on("error", reject);
+    child.on("exit", (code) => {
+      if (code === 0) {
+        resolve4();
+      } else {
+        reject(new Error(`Could not open browser (exit ${code ?? "unknown"}). Open manually: ${target}`));
+      }
+    });
+  });
+}
+async function openPathInBrowser(filePath) {
+  await openWithSystemDefault(filePath);
+}
+async function openUrlInBrowser(url) {
+  const trimmed = url.trim();
+  if (!/^https?:\/\//i.test(trimmed)) {
+    throw new Error(`Not a valid http(s) URL: ${url}`);
+  }
+  await openWithSystemDefault(trimmed);
+}
+
 // src/auth.ts
 function sleep(ms) {
   return new Promise((resolve4) => setTimeout(resolve4, ms));
@@ -600,6 +641,12 @@ async function runDeviceLogin(apiBaseUrl) {
   console.log(`Open: ${verificationUrl}`);
   console.log(`Code: ${signIn.deviceCode}
 `);
+  try {
+    await openUrlInBrowser(verificationUrl);
+    console.log("Opened the VibeRaven approval page in your browser.");
+  } catch (error) {
+    console.warn(error instanceof Error ? error.message : String(error));
+  }
   console.log("Waiting for approval in the browser\u2026\n");
   const expiresAt = Date.parse(signIn.expiresAt);
   const pollMs = Math.max(2, signIn.pollIntervalSeconds) * 1e3;
@@ -11319,44 +11366,6 @@ async function refreshReportFromDisk(startDir) {
   return writeScanArtifacts({ artifact, cwd: workspace });
 }
 
-// src/openBrowser.ts
-var import_node_child_process = require("node:child_process");
-async function openWithSystemDefault(target) {
-  let command;
-  let args;
-  if (process.platform === "win32") {
-    command = "cmd";
-    args = ["/c", "start", "", target];
-  } else if (process.platform === "darwin") {
-    command = "open";
-    args = [target];
-  } else {
-    command = "xdg-open";
-    args = [target];
-  }
-  await new Promise((resolve4, reject) => {
-    const child = (0, import_node_child_process.spawn)(command, args, { stdio: "ignore", shell: process.platform === "win32" });
-    child.on("error", reject);
-    child.on("exit", (code) => {
-      if (code === 0) {
-        resolve4();
-      } else {
-        reject(new Error(`Could not open browser (exit ${code ?? "unknown"}). Open manually: ${target}`));
-      }
-    });
-  });
-}
-async function openPathInBrowser(filePath) {
-  await openWithSystemDefault(filePath);
-}
-async function openUrlInBrowser(url) {
-  const trimmed = url.trim();
-  if (!/^https?:\/\//i.test(trimmed)) {
-    throw new Error(`Not a valid http(s) URL: ${url}`);
-  }
-  await openWithSystemDefault(trimmed);
-}
-
 // src/clipboard.ts
 var import_node_child_process2 = require("node:child_process");
 async function copyToClipboard(text) {
@@ -12435,7 +12444,7 @@ function isRecord6(value) {
 // src/tui/runInteractive.ts
 var import_node_path10 = require("node:path");
 
-// node_modules/@clack/core/dist/index.mjs
+// ../../node_modules/@clack/core/dist/index.mjs
 var import_sisteransi = __toESM(require_src(), 1);
 var import_node_process = require("node:process");
 var g = __toESM(require("node:readline"), 1);
@@ -12642,7 +12651,7 @@ function BD(e2, u2) {
   return s;
 }
 var AD = globalThis.process.platform.startsWith("win");
-var S = Symbol("clack:cancel");
+var S = /* @__PURE__ */ Symbol("clack:cancel");
 function pD(e2) {
   return e2 === S;
 }
@@ -12793,7 +12802,7 @@ var LD = class extends x {
   }
 };
 
-// node_modules/@clack/prompts/dist/index.mjs
+// ../../node_modules/@clack/prompts/dist/index.mjs
 var import_node_process2 = __toESM(require("node:process"), 1);
 var import_picocolors2 = __toESM(require_picocolors(), 1);
 var import_sisteransi2 = __toESM(require_src(), 1);
@@ -12969,7 +12978,7 @@ var Y2 = ({ indicator: t = "dots" } = {}) => {
 var import_picocolors4 = __toESM(require_picocolors());
 
 // src/version.ts
-var VERSION = "0.1.0-beta.6";
+var VERSION = "0.1.0-beta.7";
 
 // src/commands/guide.ts
 var import_picocolors3 = __toESM(require_picocolors());
@@ -13457,6 +13466,8 @@ Agent workflow (Claude Code / Codex):
 
   npx -y @viberaven/cli@beta scan
 
+  If login is missing, scan opens the VibeRaven approval page and continues after approval.
+
   Read .viberaven/agent-summary.md and .viberaven/launch-playbook.md
 
   viberaven next --json \u2192 guide/open \u2192 scan again
@@ -13531,6 +13542,9 @@ async function cmdLogout() {
   await clearCredentials();
   console.log("Signed out.");
 }
+function isLoginRequiredError(error) {
+  return error instanceof Error && error.message.includes(LOGIN_REQUIRED);
+}
 async function cmdStatus(flags, positional) {
   const creds = await loadCredentials();
   if (!creds?.accessToken) {
@@ -13690,15 +13704,27 @@ async function cmdWatch(flags) {
     return 1;
   }
 }
-async function cmdScan(flags, positional) {
+async function runScanCommand(flags, positional) {
   const workspacePath = positional[0] ? (0, import_node_path12.join)(process.cwd(), positional[0]) : await resolveWorkspaceRoot(process.cwd());
   const apiBaseUrl = resolveApiBaseUrl(typeof flags["api-url"] === "string" ? flags["api-url"] : void 0);
   let accessToken;
   try {
     ({ accessToken } = await requireCredentials(apiBaseUrl));
   } catch (error) {
-    console.error(error instanceof Error ? error.message : String(error));
-    return 1;
+    if (!flags.json && isLoginRequiredError(error)) {
+      console.error(error instanceof Error ? error.message : String(error));
+      console.log("\nStarting VibeRaven sign-in so this scan can continue...\n");
+      try {
+        await runDeviceLogin(apiBaseUrl);
+        ({ accessToken } = await requireCredentials(apiBaseUrl));
+      } catch (loginError) {
+        console.error(loginError instanceof Error ? loginError.message : String(loginError));
+        return 1;
+      }
+    } else {
+      console.error(error instanceof Error ? error.message : String(error));
+      return 1;
+    }
   }
   console.log(`Scanning ${workspacePath}\u2026`);
   const result = await runProjectScan({ workspacePath, accessToken, apiBaseUrl });
@@ -13901,7 +13927,7 @@ async function main() {
     case "watch":
       return cmdWatch(flags);
     case "scan":
-      return cmdScan(flags, positional);
+      return runScanCommand(flags, positional);
     case "report":
       return cmdReport(flags, positional);
     case "prompt":
@@ -13927,6 +13953,7 @@ if (require.main === module) {
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   formatScanJsonStdout,
-  parseArgs
+  parseArgs,
+  runScanCommand
 });
 //# sourceMappingURL=cli.js.map