@viberaven/cli 1.2.2 → 1.2.4

package/dist/cli.js

@@ -394,6 +394,8 @@ var init_backendClient = __esm({
         this.status = status;
         this.upgradeUrl = upgradeUrl;
       }
+      status;
+      upgradeUrl;
     };
   }
 });
@@ -543,12 +545,12 @@ function createAppWindowOpenCommands(target, platform = process.platform, env =
 }
 async function openWithSystemDefault(target) {
   const { command, args, shell } = createOpenCommand(target);
-  await new Promise((resolve7, reject) => {
+  await new Promise((resolve6, reject) => {
     const child = (0, import_node_child_process.spawn)(command, args, { stdio: "ignore", shell });
     child.on("error", reject);
     child.on("exit", (code) => {
       if (code === 0) {
-        resolve7();
+        resolve6();
       } else {
         reject(new Error(`Could not open browser (exit ${code ?? "unknown"}). Open manually: ${target}`));
       }
@@ -559,7 +561,7 @@ async function spawnDetached(command) {
   if (/^[A-Za-z]:[\\/]/.test(command.command) && !(0, import_node_fs2.existsSync)(command.command)) {
     throw new Error(`Browser not found: ${command.command}`);
   }
-  await new Promise((resolve7, reject) => {
+  await new Promise((resolve6, reject) => {
     const child = (0, import_node_child_process.spawn)(command.command, command.args, {
       detached: true,
       stdio: "ignore",
@@ -567,7 +569,7 @@ async function spawnDetached(command) {
     });
     child.once("spawn", () => {
       child.unref();
-      resolve7();
+      resolve6();
     });
     child.once("error", reject);
   });
@@ -636,7 +638,7 @@ var init_commands = __esm({
 
 // src/auth.ts
 function sleep(ms) {
-  return new Promise((resolve7) => setTimeout(resolve7, ms));
+  return new Promise((resolve6) => setTimeout(resolve6, ms));
 }
 async function runDeviceLogin(apiBaseUrl) {
   const signIn = await startManagedSignIn(apiBaseUrl);
@@ -9790,36 +9792,11 @@ var init_reportAssets = __esm({
       "station.js",
       "report-cli.css",
       "assets/viberaven-logo.png",
-      "assets/viberaven-agent-icon.png",
-      "assets/viberaven-mascot-idle.png",
-      "assets/viberaven-mascot-fixing.png",
-      "assets/viberaven-mascot-verified.png",
-      "assets/viberaven-mascot-alert.png",
+      "assets/viberaven-favicon.png",
+      "assets/viberaven-mascot.png",
       "assets/provider-authjs.svg",
       "assets/provider-aws.svg",
-      "assets/provider-logrocket.svg",
-      "assets/provider-auth.png",
-      "assets/provider-authjs.png",
-      "assets/provider-clerk.png",
-      "assets/provider-clerk-mark.svg",
-      "assets/provider-database.png",
-      "assets/provider-env.png",
-      "assets/provider-github.png",
-      "assets/provider-github-mark.svg",
-      "assets/provider-posthog.png",
-      "assets/provider-posthog-mark.svg",
-      "assets/provider-resend.png",
-      "assets/provider-resend-mark.svg",
-      "assets/provider-sentry.png",
-      "assets/provider-sentry-mark.svg",
-      "assets/provider-stripe.png",
-      "assets/provider-stripe-mark.svg",
-      "assets/provider-supabase.png",
-      "assets/provider-supabase-mark.svg",
-      "assets/provider-upstash.png",
-      "assets/provider-upstash-mark.svg",
-      "assets/provider-vercel.png",
-      "assets/provider-vercel-mark.svg"
+      "assets/provider-logrocket.svg"
     ];
   }
 });
@@ -10440,12 +10417,12 @@ async function copyToClipboard(text) {
   }
 }
 function pipeToCommand(command, text, extraArgs = []) {
-  return new Promise((resolve7, reject) => {
+  return new Promise((resolve6, reject) => {
     const child = (0, import_node_child_process2.spawn)(command, extraArgs, { stdio: ["pipe", "ignore", "ignore"] });
     child.on("error", reject);
     child.on("close", (code) => {
       if (code === 0) {
-        resolve7();
+        resolve6();
       } else {
         reject(new Error(`${command} exited with code ${code ?? "unknown"}`));
       }
@@ -10467,9 +10444,9 @@ var init_clipboard = __esm({
   }
 });
 
-// node_modules/picocolors/picocolors.js
+// ../../node_modules/picocolors/picocolors.js
 var require_picocolors = __commonJS({
-  "node_modules/picocolors/picocolors.js"(exports2, module2) {
+  "../../node_modules/picocolors/picocolors.js"(exports2, module2) {
     var p2 = process || {};
     var argv = p2.argv || [];
     var env = p2.env || {};
@@ -10659,7 +10636,7 @@ function printScanSummary(artifact, paths) {
   if (next.upgradeUrl) {
     console.log(`Upgrade: ${next.upgradeUrl}`);
   }
-  console.log(formatAgentStatus(AGENT_ACTION, "Keep operating: read .viberaven/agent-tasklist.md, apply the next safe repo fix, then continue the VibeRaven loop."));
+  console.log(formatAgentStatus(AGENT_ACTION, "Read .viberaven/agent-tasklist.md, run the next command above, then rescan."));
   console.log("");
   if (artifact.usage) {
     const lanes = artifact.usage.unlockedMapCategoryKeys.length;
@@ -10923,10 +10900,10 @@ function sleepForRunnerPoll(ms, signal) {
   if (signal?.aborted) {
     return Promise.reject(createRunnerWatchAbortError());
   }
-  return new Promise((resolve7, reject) => {
+  return new Promise((resolve6, reject) => {
     const timer = setTimeout(() => {
       cleanup();
-      resolve7();
+      resolve6();
     }, ms);
     const onAbort = () => {
       cleanup();
@@ -11498,9 +11475,9 @@ function formatRepoMatch(repoMatch) {
   }
 }
 async function runCommand(command, args, cwd) {
-  return new Promise((resolve7) => {
+  return new Promise((resolve6) => {
     (0, import_node_child_process3.execFile)(command, args, { cwd, windowsHide: true }, (error, stdout, stderr) => {
-      resolve7({
+      resolve6({
         ok: !error,
         stdout: String(stdout ?? ""),
         stderr: String(stderr ?? "")
@@ -11645,9 +11622,9 @@ var init_runnerConnect = __esm({
   }
 });
 
-// node_modules/sisteransi/src/index.js
+// ../../node_modules/sisteransi/src/index.js
 var require_src = __commonJS({
-  "node_modules/sisteransi/src/index.js"(exports2, module2) {
+  "../../node_modules/sisteransi/src/index.js"(exports2, module2) {
     "use strict";
     var ESC = "\x1B";
     var CSI = `${ESC}[`;
@@ -11701,7 +11678,7 @@ var require_src = __commonJS({
   }
 });
 
-// node_modules/@clack/core/dist/index.mjs
+// ../../node_modules/@clack/core/dist/index.mjs
 function DD({ onlyFirst: e2 = false } = {}) {
   const t = ["[\\u001B\\u009B][[\\]()#;?]*(?:(?:(?:(?:;[-a-zA-Z\\d\\/#&.:=?%@~_]+)*|[a-zA-Z\\d]+(?:;[-a-zA-Z\\d\\/#&.:=?%@~_]*)*)?(?:\\u0007|\\u001B\\u005C|\\u009C))", "(?:(?:\\d{1,4}(?:;\\d{0,4})*)?[\\dA-PR-TZcf-nq-uy=><~]))"].join("|");
   return new RegExp(t, e2 ? void 0 : "g");
@@ -11813,7 +11790,7 @@ function fD({ input: e2 = import_node_process.stdin, output: u2 = import_node_pr
 }
 var import_sisteransi, import_node_process, g, import_node_readline, import_node_stream, uD, W, tD, eD, FD, sD, w, N, I, R, C, iD, rD, ED, d, oD, y, V, nD, G, _, z, K, aD, k, hD, lD, xD, B, AD, S, gD, vD, h, x, A, OD, PD, J, LD;
 var init_dist = __esm({
-  "node_modules/@clack/core/dist/index.mjs"() {
+  "../../node_modules/@clack/core/dist/index.mjs"() {
     import_sisteransi = __toESM(require_src(), 1);
     import_node_process = require("node:process");
     g = __toESM(require("node:readline"), 1);
@@ -11939,7 +11916,7 @@ var init_dist = __esm({
     xD = ["up", "down", "left", "right", "space", "enter", "cancel"];
     B = { actions: new Set(xD), aliases: /* @__PURE__ */ new Map([["k", "up"], ["j", "down"], ["h", "left"], ["l", "right"], ["", "cancel"], ["escape", "cancel"]]) };
     AD = globalThis.process.platform.startsWith("win");
-    S = Symbol("clack:cancel");
+    S = /* @__PURE__ */ Symbol("clack:cancel");
     gD = Object.defineProperty;
     vD = (e2, u2, t) => u2 in e2 ? gD(e2, u2, { enumerable: true, configurable: true, writable: true, value: t }) : e2[u2] = t;
     h = (e2, u2, t) => (vD(e2, typeof u2 != "symbol" ? u2 + "" : u2, t), t);
@@ -12063,13 +12040,13 @@ var init_dist = __esm({
   }
 });
 
-// node_modules/@clack/prompts/dist/index.mjs
+// ../../node_modules/@clack/prompts/dist/index.mjs
 function ce() {
   return import_node_process2.default.platform !== "win32" ? import_node_process2.default.env.TERM !== "linux" : !!import_node_process2.default.env.CI || !!import_node_process2.default.env.WT_SESSION || !!import_node_process2.default.env.TERMINUS_SUBLIME || import_node_process2.default.env.ConEmuTask === "{cmd::Cmder}" || import_node_process2.default.env.TERM_PROGRAM === "Terminus-Sublime" || import_node_process2.default.env.TERM_PROGRAM === "vscode" || import_node_process2.default.env.TERM === "xterm-256color" || import_node_process2.default.env.TERM === "alacritty" || import_node_process2.default.env.TERMINAL_EMULATOR === "JetBrains-JediTerm";
 }
 var import_node_process2, import_picocolors2, import_sisteransi2, V2, u, le, L2, W2, C2, ue, o, d2, k2, P2, A2, T, F, $e, _2, me, de, pe, q, D, U, K2, b2, G2, ve, xe, Ie, Se, M2, J2, Y2;
 var init_dist2 = __esm({
-  "node_modules/@clack/prompts/dist/index.mjs"() {
+  "../../node_modules/@clack/prompts/dist/index.mjs"() {
     init_dist();
     init_dist();
     import_node_process2 = __toESM(require("node:process"), 1);
@@ -12304,7 +12281,7 @@ var VERSION;
 var init_version = __esm({
   "src/version.ts"() {
     "use strict";
-    VERSION = "1.2.2";
+    VERSION = "1.2.4";
   }
 });
 
@@ -12400,186 +12377,20 @@ function redactEvidenceLine(line) {
 function lineEvidence(file, pattern) {
   return file.content.split(/\r?\n/).map((line, index) => ({ line: line.trim(), lineNumber: index + 1 })).filter(({ line }) => pattern.test(line)).map(({ line, lineNumber }) => `${file.path}:${lineNumber}: ${redactEvidenceLine(line)}`);
 }
-function lineNumberAt(content, index) {
-  return content.slice(0, index).split(/\r?\n/).length;
-}
-function statementEvidence(file, pattern) {
-  const evidence = [];
-  for (const match of file.content.matchAll(pattern)) {
-    evidence.push(
-      `${file.path}:${lineNumberAt(file.content, match.index ?? 0)}: ${redactEvidenceLine(
-        String(match[0]).replace(/\s+/g, " ").trim()
-      )}`
-    );
-  }
-  return evidence;
-}
-function normalizeIdent(value) {
-  return (value ?? "").replace(/^"|"$/g, "").toLowerCase();
-}
-function canonicalPublicTable(schema, table) {
-  const normalizedSchema = normalizeIdent(schema);
-  if (normalizedSchema && normalizedSchema !== "public") {
-    return void 0;
-  }
-  return `public.${normalizeIdent(table)}`;
-}
-function parseRelationRef(ref) {
-  const parts = ref.split(".").map((part) => normalizeIdent(part.trim()));
-  if (parts.length === 1) {
-    return `public.${parts[0]}`;
-  }
-  if (parts.length === 2 && parts[0] === "public") {
-    return `public.${parts[1]}`;
-  }
-  return void 0;
-}
-function relationEvidence(files, pattern, relationGroup = "relation") {
-  const evidence = [];
-  for (const file of files) {
-    for (const match of file.content.matchAll(pattern)) {
-      const groups = match.groups ?? {};
-      const relation = parseRelationRef(String(groups[relationGroup] ?? ""));
-      if (!relation) {
-        continue;
-      }
-      evidence.push({
-        relation,
-        evidence: `${file.path}:${lineNumberAt(file.content, match.index ?? 0)}: ${redactEvidenceLine(
-          String(match[0]).replace(/\s+/g, " ").trim()
-        )}`
-      });
-    }
-  }
-  return evidence;
-}
 function sqlFiles(files) {
   return files.filter((file) => file.path.toLowerCase().endsWith(".sql"));
 }
 function buildRlsCheck(files) {
   const sql = sqlFiles(files);
-  const createdTables = [];
-  for (const file of sql) {
-    const pattern = /\bcreate\s+table\s+(?:if\s+not\s+exists\s+)?(?:(?<schema>"?[A-Za-z_][\w$]*"?)\.)?(?<table>"?[A-Za-z_][\w$]*"?)/gi;
-    for (const match of file.content.matchAll(pattern)) {
-      const relation = canonicalPublicTable(match.groups?.schema, String(match.groups?.table ?? ""));
-      if (!relation) {
-        continue;
-      }
-      createdTables.push({
-        relation,
-        evidence: `${file.path}:${lineNumberAt(file.content, match.index ?? 0)}: ${redactEvidenceLine(
-          String(match[0]).replace(/\s+/g, " ").trim()
-        )}`
-      });
-    }
-  }
-  const enabledTables = new Set(
-    relationEvidence(
-      sql,
-      /\balter\s+table\s+(?:if\s+exists\s+)?(?:only\s+)?(?<relation>(?:"?[A-Za-z_][\w$]*"?\.)?"?[A-Za-z_][\w$]*"?)\s+enable\s+row\s+level\s+security\b/gi
-    ).map((item4) => item4.relation)
-  );
-  const policyTables = new Set(
-    relationEvidence(
-      sql,
-      /\bcreate\s+policy\b[\s\S]*?\bon\s+(?<relation>(?:"?[A-Za-z_][\w$]*"?\.)?"?[A-Za-z_][\w$]*"?)[\s\S]*?;/gi
-    ).map((item4) => item4.relation)
-  );
   const rlsEvidence2 = sql.flatMap((file) => lineEvidence(file, /\benable\s+row\s+level\s+security\b/i));
   const policyEvidence = sql.flatMap((file) => lineEvidence(file, /\bcreate\s+policy\b/i));
-  const missingTableEvidence = createdTables.filter(({ relation }) => !enabledTables.has(relation) || !policyTables.has(relation)).map(({ relation, evidence }) => `Missing RLS/policy coverage for ${relation}; created at ${evidence}`);
-  const status = createdTables.length > 0 ? missingTableEvidence.length === 0 ? "pass" : "needs_work" : rlsEvidence2.length > 0 && policyEvidence.length > 0 ? "pass" : "needs_work";
+  const status = rlsEvidence2.length > 0 && policyEvidence.length > 0 ? "pass" : "needs_work";
   return {
     id: "supabase-rls-policy-proof",
     title: "Supabase RLS policy proof",
     status,
-    summary: status === "pass" ? createdTables.length > 0 ? "Found table-level SQL evidence for row level security and matching policies on public tables." : "Found SQL evidence for row level security and at least one policy." : missingTableEvidence.length > 0 ? `Missing table-level RLS or policy evidence: ${missingTableEvidence.map((item4) => item4.match(/for ([^;]+)/)?.[1] ?? item4).join(", ")}.` : "Missing SQL evidence for both `enable row level security` and `create policy`.",
-    evidence: [...missingTableEvidence.slice(0, 5), ...rlsEvidence2.slice(0, 5), ...policyEvidence.slice(0, 5)]
-  };
-}
-function buildRlsPolicyQualityCheck(files) {
-  const sql = sqlFiles(files);
-  const evidence = sql.flatMap(
-    (file) => statementEvidence(file, /\bcreate\s+policy\b[\s\S]*?\b(?:using|with\s+check)\s*\(\s*true\s*\)[\s\S]*?;/gi)
-  );
-  const status = evidence.length === 0 ? "pass" : "needs_work";
-  return {
-    id: "supabase-rls-policy-quality",
-    title: "Supabase RLS policy quality",
-    status,
-    summary: status === "pass" ? "No permissive `using (true)` or `with check (true)` policy evidence found." : "Found RLS policies that allow every row. Public access may be intentional, but it must be reviewed before production.",
-    evidence: evidence.slice(0, 5)
-  };
-}
-function buildViewSecurityInvokerCheck(files) {
-  const sql = sqlFiles(files);
-  const secureViews = /* @__PURE__ */ new Set();
-  const insecureEvidence = [];
-  for (const file of sql) {
-    for (const match of file.content.matchAll(
-      /\bcreate\s+(?:or\s+replace\s+)?view\s+(?<relation>(?:"?[A-Za-z_][\w$]*"?\.)?"?[A-Za-z_][\w$]*"?)[\s\S]*?;/gi
-    )) {
-      const relation = parseRelationRef(String(match.groups?.relation ?? ""));
-      if (!relation) {
-        continue;
-      }
-      const statement = String(match[0]);
-      if (/\bsecurity_invoker\b/i.test(statement)) {
-        secureViews.add(relation);
-        continue;
-      }
-      insecureEvidence.push({
-        relation,
-        evidence: `${file.path}:${lineNumberAt(file.content, match.index ?? 0)}: ${redactEvidenceLine(
-          statement.replace(/\s+/g, " ").trim()
-        )}`
-      });
-    }
-    for (const match of file.content.matchAll(
-      /\balter\s+view\s+(?<relation>(?:"?[A-Za-z_][\w$]*"?\.)?"?[A-Za-z_][\w$]*"?)[\s\S]*?\bsecurity_invoker\s*=\s*true\b[\s\S]*?;/gi
-    )) {
-      const relation = parseRelationRef(String(match.groups?.relation ?? ""));
-      if (relation) {
-        secureViews.add(relation);
-      }
-    }
-  }
-  const evidence = insecureEvidence.filter(({ relation }) => !secureViews.has(relation)).map(({ evidence: evidence2 }) => evidence2);
-  const status = evidence.length === 0 ? "pass" : "needs_work";
-  return {
-    id: "supabase-view-security-invoker",
-    title: "Supabase view security invoker",
-    status,
-    summary: status === "pass" ? "No public view evidence without `security_invoker` found." : "Found public Supabase views without `security_invoker` evidence. Views can bypass underlying RLS by default.",
-    evidence: evidence.slice(0, 5)
-  };
-}
-function buildSecurityDefinerBoundaryCheck(files) {
-  const sql = sqlFiles(files);
-  const evidence = [];
-  for (const file of sql) {
-    for (const match of file.content.matchAll(
-      /\bcreate\s+(?:or\s+replace\s+)?function\s+(?<relation>(?:"?[A-Za-z_][\w$]*"?\.)?"?[A-Za-z_][\w$]*"?)[\s\S]*?\bsecurity\s+definer\b[\s\S]*?;/gi
-    )) {
-      const relation = parseRelationRef(String(match.groups?.relation ?? ""));
-      if (!relation) {
-        continue;
-      }
-      evidence.push(
-        `${file.path}:${lineNumberAt(file.content, match.index ?? 0)}: ${redactEvidenceLine(
-          String(match[0]).replace(/\s+/g, " ").trim()
-        )}`
-      );
-    }
-  }
-  const status = evidence.length === 0 ? "pass" : "needs_work";
-  return {
-    id: "supabase-security-definer-boundary",
-    title: "Supabase security definer boundary",
-    status,
-    summary: status === "pass" ? "No `security definer` functions in the public schema were found." : "Found `security definer` functions in the public schema. Keep privileged functions in a private, unexposed schema.",
-    evidence: evidence.slice(0, 5)
+    summary: status === "pass" ? "Found SQL evidence for row level security and at least one policy." : "Missing SQL evidence for both `enable row level security` and `create policy`.",
+    evidence: [...rlsEvidence2.slice(0, 5), ...policyEvidence.slice(0, 5)]
   };
 }
 function buildPoolerCheck(files) {
@@ -12623,9 +12434,6 @@ function buildServiceRoleCheck(files) {
 function buildVercelSupabaseAudit(input) {
   const checks = [
     buildRlsCheck(input.files),
-    buildRlsPolicyQualityCheck(input.files),
-    buildViewSecurityInvokerCheck(input.files),
-    buildSecurityDefinerBoundaryCheck(input.files),
     buildPoolerCheck(input.files),
     buildServiceRoleCheck(input.files)
   ];
@@ -12874,7 +12682,7 @@ function normalizeLineEndings(value) {
 function escapeRegExp3(value) {
   return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
-var VIBERAVEN_BLOCK_START, VIBERAVEN_BLOCK_END, VIBERAVEN_LEGACY_BLOCK_START, VIBERAVEN_LEGACY_BLOCK_END, HEAL_PLAN_GAP_COMMAND, PROMPT_GAP_COMMAND, HEAL_APPLY_GAP_COMMAND, AGENT_RULES_PREAMBLE, STACK_FRAMING, PRODUCTION_PROTOCOL, AGENT_NEGATIVE_CONSTRAINTS, ANCHOR_FOOTER, AGENT_RULES_BODY, AGENT_CONTEXT_BODY, MISSION_MAP_BODY, BLOCK_MARKER_PAIRS;
+var VIBERAVEN_BLOCK_START, VIBERAVEN_BLOCK_END, VIBERAVEN_LEGACY_BLOCK_START, VIBERAVEN_LEGACY_BLOCK_END, HEAL_PLAN_GAP_COMMAND, PROMPT_GAP_COMMAND, HEAL_APPLY_GAP_COMMAND, AGENT_RULES_PREAMBLE, STACK_FRAMING, AGENT_NEGATIVE_CONSTRAINTS, ANCHOR_FOOTER, AGENT_RULES_BODY, AGENT_CONTEXT_BODY, MISSION_MAP_BODY, BLOCK_MARKER_PAIRS;
 var init_agentRulesBlock = __esm({
   "src/commands/agentRulesBlock.ts"() {
     "use strict";
@@ -12898,15 +12706,6 @@ Maps repo evidence to OWASP LLM Top 10 launch risks. Supports SAFECode-style dep
     STACK_FRAMING = `Stack context for this repo: Next.js, Supabase, Vercel, VibeRaven.
 Do NOT deploy to Vercel or ship to production users without running \`${PUBLIC_AGENT_MODE_COMMAND}\`.
 Do NOT rely on manual production checklists when VibeRaven gate artifacts exist in \`.viberaven/\`.`;
-    PRODUCTION_PROTOCOL = `## VibeRaven Production Protocol
-
-Before making deploy, auth, database, payment, API, or scaling changes:
-
-1. Read \`.viberaven/prp.json\`.
-2. Follow \`.viberaven/mission-map.md\`.
-3. Do not deploy if \`decision.status\` is \`blocked\`.
-4. Fix \`nextActions\` in order.
-5. Re-run \`${PUBLIC_AGENT_MODE_COMMAND}\`.`;
     AGENT_NEGATIVE_CONSTRAINTS = `## Event-Triggered Production Verification
 
 Trigger: modifications to \`package.json\`, \`vercel.json\`, \`supabase/migrations/**/*\`, \`.env.example\`, auth/billing/webhook paths, or deploy workflow files.
@@ -12932,8 +12731,6 @@ Gate is not clear until \`gate.status === "clear"\` in \`.viberaven/gate-result.
 
 ${STACK_FRAMING}
 
-${PRODUCTION_PROTOCOL}
-
 ${AGENT_NEGATIVE_CONSTRAINTS}
 
 ## VibeRaven Production-Readiness Gate
@@ -12983,11 +12780,10 @@ Do not stop at "scan complete." The loop is not done until \`gate.status === 'cl
 
 After \`--agent-mode\`, read these artifacts in order:
 
-1. \`.viberaven/prp.json\`
-2. \`.viberaven/mission-map.md\`
-3. \`.viberaven/agent-tasklist.md\`
-4. \`.viberaven/gate-result.json\`
-5. \`.viberaven/context-map.json\``;
+1. \`.viberaven/mission-map.md\`
+2. \`.viberaven/agent-tasklist.md\`
+3. \`.viberaven/gate-result.json\`
+4. \`.viberaven/context-map.json\``;
     MISSION_MAP_BODY = `${AGENT_RULES_PREAMBLE}
 
 ## Mission Map loop
@@ -15959,10 +15755,6 @@ function providerLogoHtml(providerOrLabel, labelFallback, ...moreCandidates) {
 }
 function providerRailLogoHtml(providerOrLabel, labelFallback, ...moreCandidates) {
   const key = resolveProviderLogoKey(providerOrLabel, labelFallback, ...moreCandidates) || normalizeProviderKey2(providerOrLabel);
-  const assetUrl = key ? providerAssetUrl(key) : void 0;
-  if (assetUrl) {
-    return providerIconImgHtml(assetUrl, key);
-  }
   const iconUrl = key && LOCAL_UI_BRAND_ICON_KEYS.has(key) ? PROVIDER_ICON_URLS[key] : void 0;
   if (iconUrl) {
     return providerIconImgHtml(iconUrl, key);
@@ -16098,18 +15890,6 @@ var init_providerLogos = __esm({
       "svelte"
     ]);
     PROVIDER_ASSET_FILES = {
-      auth: "provider-auth.png",
-      clerk: "provider-clerk.png",
-      database: "provider-database.png",
-      env: "provider-env.png",
-      github: "provider-github.png",
-      posthog: "provider-posthog.png",
-      resend: "provider-resend.png",
-      sentry: "provider-sentry.png",
-      stripe: "provider-stripe.png",
-      supabase: "provider-supabase.png",
-      upstash: "provider-upstash.png",
-      vercel: "provider-vercel.png",
       authjs: "provider-authjs.svg",
       logrocket: "provider-logrocket.svg",
       aws: "provider-aws.svg"
@@ -16127,16 +15907,16 @@ var init_providerLogos = __esm({
       turso: "https://cdn.simpleicons.org/turso/4FF8D2",
       "lemon-squeezy": "https://cdn.simpleicons.org/lemonsqueezy/FFC233",
       stripe: "https://cdn.simpleicons.org/stripe/635BFF",
-      github: "https://cdn.simpleicons.org/github/181717",
+      github: "https://cdn.simpleicons.org/github/FFFFFF",
       gitlab: "https://cdn.simpleicons.org/gitlab/FC6D26",
-      vercel: "https://cdn.simpleicons.org/vercel/000000",
+      vercel: "https://cdn.simpleicons.org/vercel/FFFFFF",
       netlify: "https://cdn.simpleicons.org/netlify/00C7B7",
       render: "https://cdn.simpleicons.org/render/46E3B7",
       railway: "https://cdn.simpleicons.org/railway/0B0D0E",
       cloudflare: "https://cdn.simpleicons.org/cloudflare/F38020",
-      sentry: "https://cdn.simpleicons.org/sentry/362D59",
+      sentry: "https://cdn.simpleicons.org/sentry/8B5CF6",
       posthog: "https://cdn.simpleicons.org/posthog/F54E00",
-      resend: "https://cdn.simpleicons.org/resend/000000",
+      resend: "https://cdn.simpleicons.org/resend/FFFFFF",
       upstash: "https://cdn.simpleicons.org/upstash/00E9A3",
       playwright: "https://cdn.jsdelivr.net/gh/devicons/devicon@latest/icons/playwright/playwright-original.svg",
       figma: "https://cdn.simpleicons.org/figma/F24E1E",
@@ -16964,7 +16744,6 @@ const demo = {
   activeModal: null,
   activeStudioTab: 'chat',
   selectedCliId: 'codex',
-  agentPermissionMode: 'ask',
   cliConnected: false,
   cliSetupComplete: false,
   cliConnectTargetId: null,
@@ -16983,11 +16762,13 @@ const demo = {
   selectedModelId: 'gpt-5.5',
   selectedReasoning: 'High',
   selectedContext: 'Production',
+  selectedAccessMode: 'approve',
   modelMenuOpen: false,
   reasoningMenuOpen: false,
   contextMenuOpen: false,
+  accessMenuOpen: false,
   pickerChatIndex: 0,
-  chatContexts: [{ providerId: null, releaseId: null, cliId: 'codex', modelId: 'gpt-5.5', reasoning: 'High', context: 'Production', messages: [], activeTask: null }],
+  chatContexts: [{ providerId: null, releaseId: null, cliId: 'codex', modelId: 'gpt-5.5', reasoning: 'High', context: 'Production', accessMode: 'approve', messages: [], activeTask: null }],
   activeRecentChatId: null,
   droppedProviderId: null,
   dragKind: null,
@@ -17001,23 +16782,6 @@ const demo = {
   releaseChangelog: { entries: [], from: '', to: '', fromLabel: '', toLabel: '', loading: false, error: '' },
 };
 
-function readPermissionMode() {
-  try {
-    const raw = localStorage.getItem('viberaven:agentChatPermissionMode');
-    return raw === 'full-access' ? 'full-access' : 'ask';
-  } catch {
-    return 'ask';
-  }
-}
-
-function savePermissionMode(mode) {
-  try {
-    localStorage.setItem('viberaven:agentChatPermissionMode', mode);
-  } catch {
-    // Ignore storage failures in preview shells.
-  }
-}
-
 function readCliSessionReady() {
   try {
     let raw = localStorage.getItem('viberaven-cli-ready');
@@ -17040,7 +16804,6 @@ function writeCliSessionReady(value) {
 }
 
 demo.cliSessionReady = readCliSessionReady();
-demo.agentPermissionMode = readPermissionMode();
 
 function cliAgentInstalled(agent) {
   if (!agent) return false;
@@ -17123,10 +16886,10 @@ const providerMarkAssets = {
 };
 
 const mascotAssets = {
-  idle: '/report/assets/viberaven-mascot-idle.png',
-  fixing: '/report/assets/viberaven-mascot-fixing.png',
-  verified: '/report/assets/viberaven-mascot-verified.png',
-  alert: '/report/assets/viberaven-mascot-alert.png',
+  idle: '/report/assets/viberaven-mascot.png',
+  fixing: '/report/assets/viberaven-mascot.png',
+  verified: '/report/assets/viberaven-mascot.png',
+  alert: '/report/assets/viberaven-mascot.png',
 };
 
 const providerDashboardUrls = {
@@ -17335,6 +17098,52 @@ function providerHealthIcon(health) {
   return Icon('refresh');
 }
 
+function providerMcp(provider) {
+  return provider && provider.mcp ? provider.mcp : {
+    status: 'disconnected',
+    label: 'Connect MCP',
+    connectCommand: 'Add this provider to your local MCP config, then drag it into chat.',
+    capabilities: [],
+  };
+}
+
+function providerMcpChip(provider) {
+  const mcp = providerMcp(provider);
+  const connected = mcp.status === 'connected';
+  const label = connected ? 'MCP connected' : 'MCP not connected';
+  return '<span class="vr-provider-mcp-chip ' + (connected ? 'is-connected' : 'is-disconnected') + '" title="' + escapeHtml(label) + '" aria-label="' + escapeHtml(label) + '">' +
+    '<i></i><span>' + escapeHtml(label) + '</span>' +
+    '</span>';
+}
+
+function providerAssetSrc(provider) {
+  if (!provider) return providerAssets.supabase;
+  return providerMarkAssets[provider.id] || providerAssets[provider.id] || providerAssets.supabase;
+}
+
+function ProviderToken(provider, extraClass) {
+  const className = 'vr-provider-token' + (extraClass ? ' ' + extraClass : '');
+  const iconHtml = provider && provider.iconHtml ? String(provider.iconHtml) : '';
+  return '<span class="' + className + '">' + (iconHtml.trim() ? iconHtml : '<img src="' + providerAssetSrc(provider) + '" alt="" />') + '</span>';
+}
+
+function ProviderLogo(provider, className) {
+  const iconHtml = provider && provider.iconHtml ? String(provider.iconHtml) : '';
+  return iconHtml.trim()
+    ? '<span class="' + className + ' is-logo-html">' + iconHtml + '</span>'
+    : '<img class="' + className + '" src="' + providerAssetSrc(provider) + '" alt="" />';
+}
+
+function ProviderMcpPanel(provider) {
+  const mcp = providerMcp(provider);
+  const connected = mcp.status === 'connected';
+  const capabilities = Array.isArray(mcp.capabilities) && mcp.capabilities.length ? mcp.capabilities : ['provider context', 'repo-aware chat'];
+  return '<section class="vr-provider-mcp-panel ' + (connected ? 'is-connected' : 'is-disconnected') + '">' +
+    '<header><span>' + Icon('agent') + '</span><div><strong>' + escapeHtml(connected ? 'MCP connected' : 'Connect MCP') + '</strong><em>' + escapeHtml(connected ? (mcp.source || 'local MCP config') : (mcp.connectCommand || 'Add this provider MCP server in your local MCP config.')) + '</em></div></header>' +
+    '<div>' + capabilities.map((item) => '<small>' + escapeHtml(item) + '</small>').join('') + '</div>' +
+    '</section>';
+}
+
 function normalizeProvider(provider) {
   const missing = provider.state === 'not_detected';
   return {
@@ -17348,6 +17157,8 @@ function normalizeProvider(provider) {
     lastSync: currentState.project && currentState.project.scannedAt ? 'scan artifact' : 'startup',
     checks: providerChecks(provider),
     state: provider.state || 'not_detected',
+    mcp: provider.mcp || null,
+    iconHtml: provider.iconHtml || '',
   };
 }
 
@@ -17552,6 +17363,11 @@ let cliModels = {
 
 const reasoningLevels = ['Low', 'Medium', 'High', 'Extra High'];
 const contextLevels = ['Production', 'Provider', 'Release', 'Security'];
+const accessModes = [
+  { id: 'ask', label: 'Ask approval', description: 'Confirm edits and external access' },
+  { id: 'approve', label: 'Approve for me', description: 'Run safe repo actions automatically' },
+  { id: 'full', label: 'Full access', description: 'Unrestricted local project access' },
+];
 const topStages = [
   { id: 'provider', number: '1', label: 'Provider Proof', state: 'Waiting' },
   { id: 'agent', number: '2', label: 'Agent Fix', state: 'Ready' },
@@ -17653,6 +17469,7 @@ function buildRecentChatEntry(prompt, provider, release, chat, existing) {
     modelId: lane.modelId || base.modelId || demo.selectedModelId || 'gpt-5.5',
     reasoning: lane.reasoning || base.reasoning || demo.selectedReasoning || 'High',
     context: lane.context || base.context || demo.selectedContext || 'Production',
+    accessMode: lane.accessMode || base.accessMode || demo.selectedAccessMode || 'approve',
     messages: serializeChatMessages(lane.messages),
   };
 }
@@ -17680,6 +17497,7 @@ function syncDemoFromChatContext(context) {
   demo.selectedModelId = context.modelId;
   demo.selectedReasoning = context.reasoning;
   demo.selectedContext = context.context;
+  demo.selectedAccessMode = context.accessMode || 'approve';
   if (context.providerId) demo.selectedProviderId = context.providerId;
   if (context.releaseId) demo.selectedReleaseId = context.releaseId;
   syncPrimaryContext();
@@ -17694,6 +17512,7 @@ function restoreRecentChat(recent) {
     modelId: recent.modelId,
     reasoning: recent.reasoning,
     context: recent.context,
+    accessMode: recent.accessMode,
     messages: recent.messages || [],
     draft: '',
     activeTask: null,
@@ -17913,6 +17732,9 @@ function contextIconChip(iconName, size) {
 }
 
 function BrandMark(id) {
+  if (id === 'github') {
+    return '<span class="vr-inline-brand-mark is-github"><svg viewBox="0 0 24 24" aria-hidden="true" focusable="false"><path d="M12 2C6.48 2 2 6.58 2 12.26c0 4.52 2.87 8.35 6.86 9.71.5.1.69-.22.69-.49 0-.24-.01-.87-.01-1.7-2.78.62-3.37-1.36-3.37-1.36-.45-1.17-1.11-1.48-1.11-1.48-.91-.64.07-.63.07-.63 1 .07 1.53 1.05 1.53 1.05.9 1.56 2.36 1.11 2.94.85.09-.67.35-1.11.63-1.37-2.22-.26-4.56-1.14-4.56-5.07 0-1.12.39-2.03 1.03-2.75-.1-.26-.45-1.3.1-2.7 0 0 .84-.28 2.75 1.05A9.2 9.2 0 0 1 12 6.84c.85 0 1.71.12 2.51.34 1.91-1.33 2.75-1.05 2.75-1.05.55 1.4.2 2.44.1 2.7.64.72 1.03 1.63 1.03 2.75 0 3.94-2.34 4.8-4.57 5.06.36.32.68.94.68 1.9 0 1.37-.01 2.47-.01 2.8 0 .27.18.6.7.49A10.03 10.03 0 0 0 22 12.26C22 6.58 17.52 2 12 2Z"/></svg></span>';
+  }
   return '<span class="vr-inline-brand-mark"><img src="' + escapeHtml(providerMarkAssets[id] || providerAssets[id]) + '" alt="" /></span>';
 }
 
@@ -17938,6 +17760,7 @@ function defaultChatContext(seed) {
     modelId: source.modelId || demo.selectedModelId || normalizeModelId(models[0]),
     reasoning: source.reasoning || demo.selectedReasoning || 'High',
     context: source.context || demo.selectedContext || 'Production',
+    accessMode: source.accessMode || demo.selectedAccessMode || 'approve',
     draft: source.draft || '',
     messages: Array.isArray(source.messages) ? source.messages.slice() : [],
     activeTask: source.activeTask || null,
@@ -18067,7 +17890,7 @@ function resolveQuickActionMission(kind, chatIndex, promptOverride) {
       prompt: [
         'Analyze production launch readiness in this project folder.',
         '',
-        'Gate: ' + gateLabel + ' (' + (gate.status || 'unknown') + ')',
+        'Project status: ' + gateLabel + ' (' + (gate.status || 'unknown') + ')',
         'Main blocker: ' + mainBlocker,
         blockers.length ? 'Known blockers from the latest scan:\\n' + blockerText : 'No blockers loaded yet \u2014 inspect .viberaven/gate-result.json and agent-tasklist.md if present.',
         connectText ? '\\nProviders needing connect:\\n' + connectText : '',
@@ -18083,11 +17906,11 @@ function resolveQuickActionMission(kind, chatIndex, promptOverride) {
     },
     plan: {
       title: 'Building fix plan',
-      label: planSteps.length ? 'Production fix plan \xB7 ' + planSteps.length + ' step' + (planSteps.length === 1 ? '' : 's') : 'Build production fix plan',
+      label: planSteps.length ? 'Fix plan \xB7 ' + planSteps.length + ' action' + (planSteps.length === 1 ? '' : 's') : 'Build fix plan',
       prompt: [
-        'Build a safe, ordered production fix plan for this launch.',
+        'Build a safe, ordered fix plan for this launch.',
         '',
-        'Gate: ' + gateLabel,
+        'Project status: ' + gateLabel,
         'Main blocker: ' + mainBlocker,
         blockers.length ? 'Blockers (' + blockers.length + '):\\n' + blockerText : 'No scan blockers loaded \u2014 inspect .viberaven artifacts first.',
         planSteps.length ? '\\nSuggested steps from scan:\\n' + planText : '',
@@ -18127,11 +17950,11 @@ function resolveQuickActionMission(kind, chatIndex, promptOverride) {
     },
     verify: {
       title: 'Running verification',
-      label: gateClear ? 'Re-verify launch gate' : 'Verify launch gate',
+      label: gateClear ? 'Re-verify readiness' : 'Verify readiness',
       prompt: [
         'Verify production launch readiness for this project.',
         '',
-        'Gate: ' + gateLabel + ' (' + (gate.status || 'unknown') + ')',
+        'Project status: ' + gateLabel + ' (' + (gate.status || 'unknown') + ')',
         'Main blocker: ' + mainBlocker,
         blockers.length ? 'Open blockers:\\n' + blockerText : '',
         '',
@@ -18142,7 +17965,7 @@ function resolveQuickActionMission(kind, chatIndex, promptOverride) {
       ].filter(Boolean).join('\\n'),
       line: 'Checking evidence, provider state, and release readiness.',
       steps: ['Run checks', 'Read proof', 'Mark status'],
-      notice: gateClear ? 'Re-verifying launch proof.' : 'Running launch gate verification.',
+      notice: gateClear ? 'Re-verifying launch proof.' : 'Running production readiness verification.',
     },
     diff: {
       title: 'Reviewing diff',
@@ -18150,7 +17973,7 @@ function resolveQuickActionMission(kind, chatIndex, promptOverride) {
       prompt: [
         'Review the current production diff for this project.',
         '',
-        'Gate: ' + gateLabel,
+        'Project status: ' + gateLabel,
         topBlocker ? 'Top blocker context: ' + topBlocker.title : '',
         '',
         'Show grouped changes, flag risky edits, and say what still needs verify before release.',
@@ -18165,7 +17988,7 @@ function resolveQuickActionMission(kind, chatIndex, promptOverride) {
       prompt: [
         'Explain recent production changes and what to verify next.',
         '',
-        'Gate: ' + gateLabel,
+        'Project status: ' + gateLabel,
         mainBlocker ? 'Main blocker: ' + mainBlocker : '',
         blockers.length ? 'Active blockers:\\n' + blockerText : '',
         '',
@@ -18269,7 +18092,7 @@ function quickActionButtonSpec(index) {
       action: 'plan',
       icon: 'report',
       label: planSteps.length ? 'Plan \xB7 ' + planSteps.length : 'Plan',
-      hint: planSteps.length ? 'Build production fix plan \xB7 ' + planSteps.length + ' steps' : 'Build production fix plan',
+      hint: planSteps.length ? 'Build fix plan \xB7 ' + planSteps.length + ' actions' : 'Build fix plan',
       primary: true,
     },
     {
@@ -18284,7 +18107,7 @@ function quickActionButtonSpec(index) {
       action: 'verify-now',
       icon: 'shield',
       label: gateClear ? 'Re-verify' : 'Verify',
-      hint: gateClear ? 'Re-verify launch gate' : 'Verify launch gate',
+      hint: gateClear ? 'Re-verify readiness' : 'Verify readiness',
       primary: true,
     },
     {
@@ -18373,7 +18196,7 @@ function runChatTask(kind, promptOverride) {
       demo.notice = 'Verification finished in chat. Launch proof is green.';
     } else if (kind === 'fix') {
       demo.activeStepId = 'verify';
-      demo.notice = 'Fix prepared in chat. Run Verify to clear the launch gate.';
+      demo.notice = 'Fix prepared in chat. Run Verify to update production readiness.';
     } else {
       demo.notice = taskMeta(kind).title + ' finished in chat.';
     }
@@ -18395,12 +18218,12 @@ function runChatTask(kind, promptOverride) {
       modelId: selectedModelLabel(chatIndex),
       reasoning: chat.reasoning,
       context: chat.context,
+      accessMode: chat.accessMode || 'approve',
       prompt,
       displayPrompt: label,
       taskKind: kind,
-      permissionMode: demo.agentPermissionMode,
-      provider: { area: provider.area, name: provider.name },
-      release: release ? { label: release.label } : undefined
+      provider: { id: provider.id, area: provider.area, name: provider.name },
+      release: release ? { id: release.id, label: release.label } : undefined
     })
   })
     .then(async (response) => {
@@ -18429,7 +18252,7 @@ function sendChatInput(chatIndex) {
   }
   chat.draft = '';
   if (input && 'value' in input) input.value = '';
-  runChatTask(chat.providerId ? 'provider' : 'analyze', value);
+  runChatTask(chat.releaseId ? 'diff' : chat.providerId ? 'provider' : 'analyze', value);
 }
 
 function resetLaunchPreview() {
@@ -18449,11 +18272,13 @@ function resetLaunchPreview() {
   demo.selectedModelId = 'gpt-5.5';
   demo.selectedReasoning = 'High';
   demo.selectedContext = 'Production';
+  demo.selectedAccessMode = 'approve';
   demo.modelMenuOpen = false;
   demo.reasoningMenuOpen = false;
   demo.contextMenuOpen = false;
+  demo.accessMenuOpen = false;
   demo.pickerChatIndex = 0;
-  demo.chatContexts = [defaultChatContext({ cliId: 'codex', modelId: 'gpt-5.5', reasoning: 'High', context: 'Production' })];
+  demo.chatContexts = [defaultChatContext({ cliId: 'codex', modelId: 'gpt-5.5', reasoning: 'High', context: 'Production', accessMode: 'approve' })];
   demo.droppedProviderId = null;
   demo.droppedReleaseId = null;
   clearChatTaskTimer();
@@ -18523,10 +18348,10 @@ function RecentChatRail() {
 
 function ProviderCard(provider) {
   const slot = stackSlots[provider.id] || provider.area;
-  return '<button class="vr-provider-card ' + (provider.id === demo.selectedProviderId ? 'is-selected' : '') + '" type="button" draggable="true" data-provider="' + escapeHtml(provider.id) + '" aria-label="Open ' + escapeHtml(provider.name) + ' stack slot">' +
-    '<span class="vr-provider-token"><img src="' + (providerMarkAssets[provider.id] || providerAssets[provider.id]) + '" alt="" /></span>' +
-    '<span class="vr-provider-light"></span>' +
+  return '<button class="vr-provider-card ' + (provider.id === demo.selectedProviderId ? 'is-selected' : '') + '" type="button" draggable="true" data-provider="' + escapeHtml(provider.id) + '" data-provider-tone="' + escapeHtml(provider.tone || 'neutral') + '" aria-label="Open ' + escapeHtml(provider.name) + ' stack slot">' +
+    ProviderToken(provider) +
     '<div><small>' + escapeHtml(slot) + '</small><strong>' + escapeHtml(provider.name) + '</strong><em>' + escapeHtml(provider.status) + '</em></div>' +
+    providerMcpChip(provider) +
     '<span class="vr-provider-proof-chip"><span>Open</span>' + Icon('chevronRight') + '</span>' +
     '</button>';
 }
@@ -18534,9 +18359,10 @@ function ProviderCard(provider) {
 function ProviderDetailPanel() {
   const provider = providers.find((item) => item.id === demo.selectedProviderId) || providers[0];
   return '<aside class="vr-provider-detail-panel">' +
-    '<div class="vr-detail-head"><span class="vr-provider-token is-large"><img src="' + (providerMarkAssets[provider.id] || providerAssets[provider.id]) + '" alt="" /></span><div><span>' + escapeHtml(provider.area) + '</span><strong>' + escapeHtml(provider.name) + '</strong></div>' + StatusBadge(provider.status, provider.tone) + '</div>' +
+    '<div class="vr-detail-head">' + ProviderToken(provider, 'is-large') + '<div><span>' + escapeHtml(provider.area) + '</span><strong>' + escapeHtml(provider.name) + '</strong></div>' + StatusBadge(provider.status, provider.tone) + '</div>' +
     '<p>' + escapeHtml(provider.detail) + '</p>' +
     '<div class="vr-provider-stats"><span><b>Checks</b><em>' + escapeHtml(provider.checks) + '</em></span><span><b>Region</b><em>' + escapeHtml(provider.region) + '</em></span><span><b>Last sync</b><em>' + escapeHtml(provider.lastSync) + '</em></span></div>' +
+    ProviderMcpPanel(provider) +
     '<a class="vr-provider-dashboard" href="' + escapeHtml(providerDashboardUrls[provider.id] || docsUrl) + '" target="_blank" rel="noreferrer">Open dashboard ' + Icon('external') + '</a>' +
     '</aside>';
 }
@@ -18557,7 +18383,7 @@ function ProviderPicker() {
   return '<div class="vr-provider-picker" aria-label="Provider picker">' +
     '<div><strong>Connector picker</strong><span>Select one provider. VibeRaven opens its proof panel and next action.</span></div>' +
     '<div class="vr-provider-picker-list">' + boardProviders.map((provider) =>
-      '<button type="button" data-provider="' + escapeHtml(provider.id) + '"><span class="vr-provider-token is-picker"><img src="' + (providerMarkAssets[provider.id] || providerAssets[provider.id]) + '" alt="" /></span><span>' + escapeHtml(provider.name) + '</span></button>'
+      '<button type="button" data-provider="' + escapeHtml(provider.id) + '">' + ProviderToken(provider, 'is-picker') + '<span>' + escapeHtml(provider.name) + '</span></button>'
     ).join('') + '</div>' +
     '</div>';
 }
@@ -18613,11 +18439,12 @@ function ProviderModal() {
   const checkRows = providerModalCheckRows(raw);
   return ModalShell('provider',
     '<header class="vr-modal-provider-head">' +
-      '<img class="vr-modal-provider-logo" src="' + (providerMarkAssets[provider.id] || providerAssets[provider.id]) + '" alt="" />' +
+      ProviderLogo(provider, 'vr-modal-provider-logo') +
       '<div><h2>' + escapeHtml(provider.name) + '</h2>' + StatusBadge(provider.status, provider.tone) + '<p>' + escapeHtml(provider.area) + ' provider</p></div>' +
       '<img class="vr-modal-mascot" src="' + providerModalMascot(health) + '" alt="" />' +
     '</header>' +
     '<section class="vr-modal-health is-' + escapeHtml(health.tone) + '"><span>' + providerHealthIcon(health) + '</span><div><strong>' + escapeHtml(health.label) + '</strong><em>' + escapeHtml(health.summary) + '</em></div><b>' + escapeHtml(health.meta) + '</b></section>' +
+    ProviderMcpPanel(provider) +
     '<div class="vr-modal-action-grid">' +
       GlowButton('Open slot', { action: 'guide', tone: 'purple' }) +
       '<button type="button" data-action="recheck">' + Icon('refresh') + 'Re-check</button>' +
@@ -18644,7 +18471,7 @@ function AddProviderModal() {
     '</header>' +
     '<section class="vr-modal-provider-options">' + featured.map((item) => {
       const provider = providers.find((candidate) => candidate.id === item.icon) || providers[0];
-      return '<button type="button" data-provider="' + escapeHtml(provider.id) + '"><span class="vr-provider-token is-large"><img src="' + (providerMarkAssets[provider.id] || providerAssets[provider.id]) + '" alt="" /></span><div><small>' + escapeHtml(item.slot) + '</small><strong>' + escapeHtml(item.provider) + '</strong><em>' + escapeHtml(item.caption) + '</em></div><b>Connect</b></button>';
+      return '<button type="button" data-provider="' + escapeHtml(provider.id) + '">' + ProviderToken(provider, 'is-large') + '<div><small>' + escapeHtml(item.slot) + '</small><strong>' + escapeHtml(item.provider) + '</strong><em>' + escapeHtml(item.caption) + '</em></div><b>Connect</b></button>';
     }).join('') + '</section>' +
     '<section class="vr-modal-connect-note">' + Icon('lock') + '<span>VibeRaven only opens setup guidance here. Real credentials stay in your local runner or provider dashboard.</span></section>'
   );
@@ -18846,21 +18673,18 @@ function connectCliAgent(agentId, chatIndex, options) {
 }
 
 function cliSetupProbeLabel() {
-  return demo.cliProbeStatus === 'probing' ? 'Testing\u2026' : demo.cliProbeStatus === 'success' ? 'Connected \u2014 continue to chat' : demo.cliProbeStatus === 'failed' ? 'Test connection again' : 'Test connection & verify';
+  return demo.cliProbeStatus === 'probing' ? 'Testing...' : demo.cliProbeStatus === 'success' ? 'Connected' : demo.cliProbeStatus === 'failed' ? 'Try again' : 'Test connection';
 }
 
 function CliSetupActions(targetId, index) {
   const setup = cliSetupFor(targetId);
   const probeLabel = cliSetupProbeLabel();
-  const ctaPending = demo.cliProbeStatus !== 'success' && demo.cliProbeStatus !== 'probing';
-  const ctaClass = 'vr-cli-action-button is-primary is-cta' + (ctaPending ? ' is-pending' : '');
   return '<div class="vr-cli-connect-expand-actions">' +
     '<button class="vr-cli-action-button" type="button" data-action="run-cli-install" data-cli-agent="' + escapeHtml(targetId) + '" data-chat-index="' + String(index) + '">' + Icon('shell') + 'Run install</button>' +
     '<button class="vr-cli-action-button" type="button" data-action="run-cli-signin" data-cli-agent="' + escapeHtml(targetId) + '" data-chat-index="' + String(index) + '">' + Icon('shell') + 'Run sign in</button>' +
+    '<button class="vr-cli-action-button is-primary" type="button" data-action="test-cli-connection" data-cli-agent="' + escapeHtml(targetId) + '" data-chat-index="' + String(index) + '">' + Icon('refresh') + escapeHtml(probeLabel) + '</button>' +
     '</div>' +
-    '<p class="vr-cli-setup-cta-hint">After sign-in finishes, click below to confirm the connection \u2014 chat only works once this verifies.</p>' +
-    '<button class="' + ctaClass + '" type="button" data-action="test-cli-connection" data-cli-agent="' + escapeHtml(targetId) + '" data-chat-index="' + String(index) + '">' + Icon('refresh') + escapeHtml(probeLabel) + '</button>' +
-    '<p class="vr-cli-setup-hint">Type commands in the Studio terminal below, or run: <code>' + escapeHtml(setup.installCommand) + '</code> then <code>' + escapeHtml(setup.signInCommand) + '</code></p>';
+    '<p class="vr-cli-setup-hint">Run install and sign in, then use <strong>Test connection</strong> to unlock chat control. Commands: <code>' + escapeHtml(setup.installCommand) + '</code> then <code>' + escapeHtml(setup.signInCommand) + '</code></p>';
 }
 
 function appendTerminalLines(lines) {
@@ -18924,7 +18748,7 @@ function selectTerminalCli(agentId) {
   if (!demo.cliTerminalLines.length) {
     demo.cliTerminalLines = [
       'VibeRaven Studio shell',
-      'Run install, run sign in, then test connection using the buttons below.',
+      'Run install, run sign in, then use Test connection to continue.',
       ''
     ];
   } else {
@@ -18956,8 +18780,8 @@ function StudioTerminalView() {
   const lines = demo.cliTerminalLines.length
     ? demo.cliTerminalLines
     : [
-        'VibeRaven Studio shell',
-        'Type commands at the $ prompt. Use the buttons below to install, sign in, and test.',
+      'VibeRaven Studio shell',
+        'Type commands at the $ prompt. Use Test connection after sign-in.',
         ''
       ];
   const title = terminalConnectTitle(agent);
@@ -19300,7 +19124,7 @@ async function runCliSignInInStudio(agentId, chatIndex) {
       String(payload?.output || payload?.message || 'Sign-in command finished.'),
       payload?.interactiveNote ? String(payload.interactiveNote) : '',
       '',
-      'Complete any browser login, then click Test connection below to verify.'
+      'Complete any browser login, then click Test connection.'
     ]);
     demo.cliTerminalDraft = setupCommandFallback(agentId, 'sign-in');
     demo.notice = 'Sign-in ran in Studio terminal. Finish login if prompted, then test the connection.';
@@ -19332,7 +19156,7 @@ async function openCliOsTerminal(agentId, chatIndex) {
       '',
       String(payload?.message || 'Complete sign-in in the OS terminal window that opened.'),
       '',
-      'When login finishes, return here and click Test connection below to verify.'
+      'When login finishes, return here and click Test connection.'
     ]);
     demo.notice = payload?.ok ? 'OS terminal opened for sign-in fallback.' : 'Could not open an OS terminal window.';
   } catch {
@@ -19347,11 +19171,12 @@ function ModelPicker(index) {
   const models = allModelOptions(index);
   const selectedModel = selectedModelLabel(index);
   const scoped = demo.pickerChatIndex === index;
+  const access = accessModes.find((mode) => mode.id === chat.accessMode) || accessModes[1];
   return '<div class="vr-model-picker">' +
     '<button type="button" data-action="toggle-reasoning" data-chat-index="' + String(index) + '"><span>Reasoning</span><strong>' + escapeHtml(chat.reasoning) + '</strong><i></i></button>' +
     '<button type="button" data-action="toggle-models" data-chat-index="' + String(index) + '"><span>Model</span><strong>' + escapeHtml(selectedModel) + '</strong><i></i></button>' +
     '<button type="button" data-action="toggle-context" data-chat-index="' + String(index) + '"><span>Context</span><strong>' + escapeHtml(chat.context) + '</strong><i></i></button>' +
-    PermissionModeToggle(index) +
+    '<button type="button" data-action="toggle-access" data-chat-index="' + String(index) + '"><span>Access</span><strong>' + escapeHtml(access.label) + '</strong><i></i></button>' +
     (scoped && demo.reasoningMenuOpen ? '<div class="vr-model-menu is-reasoning" role="menu"><p>Reasoning</p>' + reasoningLevels.map((level) =>
       '<button type="button" data-reasoning="' + escapeHtml(level) + '" data-chat-index="' + String(index) + '">' + escapeHtml(level) + (chat.reasoning === level ? '<b></b>' : '') + '</button>'
     ).join('') + '</div>' : '') +
@@ -19361,14 +19186,9 @@ function ModelPicker(index) {
     (scoped && demo.contextMenuOpen ? '<div class="vr-model-menu is-context" role="menu"><p>Context</p>' + contextLevels.map((level) =>
       '<button type="button" data-context="' + escapeHtml(level) + '" data-chat-index="' + String(index) + '">' + escapeHtml(level) + (chat.context === level ? '<b></b>' : '') + '</button>'
     ).join('') + '</div>' : '') +
-    '</div>';
-}
-
-function PermissionModeToggle(index) {
-  const isFullAccess = demo.agentPermissionMode === 'full-access';
-  return '<div class="vr-permission-toggle" role="group" aria-label="Agent permission mode">' +
-    '<button type="button" class="vr-permission-btn' + (!isFullAccess ? ' is-active' : '') + '" data-permission-mode="ask" data-chat-index="' + String(index) + '" aria-pressed="' + String(!isFullAccess) + '" title="Ask for approval before each risky action">Ask each change</button>' +
-    '<button type="button" class="vr-permission-btn is-danger' + (isFullAccess ? ' is-active' : '') + '" data-permission-mode="full-access" data-chat-index="' + String(index) + '" aria-pressed="' + String(isFullAccess) + '" title="Run without per-action approval prompts \u2014 use with care">Full access</button>' +
+    (scoped && demo.accessMenuOpen ? '<div class="vr-model-menu is-access" role="menu"><p>Access</p>' + accessModes.map((mode) =>
+      '<button type="button" data-access-mode="' + escapeHtml(mode.id) + '" data-chat-index="' + String(index) + '"><span><strong>' + escapeHtml(mode.label) + '</strong><em>' + escapeHtml(mode.description) + '</em></span>' + (chat.accessMode === mode.id ? '<b></b>' : '') + '</button>'
+    ).join('') + '</div>' : '') +
     '</div>';
 }
 
@@ -19388,10 +19208,10 @@ function ChatBlockersSummary(cards) {
 function ChatPlanCard(steps, chatIndex) {
   const rows = Array.isArray(steps) ? steps : [];
   if (!rows.length) return '';
-  return '<section class="vr-chat-card vr-chat-plan-card"><header><strong>Production Fix Plan</strong><b>' + String(rows.length) + ' steps</b></header><ol class="vr-chat-plan-list">' +
+  return '<section class="vr-chat-card vr-chat-plan-card"><header><strong>Fix plan</strong><b>' + String(rows.length) + ' actions</b></header><ol class="vr-chat-plan-list">' +
     rows.map((step, index) =>
       '<li><button class="vr-plan-step" type="button" data-action="mission-step" data-step-id="' + escapeHtml(step.id || ('step-' + String(index))) + '" data-chat-index="' + String(chatIndex) + '">' +
-        '<span class="vr-plan-step-num">' + String(index + 1) + '</span>' +
+        '<span class="vr-plan-step-num"></span>' +
         '<span class="vr-plan-step-body">' +
           '<span class="vr-plan-step-title">' + escapeHtml(step.title || 'Fix step') + '</span>' +
           '<span class="vr-plan-step-tag">' + escapeHtml(step.category || 'Quality') + '</span>' +
@@ -19428,7 +19248,7 @@ function ChatMissionCards(cards, chatIndex, options) {
   if (showPlan && planSteps.length) html += ChatPlanCard(planSteps, chatIndex);
   if (connectProviders.length) html += ChatProviderConnectCard(connectProviders, chatIndex);
   if (planSteps.length && !showPlan) {
-    html += '<button class="vr-chat-plan-row" type="button" data-action="view-fix-plan" data-chat-index="' + String(chatIndex) + '">' + Icon('report') + '<strong>View Production Fix Plan</strong><em>' + String(planSteps.length) + ' steps</em><b></b></button>';
+    html += '<button class="vr-chat-plan-row" type="button" data-action="view-fix-plan" data-chat-index="' + String(chatIndex) + '">' + Icon('report') + '<strong>View fix plan</strong><em>' + String(planSteps.length) + ' actions</em><b></b></button>';
   }
   html += '</div>';
   return html;
@@ -19555,9 +19375,9 @@ function renderAgentListItems(items, chatIndex) {
 
 function normalizeAgentSectionKey(raw) {
   const key = String(raw || '').trim().toLowerCase().replace(/\\s*\\(\\d+\\)\\s*$/, '').trim();
-  if (/^(gate|launch gate|production gate)$/.test(key)) return 'Gate';
+  if (/^(gate|production gate)$/.test(key)) return null;
   if (/^(blockers?|launch blockers?)$/.test(key)) return 'Blockers';
-  if (/^(suggested steps?|fix plan|production fix plan)$/.test(key)) return 'Suggested steps';
+  if (/^(suggested steps?|fix plan)$/.test(key)) return 'Suggested steps';
   if (/^(summary|tl;dr|tldr)$/.test(key)) return 'Summary';
   if (key === 'findings') return 'Findings';
   if (key === 'changes made') return 'Changes made';
@@ -19590,15 +19410,7 @@ function dedupeAgentMarkdownBody(text, cards) {
 }
 
 function AgentGateStrip(gateText, gateState) {
-  const gate = gateState || currentState.gate || {};
-  const parsed = String(gateText || '').trim();
-  const status = gate.status || 'unknown';
-  const label = parsed || gate.label || 'Waiting for project evidence';
-  const tone = status === 'clear' ? 'clear' : (status === 'blocked' || status === 'not_clear' ? 'blocked' : 'unknown');
-  return '<div class="vr-agent-gate-strip" data-tone="' + escapeHtml(tone) + '">' +
-    Icon('shield') +
-    '<span><strong>Launch gate</strong><em>' + escapeHtml(label) + '</em></span>' +
-  '</div>';
+  return '';
 }
 
 function parseAgentSections(text, options) {
@@ -19645,8 +19457,7 @@ function renderAgentSectionCard(section, chatIndex) {
   const name = section.name;
   const lower = name.toLowerCase();
   if (lower === 'gate') {
-    const gateText = section.paragraphs.concat(section.items).join(' ');
-    return AgentGateStrip(gateText, currentState.gate || null);
+    return '';
   }
   const isNext = lower === 'next step';
   const isBlockers = lower === 'blockers';
@@ -19835,7 +19646,7 @@ function readOnlyContextChipsHtml(providerId, releaseId) {
     kind: 'provider',
     index: 0,
     id: provider.id,
-    iconHtml: '<img src="' + (providerMarkAssets[provider.id] || providerAssets[provider.id]) + '" alt="" />',
+    iconHtml: provider.iconHtml || '<img src="' + providerAssetSrc(provider) + '" alt="" />',
     mutedLabel: provider.area,
     label: provider.name,
     readOnly: true,
@@ -19926,7 +19737,7 @@ function ContextDropZone(index, showAttached) {
       kind: 'provider',
       index,
       id: provider.id,
-      iconHtml: '<img src="' + (providerMarkAssets[provider.id] || providerAssets[provider.id]) + '" alt="" />',
+      iconHtml: provider.iconHtml || '<img src="' + providerAssetSrc(provider) + '" alt="" />',
       mutedLabel: provider.area,
       label: provider.name,
     }) : '') +
@@ -20204,7 +20015,7 @@ app.addEventListener('click', async (event) => {
     if (demo.activeStudioTab === 'terminal' && !demo.cliTerminalLines.length) {
         demo.cliTerminalLines = [
           'VibeRaven Studio shell',
-          'Type commands at the $ prompt. Use the buttons below to install, sign in, and test.',
+          'Type commands at the $ prompt. Use Test connection after sign-in.',
           ''
         ];
       }
@@ -20302,6 +20113,7 @@ app.addEventListener('click', async (event) => {
       demo.modelMenuOpen = false;
       demo.reasoningMenuOpen = false;
       demo.contextMenuOpen = false;
+      demo.accessMenuOpen = false;
       demo.cliProbeStatus = 'idle';
       demo.cliProbeMessage = '';
       demo.pickerChatIndex = chatIndex;
@@ -20329,6 +20141,7 @@ app.addEventListener('click', async (event) => {
     demo.modelMenuOpen = false;
     demo.reasoningMenuOpen = false;
     demo.contextMenuOpen = false;
+    demo.accessMenuOpen = false;
     demo.notice = (cliAgents.find((item) => item.id === chat.cliId)?.label || chat.cliId) + ' selected for this chat.';
     render();
     return;
@@ -20346,6 +20159,7 @@ app.addEventListener('click', async (event) => {
     demo.modelMenuOpen = false;
     demo.reasoningMenuOpen = false;
     demo.contextMenuOpen = false;
+    demo.accessMenuOpen = false;
     demo.activeStudioTab = 'chat';
     demo.pickerChatIndex = chatIndex;
     demo.notice = selectedModelLabel(chatIndex) + ' selected for this chat.';
@@ -20364,6 +20178,7 @@ app.addEventListener('click', async (event) => {
     demo.reasoningMenuOpen = false;
     demo.modelMenuOpen = false;
     demo.contextMenuOpen = false;
+    demo.accessMenuOpen = false;
     demo.activeStudioTab = 'chat';
     demo.pickerChatIndex = chatIndex;
     demo.notice = chat.reasoning + ' reasoning selected for this chat.';
@@ -20382,6 +20197,7 @@ app.addEventListener('click', async (event) => {
     demo.contextMenuOpen = false;
     demo.modelMenuOpen = false;
     demo.reasoningMenuOpen = false;
+    demo.accessMenuOpen = false;
     demo.activeStudioTab = 'chat';
     demo.pickerChatIndex = chatIndex;
     demo.notice = chat.context + ' context selected for this chat.';
@@ -20390,21 +20206,23 @@ app.addEventListener('click', async (event) => {
     return;
   }
 
-  const permissionButton = event.target.closest('[data-permission-mode]');
-  if (permissionButton) {
+  const accessButton = event.target.closest('[data-access-mode]');
+  if (accessButton) {
     event.preventDefault();
-    const mode = permissionButton.getAttribute('data-permission-mode');
-    demo.agentPermissionMode = mode === 'full-access' ? 'full-access' : 'ask';
-    savePermissionMode(demo.agentPermissionMode);
-    const chatIndex = Number(permissionButton.getAttribute('data-chat-index') || String(demo.pickerChatIndex || 0));
-    demo.pickerChatIndex = chatIndex;
+    const chatIndex = Number(accessButton.getAttribute('data-chat-index') || String(demo.pickerChatIndex || 0));
+    const chat = chatContext(chatIndex);
+    const selected = accessModes.find((mode) => mode.id === accessButton.getAttribute('data-access-mode')) || accessModes[1];
+    chat.accessMode = selected.id;
+    demo.selectedAccessMode = selected.id;
+    demo.accessMenuOpen = false;
+    demo.contextMenuOpen = false;
     demo.modelMenuOpen = false;
     demo.reasoningMenuOpen = false;
-    demo.contextMenuOpen = false;
-    demo.notice = demo.agentPermissionMode === 'full-access'
-      ? 'Full access mode: agent runs without per-action approval prompts.'
-      : 'Ask mode: agent will request approval before each risky action.';
-    render();
+    demo.activeStudioTab = 'chat';
+    demo.pickerChatIndex = chatIndex;
+    demo.notice = selected.label + ' selected for this chat.';
+    refreshPickerMenus();
+    refreshBottomTip();
     return;
   }
 
@@ -20415,6 +20233,7 @@ app.addEventListener('click', async (event) => {
     demo.modelMenuOpen = false;
     demo.reasoningMenuOpen = false;
     demo.contextMenuOpen = false;
+    demo.accessMenuOpen = false;
     if (stage === 'provider') {
       demo.activeStudioTab = 'chat';
       demo.providerPickerOpen = true;
@@ -20601,6 +20420,7 @@ app.addEventListener('click', async (event) => {
     demo.modelMenuOpen = !samePicker;
     demo.reasoningMenuOpen = false;
     demo.contextMenuOpen = false;
+    demo.accessMenuOpen = false;
     refreshPickerMenus();
     return;
   }
@@ -20613,6 +20433,7 @@ app.addEventListener('click', async (event) => {
     demo.reasoningMenuOpen = !samePicker;
     demo.modelMenuOpen = false;
     demo.contextMenuOpen = false;
+    demo.accessMenuOpen = false;
     refreshPickerMenus();
     return;
   }
@@ -20625,6 +20446,20 @@ app.addEventListener('click', async (event) => {
     demo.contextMenuOpen = !samePicker;
     demo.modelMenuOpen = false;
     demo.reasoningMenuOpen = false;
+    demo.accessMenuOpen = false;
+    refreshPickerMenus();
+    return;
+  }
+  if (action === 'toggle-access') {
+    event.preventDefault();
+    const chatIndex = Number(actionButton.getAttribute('data-chat-index') || '0');
+    const samePicker = demo.pickerChatIndex === chatIndex && demo.accessMenuOpen;
+    demo.activeStudioTab = 'chat';
+    demo.pickerChatIndex = chatIndex;
+    demo.accessMenuOpen = !samePicker;
+    demo.modelMenuOpen = false;
+    demo.reasoningMenuOpen = false;
+    demo.contextMenuOpen = false;
     refreshPickerMenus();
     return;
   }
@@ -20728,6 +20563,7 @@ app.addEventListener('click', async (event) => {
     demo.modelMenuOpen = false;
     demo.reasoningMenuOpen = false;
     demo.contextMenuOpen = false;
+    demo.accessMenuOpen = false;
     demo.notice = 'New chat opened.';
     render();
     return;
@@ -20833,7 +20669,7 @@ app.addEventListener('click', async (event) => {
     const chatIndex = Number(actionButton.getAttribute('data-chat-index') || String(actionChatIndex));
     demo.fixPlanExpandedChatIndex = demo.fixPlanExpandedChatIndex === chatIndex ? null : chatIndex;
     demo.pickerChatIndex = chatIndex;
-    demo.notice = demo.fixPlanExpandedChatIndex === chatIndex ? 'Production fix plan expanded in chat.' : 'Production fix plan collapsed.';
+    demo.notice = demo.fixPlanExpandedChatIndex === chatIndex ? 'Fix plan expanded in chat.' : 'Fix plan collapsed.';
     render();
     return;
   }
@@ -20973,7 +20809,7 @@ app.addEventListener('dragstart', (event) => {
       event,
       provider ? provider.name : 'Provider',
       provider ? provider.area : 'Drop into VibeRaven chat',
-      provider ? '<img src="' + escapeHtml(providerMarkAssets[provider.id] || providerAssets[provider.id]) + '" alt="" />' : ''
+      provider ? (provider.iconHtml || '<img src="' + providerAssetSrc(provider) + '" alt="" />') : ''
     );
     providerButton.classList.add('is-being-dragged');
     demo.notice = 'Dragging provider context. Drop it into a chat composer or Split chat.';
@@ -23768,33 +23604,6 @@ body:has(.vr-app.is-dragging) {
   background: rgba(124, 58, 237, 0.92);
   color: #fff;
 }
-.vr-cli-setup-cta-hint {
-  margin: 9px 0 5px;
-  color: #c4b5fd;
-  font-size: 12px;
-  font-weight: 650;
-  line-height: 1.4;
-}
-.vr-cli-action-button.is-cta {
-  width: 100%;
-  justify-content: center;
-  min-height: 42px;
-  font-size: 13.5px;
-  font-weight: 750;
-  letter-spacing: 0.1px;
-}
-.vr-cli-action-button.is-cta svg {
-  width: 16px;
-  height: 16px;
-}
-.vr-cli-action-button.is-cta.is-pending {
-  border-color: rgba(168, 85, 247, 0.65);
-  animation: vr-cli-cta-pulse 2.2s ease-in-out infinite;
-}
-@keyframes vr-cli-cta-pulse {
-  0%, 100% { box-shadow: 0 0 0 1px rgba(168, 85, 247, 0.3), 0 5px 16px rgba(124, 58, 237, 0.22); }
-  50% { box-shadow: 0 0 0 1px rgba(168, 85, 247, 0.6), 0 8px 22px rgba(124, 58, 237, 0.42); }
-}
 .vr-cli-strip button.is-connect-target {
   border-color: rgba(248, 250, 252, 0.34);
   box-shadow: inset 0 0 0 1px rgba(248, 250, 252, 0.08);
@@ -24519,16 +24328,15 @@ body:has(.vr-app.is-dragging) {
   border-color: rgba(168, 85, 247, 0.38);
 }
 .vr-plan-step-num {
-  width: 28px;
-  height: 28px;
+  width: 10px;
+  height: 10px;
   flex: 0 0 auto;
   display: grid;
   place-items: center;
-  border: 1px solid rgba(168, 85, 247, 0.35);
+  border: 1px solid rgba(168, 85, 247, 0.5);
   border-radius: 999px;
-  color: #e9d5ff;
-  font-size: 12px;
-  font-weight: 700;
+  background: rgba(168, 85, 247, 0.28);
+  box-shadow: 0 0 10px rgba(168, 85, 247, 0.22);
 }
 .vr-plan-step-body {
   flex: 1 1 0;
@@ -25140,6 +24948,10 @@ body:has(.vr-app.is-dragging) {
 .vr-model-menu.is-context {
   right: 0;
 }
+.vr-model-menu.is-access {
+  right: 0;
+  min-width: 270px;
+}
 .vr-studio-chat.is-split .vr-model-menu {
   bottom: calc(100% + 10px);
   min-width: min(245px, calc(100vw - 32px));
@@ -25156,6 +24968,10 @@ body:has(.vr-app.is-dragging) {
   left: auto;
   right: 0;
 }
+.vr-studio-chat.is-split .vr-model-menu.is-access {
+  left: auto;
+  right: 0;
+}
 .vr-model-menu p {
   margin: 2px 4px 6px;
   color: #a8a29e;
@@ -25300,7 +25116,7 @@ body:has(.vr-app.is-dragging) {
 }
 .vr-bottom-inventory .vr-provider-card {
   min-height: 48px;
-  grid-template-columns: 34px minmax(0, 1fr) auto 28px;
+  grid-template-columns: 34px minmax(0, 1fr) 18px 22px;
   grid-template-rows: 1fr;
   align-items: center;
   gap: 8px;
@@ -25357,14 +25173,6 @@ body:has(.vr-app.is-dragging) {
   fill: none !important;
   stroke: currentColor !important;
 }
-.vr-bottom-inventory .vr-provider-light {
-  right: 36px;
-  top: 50%;
-  width: 7px;
-  height: 7px;
-  transform: translateY(-50%);
-  box-shadow: 0 0 9px rgba(34, 197, 94, 0.42);
-}
 .vr-bottom-inventory .vr-provider-card .vr-status-badge {
   grid-column: 3;
   min-height: 18px;
@@ -25651,8 +25459,35 @@ body:has(.vr-app.is-dragging) {
   filter: saturate(1.04) contrast(1.02);
   transition: transform 180ms cubic-bezier(0.23, 1, 0.32, 1);
 }
+.vr-provider-token .provider-logo__img {
+  filter: saturate(1.22) contrast(1.14);
+}
+.vr-provider-token .provider-logo__img[data-provider-logo-key="github"],
+.vr-provider-token .provider-logo__img[data-provider-logo-key="vercel"],
+.vr-provider-token .provider-logo__img[data-provider-logo-key="resend"] {
+  filter: drop-shadow(0 0 8px rgba(255, 255, 255, 0.18));
+}
+.vr-provider-token .provider-logo__img[data-provider-logo-key="sentry"] {
+  filter: saturate(1.34) contrast(1.16) drop-shadow(0 0 9px rgba(139, 92, 246, 0.26));
+}
+.vr-provider-token svg {
+  position: relative;
+  z-index: 1;
+  width: 26px;
+  height: 26px;
+  display: block;
+}
+.vr-provider-token .vr-provider-logo,
+.vr-provider-token .vr-provider-logo img {
+  width: 26px;
+  height: 26px;
+  display: block;
+  object-fit: contain;
+}
 .vr-provider-card:hover .vr-provider-token img,
-.vr-provider-card.is-selected .vr-provider-token img {
+.vr-provider-card.is-selected .vr-provider-token img,
+.vr-provider-card:hover .vr-provider-token svg,
+.vr-provider-card.is-selected .vr-provider-token svg {
   transform: scale(1.08);
 }
 .vr-provider-token.is-picker {
@@ -25673,15 +25508,11 @@ body:has(.vr-app.is-dragging) {
   width: 34px;
   height: 34px;
 }
-.vr-provider-light {
-  position: absolute;
-  right: 42px;
-  top: 18px;
-  width: 8px;
-  height: 8px;
-  border-radius: 999px;
-  background: var(--vr-green);
-  box-shadow: 0 0 8px rgba(34, 197, 94, 0.36);
+.vr-provider-token.is-large svg,
+.vr-provider-token.is-large .vr-provider-logo,
+.vr-provider-token.is-large .vr-provider-logo img {
+  width: 34px;
+  height: 34px;
 }
 .vr-provider-card small,
 .vr-provider-card strong,
@@ -25711,6 +25542,15 @@ body:has(.vr-app.is-dragging) {
   font-size: 11px;
   font-weight: 520;
 }
+.vr-provider-card[data-provider-tone="orange"] em {
+  color: #fbbf24;
+}
+.vr-provider-card[data-provider-tone="red"] em {
+  color: #fb7185;
+}
+.vr-provider-card[data-provider-tone="neutral"] em {
+  color: #aeb7c6;
+}
 .vr-provider-proof-chip {
   grid-column: 1 / -1;
   display: inline-flex;
@@ -25742,6 +25582,130 @@ body:has(.vr-app.is-dragging) {
   height: 13px;
   stroke: currentColor;
 }
+.vr-provider-mcp-chip {
+  grid-column: 2;
+  grid-row: 2;
+  justify-self: end;
+  min-width: 0;
+  width: 8px;
+  height: 8px;
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  gap: 0;
+  border: 0;
+  border-radius: 999px;
+  padding: 0;
+  color: #fbbf24;
+  font-size: 10px;
+  font-weight: 720;
+  line-height: 1;
+  background: transparent;
+}
+.vr-provider-mcp-chip i {
+  width: 8px;
+  height: 8px;
+  flex: 0 0 auto;
+  border-radius: 999px;
+  background: #f59e0b;
+  box-shadow: 0 0 8px rgba(245, 158, 11, 0.36);
+  animation: vrStatusPulse 2.7s ease-in-out infinite;
+}
+.vr-provider-mcp-chip span {
+  position: absolute;
+  width: 1px;
+  height: 1px;
+  overflow: hidden;
+  clip: rect(0 0 0 0);
+}
+.vr-provider-mcp-chip.is-connected {
+  border-color: transparent;
+  background: transparent;
+  color: #bbf7d0;
+}
+.vr-provider-mcp-chip.is-connected i {
+  background: #22c55e;
+  box-shadow: 0 0 8px rgba(34, 197, 94, 0.42);
+}
+@keyframes vrStatusPulse {
+  0%, 100% {
+    opacity: 0.72;
+    transform: scale(0.92);
+  }
+  50% {
+    opacity: 1;
+    transform: scale(1.08);
+  }
+}
+.vr-provider-mcp-panel {
+  display: grid;
+  gap: 10px;
+  border: 1px solid rgba(148, 163, 184, 0.13);
+  border-radius: 10px;
+  padding: 10px;
+  background: rgba(255, 255, 255, 0.035);
+}
+.vr-provider-mcp-panel header {
+  display: grid;
+  grid-template-columns: 30px minmax(0, 1fr);
+  gap: 10px;
+  align-items: center;
+}
+.vr-provider-mcp-panel header > span {
+  width: 30px;
+  height: 30px;
+  display: inline-grid;
+  place-items: center;
+  border-radius: 8px;
+  background: rgba(245, 158, 11, 0.11);
+  color: #fbbf24;
+}
+.vr-provider-mcp-panel strong,
+.vr-provider-mcp-panel em {
+  display: block;
+  min-width: 0;
+}
+.vr-provider-mcp-panel strong {
+  color: #f8fafc;
+  font-size: 13px;
+}
+.vr-provider-mcp-panel em {
+  margin-top: 2px;
+  color: #98a2b3;
+  font-size: 11px;
+  font-style: normal;
+}
+.vr-provider-mcp-panel > div {
+  display: flex;
+  flex-wrap: wrap;
+  gap: 6px;
+}
+.vr-provider-mcp-panel small {
+  border-radius: 999px;
+  border: 1px solid rgba(148, 163, 184, 0.13);
+  padding: 4px 7px;
+  color: #b9c2cf;
+  font-size: 10px;
+  font-weight: 680;
+}
+.vr-provider-mcp-panel.is-connected {
+  border-color: rgba(34, 197, 94, 0.24);
+  background: rgba(34, 197, 94, 0.055);
+}
+.vr-provider-mcp-panel.is-connected header > span {
+  background: rgba(34, 197, 94, 0.12);
+  color: #86efac;
+}
+.vr-bottom-inventory .vr-provider-mcp-chip {
+  grid-column: 3;
+  grid-row: 1;
+  justify-self: end;
+  min-width: 0;
+  width: 8px;
+  height: 8px;
+  padding: 0;
+  font-size: 0;
+}
 .vr-bottom-inventory .vr-provider-proof-chip {
   grid-column: 4;
   justify-self: end;
@@ -25763,13 +25727,6 @@ body:has(.vr-app.is-dragging) {
   height: 15px;
   stroke-width: 2.35;
 }
-.vr-bottom-inventory .vr-provider-light {
-  right: 36px;
-  top: 50%;
-  width: 7px;
-  height: 7px;
-  transform: translateY(-50%);
-}
 .vr-bottom-inventory .vr-provider-card:hover .vr-provider-proof-chip,
 .vr-bottom-inventory .vr-provider-card.is-selected .vr-provider-proof-chip {
   background: transparent;
@@ -26364,33 +26321,48 @@ body:has(.vr-app.is-dragging) {
   width: 18px;
   height: 18px;
 }
+.vr-bottom-tip-bar .vr-inline-brand-mark.is-github {
+  display: inline-grid;
+  place-items: center;
+  color: #f8fafc;
+}
+.vr-bottom-tip-bar .vr-inline-brand-mark.is-github svg {
+  width: 17px;
+  height: 17px;
+  display: block;
+  fill: currentColor;
+}
 .vr-tip-mascot {
+  width: 34px;
+  height: 34px;
   align-self: stretch;
   position: relative;
   display: grid;
   place-items: end center;
   overflow: hidden;
+  border-right: 1px solid rgba(148, 163, 184, 0.16);
 }
 .vr-tip-mascot::before {
   content: "";
   position: absolute;
-  left: 9px;
-  right: 9px;
-  bottom: 4px;
-  height: 12px;
+  left: 8px;
+  right: 8px;
+  bottom: 2px;
+  height: 10px;
   border-radius: 999px;
-  background: rgba(124, 58, 237, 0.3);
-  filter: blur(10px);
+  background: rgba(124, 58, 237, 0.24);
+  filter: blur(8px);
 }
 .vr-tip-mascot img {
   position: relative;
+  z-index: 1;
   align-self: end;
-  width: 46px;
-  height: 42px;
+  width: 32px;
+  height: 32px;
   object-fit: contain;
   object-position: bottom;
-  transform: translateY(4px) scale(1.02);
-  filter: saturate(1.18) drop-shadow(0 0 22px rgba(168, 85, 247, 0.6));
+  transform: translateY(3px);
+  filter: saturate(1.16) drop-shadow(0 0 12px rgba(168, 85, 247, 0.46));
 }
 .vr-bottom-tip-bar span {
   color: #cbd5e1;
@@ -26713,6 +26685,18 @@ body:has(.vr-app.is-dragging) {
   box-shadow: var(--vr-glow-purple);
   transition: transform 200ms cubic-bezier(0.23, 1, 0.32, 1), box-shadow 200ms ease;
 }
+.vr-modal-provider-logo.is-logo-html {
+  display: grid;
+  place-items: center;
+}
+.vr-modal-provider-logo.is-logo-html img,
+.vr-modal-provider-logo.is-logo-html svg,
+.vr-modal-provider-logo.is-logo-html .vr-provider-logo {
+  width: 74px;
+  height: 74px;
+  display: block;
+  object-fit: contain;
+}
 
 .vr-modal-provider-logo:hover {
   transform: translateY(-3px) rotate(-2deg);
@@ -28058,46 +28042,6 @@ body:has(.vr-app.is-dragging) {
     display: none;
   }
 }
-.vr-permission-toggle {
-  display: inline-flex;
-  align-items: center;
-  gap: 0;
-  border: 1px solid rgba(148, 163, 184, 0.18);
-  border-radius: 8px;
-  overflow: hidden;
-  background: rgba(39, 40, 44, 0.92);
-}
-.vr-permission-btn {
-  min-height: 28px;
-  padding: 0 10px;
-  font-size: 11px;
-  font-weight: 640;
-  color: #94a3b8;
-  background: transparent;
-  border: none;
-  border-radius: 0;
-  cursor: pointer;
-  transition: background 0.12s, color 0.12s;
-  white-space: nowrap;
-}
-.vr-permission-btn + .vr-permission-btn {
-  border-left: 1px solid rgba(148, 163, 184, 0.14);
-}
-.vr-permission-btn.is-active {
-  background: rgba(100, 116, 139, 0.28);
-  color: #f1f5f9;
-}
-.vr-permission-btn.is-danger {
-  color: #f59e0b;
-}
-.vr-permission-btn.is-danger.is-active {
-  background: rgba(245, 158, 11, 0.18);
-  color: #fbbf24;
-}
-.vr-permission-btn:hover:not(.is-active) {
-  background: rgba(148, 163, 184, 0.1);
-  color: #e2e8f0;
-}
 `;
   }
 });
@@ -28114,8 +28058,9 @@ function renderLocalUiHtml(state) {
     <meta name="viewport" content="width=device-width, initial-scale=1" />
     <meta name="theme-color" content="#050816" />
     <title>VibeRaven</title>
-    <link rel="icon" type="image/png" href="/report/assets/viberaven-mascot-idle.png" />
-    <link rel="apple-touch-icon" href="/report/assets/viberaven-mascot-idle.png" />
+    <link rel="icon" type="image/png" sizes="64x64" href="/report/assets/viberaven-favicon.png" />
+    <link rel="shortcut icon" type="image/png" href="/report/assets/viberaven-favicon.png" />
+    <link rel="apple-touch-icon" href="/report/assets/viberaven-mascot.png" />
     <style>${localUiCss}</style>
   </head>
   <body>
@@ -28378,6 +28323,19 @@ async function releaseChangelogBetween(cwd, fromRef, toRef) {
   });
   return { from: fromRef, to: toRef, fromLabel: fromRef, toLabel: toRef, entries };
 }
+async function releaseDiffContextBlock(cwd, releaseId) {
+  const ref = safeGitRef(releaseId);
+  if (!ref || ref === "workspace") return void 0;
+  if (!await gitRefExists(cwd, ref)) return void 0;
+  const comparison = await compareReleaseRefs(cwd, ref, "HEAD");
+  const stats = comparison.stats;
+  const diffPreview = comparison.diff.length > 6e3 ? comparison.diff.slice(0, 6e3) + "\n[diff truncated]" : comparison.diff;
+  return [
+    `Attached release diff (${comparison.fromLabel} -> ${comparison.toLabel}):`,
+    `Files changed: ${stats.files}; insertions: ${stats.insertions}; deletions: ${stats.deletions}`,
+    diffPreview
+  ].join("\n");
+}
 async function rollbackReleaseRef(cwd, targetRef) {
   if (!await gitRefExists(cwd, targetRef)) {
     return { ok: false, message: `Release ref "${targetRef}" was not found in this repo.`, checkedOut: "" };
@@ -28570,7 +28528,7 @@ async function detectLocalCliAgents(cwd, options = {}) {
       return {
         ...agent,
         installed,
-        connected: installed,
+        connected: agent.id === "terminal",
         source: simulateDisconnected ? "simulated" : installed ? "detected" : "fallback",
         models: cliModelDefaults(agent.id),
         setup: CLI_AGENT_SETUP[agent.id]
@@ -28588,6 +28546,60 @@ function isPlaceholderProjectName(value) {
   const normalized = value.trim().toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
   return normalized === "" || normalized === "project" || normalized === "npx-open-source-check" || normalized.startsWith("viberaven-local-ui");
 }
+async function readMcpEvidence(cwd) {
+  const candidates = MCP_CONFIG_PATHS.map((relativePath) => ({
+    source: relativePath.replace(/\\/g, "/"),
+    path: (0, import_node_path31.resolve)(cwd, relativePath)
+  }));
+  const home = process.env.USERPROFILE || process.env.HOME;
+  if (home) {
+    candidates.push({
+      source: "~/.codex/config.toml",
+      path: (0, import_node_path31.resolve)(home, ".codex", "config.toml")
+    });
+  }
+  const evidence = [];
+  for (const candidate of candidates) {
+    try {
+      const text = await (0, import_promises24.readFile)(candidate.path, "utf8");
+      if (/mcp/i.test(text)) evidence.push({ source: candidate.source, text });
+    } catch {
+    }
+  }
+  return evidence;
+}
+function mcpForProvider(provider2, evidence) {
+  const needles = MCP_PROVIDER_NEEDLES[provider2.id] ?? [provider2.id];
+  const match = evidence.find((item4) => {
+    const lower = item4.text.toLowerCase();
+    return needles.some((needle) => lower.includes(needle.toLowerCase()));
+  });
+  if (match) {
+    return {
+      status: "connected",
+      label: "MCP connected",
+      source: match.source,
+      connectCommand: MCP_CONNECT_COMMANDS[provider2.id],
+      capabilities: ["repo context", provider2.area, "provider-aware chat"]
+    };
+  }
+  return {
+    status: "disconnected",
+    label: "Connect MCP",
+    connectCommand: MCP_CONNECT_COMMANDS[provider2.id] ?? `Add a ${provider2.name} MCP server entry, then drag ${provider2.name} into chat.`,
+    capabilities: []
+  };
+}
+async function applyMcpDetection(state, cwd) {
+  const evidence = await readMcpEvidence(cwd);
+  return {
+    ...state,
+    providers: state.providers.map((provider2) => ({
+      ...provider2,
+      mcp: mcpForProvider(provider2, evidence)
+    }))
+  };
+}
 async function enrichProjectMetadata(state, cwd) {
   const packageJson = await readPackageJson2(cwd);
   const metadata = {
@@ -28596,7 +28608,7 @@ async function enrichProjectMetadata(state, cwd) {
   };
   const files = await listProjectFiles(cwd);
   const deps = dependencyNames(packageJson);
-  const detectedState = state.empty ? applyProviderDetection(state, deps, files) : state;
+  const detectedState = await applyMcpDetection(state.empty ? applyProviderDetection(state, deps, files) : state, cwd);
   const releases = await detectReleases(cwd, metadata.version);
   const missionCards = state.empty ? buildMissionCards(
     {
@@ -28707,19 +28719,19 @@ function parseAgentChatRequest(value) {
   if (rawCliId !== "codex" && rawCliId !== "claude" && rawCliId !== "gemini") return { error: "Unsupported coding CLI" };
   const prompt = stringField(value.prompt, 12e3);
   if (!prompt) return { error: "Agent chat prompt is required" };
-  const provider2 = isRecord7(value.provider) ? { area: stringField(value.provider.area, 120), name: stringField(value.provider.name, 120) } : void 0;
-  const release = isRecord7(value.release) ? { label: stringField(value.release.label, 120) } : void 0;
-  const rawPermMode = stringField(value.permissionMode, 20);
-  const permissionMode = rawPermMode === "full-access" ? "full-access" : "ask";
+  const provider2 = isRecord7(value.provider) ? { id: stringField(value.provider.id, 80), area: stringField(value.provider.area, 120), name: stringField(value.provider.name, 120) } : void 0;
+  const release = isRecord7(value.release) ? { id: stringField(value.release.id, 200), label: stringField(value.release.label, 120) } : void 0;
+  const requestedAccessMode = stringField(value.accessMode, 40);
+  const accessMode = requestedAccessMode === "ask" || requestedAccessMode === "approve" || requestedAccessMode === "full" ? requestedAccessMode : "approve";
   return {
     cliId: rawCliId,
     modelId: stringField(value.modelId, 120),
     reasoning: stringField(value.reasoning, 80),
     context: stringField(value.context, 80),
+    accessMode,
     prompt,
     displayPrompt: stringField(value.displayPrompt, 240),
     taskKind: stringField(value.taskKind, 40),
-    permissionMode,
     provider: provider2,
     release
   };
@@ -28762,22 +28774,28 @@ async function buildAgentChatPrompt(request, cwd) {
   const state = await readState(cwd);
   const executionBlock = taskKindExecutionBlock(request.taskKind);
   const cardsBlock = missionCardsContextBlock(state);
+  const providerState2 = request.provider?.id ? state.providers.find((provider2) => provider2.id === request.provider?.id) : state.providers.find((provider2) => provider2.name === request.provider?.name);
+  const mcp = providerState2?.mcp;
+  const releaseDiffBlock = await releaseDiffContextBlock(cwd, request.release?.id);
   const lines = [
     "You are VibeRaven Studio, a production-readiness coding agent for an open-source local runner.",
     `Project folder: ${cwd}`,
     request.modelId ? `Selected model label: ${request.modelId}` : void 0,
     request.reasoning ? `Reasoning: ${request.reasoning}` : void 0,
     request.context ? `Context: ${request.context}` : void 0,
+    `Access mode: ${request.accessMode ?? "approve"}`,
     request.provider?.name ? `Provider context: ${request.provider.area ?? "Provider"} / ${request.provider.name}` : void 0,
+    mcp ? `Provider MCP: ${mcp.label}${mcp.source ? ` (${mcp.source})` : ""}` : void 0,
     request.release?.label ? `Release context: ${request.release.label}` : void 0,
-    state.gate?.label ? `Gate: ${state.gate.label} (${state.gate.status ?? "unknown"})` : void 0,
+    releaseDiffBlock,
+    state.gate?.label ? `Project status: ${state.gate.label} (${state.gate.status ?? "unknown"})` : void 0,
     state.missionControl?.mainBlocker ? `Main blocker: ${state.missionControl.mainBlocker}` : void 0,
     executionBlock,
     cardsBlock,
     "",
     "Safety rules:",
     "- Stay scoped to this project folder.",
-    "- Explain risky or destructive changes before making them.",
+    (request.accessMode ?? "approve") === "ask" ? "- Ask before editing files, using the internet, running destructive commands, or changing provider settings." : (request.accessMode ?? "approve") === "full" ? "- Full access is enabled for this local project; still explain destructive changes before running them." : "- Edit project files when needed, but explain risky or destructive changes before making them.",
     "- Do not claim provider dashboard setup is complete from repo edits alone.",
     "- Keep the answer focused on production readiness.",
     "- Return only the final user-facing answer. Do not echo this prompt, session metadata, logs, or command transcripts.",
@@ -28811,24 +28829,19 @@ function insertCodexExecOptions(codexArgs, pairs) {
   const insertAt = execIndex >= 0 ? execIndex + 1 : codexArgs.length;
   codexArgs.splice(insertAt, 0, ...pairs);
 }
-function resolveCodexSandboxArgs(permissionMode, platform) {
-  if (permissionMode === "full-access") {
-    return ["--sandbox", "danger-full-access", "--ask-for-approval", "never"];
-  }
-  if (platform === "win32") {
-    return ["--sandbox", "danger-full-access", "--ask-for-approval", "on-request"];
-  }
-  return ["--sandbox", "workspace-write", "--ask-for-approval", "on-request"];
+function codexAccessFlags(accessMode) {
+  if (accessMode === "ask") return ["--sandbox", "workspace-write", "--ask-for-approval", "on-request"];
+  if (accessMode === "full") return ["--sandbox", "danger-full-access", "--ask-for-approval", "never"];
+  return ["--sandbox", "workspace-write", "--ask-for-approval", "on-failure"];
 }
-function commandForAgentChat(request, prompt, cwd, outputPath, platform = process.platform) {
-  const command = platform === "win32" ? `${request.cliId}.cmd` : request.cliId;
+function commandForAgentChat(request, prompt, cwd, outputPath) {
+  const command = process.platform === "win32" ? `${request.cliId}.cmd` : request.cliId;
   const promptArg = prompt.replace(/\s*\r?\n\s*/g, " ");
   const model = normalizeCliModelId(request.modelId);
   const effort = resolveCliReasoningEffort(request.cliId, request.reasoning);
-  const permissionMode = request.permissionMode ?? "ask";
   if (request.cliId === "gemini") {
     const geminiArgs = ["-p", promptArg, "--output-format", "text"];
-    if (permissionMode === "full-access") geminiArgs.push("--skip-trust");
+    if (request.accessMode !== "ask") geminiArgs.push("--skip-trust");
     if (model) geminiArgs.splice(0, 0, "-m", model);
     return { command, args: geminiArgs };
   }
@@ -28836,13 +28849,12 @@ function commandForAgentChat(request, prompt, cwd, outputPath, platform = proces
     const claudeArgs = ["-p", promptArg];
     if (model) claudeArgs.unshift("--model", model);
     if (effort) claudeArgs.unshift("--effort", effort);
-    if (permissionMode === "full-access") {
+    if (request.accessMode === "full") {
       claudeArgs.push("--dangerously-skip-permissions");
     }
     return { command, args: claudeArgs };
   }
-  const sandboxArgs = resolveCodexSandboxArgs(permissionMode, platform);
-  const codexArgs = ["--cd", cwd, ...sandboxArgs, "exec", "--color", "never"];
+  const codexArgs = ["--cd", cwd, ...codexAccessFlags(request.accessMode), "exec", "--color", "never"];
   const codexExecOptions = [];
   if (model) codexExecOptions.push("-m", model);
   if (effort) codexExecOptions.push("-c", `model_reasoning_effort="${effort}"`);
@@ -28983,7 +28995,7 @@ async function runLocalAction(cwd, intent) {
       "# VibeRaven preview rehearsal",
       "",
       `Project: ${projectName}`,
-      `Gate: ${gateLabel}`,
+      `Project status: ${gateLabel}`,
       `Blocker: ${blocker}`,
       "",
       "## Recording flow",
@@ -29583,7 +29595,7 @@ async function waitForServerShutdown() {
     process.once("SIGTERM", done);
   });
 }
-var import_node_http, import_node_child_process4, import_promises24, import_node_path31, CLI_AGENT_SETUP, CLI_AUTH_PROBE;
+var import_node_http, import_node_child_process4, import_promises24, import_node_path31, CLI_AGENT_SETUP, MCP_CONFIG_PATHS, MCP_PROVIDER_NEEDLES, MCP_CONNECT_COMMANDS, CLI_AUTH_PROBE;
 var init_server = __esm({
   "src/local-ui/server.ts"() {
     "use strict";
@@ -29624,6 +29636,30 @@ var init_server = __esm({
         docsUrl: "https://viberaven.dev"
       }
     };
+    MCP_CONFIG_PATHS = [
+      ".mcp.json",
+      "mcp.json",
+      (0, import_node_path31.join)(".cursor", "mcp.json"),
+      (0, import_node_path31.join)(".vscode", "mcp.json")
+    ];
+    MCP_PROVIDER_NEEDLES = {
+      supabase: ["supabase", "@supabase/mcp", "mcp-server-supabase"],
+      vercel: ["vercel"],
+      stripe: ["stripe"],
+      github: ["github"],
+      sentry: ["sentry"],
+      posthog: ["posthog"],
+      clerk: ["clerk"],
+      authjs: ["authjs", "next-auth", "nextauth"],
+      resend: ["resend"],
+      upstash: ["upstash"]
+    };
+    MCP_CONNECT_COMMANDS = {
+      supabase: "Add the Supabase MCP server to your local MCP config, then drag Supabase into chat.",
+      vercel: "Add a Vercel MCP server entry to your local MCP config, then drag Vercel into chat.",
+      stripe: "Add a Stripe MCP server entry to your local MCP config, then drag Stripe into chat.",
+      github: "Add the GitHub MCP server to your local MCP config, then drag GitHub into chat."
+    };
     CLI_AUTH_PROBE = {
       codex: "codex login status",
       claude: "claude auth status",
@@ -29646,11 +29682,7 @@ function buildNextActionBlock(tasks, loopState, plan) {
     return {
       ...base,
       type: "stalled",
-      title: "Loop stalled - no gap reduction after 2+ consecutive scans",
-      agentInstruction: "Stop the scan loop. Explain the blocker plainly, then either guide the provider/user action or report that no safe repo-code recipe is available.",
-      executionPlan: [
-        { kind: "stop", note: "Do not keep spending scans while the loop is stalled." }
-      ],
+      title: "Loop stalled \u2014 no gap reduction after 2+ consecutive scans",
       requiresUserAction: true,
       stallReason
     };
@@ -29659,67 +29691,42 @@ function buildNextActionBlock(tasks, loopState, plan) {
     return {
       ...base,
       type: "verify",
-      title: "Batch complete - run verify to rescan before next batch",
-      agentInstruction: "Run verify now, read the refreshed VibeRaven artifacts, then continue with the next safe repo fix or provider step. Do not stop at a summary.",
-      executionPlan: [
-        { kind: "verify", command: "viberaven_verify" },
-        { kind: "continue-loop", note: "After verify, continue until the gate is clear or a provider/user blocker remains." }
-      ],
+      title: "Batch complete \u2014 run verify to rescan before next batch",
       mcpTool: "viberaven_verify",
       mcpArgs: {},
       requiresUserAction: false
     };
   }
-  const repoCodeTask = tasks.find((task) => task.fixType === "repo-code" && !task.requiresUserAction);
+  const repoCodeTask = tasks.find((t) => t.fixType === "repo-code" && !t.requiresUserAction);
   if (repoCodeTask) {
-    const fallbackCommand = repoCodeTask.mcpArgs ? `npx -y viberaven --heal --apply --gap ${repoCodeTask.gapId} --yes` : void 0;
     return {
       ...base,
       type: "repo-code",
       gapId: repoCodeTask.gapId,
       title: repoCodeTask.title,
-      agentInstruction: "Apply this repo-code fix now using the MCP tool or fallback command, then continue the local VibeRaven loop. Do not stop at a summary.",
-      executionPlan: [
-        {
-          kind: "apply-repo-fix",
-          command: repoCodeTask.mcpTool ?? fallbackCommand,
-          note: "Patch only this gap and preserve unrelated user changes."
-        },
-        { kind: "continue-loop", note: "Apply remaining safe repo fixes until the batch is full, then verify once." }
-      ],
       mcpTool: repoCodeTask.mcpTool,
       mcpArgs: repoCodeTask.mcpArgs,
-      fallbackCommand,
+      fallbackCommand: repoCodeTask.mcpArgs ? `npx -y viberaven --heal --apply --gap ${repoCodeTask.gapId} --yes` : void 0,
       requiresUserAction: false
     };
   }
-  const providerTask = tasks.find((task) => task.fixType === "provider-action");
+  const providerTask = tasks.find((t) => t.fixType === "provider-action");
   if (providerTask) {
     return {
       ...base,
       type: "provider-action",
       gapId: providerTask.gapId,
       title: providerTask.title,
-      agentInstruction: "Open or present the provider step now. If browser/tool access is available, open the dashboard link for the user; otherwise show the exact step and copy values. Do not keep telling the user to verify until the provider step is done.",
-      executionPlan: [
-        { kind: "open-provider-step", note: "Use VIBERAVEN_PROVIDER_ACTION for the exact dashboard step and URL." },
-        { kind: "wait-for-user", note: "Wait for confirmation or read-only MCP evidence before verifying." }
-      ],
       requiresUserAction: true
     };
   }
-  const upgradeTask = tasks.find((task) => task.fixType === "upgrade-required");
+  const upgradeTask = tasks.find((t) => t.fixType === "upgrade-required");
   if (upgradeTask) {
     return {
       ...base,
       type: "upgrade-required",
       gapId: upgradeTask.gapId,
       title: upgradeTask.title,
-      agentInstruction: "Explain that this production lane needs an upgrade or connected provider evidence. Continue with any remaining unlocked repo-code fixes if present; otherwise stop cleanly.",
-      executionPlan: [
-        { kind: "upgrade", command: "https://viberaven.dev/pricing" },
-        { kind: "stop", note: "Do not pretend locked lanes or provider state were fixed locally." }
-      ],
       requiresUserAction: true,
       upgradeUrl: "https://viberaven.dev/pricing"
     };
@@ -29727,20 +29734,15 @@ function buildNextActionBlock(tasks, loopState, plan) {
   return {
     ...base,
     type: "done",
-    title: "All gaps resolved - production gate is clear",
-    agentInstruction: "The repo-code gate is clear. Run strict before deploy and still verify provider dashboard state through MCP or the provider dashboard.",
-    executionPlan: [
-      { kind: "verify", command: "npx -y viberaven --strict" },
-      { kind: "stop", note: "Do not deploy until provider dashboard state is verified where applicable." }
-    ],
+    title: "All gaps resolved \u2014 production gate is clear",
     requiresUserAction: false
   };
 }
 function resolveStallReason(tasks) {
   if (tasks.length === 0) return "no-recipes";
-  const allUpgradeOrEmpty = tasks.every((task) => task.fixType === "upgrade-required");
+  const allUpgradeOrEmpty = tasks.every((t) => t.fixType === "upgrade-required");
   if (allUpgradeOrEmpty) return "no-recipes";
-  const allProviderAction = tasks.every((task) => task.fixType === "provider-action");
+  const allProviderAction = tasks.every((t) => t.fixType === "provider-action");
   if (allProviderAction) return "provider-action-required";
   return "unknown";
 }
@@ -29765,7 +29767,7 @@ function buildProviderActionBlock(task) {
 }
 function printProviderActionBlock(tasks) {
   const task = tasks.find(
-    (entry) => entry.fixType === "provider-action" && entry.requiresUserAction === true
+    (t) => t.fixType === "provider-action" && t.requiresUserAction === true
   );
   if (!task) return;
   const block = buildProviderActionBlock(task);
@@ -29914,6 +29916,7 @@ Usage:
   viberaven              Open the local launch console for human TTY use
 
   viberaven ui [path]    Open the local launch console
+
   viberaven tui          Same interactive menu
 
   viberaven login [--api-url <url>]
@@ -30022,9 +30025,6 @@ function parseArgs(argv) {
     if (arg.startsWith("--")) {
       const equalsIndex = arg.indexOf("=");
       const key = equalsIndex === -1 ? arg.slice(2) : arg.slice(2, equalsIndex);
-      if (key === "pet") {
-        continue;
-      }
       if (equalsIndex !== -1) {
         flags[key] = arg.slice(equalsIndex + 1);
         continue;
@@ -30120,9 +30120,6 @@ function resolveDefaultEntrypointMode(options) {
   if (options.env.VIBERAVEN_AGENT === "1") return "agent-scan";
   return "local-ui";
 }
-function resolvePositionalCwd(positional) {
-  return positional[0] ? (0, import_node_path33.resolve)(process.cwd(), positional[0]) : process.cwd();
-}
 function formatScanJsonStdout(artifact) {
   return JSON.stringify(sanitizeArtifactForDisk(artifact), null, 2);
 }
@@ -30163,7 +30160,7 @@ async function cmdStatus(flags, positional) {
     console.log("Not signed in. Run: viberaven login");
     return 1;
   }
-  const startDir = resolvePositionalCwd(positional);
+  const startDir = positional[0] ? (0, import_node_path33.join)(process.cwd(), positional[0]) : process.cwd();
   let artifact;
   try {
     artifact = await loadLastArtifact(startDir);
@@ -30317,7 +30314,7 @@ async function cmdWatch(flags) {
   }
 }
 async function runScanCommand(flags, positional, options) {
-  const workspacePath = positional[0] ? resolvePositionalCwd(positional) : await resolveWorkspaceRoot(process.cwd());
+  const workspacePath = positional[0] ? (0, import_node_path33.join)(process.cwd(), positional[0]) : await resolveWorkspaceRoot(process.cwd());
   const apiBaseUrl = resolveApiBaseUrl(typeof flags["api-url"] === "string" ? flags["api-url"] : void 0);
   let accessToken;
   try {
@@ -30401,7 +30398,7 @@ async function runScanCommand(flags, positional, options) {
   return { exitCode: 0, artifacts: paths };
 }
 async function cmdReport(flags, positional) {
-  const startDir = resolvePositionalCwd(positional);
+  const startDir = positional[0] ? (0, import_node_path33.join)(process.cwd(), positional[0]) : process.cwd();
   try {
     const paths = await refreshReportFromDisk(startDir);
     console.log(`Report refreshed: ${paths.reportPath}`);
@@ -30423,7 +30420,7 @@ async function cmdReport(flags, positional) {
   }
 }
 async function cmdPrompt(flags, positional) {
-  const startDir = resolvePositionalCwd(positional);
+  const startDir = positional[0] ? (0, import_node_path33.join)(process.cwd(), positional[0]) : process.cwd();
   let artifact;
   try {
     artifact = await loadLastArtifact(startDir);
@@ -30520,7 +30517,7 @@ async function main() {
   const wantsJsonl = hasFlag(flags, "jsonl");
   const wantsStrict = hasFlag(flags, "strict");
   if (flags.condense) {
-    const cwd = resolvePositionalCwd(positional);
+    const cwd = positional[0] ? (0, import_node_path33.join)(process.cwd(), positional[0]) : process.cwd();
     const result = await runCondenseCommand({ cwd });
     console.log(`VibeRaven context map refreshed: ${result.contextMapPath}`);
     return 0;
@@ -30540,7 +30537,7 @@ async function main() {
   }
   if (!command && flags.verify === true && typeof flags.action === "string") {
     return runVerifyActionCommand({
-      cwd: resolvePositionalCwd(positional),
+      cwd: positional[0] ? (0, import_node_path33.join)(process.cwd(), positional[0]) : process.cwd(),
       actionId: flags.action
     });
   }
@@ -30577,7 +30574,7 @@ async function main() {
       env: process.env
     });
     if (mode === "local-ui") {
-      const cwd = resolvePositionalCwd(positional);
+      const cwd = positional[0] ? (0, import_node_path33.join)(process.cwd(), positional[0]) : process.cwd();
       const handle = await startLocalUiServer({ cwd });
       console.log(`VibeRaven local UI: ${handle.url}`);
       await waitForServerShutdown();
@@ -30597,7 +30594,7 @@ async function main() {
       await runInteractiveSession();
       return 0;
     case "ui": {
-      const cwd = resolvePositionalCwd(positional);
+      const cwd = positional[0] ? (0, import_node_path33.join)(process.cwd(), positional[0]) : process.cwd();
       const handle = await startLocalUiServer({ cwd });
       console.log(`VibeRaven local UI: ${handle.url}`);
       await waitForServerShutdown();
@@ -30614,19 +30611,19 @@ async function main() {
       return cmdStatus(flags, positional);
     case "actions":
       return runActionsCommand({
-        cwd: resolvePositionalCwd(positional),
+        cwd: positional[0] ? (0, import_node_path33.join)(process.cwd(), positional[0]) : process.cwd(),
         json: Boolean(flags.json)
       });
     case "preview":
       return runPreviewCommand({
-        cwd: resolvePositionalCwd(positional),
+        cwd: positional[0] ? (0, import_node_path33.join)(process.cwd(), positional[0]) : process.cwd(),
         agentMode: flags["agent-mode"] === true,
         json: Boolean(flags.json)
       });
     case "next":
       return runNextCommand({
         json: Boolean(flags.json),
-        cwd: resolvePositionalCwd(positional)
+        cwd: positional[0] ? (0, import_node_path33.join)(process.cwd(), positional[0]) : process.cwd()
       });
     case "guide": {
       const provider2 = positional[0];
@@ -30664,7 +30661,7 @@ async function main() {
     case "provider-verify":
       return cmdProviderVerify(flags, positional);
     case "init": {
-      const cwd = resolvePositionalCwd(positional);
+      const cwd = positional[0] ? (0, import_node_path33.join)(process.cwd(), positional[0]) : process.cwd();
       const agents = typeof flags.agents === "string" ? flags.agents : void 0;
       return runInitCommand({
         cwd,
@@ -30678,7 +30675,7 @@ async function main() {
         return 1;
       }
       return runDoctorAgentsCommand({
-        cwd: resolvePositionalCwd(positional)
+        cwd: positional[0] ? (0, import_node_path33.join)(process.cwd(), positional[0]) : process.cwd()
       });
     case "validate-npm-package":
       return runValidateNpmPackageCommand({
@@ -30691,7 +30688,7 @@ async function main() {
         return 1;
       }
       return runAuditCommand({
-        cwd: resolvePositionalCwd(positional),
+        cwd: positional[0] ? (0, import_node_path33.join)(process.cwd(), positional[0]) : process.cwd(),
         json: Boolean(flags.json)
       });
     default: