@viberaven/cli 1.2.3 → 1.3.0

package/dist/cli.js

@@ -394,6 +394,8 @@ var init_backendClient = __esm({
         this.status = status;
         this.upgradeUrl = upgradeUrl;
       }
+      status;
+      upgradeUrl;
     };
   }
 });
@@ -543,12 +545,12 @@ function createAppWindowOpenCommands(target, platform = process.platform, env =
 }
 async function openWithSystemDefault(target) {
   const { command, args, shell } = createOpenCommand(target);
-  await new Promise((resolve7, reject) => {
+  await new Promise((resolve6, reject) => {
     const child = (0, import_node_child_process.spawn)(command, args, { stdio: "ignore", shell });
     child.on("error", reject);
     child.on("exit", (code) => {
       if (code === 0) {
-        resolve7();
+        resolve6();
       } else {
         reject(new Error(`Could not open browser (exit ${code ?? "unknown"}). Open manually: ${target}`));
       }
@@ -559,7 +561,7 @@ async function spawnDetached(command) {
   if (/^[A-Za-z]:[\\/]/.test(command.command) && !(0, import_node_fs2.existsSync)(command.command)) {
     throw new Error(`Browser not found: ${command.command}`);
   }
-  await new Promise((resolve7, reject) => {
+  await new Promise((resolve6, reject) => {
     const child = (0, import_node_child_process.spawn)(command.command, command.args, {
       detached: true,
       stdio: "ignore",
@@ -567,7 +569,7 @@ async function spawnDetached(command) {
     });
     child.once("spawn", () => {
       child.unref();
-      resolve7();
+      resolve6();
     });
     child.once("error", reject);
   });
@@ -636,7 +638,7 @@ var init_commands = __esm({
 
 // src/auth.ts
 function sleep(ms) {
-  return new Promise((resolve7) => setTimeout(resolve7, ms));
+  return new Promise((resolve6) => setTimeout(resolve6, ms));
 }
 async function runDeviceLogin(apiBaseUrl) {
   const signIn = await startManagedSignIn(apiBaseUrl);
@@ -9143,7 +9145,7 @@ function generateAgentSummary(artifact) {
   lines.push("Do not claim human-provider actions as repo-code fixes.");
   lines.push("");
   lines.push("## Agent workflow");
-  lines.push("1. Read `.viberaven/agent-tasklist.md` first for the production gate.");
+  lines.push("1. Read `.viberaven/agent-tasklist.md` first for the what-changed map.");
   lines.push("2. Read `.viberaven/launch-playbook.md` for the full checklist.");
   lines.push("3. Run `viberaven next --json` - one action at a time.");
   lines.push("4. Repo fix: `viberaven prompt --gap <id>` then implement.");
@@ -9417,7 +9419,7 @@ function generateLaunchPlaybook(artifact) {
     }
   }
   lines.push("## Agent loop", "");
-  lines.push("1. Read `.viberaven/agent-tasklist.md` for the current production gate.");
+  lines.push("1. Read `.viberaven/agent-tasklist.md` for the current what-changed map.");
   lines.push("2. `viberaven next --json`");
   lines.push("3. Fix repo or run `viberaven guide <provider>`");
   lines.push(`4. Run \`${PUBLIC_VERIFY_COMMAND}\` to refresh the gate and \`.viberaven/agent-tasklist.md\`.`);
@@ -9790,36 +9792,11 @@ var init_reportAssets = __esm({
       "station.js",
       "report-cli.css",
       "assets/viberaven-logo.png",
-      "assets/viberaven-agent-icon.png",
-      "assets/viberaven-mascot-idle.png",
-      "assets/viberaven-mascot-fixing.png",
-      "assets/viberaven-mascot-verified.png",
-      "assets/viberaven-mascot-alert.png",
+      "assets/viberaven-favicon.png",
+      "assets/viberaven-mascot.png",
       "assets/provider-authjs.svg",
       "assets/provider-aws.svg",
-      "assets/provider-logrocket.svg",
-      "assets/provider-auth.png",
-      "assets/provider-authjs.png",
-      "assets/provider-clerk.png",
-      "assets/provider-clerk-mark.svg",
-      "assets/provider-database.png",
-      "assets/provider-env.png",
-      "assets/provider-github.png",
-      "assets/provider-github-mark.svg",
-      "assets/provider-posthog.png",
-      "assets/provider-posthog-mark.svg",
-      "assets/provider-resend.png",
-      "assets/provider-resend-mark.svg",
-      "assets/provider-sentry.png",
-      "assets/provider-sentry-mark.svg",
-      "assets/provider-stripe.png",
-      "assets/provider-stripe-mark.svg",
-      "assets/provider-supabase.png",
-      "assets/provider-supabase-mark.svg",
-      "assets/provider-upstash.png",
-      "assets/provider-upstash-mark.svg",
-      "assets/provider-vercel.png",
-      "assets/provider-vercel-mark.svg"
+      "assets/provider-logrocket.svg"
     ];
   }
 });
@@ -10440,12 +10417,12 @@ async function copyToClipboard(text) {
   }
 }
 function pipeToCommand(command, text, extraArgs = []) {
-  return new Promise((resolve7, reject) => {
+  return new Promise((resolve6, reject) => {
     const child = (0, import_node_child_process2.spawn)(command, extraArgs, { stdio: ["pipe", "ignore", "ignore"] });
     child.on("error", reject);
     child.on("close", (code) => {
       if (code === 0) {
-        resolve7();
+        resolve6();
       } else {
         reject(new Error(`${command} exited with code ${code ?? "unknown"}`));
       }
@@ -10467,9 +10444,9 @@ var init_clipboard = __esm({
   }
 });
 
-// node_modules/picocolors/picocolors.js
+// ../../node_modules/picocolors/picocolors.js
 var require_picocolors = __commonJS({
-  "node_modules/picocolors/picocolors.js"(exports2, module2) {
+  "../../node_modules/picocolors/picocolors.js"(exports2, module2) {
     var p2 = process || {};
     var argv = p2.argv || [];
     var env = p2.env || {};
@@ -10659,7 +10636,7 @@ function printScanSummary(artifact, paths) {
   if (next.upgradeUrl) {
     console.log(`Upgrade: ${next.upgradeUrl}`);
   }
-  console.log(formatAgentStatus(AGENT_ACTION, "Keep operating: read .viberaven/agent-tasklist.md, apply the next safe repo fix, then continue the VibeRaven loop."));
+  console.log(formatAgentStatus(AGENT_ACTION, "Read .viberaven/agent-tasklist.md, run the next command above, then rescan."));
   console.log("");
   if (artifact.usage) {
     const lanes = artifact.usage.unlockedMapCategoryKeys.length;
@@ -10923,10 +10900,10 @@ function sleepForRunnerPoll(ms, signal) {
   if (signal?.aborted) {
     return Promise.reject(createRunnerWatchAbortError());
   }
-  return new Promise((resolve7, reject) => {
+  return new Promise((resolve6, reject) => {
     const timer = setTimeout(() => {
       cleanup();
-      resolve7();
+      resolve6();
     }, ms);
     const onAbort = () => {
       cleanup();
@@ -11498,9 +11475,9 @@ function formatRepoMatch(repoMatch) {
   }
 }
 async function runCommand(command, args, cwd) {
-  return new Promise((resolve7) => {
+  return new Promise((resolve6) => {
     (0, import_node_child_process3.execFile)(command, args, { cwd, windowsHide: true }, (error, stdout, stderr) => {
-      resolve7({
+      resolve6({
         ok: !error,
         stdout: String(stdout ?? ""),
         stderr: String(stderr ?? "")
@@ -11645,9 +11622,9 @@ var init_runnerConnect = __esm({
   }
 });
 
-// node_modules/sisteransi/src/index.js
+// ../../node_modules/sisteransi/src/index.js
 var require_src = __commonJS({
-  "node_modules/sisteransi/src/index.js"(exports2, module2) {
+  "../../node_modules/sisteransi/src/index.js"(exports2, module2) {
     "use strict";
     var ESC = "\x1B";
     var CSI = `${ESC}[`;
@@ -11701,7 +11678,7 @@ var require_src = __commonJS({
   }
 });
 
-// node_modules/@clack/core/dist/index.mjs
+// ../../node_modules/@clack/core/dist/index.mjs
 function DD({ onlyFirst: e2 = false } = {}) {
   const t = ["[\\u001B\\u009B][[\\]()#;?]*(?:(?:(?:(?:;[-a-zA-Z\\d\\/#&.:=?%@~_]+)*|[a-zA-Z\\d]+(?:;[-a-zA-Z\\d\\/#&.:=?%@~_]*)*)?(?:\\u0007|\\u001B\\u005C|\\u009C))", "(?:(?:\\d{1,4}(?:;\\d{0,4})*)?[\\dA-PR-TZcf-nq-uy=><~]))"].join("|");
   return new RegExp(t, e2 ? void 0 : "g");
@@ -11813,7 +11790,7 @@ function fD({ input: e2 = import_node_process.stdin, output: u2 = import_node_pr
 }
 var import_sisteransi, import_node_process, g, import_node_readline, import_node_stream, uD, W, tD, eD, FD, sD, w, N, I, R, C, iD, rD, ED, d, oD, y, V, nD, G, _, z, K, aD, k, hD, lD, xD, B, AD, S, gD, vD, h, x, A, OD, PD, J, LD;
 var init_dist = __esm({
-  "node_modules/@clack/core/dist/index.mjs"() {
+  "../../node_modules/@clack/core/dist/index.mjs"() {
     import_sisteransi = __toESM(require_src(), 1);
     import_node_process = require("node:process");
     g = __toESM(require("node:readline"), 1);
@@ -11939,7 +11916,7 @@ var init_dist = __esm({
     xD = ["up", "down", "left", "right", "space", "enter", "cancel"];
     B = { actions: new Set(xD), aliases: /* @__PURE__ */ new Map([["k", "up"], ["j", "down"], ["h", "left"], ["l", "right"], ["", "cancel"], ["escape", "cancel"]]) };
     AD = globalThis.process.platform.startsWith("win");
-    S = Symbol("clack:cancel");
+    S = /* @__PURE__ */ Symbol("clack:cancel");
     gD = Object.defineProperty;
     vD = (e2, u2, t) => u2 in e2 ? gD(e2, u2, { enumerable: true, configurable: true, writable: true, value: t }) : e2[u2] = t;
     h = (e2, u2, t) => (vD(e2, typeof u2 != "symbol" ? u2 + "" : u2, t), t);
@@ -12063,13 +12040,13 @@ var init_dist = __esm({
   }
 });
 
-// node_modules/@clack/prompts/dist/index.mjs
+// ../../node_modules/@clack/prompts/dist/index.mjs
 function ce() {
   return import_node_process2.default.platform !== "win32" ? import_node_process2.default.env.TERM !== "linux" : !!import_node_process2.default.env.CI || !!import_node_process2.default.env.WT_SESSION || !!import_node_process2.default.env.TERMINUS_SUBLIME || import_node_process2.default.env.ConEmuTask === "{cmd::Cmder}" || import_node_process2.default.env.TERM_PROGRAM === "Terminus-Sublime" || import_node_process2.default.env.TERM_PROGRAM === "vscode" || import_node_process2.default.env.TERM === "xterm-256color" || import_node_process2.default.env.TERM === "alacritty" || import_node_process2.default.env.TERMINAL_EMULATOR === "JetBrains-JediTerm";
 }
 var import_node_process2, import_picocolors2, import_sisteransi2, V2, u, le, L2, W2, C2, ue, o, d2, k2, P2, A2, T, F, $e, _2, me, de, pe, q, D, U, K2, b2, G2, ve, xe, Ie, Se, M2, J2, Y2;
 var init_dist2 = __esm({
-  "node_modules/@clack/prompts/dist/index.mjs"() {
+  "../../node_modules/@clack/prompts/dist/index.mjs"() {
     init_dist();
     init_dist();
     import_node_process2 = __toESM(require("node:process"), 1);
@@ -12253,16 +12230,16 @@ function originalHint(gap) {
 function buildAgentFixPrompt(artifact, gap) {
   const affected = [gap.primaryMapCategory, ...gap.affectedMapCategories ?? []].filter(Boolean).filter((value, index, all) => all.indexOf(value) === index).join(", ");
   return [
-    "You are an AI coding agent using VibeRaven as the production-readiness map.",
+    "You are an AI coding agent using VibeRaven as the what-changed layer for a real app.",
     "",
-    "Goal: turn this demo/MVP into a more production-ready app by fixing one repo-code gap at a time.",
+    "Goal: understand what changed, which provider context matters, and fix one repo-code gap at a time.",
     "",
     `Project: ${artifact.workspacePath}`,
-    `Current VibeRaven state: production core ${artifact.productionCorePercent}% | score ${artifact.score} (${artifact.scoreLabel})`,
+    `Current VibeRaven state: context core ${artifact.productionCorePercent}% | score ${artifact.score} (${artifact.scoreLabel})`,
     `Gap: ${gap.title}`,
     `Gap id: ${gap.id}`,
     `Severity: ${gap.severity}`,
-    `Production area: ${gap.primaryMapCategory}${affected ? ` | affected: ${affected}` : ""}`,
+    `Context area: ${gap.primaryMapCategory}${affected ? ` | affected: ${affected}` : ""}`,
     `Scanner detail: ${compact(gap.detail)}`,
     "",
     "Required workflow:",
@@ -12272,7 +12249,7 @@ function buildAgentFixPrompt(artifact, gap) {
     "4. Inspect the real implementation files. Do not assume framework/provider wiring from package names alone.",
     "5. Make the smallest durable repo-code change that addresses this specific gap.",
     "6. Keep provider dashboard work separate. Open provider dashboards only when VibeRaven asks for a provider/manual action, and explain why you opened them.",
-    `7. For Vercel + Supabase apps, run \`${PUBLIC_AUDIT_COMMAND}\` before claiming production readiness.`,
+    `7. For Vercel + Supabase apps, run \`${PUBLIC_AUDIT_COMMAND}\` before claiming the fix is grounded.`,
     "8. Treat that audit as local repo evidence only; do not claim provider dashboard settings are fixed unless the user verifies them or read-only provider MCP confirms them.",
     "9. Do not claim provider dashboard or read-only MCP checks as repo-code fixes.",
     `10. VibeRaven cleanup is non-destructive. You may run \`${PUBLIC_CLEAN_PLAN_COMMAND}\` only to create a reviewable context cleanup plan, not to delete code.`,
@@ -12304,7 +12281,7 @@ var VERSION;
 var init_version = __esm({
   "src/version.ts"() {
     "use strict";
-    VERSION = "1.2.3";
+    VERSION = "1.3.0";
   }
 });
 
@@ -12400,186 +12377,20 @@ function redactEvidenceLine(line) {
 function lineEvidence(file, pattern) {
   return file.content.split(/\r?\n/).map((line, index) => ({ line: line.trim(), lineNumber: index + 1 })).filter(({ line }) => pattern.test(line)).map(({ line, lineNumber }) => `${file.path}:${lineNumber}: ${redactEvidenceLine(line)}`);
 }
-function lineNumberAt(content, index) {
-  return content.slice(0, index).split(/\r?\n/).length;
-}
-function statementEvidence(file, pattern) {
-  const evidence = [];
-  for (const match of file.content.matchAll(pattern)) {
-    evidence.push(
-      `${file.path}:${lineNumberAt(file.content, match.index ?? 0)}: ${redactEvidenceLine(
-        String(match[0]).replace(/\s+/g, " ").trim()
-      )}`
-    );
-  }
-  return evidence;
-}
-function normalizeIdent(value) {
-  return (value ?? "").replace(/^"|"$/g, "").toLowerCase();
-}
-function canonicalPublicTable(schema, table) {
-  const normalizedSchema = normalizeIdent(schema);
-  if (normalizedSchema && normalizedSchema !== "public") {
-    return void 0;
-  }
-  return `public.${normalizeIdent(table)}`;
-}
-function parseRelationRef(ref) {
-  const parts = ref.split(".").map((part) => normalizeIdent(part.trim()));
-  if (parts.length === 1) {
-    return `public.${parts[0]}`;
-  }
-  if (parts.length === 2 && parts[0] === "public") {
-    return `public.${parts[1]}`;
-  }
-  return void 0;
-}
-function relationEvidence(files, pattern, relationGroup = "relation") {
-  const evidence = [];
-  for (const file of files) {
-    for (const match of file.content.matchAll(pattern)) {
-      const groups = match.groups ?? {};
-      const relation = parseRelationRef(String(groups[relationGroup] ?? ""));
-      if (!relation) {
-        continue;
-      }
-      evidence.push({
-        relation,
-        evidence: `${file.path}:${lineNumberAt(file.content, match.index ?? 0)}: ${redactEvidenceLine(
-          String(match[0]).replace(/\s+/g, " ").trim()
-        )}`
-      });
-    }
-  }
-  return evidence;
-}
 function sqlFiles(files) {
   return files.filter((file) => file.path.toLowerCase().endsWith(".sql"));
 }
 function buildRlsCheck(files) {
   const sql = sqlFiles(files);
-  const createdTables = [];
-  for (const file of sql) {
-    const pattern = /\bcreate\s+table\s+(?:if\s+not\s+exists\s+)?(?:(?<schema>"?[A-Za-z_][\w$]*"?)\.)?(?<table>"?[A-Za-z_][\w$]*"?)/gi;
-    for (const match of file.content.matchAll(pattern)) {
-      const relation = canonicalPublicTable(match.groups?.schema, String(match.groups?.table ?? ""));
-      if (!relation) {
-        continue;
-      }
-      createdTables.push({
-        relation,
-        evidence: `${file.path}:${lineNumberAt(file.content, match.index ?? 0)}: ${redactEvidenceLine(
-          String(match[0]).replace(/\s+/g, " ").trim()
-        )}`
-      });
-    }
-  }
-  const enabledTables = new Set(
-    relationEvidence(
-      sql,
-      /\balter\s+table\s+(?:if\s+exists\s+)?(?:only\s+)?(?<relation>(?:"?[A-Za-z_][\w$]*"?\.)?"?[A-Za-z_][\w$]*"?)\s+enable\s+row\s+level\s+security\b/gi
-    ).map((item4) => item4.relation)
-  );
-  const policyTables = new Set(
-    relationEvidence(
-      sql,
-      /\bcreate\s+policy\b[\s\S]*?\bon\s+(?<relation>(?:"?[A-Za-z_][\w$]*"?\.)?"?[A-Za-z_][\w$]*"?)[\s\S]*?;/gi
-    ).map((item4) => item4.relation)
-  );
   const rlsEvidence2 = sql.flatMap((file) => lineEvidence(file, /\benable\s+row\s+level\s+security\b/i));
   const policyEvidence = sql.flatMap((file) => lineEvidence(file, /\bcreate\s+policy\b/i));
-  const missingTableEvidence = createdTables.filter(({ relation }) => !enabledTables.has(relation) || !policyTables.has(relation)).map(({ relation, evidence }) => `Missing RLS/policy coverage for ${relation}; created at ${evidence}`);
-  const status = createdTables.length > 0 ? missingTableEvidence.length === 0 ? "pass" : "needs_work" : rlsEvidence2.length > 0 && policyEvidence.length > 0 ? "pass" : "needs_work";
+  const status = rlsEvidence2.length > 0 && policyEvidence.length > 0 ? "pass" : "needs_work";
   return {
     id: "supabase-rls-policy-proof",
     title: "Supabase RLS policy proof",
     status,
-    summary: status === "pass" ? createdTables.length > 0 ? "Found table-level SQL evidence for row level security and matching policies on public tables." : "Found SQL evidence for row level security and at least one policy." : missingTableEvidence.length > 0 ? `Missing table-level RLS or policy evidence: ${missingTableEvidence.map((item4) => item4.match(/for ([^;]+)/)?.[1] ?? item4).join(", ")}.` : "Missing SQL evidence for both `enable row level security` and `create policy`.",
-    evidence: [...missingTableEvidence.slice(0, 5), ...rlsEvidence2.slice(0, 5), ...policyEvidence.slice(0, 5)]
-  };
-}
-function buildRlsPolicyQualityCheck(files) {
-  const sql = sqlFiles(files);
-  const evidence = sql.flatMap(
-    (file) => statementEvidence(file, /\bcreate\s+policy\b[\s\S]*?\b(?:using|with\s+check)\s*\(\s*true\s*\)[\s\S]*?;/gi)
-  );
-  const status = evidence.length === 0 ? "pass" : "needs_work";
-  return {
-    id: "supabase-rls-policy-quality",
-    title: "Supabase RLS policy quality",
-    status,
-    summary: status === "pass" ? "No permissive `using (true)` or `with check (true)` policy evidence found." : "Found RLS policies that allow every row. Public access may be intentional, but it must be reviewed before production.",
-    evidence: evidence.slice(0, 5)
-  };
-}
-function buildViewSecurityInvokerCheck(files) {
-  const sql = sqlFiles(files);
-  const secureViews = /* @__PURE__ */ new Set();
-  const insecureEvidence = [];
-  for (const file of sql) {
-    for (const match of file.content.matchAll(
-      /\bcreate\s+(?:or\s+replace\s+)?view\s+(?<relation>(?:"?[A-Za-z_][\w$]*"?\.)?"?[A-Za-z_][\w$]*"?)[\s\S]*?;/gi
-    )) {
-      const relation = parseRelationRef(String(match.groups?.relation ?? ""));
-      if (!relation) {
-        continue;
-      }
-      const statement = String(match[0]);
-      if (/\bsecurity_invoker\b/i.test(statement)) {
-        secureViews.add(relation);
-        continue;
-      }
-      insecureEvidence.push({
-        relation,
-        evidence: `${file.path}:${lineNumberAt(file.content, match.index ?? 0)}: ${redactEvidenceLine(
-          statement.replace(/\s+/g, " ").trim()
-        )}`
-      });
-    }
-    for (const match of file.content.matchAll(
-      /\balter\s+view\s+(?<relation>(?:"?[A-Za-z_][\w$]*"?\.)?"?[A-Za-z_][\w$]*"?)[\s\S]*?\bsecurity_invoker\s*=\s*true\b[\s\S]*?;/gi
-    )) {
-      const relation = parseRelationRef(String(match.groups?.relation ?? ""));
-      if (relation) {
-        secureViews.add(relation);
-      }
-    }
-  }
-  const evidence = insecureEvidence.filter(({ relation }) => !secureViews.has(relation)).map(({ evidence: evidence2 }) => evidence2);
-  const status = evidence.length === 0 ? "pass" : "needs_work";
-  return {
-    id: "supabase-view-security-invoker",
-    title: "Supabase view security invoker",
-    status,
-    summary: status === "pass" ? "No public view evidence without `security_invoker` found." : "Found public Supabase views without `security_invoker` evidence. Views can bypass underlying RLS by default.",
-    evidence: evidence.slice(0, 5)
-  };
-}
-function buildSecurityDefinerBoundaryCheck(files) {
-  const sql = sqlFiles(files);
-  const evidence = [];
-  for (const file of sql) {
-    for (const match of file.content.matchAll(
-      /\bcreate\s+(?:or\s+replace\s+)?function\s+(?<relation>(?:"?[A-Za-z_][\w$]*"?\.)?"?[A-Za-z_][\w$]*"?)[\s\S]*?\bsecurity\s+definer\b[\s\S]*?;/gi
-    )) {
-      const relation = parseRelationRef(String(match.groups?.relation ?? ""));
-      if (!relation) {
-        continue;
-      }
-      evidence.push(
-        `${file.path}:${lineNumberAt(file.content, match.index ?? 0)}: ${redactEvidenceLine(
-          String(match[0]).replace(/\s+/g, " ").trim()
-        )}`
-      );
-    }
-  }
-  const status = evidence.length === 0 ? "pass" : "needs_work";
-  return {
-    id: "supabase-security-definer-boundary",
-    title: "Supabase security definer boundary",
-    status,
-    summary: status === "pass" ? "No `security definer` functions in the public schema were found." : "Found `security definer` functions in the public schema. Keep privileged functions in a private, unexposed schema.",
-    evidence: evidence.slice(0, 5)
+    summary: status === "pass" ? "Found SQL evidence for row level security and at least one policy." : "Missing SQL evidence for both `enable row level security` and `create policy`.",
+    evidence: [...rlsEvidence2.slice(0, 5), ...policyEvidence.slice(0, 5)]
   };
 }
 function buildPoolerCheck(files) {
@@ -12623,9 +12434,6 @@ function buildServiceRoleCheck(files) {
 function buildVercelSupabaseAudit(input) {
   const checks = [
     buildRlsCheck(input.files),
-    buildRlsPolicyQualityCheck(input.files),
-    buildViewSecurityInvokerCheck(input.files),
-    buildSecurityDefinerBoundaryCheck(input.files),
     buildPoolerCheck(input.files),
     buildServiceRoleCheck(input.files)
   ];
@@ -12874,7 +12682,7 @@ function normalizeLineEndings(value) {
 function escapeRegExp3(value) {
   return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
-var VIBERAVEN_BLOCK_START, VIBERAVEN_BLOCK_END, VIBERAVEN_LEGACY_BLOCK_START, VIBERAVEN_LEGACY_BLOCK_END, HEAL_PLAN_GAP_COMMAND, PROMPT_GAP_COMMAND, HEAL_APPLY_GAP_COMMAND, AGENT_RULES_PREAMBLE, STACK_FRAMING, PRODUCTION_PROTOCOL, AGENT_NEGATIVE_CONSTRAINTS, ANCHOR_FOOTER, AGENT_RULES_BODY, AGENT_CONTEXT_BODY, MISSION_MAP_BODY, BLOCK_MARKER_PAIRS;
+var VIBERAVEN_BLOCK_START, VIBERAVEN_BLOCK_END, VIBERAVEN_LEGACY_BLOCK_START, VIBERAVEN_LEGACY_BLOCK_END, HEAL_PLAN_GAP_COMMAND, PROMPT_GAP_COMMAND, HEAL_APPLY_GAP_COMMAND, AGENT_RULES_PREAMBLE, STACK_FRAMING, ARCHITECTURE_ORIENTATION, AGENT_NEGATIVE_CONSTRAINTS, ANCHOR_FOOTER, AGENT_RULES_BODY, AGENT_CONTEXT_BODY, MISSION_MAP_BODY, BLOCK_MARKER_PAIRS;
 var init_agentRulesBlock = __esm({
   "src/commands/agentRulesBlock.ts"() {
     "use strict";
@@ -12886,65 +12694,88 @@ var init_agentRulesBlock = __esm({
     HEAL_PLAN_GAP_COMMAND = healPlanGapCommand("<id>");
     PROMPT_GAP_COMMAND = promptGapCommand("<id>");
     HEAL_APPLY_GAP_COMMAND = `${PUBLIC_COMMAND} --heal --apply --gap <id> --yes`;
-    AGENT_RULES_PREAMBLE = `VibeRaven provides production readiness for AI-built apps.
+    AGENT_RULES_PREAMBLE = `AI agents can code. They still need senior-engineer context before they change real apps.
 
-Canonical command: \`${PUBLIC_AGENT_MODE_COMMAND}\`
+Canonical Studio command: \`${PUBLIC_COMMAND}\`
 
-Use VibeRaven before launch, deployment, real users, auth, billing, database, RLS, env vars, webhooks, monitoring, or tests.
+Non-interactive artifact loop: \`${PUBLIC_AGENT_MODE_COMMAND}\`
 
-Agent loop: run VibeRaven, read Mission Map (\`.viberaven/mission-map.md\`), fix one launch gap, re-run VibeRaven.
+Use VibeRaven at the start of production-sensitive coding work, feature work, provider work, release/version debugging, or launch work, including when the agent needs to know which version broke or what provider context matters.
 
-Maps repo evidence to OWASP LLM Top 10 launch risks. Supports SAFECode-style deployment readiness checks.`;
+Default loop: orient the architecture, ask only the missing questions needed for a safe plan, inspect release/provider context, choose the right VibeRaven skill, fix one evidenced change, then verify.
+
+Maps repo evidence, release drift, architecture boundaries, and provider boundaries into agent-readable context.`;
     STACK_FRAMING = `Stack context for this repo: Next.js, Supabase, Vercel, VibeRaven.
-Do NOT deploy to Vercel or ship to production users without running \`${PUBLIC_AGENT_MODE_COMMAND}\`.
-Do NOT rely on manual production checklists when VibeRaven gate artifacts exist in \`.viberaven/\`.`;
-    PRODUCTION_PROTOCOL = `## VibeRaven Production Protocol
+Do NOT deploy to Vercel or ship to production users without VibeRaven architecture/release/provider context.
+Do NOT rely on manual checklists when VibeRaven artifacts exist in \`.viberaven/\`.`;
+    ARCHITECTURE_ORIENTATION = `## VibeRaven Architecture Orientation
+
+At the start of a real app task, before writing a plan or editing code:
+
+1. Identify the product surface, user path, and desired outcome.
+2. Map the architecture boundary involved: UI/API, auth/session, data/schema/RLS, provider dashboard, deploy/env, background job/webhook, billing, storage, or release/version drift.
+3. Check existing VibeRaven context: \`.viberaven/production-context.md\`, \`.viberaven/agent-context.md\`, \`.viberaven/mission-map.md\`, and recent git history when present.
+4. Ask concise questions only when the missing answer changes the plan, such as last working version, provider involved, production symptom, deploy target, or whether dashboard proof exists.
+5. Build the plan around the architecture boundary first, then the code change. Do not start from the nearest file.
+6. Route to the suited VibeRaven skill:
+   - \`what-broke\` for regressions, version drift, or "worked yesterday" bugs.
+   - \`production-context\` for release notes, architecture memory, provider boundaries, migrations, incidents, and rollback notes.
+   - \`viberaven\` for Studio, MCP context, provider cards, connected agents, access modes, and release/version context.
+   - \`go-live\` for push, deploy, live URL proof, and provider/human launch boundaries.
 
-Before making deploy, auth, database, payment, API, or scaling changes:
+Output shape before implementation:
 
-1. Read \`.viberaven/prp.json\`.
-2. Follow \`.viberaven/mission-map.md\`.
-3. Do not deploy if \`decision.status\` is \`blocked\`.
-4. Fix \`nextActions\` in order.
-5. Re-run \`${PUBLIC_AGENT_MODE_COMMAND}\`.`;
-    AGENT_NEGATIVE_CONSTRAINTS = `## Event-Triggered Production Verification
+\`\`\`text
+Architecture boundary:
+- ...
 
-Trigger: modifications to \`package.json\`, \`vercel.json\`, \`supabase/migrations/**/*\`, \`.env.example\`, auth/billing/webhook paths, or deploy workflow files.
+Questions/blockers:
+- ... or none
 
-1. Do NOT claim "production ready" or close a deploy checklist until \`gate.status === "clear"\` in \`.viberaven/gate-result.json\`.
+Plan:
+- ...
+
+VibeRaven skill/context:
+- ...
+\`\`\``;
+    AGENT_NEGATIVE_CONSTRAINTS = `## Event-Triggered Context Check
+
+Trigger: modifications to \`package.json\`, \`vercel.json\`, \`supabase/migrations/**/*\`, \`.env.example\`, provider-sensitive paths, or deploy workflow files.
+
+1. Do NOT claim the app is ready to ship until \`decision.status\` is not \`blocked\` and \`gate.status === "clear"\` in \`.viberaven/gate-result.json\`.
 2. Do NOT run verify after every file patch. Batch heals, then \`${PUBLIC_VERIFY_COMMAND}\` once per loop.
-3. Do NOT \`git push\` or deploy after auth, RLS, billing, or webhook changes without \`${PUBLIC_AGENT_MODE_COMMAND}\`.
+3. Do NOT \`git push\` or deploy after provider-sensitive changes without VibeRaven architecture/release/provider context.
 4. If anomalies appear, read \`.viberaven/agent-tasklist.md\` fully before writing new repo logic.
-5. Do NOT mark production-ready because the local dev server starts successfully; INSTEAD run \`${PUBLIC_AGENT_MODE_COMMAND}\` and read \`.viberaven/gate-result.json\`.
+5. Do NOT mark the app ready because the local dev server starts successfully; INSTEAD open Studio or run the artifact loop and read \`.viberaven/gate-result.json\`.
 6. Do NOT treat the Supabase dashboard UI as proof of RLS; INSTEAD fix repo evidence gaps from \`.viberaven/agent-tasklist.md\`.
-7. Do NOT add or change npm dependencies without calling \`viberaven_validate_npm_package\` (MCP) or verifying the package exists on the public npm registry; INSTEAD run \`${PUBLIC_AGENT_MODE_COMMAND}\` after dependency changes.
+7. Do NOT add or change npm dependencies without calling \`viberaven_validate_npm_package\` (MCP) or verifying the package exists on the public npm registry; INSTEAD refresh architecture/release/provider context after dependency changes.
 8. Do NOT refactor or edit files unrelated to the current TASK-001 gap; INSTEAD make minimal, targeted changes.
 9. Do NOT install new dependencies unless TASK-001 or the user explicitly requires them.
-10. Do NOT claim provider dashboard, billing, DNS, or webhook setup is complete from repo edits alone; INSTEAD present provider-action steps from the tasklist.
+10. Do NOT claim live provider state is complete from repo edits alone; INSTEAD name the provider proof or dashboard action still needed.
 
-Prefer \`viberaven_check_readiness\` when MCP is configured; otherwise \`${PUBLIC_AGENT_MODE_COMMAND}\`.`;
+Prefer \`viberaven_check_readiness\` when MCP is configured; otherwise \`${PUBLIC_COMMAND}\` for Studio or \`${PUBLIC_AGENT_MODE_COMMAND}\` for artifacts.`;
     ANCHOR_FOOTER = `## Anchor (mandatory)
 
-Before ending any deploy, auth, RLS, webhook, or dependency task, run:
-\`${PUBLIC_AGENT_MODE_COMMAND}\`
-Gate is not clear until \`gate.status === "clear"\` in \`.viberaven/gate-result.json\`.`;
+Before ending any deploy, provider-sensitive, database-policy, or dependency task, open Studio or run the artifact loop:
+\`${PUBLIC_COMMAND}\`
+Context is not clear until \`gate.status === "clear"\` in \`.viberaven/gate-result.json\`.`;
     AGENT_RULES_BODY = `${AGENT_RULES_PREAMBLE}
 
 ${STACK_FRAMING}
 
-${PRODUCTION_PROTOCOL}
+${ARCHITECTURE_ORIENTATION}
 
 ${AGENT_NEGATIVE_CONSTRAINTS}
 
-## VibeRaven Production-Readiness Gate
+## VibeRaven What-Changed Layer
 
-- Before running build, compile, cleanup, deployment, vercel, or supabase commands, run \`${PUBLIC_AGENT_MODE_COMMAND}\` first from the project root.
-- Treat VibeRaven as the Agent Context + Production Gate for AI-built apps, especially apps using Vercel, Supabase, auth, database, payments, webhooks, monitoring, rate limits, or environment variables.
-- Read \`.viberaven/agent-tasklist.md\` first. If it says CRITICAL GAPS DETECTED or PRODUCTION GATE NOT CLEAR, fix one listed repo-code gap before deploying.
+- Before running build, compile, cleanup, deployment, vercel, or supabase commands, open Studio with \`${PUBLIC_COMMAND}\` or run the artifact loop when non-interactive context is needed.
+- Treat VibeRaven as senior-engineer architecture, release drift, and provider context for AI-built apps: identify the boundary, what changed, which version broke, and what provider state matters before editing.
+- Read \`.viberaven/agent-tasklist.md\` first. If it says CRITICAL GAPS DETECTED or the decision is not clear, fix one listed repo-code gap before deploying.
 - Read \`.viberaven/gate-result.json\` for the machine verdict.
 - Read \`.viberaven/context-map.json\` for compact agent context.
 - Read \`.viberaven/agent-summary.md\` second for scan context.
-- Read \`.viberaven/launch-playbook.md\` third for the full checklist.
+- Read \`.viberaven/launch-playbook.md\` third for the full context map.
 - Use \`${PUBLIC_NEXT_JSON_COMMAND}\` or \`${PROMPT_GAP_COMMAND}\` for one focused repo-code fix at a time.
 - For Vercel + Supabase launch checks, run \`${PUBLIC_AUDIT_COMMAND}\`.
 - Run \`${PUBLIC_VERIFY_COMMAND}\` after one fix.
@@ -12953,11 +12784,11 @@ ${AGENT_NEGATIVE_CONSTRAINTS}
 - Only use \`${HEAL_APPLY_GAP_COMMAND}\` for supported low-risk repo-code recipes.
 - Preview local rule installation with \`${PUBLIC_INIT_ALL_COMMAND} --dry-run\`.
 - Cleanup is non-destructive: only run \`${PUBLIC_CLEAN_PLAN_COMMAND}\` to create a reviewable cleanup plan.
-- Provider dashboard checks are not cleared by repo-code edits. Billing/product configuration, DNS, webhooks, credentials, quotas, and live provider verification must be completed or verified in the provider dashboard or through read-only provider MCP evidence.
+- Provider dashboard checks are not cleared by repo-code edits. Database rules, storage behavior, deployment/runtime behavior, quotas, dashboard toggles, and live provider proof must be completed or verified in the provider dashboard or through read-only provider MCP evidence.
 - Do not claim provider dashboard work is fixed by repo-code edits.
 - If VibeRaven prints \`LOGIN_URL_READY\`, open that URL for the user using the available browser tool or system browser. Tell the user: "I opened VibeRaven sign-in so you can approve access; I will continue after approval." Do not ask for passwords, tokens, cookies, or secrets. Keep the terminal process alive while the user approves.
 
-## VibeRaven Production Copilot Loop
+## VibeRaven What-Changed Loop
 
 After every scan, read \`.viberaven/agent-tasklist.md\` for the prioritized task list.
 
@@ -12978,23 +12809,24 @@ The loop is:
    - Wait for user confirmation, then verify.
 9. If \`fixType === 'upgrade-required'\`, provide upgradeUrl and move on.
 
-Do not stop at "scan complete." The loop is not done until \`gate.status === 'clear'\`.`;
+Do not stop at "scan complete." The loop is not done until the agent knows what changed, \`gate.status === 'clear'\`, and the next fix is grounded in evidence.`;
     AGENT_CONTEXT_BODY = `${AGENT_RULES_PREAMBLE}
 
 After \`--agent-mode\`, read these artifacts in order:
 
-1. \`.viberaven/prp.json\`
-2. \`.viberaven/mission-map.md\`
-3. \`.viberaven/agent-tasklist.md\`
-4. \`.viberaven/gate-result.json\`
-5. \`.viberaven/context-map.json\``;
+1. \`.viberaven/mission-map.md\`
+2. \`.viberaven/agent-tasklist.md\`
+3. \`.viberaven/gate-result.json\`
+4. \`.viberaven/context-map.json\`
+
+Before editing, summarize the architecture boundary and missing questions from those artifacts.`;
     MISSION_MAP_BODY = `${AGENT_RULES_PREAMBLE}
 
 ## Mission Map loop
 
 1. Run \`${PUBLIC_AGENT_MODE_COMMAND}\` from the project root.
 2. Read \`.viberaven/agent-tasklist.md\` and \`.viberaven/gate-result.json\`.
-3. Fix one launch gap.
+3. Fix one evidenced change with architecture/release/provider context.
 4. Re-run VibeRaven until \`gate.status === 'clear'\`.`;
     BLOCK_MARKER_PAIRS = [
       [VIBERAVEN_BLOCK_START, VIBERAVEN_BLOCK_END],
@@ -13010,20 +12842,24 @@ function buildCursorRulesPack() {
       filename: "viberaven-core.mdc",
       content: [
         "---",
-        "description: VibeRaven production gate \u2014 canonical agent commands and gate loop",
+        "description: VibeRaven what-changed layer for architecture, release, and provider context",
         "alwaysApply: true",
         "---",
         "",
-        `Run \`${PUBLIC_AGENT_MODE_COMMAND}\` before deploy, auth, RLS, webhooks, or dependency changes.`,
+        "At the start of real app work, map the architecture boundary before editing: UI/API, auth/session, data/schema/RLS, provider dashboard, deploy/env, background job/webhook, billing, storage, or release/version drift.",
+        "",
+        "Ask concise questions only when the answer changes the plan: last working version, production symptom, provider involved, deploy target, or provider/dashboard proof.",
+        "",
+        `Open Studio with \`npx -y viberaven\` for context. Run \`${PUBLIC_AGENT_MODE_COMMAND}\` before deploy, provider-sensitive, database-policy, or dependency changes when artifact context is needed.`,
         "",
         "Read `.viberaven/agent-tasklist.md` first, then `.viberaven/gate-result.json` and `.viberaven/mission-map.md`.",
-        `Fix one gap, then \`${PUBLIC_VERIFY_COMMAND}\`. Before CI or production promote: \`${PUBLIC_STRICT_COMMAND}\`.`,
+        `Fix one scoped gap, then \`${PUBLIC_VERIFY_COMMAND}\`. Before CI or production promote: \`${PUBLIC_STRICT_COMMAND}\`.`,
         "",
-        'Gate is not clear until `gate.status === "clear"`.',
+        'Context is not clear until the architecture boundary, release/version context, and provider proof boundary are understood. For launch gates, `gate.status === "clear"` is required.',
         "",
         DOMAIN_PATH_POINTER,
         "",
-        "Full production rules: `AGENTS.md` / `CLAUDE.md` (installed by `npx -y viberaven init --agents all`)."
+        "Full VibeRaven rules: `AGENTS.md` / `CLAUDE.md` (installed by `npx -y viberaven init --agents all`)."
       ].join("\n")
     },
     {
@@ -13130,7 +12966,7 @@ var init_cursorRulesPack = __esm({
     init_commands();
     CURSOR_RULES_DIR = ".cursor/rules";
     LEGACY_CURSOR_RULE_FILE = `${CURSOR_RULES_DIR}/viberaven.mdc`;
-    DOMAIN_PATH_POINTER = "Before editing these files, read `.viberaven/agent-context.md` and `.viberaven/mission-map.md`.";
+    DOMAIN_PATH_POINTER = "Before editing these files, read `.viberaven/agent-context.md` and `.viberaven/mission-map.md` for what changed, which architecture boundary is affected, and which provider context matters.";
   }
 });
 
@@ -13683,7 +13519,7 @@ async function handleOpenDashboard(cwd) {
 function buildMenuOptions(isSignedIn) {
   return [
     { value: "next", label: "What's next?", hint: "One action from last scan" },
-    { value: "scan", label: "Scan project", hint: "Map launch readiness" },
+    { value: "scan", label: "Scan project", hint: "Map what changed" },
     { value: "open-report", label: "Open report in browser", hint: "Rebuilds UI from last scan" },
     { value: "guide", label: "Provider guide", hint: "Vercel, Supabase, Stripe steps" },
     { value: "open-dashboard", label: "Open dashboard", hint: "Browser link for next step" },
@@ -15623,7 +15459,7 @@ async function runVerifyActionCommand(input) {
   }
   process.stdout.write(
     `Verifying ${entry.id} (${entry.title ?? "untitled action"}).
-Run \`npx -y viberaven --verify\` to refresh the production gate for this action.
+Run \`npx -y viberaven --verify\` to refresh VibeRaven context for this action.
 `
   );
   return 0;
@@ -15959,10 +15795,6 @@ function providerLogoHtml(providerOrLabel, labelFallback, ...moreCandidates) {
 }
 function providerRailLogoHtml(providerOrLabel, labelFallback, ...moreCandidates) {
   const key = resolveProviderLogoKey(providerOrLabel, labelFallback, ...moreCandidates) || normalizeProviderKey2(providerOrLabel);
-  const assetUrl = key ? providerAssetUrl(key) : void 0;
-  if (assetUrl) {
-    return providerIconImgHtml(assetUrl, key);
-  }
   const iconUrl = key && LOCAL_UI_BRAND_ICON_KEYS.has(key) ? PROVIDER_ICON_URLS[key] : void 0;
   if (iconUrl) {
     return providerIconImgHtml(iconUrl, key);
@@ -16098,18 +15930,6 @@ var init_providerLogos = __esm({
       "svelte"
     ]);
     PROVIDER_ASSET_FILES = {
-      auth: "provider-auth.png",
-      clerk: "provider-clerk.png",
-      database: "provider-database.png",
-      env: "provider-env.png",
-      github: "provider-github.png",
-      posthog: "provider-posthog.png",
-      resend: "provider-resend.png",
-      sentry: "provider-sentry.png",
-      stripe: "provider-stripe.png",
-      supabase: "provider-supabase.png",
-      upstash: "provider-upstash.png",
-      vercel: "provider-vercel.png",
       authjs: "provider-authjs.svg",
       logrocket: "provider-logrocket.svg",
       aws: "provider-aws.svg"
@@ -16127,16 +15947,16 @@ var init_providerLogos = __esm({
       turso: "https://cdn.simpleicons.org/turso/4FF8D2",
       "lemon-squeezy": "https://cdn.simpleicons.org/lemonsqueezy/FFC233",
       stripe: "https://cdn.simpleicons.org/stripe/635BFF",
-      github: "https://cdn.simpleicons.org/github/181717",
+      github: "https://cdn.simpleicons.org/github/FFFFFF",
       gitlab: "https://cdn.simpleicons.org/gitlab/FC6D26",
-      vercel: "https://cdn.simpleicons.org/vercel/000000",
+      vercel: "https://cdn.simpleicons.org/vercel/FFFFFF",
       netlify: "https://cdn.simpleicons.org/netlify/00C7B7",
       render: "https://cdn.simpleicons.org/render/46E3B7",
       railway: "https://cdn.simpleicons.org/railway/0B0D0E",
       cloudflare: "https://cdn.simpleicons.org/cloudflare/F38020",
-      sentry: "https://cdn.simpleicons.org/sentry/362D59",
+      sentry: "https://cdn.simpleicons.org/sentry/8B5CF6",
       posthog: "https://cdn.simpleicons.org/posthog/F54E00",
-      resend: "https://cdn.simpleicons.org/resend/000000",
+      resend: "https://cdn.simpleicons.org/resend/FFFFFF",
       upstash: "https://cdn.simpleicons.org/upstash/00E9A3",
       playwright: "https://cdn.jsdelivr.net/gh/devicons/devicon@latest/icons/playwright/playwright-original.svg",
       figma: "https://cdn.simpleicons.org/figma/F24E1E",
@@ -16170,7 +15990,7 @@ var init_providerLogos = __esm({
 // src/local-ui/prompts.ts
 function buildLocalUiPrompt(input) {
   const lines = [
-    "You are fixing one VibeRaven production-readiness gap.",
+    "You are fixing one VibeRaven what-changed gap.",
     "",
     `Project: ${input.projectName}`,
     `Provider: ${input.providerName}`,
@@ -16184,7 +16004,7 @@ function buildLocalUiPrompt(input) {
     "- .viberaven/gate-result.json",
     "",
     "Fix only this repo-code gap.",
-    "Do not claim production-ready until VibeRaven verify is clear.",
+    "Do not claim the app is ready until VibeRaven verify is clear.",
     "Provider dashboard setup remains manual unless VibeRaven has live provider evidence.",
     "After the fix, run:",
     "npx -y viberaven --verify"
@@ -16506,7 +16326,7 @@ function buildMissionCards(artifact, providers) {
   const connectProviders = buildConnectProviders(providers);
   const blockerCount = blockers.length;
   const hasScan = Boolean(artifact.scannedAt);
-  const summary = !hasScan ? "Run `npx -y viberaven --agent-mode` to scan this project and surface production blockers." : blockerCount === 0 ? "No launch blockers detected in the latest scan." : `I analyzed the production rollout and found ${blockerCount} blocker${blockerCount === 1 ? "" : "s"} preventing a safe deploy.`;
+  const summary = !hasScan ? "Open VibeRaven Studio to inspect what changed and surface missing release or provider context." : blockerCount === 0 ? "No context blockers detected in the latest evidence." : `I analyzed the release evidence and found ${blockerCount} context blocker${blockerCount === 1 ? "" : "s"} to resolve before the next fix.`;
   return {
     summary,
     blockerCount,
@@ -16964,7 +16784,6 @@ const demo = {
   activeModal: null,
   activeStudioTab: 'chat',
   selectedCliId: 'codex',
-  agentPermissionMode: 'ask',
   cliConnected: false,
   cliSetupComplete: false,
   cliConnectTargetId: null,
@@ -16983,11 +16802,13 @@ const demo = {
   selectedModelId: 'gpt-5.5',
   selectedReasoning: 'High',
   selectedContext: 'Production',
+  selectedAccessMode: 'approve',
   modelMenuOpen: false,
   reasoningMenuOpen: false,
   contextMenuOpen: false,
+  accessMenuOpen: false,
   pickerChatIndex: 0,
-  chatContexts: [{ providerId: null, releaseId: null, cliId: 'codex', modelId: 'gpt-5.5', reasoning: 'High', context: 'Production', messages: [], activeTask: null }],
+  chatContexts: [{ providerId: null, releaseId: null, cliId: 'codex', modelId: 'gpt-5.5', reasoning: 'High', context: 'Production', accessMode: 'approve', messages: [], activeTask: null }],
   activeRecentChatId: null,
   droppedProviderId: null,
   dragKind: null,
@@ -17001,23 +16822,6 @@ const demo = {
   releaseChangelog: { entries: [], from: '', to: '', fromLabel: '', toLabel: '', loading: false, error: '' },
 };
 
-function readPermissionMode() {
-  try {
-    const raw = localStorage.getItem('viberaven:agentChatPermissionMode');
-    return raw === 'full-access' ? 'full-access' : 'ask';
-  } catch {
-    return 'ask';
-  }
-}
-
-function savePermissionMode(mode) {
-  try {
-    localStorage.setItem('viberaven:agentChatPermissionMode', mode);
-  } catch {
-    // Ignore storage failures in preview shells.
-  }
-}
-
 function readCliSessionReady() {
   try {
     let raw = localStorage.getItem('viberaven-cli-ready');
@@ -17040,7 +16844,6 @@ function writeCliSessionReady(value) {
 }
 
 demo.cliSessionReady = readCliSessionReady();
-demo.agentPermissionMode = readPermissionMode();
 
 function cliAgentInstalled(agent) {
   if (!agent) return false;
@@ -17123,17 +16926,17 @@ const providerMarkAssets = {
 };
 
 const mascotAssets = {
-  idle: '/report/assets/viberaven-mascot-idle.png',
-  fixing: '/report/assets/viberaven-mascot-fixing.png',
-  verified: '/report/assets/viberaven-mascot-verified.png',
-  alert: '/report/assets/viberaven-mascot-alert.png',
+  idle: '/report/assets/viberaven-mascot.png',
+  fixing: '/report/assets/viberaven-mascot.png',
+  verified: '/report/assets/viberaven-mascot.png',
+  alert: '/report/assets/viberaven-mascot.png',
 };
 
 const providerDashboardUrls = {
   supabase: 'https://supabase.com/dashboard/projects',
   vercel: 'https://vercel.com/dashboard',
   stripe: 'https://dashboard.stripe.com',
-  github: 'https://github.com/ohad6k/VibeRaven',
+  github: 'https://github.com/new',
   sentry: 'https://sentry.io',
   posthog: 'https://app.posthog.com',
   clerk: 'https://dashboard.clerk.com',
@@ -17146,6 +16949,14 @@ const publicGithubUrl = 'https://github.com/ohad6k/VibeRaven';
 const publicGithubApiUrl = 'https://api.github.com/repos/ohad6k/VibeRaven';
 const docsUrl = 'https://viberaven.dev';
 const communityUrl = 'https://github.com/ohad6k/VibeRaven/discussions/7';
+const goLiveUrls = {
+  githubLogin: 'https://github.com/login',
+  githubNew: 'https://github.com/new',
+  githubCliAuth: 'https://cli.github.com/manual/gh_auth_login',
+  vercelLogin: 'https://vercel.com/login',
+  vercelNew: 'https://vercel.com/new',
+  vercelDashboard: 'https://vercel.com/dashboard',
+};
 
 const githubStats = {
   loading: false,
@@ -17335,6 +17146,52 @@ function providerHealthIcon(health) {
   return Icon('refresh');
 }
 
+function providerMcp(provider) {
+  return provider && provider.mcp ? provider.mcp : {
+    status: 'disconnected',
+    label: 'Connect MCP',
+    connectCommand: 'Add this provider to your local MCP config, then drag it into chat.',
+    capabilities: [],
+  };
+}
+
+function providerMcpChip(provider) {
+  const mcp = providerMcp(provider);
+  const connected = mcp.status === 'connected';
+  const label = connected ? 'MCP connected' : 'MCP not connected';
+  return '<span class="vr-provider-mcp-chip ' + (connected ? 'is-connected' : 'is-disconnected') + '" title="' + escapeHtml(label) + '" aria-label="' + escapeHtml(label) + '">' +
+    '<i></i><span>' + escapeHtml(label) + '</span>' +
+    '</span>';
+}
+
+function providerAssetSrc(provider) {
+  if (!provider) return providerAssets.supabase;
+  return providerMarkAssets[provider.id] || providerAssets[provider.id] || providerAssets.supabase;
+}
+
+function ProviderToken(provider, extraClass) {
+  const className = 'vr-provider-token' + (extraClass ? ' ' + extraClass : '');
+  const iconHtml = provider && provider.iconHtml ? String(provider.iconHtml) : '';
+  return '<span class="' + className + '">' + (iconHtml.trim() ? iconHtml : '<img src="' + providerAssetSrc(provider) + '" alt="" />') + '</span>';
+}
+
+function ProviderLogo(provider, className) {
+  const iconHtml = provider && provider.iconHtml ? String(provider.iconHtml) : '';
+  return iconHtml.trim()
+    ? '<span class="' + className + ' is-logo-html">' + iconHtml + '</span>'
+    : '<img class="' + className + '" src="' + providerAssetSrc(provider) + '" alt="" />';
+}
+
+function ProviderMcpPanel(provider) {
+  const mcp = providerMcp(provider);
+  const connected = mcp.status === 'connected';
+  const capabilities = Array.isArray(mcp.capabilities) && mcp.capabilities.length ? mcp.capabilities : ['provider context', 'repo-aware chat'];
+  return '<section class="vr-provider-mcp-panel ' + (connected ? 'is-connected' : 'is-disconnected') + '">' +
+    '<header><span>' + Icon('agent') + '</span><div><strong>' + escapeHtml(connected ? 'MCP connected' : 'Connect MCP') + '</strong><em>' + escapeHtml(connected ? (mcp.source || 'local MCP config') : (mcp.connectCommand || 'Add this provider MCP server in your local MCP config.')) + '</em></div></header>' +
+    '<div>' + capabilities.map((item) => '<small>' + escapeHtml(item) + '</small>').join('') + '</div>' +
+    '</section>';
+}
+
 function normalizeProvider(provider) {
   const missing = provider.state === 'not_detected';
   return {
@@ -17348,6 +17205,8 @@ function normalizeProvider(provider) {
     lastSync: currentState.project && currentState.project.scannedAt ? 'scan artifact' : 'startup',
     checks: providerChecks(provider),
     state: provider.state || 'not_detected',
+    mcp: provider.mcp || null,
+    iconHtml: provider.iconHtml || '',
   };
 }
 
@@ -17552,6 +17411,11 @@ let cliModels = {
 
 const reasoningLevels = ['Low', 'Medium', 'High', 'Extra High'];
 const contextLevels = ['Production', 'Provider', 'Release', 'Security'];
+const accessModes = [
+  { id: 'ask', label: 'Ask approval', description: 'Confirm edits and external access' },
+  { id: 'approve', label: 'Approve for me', description: 'Run safe repo actions automatically' },
+  { id: 'full', label: 'Full access', description: 'Unrestricted local project access' },
+];
 const topStages = [
   { id: 'provider', number: '1', label: 'Provider Proof', state: 'Waiting' },
   { id: 'agent', number: '2', label: 'Agent Fix', state: 'Ready' },
@@ -17653,6 +17517,7 @@ function buildRecentChatEntry(prompt, provider, release, chat, existing) {
     modelId: lane.modelId || base.modelId || demo.selectedModelId || 'gpt-5.5',
     reasoning: lane.reasoning || base.reasoning || demo.selectedReasoning || 'High',
     context: lane.context || base.context || demo.selectedContext || 'Production',
+    accessMode: lane.accessMode || base.accessMode || demo.selectedAccessMode || 'approve',
     messages: serializeChatMessages(lane.messages),
   };
 }
@@ -17680,6 +17545,7 @@ function syncDemoFromChatContext(context) {
   demo.selectedModelId = context.modelId;
   demo.selectedReasoning = context.reasoning;
   demo.selectedContext = context.context;
+  demo.selectedAccessMode = context.accessMode || 'approve';
   if (context.providerId) demo.selectedProviderId = context.providerId;
   if (context.releaseId) demo.selectedReleaseId = context.releaseId;
   syncPrimaryContext();
@@ -17694,6 +17560,7 @@ function restoreRecentChat(recent) {
     modelId: recent.modelId,
     reasoning: recent.reasoning,
     context: recent.context,
+    accessMode: recent.accessMode,
     messages: recent.messages || [],
     draft: '',
     activeTask: null,
@@ -17802,14 +17669,14 @@ function GitHubStats() {
 function agentPromptText() {
   const provider = providers.find((item) => item.id === demo.selectedProviderId) || providers[0];
   return [
-    'You are fixing one VibeRaven launch-readiness gap.',
+    'You are fixing one VibeRaven what-changed gap.',
     '',
     'Project: ' + projectName(),
     'Focus: ' + provider.name + ' ' + provider.area,
     'Stage: ' + (demo.activeStepId || 'agent'),
     '',
     'Goal:',
-    '- Find the smallest repo-side fix that improves launch readiness.',
+    '- Find the smallest repo-side fix grounded in what changed.',
     '- Do not claim provider dashboard work from code alone.',
     '- Keep the change scoped and verify through the VibeRaven UI action.',
     '',
@@ -17913,6 +17780,9 @@ function contextIconChip(iconName, size) {
 }
 
 function BrandMark(id) {
+  if (id === 'github') {
+    return '<span class="vr-inline-brand-mark is-github"><svg viewBox="0 0 24 24" aria-hidden="true" focusable="false"><path d="M12 2C6.48 2 2 6.58 2 12.26c0 4.52 2.87 8.35 6.86 9.71.5.1.69-.22.69-.49 0-.24-.01-.87-.01-1.7-2.78.62-3.37-1.36-3.37-1.36-.45-1.17-1.11-1.48-1.11-1.48-.91-.64.07-.63.07-.63 1 .07 1.53 1.05 1.53 1.05.9 1.56 2.36 1.11 2.94.85.09-.67.35-1.11.63-1.37-2.22-.26-4.56-1.14-4.56-5.07 0-1.12.39-2.03 1.03-2.75-.1-.26-.45-1.3.1-2.7 0 0 .84-.28 2.75 1.05A9.2 9.2 0 0 1 12 6.84c.85 0 1.71.12 2.51.34 1.91-1.33 2.75-1.05 2.75-1.05.55 1.4.2 2.44.1 2.7.64.72 1.03 1.63 1.03 2.75 0 3.94-2.34 4.8-4.57 5.06.36.32.68.94.68 1.9 0 1.37-.01 2.47-.01 2.8 0 .27.18.6.7.49A10.03 10.03 0 0 0 22 12.26C22 6.58 17.52 2 12 2Z"/></svg></span>';
+  }
   return '<span class="vr-inline-brand-mark"><img src="' + escapeHtml(providerMarkAssets[id] || providerAssets[id]) + '" alt="" /></span>';
 }
 
@@ -17938,6 +17808,7 @@ function defaultChatContext(seed) {
     modelId: source.modelId || demo.selectedModelId || normalizeModelId(models[0]),
     reasoning: source.reasoning || demo.selectedReasoning || 'High',
     context: source.context || demo.selectedContext || 'Production',
+    accessMode: source.accessMode || demo.selectedAccessMode || 'approve',
     draft: source.draft || '',
     messages: Array.isArray(source.messages) ? source.messages.slice() : [],
     activeTask: source.activeTask || null,
@@ -18053,7 +17924,7 @@ function resolveQuickActionMission(kind, chatIndex, promptOverride) {
   const topBlocker = blockers[0];
   const gateClear = gate.status === 'clear';
   const gateLabel = gate.label || 'Waiting for project evidence';
-  const mainBlocker = mc.mainBlocker || topBlocker?.title || 'Run a scan to find launch blockers';
+  const mainBlocker = mc.mainBlocker || topBlocker?.title || 'Open context to find what changed';
   const blockerText = formatBlockerLines(blockers, 6);
   const planText = formatPlanLines(planSteps, 8);
   const connectText = connectProviders.slice(0, 5).map((item) => '- ' + item.name + ' (' + item.status + ')').join('\\n');
@@ -18062,12 +17933,12 @@ function resolveQuickActionMission(kind, chatIndex, promptOverride) {
 
   const missions = {
     analyze: {
-      title: 'Analyzing launch blockers',
-      label: blockers.length ? 'Analyze ' + blockers.length + ' blocker' + (blockers.length === 1 ? '' : 's') : 'Analyze launch readiness',
+      title: 'Analyzing what changed',
+      label: blockers.length ? 'Analyze ' + blockers.length + ' blocker' + (blockers.length === 1 ? '' : 's') : 'Analyze what changed',
       prompt: [
-        'Analyze production launch readiness in this project folder.',
+        'Analyze what changed in this project folder.',
         '',
-        'Gate: ' + gateLabel + ' (' + (gate.status || 'unknown') + ')',
+        'Project status: ' + gateLabel + ' (' + (gate.status || 'unknown') + ')',
         'Main blocker: ' + mainBlocker,
         blockers.length ? 'Known blockers from the latest scan:\\n' + blockerText : 'No blockers loaded yet \u2014 inspect .viberaven/gate-result.json and agent-tasklist.md if present.',
         connectText ? '\\nProviders needing connect:\\n' + connectText : '',
@@ -18079,15 +17950,15 @@ function resolveQuickActionMission(kind, chatIndex, promptOverride) {
       ].filter(Boolean).join('\\n'),
       line: 'Reading repo evidence, provider proof, and release context.',
       steps: ['Scan evidence', 'Rank risks', 'Prepare fix plan'],
-      notice: blockers.length ? 'Analyzing ' + blockers.length + ' launch blocker' + (blockers.length === 1 ? '' : 's') + '.' : 'Analyzing launch readiness.',
+      notice: blockers.length ? 'Analyzing ' + blockers.length + ' blocker' + (blockers.length === 1 ? '' : 's') + '.' : 'Analyzing what changed.',
     },
     plan: {
       title: 'Building fix plan',
-      label: planSteps.length ? 'Production fix plan \xB7 ' + planSteps.length + ' step' + (planSteps.length === 1 ? '' : 's') : 'Build production fix plan',
+      label: planSteps.length ? 'Fix plan \xB7 ' + planSteps.length + ' action' + (planSteps.length === 1 ? '' : 's') : 'Build fix plan',
       prompt: [
-        'Build a safe, ordered production fix plan for this launch.',
+        'Build a safe, ordered fix plan from the current what-changed context.',
         '',
-        'Gate: ' + gateLabel,
+        'Project status: ' + gateLabel,
         'Main blocker: ' + mainBlocker,
         blockers.length ? 'Blockers (' + blockers.length + '):\\n' + blockerText : 'No scan blockers loaded \u2014 inspect .viberaven artifacts first.',
         planSteps.length ? '\\nSuggested steps from scan:\\n' + planText : '',
@@ -18106,7 +17977,7 @@ function resolveQuickActionMission(kind, chatIndex, promptOverride) {
       title: 'Applying scoped fix',
       label: topBlocker ? 'Agent fix \xB7 ' + truncateMissionLabel(topBlocker.title, 34) : 'Apply next repo fix',
       prompt: [
-        'Apply ONE scoped repo fix for the highest-priority launch blocker.',
+        'Apply ONE scoped repo fix for the highest-priority what-changed blocker.',
         '',
         topBlocker ? 'Target blocker: ' + topBlocker.title : 'Target: ' + mainBlocker,
         topBlocker?.detail ? 'Detail: ' + topBlocker.detail : '',
@@ -18121,17 +17992,17 @@ function resolveQuickActionMission(kind, chatIndex, promptOverride) {
         '- Do not claim provider dashboard setup is complete from repo edits alone.',
         '- After edits, list files touched and recommend verify.',
       ].filter(Boolean).join('\\n'),
-      line: 'Patching only the selected production gap, then preparing verification.',
+      line: 'Patching only the selected what-changed gap, then preparing verification.',
       steps: ['Patch code', 'Update proof', 'Prepare verify'],
       notice: topBlocker ? 'Agent fix started for: ' + truncateMissionLabel(topBlocker.title, 48) + '.' : 'Agent fix mission started.',
     },
     verify: {
       title: 'Running verification',
-      label: gateClear ? 'Re-verify launch gate' : 'Verify launch gate',
+      label: gateClear ? 'Re-verify context' : 'Verify context',
       prompt: [
-        'Verify production launch readiness for this project.',
+        'Verify the current what-changed context for this project.',
         '',
-        'Gate: ' + gateLabel + ' (' + (gate.status || 'unknown') + ')',
+        'Project status: ' + gateLabel + ' (' + (gate.status || 'unknown') + ')',
         'Main blocker: ' + mainBlocker,
         blockers.length ? 'Open blockers:\\n' + blockerText : '',
         '',
@@ -18142,15 +18013,15 @@ function resolveQuickActionMission(kind, chatIndex, promptOverride) {
       ].filter(Boolean).join('\\n'),
       line: 'Checking evidence, provider state, and release readiness.',
       steps: ['Run checks', 'Read proof', 'Mark status'],
-      notice: gateClear ? 'Re-verifying launch proof.' : 'Running launch gate verification.',
+      notice: gateClear ? 'Re-checking release proof.' : 'Checking evidence, provider state, and release context.',
     },
     diff: {
       title: 'Reviewing diff',
-      label: 'Review production diff',
+      label: 'Review release diff',
       prompt: [
-        'Review the current production diff for this project.',
+        'Review the current release diff for this project.',
         '',
-        'Gate: ' + gateLabel,
+        'Project status: ' + gateLabel,
         topBlocker ? 'Top blocker context: ' + topBlocker.title : '',
         '',
         'Show grouped changes, flag risky edits, and say what still needs verify before release.',
@@ -18163,9 +18034,9 @@ function resolveQuickActionMission(kind, chatIndex, promptOverride) {
       title: 'Explaining changes',
       label: 'Explain changes & next steps',
       prompt: [
-        'Explain recent production changes and what to verify next.',
+        'Explain what changed and what to verify next.',
         '',
-        'Gate: ' + gateLabel,
+        'Project status: ' + gateLabel,
         mainBlocker ? 'Main blocker: ' + mainBlocker : '',
         blockers.length ? 'Active blockers:\\n' + blockerText : '',
         '',
@@ -18206,6 +18077,38 @@ function resolveQuickActionMission(kind, chatIndex, promptOverride) {
       steps: missingProvider ? ['Check repo', 'List env', 'Dashboard steps'] : ['Read provider', 'Check proof', 'Attach context'],
       notice: missingProvider ? provider.name + ' connect mission started.' : provider.name + ' proof check started.',
     },
+    'go-live': {
+      title: 'Preparing GitHub and Vercel launch',
+      label: 'Go live on GitHub + Vercel',
+      prompt: [
+        'Take this local project live through GitHub and Vercel with explicit proof.',
+        '',
+        'Project status: ' + gateLabel + ' (' + (gate.status || 'unknown') + ')',
+        'Main blocker: ' + mainBlocker,
+        blockers.length ? 'Known blockers from the latest scan:\\n' + blockerText : 'No scan blockers loaded yet - inspect the repo and .viberaven artifacts if present.',
+        connectText ? '\\nProviders needing connect:\\n' + connectText : '',
+        '',
+        'Launch path:',
+        '1. Inspect git status, branch, remotes, package scripts, Vercel config, and deploy notes before changing anything.',
+        '2. Detect GitHub/Vercel tools with gh --version, gh auth status, vercel --version or npx vercel --version, and vercel whoami or npx vercel whoami.',
+        '3. Run the narrowest local build/typecheck/test command that proves the app can ship.',
+        '4. If no GitHub remote exists and gh is authenticated, create the repo and push after repo name/visibility are clear. If auth/manual setup is needed, open ' + goLiveUrls.githubLogin + ' or ' + goLiveUrls.githubNew + '.',
+        '5. Connect or verify Vercel project linkage, framework/build settings, env var names, and production deploy command. If auth/manual setup is needed, open ' + goLiveUrls.vercelLogin + ', ' + goLiveUrls.vercelNew + ', or ' + goLiveUrls.vercelDashboard + '.',
+        '6. Deploy when auth and intent are clear for the selected access mode. Capture deployment URL and verify it if possible.',
+        '',
+        'Rules:',
+        '- Do every safe step directly. Do not stop at a checklist if commands or official pages can move the launch forward.',
+        '- Do not include .env files, secrets, build output, or unrelated dirty work in commits.',
+        '- Do not ask for passwords, cookies, tokens, API keys, or secret values.',
+        '- Do not claim GitHub or Vercel dashboard state is complete without CLI, MCP, dashboard, or live URL proof.',
+        '- Avoid destructive git operations and force pushes unless the user explicitly asks and the risk is explained.',
+        '',
+        'Return a launch receipt with GitHub repo/branch/SHA, Vercel project/deployment URL, local proof command, live proof result, links opened, and remaining dashboard actions.',
+      ].filter(Boolean).join('\\n'),
+      line: 'Connecting repo evidence to GitHub, Vercel, and live deployment proof.',
+      steps: ['Check repo', 'Push GitHub', 'Deploy Vercel', 'Verify live'],
+      notice: 'Go Live mission started for GitHub and Vercel.',
+    },
   };
 
   const mission = missions[kind] || missions.analyze;
@@ -18269,7 +18172,7 @@ function quickActionButtonSpec(index) {
       action: 'plan',
       icon: 'report',
       label: planSteps.length ? 'Plan \xB7 ' + planSteps.length : 'Plan',
-      hint: planSteps.length ? 'Build production fix plan \xB7 ' + planSteps.length + ' steps' : 'Build production fix plan',
+      hint: planSteps.length ? 'Build fix plan \xB7 ' + planSteps.length + ' actions' : 'Build fix plan',
       primary: true,
     },
     {
@@ -18284,7 +18187,14 @@ function quickActionButtonSpec(index) {
       action: 'verify-now',
       icon: 'shield',
       label: gateClear ? 'Re-verify' : 'Verify',
-      hint: gateClear ? 'Re-verify launch gate' : 'Verify launch gate',
+      hint: gateClear ? 'Re-verify readiness' : 'Verify readiness',
+      primary: true,
+    },
+    {
+      action: 'go-live',
+      icon: 'cloud',
+      label: 'Go live',
+      hint: 'Push GitHub + deploy Vercel',
       primary: true,
     },
     {
@@ -18348,7 +18258,7 @@ function runChatTask(kind, promptOverride) {
     const responseText = isError
       ? (message || 'The connected CLI did not return a usable response.')
       : (message || 'Ready for the next safe action.');
-    const attachKinds = ['analyze', 'plan', 'provider', 'verify'];
+    const attachKinds = ['analyze', 'plan', 'provider', 'verify', 'go-live'];
     const cards = attachKinds.includes(kind)
       ? (cardsPayload || missionCards)
       : (cardsPayload && ['diff', 'explain'].includes(kind) ? cardsPayload : null);
@@ -18373,7 +18283,7 @@ function runChatTask(kind, promptOverride) {
       demo.notice = 'Verification finished in chat. Launch proof is green.';
     } else if (kind === 'fix') {
       demo.activeStepId = 'verify';
-      demo.notice = 'Fix prepared in chat. Run Verify to clear the launch gate.';
+      demo.notice = 'Fix prepared in chat. Run Verify to update release proof.';
     } else {
       demo.notice = taskMeta(kind).title + ' finished in chat.';
     }
@@ -18395,12 +18305,12 @@ function runChatTask(kind, promptOverride) {
       modelId: selectedModelLabel(chatIndex),
       reasoning: chat.reasoning,
       context: chat.context,
+      accessMode: chat.accessMode || 'approve',
       prompt,
       displayPrompt: label,
       taskKind: kind,
-      permissionMode: demo.agentPermissionMode,
-      provider: { area: provider.area, name: provider.name },
-      release: release ? { label: release.label } : undefined
+      provider: { id: provider.id, area: provider.area, name: provider.name },
+      release: release ? { id: release.id, label: release.label } : undefined
     })
   })
     .then(async (response) => {
@@ -18429,7 +18339,7 @@ function sendChatInput(chatIndex) {
   }
   chat.draft = '';
   if (input && 'value' in input) input.value = '';
-  runChatTask(chat.providerId ? 'provider' : 'analyze', value);
+  runChatTask(chat.releaseId ? 'diff' : chat.providerId ? 'provider' : 'analyze', value);
 }
 
 function resetLaunchPreview() {
@@ -18449,11 +18359,13 @@ function resetLaunchPreview() {
   demo.selectedModelId = 'gpt-5.5';
   demo.selectedReasoning = 'High';
   demo.selectedContext = 'Production';
+  demo.selectedAccessMode = 'approve';
   demo.modelMenuOpen = false;
   demo.reasoningMenuOpen = false;
   demo.contextMenuOpen = false;
+  demo.accessMenuOpen = false;
   demo.pickerChatIndex = 0;
-  demo.chatContexts = [defaultChatContext({ cliId: 'codex', modelId: 'gpt-5.5', reasoning: 'High', context: 'Production' })];
+  demo.chatContexts = [defaultChatContext({ cliId: 'codex', modelId: 'gpt-5.5', reasoning: 'High', context: 'Production', accessMode: 'approve' })];
   demo.droppedProviderId = null;
   demo.droppedReleaseId = null;
   clearChatTaskTimer();
@@ -18523,10 +18435,10 @@ function RecentChatRail() {
 
 function ProviderCard(provider) {
   const slot = stackSlots[provider.id] || provider.area;
-  return '<button class="vr-provider-card ' + (provider.id === demo.selectedProviderId ? 'is-selected' : '') + '" type="button" draggable="true" data-provider="' + escapeHtml(provider.id) + '" aria-label="Open ' + escapeHtml(provider.name) + ' stack slot">' +
-    '<span class="vr-provider-token"><img src="' + (providerMarkAssets[provider.id] || providerAssets[provider.id]) + '" alt="" /></span>' +
-    '<span class="vr-provider-light"></span>' +
+  return '<button class="vr-provider-card ' + (provider.id === demo.selectedProviderId ? 'is-selected' : '') + '" type="button" draggable="true" data-provider="' + escapeHtml(provider.id) + '" data-provider-tone="' + escapeHtml(provider.tone || 'neutral') + '" aria-label="Open ' + escapeHtml(provider.name) + ' stack slot">' +
+    ProviderToken(provider) +
     '<div><small>' + escapeHtml(slot) + '</small><strong>' + escapeHtml(provider.name) + '</strong><em>' + escapeHtml(provider.status) + '</em></div>' +
+    providerMcpChip(provider) +
     '<span class="vr-provider-proof-chip"><span>Open</span>' + Icon('chevronRight') + '</span>' +
     '</button>';
 }
@@ -18534,9 +18446,10 @@ function ProviderCard(provider) {
 function ProviderDetailPanel() {
   const provider = providers.find((item) => item.id === demo.selectedProviderId) || providers[0];
   return '<aside class="vr-provider-detail-panel">' +
-    '<div class="vr-detail-head"><span class="vr-provider-token is-large"><img src="' + (providerMarkAssets[provider.id] || providerAssets[provider.id]) + '" alt="" /></span><div><span>' + escapeHtml(provider.area) + '</span><strong>' + escapeHtml(provider.name) + '</strong></div>' + StatusBadge(provider.status, provider.tone) + '</div>' +
+    '<div class="vr-detail-head">' + ProviderToken(provider, 'is-large') + '<div><span>' + escapeHtml(provider.area) + '</span><strong>' + escapeHtml(provider.name) + '</strong></div>' + StatusBadge(provider.status, provider.tone) + '</div>' +
     '<p>' + escapeHtml(provider.detail) + '</p>' +
     '<div class="vr-provider-stats"><span><b>Checks</b><em>' + escapeHtml(provider.checks) + '</em></span><span><b>Region</b><em>' + escapeHtml(provider.region) + '</em></span><span><b>Last sync</b><em>' + escapeHtml(provider.lastSync) + '</em></span></div>' +
+    ProviderMcpPanel(provider) +
     '<a class="vr-provider-dashboard" href="' + escapeHtml(providerDashboardUrls[provider.id] || docsUrl) + '" target="_blank" rel="noreferrer">Open dashboard ' + Icon('external') + '</a>' +
     '</aside>';
 }
@@ -18557,7 +18470,7 @@ function ProviderPicker() {
   return '<div class="vr-provider-picker" aria-label="Provider picker">' +
     '<div><strong>Connector picker</strong><span>Select one provider. VibeRaven opens its proof panel and next action.</span></div>' +
     '<div class="vr-provider-picker-list">' + boardProviders.map((provider) =>
-      '<button type="button" data-provider="' + escapeHtml(provider.id) + '"><span class="vr-provider-token is-picker"><img src="' + (providerMarkAssets[provider.id] || providerAssets[provider.id]) + '" alt="" /></span><span>' + escapeHtml(provider.name) + '</span></button>'
+      '<button type="button" data-provider="' + escapeHtml(provider.id) + '">' + ProviderToken(provider, 'is-picker') + '<span>' + escapeHtml(provider.name) + '</span></button>'
     ).join('') + '</div>' +
     '</div>';
 }
@@ -18613,11 +18526,12 @@ function ProviderModal() {
   const checkRows = providerModalCheckRows(raw);
   return ModalShell('provider',
     '<header class="vr-modal-provider-head">' +
-      '<img class="vr-modal-provider-logo" src="' + (providerMarkAssets[provider.id] || providerAssets[provider.id]) + '" alt="" />' +
+      ProviderLogo(provider, 'vr-modal-provider-logo') +
       '<div><h2>' + escapeHtml(provider.name) + '</h2>' + StatusBadge(provider.status, provider.tone) + '<p>' + escapeHtml(provider.area) + ' provider</p></div>' +
       '<img class="vr-modal-mascot" src="' + providerModalMascot(health) + '" alt="" />' +
     '</header>' +
     '<section class="vr-modal-health is-' + escapeHtml(health.tone) + '"><span>' + providerHealthIcon(health) + '</span><div><strong>' + escapeHtml(health.label) + '</strong><em>' + escapeHtml(health.summary) + '</em></div><b>' + escapeHtml(health.meta) + '</b></section>' +
+    ProviderMcpPanel(provider) +
     '<div class="vr-modal-action-grid">' +
       GlowButton('Open slot', { action: 'guide', tone: 'purple' }) +
       '<button type="button" data-action="recheck">' + Icon('refresh') + 'Re-check</button>' +
@@ -18644,7 +18558,7 @@ function AddProviderModal() {
     '</header>' +
     '<section class="vr-modal-provider-options">' + featured.map((item) => {
       const provider = providers.find((candidate) => candidate.id === item.icon) || providers[0];
-      return '<button type="button" data-provider="' + escapeHtml(provider.id) + '"><span class="vr-provider-token is-large"><img src="' + (providerMarkAssets[provider.id] || providerAssets[provider.id]) + '" alt="" /></span><div><small>' + escapeHtml(item.slot) + '</small><strong>' + escapeHtml(item.provider) + '</strong><em>' + escapeHtml(item.caption) + '</em></div><b>Connect</b></button>';
+      return '<button type="button" data-provider="' + escapeHtml(provider.id) + '">' + ProviderToken(provider, 'is-large') + '<div><small>' + escapeHtml(item.slot) + '</small><strong>' + escapeHtml(item.provider) + '</strong><em>' + escapeHtml(item.caption) + '</em></div><b>Connect</b></button>';
     }).join('') + '</section>' +
     '<section class="vr-modal-connect-note">' + Icon('lock') + '<span>VibeRaven only opens setup guidance here. Real credentials stay in your local runner or provider dashboard.</span></section>'
   );
@@ -18674,16 +18588,16 @@ function AgentModal() {
   return ModalShell('agent',
     '<header class="vr-modal-agent-head">' +
       '<img class="vr-modal-agent-avatar" src="' + mascotUrl() + '" alt="" />' +
-      '<div><p>Agent Action</p><h2>VibeRaven</h2><em>' + (verified ? 'Everything is verified in preview mode.' : fixing ? 'I am fixing the selected launch gap now.' : 'I will fix the issue and verify everything works as expected.') + '</em></div>' +
+      '<div><p>Agent Action</p><h2>VibeRaven</h2><em>' + (verified ? 'Everything is verified in preview mode.' : fixing ? 'I am fixing the evidenced change now.' : 'I will fix the issue with release and provider context.') + '</em></div>' +
       '<aside>' + Icon('clock') + '<span>' + (verified ? 'Status' : 'Estimated time') + '</span><strong>' + (verified ? 'Complete' : fixing ? 'Running' : '2 - 4 min') + '</strong></aside>' +
     '</header>' +
     '<section class="vr-modal-tasklist"><h3>Task checklist</h3><ul>' +
-      ModalCheck('Diagnose issue', 'Find the highest-impact launch blocker.', fixing || verified ? 'done' : 'active', fixing || verified ? 'OK' : 'Ready') +
-      ModalCheck('Apply focused fix', 'Patch only the selected launch gap.', verified ? 'done' : fixing ? 'running' : 'pending', verified ? 'OK' : fixing ? 'Running' : 'Pending') +
+      ModalCheck('Diagnose issue', 'Find the highest-impact context gap.', fixing || verified ? 'done' : 'active', fixing || verified ? 'OK' : 'Ready') +
+      ModalCheck('Apply focused fix', 'Patch only the evidenced change.', verified ? 'done' : fixing ? 'running' : 'pending', verified ? 'OK' : fixing ? 'Running' : 'Pending') +
       ModalCheck('Run verification tests', 'Confirm the flow is safe after the fix.', verified ? 'done' : fixing ? 'active' : 'pending', verified ? 'OK' : fixing ? 'Queued' : 'Pending') +
       ModalCheck('Confirm systems operational', 'Move the launch flow to clear.', verified ? 'done' : 'pending') +
     '</ul></section>' +
-    '<section class="vr-modal-progress ' + (!verified && !fixing ? 'is-ready' : '') + '">' + Icon('shield') + '<div><strong>' + (verified ? 'Verification complete' : fixing ? 'Fix in progress' : 'Ready for focused fix') + '</strong><p>' + (verified ? 'The launch flow is green in preview mode.' : fixing ? 'Running checks to ensure a safe and reliable fix.' : 'Start the agent when you are ready to patch one selected launch gap.') + '</p></div>' + Icon('spark') + '</section>' +
+    '<section class="vr-modal-progress ' + (!verified && !fixing ? 'is-ready' : '') + '">' + Icon('shield') + '<div><strong>' + (verified ? 'Verification complete' : fixing ? 'Fix in progress' : 'Ready for focused fix') + '</strong><p>' + (verified ? 'The launch flow is green in preview mode.' : fixing ? 'Running checks to keep the fix grounded.' : 'Start the agent when you are ready to patch the evidenced change.') + '</p></div>' + Icon('spark') + '</section>' +
     '<div class="vr-modal-button-row">' +
       GlowButton(fixing ? 'Fixing...' : verified ? 'Complete' : 'Start Agent Fix', { action: 'start-agent-fix', tone: verified ? 'green' : 'purple' }) +
       '<button type="button" data-action="verify-now">Verify Now</button>' +
@@ -18702,7 +18616,7 @@ function GuideModal() {
     '</header>' +
     '<section class="vr-modal-flow-list">' +
       '<button type="button" data-provider="' + escapeHtml(provider.id) + '"><span>1</span><div><strong>Review provider proof</strong><em>Open ' + escapeHtml(provider.name) + ' status and dashboard action.</em></div>' + Icon('external') + '</button>' +
-      '<button type="button" data-action="prompt"><span>2</span><div><strong>Open agent mission</strong><em>Give the connected CLI one scoped launch gap, not the whole app.</em></div>' + Icon('prompt') + '</button>' +
+      '<button type="button" data-action="prompt"><span>2</span><div><strong>Open agent mission</strong><em>Give the connected CLI one evidenced change, not the whole app.</em></div>' + Icon('prompt') + '</button>' +
       '<button type="button" data-action="verify-now"><span>3</span><div><strong>Verify the flow</strong><em>Turn the launch path green after the focused fix.</em></div>' + Icon('check') + '</button>' +
     '</section>'
   );
@@ -18729,13 +18643,13 @@ function PlanModal() {
   return ModalShell('plan',
     '<header class="vr-modal-guide-head">' +
       '<img class="vr-modal-agent-avatar" src="' + mascotAssets.idle + '" alt="" />' +
-      '<div><p>Production Plan</p><h2>Safe fix path</h2><em>One scoped mission: fix the highest-risk launch blocker, verify it, then prepare release proof.</em></div>' +
+      '<div><p>Release Plan</p><h2>Safe fix path</h2><em>One scoped mission: understand what changed, fix it, then prepare release proof.</em></div>' +
       '<aside>' + Icon('shield') + '<span>Context</span><strong>' + escapeHtml(provider.name) + '</strong></aside>' +
     '</header>' +
     '<section class="vr-modal-flow-list">' +
       '<button type="button" data-action="add-context"><span>1</span><div><strong>Add launch context</strong><em>Drag a provider or version into chat so the agent has the exact proof target.</em></div>' + Icon('plus') + '</button>' +
-      '<button type="button" data-action="prompt"><span>2</span><div><strong>Open scoped mission</strong><em>Use a production-safe prompt tied to ' + escapeHtml(provider.area) + ' evidence.</em></div>' + Icon('prompt') + '</button>' +
-      '<button type="button" data-action="start-agent-fix"><span>3</span><div><strong>Apply one fix</strong><em>Send the connected model to patch the selected launch gap only.</em></div>' + Icon('agent') + '</button>' +
+      '<button type="button" data-action="prompt"><span>2</span><div><strong>Open scoped mission</strong><em>Use a context-aware prompt tied to ' + escapeHtml(provider.area) + ' evidence.</em></div>' + Icon('prompt') + '</button>' +
+      '<button type="button" data-action="start-agent-fix"><span>3</span><div><strong>Apply one fix</strong><em>Send the connected model to patch the evidenced change only.</em></div>' + Icon('agent') + '</button>' +
       '<button type="button" data-action="show-diff"><span>4</span><div><strong>Review diff</strong><em>Inspect repo changes before accepting verification.</em></div>' + Icon('code') + '</button>' +
       '<button type="button" data-action="verify-now"><span>5</span><div><strong>Run verify</strong><em>Move the mission into a green verified state after review.</em></div>' + Icon('check') + '</button>' +
     '</section>' +
@@ -18846,21 +18760,18 @@ function connectCliAgent(agentId, chatIndex, options) {
 }
 
 function cliSetupProbeLabel() {
-  return demo.cliProbeStatus === 'probing' ? 'Testing\u2026' : demo.cliProbeStatus === 'success' ? 'Connected' : demo.cliProbeStatus === 'failed' ? 'Try again' : 'Test connection';
+  return demo.cliProbeStatus === 'probing' ? 'Testing...' : demo.cliProbeStatus === 'success' ? 'Connected' : demo.cliProbeStatus === 'failed' ? 'Try again' : 'Test connection';
 }
 
 function CliSetupActions(targetId, index) {
   const setup = cliSetupFor(targetId);
   const probeLabel = cliSetupProbeLabel();
-  const ctaPending = demo.cliProbeStatus !== 'success' && demo.cliProbeStatus !== 'probing';
-  const ctaClass = 'vr-cli-action-button is-primary' + (ctaPending ? ' is-pending' : '');
-  return '<p class="vr-cli-setup-cta-hint">After sign-in, click <strong>Test connection</strong> \u2014 chat only works once verified.</p>' +
-    '<div class="vr-cli-connect-expand-actions">' +
+  return '<div class="vr-cli-connect-expand-actions">' +
     '<button class="vr-cli-action-button" type="button" data-action="run-cli-install" data-cli-agent="' + escapeHtml(targetId) + '" data-chat-index="' + String(index) + '">' + Icon('shell') + 'Run install</button>' +
     '<button class="vr-cli-action-button" type="button" data-action="run-cli-signin" data-cli-agent="' + escapeHtml(targetId) + '" data-chat-index="' + String(index) + '">' + Icon('shell') + 'Run sign in</button>' +
-    '<button class="' + ctaClass + '" type="button" data-action="test-cli-connection" data-cli-agent="' + escapeHtml(targetId) + '" data-chat-index="' + String(index) + '">' + Icon('refresh') + escapeHtml(probeLabel) + '</button>' +
+    '<button class="vr-cli-action-button is-primary" type="button" data-action="test-cli-connection" data-cli-agent="' + escapeHtml(targetId) + '" data-chat-index="' + String(index) + '">' + Icon('refresh') + escapeHtml(probeLabel) + '</button>' +
     '</div>' +
-    '<p class="vr-cli-setup-hint">Type commands in the Studio terminal below, or run: <code>' + escapeHtml(setup.installCommand) + '</code> then <code>' + escapeHtml(setup.signInCommand) + '</code></p>';
+    '<p class="vr-cli-setup-hint">Run install and sign in, then use <strong>Test connection</strong> to unlock chat control. Commands: <code>' + escapeHtml(setup.installCommand) + '</code> then <code>' + escapeHtml(setup.signInCommand) + '</code></p>';
 }
 
 function appendTerminalLines(lines) {
@@ -18924,7 +18835,7 @@ function selectTerminalCli(agentId) {
   if (!demo.cliTerminalLines.length) {
     demo.cliTerminalLines = [
       'VibeRaven Studio shell',
-      'Run install, run sign in, then test connection using the buttons below.',
+      'Run install, run sign in, then use Test connection to continue.',
       ''
     ];
   } else {
@@ -18956,8 +18867,8 @@ function StudioTerminalView() {
   const lines = demo.cliTerminalLines.length
     ? demo.cliTerminalLines
     : [
-        'VibeRaven Studio shell',
-        'Type commands at the $ prompt. Use the buttons below to install, sign in, and test.',
+      'VibeRaven Studio shell',
+        'Type commands at the $ prompt. Use Test connection after sign-in.',
         ''
       ];
   const title = terminalConnectTitle(agent);
@@ -19011,7 +18922,7 @@ function ChatFirstTimeConnect(index) {
     : '<p class="vr-chat-first-connect-note">Click Connect to open the Terminal tab \u2014 install, sign in, then test connection.</p>';
   return '<section class="vr-chat-empty-state vr-chat-first-connect" data-chat-index="' + String(index) + '">' +
     '<strong>First time</strong>' +
-    '<span>Connect Codex, Claude Code, or Gemini through VibeRaven Studio.</span>' +
+    '<span>Connect your repo agent through VibeRaven Studio.</span>' +
     '<div class="vr-cli-strip is-inline">' + codingAgents.map((agent) => CliAgentButton(agent, index)).join('') + '</div>' +
     hintLine +
   '</section>';
@@ -19300,7 +19211,7 @@ async function runCliSignInInStudio(agentId, chatIndex) {
       String(payload?.output || payload?.message || 'Sign-in command finished.'),
       payload?.interactiveNote ? String(payload.interactiveNote) : '',
       '',
-      'Complete any browser login, then click Test connection below to verify.'
+      'Complete any browser login, then click Test connection.'
     ]);
     demo.cliTerminalDraft = setupCommandFallback(agentId, 'sign-in');
     demo.notice = 'Sign-in ran in Studio terminal. Finish login if prompted, then test the connection.';
@@ -19332,7 +19243,7 @@ async function openCliOsTerminal(agentId, chatIndex) {
       '',
       String(payload?.message || 'Complete sign-in in the OS terminal window that opened.'),
       '',
-      'When login finishes, return here and click Test connection below to verify.'
+      'When login finishes, return here and click Test connection.'
     ]);
     demo.notice = payload?.ok ? 'OS terminal opened for sign-in fallback.' : 'Could not open an OS terminal window.';
   } catch {
@@ -19347,11 +19258,12 @@ function ModelPicker(index) {
   const models = allModelOptions(index);
   const selectedModel = selectedModelLabel(index);
   const scoped = demo.pickerChatIndex === index;
+  const access = accessModes.find((mode) => mode.id === chat.accessMode) || accessModes[1];
   return '<div class="vr-model-picker">' +
     '<button type="button" data-action="toggle-reasoning" data-chat-index="' + String(index) + '"><span>Reasoning</span><strong>' + escapeHtml(chat.reasoning) + '</strong><i></i></button>' +
     '<button type="button" data-action="toggle-models" data-chat-index="' + String(index) + '"><span>Model</span><strong>' + escapeHtml(selectedModel) + '</strong><i></i></button>' +
     '<button type="button" data-action="toggle-context" data-chat-index="' + String(index) + '"><span>Context</span><strong>' + escapeHtml(chat.context) + '</strong><i></i></button>' +
-    PermissionModeToggle(index) +
+    '<button type="button" data-action="toggle-access" data-chat-index="' + String(index) + '"><span>Access</span><strong>' + escapeHtml(access.label) + '</strong><i></i></button>' +
     (scoped && demo.reasoningMenuOpen ? '<div class="vr-model-menu is-reasoning" role="menu"><p>Reasoning</p>' + reasoningLevels.map((level) =>
       '<button type="button" data-reasoning="' + escapeHtml(level) + '" data-chat-index="' + String(index) + '">' + escapeHtml(level) + (chat.reasoning === level ? '<b></b>' : '') + '</button>'
     ).join('') + '</div>' : '') +
@@ -19361,14 +19273,9 @@ function ModelPicker(index) {
     (scoped && demo.contextMenuOpen ? '<div class="vr-model-menu is-context" role="menu"><p>Context</p>' + contextLevels.map((level) =>
       '<button type="button" data-context="' + escapeHtml(level) + '" data-chat-index="' + String(index) + '">' + escapeHtml(level) + (chat.context === level ? '<b></b>' : '') + '</button>'
     ).join('') + '</div>' : '') +
-    '</div>';
-}
-
-function PermissionModeToggle(index) {
-  const isFullAccess = demo.agentPermissionMode === 'full-access';
-  return '<div class="vr-permission-toggle" role="group" aria-label="Agent permission mode">' +
-    '<button type="button" class="vr-permission-btn' + (!isFullAccess ? ' is-active' : '') + '" data-permission-mode="ask" data-chat-index="' + String(index) + '" aria-pressed="' + String(!isFullAccess) + '" title="Ask for approval before each risky action">Ask each change</button>' +
-    '<button type="button" class="vr-permission-btn is-danger' + (isFullAccess ? ' is-active' : '') + '" data-permission-mode="full-access" data-chat-index="' + String(index) + '" aria-pressed="' + String(isFullAccess) + '" title="Run without per-action approval prompts \u2014 use with care">Full access</button>' +
+    (scoped && demo.accessMenuOpen ? '<div class="vr-model-menu is-access" role="menu"><p>Access</p>' + accessModes.map((mode) =>
+      '<button type="button" data-access-mode="' + escapeHtml(mode.id) + '" data-chat-index="' + String(index) + '"><span><strong>' + escapeHtml(mode.label) + '</strong><em>' + escapeHtml(mode.description) + '</em></span>' + (chat.accessMode === mode.id ? '<b></b>' : '') + '</button>'
+    ).join('') + '</div>' : '') +
     '</div>';
 }
 
@@ -19388,10 +19295,10 @@ function ChatBlockersSummary(cards) {
 function ChatPlanCard(steps, chatIndex) {
   const rows = Array.isArray(steps) ? steps : [];
   if (!rows.length) return '';
-  return '<section class="vr-chat-card vr-chat-plan-card"><header><strong>Production Fix Plan</strong><b>' + String(rows.length) + ' steps</b></header><ol class="vr-chat-plan-list">' +
+  return '<section class="vr-chat-card vr-chat-plan-card"><header><strong>Fix plan</strong><b>' + String(rows.length) + ' actions</b></header><ol class="vr-chat-plan-list">' +
     rows.map((step, index) =>
       '<li><button class="vr-plan-step" type="button" data-action="mission-step" data-step-id="' + escapeHtml(step.id || ('step-' + String(index))) + '" data-chat-index="' + String(chatIndex) + '">' +
-        '<span class="vr-plan-step-num">' + String(index + 1) + '</span>' +
+        '<span class="vr-plan-step-num"></span>' +
         '<span class="vr-plan-step-body">' +
           '<span class="vr-plan-step-title">' + escapeHtml(step.title || 'Fix step') + '</span>' +
           '<span class="vr-plan-step-tag">' + escapeHtml(step.category || 'Quality') + '</span>' +
@@ -19428,7 +19335,7 @@ function ChatMissionCards(cards, chatIndex, options) {
   if (showPlan && planSteps.length) html += ChatPlanCard(planSteps, chatIndex);
   if (connectProviders.length) html += ChatProviderConnectCard(connectProviders, chatIndex);
   if (planSteps.length && !showPlan) {
-    html += '<button class="vr-chat-plan-row" type="button" data-action="view-fix-plan" data-chat-index="' + String(chatIndex) + '">' + Icon('report') + '<strong>View Production Fix Plan</strong><em>' + String(planSteps.length) + ' steps</em><b></b></button>';
+    html += '<button class="vr-chat-plan-row" type="button" data-action="view-fix-plan" data-chat-index="' + String(chatIndex) + '">' + Icon('report') + '<strong>View fix plan</strong><em>' + String(planSteps.length) + ' actions</em><b></b></button>';
   }
   html += '</div>';
   return html;
@@ -19497,7 +19404,9 @@ function linkLabelForUrl(url) {
   if (lower.includes('sentry.io')) return 'Open Sentry';
   if (lower.includes('supabase.com')) return 'Open Supabase';
   if (lower.includes('vercel.com')) return 'Open Vercel';
+  if (lower.includes('github.com')) return 'Open GitHub';
   if (lower.includes('stripe.com')) return 'Open Stripe';
+  if (lower.includes('cli.github.com')) return 'Open GitHub CLI docs';
   if (lower.includes('dashboard')) return 'Open dashboard';
   return 'Open link';
 }
@@ -19555,9 +19464,9 @@ function renderAgentListItems(items, chatIndex) {
 
 function normalizeAgentSectionKey(raw) {
   const key = String(raw || '').trim().toLowerCase().replace(/\\s*\\(\\d+\\)\\s*$/, '').trim();
-  if (/^(gate|launch gate|production gate)$/.test(key)) return 'Gate';
-  if (/^(blockers?|launch blockers?)$/.test(key)) return 'Blockers';
-  if (/^(suggested steps?|fix plan|production fix plan)$/.test(key)) return 'Suggested steps';
+  if (/^(gate|production gate)$/.test(key)) return null;
+  if (/^(blockers?|context gaps?)$/.test(key)) return 'Context gaps';
+  if (/^(suggested steps?|fix plan)$/.test(key)) return 'Suggested steps';
   if (/^(summary|tl;dr|tldr)$/.test(key)) return 'Summary';
   if (key === 'findings') return 'Findings';
   if (key === 'changes made') return 'Changes made';
@@ -19590,15 +19499,7 @@ function dedupeAgentMarkdownBody(text, cards) {
 }
 
 function AgentGateStrip(gateText, gateState) {
-  const gate = gateState || currentState.gate || {};
-  const parsed = String(gateText || '').trim();
-  const status = gate.status || 'unknown';
-  const label = parsed || gate.label || 'Waiting for project evidence';
-  const tone = status === 'clear' ? 'clear' : (status === 'blocked' || status === 'not_clear' ? 'blocked' : 'unknown');
-  return '<div class="vr-agent-gate-strip" data-tone="' + escapeHtml(tone) + '">' +
-    Icon('shield') +
-    '<span><strong>Launch gate</strong><em>' + escapeHtml(label) + '</em></span>' +
-  '</div>';
+  return '';
 }
 
 function parseAgentSections(text, options) {
@@ -19645,8 +19546,7 @@ function renderAgentSectionCard(section, chatIndex) {
   const name = section.name;
   const lower = name.toLowerCase();
   if (lower === 'gate') {
-    const gateText = section.paragraphs.concat(section.items).join(' ');
-    return AgentGateStrip(gateText, currentState.gate || null);
+    return '';
   }
   const isNext = lower === 'next step';
   const isBlockers = lower === 'blockers';
@@ -19664,6 +19564,7 @@ function renderAgentSectionCard(section, chatIndex) {
     const blob = section.items.concat(section.paragraphs).join(' ').toLowerCase();
     const actions = [];
     if (/fix|wire|implement|add|configure|apply|sentry|monitor/.test(blob)) actions.push(agentApplyFixButton(chatIndex));
+    if (blob.includes('github')) actions.push(agentLinkButton('Open GitHub', providerDashboardUrls.github || goLiveUrls.githubNew));
     if (blob.includes('sentry')) actions.push(agentLinkButton('Open Sentry', providerDashboardUrls.sentry || 'https://sentry.io'));
     if (blob.includes('supabase')) actions.push(agentLinkButton('Open Supabase', providerDashboardUrls.supabase || 'https://supabase.com/dashboard/projects'));
     if (blob.includes('vercel')) actions.push(agentLinkButton('Open Vercel', providerDashboardUrls.vercel || 'https://vercel.com/dashboard'));
@@ -19835,7 +19736,7 @@ function readOnlyContextChipsHtml(providerId, releaseId) {
     kind: 'provider',
     index: 0,
     id: provider.id,
-    iconHtml: '<img src="' + (providerMarkAssets[provider.id] || providerAssets[provider.id]) + '" alt="" />',
+    iconHtml: provider.iconHtml || '<img src="' + providerAssetSrc(provider) + '" alt="" />',
     mutedLabel: provider.area,
     label: provider.name,
     readOnly: true,
@@ -19926,7 +19827,7 @@ function ContextDropZone(index, showAttached) {
       kind: 'provider',
       index,
       id: provider.id,
-      iconHtml: '<img src="' + (providerMarkAssets[provider.id] || providerAssets[provider.id]) + '" alt="" />',
+      iconHtml: provider.iconHtml || '<img src="' + providerAssetSrc(provider) + '" alt="" />',
       mutedLabel: provider.area,
       label: provider.name,
     }) : '') +
@@ -20038,12 +19939,13 @@ function AgentActionPanel() {
   return '<aside class="vr-agent-panel" aria-label="VibeRaven AI Agent panel">' +
     '<div class="vr-agent-control">' +
       '<section class="vr-agent-hero ' + (fixing ? 'is-fixing' : '') + (verified ? ' is-verified' : '') + '">' +
-        '<div><p>VibeRaven Agent</p><h2>' + (verified ? 'Ready to launch' : fixing ? 'Fixing launch gap' : 'Ready') + '</h2><em>' + (verified ? 'High confidence. Safe to proceed.' : fixing ? 'Patching proof now.' : 'High confidence. Safe to proceed.') + '</em></div>' +
+        '<div><p>VibeRaven Agent</p><h2>' + (verified ? 'Ready with proof' : fixing ? 'Fixing what changed' : 'Ready') + '</h2><em>' + (verified ? 'High confidence. Safe to proceed.' : fixing ? 'Patching proof now.' : 'High confidence. Safe to proceed.') + '</em></div>' +
         '<img src="' + mascotUrl() + '" alt="" />' +
       '</section>' +
       '<section class="vr-quick-actions"><h3>Quick Actions</h3>' +
         [
-          { id: 'guide', icon: 'guide', title: 'Analyze Issues', caption: 'Find launch blockers' },
+          { id: 'go-live', icon: 'cloud', title: 'Go Live', caption: 'GitHub + Vercel' },
+          { id: 'guide', icon: 'guide', title: 'Analyze Issues', caption: 'Find what changed' },
           { id: 'show-diff', icon: 'code', title: 'View Diff', caption: 'Review changes' },
           { id: 'recheck', icon: 'refresh', title: 'Run Verify', caption: 'Run checks again' },
           { id: 'explain-changes', icon: 'prompt', title: 'Explain Changes', caption: 'Summarize the fix' },
@@ -20204,7 +20106,7 @@ app.addEventListener('click', async (event) => {
     if (demo.activeStudioTab === 'terminal' && !demo.cliTerminalLines.length) {
         demo.cliTerminalLines = [
           'VibeRaven Studio shell',
-          'Type commands at the $ prompt. Use the buttons below to install, sign in, and test.',
+          'Type commands at the $ prompt. Use Test connection after sign-in.',
           ''
         ];
       }
@@ -20302,6 +20204,7 @@ app.addEventListener('click', async (event) => {
       demo.modelMenuOpen = false;
       demo.reasoningMenuOpen = false;
       demo.contextMenuOpen = false;
+      demo.accessMenuOpen = false;
       demo.cliProbeStatus = 'idle';
       demo.cliProbeMessage = '';
       demo.pickerChatIndex = chatIndex;
@@ -20329,6 +20232,7 @@ app.addEventListener('click', async (event) => {
     demo.modelMenuOpen = false;
     demo.reasoningMenuOpen = false;
     demo.contextMenuOpen = false;
+    demo.accessMenuOpen = false;
     demo.notice = (cliAgents.find((item) => item.id === chat.cliId)?.label || chat.cliId) + ' selected for this chat.';
     render();
     return;
@@ -20346,6 +20250,7 @@ app.addEventListener('click', async (event) => {
     demo.modelMenuOpen = false;
     demo.reasoningMenuOpen = false;
     demo.contextMenuOpen = false;
+    demo.accessMenuOpen = false;
     demo.activeStudioTab = 'chat';
     demo.pickerChatIndex = chatIndex;
     demo.notice = selectedModelLabel(chatIndex) + ' selected for this chat.';
@@ -20364,6 +20269,7 @@ app.addEventListener('click', async (event) => {
     demo.reasoningMenuOpen = false;
     demo.modelMenuOpen = false;
     demo.contextMenuOpen = false;
+    demo.accessMenuOpen = false;
     demo.activeStudioTab = 'chat';
     demo.pickerChatIndex = chatIndex;
     demo.notice = chat.reasoning + ' reasoning selected for this chat.';
@@ -20382,6 +20288,7 @@ app.addEventListener('click', async (event) => {
     demo.contextMenuOpen = false;
     demo.modelMenuOpen = false;
     demo.reasoningMenuOpen = false;
+    demo.accessMenuOpen = false;
     demo.activeStudioTab = 'chat';
     demo.pickerChatIndex = chatIndex;
     demo.notice = chat.context + ' context selected for this chat.';
@@ -20390,21 +20297,23 @@ app.addEventListener('click', async (event) => {
     return;
   }
 
-  const permissionButton = event.target.closest('[data-permission-mode]');
-  if (permissionButton) {
+  const accessButton = event.target.closest('[data-access-mode]');
+  if (accessButton) {
     event.preventDefault();
-    const mode = permissionButton.getAttribute('data-permission-mode');
-    demo.agentPermissionMode = mode === 'full-access' ? 'full-access' : 'ask';
-    savePermissionMode(demo.agentPermissionMode);
-    const chatIndex = Number(permissionButton.getAttribute('data-chat-index') || String(demo.pickerChatIndex || 0));
-    demo.pickerChatIndex = chatIndex;
+    const chatIndex = Number(accessButton.getAttribute('data-chat-index') || String(demo.pickerChatIndex || 0));
+    const chat = chatContext(chatIndex);
+    const selected = accessModes.find((mode) => mode.id === accessButton.getAttribute('data-access-mode')) || accessModes[1];
+    chat.accessMode = selected.id;
+    demo.selectedAccessMode = selected.id;
+    demo.accessMenuOpen = false;
+    demo.contextMenuOpen = false;
     demo.modelMenuOpen = false;
     demo.reasoningMenuOpen = false;
-    demo.contextMenuOpen = false;
-    demo.notice = demo.agentPermissionMode === 'full-access'
-      ? 'Full access mode: agent runs without per-action approval prompts.'
-      : 'Ask mode: agent will request approval before each risky action.';
-    render();
+    demo.activeStudioTab = 'chat';
+    demo.pickerChatIndex = chatIndex;
+    demo.notice = selected.label + ' selected for this chat.';
+    refreshPickerMenus();
+    refreshBottomTip();
     return;
   }
 
@@ -20415,6 +20324,7 @@ app.addEventListener('click', async (event) => {
     demo.modelMenuOpen = false;
     demo.reasoningMenuOpen = false;
     demo.contextMenuOpen = false;
+    demo.accessMenuOpen = false;
     if (stage === 'provider') {
       demo.activeStudioTab = 'chat';
       demo.providerPickerOpen = true;
@@ -20588,7 +20498,7 @@ app.addEventListener('click', async (event) => {
   }
   if (action === 'copy-prompt') {
     const copied = await copyText(agentPromptText());
-    demo.notice = copied ? 'Agent mission ready. Keep the connected CLI scoped to this launch gap.' : 'Mission is still visible; clipboard permission was not available.';
+    demo.notice = copied ? 'Agent mission ready. Keep the connected CLI scoped to the evidenced change.' : 'Mission is still visible; clipboard permission was not available.';
     render();
     return;
   }
@@ -20601,6 +20511,7 @@ app.addEventListener('click', async (event) => {
     demo.modelMenuOpen = !samePicker;
     demo.reasoningMenuOpen = false;
     demo.contextMenuOpen = false;
+    demo.accessMenuOpen = false;
     refreshPickerMenus();
     return;
   }
@@ -20613,6 +20524,7 @@ app.addEventListener('click', async (event) => {
     demo.reasoningMenuOpen = !samePicker;
     demo.modelMenuOpen = false;
     demo.contextMenuOpen = false;
+    demo.accessMenuOpen = false;
     refreshPickerMenus();
     return;
   }
@@ -20625,6 +20537,20 @@ app.addEventListener('click', async (event) => {
     demo.contextMenuOpen = !samePicker;
     demo.modelMenuOpen = false;
     demo.reasoningMenuOpen = false;
+    demo.accessMenuOpen = false;
+    refreshPickerMenus();
+    return;
+  }
+  if (action === 'toggle-access') {
+    event.preventDefault();
+    const chatIndex = Number(actionButton.getAttribute('data-chat-index') || '0');
+    const samePicker = demo.pickerChatIndex === chatIndex && demo.accessMenuOpen;
+    demo.activeStudioTab = 'chat';
+    demo.pickerChatIndex = chatIndex;
+    demo.accessMenuOpen = !samePicker;
+    demo.modelMenuOpen = false;
+    demo.reasoningMenuOpen = false;
+    demo.contextMenuOpen = false;
     refreshPickerMenus();
     return;
   }
@@ -20728,6 +20654,7 @@ app.addEventListener('click', async (event) => {
     demo.modelMenuOpen = false;
     demo.reasoningMenuOpen = false;
     demo.contextMenuOpen = false;
+    demo.accessMenuOpen = false;
     demo.notice = 'New chat opened.';
     render();
     return;
@@ -20801,12 +20728,17 @@ app.addEventListener('click', async (event) => {
     runChatTask('analyze');
     return;
   }
+  if (action === 'go-live') {
+    demo.pickerChatIndex = actionChatIndex;
+    runChatTask('go-live');
+    return;
+  }
   if (action === 'prompt') {
     demo.activeNavId = 'agents';
     demo.activeStepId = 'agent';
     demo.providerPickerOpen = false;
     demo.activeModal = 'prompt';
-    demo.notice = 'Agent mission is ready. Keep the fix scoped to the selected launch gap.';
+    demo.notice = 'Agent mission is ready. Keep the fix scoped to the evidenced change.';
     render();
     return;
   }
@@ -20833,7 +20765,7 @@ app.addEventListener('click', async (event) => {
     const chatIndex = Number(actionButton.getAttribute('data-chat-index') || String(actionChatIndex));
     demo.fixPlanExpandedChatIndex = demo.fixPlanExpandedChatIndex === chatIndex ? null : chatIndex;
     demo.pickerChatIndex = chatIndex;
-    demo.notice = demo.fixPlanExpandedChatIndex === chatIndex ? 'Production fix plan expanded in chat.' : 'Production fix plan collapsed.';
+    demo.notice = demo.fixPlanExpandedChatIndex === chatIndex ? 'Fix plan expanded in chat.' : 'Fix plan collapsed.';
     render();
     return;
   }
@@ -20890,7 +20822,7 @@ app.addEventListener('click', async (event) => {
     environment: 'Environment selector is scoped to the local Studio preview.',
     account: 'VibeRaven agent opened from the header mascot.',
     'all-releases': 'Release history view opens next; this preview keeps the timeline focused.',
-    'explain-changes': 'Change summary opened for production-safe review wording.',
+    'explain-changes': 'Change summary opened with release-context wording.',
   };
   if (actionMessages[action]) {
     if (action === 'all-releases') {
@@ -20973,7 +20905,7 @@ app.addEventListener('dragstart', (event) => {
       event,
       provider ? provider.name : 'Provider',
       provider ? provider.area : 'Drop into VibeRaven chat',
-      provider ? '<img src="' + escapeHtml(providerMarkAssets[provider.id] || providerAssets[provider.id]) + '" alt="" />' : ''
+      provider ? (provider.iconHtml || '<img src="' + providerAssetSrc(provider) + '" alt="" />') : ''
     );
     providerButton.classList.add('is-being-dragged');
     demo.notice = 'Dragging provider context. Drop it into a chat composer or Split chat.';
@@ -21063,7 +20995,7 @@ app.addEventListener('drop', (event) => {
     if (newChatTarget) demo.activeRecentChatId = null;
     if (chatIndex === 0) syncPrimaryContext();
     if (provider && provider.state === 'not_detected') {
-      context.draft = 'Help me connect ' + provider.name + ' for production. What env vars and dashboard steps do I need?';
+      context.draft = 'Help me connect ' + provider.name + ' with context. What provider state, runtime behavior, or dashboard proof does this repo need?';
       demo.notice = provider.name + ' is missing \u2014 connect steps prefilled. Send when ready.';
     } else {
       demo.notice = provider ? provider.name + ' context attached to chat ' + String(chatIndex + 1) + '. Suggested actions updated for ' + (stackSlots[provider.id] || provider.area) + '.' : 'Provider context attached.';
@@ -23768,21 +23700,6 @@ body:has(.vr-app.is-dragging) {
   background: rgba(124, 58, 237, 0.92);
   color: #fff;
 }
-.vr-cli-setup-cta-hint {
-  margin: 0 0 6px;
-  color: #94a3b8;
-  font-size: 11px;
-  font-weight: 500;
-  line-height: 1.35;
-}
-.vr-cli-setup-cta-hint strong {
-  color: #c4b5fd;
-  font-weight: 650;
-}
-.vr-cli-action-button.is-primary.is-pending {
-  border-color: rgba(168, 85, 247, 0.55);
-  box-shadow: 0 0 0 1px rgba(168, 85, 247, 0.25);
-}
 .vr-cli-strip button.is-connect-target {
   border-color: rgba(248, 250, 252, 0.34);
   box-shadow: inset 0 0 0 1px rgba(248, 250, 252, 0.08);
@@ -24507,16 +24424,15 @@ body:has(.vr-app.is-dragging) {
   border-color: rgba(168, 85, 247, 0.38);
 }
 .vr-plan-step-num {
-  width: 28px;
-  height: 28px;
+  width: 10px;
+  height: 10px;
   flex: 0 0 auto;
   display: grid;
   place-items: center;
-  border: 1px solid rgba(168, 85, 247, 0.35);
+  border: 1px solid rgba(168, 85, 247, 0.5);
   border-radius: 999px;
-  color: #e9d5ff;
-  font-size: 12px;
-  font-weight: 700;
+  background: rgba(168, 85, 247, 0.28);
+  box-shadow: 0 0 10px rgba(168, 85, 247, 0.22);
 }
 .vr-plan-step-body {
   flex: 1 1 0;
@@ -25128,6 +25044,10 @@ body:has(.vr-app.is-dragging) {
 .vr-model-menu.is-context {
   right: 0;
 }
+.vr-model-menu.is-access {
+  right: 0;
+  min-width: 270px;
+}
 .vr-studio-chat.is-split .vr-model-menu {
   bottom: calc(100% + 10px);
   min-width: min(245px, calc(100vw - 32px));
@@ -25144,6 +25064,10 @@ body:has(.vr-app.is-dragging) {
   left: auto;
   right: 0;
 }
+.vr-studio-chat.is-split .vr-model-menu.is-access {
+  left: auto;
+  right: 0;
+}
 .vr-model-menu p {
   margin: 2px 4px 6px;
   color: #a8a29e;
@@ -25288,7 +25212,7 @@ body:has(.vr-app.is-dragging) {
 }
 .vr-bottom-inventory .vr-provider-card {
   min-height: 48px;
-  grid-template-columns: 34px minmax(0, 1fr) auto 28px;
+  grid-template-columns: 34px minmax(0, 1fr) 18px 22px;
   grid-template-rows: 1fr;
   align-items: center;
   gap: 8px;
@@ -25345,14 +25269,6 @@ body:has(.vr-app.is-dragging) {
   fill: none !important;
   stroke: currentColor !important;
 }
-.vr-bottom-inventory .vr-provider-light {
-  right: 36px;
-  top: 50%;
-  width: 7px;
-  height: 7px;
-  transform: translateY(-50%);
-  box-shadow: 0 0 9px rgba(34, 197, 94, 0.42);
-}
 .vr-bottom-inventory .vr-provider-card .vr-status-badge {
   grid-column: 3;
   min-height: 18px;
@@ -25639,8 +25555,35 @@ body:has(.vr-app.is-dragging) {
   filter: saturate(1.04) contrast(1.02);
   transition: transform 180ms cubic-bezier(0.23, 1, 0.32, 1);
 }
+.vr-provider-token .provider-logo__img {
+  filter: saturate(1.22) contrast(1.14);
+}
+.vr-provider-token .provider-logo__img[data-provider-logo-key="github"],
+.vr-provider-token .provider-logo__img[data-provider-logo-key="vercel"],
+.vr-provider-token .provider-logo__img[data-provider-logo-key="resend"] {
+  filter: drop-shadow(0 0 8px rgba(255, 255, 255, 0.18));
+}
+.vr-provider-token .provider-logo__img[data-provider-logo-key="sentry"] {
+  filter: saturate(1.34) contrast(1.16) drop-shadow(0 0 9px rgba(139, 92, 246, 0.26));
+}
+.vr-provider-token svg {
+  position: relative;
+  z-index: 1;
+  width: 26px;
+  height: 26px;
+  display: block;
+}
+.vr-provider-token .vr-provider-logo,
+.vr-provider-token .vr-provider-logo img {
+  width: 26px;
+  height: 26px;
+  display: block;
+  object-fit: contain;
+}
 .vr-provider-card:hover .vr-provider-token img,
-.vr-provider-card.is-selected .vr-provider-token img {
+.vr-provider-card.is-selected .vr-provider-token img,
+.vr-provider-card:hover .vr-provider-token svg,
+.vr-provider-card.is-selected .vr-provider-token svg {
   transform: scale(1.08);
 }
 .vr-provider-token.is-picker {
@@ -25661,15 +25604,11 @@ body:has(.vr-app.is-dragging) {
   width: 34px;
   height: 34px;
 }
-.vr-provider-light {
-  position: absolute;
-  right: 42px;
-  top: 18px;
-  width: 8px;
-  height: 8px;
-  border-radius: 999px;
-  background: var(--vr-green);
-  box-shadow: 0 0 8px rgba(34, 197, 94, 0.36);
+.vr-provider-token.is-large svg,
+.vr-provider-token.is-large .vr-provider-logo,
+.vr-provider-token.is-large .vr-provider-logo img {
+  width: 34px;
+  height: 34px;
 }
 .vr-provider-card small,
 .vr-provider-card strong,
@@ -25699,6 +25638,15 @@ body:has(.vr-app.is-dragging) {
   font-size: 11px;
   font-weight: 520;
 }
+.vr-provider-card[data-provider-tone="orange"] em {
+  color: #fbbf24;
+}
+.vr-provider-card[data-provider-tone="red"] em {
+  color: #fb7185;
+}
+.vr-provider-card[data-provider-tone="neutral"] em {
+  color: #aeb7c6;
+}
 .vr-provider-proof-chip {
   grid-column: 1 / -1;
   display: inline-flex;
@@ -25730,6 +25678,130 @@ body:has(.vr-app.is-dragging) {
   height: 13px;
   stroke: currentColor;
 }
+.vr-provider-mcp-chip {
+  grid-column: 2;
+  grid-row: 2;
+  justify-self: end;
+  min-width: 0;
+  width: 8px;
+  height: 8px;
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  gap: 0;
+  border: 0;
+  border-radius: 999px;
+  padding: 0;
+  color: #fbbf24;
+  font-size: 10px;
+  font-weight: 720;
+  line-height: 1;
+  background: transparent;
+}
+.vr-provider-mcp-chip i {
+  width: 8px;
+  height: 8px;
+  flex: 0 0 auto;
+  border-radius: 999px;
+  background: #f59e0b;
+  box-shadow: 0 0 8px rgba(245, 158, 11, 0.36);
+  animation: vrStatusPulse 2.7s ease-in-out infinite;
+}
+.vr-provider-mcp-chip span {
+  position: absolute;
+  width: 1px;
+  height: 1px;
+  overflow: hidden;
+  clip: rect(0 0 0 0);
+}
+.vr-provider-mcp-chip.is-connected {
+  border-color: transparent;
+  background: transparent;
+  color: #bbf7d0;
+}
+.vr-provider-mcp-chip.is-connected i {
+  background: #22c55e;
+  box-shadow: 0 0 8px rgba(34, 197, 94, 0.42);
+}
+@keyframes vrStatusPulse {
+  0%, 100% {
+    opacity: 0.72;
+    transform: scale(0.92);
+  }
+  50% {
+    opacity: 1;
+    transform: scale(1.08);
+  }
+}
+.vr-provider-mcp-panel {
+  display: grid;
+  gap: 10px;
+  border: 1px solid rgba(148, 163, 184, 0.13);
+  border-radius: 10px;
+  padding: 10px;
+  background: rgba(255, 255, 255, 0.035);
+}
+.vr-provider-mcp-panel header {
+  display: grid;
+  grid-template-columns: 30px minmax(0, 1fr);
+  gap: 10px;
+  align-items: center;
+}
+.vr-provider-mcp-panel header > span {
+  width: 30px;
+  height: 30px;
+  display: inline-grid;
+  place-items: center;
+  border-radius: 8px;
+  background: rgba(245, 158, 11, 0.11);
+  color: #fbbf24;
+}
+.vr-provider-mcp-panel strong,
+.vr-provider-mcp-panel em {
+  display: block;
+  min-width: 0;
+}
+.vr-provider-mcp-panel strong {
+  color: #f8fafc;
+  font-size: 13px;
+}
+.vr-provider-mcp-panel em {
+  margin-top: 2px;
+  color: #98a2b3;
+  font-size: 11px;
+  font-style: normal;
+}
+.vr-provider-mcp-panel > div {
+  display: flex;
+  flex-wrap: wrap;
+  gap: 6px;
+}
+.vr-provider-mcp-panel small {
+  border-radius: 999px;
+  border: 1px solid rgba(148, 163, 184, 0.13);
+  padding: 4px 7px;
+  color: #b9c2cf;
+  font-size: 10px;
+  font-weight: 680;
+}
+.vr-provider-mcp-panel.is-connected {
+  border-color: rgba(34, 197, 94, 0.24);
+  background: rgba(34, 197, 94, 0.055);
+}
+.vr-provider-mcp-panel.is-connected header > span {
+  background: rgba(34, 197, 94, 0.12);
+  color: #86efac;
+}
+.vr-bottom-inventory .vr-provider-mcp-chip {
+  grid-column: 3;
+  grid-row: 1;
+  justify-self: end;
+  min-width: 0;
+  width: 8px;
+  height: 8px;
+  padding: 0;
+  font-size: 0;
+}
 .vr-bottom-inventory .vr-provider-proof-chip {
   grid-column: 4;
   justify-self: end;
@@ -25751,13 +25823,6 @@ body:has(.vr-app.is-dragging) {
   height: 15px;
   stroke-width: 2.35;
 }
-.vr-bottom-inventory .vr-provider-light {
-  right: 36px;
-  top: 50%;
-  width: 7px;
-  height: 7px;
-  transform: translateY(-50%);
-}
 .vr-bottom-inventory .vr-provider-card:hover .vr-provider-proof-chip,
 .vr-bottom-inventory .vr-provider-card.is-selected .vr-provider-proof-chip {
   background: transparent;
@@ -26352,33 +26417,48 @@ body:has(.vr-app.is-dragging) {
   width: 18px;
   height: 18px;
 }
+.vr-bottom-tip-bar .vr-inline-brand-mark.is-github {
+  display: inline-grid;
+  place-items: center;
+  color: #f8fafc;
+}
+.vr-bottom-tip-bar .vr-inline-brand-mark.is-github svg {
+  width: 17px;
+  height: 17px;
+  display: block;
+  fill: currentColor;
+}
 .vr-tip-mascot {
+  width: 34px;
+  height: 34px;
   align-self: stretch;
   position: relative;
   display: grid;
   place-items: end center;
   overflow: hidden;
+  border-right: 1px solid rgba(148, 163, 184, 0.16);
 }
 .vr-tip-mascot::before {
   content: "";
   position: absolute;
-  left: 9px;
-  right: 9px;
-  bottom: 4px;
-  height: 12px;
+  left: 8px;
+  right: 8px;
+  bottom: 2px;
+  height: 10px;
   border-radius: 999px;
-  background: rgba(124, 58, 237, 0.3);
-  filter: blur(10px);
+  background: rgba(124, 58, 237, 0.24);
+  filter: blur(8px);
 }
 .vr-tip-mascot img {
   position: relative;
+  z-index: 1;
   align-self: end;
-  width: 46px;
-  height: 42px;
+  width: 32px;
+  height: 32px;
   object-fit: contain;
   object-position: bottom;
-  transform: translateY(4px) scale(1.02);
-  filter: saturate(1.18) drop-shadow(0 0 22px rgba(168, 85, 247, 0.6));
+  transform: translateY(3px);
+  filter: saturate(1.16) drop-shadow(0 0 12px rgba(168, 85, 247, 0.46));
 }
 .vr-bottom-tip-bar span {
   color: #cbd5e1;
@@ -26701,6 +26781,18 @@ body:has(.vr-app.is-dragging) {
   box-shadow: var(--vr-glow-purple);
   transition: transform 200ms cubic-bezier(0.23, 1, 0.32, 1), box-shadow 200ms ease;
 }
+.vr-modal-provider-logo.is-logo-html {
+  display: grid;
+  place-items: center;
+}
+.vr-modal-provider-logo.is-logo-html img,
+.vr-modal-provider-logo.is-logo-html svg,
+.vr-modal-provider-logo.is-logo-html .vr-provider-logo {
+  width: 74px;
+  height: 74px;
+  display: block;
+  object-fit: contain;
+}
 
 .vr-modal-provider-logo:hover {
   transform: translateY(-3px) rotate(-2deg);
@@ -28046,46 +28138,6 @@ body:has(.vr-app.is-dragging) {
     display: none;
   }
 }
-.vr-permission-toggle {
-  display: inline-flex;
-  align-items: center;
-  gap: 0;
-  border: 1px solid rgba(148, 163, 184, 0.18);
-  border-radius: 8px;
-  overflow: hidden;
-  background: rgba(39, 40, 44, 0.92);
-}
-.vr-permission-btn {
-  min-height: 28px;
-  padding: 0 10px;
-  font-size: 11px;
-  font-weight: 640;
-  color: #94a3b8;
-  background: transparent;
-  border: none;
-  border-radius: 0;
-  cursor: pointer;
-  transition: background 0.12s, color 0.12s;
-  white-space: nowrap;
-}
-.vr-permission-btn + .vr-permission-btn {
-  border-left: 1px solid rgba(148, 163, 184, 0.14);
-}
-.vr-permission-btn.is-active {
-  background: rgba(100, 116, 139, 0.28);
-  color: #f1f5f9;
-}
-.vr-permission-btn.is-danger {
-  color: #f59e0b;
-}
-.vr-permission-btn.is-danger.is-active {
-  background: rgba(245, 158, 11, 0.18);
-  color: #fbbf24;
-}
-.vr-permission-btn:hover:not(.is-active) {
-  background: rgba(148, 163, 184, 0.1);
-  color: #e2e8f0;
-}
 `;
   }
 });
@@ -28102,8 +28154,9 @@ function renderLocalUiHtml(state) {
     <meta name="viewport" content="width=device-width, initial-scale=1" />
     <meta name="theme-color" content="#050816" />
     <title>VibeRaven</title>
-    <link rel="icon" type="image/png" href="/report/assets/viberaven-mascot-idle.png" />
-    <link rel="apple-touch-icon" href="/report/assets/viberaven-mascot-idle.png" />
+    <link rel="icon" type="image/png" sizes="64x64" href="/report/assets/viberaven-favicon.png" />
+    <link rel="shortcut icon" type="image/png" href="/report/assets/viberaven-favicon.png" />
+    <link rel="apple-touch-icon" href="/report/assets/viberaven-mascot.png" />
     <style>${localUiCss}</style>
   </head>
   <body>
@@ -28366,6 +28419,19 @@ async function releaseChangelogBetween(cwd, fromRef, toRef) {
   });
   return { from: fromRef, to: toRef, fromLabel: fromRef, toLabel: toRef, entries };
 }
+async function releaseDiffContextBlock(cwd, releaseId) {
+  const ref = safeGitRef(releaseId);
+  if (!ref || ref === "workspace") return void 0;
+  if (!await gitRefExists(cwd, ref)) return void 0;
+  const comparison = await compareReleaseRefs(cwd, ref, "HEAD");
+  const stats = comparison.stats;
+  const diffPreview = comparison.diff.length > 6e3 ? comparison.diff.slice(0, 6e3) + "\n[diff truncated]" : comparison.diff;
+  return [
+    `Attached release diff (${comparison.fromLabel} -> ${comparison.toLabel}):`,
+    `Files changed: ${stats.files}; insertions: ${stats.insertions}; deletions: ${stats.deletions}`,
+    diffPreview
+  ].join("\n");
+}
 async function rollbackReleaseRef(cwd, targetRef) {
   if (!await gitRefExists(cwd, targetRef)) {
     return { ok: false, message: `Release ref "${targetRef}" was not found in this repo.`, checkedOut: "" };
@@ -28558,7 +28624,7 @@ async function detectLocalCliAgents(cwd, options = {}) {
       return {
         ...agent,
         installed,
-        connected: installed,
+        connected: agent.id === "terminal",
         source: simulateDisconnected ? "simulated" : installed ? "detected" : "fallback",
         models: cliModelDefaults(agent.id),
         setup: CLI_AGENT_SETUP[agent.id]
@@ -28576,6 +28642,60 @@ function isPlaceholderProjectName(value) {
   const normalized = value.trim().toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
   return normalized === "" || normalized === "project" || normalized === "npx-open-source-check" || normalized.startsWith("viberaven-local-ui");
 }
+async function readMcpEvidence(cwd) {
+  const candidates = MCP_CONFIG_PATHS.map((relativePath) => ({
+    source: relativePath.replace(/\\/g, "/"),
+    path: (0, import_node_path31.resolve)(cwd, relativePath)
+  }));
+  const home = process.env.USERPROFILE || process.env.HOME;
+  if (home) {
+    candidates.push({
+      source: "~/.codex/config.toml",
+      path: (0, import_node_path31.resolve)(home, ".codex", "config.toml")
+    });
+  }
+  const evidence = [];
+  for (const candidate of candidates) {
+    try {
+      const text = await (0, import_promises24.readFile)(candidate.path, "utf8");
+      if (/mcp/i.test(text)) evidence.push({ source: candidate.source, text });
+    } catch {
+    }
+  }
+  return evidence;
+}
+function mcpForProvider(provider2, evidence) {
+  const needles = MCP_PROVIDER_NEEDLES[provider2.id] ?? [provider2.id];
+  const match = evidence.find((item4) => {
+    const lower = item4.text.toLowerCase();
+    return needles.some((needle) => lower.includes(needle.toLowerCase()));
+  });
+  if (match) {
+    return {
+      status: "connected",
+      label: "MCP connected",
+      source: match.source,
+      connectCommand: MCP_CONNECT_COMMANDS[provider2.id],
+      capabilities: ["repo context", provider2.area, "provider-aware chat"]
+    };
+  }
+  return {
+    status: "disconnected",
+    label: "Connect MCP",
+    connectCommand: MCP_CONNECT_COMMANDS[provider2.id] ?? `Add a ${provider2.name} MCP server entry, then drag ${provider2.name} into chat.`,
+    capabilities: []
+  };
+}
+async function applyMcpDetection(state, cwd) {
+  const evidence = await readMcpEvidence(cwd);
+  return {
+    ...state,
+    providers: state.providers.map((provider2) => ({
+      ...provider2,
+      mcp: mcpForProvider(provider2, evidence)
+    }))
+  };
+}
 async function enrichProjectMetadata(state, cwd) {
   const packageJson = await readPackageJson2(cwd);
   const metadata = {
@@ -28584,7 +28704,7 @@ async function enrichProjectMetadata(state, cwd) {
   };
   const files = await listProjectFiles(cwd);
   const deps = dependencyNames(packageJson);
-  const detectedState = state.empty ? applyProviderDetection(state, deps, files) : state;
+  const detectedState = await applyMcpDetection(state.empty ? applyProviderDetection(state, deps, files) : state, cwd);
   const releases = await detectReleases(cwd, metadata.version);
   const missionCards = state.empty ? buildMissionCards(
     {
@@ -28695,19 +28815,19 @@ function parseAgentChatRequest(value) {
   if (rawCliId !== "codex" && rawCliId !== "claude" && rawCliId !== "gemini") return { error: "Unsupported coding CLI" };
   const prompt = stringField(value.prompt, 12e3);
   if (!prompt) return { error: "Agent chat prompt is required" };
-  const provider2 = isRecord7(value.provider) ? { area: stringField(value.provider.area, 120), name: stringField(value.provider.name, 120) } : void 0;
-  const release = isRecord7(value.release) ? { label: stringField(value.release.label, 120) } : void 0;
-  const rawPermMode = stringField(value.permissionMode, 20);
-  const permissionMode = rawPermMode === "full-access" ? "full-access" : "ask";
+  const provider2 = isRecord7(value.provider) ? { id: stringField(value.provider.id, 80), area: stringField(value.provider.area, 120), name: stringField(value.provider.name, 120) } : void 0;
+  const release = isRecord7(value.release) ? { id: stringField(value.release.id, 200), label: stringField(value.release.label, 120) } : void 0;
+  const requestedAccessMode = stringField(value.accessMode, 40);
+  const accessMode = requestedAccessMode === "ask" || requestedAccessMode === "approve" || requestedAccessMode === "full" ? requestedAccessMode : "approve";
   return {
     cliId: rawCliId,
     modelId: stringField(value.modelId, 120),
     reasoning: stringField(value.reasoning, 80),
     context: stringField(value.context, 80),
+    accessMode,
     prompt,
     displayPrompt: stringField(value.displayPrompt, 240),
     taskKind: stringField(value.taskKind, 40),
-    permissionMode,
     provider: provider2,
     release
   };
@@ -28715,17 +28835,17 @@ function parseAgentChatRequest(value) {
 function taskKindExecutionBlock(taskKind) {
   switch (taskKind) {
     case "analyze":
-      return "Execution mode: analyze launch readiness. Read repo files and .viberaven artifacts; return concise findings with paths. Do not dump CLI install manuals or numbered manual runbooks.";
+      return "Execution mode: analyze what changed. Read repo files and .viberaven artifacts; return concise findings with paths. Do not dump CLI install manuals or numbered manual runbooks.";
     case "plan":
       return "Execution mode: build an ordered fix plan from repo evidence. If the top blocker is repo-code, apply that fix in the project before answering. Do not reply with only manual instructions when code edits are possible.";
     case "fix":
       return "Execution mode: apply one minimal scoped repo fix IN CODE NOW. Read existing files, edit the project, save changes, then summarize. Forbidden: telling the user what to do manually when you can patch the repo yourself.";
     case "verify":
-      return "Execution mode: verify launch readiness. Prefer `npx -y viberaven --verify` or read .viberaven/gate-result.json and agent-tasklist.md.";
+      return "Execution mode: verify the what-changed context. Prefer `npx -y viberaven --verify` or read .viberaven/gate-result.json and agent-tasklist.md.";
     case "provider":
       return "Execution mode: provider proof or connect mission. Edit repo wiring when missing; separate dashboard-only steps from code changes; never claim live connection without proof.";
     case "diff":
-      return "Execution mode: review production diff and flag risky changes.";
+      return "Execution mode: review the release diff and flag risky changes.";
     case "explain":
       return "Execution mode: explain recent changes and next verification steps.";
     default:
@@ -28750,24 +28870,30 @@ async function buildAgentChatPrompt(request, cwd) {
   const state = await readState(cwd);
   const executionBlock = taskKindExecutionBlock(request.taskKind);
   const cardsBlock = missionCardsContextBlock(state);
+  const providerState2 = request.provider?.id ? state.providers.find((provider2) => provider2.id === request.provider?.id) : state.providers.find((provider2) => provider2.name === request.provider?.name);
+  const mcp = providerState2?.mcp;
+  const releaseDiffBlock = await releaseDiffContextBlock(cwd, request.release?.id);
   const lines = [
-    "You are VibeRaven Studio, a production-readiness coding agent for an open-source local runner.",
+    "You are VibeRaven Studio, a what-changed coding agent for an open-source local runner.",
     `Project folder: ${cwd}`,
     request.modelId ? `Selected model label: ${request.modelId}` : void 0,
     request.reasoning ? `Reasoning: ${request.reasoning}` : void 0,
     request.context ? `Context: ${request.context}` : void 0,
+    `Access mode: ${request.accessMode ?? "approve"}`,
     request.provider?.name ? `Provider context: ${request.provider.area ?? "Provider"} / ${request.provider.name}` : void 0,
+    mcp ? `Provider MCP: ${mcp.label}${mcp.source ? ` (${mcp.source})` : ""}` : void 0,
     request.release?.label ? `Release context: ${request.release.label}` : void 0,
-    state.gate?.label ? `Gate: ${state.gate.label} (${state.gate.status ?? "unknown"})` : void 0,
+    releaseDiffBlock,
+    state.gate?.label ? `Project status: ${state.gate.label} (${state.gate.status ?? "unknown"})` : void 0,
     state.missionControl?.mainBlocker ? `Main blocker: ${state.missionControl.mainBlocker}` : void 0,
     executionBlock,
     cardsBlock,
     "",
     "Safety rules:",
     "- Stay scoped to this project folder.",
-    "- Explain risky or destructive changes before making them.",
+    (request.accessMode ?? "approve") === "ask" ? "- Ask before editing files, using the internet, running destructive commands, or changing provider settings." : (request.accessMode ?? "approve") === "full" ? "- Full access is enabled for this local project; still explain destructive changes before running them." : "- Edit project files when needed, but explain risky or destructive changes before making them.",
     "- Do not claim provider dashboard setup is complete from repo edits alone.",
-    "- Keep the answer focused on production readiness.",
+    "- Keep the answer focused on what changed, provider context, and the next grounded action.",
     "- Return only the final user-facing answer. Do not echo this prompt, session metadata, logs, or command transcripts.",
     "- For fix/plan/provider repo gaps: edit files in this project before answering. Manual dashboard steps are only for gaps that cannot be solved in repo code.",
     "- Never paste long VibeRaven operator manuals, heal loops, or PowerShell command blocks unless the user explicitly asked how to run verify.",
@@ -28799,24 +28925,19 @@ function insertCodexExecOptions(codexArgs, pairs) {
   const insertAt = execIndex >= 0 ? execIndex + 1 : codexArgs.length;
   codexArgs.splice(insertAt, 0, ...pairs);
 }
-function resolveCodexSandboxArgs(permissionMode, platform) {
-  if (permissionMode === "full-access") {
-    return ["--sandbox", "danger-full-access", "--ask-for-approval", "never"];
-  }
-  if (platform === "win32") {
-    return ["--sandbox", "danger-full-access", "--ask-for-approval", "on-request"];
-  }
-  return ["--sandbox", "workspace-write", "--ask-for-approval", "on-request"];
+function codexAccessFlags(accessMode) {
+  if (accessMode === "ask") return ["--sandbox", "workspace-write", "--ask-for-approval", "on-request"];
+  if (accessMode === "full") return ["--sandbox", "danger-full-access", "--ask-for-approval", "never"];
+  return ["--sandbox", "workspace-write", "--ask-for-approval", "on-failure"];
 }
-function commandForAgentChat(request, prompt, cwd, outputPath, platform = process.platform) {
-  const command = platform === "win32" ? `${request.cliId}.cmd` : request.cliId;
+function commandForAgentChat(request, prompt, cwd, outputPath) {
+  const command = process.platform === "win32" ? `${request.cliId}.cmd` : request.cliId;
   const promptArg = prompt.replace(/\s*\r?\n\s*/g, " ");
   const model = normalizeCliModelId(request.modelId);
   const effort = resolveCliReasoningEffort(request.cliId, request.reasoning);
-  const permissionMode = request.permissionMode ?? "ask";
   if (request.cliId === "gemini") {
     const geminiArgs = ["-p", promptArg, "--output-format", "text"];
-    if (permissionMode === "full-access") geminiArgs.push("--skip-trust");
+    if (request.accessMode !== "ask") geminiArgs.push("--skip-trust");
     if (model) geminiArgs.splice(0, 0, "-m", model);
     return { command, args: geminiArgs };
   }
@@ -28824,13 +28945,12 @@ function commandForAgentChat(request, prompt, cwd, outputPath, platform = proces
     const claudeArgs = ["-p", promptArg];
     if (model) claudeArgs.unshift("--model", model);
     if (effort) claudeArgs.unshift("--effort", effort);
-    if (permissionMode === "full-access") {
+    if (request.accessMode === "full") {
       claudeArgs.push("--dangerously-skip-permissions");
     }
     return { command, args: claudeArgs };
   }
-  const sandboxArgs = resolveCodexSandboxArgs(permissionMode, platform);
-  const codexArgs = ["--cd", cwd, ...sandboxArgs, "exec", "--color", "never"];
+  const codexArgs = ["--cd", cwd, ...codexAccessFlags(request.accessMode), "exec", "--color", "never"];
   const codexExecOptions = [];
   if (model) codexExecOptions.push("-m", model);
   if (effort) codexExecOptions.push("-c", `model_reasoning_effort="${effort}"`);
@@ -28971,7 +29091,7 @@ async function runLocalAction(cwd, intent) {
       "# VibeRaven preview rehearsal",
       "",
       `Project: ${projectName}`,
-      `Gate: ${gateLabel}`,
+      `Project status: ${gateLabel}`,
       `Blocker: ${blocker}`,
       "",
       "## Recording flow",
@@ -29171,7 +29291,7 @@ async function sendReportArtifact(cwd, response) {
       </div>
       <section class="steps" aria-label="Report next steps">
         <div class="step"><b>1. Manage providers</b><span>Use the Provider Control Board to review each slot and open the right dashboard.</span></div>
-        <div class="step"><b>2. Start agent fix</b><span>Preview the handoff flow and keep the fix scoped to one launch gap.</span></div>
+        <div class="step"><b>2. Start agent fix</b><span>Preview the handoff flow and keep the fix scoped to one evidenced change.</span></div>
         <div class="step"><b>3. Verify</b><span>Use Verify Now in the launch screen when you are ready to check the flow.</span></div>
       </section>
       <div class="actions">
@@ -29571,7 +29691,7 @@ async function waitForServerShutdown() {
     process.once("SIGTERM", done);
   });
 }
-var import_node_http, import_node_child_process4, import_promises24, import_node_path31, CLI_AGENT_SETUP, CLI_AUTH_PROBE;
+var import_node_http, import_node_child_process4, import_promises24, import_node_path31, CLI_AGENT_SETUP, MCP_CONFIG_PATHS, MCP_PROVIDER_NEEDLES, MCP_CONNECT_COMMANDS, CLI_AUTH_PROBE;
 var init_server = __esm({
   "src/local-ui/server.ts"() {
     "use strict";
@@ -29612,6 +29732,30 @@ var init_server = __esm({
         docsUrl: "https://viberaven.dev"
       }
     };
+    MCP_CONFIG_PATHS = [
+      ".mcp.json",
+      "mcp.json",
+      (0, import_node_path31.join)(".cursor", "mcp.json"),
+      (0, import_node_path31.join)(".vscode", "mcp.json")
+    ];
+    MCP_PROVIDER_NEEDLES = {
+      supabase: ["supabase", "@supabase/mcp", "mcp-server-supabase"],
+      vercel: ["vercel"],
+      stripe: ["stripe"],
+      github: ["github"],
+      sentry: ["sentry"],
+      posthog: ["posthog"],
+      clerk: ["clerk"],
+      authjs: ["authjs", "next-auth", "nextauth"],
+      resend: ["resend"],
+      upstash: ["upstash"]
+    };
+    MCP_CONNECT_COMMANDS = {
+      supabase: "Add the Supabase MCP server to your local MCP config, then drag Supabase into chat.",
+      vercel: "Add a Vercel MCP server entry to your local MCP config, then drag Vercel into chat.",
+      stripe: "Add a Stripe MCP server entry to your local MCP config, then drag Stripe into chat.",
+      github: "Add the GitHub MCP server to your local MCP config, then drag GitHub into chat."
+    };
     CLI_AUTH_PROBE = {
       codex: "codex login status",
       claude: "claude auth status",
@@ -29634,11 +29778,7 @@ function buildNextActionBlock(tasks, loopState, plan) {
     return {
       ...base,
       type: "stalled",
-      title: "Loop stalled - no gap reduction after 2+ consecutive scans",
-      agentInstruction: "Stop the scan loop. Explain the blocker plainly, then either guide the provider/user action or report that no safe repo-code recipe is available.",
-      executionPlan: [
-        { kind: "stop", note: "Do not keep spending scans while the loop is stalled." }
-      ],
+      title: "Loop stalled \xE2\u20AC\u201D no gap reduction after 2+ consecutive scans",
       requiresUserAction: true,
       stallReason
     };
@@ -29647,67 +29787,42 @@ function buildNextActionBlock(tasks, loopState, plan) {
     return {
       ...base,
       type: "verify",
-      title: "Batch complete - run verify to rescan before next batch",
-      agentInstruction: "Run verify now, read the refreshed VibeRaven artifacts, then continue with the next safe repo fix or provider step. Do not stop at a summary.",
-      executionPlan: [
-        { kind: "verify", command: "viberaven_verify" },
-        { kind: "continue-loop", note: "After verify, continue until the gate is clear or a provider/user blocker remains." }
-      ],
+      title: "Batch complete \xE2\u20AC\u201D run verify to rescan before next batch",
       mcpTool: "viberaven_verify",
       mcpArgs: {},
       requiresUserAction: false
     };
   }
-  const repoCodeTask = tasks.find((task) => task.fixType === "repo-code" && !task.requiresUserAction);
+  const repoCodeTask = tasks.find((t) => t.fixType === "repo-code" && !t.requiresUserAction);
   if (repoCodeTask) {
-    const fallbackCommand = repoCodeTask.mcpArgs ? `npx -y viberaven --heal --apply --gap ${repoCodeTask.gapId} --yes` : void 0;
     return {
       ...base,
       type: "repo-code",
       gapId: repoCodeTask.gapId,
       title: repoCodeTask.title,
-      agentInstruction: "Apply this repo-code fix now using the MCP tool or fallback command, then continue the local VibeRaven loop. Do not stop at a summary.",
-      executionPlan: [
-        {
-          kind: "apply-repo-fix",
-          command: repoCodeTask.mcpTool ?? fallbackCommand,
-          note: "Patch only this gap and preserve unrelated user changes."
-        },
-        { kind: "continue-loop", note: "Apply remaining safe repo fixes until the batch is full, then verify once." }
-      ],
       mcpTool: repoCodeTask.mcpTool,
       mcpArgs: repoCodeTask.mcpArgs,
-      fallbackCommand,
+      fallbackCommand: repoCodeTask.mcpArgs ? `npx -y viberaven --heal --apply --gap ${repoCodeTask.gapId} --yes` : void 0,
       requiresUserAction: false
     };
   }
-  const providerTask = tasks.find((task) => task.fixType === "provider-action");
+  const providerTask = tasks.find((t) => t.fixType === "provider-action");
   if (providerTask) {
     return {
       ...base,
       type: "provider-action",
       gapId: providerTask.gapId,
       title: providerTask.title,
-      agentInstruction: "Open or present the provider step now. If browser/tool access is available, open the dashboard link for the user; otherwise show the exact step and copy values. Do not keep telling the user to verify until the provider step is done.",
-      executionPlan: [
-        { kind: "open-provider-step", note: "Use VIBERAVEN_PROVIDER_ACTION for the exact dashboard step and URL." },
-        { kind: "wait-for-user", note: "Wait for confirmation or read-only MCP evidence before verifying." }
-      ],
       requiresUserAction: true
     };
   }
-  const upgradeTask = tasks.find((task) => task.fixType === "upgrade-required");
+  const upgradeTask = tasks.find((t) => t.fixType === "upgrade-required");
   if (upgradeTask) {
     return {
       ...base,
       type: "upgrade-required",
       gapId: upgradeTask.gapId,
       title: upgradeTask.title,
-      agentInstruction: "Explain that this production lane needs an upgrade or connected provider evidence. Continue with any remaining unlocked repo-code fixes if present; otherwise stop cleanly.",
-      executionPlan: [
-        { kind: "upgrade", command: "https://viberaven.dev/pricing" },
-        { kind: "stop", note: "Do not pretend locked lanes or provider state were fixed locally." }
-      ],
       requiresUserAction: true,
       upgradeUrl: "https://viberaven.dev/pricing"
     };
@@ -29715,20 +29830,15 @@ function buildNextActionBlock(tasks, loopState, plan) {
   return {
     ...base,
     type: "done",
-    title: "All gaps resolved - production gate is clear",
-    agentInstruction: "The repo-code gate is clear. Run strict before deploy and still verify provider dashboard state through MCP or the provider dashboard.",
-    executionPlan: [
-      { kind: "verify", command: "npx -y viberaven --strict" },
-      { kind: "stop", note: "Do not deploy until provider dashboard state is verified where applicable." }
-    ],
+    title: "All gaps resolved - what-changed context is clear",
     requiresUserAction: false
   };
 }
 function resolveStallReason(tasks) {
   if (tasks.length === 0) return "no-recipes";
-  const allUpgradeOrEmpty = tasks.every((task) => task.fixType === "upgrade-required");
+  const allUpgradeOrEmpty = tasks.every((t) => t.fixType === "upgrade-required");
   if (allUpgradeOrEmpty) return "no-recipes";
-  const allProviderAction = tasks.every((task) => task.fixType === "provider-action");
+  const allProviderAction = tasks.every((t) => t.fixType === "provider-action");
   if (allProviderAction) return "provider-action-required";
   return "unknown";
 }
@@ -29753,7 +29863,7 @@ function buildProviderActionBlock(task) {
 }
 function printProviderActionBlock(tasks) {
   const task = tasks.find(
-    (entry) => entry.fixType === "provider-action" && entry.requiresUserAction === true
+    (t) => t.fixType === "provider-action" && t.requiresUserAction === true
   );
   if (!task) return;
   const block = buildProviderActionBlock(task);
@@ -29893,15 +30003,16 @@ __export(cli_exports, {
 });
 module.exports = __toCommonJS(cli_exports);
 function printHelp() {
-  console.log(`viberaven ${VERSION} \u2014 launch readiness for AI-built apps
+  console.log(`viberaven ${VERSION} - what changed for AI-built apps
 
 
 
 Usage:
 
-  viberaven              Open the local launch console for human TTY use
+  viberaven              Open the local Studio for human TTY use
+
+  viberaven ui [path]    Open the local Studio
 
-  viberaven ui [path]    Open the local launch console
   viberaven tui          Same interactive menu
 
   viberaven login [--api-url <url>]
@@ -29911,7 +30022,7 @@ Usage:
   viberaven status
 
   viberaven actions [--json] [path]
-                       Print current chat-native production action surface
+                       Print current chat-native action surface
 
   viberaven preview [--agent-mode] [--json]
                        Local production rehearsal for videos and onboarding; no login or API spend
@@ -29928,7 +30039,7 @@ Usage:
                        Agent-first scan; writes tasklist, gate-result, context-map, and per-gap JSON
 
   viberaven --strict[=warning] [path]
-                       Fail when production gate is not clear; warning mode also fails on warnings
+                       Fail when what-changed context is not clear; warning mode also fails on warnings
 
   viberaven --condense [path]
                        Refresh .viberaven/context-map.json from the last scan
@@ -29973,7 +30084,7 @@ Agent workflow (Claude Code / Codex):
 
   Read .viberaven/agent-tasklist.md first, .viberaven/gate-result.json for the machine verdict, then .viberaven/context-map.json
 
-  viberaven next --json \u2192 guide/open \u2192 scan again
+  viberaven next --json \xE2\u2020\u2019 guide/open \xE2\u2020\u2019 scan again
 
 
 
@@ -29989,7 +30100,7 @@ Environment:
 
 Security:
 
-  CLI scans use VibeRaven login \u2014 not OPENAI_API_KEY. See packages/cli/SECURITY.md.
+  CLI scans use VibeRaven login \xE2\u20AC\u201D not OPENAI_API_KEY. See packages/cli/SECURITY.md.
 
 `);
 }
@@ -30010,9 +30121,6 @@ function parseArgs(argv) {
     if (arg.startsWith("--")) {
       const equalsIndex = arg.indexOf("=");
       const key = equalsIndex === -1 ? arg.slice(2) : arg.slice(2, equalsIndex);
-      if (key === "pet") {
-        continue;
-      }
       if (equalsIndex !== -1) {
         flags[key] = arg.slice(equalsIndex + 1);
         continue;
@@ -30108,9 +30216,6 @@ function resolveDefaultEntrypointMode(options) {
   if (options.env.VIBERAVEN_AGENT === "1") return "agent-scan";
   return "local-ui";
 }
-function resolvePositionalCwd(positional) {
-  return positional[0] ? (0, import_node_path33.resolve)(process.cwd(), positional[0]) : process.cwd();
-}
 function formatScanJsonStdout(artifact) {
   return JSON.stringify(sanitizeArtifactForDisk(artifact), null, 2);
 }
@@ -30151,7 +30256,7 @@ async function cmdStatus(flags, positional) {
     console.log("Not signed in. Run: viberaven login");
     return 1;
   }
-  const startDir = resolvePositionalCwd(positional);
+  const startDir = positional[0] ? (0, import_node_path33.join)(process.cwd(), positional[0]) : process.cwd();
   let artifact;
   try {
     artifact = await loadLastArtifact(startDir);
@@ -30188,7 +30293,7 @@ async function cmdStatus(flags, positional) {
     console.log(`Plan: ${synced.plan ?? "unknown"}`);
     console.log(formatUsageLine(usage));
     if (artifact) {
-      console.log(`Production core: ${artifact.productionCorePercent}% \xB7 Score ${artifact.score}`);
+      console.log(`Production core: ${artifact.productionCorePercent}% \xC2\xB7 Score ${artifact.score}`);
       console.log(
         `Lanes: ${usage.unlockedMapCategoryKeys.length}/${PRODUCTION_MAP_CATEGORY_KEYS_ALL.length} unlocked`
       );
@@ -30305,7 +30410,7 @@ async function cmdWatch(flags) {
   }
 }
 async function runScanCommand(flags, positional, options) {
-  const workspacePath = positional[0] ? resolvePositionalCwd(positional) : await resolveWorkspaceRoot(process.cwd());
+  const workspacePath = positional[0] ? (0, import_node_path33.join)(process.cwd(), positional[0]) : await resolveWorkspaceRoot(process.cwd());
   const apiBaseUrl = resolveApiBaseUrl(typeof flags["api-url"] === "string" ? flags["api-url"] : void 0);
   let accessToken;
   try {
@@ -30329,7 +30434,7 @@ async function runScanCommand(flags, positional, options) {
     }
   }
   if (!options?.deferMachineOutput) {
-    console.log(`Scanning ${workspacePath}\u2026`);
+    console.log(`Scanning ${workspacePath}\xE2\u20AC\xA6`);
   }
   const result = await runProjectScan({ workspacePath, accessToken, apiBaseUrl });
   if (!result.ok) {
@@ -30389,7 +30494,7 @@ async function runScanCommand(flags, positional, options) {
   return { exitCode: 0, artifacts: paths };
 }
 async function cmdReport(flags, positional) {
-  const startDir = resolvePositionalCwd(positional);
+  const startDir = positional[0] ? (0, import_node_path33.join)(process.cwd(), positional[0]) : process.cwd();
   try {
     const paths = await refreshReportFromDisk(startDir);
     console.log(`Report refreshed: ${paths.reportPath}`);
@@ -30411,7 +30516,7 @@ async function cmdReport(flags, positional) {
   }
 }
 async function cmdPrompt(flags, positional) {
-  const startDir = resolvePositionalCwd(positional);
+  const startDir = positional[0] ? (0, import_node_path33.join)(process.cwd(), positional[0]) : process.cwd();
   let artifact;
   try {
     artifact = await loadLastArtifact(startDir);
@@ -30475,7 +30580,7 @@ async function cmdStack(positional) {
     const file = await loadStackChoicesFile(cwd);
     file.choices[area] = { provider: provider2, selectedAt: (/* @__PURE__ */ new Date()).toISOString() };
     await saveStackChoicesFile(cwd, file);
-    console.log(`Set ${area} \u2192 ${provider2}. Run \`viberaven scan\` to re-map.`);
+    console.log(`Set ${area} \xE2\u2020\u2019 ${provider2}. Run \`viberaven scan\` to re-map.`);
     return 0;
   }
   if (sub === "clear") {
@@ -30508,7 +30613,7 @@ async function main() {
   const wantsJsonl = hasFlag(flags, "jsonl");
   const wantsStrict = hasFlag(flags, "strict");
   if (flags.condense) {
-    const cwd = resolvePositionalCwd(positional);
+    const cwd = positional[0] ? (0, import_node_path33.join)(process.cwd(), positional[0]) : process.cwd();
     const result = await runCondenseCommand({ cwd });
     console.log(`VibeRaven context map refreshed: ${result.contextMapPath}`);
     return 0;
@@ -30528,7 +30633,7 @@ async function main() {
   }
   if (!command && flags.verify === true && typeof flags.action === "string") {
     return runVerifyActionCommand({
-      cwd: resolvePositionalCwd(positional),
+      cwd: positional[0] ? (0, import_node_path33.join)(process.cwd(), positional[0]) : process.cwd(),
       actionId: flags.action
     });
   }
@@ -30565,7 +30670,7 @@ async function main() {
       env: process.env
     });
     if (mode === "local-ui") {
-      const cwd = resolvePositionalCwd(positional);
+      const cwd = positional[0] ? (0, import_node_path33.join)(process.cwd(), positional[0]) : process.cwd();
       const handle = await startLocalUiServer({ cwd });
       console.log(`VibeRaven local UI: ${handle.url}`);
       await waitForServerShutdown();
@@ -30585,7 +30690,7 @@ async function main() {
       await runInteractiveSession();
       return 0;
     case "ui": {
-      const cwd = resolvePositionalCwd(positional);
+      const cwd = positional[0] ? (0, import_node_path33.join)(process.cwd(), positional[0]) : process.cwd();
       const handle = await startLocalUiServer({ cwd });
       console.log(`VibeRaven local UI: ${handle.url}`);
       await waitForServerShutdown();
@@ -30602,19 +30707,19 @@ async function main() {
       return cmdStatus(flags, positional);
     case "actions":
       return runActionsCommand({
-        cwd: resolvePositionalCwd(positional),
+        cwd: positional[0] ? (0, import_node_path33.join)(process.cwd(), positional[0]) : process.cwd(),
         json: Boolean(flags.json)
       });
     case "preview":
       return runPreviewCommand({
-        cwd: resolvePositionalCwd(positional),
+        cwd: positional[0] ? (0, import_node_path33.join)(process.cwd(), positional[0]) : process.cwd(),
         agentMode: flags["agent-mode"] === true,
         json: Boolean(flags.json)
       });
     case "next":
       return runNextCommand({
         json: Boolean(flags.json),
-        cwd: resolvePositionalCwd(positional)
+        cwd: positional[0] ? (0, import_node_path33.join)(process.cwd(), positional[0]) : process.cwd()
       });
     case "guide": {
       const provider2 = positional[0];
@@ -30652,7 +30757,7 @@ async function main() {
     case "provider-verify":
       return cmdProviderVerify(flags, positional);
     case "init": {
-      const cwd = resolvePositionalCwd(positional);
+      const cwd = positional[0] ? (0, import_node_path33.join)(process.cwd(), positional[0]) : process.cwd();
       const agents = typeof flags.agents === "string" ? flags.agents : void 0;
       return runInitCommand({
         cwd,
@@ -30666,7 +30771,7 @@ async function main() {
         return 1;
       }
       return runDoctorAgentsCommand({
-        cwd: resolvePositionalCwd(positional)
+        cwd: positional[0] ? (0, import_node_path33.join)(process.cwd(), positional[0]) : process.cwd()
       });
     case "validate-npm-package":
       return runValidateNpmPackageCommand({
@@ -30679,7 +30784,7 @@ async function main() {
         return 1;
       }
       return runAuditCommand({
-        cwd: resolvePositionalCwd(positional),
+        cwd: positional[0] ? (0, import_node_path33.join)(process.cwd(), positional[0]) : process.cwd(),
         json: Boolean(flags.json)
       });
     default: