@viberaven/cli 1.3.0 → 1.3.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/AGENTS.md +157 -42
- package/README.md +8 -8
- package/SECURITY.md +53 -52
- package/dist/cli.js +6413 -4394
- package/dist/cli.js.map +4 -4
- package/package.json +75 -73
- package/templates/AGENTS.snippet.md +52 -45
- package/templates/CLAUDE.snippet.md +17 -19
- package/templates/CURSOR.snippet.md +17 -29
package/package.json
CHANGED
|
@@ -1,73 +1,75 @@
|
|
|
1
|
-
{
|
|
2
|
-
"name": "@viberaven/cli",
|
|
3
|
-
"version": "1.3.
|
|
4
|
-
"description": "Local
|
|
5
|
-
"license": "MIT",
|
|
6
|
-
"author": "VibeRaven",
|
|
7
|
-
"homepage": "https://viberaven.dev",
|
|
8
|
-
"bugs": {
|
|
9
|
-
"url": "https://github.com/ohad6k/VibeRaven/issues"
|
|
10
|
-
},
|
|
11
|
-
"repository": {
|
|
12
|
-
"type": "git",
|
|
13
|
-
"url": "git+https://github.com/ohad6k/VibeRaven.git",
|
|
14
|
-
"directory": "packages/cli"
|
|
15
|
-
},
|
|
16
|
-
"keywords": [
|
|
17
|
-
"viberaven",
|
|
18
|
-
"
|
|
19
|
-
"
|
|
20
|
-
"
|
|
21
|
-
"ai-built-apps",
|
|
22
|
-
"agent-mode",
|
|
23
|
-
"mcp",
|
|
24
|
-
"
|
|
25
|
-
"
|
|
26
|
-
"
|
|
27
|
-
"ai",
|
|
28
|
-
"
|
|
29
|
-
"
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
|
|
36
|
-
|
|
37
|
-
|
|
38
|
-
|
|
39
|
-
|
|
40
|
-
|
|
41
|
-
"
|
|
42
|
-
"
|
|
43
|
-
"
|
|
44
|
-
"
|
|
45
|
-
|
|
46
|
-
|
|
47
|
-
|
|
48
|
-
|
|
49
|
-
"
|
|
50
|
-
"
|
|
51
|
-
"
|
|
52
|
-
"
|
|
53
|
-
"
|
|
54
|
-
"
|
|
55
|
-
"
|
|
56
|
-
"
|
|
57
|
-
"
|
|
58
|
-
"
|
|
59
|
-
"viberaven:
|
|
60
|
-
|
|
61
|
-
|
|
62
|
-
|
|
63
|
-
|
|
64
|
-
|
|
65
|
-
|
|
66
|
-
|
|
67
|
-
|
|
68
|
-
|
|
69
|
-
|
|
70
|
-
|
|
71
|
-
"
|
|
72
|
-
|
|
73
|
-
|
|
1
|
+
{
|
|
2
|
+
"name": "@viberaven/cli",
|
|
3
|
+
"version": "1.3.1",
|
|
4
|
+
"description": "Local launch console and production-readiness gate for AI-built apps: auth, billing, database, deployment, monitoring, and agent-ready fixes.",
|
|
5
|
+
"license": "MIT",
|
|
6
|
+
"author": "VibeRaven",
|
|
7
|
+
"homepage": "https://viberaven.dev",
|
|
8
|
+
"bugs": {
|
|
9
|
+
"url": "https://github.com/ohad6k/VibeRaven/issues"
|
|
10
|
+
},
|
|
11
|
+
"repository": {
|
|
12
|
+
"type": "git",
|
|
13
|
+
"url": "git+https://github.com/ohad6k/VibeRaven.git",
|
|
14
|
+
"directory": "packages/cli"
|
|
15
|
+
},
|
|
16
|
+
"keywords": [
|
|
17
|
+
"viberaven",
|
|
18
|
+
"launch-readiness",
|
|
19
|
+
"production-readiness",
|
|
20
|
+
"launch-gaps",
|
|
21
|
+
"ai-built-apps",
|
|
22
|
+
"agent-mode",
|
|
23
|
+
"mcp",
|
|
24
|
+
"claude-code",
|
|
25
|
+
"codex",
|
|
26
|
+
"cursor",
|
|
27
|
+
"ai",
|
|
28
|
+
"production",
|
|
29
|
+
"supabase",
|
|
30
|
+
"vercel",
|
|
31
|
+
"stripe"
|
|
32
|
+
],
|
|
33
|
+
"publishConfig": {
|
|
34
|
+
"access": "public",
|
|
35
|
+
"tag": "latest"
|
|
36
|
+
},
|
|
37
|
+
"bin": {
|
|
38
|
+
"viberaven": "dist/cli.js"
|
|
39
|
+
},
|
|
40
|
+
"files": [
|
|
41
|
+
"dist",
|
|
42
|
+
"playbooks",
|
|
43
|
+
"assets/report",
|
|
44
|
+
"AGENTS.md",
|
|
45
|
+
"SECURITY.md",
|
|
46
|
+
"templates"
|
|
47
|
+
],
|
|
48
|
+
"scripts": {
|
|
49
|
+
"sync-report-assets": "node scripts/sync-report-assets.mjs",
|
|
50
|
+
"build": "node scripts/build.mjs",
|
|
51
|
+
"dev": "node scripts/build.mjs && node dist/cli.js",
|
|
52
|
+
"typecheck": "tsc -p tsconfig.json",
|
|
53
|
+
"demo-report": "node scripts/demo-report.mjs --open",
|
|
54
|
+
"verify:release:smoke": "npm run build && node scripts/verify-beta-flow.mjs --smoke",
|
|
55
|
+
"verify:release:live": "npm run build && node scripts/verify-beta-flow.mjs --live",
|
|
56
|
+
"test": "vitest run",
|
|
57
|
+
"prepublishOnly": "npm run sync-report-assets && npm run check:agent-discovery && npm run typecheck && npm run test && npm run build",
|
|
58
|
+
"check:agent-discovery": "node scripts/check-agent-discovery.mjs",
|
|
59
|
+
"viberaven:gate": "npx -y viberaven --agent-mode",
|
|
60
|
+
"viberaven:verify": "npx -y viberaven --verify",
|
|
61
|
+
"viberaven:strict": "npx -y viberaven --strict"
|
|
62
|
+
},
|
|
63
|
+
"engines": {
|
|
64
|
+
"node": ">=20"
|
|
65
|
+
},
|
|
66
|
+
"dependencies": {
|
|
67
|
+
"@clack/prompts": "^0.10.1",
|
|
68
|
+
"picocolors": "^1.1.1"
|
|
69
|
+
},
|
|
70
|
+
"devDependencies": {
|
|
71
|
+
"esbuild": "^0.25.0",
|
|
72
|
+
"typescript": "^5.8.0",
|
|
73
|
+
"vitest": "^3.2.0"
|
|
74
|
+
}
|
|
75
|
+
}
|
|
@@ -1,45 +1,52 @@
|
|
|
1
|
-
## VibeRaven
|
|
2
|
-
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
Use VibeRaven
|
|
6
|
-
|
|
7
|
-
### Humans
|
|
8
|
-
|
|
9
|
-
```bash
|
|
10
|
-
npx -y viberaven
|
|
11
|
-
```
|
|
12
|
-
|
|
13
|
-
In a real terminal, this opens the
|
|
14
|
-
|
|
15
|
-
### Agents
|
|
16
|
-
|
|
17
|
-
|
|
18
|
-
|
|
19
|
-
```
|
|
20
|
-
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
|
|
36
|
-
```
|
|
37
|
-
|
|
38
|
-
|
|
39
|
-
|
|
40
|
-
|
|
41
|
-
|
|
42
|
-
-
|
|
43
|
-
-
|
|
44
|
-
|
|
45
|
-
|
|
1
|
+
## VibeRaven Launch Readiness
|
|
2
|
+
|
|
3
|
+
VibeRaven is the Agent Context + Production Gate.
|
|
4
|
+
|
|
5
|
+
Use VibeRaven when the user asks if their AI-built app is production-ready, launch-ready, safer to deploy, or what is missing before ship.
|
|
6
|
+
|
|
7
|
+
### Humans
|
|
8
|
+
|
|
9
|
+
```bash
|
|
10
|
+
npx -y viberaven
|
|
11
|
+
```
|
|
12
|
+
|
|
13
|
+
In a real terminal, this opens the interactive VibeRaven menu.
|
|
14
|
+
|
|
15
|
+
### Agents
|
|
16
|
+
|
|
17
|
+
Paste this into your coding agent:
|
|
18
|
+
|
|
19
|
+
```bash
|
|
20
|
+
npx -y viberaven --agent-mode
|
|
21
|
+
```
|
|
22
|
+
|
|
23
|
+
1. Run `npx -y viberaven --agent-mode` from the project root.
|
|
24
|
+
2. If VibeRaven prints `LOGIN_URL_READY`, open that exact URL for the user. Say: "I opened VibeRaven sign-in so you can approve access; I will continue after approval." Do not ask for passwords, tokens, cookies, or secrets. Keep the terminal alive while the user approves.
|
|
25
|
+
If the scan flow cannot start login, run `npx -y viberaven login`.
|
|
26
|
+
3. Read `.viberaven/agent-tasklist.md` first, `.viberaven/gate-result.json` for the machine verdict, and `.viberaven/context-map.json` for compact agent context. If the tasklist says `CRITICAL GAPS DETECTED` or `PRODUCTION GATE NOT CLEAR`, fix one listed repo-code gap before deploy.
|
|
27
|
+
4. Read `.viberaven/agent-summary.md` second for scan context.
|
|
28
|
+
5. Read `.viberaven/launch-playbook.md` third for the full checklist.
|
|
29
|
+
6. Use `npx -y viberaven next --json` or `npx -y viberaven prompt --gap <id>` for one focused repo-code fix. Local installs can use `viberaven prompt`.
|
|
30
|
+
7. For Vercel + Supabase, run `npx -y viberaven audit --vercel-supabase` and check RLS, service role exposure, and Supabase pooler port 6543 instead of runtime port 5432.
|
|
31
|
+
8. Do not claim provider dashboard checks are fixed by repo-code edits.
|
|
32
|
+
9. Verify with tests/build, then run `npx -y viberaven --verify`.
|
|
33
|
+
|
|
34
|
+
Before deploy or CI pass:
|
|
35
|
+
|
|
36
|
+
```bash
|
|
37
|
+
npx -y viberaven --strict
|
|
38
|
+
```
|
|
39
|
+
|
|
40
|
+
Also available:
|
|
41
|
+
|
|
42
|
+
- `.viberaven/last-scan.json` - full mission map and gaps
|
|
43
|
+
- `.viberaven/report.html` - visual map for the user
|
|
44
|
+
- `npx -y viberaven init --dry-run` - preview local agent rules
|
|
45
|
+
- `npx -y viberaven clean --plan` - write a non-destructive cleanup plan
|
|
46
|
+
|
|
47
|
+
Free plan: 2 lifetime scans, 6/12 mission map lanes. Pro: 50 scans/month, all 12 lanes.
|
|
48
|
+
|
|
49
|
+
Same VibeRaven account and scan quota as the VS Code extension.
|
|
50
|
+
|
|
51
|
+
Security: the CLI does not read `OPENAI_API_KEY`. Scans use VibeRaven login and the managed API; your model key stays server-side.
|
|
52
|
+
|
|
@@ -1,19 +1,17 @@
|
|
|
1
|
-
<!-- viberaven:agent-rules:start -->
|
|
2
|
-
## VibeRaven Agent Rules
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
|
|
6
|
-
-
|
|
7
|
-
-
|
|
8
|
-
-
|
|
9
|
-
-
|
|
10
|
-
-
|
|
11
|
-
-
|
|
12
|
-
-
|
|
13
|
-
-
|
|
14
|
-
-
|
|
15
|
-
-
|
|
16
|
-
|
|
17
|
-
|
|
18
|
-
- If VibeRaven prints `LOGIN_URL_READY`, open that URL for the user using the available browser tool or system browser. Tell the user: "I opened VibeRaven sign-in so you can approve access; I will continue after approval." Do not ask for passwords, tokens, cookies, or secrets. Keep the terminal process alive while the user approves.
|
|
19
|
-
<!-- viberaven:agent-rules:end -->
|
|
1
|
+
<!-- viberaven:agent-rules:start -->
|
|
2
|
+
## VibeRaven Agent Rules
|
|
3
|
+
|
|
4
|
+
VibeRaven is the Agent Context + Production Gate.
|
|
5
|
+
|
|
6
|
+
- When production readiness, launch readiness, Vercel, Supabase, auth, database, payments, monitoring, deployment, rate limits, or error handling comes up, run `npx -y viberaven --agent-mode` from the project root.
|
|
7
|
+
- Read `.viberaven/agent-tasklist.md` first, `.viberaven/gate-result.json` for the machine verdict, and `.viberaven/context-map.json` for compact agent context.
|
|
8
|
+
- Read `.viberaven/agent-summary.md` before editing code.
|
|
9
|
+
- Read `.viberaven/launch-playbook.md` before editing code.
|
|
10
|
+
- Use `npx -y viberaven next --json` or `npx -y viberaven prompt --gap <id>` for one focused repo-code fix at a time.
|
|
11
|
+
- Run `npx -y viberaven --verify` after one fix.
|
|
12
|
+
- Run `npx -y viberaven --strict` before deploy or CI pass.
|
|
13
|
+
- For Vercel + Supabase launch checks, run `npx -y viberaven audit --vercel-supabase`.
|
|
14
|
+
- Do not claim provider dashboard work is fixed by repo-code edits. Provider dashboard checks, billing/product configuration, DNS, webhooks, credentials, quotas, and live provider verification must be completed or verified in the provider dashboard.
|
|
15
|
+
- If VibeRaven prints `LOGIN_URL_READY`, open that URL for the user using the available browser tool or system browser. Tell the user: "I opened VibeRaven sign-in so you can approve access; I will continue after approval." Do not ask for passwords, tokens, cookies, or secrets. Keep the terminal process alive while the user approves.
|
|
16
|
+
<!-- viberaven:agent-rules:end -->
|
|
17
|
+
|
|
@@ -1,29 +1,17 @@
|
|
|
1
|
-
|
|
2
|
-
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
|
|
6
|
-
|
|
7
|
-
|
|
8
|
-
|
|
9
|
-
|
|
10
|
-
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
|
|
14
|
-
|
|
15
|
-
|
|
16
|
-
|
|
17
|
-
|
|
18
|
-
Use the artifact loop only when machine-readable context is needed:
|
|
19
|
-
|
|
20
|
-
```bash
|
|
21
|
-
npx -y viberaven --agent-mode
|
|
22
|
-
```
|
|
23
|
-
|
|
24
|
-
Read `.viberaven/agent-tasklist.md`, `.viberaven/gate-result.json`, and `.viberaven/mission-map.md`.
|
|
25
|
-
Fix one scoped repo-owned gap, then run `npx -y viberaven --verify`. Before CI or production promote, run `npx -y viberaven --strict`.
|
|
26
|
-
|
|
27
|
-
Context is not clear until the architecture boundary, release/version context, and provider proof boundary are understood. Do not claim provider dashboard setup is fixed by repo-code edits.
|
|
28
|
-
|
|
29
|
-
Full rules: `AGENTS.md` / `CLAUDE.md` (installed by `npx -y viberaven init --agents all`).
|
|
1
|
+
<!-- viberaven:agent-rules:start -->
|
|
2
|
+
## VibeRaven Agent Rules
|
|
3
|
+
|
|
4
|
+
VibeRaven is the Agent Context + Production Gate.
|
|
5
|
+
|
|
6
|
+
- When production readiness, launch readiness, Vercel, Supabase, auth, database, payments, monitoring, deployment, rate limits, or error handling comes up, run `npx -y viberaven --agent-mode` from the project root.
|
|
7
|
+
- Read `.viberaven/agent-tasklist.md` first, `.viberaven/gate-result.json` for the machine verdict, and `.viberaven/context-map.json` for compact agent context.
|
|
8
|
+
- Read `.viberaven/agent-summary.md` before editing code.
|
|
9
|
+
- Read `.viberaven/launch-playbook.md` before editing code.
|
|
10
|
+
- Use `npx -y viberaven next --json` or `npx -y viberaven prompt --gap <id>` for one focused repo-code fix at a time.
|
|
11
|
+
- Run `npx -y viberaven --verify` after one fix.
|
|
12
|
+
- Run `npx -y viberaven --strict` before deploy or CI pass.
|
|
13
|
+
- For Vercel + Supabase launch checks, run `npx -y viberaven audit --vercel-supabase`.
|
|
14
|
+
- Do not claim provider dashboard work is fixed by repo-code edits. Provider dashboard checks, billing/product configuration, DNS, webhooks, credentials, quotas, and live provider verification must be completed or verified in the provider dashboard.
|
|
15
|
+
- If VibeRaven prints `LOGIN_URL_READY`, open that URL for the user using the available browser tool or system browser. Tell the user: "I opened VibeRaven sign-in so you can approve access; I will continue after approval." Do not ask for passwords, tokens, cookies, or secrets. Keep the terminal process alive while the user approves.
|
|
16
|
+
<!-- viberaven:agent-rules:end -->
|
|
17
|
+
|