@viberaven/cli 1.4.2 → 1.4.4

package/dist/cli.js

@@ -11558,7 +11558,7 @@ var VERSION;
 var init_version = __esm({
   "src/version.ts"() {
     "use strict";
-    VERSION = "1.4.2";
+    VERSION = "1.4.4";
   }
 });
 
@@ -15468,6 +15468,7 @@ function providerStatusText(state) {
     case "connect_live":
       return "Connect live";
     case "not_detected":
+      return "Not detected";
     default:
       return "Missing";
   }
@@ -15488,6 +15489,16 @@ function verifyActionForGap(gap) {
   };
 }
 function proofForProvider(providerId, gap) {
+  if (providerId === "posthog") {
+    return {
+      level: "dashboard_needed",
+      summary: "PostHog dashboard ingestion can only be confirmed in the PostHog dashboard, not from repo code.",
+      checks: [
+        { label: "Code found", status: "yes", source: "repo" },
+        { label: "Dashboard ingestion proof", status: "unknown", source: "dashboard" }
+      ]
+    };
+  }
   if (!gap) {
     return {
       level: "code_only",
@@ -15518,6 +15529,8 @@ function whereToClick(providerId) {
       return "Table editor -> select table -> Policies -> Enable RLS";
     case "vercel":
       return "Project settings -> Environment variables -> Production";
+    case "posthog":
+      return "Data management -> Events";
     default:
       return "Open provider dashboard -> complete the selected production action";
   }
@@ -15541,6 +15554,12 @@ function youLane(providerId, providerName, gap) {
       body: "Open Vercel and confirm the production environment, deployment, or domain setting that blocks launch."
     };
   }
+  if (providerId === "posthog") {
+    return {
+      title: "Confirm PostHog dashboard ingestion",
+      body: "Open PostHog and confirm live events are arriving from production. Repo code alone cannot prove ingestion."
+    };
+  }
   return {
     title: `Confirm ${providerName} provider proof`,
     body: gap?.detail ?? `Open ${providerName} and complete the selected production action.`
@@ -15767,9 +15786,19 @@ function emptyLocalUiState(cwd) {
     empty: true
   };
 }
-function mapArtifactToLocalUiState(artifact) {
+function mapArtifactToLocalUiState(artifact, presentProviderIds) {
   const projectName = projectNameFromPath(artifact.workspacePath);
-  const providers = listLocalUiProviderCatalog().map((template) => mapProvider(template, artifact, projectName)).map((provider2) => ({ ...provider2, grade: providerGrade(provider2) }));
+  const providers = listLocalUiProviderCatalog().map((template) => mapProvider(template, artifact, projectName)).map((provider2) => {
+    if (presentProviderIds && !presentProviderIds.has(provider2.id)) {
+      const missing = {
+        ...provider2,
+        state: "not_detected",
+        statusText: providerStatusText("not_detected")
+      };
+      return { ...missing, grade: providerGrade(missing) };
+    }
+    return { ...provider2, grade: providerGrade(provider2) };
+  });
   const globalProviderId = providerIdForGap(primaryGap(artifact));
   const selectedProvider = providers.find((provider2) => provider2.id === globalProviderId) ?? providers.find((provider2) => provider2.state === "needs_repo_fix") ?? providers.find((provider2) => provider2.state === "repo_evidence_found") ?? providers[0];
   const missionCards = buildMissionCards(artifact, providers);
@@ -16223,7 +16252,7 @@ function providerHealth(raw, normalized) {
   const allReady = total > 0 && ready === total;
   const summary = providerScopedDetail(raw || normalized || {});
   if (state === 'not_detected') {
-    return { label: 'Missing', tone: 'orange', summary, meta: 'Not linked' };
+    return { label: 'Not detected', tone: 'orange', summary, meta: 'Not in this project' };
   }
   if (state === 'live_verified') {
     return { label: 'Ready', tone: 'green', summary, meta: checks + ' checks' };
@@ -16242,7 +16271,7 @@ function providerHealth(raw, normalized) {
 
 function providerHealthIcon(health) {
   if (health.tone === 'green' && (health.label === 'Ready' || health.label === 'Detected')) return Icon('heart');
-  if (health.label === 'Missing') return Icon('flag');
+  if (health.label === 'Not detected') return Icon('flag');
   return Icon('refresh');
 }
 
@@ -16326,6 +16355,19 @@ function TradingCard(provider, variant, options) {
   const placedClass = opts.placed ? ' is-placed' : '';
   const tagOpen = opts.asDiv ? 'div' : 'button type="button"';
   const tagClose = opts.asDiv ? 'div' : 'button';
+  if (provider.state === 'not_detected') {
+    // Locked card: the provider isn't in this project. Keep the logo (dimmed)
+    // behind a lock seal so you can see which provider it is and that it's
+    // there to unlock by adding it \u2014 never a fake grade or a blank back.
+    return '<' + tagOpen + ' class="vr-tcard is-locked ' + size + placedClass + '" data-foil="' + foil + '"' +
+      (opts.asDiv ? '' : ' data-action="deal-provider" data-provider="' + foil + '" aria-label="' + escapeHtml(provider.name) + ' is not in this project \u2014 add it to unlock this card" title="' + escapeHtml(provider.name) + ' \xB7 not in this project \u2014 add to unlock"') +
+      (opts.style ? ' style="' + opts.style + '"' : '') + '>' +
+      (opts.placed ? '<span class="vr-tcard-unplace" data-action="unplace-card" data-unplace="' + foil + '" title="Remove from the table" role="button" aria-label="Remove from the table">&#10005;</span>' : '') +
+      '<span class="vr-tcard-lockart">' + ProviderToken(provider, 'is-locked') + '<span class="vr-tcard-lockbadge">' + Icon('lock') + '</span></span>' +
+      '<span class="vr-tcard-backname">' + escapeHtml(provider.name) + '</span>' +
+      '<span class="vr-tcard-lockhint">Not in this project</span>' +
+      '</' + tagClose + '>';
+  }
   if (grade.tier === 'facedown' && !opts.forceFace) {
     return '<' + tagOpen + ' class="vr-tcard is-back ' + size + placedClass + '"' +
       (opts.asDiv ? '' : ' data-action="deal-provider" data-provider="' + foil + '" aria-label="Flip ' + escapeHtml(provider.name) + ' \u2014 run its first checks" title="' + escapeHtml(provider.name) + ' \xB7 face down \u2014 click to flip"') +
@@ -18309,8 +18351,8 @@ function DiscoveryModal() {
     return '<div class="vr-discover-card' + (demo.flippedCards['disc:' + provider.id] ? ' is-flipped' : '') + '" data-flip-card data-flip-id="disc:' + escapeHtml(provider.id) + '" data-rank="' + rank[0] + '" style="--vr-i:' + String(index) + '">' +
       '<span class="vr-flip-inner">' +
         '<span class="vr-flip-back vr-tcard is-back is-dealt" data-action="flip-discover" role="button" tabindex="0" aria-label="Flip to reveal ' + escapeHtml(provider.name) + '">' +
-          '<span class="vr-tcard-backart"><img src="' + mascotAssets.idle + '" alt="" /></span>' +
-          '<span class="vr-tcard-backname">FLIP ME</span>' +
+          '<span class="vr-tcard-backart"><span class="vr-pack-seal" aria-hidden="true">&#10022;</span></span>' +
+          '<span class="vr-tcard-backname">Flip to reveal</span>' +
         '</span>' +
         '<span class="vr-flip-face">' +
           TradingCard(provider, 'dealt', { asDiv: true, forceFace: true }) +
@@ -19641,17 +19683,47 @@ function ChatEnvironmentConnectCard() {
   const slotHtml = slots.map((slot) => {
     const provider = slot.providerId ? providers.find((item) => item.id === slot.providerId) : null;
     const mcp = provider ? providerMcp(provider) : null;
-    const connected = Boolean(mcp && mcp.status === 'connected');
+    // Two independent facts, and the panel used to collapse them into one. MCP
+    // status comes from the user's global config (~/.codex/config.toml), so it
+    // says "connected" for providers this repo does not use \u2014 which contradicted
+    // the card next to it reading actual repo evidence. Project membership wins:
+    // never claim a provider is wired up when it is not in this project.
+    const inProject = Boolean(provider && provider.state !== 'not_detected');
+    const mcpConnected = Boolean(mcp && mcp.status === 'connected');
+    const connected = inProject && mcpConnected;
     const icon = provider
       ? (provider.iconHtml || '<img src="' + providerAssetSrc(provider) + '" alt="" />')
       : Icon('plus');
-    const status = connected ? 'Connected' : slot.action === 'more' ? 'Browse' : 'Connect';
+    const tone = slot.action === 'more'
+      ? 'is-browse'
+      : !inProject
+        ? 'is-absent'
+        : connected
+          ? 'is-connected'
+          : 'is-disconnected';
+    const status = slot.action === 'more'
+      ? 'Browse'
+      : !inProject
+        ? 'Not in project'
+        : connected
+          ? 'Connected'
+          : 'Connect';
+    const hint = slot.action === 'more'
+      ? 'Browse every provider card'
+      : !inProject
+        ? slot.label + ' was not found in this repo' + (mcpConnected ? ', even though its MCP server is in your global config' : '')
+        : connected
+          ? slot.label + ' is in this repo and chat can read its live state'
+          : slot.label + ' is in this repo. Connect MCP so chat reads live state instead of guessing.';
+    // A provider that is not in the repo has nothing to connect, so send that
+    // click to the provider context flow (which prefills the "help me add it"
+    // mission) rather than an MCP connect that would not mean anything.
     const attrs = slot.action === 'more'
       ? 'data-action="add-provider"'
-      : connected
+      : connected || !inProject
         ? 'data-provider="' + escapeHtml(slot.providerId) + '"'
         : 'data-action="connect-mcp" data-provider-id="' + escapeHtml(slot.providerId) + '"';
-    return '<button type="button" class="vr-env-connect-option ' + (connected ? 'is-connected' : 'is-disconnected') + '" ' + attrs + '>' +
+    return '<button type="button" class="vr-env-connect-option ' + tone + '" ' + attrs + ' title="' + escapeHtml(hint) + '">' +
       '<span>' + icon + '</span>' +
       '<strong>' + escapeHtml(slot.label) + '</strong>' +
       '<b>' + escapeHtml(status) + '</b>' +
@@ -19874,9 +19946,20 @@ function TablePlaque() {
   const graded = detected.filter((item) => item.grade && typeof item.grade.value === 'number');
   const avg = graded.length ? graded.reduce((sum, item) => sum + item.grade.value, 0) / graded.length : 0;
   const dirty = (demo.worktree && Number(demo.worktree.dirtyCount)) || 0;
+  // Two different numbers used to sit here unlabelled: the average provider card
+  // grade (0-10) and, in the terminal, the gate score (0-100). A repo could read
+  // "GRADE 0.0" here and "score 65" from viberaven check with nothing saying
+  // they measure different things. Both now carry their scale, and the gate score
+  // is shown so the header and the terminal agree on the headline verdict.
+  const gateScore = typeof gate.score === 'number' ? gate.score : null;
   const cells = [
     { label: 'Providers', value: String(detected.length), tone: 'gold' },
-    { label: 'Grade', value: graded.length ? avg.toFixed(1) : '&#8212;', tone: 'gold' },
+    {
+      label: 'Gate score /100',
+      value: gateScore == null ? '&#8212;' : String(gateScore),
+      tone: gateClear ? 'green' : gateScore == null ? 'muted' : 'orange',
+    },
+    { label: 'Grade /10', value: graded.length ? avg.toFixed(1) : '&#8212;', tone: 'gold' },
     { label: 'Review', value: String(review), tone: review > 0 ? 'orange' : 'muted' },
     { label: 'Uncommitted', value: String(dirty), tone: dirty > 0 ? 'orange' : 'green' },
   ];
@@ -30976,6 +31059,17 @@ body:has(.vr-app.is-dragging) {
   color: #86efac;
 }
 
+/* Not in this repo. Same orange the provider cards use for "Not detected", so
+   the panel and the card agree instead of contradicting each other. */
+.vr-env-connect-option.is-absent b {
+  background: rgba(148, 163, 184, 0.08);
+  color: #94a3b8;
+}
+
+.vr-env-connect-option.is-absent > span {
+  opacity: 0.5;
+}
+
 /* Gate chip is a button now \xE2\u20AC\u201D keep the pill look. */
 button.vr-chat-gate-chip {
   cursor: pointer;
@@ -35122,7 +35216,9 @@ button.vr-chat-gate-chip.vr-stamp i { display: none; }
 .vr-start-here-cta:hover { background: #e6e9ef; }
 .vr-start-here-cta:active { transform: translateY(2px); box-shadow: 0 1px 0 rgba(0, 0, 0, 0.55); }
 .vr-start-here-cta svg { stroke: #0a0b0e; color: #0a0b0e; }
-.vr-start-here-cta span { color: #0a0b0e; }
+.vr-start-here-cta,
+.vr-start-here-cta span { font-family: Geist, Inter, "Segoe UI", system-ui, sans-serif !important; }
+.vr-start-here-cta span { color: #0a0b0e; letter-spacing: 0.02em; text-transform: none; font-weight: 700; }
 
 /* ==========================================================================
    HUD layer: manga ink pass \u2014 the perceptual redesign.
@@ -37908,6 +38004,99 @@ button.vr-tcard { appearance: none; }
     drop-shadow(0 5px 12px rgba(0, 0, 0, 0.65))
     drop-shadow(0 0 22px rgba(232, 193, 90, 0.65));
 }
+/* Locked card: a provider that is not in this project. Dimmed logo + gold
+   lock seal, dashed inner frame (vs the solid frame of a graded card). */
+.vr-tcard.is-locked {
+  position: relative;
+  border: 2.5px solid rgba(184, 135, 63, 0.5);
+  padding: 0;
+  gap: 0;
+  display: flex;
+  flex-direction: column;
+  align-items: center;
+  justify-content: flex-end;
+  background:
+    radial-gradient(circle at 50% 40%, rgba(232, 193, 90, 0.08), transparent 55%),
+    conic-gradient(from 210deg at 50% 46%, #141418, #1b1b21 22%, #141419 48%, #191922 74%, #141418),
+    #0b0b0f;
+}
+.vr-tcard.is-locked::after {
+  content: '';
+  position: absolute;
+  inset: 5px;
+  border: 1.5px dashed rgba(232, 193, 90, 0.26);
+  border-radius: 7px;
+  pointer-events: none;
+}
+.vr-tcard.is-locked .vr-tcard-lockart {
+  position: relative;
+  flex: 1;
+  width: 100%;
+  display: grid;
+  place-items: center;
+}
+.vr-tcard.is-locked .vr-provider-token {
+  width: 48%;
+  opacity: 0.35;
+  filter: grayscale(1) brightness(1.3);
+}
+.vr-tcard.is-locked .vr-provider-token svg,
+.vr-tcard.is-locked .vr-provider-token img {
+  width: 100%;
+  height: auto;
+}
+.vr-tcard.is-locked .vr-tcard-lockbadge {
+  position: absolute;
+  top: 50%;
+  left: 50%;
+  transform: translate(-50%, -50%);
+  width: 30%;
+  aspect-ratio: 1 / 1;
+  display: grid;
+  place-items: center;
+  border-radius: 50%;
+  color: #e8c15a;
+  background: radial-gradient(circle at 42% 34%, #2b2b34, #121216);
+  border: 1.5px solid rgba(232, 193, 90, 0.6);
+  box-shadow: 0 4px 12px rgba(0, 0, 0, 0.6), inset 0 0 8px rgba(232, 193, 90, 0.15);
+}
+.vr-tcard.is-locked .vr-tcard-lockbadge svg {
+  width: 52%;
+  height: 52%;
+}
+.vr-tcard.is-locked .vr-tcard-lockhint {
+  font-size: 7.5px;
+  letter-spacing: 0.2px;
+  text-transform: uppercase;
+  font-weight: 800;
+  color: #2a1c02;
+  text-shadow: 0 1px 0 rgba(255, 245, 205, 0.45);
+  margin-bottom: 6px;
+}
+.vr-tcard.is-locked .vr-tcard-backname {
+  margin-bottom: 3px;
+  font-size: 10px;
+  letter-spacing: 0.3px;
+  font-weight: 800;
+  color: #1a1201;
+  text-shadow: 0 1px 0 rgba(255, 245, 205, 0.45);
+}
+.vr-tcard.is-locked:hover {
+  border-color: rgba(232, 193, 90, 0.7);
+}
+.vr-tcard.is-locked:hover .vr-provider-token {
+  opacity: 0.5;
+}
+.vr-tcard.is-locked:hover .vr-tcard-lockbadge {
+  box-shadow: 0 4px 14px rgba(0, 0, 0, 0.6), 0 0 14px rgba(232, 193, 90, 0.4), inset 0 0 8px rgba(232, 193, 90, 0.2);
+}
+/* Pack card back: a sealed mystery \u2014 no provider identity until you flip. */
+.vr-discover-card .vr-flip-back .vr-pack-seal {
+  font-size: 34px;
+  line-height: 1;
+  color: rgba(232, 193, 90, 0.5);
+  text-shadow: 0 0 18px rgba(232, 193, 90, 0.4);
+}
 /* inside a flip card the back must stay an absolute overlay \u2014 the
    position: relative above would otherwise stack it under the face */
 [data-flip-card] .vr-flip-back,
@@ -40241,25 +40430,25 @@ function hasFile(files, needles) {
 function providerDetected(providerId, deps, files) {
   switch (providerId) {
     case "supabase":
-      return hasDependency(deps, ["@supabase/supabase-js", "supabase"]) || hasFile(files, ["supabase/", "supabase\\", "supabase.ts"]);
+      return hasDependency(deps, ["@supabase/supabase-js", "@supabase/ssr", "supabase"]) || hasFile(files, ["supabase/", "supabase.ts"]);
     case "vercel":
-      return hasFile(files, ["vercel.json", ".vercel/project.json"]) || hasDependency(deps, ["@vercel/"]);
+      return hasDependency(deps, ["@vercel/"]) || hasFile(files, ["vercel.json", ".vercel/project.json"]);
     case "stripe":
-      return hasDependency(deps, ["stripe", "@stripe/stripe-js"]) || hasFile(files, ["stripe", "webhook"]);
+      return hasDependency(deps, ["stripe", "@stripe/stripe-js"]) || hasFile(files, ["stripe."]);
     case "github":
-      return hasFile(files, [".github/workflows", ".github/dependabot.yml"]) || files.includes("readme.md");
+      return hasFile(files, [".github/workflows", ".github/dependabot.yml"]);
     case "sentry":
-      return hasDependency(deps, ["@sentry/"]) || hasFile(files, ["sentry.", "instrumentation.ts", "instrumentation.js"]);
+      return hasDependency(deps, ["@sentry/"]) || hasFile(files, ["sentry."]);
     case "posthog":
-      return hasDependency(deps, ["posthog", "posthog-js"]) || hasFile(files, ["posthog"]);
+      return hasDependency(deps, ["posthog", "posthog-js", "posthog-node"]) || hasFile(files, ["posthog."]);
     case "clerk":
-      return hasDependency(deps, ["@clerk/"]) || hasFile(files, ["clerk", "middleware.ts", "middleware.js"]);
+      return hasDependency(deps, ["@clerk/"]) || hasFile(files, ["clerk."]);
     case "authjs":
-      return hasDependency(deps, ["next-auth", "@auth/"]) || hasFile(files, ["auth.ts", "auth.js", "nextauth"]);
+      return hasDependency(deps, ["next-auth", "@auth/"]) || hasFile(files, ["nextauth", "auth.config."]);
     case "resend":
-      return hasDependency(deps, ["resend"]) || hasFile(files, ["resend", "email", "mail"]);
+      return hasDependency(deps, ["resend"]) || hasFile(files, ["resend."]);
     case "upstash":
-      return hasDependency(deps, ["@upstash/", "upstash"]) || hasFile(files, ["upstash", "ratelimit", "rate-limit", "redis"]);
+      return hasDependency(deps, ["@upstash/", "upstash"]);
     default:
       return false;
   }
@@ -40284,7 +40473,7 @@ function applyProviderDetection(state, deps, files) {
     return {
       ...provider2,
       state: providerState2,
-      statusText: detected ? "Detected in repo" : "Missing",
+      statusText: detected ? "Detected in repo" : "Not detected",
       connectLabel: detected ? "Open slot" : "Add provider",
       launchPath: provider2.launchPath.map((item4, index) => ({
         ...item4,
@@ -40760,7 +40949,11 @@ async function readState(cwd) {
   let state;
   try {
     const raw = await (0, import_promises23.readFile)((0, import_node_path30.join)(cwd, ".viberaven", "last-scan.json"), "utf8");
-    state = mapArtifactToLocalUiState(JSON.parse(raw));
+    const packageJson = await readPackageJson(cwd);
+    const deps = dependencyNames(packageJson);
+    const files = await listProjectFiles(cwd);
+    const present = new Set(PROVIDER_IDS.filter((id) => providerDetected(id, deps, files)));
+    state = mapArtifactToLocalUiState(JSON.parse(raw), present);
   } catch {
     state = emptyLocalUiState(cwd);
   }
@@ -41911,7 +42104,7 @@ async function waitForServerShutdown() {
     process.once("SIGTERM", done);
   });
 }
-var import_node_http, import_node_child_process4, import_promises23, import_node_path30, CLI_AGENT_SETUP, MCP_CONFIG_PATHS, MCP_PROVIDER_NEEDLES, MCP_CONNECT_COMMANDS, MCP_SERVER_RECIPES, CLI_AUTH_PROBE;
+var import_node_http, import_node_child_process4, import_promises23, import_node_path30, CLI_AGENT_SETUP, MCP_CONFIG_PATHS, MCP_PROVIDER_NEEDLES, MCP_CONNECT_COMMANDS, MCP_SERVER_RECIPES, PROVIDER_IDS, CLI_AUTH_PROBE;
 var init_server = __esm({
   "src/local-ui/server.ts"() {
     "use strict";
@@ -42025,6 +42218,7 @@ var init_server = __esm({
         note: "Set UPSTASH_EMAIL and UPSTASH_API_KEY in your shell before the agent starts."
       }
     };
+    PROVIDER_IDS = ["supabase", "vercel", "stripe", "github", "sentry", "posthog", "clerk", "authjs", "resend", "upstash"];
     CLI_AUTH_PROBE = {
       codex: "codex login status",
       claude: "claude auth status",