@viberaven/cli 1.5.2 → 1.6.0

package/dist/stack/stack.css

@@ -852,3 +852,157 @@ select.sel:focus, input.sel:focus { outline: none; box-shadow: inset 0 0 0 1px #
   .fc-score { gap: 14px; }
   .fc-score-num { width: 68px; height: 68px; font-size: 22px; }
 }
+
+/* ---------- the project canvas, as on the viberaven.dev hero: tabs in the bar, the stack as cards on a dotted
+   canvas that fills the window, each later step as a panel over the canvas, and the loop as a dock ---------- */
+.sr-only { position: absolute; width: 1px; height: 1px; overflow: hidden; clip-path: inset(50%); white-space: nowrap; }
+
+/* Views in the bar. */
+.top-tabs { display: flex; align-self: stretch; gap: 20px; margin-right: 10px; }
+.top-tab { position: relative; display: inline-flex; align-items: center; gap: 7px; height: 100%; padding: 0 1px; border-radius: 0; font-size: 13.5px; font-weight: 500; color: var(--ink-3); transition: color 0.15s; }
+.top-tab:hover:not(:disabled) { color: var(--ink); }
+.top-tab[aria-current="page"] { color: var(--ink); }
+.top-tab[aria-current="page"]::after { content: ""; position: absolute; left: 0; right: 0; bottom: -1px; height: 1.5px; background: var(--ink); }
+.top-tab:disabled { opacity: 0.4; cursor: default; }
+.top-tab-count { display: inline-grid; place-items: center; min-width: 18px; height: 18px; padding: 0 5px; border-radius: 999px; background: rgba(255, 255, 255, 0.1); font-family: var(--mono); font-size: 11px; color: var(--ink); }
+
+/* The dock: Scan, Fix, Re-check, Launch. */
+.rail { top: auto; bottom: 18px; left: 50%; right: auto; transform: translateX(-50%); z-index: 31; padding: 4px; border-radius: 14px; border: 1px solid var(--line-2); background: rgba(18, 18, 22, 0.96); -webkit-backdrop-filter: blur(14px); backdrop-filter: blur(14px); box-shadow: 0 20px 40px -16px rgba(0, 0, 0, 0.9); transition: left 0.45s var(--ease); }
+.rail ol { display: flex; gap: 2px; }
+.rail-button { position: relative; overflow: hidden; height: 40px; padding: 0 16px; border-radius: 10px; gap: 8px; }
+.rail-button:hover:not(:disabled) { background: rgba(255, 255, 255, 0.05); }
+.rail-mark, .is-current .rail-mark, .is-passed .rail-mark { display: inline-grid; place-items: center; width: auto; height: auto; margin: 0; border-radius: 0; background: none; box-shadow: none; color: var(--ink-3); }
+.rail-mark svg { width: 15px; height: 15px; }
+.is-current .rail-mark::after { display: none; }
+.rail-label { font-size: 14px; font-weight: 500; color: var(--ink-2); }
+.is-current .rail-button { background: rgba(255, 255, 255, 0.1); }
+.is-current .rail-label, .is-current .rail-mark { color: var(--ink); }
+.is-passed .rail-mark { color: var(--green); }
+.is-locked .rail-button { opacity: 0.4; }
+.rail-time { position: absolute; left: 10px; right: 10px; bottom: 3px; height: 2px; border-radius: 2px; background: #f7d27f; transform-origin: left; animation: rail-time 1.6s ease-in-out infinite; }
+@keyframes rail-time { 0% { transform: scaleX(0); } 60% { transform: scaleX(1); opacity: 1; } 100% { transform: scaleX(1); opacity: 0; } }
+.app:has(.stage.has-panel) .rail { left: calc((100% - min(560px, 46%)) / 2); }
+
+/* The canvas fills the window under the bar. */
+.app .stage { position: relative; height: calc(100vh - var(--top)); height: calc(100dvh - var(--top)); min-height: 360px; padding: 0; overflow: hidden; }
+.canvas { position: absolute; inset: 0; overflow: auto; display: grid; place-items: center; padding: 48px 32px 128px; background: radial-gradient(rgba(255, 255, 255, 0.1) 1px, transparent 1.2px) 0 0 / 18px 18px, #060607; transition: right 0.45s var(--ease); }
+.stage.has-panel .canvas { right: min(560px, 46%); }
+.stage-alert { position: absolute; top: 14px; left: 50%; z-index: 6; transform: translateX(-50%); margin: 0; }
+.app .board { width: min(1080px, 100%); margin: 0; padding: 0; border: 0; border-radius: 0; background: none; min-height: 0; }
+.app .board-col { width: min(260px, 100%); }
+
+/* Cards: mark and name, what it is in mono, a hairline, then the state with its verdict at the edge. */
+.app .node, .app .board-app { display: block; width: 100%; padding: 12px 14px; border-radius: 10px; border: 1px solid var(--line-2); background: #111114; box-shadow: 0 16px 30px -18px rgba(0, 0, 0, 0.9); text-align: left; transition: border-color 0.45s var(--ease); }
+.node-head { display: flex; align-items: center; gap: 9px; min-width: 0; }
+.app .node-head img, .app .node-head .node-fallback { flex: none; width: 18px; height: 18px; }
+.node-head .ico { display: inline-grid; color: var(--ink); }
+.app .node-name { font-size: 14px; font-weight: 500; color: var(--ink); white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
+.node-detail, .app .board-app-name { display: block; margin: 4px 0 0 27px; font-family: var(--mono); font-size: 11px; color: var(--ink-3); white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
+.app .node-state { display: flex; align-items: center; gap: 8px; margin-top: 12px; padding-top: 10px; border-top: 1px solid var(--line); font-size: 12.5px; color: var(--ink-2); }
+.node-text { flex: 1; min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.node-verdict { flex: none; font-family: var(--mono); font-size: 10.5px; color: var(--ink-3); }
+.node.is-pass .node-verdict { color: var(--green); }
+.node.is-warn .node-verdict { color: var(--warn); }
+.node.is-fail .node-verdict { color: var(--red); }
+.app .node.is-pass .node-state, .app .node.is-warn .node-state, .app .node.is-fail .node-state { color: var(--ink-2); }
+.app .board-app { padding: 14px 16px; }
+.app .board-status { margin-top: 12px; padding-top: 10px; border-top: 1px solid var(--line); }
+.app .board-status strong { font-size: 18px; font-weight: 500; letter-spacing: -0.02em; }
+.app .board-checks { margin-top: 10px; padding: 0; border-top: 0; gap: 5px; }
+.app .board-checks li { font-size: 12px; color: var(--ink-2); }
+.canvas-note { font-size: 12.5px; color: var(--ink-3); text-align: center; }
+.stage-body.step-app { position: absolute; left: 0; right: 0; bottom: 78px; z-index: 2; max-width: none; margin: 0; pointer-events: none; }
+
+/* Every later step: a panel over the canvas. */
+.stage-body.panel { position: absolute; top: 14px; right: 14px; bottom: 14px; z-index: 5; width: calc(min(560px, 46%) - 28px); max-width: none; margin: 0; overflow: auto; padding: 20px 24px 32px; border-radius: 16px; border: 1px solid var(--line-2); background: rgba(10, 10, 12, 0.97); -webkit-backdrop-filter: blur(12px); backdrop-filter: blur(12px); box-shadow: 0 30px 60px -20px rgba(0, 0, 0, 0.9); animation: panel-in 0.45s var(--ease) both; }
+@keyframes panel-in { from { transform: translateX(28px); opacity: 0; } }
+.panel-close { display: inline-flex; align-items: center; gap: 6px; height: 30px; margin-bottom: 18px; padding: 0 12px; font-size: 13px; }
+.panel h1 { font-size: 26px; max-width: none; letter-spacing: -0.03em; }
+.panel .stage-sub { font-size: 15px; }
+.panel .primary-row { margin-top: 24px; }
+.panel .findings { margin-top: 22px; }
+.panel .finding, .panel .finding.is-static { grid-template-columns: minmax(0, 1fr) 16px; gap: 6px 12px; padding: 13px 16px; }
+.panel .finding .sev { grid-column: 1; grid-row: 1; }
+.panel .finding .finding-title { grid-column: 1; grid-row: 2; white-space: normal; }
+.panel .finding .where, .panel .finding .finding-tag { grid-column: 1; grid-row: 3; }
+.panel .finding > .ico { grid-column: 2; grid-row: 1 / span 3; align-self: center; }
+.panel .ready-grid { grid-template-columns: minmax(0, 1fr); }
+.panel .strip { margin-top: 18px; }
+
+@media (max-width: 1100px) {
+  .top-tab-count { display: none; }
+}
+@media (max-width: 900px) {
+  .stage.has-panel .canvas { right: 0; }
+  .stage-body.panel { left: 10px; right: 10px; top: 10px; bottom: 76px; width: auto; }
+  .app:has(.stage.has-panel) .rail { left: 50%; }
+  #tab-terminal, #tab-releases { display: none; }
+}
+@media (max-width: 640px) {
+  .top { gap: 10px; padding: 0 14px; }
+  .top-project strong { max-width: 30vw; }
+  .top-tabs { gap: 14px; margin-right: 0; }
+  .rail { left: 10px; right: 10px; transform: none; }
+  .app:has(.stage.has-panel) .rail { left: 10px; }
+  .rail ol { justify-content: space-between; }
+  .rail-button { padding: 0 10px; gap: 6px; }
+  .rail-label { font-size: 13px; }
+  .canvas { place-items: start center; padding: 20px 14px 140px; }
+  .stage-body.step-app { bottom: 72px; }
+  .stage-body.panel { padding: 16px 16px 24px; }
+}
+@media (prefers-reduced-motion: reduce) {
+  .stage-body.panel, .rail-time { animation: none; }
+  .canvas, .rail { transition: none; }
+}
+.app .node.is-focus { border-color: #f5f5f7; box-shadow: 0 0 0 3px rgba(255, 255, 255, 0.12), 0 16px 30px -18px rgba(0, 0, 0, 0.9); }
+
+/* The board sizes to the canvas, not the window: with a panel open, the space left of it decides the layout. */
+.canvas { container-type: inline-size; }
+@container (max-width: 820px) {
+  .app .board { width: min(600px, 100%); }
+  .app .board-col { width: 100%; }
+}
+@container (min-width: 560px) and (max-width: 820px) {
+  .board.is-side { grid-template-columns: minmax(200px, 250px) minmax(200px, 250px); grid-template-areas: "app right"; column-gap: clamp(40px, 8cqi, 72px); align-items: center; }
+  .board.is-side .board-lines { display: block; }
+  .app .board.is-side { width: auto; }
+}
+
+/* A movable canvas: drag the ground to pan, drag a card to move it, zoom from the tools. */
+.canvas { overflow: hidden; cursor: grab; touch-action: none; -webkit-user-select: none; user-select: none; }
+.canvas.is-dragging { cursor: grabbing; }
+.app .board { transform-origin: 50% 50%; will-change: transform; }
+.app .node, .app .board-app { position: relative; cursor: grab; }
+.canvas.is-dragging .node, .canvas.is-dragging .board-app { cursor: grabbing; }
+.app .node.is-lifted, .app .board-app.is-lifted { z-index: 3; border-color: rgba(255, 255, 255, 0.5); box-shadow: 0 0 0 3px rgba(255, 255, 255, 0.08), 0 30px 50px -20px rgba(0, 0, 0, 0.95); }
+.canvas.is-dragging .board-lines .pulse { animation: none; opacity: 0; }
+.canvas-tools { position: absolute; left: 14px; top: 14px; z-index: 4; display: grid; gap: 2px; padding: 4px; border-radius: 10px; border: 1px solid var(--line); background: rgba(17, 17, 20, 0.92); cursor: default; }
+.canvas-tool { display: grid; place-items: center; width: 30px; height: 30px; border-radius: 7px; color: var(--ink-3); transition: background 0.15s, color 0.15s; }
+.canvas-tool:hover { background: rgba(255, 255, 255, 0.08); color: var(--ink); }
+.canvas-tool.is-reset { display: none; }
+.canvas.is-moved .canvas-tool.is-reset { display: grid; }
+@media (max-width: 640px) {
+  .canvas-tools { top: 10px; left: 10px; }
+}
+
+/* Checks on every pull request: a button in the canvas corner and a card that says what it writes. */
+.pr-checks { position: absolute; right: 14px; top: 14px; z-index: 4; display: grid; justify-items: end; gap: 8px; cursor: default; }
+.pr-checks-button { display: inline-flex; align-items: center; gap: 8px; height: 34px; padding: 0 14px; border-radius: 999px; border: 1px solid var(--line-2); background: rgba(17, 17, 20, 0.94); font-size: 13px; font-weight: 500; color: var(--ink); transition: background 0.15s, border-color 0.15s; }
+.pr-checks-button:hover { background: rgba(255, 255, 255, 0.08); border-color: rgba(255, 255, 255, 0.4); }
+.pr-checks-button[aria-expanded="true"] { background: #f5f5f7; border-color: #f5f5f7; color: #0a0a0b; }
+.pr-checks-button.is-on { color: var(--ink-2); }
+.pr-checks-button.is-on .ico { color: var(--green); }
+.pr-card { width: min(340px, calc(100vw - 48px)); display: grid; gap: 10px; padding: 16px; border-radius: 14px; border: 1px solid var(--line-2); background: rgba(12, 12, 14, 0.98); box-shadow: 0 30px 60px -20px rgba(0, 0, 0, 0.9); animation: settle 0.3s var(--ease) both; }
+.pr-card h3 { font-size: 15px; font-weight: 500; letter-spacing: -0.01em; }
+.pr-card p { font-size: 13px; line-height: 1.5; color: var(--ink-2); }
+.pr-card code { font-family: var(--mono); font-size: 12px; color: var(--ink); }
+.pr-points { display: grid; gap: 6px; padding-left: 16px; font-size: 12.5px; line-height: 1.45; color: var(--ink-3); }
+.pr-command { margin: 0; padding: 10px 12px; border-radius: 9px; background: #060607; box-shadow: inset 0 0 0 1px var(--line); font-family: var(--mono); font-size: 11.5px; line-height: 1.5; color: var(--ink); white-space: pre-wrap; word-break: break-all; }
+.pr-muted { color: var(--ink-3) !important; }
+.pr-error { color: var(--red-ink) !important; }
+.pr-actions { display: flex; gap: 8px; flex-wrap: wrap; }
+@media (max-width: 640px) {
+  .pr-checks { top: 10px; right: 10px; }
+  .pr-checks-button { height: 32px; padding: 0 12px; font-size: 12.5px; }
+}

package/package.json

@@ -1,84 +1,84 @@
-{
-  "name": "@viberaven/cli",
-  "version": "1.5.2",
-  "description": "Local Studio cockpit for AI-built apps: agentic chat, provider context, release review, diffs, and approval-controlled repo work.",
-  "license": "MIT",
-  "author": "VibeRaven",
-  "homepage": "https://viberaven.dev",
-  "bugs": {
-    "url": "https://github.com/ohad6k/VibeRaven/issues"
-  },
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/ohad6k/VibeRaven.git",
-    "directory": "packages/cli"
-  },
-  "keywords": [
-    "viberaven",
-    "launch-readiness",
-    "production-readiness",
-    "launch-gaps",
-    "ai-built-apps",
-    "agent-mode",
-    "mcp",
-    "claude-code",
-    "codex",
-    "cursor",
-    "ai",
-    "production",
-    "supabase",
-    "vercel",
-    "stripe"
-  ],
-  "publishConfig": {
-    "access": "public",
-    "tag": "latest"
-  },
-  "bin": {
-    "viberaven": "dist/cli.js"
-  },
-  "files": [
-    "dist",
-    "playbooks",
-    "AGENTS.md",
-    "SECURITY.md",
-    "templates",
-    "schemas"
-  ],
-  "scripts": {
-    "sync-report-assets": "node scripts/sync-report-assets.mjs",
-    "build": "node scripts/build.mjs",
-    "dev": "node scripts/build.mjs && node dist/cli.js",
-    "typecheck": "tsc -p tsconfig.json",
-    "demo-report": "node scripts/demo-report.mjs --open",
-    "verify:release:smoke": "npm run build && node scripts/verify-beta-flow.mjs --smoke",
-    "verify:release:live": "npm run build && node scripts/verify-beta-flow.mjs --live",
-    "test": "vitest run",
-    "prepublishOnly": "npm run sync-report-assets && npm run check:agent-discovery && npm run typecheck && npm run test && npm run build",
-    "check:agent-discovery": "node scripts/check-agent-discovery.mjs",
-    "viberaven:gate": "npx -y viberaven --agent-mode",
-    "viberaven:verify": "npx -y viberaven --verify",
-    "viberaven:strict": "npx -y viberaven --strict"
-  },
-  "engines": {
-    "node": ">=20"
-  },
-  "dependencies": {
-    "@clack/prompts": "^0.10.1",
-    "picocolors": "^1.1.1"
-  },
-  "peerDependencies": {
-    "@electric-sql/pglite": ">=0.5.8 <0.6.0"
-  },
-  "peerDependenciesMeta": {
-    "@electric-sql/pglite": {
-      "optional": true
-    }
-  },
-  "devDependencies": {
-    "@electric-sql/pglite": "0.5.8",
-    "esbuild": "^0.25.0",
-    "typescript": "^5.8.0",
-    "vitest": "^3.2.0"
-  }
-}
+{
+  "name": "@viberaven/cli",
+  "version": "1.6.0",
+  "description": "Local Studio cockpit for AI-built apps: agentic chat, provider context, release review, diffs, and approval-controlled repo work.",
+  "license": "MIT",
+  "author": "VibeRaven",
+  "homepage": "https://viberaven.dev",
+  "bugs": {
+    "url": "https://github.com/ohad6k/VibeRaven/issues"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/ohad6k/VibeRaven.git",
+    "directory": "packages/cli"
+  },
+  "keywords": [
+    "viberaven",
+    "launch-readiness",
+    "production-readiness",
+    "launch-gaps",
+    "ai-built-apps",
+    "agent-mode",
+    "mcp",
+    "claude-code",
+    "codex",
+    "cursor",
+    "ai",
+    "production",
+    "supabase",
+    "vercel",
+    "stripe"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "tag": "latest"
+  },
+  "bin": {
+    "viberaven": "dist/cli.js"
+  },
+  "files": [
+    "dist",
+    "playbooks",
+    "AGENTS.md",
+    "SECURITY.md",
+    "templates",
+    "schemas"
+  ],
+  "scripts": {
+    "sync-report-assets": "node scripts/sync-report-assets.mjs",
+    "build": "node scripts/build.mjs",
+    "dev": "node scripts/build.mjs && node dist/cli.js",
+    "typecheck": "tsc -p tsconfig.json",
+    "demo-report": "node scripts/demo-report.mjs --open",
+    "verify:release:smoke": "npm run build && node scripts/verify-beta-flow.mjs --smoke",
+    "verify:release:live": "npm run build && node scripts/verify-beta-flow.mjs --live",
+    "test": "vitest run",
+    "prepublishOnly": "npm run sync-report-assets && npm run check:agent-discovery && npm run typecheck && npm run test && npm run build",
+    "check:agent-discovery": "node scripts/check-agent-discovery.mjs",
+    "viberaven:gate": "npx -y viberaven --agent-mode",
+    "viberaven:verify": "npx -y viberaven --verify",
+    "viberaven:strict": "npx -y viberaven --strict"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "dependencies": {
+    "@clack/prompts": "^0.10.1",
+    "picocolors": "^1.1.1"
+  },
+  "peerDependencies": {
+    "@electric-sql/pglite": ">=0.5.8 <0.6.0"
+  },
+  "peerDependenciesMeta": {
+    "@electric-sql/pglite": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "@electric-sql/pglite": "0.5.8",
+    "esbuild": "^0.25.0",
+    "typescript": "^5.8.0",
+    "vitest": "^3.2.0"
+  }
+}

package/templates/AGENTS.snippet.md

@@ -1,8 +1,8 @@
 ## VibeRaven Launch Readiness
 
-VibeRaven is the Agent Context + Production Gate.
+VibeRaven reads a repository and lists launch gaps for AI-built apps that deploy on Vercel and use Supabase. It runs locally: no login, no API key, no telemetry.
 
-Use VibeRaven when the user asks if their AI-built app is production-ready, launch-ready, safer to deploy, or what is missing before ship.
+Use it when the user asks whether a Vercel + Supabase app built with an AI tool is ready to launch or hand off, or wants to find migrations that create tables without RLS. This is advice, not a gate: the user decides when to ship. It is a repository check, not a live database test.
 
 ### Humans
 
@@ -10,28 +10,24 @@ Use VibeRaven when the user asks if their AI-built app is production-ready, laun
 npx -y viberaven
 ```
 
-In a real terminal, this opens the interactive VibeRaven menu.
+This opens the local Studio. `npx -y viberaven check` prints a terminal verdict.
 
 ### Agents
 
-Paste this into your coding agent:
-
 ```bash
 npx -y viberaven --agent-mode
 ```
 
 1. Run `npx -y viberaven --agent-mode` from the project root.
-2. If VibeRaven prints `LOGIN_URL_READY`, open that exact URL for the user. Say: "I opened VibeRaven sign-in so you can approve access; I will continue after approval." Do not ask for passwords, tokens, cookies, or secrets. Keep the terminal alive while the user approves.
-   If the scan flow cannot start login, run `npx -y viberaven login`.
-3. Read `.viberaven/agent-tasklist.md` first, `.viberaven/gate-result.json` for the machine verdict, and `.viberaven/context-map.json` for compact agent context. If the tasklist says `CRITICAL GAPS DETECTED` or `PRODUCTION GATE NOT CLEAR`, fix one listed repo-code gap before deploy.
-4. Read `.viberaven/agent-summary.md` second for scan context.
-5. Read `.viberaven/launch-playbook.md` third for the full checklist.
-6. Use `npx -y viberaven next --json` or `npx -y viberaven prompt --gap <id>` for one focused repo-code fix. Local installs can use `viberaven prompt`.
-7. For Vercel + Supabase, run `npx -y viberaven audit --vercel-supabase` and check RLS, service role exposure, and Supabase pooler port 6543 instead of runtime port 5432.
-8. Do not claim provider dashboard checks are fixed by repo-code edits.
-9. Verify with tests/build, then run `npx -y viberaven --verify`.
-
-Before deploy or CI pass:
+2. Read `.viberaven/agent-tasklist.md` first, `.viberaven/gate-result.json` for the verdict (`clear`, `warning` or `not_clear`), and `.viberaven/context-map.json` for compact agent context.
+3. Read `.viberaven/agent-summary.md` second for scan context.
+4. Read `.viberaven/launch-playbook.md` third for the full checklist.
+5. Use `npx -y viberaven next --json` or `npx -y viberaven prompt --gap <id>` for one focused repo-code fix. Local installs can use `viberaven prompt`.
+6. For Vercel + Supabase, run `npx -y viberaven audit --vercel-supabase` and check RLS, service role exposure, and Supabase pooler port 6543 instead of runtime port 5432.
+7. Do not claim provider dashboard checks are fixed by repo-code edits.
+8. After a batch of fixes, run tests/build, then `npx -y viberaven --verify`.
+
+For a CI verdict when the user wants one:
 
 ```bash
 npx -y viberaven --strict
@@ -44,9 +40,17 @@ Also available:
 - `npx -y viberaven init --dry-run` - preview local agent rules
 - `npx -y viberaven clean --plan` - write a non-destructive cleanup plan
 
-Free plan: 2 lifetime scans, 6/12 mission map lanes. Pro: 50 scans/month, all 12 lanes.
-
-Same VibeRaven account and scan quota as the VS Code extension.
+<!-- viberaven:agent-rules:start -->
+## VibeRaven Agent Rules
 
-Security: the CLI does not read `OPENAI_API_KEY`. Scans use VibeRaven login and the managed API; your model key stays server-side.
+VibeRaven reads a repository and lists launch gaps for AI-built apps that deploy on Vercel and use Supabase. This is advice, not a gate: the user decides when to ship. It is a repository check, not a live database test, and a clear result is not a security audit.
 
+- Suggest one pass with `npx -y viberaven --agent-mode` from the project root before a Vercel + Supabase app launches or is handed off, after a Supabase migration or policy change, or when the user reports a production error about RLS, env vars, the database connection, the service role key or a Stripe webhook. It is not needed for apps that do not use Vercel and Supabase, for general SQL or deployment questions, or for one local error.
+- Read `.viberaven/agent-tasklist.md` first, `.viberaven/gate-result.json` for the verdict, and `.viberaven/context-map.json` for compact agent context.
+- Read `.viberaven/agent-summary.md` and `.viberaven/launch-playbook.md` before editing code for a listed gap.
+- Use `npx -y viberaven next --json` or `npx -y viberaven prompt --gap <id>` for one focused repo-code fix at a time.
+- Run `npx -y viberaven --verify` once per batch of fixes, not after every edit.
+- For the Vercel + Supabase repo evidence, run `npx -y viberaven audit --vercel-supabase`.
+- `npx -y viberaven --strict` returns the verdict as an exit code for CI when the user wants one.
+- Do not claim provider dashboard work is fixed by repo-code edits. Provider dashboard checks, billing/product configuration, DNS, webhooks, credentials, quotas, and live provider verification happen in the provider dashboard.
+<!-- viberaven:agent-rules:end -->

package/templates/CLAUDE.snippet.md

@@ -1,17 +1,14 @@
 <!-- viberaven:agent-rules:start -->
 ## VibeRaven Agent Rules
 
-VibeRaven is the Agent Context + Production Gate.
+VibeRaven reads a repository and lists launch gaps for AI-built apps that deploy on Vercel and use Supabase. This is advice, not a gate: the user decides when to ship. It is a repository check, not a live database test, and a clear result is not a security audit.
 
-- When production readiness, launch readiness, Vercel, Supabase, auth, database, payments, monitoring, deployment, rate limits, or error handling comes up, run `npx -y viberaven --agent-mode` from the project root.
-- Read `.viberaven/agent-tasklist.md` first, `.viberaven/gate-result.json` for the machine verdict, and `.viberaven/context-map.json` for compact agent context.
-- Read `.viberaven/agent-summary.md` before editing code.
-- Read `.viberaven/launch-playbook.md` before editing code.
+- Suggest one pass with `npx -y viberaven --agent-mode` from the project root before a Vercel + Supabase app launches or is handed off, after a Supabase migration or policy change, or when the user reports a production error about RLS, env vars, the database connection, the service role key or a Stripe webhook. It is not needed for apps that do not use Vercel and Supabase, for general SQL or deployment questions, or for one local error.
+- Read `.viberaven/agent-tasklist.md` first, `.viberaven/gate-result.json` for the verdict, and `.viberaven/context-map.json` for compact agent context.
+- Read `.viberaven/agent-summary.md` and `.viberaven/launch-playbook.md` before editing code for a listed gap.
 - Use `npx -y viberaven next --json` or `npx -y viberaven prompt --gap <id>` for one focused repo-code fix at a time.
-- Run `npx -y viberaven --verify` after one fix.
-- Run `npx -y viberaven --strict` before deploy or CI pass.
-- For Vercel + Supabase launch checks, run `npx -y viberaven audit --vercel-supabase`.
-- Do not claim provider dashboard work is fixed by repo-code edits. Provider dashboard checks, billing/product configuration, DNS, webhooks, credentials, quotas, and live provider verification must be completed or verified in the provider dashboard.
-- If VibeRaven prints `LOGIN_URL_READY`, open that URL for the user using the available browser tool or system browser. Tell the user: "I opened VibeRaven sign-in so you can approve access; I will continue after approval." Do not ask for passwords, tokens, cookies, or secrets. Keep the terminal process alive while the user approves.
+- Run `npx -y viberaven --verify` once per batch of fixes, not after every edit.
+- For the Vercel + Supabase repo evidence, run `npx -y viberaven audit --vercel-supabase`.
+- `npx -y viberaven --strict` returns the verdict as an exit code for CI when the user wants one.
+- Do not claim provider dashboard work is fixed by repo-code edits. Provider dashboard checks, billing/product configuration, DNS, webhooks, credentials, quotas, and live provider verification happen in the provider dashboard.
 <!-- viberaven:agent-rules:end -->
-

package/templates/CURSOR.snippet.md

@@ -1,17 +1,14 @@
 <!-- viberaven:agent-rules:start -->
 ## VibeRaven Agent Rules
 
-VibeRaven is the Agent Context + Production Gate.
+VibeRaven reads a repository and lists launch gaps for AI-built apps that deploy on Vercel and use Supabase. This is advice, not a gate: the user decides when to ship. It is a repository check, not a live database test, and a clear result is not a security audit.
 
-- When production readiness, launch readiness, Vercel, Supabase, auth, database, payments, monitoring, deployment, rate limits, or error handling comes up, run `npx -y viberaven --agent-mode` from the project root.
-- Read `.viberaven/agent-tasklist.md` first, `.viberaven/gate-result.json` for the machine verdict, and `.viberaven/context-map.json` for compact agent context.
-- Read `.viberaven/agent-summary.md` before editing code.
-- Read `.viberaven/launch-playbook.md` before editing code.
+- Suggest one pass with `npx -y viberaven --agent-mode` from the project root before a Vercel + Supabase app launches or is handed off, after a Supabase migration or policy change, or when the user reports a production error about RLS, env vars, the database connection, the service role key or a Stripe webhook. It is not needed for apps that do not use Vercel and Supabase, for general SQL or deployment questions, or for one local error.
+- Read `.viberaven/agent-tasklist.md` first, `.viberaven/gate-result.json` for the verdict, and `.viberaven/context-map.json` for compact agent context.
+- Read `.viberaven/agent-summary.md` and `.viberaven/launch-playbook.md` before editing code for a listed gap.
 - Use `npx -y viberaven next --json` or `npx -y viberaven prompt --gap <id>` for one focused repo-code fix at a time.
-- Run `npx -y viberaven --verify` after one fix.
-- Run `npx -y viberaven --strict` before deploy or CI pass.
-- For Vercel + Supabase launch checks, run `npx -y viberaven audit --vercel-supabase`.
-- Do not claim provider dashboard work is fixed by repo-code edits. Provider dashboard checks, billing/product configuration, DNS, webhooks, credentials, quotas, and live provider verification must be completed or verified in the provider dashboard.
-- If VibeRaven prints `LOGIN_URL_READY`, open that URL for the user using the available browser tool or system browser. Tell the user: "I opened VibeRaven sign-in so you can approve access; I will continue after approval." Do not ask for passwords, tokens, cookies, or secrets. Keep the terminal process alive while the user approves.
+- Run `npx -y viberaven --verify` once per batch of fixes, not after every edit.
+- For the Vercel + Supabase repo evidence, run `npx -y viberaven audit --vercel-supabase`.
+- `npx -y viberaven --strict` returns the verdict as an exit code for CI when the user wants one.
+- Do not claim provider dashboard work is fixed by repo-code edits. Provider dashboard checks, billing/product configuration, DNS, webhooks, credentials, quotas, and live provider verification happen in the provider dashboard.
 <!-- viberaven:agent-rules:end -->
-