periderm-cli 0.1.1 → 0.1.3

package/dist/index.js

@@ -151,11 +151,6 @@ program
         console.error(chalk.red("Error: You must be logged in. Run `periderm login` first."));
         process.exit(1);
     }
-    const apiKey = process.env.GROQ_API_KEY?.trim();
-    if (!apiKey) {
-        console.error(chalk.red("Error: Set GROQ_API_KEY in your environment to run deep review."));
-        process.exit(1);
-    }
     const reportPath = path.join(root, ".periderm", "last-report.json");
     let scanResult;
     try {
@@ -178,7 +173,7 @@ program
     }
     verifySpinner.succeed("Plan verified");
     const reviewSpinner = ora({ text: "Starting deep review agent…", color: "cyan" }).start();
-    const { markdown, findings } = await runDeepReview(root, scanResult, apiKey, (msg) => {
+    const { markdown, findings } = await runDeepReview(root, scanResult, cfg.token, cfg.apiUrl, (msg) => {
         reviewSpinner.text = msg;
     });
     scanResult.findings.push(...findings);
@@ -374,26 +369,50 @@ program
     console.info("");
     await updatePromise;
 });
-program.parseAsync().catch(async (e) => {
-    console.error(e);
-    try {
-        const formData = new FormData();
-        formData.append("name", "Periderm CLI Crash Reporter");
-        formData.append("_replyto", "support@periderm.dev");
-        const marker = "\n\n---\n[System Info: Sent from Periderm CLI]";
-        const errMsg = e instanceof Error ? `${e.message}\n${e.stack}` : String(e);
-        formData.append("message", `CLI Crash:\n\n${errMsg}${marker}`);
-        await fetch("https://formspree.io/f/mqakppnn", {
-            method: "POST",
-            body: formData,
-            headers: { Accept: "application/json" }
-        });
-    }
-    catch (err) {
-        // silently fail
-    }
-    process.exit(1);
-});
+if (process.argv.length === 2) {
+    console.info("");
+    console.info(chalk.hex("#FF4D00")(PERIDERM_ASCII));
+    console.info("");
+    console.info(chalk.bold.white("Welcome to the Periderm CLI."));
+    console.info(chalk.gray("The ultimate pre-launch checklist for your codebase."));
+    console.info("");
+    program.help();
+}
+else {
+    program.parseAsync().catch(async (e) => {
+        console.error(e);
+        try {
+            const formData = new FormData();
+            formData.append("name", "Periderm CLI Crash Reporter");
+            let userEmail = "support@periderm.dev";
+            try {
+                const cfg = readConfig();
+                if (cfg.token) {
+                    const v = await verifyToken(cfg.token);
+                    if (v.valid && v.email) {
+                        userEmail = v.email;
+                    }
+                }
+            }
+            catch {
+                // ignore token verification errors during crash
+            }
+            formData.append("_replyto", userEmail);
+            const marker = `\n\n---\n[System Info: Sent from Periderm CLI]\n[User Email: ${userEmail === "support@periderm.dev" ? "Unknown" : userEmail}]`;
+            const errMsg = e instanceof Error ? `${e.message}\n${e.stack}` : String(e);
+            formData.append("message", `CLI Crash:\n\n${errMsg}${marker}`);
+            await fetch("https://formspree.io/f/mqakppnn", {
+                method: "POST",
+                body: formData,
+                headers: { Accept: "application/json" }
+            });
+        }
+        catch (err) {
+            // silently fail
+        }
+        process.exit(1);
+    });
+}
 function readLine() {
     return new Promise((resolve) => {
         let data = "";

package/dist/review/deep.js

@@ -12,27 +12,23 @@ function stripCodeFences(text) {
     const m = text.match(/```(?:json)?\s*([\s\S]*?)```/);
     return (m?.[1] ?? text).trim();
 }
-async function groqJson(apiKey, system, user) {
-    const res = await fetch("https://api.groq.com/openai/v1/chat/completions", {
+async function groqJson(token, apiUrl, system, user) {
+    const res = await fetch(`${apiUrl}/api/public/deep-review`, {
         method: "POST",
         headers: {
-            Authorization: `Bearer ${apiKey}`,
             "Content-Type": "application/json",
+            "x-periderm-token": token,
         },
-        body: JSON.stringify({
-            model: MODEL,
-            temperature: 0.2,
-            response_format: { type: "json_object" },
-            messages: [
-                { role: "system", content: system },
-                { role: "user", content: user },
-            ],
-        }),
+        body: JSON.stringify({ system, user }),
     });
-    if (!res.ok)
-        throw new Error(`Groq API error ${res.status}: ${(await res.text()).slice(0, 200)}`);
-    const data = (await res.json());
-    return data.choices?.[0]?.message?.content ?? "{}";
+    if (!res.ok) {
+        const text = await res.text();
+        throw new Error(`Deep review API error ${res.status}: ${text.slice(0, 200)}`);
+    }
+    const data = await res.json();
+    if (!data.valid)
+        throw new Error(`Deep review failed: ${data.error}`);
+    return data.content ?? "{}";
 }
 async function readFileSafe(root, rel) {
     const safe = rel.replace(/^(\.\/|\.\.\/)+/, "").replace(/\.\./g, "");
@@ -87,7 +83,7 @@ function parseAction(raw) {
         return null;
     }
 }
-export async function runDeepReview(root, scan, apiKey, onStatus) {
+export async function runDeepReview(root, scan, token, apiUrl, onStatus) {
     const system = `You are Periderm's deep launch reviewer. Respond with JSON only.
 
 Existing static scan found ${scan.findings.length} issues. Your job: find ADDITIONAL nuanced launch risks the deterministic scanner missed — legal/UX/business logic edge cases, contradictions, deceptive flows, subtle security gaps.
@@ -114,7 +110,7 @@ Rules: max 5 new findings, be specific, cite files, no hallucinated files.`;
     const toolLog = [];
     for (let i = 0; i < MAX_ITERATIONS; i++) {
         onStatus?.(`Deep review · pass ${i + 1}/${MAX_ITERATIONS}…`);
-        const raw = await groqJson(apiKey, system, transcript);
+        const raw = await groqJson(token, apiUrl, system, transcript);
         const action = parseAction(raw);
         if (!action) {
             transcript += `\n\nInvalid JSON. Respond with valid JSON only.\n`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "periderm-cli",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "description": "A pre-launch checklist for your codebase.",
   "type": "module",
   "bin": {
@@ -21,7 +21,6 @@
     "@babel/types": "^7.25.0",
     "chalk": "^5.3.0",
     "commander": "^12.1.0",
-    "dotenv": "^17.4.2",
     "fast-glob": "^3.3.2",
     "open": "^10.1.0",
     "ora": "^9.4.1"