saasfunnels 0.3.0 → 0.3.1

package/README.md

@@ -10,12 +10,16 @@ This repository contains only the MIT-licensed CLI and its bounded runtime contr
 
 ## Install
 
-Install the stable CLI:
+Start in your app repository:
 
 ```bash
-npm install --global saasfunnels
+npx --yes saasfunnels@latest setup
 ```
 
+The explicit version tag avoids running an older project-local CLI. Setup asks where developer access is saved (Doppler or `.env.local`) when needed, requests approval before uploading findings, and shows each discovery stage. It never prints keys, rewrites env files, deploys your app, or approves inferred plans. Connect Stripe and create app credentials in the web Setup first. `setup run` remains a compatible entry point.
+
+For scripts, use `--env-file .env.local --send --non-interactive`, or inject `SAASFUNNELS_API_KEY` from your secret manager. Without explicit approval, non-interactive runs stop without uploading. Run `setup --help` for setup-only guidance. Runtime implementation and payment verification remain in the web Setup.
+
 ## Use
 
 ```bash
@@ -51,7 +55,7 @@ approved set is reviewable.
     discovery-roots: app,lib
 ```
 
-On a pull request the Action scans as a `candidate`: the result is compared
+The Action uploads an existing feature manifest; it does not freshly scan application source. On a pull request the upload is a `candidate`: the result is compared
 against the branch's baseline and discarded. Only the default branch advances
 the lineage. Changing `discovery-roots` starts a new lineage, so drift is
 measured against a comparable scan rather than a wider or narrower one.

package/dist/library.js

@@ -24264,7 +24264,7 @@ function validateFeatureCatalogManifest(value) {
 
 // src/identity.ts
 var SAASFUNNELS_CLI_NAME = "saasfunnels";
-var SAASFUNNELS_CLI_VERSION = "0.3.0";
+var SAASFUNNELS_CLI_VERSION = "0.3.1";
 var SAASFUNNELS_PRODUCT_NAME = "SaaSFunnels";
 var SAASFUNNELS_DEFAULT_API_BASE_URL = "https://app.saasfunnels.ai";
 var SAASFUNNELS_ENV = Object.freeze({

package/dist/saasfunnels.js

@@ -8649,7 +8649,7 @@ ${lanes.join("\n")}
             writeOutputIsTTY() {
               return process.stdout.isTTY;
             },
-            readFile: readFile6,
+            readFile: readFile7,
             writeFile: writeFile22,
             watchFile: watchFile2,
             watchDirectory,
@@ -8855,7 +8855,7 @@ ${lanes.join("\n")}
               callback
             );
           }
-          function readFile6(fileName, _encoding) {
+          function readFile7(fileName, _encoding) {
             let buffer;
             try {
               buffer = _fs.readFileSync(fileName);
@@ -45538,7 +45538,7 @@ ${lanes.join("\n")}
         const possibleOption = getSpellingSuggestion(unknownOption, diagnostics.optionDeclarations, getOptionName);
         return possibleOption ? createDiagnosticForNodeInSourceFileOrCompilerDiagnostic(sourceFile, node, diagnostics.unknownDidYouMeanDiagnostic, unknownOptionErrorText || unknownOption, possibleOption.name) : createDiagnosticForNodeInSourceFileOrCompilerDiagnostic(sourceFile, node, diagnostics.unknownOptionDiagnostic, unknownOptionErrorText || unknownOption);
       }
-      function parseCommandLineWorker(diagnostics, commandLine, readFile6) {
+      function parseCommandLineWorker(diagnostics, commandLine, readFile7) {
         const options = {};
         let watchOptions;
         const fileNames = [];
@@ -45586,7 +45586,7 @@ ${lanes.join("\n")}
           }
         }
         function parseResponseFile(fileName) {
-          const text = tryReadFile(fileName, readFile6 || ((fileName2) => sys.readFile(fileName2)));
+          const text = tryReadFile(fileName, readFile7 || ((fileName2) => sys.readFile(fileName2)));
           if (!isString(text)) {
             errors.push(text);
             return;
@@ -45689,8 +45689,8 @@ ${lanes.join("\n")}
         unknownDidYouMeanDiagnostic: Diagnostics.Unknown_compiler_option_0_Did_you_mean_1,
         optionTypeMismatchDiagnostic: Diagnostics.Compiler_option_0_expects_an_argument
       };
-      function parseCommandLine(commandLine, readFile6) {
-        return parseCommandLineWorker(compilerOptionsDidYouMeanDiagnostics, commandLine, readFile6);
+      function parseCommandLine(commandLine, readFile7) {
+        return parseCommandLineWorker(compilerOptionsDidYouMeanDiagnostics, commandLine, readFile7);
       }
       function getOptionFromName(optionName, allowShort) {
         return getOptionDeclarationFromName(getOptionsNameMap, optionName, allowShort);
@@ -45772,8 +45772,8 @@ ${lanes.join("\n")}
           watchOptionsToExtend
         );
       }
-      function readConfigFile(fileName, readFile6) {
-        const textOrDiagnostic = tryReadFile(fileName, readFile6);
+      function readConfigFile(fileName, readFile7) {
+        const textOrDiagnostic = tryReadFile(fileName, readFile7);
         return isString(textOrDiagnostic) ? parseConfigFileTextToJson(fileName, textOrDiagnostic) : { config: {}, error: textOrDiagnostic };
       }
       function parseConfigFileTextToJson(fileName, jsonText) {
@@ -45788,14 +45788,14 @@ ${lanes.join("\n")}
           error: jsonSourceFile.parseDiagnostics.length ? jsonSourceFile.parseDiagnostics[0] : void 0
         };
       }
-      function readJsonConfigFile(fileName, readFile6) {
-        const textOrDiagnostic = tryReadFile(fileName, readFile6);
+      function readJsonConfigFile(fileName, readFile7) {
+        const textOrDiagnostic = tryReadFile(fileName, readFile7);
         return isString(textOrDiagnostic) ? parseJsonText(fileName, textOrDiagnostic) : { fileName, parseDiagnostics: [textOrDiagnostic] };
       }
-      function tryReadFile(fileName, readFile6) {
+      function tryReadFile(fileName, readFile7) {
         let text;
         try {
-          text = readFile6(fileName);
+          text = readFile7(fileName);
         } catch (e) {
           return createCompilerDiagnostic(Diagnostics.Cannot_read_file_0_Colon_1, fileName, e.message);
         }
@@ -124332,7 +124332,7 @@ ${lanes.join("\n")}
           }
         }
         function createImportCallExpressionAMD(arg, containsLexicalThis) {
-          const resolve5 = factory2.createUniqueName("resolve");
+          const resolve6 = factory2.createUniqueName("resolve");
           const reject = factory2.createUniqueName("reject");
           const parameters = [
             factory2.createParameterDeclaration(
@@ -124341,7 +124341,7 @@ ${lanes.join("\n")}
               /*dotDotDotToken*/
               void 0,
               /*name*/
-              resolve5
+              resolve6
             ),
             factory2.createParameterDeclaration(
               /*modifiers*/
@@ -124358,7 +124358,7 @@ ${lanes.join("\n")}
                 factory2.createIdentifier("require"),
                 /*typeArguments*/
                 void 0,
-                [factory2.createArrayLiteralExpression([arg || factory2.createOmittedExpression()]), resolve5, reject]
+                [factory2.createArrayLiteralExpression([arg || factory2.createOmittedExpression()]), resolve6, reject]
               )
             )
           ]);
@@ -135899,12 +135899,12 @@ ${lanes.join("\n")}
       function createCompilerHost(options, setParentNodes) {
         return createCompilerHostWorker(options, setParentNodes);
       }
-      function createGetSourceFile(readFile6, setParentNodes) {
+      function createGetSourceFile(readFile7, setParentNodes) {
         return (fileName, languageVersionOrOptions, onError) => {
           let text;
           try {
             mark("beforeIORead");
-            text = readFile6(fileName);
+            text = readFile7(fileName);
             mark("afterIORead");
             measure("I/O Read", "beforeIORead", "afterIORead");
           } catch (e) {
@@ -136808,7 +136808,7 @@ ${lanes.join("\n")}
           getRedirectFromOutput,
           forEachResolvedProjectReference: forEachResolvedProjectReference2
         });
-        const readFile6 = host.readFile.bind(host);
+        const readFile7 = host.readFile.bind(host);
         (_e = tracing) == null ? void 0 : _e.push(tracing.Phase.Program, "shouldProgramCreateNewSourceFiles", { hasOldProgram: !!oldProgram });
         const shouldCreateNewSourceFile = shouldProgramCreateNewSourceFiles(oldProgram, options);
         (_f = tracing) == null ? void 0 : _f.pop();
@@ -137029,7 +137029,7 @@ ${lanes.join("\n")}
           shouldTransformImportCall,
           emitBuildInfo,
           fileExists,
-          readFile: readFile6,
+          readFile: readFile7,
           directoryExists,
           getSymlinkCache,
           realpath: (_o = host.realpath) == null ? void 0 : _o.bind(host),
@@ -211289,8 +211289,8 @@ Additional information: BADCLIENT: Bad error code, ${badCode} not found in range
         installPackage(options) {
           this.packageInstallId++;
           const request = { kind: "installPackage", ...options, id: this.packageInstallId };
-          const promise2 = new Promise((resolve5, reject) => {
-            (this.packageInstalledPromise ?? (this.packageInstalledPromise = /* @__PURE__ */ new Map())).set(this.packageInstallId, { resolve: resolve5, reject });
+          const promise2 = new Promise((resolve6, reject) => {
+            (this.packageInstalledPromise ?? (this.packageInstalledPromise = /* @__PURE__ */ new Map())).set(this.packageInstallId, { resolve: resolve6, reject });
           });
           this.installer.send(request);
           return promise2;
@@ -218902,8 +218902,48 @@ var require_dist = __commonJS({
 // src/saasfunnels.ts
 import { createInterface as createInterface2 } from "node:readline/promises";
 
+// src/setup-access.ts
+import { execFile } from "node:child_process";
+import { readFile } from "node:fs/promises";
+import { resolve } from "node:path";
+import { parseEnv, promisify } from "node:util";
+var exec = promisify(execFile);
+async function resolveSetupAccess(options) {
+  if (options.key?.trim()) return { key: options.key.trim() };
+  let file2 = options.envFile;
+  if (!file2 && options.prompt) {
+    const choice = (await options.prompt(
+      "Developer access is not loaded. Where did you save SAASFUNNELS_API_KEY?\n  1. Doppler (this folder\u2019s configured project)\n  2. .env.local in this app\n  3. I haven\u2019t saved it yet\nChoose [1/2/3]: "
+    )).trim();
+    if (choice === "1") {
+      try {
+        const key2 = options.loadDoppler ? await options.loadDoppler() : (await exec("doppler", ["secrets", "get", "SAASFUNNELS_API_KEY", "--plain"], {
+          cwd: options.cwd,
+          timeout: 3e4,
+          maxBuffer: 64e3
+        })).stdout;
+        if (key2.trim()) return { key: key2.trim() };
+      } catch {
+      }
+      return { error: "Couldn\u2019t load developer access from Doppler. Check this folder\u2019s Doppler project/config and save SAASFUNNELS_API_KEY there, then rerun this command." };
+    }
+    if (choice === "2") file2 = ".env.local";
+  }
+  if (file2) {
+    try {
+      const source = await readFile(resolve(options.cwd, file2), "utf8");
+      if (source.length > 64e3) throw new Error("Oversized env file");
+      const key2 = parseEnv(source).SAASFUNNELS_API_KEY?.trim();
+      if (key2) return { key: key2 };
+    } catch {
+    }
+    return { error: "Couldn\u2019t find SAASFUNNELS_API_KEY in the selected env file. Save the developer access key there, then rerun this command. No file was changed." };
+  }
+  return { error: "Open SaaSFunnels \u2192 Setup \u2192 Environment values \u2192 Developer setup access. Save SAASFUNNELS_API_KEY in your secret manager or .env.local, then run npx --yes saasfunnels@latest setup again. Never paste the key into a command. For automation, load it into the process or use --env-file .env.local." };
+}
+
 // src/cli.ts
-import { dirname as dirname3, join as join5, resolve as resolve4 } from "node:path";
+import { dirname as dirname3, join as join5, resolve as resolve5 } from "node:path";
 
 // src/setup-pricing.ts
 var import_typescript = __toESM(require_typescript(), 1);
@@ -219023,9 +219063,9 @@ function extractSetupPricing(source, kind) {
 
 // src/setup-run.ts
 import { createHash as createHash3 } from "node:crypto";
-import { execFile } from "node:child_process";
-import { promisify } from "node:util";
-import { readFile as readFile4, writeFile as writeFile3, mkdir as mkdir3 } from "node:fs/promises";
+import { execFile as execFile2 } from "node:child_process";
+import { promisify as promisify2 } from "node:util";
+import { readFile as readFile5, writeFile as writeFile3, mkdir as mkdir3 } from "node:fs/promises";
 import { join as join4 } from "node:path";
 
 // node_modules/zod/v4/classic/external.js
@@ -233548,14 +233588,14 @@ import { createHash as createHash2, randomUUID } from "node:crypto";
 import {
   access,
   mkdir,
-  readFile,
+  readFile as readFile2,
   readdir,
   rename,
   rm,
   stat,
   writeFile
 } from "node:fs/promises";
-import { dirname, extname, join, relative, resolve } from "node:path";
+import { dirname, extname, join, relative, resolve as resolve2 } from "node:path";
 
 // src/runtime-contracts.js
 import { createHash } from "node:crypto";
@@ -235816,7 +235856,7 @@ function allowedPath(path, excludes) {
 }
 async function walkFiles(input) {
   const files = [];
-  const queue = input.roots.map((root) => resolve(input.cwd, root));
+  const queue = input.roots.map((root) => resolve2(input.cwd, root));
   while (queue.length && files.length < 500) {
     const current = queue.shift();
     const relativePath = safeRelative(input.cwd, current);
@@ -235938,7 +235978,7 @@ function candidatesFromFile(path, source) {
 async function detectFramework(cwd2, requestedRoots) {
   let packageJson = {};
   try {
-    packageJson = JSON.parse(await readFile(join(cwd2, "package.json"), "utf8"));
+    packageJson = JSON.parse(await readFile2(join(cwd2, "package.json"), "utf8"));
   } catch {
   }
   const dependencies = {
@@ -235950,7 +235990,7 @@ async function detectFramework(cwd2, requestedRoots) {
   const roots = (requestedRoots?.length ? requestedRoots : defaultRoots).filter((root) => !root.startsWith("../") && !root.startsWith("/"));
   const existingRoots = [];
   for (const root of roots) {
-    if (await exists(resolve(cwd2, root))) existingRoots.push(root);
+    if (await exists(resolve2(cwd2, root))) existingRoots.push(root);
   }
   return {
     framework,
@@ -236042,7 +236082,7 @@ export type SaaSFunnelsFeatureKey =
 }
 async function readable(path) {
   try {
-    return await readFile(path, "utf8");
+    return await readFile2(path, "utf8");
   } catch {
     return null;
   }
@@ -236059,7 +236099,7 @@ async function applyFeatureSetupChangesAtomically(cwd2, changes, io = {
   const staged = [];
   try {
     for (const change of changes) {
-      const absolute = resolve(cwd2, change.path);
+      const absolute = resolve2(cwd2, change.path);
       const relativePath = safeRelative(cwd2, absolute);
       if (!relativePath)
         throw new Error(`Refusing to write outside the repository: ${change.path}`);
@@ -236169,7 +236209,7 @@ async function runFeatureRuntimeCheck(input) {
   }
 }
 async function runFeatureSetup(input) {
-  if (input.environment !== "test") {
+  if (input.environment !== "test" && !(input.manifestOnly && !input.apply && !input.prompt)) {
     throw new Error(
       "Feature setup is Test-only. Review and promote Feature catalogs from Stripe Products."
     );
@@ -236190,12 +236230,18 @@ async function runFeatureSetup(input) {
   });
   const discovered = [];
   let scannedBytes = 0;
+  let scannedFileCount = 0;
+  let byteLimitReached = false;
   for (const file2 of files) {
-    const source = await readFile(file2, "utf8");
+    const source = await readFile2(file2, "utf8");
     scannedBytes += Buffer.byteLength(source);
-    if (scannedBytes > 2e6) break;
+    if (scannedBytes > 2e6) {
+      byteLimitReached = true;
+      break;
+    }
     const path = safeRelative(input.cwd, file2);
     if (!path) continue;
+    scannedFileCount++;
     discovered.push(...candidatesFromFile(path, source));
   }
   const uniqueCandidates = /* @__PURE__ */ new Map();
@@ -236208,7 +236254,7 @@ async function runFeatureSetup(input) {
   const candidates = [...uniqueCandidates.values()].slice(0, 200);
   const manifestPath = ".saasfunnels/catalog.yaml";
   const existingManifestSource = await readable(
-    resolve(input.cwd, manifestPath)
+    resolve2(input.cwd, manifestPath)
   );
   const existingManifestValidation = existingManifestSource ? parseFeatureManifestSource(existingManifestSource) : null;
   if (existingManifestValidation && !existingManifestValidation.ok) {
@@ -236263,7 +236309,7 @@ async function runFeatureSetup(input) {
   const existingManifest = existingManifestSource;
   const constantsPath = ".saasfunnels/features.ts";
   const constantsContents = generatedConstants(manifest);
-  const existingConstants = await readable(resolve(input.cwd, constantsPath));
+  const existingConstants = await readable(resolve2(input.cwd, constantsPath));
   const constantsSafe = existingConstants === null || existingConstants.startsWith(generatedMarker);
   const editInputs = [
     {
@@ -236373,7 +236419,8 @@ async function runFeatureSetup(input) {
     ok: validation.ok,
     reviewUrl,
     runtimeCheck: check2,
-    scannedFileCount: files.length,
+    scannedFileCount,
+    coverage: { complete: scannedFileCount > 0 && !byteLimitReached && uniqueCandidates.size <= 200, matchedFiles: files.length, scannedFiles: scannedFileCount, byteLimitReached, candidateLimitReached: uniqueCandidates.size > 200 },
     validation: { errors: validation.errors, ok: validation.ok }
   };
 }
@@ -236455,8 +236502,8 @@ Applied reviewed edits. Change record: ${result3.changeRecordPath}` : result3.id
 }
 
 // src/plan-sources.ts
-import { readFile as readFile2, readdir as readdir2, stat as stat2, writeFile as writeFile2, mkdir as mkdir2 } from "node:fs/promises";
-import { dirname as dirname2, extname as extname2, join as join2, relative as relative2, resolve as resolve2, sep } from "node:path";
+import { readFile as readFile3, readdir as readdir2, stat as stat2, writeFile as writeFile2, mkdir as mkdir2 } from "node:fs/promises";
+import { dirname as dirname2, extname as extname2, join as join2, relative as relative2, resolve as resolve3, sep } from "node:path";
 var planSourceApprovalPath = ".saasfunnels/plan-sources.json";
 var maxPlanSourceFiles = 12;
 var maxPlanSourceCharacters = 512e3;
@@ -236513,7 +236560,7 @@ async function discoverPlanSourceCandidates(input) {
   const roots = input.roots ?? [".", "config", ...defaultRoots];
   const seen = /* @__PURE__ */ new Set();
   const candidates = [];
-  const queue = roots.map((root) => resolve2(input.cwd, root));
+  const queue = roots.map((root) => resolve3(input.cwd, root));
   while (queue.length && candidates.length < 200) {
     const current = queue.shift();
     if (seen.has(current)) continue;
@@ -236537,7 +236584,7 @@ async function discoverPlanSourceCandidates(input) {
     const kind = planSourceKindByExtension.get(extname2(current).toLowerCase());
     if (!kind || !relativePath) continue;
     if (entryStat.size > maxPlanSourceCharacters) continue;
-    const contents = await readFile2(current, "utf8");
+    const contents = await readFile3(current, "utf8");
     const hasStripePriceId = stripePriceIdPattern.test(contents);
     const named = looksLikePlanSource(relativePath);
     const looksPriced = billingIntervalPattern.test(contents) && chargeAmountPattern.test(contents);
@@ -236560,7 +236607,7 @@ async function discoverPlanSourceCandidates(input) {
 }
 async function readApprovedPlanSources(cwd2) {
   try {
-    const raw = await readFile2(resolve2(cwd2, planSourceApprovalPath), "utf8");
+    const raw = await readFile3(resolve3(cwd2, planSourceApprovalPath), "utf8");
     const parsed = JSON.parse(raw);
     return Array.isArray(parsed.files) ? parsed.files.filter((value) => typeof value === "string") : [];
   } catch {
@@ -236568,7 +236615,7 @@ async function readApprovedPlanSources(cwd2) {
   }
 }
 async function writeApprovedPlanSources(cwd2, files) {
-  const target = resolve2(cwd2, planSourceApprovalPath);
+  const target = resolve3(cwd2, planSourceApprovalPath);
   await mkdir2(dirname2(target), { recursive: true });
   await writeFile2(
     target,
@@ -236603,7 +236650,7 @@ async function buildPlanMappingHandoff(input) {
     if (!kind) {
       throw new Error(`${relativePath} is not a supported plan source type.`);
     }
-    const content = await readFile2(resolve2(input.cwd, relativePath), "utf8");
+    const content = await readFile3(resolve3(input.cwd, relativePath), "utf8");
     if (content.length > maxPlanSourceCharacters) {
       throw new Error(
         `${relativePath} is ${content.length} characters; the limit is ${maxPlanSourceCharacters}.`
@@ -236619,8 +236666,8 @@ function planMappingRequestKey(input) {
 }
 
 // src/plan-branches.ts
-import { readdir as readdir3, readFile as readFile3, stat as stat3 } from "node:fs/promises";
-import { extname as extname3, join as join3, relative as relative3, resolve as resolve3, sep as sep2 } from "node:path";
+import { readdir as readdir3, readFile as readFile4, stat as stat3 } from "node:fs/promises";
+import { extname as extname3, join as join3, relative as relative3, resolve as resolve4, sep as sep2 } from "node:path";
 var maxPlanBranchFileCharacters = 2e6;
 var codeExtensions = /* @__PURE__ */ new Set([".ts", ".tsx", ".js", ".jsx", ".mjs", ".cjs"]);
 var nonDefinitionPattern2 = /(^|\/)(__tests__|__mocks__|tests?|specs?|fixtures?|testing|mocks?|mock-data|stories|__stories__)(\/)|\.(test|spec|d|stories)\.[cm]?[jt]sx?$/i;
@@ -236768,7 +236815,7 @@ async function discoverPlanBranches(input) {
   const branches = [];
   const constants = /* @__PURE__ */ new Map();
   const pending = [];
-  const queue = roots.map((root) => resolve3(input.cwd, root));
+  const queue = roots.map((root) => resolve4(input.cwd, root));
   while (queue.length) {
     const current = queue.shift();
     if (seen.has(current)) continue;
@@ -236791,7 +236838,7 @@ async function discoverPlanBranches(input) {
     if (!entryStat.isFile() || !relativePath) continue;
     if (!codeExtensions.has(extname3(current).toLowerCase())) continue;
     if (entryStat.size > maxPlanBranchFileCharacters) continue;
-    const lines = (await readFile3(current, "utf8")).split(/\r?\n/);
+    const lines = (await readFile4(current, "utf8")).split(/\r?\n/);
     collectConstants(lines, constants);
     lines.forEach((line, lineIndex) => {
       comparisonPattern.lastIndex = 0;
@@ -236831,7 +236878,7 @@ async function discoverPlanBranches(input) {
 }
 
 // src/setup-run.ts
-var exec = promisify(execFile);
+var exec2 = promisify2(execFile2);
 var hash2 = (text) => createHash3("sha256").update(text).digest("hex");
 var contextSchema = external_exports.object({
   workspaceId: external_exports.string(),
@@ -236889,6 +236936,7 @@ async function runGuidedSetup(options) {
   let progressState = "running";
   let progressFailure = null;
   try {
+    options.progress?.("1/4 Checking app connection\u2026");
     let context = contextSchema.parse(
       await request("/api/developer-tools/setup/context")
     );
@@ -236896,8 +236944,14 @@ async function runGuidedSetup(options) {
       throw new Error(
         "Connect Stripe and create app credentials in Setup first."
       );
-    const head = (await exec("git", ["rev-parse", "HEAD"], { cwd: options.cwd })).stdout.trim();
-    const diff = (await exec(
+    try {
+      await exec2("git", ["rev-parse", "HEAD"], { cwd: options.cwd });
+      await exec2("git", ["remote", "get-url", "origin"], { cwd: options.cwd });
+    } catch {
+      throw new Error("Repository setup needed: run this command inside your app\u2019s Git repository with an initial commit and an origin remote. No push or production deploy is required for discovery.");
+    }
+    const head = (await exec2("git", ["rev-parse", "HEAD"], { cwd: options.cwd })).stdout.trim();
+    const diff = (await exec2(
       "git",
       [
         "diff",
@@ -236910,7 +236964,7 @@ async function runGuidedSetup(options) {
       ],
       { cwd: options.cwd, maxBuffer: 8e6 }
     )).stdout;
-    const untracked = (await exec("git", ["ls-files", "--others", "--exclude-standard", "-z"], {
+    const untracked = (await exec2("git", ["ls-files", "--others", "--exclude-standard", "-z"], {
       cwd: options.cwd
     })).stdout.split("\0").filter(
       (path) => path && !path.startsWith(".saasfunnels/") && !/(^|\/)(\.env|node_modules|dist|\.next)(\/|$|\.)/i.test(path)
@@ -236922,15 +236976,15 @@ async function runGuidedSetup(options) {
     const sourceHashes = await Promise.all(
       untracked.map(async (path) => [
         path,
-        hash2(await readFile4(join4(options.cwd, path), "utf8"))
+        hash2(await readFile5(join4(options.cwd, path), "utf8"))
       ])
     );
     const revision = `${head}:${hash2(JSON.stringify([diff, sourceHashes]))}`;
-    const remote = (await exec("git", ["remote", "get-url", "origin"], { cwd: options.cwd })).stdout.trim();
+    const remote = (await exec2("git", ["remote", "get-url", "origin"], { cwd: options.cwd })).stdout.trim();
     const repositoryKey = safeRepositoryKey(remote);
     const statePath = join4(options.cwd, ".saasfunnels", "setup-run.json");
     if (options.resume) {
-      const saved = JSON.parse(await readFile4(statePath, "utf8"));
+      const saved = JSON.parse(await readFile5(statePath, "utf8"));
       if (saved.generation !== context.generation || saved.repositoryKey !== repositoryKey || saved.revision !== revision)
         throw new Error(
           "The app connection or revision changed. Run setup again without --resume."
@@ -236942,11 +236996,7 @@ async function runGuidedSetup(options) {
       )).trim()
     );
     if (!approved)
-      return {
-        exitCode: 2,
-        stdout: "",
-        stderr: "No evidence uploaded. Review the installation instructions, then run setup run --send to approve discovery uploads.\n"
-      };
+      return { exitCode: options.prompt ? 0 : 2, stdout: "Discovery cancelled. Nothing was uploaded. Run npx --yes saasfunnels@latest setup when ready.\n", stderr: "" };
     run = (await request("/api/developer-tools/setup/runs", {
       generation: context.generation,
       repositoryKey,
@@ -237013,6 +237063,7 @@ async function runGuidedSetup(options) {
       void update(progressState, progressFailure).catch(() => {
       });
     }, 3e4);
+    options.progress?.(run.receipts.features ? "2/4 Features already submitted." : "2/4 Discovering features\u2026");
     if (!run.receipts.features) {
       await update("running");
       const scan = await runFeatureSetup({
@@ -237023,6 +237074,8 @@ async function runGuidedSetup(options) {
         manifestOnly: true,
         accept: ["all"]
       });
+      if (!scan.coverage.complete)
+        throw new Error("Feature discovery needs attention: no supported source was scanned or the scan limit was reached. No feature evidence was submitted. Ask your developer to review scanner coverage before retrying.");
       if (!scan.ok)
         throw new Error(
           "Feature discovery needs attention. Run features setup to review the local findings."
@@ -237037,11 +237090,12 @@ async function runGuidedSetup(options) {
       );
     }
     stage = "plans";
+    if (!context.catalogReady) options.progress?.("Waiting for your Stripe catalog. Setup can stay open while it imports\u2026");
     const catalogDeadline = Date.now() + 5 * 6e4;
     const generation = context.generation;
     while (!context.catalogReady && Date.now() < catalogDeadline) {
       await update("waiting", "catalog_pending");
-      await new Promise((resolve5) => setTimeout(resolve5, 1e4));
+      await new Promise((resolve6) => setTimeout(resolve6, 1e4));
       context = contextSchema.parse(
         await request("/api/developer-tools/setup/context")
       );
@@ -237051,9 +237105,10 @@ async function runGuidedSetup(options) {
     if (!context.catalogReady)
       return {
         exitCode: 2,
-        stdout: "Stripe is still importing. Run setup run --resume --send when the catalog is ready.\n",
+        stdout: "Stripe is still importing. Run npx --yes saasfunnels@latest setup --resume when the catalog is ready.\n",
         stderr: ""
       };
+    options.progress?.(run.receipts.plans ? "3/4 Plans already submitted." : "3/4 Discovering plans and prices\u2026");
     if (!run.receipts.plans) {
       await update("running");
       const candidates = await discoverPlanSourceCandidates({
@@ -237063,7 +237118,7 @@ async function runGuidedSetup(options) {
         if (candidates.length > 12) throw new Error("Too many sources");
         let manual = null;
         try {
-          manual = await readFile4(
+          manual = await readFile5(
             join4(options.cwd, ".saasfunnels/setup-pricing.json"),
             "utf8"
           );
@@ -237073,7 +237128,7 @@ async function runGuidedSetup(options) {
         const discovered = manual !== null ? extractSetupPricing(manual, "json") : (await Promise.all(
           candidates.map(
             async (candidate) => extractSetupPricing(
-              await readFile4(join4(options.cwd, candidate.path), "utf8"),
+              await readFile5(join4(options.cwd, candidate.path), "utf8"),
               candidate.kind
             )
           )
@@ -237092,13 +237147,14 @@ async function runGuidedSetup(options) {
         await update("waiting", "extraction_unsupported");
         return {
           exitCode: 2,
-          stdout: "Pricing discovery needs manual review. Create .saasfunnels/setup-pricing.json with a plans array containing key, name, features (boolean or numeric access), and prices (Stripe price IDs). Review it, then run setup run --resume --send. No source files were uploaded.\n",
+          stdout: "Pricing discovery needs manual review. Create .saasfunnels/setup-pricing.json with a plans array containing key, name, features (boolean or numeric access), and prices (Stripe price IDs). Review it, then run npx --yes saasfunnels@latest setup --resume. No source files were uploaded.\n",
           stderr: ""
         };
       }
     }
     stage = "branches";
     const planValues = [.../* @__PURE__ */ new Set([...context.planNames, ...run.planNames ?? []])];
+    options.progress?.(run.receipts.branches ? "4/4 Plan checks already submitted." : "4/4 Checking plan conditions\u2026");
     if (!run.receipts.branches) {
       await update("running");
       const branches = planValues.length ? await discoverPlanBranches({
@@ -237129,14 +237185,14 @@ async function runGuidedSetup(options) {
     }
     return {
       exitCode: 0,
-      stdout: "Discovery submitted. Return to Setup to review findings and verify installation. Payment transactions have not been tested by this command.\n",
+      stdout: "Discovery submitted. Open https://app.saasfunnels.ai/app/setup to review findings and verify installation. Payment transactions have not been tested by this command.\n",
       stderr: ""
     };
   } catch (error51) {
     clearInterval(timer);
     await reportFailure?.().catch(() => {
     });
-    const safe = error51 instanceof Error && /^(Setup request failed|Connect Stripe|The app connection|Use a repository|Feature discovery)/.test(
+    const safe = error51 instanceof Error && /^(Setup request failed|Connect Stripe|The app connection|Use a repository|Feature discovery|Repository setup)/.test(
       error51.message
     ) ? error51.message : "Setup could not finish. Check local repository access and developer credentials, then resume.";
     return { exitCode: 2, stdout: "", stderr: safe + "\n" };
@@ -237187,11 +237243,11 @@ async function submitApprovedSetupPlans(input) {
 }
 
 // src/cli.ts
-import { mkdir as mkdir4, readFile as readFile5, writeFile as writeFile4 } from "node:fs/promises";
+import { mkdir as mkdir4, readFile as readFile6, writeFile as writeFile4 } from "node:fs/promises";
 
 // src/identity.ts
 var SAASFUNNELS_CLI_NAME = "saasfunnels";
-var SAASFUNNELS_CLI_VERSION = "0.3.0";
+var SAASFUNNELS_CLI_VERSION = "0.3.1";
 var SAASFUNNELS_PRODUCT_NAME = "SaaSFunnels";
 var SAASFUNNELS_DEFAULT_API_BASE_URL = "https://app.saasfunnels.ai";
 var SAASFUNNELS_ENV = Object.freeze({
@@ -238979,7 +239035,8 @@ function usage() {
   return `${SAASFUNNELS_PRODUCT_NAME} CLI
 
 Usage:
-  ${SAASFUNNELS_CLI_NAME} setup run [--resume] [--send]
+  ${SAASFUNNELS_CLI_NAME} setup [--resume] [--env-file <path>]
+  ${SAASFUNNELS_CLI_NAME} setup run [--resume] [--send] [--non-interactive]
   ${SAASFUNNELS_CLI_NAME} init [--api-base-url <url>] [--force]
   ${SAASFUNNELS_CLI_NAME} agent install --target codex|claude-code|cursor|markdown [--endpoint <url>]
   ${SAASFUNNELS_CLI_NAME} events validate <file> [--source direct|posthog|segment] [--json]
@@ -239016,7 +239073,7 @@ function filesystem(options) {
     mkdir: async (path, mkdirOptions) => {
       await mkdir4(path, mkdirOptions);
     },
-    readFile: readFile5,
+    readFile: readFile6,
     writeFile: writeFile4
   };
 }
@@ -239047,7 +239104,7 @@ function sourceFlag(flags) {
 }
 async function readJsonFile(filePath, options) {
   const raw = await filesystem(options).readFile(
-    resolve4(cwd(options), filePath),
+    resolve5(cwd(options), filePath),
     "utf8"
   );
   return JSON.parse(raw);
@@ -239236,7 +239293,7 @@ async function commandFeatures(args, flags, options) {
     }
     const discoveryRoots = (flagString(flags, "discovery-roots") ?? "").split(",").map((root) => root.trim()).filter(Boolean);
     const source = await filesystem(options).readFile(
-      resolve4(cwd(options), path),
+      resolve5(cwd(options), path),
       "utf8"
     );
     const validation = parseFeatureManifestSource(source);
@@ -239252,7 +239309,7 @@ ${validation.errors.map((error51) => `- ${error51}`).join("\n")}
     let sdkVersions = [];
     try {
       const packageSource = await filesystem(options).readFile(
-        resolve4(cwd(options), "package.json"),
+        resolve5(cwd(options), "package.json"),
         "utf8"
       );
       sdkVersions = featureSdkVersionsFromPackageJson(
@@ -239323,7 +239380,7 @@ async function commandCatalog(args, flags, options) {
   if (action === "validate") {
     const path = args[1] ?? ".saasfunnels/catalog.yaml";
     const source = await filesystem(options).readFile(
-      resolve4(cwd(options), path),
+      resolve5(cwd(options), path),
       "utf8"
     );
     const validation = parseFeatureManifestSource(source);
@@ -239573,7 +239630,7 @@ async function commandVerify(flags, options) {
   if (catalogPath) {
     try {
       const source = await filesystem(options).readFile(
-        resolve4(cwd(options), catalogPath),
+        resolve5(cwd(options), catalogPath),
         "utf8"
       );
       const validation = parseFeatureManifestSource(source);
@@ -239916,7 +239973,15 @@ async function runSaaSFunnelsCli(argv2, options = {}) {
     if (!command || command === "help" || command === "--help")
       return result(0, usage());
     if (command === "init") return await commandInit(parsed.flags, options);
-    if (command === "setup" && args[0] === "run") return runGuidedSetup({ cwd: cwd(options), apiBaseUrl: apiBaseUrl2(options, parsed.flags), key: envValue2(options, SAASFUNNELS_ENV.apiKey), send: hasFlag(parsed.flags, "send"), resume: hasFlag(parsed.flags, "resume"), fetch: options.fetch, prompt: jsonMode(parsed.flags) ? void 0 : options.prompt });
+    if (command === "setup") {
+      const help = "SaaSFunnels setup\n\nRun npx --yes saasfunnels@latest setup in your app repository.\nIt checks access, asks before sending findings, and discovers features and plans for review.\nUse --resume after an interruption, or --env-file .env.local to load developer access.\nFor automation, supply SAASFUNNELS_API_KEY and explicit upload approval with --send --non-interactive.\nApp implementation, deployment and payment verification remain in https://app.saasfunnels.ai/app/setup.\n";
+      if (hasFlag(parsed.flags, "help") || args[0] === "help") return result(0, help);
+      if (args.length > 1 || args[0] && args[0] !== "run") return result(2, "", help);
+      const interactive = !jsonMode(parsed.flags) && !hasFlag(parsed.flags, "non-interactive");
+      const access2 = await resolveSetupAccess({ cwd: cwd(options), key: envValue2(options, SAASFUNNELS_ENV.apiKey), envFile: flagString(parsed.flags, "env-file"), prompt: interactive ? options.prompt : void 0 });
+      if (!access2.key) return result(2, "", access2.error + "\n");
+      return runGuidedSetup({ cwd: cwd(options), apiBaseUrl: apiBaseUrl2(options, parsed.flags), key: access2.key, send: hasFlag(parsed.flags, "send"), resume: hasFlag(parsed.flags, "resume"), fetch: options.fetch, prompt: interactive ? options.prompt : void 0, progress: jsonMode(parsed.flags) ? void 0 : options.progress });
+    }
     if (command === "agent")
       return await commandAgentInstall(args, parsed.flags, options);
     if (command === "events")
@@ -239944,13 +240009,14 @@ ${usage()}`);
 
 // src/saasfunnels.ts
 var argv = process.argv.slice(2);
-var interactiveFeatureSetup = !argv.includes("--json") && !argv.includes("--non-interactive") && (argv[0] === "setup" && argv[1] === "run" || argv[0] === "features" && argv[1] === "setup" || argv[0] === "catalog" && ["discover", "diff"].includes(argv[1] ?? ""));
+var interactiveFeatureSetup = Boolean(process.stdin.isTTY && process.stdout.isTTY) && !argv.includes("--json") && !argv.includes("--non-interactive") && (argv[0] === "setup" || argv[0] === "features" && argv[1] === "setup" || argv[0] === "catalog" && ["discover", "diff"].includes(argv[1] ?? ""));
 var prompts = interactiveFeatureSetup ? createInterface2({ input: process.stdin, output: process.stdout }) : null;
 var result2;
 try {
   result2 = await runSaaSFunnelsCli(argv, {
     cwd: process.cwd(),
     env: process.env,
+    progress: (message) => process.stdout.write(message + "\n"),
     prompt: prompts ? (message) => prompts.question(message) : void 0
   });
 } finally {

package/dist/types/feature-setup.d.ts

@@ -121,6 +121,13 @@ export type FeatureSetupResult = {
         state: "failed" | "passed" | "skipped";
     };
     scannedFileCount: number;
+    coverage: {
+        complete: boolean;
+        matchedFiles: number;
+        scannedFiles: number;
+        byteLimitReached: boolean;
+        candidateLimitReached: boolean;
+    };
     validation: {
         errors: string[];
         ok: boolean;

package/dist/types/identity.d.ts

@@ -1,5 +1,5 @@
 export declare const SAASFUNNELS_CLI_NAME = "saasfunnels";
-export declare const SAASFUNNELS_CLI_VERSION = "0.3.0";
+export declare const SAASFUNNELS_CLI_VERSION = "0.3.1";
 export declare const SAASFUNNELS_PRODUCT_NAME = "SaaSFunnels";
 export declare const SAASFUNNELS_DEFAULT_API_BASE_URL = "https://app.saasfunnels.ai";
 export declare const SAASFUNNELS_ENV: Readonly<{

package/dist/types/mcp.d.ts

@@ -77,7 +77,7 @@ export type SaaSFunnelsMcpOptions = {
     output?: Pick<NodeJS.WritableStream, "write">;
 };
 declare const mcpProtocolVersion = "2025-06-18";
-declare const mcpServerVersion = "0.3.0";
+declare const mcpServerVersion = "0.3.1";
 export declare function saasFunnelsMcpResources(): McpResourceDefinition[];
 export declare function readSaaSFunnelsMcpResource(uri: string, options?: SaaSFunnelsMcpOptions): string;
 export declare function saasFunnelsMcpToolDefinitions({ allowFunnelTests, allowFunnelWrites, allowTestWrites, includeHostedAccountTools, }?: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "saasfunnels",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "private": false,
   "description": "SaaSFunnels CLI and local stdio MCP server",
   "author": "SaaSFunnels",