saasfunnels 0.4.0 → 0.4.1

package/README.md

@@ -51,7 +51,7 @@ approved set is reviewable.
 - uses: LeadEngine-ai/saasfunnels-cli/action@v0.2.1
   with:
     api-key: ${{ secrets.SAASFUNNELS_API_KEY }}
-    cli-version: 0.2.1          # pin it; a floating version rebaselines drift
+    cli-version: 0.2.1 # pin it; a floating version rebaselines drift
     discovery-roots: app,lib
 ```
 
@@ -63,8 +63,8 @@ measured against a comparable scan rather than a wider or narrower one.
 Plan and pricing upload is opt-in:
 
 ```yaml
-    plan-sources: "true"
-    integration-id: <stripe integration id>
+plan-sources: "true"
+integration-id: <stripe integration id>
 ```
 
 It runs only on the default branch, requires a committed
@@ -100,7 +100,7 @@ Support: support@saasfunnels.ai
 
 Use `saasfunnels setup run` from the application repository after creating app credentials in Setup. Load `SAASFUNNELS_API_KEY` from **Developer setup access** into the local process environment. Its scopes are `developer:read` and `features:write`; it is not a browser or payment-administration key.
 
-The command asks before uploading structured discovery proposals. `--send` provides explicit non-interactive approval. It coordinates features, pricing extraction, and plan branches, reports progress, and waits for the Stripe catalog. Run `saasfunnels setup run --resume` after an interruption. Existing accepted stages and customer review decisions are preserved.
+The command asks before uploading structured discovery proposals. `--send` provides explicit non-interactive approval. It coordinates features, pricing extraction, and plan branches, reports progress, and waits for the Stripe catalog. Run `saasfunnels setup run --resume` after an interruption. Existing accepted stages and customer review decisions are preserved. Coverage questions include a SHA-256 fingerprint of their affected files so changed application behavior can reopen an answer while unrelated file changes keep it. Only the fingerprint and bounded paths are uploaded, never source contents.
 
 The scanner reads supported application files one at a time without the old 500-file, 2 MB repository, or 200-candidate cutoffs. Generated code, tests, and symlinks are excluded. Files over 2 MB and uploads over the server limit stop with a specific recovery message.
 

package/dist/library.js

@@ -235858,7 +235858,7 @@ function validateFeatureCatalogManifest(value) {
 
 // src/identity.ts
 var SAASFUNNELS_CLI_NAME = "saasfunnels";
-var SAASFUNNELS_CLI_VERSION = "0.4.0";
+var SAASFUNNELS_CLI_VERSION = "0.4.1";
 var SAASFUNNELS_PRODUCT_NAME = "SaaSFunnels";
 var SAASFUNNELS_DEFAULT_API_BASE_URL = "https://app.saasfunnels.ai";
 var SAASFUNNELS_ENV = Object.freeze({

package/dist/saasfunnels.js

@@ -233928,7 +233928,7 @@ function extractSetupPricing(source, kind, catalogPrices = [], options = {}) {
 
 // src/identity.ts
 var SAASFUNNELS_CLI_NAME = "saasfunnels";
-var SAASFUNNELS_CLI_VERSION = "0.4.0";
+var SAASFUNNELS_CLI_VERSION = "0.4.1";
 var SAASFUNNELS_PRODUCT_NAME = "SaaSFunnels";
 var SAASFUNNELS_DEFAULT_API_BASE_URL = "https://app.saasfunnels.ai";
 var SAASFUNNELS_ENV = Object.freeze({
@@ -233959,6 +233959,9 @@ function saasFunnelsPublicText(value) {
   ).replaceAll("prevenueFeatureKeys", "saasFunnelsFeatureKeys").replaceAll("PrevenueFeatureKey", "SaaSFunnelsFeatureKey").replaceAll("SaaSFunnels", SAASFUNNELS_PRODUCT_NAME);
 }
 
+// src/discovery-coverage.ts
+import { createHash as createHash3 } from "node:crypto";
+
 // src/plan-analysis.ts
 var import_typescript3 = __toESM(require_typescript(), 1);
 function effect(node) {
@@ -237287,9 +237290,10 @@ async function discoverCoverageLimitations(cwd2) {
     );
   const sources = /* @__PURE__ */ new Map();
   const results = /* @__PURE__ */ new Map();
+  const evidence = /* @__PURE__ */ new Map();
   const record3 = (code, file2) => {
     const paths = results.get(code) ?? /* @__PURE__ */ new Set();
-    if (paths.size < 12) paths.add(file2);
+    paths.add(file2);
     results.set(code, paths);
   };
   for (const path of files) {
@@ -237302,6 +237306,14 @@ async function discoverCoverageLimitations(cwd2) {
     if (/\.(?:py|rb|go|rs|java|kt|cs|php|ex|exs|scala|swift|vue|svelte)$/.test(
       path
     )) {
+      if (stat.size > 2e6)
+        throw new Error(
+          "Unsupported source exceeds the 2 MB scan limit. Narrow the discovery scope before retrying."
+        );
+      evidence.set(
+        path,
+        createHash3("sha256").update(await readFile3(join2(cwd2, path))).digest("hex")
+      );
       record3("unsupported_language", path);
       continue;
     }
@@ -237309,6 +237321,7 @@ async function discoverCoverageLimitations(cwd2) {
       continue;
     const source = await readFile3(join2(cwd2, path), "utf8");
     sources.set(path, source);
+    evidence.set(path, createHash3("sha256").update(source).digest("hex"));
     const file2 = parseApplicationSource(path, source);
     const visit = (node) => {
       if (!isProductNode(node)) return;
@@ -237351,11 +237364,20 @@ async function discoverCoverageLimitations(cwd2) {
     ))
       record3("dynamic_access", path);
   }
-  return [...results].map(([code, paths]) => ({ code, files: [...paths] }));
+  return [...results].map(([code, paths]) => ({
+    code,
+    files: [...paths].sort().slice(0, 12),
+    // Include all affected files in the receipt, even when the UI path list is capped.
+    sourceFingerprint: createHash3("sha256").update(
+      JSON.stringify(
+        [...paths].sort().map((path) => [path, evidence.get(path)])
+      )
+    ).digest("hex")
+  }));
 }
 
 // src/setup-run.ts
-import { createHash as createHash4 } from "node:crypto";
+import { createHash as createHash5 } from "node:crypto";
 import { execFile as execFile4 } from "node:child_process";
 import { promisify as promisify4 } from "node:util";
 import { readFile as readFile6, writeFile as writeFile3, mkdir as mkdir3 } from "node:fs/promises";
@@ -237540,7 +237562,7 @@ function planMappingRequestKey(input) {
 }
 
 // src/plan-branches.ts
-import { createHash as createHash3 } from "node:crypto";
+import { createHash as createHash4 } from "node:crypto";
 import { readdir as readdir3, readFile as readFile5, lstat as lstat4 } from "node:fs/promises";
 import { extname as extname3, join as join4, relative as relative3, resolve as resolve4, sep as sep2 } from "node:path";
 var maxPlanBranchFileCharacters = 2e6;
@@ -237562,7 +237584,7 @@ function clusterPlanBranches(branches) {
   const clusters = /* @__PURE__ */ new Map();
   for (const branch of branches) {
     const fullLocation = `${branch.repositoryPath}::${branch.symbol}`;
-    const location = fullLocation.length <= 400 ? fullLocation : `${fullLocation.slice(0, 367)}~${createHash3("sha256").update(fullLocation).digest("hex").slice(0, 32)}`;
+    const location = fullLocation.length <= 400 ? fullLocation : `${fullLocation.slice(0, 367)}~${createHash4("sha256").update(fullLocation).digest("hex").slice(0, 32)}`;
     const key3 = `${branch.shape}|${location}`;
     const existing = clusters.get(key3);
     if (existing) existing.push(branch);
@@ -237652,7 +237674,7 @@ async function discoverPlanBranches(input) {
 
 // src/setup-run.ts
 var exec4 = promisify4(execFile4);
-var hash2 = (text) => createHash4("sha256").update(text).digest("hex");
+var hash2 = (text) => createHash5("sha256").update(text).digest("hex");
 var contextSchema = external_exports.object({
   contractVersion: external_exports.literal(3),
   minimumCliVersion: external_exports.string(),

package/dist/types/identity.d.ts

@@ -1,5 +1,5 @@
 export declare const SAASFUNNELS_CLI_NAME = "saasfunnels";
-export declare const SAASFUNNELS_CLI_VERSION = "0.4.0";
+export declare const SAASFUNNELS_CLI_VERSION = "0.4.1";
 export declare const SAASFUNNELS_PRODUCT_NAME = "SaaSFunnels";
 export declare const SAASFUNNELS_DEFAULT_API_BASE_URL = "https://app.saasfunnels.ai";
 export declare const SAASFUNNELS_ENV: Readonly<{

package/dist/types/mcp.d.ts

@@ -77,7 +77,7 @@ export type SaaSFunnelsMcpOptions = {
     output?: Pick<NodeJS.WritableStream, "write">;
 };
 declare const mcpProtocolVersion = "2025-06-18";
-declare const mcpServerVersion = "0.4.0";
+declare const mcpServerVersion = "0.4.1";
 export declare function saasFunnelsMcpResources(): McpResourceDefinition[];
 export declare function readSaaSFunnelsMcpResource(uri: string, options?: SaaSFunnelsMcpOptions): string;
 export declare function saasFunnelsMcpToolDefinitions({ allowFunnelTests, allowFunnelWrites, allowTestWrites, includeHostedAccountTools, }?: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "saasfunnels",
-  "version": "0.4.0",
+  "version": "0.4.1",
   "private": false,
   "description": "SaaSFunnels CLI and local stdio MCP server",
   "author": "SaaSFunnels",