vigthoria-cli 1.6.19 → 1.6.21

package/dist/commands/chat.d.ts

@@ -46,6 +46,11 @@ export declare class ChatCommand {
     private resolveAgentExecutionPolicy;
     private getMessagesForModel;
     private isDiagnosticPrompt;
+    /**
+     * Returns true when the prompt is a simple lookup / analysis / read-only
+     * question — these should use analysis_only workflow, not full_autonomy.
+     */
+    private isAnalysisLookupPrompt;
     private isBrowserTaskPrompt;
     private inferAgentTaskType;
     private buildTaskShapingInstructions;

package/dist/commands/chat.js

@@ -195,11 +195,22 @@ class ChatCommand {
     isDiagnosticPrompt(prompt) {
         return /(startup|start up|won'?t start|doesn'?t start|crash|crashes|error|errors|failing|fails|issue|issues|bug|bugs|diagnos|debug|runtime|log|logs|exception|traceback|stack trace|yaml|blocking|blocker)/i.test(prompt);
     }
+    /**
+     * Returns true when the prompt is a simple lookup / analysis / read-only
+     * question — these should use analysis_only workflow, not full_autonomy.
+     */
+    isAnalysisLookupPrompt(prompt) {
+        return /^(what|which|where|how many|who|find|list|show|check|inspect|analyze|analyse|audit|explain|describe|summarize|summarise|review|overview|count|read|look at|tell me|locate|search for|does .* exist)/i.test(prompt.trim());
+    }
     isBrowserTaskPrompt(prompt) {
         return /(browser|chrome|devtools|console|dom|network tab|network request|frontend runtime|client-side|client side|rendering|page load|websocket|ui bug|inspect element)/i.test(prompt);
     }
     inferAgentTaskType(prompt) {
-        return this.isDiagnosticPrompt(prompt) ? 'debugging' : 'implementation';
+        if (this.isDiagnosticPrompt(prompt))
+            return 'debugging';
+        if (/^(what|which|how many|list|show|check|inspect|analyze|analyse|audit|explain|describe|summarize|summarise|review|overview|find|count|read|look at|tell me)/i.test(prompt.trim()))
+            return 'analysis';
+        return 'implementation';
     }
     buildTaskShapingInstructions(prompt) {
         const instructions = [];
@@ -356,7 +367,13 @@ class ChatCommand {
     }
     async run(options) {
         if (!this.config.isAuthenticated()) {
-            this.logger.error('Not authenticated. Run: vigthoria login');
+            if (options.json) {
+                process.exitCode = 1;
+                console.log(JSON.stringify({ success: false, error: 'Not authenticated. Run: vigthoria login' }, null, 2));
+            }
+            else {
+                this.logger.error('Not authenticated. Run: vigthoria login');
+            }
             return;
         }
         this.agentMode = options.agent === true;
@@ -607,7 +624,8 @@ class ChatCommand {
         }
         catch (error) {
             if (spinner) {
-                spinner.fail('Workflow target execution failed');
+                spinner.stop();
+                this.logger.error('Workflow target execution failed');
             }
             throw error;
         }
@@ -620,7 +638,9 @@ class ChatCommand {
         const runtimeContext = await this.getPromptRuntimeContext(prompt);
         const spinner = this.jsonOutput ? null : (0, logger_js_1.createSpinner)({ text: 'Thinking like an operator...', spinner: 'clock' }).start();
         const executionPrompt = this.buildExecutionPrompt(prompt);
-        const workflowType = this.isDiagnosticPrompt(prompt) ? 'analysis_only' : 'full_autonomy';
+        const workflowType = this.isDiagnosticPrompt(prompt) || this.isAnalysisLookupPrompt(prompt)
+            ? 'analysis_only'
+            : 'full_autonomy';
         try {
             const response = await this.api.runOperatorWorkflow(executionPrompt, {
                 workspacePath: this.currentProjectPath,
@@ -661,9 +681,12 @@ class ChatCommand {
         }
         catch (error) {
             if (spinner) {
-                spinner.fail('Operator workflow failed');
+                spinner.stop();
             }
             const errorMsg = error.message || 'Operator workflow failed with an unknown error.';
+            if (!this.jsonOutput) {
+                this.logger.error('Operator workflow failed');
+            }
             if (this.jsonOutput) {
                 process.exitCode = 1;
                 console.log(JSON.stringify({
@@ -682,11 +705,26 @@ class ChatCommand {
         this.lastActionableUserInput = prompt;
         // In non-agent chat mode the model has no tool access.  Inject a
         // grounding constraint so it doesn't fabricate file contents.
+        // Also inject a real file listing so the model can reference actual
+        // paths instead of guessing.
         const needsGrounding = /(repo|file|code|project|workspace|source|inspect|analyze|audit|review)/i.test(prompt);
         if (needsGrounding && !this.messages.some(m => m.role === 'system' && m.content.includes('no direct file access'))) {
+            let groundingContent = 'You are in simple chat mode with no direct file access or tools. Do not fabricate file contents, search results, or analysis steps. If the user asks you to modify, edit, or deeply inspect files, advise them to use agent mode (vig chat --agent) for grounded repo analysis.';
+            // Inject a workspace file listing so the model has real paths
+            try {
+                const snapshot = this.api.getAgentWorkspaceSnapshot(this.currentProjectPath);
+                if (snapshot && snapshot.paths.length > 0) {
+                    const listing = snapshot.paths.slice(0, 60).join('\n');
+                    groundingContent += `\n\nWorkspace: ${this.currentProjectPath}\nFile listing (${snapshot.fileCount} files total):\n${listing}`;
+                    if (snapshot.fileCount > 60) {
+                        groundingContent += `\n... and ${snapshot.fileCount - 60} more files.`;
+                    }
+                }
+            }
+            catch { /* ignore snapshot errors */ }
             this.messages.push({
                 role: 'system',
-                content: 'You are in simple chat mode with no direct file access. Do not fabricate file contents, search results, or analysis steps. If the user asks about specific files, advise them to use agent mode (vig chat --agent) for grounded repo analysis.',
+                content: groundingContent,
             });
         }
         this.messages.push({ role: 'user', content: this.buildExecutionPrompt(prompt) });
@@ -695,17 +733,43 @@ class ChatCommand {
             const response = await this.api.chat(this.getMessagesForModel(), this.currentModel);
             if (spinner)
                 spinner.stop();
-            const finalText = response.message.trim();
-            if (finalText) {
+            const finalText = (response.message || '').trim();
+            if (this.jsonOutput) {
+                console.log(JSON.stringify({
+                    success: true,
+                    mode: 'chat',
+                    model: this.currentModel,
+                    content: finalText || 'The model returned an empty response. Try rephrasing or use --agent for grounded file analysis.',
+                }, null, 2));
+            }
+            else if (finalText) {
                 console.log(finalText);
             }
-            this.messages.push({ role: 'assistant', content: response.message });
+            else {
+                console.log(chalk_1.default.yellow('The model returned an empty response. Try rephrasing your question, or use --agent mode for grounded repo analysis.'));
+            }
+            this.messages.push({ role: 'assistant', content: response.message || '' });
             this.saveSession();
         }
         catch (error) {
             if (spinner)
-                spinner.fail('Failed to get response');
-            this.logger.error(error.message);
+                spinner.stop();
+            if (!this.jsonOutput)
+                this.logger.error('Failed to get response');
+            const errorMsg = error.message;
+            if (this.jsonOutput) {
+                process.exitCode = 1;
+                console.log(JSON.stringify({
+                    success: false,
+                    mode: 'chat',
+                    model: this.currentModel,
+                    content: '',
+                    error: errorMsg,
+                }, null, 2));
+            }
+            else {
+                this.logger.error(errorMsg);
+            }
         }
     }
     async runAgentTurn(prompt) {
@@ -802,7 +866,9 @@ class ChatCommand {
             }
             catch (error) {
                 if (spinner)
-                    spinner.fail('Agent request failed');
+                    spinner.stop();
+                if (!this.jsonOutput)
+                    this.logger.error('Agent request failed');
                 if (this.jsonOutput) {
                     process.exitCode = 1;
                     console.log(JSON.stringify({
@@ -1012,14 +1078,15 @@ class ChatCommand {
             if (!success) {
                 if (this.isLegacyAgentFallbackAllowed()) {
                     if (spinner) {
-                        spinner.warn('Falling back to legacy CLI agent loop');
+                        spinner.stop();
                     }
+                    this.logger.warn('Falling back to legacy CLI agent loop');
                     this.logger.debug(`V3 agent workflow returned an incomplete result: ${previewGate?.error || 'workspace changes were not fully validated'}`);
                     return false;
                 }
                 const errorMessage = `V3 agent workflow returned an incomplete result and legacy fallback is disabled. ${previewGate?.error || 'Workspace changes were not fully validated.'}`;
                 if (spinner) {
-                    spinner.fail('V3 agent workflow rejected the result');
+                    spinner.stop();
                 }
                 this.logger.error(errorMessage);
                 this.messages.push({ role: 'assistant', content: errorMessage });
@@ -1081,13 +1148,14 @@ class ChatCommand {
             }
             if (this.isLegacyAgentFallbackAllowed()) {
                 if (spinner) {
-                    spinner.warn('Falling back to legacy CLI agent loop');
+                    spinner.stop();
                 }
+                this.logger.warn('Falling back to legacy CLI agent loop');
                 this.logger.debug(`V3 agent workflow unavailable: ${error.message}`);
                 return false;
             }
             if (spinner) {
-                spinner.fail('V3 agent workflow failed');
+                spinner.stop();
             }
             const errorMessage = `Agent mode requires the V3 workflow and will not fall back to the legacy CLI loop. ${error.message}`;
             this.logger.error(errorMessage);

package/dist/commands/deploy.js

@@ -151,7 +151,8 @@ class DeployCommand {
             console.log(chalk_1.default.gray('   Upgrade to a subdomain for permanent hosting.\n'));
         }
         catch (error) {
-            spinner.fail('Deploy failed');
+            spinner.stop();
+            this.logger.error('Deploy failed');
             const errMsg = error instanceof Error ? error.message : 'Unknown error';
             console.log(chalk_1.default.red(`\n❌ Error: ${errMsg}\n`));
         }
@@ -204,7 +205,8 @@ class DeployCommand {
             console.log(chalk_1.default.gray('   ✓ Unlimited traffic included\n'));
         }
         catch (error) {
-            spinner.fail('Deploy failed');
+            spinner.stop();
+            this.logger.error('Deploy failed');
             const errMsg = error instanceof Error ? error.message : 'Unknown error';
             console.log(chalk_1.default.red(`\n❌ Error: ${errMsg}\n`));
         }
@@ -258,7 +260,8 @@ class DeployCommand {
             }
         }
         catch (error) {
-            spinner.fail('Deploy failed');
+            spinner.stop();
+            this.logger.error('Deploy failed');
             const errMsg = error instanceof Error ? error.message : 'Unknown error';
             console.log(chalk_1.default.red(`\n❌ Error: ${errMsg}\n`));
         }
@@ -334,7 +337,8 @@ class DeployCommand {
             console.log(chalk_1.default.cyan('\n  Subscribe: vig deploy --subdomain myapp\n'));
         }
         catch (error) {
-            spinner.fail('Failed to fetch plans');
+            spinner.stop();
+            this.logger.error('Failed to fetch plans');
             const errMsg = error instanceof Error ? error.message : 'Unknown error';
             console.log(chalk_1.default.red(`\n❌ Error: ${errMsg}\n`));
         }
@@ -374,7 +378,8 @@ class DeployCommand {
             }
         }
         catch (error) {
-            spinner.fail('List failed');
+            spinner.stop();
+            this.logger.error('List failed');
             const errMsg = error instanceof Error ? error.message : 'Unknown error';
             console.log(chalk_1.default.red(`\n❌ Error: ${errMsg}\n`));
         }
@@ -401,7 +406,8 @@ class DeployCommand {
             console.log(JSON.stringify(data, null, 2));
         }
         catch (error) {
-            spinner.fail('Status check failed');
+            spinner.stop();
+            this.logger.error('Status check failed');
             const errMsg = error instanceof Error ? error.message : 'Unknown error';
             console.log(chalk_1.default.red(`\n❌ Error: ${errMsg}\n`));
         }
@@ -434,7 +440,8 @@ class DeployCommand {
             }
         }
         catch (error) {
-            spinner.fail('Verification failed');
+            spinner.stop();
+            this.logger.error('Verification failed');
             const errMsg = error instanceof Error ? error.message : 'Unknown error';
             console.log(chalk_1.default.red(`\n❌ Error: ${errMsg}\n`));
         }
@@ -468,7 +475,8 @@ class DeployCommand {
             console.log(chalk_1.default.gray('\n   Your project files are still in your repository.\n'));
         }
         catch (error) {
-            spinner.fail('Remove failed');
+            spinner.stop();
+            this.logger.error('Remove failed');
             const errMsg = error instanceof Error ? error.message : 'Unknown error';
             console.log(chalk_1.default.red(`\n❌ Error: ${errMsg}\n`));
         }

package/dist/commands/edit.js

@@ -41,6 +41,11 @@ class EditCommand {
         // Get instruction
         let instruction = options.instruction;
         if (!instruction) {
+            // --apply requires --instruction to avoid hanging on non-interactive terminals
+            if (options.apply) {
+                this.logger.error('The --apply flag requires --instruction. Example: vigthoria edit file.ts --apply --instruction "fix the bug"');
+                return;
+            }
             const answer = await inquirer_1.default.prompt([
                 {
                     type: 'input',
@@ -148,12 +153,17 @@ Return the complete modified code:`,
         }
     }
     extractCode(response, language) {
-        // Try to extract code block
+        // Try to extract code block (language-specific first, then any)
         const codeBlockRegex = new RegExp(`\`\`\`(?:${language})?\\n([\\s\\S]*?)\`\`\``, 'i');
         const match = response.match(codeBlockRegex);
         if (match) {
             return match[1].trim();
         }
+        // Try generic code block
+        const genericMatch = response.match(/```\w*\n([\s\S]*?)```/);
+        if (genericMatch) {
+            return genericMatch[1].trim();
+        }
         // If no code block, check if response looks like code
         const trimmed = response.trim();
         if (!trimmed.startsWith('```') && !trimmed.includes('Here') && !trimmed.includes('I ')) {

package/dist/commands/repo.js

@@ -399,7 +399,8 @@ class RepoCommand {
             console.log(chalk_1.default.gray('\nTip: Use `vigthoria repo pull <name>` to restore this project anywhere.\n'));
         }
         catch (error) {
-            spinner.fail('Push failed');
+            spinner.stop();
+            this.logger.error('Push failed');
             const errMsg = this.formatRepoError(error);
             console.log(chalk_1.default.red(`\n❌ Error: ${errMsg}\n`));
         }
@@ -486,7 +487,8 @@ class RepoCommand {
             console.log();
         }
         catch (error) {
-            spinner.fail('Pull failed');
+            spinner.stop();
+            this.logger.error('Pull failed');
             const errMsg = this.formatRepoError(error);
             console.log(chalk_1.default.red(`\n❌ Error: ${errMsg}\n`));
         }
@@ -584,7 +586,8 @@ class RepoCommand {
             console.log(chalk_1.default.gray('  vigthoria repo share <name>    - Share a project\n'));
         }
         catch (error) {
-            spinner.fail('List failed');
+            spinner.stop();
+            this.logger.error('List failed');
             const errMsg = this.formatRepoError(error);
             console.log(chalk_1.default.red(`\n❌ Error: ${errMsg}\n`));
         }
@@ -634,7 +637,8 @@ class RepoCommand {
             }
         }
         catch (error) {
-            spinner.fail('Status check failed');
+            spinner.stop();
+            this.logger.error('Status check failed');
             const errMsg = error instanceof Error ? error.message : 'Unknown error';
             console.log(chalk_1.default.red(`\n❌ Error: ${errMsg}\n`));
         }
@@ -666,7 +670,8 @@ class RepoCommand {
             console.log(chalk_1.default.gray('\n   Anyone with this link can view/download the project.\n'));
         }
         catch (error) {
-            spinner.fail('Share failed');
+            spinner.stop();
+            this.logger.error('Share failed');
             const errMsg = error instanceof Error ? error.message : 'Unknown error';
             console.log(chalk_1.default.red(`\n❌ Error: ${errMsg}\n`));
         }
@@ -700,7 +705,8 @@ class RepoCommand {
             console.log(chalk_1.default.gray('\nNote: Your local files are not affected.\n'));
         }
         catch (error) {
-            spinner.fail('Delete failed');
+            spinner.stop();
+            this.logger.error('Delete failed');
             const errMsg = error instanceof Error ? error.message : 'Unknown error';
             console.log(chalk_1.default.red(`\n❌ Error: ${errMsg}\n`));
         }
@@ -728,7 +734,8 @@ class RepoCommand {
             await this.pull(data.project.project_name, options);
         }
         catch (error) {
-            spinner.fail('Clone failed');
+            spinner.stop();
+            this.logger.error('Clone failed');
             const errMsg = error instanceof Error ? error.message : 'Unknown error';
             console.log(chalk_1.default.red(`\n❌ Error: ${errMsg}\n`));
         }

package/dist/utils/api.d.ts

@@ -195,6 +195,11 @@ export declare class APIClient {
     getVigFlowBaseUrls(): string[];
     getTemplateServiceBaseUrls(): string[];
     private isFrontendTask;
+    /**
+     * Returns true when the prompt describes a read-only / analysis task.
+     * Used to suppress preview gate and other write-oriented side effects.
+     */
+    isAnalysisOnlyTask(message?: string, context?: Record<string, any>): boolean;
     private normalizeWorkspaceRelativePath;
     private listFrontendWorkspaceFiles;
     private chooseFrontendPreviewEntry;
@@ -212,6 +217,13 @@ export declare class APIClient {
     private getVigFlowAccessToken;
     private getVigFlowHeaders;
     private withVigFlow;
+    /**
+     * Build the correct sub-path for VigFlow endpoints.
+     * Local servers (e.g. localhost:5060) need `/api/…` prefix.
+     * The remote gateway URL already ends with `/api/vigflow`, so appending
+     * another `/api/…` would double the prefix and cause 404s.
+     */
+    private vigFlowEndpoint;
     listVigFlowTemplates(options?: {
         category?: string;
         search?: string;
@@ -273,6 +285,11 @@ export declare class APIClient {
     private buildFallbackFrontendJs;
     private replaceMissingLocalAssetReferences;
     formatV3AgentResponse(data: any): string;
+    /**
+     * Build a human-readable answer from the tool results in a V3 event
+     * stream when the server didn't emit a proper complete/message event.
+     */
+    private synthesizeAnswerFromV3Events;
     collectV3AgentStream(response: Response, context?: Record<string, any>): Promise<any>;
     runV3AgentWorkflow(message: string, context?: Record<string, any>): Promise<V3AgentWorkflowResponse>;
     private formatOperatorResponse;
@@ -329,6 +346,11 @@ export declare class APIClient {
         }[];
         suggestions: string[];
     }>;
+    /**
+     * Lightweight client-side heuristic scan: catches common code smells
+     * so review never returns "score 30, no issues".
+     */
+    private heuristicCodeIssues;
     fixCode(code: string, language: string, fixType: string): Promise<{
         fixed: string;
         changes: {
@@ -338,6 +360,11 @@ export declare class APIClient {
             reason: string;
         }[];
     }>;
+    /**
+     * Lightweight client-side syntax error detection.
+     * Returns a human-readable description of obvious errors, or empty string.
+     */
+    private detectSyntaxErrors;
     private resolveModelId;
     private getCoderHealth;
     private getModelsHealth;

package/dist/utils/api.js

@@ -328,11 +328,29 @@ class APIClient {
         return [...new Set(urls)];
     }
     isFrontendTask(message = '', context = {}) {
+        // Never treat analysis-only tasks as frontend tasks — preview gate
+        // should not fire for read-only inspection prompts.
+        if (this.isAnalysisOnlyTask(message, context)) {
+            return false;
+        }
         const prompt = String(message || '');
         const expectedFiles = this.extractExpectedWorkspaceFiles(message, context);
         return /(premium|polished|landing|site|page|dashboard|saas|frontend|ui|pricing|showcase|hero|responsive)/i.test(prompt)
             || expectedFiles.some((filePath) => /\.(html|css|js)$/i.test(filePath));
     }
+    /**
+     * Returns true when the prompt describes a read-only / analysis task.
+     * Used to suppress preview gate and other write-oriented side effects.
+     */
+    isAnalysisOnlyTask(message = '', context = {}) {
+        const prompt = String(message || '').toLowerCase();
+        const taskType = String(context.agentTaskType || '').toLowerCase();
+        if (taskType === 'debugging' || taskType === 'analysis' || taskType === 'analysis_only')
+            return true;
+        if (context.workflowType === 'analysis_only')
+            return true;
+        return /^(what|which|how many|list|show|check|inspect|analyze|analyse|audit|explain|describe|summarize|summarise|review|overview|find|count|read|look at|tell me|diagnos)/i.test(prompt.trim());
+    }
     normalizeWorkspaceRelativePath(filePath) {
         return String(filePath || '').trim().replace(/\\/g, '/').replace(/^\.\//, '');
     }
@@ -596,7 +614,7 @@ class APIClient {
             };
         }
         // Cap artifact sizes to prevent 413 Payload Too Large
-        const PREVIEW_MAX_ARTIFACT_BYTES = 500 * 1024;
+        const PREVIEW_MAX_ARTIFACT_BYTES = 250 * 1024;
         const html = artifacts.html.slice(0, PREVIEW_MAX_ARTIFACT_BYTES);
         const css = (artifacts.css || '').slice(0, PREVIEW_MAX_ARTIFACT_BYTES);
         const js = (artifacts.js || '').slice(0, PREVIEW_MAX_ARTIFACT_BYTES);
@@ -775,6 +793,19 @@ class APIClient {
         }
         throw lastError || new Error(`No VigFlow backend available for ${operation}.`);
     }
+    /**
+     * Build the correct sub-path for VigFlow endpoints.
+     * Local servers (e.g. localhost:5060) need `/api/…` prefix.
+     * The remote gateway URL already ends with `/api/vigflow`, so appending
+     * another `/api/…` would double the prefix and cause 404s.
+     */
+    vigFlowEndpoint(baseUrl, subPath) {
+        if (/\/api\/vigflow\/?$/i.test(baseUrl)) {
+            // Remote gateway – subPath like '/templates' is enough
+            return `${baseUrl.replace(/\/$/, '')}${subPath}`;
+        }
+        return `${baseUrl}/api${subPath}`;
+    }
     async listVigFlowTemplates(options = {}) {
         return this.withVigFlow('list templates', async (baseUrl, headers) => {
             const query = new URLSearchParams();
@@ -784,7 +815,7 @@ class APIClient {
             if (options.search) {
                 query.set('search', options.search);
             }
-            const url = `${baseUrl}/api/templates${query.size > 0 ? `?${query.toString()}` : ''}`;
+            const url = `${this.vigFlowEndpoint(baseUrl, '/templates')}${query.size > 0 ? `?${query.toString()}` : ''}`;
             const response = await axios_1.default.get(url, {
                 headers,
                 timeout: 30000,
@@ -795,7 +826,7 @@ class APIClient {
     }
     async listVigFlowWorkflows() {
         return this.withVigFlow('list workflows', async (baseUrl, headers) => {
-            const response = await axios_1.default.get(`${baseUrl}/api/workflows`, {
+            const response = await axios_1.default.get(this.vigFlowEndpoint(baseUrl, '/workflows'), {
                 headers,
                 timeout: 30000,
             });
@@ -847,7 +878,7 @@ class APIClient {
     }
     async useVigFlowTemplate(templateId, options = {}) {
         return this.withVigFlow('use template', async (baseUrl, headers) => {
-            const response = await axios_1.default.post(`${baseUrl}/api/templates/${encodeURIComponent(templateId)}/use`, {
+            const response = await axios_1.default.post(`${this.vigFlowEndpoint(baseUrl, `/templates/${encodeURIComponent(templateId)}/use`)}`, {
                 name: options.name,
                 variables: options.variables || {},
             }, {
@@ -863,7 +894,7 @@ class APIClient {
     }
     async runVigFlowWorkflow(workflowId, options = {}) {
         return this.withVigFlow('run workflow', async (baseUrl, headers) => {
-            const response = await axios_1.default.post(`${baseUrl}/api/executions/run/${encodeURIComponent(workflowId)}`, {
+            const response = await axios_1.default.post(`${this.vigFlowEndpoint(baseUrl, `/executions/run/${encodeURIComponent(workflowId)}`)}`, {
                 data: options.data || {},
                 options: options.executionOptions || {},
             }, {
@@ -879,7 +910,7 @@ class APIClient {
     }
     async getVigFlowExecutionStatus(executionId) {
         return this.withVigFlow('execution status', async (baseUrl, headers) => {
-            const response = await axios_1.default.get(`${baseUrl}/api/executions/${encodeURIComponent(executionId)}`, {
+            const response = await axios_1.default.get(`${this.vigFlowEndpoint(baseUrl, `/executions/${encodeURIComponent(executionId)}`)}`, {
                 headers,
                 timeout: 30000,
             });
@@ -900,6 +931,11 @@ class APIClient {
         const localWorkspaceSummary = this.buildLocalWorkspaceSummary(localWorkspacePath);
         const requestedModel = String(resolvedContext.model || resolvedContext.requestedModel || 'agent');
         const resolvedModel = this.resolvePermittedModelId(requestedModel);
+        // When the server cannot directly access the workspace (e.g. Windows
+        // client), use the local path as a hint and flag that the workspace
+        // files are provided inline in localWorkspaceSummary.workspaceFiles.
+        const effectiveWorkspacePath = serverWorkspacePath || localWorkspacePath || null;
+        const needsHydration = !serverWorkspacePath && !!localWorkspacePath;
         const payload = {
             workspace: resolvedContext.workspace || null,
             activeFile: resolvedContext.activeFile || null,
@@ -913,12 +949,16 @@ class APIClient {
             executionSurface: resolvedContext.executionSurface || 'cli',
             clientSurface: resolvedContext.clientSurface || 'cli',
             localMachineCapable: resolvedContext.localMachineCapable !== false,
-            workspacePath: serverWorkspacePath || null,
-            projectPath: serverWorkspacePath || null,
-            targetPath: serverWorkspacePath || null,
+            workspacePath: effectiveWorkspacePath,
+            projectPath: effectiveWorkspacePath,
+            targetPath: effectiveWorkspacePath,
             localWorkspacePath: localWorkspacePath || null,
             localWorkspaceName: localWorkspacePath ? path_1.default.basename(localWorkspacePath) : null,
             localWorkspaceSummary,
+            // Signal to the server that the workspace filesystem is not locally
+            // accessible — it must hydrate a temp directory from the provided
+            // workspaceFiles before the agent starts using tools.
+            workspaceHydrationRequired: needsHydration,
             contextId: resolvedContext.contextId,
             traceId: resolvedContext.traceId,
             mcpContextId: resolvedContext.mcpContextId || null,
@@ -2292,10 +2332,80 @@ document.addEventListener('DOMContentLoaded', () => {
             if (messageEvent) {
                 return messageEvent.content;
             }
+            // Synthesize a grounded answer from the tool-call evidence the
+            // agent produced, rather than dumping the raw event trace.
+            const answer = this.synthesizeAnswerFromV3Events(data.events);
+            if (answer) {
+                return answer;
+            }
+        }
+        // Last resort: if data has files written, report them.
+        if (data?.files && typeof data.files === 'object' && Object.keys(data.files).length > 0) {
+            const fileList = Object.keys(data.files).join(', ');
+            return `Agent wrote workspace files: ${fileList}`;
         }
         const text = JSON.stringify(data, null, 2);
         return text.length > 12000 ? `${text.slice(0, 12000)}\n\n[V3 agent output truncated]` : text;
     }
+    /**
+     * Build a human-readable answer from the tool results in a V3 event
+     * stream when the server didn't emit a proper complete/message event.
+     */
+    synthesizeAnswerFromV3Events(events) {
+        const toolResults = [];
+        const filesRead = [];
+        const filesWritten = [];
+        const assistantFragments = [];
+        for (const event of events) {
+            if (!event)
+                continue;
+            if (event.type === 'tool_result' && event.success && typeof event.output === 'string') {
+                const name = event.name || 'unknown_tool';
+                if (name === 'read_file' && typeof event.target === 'string') {
+                    filesRead.push(event.target);
+                }
+                else if ((name === 'write_file' || name === 'create_file') && typeof event.target === 'string') {
+                    filesWritten.push(event.target);
+                }
+                else {
+                    // Keep last ~300 chars of output for context
+                    const excerpt = event.output.length > 300 ? event.output.slice(-300) : event.output;
+                    toolResults.push(`[${name}] ${excerpt}`);
+                }
+            }
+            if (event.type === 'assistant' && typeof event.content === 'string' && event.content.trim()) {
+                assistantFragments.push(event.content.trim());
+            }
+            // Some servers emit 'text' events for incremental assistant text
+            if (event.type === 'text' && typeof event.content === 'string' && event.content.trim()) {
+                assistantFragments.push(event.content.trim());
+            }
+            // Some servers emit content_block_delta for streamed text
+            if (event.type === 'content_block_delta' && typeof event.delta?.text === 'string' && event.delta.text.trim()) {
+                assistantFragments.push(event.delta.text.trim());
+            }
+        }
+        // Concatenate ALL assistant text fragments in order — keeps full
+        // multi-turn reasoning instead of only the last fragment.
+        const fullAssistantText = assistantFragments.join('\n\n').trim();
+        if (fullAssistantText.length > 20) {
+            return fullAssistantText;
+        }
+        // Otherwise build a summary from tool evidence
+        const sections = [];
+        if (filesRead.length > 0) {
+            sections.push(`Files inspected: ${filesRead.join(', ')}`);
+        }
+        if (filesWritten.length > 0) {
+            sections.push(`Files written: ${filesWritten.join(', ')}`);
+        }
+        if (toolResults.length > 0) {
+            sections.push(toolResults.slice(-5).join('\n'));
+        }
+        return sections.length > 0
+            ? sections.join('\n\n')
+            : '';
+    }
     async collectV3AgentStream(response, context = {}) {
         if (!response.body || typeof response.body.getReader !== 'function') {
             return response.json();
@@ -2660,6 +2770,10 @@ document.addEventListener('DOMContentLoaded', () => {
         const timeoutMs = context.operatorTimeoutMs || DEFAULT_OPERATOR_TIMEOUT_MS;
         const errors = [];
         const authToken = this.config.get('authToken');
+        // Collect a lightweight workspace file listing so the operator can
+        // ground its analysis in real files rather than returning files_analyzed: 0.
+        const workspacePath = executionContext.workspacePath || executionContext.projectPath || executionContext.targetPath || process.cwd();
+        const workspaceSummary = this.buildLocalWorkspaceSummary(workspacePath);
         for (const baseUrl of this.getOperatorBaseUrls()) {
             const controller = new AbortController();
             const timeoutId = setTimeout(() => controller.abort(), timeoutMs);
@@ -2683,8 +2797,9 @@ document.addEventListener('DOMContentLoaded', () => {
                         trace_id: executionContext.traceId,
                         mcp_context_id: executionContext.mcpContextId || null,
                         context: {
-                            workspace: { path: executionContext.workspacePath || executionContext.projectPath || executionContext.targetPath || process.cwd() },
-                            workspace_path: executionContext.workspacePath || executionContext.projectPath || executionContext.targetPath || process.cwd(),
+                            workspace: { path: workspacePath },
+                            workspace_path: workspacePath,
+                            workspace_summary: workspaceSummary,
                             model: this.resolveModelId(executionContext.model || 'code-8b'),
                             history: executionContext.history || [],
                             executionSurface: executionContext.executionSurface || 'cli',
@@ -3110,9 +3225,25 @@ document.addEventListener('DOMContentLoaded', () => {
     }
     // Code operations - Using Vigthoria Centralized API
     async generateCode(prompt, language, model) {
-        // Prepend scope-enforcement instruction so the model doesn't expand
-        // a small task into an oversized glossy production page.
-        const scopedPrompt = `IMPORTANT: Follow the user's scope literally. If they ask for something small or minimal, produce exactly that — no extra styling, no external dependencies, no landing-page treatment.\n\n${prompt}`;
+        // Prepend a forceful scope-enforcement instruction so the model
+        // doesn't expand a small task into an oversized glossy page.
+        const scopedPrompt = [
+            'IMPORTANT — MANDATORY SCOPE CONSTRAINTS (violation = failure):',
+            '1. Output ONLY what the user explicitly asked for. Nothing more.',
+            '2. If the prompt is ≤ 15 words, produce ≤ 80 lines of code maximum.',
+            '3. If the user says "tiny", "small", "simple", "minimal", or "basic", produce ≤ 50 lines.',
+            '4. NEVER add any of these unless the user EXPLICITLY requests them:',
+            '   - Hero sections, CTAs, testimonials, pricing tables, footers, navbars',
+            '   - CSS animations, gradients, neon effects, glass-morphism, particles',
+            '   - Google Fonts, Font Awesome, external CDN links, icon libraries',
+            '   - Responsive breakpoints, media queries (unless asked)',
+            '   - Multiple pages or components when one was requested',
+            '5. Prefer inline styles or a small <style> block. No CSS frameworks.',
+            '6. Return raw code only — no markdown fences, no explanations, no comments about what could be added.',
+            '7. Match the complexity of the request: a "hello world" is 1-5 lines, a "button" is 5-15 lines.',
+            '',
+            prompt,
+        ].join('\n');
         const response = await this.client.post('/api/ai/generate', {
             prompt: scopedPrompt,
             language,
@@ -3146,25 +3277,184 @@ document.addEventListener('DOMContentLoaded', () => {
         const response = await this.client.post('/api/ai/review', {
             code,
             language,
+            instructions: 'Return concrete, line-specific issues with severity. Every issue MUST reference a line number. If the score is below 50, you MUST list at least 2 specific issues.',
         });
         const raw = response.data ?? {};
-        return {
-            score: typeof raw.score === 'number' ? raw.score : 0,
-            issues: Array.isArray(raw.issues) ? raw.issues : [],
-            suggestions: Array.isArray(raw.suggestions) ? raw.suggestions : [],
-        };
+        const score = typeof raw.score === 'number' ? raw.score : 0;
+        const issues = Array.isArray(raw.issues) ? raw.issues : [];
+        const suggestions = Array.isArray(raw.suggestions) ? raw.suggestions : [];
+        // Prevent contradictory output: low score but zero issues.
+        // Run lightweight client-side heuristics to produce concrete findings.
+        if (score < 50 && issues.length === 0) {
+            const heuristic = this.heuristicCodeIssues(code, language);
+            if (heuristic.length > 0) {
+                issues.push(...heuristic);
+            }
+            else {
+                issues.push({
+                    type: 'quality',
+                    line: 1,
+                    message: `The analysis returned a low quality score (${score}/100) but did not enumerate specific issues. Re-run the review or inspect the file manually.`,
+                    severity: 'warning',
+                });
+            }
+        }
+        return { score, issues, suggestions };
+    }
+    /**
+     * Lightweight client-side heuristic scan: catches common code smells
+     * so review never returns "score 30, no issues".
+     */
+    heuristicCodeIssues(code, language) {
+        const issues = [];
+        const lines = code.split('\n');
+        for (let i = 0; i < lines.length; i++) {
+            const line = lines[i];
+            const lineNum = i + 1;
+            // console.log left in production code
+            if (/\bconsole\.(log|debug|info)\b/.test(line) && !/\/\//.test(line.slice(0, line.indexOf('console')))) {
+                issues.push({ type: 'quality', line: lineNum, message: 'console.log/debug statement — remove or replace with proper logging.', severity: 'warning' });
+            }
+            // TODO/FIXME/HACK comments
+            if (/\b(TODO|FIXME|HACK|XXX)\b/.test(line)) {
+                issues.push({ type: 'maintainability', line: lineNum, message: `Unresolved ${line.match(/\b(TODO|FIXME|HACK|XXX)\b/)?.[0]} comment.`, severity: 'info' });
+            }
+            // Empty catch blocks
+            if (/catch\s*\([^)]*\)\s*\{\s*\}/.test(line)) {
+                issues.push({ type: 'error-handling', line: lineNum, message: 'Empty catch block — errors are silently swallowed.', severity: 'warning' });
+            }
+            // Very long lines (> 200 chars)
+            if (line.length > 200) {
+                issues.push({ type: 'style', line: lineNum, message: `Line exceeds 200 characters (${line.length}).`, severity: 'info' });
+            }
+            // Limit to 10 heuristic issues
+            if (issues.length >= 10)
+                break;
+        }
+        return issues;
     }
     async fixCode(code, language, fixType) {
+        // Client-side syntax pre-check: detect obvious errors and include
+        // them in the request so the model has concrete signals.
+        const syntaxHints = this.detectSyntaxErrors(code, language);
+        const augmentedCode = syntaxHints
+            ? `// SYNTAX ERRORS DETECTED BY CLIENT:\n// ${syntaxHints}\n\n${code}`
+            : code;
         const response = await this.client.post('/api/ai/fix', {
-            code,
+            code: augmentedCode,
             language,
             fixType,
         });
         const raw = response.data ?? {};
-        return {
-            fixed: typeof raw.fixed === 'string' ? raw.fixed : (typeof raw.code === 'string' ? raw.code : code),
-            changes: Array.isArray(raw.changes) ? raw.changes : [],
-        };
+        let fixed = typeof raw.fixed === 'string' ? raw.fixed : (typeof raw.code === 'string' ? raw.code : code);
+        let changes = Array.isArray(raw.changes) ? raw.changes : [];
+        // If server returned no changes but we found syntax errors, strip
+        // our injected comment prefix from the returned code and attempt
+        // a basic client-side repair.
+        if (changes.length === 0 && syntaxHints && fixed === augmentedCode) {
+            fixed = code; // restore original
+        }
+        // Strip the injected comment block if it leaked into the output
+        if (fixed.startsWith('// SYNTAX ERRORS DETECTED BY CLIENT:')) {
+            const idx = fixed.indexOf('\n\n');
+            if (idx !== -1) {
+                fixed = fixed.slice(idx + 2);
+            }
+        }
+        // If there are still no changes but the fixed code differs, build a
+        // synthetic change entry so the user sees something actionable.
+        if (changes.length === 0 && fixed !== code) {
+            changes = [{ line: 1, before: '(original code)', after: '(fixed code)', reason: syntaxHints || 'AI-suggested fix' }];
+        }
+        return { fixed, changes };
+    }
+    /**
+     * Lightweight client-side syntax error detection.
+     * Returns a human-readable description of obvious errors, or empty string.
+     */
+    detectSyntaxErrors(code, language) {
+        const lang = language.toLowerCase();
+        const errors = [];
+        if (lang === 'javascript' || lang === 'typescript' || lang === 'js' || lang === 'ts') {
+            // Bracket matching
+            let braces = 0, brackets = 0, parens = 0;
+            // Track string context (simple heuristic — not a full parser)
+            let inString = null;
+            let inLineComment = false;
+            let inBlockComment = false;
+            for (let i = 0; i < code.length; i++) {
+                const ch = code[i];
+                const next = code[i + 1] || '';
+                if (inLineComment) {
+                    if (ch === '\n')
+                        inLineComment = false;
+                    continue;
+                }
+                if (inBlockComment) {
+                    if (ch === '*' && next === '/') {
+                        inBlockComment = false;
+                        i++;
+                    }
+                    continue;
+                }
+                if (inString) {
+                    if (ch === inString && code[i - 1] !== '\\')
+                        inString = null;
+                    continue;
+                }
+                if (ch === '/' && next === '/') {
+                    inLineComment = true;
+                    continue;
+                }
+                if (ch === '/' && next === '*') {
+                    inBlockComment = true;
+                    continue;
+                }
+                if (ch === '"' || ch === "'" || ch === '`') {
+                    inString = ch;
+                    continue;
+                }
+                if (ch === '{')
+                    braces++;
+                else if (ch === '}')
+                    braces--;
+                else if (ch === '[')
+                    brackets++;
+                else if (ch === ']')
+                    brackets--;
+                else if (ch === '(')
+                    parens++;
+                else if (ch === ')')
+                    parens--;
+            }
+            if (braces !== 0)
+                errors.push(`Mismatched braces (balance: ${braces > 0 ? '+' : ''}${braces})`);
+            if (brackets !== 0)
+                errors.push(`Mismatched brackets (balance: ${brackets > 0 ? '+' : ''}${brackets})`);
+            if (parens !== 0)
+                errors.push(`Mismatched parentheses (balance: ${parens > 0 ? '+' : ''}${parens})`);
+            // Detect obvious keyword typos
+            const lines = code.split('\n');
+            for (let li = 0; li < lines.length; li++) {
+                const line = lines[li];
+                if (/\bfuncion\b|\bfuction\b|\bfuntion\b/i.test(line))
+                    errors.push(`Line ${li + 1}: Misspelled 'function'`);
+                if (/\bretrun\b/i.test(line))
+                    errors.push(`Line ${li + 1}: Misspelled 'return'`);
+                if (/\bconts\b|\bcosnt\b/i.test(line))
+                    errors.push(`Line ${li + 1}: Misspelled 'const'`);
+            }
+        }
+        if (lang === 'python' || lang === 'py') {
+            const lines = code.split('\n');
+            for (let li = 0; li < lines.length; li++) {
+                const line = lines[li];
+                if (/^\s*(def|class|if|elif|else|for|while|try|except|with)\b/.test(line) && !line.trimEnd().endsWith(':') && !line.trimEnd().endsWith('\\')) {
+                    errors.push(`Line ${li + 1}: Missing colon after '${line.trim().split(/\s/)[0]}'`);
+                }
+            }
+        }
+        return errors.join('; ');
     }
     // Model resolution - maps Vigthoria model names to internal IDs
     // INTERNAL USE ONLY - users see only Vigthoria branding

package/dist/utils/logger.d.ts

@@ -5,7 +5,15 @@ import { type Options as OraOptions, type Ora } from 'ora';
 export type { Ora };
 /**
  * Create an ora spinner that writes to stderr so it never
- * pollutes stdout JSON output or triggers PowerShell error styling.
+ * pollutes stdout JSON output.
+ *
+ * IMPORTANT: On Windows PowerShell, any stderr output triggers
+ * NativeCommandError styling.  The spinner animation itself is
+ * tolerable, but `spinner.fail(msg)` writes the message to stderr
+ * which produces ugly red PowerShell errors.
+ *
+ * Prefer: spinner.stop() then Logger.error(msg) — which writes to
+ * stdout — instead of spinner.fail(msg).
  */
 export declare function createSpinner(textOrOpts: string | OraOptions): Ora;
 export type LogLevel = 'debug' | 'info' | 'warn' | 'error' | 'success';

package/dist/utils/logger.js

@@ -12,7 +12,15 @@ const chalk_1 = __importDefault(require("chalk"));
 const ora_1 = __importDefault(require("ora"));
 /**
  * Create an ora spinner that writes to stderr so it never
- * pollutes stdout JSON output or triggers PowerShell error styling.
+ * pollutes stdout JSON output.
+ *
+ * IMPORTANT: On Windows PowerShell, any stderr output triggers
+ * NativeCommandError styling.  The spinner animation itself is
+ * tolerable, but `spinner.fail(msg)` writes the message to stderr
+ * which produces ugly red PowerShell errors.
+ *
+ * Prefer: spinner.stop() then Logger.error(msg) — which writes to
+ * stdout — instead of spinner.fail(msg).
  */
 function createSpinner(textOrOpts) {
     const opts = typeof textOrOpts === 'string' ? { text: textOrOpts } : textOrOpts;
@@ -35,7 +43,10 @@ class Logger {
         console.log(chalk_1.default.yellow('⚠'), ...args);
     }
     error(...args) {
-        console.error(chalk_1.default.red('✗'), ...args);
+        // Write error messages to stdout (not stderr) to avoid triggering
+        // PowerShell NativeCommandError styling.  The red ✗ prefix already
+        // signals an error visually; stderr redirection is unnecessary.
+        console.log(chalk_1.default.red('✗'), ...args);
     }
     success(...args) {
         console.log(chalk_1.default.green('✓'), ...args);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vigthoria-cli",
-  "version": "1.6.19",
+  "version": "1.6.21",
   "description": "Vigthoria Coder CLI - AI-powered terminal coding assistant",
   "main": "dist/index.js",
   "files": [