vigthoria-cli 1.6.20 → 1.6.21

package/dist/commands/chat.d.ts

@@ -46,6 +46,11 @@ export declare class ChatCommand {
     private resolveAgentExecutionPolicy;
     private getMessagesForModel;
     private isDiagnosticPrompt;
+    /**
+     * Returns true when the prompt is a simple lookup / analysis / read-only
+     * question — these should use analysis_only workflow, not full_autonomy.
+     */
+    private isAnalysisLookupPrompt;
     private isBrowserTaskPrompt;
     private inferAgentTaskType;
     private buildTaskShapingInstructions;

package/dist/commands/chat.js

@@ -195,6 +195,13 @@ class ChatCommand {
     isDiagnosticPrompt(prompt) {
         return /(startup|start up|won'?t start|doesn'?t start|crash|crashes|error|errors|failing|fails|issue|issues|bug|bugs|diagnos|debug|runtime|log|logs|exception|traceback|stack trace|yaml|blocking|blocker)/i.test(prompt);
     }
+    /**
+     * Returns true when the prompt is a simple lookup / analysis / read-only
+     * question — these should use analysis_only workflow, not full_autonomy.
+     */
+    isAnalysisLookupPrompt(prompt) {
+        return /^(what|which|where|how many|who|find|list|show|check|inspect|analyze|analyse|audit|explain|describe|summarize|summarise|review|overview|count|read|look at|tell me|locate|search for|does .* exist)/i.test(prompt.trim());
+    }
     isBrowserTaskPrompt(prompt) {
         return /(browser|chrome|devtools|console|dom|network tab|network request|frontend runtime|client-side|client side|rendering|page load|websocket|ui bug|inspect element)/i.test(prompt);
     }
@@ -360,7 +367,13 @@ class ChatCommand {
     }
     async run(options) {
         if (!this.config.isAuthenticated()) {
-            this.logger.error('Not authenticated. Run: vigthoria login');
+            if (options.json) {
+                process.exitCode = 1;
+                console.log(JSON.stringify({ success: false, error: 'Not authenticated. Run: vigthoria login' }, null, 2));
+            }
+            else {
+                this.logger.error('Not authenticated. Run: vigthoria login');
+            }
             return;
         }
         this.agentMode = options.agent === true;
@@ -611,7 +624,8 @@ class ChatCommand {
         }
         catch (error) {
             if (spinner) {
-                spinner.fail('Workflow target execution failed');
+                spinner.stop();
+                this.logger.error('Workflow target execution failed');
             }
             throw error;
         }
@@ -624,7 +638,9 @@ class ChatCommand {
         const runtimeContext = await this.getPromptRuntimeContext(prompt);
         const spinner = this.jsonOutput ? null : (0, logger_js_1.createSpinner)({ text: 'Thinking like an operator...', spinner: 'clock' }).start();
         const executionPrompt = this.buildExecutionPrompt(prompt);
-        const workflowType = this.isDiagnosticPrompt(prompt) ? 'analysis_only' : 'full_autonomy';
+        const workflowType = this.isDiagnosticPrompt(prompt) || this.isAnalysisLookupPrompt(prompt)
+            ? 'analysis_only'
+            : 'full_autonomy';
         try {
             const response = await this.api.runOperatorWorkflow(executionPrompt, {
                 workspacePath: this.currentProjectPath,
@@ -665,9 +681,12 @@ class ChatCommand {
         }
         catch (error) {
             if (spinner) {
-                spinner.fail('Operator workflow failed');
+                spinner.stop();
             }
             const errorMsg = error.message || 'Operator workflow failed with an unknown error.';
+            if (!this.jsonOutput) {
+                this.logger.error('Operator workflow failed');
+            }
             if (this.jsonOutput) {
                 process.exitCode = 1;
                 console.log(JSON.stringify({
@@ -686,11 +705,26 @@ class ChatCommand {
         this.lastActionableUserInput = prompt;
         // In non-agent chat mode the model has no tool access.  Inject a
         // grounding constraint so it doesn't fabricate file contents.
+        // Also inject a real file listing so the model can reference actual
+        // paths instead of guessing.
         const needsGrounding = /(repo|file|code|project|workspace|source|inspect|analyze|audit|review)/i.test(prompt);
         if (needsGrounding && !this.messages.some(m => m.role === 'system' && m.content.includes('no direct file access'))) {
+            let groundingContent = 'You are in simple chat mode with no direct file access or tools. Do not fabricate file contents, search results, or analysis steps. If the user asks you to modify, edit, or deeply inspect files, advise them to use agent mode (vig chat --agent) for grounded repo analysis.';
+            // Inject a workspace file listing so the model has real paths
+            try {
+                const snapshot = this.api.getAgentWorkspaceSnapshot(this.currentProjectPath);
+                if (snapshot && snapshot.paths.length > 0) {
+                    const listing = snapshot.paths.slice(0, 60).join('\n');
+                    groundingContent += `\n\nWorkspace: ${this.currentProjectPath}\nFile listing (${snapshot.fileCount} files total):\n${listing}`;
+                    if (snapshot.fileCount > 60) {
+                        groundingContent += `\n... and ${snapshot.fileCount - 60} more files.`;
+                    }
+                }
+            }
+            catch { /* ignore snapshot errors */ }
             this.messages.push({
                 role: 'system',
-                content: 'You are in simple chat mode with no direct file access. Do not fabricate file contents, search results, or analysis steps. If the user asks about specific files, advise them to use agent mode (vig chat --agent) for grounded repo analysis.',
+                content: groundingContent,
             });
         }
         this.messages.push({ role: 'user', content: this.buildExecutionPrompt(prompt) });
@@ -719,7 +753,9 @@ class ChatCommand {
         }
         catch (error) {
             if (spinner)
-                spinner.fail('Failed to get response');
+                spinner.stop();
+            if (!this.jsonOutput)
+                this.logger.error('Failed to get response');
             const errorMsg = error.message;
             if (this.jsonOutput) {
                 process.exitCode = 1;
@@ -830,7 +866,9 @@ class ChatCommand {
             }
             catch (error) {
                 if (spinner)
-                    spinner.fail('Agent request failed');
+                    spinner.stop();
+                if (!this.jsonOutput)
+                    this.logger.error('Agent request failed');
                 if (this.jsonOutput) {
                     process.exitCode = 1;
                     console.log(JSON.stringify({
@@ -1040,14 +1078,15 @@ class ChatCommand {
             if (!success) {
                 if (this.isLegacyAgentFallbackAllowed()) {
                     if (spinner) {
-                        spinner.warn('Falling back to legacy CLI agent loop');
+                        spinner.stop();
                     }
+                    this.logger.warn('Falling back to legacy CLI agent loop');
                     this.logger.debug(`V3 agent workflow returned an incomplete result: ${previewGate?.error || 'workspace changes were not fully validated'}`);
                     return false;
                 }
                 const errorMessage = `V3 agent workflow returned an incomplete result and legacy fallback is disabled. ${previewGate?.error || 'Workspace changes were not fully validated.'}`;
                 if (spinner) {
-                    spinner.fail('V3 agent workflow rejected the result');
+                    spinner.stop();
                 }
                 this.logger.error(errorMessage);
                 this.messages.push({ role: 'assistant', content: errorMessage });
@@ -1109,13 +1148,14 @@ class ChatCommand {
             }
             if (this.isLegacyAgentFallbackAllowed()) {
                 if (spinner) {
-                    spinner.warn('Falling back to legacy CLI agent loop');
+                    spinner.stop();
                 }
+                this.logger.warn('Falling back to legacy CLI agent loop');
                 this.logger.debug(`V3 agent workflow unavailable: ${error.message}`);
                 return false;
             }
             if (spinner) {
-                spinner.fail('V3 agent workflow failed');
+                spinner.stop();
             }
             const errorMessage = `Agent mode requires the V3 workflow and will not fall back to the legacy CLI loop. ${error.message}`;
             this.logger.error(errorMessage);

package/dist/commands/deploy.js

@@ -151,7 +151,8 @@ class DeployCommand {
             console.log(chalk_1.default.gray('   Upgrade to a subdomain for permanent hosting.\n'));
         }
         catch (error) {
-            spinner.fail('Deploy failed');
+            spinner.stop();
+            this.logger.error('Deploy failed');
             const errMsg = error instanceof Error ? error.message : 'Unknown error';
             console.log(chalk_1.default.red(`\n❌ Error: ${errMsg}\n`));
         }
@@ -204,7 +205,8 @@ class DeployCommand {
             console.log(chalk_1.default.gray('   ✓ Unlimited traffic included\n'));
         }
         catch (error) {
-            spinner.fail('Deploy failed');
+            spinner.stop();
+            this.logger.error('Deploy failed');
             const errMsg = error instanceof Error ? error.message : 'Unknown error';
             console.log(chalk_1.default.red(`\n❌ Error: ${errMsg}\n`));
         }
@@ -258,7 +260,8 @@ class DeployCommand {
             }
         }
         catch (error) {
-            spinner.fail('Deploy failed');
+            spinner.stop();
+            this.logger.error('Deploy failed');
             const errMsg = error instanceof Error ? error.message : 'Unknown error';
             console.log(chalk_1.default.red(`\n❌ Error: ${errMsg}\n`));
         }
@@ -334,7 +337,8 @@ class DeployCommand {
             console.log(chalk_1.default.cyan('\n  Subscribe: vig deploy --subdomain myapp\n'));
         }
         catch (error) {
-            spinner.fail('Failed to fetch plans');
+            spinner.stop();
+            this.logger.error('Failed to fetch plans');
             const errMsg = error instanceof Error ? error.message : 'Unknown error';
             console.log(chalk_1.default.red(`\n❌ Error: ${errMsg}\n`));
         }
@@ -374,7 +378,8 @@ class DeployCommand {
             }
         }
         catch (error) {
-            spinner.fail('List failed');
+            spinner.stop();
+            this.logger.error('List failed');
             const errMsg = error instanceof Error ? error.message : 'Unknown error';
             console.log(chalk_1.default.red(`\n❌ Error: ${errMsg}\n`));
         }
@@ -401,7 +406,8 @@ class DeployCommand {
             console.log(JSON.stringify(data, null, 2));
         }
         catch (error) {
-            spinner.fail('Status check failed');
+            spinner.stop();
+            this.logger.error('Status check failed');
             const errMsg = error instanceof Error ? error.message : 'Unknown error';
             console.log(chalk_1.default.red(`\n❌ Error: ${errMsg}\n`));
         }
@@ -434,7 +440,8 @@ class DeployCommand {
             }
         }
         catch (error) {
-            spinner.fail('Verification failed');
+            spinner.stop();
+            this.logger.error('Verification failed');
             const errMsg = error instanceof Error ? error.message : 'Unknown error';
             console.log(chalk_1.default.red(`\n❌ Error: ${errMsg}\n`));
         }
@@ -468,7 +475,8 @@ class DeployCommand {
             console.log(chalk_1.default.gray('\n   Your project files are still in your repository.\n'));
         }
         catch (error) {
-            spinner.fail('Remove failed');
+            spinner.stop();
+            this.logger.error('Remove failed');
             const errMsg = error instanceof Error ? error.message : 'Unknown error';
             console.log(chalk_1.default.red(`\n❌ Error: ${errMsg}\n`));
         }

package/dist/commands/edit.js

@@ -41,6 +41,11 @@ class EditCommand {
         // Get instruction
         let instruction = options.instruction;
         if (!instruction) {
+            // --apply requires --instruction to avoid hanging on non-interactive terminals
+            if (options.apply) {
+                this.logger.error('The --apply flag requires --instruction. Example: vigthoria edit file.ts --apply --instruction "fix the bug"');
+                return;
+            }
             const answer = await inquirer_1.default.prompt([
                 {
                     type: 'input',
@@ -148,12 +153,17 @@ Return the complete modified code:`,
         }
     }
     extractCode(response, language) {
-        // Try to extract code block
+        // Try to extract code block (language-specific first, then any)
         const codeBlockRegex = new RegExp(`\`\`\`(?:${language})?\\n([\\s\\S]*?)\`\`\``, 'i');
         const match = response.match(codeBlockRegex);
         if (match) {
             return match[1].trim();
         }
+        // Try generic code block
+        const genericMatch = response.match(/```\w*\n([\s\S]*?)```/);
+        if (genericMatch) {
+            return genericMatch[1].trim();
+        }
         // If no code block, check if response looks like code
         const trimmed = response.trim();
         if (!trimmed.startsWith('```') && !trimmed.includes('Here') && !trimmed.includes('I ')) {

package/dist/commands/repo.js

@@ -399,7 +399,8 @@ class RepoCommand {
             console.log(chalk_1.default.gray('\nTip: Use `vigthoria repo pull <name>` to restore this project anywhere.\n'));
         }
         catch (error) {
-            spinner.fail('Push failed');
+            spinner.stop();
+            this.logger.error('Push failed');
             const errMsg = this.formatRepoError(error);
             console.log(chalk_1.default.red(`\n❌ Error: ${errMsg}\n`));
         }
@@ -486,7 +487,8 @@ class RepoCommand {
             console.log();
         }
         catch (error) {
-            spinner.fail('Pull failed');
+            spinner.stop();
+            this.logger.error('Pull failed');
             const errMsg = this.formatRepoError(error);
             console.log(chalk_1.default.red(`\n❌ Error: ${errMsg}\n`));
         }
@@ -584,7 +586,8 @@ class RepoCommand {
             console.log(chalk_1.default.gray('  vigthoria repo share <name>    - Share a project\n'));
         }
         catch (error) {
-            spinner.fail('List failed');
+            spinner.stop();
+            this.logger.error('List failed');
             const errMsg = this.formatRepoError(error);
             console.log(chalk_1.default.red(`\n❌ Error: ${errMsg}\n`));
         }
@@ -634,7 +637,8 @@ class RepoCommand {
             }
         }
         catch (error) {
-            spinner.fail('Status check failed');
+            spinner.stop();
+            this.logger.error('Status check failed');
             const errMsg = error instanceof Error ? error.message : 'Unknown error';
             console.log(chalk_1.default.red(`\n❌ Error: ${errMsg}\n`));
         }
@@ -666,7 +670,8 @@ class RepoCommand {
             console.log(chalk_1.default.gray('\n   Anyone with this link can view/download the project.\n'));
         }
         catch (error) {
-            spinner.fail('Share failed');
+            spinner.stop();
+            this.logger.error('Share failed');
             const errMsg = error instanceof Error ? error.message : 'Unknown error';
             console.log(chalk_1.default.red(`\n❌ Error: ${errMsg}\n`));
         }
@@ -700,7 +705,8 @@ class RepoCommand {
             console.log(chalk_1.default.gray('\nNote: Your local files are not affected.\n'));
         }
         catch (error) {
-            spinner.fail('Delete failed');
+            spinner.stop();
+            this.logger.error('Delete failed');
             const errMsg = error instanceof Error ? error.message : 'Unknown error';
             console.log(chalk_1.default.red(`\n❌ Error: ${errMsg}\n`));
         }
@@ -728,7 +734,8 @@ class RepoCommand {
             await this.pull(data.project.project_name, options);
         }
         catch (error) {
-            spinner.fail('Clone failed');
+            spinner.stop();
+            this.logger.error('Clone failed');
             const errMsg = error instanceof Error ? error.message : 'Unknown error';
             console.log(chalk_1.default.red(`\n❌ Error: ${errMsg}\n`));
         }

package/dist/utils/api.d.ts

@@ -217,6 +217,13 @@ export declare class APIClient {
     private getVigFlowAccessToken;
     private getVigFlowHeaders;
     private withVigFlow;
+    /**
+     * Build the correct sub-path for VigFlow endpoints.
+     * Local servers (e.g. localhost:5060) need `/api/…` prefix.
+     * The remote gateway URL already ends with `/api/vigflow`, so appending
+     * another `/api/…` would double the prefix and cause 404s.
+     */
+    private vigFlowEndpoint;
     listVigFlowTemplates(options?: {
         category?: string;
         search?: string;
@@ -339,6 +346,11 @@ export declare class APIClient {
         }[];
         suggestions: string[];
     }>;
+    /**
+     * Lightweight client-side heuristic scan: catches common code smells
+     * so review never returns "score 30, no issues".
+     */
+    private heuristicCodeIssues;
     fixCode(code: string, language: string, fixType: string): Promise<{
         fixed: string;
         changes: {

package/dist/utils/api.js

@@ -793,6 +793,19 @@ class APIClient {
         }
         throw lastError || new Error(`No VigFlow backend available for ${operation}.`);
     }
+    /**
+     * Build the correct sub-path for VigFlow endpoints.
+     * Local servers (e.g. localhost:5060) need `/api/…` prefix.
+     * The remote gateway URL already ends with `/api/vigflow`, so appending
+     * another `/api/…` would double the prefix and cause 404s.
+     */
+    vigFlowEndpoint(baseUrl, subPath) {
+        if (/\/api\/vigflow\/?$/i.test(baseUrl)) {
+            // Remote gateway – subPath like '/templates' is enough
+            return `${baseUrl.replace(/\/$/, '')}${subPath}`;
+        }
+        return `${baseUrl}/api${subPath}`;
+    }
     async listVigFlowTemplates(options = {}) {
         return this.withVigFlow('list templates', async (baseUrl, headers) => {
             const query = new URLSearchParams();
@@ -802,7 +815,7 @@ class APIClient {
             if (options.search) {
                 query.set('search', options.search);
             }
-            const url = `${baseUrl}/api/templates${query.size > 0 ? `?${query.toString()}` : ''}`;
+            const url = `${this.vigFlowEndpoint(baseUrl, '/templates')}${query.size > 0 ? `?${query.toString()}` : ''}`;
             const response = await axios_1.default.get(url, {
                 headers,
                 timeout: 30000,
@@ -813,7 +826,7 @@ class APIClient {
     }
     async listVigFlowWorkflows() {
         return this.withVigFlow('list workflows', async (baseUrl, headers) => {
-            const response = await axios_1.default.get(`${baseUrl}/api/workflows`, {
+            const response = await axios_1.default.get(this.vigFlowEndpoint(baseUrl, '/workflows'), {
                 headers,
                 timeout: 30000,
             });
@@ -865,7 +878,7 @@ class APIClient {
     }
     async useVigFlowTemplate(templateId, options = {}) {
         return this.withVigFlow('use template', async (baseUrl, headers) => {
-            const response = await axios_1.default.post(`${baseUrl}/api/templates/${encodeURIComponent(templateId)}/use`, {
+            const response = await axios_1.default.post(`${this.vigFlowEndpoint(baseUrl, `/templates/${encodeURIComponent(templateId)}/use`)}`, {
                 name: options.name,
                 variables: options.variables || {},
             }, {
@@ -881,7 +894,7 @@ class APIClient {
     }
     async runVigFlowWorkflow(workflowId, options = {}) {
         return this.withVigFlow('run workflow', async (baseUrl, headers) => {
-            const response = await axios_1.default.post(`${baseUrl}/api/executions/run/${encodeURIComponent(workflowId)}`, {
+            const response = await axios_1.default.post(`${this.vigFlowEndpoint(baseUrl, `/executions/run/${encodeURIComponent(workflowId)}`)}`, {
                 data: options.data || {},
                 options: options.executionOptions || {},
             }, {
@@ -897,7 +910,7 @@ class APIClient {
     }
     async getVigFlowExecutionStatus(executionId) {
         return this.withVigFlow('execution status', async (baseUrl, headers) => {
-            const response = await axios_1.default.get(`${baseUrl}/api/executions/${encodeURIComponent(executionId)}`, {
+            const response = await axios_1.default.get(`${this.vigFlowEndpoint(baseUrl, `/executions/${encodeURIComponent(executionId)}`)}`, {
                 headers,
                 timeout: 30000,
             });
@@ -918,6 +931,11 @@ class APIClient {
         const localWorkspaceSummary = this.buildLocalWorkspaceSummary(localWorkspacePath);
         const requestedModel = String(resolvedContext.model || resolvedContext.requestedModel || 'agent');
         const resolvedModel = this.resolvePermittedModelId(requestedModel);
+        // When the server cannot directly access the workspace (e.g. Windows
+        // client), use the local path as a hint and flag that the workspace
+        // files are provided inline in localWorkspaceSummary.workspaceFiles.
+        const effectiveWorkspacePath = serverWorkspacePath || localWorkspacePath || null;
+        const needsHydration = !serverWorkspacePath && !!localWorkspacePath;
         const payload = {
             workspace: resolvedContext.workspace || null,
             activeFile: resolvedContext.activeFile || null,
@@ -931,12 +949,16 @@ class APIClient {
             executionSurface: resolvedContext.executionSurface || 'cli',
             clientSurface: resolvedContext.clientSurface || 'cli',
             localMachineCapable: resolvedContext.localMachineCapable !== false,
-            workspacePath: serverWorkspacePath || null,
-            projectPath: serverWorkspacePath || null,
-            targetPath: serverWorkspacePath || null,
+            workspacePath: effectiveWorkspacePath,
+            projectPath: effectiveWorkspacePath,
+            targetPath: effectiveWorkspacePath,
             localWorkspacePath: localWorkspacePath || null,
             localWorkspaceName: localWorkspacePath ? path_1.default.basename(localWorkspacePath) : null,
             localWorkspaceSummary,
+            // Signal to the server that the workspace filesystem is not locally
+            // accessible — it must hydrate a temp directory from the provided
+            // workspaceFiles before the agent starts using tools.
+            workspaceHydrationRequired: needsHydration,
             contextId: resolvedContext.contextId,
             traceId: resolvedContext.traceId,
             mcpContextId: resolvedContext.mcpContextId || null,
@@ -2333,7 +2355,7 @@ document.addEventListener('DOMContentLoaded', () => {
         const toolResults = [];
         const filesRead = [];
         const filesWritten = [];
-        let lastAssistantText = '';
+        const assistantFragments = [];
         for (const event of events) {
             if (!event)
                 continue;
@@ -2352,16 +2374,22 @@ document.addEventListener('DOMContentLoaded', () => {
                 }
             }
             if (event.type === 'assistant' && typeof event.content === 'string' && event.content.trim()) {
-                lastAssistantText = event.content.trim();
+                assistantFragments.push(event.content.trim());
             }
             // Some servers emit 'text' events for incremental assistant text
             if (event.type === 'text' && typeof event.content === 'string' && event.content.trim()) {
-                lastAssistantText = event.content.trim();
+                assistantFragments.push(event.content.trim());
+            }
+            // Some servers emit content_block_delta for streamed text
+            if (event.type === 'content_block_delta' && typeof event.delta?.text === 'string' && event.delta.text.trim()) {
+                assistantFragments.push(event.delta.text.trim());
             }
         }
-        // Prefer the last assistant text the model emitted
-        if (lastAssistantText.length > 20) {
-            return lastAssistantText;
+        // Concatenate ALL assistant text fragments in order — keeps full
+        // multi-turn reasoning instead of only the last fragment.
+        const fullAssistantText = assistantFragments.join('\n\n').trim();
+        if (fullAssistantText.length > 20) {
+            return fullAssistantText;
         }
         // Otherwise build a summary from tool evidence
         const sections = [];
@@ -3200,13 +3228,19 @@ document.addEventListener('DOMContentLoaded', () => {
         // Prepend a forceful scope-enforcement instruction so the model
         // doesn't expand a small task into an oversized glossy page.
         const scopedPrompt = [
-            'IMPORTANT — SCOPE CONSTRAINTS:',
-            '1. Follow the user\'s scope literally. Output ONLY what was requested.',
-            '2. If the user says "tiny", "small", "simple", or "minimal", produce ≤ 50 lines of code.',
-            '3. Do NOT add: hero sections, animations, gradients, Google Fonts, Font Awesome, responsive breakpoints, or landing-page patterns UNLESS the user explicitly requests them.',
-            '4. Do NOT add external CDN links or dependencies unless the user asks for them.',
-            '5. Prefer inline styles or a small <style> block.  No large CSS frameworks.',
-            '6. Return raw code only — no markdown fences, no explanations.',
+            'IMPORTANT — MANDATORY SCOPE CONSTRAINTS (violation = failure):',
+            '1. Output ONLY what the user explicitly asked for. Nothing more.',
+            '2. If the prompt is ≤ 15 words, produce ≤ 80 lines of code maximum.',
+            '3. If the user says "tiny", "small", "simple", "minimal", or "basic", produce ≤ 50 lines.',
+            '4. NEVER add any of these unless the user EXPLICITLY requests them:',
+            '   - Hero sections, CTAs, testimonials, pricing tables, footers, navbars',
+            '   - CSS animations, gradients, neon effects, glass-morphism, particles',
+            '   - Google Fonts, Font Awesome, external CDN links, icon libraries',
+            '   - Responsive breakpoints, media queries (unless asked)',
+            '   - Multiple pages or components when one was requested',
+            '5. Prefer inline styles or a small <style> block. No CSS frameworks.',
+            '6. Return raw code only — no markdown fences, no explanations, no comments about what could be added.',
+            '7. Match the complexity of the request: a "hello world" is 1-5 lines, a "button" is 5-15 lines.',
             '',
             prompt,
         ].join('\n');
@@ -3243,22 +3277,62 @@ document.addEventListener('DOMContentLoaded', () => {
         const response = await this.client.post('/api/ai/review', {
             code,
             language,
+            instructions: 'Return concrete, line-specific issues with severity. Every issue MUST reference a line number. If the score is below 50, you MUST list at least 2 specific issues.',
         });
         const raw = response.data ?? {};
         const score = typeof raw.score === 'number' ? raw.score : 0;
         const issues = Array.isArray(raw.issues) ? raw.issues : [];
         const suggestions = Array.isArray(raw.suggestions) ? raw.suggestions : [];
-        // Prevent contradictory output: low score but zero issues
+        // Prevent contradictory output: low score but zero issues.
+        // Run lightweight client-side heuristics to produce concrete findings.
         if (score < 50 && issues.length === 0) {
-            issues.push({
-                type: 'quality',
-                line: 0,
-                message: `The analysis returned a low quality score (${score}/100) but did not enumerate specific issues. This typically means the review model returned incomplete data. Consider re-running the review or inspecting the file manually.`,
-                severity: 'warning',
-            });
+            const heuristic = this.heuristicCodeIssues(code, language);
+            if (heuristic.length > 0) {
+                issues.push(...heuristic);
+            }
+            else {
+                issues.push({
+                    type: 'quality',
+                    line: 1,
+                    message: `The analysis returned a low quality score (${score}/100) but did not enumerate specific issues. Re-run the review or inspect the file manually.`,
+                    severity: 'warning',
+                });
+            }
         }
         return { score, issues, suggestions };
     }
+    /**
+     * Lightweight client-side heuristic scan: catches common code smells
+     * so review never returns "score 30, no issues".
+     */
+    heuristicCodeIssues(code, language) {
+        const issues = [];
+        const lines = code.split('\n');
+        for (let i = 0; i < lines.length; i++) {
+            const line = lines[i];
+            const lineNum = i + 1;
+            // console.log left in production code
+            if (/\bconsole\.(log|debug|info)\b/.test(line) && !/\/\//.test(line.slice(0, line.indexOf('console')))) {
+                issues.push({ type: 'quality', line: lineNum, message: 'console.log/debug statement — remove or replace with proper logging.', severity: 'warning' });
+            }
+            // TODO/FIXME/HACK comments
+            if (/\b(TODO|FIXME|HACK|XXX)\b/.test(line)) {
+                issues.push({ type: 'maintainability', line: lineNum, message: `Unresolved ${line.match(/\b(TODO|FIXME|HACK|XXX)\b/)?.[0]} comment.`, severity: 'info' });
+            }
+            // Empty catch blocks
+            if (/catch\s*\([^)]*\)\s*\{\s*\}/.test(line)) {
+                issues.push({ type: 'error-handling', line: lineNum, message: 'Empty catch block — errors are silently swallowed.', severity: 'warning' });
+            }
+            // Very long lines (> 200 chars)
+            if (line.length > 200) {
+                issues.push({ type: 'style', line: lineNum, message: `Line exceeds 200 characters (${line.length}).`, severity: 'info' });
+            }
+            // Limit to 10 heuristic issues
+            if (issues.length >= 10)
+                break;
+        }
+        return issues;
+    }
     async fixCode(code, language, fixType) {
         // Client-side syntax pre-check: detect obvious errors and include
         // them in the request so the model has concrete signals.

package/dist/utils/logger.d.ts

@@ -5,7 +5,15 @@ import { type Options as OraOptions, type Ora } from 'ora';
 export type { Ora };
 /**
  * Create an ora spinner that writes to stderr so it never
- * pollutes stdout JSON output or triggers PowerShell error styling.
+ * pollutes stdout JSON output.
+ *
+ * IMPORTANT: On Windows PowerShell, any stderr output triggers
+ * NativeCommandError styling.  The spinner animation itself is
+ * tolerable, but `spinner.fail(msg)` writes the message to stderr
+ * which produces ugly red PowerShell errors.
+ *
+ * Prefer: spinner.stop() then Logger.error(msg) — which writes to
+ * stdout — instead of spinner.fail(msg).
  */
 export declare function createSpinner(textOrOpts: string | OraOptions): Ora;
 export type LogLevel = 'debug' | 'info' | 'warn' | 'error' | 'success';

package/dist/utils/logger.js

@@ -12,7 +12,15 @@ const chalk_1 = __importDefault(require("chalk"));
 const ora_1 = __importDefault(require("ora"));
 /**
  * Create an ora spinner that writes to stderr so it never
- * pollutes stdout JSON output or triggers PowerShell error styling.
+ * pollutes stdout JSON output.
+ *
+ * IMPORTANT: On Windows PowerShell, any stderr output triggers
+ * NativeCommandError styling.  The spinner animation itself is
+ * tolerable, but `spinner.fail(msg)` writes the message to stderr
+ * which produces ugly red PowerShell errors.
+ *
+ * Prefer: spinner.stop() then Logger.error(msg) — which writes to
+ * stdout — instead of spinner.fail(msg).
  */
 function createSpinner(textOrOpts) {
     const opts = typeof textOrOpts === 'string' ? { text: textOrOpts } : textOrOpts;
@@ -35,7 +43,10 @@ class Logger {
         console.log(chalk_1.default.yellow('⚠'), ...args);
     }
     error(...args) {
-        console.error(chalk_1.default.red('✗'), ...args);
+        // Write error messages to stdout (not stderr) to avoid triggering
+        // PowerShell NativeCommandError styling.  The red ✗ prefix already
+        // signals an error visually; stderr redirection is unnecessary.
+        console.log(chalk_1.default.red('✗'), ...args);
     }
     success(...args) {
         console.log(chalk_1.default.green('✓'), ...args);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vigthoria-cli",
-  "version": "1.6.20",
+  "version": "1.6.21",
   "description": "Vigthoria Coder CLI - AI-powered terminal coding assistant",
   "main": "dist/index.js",
   "files": [