@quantracode/vibecheck 0.0.1 → 0.0.2

package/dist/commands/explain.js

@@ -1,214 +0,0 @@
-import { validateArtifact, } from "@vibecheck/schema";
-import { readFileSync, resolvePath } from "../utils/file-utils.js";
-/**
- * Format severity for console output with color
- */
-function formatSeverity(severity) {
-    const colors = {
-        critical: "\x1b[35m", // Magenta
-        high: "\x1b[31m", // Red
-        medium: "\x1b[33m", // Yellow
-        low: "\x1b[36m", // Cyan
-        info: "\x1b[90m", // Gray
-    };
-    const reset = "\x1b[0m";
-    return `${colors[severity]}${severity.toUpperCase().padEnd(8)}${reset}`;
-}
-/**
- * Format category for display
- */
-function formatCategory(category) {
-    return `\x1b[34m${category}\x1b[0m`;
-}
-/**
- * Print a horizontal divider
- */
-function divider(char = "-", length = 70) {
-    return char.repeat(length);
-}
-/**
- * Print artifact summary
- */
-function printSummary(artifact) {
-    const { summary, tool, repo, generatedAt, metrics } = artifact;
-    console.log("\n" + divider("="));
-    console.log("VIBECHECK SCAN REPORT");
-    console.log(divider("="));
-    console.log(`\nTool:       ${tool.name} v${tool.version}`);
-    if (repo) {
-        console.log(`Repository: ${repo.name}`);
-        if (repo.git?.branch) {
-            console.log(`Branch:     ${repo.git.branch}`);
-        }
-        if (repo.git?.commit) {
-            console.log(`Commit:     ${repo.git.commit.slice(0, 8)}`);
-        }
-    }
-    console.log(`Generated:  ${new Date(generatedAt).toLocaleString()}`);
-    if (metrics) {
-        console.log(`\nScan Metrics:`);
-        console.log(`  Files scanned: ${metrics.filesScanned}`);
-        console.log(`  Duration:      ${metrics.scanDurationMs.toFixed(0)}ms`);
-        console.log(`  Rules run:     ${metrics.rulesExecuted}`);
-    }
-    console.log(`\n${divider()}`);
-    console.log("SUMMARY");
-    console.log(divider());
-    console.log(`\nTotal Findings: ${summary.totalFindings}`);
-    if (summary.totalFindings > 0) {
-        console.log("\nBy Severity:");
-        const severities = ["critical", "high", "medium", "low", "info"];
-        for (const sev of severities) {
-            const count = summary.bySeverity[sev];
-            if (count > 0) {
-                const bar = "\u2588".repeat(Math.min(count * 2, 40));
-                console.log(`  ${formatSeverity(sev)} ${count.toString().padStart(3)} ${bar}`);
-            }
-        }
-        console.log("\nBy Category:");
-        const categories = Object.entries(summary.byCategory)
-            .filter(([, count]) => count > 0)
-            .sort(([, a], [, b]) => b - a);
-        for (const [cat, count] of categories) {
-            console.log(`  ${formatCategory(cat.padEnd(12))} ${count}`);
-        }
-    }
-}
-/**
- * Sort findings by severity (highest first)
- */
-function sortBySeverity(findings) {
-    const order = {
-        critical: 4,
-        high: 3,
-        medium: 2,
-        low: 1,
-        info: 0,
-    };
-    return [...findings].sort((a, b) => order[b.severity] - order[a.severity]);
-}
-/**
- * Print detailed finding information
- */
-function printFinding(finding, index) {
-    console.log(`\n${divider()}`);
-    console.log(`FINDING #${index + 1}: ${finding.title}`);
-    console.log(divider());
-    console.log(`\nSeverity:   ${formatSeverity(finding.severity)}`);
-    console.log(`Category:   ${formatCategory(finding.category)}`);
-    console.log(`Rule:       ${finding.ruleId}`);
-    console.log(`Confidence: ${(finding.confidence * 100).toFixed(0)}%`);
-    console.log(`ID:         ${finding.id}`);
-    console.log(`\nDescription:`);
-    console.log(`  ${finding.description}`);
-    console.log(`\nEvidence:`);
-    for (const ev of finding.evidence) {
-        console.log(`  - ${ev.file}:${ev.startLine}-${ev.endLine}`);
-        console.log(`    ${ev.label}`);
-        if (ev.snippet) {
-            console.log(`    \x1b[90m${ev.snippet}\x1b[0m`);
-        }
-    }
-    if (finding.claim) {
-        console.log(`\nClaim:`);
-        console.log(`  Type:     ${finding.claim.type}`);
-        console.log(`  Source:   ${finding.claim.source}`);
-        console.log(`  Strength: ${finding.claim.strength}`);
-        console.log(`  Evidence: "${finding.claim.textEvidence}"`);
-    }
-    if (finding.proof) {
-        console.log(`\nProof Trace:`);
-        console.log(`  ${finding.proof.summary}`);
-        for (const node of finding.proof.nodes) {
-            const loc = node.file ? ` (${node.file}:${node.line})` : "";
-            console.log(`    [${node.kind}] ${node.label}${loc}`);
-        }
-    }
-    console.log(`\nRemediation:`);
-    console.log(`  ${finding.remediation.recommendedFix}`);
-    if (finding.remediation.patch) {
-        console.log(`\n  Suggested patch:`);
-        console.log(`  \x1b[90m${finding.remediation.patch}\x1b[0m`);
-    }
-    if (finding.links) {
-        console.log(`\nReferences:`);
-        if (finding.links.owasp) {
-            console.log(`  OWASP: ${finding.links.owasp}`);
-        }
-        if (finding.links.cwe) {
-            console.log(`  CWE:   ${finding.links.cwe}`);
-        }
-    }
-}
-/**
- * Print top findings with details
- */
-function printTopFindings(artifact, limit) {
-    const { findings } = artifact;
-    if (findings.length === 0) {
-        console.log("\n\x1b[32mNo findings to display.\x1b[0m");
-        return;
-    }
-    const sorted = sortBySeverity(findings);
-    const top = sorted.slice(0, limit);
-    console.log(`\n${divider("=")}`);
-    console.log(`TOP ${top.length} FINDINGS`);
-    console.log(divider("="));
-    for (let i = 0; i < top.length; i++) {
-        printFinding(top[i], i);
-    }
-    if (findings.length > limit) {
-        console.log(`\n${divider()}`);
-        console.log(`\x1b[90m... and ${findings.length - limit} more findings\x1b[0m`);
-    }
-    console.log("");
-}
-/**
- * Execute the explain command
- */
-export async function executeExplain(artifactPath, options) {
-    const absolutePath = resolvePath(artifactPath);
-    // Read artifact file
-    const content = readFileSync(absolutePath);
-    if (!content) {
-        console.error(`\x1b[31mError: Could not read file: ${absolutePath}\x1b[0m`);
-        return 1;
-    }
-    // Parse JSON
-    let json;
-    try {
-        json = JSON.parse(content);
-    }
-    catch {
-        console.error(`\x1b[31mError: Invalid JSON in file: ${absolutePath}\x1b[0m`);
-        return 1;
-    }
-    // Validate artifact
-    let artifact;
-    try {
-        artifact = validateArtifact(json);
-    }
-    catch (error) {
-        console.error(`\x1b[31mError: Invalid artifact format\x1b[0m`);
-        console.error(error);
-        return 1;
-    }
-    // Print report
-    printSummary(artifact);
-    printTopFindings(artifact, options.limit);
-    return 0;
-}
-/**
- * Register explain command with commander
- */
-export function registerExplainCommand(program) {
-    program
-        .command("explain <artifactPath>")
-        .description("Display a human-readable summary of a scan artifact")
-        .option("-l, --limit <number>", "Maximum findings to display", "5")
-        .action(async (artifactPath, options) => {
-        const limit = parseInt(options.limit, 10) || 5;
-        const exitCode = await executeExplain(artifactPath, { limit });
-        process.exit(exitCode);
-    });
-}

package/dist/commands/index.d.ts

@@ -1,7 +0,0 @@
-export { registerScanCommand, executeScan, type ScanOptions } from "./scan.js";
-export { registerExplainCommand, executeExplain } from "./explain.js";
-export { registerDemoArtifactCommand, executeDemoArtifact } from "./demo-artifact.js";
-export { registerIntentCommand, executeIntent, type IntentOptions } from "./intent.js";
-export { registerEvaluateCommand, executeEvaluate, type EvaluateOptions } from "./evaluate.js";
-export { registerWaiversCommand } from "./waivers.js";
-//# sourceMappingURL=index.d.ts.map

package/dist/commands/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/commands/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,KAAK,WAAW,EAAE,MAAM,WAAW,CAAC;AAC/E,OAAO,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACtE,OAAO,EAAE,2BAA2B,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACtF,OAAO,EAAE,qBAAqB,EAAE,aAAa,EAAE,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AACvF,OAAO,EAAE,uBAAuB,EAAE,eAAe,EAAE,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC;AAC/F,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC"}

package/dist/commands/index.js

@@ -1,6 +0,0 @@
-export { registerScanCommand, executeScan } from "./scan.js";
-export { registerExplainCommand, executeExplain } from "./explain.js";
-export { registerDemoArtifactCommand, executeDemoArtifact } from "./demo-artifact.js";
-export { registerIntentCommand, executeIntent } from "./intent.js";
-export { registerEvaluateCommand, executeEvaluate } from "./evaluate.js";
-export { registerWaiversCommand } from "./waivers.js";

package/dist/commands/intent.d.ts

@@ -1,21 +0,0 @@
-/**
- * Intent Command
- *
- * Generates a security intent map baseline for the codebase.
- * Useful for tracking drift over time.
- */
-import type { Command } from "commander";
-export interface IntentOptions {
-    out: string;
-    format: string;
-    repoName?: string;
-}
-/**
- * Execute the intent command
- */
-export declare function executeIntent(targetDir: string, options: IntentOptions): Promise<number>;
-/**
- * Register intent command with commander
- */
-export declare function registerIntentCommand(program: Command): void;
-//# sourceMappingURL=intent.d.ts.map

package/dist/commands/intent.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"intent.d.ts","sourceRoot":"","sources":["../../src/commands/intent.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAqBzC,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAuCD;;GAEG;AACH,wBAAsB,aAAa,CACjC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,MAAM,CAAC,CA8DjB;AA+ID;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAgB5D"}

package/dist/commands/intent.js

@@ -1,192 +0,0 @@
-/**
- * Intent Command
- *
- * Generates a security intent map baseline for the codebase.
- * Useful for tracking drift over time.
- */
-import path from "node:path";
-import { ARTIFACT_VERSION } from "@vibecheck/schema";
-import { writeFileSync, resolvePath } from "../utils/file-utils.js";
-import { hashPath } from "../utils/fingerprint.js";
-import { getGitInfo, getRepoName } from "../utils/git-info.js";
-import { buildScanContext } from "../scanners/index.js";
-import { buildRouteMap, buildMiddlewareMap, buildAllProofTraces, calculateCoverage, mineAllIntentClaims, } from "../phase3/index.js";
-/**
- * Execute the intent command
- */
-export async function executeIntent(targetDir, options) {
-    const absoluteTarget = resolvePath(targetDir);
-    console.log(`Mining intent map: ${absoluteTarget}`);
-    const startTime = Date.now();
-    // Build scan context
-    console.log("Building scan context...");
-    const context = await buildScanContext(absoluteTarget);
-    console.log(`Found ${context.fileIndex.allSourceFiles.length} source files`);
-    // Build Phase 3 maps
-    console.log("\nBuilding route map...");
-    const routeMap = buildRouteMap(context);
-    console.log(`  Found ${routeMap.length} routes`);
-    console.log("Building middleware map...");
-    const middlewareMap = buildMiddlewareMap(context);
-    console.log(`  Found ${middlewareMap.length} middleware configurations`);
-    console.log("Mining intent claims...");
-    const intentMap = mineAllIntentClaims(context, routeMap);
-    console.log(`  Found ${intentMap.length} intent claims`);
-    console.log("Building proof traces...");
-    const proofTraces = buildAllProofTraces(context, routeMap);
-    console.log(`  Built ${proofTraces.size} proof traces`);
-    console.log("Calculating coverage...");
-    const coverage = calculateCoverage(routeMap, proofTraces, middlewareMap);
-    const endTime = Date.now();
-    console.log(`\nCompleted in ${endTime - startTime}ms`);
-    // Create artifact
-    const artifact = createIntentArtifact(routeMap, middlewareMap, intentMap, proofTraces, coverage, absoluteTarget, options.repoName);
-    // Determine output path
-    let outputPath = options.out;
-    if (!path.isAbsolute(outputPath)) {
-        outputPath = resolvePath(absoluteTarget, outputPath);
-    }
-    // Write artifact
-    if (options.format === "json") {
-        writeFileSync(outputPath, JSON.stringify(artifact, null, 2));
-        console.log(`\nIntent map written to: ${outputPath}`);
-    }
-    // Print summary
-    printIntentSummary(artifact);
-    return 0;
-}
-/**
- * Create intent map artifact
- */
-function createIntentArtifact(routeMap, middlewareMap, intentMap, proofTraces, coverage, targetDir, repoName) {
-    const gitInfo = getGitInfo(targetDir);
-    const name = repoName ?? getRepoName(targetDir);
-    // Convert proofTraces Map to schema format
-    const proofTracesRecord = {};
-    for (const [key, value] of proofTraces) {
-        proofTracesRecord[key] = {
-            summary: value.authProven
-                ? "Auth proven"
-                : value.middlewareCovered
-                    ? "Protected by middleware"
-                    : "No protection proven",
-            nodes: value.steps.map((step) => ({
-                kind: "handler",
-                label: step.label,
-                file: step.file,
-                line: step.line,
-            })),
-        };
-    }
-    // Build middleware coverage
-    const allMatchers = middlewareMap.flatMap((m) => m.matchers);
-    const middlewareCoverage = routeMap.map((route) => {
-        const isRouteCovered = allMatchers.some((matcher) => {
-            const pattern = matcher.replace(/\*/g, ".*").replace(/\/:path\*/g, "/.*");
-            try {
-                return new RegExp(`^${pattern}`).test(route.path);
-            }
-            catch {
-                return route.path.startsWith(matcher.replace(/\/:path\*$/, ""));
-            }
-        });
-        return {
-            routeId: route.routeId,
-            covered: isRouteCovered,
-        };
-    });
-    // Calculate summary stats
-    const intentsByType = {};
-    const intentsBySource = {};
-    for (const intent of intentMap) {
-        intentsByType[intent.type] = (intentsByType[intent.type] || 0) + 1;
-        intentsBySource[intent.source] = (intentsBySource[intent.source] || 0) + 1;
-    }
-    return {
-        artifactVersion: ARTIFACT_VERSION,
-        generatedAt: new Date().toISOString(),
-        tool: {
-            name: "vibecheck",
-            version: "0.0.1",
-        },
-        repo: {
-            name,
-            rootPathHash: hashPath(targetDir),
-            git: gitInfo,
-        },
-        routeMap: { routes: routeMap },
-        middlewareMap: {
-            middlewareFile: middlewareMap[0]?.file,
-            matcher: allMatchers,
-            coverage: middlewareCoverage,
-        },
-        intentMap: { intents: intentMap },
-        proofTraces: proofTracesRecord,
-        coverage,
-        summary: {
-            totalRoutes: routeMap.length,
-            totalIntents: intentMap.length,
-            authCoveragePercent: Math.round(coverage.authCoverage * 100),
-            validationCoveragePercent: Math.round(coverage.validationCoverage * 100),
-            middlewareCoveragePercent: Math.round(coverage.middlewareCoverage * 100),
-            intentsByType,
-            intentsBySource,
-        },
-    };
-}
-/**
- * Print intent map summary
- */
-function printIntentSummary(artifact) {
-    const { summary, coverage } = artifact;
-    console.log("\n" + "=".repeat(60));
-    console.log("VibeCheck Intent Map Generated");
-    console.log("=".repeat(60));
-    console.log(`\nRoutes discovered: ${summary.totalRoutes}`);
-    console.log(`Intent claims found: ${summary.totalIntents}`);
-    console.log("\nCoverage metrics:");
-    console.log(`  Auth coverage: ${formatPercent(coverage.authCoverage)}`);
-    console.log(`  Validation coverage: ${formatPercent(coverage.validationCoverage)}`);
-    console.log(`  Middleware coverage: ${formatPercent(coverage.middlewareCoverage)}`);
-    if (summary.totalIntents > 0) {
-        console.log("\nIntents by type:");
-        for (const [type, count] of Object.entries(summary.intentsByType)) {
-            console.log(`  ${type}: ${count}`);
-        }
-        console.log("\nIntents by source:");
-        for (const [source, count] of Object.entries(summary.intentsBySource)) {
-            console.log(`  ${source}: ${count}`);
-        }
-    }
-    console.log("");
-}
-/**
- * Format percentage with color
- */
-function formatPercent(value) {
-    const percent = Math.round(value * 100);
-    let color = "\x1b[32m"; // Green
-    if (percent < 50) {
-        color = "\x1b[31m"; // Red
-    }
-    else if (percent < 80) {
-        color = "\x1b[33m"; // Yellow
-    }
-    return `${color}${percent}%\x1b[0m`;
-}
-/**
- * Register intent command with commander
- */
-export function registerIntentCommand(program) {
-    program
-        .command("intent [target]")
-        .description("Generate security intent map baseline")
-        .option("-o, --out <path>", "Output file path", "vibecheck-artifacts/intent-map.json")
-        .option("-f, --format <format>", "Output format", "json")
-        .option("--repo-name <name>", "Override repository name")
-        .action(async (target, options) => {
-        const targetDir = target ?? process.cwd();
-        const exitCode = await executeIntent(targetDir, options);
-        process.exit(exitCode);
-    });
-}

package/dist/commands/scan.d.ts

@@ -1,44 +0,0 @@
-import type { Command } from "commander";
-import { type Severity } from "@vibecheck/schema";
-/**
- * Valid output formats
- */
-export type OutputFormat = "json" | "sarif" | "both";
-/**
- * Valid fail-on thresholds
- */
-export type FailThreshold = "off" | Severity;
-/**
- * Scan command options
- */
-export interface ScanOptions {
-    /** Output file/directory path */
-    out: string;
-    /** Output format: json, sarif, or both */
-    format: OutputFormat;
-    /** Override repository name */
-    repoName?: string;
-    /** Fail threshold: off, info, low, medium, high, critical */
-    failOn: FailThreshold;
-    /** Only scan changed files (not implemented) */
-    changed: boolean;
-    /** Include route map in output (default: true) */
-    emitRouteMap: boolean;
-    /** Include intent claims in output (default: true) */
-    emitIntents: boolean;
-    /** Include proof traces in output (default: true) */
-    emitTraces: boolean;
-    /** Additional glob patterns to exclude */
-    exclude: string[];
-    /** Include test files in scan */
-    includeTests: boolean;
-}
-/**
- * Execute the scan command
- */
-export declare function executeScan(targetDir: string, options: ScanOptions): Promise<number>;
-/**
- * Register scan command with commander
- */
-export declare function registerScanCommand(program: Command): void;
-//# sourceMappingURL=scan.d.ts.map

package/dist/commands/scan.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"scan.d.ts","sourceRoot":"","sources":["../../src/commands/scan.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAML,KAAK,QAAQ,EACd,MAAM,mBAAmB,CAAC;AA0B3B;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;AAErD;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG,QAAQ,CAAC;AAE7C;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,iCAAiC;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,0CAA0C;IAC1C,MAAM,EAAE,YAAY,CAAC;IACrB,+BAA+B;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,6DAA6D;IAC7D,MAAM,EAAE,aAAa,CAAC;IACtB,gDAAgD;IAChD,OAAO,EAAE,OAAO,CAAC;IACjB,kDAAkD;IAClD,YAAY,EAAE,OAAO,CAAC;IACtB,sDAAsD;IACtD,WAAW,EAAE,OAAO,CAAC;IACrB,qDAAqD;IACrD,UAAU,EAAE,OAAO,CAAC;IACpB,0CAA0C;IAC1C,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,iCAAiC;IACjC,YAAY,EAAE,OAAO,CAAC;CACvB;AA0VD;;GAEG;AACH,wBAAsB,WAAW,CAC/B,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC,MAAM,CAAC,CAwMjB;AASD;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAkH1D"}