@vibe-assurance/cli 1.7.7 → 1.10.0

package/README.md

@@ -55,15 +55,6 @@ npm install -g @vibe-assurance/cli
 
 Once configured, your AI coding agent has access to these tools:
 
-### Roles (AI Analyst Prompts)
-
-| Tool | Description |
-|------|-------------|
-| `vibe_get_role` | Get an AI analyst role prompt by ID |
-| `vibe_list_roles` | List all available roles |
-| `vibe_update_role` | Update a role's system prompt |
-| `vibe_create_role` | Create a new custom role |
-
 ### Context & Templates
 
 | Tool | Description |
@@ -91,10 +82,19 @@ Once configured, your AI coding agent has access to these tools:
 | `RISK` | Risk Register Entries | RISK-001 |
 | `VULNERABILITY` | Security Vulnerabilities | VUL-059 |
 | `REPORT` | Security/Audit Reports | RPT-2026-001 |
-| `POLICY` | Governance Policies | POL-001 |
 | `PLAN` | Strategic & Technical Plans | PLAN-2026-002 |
 | `CONFIG` | Configuration Documentation | CFG-001 |
-| `SOP` | Standard Operating Procedures | SOP-001 |
+| `ARCHITECTURE` | Architecture Documentation | ARCH-001 |
+
+### Strategic Plans
+
+| Tool | Description |
+|------|-------------|
+| `vibe_get_strategic_plans` | List strategic plans (filter by status) |
+| `vibe_store_plan` | Create a new strategic plan |
+| `vibe_update_plan` | Update plan content, title, or metadata |
+| `vibe_update_plan_status` | Update plan status (Draft/Active/Completed/Closed) |
+| `vibe_delete_plan` | Delete a strategic plan |
 
 ### Risk Register
 
@@ -114,26 +114,6 @@ Once configured, your AI coding agent has access to these tools:
 | `vibe_get_vulnerability` | Get specific vulnerability by ID |
 | `vibe_update_vulnerability` | Update vulnerability status or link to CR |
 
-### Strategic Plans
-
-| Tool | Description |
-|------|-------------|
-| `vibe_get_strategic_plans` | List strategic plans (PLAN artifacts) |
-| `vibe_update_plan_status` | Update plan status (Draft/Active/Completed/Closed) |
-
-### Policies & SOPs
-
-| Tool | Description |
-|------|-------------|
-| `vibe_list_policies` | List project's policies |
-| `vibe_store_policy` | Create a new policy |
-| `vibe_get_policy` | Get specific policy by ID |
-| `vibe_update_policy` | Update policy content or metadata |
-| `vibe_list_sops` | List project's SOPs |
-| `vibe_store_sop` | Create a new SOP |
-| `vibe_get_sop` | Get specific SOP by ID |
-| `vibe_update_sop` | Update SOP content or metadata |
-
 ## Example Session
 
 ```
@@ -142,7 +122,6 @@ User: Create a change request for adding user authentication
 AI Agent: I'll help you create a change request. Let me get your context first.
 
 [Calls vibe_get_context]
-[Calls vibe_get_role("implementation-planner")]
 [Calls vibe_get_template("change-request")]
 
 Based on your governance context, your next CR ID is CR-2026-001.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vibe-assurance/cli",
-  "version": "1.7.7",
+  "version": "1.10.0",
   "description": "Vibe Assurance CLI - Connect AI coding agents to your governance platform via MCP",
   "main": "src/index.js",
   "bin": {

package/src/api/client.js

@@ -29,7 +29,7 @@ const API_BASE_URL = process.env.VIBE_API_URL || getEnvironmentUrl(DEFAULT_ENVIR
  * @returns {Promise<import('axios').AxiosInstance>}
  */
 async function createClient() {
-  const creds = await getCredentials();
+  let creds = await getCredentials();
   if (!creds || !creds.accessToken) {
     throw new Error('Not authenticated. Run: vibe login');
   }
@@ -37,13 +37,37 @@ async function createClient() {
   // CR-2026-061: Get API URL from stored environment
   const apiBaseUrl = await getApiBaseUrl();
 
+  // Pre-emptive token refresh: If token expires within 5 minutes, refresh now
+  // This avoids race conditions where the token expires during an API call
+  if (creds.expiresAt && creds.refreshToken) {
+    const expiresAt = new Date(creds.expiresAt);
+    const now = new Date();
+    const bufferMs = 5 * 60 * 1000; // 5 minutes
+
+    if (expiresAt.getTime() - bufferMs < now.getTime()) {
+      try {
+        const newTokens = await refreshToken(creds.refreshToken);
+        // Preserve existing credentials (environment, projectId, user info)
+        creds = {
+          ...creds,
+          ...newTokens
+        };
+        await storeCredentials(creds);
+      } catch (refreshError) {
+        // Pre-emptive refresh failed - will try again on 401
+        // Don't throw here, let the request proceed with old token
+        console.error('Pre-emptive token refresh failed, will retry on 401');
+      }
+    }
+  }
+
   // CR-2026-043: Get current project ID for scoping
   const projectId = await getProjectId();
 
   const headers = {
     'Authorization': `Bearer ${creds.accessToken}`,
     'Content-Type': 'application/json',
-    'User-Agent': 'vibe-cli/1.7.0'
+    'User-Agent': 'vibe-cli/1.10.0'
   };
 
   // CR-2026-043: Add project header if available
@@ -69,7 +93,14 @@ async function createClient() {
 
         try {
           const newTokens = await refreshToken(creds.refreshToken);
-          await storeCredentials(newTokens);
+
+          // CRITICAL: Preserve existing credentials (environment, projectId, user info)
+          // when storing new tokens. Only update token-related fields.
+          const currentCreds = await getCredentials();
+          await storeCredentials({
+            ...currentCreds,  // Preserve environment, projectId, username, email, role, etc.
+            ...newTokens      // Update accessToken, refreshToken, expiresAt
+          });
 
           // Update the failed request with new token
           originalRequest.headers['Authorization'] = `Bearer ${newTokens.accessToken}`;

package/src/commands/login.js

@@ -79,7 +79,7 @@ async function login() {
 
             // For license errors, redirect to pricing page instead of showing error HTML
             if (error === 'cli_access_denied') {
-              res.writeHead(302, { 'Location': 'https://vibeassurance.app/pricing' });
+              res.writeHead(302, { 'Location': 'https://vibeassurance.app/pricing.html' });
               res.end();
             } else {
               res.writeHead(400, { 'Content-Type': 'text/html' });

package/src/mcp/tools.js

@@ -223,7 +223,7 @@ const tools = [
       properties: {
         type: {
           type: 'string',
-          enum: ['CR', 'RISK', 'VULNERABILITY', 'REPORT', 'POLICY', 'PLAN', 'ARCHITECTURE', 'CONFIG', 'SOP'],
+          enum: ['CR', 'RISK', 'VULNERABILITY', 'REPORT', 'STANDARD', 'PLAN', 'ARCHITECTURE', 'CONFIG'],
           description: 'Type of artifact'
         },
         artifactId: {
@@ -348,7 +348,7 @@ const tools = [
       properties: {
         type: {
           type: 'string',
-          enum: ['CR', 'RISK', 'VULNERABILITY', 'REPORT', 'POLICY', 'PLAN', 'ARCHITECTURE', 'CONFIG', 'SOP'],
+          enum: ['CR', 'RISK', 'VULNERABILITY', 'REPORT', 'STANDARD', 'PLAN', 'ARCHITECTURE', 'CONFIG'],
           description: 'Filter by artifact type. Use "PLAN" to find strategic plans.'
         },
         status: {
@@ -435,6 +435,84 @@ const tools = [
     }
   },
 
+  {
+    name: 'vibe_store_plan',
+    description: 'Create a new strategic plan. Plans contain CR roadmaps for implementing features or initiatives.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        planId: {
+          type: 'string',
+          description: 'Unique plan ID (e.g., "PLAN-2026-001")'
+        },
+        title: {
+          type: 'string',
+          description: 'Title of the plan (e.g., "Authentication System Overhaul")'
+        },
+        content: {
+          type: 'string',
+          description: 'Full plan content in markdown format (include CR roadmap table)'
+        },
+        status: {
+          type: 'string',
+          enum: ['Draft', 'Active', 'Completed', 'Closed'],
+          description: 'Plan status (default: Draft)'
+        },
+        metadata: {
+          type: 'object',
+          description: 'Additional metadata (e.g., priority, target date)',
+          additionalProperties: true
+        }
+      },
+      required: ['planId', 'title', 'content']
+    },
+    handler: async (params) => {
+      return await api.post('/api/mcp/artifacts', {
+        type: 'PLAN',
+        artifactId: params.planId,
+        title: params.title,
+        content: params.content,
+        status: params.status || 'Draft',
+        metadata: params.metadata
+      });
+    }
+  },
+
+  {
+    name: 'vibe_update_plan',
+    description: 'Update a strategic plan\'s content, title, status, or metadata.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        planId: {
+          type: 'string',
+          description: 'The plan artifact ID (e.g., "PLAN-2026-001")'
+        },
+        title: {
+          type: 'string',
+          description: 'Updated title'
+        },
+        content: {
+          type: 'string',
+          description: 'Updated content'
+        },
+        status: {
+          type: 'string',
+          enum: ['Draft', 'Active', 'Completed', 'Closed'],
+          description: 'Updated status'
+        },
+        metadata: {
+          type: 'object',
+          description: 'Updated metadata'
+        }
+      },
+      required: ['planId']
+    },
+    handler: async ({ planId, ...updates }) => {
+      return await api.put(`/api/mcp/artifacts/${planId}`, updates);
+    }
+  },
+
   {
     name: 'vibe_update_plan_status',
     description: 'Update a strategic plan\'s status. Use when all CRs from a plan are complete to mark it as Completed.',
@@ -458,6 +536,24 @@ const tools = [
     }
   },
 
+  {
+    name: 'vibe_delete_plan',
+    description: 'Delete a strategic plan. This is permanent and cannot be undone.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        planId: {
+          type: 'string',
+          description: 'The plan artifact ID to delete (e.g., "PLAN-2026-001")'
+        }
+      },
+      required: ['planId']
+    },
+    handler: async ({ planId }) => {
+      return await api.delete(`/api/mcp/artifacts/${planId}`);
+    }
+  },
+
   // ============================================================================
   // RISK MANAGEMENT TOOLS
   // ============================================================================
@@ -659,6 +755,10 @@ const tools = [
         location: {
           type: 'string',
           description: 'File path or component where vulnerability exists'
+        },
+        remediationPlanId: {
+          type: 'string',
+          description: 'Link to remediation plan (e.g., "RMP-VUL-001")'
         }
       },
       required: ['vulId', 'title', 'description', 'severity']
@@ -688,7 +788,7 @@ const tools = [
 
   {
     name: 'vibe_update_vulnerability',
-    description: 'Update a vulnerability\'s status, severity, or link it to a remediation CR.',
+    description: 'Update a vulnerability\'s status, severity, link it to a remediation CR, or link to a remediation plan.',
     inputSchema: {
       type: 'object',
       properties: {
@@ -709,6 +809,10 @@ const tools = [
         relatedCR: {
           type: 'string',
           description: 'Link to remediation CR (e.g., "CR-2026-042")'
+        },
+        remediationPlanId: {
+          type: 'string',
+          description: 'Link to remediation plan (e.g., "RMP-VUL-001")'
         }
       },
       required: ['vulId']
@@ -719,139 +823,19 @@ const tools = [
   },
 
   // ============================================================================
-  // SOP MANAGEMENT TOOLS (CR-2026-054)
-  // ============================================================================
-
-  {
-    name: 'vibe_list_sops',
-    description: 'List all Standard Operating Procedures (SOPs) for the project. SOPs define step-by-step procedures for operational tasks.',
-    inputSchema: {
-      type: 'object',
-      properties: {
-        status: {
-          type: 'string',
-          enum: ['Draft', 'Active', 'Completed', 'Closed'],
-          description: 'Filter by SOP status'
-        },
-        category: {
-          type: 'string',
-          description: 'Filter by category (e.g., "Security", "HR", "SDLC", "Change Management")'
-        }
-      }
-    },
-    handler: async (params = {}) => {
-      const query = new URLSearchParams();
-      if (params.status) query.set('status', params.status);
-      if (params.category) query.set('category', params.category);
-      const queryString = query.toString();
-      const path = queryString ? `/api/mcp/sops?${queryString}` : '/api/mcp/sops';
-      return await api.get(path);
-    }
-  },
-
-  {
-    name: 'vibe_store_sop',
-    description: 'Create a new Standard Operating Procedure (SOP). SOPs define step-by-step procedures for operational tasks like onboarding, offboarding, access reviews, etc.',
-    inputSchema: {
-      type: 'object',
-      properties: {
-        sopId: {
-          type: 'string',
-          description: 'Unique SOP ID (e.g., "SOP-001", "SOP-SDLC-001")'
-        },
-        title: {
-          type: 'string',
-          description: 'Title of the SOP (e.g., "Employee Onboarding Checklist")'
-        },
-        content: {
-          type: 'string',
-          description: 'Full SOP content in markdown format'
-        },
-        status: {
-          type: 'string',
-          enum: ['Draft', 'Active', 'Completed', 'Closed'],
-          description: 'SOP status (default: Active)'
-        },
-        metadata: {
-          type: 'object',
-          description: 'Additional metadata (e.g., category, version, owner)',
-          additionalProperties: true
-        }
-      },
-      required: ['sopId', 'title', 'content']
-    },
-    handler: async (params) => {
-      return await api.post('/api/mcp/sops', params);
-    }
-  },
-
-  {
-    name: 'vibe_get_sop',
-    description: 'Get a specific SOP by ID with full content.',
-    inputSchema: {
-      type: 'object',
-      properties: {
-        sopId: {
-          type: 'string',
-          description: 'The SOP ID to retrieve (e.g., "SOP-001")'
-        }
-      },
-      required: ['sopId']
-    },
-    handler: async ({ sopId }) => {
-      return await api.get(`/api/mcp/sops/${sopId}`);
-    }
-  },
-
-  {
-    name: 'vibe_update_sop',
-    description: 'Update an existing SOP\'s content, status, or metadata.',
-    inputSchema: {
-      type: 'object',
-      properties: {
-        sopId: {
-          type: 'string',
-          description: 'The SOP ID to update'
-        },
-        title: {
-          type: 'string',
-          description: 'Updated title'
-        },
-        content: {
-          type: 'string',
-          description: 'Updated content'
-        },
-        status: {
-          type: 'string',
-          enum: ['Draft', 'Active', 'Completed', 'Closed'],
-          description: 'Updated status'
-        },
-        metadata: {
-          type: 'object',
-          description: 'Updated metadata'
-        }
-      },
-      required: ['sopId']
-    },
-    handler: async ({ sopId, ...updates }) => {
-      return await api.put(`/api/mcp/sops/${sopId}`, updates);
-    }
-  },
-
-  // ============================================================================
-  // POLICY MANAGEMENT TOOLS (CR-2026-054)
+  // STANDARDS MANAGEMENT TOOLS (CR-2026-063: Renamed from Policies)
   // ============================================================================
 
   {
-    name: 'vibe_list_policies',
-    description: 'List all policies for the project. Policies define organizational rules and guidelines.',
+    name: 'vibe_list_standards',
+    description: 'List all standards for the project. Standards define organizational coding standards, security guidelines, and best practices.',
     inputSchema: {
       type: 'object',
       properties: {
         status: {
           type: 'string',
           enum: ['Draft', 'Active', 'Completed', 'Closed'],
-          description: 'Filter by policy status'
+          description: 'Filter by standard status'
         },
         category: {
           type: 'string',
@@ -864,33 +848,33 @@ const tools = [
       if (params.status) query.set('status', params.status);
       if (params.category) query.set('category', params.category);
       const queryString = query.toString();
-      const path = queryString ? `/api/mcp/policies?${queryString}` : '/api/mcp/policies';
+      const path = queryString ? `/api/mcp/standards?${queryString}` : '/api/mcp/standards';
       return await api.get(path);
     }
   },
 
   {
-    name: 'vibe_store_policy',
-    description: 'Create a new policy document. Policies define organizational rules and guidelines for security, HR, SDLC, etc.',
+    name: 'vibe_store_standard',
+    description: 'Create a new standard document. Standards define organizational coding standards, security guidelines, and best practices.',
     inputSchema: {
       type: 'object',
       properties: {
-        policyId: {
+        standardId: {
           type: 'string',
-          description: 'Unique policy ID (e.g., "POL-001", "POL-SEC-001")'
+          description: 'Unique standard ID (e.g., "STD-001", "STD-SEC-001")'
         },
         title: {
           type: 'string',
-          description: 'Title of the policy (e.g., "Information Security Policy")'
+          description: 'Title of the standard (e.g., "Secure Coding Standard")'
         },
         content: {
           type: 'string',
-          description: 'Full policy content in markdown format'
+          description: 'Full standard content in markdown format'
         },
         status: {
           type: 'string',
           enum: ['Draft', 'Active', 'Completed', 'Closed'],
-          description: 'Policy status (default: Active)'
+          description: 'Standard status (default: Active)'
         },
         metadata: {
           type: 'object',
@@ -898,40 +882,40 @@ const tools = [
           additionalProperties: true
         }
       },
-      required: ['policyId', 'title', 'content']
+      required: ['standardId', 'title', 'content']
     },
     handler: async (params) => {
-      return await api.post('/api/mcp/policies', params);
+      return await api.post('/api/mcp/standards', params);
     }
   },
 
   {
-    name: 'vibe_get_policy',
-    description: 'Get a specific policy by ID with full content.',
+    name: 'vibe_get_standard',
+    description: 'Get a specific standard by ID with full content.',
     inputSchema: {
       type: 'object',
       properties: {
-        policyId: {
+        standardId: {
           type: 'string',
-          description: 'The policy ID to retrieve (e.g., "POL-001")'
+          description: 'The standard ID to retrieve (e.g., "STD-001")'
         }
       },
-      required: ['policyId']
+      required: ['standardId']
     },
-    handler: async ({ policyId }) => {
-      return await api.get(`/api/mcp/policies/${policyId}`);
+    handler: async ({ standardId }) => {
+      return await api.get(`/api/mcp/standards/${standardId}`);
     }
   },
 
   {
-    name: 'vibe_update_policy',
-    description: 'Update an existing policy\'s content, status, or metadata.',
+    name: 'vibe_update_standard',
+    description: 'Update an existing standard\'s content, status, or metadata.',
     inputSchema: {
       type: 'object',
       properties: {
-        policyId: {
+        standardId: {
           type: 'string',
-          description: 'The policy ID to update'
+          description: 'The standard ID to update'
         },
         title: {
           type: 'string',
@@ -951,10 +935,10 @@ const tools = [
           description: 'Updated metadata'
         }
       },
-      required: ['policyId']
+      required: ['standardId']
     },
-    handler: async ({ policyId, ...updates }) => {
-      return await api.put(`/api/mcp/policies/${policyId}`, updates);
+    handler: async ({ standardId, ...updates }) => {
+      return await api.put(`/api/mcp/standards/${standardId}`, updates);
     }
   }
 ];