@vibe-assurance/cli 1.7.9 → 1.10.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vibe-assurance/cli",
-  "version": "1.7.9",
+  "version": "1.10.0",
   "description": "Vibe Assurance CLI - Connect AI coding agents to your governance platform via MCP",
   "main": "src/index.js",
   "bin": {

package/src/api/client.js

@@ -29,7 +29,7 @@ const API_BASE_URL = process.env.VIBE_API_URL || getEnvironmentUrl(DEFAULT_ENVIR
  * @returns {Promise<import('axios').AxiosInstance>}
  */
 async function createClient() {
-  const creds = await getCredentials();
+  let creds = await getCredentials();
   if (!creds || !creds.accessToken) {
     throw new Error('Not authenticated. Run: vibe login');
   }
@@ -37,13 +37,37 @@ async function createClient() {
   // CR-2026-061: Get API URL from stored environment
   const apiBaseUrl = await getApiBaseUrl();
 
+  // Pre-emptive token refresh: If token expires within 5 minutes, refresh now
+  // This avoids race conditions where the token expires during an API call
+  if (creds.expiresAt && creds.refreshToken) {
+    const expiresAt = new Date(creds.expiresAt);
+    const now = new Date();
+    const bufferMs = 5 * 60 * 1000; // 5 minutes
+
+    if (expiresAt.getTime() - bufferMs < now.getTime()) {
+      try {
+        const newTokens = await refreshToken(creds.refreshToken);
+        // Preserve existing credentials (environment, projectId, user info)
+        creds = {
+          ...creds,
+          ...newTokens
+        };
+        await storeCredentials(creds);
+      } catch (refreshError) {
+        // Pre-emptive refresh failed - will try again on 401
+        // Don't throw here, let the request proceed with old token
+        console.error('Pre-emptive token refresh failed, will retry on 401');
+      }
+    }
+  }
+
   // CR-2026-043: Get current project ID for scoping
   const projectId = await getProjectId();
 
   const headers = {
     'Authorization': `Bearer ${creds.accessToken}`,
     'Content-Type': 'application/json',
-    'User-Agent': 'vibe-cli/1.7.0'
+    'User-Agent': 'vibe-cli/1.10.0'
   };
 
   // CR-2026-043: Add project header if available
@@ -69,7 +93,14 @@ async function createClient() {
 
         try {
           const newTokens = await refreshToken(creds.refreshToken);
-          await storeCredentials(newTokens);
+
+          // CRITICAL: Preserve existing credentials (environment, projectId, user info)
+          // when storing new tokens. Only update token-related fields.
+          const currentCreds = await getCredentials();
+          await storeCredentials({
+            ...currentCreds,  // Preserve environment, projectId, username, email, role, etc.
+            ...newTokens      // Update accessToken, refreshToken, expiresAt
+          });
 
           // Update the failed request with new token
           originalRequest.headers['Authorization'] = `Bearer ${newTokens.accessToken}`;

package/src/mcp/tools.js

@@ -223,7 +223,7 @@ const tools = [
       properties: {
         type: {
           type: 'string',
-          enum: ['CR', 'RISK', 'VULNERABILITY', 'REPORT', 'POLICY', 'PLAN', 'ARCHITECTURE', 'CONFIG', 'SOP'],
+          enum: ['CR', 'RISK', 'VULNERABILITY', 'REPORT', 'STANDARD', 'PLAN', 'ARCHITECTURE', 'CONFIG'],
           description: 'Type of artifact'
         },
         artifactId: {
@@ -348,7 +348,7 @@ const tools = [
       properties: {
         type: {
           type: 'string',
-          enum: ['CR', 'RISK', 'VULNERABILITY', 'REPORT', 'POLICY', 'PLAN', 'ARCHITECTURE', 'CONFIG', 'SOP'],
+          enum: ['CR', 'RISK', 'VULNERABILITY', 'REPORT', 'STANDARD', 'PLAN', 'ARCHITECTURE', 'CONFIG'],
           description: 'Filter by artifact type. Use "PLAN" to find strategic plans.'
         },
         status: {
@@ -755,6 +755,10 @@ const tools = [
         location: {
           type: 'string',
           description: 'File path or component where vulnerability exists'
+        },
+        remediationPlanId: {
+          type: 'string',
+          description: 'Link to remediation plan (e.g., "RMP-VUL-001")'
         }
       },
       required: ['vulId', 'title', 'description', 'severity']
@@ -784,7 +788,7 @@ const tools = [
 
   {
     name: 'vibe_update_vulnerability',
-    description: 'Update a vulnerability\'s status, severity, or link it to a remediation CR.',
+    description: 'Update a vulnerability\'s status, severity, link it to a remediation CR, or link to a remediation plan.',
     inputSchema: {
       type: 'object',
       properties: {
@@ -805,6 +809,10 @@ const tools = [
         relatedCR: {
           type: 'string',
           description: 'Link to remediation CR (e.g., "CR-2026-042")'
+        },
+        remediationPlanId: {
+          type: 'string',
+          description: 'Link to remediation plan (e.g., "RMP-VUL-001")'
         }
       },
       required: ['vulId']
@@ -815,139 +823,19 @@ const tools = [
   },
 
   // ============================================================================
-  // SOP MANAGEMENT TOOLS (CR-2026-054)
-  // ============================================================================
-
-  {
-    name: 'vibe_list_sops',
-    description: 'List all Standard Operating Procedures (SOPs) for the project. SOPs define step-by-step procedures for operational tasks.',
-    inputSchema: {
-      type: 'object',
-      properties: {
-        status: {
-          type: 'string',
-          enum: ['Draft', 'Active', 'Completed', 'Closed'],
-          description: 'Filter by SOP status'
-        },
-        category: {
-          type: 'string',
-          description: 'Filter by category (e.g., "Security", "HR", "SDLC", "Change Management")'
-        }
-      }
-    },
-    handler: async (params = {}) => {
-      const query = new URLSearchParams();
-      if (params.status) query.set('status', params.status);
-      if (params.category) query.set('category', params.category);
-      const queryString = query.toString();
-      const path = queryString ? `/api/mcp/sops?${queryString}` : '/api/mcp/sops';
-      return await api.get(path);
-    }
-  },
-
-  {
-    name: 'vibe_store_sop',
-    description: 'Create a new Standard Operating Procedure (SOP). SOPs define step-by-step procedures for operational tasks like onboarding, offboarding, access reviews, etc.',
-    inputSchema: {
-      type: 'object',
-      properties: {
-        sopId: {
-          type: 'string',
-          description: 'Unique SOP ID (e.g., "SOP-001", "SOP-SDLC-001")'
-        },
-        title: {
-          type: 'string',
-          description: 'Title of the SOP (e.g., "Employee Onboarding Checklist")'
-        },
-        content: {
-          type: 'string',
-          description: 'Full SOP content in markdown format'
-        },
-        status: {
-          type: 'string',
-          enum: ['Draft', 'Active', 'Completed', 'Closed'],
-          description: 'SOP status (default: Active)'
-        },
-        metadata: {
-          type: 'object',
-          description: 'Additional metadata (e.g., category, version, owner)',
-          additionalProperties: true
-        }
-      },
-      required: ['sopId', 'title', 'content']
-    },
-    handler: async (params) => {
-      return await api.post('/api/mcp/sops', params);
-    }
-  },
-
-  {
-    name: 'vibe_get_sop',
-    description: 'Get a specific SOP by ID with full content.',
-    inputSchema: {
-      type: 'object',
-      properties: {
-        sopId: {
-          type: 'string',
-          description: 'The SOP ID to retrieve (e.g., "SOP-001")'
-        }
-      },
-      required: ['sopId']
-    },
-    handler: async ({ sopId }) => {
-      return await api.get(`/api/mcp/sops/${sopId}`);
-    }
-  },
-
-  {
-    name: 'vibe_update_sop',
-    description: 'Update an existing SOP\'s content, status, or metadata.',
-    inputSchema: {
-      type: 'object',
-      properties: {
-        sopId: {
-          type: 'string',
-          description: 'The SOP ID to update'
-        },
-        title: {
-          type: 'string',
-          description: 'Updated title'
-        },
-        content: {
-          type: 'string',
-          description: 'Updated content'
-        },
-        status: {
-          type: 'string',
-          enum: ['Draft', 'Active', 'Completed', 'Closed'],
-          description: 'Updated status'
-        },
-        metadata: {
-          type: 'object',
-          description: 'Updated metadata'
-        }
-      },
-      required: ['sopId']
-    },
-    handler: async ({ sopId, ...updates }) => {
-      return await api.put(`/api/mcp/sops/${sopId}`, updates);
-    }
-  },
-
-  // ============================================================================
-  // POLICY MANAGEMENT TOOLS (CR-2026-054)
+  // STANDARDS MANAGEMENT TOOLS (CR-2026-063: Renamed from Policies)
   // ============================================================================
 
   {
-    name: 'vibe_list_policies',
-    description: 'List all policies for the project. Policies define organizational rules and guidelines.',
+    name: 'vibe_list_standards',
+    description: 'List all standards for the project. Standards define organizational coding standards, security guidelines, and best practices.',
     inputSchema: {
       type: 'object',
       properties: {
         status: {
           type: 'string',
           enum: ['Draft', 'Active', 'Completed', 'Closed'],
-          description: 'Filter by policy status'
+          description: 'Filter by standard status'
         },
         category: {
           type: 'string',
@@ -960,33 +848,33 @@ const tools = [
       if (params.status) query.set('status', params.status);
       if (params.category) query.set('category', params.category);
       const queryString = query.toString();
-      const path = queryString ? `/api/mcp/policies?${queryString}` : '/api/mcp/policies';
+      const path = queryString ? `/api/mcp/standards?${queryString}` : '/api/mcp/standards';
       return await api.get(path);
     }
   },
 
   {
-    name: 'vibe_store_policy',
-    description: 'Create a new policy document. Policies define organizational rules and guidelines for security, HR, SDLC, etc.',
+    name: 'vibe_store_standard',
+    description: 'Create a new standard document. Standards define organizational coding standards, security guidelines, and best practices.',
     inputSchema: {
       type: 'object',
       properties: {
-        policyId: {
+        standardId: {
           type: 'string',
-          description: 'Unique policy ID (e.g., "POL-001", "POL-SEC-001")'
+          description: 'Unique standard ID (e.g., "STD-001", "STD-SEC-001")'
         },
         title: {
           type: 'string',
-          description: 'Title of the policy (e.g., "Information Security Policy")'
+          description: 'Title of the standard (e.g., "Secure Coding Standard")'
         },
         content: {
           type: 'string',
-          description: 'Full policy content in markdown format'
+          description: 'Full standard content in markdown format'
         },
         status: {
           type: 'string',
           enum: ['Draft', 'Active', 'Completed', 'Closed'],
-          description: 'Policy status (default: Active)'
+          description: 'Standard status (default: Active)'
         },
         metadata: {
           type: 'object',
@@ -994,40 +882,40 @@ const tools = [
           additionalProperties: true
         }
       },
-      required: ['policyId', 'title', 'content']
+      required: ['standardId', 'title', 'content']
     },
     handler: async (params) => {
-      return await api.post('/api/mcp/policies', params);
+      return await api.post('/api/mcp/standards', params);
     }
   },
 
   {
-    name: 'vibe_get_policy',
-    description: 'Get a specific policy by ID with full content.',
+    name: 'vibe_get_standard',
+    description: 'Get a specific standard by ID with full content.',
     inputSchema: {
       type: 'object',
       properties: {
-        policyId: {
+        standardId: {
           type: 'string',
-          description: 'The policy ID to retrieve (e.g., "POL-001")'
+          description: 'The standard ID to retrieve (e.g., "STD-001")'
         }
       },
-      required: ['policyId']
+      required: ['standardId']
     },
-    handler: async ({ policyId }) => {
-      return await api.get(`/api/mcp/policies/${policyId}`);
+    handler: async ({ standardId }) => {
+      return await api.get(`/api/mcp/standards/${standardId}`);
     }
   },
 
   {
-    name: 'vibe_update_policy',
-    description: 'Update an existing policy\'s content, status, or metadata.',
+    name: 'vibe_update_standard',
+    description: 'Update an existing standard\'s content, status, or metadata.',
     inputSchema: {
       type: 'object',
       properties: {
-        policyId: {
+        standardId: {
           type: 'string',
-          description: 'The policy ID to update'
+          description: 'The standard ID to update'
         },
         title: {
           type: 'string',
@@ -1047,10 +935,10 @@ const tools = [
           description: 'Updated metadata'
         }
       },
-      required: ['policyId']
+      required: ['standardId']
     },
-    handler: async ({ policyId, ...updates }) => {
-      return await api.put(`/api/mcp/policies/${policyId}`, updates);
+    handler: async ({ standardId, ...updates }) => {
+      return await api.put(`/api/mcp/standards/${standardId}`, updates);
     }
   }
 ];