@vibe-validate/cli 0.17.6-rc.2 → 0.18.0-rc.1

package/dist/services/watch-pr-orchestrator.js

@@ -0,0 +1,420 @@
+/**
+ * WatchPROrchestrator - Coordinate all components to build complete WatchPRResult
+ *
+ * Responsibilities:
+ * - Coordinate data fetching (PR metadata, checks, history, changes)
+ * - Extract errors from check logs (matrix + non-matrix modes)
+ * - Extract external check details (codecov, SonarCloud, etc.)
+ * - Build complete WatchPRResult with validation
+ * - Generate intelligent guidance
+ * - Handle caching (save/retrieve results)
+ * - Select output format (YAML on failure, text on success)
+ *
+ * @packageDocumentation
+ */
+import { CacheManager } from './cache-manager.js';
+import { CodecovExtractor, ExternalExtractorRegistry, SonarCloudExtractor, } from './external-check-extractor.js';
+import { ExtractionModeDetector } from './extraction-mode-detector.js';
+import { GitHubFetcher } from './github-fetcher.js';
+import { HistorySummaryBuilder } from './history-summary-builder.js';
+/**
+ * WatchPROrchestrator - Build complete WatchPRResult
+ */
+export class WatchPROrchestrator {
+    owner;
+    repo;
+    fetcher;
+    historyBuilder;
+    extractionDetector;
+    externalCheckExtractor;
+    cacheManager;
+    constructor(owner, repo) {
+        this.owner = owner;
+        this.repo = repo;
+        this.fetcher = new GitHubFetcher(owner, repo);
+        this.historyBuilder = new HistorySummaryBuilder(owner, repo);
+        this.extractionDetector = new ExtractionModeDetector();
+        // Initialize external check extractor registry
+        this.externalCheckExtractor = new ExternalExtractorRegistry();
+        this.externalCheckExtractor.register(new CodecovExtractor());
+        this.externalCheckExtractor.register(new SonarCloudExtractor());
+    }
+    /**
+     * Build complete WatchPRResult
+     *
+     * @param prNumber - PR number
+     * @param options - Options (useCache, forceFetch)
+     * @returns Complete WatchPRResult
+     */
+    // eslint-disable-next-line sonarjs/cognitive-complexity
+    async buildResult(prNumber, options = {}) {
+        const { useCache = true } = options;
+        // Initialize cache manager if caching enabled (for logs only)
+        if (useCache && !this.cacheManager) {
+            this.cacheManager = new CacheManager(`${this.owner}/${this.repo}`, prNumber);
+        }
+        // Always fetch fresh PR metadata and checks from GitHub
+        // Cache is ONLY used for expensive log downloads, NOT for status
+        const prMetadata = await this.fetcher.fetchPRDetails(prNumber);
+        // Fetch checks
+        const checks = await this.fetcher.fetchChecks(prNumber);
+        // Classify checks into GitHub Actions vs external
+        const githubActions = [];
+        const rawExternalChecks = [];
+        for (const check of checks) {
+            if (check.type === 'github_action') {
+                // GitHub Action check - may have extraction
+                if (!check.run_id ||
+                    !check.workflow ||
+                    !check.started_at ||
+                    !check.duration) {
+                    continue; // Skip invalid checks
+                }
+                const actionCheck = {
+                    name: check.name,
+                    status: check.status,
+                    conclusion: check.conclusion,
+                    run_id: check.run_id,
+                    workflow: check.workflow,
+                    started_at: check.started_at,
+                    duration: check.duration,
+                };
+                // Try to extract errors if check failed
+                if (check.conclusion === 'failure' && check.run_id) {
+                    // Use retry logic to handle GitHub API race condition (Issue #4)
+                    const logs = await this.fetchLogsWithRetry(check.run_id);
+                    if (logs) {
+                        const extraction = await this.extractionDetector.detectAndExtract(actionCheck, logs);
+                        if (extraction) {
+                            actionCheck.extraction = extraction;
+                        }
+                        // Save logs to cache
+                        if (this.cacheManager) {
+                            await this.cacheManager.saveLog(check.run_id, logs);
+                            if (extraction) {
+                                await this.cacheManager.saveExtraction(check.run_id, extraction);
+                            }
+                        }
+                    }
+                    // If logs are null, gracefully continue without extraction
+                    // No noisy error output (Issue #4 fix)
+                }
+                githubActions.push(actionCheck);
+            }
+            else {
+                // External check - will extract later
+                if (!check.url) {
+                    continue; // Skip invalid checks
+                }
+                rawExternalChecks.push({
+                    name: check.name,
+                    status: check.status,
+                    conclusion: check.conclusion,
+                    url: check.url,
+                    provider: check.provider,
+                });
+            }
+        }
+        // Extract details from external checks (all at once)
+        const externalChecks = await this.externalCheckExtractor.extractAll(rawExternalChecks);
+        // Order checks: failed first (newspaper philosophy)
+        const orderedGitHubActions = this.orderChecks(githubActions);
+        const orderedExternalChecks = this.orderExternalChecks(externalChecks);
+        // Calculate check counts
+        const totalChecks = githubActions.length + externalChecks.length;
+        const passedChecks = githubActions.filter((c) => c.conclusion === 'success').length +
+            externalChecks.filter((c) => c.conclusion === 'success').length;
+        const failedChecks = githubActions.filter((c) => c.conclusion === 'failure').length +
+            externalChecks.filter((c) => c.conclusion === 'failure').length;
+        const pendingChecks = githubActions.filter((c) => c.status !== 'completed').length +
+            externalChecks.filter((c) => c.status !== 'completed').length;
+        // Fetch history summary
+        const historySummary = await this.historyBuilder.buildSummary(prMetadata.branch);
+        // Fetch file changes
+        const changes = await this.fetcher.fetchFileChanges(prNumber);
+        // Determine overall status
+        let status = 'passed';
+        if (failedChecks > 0) {
+            status = 'failed';
+        }
+        else if (pendingChecks > 0) {
+            status = 'pending';
+        }
+        // Generate guidance
+        const guidance = this.generateGuidance(status, orderedGitHubActions, orderedExternalChecks, prMetadata.mergeable);
+        // Build result
+        const result = {
+            pr: prMetadata,
+            status,
+            checks: {
+                total: totalChecks,
+                passed: passedChecks,
+                failed: failedChecks,
+                pending: pendingChecks,
+                history_summary: historySummary.total_runs > 0 ? historySummary : undefined,
+                github_actions: orderedGitHubActions,
+                external_checks: orderedExternalChecks,
+            },
+            changes,
+            guidance,
+            // Note: cache field removed - will be added back when actually needed
+        };
+        // Note: We do NOT cache the result itself - only logs are cached
+        // This ensures PR status is always fresh from GitHub
+        return result;
+    }
+    /**
+     * Build result for a specific run ID
+     *
+     * Useful for watching specific failed runs to test extraction.
+     * Does not use history summary (since it's a single run).
+     *
+     * @param prNumber - PR number
+     * @param runId - GitHub run ID
+     * @param options - Options (useCache)
+     * @returns WatchPRResult with single check
+     */
+    async buildResultForRun(prNumber, runId, options = {}) {
+        const { useCache = false } = options;
+        // Initialize cache manager if caching enabled
+        if (useCache && !this.cacheManager) {
+            this.cacheManager = new CacheManager(`${this.owner}/${this.repo}`, prNumber);
+        }
+        // Fetch PR metadata (still needed for context)
+        const prMetadata = await this.fetcher.fetchPRDetails(prNumber);
+        // Fetch specific run details
+        const runDetails = await this.fetcher.fetchRunDetails(runId);
+        // Build GitHub Action check from run details
+        const actionCheck = {
+            name: runDetails.name,
+            status: runDetails.status,
+            conclusion: runDetails.conclusion,
+            run_id: runDetails.run_id,
+            workflow: runDetails.workflow,
+            started_at: runDetails.started_at,
+            duration: runDetails.duration,
+        };
+        // Try to extract errors from logs (with retry logic for Issue #4)
+        const logs = await this.fetchLogsWithRetry(runId);
+        if (logs) {
+            const extraction = await this.extractionDetector.detectAndExtract(actionCheck, logs);
+            if (extraction) {
+                actionCheck.extraction = extraction;
+            }
+            // Save logs to cache (extraction can be re-run later)
+            if (this.cacheManager) {
+                await this.cacheManager.saveLog(runId, logs);
+                if (extraction) {
+                    await this.cacheManager.saveExtraction(runId, extraction);
+                }
+            }
+        }
+        // If logs are null, gracefully continue without extraction
+        // No noisy error output (Issue #4 fix)
+        // Fetch file changes (for context)
+        const changes = await this.fetcher.fetchFileChanges(prNumber);
+        // Determine status from the single check
+        let status = 'passed';
+        if (actionCheck.conclusion === 'failure') {
+            status = 'failed';
+        }
+        else if (actionCheck.status === 'in_progress' || actionCheck.status === 'queued') {
+            status = 'pending';
+        }
+        // Calculate check counts (single check)
+        const totalChecks = 1;
+        const passedChecks = actionCheck.conclusion === 'success' ? 1 : 0;
+        const failedChecks = actionCheck.conclusion === 'failure' ? 1 : 0;
+        const pendingChecks = actionCheck.status === 'in_progress' || actionCheck.status === 'queued' ? 1 : 0;
+        // Generate guidance (simplified for single run)
+        const guidance = this.generateGuidance(status, [actionCheck], [], prMetadata.mergeable);
+        // Build result
+        const result = {
+            pr: prMetadata,
+            status,
+            checks: {
+                total: totalChecks,
+                passed: passedChecks,
+                failed: failedChecks,
+                pending: pendingChecks,
+                github_actions: [actionCheck],
+                external_checks: [],
+            },
+            changes,
+            guidance,
+            // Note: cache field removed - will be added back when actually needed
+        };
+        // Don't cache metadata for single-run mode (historical runs are immutable)
+        // But logs and extractions are already cached above
+        return result;
+    }
+    /**
+     * Get priority for check ordering (lower is higher priority)
+     */
+    getCheckPriority(conclusion, status) {
+        if (conclusion === 'failure')
+            return 0;
+        if (status !== 'completed')
+            return 1;
+        if (conclusion === 'success')
+            return 2;
+        return 3;
+    }
+    /**
+     * Order checks: failed first, then pending, then passed
+     *
+     * @param checks - GitHub Action checks
+     * @returns Ordered checks
+     */
+    orderChecks(checks) {
+        return checks.sort((a, b) => {
+            return this.getCheckPriority(a.conclusion, a.status) - this.getCheckPriority(b.conclusion, b.status);
+        });
+    }
+    /**
+     * Order external checks: failed first, then pending, then passed
+     *
+     * @param checks - External checks
+     * @returns Ordered checks
+     */
+    // eslint-disable-next-line sonarjs/no-identical-functions
+    orderExternalChecks(checks) {
+        return checks.sort((a, b) => {
+            return this.getCheckPriority(a.conclusion, a.status) - this.getCheckPriority(b.conclusion, b.status);
+        });
+    }
+    /**
+     * Generate intelligent guidance based on check results
+     *
+     * @param status - Overall status
+     * @param githubActions - GitHub Action checks
+     * @param externalChecks - External checks
+     * @param mergeable - Is PR mergeable?
+     * @returns Guidance with next steps
+     */
+    generateGuidance(status, githubActions, externalChecks, mergeable) {
+        const nextSteps = [];
+        if (status === 'failed') {
+            // Find failed checks
+            const failedGitHubActions = githubActions.filter((c) => c.conclusion === 'failure');
+            const failedExternalChecks = externalChecks.filter((c) => c.conclusion === 'failure');
+            // Add next steps for failed GitHub Actions
+            for (const check of failedGitHubActions) {
+                nextSteps.push({
+                    action: `Fix ${check.name} failure`,
+                    url: `https://github.com/${this.owner}/${this.repo}/actions/runs/${check.run_id}`,
+                    severity: 'error',
+                    reason: check.extraction
+                        ? `${check.extraction.totalErrors} error(s) detected`
+                        : 'Check failed',
+                });
+            }
+            // Add next steps for failed external checks
+            for (const check of failedExternalChecks) {
+                nextSteps.push({
+                    action: `Fix ${check.name} failure`,
+                    url: check.url,
+                    severity: check.extracted?.severity ?? 'error',
+                    reason: check.extracted?.summary ?? 'Check failed',
+                });
+            }
+            return {
+                status: 'failed',
+                blocking: !mergeable,
+                severity: 'error',
+                summary: `${failedGitHubActions.length + failedExternalChecks.length} check(s) failed`,
+                next_steps: nextSteps,
+            };
+        }
+        if (status === 'pending') {
+            return {
+                status: 'pending',
+                blocking: false,
+                severity: 'info',
+                summary: 'Checks are still running',
+                next_steps: [
+                    {
+                        action: 'Wait for checks to complete',
+                        severity: 'info',
+                    },
+                ],
+            };
+        }
+        // Passed
+        return {
+            status: 'passed',
+            blocking: false,
+            severity: 'info',
+            summary: 'All checks passed',
+            next_steps: mergeable
+                ? [
+                    {
+                        action: 'Ready to merge',
+                        severity: 'info',
+                    },
+                ]
+                : [
+                    {
+                        action: 'Resolve merge conflicts',
+                        severity: 'warning',
+                        reason: 'PR is not mergeable',
+                    },
+                ],
+        };
+    }
+    // buildCacheInfo() removed - cache field will be added back when actually needed
+    /**
+     * Fetch logs with retry logic for race conditions
+     *
+     * When GitHub marks a check as complete, logs may not be immediately available.
+     * This method retries with exponential backoff to handle the race condition.
+     *
+     * Retry schedule: 2s, 4s, 8s (total 3 attempts over ~14 seconds)
+     *
+     * @param runId - GitHub run ID
+     * @param maxRetries - Maximum number of retry attempts (default: 3)
+     * @returns Log content, or null if all retries failed
+     */
+    async fetchLogsWithRetry(runId, maxRetries = 3) {
+        for (let attempt = 1; attempt <= maxRetries; attempt++) {
+            try {
+                return await this.fetcher.fetchRunLogs(runId);
+            }
+            catch {
+                // Intentionally suppress error (Issue #4 fix: no noisy output)
+                // If this was the last attempt, break without sleeping
+                if (attempt === maxRetries) {
+                    break;
+                }
+                // Exponential backoff: 2s, 4s, 8s
+                const delayMs = Math.pow(2, attempt) * 1000;
+                await new Promise((resolve) => setTimeout(resolve, delayMs));
+            }
+        }
+        // All retries failed - return null (graceful degradation)
+        // Logs can be inspected with debug mode if needed
+        return null;
+    }
+    /**
+     * Fetch all workflow runs for a PR (for --history flag)
+     *
+     * @param prNumber - PR number
+     * @returns List of workflow runs with basic metadata
+     */
+    async fetchRunsForPR(prNumber) {
+        return await this.fetcher.fetchRunsForPR(prNumber);
+    }
+    /**
+     * Determine if output should be YAML format
+     *
+     * Auto-YAML on failure (consistent with validate command)
+     *
+     * @param status - Overall status
+     * @param forceYAML - Force YAML output
+     * @returns True if should output YAML
+     */
+    shouldOutputYAML(status, forceYAML) {
+        return forceYAML || status === 'failed';
+    }
+}
+//# sourceMappingURL=watch-pr-orchestrator.js.map

package/dist/services/watch-pr-orchestrator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"watch-pr-orchestrator.js","sourceRoot":"","sources":["../../src/services/watch-pr-orchestrator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAYH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EACL,gBAAgB,EAChB,yBAAyB,EACzB,mBAAmB,GACpB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAErE;;GAEG;AACH,MAAM,OAAO,mBAAmB;IAQX;IACA;IARF,OAAO,CAAgB;IACvB,cAAc,CAAwB;IACtC,kBAAkB,CAAyB;IAC3C,sBAAsB,CAA4B;IAC3D,YAAY,CAAgB;IAEpC,YACmB,KAAa,EACb,IAAY;QADZ,UAAK,GAAL,KAAK,CAAQ;QACb,SAAI,GAAJ,IAAI,CAAQ;QAE7B,IAAI,CAAC,OAAO,GAAG,IAAI,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,cAAc,GAAG,IAAI,qBAAqB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC7D,IAAI,CAAC,kBAAkB,GAAG,IAAI,sBAAsB,EAAE,CAAC;QAEvD,+CAA+C;QAC/C,IAAI,CAAC,sBAAsB,GAAG,IAAI,yBAAyB,EAAE,CAAC;QAC9D,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,IAAI,gBAAgB,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,IAAI,mBAAmB,EAAE,CAAC,CAAC;IAClE,CAAC;IAED;;;;;;OAMG;IACH,wDAAwD;IACxD,KAAK,CAAC,WAAW,CACf,QAAgB,EAChB,UAAwD,EAAE;QAE1D,MAAM,EAAE,QAAQ,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;QAEpC,8DAA8D;QAC9D,IAAI,QAAQ,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACnC,IAAI,CAAC,YAAY,GAAG,IAAI,YAAY,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC/E,CAAC;QAED,wDAAwD;QACxD,iEAAiE;QACjE,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAE/D,eAAe;QACf,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAExD,kDAAkD;QAClD,MAAM,aAAa,GAAwB,EAAE,CAAC;QAC9C,MAAM,iBAAiB,GAAoB,EAAE,CAAC;QAE9C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;gBACnC,4CAA4C;gBAC5C,IACE,CAAC,KAAK,CAAC,MAAM;oBACb,CAAC,KAAK,CAAC,QAAQ;oBACf,CAAC,KAAK,CAAC,UAAU;oBACjB,CAAC,KAAK,CAAC,QAAQ,EACf,CAAC;oBACD,SAAS,CAAC,sBAAsB;gBAClC,CAAC;gBAED,MAAM,WAAW,GAAsB;oBACrC,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;iBACzB,CAAC;gBAEF,wCAAwC;gBACxC,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;oBACnD,iEAAiE;oBACjE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;oBACzD,IAAI,IAAI,EAAE,CAAC;wBACT,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;wBACrF,IAAI,UAAU,EAAE,CAAC;4BACf,WAAW,CAAC,UAAU,GAAG,UAAU,CAAC;wBACtC,CAAC;wBAED,qBAAqB;wBACrB,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;4BACtB,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;4BACpD,IAAI,UAAU,EAAE,CAAC;gCACf,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;4BACnE,CAAC;wBACH,CAAC;oBACH,CAAC;oBACD,2DAA2D;oBAC3D,uCAAuC;gBACzC,CAAC;gBAED,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAClC,CAAC;iBAAM,CAAC;gBACN,sCAAsC;gBACtC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;oBACf,SAAS,CAAC,sBAAsB;gBAClC,CAAC;gBAED,iBAAiB,CAAC,IAAI,CAAC;oBACrB,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,GAAG,EAAE,KAAK,CAAC,GAAG;oBACd,QAAQ,EAAE,KAAK,CAAC,QAAQ;iBACzB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,qDAAqD;QACrD,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;QAEvF,oDAAoD;QACpD,MAAM,oBAAoB,GAAG,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;QAC7D,MAAM,qBAAqB,GAAG,IAAI,CAAC,mBAAmB,CAAC,cAAc,CAAC,CAAC;QAEvE,yBAAyB;QACzB,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC;QACjE,MAAM,YAAY,GAChB,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,MAAM;YAC9D,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;QAClE,MAAM,YAAY,GAChB,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,MAAM;YAC9D,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;QAClE,MAAM,aAAa,GACjB,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,MAAM;YAC5D,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,MAAM,CAAC;QAEhE,wBAAwB;QACxB,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAEjF,qBAAqB;QACrB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAE9D,2BAA2B;QAC3B,IAAI,MAAM,GAAa,QAAQ,CAAC;QAChC,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,GAAG,QAAQ,CAAC;QACpB,CAAC;aAAM,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,GAAG,SAAS,CAAC;QACrB,CAAC;QAED,oBAAoB;QACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CACpC,MAAM,EACN,oBAAoB,EACpB,qBAAqB,EACrB,UAAU,CAAC,SAAS,CACrB,CAAC;QAEF,eAAe;QACf,MAAM,MAAM,GAAkB;YAC5B,EAAE,EAAE,UAAU;YACd,MAAM;YACN,MAAM,EAAE;gBACN,KAAK,EAAE,WAAW;gBAClB,MAAM,EAAE,YAAY;gBACpB,MAAM,EAAE,YAAY;gBACpB,OAAO,EAAE,aAAa;gBACtB,eAAe,EAAE,cAAc,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS;gBAC3E,cAAc,EAAE,oBAAoB;gBACpC,eAAe,EAAE,qBAAqB;aACvC;YACD,OAAO;YACP,QAAQ;YACR,sEAAsE;SACvE,CAAC;QAEF,iEAAiE;QACjE,qDAAqD;QAErD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,iBAAiB,CACrB,QAAgB,EAChB,KAAa,EACb,UAAkC,EAAE;QAEpC,MAAM,EAAE,QAAQ,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC;QAErC,8CAA8C;QAC9C,IAAI,QAAQ,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACnC,IAAI,CAAC,YAAY,GAAG,IAAI,YAAY,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC/E,CAAC;QAED,+CAA+C;QAC/C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAE/D,6BAA6B;QAC7B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAE7D,6CAA6C;QAC7C,MAAM,WAAW,GAAsB;YACrC,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,UAAU,EAAE,UAAU,CAAC,UAAU;YACjC,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,UAAU,EAAE,UAAU,CAAC,UAAU;YACjC,QAAQ,EAAE,UAAU,CAAC,QAAQ;SAC9B,CAAC;QAEF,kEAAkE;QAClE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAClD,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;YACrF,IAAI,UAAU,EAAE,CAAC;gBACf,WAAW,CAAC,UAAU,GAAG,UAAU,CAAC;YACtC,CAAC;YAED,sDAAsD;YACtD,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBACtB,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;gBAC7C,IAAI,UAAU,EAAE,CAAC;oBACf,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;gBAC5D,CAAC;YACH,CAAC;QACH,CAAC;QACD,2DAA2D;QAC3D,uCAAuC;QAEvC,mCAAmC;QACnC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAE9D,yCAAyC;QACzC,IAAI,MAAM,GAAa,QAAQ,CAAC;QAChC,IAAI,WAAW,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACzC,MAAM,GAAG,QAAQ,CAAC;QACpB,CAAC;aAAM,IAAI,WAAW,CAAC,MAAM,KAAK,aAAa,IAAI,WAAW,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACnF,MAAM,GAAG,SAAS,CAAC;QACrB,CAAC;QAED,wCAAwC;QACxC,MAAM,WAAW,GAAG,CAAC,CAAC;QACtB,MAAM,YAAY,GAAG,WAAW,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClE,MAAM,YAAY,GAAG,WAAW,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClE,MAAM,aAAa,GAAG,WAAW,CAAC,MAAM,KAAK,aAAa,IAAI,WAAW,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAEtG,gDAAgD;QAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;QAExF,eAAe;QACf,MAAM,MAAM,GAAkB;YAC5B,EAAE,EAAE,UAAU;YACd,MAAM;YACN,MAAM,EAAE;gBACN,KAAK,EAAE,WAAW;gBAClB,MAAM,EAAE,YAAY;gBACpB,MAAM,EAAE,YAAY;gBACpB,OAAO,EAAE,aAAa;gBACtB,cAAc,EAAE,CAAC,WAAW,CAAC;gBAC7B,eAAe,EAAE,EAAE;aACpB;YACD,OAAO;YACP,QAAQ;YACR,sEAAsE;SACvE,CAAC;QAEF,2EAA2E;QAC3E,oDAAoD;QAEpD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,UAA4B,EAAE,MAAe;QACpE,IAAI,UAAU,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC;QACvC,IAAI,MAAM,KAAK,WAAW;YAAE,OAAO,CAAC,CAAC;QACrC,IAAI,UAAU,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC;QACvC,OAAO,CAAC,CAAC;IACX,CAAC;IAED;;;;;OAKG;IACK,WAAW,CAAC,MAA2B;QAC7C,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YAC1B,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;QACvG,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,0DAA0D;IAClD,mBAAmB,CAAC,MAAuB;QACjD,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YAC1B,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;QACvG,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;OAQG;IACK,gBAAgB,CACtB,MAAuC,EACvC,aAAkC,EAClC,cAA+B,EAC/B,SAAkB;QAElB,MAAM,SAAS,GAAe,EAAE,CAAC;QAEjC,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,qBAAqB;YACrB,MAAM,mBAAmB,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC;YACpF,MAAM,oBAAoB,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC;YAEtF,2CAA2C;YAC3C,KAAK,MAAM,KAAK,IAAI,mBAAmB,EAAE,CAAC;gBACxC,SAAS,CAAC,IAAI,CAAC;oBACb,MAAM,EAAE,OAAO,KAAK,CAAC,IAAI,UAAU;oBACnC,GAAG,EAAE,sBAAsB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,iBAAiB,KAAK,CAAC,MAAM,EAAE;oBACjF,QAAQ,EAAE,OAAO;oBACjB,MAAM,EAAE,KAAK,CAAC,UAAU;wBACtB,CAAC,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,WAAW,oBAAoB;wBACrD,CAAC,CAAC,cAAc;iBACnB,CAAC,CAAC;YACL,CAAC;YAED,4CAA4C;YAC5C,KAAK,MAAM,KAAK,IAAI,oBAAoB,EAAE,CAAC;gBACzC,SAAS,CAAC,IAAI,CAAC;oBACb,MAAM,EAAE,OAAO,KAAK,CAAC,IAAI,UAAU;oBACnC,GAAG,EAAE,KAAK,CAAC,GAAG;oBACd,QAAQ,EAAE,KAAK,CAAC,SAAS,EAAE,QAAQ,IAAI,OAAO;oBAC9C,MAAM,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,IAAI,cAAc;iBACnD,CAAC,CAAC;YACL,CAAC;YAED,OAAO;gBACL,MAAM,EAAE,QAAQ;gBAChB,QAAQ,EAAE,CAAC,SAAS;gBACpB,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,GAAG,mBAAmB,CAAC,MAAM,GAAG,oBAAoB,CAAC,MAAM,kBAAkB;gBACtF,UAAU,EAAE,SAAS;aACtB,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO;gBACL,MAAM,EAAE,SAAS;gBACjB,QAAQ,EAAE,KAAK;gBACf,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,0BAA0B;gBACnC,UAAU,EAAE;oBACV;wBACE,MAAM,EAAE,6BAA6B;wBACrC,QAAQ,EAAE,MAAM;qBACjB;iBACF;aACF,CAAC;QACJ,CAAC;QAED,SAAS;QACT,OAAO;YACL,MAAM,EAAE,QAAQ;YAChB,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,mBAAmB;YAC5B,UAAU,EAAE,SAAS;gBACnB,CAAC,CAAC;oBACE;wBACE,MAAM,EAAE,gBAAgB;wBACxB,QAAQ,EAAE,MAAM;qBACjB;iBACF;gBACH,CAAC,CAAC;oBACE;wBACE,MAAM,EAAE,yBAAyB;wBACjC,QAAQ,EAAE,SAAS;wBACnB,MAAM,EAAE,qBAAqB;qBAC9B;iBACF;SACN,CAAC;IACJ,CAAC;IAED,iFAAiF;IAEjF;;;;;;;;;;;OAWG;IACK,KAAK,CAAC,kBAAkB,CAAC,KAAa,EAAE,UAAU,GAAG,CAAC;QAC5D,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC;YACvD,IAAI,CAAC;gBACH,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YAChD,CAAC;YAAC,MAAM,CAAC;gBACP,+DAA+D;gBAC/D,uDAAuD;gBACvD,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;oBAC3B,MAAM;gBACR,CAAC;gBAED,kCAAkC;gBAClC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;gBAC5C,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QAED,0DAA0D;QAC1D,kDAAkD;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,cAAc,CAAC,QAAgB;QAQnC,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IACrD,CAAC;IAED;;;;;;;;OAQG;IACH,gBAAgB,CAAC,MAAc,EAAE,SAAkB;QACjD,OAAO,SAAS,IAAI,MAAM,KAAK,QAAQ,CAAC;IAC1C,CAAC;CACF"}

package/dist/utils/command-name.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Command name detection utilities
+ *
+ * Detects the actual command name used to invoke vibe-validate (e.g., "vv" vs "vibe-validate")
+ * so error messages and usage examples reflect what the user actually typed.
+ */
+/**
+ * Get the command name that was used to invoke the CLI
+ *
+ * @returns The command name (e.g., "vv", "vibe-validate", or fallback "vibe-validate")
+ *
+ * @example
+ * ```typescript
+ * const cmd = getCommandName();
+ * console.error(`Usage: ${cmd} watch-pr <pr-number>`);
+ * // If invoked with "vv": "Usage: vv watch-pr <pr-number>"
+ * // If invoked with "vibe-validate": "Usage: vibe-validate watch-pr <pr-number>"
+ * ```
+ */
+export declare function getCommandName(): string;
+//# sourceMappingURL=command-name.d.ts.map

package/dist/utils/command-name.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-name.d.ts","sourceRoot":"","sources":["../../src/utils/command-name.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH;;;;;;;;;;;;GAYG;AACH,wBAAgB,cAAc,IAAI,MAAM,CA4BvC"}

package/dist/utils/command-name.js

@@ -0,0 +1,45 @@
+/**
+ * Command name detection utilities
+ *
+ * Detects the actual command name used to invoke vibe-validate (e.g., "vv" vs "vibe-validate")
+ * so error messages and usage examples reflect what the user actually typed.
+ */
+import { basename } from 'node:path';
+/**
+ * Get the command name that was used to invoke the CLI
+ *
+ * @returns The command name (e.g., "vv", "vibe-validate", or fallback "vibe-validate")
+ *
+ * @example
+ * ```typescript
+ * const cmd = getCommandName();
+ * console.error(`Usage: ${cmd} watch-pr <pr-number>`);
+ * // If invoked with "vv": "Usage: vv watch-pr <pr-number>"
+ * // If invoked with "vibe-validate": "Usage: vibe-validate watch-pr <pr-number>"
+ * ```
+ */
+export function getCommandName() {
+    // Check if the wrapper passed the command name via environment variable
+    // This is set by the smart wrapper (bin/vibe-validate.ts) when it spawns bin.js
+    const envCommandName = process.env.VV_COMMAND_NAME;
+    if (envCommandName === 'vv' || envCommandName === 'vibe-validate') {
+        return envCommandName;
+    }
+    // Fallback: extract from process.argv[1] (for direct invocation or dev mode)
+    // process.argv[0] is node executable
+    // process.argv[1] is the script being executed (e.g., /path/to/vv or /path/to/vibe-validate)
+    const scriptPath = process.argv[1];
+    if (!scriptPath) {
+        return 'vibe-validate'; // Fallback
+    }
+    // Extract basename (e.g., "vv" from "/usr/local/bin/vv")
+    const commandName = basename(scriptPath);
+    // Handle common cases: vv, vibe-validate, or .js/.ts extensions in dev mode
+    if (commandName === 'vv' || commandName === 'vibe-validate') {
+        return commandName;
+    }
+    // Dev mode: might be bin.js, bin.ts, vibe-validate.js, etc.
+    // Fall back to "vibe-validate" for consistency
+    return 'vibe-validate';
+}
+//# sourceMappingURL=command-name.js.map

package/dist/utils/command-name.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-name.js","sourceRoot":"","sources":["../../src/utils/command-name.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAErC;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,cAAc;IAC5B,wEAAwE;IACxE,gFAAgF;IAChF,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IACnD,IAAI,cAAc,KAAK,IAAI,IAAI,cAAc,KAAK,eAAe,EAAE,CAAC;QAClE,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,6EAA6E;IAC7E,qCAAqC;IACrC,6FAA6F;IAC7F,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAEnC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,eAAe,CAAC,CAAC,WAAW;IACrC,CAAC;IAED,yDAAyD;IACzD,MAAM,WAAW,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IAEzC,4EAA4E;IAC5E,IAAI,WAAW,KAAK,IAAI,IAAI,WAAW,KAAK,eAAe,EAAE,CAAC;QAC5D,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,4DAA4D;IAC5D,+CAA+C;IAC/C,OAAO,eAAe,CAAC;AACzB,CAAC"}

package/dist/utils/pid-lock.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pid-lock.d.ts","sourceRoot":"","sources":["../../src/utils/pid-lock.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,kCAAkC;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,6BAA6B;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,gDAAgD;IAChD,QAAQ,EAAE,MAAM,CAAC;IACjB,2CAA2C;IAC3C,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,6CAA6C;IAC7C,QAAQ,EAAE,OAAO,CAAC;IAClB,wBAAwB;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,8DAA8D;IAC9D,YAAY,CAAC,EAAE,QAAQ,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;OAIG;IACH,KAAK,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IAChC;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AA8DD;;;;;;;;;;;GAWG;AACH,wBAAsB,WAAW,CAC/B,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,WAAgB,GACxB,OAAO,CAAC,UAAU,CAAC,CAyCrB;AAED;;;;;;;GAOG;AACH,wBAAsB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAIjE;AAED;;;;;;;;;GASG;AACH,wBAAsB,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAuBtG;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,WAAW,CAC/B,SAAS,EAAE,MAAM,EACjB,cAAc,GAAE,MAAY,EAC5B,cAAc,GAAE,MAAa,EAC7B,OAAO,GAAE,WAAgB,GACxB,OAAO,CAAC;IAAE,QAAQ,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,QAAQ,GAAG,IAAI,CAAA;CAAE,CAAC,CA6B/E"}
+{"version":3,"file":"pid-lock.d.ts","sourceRoot":"","sources":["../../src/utils/pid-lock.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAQH;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,kCAAkC;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,6BAA6B;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,gDAAgD;IAChD,QAAQ,EAAE,MAAM,CAAC;IACjB,2CAA2C;IAC3C,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,6CAA6C;IAC7C,QAAQ,EAAE,OAAO,CAAC;IAClB,wBAAwB;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,8DAA8D;IAC9D,YAAY,CAAC,EAAE,QAAQ,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;OAIG;IACH,KAAK,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IAChC;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AA8DD;;;;;;;;;;;GAWG;AACH,wBAAsB,WAAW,CAC/B,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,WAAgB,GACxB,OAAO,CAAC,UAAU,CAAC,CAyCrB;AAED;;;;;;;GAOG;AACH,wBAAsB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAIjE;AAED;;;;;;;;;GASG;AACH,wBAAsB,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAuBtG;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,WAAW,CAC/B,SAAS,EAAE,MAAM,EACjB,cAAc,GAAE,MAAY,EAC5B,cAAc,GAAE,MAAa,EAC7B,OAAO,GAAE,WAAgB,GACxB,OAAO,CAAC;IAAE,QAAQ,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,QAAQ,GAAG,IAAI,CAAA;CAAE,CAAC,CA6B/E"}

package/dist/utils/pid-lock.js

@@ -5,8 +5,8 @@
  * Cross-platform (Node.js), works on Windows, macOS, Linux.
  */
 import { readFileSync, writeFileSync, unlinkSync, existsSync } from 'node:fs';
-import { tmpdir } from 'node:os';
 import { join } from 'node:path';
+import { normalizedTmpdir } from '@vibe-validate/utils';
 /**
  * Encode directory path for use in lock file name
  *
@@ -40,11 +40,11 @@ function getLockFilePath(directory, options = {}) {
             throw new Error('projectId is required when scope is "project"');
         }
         // Project-scoped: /tmp/vibe-validate-project-{projectId}.lock
-        return join(tmpdir(), `vibe-validate-project-${options.projectId}.lock`);
+        return join(normalizedTmpdir(), `vibe-validate-project-${options.projectId}.lock`);
     }
     // Directory-scoped (default): /tmp/vibe-validate-{encoded-dir}.lock
     const encoded = encodeDirectoryPath(directory);
-    return join(tmpdir(), `vibe-validate-${encoded}.lock`);
+    return join(normalizedTmpdir(), `vibe-validate-${encoded}.lock`);
 }
 /**
  * Check if a process is running

package/dist/utils/pid-lock.js.map

@@ -1 +1 @@
-{"version":3,"file":"pid-lock.js","sourceRoot":"","sources":["../../src/utils/pid-lock.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC9E,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AA6CjC;;;;;;;;;;;;GAYG;AACH,SAAS,mBAAmB,CAAC,SAAiB;IAC5C,OAAO,SAAS;SACb,OAAO,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC,iCAAiC;SAChE,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,sBAAsB;SAC5C,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,uBAAuB;AAClD,CAAC;AAED;;;;;;GAMG;AACH,SAAS,eAAe,CAAC,SAAiB,EAAE,UAAuB,EAAE;IACnE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,WAAW,CAAC;IAE3C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QACD,8DAA8D;QAC9D,OAAO,IAAI,CAAC,MAAM,EAAE,EAAE,yBAAyB,OAAO,CAAC,SAAS,OAAO,CAAC,CAAC;IAC3E,CAAC;IAED,oEAAoE;IACpE,MAAM,OAAO,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAC/C,OAAO,IAAI,CAAC,MAAM,EAAE,EAAE,iBAAiB,OAAO,OAAO,CAAC,CAAC;AACzD,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,GAAW;IACnC,IAAI,CAAC;QACH,0DAA0D;QAC1D,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,gEAAgE;QAChE,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,SAAiB,EACjB,QAAgB,EAChB,UAAuB,EAAE;IAEzB,MAAM,QAAQ,GAAG,eAAe,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAErD,0BAA0B;IAC1B,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAa,CAAC;YAEzE,qCAAqC;YACrC,IAAI,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACnC,6CAA6C;gBAC7C,OAAO;oBACL,QAAQ,EAAE,KAAK;oBACf,QAAQ;oBACR,YAAY,EAAE,QAAQ;iBACvB,CAAC;YACJ,CAAC;YAED,wCAAwC;YACxC,0BAA0B;YAC1B,UAAU,CAAC,QAAQ,CAAC,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,2CAA2C;YAC3C,UAAU,CAAC,QAAQ,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IAED,eAAe;IACf,MAAM,QAAQ,GAAa;QACzB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,SAAS;QACT,QAAQ;QACR,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IAEF,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAE3D,OAAO;QACL,QAAQ,EAAE,IAAI;QACd,QAAQ;KACT,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,QAAgB;IAChD,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,UAAU,CAAC,QAAQ,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,SAAiB,EAAE,UAAuB,EAAE;IAC1E,MAAM,QAAQ,GAAG,eAAe,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAErD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAa,CAAC;QAEzE,kCAAkC;QAClC,IAAI,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,wBAAwB;QACxB,UAAU,CAAC,QAAQ,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,iCAAiC;QACjC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,SAAiB,EACjB,iBAAyB,GAAG,EAC5B,iBAAyB,IAAI,EAC7B,UAAuB,EAAE;IAEzB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,SAAS,GAAG,cAAc,GAAG,IAAI,CAAC;IAExC,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAEjD,mCAAmC;QACnC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,KAAK;gBACf,SAAS,EAAE,IAAI;aAChB,CAAC;QACJ,CAAC;QAED,gBAAgB;QAChB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QACvC,IAAI,OAAO,IAAI,SAAS,EAAE,CAAC;YACzB,OAAO;gBACL,QAAQ,EAAE,KAAK;gBACf,QAAQ,EAAE,IAAI;gBACd,SAAS,EAAE,IAAI;aAChB,CAAC;QACJ,CAAC;QAED,wBAAwB;QACxB,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC;IACtE,CAAC;AACH,CAAC"}
+{"version":3,"file":"pid-lock.js","sourceRoot":"","sources":["../../src/utils/pid-lock.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC9E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AA8CxD;;;;;;;;;;;;GAYG;AACH,SAAS,mBAAmB,CAAC,SAAiB;IAC5C,OAAO,SAAS;SACb,OAAO,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC,iCAAiC;SAChE,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,sBAAsB;SAC5C,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,uBAAuB;AAClD,CAAC;AAED;;;;;;GAMG;AACH,SAAS,eAAe,CAAC,SAAiB,EAAE,UAAuB,EAAE;IACnE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,WAAW,CAAC;IAE3C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QACD,8DAA8D;QAC9D,OAAO,IAAI,CAAC,gBAAgB,EAAE,EAAE,yBAAyB,OAAO,CAAC,SAAS,OAAO,CAAC,CAAC;IACrF,CAAC;IAED,oEAAoE;IACpE,MAAM,OAAO,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAC/C,OAAO,IAAI,CAAC,gBAAgB,EAAE,EAAE,iBAAiB,OAAO,OAAO,CAAC,CAAC;AACnE,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,GAAW;IACnC,IAAI,CAAC;QACH,0DAA0D;QAC1D,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,gEAAgE;QAChE,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,SAAiB,EACjB,QAAgB,EAChB,UAAuB,EAAE;IAEzB,MAAM,QAAQ,GAAG,eAAe,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAErD,0BAA0B;IAC1B,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAa,CAAC;YAEzE,qCAAqC;YACrC,IAAI,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACnC,6CAA6C;gBAC7C,OAAO;oBACL,QAAQ,EAAE,KAAK;oBACf,QAAQ;oBACR,YAAY,EAAE,QAAQ;iBACvB,CAAC;YACJ,CAAC;YAED,wCAAwC;YACxC,0BAA0B;YAC1B,UAAU,CAAC,QAAQ,CAAC,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,2CAA2C;YAC3C,UAAU,CAAC,QAAQ,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IAED,eAAe;IACf,MAAM,QAAQ,GAAa;QACzB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,SAAS;QACT,QAAQ;QACR,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IAEF,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAE3D,OAAO;QACL,QAAQ,EAAE,IAAI;QACd,QAAQ;KACT,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,QAAgB;IAChD,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,UAAU,CAAC,QAAQ,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,SAAiB,EAAE,UAAuB,EAAE;IAC1E,MAAM,QAAQ,GAAG,eAAe,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAErD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAa,CAAC;QAEzE,kCAAkC;QAClC,IAAI,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,wBAAwB;QACxB,UAAU,CAAC,QAAQ,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,iCAAiC;QACjC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,SAAiB,EACjB,iBAAyB,GAAG,EAC5B,iBAAyB,IAAI,EAC7B,UAAuB,EAAE;IAEzB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,SAAS,GAAG,cAAc,GAAG,IAAI,CAAC;IAExC,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAEjD,mCAAmC;QACnC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,KAAK;gBACf,SAAS,EAAE,IAAI;aAChB,CAAC;QACJ,CAAC;QAED,gBAAgB;QAChB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QACvC,IAAI,OAAO,IAAI,SAAS,EAAE,CAAC;YACzB,OAAO;gBACL,QAAQ,EAAE,KAAK;gBACf,QAAQ,EAAE,IAAI;gBACd,SAAS,EAAE,IAAI;aAChB,CAAC;QACJ,CAAC;QAED,wBAAwB;QACxB,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC;IACtE,CAAC;AACH,CAAC"}

package/dist/utils/secret-scanning.d.ts

@@ -60,7 +60,7 @@ export declare function formatToolName(tool: SecretScanningTool): string;
 /**
  * Show performance warning if scan was slow
  */
-export declare function showPerformanceWarning(tool: SecretScanningTool, duration: number, threshold: number): void;
+export declare function showPerformanceWarning(tool: SecretScanningTool, duration: number, threshold: number, hasExplicitCommand?: boolean): void;
 /**
  * Show error message when secrets are detected
  */

package/dist/utils/secret-scanning.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"secret-scanning.d.ts","sourceRoot":"","sources":["../../src/utils/secret-scanning.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAQH;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG,UAAU,GAAG,YAAY,CAAC;AAE3D;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,kBAAkB,CAAC;IACzB,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,GAAE,MAAsB,GAAG,OAAO,CAKtE;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,GAAE,MAAsB,GAAG,OAAO,CAExE;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,GAAE,MAAsB,GAAG,aAAa,EAAE,CAmBtF;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,GAAG,GAAE,MAAsB,GAC1B;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAAE,CAoCjD;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,kBAAkB,CAAC;IACzB,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,kBAAkB,EACxB,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,OAAe,GACvB,UAAU,CAmEZ;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,kBAAkB,GAAG,MAAM,CAE/D;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,kBAAkB,EACxB,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,GAChB,IAAI,CAeN;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,IAAI,CAsBpE"}
+{"version":3,"file":"secret-scanning.d.ts","sourceRoot":"","sources":["../../src/utils/secret-scanning.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAQH;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG,UAAU,GAAG,YAAY,CAAC;AAE3D;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,kBAAkB,CAAC;IACzB,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,GAAE,MAAsB,GAAG,OAAO,CAKtE;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,GAAE,MAAsB,GAAG,OAAO,CAExE;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,GAAE,MAAsB,GAAG,aAAa,EAAE,CAmBtF;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,GAAG,GAAE,MAAsB,GAC1B;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAAE,CAoCjD;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,kBAAkB,CAAC;IACzB,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,kBAAkB,EACxB,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,OAAe,GACvB,UAAU,CA0FZ;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,kBAAkB,GAAG,MAAM,CAE/D;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,kBAAkB,EACxB,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,kBAAkB,GAAE,OAAe,GAClC,IAAI,CAmBN;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,IAAI,CAsBpE"}

package/dist/utils/secret-scanning.js

@@ -40,7 +40,7 @@ export function detectSecretScanningTools(cwd = process.cwd()) {
             tool: 'secretlint',
             available: true, // Always available via npx
             hasConfig: secretlintConfigured,
-            defaultCommand: 'npx secretlint "**/*"',
+            defaultCommand: 'npx secretlint .', // No glob patterns - safeExecFromString rejects them
         },
     ];
 }
@@ -85,7 +85,8 @@ export function selectToolsToRun(scanCommand, cwd = process.cwd()) {
  */
 export function runSecretScan(tool, command, verbose = false) {
     const startTime = Date.now();
-    // Special handling for gitleaks - check availability first
+    // Special handling for gitleaks - skip if not installed (native binary, optional)
+    // secretlint is ALWAYS available via npx - never skip, always fail loud if error
     if (tool === 'gitleaks' && !isToolAvailable('gitleaks')) {
         return {
             tool,
@@ -96,6 +97,28 @@ export function runSecretScan(tool, command, verbose = false) {
         };
     }
     try {
+        // Parse and execute scanCommand string
+        //
+        // SECURITY: scanCommand comes from user config (vibe-validate.config.yaml)
+        // Same trust model as npm scripts - users control their own config files.
+        //
+        // LIMITATIONS:
+        // - Simple commands work: "gitleaks protect --staged"
+        // - Glob patterns FAIL: "npx secretlint **/*" (prevented by safeExecFromString)
+        // - Shell operators FAIL: "cmd1 && cmd2" (prevented by safeExecFromString)
+        // - Complex quoting FAILS: nested quotes, escapes (prevented by safeExecFromString)
+        //
+        // WHY safeExecFromString:
+        // - Handles simple quoted args: 'gitleaks protect --config ".gitleaks.toml"'
+        // - Fails fast on complex shell syntax (prevents silent bugs)
+        // - More robust than naive .split() which breaks with ANY quotes
+        //
+        // RECOMMENDATION for complex commands (globs, operators, etc):
+        // Move to package.json script and reference it:
+        //   Bad:  scanCommand: "npx secretlint **/*"  (glob patterns rejected)
+        //   Bad:  scanCommand: "cmd1 && cmd2"         (shell operators rejected)
+        //   Good: scanCommand: "npm run scan:secrets"
+        //         package.json: { "scan:secrets": "npx secretlint '**/*'" }
         const result = safeExecFromString(command, {
             encoding: 'utf8',
             stdio: 'pipe',
@@ -154,7 +177,7 @@ export function formatToolName(tool) {
 /**
  * Show performance warning if scan was slow
  */
-export function showPerformanceWarning(tool, duration, threshold) {
+export function showPerformanceWarning(tool, duration, threshold, hasExplicitCommand = false) {
     if (duration <= threshold) {
         return;
     }
@@ -164,7 +187,12 @@ export function showPerformanceWarning(tool, duration, threshold) {
         console.warn(chalk.gray('   Consider installing gitleaks for faster scanning:'));
         console.warn(chalk.gray('   • macOS: brew install gitleaks'));
         console.warn(chalk.gray('   • Linux: See https://github.com/gitleaks/gitleaks#installation'));
-        console.warn(chalk.gray('   • Or add explicit scanCommand in config\n'));
+        if (hasExplicitCommand) {
+            console.warn(chalk.gray(''));
+        }
+        else {
+            console.warn(chalk.gray('   • Or add explicit scanCommand in config\n'));
+        }
     }
 }
 /**