@vibecheckai/cli 2.5.7 → 2.7.0

package/LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2026 Guardrail
+Copyright (c) 2026 Vibecheck
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

package/dist/bundles/vibecheck-core.js

@@ -12999,8 +12999,8 @@ var envSchema = import_zod.z.object({
   // Feature flags
   ENABLE_METRICS: import_zod.z.string().transform((val) => val === "true").default("false"),
   ENABLE_AI_FEATURES: import_zod.z.string().transform((val) => val === "true").default("true"),
-  Guardrail_DEMO_MODE: import_zod.z.string().transform((val) => val === "true").default("false"),
-  Guardrail_POLICY_STRICT: import_zod.z.string().transform((val) => val === "true").default("false")
+  Vibecheck_DEMO_MODE: import_zod.z.string().transform((val) => val === "true").default("false"),
+  Vibecheck_POLICY_STRICT: import_zod.z.string().transform((val) => val === "true").default("false")
 });
 function validateEnv() {
   try {
@@ -13815,96 +13815,96 @@ var MetricsRegistry = class {
   }
   // Scan metrics
   scansTotal = new Counter(
-    "Guardrail_scans_total",
+    "Vibecheck_scans_total",
     "Total number of security scans performed",
     ["scan_type", "status"]
   );
   scanDuration = new Histogram(
-    "Guardrail_scan_duration_seconds",
+    "Vibecheck_scan_duration_seconds",
     "Duration of security scans in seconds",
     ["scan_type"],
     [0.1, 0.5, 1, 2, 5, 10, 30, 60]
   );
   // Injection detection metrics
   injectionsDetected = new Counter(
-    "Guardrail_injections_detected_total",
+    "Vibecheck_injections_detected_total",
     "Total number of prompt injection attempts detected",
     ["severity", "type"]
   );
   injectionScanDuration = new Histogram(
-    "Guardrail_injection_scan_duration_seconds",
+    "Vibecheck_injection_scan_duration_seconds",
     "Duration of injection scans in seconds",
     ["content_type"]
   );
   // Vulnerability metrics
   vulnerabilitiesFound = new Counter(
-    "Guardrail_vulnerabilities_found_total",
+    "Vibecheck_vulnerabilities_found_total",
     "Total number of vulnerabilities found",
     ["severity", "source"]
   );
   vulnerablePackages = new Gauge(
-    "Guardrail_vulnerable_packages",
+    "Vibecheck_vulnerable_packages",
     "Current number of vulnerable packages",
     ["project_id"]
   );
   // Secret detection metrics
   secretsDetected = new Counter(
-    "Guardrail_secrets_detected_total",
+    "Vibecheck_secrets_detected_total",
     "Total number of secrets detected",
     ["secret_type", "severity"]
   );
   // Compliance metrics
   complianceScore = new Gauge(
-    "Guardrail_compliance_score",
+    "Vibecheck_compliance_score",
     "Current compliance score (0-100)",
     ["framework", "project_id"]
   );
   complianceViolations = new Counter(
-    "Guardrail_compliance_violations_total",
+    "Vibecheck_compliance_violations_total",
     "Total number of compliance violations",
     ["framework", "severity"]
   );
   // API metrics
   apiRequestsTotal = new Counter(
-    "Guardrail_api_requests_total",
+    "Vibecheck_api_requests_total",
     "Total number of API requests",
     ["method", "endpoint", "status_code"]
   );
   apiRequestDuration = new Histogram(
-    "Guardrail_api_request_duration_seconds",
+    "Vibecheck_api_request_duration_seconds",
     "Duration of API requests in seconds",
     ["method", "endpoint"]
   );
   // Agent metrics
   agentActionsTotal = new Counter(
-    "Guardrail_agent_actions_total",
+    "Vibecheck_agent_actions_total",
     "Total number of agent actions",
     ["agent_id", "action_type", "status"]
   );
   agentActionsBlocked = new Counter(
-    "Guardrail_agent_actions_blocked_total",
+    "Vibecheck_agent_actions_blocked_total",
     "Total number of agent actions blocked",
     ["agent_id", "reason"]
   );
   // Cache metrics
   cacheHits = new Counter(
-    "Guardrail_cache_hits_total",
+    "Vibecheck_cache_hits_total",
     "Total number of cache hits",
     ["cache_type"]
   );
   cacheMisses = new Counter(
-    "Guardrail_cache_misses_total",
+    "Vibecheck_cache_misses_total",
     "Total number of cache misses",
     ["cache_type"]
   );
   // System metrics
   activeConnections = new Gauge(
-    "Guardrail_active_connections",
+    "Vibecheck_active_connections",
     "Number of active WebSocket connections",
     []
   );
   memoryUsageBytes = new Gauge(
-    "Guardrail_memory_usage_bytes",
+    "Vibecheck_memory_usage_bytes",
     "Current memory usage in bytes",
     ["type"]
   );
@@ -25543,7 +25543,7 @@ function generateGitLabCI(_config) {
 stages:
   - security
 
-guardrail_scan:
+vibecheck_scan:
   stage: security
   image: node:18
   before_script:

package/dist/commands/secrets-allowlist.js

@@ -6,7 +6,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerSecretsAllowlistCommand = registerSecretsAllowlistCommand;
 const path_1 = require("path");
-const vibecheck_security_1 = require('../bundles/vibecheck-security');
+const security_1 = require('../bundles/vibecheck-security');
 const c = {
     reset: '\x1b[0m',
     bold: (s) => `\x1b[1m${s}\x1b[0m`,
@@ -29,7 +29,7 @@ function registerSecretsAllowlistCommand(program, requireAuth, printLogo) {
         printLogo();
         console.log(`\n${c.bold('🔐 SECRETS ALLOWLIST - ADD')}\n`);
         const projectPath = (0, path_1.resolve)(opts.path);
-        const allowlistManager = new vibecheck_security_1.Allowlist(projectPath);
+        const allowlistManager = new security_1.Allowlist(projectPath);
         try {
             allowlistManager.add(fingerprint);
             allowlistManager.save();
@@ -52,7 +52,7 @@ function registerSecretsAllowlistCommand(program, requireAuth, printLogo) {
         console.log(`\n${c.bold('🔐 SECRETS ALLOWLIST - FROM BASELINE')}\n`);
         const projectPath = (0, path_1.resolve)(opts.path);
         const baselinePath = (0, path_1.resolve)(file);
-        const allowlistManager = new vibecheck_security_1.Allowlist(projectPath);
+        const allowlistManager = new security_1.Allowlist(projectPath);
         try {
             const added = allowlistManager.addFromBaseline(baselinePath);
             allowlistManager.save();
@@ -73,7 +73,7 @@ function registerSecretsAllowlistCommand(program, requireAuth, printLogo) {
         printLogo();
         console.log(`\n${c.bold('🔐 SECRETS ALLOWLIST - LIST')}\n`);
         const projectPath = (0, path_1.resolve)(opts.path);
-        const allowlistManager = new vibecheck_security_1.Allowlist(projectPath);
+        const allowlistManager = new security_1.Allowlist(projectPath);
         if (allowlistManager.size() === 0) {
             console.log(`  ${c.dim('No fingerprints in allowlist')}\n`);
             return;

package/dist/commands/secrets-allowlist.js.map

@@ -1 +1 @@
-{"version":3,"file":"secrets-allowlist.js","sourceRoot":"","sources":["../../src/commands/secrets-allowlist.ts"],"names":[],"mappings":";AAAA;;;GAGG;;AAgBH,0EA0EC;AAvFD,+BAA+B;AAC/B,2DAAgE;AAGhE,MAAM,CAAC,GAAG;IACR,KAAK,EAAE,SAAS;IAChB,IAAI,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS;IACzC,GAAG,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS;IACxC,OAAO,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS;IAC7C,IAAI,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS;IAC1C,KAAK,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS;CAC5C,CAAC;AAEF,SAAgB,+BAA+B,CAAC,OAAgB,EAAE,WAAsB,EAAE,SAAqB;IAC7G,MAAM,YAAY,GAAG,OAAO;SACzB,OAAO,CAAC,mBAAmB,CAAC;SAC5B,WAAW,CAAC,0BAA0B,CAAC,CAAC;IAE3C,YAAY;SACT,OAAO,CAAC,KAAK,CAAC;SACd,WAAW,CAAC,oCAAoC,CAAC;SACjD,QAAQ,CAAC,eAAe,EAAE,iCAAiC,CAAC;SAC5D,MAAM,CAAC,mBAAmB,EAAE,cAAc,EAAE,GAAG,CAAC;SAChD,MAAM,CAAC,KAAK,EAAE,WAAmB,EAAE,IAAI,EAAE,EAAE;QAC1C,WAAW,EAAE,CAAC;QACd,SAAS,EAAE,CAAC;QACZ,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,CAAC;QAE3D,MAAM,WAAW,GAAG,IAAA,cAAO,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,gBAAgB,GAAG,IAAI,8BAAS,CAAC,WAAW,CAAC,CAAC;QAEpD,IAAI,CAAC;YACH,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAClC,gBAAgB,CAAC,IAAI,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YACzF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,uBAAuB,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAClF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAK,GAAa,CAAC,OAAO,IAAI,CAAC,CAAC;YAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,YAAY;SACT,OAAO,CAAC,eAAe,CAAC;SACxB,WAAW,CAAC,uCAAuC,CAAC;SACpD,QAAQ,CAAC,QAAQ,EAAE,kEAAkE,CAAC;SACtF,MAAM,CAAC,mBAAmB,EAAE,cAAc,EAAE,GAAG,CAAC;SAChD,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,IAAI,EAAE,EAAE;QACnC,WAAW,EAAE,CAAC;QACd,SAAS,EAAE,CAAC;QACZ,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,sCAAsC,CAAC,IAAI,CAAC,CAAC;QAErE,MAAM,WAAW,GAAG,IAAA,cAAO,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,YAAY,GAAG,IAAA,cAAO,EAAC,IAAI,CAAC,CAAC;QACnC,MAAM,gBAAgB,GAAG,IAAI,8BAAS,CAAC,WAAW,CAAC,CAAC;QAEpD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,gBAAgB,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;YAC7D,gBAAgB,CAAC,IAAI,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,KAAK,6BAA6B,CAAC,CAAC;YAC7E,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,uBAAuB,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAClF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAK,GAAa,CAAC,OAAO,IAAI,CAAC,CAAC;YAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,YAAY;SACT,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,mCAAmC,CAAC;SAChD,MAAM,CAAC,mBAAmB,EAAE,cAAc,EAAE,GAAG,CAAC;SAChD,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,WAAW,EAAE,CAAC;QACd,SAAS,EAAE,CAAC;QACZ,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAAC,CAAC;QAE5D,MAAM,WAAW,GAAG,IAAA,cAAO,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,gBAAgB,GAAG,IAAI,8BAAS,CAAC,WAAW,CAAC,CAAC;QAEpD,IAAI,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,8BAA8B,CAAC,IAAI,CAAC,CAAC;YAC5D,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,gBAAgB,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;QAC/E,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,iCAAiC,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;AACP,CAAC"}
+{"version":3,"file":"secrets-allowlist.js","sourceRoot":"","sources":["../../src/commands/secrets-allowlist.ts"],"names":[],"mappings":";AAAA;;;GAGG;;AAgBH,0EA0EC;AAvFD,+BAA+B;AAC/B,kDAAiE;AAGjE,MAAM,CAAC,GAAG;IACR,KAAK,EAAE,SAAS;IAChB,IAAI,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS;IACzC,GAAG,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS;IACxC,OAAO,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS;IAC7C,IAAI,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS;IAC1C,KAAK,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS;CAC5C,CAAC;AAEF,SAAgB,+BAA+B,CAAC,OAAgB,EAAE,WAAsB,EAAE,SAAqB;IAC7G,MAAM,YAAY,GAAG,OAAO;SACzB,OAAO,CAAC,mBAAmB,CAAC;SAC5B,WAAW,CAAC,0BAA0B,CAAC,CAAC;IAE3C,YAAY;SACT,OAAO,CAAC,KAAK,CAAC;SACd,WAAW,CAAC,oCAAoC,CAAC;SACjD,QAAQ,CAAC,eAAe,EAAE,iCAAiC,CAAC;SAC5D,MAAM,CAAC,mBAAmB,EAAE,cAAc,EAAE,GAAG,CAAC;SAChD,MAAM,CAAC,KAAK,EAAE,WAAmB,EAAE,IAAI,EAAE,EAAE;QAC1C,WAAW,EAAE,CAAC;QACd,SAAS,EAAE,CAAC;QACZ,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,CAAC;QAE3D,MAAM,WAAW,GAAG,IAAA,cAAO,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,gBAAgB,GAAG,IAAI,oBAAS,CAAC,WAAW,CAAC,CAAC;QAEpD,IAAI,CAAC;YACH,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAClC,gBAAgB,CAAC,IAAI,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YACzF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,uBAAuB,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAClF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAK,GAAa,CAAC,OAAO,IAAI,CAAC,CAAC;YAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,YAAY;SACT,OAAO,CAAC,eAAe,CAAC;SACxB,WAAW,CAAC,uCAAuC,CAAC;SACpD,QAAQ,CAAC,QAAQ,EAAE,kEAAkE,CAAC;SACtF,MAAM,CAAC,mBAAmB,EAAE,cAAc,EAAE,GAAG,CAAC;SAChD,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,IAAI,EAAE,EAAE;QACnC,WAAW,EAAE,CAAC;QACd,SAAS,EAAE,CAAC;QACZ,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,sCAAsC,CAAC,IAAI,CAAC,CAAC;QAErE,MAAM,WAAW,GAAG,IAAA,cAAO,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,YAAY,GAAG,IAAA,cAAO,EAAC,IAAI,CAAC,CAAC;QACnC,MAAM,gBAAgB,GAAG,IAAI,oBAAS,CAAC,WAAW,CAAC,CAAC;QAEpD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,gBAAgB,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;YAC7D,gBAAgB,CAAC,IAAI,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,KAAK,6BAA6B,CAAC,CAAC;YAC7E,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,uBAAuB,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAClF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAK,GAAa,CAAC,OAAO,IAAI,CAAC,CAAC;YAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,YAAY;SACT,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,mCAAmC,CAAC;SAChD,MAAM,CAAC,mBAAmB,EAAE,cAAc,EAAE,GAAG,CAAC;SAChD,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,WAAW,EAAE,CAAC;QACd,SAAS,EAAE,CAAC;QACZ,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAAC,CAAC;QAE5D,MAAM,WAAW,GAAG,IAAA,cAAO,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,gBAAgB,GAAG,IAAI,oBAAS,CAAC,WAAW,CAAC,CAAC;QAEpD,IAAI,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,8BAA8B,CAAC,IAAI,CAAC,CAAC;YAC5D,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,gBAAgB,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;QAC/E,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,iCAAiC,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/ship-consolidated.js

@@ -317,199 +317,199 @@ function getShipVerdictColor(verdict) {
 function generateShipHTMLReport(result) {
     const verdictColor = result.verdict === 'GO' ? '#10b981' : result.verdict === 'NO-GO' ? '#ef4444' : '#f59e0b';
     const verdictIcon = result.verdict === 'GO' ? '✓' : result.verdict === 'NO-GO' ? '✗' : '⚠';
-    return `<!DOCTYPE html>
-<html lang="en">
-<head>
-  <meta charset="UTF-8">
-  <meta name="viewport" content="width=device-width, initial-scale=1.0">
-  <title>vibecheck Ship Report - ${result.verdict}</title>
-  <style>
-    * { margin: 0; padding: 0; box-sizing: border-box; }
-    body {
-      font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, 'Helvetica Neue', Arial, sans-serif;
-      background: #0f172a;
-      color: #e2e8f0;
-      line-height: 1.6;
-      padding: 2rem;
-    }
-    .container { max-width: 1200px; margin: 0 auto; }
-    .header {
-      background: #1e293b;
-      border-radius: 12px;
-      padding: 2rem;
-      margin-bottom: 2rem;
-      border-left: 4px solid ${verdictColor};
-    }
-    .verdict {
-      font-size: 2rem;
-      font-weight: bold;
-      color: ${verdictColor};
-      margin-bottom: 0.5rem;
-    }
-    .timestamp { color: #94a3b8; font-size: 0.9rem; }
-    .section {
-      background: #1e293b;
-      border-radius: 12px;
-      padding: 1.5rem;
-      margin-bottom: 1.5rem;
-    }
-    .section-title {
-      font-size: 1.25rem;
-      font-weight: bold;
-      margin-bottom: 1rem;
-      color: #f1f5f9;
-    }
-    .metric {
-      display: inline-block;
-      background: #334155;
-      padding: 0.5rem 1rem;
-      border-radius: 6px;
-      margin-right: 1rem;
-      margin-bottom: 0.5rem;
-    }
-    .metric-value {
-      font-size: 1.5rem;
-      font-weight: bold;
-      color: #60a5fa;
-    }
-    .metric-label {
-      font-size: 0.875rem;
-      color: #94a3b8;
-    }
-    .finding {
-      background: #0f172a;
-      border-left: 3px solid #ef4444;
-      padding: 1rem;
-      margin-bottom: 0.75rem;
-      border-radius: 6px;
-    }
-    .finding-id {
-      font-family: 'Monaco', 'Courier New', monospace;
-      color: #60a5fa;
-      font-weight: bold;
-    }
-    .finding-file {
-      color: #94a3b8;
-      font-size: 0.875rem;
-      margin-top: 0.25rem;
-    }
-    .next-actions {
-      background: #1e293b;
-      border-radius: 12px;
-      padding: 1.5rem;
-      margin-top: 2rem;
-    }
-    .action {
-      background: #334155;
-      padding: 0.75rem 1rem;
-      border-radius: 6px;
-      margin-bottom: 0.5rem;
-      font-family: 'Monaco', 'Courier New', monospace;
-      color: #60a5fa;
-    }
-    .badge {
-      display: inline-block;
-      padding: 0.25rem 0.75rem;
-      border-radius: 4px;
-      font-size: 0.75rem;
-      font-weight: bold;
-      margin-left: 0.5rem;
-    }
-    .badge-critical { background: #ef4444; color: white; }
-    .badge-high { background: #f59e0b; color: white; }
-    .badge-medium { background: #3b82f6; color: white; }
-    .badge-low { background: #6b7280; color: white; }
-  </style>
-</head>
-<body>
-  <div class="container">
-    <div class="header">
-      <div class="verdict">${verdictIcon} ${result.verdict}</div>
-      <div class="timestamp">Generated: ${new Date(result.timestamp).toLocaleString()}</div>
-      <div class="timestamp">Project: ${result.projectPath}</div>
-    </div>
-
-    <div class="section">
-      <div class="section-title">Summary</div>
-      <div class="metric">
-        <div class="metric-value">${result.scan.summary.totalFindings}</div>
-        <div class="metric-label">Scan Findings</div>
-      </div>
-      <div class="metric">
-        <div class="metric-value">${result.deadUI.summary.total}</div>
-        <div class="metric-label">Dead UI Issues</div>
-      </div>
-      ${result.playwright.ran ? `
-      <div class="metric">
-        <div class="metric-value">${result.playwright.summary.passed}/${result.playwright.summary.totalActions}</div>
-        <div class="metric-label">Playwright Actions</div>
-      </div>
-      ` : ''}
-    </div>
-
-    ${result.scan.topBlockers.length > 0 ? `
-    <div class="section">
-      <div class="section-title">Top Blockers</div>
-      ${result.scan.topBlockers.slice(0, 10).map(blocker => `
-        <div class="finding">
-          <div class="finding-id">${blocker.id}</div>
-          <div>${blocker.type} - ${blocker.severity}</div>
-          <div class="finding-file">${blocker.file}:${blocker.line}</div>
-        </div>
-      `).join('')}
-    </div>
-    ` : ''}
-
-    ${result.deadUI.findings.length > 0 ? `
-    <div class="section">
-      <div class="section-title">Dead UI Issues</div>
-      ${result.deadUI.findings.slice(0, 10).map(finding => `
-        <div class="finding">
-          <div class="finding-id">${finding.id}</div>
-          <div>${finding.issue}</div>
-          <div class="finding-file">${finding.file}:${finding.line}</div>
-          <div style="margin-top: 0.5rem; color: #94a3b8; font-size: 0.875rem;">
-            Suggestion: ${finding.suggestion}
-          </div>
-        </div>
-      `).join('')}
-    </div>
-    ` : ''}
-
-    ${result.playwright.failures.length > 0 ? `
-    <div class="section">
-      <div class="section-title">Playwright Failures</div>
-      ${result.playwright.failures.map((failure, i) => `
-        <div class="finding">
-          <div class="finding-id">Test ${i + 1}</div>
-          <div>${failure.test}</div>
-          <div style="color: #ef4444; margin-top: 0.5rem;">${failure.error}</div>
-          ${failure.trace ? `<div style="margin-top: 0.5rem; color: #60a5fa;">Trace: ${failure.trace}</div>` : ''}
-        </div>
-      `).join('')}
-    </div>
-    ` : ''}
-
-    ${result.proofBundle ? `
-    <div class="section">
-      <div class="section-title">Proof Bundle</div>
-      <div style="color: #94a3b8;">
-        Proof bundle available at: ${result.proofBundle.path}
-      </div>
-      <div style="margin-top: 0.5rem; color: #94a3b8; font-size: 0.875rem;">
-        Includes: ${result.proofBundle.includes.join(', ')}
-      </div>
-    </div>
-    ` : ''}
-
-    <div class="next-actions">
-      <div class="section-title">Next Actions</div>
-      ${result.nextActions.map(action => `
-        <div class="action">${action}</div>
-      `).join('')}
-    </div>
-  </div>
-</body>
+    return `<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>vibecheck Ship Report - ${result.verdict}</title>
+  <style>
+    * { margin: 0; padding: 0; box-sizing: border-box; }
+    body {
+      font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, 'Helvetica Neue', Arial, sans-serif;
+      background: #0f172a;
+      color: #e2e8f0;
+      line-height: 1.6;
+      padding: 2rem;
+    }
+    .container { max-width: 1200px; margin: 0 auto; }
+    .header {
+      background: #1e293b;
+      border-radius: 12px;
+      padding: 2rem;
+      margin-bottom: 2rem;
+      border-left: 4px solid ${verdictColor};
+    }
+    .verdict {
+      font-size: 2rem;
+      font-weight: bold;
+      color: ${verdictColor};
+      margin-bottom: 0.5rem;
+    }
+    .timestamp { color: #94a3b8; font-size: 0.9rem; }
+    .section {
+      background: #1e293b;
+      border-radius: 12px;
+      padding: 1.5rem;
+      margin-bottom: 1.5rem;
+    }
+    .section-title {
+      font-size: 1.25rem;
+      font-weight: bold;
+      margin-bottom: 1rem;
+      color: #f1f5f9;
+    }
+    .metric {
+      display: inline-block;
+      background: #334155;
+      padding: 0.5rem 1rem;
+      border-radius: 6px;
+      margin-right: 1rem;
+      margin-bottom: 0.5rem;
+    }
+    .metric-value {
+      font-size: 1.5rem;
+      font-weight: bold;
+      color: #60a5fa;
+    }
+    .metric-label {
+      font-size: 0.875rem;
+      color: #94a3b8;
+    }
+    .finding {
+      background: #0f172a;
+      border-left: 3px solid #ef4444;
+      padding: 1rem;
+      margin-bottom: 0.75rem;
+      border-radius: 6px;
+    }
+    .finding-id {
+      font-family: 'Monaco', 'Courier New', monospace;
+      color: #60a5fa;
+      font-weight: bold;
+    }
+    .finding-file {
+      color: #94a3b8;
+      font-size: 0.875rem;
+      margin-top: 0.25rem;
+    }
+    .next-actions {
+      background: #1e293b;
+      border-radius: 12px;
+      padding: 1.5rem;
+      margin-top: 2rem;
+    }
+    .action {
+      background: #334155;
+      padding: 0.75rem 1rem;
+      border-radius: 6px;
+      margin-bottom: 0.5rem;
+      font-family: 'Monaco', 'Courier New', monospace;
+      color: #60a5fa;
+    }
+    .badge {
+      display: inline-block;
+      padding: 0.25rem 0.75rem;
+      border-radius: 4px;
+      font-size: 0.75rem;
+      font-weight: bold;
+      margin-left: 0.5rem;
+    }
+    .badge-critical { background: #ef4444; color: white; }
+    .badge-high { background: #f59e0b; color: white; }
+    .badge-medium { background: #3b82f6; color: white; }
+    .badge-low { background: #6b7280; color: white; }
+  </style>
+</head>
+<body>
+  <div class="container">
+    <div class="header">
+      <div class="verdict">${verdictIcon} ${result.verdict}</div>
+      <div class="timestamp">Generated: ${new Date(result.timestamp).toLocaleString()}</div>
+      <div class="timestamp">Project: ${result.projectPath}</div>
+    </div>
+
+    <div class="section">
+      <div class="section-title">Summary</div>
+      <div class="metric">
+        <div class="metric-value">${result.scan.summary.totalFindings}</div>
+        <div class="metric-label">Scan Findings</div>
+      </div>
+      <div class="metric">
+        <div class="metric-value">${result.deadUI.summary.total}</div>
+        <div class="metric-label">Dead UI Issues</div>
+      </div>
+      ${result.playwright.ran ? `
+      <div class="metric">
+        <div class="metric-value">${result.playwright.summary.passed}/${result.playwright.summary.totalActions}</div>
+        <div class="metric-label">Playwright Actions</div>
+      </div>
+      ` : ''}
+    </div>
+
+    ${result.scan.topBlockers.length > 0 ? `
+    <div class="section">
+      <div class="section-title">Top Blockers</div>
+      ${result.scan.topBlockers.slice(0, 10).map(blocker => `
+        <div class="finding">
+          <div class="finding-id">${blocker.id}</div>
+          <div>${blocker.type} - ${blocker.severity}</div>
+          <div class="finding-file">${blocker.file}:${blocker.line}</div>
+        </div>
+      `).join('')}
+    </div>
+    ` : ''}
+
+    ${result.deadUI.findings.length > 0 ? `
+    <div class="section">
+      <div class="section-title">Dead UI Issues</div>
+      ${result.deadUI.findings.slice(0, 10).map(finding => `
+        <div class="finding">
+          <div class="finding-id">${finding.id}</div>
+          <div>${finding.issue}</div>
+          <div class="finding-file">${finding.file}:${finding.line}</div>
+          <div style="margin-top: 0.5rem; color: #94a3b8; font-size: 0.875rem;">
+            Suggestion: ${finding.suggestion}
+          </div>
+        </div>
+      `).join('')}
+    </div>
+    ` : ''}
+
+    ${result.playwright.failures.length > 0 ? `
+    <div class="section">
+      <div class="section-title">Playwright Failures</div>
+      ${result.playwright.failures.map((failure, i) => `
+        <div class="finding">
+          <div class="finding-id">Test ${i + 1}</div>
+          <div>${failure.test}</div>
+          <div style="color: #ef4444; margin-top: 0.5rem;">${failure.error}</div>
+          ${failure.trace ? `<div style="margin-top: 0.5rem; color: #60a5fa;">Trace: ${failure.trace}</div>` : ''}
+        </div>
+      `).join('')}
+    </div>
+    ` : ''}
+
+    ${result.proofBundle ? `
+    <div class="section">
+      <div class="section-title">Proof Bundle</div>
+      <div style="color: #94a3b8;">
+        Proof bundle available at: ${result.proofBundle.path}
+      </div>
+      <div style="margin-top: 0.5rem; color: #94a3b8; font-size: 0.875rem;">
+        Includes: ${result.proofBundle.includes.join(', ')}
+      </div>
+    </div>
+    ` : ''}
+
+    <div class="next-actions">
+      <div class="section-title">Next Actions</div>
+      ${result.nextActions.map(action => `
+        <div class="action">${action}</div>
+      `).join('')}
+    </div>
+  </div>
+</body>
 </html>`;
 }
 //# sourceMappingURL=ship-consolidated.js.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA;;;;GAIG;AAuHH,QAAA,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;CAoBV,CAAC;AAEF,QAAA,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;CAkCX,CAAC;AA0KF,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAGpC,wBAAsB,YAAY,CAAC,CAAC,SAAS,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,CAAC,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAyDvI;AAgHD,iBAAS,SAAS,SAEjB"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA;;;;GAIG;AAwHH,QAAA,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;CAoBV,CAAC;AAEF,QAAA,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;CAkCX,CAAC;AA0KF,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAGpC,wBAAsB,YAAY,CAAC,CAAC,SAAS,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,CAAC,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAyDvI;AAgHD,iBAAS,SAAS,SAEjB"}

package/dist/index.js

@@ -48,7 +48,7 @@ const fs_1 = require("fs");
 const path_2 = require("path");
 // Use package.json version instead of hardcoding
 const { version: CLI_VERSION = '0.0.0' } = require('../package.json');
-const vibecheck_security_1 = require('./bundles/vibecheck-security');
+const security_1 = require('./bundles/vibecheck-security');
 const creds_1 = require("./runtime/creds");
 const client_1 = require("./runtime/client");
 const exit_codes_1 = require("./runtime/exit-codes");
@@ -3058,7 +3058,7 @@ function countFiles(dir) {
 }
 async function generateFindings(projectPath) {
     const findings = [];
-    const guardian = new vibecheck_security_1.SecretsGuardian();
+    const guardian = new security_1.SecretsGuardian();
     // File extensions to scan for secrets
     const scanExtensions = ['.ts', '.js', '.tsx', '.jsx', '.json', '.env', '.yaml', '.yml', '.toml', '.py', '.rb'];
     // Recursively get files to scan
@@ -3155,7 +3155,7 @@ async function generateFindings(projectPath) {
 }
 async function scanSecrets(projectPath, options) {
     const s = spinner('Scanning for hardcoded secrets...');
-    const guardian = new vibecheck_security_1.SecretsGuardian();
+    const guardian = new security_1.SecretsGuardian();
     // Use enterprise-grade scanProject instead of custom file walking
     // Handles: ignores, binary files, size caps, concurrency, dedupe
     const report = await guardian.scanProject(projectPath, 'cli-scan', {
@@ -3331,7 +3331,7 @@ async function scanCompliance(projectPath, options) {
 }
 async function generateSBOM(projectPath, options) {
     const s = spinner('Generating Software Bill of Materials...');
-    const sbomGenerator = new vibecheck_security_1.SBOMGenerator();
+    const sbomGenerator = new security_1.SBOMGenerator();
     try {
         const sbom = await sbomGenerator.generate(projectPath, {
             format: options.format || 'cyclonedx',
@@ -3407,7 +3407,7 @@ async function generateSBOM(projectPath, options) {
 }
 async function generateContainerSBOM(imageName, options) {
     const s = spinner('Generating container SBOM...');
-    const sbomGenerator = new vibecheck_security_1.SBOMGenerator();
+    const sbomGenerator = new security_1.SBOMGenerator();
     try {
         const sbom = await sbomGenerator.generateContainerSBOM(imageName, {
             format: options.format || 'cyclonedx',