@vibecheckai/cli 2.8.2 → 3.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (454) hide show
  1. package/README.md +8 -8
  2. package/bin/_deprecations.js +35 -0
  3. package/bin/_router.js +46 -0
  4. package/bin/cli-hygiene.js +241 -0
  5. package/bin/guardrail.js +834 -0
  6. package/bin/runners/cli-utils.js +1070 -0
  7. package/bin/runners/context/ai-task-decomposer.js +337 -0
  8. package/bin/runners/context/analyzer.js +462 -0
  9. package/bin/runners/context/api-contracts.js +427 -0
  10. package/bin/runners/context/context-diff.js +342 -0
  11. package/bin/runners/context/context-pruner.js +291 -0
  12. package/bin/runners/context/dependency-graph.js +414 -0
  13. package/bin/runners/context/generators/claude.js +107 -0
  14. package/bin/runners/context/generators/codex.js +108 -0
  15. package/bin/runners/context/generators/copilot.js +119 -0
  16. package/bin/runners/context/generators/cursor.js +514 -0
  17. package/bin/runners/context/generators/mcp.js +151 -0
  18. package/bin/runners/context/generators/windsurf.js +180 -0
  19. package/bin/runners/context/git-context.js +302 -0
  20. package/bin/runners/context/index.js +1042 -0
  21. package/bin/runners/context/insights.js +173 -0
  22. package/bin/runners/context/mcp-server/generate-rules.js +337 -0
  23. package/bin/runners/context/mcp-server/index.js +1176 -0
  24. package/bin/runners/context/mcp-server/package.json +24 -0
  25. package/bin/runners/context/memory.js +200 -0
  26. package/bin/runners/context/monorepo.js +215 -0
  27. package/bin/runners/context/multi-repo-federation.js +404 -0
  28. package/bin/runners/context/patterns.js +253 -0
  29. package/bin/runners/context/proof-context.js +972 -0
  30. package/bin/runners/context/security-scanner.js +303 -0
  31. package/bin/runners/context/semantic-search.js +350 -0
  32. package/bin/runners/context/shared.js +264 -0
  33. package/bin/runners/context/team-conventions.js +310 -0
  34. package/bin/runners/lib/ai-bridge.js +416 -0
  35. package/bin/runners/lib/analysis-core.js +271 -0
  36. package/bin/runners/lib/analyzers.js +541 -0
  37. package/bin/runners/lib/audit-bridge.js +391 -0
  38. package/bin/runners/lib/auth-truth.js +193 -0
  39. package/bin/runners/lib/auth.js +215 -0
  40. package/bin/runners/lib/backup.js +62 -0
  41. package/bin/runners/lib/billing.js +107 -0
  42. package/bin/runners/lib/claims.js +118 -0
  43. package/bin/runners/lib/cli-ui.js +540 -0
  44. package/bin/runners/lib/compliance-bridge-new.js +0 -0
  45. package/bin/runners/lib/compliance-bridge.js +165 -0
  46. package/bin/runners/lib/contracts/auth-contract.js +194 -0
  47. package/bin/runners/lib/contracts/env-contract.js +178 -0
  48. package/bin/runners/lib/contracts/external-contract.js +198 -0
  49. package/bin/runners/lib/contracts/guard.js +168 -0
  50. package/bin/runners/lib/contracts/index.js +89 -0
  51. package/bin/runners/lib/contracts/plan-validator.js +311 -0
  52. package/bin/runners/lib/contracts/route-contract.js +192 -0
  53. package/bin/runners/lib/detect.js +89 -0
  54. package/bin/runners/lib/doctor/autofix.js +254 -0
  55. package/bin/runners/lib/doctor/index.js +37 -0
  56. package/bin/runners/lib/doctor/modules/dependencies.js +325 -0
  57. package/bin/runners/lib/doctor/modules/index.js +46 -0
  58. package/bin/runners/lib/doctor/modules/network.js +250 -0
  59. package/bin/runners/lib/doctor/modules/project.js +312 -0
  60. package/bin/runners/lib/doctor/modules/runtime.js +224 -0
  61. package/bin/runners/lib/doctor/modules/security.js +348 -0
  62. package/bin/runners/lib/doctor/modules/system.js +213 -0
  63. package/bin/runners/lib/doctor/modules/vibecheck.js +394 -0
  64. package/bin/runners/lib/doctor/reporter.js +262 -0
  65. package/bin/runners/lib/doctor/service.js +262 -0
  66. package/bin/runners/lib/doctor/types.js +113 -0
  67. package/bin/runners/lib/doctor/ui.js +263 -0
  68. package/bin/runners/lib/doctor-enhanced.js +233 -0
  69. package/bin/runners/lib/doctor-v2.js +608 -0
  70. package/bin/runners/lib/enforcement.js +72 -0
  71. package/bin/runners/lib/enterprise-detect.js +603 -0
  72. package/bin/runners/lib/enterprise-init.js +942 -0
  73. package/bin/runners/lib/entitlements-v2.js +381 -0
  74. package/bin/runners/lib/entitlements.generated.js +0 -0
  75. package/bin/runners/lib/entitlements.js +332 -0
  76. package/bin/runners/lib/env-template.js +66 -0
  77. package/bin/runners/lib/env.js +189 -0
  78. package/bin/runners/lib/error-handler.js +320 -0
  79. package/bin/runners/lib/firewall-prompt.js +50 -0
  80. package/bin/runners/lib/graph/graph-builder.js +265 -0
  81. package/bin/runners/lib/graph/html-renderer.js +413 -0
  82. package/bin/runners/lib/graph/index.js +32 -0
  83. package/bin/runners/lib/graph/runtime-collector.js +215 -0
  84. package/bin/runners/lib/graph/static-extractor.js +518 -0
  85. package/bin/runners/lib/init-wizard.js +308 -0
  86. package/bin/runners/lib/json-output.js +76 -0
  87. package/bin/runners/lib/llm.js +75 -0
  88. package/bin/runners/lib/meter.js +61 -0
  89. package/bin/runners/lib/missions/evidence.js +126 -0
  90. package/bin/runners/lib/missions/plan.js +69 -0
  91. package/bin/runners/lib/missions/templates.js +147 -0
  92. package/bin/runners/lib/patch.js +40 -0
  93. package/bin/runners/lib/permissions/auth-model.js +213 -0
  94. package/bin/runners/lib/permissions/idor-prover.js +205 -0
  95. package/bin/runners/lib/permissions/index.js +45 -0
  96. package/bin/runners/lib/permissions/matrix-builder.js +198 -0
  97. package/bin/runners/lib/pkgjson.js +28 -0
  98. package/bin/runners/lib/preflight.js +142 -0
  99. package/bin/runners/lib/reality-findings.js +84 -0
  100. package/bin/runners/lib/redact.js +29 -0
  101. package/bin/runners/lib/replay/capsule-manager.js +154 -0
  102. package/bin/runners/lib/replay/index.js +263 -0
  103. package/bin/runners/lib/replay/player.js +348 -0
  104. package/bin/runners/lib/replay/recorder.js +331 -0
  105. package/bin/runners/lib/report-engine.js +447 -0
  106. package/bin/runners/lib/report-html.js +1117 -0
  107. package/bin/runners/lib/report-templates.js +964 -0
  108. package/bin/runners/lib/route-detection.js +1140 -0
  109. package/bin/runners/lib/route-truth.js +477 -0
  110. package/bin/runners/lib/sandbox/index.js +59 -0
  111. package/bin/runners/lib/sandbox/proof-chain.js +399 -0
  112. package/bin/runners/lib/sandbox/sandbox-runner.js +205 -0
  113. package/bin/runners/lib/sandbox/worktree.js +174 -0
  114. package/bin/runners/lib/scan-cache.js +330 -0
  115. package/bin/runners/lib/scan-output-schema.js +344 -0
  116. package/bin/runners/lib/score-history.js +282 -0
  117. package/bin/runners/lib/security-bridge.js +249 -0
  118. package/bin/runners/lib/server-usage.js +513 -0
  119. package/bin/runners/lib/share-pack.js +239 -0
  120. package/bin/runners/lib/snippets.js +67 -0
  121. package/bin/runners/lib/truth.js +667 -0
  122. package/bin/runners/lib/unified-output.js +189 -0
  123. package/bin/runners/lib/validate-patch.js +156 -0
  124. package/bin/runners/lib/verification.js +345 -0
  125. package/bin/runners/reality/engine.js +917 -0
  126. package/bin/runners/reality/flows.js +122 -0
  127. package/bin/runners/reality/report.js +378 -0
  128. package/bin/runners/reality/session.js +193 -0
  129. package/bin/runners/runAIAgent.js +2 -0
  130. package/bin/runners/runAudit.js +2 -0
  131. package/bin/runners/runAuth.js +106 -0
  132. package/bin/runners/runAutopilot.js +2 -0
  133. package/bin/runners/runBadge.js +2 -0
  134. package/bin/runners/runCertify.js +2 -0
  135. package/bin/runners/runClaimVerifier.js +483 -0
  136. package/bin/runners/runContext.js +56 -0
  137. package/bin/runners/runContextCompiler.js +385 -0
  138. package/bin/runners/runCtx.js +187 -0
  139. package/bin/runners/runCtxGuard.js +176 -0
  140. package/bin/runners/runCtxSync.js +116 -0
  141. package/bin/runners/runDashboard.js +10 -0
  142. package/bin/runners/runDoctor.js +245 -0
  143. package/bin/runners/runEnhancedShip.js +2 -0
  144. package/bin/runners/runFix.js +735 -0
  145. package/bin/runners/runFixPacks.js +2 -0
  146. package/bin/runners/runGate.js +17 -0
  147. package/bin/runners/runGraph.js +283 -0
  148. package/bin/runners/runInit.js +260 -0
  149. package/bin/runners/runInitGha.js +101 -0
  150. package/bin/runners/runInstall.js +76 -0
  151. package/bin/runners/runInteractive.js +388 -0
  152. package/bin/runners/runLaunch.js +2 -0
  153. package/bin/runners/runMcp.js +19 -0
  154. package/bin/runners/runMdc.js +2 -0
  155. package/bin/runners/runMissionGenerator.js +282 -0
  156. package/bin/runners/runNaturalLanguage.js +3 -0
  157. package/bin/runners/runPR.js +96 -0
  158. package/bin/runners/runPermissions.js +290 -0
  159. package/bin/runners/runPromptFirewall.js +211 -0
  160. package/bin/runners/runProof.js +2 -0
  161. package/bin/runners/runProve.js +392 -0
  162. package/bin/runners/runReality.js +489 -0
  163. package/bin/runners/runRealitySniff.js +2 -0
  164. package/bin/runners/runReplay.js +469 -0
  165. package/bin/runners/runReport.js +478 -0
  166. package/bin/runners/runScan.js +835 -0
  167. package/bin/runners/runShare.js +34 -0
  168. package/bin/runners/runShip.js +1062 -0
  169. package/bin/runners/runStatus.js +136 -0
  170. package/bin/runners/runTruthpack.js +634 -0
  171. package/bin/runners/runUpgrade.js +2 -0
  172. package/bin/runners/runValidate.js +2 -0
  173. package/bin/runners/runVerifyAgentOutput.js +2 -0
  174. package/bin/runners/runWatch.js +230 -0
  175. package/bin/runners/utils.js +360 -0
  176. package/bin/scan.js +612 -0
  177. package/bin/vibecheck.js +834 -0
  178. package/package.json +11 -11
  179. package/dist/autopatch/verified-autopatch.d.ts +0 -111
  180. package/dist/autopatch/verified-autopatch.d.ts.map +0 -1
  181. package/dist/autopatch/verified-autopatch.js +0 -503
  182. package/dist/autopatch/verified-autopatch.js.map +0 -1
  183. package/dist/bundles/index.js +0 -8
  184. package/dist/bundles/vibecheck-core.js +0 -25799
  185. package/dist/bundles/vibecheck-security.js +0 -208693
  186. package/dist/bundles/vibecheck-ship.js +0 -2318
  187. package/dist/commands/baseline.d.ts +0 -7
  188. package/dist/commands/baseline.d.ts.map +0 -1
  189. package/dist/commands/baseline.js +0 -79
  190. package/dist/commands/baseline.js.map +0 -1
  191. package/dist/commands/cache.d.ts +0 -13
  192. package/dist/commands/cache.d.ts.map +0 -1
  193. package/dist/commands/cache.js +0 -165
  194. package/dist/commands/cache.js.map +0 -1
  195. package/dist/commands/checkpoint.d.ts +0 -8
  196. package/dist/commands/checkpoint.d.ts.map +0 -1
  197. package/dist/commands/checkpoint.js +0 -35
  198. package/dist/commands/checkpoint.js.map +0 -1
  199. package/dist/commands/doctor.d.ts +0 -17
  200. package/dist/commands/doctor.d.ts.map +0 -1
  201. package/dist/commands/doctor.js +0 -226
  202. package/dist/commands/doctor.js.map +0 -1
  203. package/dist/commands/evidence.d.ts +0 -45
  204. package/dist/commands/evidence.d.ts.map +0 -1
  205. package/dist/commands/evidence.js +0 -197
  206. package/dist/commands/evidence.js.map +0 -1
  207. package/dist/commands/explain.d.ts +0 -8
  208. package/dist/commands/explain.d.ts.map +0 -1
  209. package/dist/commands/explain.js +0 -52
  210. package/dist/commands/explain.js.map +0 -1
  211. package/dist/commands/fix-consolidated.d.ts +0 -19
  212. package/dist/commands/fix-consolidated.d.ts.map +0 -1
  213. package/dist/commands/fix-consolidated.js +0 -165
  214. package/dist/commands/fix-consolidated.js.map +0 -1
  215. package/dist/commands/index.d.ts +0 -8
  216. package/dist/commands/index.d.ts.map +0 -1
  217. package/dist/commands/index.js +0 -15
  218. package/dist/commands/index.js.map +0 -1
  219. package/dist/commands/init.d.ts +0 -8
  220. package/dist/commands/init.d.ts.map +0 -1
  221. package/dist/commands/init.js +0 -125
  222. package/dist/commands/init.js.map +0 -1
  223. package/dist/commands/launcher.d.ts +0 -10
  224. package/dist/commands/launcher.d.ts.map +0 -1
  225. package/dist/commands/launcher.js +0 -174
  226. package/dist/commands/launcher.js.map +0 -1
  227. package/dist/commands/on.d.ts +0 -8
  228. package/dist/commands/on.d.ts.map +0 -1
  229. package/dist/commands/on.js +0 -123
  230. package/dist/commands/on.js.map +0 -1
  231. package/dist/commands/replay.d.ts +0 -8
  232. package/dist/commands/replay.d.ts.map +0 -1
  233. package/dist/commands/replay.js +0 -52
  234. package/dist/commands/replay.js.map +0 -1
  235. package/dist/commands/scan-consolidated.d.ts +0 -61
  236. package/dist/commands/scan-consolidated.d.ts.map +0 -1
  237. package/dist/commands/scan-consolidated.js +0 -243
  238. package/dist/commands/scan-consolidated.js.map +0 -1
  239. package/dist/commands/scan-secrets.d.ts +0 -47
  240. package/dist/commands/scan-secrets.d.ts.map +0 -1
  241. package/dist/commands/scan-secrets.js +0 -225
  242. package/dist/commands/scan-secrets.js.map +0 -1
  243. package/dist/commands/scan-vulnerabilities-enhanced.d.ts +0 -41
  244. package/dist/commands/scan-vulnerabilities-enhanced.d.ts.map +0 -1
  245. package/dist/commands/scan-vulnerabilities-enhanced.js +0 -368
  246. package/dist/commands/scan-vulnerabilities-enhanced.js.map +0 -1
  247. package/dist/commands/scan-vulnerabilities-osv.d.ts +0 -58
  248. package/dist/commands/scan-vulnerabilities-osv.d.ts.map +0 -1
  249. package/dist/commands/scan-vulnerabilities-osv.js +0 -722
  250. package/dist/commands/scan-vulnerabilities-osv.js.map +0 -1
  251. package/dist/commands/scan-vulnerabilities.d.ts +0 -32
  252. package/dist/commands/scan-vulnerabilities.d.ts.map +0 -1
  253. package/dist/commands/scan-vulnerabilities.js +0 -283
  254. package/dist/commands/scan-vulnerabilities.js.map +0 -1
  255. package/dist/commands/secrets-allowlist.d.ts +0 -7
  256. package/dist/commands/secrets-allowlist.d.ts.map +0 -1
  257. package/dist/commands/secrets-allowlist.js +0 -85
  258. package/dist/commands/secrets-allowlist.js.map +0 -1
  259. package/dist/commands/ship-consolidated.d.ts +0 -58
  260. package/dist/commands/ship-consolidated.d.ts.map +0 -1
  261. package/dist/commands/ship-consolidated.js +0 -515
  262. package/dist/commands/ship-consolidated.js.map +0 -1
  263. package/dist/commands/stats.d.ts +0 -8
  264. package/dist/commands/stats.d.ts.map +0 -1
  265. package/dist/commands/stats.js +0 -134
  266. package/dist/commands/stats.js.map +0 -1
  267. package/dist/commands/upgrade.d.ts +0 -8
  268. package/dist/commands/upgrade.d.ts.map +0 -1
  269. package/dist/commands/upgrade.js +0 -30
  270. package/dist/commands/upgrade.js.map +0 -1
  271. package/dist/fix/applicator.d.ts +0 -44
  272. package/dist/fix/applicator.d.ts.map +0 -1
  273. package/dist/fix/applicator.js +0 -144
  274. package/dist/fix/applicator.js.map +0 -1
  275. package/dist/fix/backup.d.ts +0 -38
  276. package/dist/fix/backup.d.ts.map +0 -1
  277. package/dist/fix/backup.js +0 -154
  278. package/dist/fix/backup.js.map +0 -1
  279. package/dist/fix/engine.d.ts +0 -55
  280. package/dist/fix/engine.d.ts.map +0 -1
  281. package/dist/fix/engine.js +0 -285
  282. package/dist/fix/engine.js.map +0 -1
  283. package/dist/fix/index.d.ts +0 -5
  284. package/dist/fix/index.d.ts.map +0 -1
  285. package/dist/fix/index.js +0 -12
  286. package/dist/fix/index.js.map +0 -1
  287. package/dist/fix/interactive.d.ts +0 -22
  288. package/dist/fix/interactive.d.ts.map +0 -1
  289. package/dist/fix/interactive.js +0 -172
  290. package/dist/fix/interactive.js.map +0 -1
  291. package/dist/formatters/index.d.ts +0 -6
  292. package/dist/formatters/index.d.ts.map +0 -1
  293. package/dist/formatters/index.js +0 -11
  294. package/dist/formatters/index.js.map +0 -1
  295. package/dist/formatters/sarif-enhanced.d.ts +0 -78
  296. package/dist/formatters/sarif-enhanced.d.ts.map +0 -1
  297. package/dist/formatters/sarif-enhanced.js +0 -144
  298. package/dist/formatters/sarif-enhanced.js.map +0 -1
  299. package/dist/formatters/sarif-v2.d.ts +0 -121
  300. package/dist/formatters/sarif-v2.d.ts.map +0 -1
  301. package/dist/formatters/sarif-v2.js +0 -356
  302. package/dist/formatters/sarif-v2.js.map +0 -1
  303. package/dist/formatters/sarif.d.ts +0 -72
  304. package/dist/formatters/sarif.d.ts.map +0 -1
  305. package/dist/formatters/sarif.js +0 -146
  306. package/dist/formatters/sarif.js.map +0 -1
  307. package/dist/index.d.ts +0 -61
  308. package/dist/index.d.ts.map +0 -1
  309. package/dist/index.js +0 -4388
  310. package/dist/index.js.map +0 -1
  311. package/dist/init/ci-generator.d.ts +0 -18
  312. package/dist/init/ci-generator.d.ts.map +0 -1
  313. package/dist/init/ci-generator.js +0 -317
  314. package/dist/init/ci-generator.js.map +0 -1
  315. package/dist/init/detect-framework.d.ts +0 -15
  316. package/dist/init/detect-framework.d.ts.map +0 -1
  317. package/dist/init/detect-framework.js +0 -301
  318. package/dist/init/detect-framework.js.map +0 -1
  319. package/dist/init/hooks-installer.d.ts +0 -22
  320. package/dist/init/hooks-installer.d.ts.map +0 -1
  321. package/dist/init/hooks-installer.js +0 -310
  322. package/dist/init/hooks-installer.js.map +0 -1
  323. package/dist/init/index.d.ts +0 -8
  324. package/dist/init/index.d.ts.map +0 -1
  325. package/dist/init/index.js +0 -22
  326. package/dist/init/index.js.map +0 -1
  327. package/dist/init/templates.d.ts +0 -402
  328. package/dist/init/templates.d.ts.map +0 -1
  329. package/dist/init/templates.js +0 -240
  330. package/dist/init/templates.js.map +0 -1
  331. package/dist/mcp/server.d.ts +0 -12
  332. package/dist/mcp/server.d.ts.map +0 -1
  333. package/dist/mcp/server.js +0 -42
  334. package/dist/mcp/server.js.map +0 -1
  335. package/dist/mcp/telemetry.d.ts +0 -40
  336. package/dist/mcp/telemetry.d.ts.map +0 -1
  337. package/dist/mcp/telemetry.js +0 -98
  338. package/dist/mcp/telemetry.js.map +0 -1
  339. package/dist/reality/no-dead-buttons/button-sweep-generator.d.ts +0 -32
  340. package/dist/reality/no-dead-buttons/button-sweep-generator.d.ts.map +0 -1
  341. package/dist/reality/no-dead-buttons/button-sweep-generator.js +0 -236
  342. package/dist/reality/no-dead-buttons/button-sweep-generator.js.map +0 -1
  343. package/dist/reality/no-dead-buttons/index.d.ts +0 -11
  344. package/dist/reality/no-dead-buttons/index.d.ts.map +0 -1
  345. package/dist/reality/no-dead-buttons/index.js +0 -18
  346. package/dist/reality/no-dead-buttons/index.js.map +0 -1
  347. package/dist/reality/no-dead-buttons/static-scanner.d.ts +0 -34
  348. package/dist/reality/no-dead-buttons/static-scanner.d.ts.map +0 -1
  349. package/dist/reality/no-dead-buttons/static-scanner.js +0 -230
  350. package/dist/reality/no-dead-buttons/static-scanner.js.map +0 -1
  351. package/dist/reality/reality-graph.d.ts +0 -192
  352. package/dist/reality/reality-graph.d.ts.map +0 -1
  353. package/dist/reality/reality-graph.js +0 -600
  354. package/dist/reality/reality-graph.js.map +0 -1
  355. package/dist/reality/reality-runner.d.ts +0 -89
  356. package/dist/reality/reality-runner.d.ts.map +0 -1
  357. package/dist/reality/reality-runner.js +0 -540
  358. package/dist/reality/reality-runner.js.map +0 -1
  359. package/dist/reality/receipt-generator.d.ts +0 -152
  360. package/dist/reality/receipt-generator.d.ts.map +0 -1
  361. package/dist/reality/receipt-generator.js +0 -495
  362. package/dist/reality/receipt-generator.js.map +0 -1
  363. package/dist/reality/runtime-tracer.d.ts +0 -75
  364. package/dist/reality/runtime-tracer.d.ts.map +0 -1
  365. package/dist/reality/runtime-tracer.js +0 -109
  366. package/dist/reality/runtime-tracer.js.map +0 -1
  367. package/dist/runtime/auth-utils.d.ts +0 -43
  368. package/dist/runtime/auth-utils.d.ts.map +0 -1
  369. package/dist/runtime/auth-utils.js +0 -130
  370. package/dist/runtime/auth-utils.js.map +0 -1
  371. package/dist/runtime/client.d.ts +0 -74
  372. package/dist/runtime/client.d.ts.map +0 -1
  373. package/dist/runtime/client.js +0 -222
  374. package/dist/runtime/client.js.map +0 -1
  375. package/dist/runtime/creds.d.ts +0 -48
  376. package/dist/runtime/creds.d.ts.map +0 -1
  377. package/dist/runtime/creds.js +0 -245
  378. package/dist/runtime/creds.js.map +0 -1
  379. package/dist/runtime/exit-codes.d.ts +0 -49
  380. package/dist/runtime/exit-codes.d.ts.map +0 -1
  381. package/dist/runtime/exit-codes.js +0 -93
  382. package/dist/runtime/exit-codes.js.map +0 -1
  383. package/dist/runtime/index.d.ts +0 -9
  384. package/dist/runtime/index.d.ts.map +0 -1
  385. package/dist/runtime/index.js +0 -25
  386. package/dist/runtime/index.js.map +0 -1
  387. package/dist/runtime/json-output.d.ts +0 -42
  388. package/dist/runtime/json-output.d.ts.map +0 -1
  389. package/dist/runtime/json-output.js +0 -59
  390. package/dist/runtime/json-output.js.map +0 -1
  391. package/dist/runtime/semver.d.ts +0 -37
  392. package/dist/runtime/semver.d.ts.map +0 -1
  393. package/dist/runtime/semver.js +0 -110
  394. package/dist/runtime/semver.js.map +0 -1
  395. package/dist/scan/dead-ui-detector.d.ts +0 -48
  396. package/dist/scan/dead-ui-detector.d.ts.map +0 -1
  397. package/dist/scan/dead-ui-detector.js +0 -170
  398. package/dist/scan/dead-ui-detector.js.map +0 -1
  399. package/dist/scan/playwright-sweep.d.ts +0 -40
  400. package/dist/scan/playwright-sweep.d.ts.map +0 -1
  401. package/dist/scan/playwright-sweep.js +0 -216
  402. package/dist/scan/playwright-sweep.js.map +0 -1
  403. package/dist/scan/proof-bundle.d.ts +0 -25
  404. package/dist/scan/proof-bundle.d.ts.map +0 -1
  405. package/dist/scan/proof-bundle.js +0 -203
  406. package/dist/scan/proof-bundle.js.map +0 -1
  407. package/dist/scan/proof-graph.d.ts +0 -59
  408. package/dist/scan/proof-graph.d.ts.map +0 -1
  409. package/dist/scan/proof-graph.js +0 -64
  410. package/dist/scan/proof-graph.js.map +0 -1
  411. package/dist/scan/reality-sniff.d.ts +0 -56
  412. package/dist/scan/reality-sniff.d.ts.map +0 -1
  413. package/dist/scan/reality-sniff.js +0 -200
  414. package/dist/scan/reality-sniff.js.map +0 -1
  415. package/dist/scan/structural-verifier.d.ts +0 -20
  416. package/dist/scan/structural-verifier.d.ts.map +0 -1
  417. package/dist/scan/structural-verifier.js +0 -112
  418. package/dist/scan/structural-verifier.js.map +0 -1
  419. package/dist/scan/verification-engine.d.ts +0 -47
  420. package/dist/scan/verification-engine.d.ts.map +0 -1
  421. package/dist/scan/verification-engine.js +0 -141
  422. package/dist/scan/verification-engine.js.map +0 -1
  423. package/dist/scanner/baseline.d.ts +0 -52
  424. package/dist/scanner/baseline.d.ts.map +0 -1
  425. package/dist/scanner/baseline.js +0 -85
  426. package/dist/scanner/baseline.js.map +0 -1
  427. package/dist/scanner/incremental.d.ts +0 -30
  428. package/dist/scanner/incremental.d.ts.map +0 -1
  429. package/dist/scanner/incremental.js +0 -82
  430. package/dist/scanner/incremental.js.map +0 -1
  431. package/dist/scanner/parallel.d.ts +0 -43
  432. package/dist/scanner/parallel.d.ts.map +0 -1
  433. package/dist/scanner/parallel.js +0 -99
  434. package/dist/scanner/parallel.js.map +0 -1
  435. package/dist/standalone.d.ts +0 -1
  436. package/dist/standalone.d.ts.map +0 -1
  437. package/dist/standalone.js +0 -1
  438. package/dist/standalone.js.map +0 -1
  439. package/dist/truth-pack/index.d.ts +0 -102
  440. package/dist/truth-pack/index.d.ts.map +0 -1
  441. package/dist/truth-pack/index.js +0 -694
  442. package/dist/truth-pack/index.js.map +0 -1
  443. package/dist/ui/frame.d.ts +0 -68
  444. package/dist/ui/frame.d.ts.map +0 -1
  445. package/dist/ui/frame.js +0 -165
  446. package/dist/ui/frame.js.map +0 -1
  447. package/dist/ui/index.d.ts +0 -5
  448. package/dist/ui/index.d.ts.map +0 -1
  449. package/dist/ui/index.js +0 -16
  450. package/dist/ui/index.js.map +0 -1
  451. package/dist/ui.d.ts +0 -36
  452. package/dist/ui.d.ts.map +0 -1
  453. package/dist/ui.js +0 -45
  454. package/dist/ui.js.map +0 -1
@@ -1,25 +0,0 @@
1
- /**
2
- * Proof Bundle Generator
3
- *
4
- * Creates zip file with traces/HAR/screenshots/log excerpts
5
- */
6
- export interface ProofBundle {
7
- path: string;
8
- includes: string[];
9
- metadata: {
10
- scanId: string;
11
- timestamp: string;
12
- verdict: 'PASS' | 'FAIL' | 'WARN';
13
- findings: number;
14
- };
15
- }
16
- export declare class ProofBundleGenerator {
17
- /**
18
- * Create proof bundle zip file
19
- */
20
- createBundle(artifactsDir: string, scanResult: any, proofGraph: any, deadUI: any, playwright: any): Promise<ProofBundle | null>;
21
- private getArchiver;
22
- private createZipWithArchiver;
23
- private createBundleManifest;
24
- }
25
- //# sourceMappingURL=proof-bundle.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"proof-bundle.d.ts","sourceRoot":"","sources":["../../src/scan/proof-bundle.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE;QACR,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;QAClC,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;CACH;AAED,qBAAa,oBAAoB;IAC/B;;OAEG;IACG,YAAY,CAChB,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,GAAG,EACf,UAAU,EAAE,GAAG,EACf,MAAM,EAAE,GAAG,EACX,UAAU,EAAE,GAAG,GACd,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;YA8HhB,WAAW;YAQX,qBAAqB;YAqBrB,oBAAoB;CAiBnC"}
@@ -1,203 +0,0 @@
1
- "use strict";
2
- /**
3
- * Proof Bundle Generator
4
- *
5
- * Creates zip file with traces/HAR/screenshots/log excerpts
6
- */
7
- var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
8
- if (k2 === undefined) k2 = k;
9
- var desc = Object.getOwnPropertyDescriptor(m, k);
10
- if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
11
- desc = { enumerable: true, get: function() { return m[k]; } };
12
- }
13
- Object.defineProperty(o, k2, desc);
14
- }) : (function(o, m, k, k2) {
15
- if (k2 === undefined) k2 = k;
16
- o[k2] = m[k];
17
- }));
18
- var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
19
- Object.defineProperty(o, "default", { enumerable: true, value: v });
20
- }) : function(o, v) {
21
- o["default"] = v;
22
- });
23
- var __importStar = (this && this.__importStar) || (function () {
24
- var ownKeys = function(o) {
25
- ownKeys = Object.getOwnPropertyNames || function (o) {
26
- var ar = [];
27
- for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
28
- return ar;
29
- };
30
- return ownKeys(o);
31
- };
32
- return function (mod) {
33
- if (mod && mod.__esModule) return mod;
34
- var result = {};
35
- if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
36
- __setModuleDefault(result, mod);
37
- return result;
38
- };
39
- })();
40
- Object.defineProperty(exports, "__esModule", { value: true });
41
- exports.ProofBundleGenerator = void 0;
42
- const fs_1 = require("fs");
43
- const path_1 = require("path");
44
- const crypto_1 = require("crypto");
45
- class ProofBundleGenerator {
46
- /**
47
- * Create proof bundle zip file
48
- */
49
- async createBundle(artifactsDir, scanResult, proofGraph, deadUI, playwright) {
50
- // Only create bundle if there are failures
51
- if (scanResult.verdict === 'PASS' && deadUI.findings.length === 0 && playwright.passed) {
52
- return null;
53
- }
54
- const bundlePath = (0, path_1.join)(artifactsDir, 'proofbundle.zip');
55
- const includes = [];
56
- // Collect all artifacts
57
- const artifacts = [];
58
- // Add scan.json
59
- const scanFile = (0, path_1.join)((0, path_1.dirname)(artifactsDir), 'scan.json');
60
- if ((0, fs_1.existsSync)(scanFile)) {
61
- artifacts.push({
62
- path: 'scan.json',
63
- content: (0, fs_1.readFileSync)(scanFile, 'utf-8'),
64
- });
65
- includes.push('scan.json');
66
- }
67
- // Add proof.json
68
- const proofFile = (0, path_1.join)((0, path_1.dirname)(artifactsDir), 'proof.json');
69
- if ((0, fs_1.existsSync)(proofFile)) {
70
- artifacts.push({
71
- path: 'proof.json',
72
- content: (0, fs_1.readFileSync)(proofFile, 'utf-8'),
73
- });
74
- includes.push('proof.json');
75
- }
76
- // Add dead-ui.json
77
- if (deadUI.findings.length > 0) {
78
- artifacts.push({
79
- path: 'dead-ui.json',
80
- content: JSON.stringify(deadUI, null, 2),
81
- });
82
- includes.push('dead-ui.json');
83
- }
84
- // Add Playwright traces
85
- if (playwright.traces && playwright.traces.length > 0) {
86
- playwright.traces.forEach((trace, index) => {
87
- if ((0, fs_1.existsSync)(trace)) {
88
- const traceName = `trace-${index}.zip`;
89
- artifacts.push({
90
- path: traceName,
91
- content: (0, fs_1.readFileSync)(trace),
92
- });
93
- includes.push(traceName);
94
- }
95
- });
96
- }
97
- // Add screenshots
98
- if (playwright.failures) {
99
- playwright.failures.forEach((failure, index) => {
100
- if (failure.screenshot && (0, fs_1.existsSync)(failure.screenshot)) {
101
- const screenshotName = `screenshot-${index}.png`;
102
- artifacts.push({
103
- path: screenshotName,
104
- content: (0, fs_1.readFileSync)(failure.screenshot),
105
- });
106
- includes.push(screenshotName);
107
- }
108
- });
109
- }
110
- // Create manifest
111
- const manifest = {
112
- version: '1.0.0',
113
- timestamp: new Date().toISOString(),
114
- scanId: scanResult.timestamp || Date.now().toString(),
115
- verdict: scanResult.verdict,
116
- findings: {
117
- scan: scanResult.summary?.totalFindings || 0,
118
- deadUI: deadUI.summary?.total || 0,
119
- playwright: playwright.summary?.failed || 0,
120
- },
121
- includes,
122
- };
123
- artifacts.push({
124
- path: 'manifest.json',
125
- content: JSON.stringify(manifest, null, 2),
126
- });
127
- includes.push('manifest.json');
128
- // Create zip file
129
- try {
130
- // Try to use archiver if available
131
- const archiver = await this.getArchiver();
132
- if (archiver) {
133
- await this.createZipWithArchiver(bundlePath, artifacts);
134
- }
135
- else {
136
- // Fallback: create tar or just list files
137
- await this.createBundleManifest(bundlePath, artifacts, manifest);
138
- }
139
- }
140
- catch (error) {
141
- // If zip creation fails, create a manifest file instead
142
- await this.createBundleManifest(bundlePath.replace('.zip', '.json'), artifacts, manifest);
143
- return {
144
- path: bundlePath.replace('.zip', '.json'),
145
- includes,
146
- metadata: {
147
- scanId: manifest.scanId,
148
- timestamp: manifest.timestamp,
149
- verdict: manifest.verdict,
150
- findings: manifest.findings.scan + manifest.findings.deadUI + manifest.findings.playwright,
151
- },
152
- };
153
- }
154
- return {
155
- path: bundlePath,
156
- includes,
157
- metadata: {
158
- scanId: manifest.scanId,
159
- timestamp: manifest.timestamp,
160
- verdict: manifest.verdict,
161
- findings: manifest.findings.scan + manifest.findings.deadUI + manifest.findings.playwright,
162
- },
163
- };
164
- }
165
- async getArchiver() {
166
- try {
167
- return await Promise.resolve().then(() => __importStar(require('archiver')));
168
- }
169
- catch {
170
- return null;
171
- }
172
- }
173
- async createZipWithArchiver(bundlePath, artifacts) {
174
- const archiver = await this.getArchiver();
175
- if (!archiver)
176
- return;
177
- return new Promise((resolve, reject) => {
178
- const output = (0, fs_1.createWriteStream)(bundlePath);
179
- const archive = archiver.default('zip', { zlib: { level: 9 } });
180
- output.on('close', () => resolve());
181
- archive.on('error', reject);
182
- archive.pipe(output);
183
- artifacts.forEach(artifact => {
184
- archive.append(artifact.content, { name: artifact.path });
185
- });
186
- archive.finalize();
187
- });
188
- }
189
- async createBundleManifest(manifestPath, artifacts, manifest) {
190
- const manifestContent = {
191
- ...manifest,
192
- artifacts: artifacts.map(a => ({
193
- path: a.path,
194
- size: Buffer.isBuffer(a.content) ? a.content.length : Buffer.byteLength(a.content, 'utf-8'),
195
- hash: (0, crypto_1.createHash)('sha256').update(a.content).digest('hex').substring(0, 16),
196
- })),
197
- };
198
- const { writeFileSync } = await Promise.resolve().then(() => __importStar(require('fs')));
199
- writeFileSync(manifestPath, JSON.stringify(manifestContent, null, 2));
200
- }
201
- }
202
- exports.ProofBundleGenerator = ProofBundleGenerator;
203
- //# sourceMappingURL=proof-bundle.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"proof-bundle.js","sourceRoot":"","sources":["../../src/scan/proof-bundle.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,2BAAiE;AACjE,+BAAqC;AACrC,mCAAoC;AAapC,MAAa,oBAAoB;IAC/B;;OAEG;IACH,KAAK,CAAC,YAAY,CAChB,YAAoB,EACpB,UAAe,EACf,UAAe,EACf,MAAW,EACX,UAAe;QAEf,2CAA2C;QAC3C,IAAI,UAAU,CAAC,OAAO,KAAK,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;YACvF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,UAAU,GAAG,IAAA,WAAI,EAAC,YAAY,EAAE,iBAAiB,CAAC,CAAC;QACzD,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,wBAAwB;QACxB,MAAM,SAAS,GAAsD,EAAE,CAAC;QAExE,gBAAgB;QAChB,MAAM,QAAQ,GAAG,IAAA,WAAI,EAAC,IAAA,cAAO,EAAC,YAAY,CAAC,EAAE,WAAW,CAAC,CAAC;QAC1D,IAAI,IAAA,eAAU,EAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,IAAA,iBAAY,EAAC,QAAQ,EAAE,OAAO,CAAC;aACzC,CAAC,CAAC;YACH,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC7B,CAAC;QAED,iBAAiB;QACjB,MAAM,SAAS,GAAG,IAAA,WAAI,EAAC,IAAA,cAAO,EAAC,YAAY,CAAC,EAAE,YAAY,CAAC,CAAC;QAC5D,IAAI,IAAA,eAAU,EAAC,SAAS,CAAC,EAAE,CAAC;YAC1B,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,YAAY;gBAClB,OAAO,EAAE,IAAA,iBAAY,EAAC,SAAS,EAAE,OAAO,CAAC;aAC1C,CAAC,CAAC;YACH,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC9B,CAAC;QAED,mBAAmB;QACnB,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;aACzC,CAAC,CAAC;YACH,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAChC,CAAC;QAED,wBAAwB;QACxB,IAAI,UAAU,CAAC,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtD,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAa,EAAE,KAAa,EAAE,EAAE;gBACzD,IAAI,IAAA,eAAU,EAAC,KAAK,CAAC,EAAE,CAAC;oBACtB,MAAM,SAAS,GAAG,SAAS,KAAK,MAAM,CAAC;oBACvC,SAAS,CAAC,IAAI,CAAC;wBACb,IAAI,EAAE,SAAS;wBACf,OAAO,EAAE,IAAA,iBAAY,EAAC,KAAK,CAAC;qBAC7B,CAAC,CAAC;oBACH,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC3B,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;QAED,kBAAkB;QAClB,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;YACxB,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAY,EAAE,KAAa,EAAE,EAAE;gBAC1D,IAAI,OAAO,CAAC,UAAU,IAAI,IAAA,eAAU,EAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;oBACzD,MAAM,cAAc,GAAG,cAAc,KAAK,MAAM,CAAC;oBACjD,SAAS,CAAC,IAAI,CAAC;wBACb,IAAI,EAAE,cAAc;wBACpB,OAAO,EAAE,IAAA,iBAAY,EAAC,OAAO,CAAC,UAAU,CAAC;qBAC1C,CAAC,CAAC;oBACH,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;gBAChC,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;QAED,kBAAkB;QAClB,MAAM,QAAQ,GAAG;YACf,OAAO,EAAE,OAAO;YAChB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,MAAM,EAAE,UAAU,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;YACrD,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,QAAQ,EAAE;gBACR,IAAI,EAAE,UAAU,CAAC,OAAO,EAAE,aAAa,IAAI,CAAC;gBAC5C,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,KAAK,IAAI,CAAC;gBAClC,UAAU,EAAE,UAAU,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC;aAC5C;YACD,QAAQ;SACT,CAAC;QAEF,SAAS,CAAC,IAAI,CAAC;YACb,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;SAC3C,CAAC,CAAC;QACH,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAE/B,kBAAkB;QAClB,IAAI,CAAC;YACH,mCAAmC;YACnC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1C,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,IAAI,CAAC,qBAAqB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;YAC1D,CAAC;iBAAM,CAAC;gBACN,0CAA0C;gBAC1C,MAAM,IAAI,CAAC,oBAAoB,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,wDAAwD;YACxD,MAAM,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;YAC1F,OAAO;gBACL,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC;gBACzC,QAAQ;gBACR,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,SAAS,EAAE,QAAQ,CAAC,SAAS;oBAC7B,OAAO,EAAE,QAAQ,CAAC,OAAc;oBAChC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,UAAU;iBAC3F;aACF,CAAC;QACJ,CAAC;QAED,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,QAAQ;YACR,QAAQ,EAAE;gBACR,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,OAAO,EAAE,QAAQ,CAAC,OAAc;gBAChC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,UAAU;aAC3F;SACF,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,WAAW;QACvB,IAAI,CAAC;YACH,OAAO,wDAAa,UAAU,GAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,qBAAqB,CAAC,UAAkB,EAAE,SAA4D;QAClH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAC1C,IAAI,CAAC,QAAQ;YAAE,OAAO;QAEtB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,MAAM,GAAG,IAAA,sBAAiB,EAAC,UAAU,CAAC,CAAC;YAC7C,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAEhE,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YACpC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAE5B,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAErB,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE;gBAC3B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;YAC5D,CAAC,CAAC,CAAC;YAEH,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAChC,YAAoB,EACpB,SAA4D,EAC5D,QAAa;QAEb,MAAM,eAAe,GAAG;YACtB,GAAG,QAAQ;YACX,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC7B,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC;gBAC3F,IAAI,EAAE,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC;aAC5E,CAAC,CAAC;SACJ,CAAC;QAEF,MAAM,EAAE,aAAa,EAAE,GAAG,wDAAa,IAAI,GAAC,CAAC;QAC7C,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACxE,CAAC;CACF;AAtLD,oDAsLC"}
@@ -1,59 +0,0 @@
1
- /**
2
- * Reality Proof Graph
3
- *
4
- * A graph model per scan that connects claims → evidence → verdict
5
- */
6
- export interface ProofNode {
7
- id: string;
8
- type: 'route' | 'handler' | 'middleware' | 'auth' | 'env' | 'db_model' | 'runtime_probe';
9
- name: string;
10
- file?: string;
11
- line?: number;
12
- metadata?: Record<string, any>;
13
- }
14
- export interface ProofEdge {
15
- from: string;
16
- to: string;
17
- type: 'reachable_via' | 'guarded_by' | 'depends_on' | 'validated_by';
18
- evidence?: any;
19
- }
20
- export interface ProofGraph {
21
- nodes: ProofNode[];
22
- edges: ProofEdge[];
23
- verdict: 'PASS' | 'FAIL' | 'WARN';
24
- evidenceStrength: number;
25
- findings: string[];
26
- }
27
- export declare class ProofGraphBuilder {
28
- private nodes;
29
- private edges;
30
- /**
31
- * Add node to graph
32
- */
33
- addNode(node: ProofNode): void;
34
- /**
35
- * Add edge to graph
36
- */
37
- addEdge(edge: ProofEdge): void;
38
- /**
39
- * Build final graph
40
- */
41
- build(verdict: 'PASS' | 'FAIL' | 'WARN', evidenceStrength: number, findings: string[]): ProofGraph;
42
- /**
43
- * Find node by type and name
44
- */
45
- findNode(type: ProofNode['type'], name: string): ProofNode | undefined;
46
- /**
47
- * Get all nodes of type
48
- */
49
- getNodesByType(type: ProofNode['type']): ProofNode[];
50
- /**
51
- * Get edges from node
52
- */
53
- getEdgesFrom(nodeId: string): ProofEdge[];
54
- /**
55
- * Get edges to node
56
- */
57
- getEdgesTo(nodeId: string): Promise<ProofEdge[]>;
58
- }
59
- //# sourceMappingURL=proof-graph.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"proof-graph.d.ts","sourceRoot":"","sources":["../../src/scan/proof-graph.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,OAAO,GAAG,SAAS,GAAG,YAAY,GAAG,MAAM,GAAG,KAAK,GAAG,UAAU,GAAG,eAAe,CAAC;IACzF,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,eAAe,GAAG,YAAY,GAAG,YAAY,GAAG,cAAc,CAAC;IACrE,QAAQ,CAAC,EAAE,GAAG,CAAC;CAChB;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IAClC,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,KAAK,CAAqC;IAClD,OAAO,CAAC,KAAK,CAAmB;IAEhC;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,SAAS,GAAG,IAAI;IAI9B;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,SAAS,GAAG,IAAI;IAI9B;;OAEG;IACH,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,UAAU;IAUlG;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS;IAItE;;OAEG;IACH,cAAc,CAAC,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC,GAAG,SAAS,EAAE;IAIpD;;OAEG;IACH,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE;IAIzC;;OAEG;IACH,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;CAGjD"}
@@ -1,64 +0,0 @@
1
- "use strict";
2
- /**
3
- * Reality Proof Graph
4
- *
5
- * A graph model per scan that connects claims → evidence → verdict
6
- */
7
- Object.defineProperty(exports, "__esModule", { value: true });
8
- exports.ProofGraphBuilder = void 0;
9
- class ProofGraphBuilder {
10
- constructor() {
11
- this.nodes = new Map();
12
- this.edges = [];
13
- }
14
- /**
15
- * Add node to graph
16
- */
17
- addNode(node) {
18
- this.nodes.set(node.id, node);
19
- }
20
- /**
21
- * Add edge to graph
22
- */
23
- addEdge(edge) {
24
- this.edges.push(edge);
25
- }
26
- /**
27
- * Build final graph
28
- */
29
- build(verdict, evidenceStrength, findings) {
30
- return {
31
- nodes: Array.from(this.nodes.values()),
32
- edges: this.edges,
33
- verdict,
34
- evidenceStrength,
35
- findings,
36
- };
37
- }
38
- /**
39
- * Find node by type and name
40
- */
41
- findNode(type, name) {
42
- return Array.from(this.nodes.values()).find(n => n.type === type && n.name === name);
43
- }
44
- /**
45
- * Get all nodes of type
46
- */
47
- getNodesByType(type) {
48
- return Array.from(this.nodes.values()).filter(n => n.type === type);
49
- }
50
- /**
51
- * Get edges from node
52
- */
53
- getEdgesFrom(nodeId) {
54
- return this.edges.filter(e => e.from === nodeId);
55
- }
56
- /**
57
- * Get edges to node
58
- */
59
- getEdgesTo(nodeId) {
60
- return Promise.resolve(this.edges.filter(e => e.to === nodeId));
61
- }
62
- }
63
- exports.ProofGraphBuilder = ProofGraphBuilder;
64
- //# sourceMappingURL=proof-graph.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"proof-graph.js","sourceRoot":"","sources":["../../src/scan/proof-graph.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AA0BH,MAAa,iBAAiB;IAA9B;QACU,UAAK,GAA2B,IAAI,GAAG,EAAE,CAAC;QAC1C,UAAK,GAAgB,EAAE,CAAC;IAwDlC,CAAC;IAtDC;;OAEG;IACH,OAAO,CAAC,IAAe;QACrB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,IAAe;QACrB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAiC,EAAE,gBAAwB,EAAE,QAAkB;QACnF,OAAO;YACL,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACtC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,OAAO;YACP,gBAAgB;YAChB,QAAQ;SACT,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,IAAuB,EAAE,IAAY;QAC5C,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACvF,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,IAAuB;QACpC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACtE,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,MAAc;QACzB,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,MAAc;QACvB,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC,CAAC;IAClE,CAAC;CACF;AA1DD,8CA0DC"}
@@ -1,56 +0,0 @@
1
- /**
2
- * Advanced Lexical Reality Scan
3
- *
4
- * Lightning-fast first-pass sweep for AI artifacts + landmines
5
- */
6
- export interface RealityFinding {
7
- id: string;
8
- type: 'placeholder' | 'stub' | 'fake_success' | 'silent_failure' | 'auth_bypass' | 'dangerous_default';
9
- file: string;
10
- line: number;
11
- column?: number;
12
- severity: 'critical' | 'high' | 'medium' | 'low';
13
- score: number;
14
- evidence: {
15
- snippet: string;
16
- context: string;
17
- pattern: string;
18
- };
19
- fixGuidance?: string;
20
- verifyCommand?: string;
21
- }
22
- export interface RealityScanResult {
23
- findings: RealityFinding[];
24
- hotspots: Array<{
25
- file: string;
26
- score: number;
27
- findings: number;
28
- }>;
29
- summary: {
30
- total: number;
31
- critical: number;
32
- high: number;
33
- medium: number;
34
- low: number;
35
- totalScore: number;
36
- };
37
- }
38
- export declare class RealitySniffScanner {
39
- private findings;
40
- private fileScores;
41
- private findingCounter;
42
- /**
43
- * Scan project for reality issues
44
- */
45
- scan(projectPath: string, options?: {
46
- exclude?: string[];
47
- includeTests?: boolean;
48
- }): Promise<RealityScanResult>;
49
- private scanDirectory;
50
- private scanFile;
51
- private checkPatterns;
52
- private isInErrorContext;
53
- private getContext;
54
- private getFixGuidance;
55
- }
56
- //# sourceMappingURL=reality-sniff.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"reality-sniff.d.ts","sourceRoot":"","sources":["../../src/scan/reality-sniff.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,aAAa,GAAG,MAAM,GAAG,cAAc,GAAG,gBAAgB,GAAG,aAAa,GAAG,mBAAmB,CAAC;IACvG,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACjD,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE;QACR,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,cAAc,EAAE,CAAC;IAC3B,QAAQ,EAAE,KAAK,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC,CAAC;IACH,OAAO,EAAE;QACP,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,GAAG,EAAE,MAAM,CAAC;QACZ,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;CACH;AA6DD,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAwB;IACxC,OAAO,CAAC,UAAU,CAAkC;IACpD,OAAO,CAAC,cAAc,CAAK;IAE3B;;OAEG;IACG,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,GAAE;QACvC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;QACnB,YAAY,CAAC,EAAE,OAAO,CAAC;KACnB,GAAG,OAAO,CAAC,iBAAiB,CAAC;YAsCrB,aAAa;YAyBb,QAAQ;IA8BtB,OAAO,CAAC,aAAa;IAqCrB,OAAO,CAAC,gBAAgB;IAMxB,OAAO,CAAC,UAAU;IAKlB,OAAO,CAAC,cAAc;CAWvB"}
@@ -1,200 +0,0 @@
1
- "use strict";
2
- /**
3
- * Advanced Lexical Reality Scan
4
- *
5
- * Lightning-fast first-pass sweep for AI artifacts + landmines
6
- */
7
- Object.defineProperty(exports, "__esModule", { value: true });
8
- exports.RealitySniffScanner = void 0;
9
- const fs_1 = require("fs");
10
- const path_1 = require("path");
11
- // Placeholder patterns
12
- const PLACEHOLDER_PATTERNS = [
13
- /\bplaceholder\b/i,
14
- /\bstub\b/i,
15
- /\bdummy\b/i,
16
- /\bfake\b/i,
17
- /\bsample\b/i,
18
- /\bprototype\b/i,
19
- /\bpoc\b/i,
20
- /\bhardcoded\b/i,
21
- /\bTODO\b.*(?:implement|fix|complete)/i,
22
- /\bWIP\b/i,
23
- /\bTBD\b/i,
24
- /\bNYI\b/i,
25
- /\bcoming\s+soon\b/i,
26
- /\bbest\s+effort\b/i,
27
- /\bfallback\b/i,
28
- /\bgracefully\b/i,
29
- ];
30
- // Fake success patterns
31
- const FAKE_SUCCESS_PATTERNS = [
32
- /return\s+(?:true|"ok"|"success"|{[\s\S]*?success:\s*true)/i,
33
- /status:\s*["']ok["']/i,
34
- /ok:\s*true/i,
35
- /success:\s*true/i,
36
- ];
37
- // Silent failure patterns
38
- const SILENT_FAILURE_PATTERNS = [
39
- /catch\s*\(\s*\)\s*{\s*}/, // empty catch {}
40
- /catch\s*\(\s*e\s*\)\s*{\s*}/, // empty catch (e) {}
41
- /catch\s*\([^)]*\)\s*{\s*return\s*;?\s*}/, // catch that just returns
42
- /catch\s*\([^)]*\)\s*{\s*console\.(log|error|warn)/, // catch that only logs
43
- ];
44
- // Auth bypass patterns
45
- const AUTH_BYPASS_PATTERNS = [
46
- /\bowner\s*mode\b/i,
47
- /\badmin\s*mode\b/i,
48
- /\bskipAuth\b/i,
49
- /\bdisableAuth\b/i,
50
- /\bbypassAuth\b/i,
51
- /\bisAdmin\s*=\s*true\b/i,
52
- /\bALLOW_ALL\b/i,
53
- /\bUI-only\s*gating\b/i,
54
- ];
55
- // Dangerous defaults
56
- const DANGEROUS_DEFAULT_PATTERNS = [
57
- /process\.env\.\w+\s*\|\|\s*["'](?:test|localhost|example\.com|CHANGEME|REPLACE_ME|YOUR_API_KEY)["']/i,
58
- /process\.env\.\w+\s*\|\|\s*["']\s*["']/, // empty string default
59
- /\bCHANGEME\b/i,
60
- /\bREPLACE_ME\b/i,
61
- /\bYOUR_API_KEY\b/i,
62
- /\bexample\.com\b/i,
63
- /localhost.*(?:auth|billing|webhook|secret)/i,
64
- ];
65
- class RealitySniffScanner {
66
- constructor() {
67
- this.findings = [];
68
- this.fileScores = new Map();
69
- this.findingCounter = 1;
70
- }
71
- /**
72
- * Scan project for reality issues
73
- */
74
- async scan(projectPath, options = {}) {
75
- this.findings = [];
76
- this.fileScores.clear();
77
- this.findingCounter = 1;
78
- const exclude = options.exclude || ['node_modules', '.git', 'dist', 'build', '.next'];
79
- const includeTests = options.includeTests || false;
80
- // Scan all code files
81
- await this.scanDirectory(projectPath, exclude, includeTests);
82
- // Calculate hotspots
83
- const hotspots = Array.from(this.fileScores.entries())
84
- .map(([file, score]) => ({
85
- file,
86
- score,
87
- findings: this.findings.filter(f => f.file === file).length,
88
- }))
89
- .sort((a, b) => b.score - a.score)
90
- .slice(0, 10);
91
- // Calculate summary
92
- const summary = {
93
- total: this.findings.length,
94
- critical: this.findings.filter(f => f.severity === 'critical').length,
95
- high: this.findings.filter(f => f.severity === 'high').length,
96
- medium: this.findings.filter(f => f.severity === 'medium').length,
97
- low: this.findings.filter(f => f.severity === 'low').length,
98
- totalScore: this.findings.reduce((sum, f) => sum + f.score, 0),
99
- };
100
- return {
101
- findings: this.findings.sort((a, b) => b.score - a.score),
102
- hotspots,
103
- summary,
104
- };
105
- }
106
- async scanDirectory(dir, exclude, includeTests) {
107
- const entries = (0, fs_1.readdirSync)(dir);
108
- for (const entry of entries) {
109
- const fullPath = (0, path_1.join)(dir, entry);
110
- const stat = (0, fs_1.statSync)(fullPath);
111
- // Skip excluded directories
112
- if (stat.isDirectory()) {
113
- if (exclude.some(e => entry.includes(e)))
114
- continue;
115
- if (!includeTests && (entry.includes('test') || entry.includes('spec')))
116
- continue;
117
- await this.scanDirectory(fullPath, exclude, includeTests);
118
- continue;
119
- }
120
- // Only scan code files
121
- const ext = (0, path_1.extname)(entry);
122
- if (!['.ts', '.tsx', '.js', '.jsx', '.py', '.java', '.go', '.rs'].includes(ext)) {
123
- continue;
124
- }
125
- await this.scanFile(fullPath);
126
- }
127
- }
128
- async scanFile(filePath) {
129
- try {
130
- const content = (0, fs_1.readFileSync)(filePath, 'utf-8');
131
- const lines = content.split('\n');
132
- // Check each line for patterns
133
- lines.forEach((line, index) => {
134
- const lineNum = index + 1;
135
- // Placeholder detection
136
- this.checkPatterns(line, lineNum, filePath, PLACEHOLDER_PATTERNS, 'placeholder', 1, 'medium');
137
- // Fake success detection (higher score in catch/error handlers)
138
- const inErrorContext = this.isInErrorContext(content, index);
139
- this.checkPatterns(line, lineNum, filePath, FAKE_SUCCESS_PATTERNS, 'fake_success', inErrorContext ? 5 : 3, inErrorContext ? 'high' : 'medium');
140
- // Silent failure detection
141
- this.checkPatterns(line, lineNum, filePath, SILENT_FAILURE_PATTERNS, 'silent_failure', 5, 'high');
142
- // Auth bypass detection
143
- this.checkPatterns(line, lineNum, filePath, AUTH_BYPASS_PATTERNS, 'auth_bypass', 10, 'critical');
144
- // Dangerous defaults
145
- this.checkPatterns(line, lineNum, filePath, DANGEROUS_DEFAULT_PATTERNS, 'dangerous_default', 3, 'high');
146
- });
147
- }
148
- catch (error) {
149
- // Ignore files we can't read
150
- }
151
- }
152
- checkPatterns(line, lineNum, filePath, patterns, type, baseScore, severity) {
153
- for (const pattern of patterns) {
154
- const match = line.match(pattern);
155
- if (match) {
156
- const finding = {
157
- id: `GR-REALITY-${String(this.findingCounter++).padStart(3, '0')}`,
158
- type,
159
- file: filePath,
160
- line: lineNum,
161
- severity,
162
- score: baseScore,
163
- evidence: {
164
- snippet: line.trim(),
165
- context: this.getContext(line, filePath),
166
- pattern: pattern.source,
167
- },
168
- fixGuidance: this.getFixGuidance(type),
169
- verifyCommand: `vibecheck verify --id GR-REALITY-${String(this.findingCounter - 1).padStart(3, '0')}`,
170
- };
171
- this.findings.push(finding);
172
- // Update file score
173
- const currentScore = this.fileScores.get(filePath) || 0;
174
- this.fileScores.set(filePath, currentScore + baseScore);
175
- }
176
- }
177
- }
178
- isInErrorContext(content, lineIndex) {
179
- const lines = content.split('\n');
180
- const beforeContext = lines.slice(Math.max(0, lineIndex - 5), lineIndex).join('\n');
181
- return /catch|onError|fallback|error|exception/i.test(beforeContext);
182
- }
183
- getContext(line, filePath) {
184
- // Return surrounding context (simplified)
185
- return line.trim();
186
- }
187
- getFixGuidance(type) {
188
- const guidance = {
189
- placeholder: 'Replace placeholder with actual implementation',
190
- stub: 'Implement stub function with real logic',
191
- fake_success: 'Return actual error status instead of always true',
192
- silent_failure: 'Add proper error handling and propagation',
193
- auth_bypass: 'Remove auth bypass or add proper permission checks',
194
- dangerous_default: 'Use secure defaults or require explicit configuration',
195
- };
196
- return guidance[type] || 'Review and fix';
197
- }
198
- }
199
- exports.RealitySniffScanner = RealitySniffScanner;
200
- //# sourceMappingURL=reality-sniff.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"reality-sniff.js","sourceRoot":"","sources":["../../src/scan/reality-sniff.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAEH,2BAAyD;AACzD,+BAAqC;AAoCrC,uBAAuB;AACvB,MAAM,oBAAoB,GAAG;IAC3B,kBAAkB;IAClB,WAAW;IACX,YAAY;IACZ,WAAW;IACX,aAAa;IACb,gBAAgB;IAChB,UAAU;IACV,gBAAgB;IAChB,uCAAuC;IACvC,UAAU;IACV,UAAU;IACV,UAAU;IACV,oBAAoB;IACpB,oBAAoB;IACpB,eAAe;IACf,iBAAiB;CAClB,CAAC;AAEF,wBAAwB;AACxB,MAAM,qBAAqB,GAAG;IAC5B,4DAA4D;IAC5D,uBAAuB;IACvB,aAAa;IACb,kBAAkB;CACnB,CAAC;AAEF,0BAA0B;AAC1B,MAAM,uBAAuB,GAAG;IAC9B,yBAAyB,EAAE,iBAAiB;IAC5C,6BAA6B,EAAE,qBAAqB;IACpD,yCAAyC,EAAE,0BAA0B;IACrE,mDAAmD,EAAE,uBAAuB;CAC7E,CAAC;AAEF,uBAAuB;AACvB,MAAM,oBAAoB,GAAG;IAC3B,mBAAmB;IACnB,mBAAmB;IACnB,eAAe;IACf,kBAAkB;IAClB,iBAAiB;IACjB,yBAAyB;IACzB,gBAAgB;IAChB,uBAAuB;CACxB,CAAC;AAEF,qBAAqB;AACrB,MAAM,0BAA0B,GAAG;IACjC,sGAAsG;IACtG,wCAAwC,EAAE,uBAAuB;IACjE,eAAe;IACf,iBAAiB;IACjB,mBAAmB;IACnB,mBAAmB;IACnB,6CAA6C;CAC9C,CAAC;AAEF,MAAa,mBAAmB;IAAhC;QACU,aAAQ,GAAqB,EAAE,CAAC;QAChC,eAAU,GAAwB,IAAI,GAAG,EAAE,CAAC;QAC5C,mBAAc,GAAG,CAAC,CAAC;IAgK7B,CAAC;IA9JC;;OAEG;IACH,KAAK,CAAC,IAAI,CAAC,WAAmB,EAAE,UAG5B,EAAE;QACJ,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;QACnB,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACxB,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC;QAExB,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACtF,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,KAAK,CAAC;QAEnD,sBAAsB;QACtB,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;QAE7D,qBAAqB;QACrB,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;aACnD,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;YACvB,IAAI;YACJ,KAAK;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,MAAM;SAC5D,CAAC,CAAC;aACF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;aACjC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAEhB,oBAAoB;QACpB,MAAM,OAAO,GAAG;YACd,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM;YAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM;YACrE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM;YAC7D,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,MAAM;YACjE,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,MAAM;YAC3D,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;SAC/D,CAAC;QAEF,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;YACzD,QAAQ;YACR,OAAO;SACR,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,GAAW,EAAE,OAAiB,EAAE,YAAqB;QAC/E,MAAM,OAAO,GAAG,IAAA,gBAAW,EAAC,GAAG,CAAC,CAAC;QAEjC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,IAAA,WAAI,EAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAClC,MAAM,IAAI,GAAG,IAAA,aAAQ,EAAC,QAAQ,CAAC,CAAC;YAEhC,4BAA4B;YAC5B,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBACvB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;oBAAE,SAAS;gBACnD,IAAI,CAAC,YAAY,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;oBAAE,SAAS;gBAClF,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;gBAC1D,SAAS;YACX,CAAC;YAED,uBAAuB;YACvB,MAAM,GAAG,GAAG,IAAA,cAAO,EAAC,KAAK,CAAC,CAAC;YAC3B,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChF,SAAS;YACX,CAAC;YAED,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,QAAgB;QACrC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAA,iBAAY,EAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAChD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAElC,+BAA+B;YAC/B,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;gBAC5B,MAAM,OAAO,GAAG,KAAK,GAAG,CAAC,CAAC;gBAE1B,wBAAwB;gBACxB,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,oBAAoB,EAAE,aAAa,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;gBAE9F,gEAAgE;gBAChE,MAAM,cAAc,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;gBAC7D,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,qBAAqB,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;gBAE/I,2BAA2B;gBAC3B,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;gBAElG,wBAAwB;gBACxB,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,oBAAoB,EAAE,aAAa,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC;gBAEjG,qBAAqB;gBACrB,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;YAC1G,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,6BAA6B;QAC/B,CAAC;IACH,CAAC;IAEO,aAAa,CACnB,IAAY,EACZ,OAAe,EACf,QAAgB,EAChB,QAAkB,EAClB,IAA4B,EAC5B,SAAiB,EACjB,QAAoC;QAEpC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAClC,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,OAAO,GAAmB;oBAC9B,EAAE,EAAE,cAAc,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;oBAClE,IAAI;oBACJ,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,OAAO;oBACb,QAAQ;oBACR,KAAK,EAAE,SAAS;oBAChB,QAAQ,EAAE;wBACR,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;wBACpB,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC;wBACxC,OAAO,EAAE,OAAO,CAAC,MAAM;qBACxB;oBACD,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;oBACtC,aAAa,EAAE,oCAAoC,MAAM,CAAC,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;iBACtG,CAAC;gBAEF,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAE5B,oBAAoB;gBACpB,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACxD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,YAAY,GAAG,SAAS,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;IACH,CAAC;IAEO,gBAAgB,CAAC,OAAe,EAAE,SAAiB;QACzD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpF,OAAO,yCAAyC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACvE,CAAC;IAEO,UAAU,CAAC,IAAY,EAAE,QAAgB;QAC/C,0CAA0C;QAC1C,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;IACrB,CAAC;IAEO,cAAc,CAAC,IAA4B;QACjD,MAAM,QAAQ,GAA2C;YACvD,WAAW,EAAE,gDAAgD;YAC7D,IAAI,EAAE,yCAAyC;YAC/C,YAAY,EAAE,mDAAmD;YACjE,cAAc,EAAE,2CAA2C;YAC3D,WAAW,EAAE,oDAAoD;YACjE,iBAAiB,EAAE,uDAAuD;SAC3E,CAAC;QACF,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC;IAC5C,CAAC;CACF;AAnKD,kDAmKC"}