@vibecheckai/cli 2.8.2 → 3.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (454) hide show
  1. package/README.md +8 -8
  2. package/bin/_deprecations.js +35 -0
  3. package/bin/_router.js +46 -0
  4. package/bin/cli-hygiene.js +241 -0
  5. package/bin/guardrail.js +834 -0
  6. package/bin/runners/cli-utils.js +1070 -0
  7. package/bin/runners/context/ai-task-decomposer.js +337 -0
  8. package/bin/runners/context/analyzer.js +462 -0
  9. package/bin/runners/context/api-contracts.js +427 -0
  10. package/bin/runners/context/context-diff.js +342 -0
  11. package/bin/runners/context/context-pruner.js +291 -0
  12. package/bin/runners/context/dependency-graph.js +414 -0
  13. package/bin/runners/context/generators/claude.js +107 -0
  14. package/bin/runners/context/generators/codex.js +108 -0
  15. package/bin/runners/context/generators/copilot.js +119 -0
  16. package/bin/runners/context/generators/cursor.js +514 -0
  17. package/bin/runners/context/generators/mcp.js +151 -0
  18. package/bin/runners/context/generators/windsurf.js +180 -0
  19. package/bin/runners/context/git-context.js +302 -0
  20. package/bin/runners/context/index.js +1042 -0
  21. package/bin/runners/context/insights.js +173 -0
  22. package/bin/runners/context/mcp-server/generate-rules.js +337 -0
  23. package/bin/runners/context/mcp-server/index.js +1176 -0
  24. package/bin/runners/context/mcp-server/package.json +24 -0
  25. package/bin/runners/context/memory.js +200 -0
  26. package/bin/runners/context/monorepo.js +215 -0
  27. package/bin/runners/context/multi-repo-federation.js +404 -0
  28. package/bin/runners/context/patterns.js +253 -0
  29. package/bin/runners/context/proof-context.js +972 -0
  30. package/bin/runners/context/security-scanner.js +303 -0
  31. package/bin/runners/context/semantic-search.js +350 -0
  32. package/bin/runners/context/shared.js +264 -0
  33. package/bin/runners/context/team-conventions.js +310 -0
  34. package/bin/runners/lib/ai-bridge.js +416 -0
  35. package/bin/runners/lib/analysis-core.js +271 -0
  36. package/bin/runners/lib/analyzers.js +541 -0
  37. package/bin/runners/lib/audit-bridge.js +391 -0
  38. package/bin/runners/lib/auth-truth.js +193 -0
  39. package/bin/runners/lib/auth.js +215 -0
  40. package/bin/runners/lib/backup.js +62 -0
  41. package/bin/runners/lib/billing.js +107 -0
  42. package/bin/runners/lib/claims.js +118 -0
  43. package/bin/runners/lib/cli-ui.js +540 -0
  44. package/bin/runners/lib/compliance-bridge-new.js +0 -0
  45. package/bin/runners/lib/compliance-bridge.js +165 -0
  46. package/bin/runners/lib/contracts/auth-contract.js +194 -0
  47. package/bin/runners/lib/contracts/env-contract.js +178 -0
  48. package/bin/runners/lib/contracts/external-contract.js +198 -0
  49. package/bin/runners/lib/contracts/guard.js +168 -0
  50. package/bin/runners/lib/contracts/index.js +89 -0
  51. package/bin/runners/lib/contracts/plan-validator.js +311 -0
  52. package/bin/runners/lib/contracts/route-contract.js +192 -0
  53. package/bin/runners/lib/detect.js +89 -0
  54. package/bin/runners/lib/doctor/autofix.js +254 -0
  55. package/bin/runners/lib/doctor/index.js +37 -0
  56. package/bin/runners/lib/doctor/modules/dependencies.js +325 -0
  57. package/bin/runners/lib/doctor/modules/index.js +46 -0
  58. package/bin/runners/lib/doctor/modules/network.js +250 -0
  59. package/bin/runners/lib/doctor/modules/project.js +312 -0
  60. package/bin/runners/lib/doctor/modules/runtime.js +224 -0
  61. package/bin/runners/lib/doctor/modules/security.js +348 -0
  62. package/bin/runners/lib/doctor/modules/system.js +213 -0
  63. package/bin/runners/lib/doctor/modules/vibecheck.js +394 -0
  64. package/bin/runners/lib/doctor/reporter.js +262 -0
  65. package/bin/runners/lib/doctor/service.js +262 -0
  66. package/bin/runners/lib/doctor/types.js +113 -0
  67. package/bin/runners/lib/doctor/ui.js +263 -0
  68. package/bin/runners/lib/doctor-enhanced.js +233 -0
  69. package/bin/runners/lib/doctor-v2.js +608 -0
  70. package/bin/runners/lib/enforcement.js +72 -0
  71. package/bin/runners/lib/enterprise-detect.js +603 -0
  72. package/bin/runners/lib/enterprise-init.js +942 -0
  73. package/bin/runners/lib/entitlements-v2.js +381 -0
  74. package/bin/runners/lib/entitlements.generated.js +0 -0
  75. package/bin/runners/lib/entitlements.js +332 -0
  76. package/bin/runners/lib/env-template.js +66 -0
  77. package/bin/runners/lib/env.js +189 -0
  78. package/bin/runners/lib/error-handler.js +320 -0
  79. package/bin/runners/lib/firewall-prompt.js +50 -0
  80. package/bin/runners/lib/graph/graph-builder.js +265 -0
  81. package/bin/runners/lib/graph/html-renderer.js +413 -0
  82. package/bin/runners/lib/graph/index.js +32 -0
  83. package/bin/runners/lib/graph/runtime-collector.js +215 -0
  84. package/bin/runners/lib/graph/static-extractor.js +518 -0
  85. package/bin/runners/lib/init-wizard.js +308 -0
  86. package/bin/runners/lib/json-output.js +76 -0
  87. package/bin/runners/lib/llm.js +75 -0
  88. package/bin/runners/lib/meter.js +61 -0
  89. package/bin/runners/lib/missions/evidence.js +126 -0
  90. package/bin/runners/lib/missions/plan.js +69 -0
  91. package/bin/runners/lib/missions/templates.js +147 -0
  92. package/bin/runners/lib/patch.js +40 -0
  93. package/bin/runners/lib/permissions/auth-model.js +213 -0
  94. package/bin/runners/lib/permissions/idor-prover.js +205 -0
  95. package/bin/runners/lib/permissions/index.js +45 -0
  96. package/bin/runners/lib/permissions/matrix-builder.js +198 -0
  97. package/bin/runners/lib/pkgjson.js +28 -0
  98. package/bin/runners/lib/preflight.js +142 -0
  99. package/bin/runners/lib/reality-findings.js +84 -0
  100. package/bin/runners/lib/redact.js +29 -0
  101. package/bin/runners/lib/replay/capsule-manager.js +154 -0
  102. package/bin/runners/lib/replay/index.js +263 -0
  103. package/bin/runners/lib/replay/player.js +348 -0
  104. package/bin/runners/lib/replay/recorder.js +331 -0
  105. package/bin/runners/lib/report-engine.js +447 -0
  106. package/bin/runners/lib/report-html.js +1117 -0
  107. package/bin/runners/lib/report-templates.js +964 -0
  108. package/bin/runners/lib/route-detection.js +1140 -0
  109. package/bin/runners/lib/route-truth.js +477 -0
  110. package/bin/runners/lib/sandbox/index.js +59 -0
  111. package/bin/runners/lib/sandbox/proof-chain.js +399 -0
  112. package/bin/runners/lib/sandbox/sandbox-runner.js +205 -0
  113. package/bin/runners/lib/sandbox/worktree.js +174 -0
  114. package/bin/runners/lib/scan-cache.js +330 -0
  115. package/bin/runners/lib/scan-output-schema.js +344 -0
  116. package/bin/runners/lib/score-history.js +282 -0
  117. package/bin/runners/lib/security-bridge.js +249 -0
  118. package/bin/runners/lib/server-usage.js +513 -0
  119. package/bin/runners/lib/share-pack.js +239 -0
  120. package/bin/runners/lib/snippets.js +67 -0
  121. package/bin/runners/lib/truth.js +667 -0
  122. package/bin/runners/lib/unified-output.js +189 -0
  123. package/bin/runners/lib/validate-patch.js +156 -0
  124. package/bin/runners/lib/verification.js +345 -0
  125. package/bin/runners/reality/engine.js +917 -0
  126. package/bin/runners/reality/flows.js +122 -0
  127. package/bin/runners/reality/report.js +378 -0
  128. package/bin/runners/reality/session.js +193 -0
  129. package/bin/runners/runAIAgent.js +2 -0
  130. package/bin/runners/runAudit.js +2 -0
  131. package/bin/runners/runAuth.js +106 -0
  132. package/bin/runners/runAutopilot.js +2 -0
  133. package/bin/runners/runBadge.js +2 -0
  134. package/bin/runners/runCertify.js +2 -0
  135. package/bin/runners/runClaimVerifier.js +483 -0
  136. package/bin/runners/runContext.js +56 -0
  137. package/bin/runners/runContextCompiler.js +385 -0
  138. package/bin/runners/runCtx.js +187 -0
  139. package/bin/runners/runCtxGuard.js +176 -0
  140. package/bin/runners/runCtxSync.js +116 -0
  141. package/bin/runners/runDashboard.js +10 -0
  142. package/bin/runners/runDoctor.js +245 -0
  143. package/bin/runners/runEnhancedShip.js +2 -0
  144. package/bin/runners/runFix.js +735 -0
  145. package/bin/runners/runFixPacks.js +2 -0
  146. package/bin/runners/runGate.js +17 -0
  147. package/bin/runners/runGraph.js +283 -0
  148. package/bin/runners/runInit.js +260 -0
  149. package/bin/runners/runInitGha.js +101 -0
  150. package/bin/runners/runInstall.js +76 -0
  151. package/bin/runners/runInteractive.js +388 -0
  152. package/bin/runners/runLaunch.js +2 -0
  153. package/bin/runners/runMcp.js +19 -0
  154. package/bin/runners/runMdc.js +2 -0
  155. package/bin/runners/runMissionGenerator.js +282 -0
  156. package/bin/runners/runNaturalLanguage.js +3 -0
  157. package/bin/runners/runPR.js +96 -0
  158. package/bin/runners/runPermissions.js +290 -0
  159. package/bin/runners/runPromptFirewall.js +211 -0
  160. package/bin/runners/runProof.js +2 -0
  161. package/bin/runners/runProve.js +392 -0
  162. package/bin/runners/runReality.js +489 -0
  163. package/bin/runners/runRealitySniff.js +2 -0
  164. package/bin/runners/runReplay.js +469 -0
  165. package/bin/runners/runReport.js +478 -0
  166. package/bin/runners/runScan.js +835 -0
  167. package/bin/runners/runShare.js +34 -0
  168. package/bin/runners/runShip.js +1062 -0
  169. package/bin/runners/runStatus.js +136 -0
  170. package/bin/runners/runTruthpack.js +634 -0
  171. package/bin/runners/runUpgrade.js +2 -0
  172. package/bin/runners/runValidate.js +2 -0
  173. package/bin/runners/runVerifyAgentOutput.js +2 -0
  174. package/bin/runners/runWatch.js +230 -0
  175. package/bin/runners/utils.js +360 -0
  176. package/bin/scan.js +612 -0
  177. package/bin/vibecheck.js +834 -0
  178. package/package.json +11 -11
  179. package/dist/autopatch/verified-autopatch.d.ts +0 -111
  180. package/dist/autopatch/verified-autopatch.d.ts.map +0 -1
  181. package/dist/autopatch/verified-autopatch.js +0 -503
  182. package/dist/autopatch/verified-autopatch.js.map +0 -1
  183. package/dist/bundles/index.js +0 -8
  184. package/dist/bundles/vibecheck-core.js +0 -25799
  185. package/dist/bundles/vibecheck-security.js +0 -208693
  186. package/dist/bundles/vibecheck-ship.js +0 -2318
  187. package/dist/commands/baseline.d.ts +0 -7
  188. package/dist/commands/baseline.d.ts.map +0 -1
  189. package/dist/commands/baseline.js +0 -79
  190. package/dist/commands/baseline.js.map +0 -1
  191. package/dist/commands/cache.d.ts +0 -13
  192. package/dist/commands/cache.d.ts.map +0 -1
  193. package/dist/commands/cache.js +0 -165
  194. package/dist/commands/cache.js.map +0 -1
  195. package/dist/commands/checkpoint.d.ts +0 -8
  196. package/dist/commands/checkpoint.d.ts.map +0 -1
  197. package/dist/commands/checkpoint.js +0 -35
  198. package/dist/commands/checkpoint.js.map +0 -1
  199. package/dist/commands/doctor.d.ts +0 -17
  200. package/dist/commands/doctor.d.ts.map +0 -1
  201. package/dist/commands/doctor.js +0 -226
  202. package/dist/commands/doctor.js.map +0 -1
  203. package/dist/commands/evidence.d.ts +0 -45
  204. package/dist/commands/evidence.d.ts.map +0 -1
  205. package/dist/commands/evidence.js +0 -197
  206. package/dist/commands/evidence.js.map +0 -1
  207. package/dist/commands/explain.d.ts +0 -8
  208. package/dist/commands/explain.d.ts.map +0 -1
  209. package/dist/commands/explain.js +0 -52
  210. package/dist/commands/explain.js.map +0 -1
  211. package/dist/commands/fix-consolidated.d.ts +0 -19
  212. package/dist/commands/fix-consolidated.d.ts.map +0 -1
  213. package/dist/commands/fix-consolidated.js +0 -165
  214. package/dist/commands/fix-consolidated.js.map +0 -1
  215. package/dist/commands/index.d.ts +0 -8
  216. package/dist/commands/index.d.ts.map +0 -1
  217. package/dist/commands/index.js +0 -15
  218. package/dist/commands/index.js.map +0 -1
  219. package/dist/commands/init.d.ts +0 -8
  220. package/dist/commands/init.d.ts.map +0 -1
  221. package/dist/commands/init.js +0 -125
  222. package/dist/commands/init.js.map +0 -1
  223. package/dist/commands/launcher.d.ts +0 -10
  224. package/dist/commands/launcher.d.ts.map +0 -1
  225. package/dist/commands/launcher.js +0 -174
  226. package/dist/commands/launcher.js.map +0 -1
  227. package/dist/commands/on.d.ts +0 -8
  228. package/dist/commands/on.d.ts.map +0 -1
  229. package/dist/commands/on.js +0 -123
  230. package/dist/commands/on.js.map +0 -1
  231. package/dist/commands/replay.d.ts +0 -8
  232. package/dist/commands/replay.d.ts.map +0 -1
  233. package/dist/commands/replay.js +0 -52
  234. package/dist/commands/replay.js.map +0 -1
  235. package/dist/commands/scan-consolidated.d.ts +0 -61
  236. package/dist/commands/scan-consolidated.d.ts.map +0 -1
  237. package/dist/commands/scan-consolidated.js +0 -243
  238. package/dist/commands/scan-consolidated.js.map +0 -1
  239. package/dist/commands/scan-secrets.d.ts +0 -47
  240. package/dist/commands/scan-secrets.d.ts.map +0 -1
  241. package/dist/commands/scan-secrets.js +0 -225
  242. package/dist/commands/scan-secrets.js.map +0 -1
  243. package/dist/commands/scan-vulnerabilities-enhanced.d.ts +0 -41
  244. package/dist/commands/scan-vulnerabilities-enhanced.d.ts.map +0 -1
  245. package/dist/commands/scan-vulnerabilities-enhanced.js +0 -368
  246. package/dist/commands/scan-vulnerabilities-enhanced.js.map +0 -1
  247. package/dist/commands/scan-vulnerabilities-osv.d.ts +0 -58
  248. package/dist/commands/scan-vulnerabilities-osv.d.ts.map +0 -1
  249. package/dist/commands/scan-vulnerabilities-osv.js +0 -722
  250. package/dist/commands/scan-vulnerabilities-osv.js.map +0 -1
  251. package/dist/commands/scan-vulnerabilities.d.ts +0 -32
  252. package/dist/commands/scan-vulnerabilities.d.ts.map +0 -1
  253. package/dist/commands/scan-vulnerabilities.js +0 -283
  254. package/dist/commands/scan-vulnerabilities.js.map +0 -1
  255. package/dist/commands/secrets-allowlist.d.ts +0 -7
  256. package/dist/commands/secrets-allowlist.d.ts.map +0 -1
  257. package/dist/commands/secrets-allowlist.js +0 -85
  258. package/dist/commands/secrets-allowlist.js.map +0 -1
  259. package/dist/commands/ship-consolidated.d.ts +0 -58
  260. package/dist/commands/ship-consolidated.d.ts.map +0 -1
  261. package/dist/commands/ship-consolidated.js +0 -515
  262. package/dist/commands/ship-consolidated.js.map +0 -1
  263. package/dist/commands/stats.d.ts +0 -8
  264. package/dist/commands/stats.d.ts.map +0 -1
  265. package/dist/commands/stats.js +0 -134
  266. package/dist/commands/stats.js.map +0 -1
  267. package/dist/commands/upgrade.d.ts +0 -8
  268. package/dist/commands/upgrade.d.ts.map +0 -1
  269. package/dist/commands/upgrade.js +0 -30
  270. package/dist/commands/upgrade.js.map +0 -1
  271. package/dist/fix/applicator.d.ts +0 -44
  272. package/dist/fix/applicator.d.ts.map +0 -1
  273. package/dist/fix/applicator.js +0 -144
  274. package/dist/fix/applicator.js.map +0 -1
  275. package/dist/fix/backup.d.ts +0 -38
  276. package/dist/fix/backup.d.ts.map +0 -1
  277. package/dist/fix/backup.js +0 -154
  278. package/dist/fix/backup.js.map +0 -1
  279. package/dist/fix/engine.d.ts +0 -55
  280. package/dist/fix/engine.d.ts.map +0 -1
  281. package/dist/fix/engine.js +0 -285
  282. package/dist/fix/engine.js.map +0 -1
  283. package/dist/fix/index.d.ts +0 -5
  284. package/dist/fix/index.d.ts.map +0 -1
  285. package/dist/fix/index.js +0 -12
  286. package/dist/fix/index.js.map +0 -1
  287. package/dist/fix/interactive.d.ts +0 -22
  288. package/dist/fix/interactive.d.ts.map +0 -1
  289. package/dist/fix/interactive.js +0 -172
  290. package/dist/fix/interactive.js.map +0 -1
  291. package/dist/formatters/index.d.ts +0 -6
  292. package/dist/formatters/index.d.ts.map +0 -1
  293. package/dist/formatters/index.js +0 -11
  294. package/dist/formatters/index.js.map +0 -1
  295. package/dist/formatters/sarif-enhanced.d.ts +0 -78
  296. package/dist/formatters/sarif-enhanced.d.ts.map +0 -1
  297. package/dist/formatters/sarif-enhanced.js +0 -144
  298. package/dist/formatters/sarif-enhanced.js.map +0 -1
  299. package/dist/formatters/sarif-v2.d.ts +0 -121
  300. package/dist/formatters/sarif-v2.d.ts.map +0 -1
  301. package/dist/formatters/sarif-v2.js +0 -356
  302. package/dist/formatters/sarif-v2.js.map +0 -1
  303. package/dist/formatters/sarif.d.ts +0 -72
  304. package/dist/formatters/sarif.d.ts.map +0 -1
  305. package/dist/formatters/sarif.js +0 -146
  306. package/dist/formatters/sarif.js.map +0 -1
  307. package/dist/index.d.ts +0 -61
  308. package/dist/index.d.ts.map +0 -1
  309. package/dist/index.js +0 -4388
  310. package/dist/index.js.map +0 -1
  311. package/dist/init/ci-generator.d.ts +0 -18
  312. package/dist/init/ci-generator.d.ts.map +0 -1
  313. package/dist/init/ci-generator.js +0 -317
  314. package/dist/init/ci-generator.js.map +0 -1
  315. package/dist/init/detect-framework.d.ts +0 -15
  316. package/dist/init/detect-framework.d.ts.map +0 -1
  317. package/dist/init/detect-framework.js +0 -301
  318. package/dist/init/detect-framework.js.map +0 -1
  319. package/dist/init/hooks-installer.d.ts +0 -22
  320. package/dist/init/hooks-installer.d.ts.map +0 -1
  321. package/dist/init/hooks-installer.js +0 -310
  322. package/dist/init/hooks-installer.js.map +0 -1
  323. package/dist/init/index.d.ts +0 -8
  324. package/dist/init/index.d.ts.map +0 -1
  325. package/dist/init/index.js +0 -22
  326. package/dist/init/index.js.map +0 -1
  327. package/dist/init/templates.d.ts +0 -402
  328. package/dist/init/templates.d.ts.map +0 -1
  329. package/dist/init/templates.js +0 -240
  330. package/dist/init/templates.js.map +0 -1
  331. package/dist/mcp/server.d.ts +0 -12
  332. package/dist/mcp/server.d.ts.map +0 -1
  333. package/dist/mcp/server.js +0 -42
  334. package/dist/mcp/server.js.map +0 -1
  335. package/dist/mcp/telemetry.d.ts +0 -40
  336. package/dist/mcp/telemetry.d.ts.map +0 -1
  337. package/dist/mcp/telemetry.js +0 -98
  338. package/dist/mcp/telemetry.js.map +0 -1
  339. package/dist/reality/no-dead-buttons/button-sweep-generator.d.ts +0 -32
  340. package/dist/reality/no-dead-buttons/button-sweep-generator.d.ts.map +0 -1
  341. package/dist/reality/no-dead-buttons/button-sweep-generator.js +0 -236
  342. package/dist/reality/no-dead-buttons/button-sweep-generator.js.map +0 -1
  343. package/dist/reality/no-dead-buttons/index.d.ts +0 -11
  344. package/dist/reality/no-dead-buttons/index.d.ts.map +0 -1
  345. package/dist/reality/no-dead-buttons/index.js +0 -18
  346. package/dist/reality/no-dead-buttons/index.js.map +0 -1
  347. package/dist/reality/no-dead-buttons/static-scanner.d.ts +0 -34
  348. package/dist/reality/no-dead-buttons/static-scanner.d.ts.map +0 -1
  349. package/dist/reality/no-dead-buttons/static-scanner.js +0 -230
  350. package/dist/reality/no-dead-buttons/static-scanner.js.map +0 -1
  351. package/dist/reality/reality-graph.d.ts +0 -192
  352. package/dist/reality/reality-graph.d.ts.map +0 -1
  353. package/dist/reality/reality-graph.js +0 -600
  354. package/dist/reality/reality-graph.js.map +0 -1
  355. package/dist/reality/reality-runner.d.ts +0 -89
  356. package/dist/reality/reality-runner.d.ts.map +0 -1
  357. package/dist/reality/reality-runner.js +0 -540
  358. package/dist/reality/reality-runner.js.map +0 -1
  359. package/dist/reality/receipt-generator.d.ts +0 -152
  360. package/dist/reality/receipt-generator.d.ts.map +0 -1
  361. package/dist/reality/receipt-generator.js +0 -495
  362. package/dist/reality/receipt-generator.js.map +0 -1
  363. package/dist/reality/runtime-tracer.d.ts +0 -75
  364. package/dist/reality/runtime-tracer.d.ts.map +0 -1
  365. package/dist/reality/runtime-tracer.js +0 -109
  366. package/dist/reality/runtime-tracer.js.map +0 -1
  367. package/dist/runtime/auth-utils.d.ts +0 -43
  368. package/dist/runtime/auth-utils.d.ts.map +0 -1
  369. package/dist/runtime/auth-utils.js +0 -130
  370. package/dist/runtime/auth-utils.js.map +0 -1
  371. package/dist/runtime/client.d.ts +0 -74
  372. package/dist/runtime/client.d.ts.map +0 -1
  373. package/dist/runtime/client.js +0 -222
  374. package/dist/runtime/client.js.map +0 -1
  375. package/dist/runtime/creds.d.ts +0 -48
  376. package/dist/runtime/creds.d.ts.map +0 -1
  377. package/dist/runtime/creds.js +0 -245
  378. package/dist/runtime/creds.js.map +0 -1
  379. package/dist/runtime/exit-codes.d.ts +0 -49
  380. package/dist/runtime/exit-codes.d.ts.map +0 -1
  381. package/dist/runtime/exit-codes.js +0 -93
  382. package/dist/runtime/exit-codes.js.map +0 -1
  383. package/dist/runtime/index.d.ts +0 -9
  384. package/dist/runtime/index.d.ts.map +0 -1
  385. package/dist/runtime/index.js +0 -25
  386. package/dist/runtime/index.js.map +0 -1
  387. package/dist/runtime/json-output.d.ts +0 -42
  388. package/dist/runtime/json-output.d.ts.map +0 -1
  389. package/dist/runtime/json-output.js +0 -59
  390. package/dist/runtime/json-output.js.map +0 -1
  391. package/dist/runtime/semver.d.ts +0 -37
  392. package/dist/runtime/semver.d.ts.map +0 -1
  393. package/dist/runtime/semver.js +0 -110
  394. package/dist/runtime/semver.js.map +0 -1
  395. package/dist/scan/dead-ui-detector.d.ts +0 -48
  396. package/dist/scan/dead-ui-detector.d.ts.map +0 -1
  397. package/dist/scan/dead-ui-detector.js +0 -170
  398. package/dist/scan/dead-ui-detector.js.map +0 -1
  399. package/dist/scan/playwright-sweep.d.ts +0 -40
  400. package/dist/scan/playwright-sweep.d.ts.map +0 -1
  401. package/dist/scan/playwright-sweep.js +0 -216
  402. package/dist/scan/playwright-sweep.js.map +0 -1
  403. package/dist/scan/proof-bundle.d.ts +0 -25
  404. package/dist/scan/proof-bundle.d.ts.map +0 -1
  405. package/dist/scan/proof-bundle.js +0 -203
  406. package/dist/scan/proof-bundle.js.map +0 -1
  407. package/dist/scan/proof-graph.d.ts +0 -59
  408. package/dist/scan/proof-graph.d.ts.map +0 -1
  409. package/dist/scan/proof-graph.js +0 -64
  410. package/dist/scan/proof-graph.js.map +0 -1
  411. package/dist/scan/reality-sniff.d.ts +0 -56
  412. package/dist/scan/reality-sniff.d.ts.map +0 -1
  413. package/dist/scan/reality-sniff.js +0 -200
  414. package/dist/scan/reality-sniff.js.map +0 -1
  415. package/dist/scan/structural-verifier.d.ts +0 -20
  416. package/dist/scan/structural-verifier.d.ts.map +0 -1
  417. package/dist/scan/structural-verifier.js +0 -112
  418. package/dist/scan/structural-verifier.js.map +0 -1
  419. package/dist/scan/verification-engine.d.ts +0 -47
  420. package/dist/scan/verification-engine.d.ts.map +0 -1
  421. package/dist/scan/verification-engine.js +0 -141
  422. package/dist/scan/verification-engine.js.map +0 -1
  423. package/dist/scanner/baseline.d.ts +0 -52
  424. package/dist/scanner/baseline.d.ts.map +0 -1
  425. package/dist/scanner/baseline.js +0 -85
  426. package/dist/scanner/baseline.js.map +0 -1
  427. package/dist/scanner/incremental.d.ts +0 -30
  428. package/dist/scanner/incremental.d.ts.map +0 -1
  429. package/dist/scanner/incremental.js +0 -82
  430. package/dist/scanner/incremental.js.map +0 -1
  431. package/dist/scanner/parallel.d.ts +0 -43
  432. package/dist/scanner/parallel.d.ts.map +0 -1
  433. package/dist/scanner/parallel.js +0 -99
  434. package/dist/scanner/parallel.js.map +0 -1
  435. package/dist/standalone.d.ts +0 -1
  436. package/dist/standalone.d.ts.map +0 -1
  437. package/dist/standalone.js +0 -1
  438. package/dist/standalone.js.map +0 -1
  439. package/dist/truth-pack/index.d.ts +0 -102
  440. package/dist/truth-pack/index.d.ts.map +0 -1
  441. package/dist/truth-pack/index.js +0 -694
  442. package/dist/truth-pack/index.js.map +0 -1
  443. package/dist/ui/frame.d.ts +0 -68
  444. package/dist/ui/frame.d.ts.map +0 -1
  445. package/dist/ui/frame.js +0 -165
  446. package/dist/ui/frame.js.map +0 -1
  447. package/dist/ui/index.d.ts +0 -5
  448. package/dist/ui/index.d.ts.map +0 -1
  449. package/dist/ui/index.js +0 -16
  450. package/dist/ui/index.js.map +0 -1
  451. package/dist/ui.d.ts +0 -36
  452. package/dist/ui.d.ts.map +0 -1
  453. package/dist/ui.js +0 -45
  454. package/dist/ui.js.map +0 -1
@@ -0,0 +1,427 @@
1
+ /**
2
+ * API Contract Extraction Module
3
+ * Extracts OpenAPI and GraphQL schemas for context
4
+ */
5
+
6
+ const fs = require("fs");
7
+ const path = require("path");
8
+
9
+ /**
10
+ * Find files recursively (local helper)
11
+ */
12
+ function findFiles(dir, extensions, maxDepth = 5, currentDepth = 0) {
13
+ if (currentDepth >= maxDepth || !fs.existsSync(dir)) return [];
14
+
15
+ const files = [];
16
+ try {
17
+ const entries = fs.readdirSync(dir, { withFileTypes: true });
18
+ for (const entry of entries) {
19
+ const fullPath = path.join(dir, entry.name);
20
+ if (entry.isDirectory() && !entry.name.startsWith(".") && entry.name !== "node_modules") {
21
+ files.push(...findFiles(fullPath, extensions, maxDepth, currentDepth + 1));
22
+ } else if (entry.isFile() && extensions.some(ext => entry.name.endsWith(ext))) {
23
+ files.push(fullPath);
24
+ }
25
+ }
26
+ } catch {}
27
+ return files;
28
+ }
29
+
30
+ /**
31
+ * Extract OpenAPI/Swagger specifications
32
+ */
33
+ function extractOpenAPISpecs(projectPath) {
34
+ const specs = [];
35
+
36
+ // Look for OpenAPI files
37
+ const openAPIFiles = findFiles(projectPath, [
38
+ ".json", ".yaml", ".yml"
39
+ ]).filter(file => {
40
+ const content = fs.readFileSync(file, "utf-8");
41
+ return content.includes("openapi") || content.includes("swagger");
42
+ });
43
+
44
+ for (const file of openAPIFiles) {
45
+ try {
46
+ const content = fs.readFileSync(file, "utf-8");
47
+ let spec;
48
+
49
+ if (file.endsWith(".json")) {
50
+ spec = JSON.parse(content);
51
+ } else {
52
+ // Simple YAML parser for basic specs
53
+ spec = parseSimpleYAML(content);
54
+ }
55
+
56
+ if (spec && (spec.openapi || spec.swagger)) {
57
+ // Extract key information
58
+ const extracted = {
59
+ file: path.relative(projectPath, file).replace(/\\/g, "/"),
60
+ version: spec.openapi || spec.swagger,
61
+ title: spec.info?.title || "Untitled API",
62
+ description: spec.info?.description || "",
63
+ baseUrl: spec.servers?.[0]?.url || "",
64
+ paths: Object.keys(spec.paths || {}),
65
+ schemas: Object.keys(spec.components?.schemas || {}),
66
+ endpoints: [],
67
+ };
68
+
69
+ // Extract endpoint details
70
+ for (const [path, methods] of Object.entries(spec.paths || {})) {
71
+ for (const [method, details] of Object.entries(methods)) {
72
+ if (typeof details === "object" && details.operationId) {
73
+ extracted.endpoints.push({
74
+ method: method.toUpperCase(),
75
+ path,
76
+ operationId: details.operationId,
77
+ summary: details.summary || "",
78
+ tags: details.tags || [],
79
+ });
80
+ }
81
+ }
82
+ }
83
+
84
+ specs.push(extracted);
85
+ }
86
+ } catch {}
87
+ }
88
+
89
+ return specs;
90
+ }
91
+
92
+ /**
93
+ * Simple YAML parser for basic specs
94
+ */
95
+ function parseSimpleYAML(content) {
96
+ const lines = content.split("\n");
97
+ const result = {};
98
+ let currentSection = result;
99
+ const sectionStack = [result];
100
+ let indent = 0;
101
+
102
+ for (const line of lines) {
103
+ if (line.trim() === "" || line.trim().startsWith("#")) continue;
104
+
105
+ const currentIndent = line.match(/^ */)[0].length;
106
+ const trimmed = line.trim();
107
+
108
+ if (trimmed.includes(":")) {
109
+ const [key, ...valueParts] = trimmed.split(":");
110
+ const value = valueParts.join(":").trim();
111
+
112
+ // Adjust section stack based on indentation
113
+ if (currentIndent < indent) {
114
+ sectionStack.pop();
115
+ currentSection = sectionStack[sectionStack.length - 1];
116
+ }
117
+
118
+ if (value) {
119
+ // Simple value
120
+ currentSection[key.trim()] = value.replace(/['"]/g, "");
121
+ } else {
122
+ // New section
123
+ currentSection[key.trim()] = {};
124
+ sectionStack.push(currentSection[key.trim()]);
125
+ currentSection = currentSection[key.trim()];
126
+ }
127
+
128
+ indent = currentIndent;
129
+ }
130
+ }
131
+
132
+ return result;
133
+ }
134
+
135
+ /**
136
+ * Extract GraphQL schemas
137
+ */
138
+ function extractGraphQLSchemas(projectPath) {
139
+ const schemas = [];
140
+
141
+ // Look for GraphQL files
142
+ const graphqlFiles = findFiles(projectPath, [
143
+ ".graphql", ".gql"
144
+ ]);
145
+
146
+ // Also check for schema definitions in JS/TS files
147
+ const jsFiles = findFiles(projectPath, [
148
+ ".ts", ".tsx", ".js", ".jsx"
149
+ ]).filter(file => {
150
+ const content = fs.readFileSync(file, "utf-8");
151
+ return content.includes("gql`") || content.includes("GraphQLSchema") || content.includes("typeDefs");
152
+ });
153
+
154
+ // Process .graphql files
155
+ for (const file of graphqlFiles) {
156
+ try {
157
+ const content = fs.readFileSync(file, "utf-8");
158
+ const types = extractGraphQLTypes(content);
159
+
160
+ schemas.push({
161
+ file: path.relative(projectPath, file).replace(/\\/g, "/"),
162
+ type: "schema",
163
+ types,
164
+ queries: types.filter(t => t.type === "Query" || t.name.startsWith("query")),
165
+ mutations: types.filter(t => t.type === "Mutation" || t.name.startsWith("mutation")),
166
+ subscriptions: types.filter(t => t.type === "Subscription" || t.name.startsWith("subscription")),
167
+ });
168
+ } catch {}
169
+ }
170
+
171
+ // Process JS/TS files with embedded schemas
172
+ for (const file of jsFiles) {
173
+ try {
174
+ const content = fs.readFileSync(file, "utf-8");
175
+ const extracted = extractEmbeddedGraphQL(content);
176
+
177
+ if (extracted.schemas.length > 0) {
178
+ schemas.push({
179
+ file: path.relative(projectPath, file).replace(/\\/g, "/"),
180
+ type: "embedded",
181
+ schemas: extracted.schemas,
182
+ resolvers: extracted.resolvers,
183
+ });
184
+ }
185
+ } catch {}
186
+ }
187
+
188
+ return schemas;
189
+ }
190
+
191
+ /**
192
+ * Extract types from GraphQL schema
193
+ */
194
+ function extractGraphQLTypes(content) {
195
+ const types = [];
196
+ const lines = content.split("\n");
197
+ let currentType = null;
198
+
199
+ for (const line of lines) {
200
+ const trimmed = line.trim();
201
+
202
+ if (trimmed.startsWith("type ") || trimmed.startsWith("interface ") ||
203
+ trimmed.startsWith("input ") || trimmed.startsWith("enum ")) {
204
+ const parts = trimmed.split(/\s+/);
205
+ currentType = {
206
+ type: parts[0],
207
+ name: parts[1],
208
+ fields: [],
209
+ };
210
+ types.push(currentType);
211
+ } else if (currentType && trimmed && !trimmed.startsWith("#")) {
212
+ if (trimmed === "}") {
213
+ currentType = null;
214
+ } else if (trimmed.includes(":")) {
215
+ const [fieldName, fieldType] = trimmed.split(":").map(s => s.trim());
216
+ if (fieldName && fieldType) {
217
+ currentType.fields.push({
218
+ name: fieldName,
219
+ type: fieldType.replace(/[!]/g, ""),
220
+ required: fieldType.includes("!"),
221
+ });
222
+ }
223
+ }
224
+ }
225
+ }
226
+
227
+ return types;
228
+ }
229
+
230
+ /**
231
+ * Extract embedded GraphQL from JS/TS
232
+ */
233
+ function extractEmbeddedGraphQL(content) {
234
+ const schemas = [];
235
+ const resolvers = [];
236
+
237
+ // Extract template literals
238
+ const gqlMatches = content.match(/gql`([^`]+)`/g) || [];
239
+
240
+ for (const match of gqlMatches) {
241
+ const schema = match.replace(/gql`([^`]+)`/, "$1");
242
+ const types = extractGraphQLTypes(schema);
243
+
244
+ schemas.push({
245
+ content: schema,
246
+ types,
247
+ });
248
+ }
249
+
250
+ // Look for typeDefs assignments
251
+ const typeDefMatches = content.match(/typeDefs\s*[:=]\s*`([^`]+)`/g) || [];
252
+
253
+ for (const match of typeDefMatches) {
254
+ const schema = match.replace(/typeDefs\s*[:=]\s*`([^`]+)`/, "$1");
255
+ const types = extractGraphQLTypes(schema);
256
+
257
+ schemas.push({
258
+ content: schema,
259
+ types,
260
+ });
261
+ }
262
+
263
+ // Look for resolvers
264
+ const resolverMatches = content.match(/resolvers\s*[:=]\s*{([^}]+)}/gs) || [];
265
+
266
+ for (const match of resolverMatches) {
267
+ resolvers.push({
268
+ content: match,
269
+ });
270
+ }
271
+
272
+ return { schemas, resolvers };
273
+ }
274
+
275
+ /**
276
+ * Extract API route patterns from Express/Next.js
277
+ */
278
+ function extractAPIRoutes(projectPath) {
279
+ const routes = [];
280
+
281
+ // Look for API route files
282
+ const apiFiles = findFiles(projectPath, [
283
+ ".ts", ".tsx", ".js", ".jsx"
284
+ ]).filter(file => {
285
+ const relativePath = path.relative(projectPath, file).replace(/\\/g, "/");
286
+ return relativePath.includes("/api/") || relativePath.includes("/routes/");
287
+ });
288
+
289
+ for (const file of apiFiles) {
290
+ try {
291
+ const content = fs.readFileSync(file, "utf-8");
292
+ const extracted = extractRouteInfo(content, file);
293
+
294
+ if (extracted.routes.length > 0) {
295
+ routes.push({
296
+ file: path.relative(projectPath, file).replace(/\\/g, "/"),
297
+ routes: extracted.routes,
298
+ middleware: extracted.middleware,
299
+ validation: extracted.validation,
300
+ });
301
+ }
302
+ } catch {}
303
+ }
304
+
305
+ return routes;
306
+ }
307
+
308
+ /**
309
+ * Extract route information from file
310
+ */
311
+ function extractRouteInfo(content, filePath) {
312
+ const routes = [];
313
+ const middleware = [];
314
+ const validation = [];
315
+
316
+ // Extract Express routes
317
+ const expressMatches = content.match(/\.(get|post|put|delete|patch)\s*\(\s*['"]([^'"]+)['"]/g) || [];
318
+
319
+ for (const match of expressMatches) {
320
+ const parts = match.match(/\.(get|post|put|delete|patch)\s*\(\s*['"]([^'"]+)['"]/);
321
+ if (parts) {
322
+ routes.push({
323
+ method: parts[1].toUpperCase(),
324
+ path: parts[2],
325
+ framework: "Express",
326
+ });
327
+ }
328
+ }
329
+
330
+ // Extract Next.js API routes
331
+ if (filePath.includes("/api/")) {
332
+ const relativePath = path.relative(process.cwd(), filePath).replace(/\\/g, "/");
333
+ const routePath = relativePath
334
+ .replace(/\/api\//, "/")
335
+ .replace(/\.(ts|tsx|js|jsx)$/, "");
336
+
337
+ // Look for HTTP method exports
338
+ const methods = ["GET", "POST", "PUT", "DELETE", "PATCH"];
339
+ for (const method of methods) {
340
+ if (content.includes(`export async function ${method}`) ||
341
+ content.includes(`export function ${method}`)) {
342
+ routes.push({
343
+ method,
344
+ path: routePath,
345
+ framework: "Next.js",
346
+ });
347
+ }
348
+ }
349
+ }
350
+
351
+ // Extract middleware usage
352
+ if (content.includes("cors")) middleware.push("cors");
353
+ if (content.includes("helmet")) middleware.push("helmet");
354
+ if (content.includes("auth")) middleware.push("auth");
355
+ if (content.includes("validate") || content.includes("zod")) validation.push("zod");
356
+ if (content.includes("joi")) validation.push("joi");
357
+
358
+ return { routes, middleware, validation };
359
+ }
360
+
361
+ /**
362
+ * Generate API context summary
363
+ */
364
+ function generateAPIContext(projectPath) {
365
+ const openAPI = extractOpenAPISpecs(projectPath);
366
+ const graphql = extractGraphQLSchemas(projectPath);
367
+ const routes = extractAPIRoutes(projectPath);
368
+
369
+ return {
370
+ summary: {
371
+ hasOpenAPI: openAPI.length > 0,
372
+ openAPICount: openAPI.length,
373
+ hasGraphQL: graphql.length > 0,
374
+ graphqlCount: graphql.length,
375
+ hasCustomRoutes: routes.length > 0,
376
+ routeCount: routes.reduce((sum, r) => sum + r.routes.length, 0),
377
+ },
378
+ openAPI,
379
+ graphql,
380
+ routes,
381
+ recommendations: generateAPIRecommendations(openAPI, graphql, routes),
382
+ };
383
+ }
384
+
385
+ /**
386
+ * Generate API recommendations
387
+ */
388
+ function generateAPIRecommendations(openAPI, graphql, routes) {
389
+ const recommendations = [];
390
+
391
+ if (openAPI.length === 0 && graphql.length === 0 && routes.length > 0) {
392
+ recommendations.push({
393
+ type: "documentation",
394
+ message: "Consider adding OpenAPI/Swagger specification for better API documentation",
395
+ });
396
+ }
397
+
398
+ if (routes.length > 0) {
399
+ const hasValidation = routes.some(r => r.validation.length > 0);
400
+ if (!hasValidation) {
401
+ recommendations.push({
402
+ type: "validation",
403
+ message: "Add input validation to API routes (zod, joi, etc.)",
404
+ });
405
+ }
406
+ }
407
+
408
+ const totalEndpoints = openAPI.reduce((sum, s) => sum + s.endpoints.length, 0) +
409
+ graphql.reduce((sum, s) => sum + (s.queries?.length || 0) + (s.mutations?.length || 0), 0) +
410
+ routes.reduce((sum, r) => sum + r.routes.length, 0);
411
+
412
+ if (totalEndpoints > 20) {
413
+ recommendations.push({
414
+ type: "organization",
415
+ message: "Consider organizing APIs into modules or microservices",
416
+ });
417
+ }
418
+
419
+ return recommendations;
420
+ }
421
+
422
+ module.exports = {
423
+ extractOpenAPISpecs,
424
+ extractGraphQLSchemas,
425
+ extractAPIRoutes,
426
+ generateAPIContext,
427
+ };