@vibecheckai/cli 2.8.2 → 3.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (454) hide show
  1. package/README.md +8 -8
  2. package/bin/_deprecations.js +35 -0
  3. package/bin/_router.js +46 -0
  4. package/bin/cli-hygiene.js +241 -0
  5. package/bin/guardrail.js +834 -0
  6. package/bin/runners/cli-utils.js +1070 -0
  7. package/bin/runners/context/ai-task-decomposer.js +337 -0
  8. package/bin/runners/context/analyzer.js +462 -0
  9. package/bin/runners/context/api-contracts.js +427 -0
  10. package/bin/runners/context/context-diff.js +342 -0
  11. package/bin/runners/context/context-pruner.js +291 -0
  12. package/bin/runners/context/dependency-graph.js +414 -0
  13. package/bin/runners/context/generators/claude.js +107 -0
  14. package/bin/runners/context/generators/codex.js +108 -0
  15. package/bin/runners/context/generators/copilot.js +119 -0
  16. package/bin/runners/context/generators/cursor.js +514 -0
  17. package/bin/runners/context/generators/mcp.js +151 -0
  18. package/bin/runners/context/generators/windsurf.js +180 -0
  19. package/bin/runners/context/git-context.js +302 -0
  20. package/bin/runners/context/index.js +1042 -0
  21. package/bin/runners/context/insights.js +173 -0
  22. package/bin/runners/context/mcp-server/generate-rules.js +337 -0
  23. package/bin/runners/context/mcp-server/index.js +1176 -0
  24. package/bin/runners/context/mcp-server/package.json +24 -0
  25. package/bin/runners/context/memory.js +200 -0
  26. package/bin/runners/context/monorepo.js +215 -0
  27. package/bin/runners/context/multi-repo-federation.js +404 -0
  28. package/bin/runners/context/patterns.js +253 -0
  29. package/bin/runners/context/proof-context.js +972 -0
  30. package/bin/runners/context/security-scanner.js +303 -0
  31. package/bin/runners/context/semantic-search.js +350 -0
  32. package/bin/runners/context/shared.js +264 -0
  33. package/bin/runners/context/team-conventions.js +310 -0
  34. package/bin/runners/lib/ai-bridge.js +416 -0
  35. package/bin/runners/lib/analysis-core.js +271 -0
  36. package/bin/runners/lib/analyzers.js +541 -0
  37. package/bin/runners/lib/audit-bridge.js +391 -0
  38. package/bin/runners/lib/auth-truth.js +193 -0
  39. package/bin/runners/lib/auth.js +215 -0
  40. package/bin/runners/lib/backup.js +62 -0
  41. package/bin/runners/lib/billing.js +107 -0
  42. package/bin/runners/lib/claims.js +118 -0
  43. package/bin/runners/lib/cli-ui.js +540 -0
  44. package/bin/runners/lib/compliance-bridge-new.js +0 -0
  45. package/bin/runners/lib/compliance-bridge.js +165 -0
  46. package/bin/runners/lib/contracts/auth-contract.js +194 -0
  47. package/bin/runners/lib/contracts/env-contract.js +178 -0
  48. package/bin/runners/lib/contracts/external-contract.js +198 -0
  49. package/bin/runners/lib/contracts/guard.js +168 -0
  50. package/bin/runners/lib/contracts/index.js +89 -0
  51. package/bin/runners/lib/contracts/plan-validator.js +311 -0
  52. package/bin/runners/lib/contracts/route-contract.js +192 -0
  53. package/bin/runners/lib/detect.js +89 -0
  54. package/bin/runners/lib/doctor/autofix.js +254 -0
  55. package/bin/runners/lib/doctor/index.js +37 -0
  56. package/bin/runners/lib/doctor/modules/dependencies.js +325 -0
  57. package/bin/runners/lib/doctor/modules/index.js +46 -0
  58. package/bin/runners/lib/doctor/modules/network.js +250 -0
  59. package/bin/runners/lib/doctor/modules/project.js +312 -0
  60. package/bin/runners/lib/doctor/modules/runtime.js +224 -0
  61. package/bin/runners/lib/doctor/modules/security.js +348 -0
  62. package/bin/runners/lib/doctor/modules/system.js +213 -0
  63. package/bin/runners/lib/doctor/modules/vibecheck.js +394 -0
  64. package/bin/runners/lib/doctor/reporter.js +262 -0
  65. package/bin/runners/lib/doctor/service.js +262 -0
  66. package/bin/runners/lib/doctor/types.js +113 -0
  67. package/bin/runners/lib/doctor/ui.js +263 -0
  68. package/bin/runners/lib/doctor-enhanced.js +233 -0
  69. package/bin/runners/lib/doctor-v2.js +608 -0
  70. package/bin/runners/lib/enforcement.js +72 -0
  71. package/bin/runners/lib/enterprise-detect.js +603 -0
  72. package/bin/runners/lib/enterprise-init.js +942 -0
  73. package/bin/runners/lib/entitlements-v2.js +381 -0
  74. package/bin/runners/lib/entitlements.generated.js +0 -0
  75. package/bin/runners/lib/entitlements.js +332 -0
  76. package/bin/runners/lib/env-template.js +66 -0
  77. package/bin/runners/lib/env.js +189 -0
  78. package/bin/runners/lib/error-handler.js +320 -0
  79. package/bin/runners/lib/firewall-prompt.js +50 -0
  80. package/bin/runners/lib/graph/graph-builder.js +265 -0
  81. package/bin/runners/lib/graph/html-renderer.js +413 -0
  82. package/bin/runners/lib/graph/index.js +32 -0
  83. package/bin/runners/lib/graph/runtime-collector.js +215 -0
  84. package/bin/runners/lib/graph/static-extractor.js +518 -0
  85. package/bin/runners/lib/init-wizard.js +308 -0
  86. package/bin/runners/lib/json-output.js +76 -0
  87. package/bin/runners/lib/llm.js +75 -0
  88. package/bin/runners/lib/meter.js +61 -0
  89. package/bin/runners/lib/missions/evidence.js +126 -0
  90. package/bin/runners/lib/missions/plan.js +69 -0
  91. package/bin/runners/lib/missions/templates.js +147 -0
  92. package/bin/runners/lib/patch.js +40 -0
  93. package/bin/runners/lib/permissions/auth-model.js +213 -0
  94. package/bin/runners/lib/permissions/idor-prover.js +205 -0
  95. package/bin/runners/lib/permissions/index.js +45 -0
  96. package/bin/runners/lib/permissions/matrix-builder.js +198 -0
  97. package/bin/runners/lib/pkgjson.js +28 -0
  98. package/bin/runners/lib/preflight.js +142 -0
  99. package/bin/runners/lib/reality-findings.js +84 -0
  100. package/bin/runners/lib/redact.js +29 -0
  101. package/bin/runners/lib/replay/capsule-manager.js +154 -0
  102. package/bin/runners/lib/replay/index.js +263 -0
  103. package/bin/runners/lib/replay/player.js +348 -0
  104. package/bin/runners/lib/replay/recorder.js +331 -0
  105. package/bin/runners/lib/report-engine.js +447 -0
  106. package/bin/runners/lib/report-html.js +1117 -0
  107. package/bin/runners/lib/report-templates.js +964 -0
  108. package/bin/runners/lib/route-detection.js +1140 -0
  109. package/bin/runners/lib/route-truth.js +477 -0
  110. package/bin/runners/lib/sandbox/index.js +59 -0
  111. package/bin/runners/lib/sandbox/proof-chain.js +399 -0
  112. package/bin/runners/lib/sandbox/sandbox-runner.js +205 -0
  113. package/bin/runners/lib/sandbox/worktree.js +174 -0
  114. package/bin/runners/lib/scan-cache.js +330 -0
  115. package/bin/runners/lib/scan-output-schema.js +344 -0
  116. package/bin/runners/lib/score-history.js +282 -0
  117. package/bin/runners/lib/security-bridge.js +249 -0
  118. package/bin/runners/lib/server-usage.js +513 -0
  119. package/bin/runners/lib/share-pack.js +239 -0
  120. package/bin/runners/lib/snippets.js +67 -0
  121. package/bin/runners/lib/truth.js +667 -0
  122. package/bin/runners/lib/unified-output.js +189 -0
  123. package/bin/runners/lib/validate-patch.js +156 -0
  124. package/bin/runners/lib/verification.js +345 -0
  125. package/bin/runners/reality/engine.js +917 -0
  126. package/bin/runners/reality/flows.js +122 -0
  127. package/bin/runners/reality/report.js +378 -0
  128. package/bin/runners/reality/session.js +193 -0
  129. package/bin/runners/runAIAgent.js +2 -0
  130. package/bin/runners/runAudit.js +2 -0
  131. package/bin/runners/runAuth.js +106 -0
  132. package/bin/runners/runAutopilot.js +2 -0
  133. package/bin/runners/runBadge.js +2 -0
  134. package/bin/runners/runCertify.js +2 -0
  135. package/bin/runners/runClaimVerifier.js +483 -0
  136. package/bin/runners/runContext.js +56 -0
  137. package/bin/runners/runContextCompiler.js +385 -0
  138. package/bin/runners/runCtx.js +187 -0
  139. package/bin/runners/runCtxGuard.js +176 -0
  140. package/bin/runners/runCtxSync.js +116 -0
  141. package/bin/runners/runDashboard.js +10 -0
  142. package/bin/runners/runDoctor.js +245 -0
  143. package/bin/runners/runEnhancedShip.js +2 -0
  144. package/bin/runners/runFix.js +735 -0
  145. package/bin/runners/runFixPacks.js +2 -0
  146. package/bin/runners/runGate.js +17 -0
  147. package/bin/runners/runGraph.js +283 -0
  148. package/bin/runners/runInit.js +260 -0
  149. package/bin/runners/runInitGha.js +101 -0
  150. package/bin/runners/runInstall.js +76 -0
  151. package/bin/runners/runInteractive.js +388 -0
  152. package/bin/runners/runLaunch.js +2 -0
  153. package/bin/runners/runMcp.js +19 -0
  154. package/bin/runners/runMdc.js +2 -0
  155. package/bin/runners/runMissionGenerator.js +282 -0
  156. package/bin/runners/runNaturalLanguage.js +3 -0
  157. package/bin/runners/runPR.js +96 -0
  158. package/bin/runners/runPermissions.js +290 -0
  159. package/bin/runners/runPromptFirewall.js +211 -0
  160. package/bin/runners/runProof.js +2 -0
  161. package/bin/runners/runProve.js +392 -0
  162. package/bin/runners/runReality.js +489 -0
  163. package/bin/runners/runRealitySniff.js +2 -0
  164. package/bin/runners/runReplay.js +469 -0
  165. package/bin/runners/runReport.js +478 -0
  166. package/bin/runners/runScan.js +835 -0
  167. package/bin/runners/runShare.js +34 -0
  168. package/bin/runners/runShip.js +1062 -0
  169. package/bin/runners/runStatus.js +136 -0
  170. package/bin/runners/runTruthpack.js +634 -0
  171. package/bin/runners/runUpgrade.js +2 -0
  172. package/bin/runners/runValidate.js +2 -0
  173. package/bin/runners/runVerifyAgentOutput.js +2 -0
  174. package/bin/runners/runWatch.js +230 -0
  175. package/bin/runners/utils.js +360 -0
  176. package/bin/scan.js +612 -0
  177. package/bin/vibecheck.js +834 -0
  178. package/package.json +11 -11
  179. package/dist/autopatch/verified-autopatch.d.ts +0 -111
  180. package/dist/autopatch/verified-autopatch.d.ts.map +0 -1
  181. package/dist/autopatch/verified-autopatch.js +0 -503
  182. package/dist/autopatch/verified-autopatch.js.map +0 -1
  183. package/dist/bundles/index.js +0 -8
  184. package/dist/bundles/vibecheck-core.js +0 -25799
  185. package/dist/bundles/vibecheck-security.js +0 -208693
  186. package/dist/bundles/vibecheck-ship.js +0 -2318
  187. package/dist/commands/baseline.d.ts +0 -7
  188. package/dist/commands/baseline.d.ts.map +0 -1
  189. package/dist/commands/baseline.js +0 -79
  190. package/dist/commands/baseline.js.map +0 -1
  191. package/dist/commands/cache.d.ts +0 -13
  192. package/dist/commands/cache.d.ts.map +0 -1
  193. package/dist/commands/cache.js +0 -165
  194. package/dist/commands/cache.js.map +0 -1
  195. package/dist/commands/checkpoint.d.ts +0 -8
  196. package/dist/commands/checkpoint.d.ts.map +0 -1
  197. package/dist/commands/checkpoint.js +0 -35
  198. package/dist/commands/checkpoint.js.map +0 -1
  199. package/dist/commands/doctor.d.ts +0 -17
  200. package/dist/commands/doctor.d.ts.map +0 -1
  201. package/dist/commands/doctor.js +0 -226
  202. package/dist/commands/doctor.js.map +0 -1
  203. package/dist/commands/evidence.d.ts +0 -45
  204. package/dist/commands/evidence.d.ts.map +0 -1
  205. package/dist/commands/evidence.js +0 -197
  206. package/dist/commands/evidence.js.map +0 -1
  207. package/dist/commands/explain.d.ts +0 -8
  208. package/dist/commands/explain.d.ts.map +0 -1
  209. package/dist/commands/explain.js +0 -52
  210. package/dist/commands/explain.js.map +0 -1
  211. package/dist/commands/fix-consolidated.d.ts +0 -19
  212. package/dist/commands/fix-consolidated.d.ts.map +0 -1
  213. package/dist/commands/fix-consolidated.js +0 -165
  214. package/dist/commands/fix-consolidated.js.map +0 -1
  215. package/dist/commands/index.d.ts +0 -8
  216. package/dist/commands/index.d.ts.map +0 -1
  217. package/dist/commands/index.js +0 -15
  218. package/dist/commands/index.js.map +0 -1
  219. package/dist/commands/init.d.ts +0 -8
  220. package/dist/commands/init.d.ts.map +0 -1
  221. package/dist/commands/init.js +0 -125
  222. package/dist/commands/init.js.map +0 -1
  223. package/dist/commands/launcher.d.ts +0 -10
  224. package/dist/commands/launcher.d.ts.map +0 -1
  225. package/dist/commands/launcher.js +0 -174
  226. package/dist/commands/launcher.js.map +0 -1
  227. package/dist/commands/on.d.ts +0 -8
  228. package/dist/commands/on.d.ts.map +0 -1
  229. package/dist/commands/on.js +0 -123
  230. package/dist/commands/on.js.map +0 -1
  231. package/dist/commands/replay.d.ts +0 -8
  232. package/dist/commands/replay.d.ts.map +0 -1
  233. package/dist/commands/replay.js +0 -52
  234. package/dist/commands/replay.js.map +0 -1
  235. package/dist/commands/scan-consolidated.d.ts +0 -61
  236. package/dist/commands/scan-consolidated.d.ts.map +0 -1
  237. package/dist/commands/scan-consolidated.js +0 -243
  238. package/dist/commands/scan-consolidated.js.map +0 -1
  239. package/dist/commands/scan-secrets.d.ts +0 -47
  240. package/dist/commands/scan-secrets.d.ts.map +0 -1
  241. package/dist/commands/scan-secrets.js +0 -225
  242. package/dist/commands/scan-secrets.js.map +0 -1
  243. package/dist/commands/scan-vulnerabilities-enhanced.d.ts +0 -41
  244. package/dist/commands/scan-vulnerabilities-enhanced.d.ts.map +0 -1
  245. package/dist/commands/scan-vulnerabilities-enhanced.js +0 -368
  246. package/dist/commands/scan-vulnerabilities-enhanced.js.map +0 -1
  247. package/dist/commands/scan-vulnerabilities-osv.d.ts +0 -58
  248. package/dist/commands/scan-vulnerabilities-osv.d.ts.map +0 -1
  249. package/dist/commands/scan-vulnerabilities-osv.js +0 -722
  250. package/dist/commands/scan-vulnerabilities-osv.js.map +0 -1
  251. package/dist/commands/scan-vulnerabilities.d.ts +0 -32
  252. package/dist/commands/scan-vulnerabilities.d.ts.map +0 -1
  253. package/dist/commands/scan-vulnerabilities.js +0 -283
  254. package/dist/commands/scan-vulnerabilities.js.map +0 -1
  255. package/dist/commands/secrets-allowlist.d.ts +0 -7
  256. package/dist/commands/secrets-allowlist.d.ts.map +0 -1
  257. package/dist/commands/secrets-allowlist.js +0 -85
  258. package/dist/commands/secrets-allowlist.js.map +0 -1
  259. package/dist/commands/ship-consolidated.d.ts +0 -58
  260. package/dist/commands/ship-consolidated.d.ts.map +0 -1
  261. package/dist/commands/ship-consolidated.js +0 -515
  262. package/dist/commands/ship-consolidated.js.map +0 -1
  263. package/dist/commands/stats.d.ts +0 -8
  264. package/dist/commands/stats.d.ts.map +0 -1
  265. package/dist/commands/stats.js +0 -134
  266. package/dist/commands/stats.js.map +0 -1
  267. package/dist/commands/upgrade.d.ts +0 -8
  268. package/dist/commands/upgrade.d.ts.map +0 -1
  269. package/dist/commands/upgrade.js +0 -30
  270. package/dist/commands/upgrade.js.map +0 -1
  271. package/dist/fix/applicator.d.ts +0 -44
  272. package/dist/fix/applicator.d.ts.map +0 -1
  273. package/dist/fix/applicator.js +0 -144
  274. package/dist/fix/applicator.js.map +0 -1
  275. package/dist/fix/backup.d.ts +0 -38
  276. package/dist/fix/backup.d.ts.map +0 -1
  277. package/dist/fix/backup.js +0 -154
  278. package/dist/fix/backup.js.map +0 -1
  279. package/dist/fix/engine.d.ts +0 -55
  280. package/dist/fix/engine.d.ts.map +0 -1
  281. package/dist/fix/engine.js +0 -285
  282. package/dist/fix/engine.js.map +0 -1
  283. package/dist/fix/index.d.ts +0 -5
  284. package/dist/fix/index.d.ts.map +0 -1
  285. package/dist/fix/index.js +0 -12
  286. package/dist/fix/index.js.map +0 -1
  287. package/dist/fix/interactive.d.ts +0 -22
  288. package/dist/fix/interactive.d.ts.map +0 -1
  289. package/dist/fix/interactive.js +0 -172
  290. package/dist/fix/interactive.js.map +0 -1
  291. package/dist/formatters/index.d.ts +0 -6
  292. package/dist/formatters/index.d.ts.map +0 -1
  293. package/dist/formatters/index.js +0 -11
  294. package/dist/formatters/index.js.map +0 -1
  295. package/dist/formatters/sarif-enhanced.d.ts +0 -78
  296. package/dist/formatters/sarif-enhanced.d.ts.map +0 -1
  297. package/dist/formatters/sarif-enhanced.js +0 -144
  298. package/dist/formatters/sarif-enhanced.js.map +0 -1
  299. package/dist/formatters/sarif-v2.d.ts +0 -121
  300. package/dist/formatters/sarif-v2.d.ts.map +0 -1
  301. package/dist/formatters/sarif-v2.js +0 -356
  302. package/dist/formatters/sarif-v2.js.map +0 -1
  303. package/dist/formatters/sarif.d.ts +0 -72
  304. package/dist/formatters/sarif.d.ts.map +0 -1
  305. package/dist/formatters/sarif.js +0 -146
  306. package/dist/formatters/sarif.js.map +0 -1
  307. package/dist/index.d.ts +0 -61
  308. package/dist/index.d.ts.map +0 -1
  309. package/dist/index.js +0 -4388
  310. package/dist/index.js.map +0 -1
  311. package/dist/init/ci-generator.d.ts +0 -18
  312. package/dist/init/ci-generator.d.ts.map +0 -1
  313. package/dist/init/ci-generator.js +0 -317
  314. package/dist/init/ci-generator.js.map +0 -1
  315. package/dist/init/detect-framework.d.ts +0 -15
  316. package/dist/init/detect-framework.d.ts.map +0 -1
  317. package/dist/init/detect-framework.js +0 -301
  318. package/dist/init/detect-framework.js.map +0 -1
  319. package/dist/init/hooks-installer.d.ts +0 -22
  320. package/dist/init/hooks-installer.d.ts.map +0 -1
  321. package/dist/init/hooks-installer.js +0 -310
  322. package/dist/init/hooks-installer.js.map +0 -1
  323. package/dist/init/index.d.ts +0 -8
  324. package/dist/init/index.d.ts.map +0 -1
  325. package/dist/init/index.js +0 -22
  326. package/dist/init/index.js.map +0 -1
  327. package/dist/init/templates.d.ts +0 -402
  328. package/dist/init/templates.d.ts.map +0 -1
  329. package/dist/init/templates.js +0 -240
  330. package/dist/init/templates.js.map +0 -1
  331. package/dist/mcp/server.d.ts +0 -12
  332. package/dist/mcp/server.d.ts.map +0 -1
  333. package/dist/mcp/server.js +0 -42
  334. package/dist/mcp/server.js.map +0 -1
  335. package/dist/mcp/telemetry.d.ts +0 -40
  336. package/dist/mcp/telemetry.d.ts.map +0 -1
  337. package/dist/mcp/telemetry.js +0 -98
  338. package/dist/mcp/telemetry.js.map +0 -1
  339. package/dist/reality/no-dead-buttons/button-sweep-generator.d.ts +0 -32
  340. package/dist/reality/no-dead-buttons/button-sweep-generator.d.ts.map +0 -1
  341. package/dist/reality/no-dead-buttons/button-sweep-generator.js +0 -236
  342. package/dist/reality/no-dead-buttons/button-sweep-generator.js.map +0 -1
  343. package/dist/reality/no-dead-buttons/index.d.ts +0 -11
  344. package/dist/reality/no-dead-buttons/index.d.ts.map +0 -1
  345. package/dist/reality/no-dead-buttons/index.js +0 -18
  346. package/dist/reality/no-dead-buttons/index.js.map +0 -1
  347. package/dist/reality/no-dead-buttons/static-scanner.d.ts +0 -34
  348. package/dist/reality/no-dead-buttons/static-scanner.d.ts.map +0 -1
  349. package/dist/reality/no-dead-buttons/static-scanner.js +0 -230
  350. package/dist/reality/no-dead-buttons/static-scanner.js.map +0 -1
  351. package/dist/reality/reality-graph.d.ts +0 -192
  352. package/dist/reality/reality-graph.d.ts.map +0 -1
  353. package/dist/reality/reality-graph.js +0 -600
  354. package/dist/reality/reality-graph.js.map +0 -1
  355. package/dist/reality/reality-runner.d.ts +0 -89
  356. package/dist/reality/reality-runner.d.ts.map +0 -1
  357. package/dist/reality/reality-runner.js +0 -540
  358. package/dist/reality/reality-runner.js.map +0 -1
  359. package/dist/reality/receipt-generator.d.ts +0 -152
  360. package/dist/reality/receipt-generator.d.ts.map +0 -1
  361. package/dist/reality/receipt-generator.js +0 -495
  362. package/dist/reality/receipt-generator.js.map +0 -1
  363. package/dist/reality/runtime-tracer.d.ts +0 -75
  364. package/dist/reality/runtime-tracer.d.ts.map +0 -1
  365. package/dist/reality/runtime-tracer.js +0 -109
  366. package/dist/reality/runtime-tracer.js.map +0 -1
  367. package/dist/runtime/auth-utils.d.ts +0 -43
  368. package/dist/runtime/auth-utils.d.ts.map +0 -1
  369. package/dist/runtime/auth-utils.js +0 -130
  370. package/dist/runtime/auth-utils.js.map +0 -1
  371. package/dist/runtime/client.d.ts +0 -74
  372. package/dist/runtime/client.d.ts.map +0 -1
  373. package/dist/runtime/client.js +0 -222
  374. package/dist/runtime/client.js.map +0 -1
  375. package/dist/runtime/creds.d.ts +0 -48
  376. package/dist/runtime/creds.d.ts.map +0 -1
  377. package/dist/runtime/creds.js +0 -245
  378. package/dist/runtime/creds.js.map +0 -1
  379. package/dist/runtime/exit-codes.d.ts +0 -49
  380. package/dist/runtime/exit-codes.d.ts.map +0 -1
  381. package/dist/runtime/exit-codes.js +0 -93
  382. package/dist/runtime/exit-codes.js.map +0 -1
  383. package/dist/runtime/index.d.ts +0 -9
  384. package/dist/runtime/index.d.ts.map +0 -1
  385. package/dist/runtime/index.js +0 -25
  386. package/dist/runtime/index.js.map +0 -1
  387. package/dist/runtime/json-output.d.ts +0 -42
  388. package/dist/runtime/json-output.d.ts.map +0 -1
  389. package/dist/runtime/json-output.js +0 -59
  390. package/dist/runtime/json-output.js.map +0 -1
  391. package/dist/runtime/semver.d.ts +0 -37
  392. package/dist/runtime/semver.d.ts.map +0 -1
  393. package/dist/runtime/semver.js +0 -110
  394. package/dist/runtime/semver.js.map +0 -1
  395. package/dist/scan/dead-ui-detector.d.ts +0 -48
  396. package/dist/scan/dead-ui-detector.d.ts.map +0 -1
  397. package/dist/scan/dead-ui-detector.js +0 -170
  398. package/dist/scan/dead-ui-detector.js.map +0 -1
  399. package/dist/scan/playwright-sweep.d.ts +0 -40
  400. package/dist/scan/playwright-sweep.d.ts.map +0 -1
  401. package/dist/scan/playwright-sweep.js +0 -216
  402. package/dist/scan/playwright-sweep.js.map +0 -1
  403. package/dist/scan/proof-bundle.d.ts +0 -25
  404. package/dist/scan/proof-bundle.d.ts.map +0 -1
  405. package/dist/scan/proof-bundle.js +0 -203
  406. package/dist/scan/proof-bundle.js.map +0 -1
  407. package/dist/scan/proof-graph.d.ts +0 -59
  408. package/dist/scan/proof-graph.d.ts.map +0 -1
  409. package/dist/scan/proof-graph.js +0 -64
  410. package/dist/scan/proof-graph.js.map +0 -1
  411. package/dist/scan/reality-sniff.d.ts +0 -56
  412. package/dist/scan/reality-sniff.d.ts.map +0 -1
  413. package/dist/scan/reality-sniff.js +0 -200
  414. package/dist/scan/reality-sniff.js.map +0 -1
  415. package/dist/scan/structural-verifier.d.ts +0 -20
  416. package/dist/scan/structural-verifier.d.ts.map +0 -1
  417. package/dist/scan/structural-verifier.js +0 -112
  418. package/dist/scan/structural-verifier.js.map +0 -1
  419. package/dist/scan/verification-engine.d.ts +0 -47
  420. package/dist/scan/verification-engine.d.ts.map +0 -1
  421. package/dist/scan/verification-engine.js +0 -141
  422. package/dist/scan/verification-engine.js.map +0 -1
  423. package/dist/scanner/baseline.d.ts +0 -52
  424. package/dist/scanner/baseline.d.ts.map +0 -1
  425. package/dist/scanner/baseline.js +0 -85
  426. package/dist/scanner/baseline.js.map +0 -1
  427. package/dist/scanner/incremental.d.ts +0 -30
  428. package/dist/scanner/incremental.d.ts.map +0 -1
  429. package/dist/scanner/incremental.js +0 -82
  430. package/dist/scanner/incremental.js.map +0 -1
  431. package/dist/scanner/parallel.d.ts +0 -43
  432. package/dist/scanner/parallel.d.ts.map +0 -1
  433. package/dist/scanner/parallel.js +0 -99
  434. package/dist/scanner/parallel.js.map +0 -1
  435. package/dist/standalone.d.ts +0 -1
  436. package/dist/standalone.d.ts.map +0 -1
  437. package/dist/standalone.js +0 -1
  438. package/dist/standalone.js.map +0 -1
  439. package/dist/truth-pack/index.d.ts +0 -102
  440. package/dist/truth-pack/index.d.ts.map +0 -1
  441. package/dist/truth-pack/index.js +0 -694
  442. package/dist/truth-pack/index.js.map +0 -1
  443. package/dist/ui/frame.d.ts +0 -68
  444. package/dist/ui/frame.d.ts.map +0 -1
  445. package/dist/ui/frame.js +0 -165
  446. package/dist/ui/frame.js.map +0 -1
  447. package/dist/ui/index.d.ts +0 -5
  448. package/dist/ui/index.d.ts.map +0 -1
  449. package/dist/ui/index.js +0 -16
  450. package/dist/ui/index.js.map +0 -1
  451. package/dist/ui.d.ts +0 -36
  452. package/dist/ui.d.ts.map +0 -1
  453. package/dist/ui.js +0 -45
  454. package/dist/ui.js.map +0 -1
@@ -1,45 +0,0 @@
1
- /**
2
- * Signed Evidence Packs
3
- * Enterprise-grade audit trail with cryptographic attestation
4
- *
5
- * Generates:
6
- * - manifest.json (scan metadata)
7
- * - inputs.sha256 (hash list of scanned files)
8
- * - results.json / results.sarif
9
- * - attestation.sig (signature for tamper detection)
10
- */
11
- export interface EvidenceManifest {
12
- schemaVersion: string;
13
- runId: string;
14
- tool: {
15
- name: string;
16
- version: string;
17
- commit?: string;
18
- };
19
- project: {
20
- path: string;
21
- gitSha?: string;
22
- gitBranch?: string;
23
- gitRemote?: string;
24
- };
25
- scan: {
26
- type: string;
27
- startedAt: string;
28
- completedAt: string;
29
- filesScanned: number;
30
- findingsCount: number;
31
- };
32
- evidence: {
33
- inputsSha256: string;
34
- resultsSha256: string;
35
- policySha256?: string;
36
- };
37
- attestation: {
38
- algorithm: string;
39
- keyId: string;
40
- signature?: string;
41
- };
42
- }
43
- export declare function generateEvidence(scanType: string, results: any, projectPath: string): Promise<string>;
44
- export declare function verifyEvidence(evidencePath: string): Promise<boolean>;
45
- //# sourceMappingURL=evidence.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"evidence.d.ts","sourceRoot":"","sources":["../../src/commands/evidence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAOH,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE;QACJ,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,OAAO,EAAE;QACP,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,IAAI,EAAE;QACJ,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,EAAE,MAAM,CAAC;QACrB,aAAa,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,QAAQ,EAAE;QACR,YAAY,EAAE,MAAM,CAAC;QACrB,aAAa,EAAE,MAAM,CAAC;QACtB,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,WAAW,EAAE;QACX,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;CACH;AA2ED,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,GAAG,EACZ,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,MAAM,CAAC,CAoFjB;AAED,wBAAsB,cAAc,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAkC3E"}
@@ -1,197 +0,0 @@
1
- "use strict";
2
- /**
3
- * Signed Evidence Packs
4
- * Enterprise-grade audit trail with cryptographic attestation
5
- *
6
- * Generates:
7
- * - manifest.json (scan metadata)
8
- * - inputs.sha256 (hash list of scanned files)
9
- * - results.json / results.sarif
10
- * - attestation.sig (signature for tamper detection)
11
- */
12
- var __importDefault = (this && this.__importDefault) || function (mod) {
13
- return (mod && mod.__esModule) ? mod : { "default": mod };
14
- };
15
- Object.defineProperty(exports, "__esModule", { value: true });
16
- exports.generateEvidence = generateEvidence;
17
- exports.verifyEvidence = verifyEvidence;
18
- const crypto_1 = __importDefault(require("crypto"));
19
- const fs_1 = require("fs");
20
- const path_1 = require("path");
21
- const child_process_1 = require("child_process");
22
- function getVersion() {
23
- try {
24
- const pkg = require('../../package.json');
25
- return pkg.version || '1.0.0';
26
- }
27
- catch {
28
- return '1.0.0';
29
- }
30
- }
31
- function getGitInfo(projectPath) {
32
- try {
33
- const sha = (0, child_process_1.execSync)('git rev-parse HEAD', { cwd: projectPath, encoding: 'utf8' }).trim();
34
- const branch = (0, child_process_1.execSync)('git rev-parse --abbrev-ref HEAD', { cwd: projectPath, encoding: 'utf8' }).trim();
35
- let remote;
36
- try {
37
- remote = (0, child_process_1.execSync)('git remote get-url origin', { cwd: projectPath, encoding: 'utf8' }).trim();
38
- }
39
- catch {
40
- // No remote configured
41
- }
42
- return { sha, branch, remote };
43
- }
44
- catch {
45
- return {};
46
- }
47
- }
48
- function sha256(content) {
49
- return crypto_1.default.createHash('sha256').update(content).digest('hex');
50
- }
51
- function generateRunId() {
52
- return `run_${Date.now()}_${crypto_1.default.randomBytes(4).toString('hex')}`;
53
- }
54
- function hashFileList(projectPath, extensions = ['.ts', '.js', '.json', '.env', '.yaml', '.yml']) {
55
- const hashes = [];
56
- function walkDir(dir) {
57
- try {
58
- const items = (0, fs_1.readdirSync)(dir);
59
- for (const item of items) {
60
- if (item.startsWith('.') || item === 'node_modules' || item === 'dist' || item === '.git')
61
- continue;
62
- const fullPath = (0, path_1.join)(dir, item);
63
- try {
64
- const stat = (0, fs_1.statSync)(fullPath);
65
- if (stat.isDirectory()) {
66
- walkDir(fullPath);
67
- }
68
- else if (extensions.some(ext => item.endsWith(ext))) {
69
- const content = (0, fs_1.readFileSync)(fullPath);
70
- const hash = crypto_1.default.createHash('sha256').update(content).digest('hex');
71
- const relPath = (0, path_1.relative)(projectPath, fullPath).replace(/\\/g, '/');
72
- hashes.push(`${hash} ${relPath}`);
73
- }
74
- }
75
- catch {
76
- // Skip inaccessible files
77
- }
78
- }
79
- }
80
- catch {
81
- // Skip inaccessible directories
82
- }
83
- }
84
- walkDir(projectPath);
85
- hashes.sort();
86
- return hashes.join('\n');
87
- }
88
- function signContent(content, keyId) {
89
- // Use HMAC-SHA256 with a per-installation key
90
- // In production, this would use a proper signing key from keychain
91
- const key = process.env.VIBECHECK_SIGNING_KEY || `vibecheck-${keyId}`;
92
- return crypto_1.default.createHmac('sha256', key).update(content).digest('hex');
93
- }
94
- async function generateEvidence(scanType, results, projectPath) {
95
- const evidenceDir = (0, path_1.join)(projectPath, '.vibecheck', 'evidence');
96
- if (!(0, fs_1.existsSync)(evidenceDir)) {
97
- (0, fs_1.mkdirSync)(evidenceDir, { recursive: true });
98
- }
99
- const runId = generateRunId();
100
- const runDir = (0, path_1.join)(evidenceDir, runId);
101
- (0, fs_1.mkdirSync)(runDir, { recursive: true });
102
- const startTime = new Date().toISOString();
103
- const gitInfo = getGitInfo(projectPath);
104
- const version = getVersion();
105
- // Generate inputs hash
106
- const inputsContent = hashFileList(projectPath);
107
- const inputsPath = (0, path_1.join)(runDir, 'inputs.sha256');
108
- (0, fs_1.writeFileSync)(inputsPath, inputsContent);
109
- const inputsSha256 = sha256(inputsContent);
110
- // Write results
111
- const resultsJson = JSON.stringify(results, null, 2);
112
- const resultsPath = (0, path_1.join)(runDir, 'results.json');
113
- (0, fs_1.writeFileSync)(resultsPath, resultsJson);
114
- const resultsSha256 = sha256(resultsJson);
115
- // Generate machine ID for key identification
116
- const keyId = crypto_1.default.createHash('sha256')
117
- .update(process.env.COMPUTERNAME || process.env.HOSTNAME || 'unknown')
118
- .digest('hex')
119
- .slice(0, 16);
120
- // Build manifest
121
- const manifest = {
122
- schemaVersion: 'vibecheck.evidence.v1',
123
- runId,
124
- tool: {
125
- name: 'vibecheck-cli-tool',
126
- version,
127
- },
128
- project: {
129
- path: projectPath,
130
- gitSha: gitInfo.sha,
131
- gitBranch: gitInfo.branch,
132
- gitRemote: gitInfo.remote,
133
- },
134
- scan: {
135
- type: scanType,
136
- startedAt: startTime,
137
- completedAt: new Date().toISOString(),
138
- filesScanned: results.filesScanned || 0,
139
- findingsCount: results.findings?.length || 0,
140
- },
141
- evidence: {
142
- inputsSha256,
143
- resultsSha256,
144
- },
145
- attestation: {
146
- algorithm: 'HMAC-SHA256',
147
- keyId,
148
- },
149
- };
150
- // Sign the manifest
151
- const manifestContent = JSON.stringify(manifest, null, 2);
152
- const signature = signContent(manifestContent, keyId);
153
- manifest.attestation.signature = signature;
154
- // Write final manifest with signature
155
- const manifestPath = (0, path_1.join)(runDir, 'manifest.json');
156
- (0, fs_1.writeFileSync)(manifestPath, JSON.stringify(manifest, null, 2));
157
- // Write attestation separately
158
- const attestationPath = (0, path_1.join)(runDir, 'attestation.sig');
159
- (0, fs_1.writeFileSync)(attestationPath, signature);
160
- console.log(`\n 📦 Evidence pack generated: ${runDir}`);
161
- console.log(` Run ID: ${runId}`);
162
- console.log(` Inputs hash: ${inputsSha256.slice(0, 16)}...`);
163
- console.log(` Results hash: ${resultsSha256.slice(0, 16)}...`);
164
- console.log(` Signature: ${signature.slice(0, 16)}...\n`);
165
- return runDir;
166
- }
167
- async function verifyEvidence(evidencePath) {
168
- try {
169
- const manifestPath = (0, path_1.join)(evidencePath, 'manifest.json');
170
- const manifestContent = (0, fs_1.readFileSync)(manifestPath, 'utf8');
171
- const manifest = JSON.parse(manifestContent);
172
- // Remove signature for verification
173
- const storedSignature = manifest.attestation.signature;
174
- delete manifest.attestation.signature;
175
- // Recompute signature
176
- const expectedSignature = signContent(JSON.stringify(manifest, null, 2), manifest.attestation.keyId);
177
- if (storedSignature !== expectedSignature) {
178
- console.error('❌ Evidence verification failed: signature mismatch');
179
- return false;
180
- }
181
- // Verify results hash
182
- const resultsPath = (0, path_1.join)(evidencePath, 'results.json');
183
- const resultsContent = (0, fs_1.readFileSync)(resultsPath, 'utf8');
184
- const resultsSha256 = sha256(resultsContent);
185
- if (resultsSha256 !== manifest.evidence.resultsSha256) {
186
- console.error('❌ Evidence verification failed: results tampered');
187
- return false;
188
- }
189
- console.log('✓ Evidence pack verified successfully');
190
- return true;
191
- }
192
- catch (err) {
193
- console.error(`❌ Evidence verification failed: ${err.message}`);
194
- return false;
195
- }
196
- }
197
- //# sourceMappingURL=evidence.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"evidence.js","sourceRoot":"","sources":["../../src/commands/evidence.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;;;AAiHH,4CAwFC;AAED,wCAkCC;AA3OD,oDAA4B;AAC5B,2BAA+F;AAC/F,+BAAsC;AACtC,iDAAyC;AAmCzC,SAAS,UAAU;IACjB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAC1C,OAAO,GAAG,CAAC,OAAO,IAAI,OAAO,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,WAAmB;IACrC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAA,wBAAQ,EAAC,oBAAoB,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1F,MAAM,MAAM,GAAG,IAAA,wBAAQ,EAAC,iCAAiC,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1G,IAAI,MAA0B,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,GAAG,IAAA,wBAAQ,EAAC,2BAA2B,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAChG,CAAC;QAAC,MAAM,CAAC;YACP,uBAAuB;QACzB,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,OAAe;IAC7B,OAAO,gBAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,gBAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AACtE,CAAC;AAED,SAAS,YAAY,CAAC,WAAmB,EAAE,aAAuB,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC;IAChH,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,SAAS,OAAO,CAAC,GAAW;QAC1B,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAA,gBAAW,EAAC,GAAG,CAAC,CAAC;YAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,KAAK,cAAc,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,MAAM;oBAAE,SAAS;gBACpG,MAAM,QAAQ,GAAG,IAAA,WAAI,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBACjC,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,IAAA,aAAQ,EAAC,QAAQ,CAAC,CAAC;oBAChC,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;wBACvB,OAAO,CAAC,QAAQ,CAAC,CAAC;oBACpB,CAAC;yBAAM,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;wBACtD,MAAM,OAAO,GAAG,IAAA,iBAAY,EAAC,QAAQ,CAAC,CAAC;wBACvC,MAAM,IAAI,GAAG,gBAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;wBACvE,MAAM,OAAO,GAAG,IAAA,eAAQ,EAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;wBACpE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC;oBACrC,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,0BAA0B;gBAC5B,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,gCAAgC;QAClC,CAAC;IACH,CAAC;IAED,OAAO,CAAC,WAAW,CAAC,CAAC;IACrB,MAAM,CAAC,IAAI,EAAE,CAAC;IACd,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,WAAW,CAAC,OAAe,EAAE,KAAa;IACjD,8CAA8C;IAC9C,mEAAmE;IACnE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,aAAa,KAAK,EAAE,CAAC;IACtE,OAAO,gBAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACxE,CAAC;AAEM,KAAK,UAAU,gBAAgB,CACpC,QAAgB,EAChB,OAAY,EACZ,WAAmB;IAEnB,MAAM,WAAW,GAAG,IAAA,WAAI,EAAC,WAAW,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;IAEhE,IAAI,CAAC,IAAA,eAAU,EAAC,WAAW,CAAC,EAAE,CAAC;QAC7B,IAAA,cAAS,EAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAG,IAAA,WAAI,EAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACxC,IAAA,cAAS,EAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEvC,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAE7B,uBAAuB;IACvB,MAAM,aAAa,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,IAAA,WAAI,EAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACjD,IAAA,kBAAa,EAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IACzC,MAAM,YAAY,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC;IAE3C,gBAAgB;IAChB,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACrD,MAAM,WAAW,GAAG,IAAA,WAAI,EAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACjD,IAAA,kBAAa,EAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IACxC,MAAM,aAAa,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;IAE1C,6CAA6C;IAC7C,MAAM,KAAK,GAAG,gBAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;SACtC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,SAAS,CAAC;SACrE,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEhB,iBAAiB;IACjB,MAAM,QAAQ,GAAqB;QACjC,aAAa,EAAE,uBAAuB;QACtC,KAAK;QACL,IAAI,EAAE;YACJ,IAAI,EAAE,oBAAoB;YAC1B,OAAO;SACR;QACD,OAAO,EAAE;YACP,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,OAAO,CAAC,GAAG;YACnB,SAAS,EAAE,OAAO,CAAC,MAAM;YACzB,SAAS,EAAE,OAAO,CAAC,MAAM;SAC1B;QACD,IAAI,EAAE;YACJ,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,SAAS;YACpB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACrC,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,CAAC;YACvC,aAAa,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC;SAC7C;QACD,QAAQ,EAAE;YACR,YAAY;YACZ,aAAa;SACd;QACD,WAAW,EAAE;YACX,SAAS,EAAE,aAAa;YACxB,KAAK;SACN;KACF,CAAC;IAEF,oBAAoB;IACpB,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAG,WAAW,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;IACtD,QAAQ,CAAC,WAAW,CAAC,SAAS,GAAG,SAAS,CAAC;IAE3C,sCAAsC;IACtC,MAAM,YAAY,GAAG,IAAA,WAAI,EAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACnD,IAAA,kBAAa,EAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAE/D,+BAA+B;IAC/B,MAAM,eAAe,GAAG,IAAA,WAAI,EAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACxD,IAAA,kBAAa,EAAC,eAAe,EAAE,SAAS,CAAC,CAAC;IAE1C,OAAO,CAAC,GAAG,CAAC,mCAAmC,MAAM,EAAE,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,CAAC,gBAAgB,KAAK,EAAE,CAAC,CAAC;IACrC,OAAO,CAAC,GAAG,CAAC,qBAAqB,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;IACjE,OAAO,CAAC,GAAG,CAAC,sBAAsB,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;IACnE,OAAO,CAAC,GAAG,CAAC,mBAAmB,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC;IAE9D,OAAO,MAAM,CAAC;AAChB,CAAC;AAEM,KAAK,UAAU,cAAc,CAAC,YAAoB;IACvD,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,IAAA,WAAI,EAAC,YAAY,EAAE,eAAe,CAAC,CAAC;QACzD,MAAM,eAAe,GAAG,IAAA,iBAAY,EAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAqB,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAE/D,oCAAoC;QACpC,MAAM,eAAe,GAAG,QAAQ,CAAC,WAAW,CAAC,SAAS,CAAC;QACvD,OAAO,QAAQ,CAAC,WAAW,CAAC,SAAS,CAAC;QAEtC,sBAAsB;QACtB,MAAM,iBAAiB,GAAG,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAErG,IAAI,eAAe,KAAK,iBAAiB,EAAE,CAAC;YAC1C,OAAO,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;YACpE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,sBAAsB;QACtB,MAAM,WAAW,GAAG,IAAA,WAAI,EAAC,YAAY,EAAE,cAAc,CAAC,CAAC;QACvD,MAAM,cAAc,GAAG,IAAA,iBAAY,EAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACzD,MAAM,aAAa,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;QAE7C,IAAI,aAAa,KAAK,QAAQ,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;YACtD,OAAO,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;YAClE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;QACrD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,mCAAmC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAChE,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}
@@ -1,8 +0,0 @@
1
- /**
2
- * vibecheck explain
3
- *
4
- * Get detailed explanation of a finding
5
- */
6
- import { Command } from 'commander';
7
- export declare function registerExplainCommand(program: Command): void;
8
- //# sourceMappingURL=explain.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"explain.d.ts","sourceRoot":"","sources":["../../src/commands/explain.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAMpC,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA6C7D"}
@@ -1,52 +0,0 @@
1
- "use strict";
2
- /**
3
- * vibecheck explain
4
- *
5
- * Get detailed explanation of a finding
6
- */
7
- Object.defineProperty(exports, "__esModule", { value: true });
8
- exports.registerExplainCommand = registerExplainCommand;
9
- const path_1 = require("path");
10
- const fs_1 = require("fs");
11
- const ui_1 = require("../ui");
12
- const ui_2 = require("../ui");
13
- function registerExplainCommand(program) {
14
- program
15
- .command('explain')
16
- .description('Get detailed explanation of a finding')
17
- .argument('<finding-id>', 'Finding ID (e.g., GR-REALITY-001)')
18
- .option('-p, --path <path>', 'Project path', '.')
19
- .action(async (findingId, options) => {
20
- (0, ui_1.printLogo)();
21
- const projectPath = (0, path_1.resolve)(options.path);
22
- const scanFile = (0, path_1.join)(projectPath, '.vibecheck', 'scan.json');
23
- if (!(0, fs_1.existsSync)(scanFile)) {
24
- console.error(`\n ${ui_2.styles.brightRed}${ui_2.icons.error}${ui_2.styles.reset} No scan results found`);
25
- console.log(` ${ui_2.styles.dim}Run ${ui_2.styles.bold}vibecheck scan${ui_2.styles.reset}${ui_2.styles.dim} first${ui_2.styles.reset}\n`);
26
- process.exit(2);
27
- }
28
- const scanResult = JSON.parse((0, fs_1.readFileSync)(scanFile, 'utf-8'));
29
- const finding = scanResult.findings?.find((f) => f.id === findingId);
30
- if (!finding) {
31
- console.error(`\n ${ui_2.styles.brightRed}${ui_2.icons.error}${ui_2.styles.reset} Finding ${findingId} not found\n`);
32
- process.exit(1);
33
- }
34
- console.log(`\n${ui_2.styles.brightCyan}${ui_2.styles.bold}${ui_2.icons.info} FINDING EXPLANATION${ui_2.styles.reset}\n`);
35
- console.log(` ${ui_2.styles.bold}ID:${ui_2.styles.reset} ${finding.id}`);
36
- console.log(` ${ui_2.styles.bold}Type:${ui_2.styles.reset} ${finding.type}`);
37
- console.log(` ${ui_2.styles.bold}Severity:${ui_2.styles.reset} ${finding.severity}`);
38
- console.log(` ${ui_2.styles.bold}File:${ui_2.styles.reset} ${finding.file}:${finding.line}`);
39
- console.log(` ${ui_2.styles.bold}Verdict:${ui_2.styles.reset} ${finding.verdict}`);
40
- console.log(` ${ui_2.styles.bold}Confidence:${ui_2.styles.reset} ${(finding.confidence * 100).toFixed(0)}%`);
41
- console.log('');
42
- if (finding.evidence && finding.evidence.length > 0) {
43
- console.log(` ${ui_2.styles.bold}Evidence:${ui_2.styles.reset}`);
44
- finding.evidence.forEach((e, i) => {
45
- console.log(` ${i + 1}. Level: ${e.level}, Strength: ${(e.strength * 100).toFixed(0)}%`);
46
- });
47
- console.log('');
48
- }
49
- console.log(` ${ui_2.styles.bold}Fix:${ui_2.styles.reset} ${ui_2.styles.bold}vibecheck fix --id ${finding.id}${ui_2.styles.reset}\n`);
50
- });
51
- }
52
- //# sourceMappingURL=explain.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"explain.js","sourceRoot":"","sources":["../../src/commands/explain.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;AAQH,wDA6CC;AAlDD,+BAAqC;AACrC,2BAA8C;AAC9C,8BAAkC;AAClC,8BAAsC;AAEtC,SAAgB,sBAAsB,CAAC,OAAgB;IACrD,OAAO;SACJ,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,uCAAuC,CAAC;SACpD,QAAQ,CAAC,cAAc,EAAE,mCAAmC,CAAC;SAC7D,MAAM,CAAC,mBAAmB,EAAE,cAAc,EAAE,GAAG,CAAC;SAChD,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE;QACnC,IAAA,cAAS,GAAE,CAAC;QAEZ,MAAM,WAAW,GAAG,IAAA,cAAO,EAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,IAAA,WAAI,EAAC,WAAW,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;QAE9D,IAAI,CAAC,IAAA,eAAU,EAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,KAAK,CAAC,OAAO,WAAM,CAAC,SAAS,GAAG,UAAK,CAAC,KAAK,GAAG,WAAM,CAAC,KAAK,wBAAwB,CAAC,CAAC;YAC5F,OAAO,CAAC,GAAG,CAAC,KAAK,WAAM,CAAC,GAAG,OAAO,WAAM,CAAC,IAAI,iBAAiB,WAAM,CAAC,KAAK,GAAG,WAAM,CAAC,GAAG,SAAS,WAAM,CAAC,KAAK,IAAI,CAAC,CAAC;YAClH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;QAE1E,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,OAAO,WAAM,CAAC,SAAS,GAAG,UAAK,CAAC,KAAK,GAAG,WAAM,CAAC,KAAK,YAAY,SAAS,cAAc,CAAC,CAAC;YACvG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,KAAK,WAAM,CAAC,UAAU,GAAG,WAAM,CAAC,IAAI,GAAG,UAAK,CAAC,IAAI,uBAAuB,WAAM,CAAC,KAAK,IAAI,CAAC,CAAC;QACtG,OAAO,CAAC,GAAG,CAAC,KAAK,WAAM,CAAC,IAAI,MAAM,WAAM,CAAC,KAAK,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QAChE,OAAO,CAAC,GAAG,CAAC,KAAK,WAAM,CAAC,IAAI,QAAQ,WAAM,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACpE,OAAO,CAAC,GAAG,CAAC,KAAK,WAAM,CAAC,IAAI,YAAY,WAAM,CAAC,KAAK,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC5E,OAAO,CAAC,GAAG,CAAC,KAAK,WAAM,CAAC,IAAI,QAAQ,WAAM,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACpF,OAAO,CAAC,GAAG,CAAC,KAAK,WAAM,CAAC,IAAI,WAAW,WAAM,CAAC,KAAK,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1E,OAAO,CAAC,GAAG,CAAC,KAAK,WAAM,CAAC,IAAI,cAAc,WAAM,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACpG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEhB,IAAI,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpD,OAAO,CAAC,GAAG,CAAC,KAAK,WAAM,CAAC,IAAI,YAAY,WAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YACxD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAM,EAAE,CAAS,EAAE,EAAE;gBAC7C,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,KAAK,eAAe,CAAC,CAAC,CAAC,QAAQ,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAC9F,CAAC,CAAC,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,KAAK,WAAM,CAAC,IAAI,OAAO,WAAM,CAAC,KAAK,IAAI,WAAM,CAAC,IAAI,sBAAsB,OAAO,CAAC,EAAE,GAAG,WAAM,CAAC,KAAK,IAAI,CAAC,CAAC;IACrH,CAAC,CAAC,CAAC;AACP,CAAC"}
@@ -1,19 +0,0 @@
1
- /**
2
- * vibecheck fix
3
- *
4
- * Safe autofix for only "high confidence" items.
5
- * Only fixes that can be proven won't break behavior.
6
- */
7
- import { Command } from 'commander';
8
- export interface FixableFinding {
9
- id: string;
10
- type: string;
11
- file: string;
12
- line: number;
13
- fixType: 'remove_dead_ui' | 'add_loading_state' | 'replace_empty_catch' | 'tighten_env_default';
14
- confidence: 'high' | 'medium' | 'low';
15
- patch: string;
16
- description: string;
17
- }
18
- export declare function registerFixCommand(program: Command): void;
19
- //# sourceMappingURL=fix-consolidated.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"fix-consolidated.d.ts","sourceRoot":"","sources":["../../src/commands/fix-consolidated.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAMpC,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,gBAAgB,GAAG,mBAAmB,GAAG,qBAAqB,GAAG,qBAAqB,CAAC;IAChG,UAAU,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA+EzD"}
@@ -1,165 +0,0 @@
1
- "use strict";
2
- /**
3
- * vibecheck fix
4
- *
5
- * Safe autofix for only "high confidence" items.
6
- * Only fixes that can be proven won't break behavior.
7
- */
8
- Object.defineProperty(exports, "__esModule", { value: true });
9
- exports.registerFixCommand = registerFixCommand;
10
- const path_1 = require("path");
11
- const fs_1 = require("fs");
12
- const ui_1 = require("../ui");
13
- const ui_2 = require("../ui");
14
- function registerFixCommand(program) {
15
- program
16
- .command('fix')
17
- .description('Safe autofix for high-confidence items only')
18
- .option('-p, --path <path>', 'Project path', '.')
19
- .option('--id <finding-id>', 'Fix specific finding by ID')
20
- .option('--dry-run', 'Show what would be fixed without applying')
21
- .option('--verify', 'Run verification after fixing')
22
- .action(async (options) => {
23
- (0, ui_1.printLogo)();
24
- const projectPath = (0, path_1.resolve)(options.path);
25
- const scanFile = (0, path_1.join)(projectPath, '.vibecheck', 'scan.json');
26
- if (!(0, fs_1.existsSync)(scanFile)) {
27
- console.error(`\n ${ui_2.styles.brightRed}${ui_2.icons.error}${ui_2.styles.reset} No scan results found`);
28
- console.log(` ${ui_2.styles.dim}Run ${ui_2.styles.bold}vibecheck scan${ui_2.styles.reset}${ui_2.styles.dim} first${ui_2.styles.reset}\n`);
29
- process.exit(2);
30
- }
31
- const scanResult = JSON.parse((0, fs_1.readFileSync)(scanFile, 'utf-8'));
32
- // Find fixable findings
33
- const fixableFindings = identifyFixableFindings(scanResult.findings || []);
34
- if (fixableFindings.length === 0) {
35
- console.log(`\n ${ui_2.styles.brightGreen}${ui_2.icons.success}${ui_2.styles.reset} No safe fixes available\n`);
36
- return;
37
- }
38
- // Filter by ID if specified
39
- let findingsToFix = fixableFindings;
40
- if (options.id) {
41
- findingsToFix = fixableFindings.filter(f => f.id === options.id);
42
- if (findingsToFix.length === 0) {
43
- console.error(`\n ${ui_2.styles.brightRed}${ui_2.icons.error}${ui_2.styles.reset} Finding ${options.id} not found or not fixable\n`);
44
- process.exit(1);
45
- }
46
- }
47
- console.log(`\n${ui_2.styles.brightCyan}${ui_2.styles.bold}${ui_2.icons.info} SAFE AUTOFIX${ui_2.styles.reset}\n`);
48
- if (options.dryRun) {
49
- console.log(` ${ui_2.styles.brightYellow}${ui_2.icons.warning}${ui_2.styles.reset} ${ui_2.styles.bold}DRY RUN MODE${ui_2.styles.reset}\n`);
50
- }
51
- // Apply fixes
52
- let fixedCount = 0;
53
- for (const finding of findingsToFix) {
54
- if (finding.confidence !== 'high') {
55
- console.log(` ${ui_2.styles.dim}Skipping ${finding.id} (confidence: ${finding.confidence})${ui_2.styles.reset}`);
56
- continue;
57
- }
58
- try {
59
- if (options.dryRun) {
60
- console.log(` ${ui_2.styles.cyan}Would fix:${ui_2.styles.reset} ${finding.id}`);
61
- console.log(` ${ui_2.styles.dim}${finding.description}${ui_2.styles.reset}`);
62
- console.log(` ${ui_2.styles.dim}Patch: ${finding.patch.substring(0, 50)}...${ui_2.styles.reset}\n`);
63
- }
64
- else {
65
- await applyFix(finding, projectPath);
66
- console.log(` ${ui_2.styles.brightGreen}${ui_2.icons.success}${ui_2.styles.reset} Fixed: ${finding.id}`);
67
- fixedCount++;
68
- }
69
- }
70
- catch (error) {
71
- console.error(` ${ui_2.styles.brightRed}${ui_2.icons.error}${ui_2.styles.reset} Failed to fix ${finding.id}: ${error.message}`);
72
- }
73
- }
74
- if (!options.dryRun && fixedCount > 0) {
75
- console.log(`\n ${ui_2.styles.brightGreen}${ui_2.icons.success}${ui_2.styles.reset} ${ui_2.styles.bold}Fixed ${fixedCount} issue(s)${ui_2.styles.reset}\n`);
76
- if (options.verify) {
77
- console.log(` ${ui_2.styles.brightCyan}${ui_2.icons.info}${ui_2.styles.reset} Running verification...\n`);
78
- // TODO: Run verification
79
- console.log(` ${ui_2.styles.brightGreen}${ui_2.icons.success}${ui_2.styles.reset} Verification passed\n`);
80
- }
81
- }
82
- });
83
- }
84
- function identifyFixableFindings(findings) {
85
- const fixable = [];
86
- for (const finding of findings) {
87
- // Only fix high-confidence, safe items
88
- if (finding.type === 'placeholder' && finding.severity === 'low') {
89
- fixable.push({
90
- id: finding.id,
91
- type: finding.type,
92
- file: finding.file,
93
- line: finding.line,
94
- fixType: 'remove_dead_ui',
95
- confidence: 'high',
96
- patch: `// TODO: Implement ${finding.type}`,
97
- description: `Remove placeholder: ${finding.type}`,
98
- });
99
- }
100
- // Add more fixable types as needed
101
- }
102
- return fixable;
103
- }
104
- async function applyFix(finding, projectPath) {
105
- const filePath = (0, path_1.join)(projectPath, finding.file);
106
- if (!(0, fs_1.existsSync)(filePath)) {
107
- throw new Error(`File not found: ${finding.file}`);
108
- }
109
- const content = (0, fs_1.readFileSync)(filePath, 'utf-8');
110
- const lines = content.split('\n');
111
- const lineIndex = finding.line - 1;
112
- if (lineIndex < 0 || lineIndex >= lines.length) {
113
- throw new Error(`Line ${finding.line} out of range`);
114
- }
115
- // Apply fix based on type
116
- switch (finding.fixType) {
117
- case 'remove_dead_ui':
118
- // Remove dead link or noop handler
119
- const currentLine = lines[lineIndex];
120
- if (currentLine.includes('href="#"')) {
121
- lines[lineIndex] = currentLine.replace(/href=["']#["']/g, 'href="#" // TODO: Add actual route');
122
- }
123
- else if (currentLine.includes('onClick={() => {}}')) {
124
- lines[lineIndex] = currentLine.replace(/onClick\s*=\s*{\s*\(\)\s*=>\s*\{\s*\}\s*}/g, 'onClick={() => { /* TODO: Implement handler */ }}');
125
- }
126
- break;
127
- case 'add_loading_state':
128
- // Add loading state scaffold (UI-only, safe)
129
- const componentStart = findComponentStart(lines, lineIndex);
130
- if (componentStart >= 0) {
131
- // Add useState for loading if not present
132
- const hasUseState = lines.slice(componentStart, lineIndex).some(l => l.includes('useState'));
133
- if (!hasUseState) {
134
- lines.splice(componentStart, 0, " const [loading, setLoading] = useState(false);");
135
- }
136
- }
137
- break;
138
- case 'replace_empty_catch':
139
- // Replace empty catch with logged+rethrow (when safe)
140
- const catchLine = lines[lineIndex];
141
- if (catchLine.includes('catch') && catchLine.includes('{}')) {
142
- lines[lineIndex] = catchLine.replace(/catch\s*\(([^)]*)\)\s*\{\s*\}/, 'catch ($1) { console.error("Error:", $1); throw $1; }');
143
- }
144
- break;
145
- case 'tighten_env_default':
146
- // Add warning comment for dangerous defaults
147
- const envLine = lines[lineIndex];
148
- if (envLine.includes('process.env') && envLine.includes('||')) {
149
- lines[lineIndex] = `// WARNING: Using default value - ensure this is safe for production\n${envLine}`;
150
- }
151
- break;
152
- }
153
- // Write back
154
- (0, fs_1.writeFileSync)(filePath, lines.join('\n'));
155
- }
156
- function findComponentStart(lines, currentLine) {
157
- // Find the start of the component/function
158
- for (let i = currentLine; i >= 0 && i >= currentLine - 50; i--) {
159
- if (lines[i].match(/^(export\s+)?(function|const|class)\s+\w+/)) {
160
- return i;
161
- }
162
- }
163
- return -1;
164
- }
165
- //# sourceMappingURL=fix-consolidated.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"fix-consolidated.js","sourceRoot":"","sources":["../../src/commands/fix-consolidated.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAmBH,gDA+EC;AA/FD,+BAAqC;AACrC,2BAA6D;AAC7D,8BAAkC;AAClC,8BAAsC;AAatC,SAAgB,kBAAkB,CAAC,OAAgB;IACjD,OAAO;SACJ,OAAO,CAAC,KAAK,CAAC;SACd,WAAW,CAAC,6CAA6C,CAAC;SAC1D,MAAM,CAAC,mBAAmB,EAAE,cAAc,EAAE,GAAG,CAAC;SAChD,MAAM,CAAC,mBAAmB,EAAE,4BAA4B,CAAC;SACzD,MAAM,CAAC,WAAW,EAAE,2CAA2C,CAAC;SAChE,MAAM,CAAC,UAAU,EAAE,+BAA+B,CAAC;SACnD,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACxB,IAAA,cAAS,GAAE,CAAC;QAEZ,MAAM,WAAW,GAAG,IAAA,cAAO,EAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,IAAA,WAAI,EAAC,WAAW,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;QAE9D,IAAI,CAAC,IAAA,eAAU,EAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,KAAK,CAAC,OAAO,WAAM,CAAC,SAAS,GAAG,UAAK,CAAC,KAAK,GAAG,WAAM,CAAC,KAAK,wBAAwB,CAAC,CAAC;YAC5F,OAAO,CAAC,GAAG,CAAC,KAAK,WAAM,CAAC,GAAG,OAAO,WAAM,CAAC,IAAI,iBAAiB,WAAM,CAAC,KAAK,GAAG,WAAM,CAAC,GAAG,SAAS,WAAM,CAAC,KAAK,IAAI,CAAC,CAAC;YAClH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;QAE/D,wBAAwB;QACxB,MAAM,eAAe,GAAG,uBAAuB,CAAC,UAAU,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QAE3E,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,OAAO,WAAM,CAAC,WAAW,GAAG,UAAK,CAAC,OAAO,GAAG,WAAM,CAAC,KAAK,4BAA4B,CAAC,CAAC;YAClG,OAAO;QACT,CAAC;QAED,4BAA4B;QAC5B,IAAI,aAAa,GAAG,eAAe,CAAC;QACpC,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;YACf,aAAa,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,CAAC,CAAC;YACjE,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/B,OAAO,CAAC,KAAK,CAAC,OAAO,WAAM,CAAC,SAAS,GAAG,UAAK,CAAC,KAAK,GAAG,WAAM,CAAC,KAAK,YAAY,OAAO,CAAC,EAAE,6BAA6B,CAAC,CAAC;gBACvH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,KAAK,WAAM,CAAC,UAAU,GAAG,WAAM,CAAC,IAAI,GAAG,UAAK,CAAC,IAAI,gBAAgB,WAAM,CAAC,KAAK,IAAI,CAAC,CAAC;QAE/F,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,KAAK,WAAM,CAAC,YAAY,GAAG,UAAK,CAAC,OAAO,GAAG,WAAM,CAAC,KAAK,IAAI,WAAM,CAAC,IAAI,eAAe,WAAM,CAAC,KAAK,IAAI,CAAC,CAAC;QACrH,CAAC;QAED,cAAc;QACd,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;YACpC,IAAI,OAAO,CAAC,UAAU,KAAK,MAAM,EAAE,CAAC;gBAClC,OAAO,CAAC,GAAG,CAAC,KAAK,WAAM,CAAC,GAAG,YAAY,OAAO,CAAC,EAAE,iBAAiB,OAAO,CAAC,UAAU,IAAI,WAAM,CAAC,KAAK,EAAE,CAAC,CAAC;gBACxG,SAAS;YACX,CAAC;YAED,IAAI,CAAC;gBACH,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;oBACnB,OAAO,CAAC,GAAG,CAAC,KAAK,WAAM,CAAC,IAAI,aAAa,WAAM,CAAC,KAAK,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;oBACvE,OAAO,CAAC,GAAG,CAAC,OAAO,WAAM,CAAC,GAAG,GAAG,OAAO,CAAC,WAAW,GAAG,WAAM,CAAC,KAAK,EAAE,CAAC,CAAC;oBACtE,OAAO,CAAC,GAAG,CAAC,OAAO,WAAM,CAAC,GAAG,UAAU,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,WAAM,CAAC,KAAK,IAAI,CAAC,CAAC;gBAC/F,CAAC;qBAAM,CAAC;oBACN,MAAM,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;oBACrC,OAAO,CAAC,GAAG,CAAC,KAAK,WAAM,CAAC,WAAW,GAAG,UAAK,CAAC,OAAO,GAAG,WAAM,CAAC,KAAK,WAAW,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC3F,UAAU,EAAE,CAAC;gBACf,CAAC;YACH,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACpB,OAAO,CAAC,KAAK,CAAC,KAAK,WAAM,CAAC,SAAS,GAAG,UAAK,CAAC,KAAK,GAAG,WAAM,CAAC,KAAK,kBAAkB,OAAO,CAAC,EAAE,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACpH,CAAC;QACH,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;YACtC,OAAO,CAAC,GAAG,CAAC,OAAO,WAAM,CAAC,WAAW,GAAG,UAAK,CAAC,OAAO,GAAG,WAAM,CAAC,KAAK,IAAI,WAAM,CAAC,IAAI,SAAS,UAAU,YAAY,WAAM,CAAC,KAAK,IAAI,CAAC,CAAC;YAEpI,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnB,OAAO,CAAC,GAAG,CAAC,KAAK,WAAM,CAAC,UAAU,GAAG,UAAK,CAAC,IAAI,GAAG,WAAM,CAAC,KAAK,4BAA4B,CAAC,CAAC;gBAC5F,yBAAyB;gBACzB,OAAO,CAAC,GAAG,CAAC,KAAK,WAAM,CAAC,WAAW,GAAG,UAAK,CAAC,OAAO,GAAG,WAAM,CAAC,KAAK,wBAAwB,CAAC,CAAC;YAC9F,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC;AAED,SAAS,uBAAuB,CAAC,QAAe;IAC9C,MAAM,OAAO,GAAqB,EAAE,CAAC;IAErC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,uCAAuC;QACvC,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;YACjE,OAAO,CAAC,IAAI,CAAC;gBACX,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,OAAO,EAAE,gBAAgB;gBACzB,UAAU,EAAE,MAAM;gBAClB,KAAK,EAAE,sBAAsB,OAAO,CAAC,IAAI,EAAE;gBAC3C,WAAW,EAAE,uBAAuB,OAAO,CAAC,IAAI,EAAE;aACnD,CAAC,CAAC;QACL,CAAC;QAED,mCAAmC;IACrC,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,OAAuB,EAAE,WAAmB;IAClE,MAAM,QAAQ,GAAG,IAAA,WAAI,EAAC,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjD,IAAI,CAAC,IAAA,eAAU,EAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,mBAAmB,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,OAAO,GAAG,IAAA,iBAAY,EAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC;IAEnC,IAAI,SAAS,GAAG,CAAC,IAAI,SAAS,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,QAAQ,OAAO,CAAC,IAAI,eAAe,CAAC,CAAC;IACvD,CAAC;IAED,0BAA0B;IAC1B,QAAQ,OAAO,CAAC,OAAO,EAAE,CAAC;QACxB,KAAK,gBAAgB;YACnB,mCAAmC;YACnC,MAAM,WAAW,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;YACrC,IAAI,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBACrC,KAAK,CAAC,SAAS,CAAC,GAAG,WAAW,CAAC,OAAO,CAAC,iBAAiB,EAAE,oCAAoC,CAAC,CAAC;YAClG,CAAC;iBAAM,IAAI,WAAW,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;gBACtD,KAAK,CAAC,SAAS,CAAC,GAAG,WAAW,CAAC,OAAO,CAAC,4CAA4C,EAAE,mDAAmD,CAAC,CAAC;YAC5I,CAAC;YACD,MAAM;QAER,KAAK,mBAAmB;YACtB,6CAA6C;YAC7C,MAAM,cAAc,GAAG,kBAAkB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YAC5D,IAAI,cAAc,IAAI,CAAC,EAAE,CAAC;gBACxB,0CAA0C;gBAC1C,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;gBAC7F,IAAI,CAAC,WAAW,EAAE,CAAC;oBACjB,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC,EAAE,kDAAkD,CAAC,CAAC;gBACtF,CAAC;YACH,CAAC;YACD,MAAM;QAER,KAAK,qBAAqB;YACxB,sDAAsD;YACtD,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;YACnC,IAAI,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5D,KAAK,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAClC,+BAA+B,EAC/B,uDAAuD,CACxD,CAAC;YACJ,CAAC;YACD,MAAM;QAER,KAAK,qBAAqB;YACxB,6CAA6C;YAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;YACjC,IAAI,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9D,KAAK,CAAC,SAAS,CAAC,GAAG,yEAAyE,OAAO,EAAE,CAAC;YACxG,CAAC;YACD,MAAM;IACV,CAAC;IAED,aAAa;IACb,IAAA,kBAAa,EAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAe,EAAE,WAAmB;IAC9D,2CAA2C;IAC3C,KAAK,IAAI,CAAC,GAAG,WAAW,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,WAAW,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/D,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,2CAA2C,CAAC,EAAE,CAAC;YAChE,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IACD,OAAO,CAAC,CAAC,CAAC;AACZ,CAAC"}
@@ -1,8 +0,0 @@
1
- /**
2
- * CLI Commands Module
3
- * Re-exports all command registration functions
4
- */
5
- export { registerScanSecretsCommand } from './scan-secrets';
6
- export { registerScanVulnerabilitiesCommand } from './scan-vulnerabilities';
7
- export { generateEvidence, verifyEvidence } from './evidence';
8
- //# sourceMappingURL=index.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/commands/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,kCAAkC,EAAE,MAAM,wBAAwB,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC"}
@@ -1,15 +0,0 @@
1
- "use strict";
2
- /**
3
- * CLI Commands Module
4
- * Re-exports all command registration functions
5
- */
6
- Object.defineProperty(exports, "__esModule", { value: true });
7
- exports.verifyEvidence = exports.generateEvidence = exports.registerScanVulnerabilitiesCommand = exports.registerScanSecretsCommand = void 0;
8
- var scan_secrets_1 = require("./scan-secrets");
9
- Object.defineProperty(exports, "registerScanSecretsCommand", { enumerable: true, get: function () { return scan_secrets_1.registerScanSecretsCommand; } });
10
- var scan_vulnerabilities_1 = require("./scan-vulnerabilities");
11
- Object.defineProperty(exports, "registerScanVulnerabilitiesCommand", { enumerable: true, get: function () { return scan_vulnerabilities_1.registerScanVulnerabilitiesCommand; } });
12
- var evidence_1 = require("./evidence");
13
- Object.defineProperty(exports, "generateEvidence", { enumerable: true, get: function () { return evidence_1.generateEvidence; } });
14
- Object.defineProperty(exports, "verifyEvidence", { enumerable: true, get: function () { return evidence_1.verifyEvidence; } });
15
- //# sourceMappingURL=index.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/commands/index.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAEH,+CAA4D;AAAnD,0HAAA,0BAA0B,OAAA;AACnC,+DAA4E;AAAnE,0IAAA,kCAAkC,OAAA;AAC3C,uCAA8D;AAArD,4GAAA,gBAAgB,OAAA;AAAE,0GAAA,cAAc,OAAA"}
@@ -1,8 +0,0 @@
1
- /**
2
- * vibecheck init
3
- *
4
- * One-time setup. Builds Truth Pack. Installs MCP/rules. Confirms "AI connected ✅".
5
- */
6
- import { Command } from 'commander';
7
- export declare function registerInitCommand(program: Command): void;
8
- //# sourceMappingURL=init.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAOpC,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA+D1D"}