@vibecheckai/cli 3.0.4 → 3.0.7

package/bin/runners/lib/schemas/share-pack.schema.json

@@ -0,0 +1,180 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://vibecheck.dev/schemas/share-pack.schema.json",
+  "title": "Vibecheck Share Pack",
+  "description": "Sanitized bundle for sharing analysis results without sensitive data",
+  "type": "object",
+  "required": ["specVersion", "generatedAt", "fingerprint", "redaction", "report"],
+  "properties": {
+    "specVersion": {
+      "type": "string",
+      "const": "2.0"
+    },
+    "generatedAt": {
+      "type": "string",
+      "format": "date-time"
+    },
+    "fingerprint": {
+      "type": "string",
+      "pattern": "^sha256:[a-f0-9]{64}$",
+      "description": "Hash of share pack contents"
+    },
+    "projectName": {
+      "type": "string",
+      "description": "Sanitized project name (no paths)"
+    },
+    "redaction": {
+      "$ref": "#/$defs/redactionMetadata"
+    },
+    "report": {
+      "$ref": "#/$defs/sanitizedReport"
+    },
+    "proofGraph": {
+      "$ref": "#/$defs/sanitizedProofGraph"
+    },
+    "missions": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/sanitizedMission" }
+    },
+    "artifacts": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/artifact" }
+    }
+  },
+  "$defs": {
+    "redactionMetadata": {
+      "type": "object",
+      "required": ["level", "redactedFields", "originalFingerprints"],
+      "properties": {
+        "level": {
+          "type": "string",
+          "enum": ["minimal", "standard", "paranoid"],
+          "description": "Redaction level applied"
+        },
+        "redactedFields": {
+          "type": "array",
+          "items": { "type": "string" },
+          "description": "List of field paths that were redacted"
+        },
+        "pathsRedacted": {
+          "type": "boolean",
+          "description": "Whether file paths were anonymized"
+        },
+        "envVarsRedacted": {
+          "type": "boolean",
+          "description": "Whether env var names were replaced"
+        },
+        "codeSnippetsRedacted": {
+          "type": "boolean",
+          "description": "Whether code snippets were removed"
+        },
+        "originalFingerprints": {
+          "type": "object",
+          "description": "Original fingerprints before redaction for verification",
+          "properties": {
+            "truthpack": { "type": "string" },
+            "contracts": { "type": "string" },
+            "shipReport": { "type": "string" }
+          }
+        }
+      }
+    },
+    "sanitizedReport": {
+      "type": "object",
+      "properties": {
+        "verdict": {
+          "type": "object",
+          "properties": {
+            "status": { "type": "string", "enum": ["SHIP", "WARN", "BLOCK"] },
+            "exitCode": { "type": "integer" },
+            "reason": { "type": "string" }
+          }
+        },
+        "stats": {
+          "type": "object",
+          "properties": {
+            "findingsTotal": { "type": "integer" },
+            "bySeverity": {
+              "type": "object",
+              "additionalProperties": { "type": "integer" }
+            },
+            "byCategory": {
+              "type": "object",
+              "additionalProperties": { "type": "integer" }
+            }
+          }
+        },
+        "coverage": {
+          "$ref": "#/$defs/coverageMetrics"
+        },
+        "findings": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/sanitizedFinding" }
+        }
+      }
+    },
+    "sanitizedFinding": {
+      "type": "object",
+      "properties": {
+        "id": { "type": "string" },
+        "detectorId": { "type": "string" },
+        "severity": { "type": "string" },
+        "category": { "type": "string" },
+        "title": { "type": "string" },
+        "confidence": { "type": "string" },
+        "fileRef": {
+          "type": "string",
+          "description": "Anonymized file reference (e.g., 'file_001')"
+        },
+        "lineRange": { "type": "string" }
+      }
+    },
+    "sanitizedProofGraph": {
+      "type": "object",
+      "properties": {
+        "nodeCount": { "type": "integer" },
+        "edgeCount": { "type": "integer" },
+        "coverage": {
+          "type": "object",
+          "properties": {
+            "uiBindingsLinked": { "type": "number" },
+            "clientCallsLinked": { "type": "number" },
+            "serverRoutesLinked": { "type": "number" }
+          }
+        },
+        "gapCount": { "type": "integer" }
+      }
+    },
+    "sanitizedMission": {
+      "type": "object",
+      "properties": {
+        "id": { "type": "string" },
+        "type": { "type": "string" },
+        "priority": { "type": "string" },
+        "status": { "type": "string" },
+        "title": { "type": "string" }
+      }
+    },
+    "coverageMetrics": {
+      "type": "object",
+      "properties": {
+        "clientCallsMappedPct": { "type": "number" },
+        "serverRoutesCoveredPct": { "type": "number" },
+        "uiActionsVerifiedPct": { "type": "number" },
+        "authVerifiedPct": { "type": ["number", "null"] }
+      }
+    },
+    "artifact": {
+      "type": "object",
+      "required": ["name", "sha256"],
+      "properties": {
+        "name": {
+          "type": "string",
+          "description": "Artifact type name (not path)"
+        },
+        "sha256": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+        "included": { "type": "boolean" }
+      }
+    }
+  }
+}

package/bin/runners/lib/schemas/ship-report.schema.json

@@ -0,0 +1,117 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://vibecheck.dev/schemas/ship-report.schema.json",
+  "title": "Vibecheck Ship Report",
+  "description": "Final ship verdict with findings and proof chain",
+  "type": "object",
+  "required": ["meta", "verdict", "findings", "stats"],
+  "properties": {
+    "meta": {
+      "type": "object",
+      "required": ["version", "generatedAt", "repoRoot"],
+      "properties": {
+        "version": { "type": "string", "const": "2.0.0" },
+        "generatedAt": { "type": "string", "format": "date-time" },
+        "repoRoot": { "type": "string" },
+        "commit": {
+          "type": "object",
+          "properties": {
+            "sha": { "type": "string" },
+            "branch": { "type": "string" },
+            "message": { "type": "string" }
+          }
+        },
+        "durationMs": { "type": "integer" },
+        "truthpackHash": { "type": "string" }
+      }
+    },
+    "verdict": {
+      "type": "object",
+      "required": ["status", "exitCode"],
+      "properties": {
+        "status": { "type": "string", "enum": ["SHIP", "WARN", "BLOCK"] },
+        "exitCode": { "type": "integer", "enum": [0, 1, 2] },
+        "summary": { "type": "string" },
+        "blockReasons": {
+          "type": "array",
+          "items": { "type": "string" }
+        }
+      }
+    },
+    "findings": {
+      "type": "array",
+      "items": { "$ref": "finding.schema.json" }
+    },
+    "stats": {
+      "type": "object",
+      "properties": {
+        "total": { "type": "integer" },
+        "byCategory": { "type": "object", "additionalProperties": { "type": "integer" } },
+        "bySeverity": {
+          "type": "object",
+          "properties": {
+            "BLOCK": { "type": "integer" },
+            "WARN": { "type": "integer" },
+            "INFO": { "type": "integer" }
+          }
+        },
+        "byScope": { "type": "object", "additionalProperties": { "type": "integer" } }
+      }
+    },
+    "proofChain": {
+      "type": "object",
+      "description": "Summary proof chain for top blockers",
+      "properties": {
+        "topBlockers": {
+          "type": "array",
+          "maxItems": 5,
+          "items": {
+            "type": "object",
+            "properties": {
+              "findingId": { "type": "string" },
+              "chain": {
+                "type": "array",
+                "items": {
+                  "type": "object",
+                  "properties": {
+                    "nodeType": { "type": "string" },
+                    "label": { "type": "string" },
+                    "evidence": { "type": "string" }
+                  }
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "artifacts": {
+      "type": "object",
+      "properties": {
+        "truthpack": { "type": "string" },
+        "realityReport": { "type": "string" },
+        "proofGraph": { "type": "string" },
+        "missionPack": { "type": "string" }
+      }
+    },
+    "runtime": {
+      "type": "object",
+      "description": "Runtime verification summary if available",
+      "properties": {
+        "ran": { "type": "boolean" },
+        "url": { "type": "string" },
+        "actionsCount": { "type": "integer" },
+        "requestsCount": { "type": "integer" },
+        "toastsDetected": { "type": "integer" },
+        "coverage": {
+          "type": "object",
+          "properties": {
+            "routesHit": { "type": "integer" },
+            "routesTotal": { "type": "integer" },
+            "percent": { "type": "number" }
+          }
+        }
+      }
+    }
+  }
+}

package/bin/runners/lib/schemas/truthpack-v2.schema.json

@@ -0,0 +1,303 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://vibecheck.dev/schemas/truthpack-v2.schema.json",
+  "title": "Vibecheck Truthpack v2",
+  "description": "Complete extracted truth from static analysis",
+  "type": "object",
+  "required": ["specVersion", "generatedAt", "projectRoot", "fingerprint", "routes", "clientCalls", "uiBindings"],
+  "properties": {
+    "specVersion": {
+      "type": "string",
+      "const": "2.0",
+      "description": "Schema version"
+    },
+    "generatedAt": {
+      "type": "string",
+      "format": "date-time",
+      "description": "ISO timestamp of generation"
+    },
+    "projectRoot": {
+      "type": "string",
+      "description": "Absolute path to project root"
+    },
+    "fingerprint": {
+      "type": "string",
+      "pattern": "^sha256:[a-f0-9]{64}$",
+      "description": "Hash of truthpack contents for drift detection"
+    },
+    "stack": {
+      "$ref": "#/$defs/stackDetection"
+    },
+    "routes": {
+      "$ref": "#/$defs/routesTruth"
+    },
+    "clientCalls": {
+      "$ref": "#/$defs/clientCallsTruth"
+    },
+    "uiBindings": {
+      "$ref": "#/$defs/uiBindingsTruth"
+    },
+    "env": {
+      "$ref": "#/$defs/envTruth"
+    },
+    "auth": {
+      "$ref": "#/$defs/authTruth"
+    },
+    "billing": {
+      "$ref": "#/$defs/billingTruth"
+    },
+    "proofGraph": {
+      "$ref": "#/$defs/proofGraphRef"
+    },
+    "artifacts": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/artifact" },
+      "description": "Generated artifact paths and hashes"
+    }
+  },
+  "$defs": {
+    "stackDetection": {
+      "type": "object",
+      "properties": {
+        "next": { "$ref": "#/$defs/frameworkInfo" },
+        "fastify": { "$ref": "#/$defs/frameworkInfo" },
+        "express": { "$ref": "#/$defs/frameworkInfo" },
+        "trpc": { "$ref": "#/$defs/frameworkInfo" },
+        "graphql": { "$ref": "#/$defs/frameworkInfo" }
+      }
+    },
+    "frameworkInfo": {
+      "type": "object",
+      "properties": {
+        "present": { "type": "boolean" },
+        "version": { "type": ["string", "null"] },
+        "entryFile": { "type": ["string", "null"] },
+        "confidence": { "type": "string", "enum": ["high", "medium", "low"] }
+      }
+    },
+    "routesTruth": {
+      "type": "object",
+      "required": ["server", "count"],
+      "properties": {
+        "server": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/serverRoute" }
+        },
+        "count": { "type": "integer", "minimum": 0 },
+        "byFramework": {
+          "type": "object",
+          "additionalProperties": { "type": "integer" }
+        },
+        "runtimeOverrides": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/serverRoute" },
+          "description": "Routes from runtime dump (higher confidence)"
+        }
+      }
+    },
+    "serverRoute": {
+      "type": "object",
+      "required": ["id", "method", "path", "file", "confidence"],
+      "properties": {
+        "id": {
+          "type": "string",
+          "pattern": "^R_[A-Z]+_[A-F0-9]+$"
+        },
+        "method": {
+          "type": "string",
+          "enum": ["GET", "POST", "PUT", "PATCH", "DELETE", "HEAD", "OPTIONS", "ALL"]
+        },
+        "path": { "type": "string" },
+        "canonicalPath": { "type": "string" },
+        "file": { "type": "string" },
+        "line": { "type": "integer", "minimum": 1 },
+        "framework": {
+          "type": "string",
+          "enum": ["next-app", "next-pages", "fastify", "express", "trpc", "graphql"]
+        },
+        "confidence": {
+          "type": "string",
+          "enum": ["high", "medium", "low"]
+        },
+        "authRequired": { "type": "boolean" },
+        "source": {
+          "type": "string",
+          "enum": ["static", "runtime"],
+          "default": "static"
+        },
+        "evidence": {
+          "type": "array",
+          "items": { "type": "object" }
+        }
+      }
+    },
+    "clientCallsTruth": {
+      "type": "object",
+      "required": ["calls", "count"],
+      "properties": {
+        "calls": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/clientCall" }
+        },
+        "count": { "type": "integer", "minimum": 0 },
+        "byKind": {
+          "type": "object",
+          "additionalProperties": { "type": "integer" }
+        }
+      }
+    },
+    "clientCall": {
+      "type": "object",
+      "required": ["id", "kind", "file", "confidence"],
+      "properties": {
+        "id": {
+          "type": "string",
+          "pattern": "^C_[A-Z]+_[A-F0-9]+$"
+        },
+        "kind": {
+          "type": "string",
+          "enum": ["http", "trpc", "graphql", "server-action"]
+        },
+        "method": {
+          "type": "string",
+          "enum": ["GET", "POST", "PUT", "PATCH", "DELETE", "HEAD", "OPTIONS"]
+        },
+        "urlTemplate": { "type": ["string", "null"] },
+        "canonicalPath": { "type": ["string", "null"] },
+        "file": { "type": "string" },
+        "line": { "type": "integer", "minimum": 1 },
+        "confidence": {
+          "type": "string",
+          "enum": ["high", "medium", "low"]
+        },
+        "trpcProcedure": { "type": ["string", "null"] },
+        "graphqlOperation": { "type": ["string", "null"] },
+        "serverActionId": { "type": ["string", "null"] },
+        "linkedBindingId": { "type": ["string", "null"] },
+        "evidence": {
+          "type": "array",
+          "items": { "type": "object" }
+        }
+      }
+    },
+    "uiBindingsTruth": {
+      "type": "object",
+      "required": ["bindings", "count"],
+      "properties": {
+        "bindings": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/uiBinding" }
+        },
+        "count": { "type": "integer", "minimum": 0 },
+        "byEvent": {
+          "type": "object",
+          "additionalProperties": { "type": "integer" }
+        }
+      }
+    },
+    "uiBinding": {
+      "type": "object",
+      "required": ["id", "event", "file", "line"],
+      "properties": {
+        "id": {
+          "type": "string",
+          "pattern": "^UIB_[A-F0-9]+$"
+        },
+        "event": {
+          "type": "string",
+          "enum": ["onClick", "onSubmit", "onChange", "onBlur", "formAction", "serverAction"]
+        },
+        "element": { "type": "string" },
+        "file": { "type": "string" },
+        "line": { "type": "integer", "minimum": 1 },
+        "handlerName": { "type": ["string", "null"] },
+        "labelHint": { "type": ["string", "null"] },
+        "selectorHint": { "type": ["string", "null"] },
+        "linkedClientCallId": { "type": ["string", "null"] },
+        "hasTransition": { "type": "boolean" },
+        "hasOptimistic": { "type": "boolean" }
+      }
+    },
+    "envTruth": {
+      "type": "object",
+      "properties": {
+        "vars": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "required": ["name"],
+            "properties": {
+              "name": { "type": "string" },
+              "usageCount": { "type": "integer" },
+              "required": { "type": "boolean" },
+              "files": { "type": "array", "items": { "type": "string" } },
+              "isPublic": { "type": "boolean" }
+            }
+          }
+        },
+        "declared": {
+          "type": "array",
+          "items": { "type": "string" }
+        },
+        "baseUrl": { "type": ["string", "null"] },
+        "baseUrlVar": { "type": ["string", "null"] }
+      }
+    },
+    "authTruth": {
+      "type": "object",
+      "properties": {
+        "provider": {
+          "type": ["string", "null"],
+          "enum": [null, "next-auth", "clerk", "supabase", "custom"]
+        },
+        "protectedPatterns": {
+          "type": "array",
+          "items": { "type": "string" }
+        },
+        "publicPatterns": {
+          "type": "array",
+          "items": { "type": "string" }
+        },
+        "middlewareFile": { "type": ["string", "null"] }
+      }
+    },
+    "billingTruth": {
+      "type": "object",
+      "properties": {
+        "provider": {
+          "type": ["string", "null"],
+          "enum": [null, "stripe", "paddle", "lemon-squeezy"]
+        },
+        "webhookPath": { "type": ["string", "null"] },
+        "products": {
+          "type": "array",
+          "items": { "type": "string" }
+        }
+      }
+    },
+    "proofGraphRef": {
+      "type": "object",
+      "properties": {
+        "nodeCount": { "type": "integer" },
+        "edgeCount": { "type": "integer" },
+        "coverage": {
+          "type": "object",
+          "properties": {
+            "serverRoutesLinked": { "type": "number", "minimum": 0, "maximum": 1 },
+            "clientCallsLinked": { "type": "number", "minimum": 0, "maximum": 1 },
+            "uiBindingsLinked": { "type": "number", "minimum": 0, "maximum": 1 }
+          }
+        }
+      }
+    },
+    "artifact": {
+      "type": "object",
+      "required": ["path", "sha256"],
+      "properties": {
+        "path": { "type": "string" },
+        "sha256": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+        "size": { "type": "integer" }
+      }
+    }
+  }
+}