@vibecheckai/cli 3.1.2 → 3.1.4

package/README.md

@@ -1,4 +1,4 @@
-# vibecheck CLI v3.0.9 🚀
+# vibecheck CLI v3.1.1
 
 **Ship with confidence. One verdict: SHIP | WARN | BLOCK**
 
@@ -26,48 +26,75 @@ vibecheck ctx
 
 # Environment diagnostics
 vibecheck doctor
+
+# Production polish check
+vibecheck polish
 ```
 
 ## Commands
 
-### Core Proof Loop
+### Setup Commands
+
+| Command | Tier | Description |
+|---------|------|-------------|
+| `vibecheck init` | FREE | Project setup wizard (`--local` or `--connect`) |
+| `vibecheck install` | FREE | Zero-friction onboarding |
+| `vibecheck doctor` | FREE | Environment diagnostics |
+| `vibecheck status` | FREE | Project health dashboard |
+| `vibecheck watch` | FREE | Continuous mode - re-runs on changes |
 
-| Command | Description |
-|---------|-------------|
-| `vibecheck scan` | Static analysis - routes, secrets, contracts |
-| `vibecheck ship` | Verdict engine - SHIP / WARN / BLOCK |
-| `vibecheck reality` | Runtime proof with Playwright |
-| `vibecheck prove` | Full loop: ctx → reality → ship → fix |
-| `vibecheck fix` | AI-powered auto-fix (Pro) |
-| `vibecheck report` | Generate HTML/MD/SARIF reports |
+### Proof Loop
 
-### Setup & Diagnostics
+| Command | Tier | Description |
+|---------|------|-------------|
+| `vibecheck scan` | FREE | Static analysis - routes, secrets, contracts |
+| `vibecheck ship` | FREE | Verdict engine - SHIP / WARN / BLOCK |
+| `vibecheck runtime` | FREE* | Browser-based runtime verification |
+| `vibecheck prove` | PRO | Full loop: ctx → reality → ship → fix |
+| `vibecheck fix` | FREE* | AI-powered auto-fix (plan-only on FREE) |
+| `vibecheck security` | PRO | AuthZ matrix & IDOR detection |
 
-| Command | Description |
-|---------|-------------|
-| `vibecheck init` | Project setup wizard |
-| `vibecheck install` | Zero-friction onboarding |
-| `vibecheck doctor` | Environment diagnostics |
-| `vibecheck status` | Project health dashboard |
-| `vibecheck watch` | Continuous mode |
+### Quality & Checkpoints
+
+| Command | Tier | Description |
+|---------|------|-------------|
+| `vibecheck polish` | FREE | Production polish analyzer (0-100 score) |
+| `vibecheck checkpoint` | FREE* | Compare baseline vs current, hallucination scoring |
 
 ### Truth System (AI Guardrails)
 
-| Command | Description |
-|---------|-------------|
-| `vibecheck ctx` | Generate truthpack for AI agents |
-| `vibecheck guard` | Validate AI claims against truth |
-| `vibecheck context` | Generate .cursorrules, .windsurf/rules |
-| `vibecheck mdc` | Generate MDC specifications |
+| Command | Tier | Description |
+|---------|------|-------------|
+| `vibecheck ctx` | FREE | Generate truthpack for AI agents |
+| `vibecheck guard` | FREE | Validate AI claims against truth |
+| `vibecheck context` | FREE | Generate .cursorrules, .windsurf/rules |
+| `vibecheck contracts` | FREE | CI gate for contract drift |
+
+### Output & Export
+
+| Command | Tier | Description |
+|---------|------|-------------|
+| `vibecheck report` | FREE | Generate HTML/MD/SARIF reports |
+| `vibecheck export` | FREE | Generate collaboration outputs (pr, badge, bundle) |
+
+### CI/CD & Automation
+
+| Command | Tier | Description |
+|---------|------|-------------|
+| `vibecheck gate` | STARTER | CI/CD gate |
+| `vibecheck pr` | STARTER | Generate PR comment |
+| `vibecheck badge` | STARTER | Generate README badge |
+| `vibecheck mcp` | STARTER | Start MCP server for AI IDEs |
+
+*Commands marked with * have limited functionality on FREE tier
 
-### CI/CD & Extras
+## Pricing
 
-| Command | Description |
-|---------|-------------|
-| `vibecheck gate` | CI/CD gate (Starter) |
-| `vibecheck pr` | Generate PR comment |
-| `vibecheck badge` | Generate README badge |
-| `vibecheck mcp` | Start MCP server for AI IDEs |
+| Tier | Price | Features |
+|------|-------|----------|
+| FREE | $0 | scan, ship (static), doctor, polish, report (HTML/MD), ctx, guard |
+| STARTER | $39/mo | + init --connect, gate, pr, badge, mcp, report (SARIF/CSV) |
+| PRO | $99/mo | + prove, fix --apply, security, checkpoint (hallucination), runtime (full) |
 
 ## What It Catches
 
@@ -87,7 +114,7 @@ vibecheck doctor
 ╚═════════════════════════════════════════════════════════════════╝
 ```
 
-Exit codes: `0` = SHIP, `1` = WARN, `2` = BLOCK
+Exit codes: `0` = SHIP, `1` = WARN, `2` = BLOCK, `3` = Feature not allowed
 
 ## MCP Server
 
@@ -122,4 +149,4 @@ MIT © Vibecheck AI
 
 ---
 
-**[Documentation](https://vibecheckai.dev/docs)** · **[Discord](https://discord.gg/vibecheck)** · **[GitHub](https://github.com/vibecheck-Official/vibecheck)**
+**[Documentation](https://vibecheckai.dev/docs)** · **[Discord](https://discord.gg/vibecheck)** · **[GitHub](https://github.com/vibecheck-oss/vibecheck)**

package/bin/registry.js

@@ -10,45 +10,330 @@
 "use strict";
 
 // ═══════════════════════════════════════════════════════════════════════════════
-// COMMAND REGISTRY - Tiers match entitlements-v2.js EXACTLY
+// COMMAND REGISTRY - The 14-Command Vibecheck CLI
+// Tiers match entitlements-v2.js EXACTLY
 // ═══════════════════════════════════════════════════════════════════════════════
 const COMMANDS = {
-  // PROOF LOOP
-  scan: { description: "Static analysis - routes, secrets, contracts", tier: "free", category: "proof", aliases: ["s", "check"], runner: () => require("./runners/runScan").runScan },
-  ship: { description: "Verdict engine - SHIP / WARN / BLOCK", tier: "free", category: "proof", aliases: ["verdict"], caps: "static-only on FREE", runner: () => require("./runners/runShip").runShip },
-  reality: { description: "Runtime proof - Playwright clicks every button", tier: "free", category: "proof", aliases: ["r", "test", "e2e"], caps: "preview mode on FREE (5 pages, no auth)", runner: () => { try { return require("./runners/runReality").runReality; } catch (e) { return async () => { console.error("Reality runner unavailable:", e.message); return 1; }; } } },
-  prove: { description: "Full proof loop - ctx → reality → ship → fix", tier: "pro", category: "proof", aliases: ["p", "full", "all"], runner: () => require("./runners/runProve").runProve },
-  fix: { description: "AI-powered auto-fix", tier: "free", category: "proof", caps: "--plan-only on FREE/PRO", aliases: ["f", "repair"], runner: () => require("./runners/runFix").runFix },
-  report: { description: "Generate HTML/MD/SARIF reports", tier: "free", category: "proof", caps: "HTML/MD only on FREE", aliases: ["html", "artifact"], runner: () => require("./runners/runReport").runReport },
-  replay: { description: "Record and replay user sessions", tier: "pro", category: "proof", aliases: ["record", "playback"], runner: () => async (args) => { try { const { runReplay } = require("./runners/runReplay"); return await runReplay(args); } catch (e) { if (args && (args.includes("--help") || args.includes("-h") || args.length === 0)) { console.log("\n  vibecheck replay - Record and replay user sessions\n\n  Subcommands:\n    record <url>     Record a user session\n    play <capsule>   Replay a recorded session\n    list             List available replay capsules\n    show <id>        Show details of a replay capsule\n    delete <id>      Delete a replay capsule\n    export <id>      Export a replay capsule\n    import <file>    Import a replay capsule\n\n  Note: Requires 'chalk' and 'playwright' dependencies.\n  Install: npm install chalk playwright\n"); return 0; } console.error("Replay runner error:", e.message); return 1; } } },
-  permissions: { description: "AuthZ matrix & IDOR detection", tier: "complete", category: "proof", aliases: ["authz", "idor"], runner: () => require("./runners/runPermissions").runPermissions },
-  graph: { description: "Reality proof graph visualization", tier: "complete", category: "proof", aliases: ["graphviz", "causal"], runner: () => require("./runners/runGraph").runGraph },
-  
-  // SETUP & DX
-  install: { description: "Zero-friction onboarding", tier: "free", category: "setup", aliases: ["i", "bootstrap"], runner: () => require("./runners/runInstall").runInstall },
-  init: { description: "Project setup wizard", tier: "free", category: "setup", aliases: ["setup", "configure"], runner: () => require("./runners/runInit").runInit },
-  doctor: { description: "Environment diagnostics", tier: "free", category: "setup", aliases: ["health", "diag"], runner: () => require("./runners/runDoctor").runDoctor },
+  // ═══════════════════════════════════════════════════════════════════════════════
+  // SETUP COMMANDS (2)
+  // ═══════════════════════════════════════════════════════════════════════════════
+  
+  // 1) init - One-time setup (config + contracts + scripts)
+  init: { 
+    description: "One-time setup (config + contracts + scripts)", 
+    tier: "free", 
+    category: "setup", 
+    aliases: ["setup", "configure"], 
+    runner: () => require("./runners/runInit").runInit 
+  },
+  
+  // 2) doctor - Environment + dependency + config health check
+  doctor: { 
+    description: "Environment + dependency + config health check", 
+    tier: "free", 
+    category: "setup", 
+    aliases: ["health", "diag"], 
+    runner: () => require("./runners/runDoctor").runDoctor 
+  },
+  
+  // ═══════════════════════════════════════════════════════════════════════════════
+  // AI TRUTH LANE (4) - Context engine, guardrails, MDC
+  // ═══════════════════════════════════════════════════════════════════════════════
+  
+  // 3) ctx - Generate/update truthpack (core truth engine)
+  ctx: { 
+    description: "Truthpack generation - core truth engine", 
+    tier: "free", 
+    category: "truth", 
+    aliases: ["truthpack", "tp"], 
+    subcommands: ["build", "diff", "sync", "search"], 
+    runner: () => require("./runners/runCtx").runCtx 
+  },
+  
+  // 4) context - MDC + IDE rules + memory engine outputs
+  context: { 
+    description: "Generate IDE rules (.cursorrules, MDC, Windsurf, Copilot)", 
+    tier: "free", 
+    category: "truth", 
+    aliases: ["rules", "ai-rules", "mdc"], 
+    runner: () => require("./runners/runContext").runContext 
+  },
+  
+  // 5) guard - AI guardrails (prompt firewall, hallucination checking)
+  guard: { 
+    description: "AI guardrails - prompt firewall & hallucination checking", 
+    tier: "free", 
+    category: "truth", 
+    aliases: ["ai-guard", "firewall", "validate"], 
+    runner: () => require("./runners/runGuard").runGuard 
+  },
+  
+  // 6) contracts - CI gate for contract drift / invariants
+  contracts: { 
+    description: "CI gate for contract drift / invariants", 
+    tier: "free", 
+    category: "truth", 
+    aliases: ["drift"], 
+    runner: () => require("./runners/runContracts").runContracts 
+  },
+  
+  // ═══════════════════════════════════════════════════════════════════════════════
+  // PROOF LOOP (5) - The main verification commands
+  // ═══════════════════════════════════════════════════════════════════════════════
+  
+  // 7) ship - The only verdict command. Static + (optional) runtime merge
+  ship: { 
+    description: "Verdict engine - SHIP / WARN / BLOCK", 
+    tier: "free", 
+    category: "proof", 
+    aliases: ["verdict"], 
+    caps: "static-only on FREE", 
+    runner: () => require("./runners/runShip").runShip 
+  },
+  
+  // 8) runtime - Everything Playwright / browser-based
+  runtime: { 
+    description: "Browser-based runtime verification", 
+    tier: "free", 
+    category: "proof", 
+    aliases: [], 
+    subcommands: ["crawl", "agent", "record", "play"],
+    caps: "preview mode on FREE (5 pages, no auth)", 
+    runner: () => require("./runners/runRuntime").runRuntime 
+  },
+  
+  // 9) fix - Mission planning + patching
+  fix: { 
+    description: "AI-powered auto-fix", 
+    tier: "free", 
+    category: "proof", 
+    caps: "--plan-only on FREE", 
+    aliases: ["f", "repair"], 
+    runner: () => require("./runners/runFix").runFix 
+  },
+  
+  // 10) prove - The one command users actually run before launch
+  prove: { 
+    description: "Full proof loop - ctx → runtime → ship → fix", 
+    tier: "pro", 
+    category: "proof", 
+    aliases: ["p", "full", "all"], 
+    runner: () => require("./runners/runProve").runProve 
+  },
+  
+  // 11) security - AuthZ + IDOR + sensitive security proofs
+  security: { 
+    description: "AuthZ matrix & IDOR detection", 
+    tier: "pro", 
+    category: "proof", 
+    aliases: [], 
+    subcommands: ["model", "matrix", "idor", "prove"],
+    runner: () => require("./runners/runSecurity").runSecurity 
+  },
+  
+  // ═══════════════════════════════════════════════════════════════════════════════
+  // OUTPUT & AUTOMATION (3)
+  // ═══════════════════════════════════════════════════════════════════════════════
+  
+  // 12) report - Render artifacts (HTML/MD/SARIF/CSV/etc)
+  report: { 
+    description: "Generate HTML/MD/SARIF reports", 
+    tier: "free", 
+    category: "output", 
+    caps: "HTML/MD only on FREE", 
+    aliases: ["html", "artifact"], 
+    runner: () => require("./runners/runReport").runReport 
+  },
+  
+  // 13) export - Lightweight collab outputs from latest results
+  export: { 
+    description: "Generate collaboration outputs", 
+    tier: "free", 
+    category: "output", 
+    aliases: [], 
+    subcommands: ["pr", "badge", "bundle"],
+    runner: () => require("./runners/runExport").runExport 
+  },
+  
+  // 14) mcp - Start MCP server for AI IDEs
+  mcp: { 
+    description: "Start MCP server for AI IDEs", 
+    tier: "starter", 
+    category: "automation", 
+    aliases: [], 
+    runner: () => require("./runners/runMcp").runMcp 
+  },
+  
+  // ═══════════════════════════════════════════════════════════════════════════════
+  // BACKWARD COMPATIBILITY ALIASES (old commands still work)
+  // ═══════════════════════════════════════════════════════════════════════════════
+  
+  // install → init --quick
+  install: { 
+    description: "Zero-friction onboarding (alias: init --quick)", 
+    tier: "free", 
+    category: "setup", 
+    aliases: ["i", "bootstrap"], 
+    runner: () => async (args) => {
+      const { runInit } = require("./runners/runInit");
+      return await runInit(["--quick", ...args]);
+    }
+  },
+  
+  // scan - Enhanced route integrity scanner with terminal UI
+  scan: { 
+    description: "Route integrity & code analysis scanner", 
+    tier: "free", 
+    category: "proof", 
+    aliases: ["s", "check"], 
+    runner: () => require("./runners/runScan").runScan
+  },
+  
+  // gate → ship --ci
+  gate: { 
+    description: "CI/CD gate (alias: ship --ci)", 
+    tier: "starter", 
+    category: "ci", 
+    aliases: ["ci", "block"], 
+    runner: () => async (args) => {
+      const { runShip } = require("./runners/runShip");
+      return await runShip(["--ci", ...args]);
+    }
+  },
+  
+  // reality → runtime crawl
+  reality: { 
+    description: "Runtime proof (alias: runtime crawl)", 
+    tier: "free", 
+    category: "proof", 
+    aliases: ["r", "test", "e2e"], 
+    caps: "preview mode on FREE (5 pages, no auth)", 
+    runner: () => async (args) => {
+      const { runRuntime } = require("./runners/runRuntime");
+      return await runRuntime(["crawl", ...args]);
+    }
+  },
+  
+  // ai-test → runtime agent
+  "ai-test": { 
+    description: "AI autonomous test (alias: runtime agent)", 
+    tier: "pro", 
+    category: "automation", 
+    aliases: ["ai", "agent"], 
+    runner: () => async (args) => {
+      const { runRuntime } = require("./runners/runRuntime");
+      return await runRuntime(["agent", ...args]);
+    }
+  },
+  
+  // replay → runtime record/play
+  replay: { 
+    description: "Record/replay sessions (alias: runtime record/play)", 
+    tier: "pro", 
+    category: "proof", 
+    aliases: ["record", "playback"], 
+    runner: () => async (args) => {
+      // If first arg is record or play, delegate to runtime
+      if (args[0] === "record" || args[0] === "play") {
+        const { runRuntime } = require("./runners/runRuntime");
+        return await runRuntime(args);
+      }
+      // Otherwise delegate to original replay handler
+      try {
+        const { runReplay } = require("./runners/runReplay");
+        return await runReplay(args);
+      } catch (e) {
+        if (args && (args.includes("--help") || args.includes("-h") || args.length === 0)) {
+          console.log("\n  vibecheck replay - Record and replay user sessions\n\n  Subcommands:\n    record <url>     Record a user session\n    play <capsule>   Replay a recorded session\n    list             List available replay capsules\n    show <id>        Show details of a replay capsule\n    delete <id>      Delete a replay capsule\n    export <id>      Export a replay capsule\n    import <file>    Import a replay capsule\n\n  Note: Requires 'chalk' and 'playwright' dependencies.\n  Install: npm install chalk playwright\n");
+          return 0;
+        }
+        console.error("Replay runner error:", e.message);
+        return 1;
+      }
+    }
+  },
+  
+  // pr → export pr
+  pr: { 
+    description: "Generate PR comment (alias: export pr)", 
+    tier: "starter", 
+    category: "ci", 
+    aliases: ["pull-request"], 
+    runner: () => async (args) => {
+      const { runExport } = require("./runners/runExport");
+      return await runExport(["pr", ...args]);
+    }
+  },
+  
+  // badge → export badge
+  badge: { 
+    description: "Generate ship badge (alias: export badge)", 
+    tier: "starter", 
+    category: "ci", 
+    aliases: ["b"], 
+    runner: () => async (args) => {
+      const { runExport } = require("./runners/runExport");
+      return await runExport(["badge", ...args]);
+    }
+  },
+  
+  // share → export bundle
+  share: { 
+    description: "Generate share pack (alias: export bundle)", 
+    tier: "pro", 
+    category: "automation", 
+    aliases: [], 
+    runner: () => async (args) => {
+      const { runExport } = require("./runners/runExport");
+      return await runExport(["bundle", ...args]);
+    }
+  },
+  
+  // permissions → security model
+  permissions: { 
+    description: "AuthZ & IDOR (alias: security model)", 
+    tier: "pro", 
+    category: "proof", 
+    aliases: ["authz", "idor"], 
+    runner: () => async (args) => {
+      const { runSecurity } = require("./runners/runSecurity");
+      // If no subcommand, default to "model"
+      if (!args[0] || args[0].startsWith("--")) {
+        return await runSecurity(["model", ...args]);
+      }
+      return await runSecurity(args);
+    }
+  },
+  
+  // ═══════════════════════════════════════════════════════════════════════════════
+  // QUALITY & CHECKPOINT COMMANDS
+  // ═══════════════════════════════════════════════════════════════════════════════
+  
+  // 15) polish - Production polish analyzer
+  polish: { 
+    description: "Production polish analyzer - finds missing essentials", 
+    tier: "free", 
+    category: "quality", 
+    aliases: ["quality", "finalize", "ready"], 
+    runner: () => require("./runners/runPolish").runPolish 
+  },
+  
+  // 16) checkpoint - Compare baseline vs current
+  checkpoint: {
+    description: "Compare baseline vs current, hallucination scoring",
+    tier: "free",
+    category: "analysis",
+    aliases: ["cp", "compare", "diff"],
+    caps: "basic on FREE, hallucination scoring on PRO",
+    runner: () => require("./runners/runCheckpoint").runCheckpoint
+  },
+  
   status: { description: "Project health dashboard", tier: "free", category: "setup", aliases: ["st"], runner: () => require("./runners/runStatus").runStatus },
   watch: { description: "Continuous mode - re-runs on changes", tier: "free", category: "setup", aliases: ["w", "dev"], runner: () => require("./runners/runWatch").runWatch },
-  launch: { description: "Pre-launch checklist wizard", tier: "starter", category: "setup", aliases: ["checklist", "preflight"], runner: () => require("./runners/runLaunch").runLaunch },
-  preflight: { description: "Deployment validation checks", tier: "free", category: "setup", aliases: ["validate", "check"], runner: () => require("./runners/runPreflight").runPreflight },
-  
-  // AI TRUTH
-  ctx: { description: "Generate truthpack for AI agents", tier: "free", category: "truth", aliases: ["truthpack", "tp"], subcommands: ["build", "diff", "guard", "sync", "search"], runner: () => require("./runners/runCtx").runCtx },
-  guard: { description: "Validate AI claims against truth", tier: "free", category: "truth", aliases: ["validate", "trust"], runner: () => require("./runners/runGuard").runGuard },
+  launch: { description: "Pre-launch checklist wizard", tier: "starter", category: "setup", aliases: ["checklist"], runner: () => require("./runners/runLaunch").runLaunch },
+  preflight: { description: "Deployment validation checks", tier: "free", category: "setup", aliases: ["deploy-check"], runner: () => require("./runners/runPreflight").runPreflight },
   verify: { description: "Verify AI-generated code output", tier: "free", category: "truth", aliases: ["v", "check-output"], runner: () => require("./runners/runVerify").main },
-  context: { description: "Generate .cursorrules, .windsurf/rules", tier: "free", category: "truth", aliases: ["rules", "ai-rules"], runner: () => require("./runners/runContext").runContext },
-  mdc: { description: "Generate MDC specifications", tier: "free", category: "truth", aliases: [], runner: () => require("./runners/runMdc").runMdc },
-  
-  // CI & COLLABORATION (STARTER+)
-  gate: { description: "CI/CD gate - blocks deploys on failures", tier: "starter", category: "ci", aliases: ["ci", "block"], runner: () => require("./runners/runGate").runGate },
-  pr: { description: "Generate PR comment with findings", tier: "starter", category: "ci", aliases: ["pull-request"], runner: () => require("./runners/runPR").runPR },
-  badge: { description: "Generate ship badge for README", tier: "starter", category: "ci", aliases: ["b"], runner: () => require("./runners/runBadge").runBadge },
-  
-  // AUTOMATION (STARTER+/PRO)
-  mcp: { description: "Start MCP server for AI IDEs", tier: "starter", category: "automation", aliases: [], runner: () => require("./runners/runMcp").runMcp },
-  share: { description: "Generate share pack for PR/docs", tier: "pro", category: "automation", aliases: [], runner: () => require("./runners/runShare").runShare },
-  "ai-test": { description: "AI autonomous test generation", tier: "pro", category: "automation", aliases: ["ai", "agent"], runner: () => require("./runners/runAIAgent").runAIAgent },
+  graph: { description: "Reality proof graph visualization", tier: "pro", category: "proof", aliases: ["graphviz", "causal"], runner: () => require("./runners/runGraph").runGraph },
   
   // ACCOUNT (always free)
   login: { description: "Authenticate with API key", tier: "free", category: "account", aliases: ["auth", "signin"], runner: () => require("./runners/runAuth").runLogin, skipAuth: true },