@vibecheckai/cli 3.1.8 → 3.2.0

package/mcp-server/truth-firewall-tools.js

@@ -398,7 +398,7 @@ export async function handleTruthFirewallTool(toolName, args, projectPath = proc
       return await addAssumption(projectPath, args);
       
     case "vibecheck.validate_plan":
-      return await validatePlanTool(projectPath, args);
+      return await getPlanValidationResult(projectPath, args);
       
     case "vibecheck.check_drift":
       return await checkDriftTool(projectPath, args);
@@ -421,8 +421,147 @@ const state = {
   assumptions: [],
   verifiedClaims: new Map(),
   maxAssumptions: 2,
+  lastValidationByProject: new Map(),
 };
 
+const MAX_EVIDENCE_SNIPPET = 200;
+
+/**
+ * Policy configuration - aligned with proof-context.js TRUTH_CONTRACT
+ */
+const POLICY_CONFIG = {
+  strict: {
+    minConfidence: 0.8,
+    allowUnknown: false,
+    requireValidation: true,
+    blockOnDrift: true,
+    validationTTL: 5 * 60 * 1000, // 5 minutes
+  },
+  balanced: {
+    minConfidence: 0.6,
+    allowUnknown: false,
+    requireValidation: true,
+    blockOnDrift: false,
+    validationTTL: 10 * 60 * 1000, // 10 minutes
+  },
+  permissive: {
+    minConfidence: 0.4,
+    allowUnknown: true,
+    requireValidation: false,
+    blockOnDrift: false,
+    validationTTL: 30 * 60 * 1000, // 30 minutes
+  },
+};
+
+/**
+ * Get policy configuration
+ */
+export function getPolicyConfig(policy = 'strict') {
+  return POLICY_CONFIG[policy] || POLICY_CONFIG.strict;
+}
+
+function confidenceToScore(confidence) {
+  if (typeof confidence === "number") return confidence;
+  switch (confidence) {
+    case "high":
+      return 0.9;
+    case "medium":
+      return 0.7;
+    case "low":
+      return 0.5;
+    default:
+      return 0.6;
+  }
+}
+
+async function readSnippet(projectPath, file, line) {
+  if (!file) return "";
+  try {
+    const content = await fs.readFile(path.join(projectPath, file), "utf8");
+    const lines = content.split("\n");
+    const idx = Math.max(0, Math.min(lines.length - 1, line - 1));
+    return (lines[idx] || "").slice(0, MAX_EVIDENCE_SNIPPET);
+  } catch {
+    return "";
+  }
+}
+
+async function normalizeEvidence(projectPath, evidence, fallback, confidence) {
+  const raw = Array.isArray(evidence) ? evidence : evidence ? [evidence] : [];
+  const normalized = [];
+
+  for (const item of raw) {
+    const file = item?.file || fallback?.file || "";
+    const line = Number(item?.line || item?.lines || fallback?.line || 1);
+    const snippet =
+      item?.snippet ||
+      item?.evidence ||
+      (await readSnippet(projectPath, file, line));
+
+    normalized.push({
+      file,
+      line,
+      snippet,
+      confidence: item?.confidence ?? confidenceToScore(confidence),
+    });
+  }
+
+  if (normalized.length === 0 && fallback?.file) {
+    normalized.push({
+      file: fallback.file,
+      line: fallback.line || 1,
+      snippet: await readSnippet(projectPath, fallback.file, fallback.line || 1),
+      confidence: confidenceToScore(confidence),
+    });
+  }
+
+  return normalized;
+}
+
+/**
+ * Check if there's a recent claim validation for the project.
+ * The TTL depends on the policy mode.
+ */
+export function hasRecentClaimValidation(projectPath, policy = 'strict') {
+  const last = state.lastValidationByProject.get(projectPath);
+  if (typeof last !== "number") return false;
+  
+  const config = getPolicyConfig(policy);
+  const maxAgeMs = config.validationTTL;
+  return Date.now() - last <= maxAgeMs;
+}
+
+/**
+ * Validate a claim result against policy thresholds.
+ * Returns an enforcement decision.
+ */
+export function enforceClaimResult(result, policy = 'strict') {
+  const config = getPolicyConfig(policy);
+  const confidence = confidenceToScore(result.confidence || result.result === 'true' ? 0.9 : 0.3);
+  
+  // Unknown results
+  if (result.result === 'unknown') {
+    if (!config.allowUnknown) {
+      return {
+        allowed: false,
+        reason: `Unknown claims are not allowed in ${policy} mode`,
+        suggestion: 'Use search_evidence to find proof or get_truthpack to refresh context',
+      };
+    }
+  }
+  
+  // Low confidence
+  if (confidence < config.minConfidence) {
+    return {
+      allowed: false,
+      reason: `Confidence ${(confidence * 100).toFixed(0)}% below ${policy} threshold ${(config.minConfidence * 100).toFixed(0)}%`,
+      suggestion: 'Find additional evidence or use permissive policy',
+    };
+  }
+  
+  return { allowed: true };
+}
+
 async function getTruthPack(projectPath, args) {
   const scope = args.scope || 'all';
   const refresh = args.refresh || false;
@@ -439,6 +578,7 @@ async function getTruthPack(projectPath, args) {
     commitHash: getCommitHash(projectPath),
     sections: {},
     confidence: 0,
+    _attribution: CONTEXT_ATTRIBUTION,
   };
   
   if (scope === 'all' || scope === 'routes') {
@@ -510,22 +650,45 @@ async function validateClaim(projectPath, args) {
     result.nextSteps = [`Verification error: ${error.message}`];
   }
   
-  // If unknown, add helpful next steps
+  // ENFORCED: Unknown claims must return explicit "unknown" error 
+  // that blocks dependent actions in strict/balanced modes
   if (result.result === 'unknown') {
     result.nextSteps.push(
       'call vibecheck.search_evidence to find related code',
       'call vibecheck.get_truthpack to get full context',
     );
     result.warning = '⚠️ UNKNOWN claims BLOCK dependent actions. Verify before proceeding.';
+    result.enforcement = {
+      allowed: false,
+      reason: 'Claim result is unknown - cannot proceed without evidence',
+      blockedActions: ['fix', 'autopilot_apply', 'propose_patch'],
+    };
+  } else if (result.result === 'true') {
+    result.enforcement = {
+      allowed: true,
+      confidence: confidenceToScore(result.confidence),
+    };
+  } else {
+    // result is 'false'
+    result.enforcement = {
+      allowed: false,
+      reason: 'Claim is disproven - do not proceed with dependent actions',
+    };
   }
   
   // Cache result
-  state.verifiedClaims.set(claimId, { result, timestamp: Date.now() });
+  state.verifiedClaims.set(claimId, { result, timestamp: Date.now(), projectPath });
+  state.lastValidationByProject.set(projectPath, Date.now());
   
   return {
     claimId,
     ...result,
+    evidence: await normalizeEvidence(projectPath, result.evidence, {
+      file: subject?.path || subject?.name,
+      line: 1,
+    }, result.confidence),
     timestamp: new Date().toISOString(),
+    _attribution: CONTEXT_ATTRIBUTION,
   };
 }
 
@@ -565,6 +728,7 @@ async function compileContext(projectPath, args) {
     invariants,
     tokenCount,
     warnings: generateContextWarnings(domains, policy, relevantRoutes.length),
+    _attribution: CONTEXT_ATTRIBUTION,
   };
 }
 
@@ -589,6 +753,7 @@ async function searchEvidence(projectPath, args) {
             line: i + 1,
             snippet: snippet.slice(0, 300),
             hash: crypto.createHash('sha256').update(lines[i]).digest('hex').slice(0, 16),
+            confidence: 0.6,
           });
           
           if (results.length >= limit) break;
@@ -604,6 +769,7 @@ async function searchEvidence(projectPath, args) {
     query,
     count: results.length,
     results,
+    _attribution: CONTEXT_ATTRIBUTION,
   };
 }
 
@@ -780,7 +946,7 @@ async function addAssumption(projectPath, args) {
 // PLAN VALIDATION & DRIFT DETECTION (Spec 10.3)
 // =============================================================================
 
-async function validatePlanTool(projectPath, args) {
+async function getPlanValidationResult(projectPath, args) {
   const { plan, strict = false } = args;
   
   // Load contracts
@@ -1224,6 +1390,11 @@ export function getProjectFingerprint(projectPath) {
   };
 }
 
+/**
+ * Context attribution message shown when AI uses vibecheck data
+ */
+const CONTEXT_ATTRIBUTION = "🧠 Context enhanced by vibecheck";
+
 /**
  * Wrap MCP response with standard metadata including fingerprint (Spec 10.2)
  */
@@ -1233,9 +1404,17 @@ export function wrapMcpResponse(data, projectPath) {
     version: '2.0.0',
     projectFingerprint: getProjectFingerprint(projectPath),
     data,
+    _attribution: CONTEXT_ATTRIBUTION,
   };
 }
 
+/**
+ * Get the context attribution message
+ */
+export function getContextAttribution() {
+  return CONTEXT_ATTRIBUTION;
+}
+
 async function extractRoutes(projectPath) {
   const routes = [];
   const files = await findSourceFiles(projectPath);
@@ -1497,4 +1676,11 @@ async function findSourceFiles(projectPath) {
 export default {
   TRUTH_FIREWALL_TOOLS,
   handleTruthFirewallTool,
+  hasRecentClaimValidation,
+  enforceClaimResult,
+  getPolicyConfig,
+  getProjectFingerprint,
+  wrapMcpResponse,
+  getContextAttribution,
+  CONTEXT_ATTRIBUTION,
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vibecheckai/cli",
-  "version": "3.1.8",
+  "version": "3.2.0",
   "description": "Vibecheck CLI - Ship with confidence. One verdict: SHIP | WARN | BLOCK.",
   "main": "bin/vibecheck.js",
   "bin": {
@@ -28,6 +28,8 @@
     "@babel/parser": "^7.23.0",
     "@babel/traverse": "^7.23.0",
     "@babel/types": "^7.23.0",
+    "@vibecheck/core": "workspace:*",
+    "@vibecheck/security": "workspace:*",
     "chalk": "^5.3.0",
     "commander": "^12.0.0",
     "debug": "^4.3.4",

package/bin/runners/runInstall.js

@@ -1,281 +0,0 @@
-/**
- * vibecheck install - Zero-friction Onboarding
- * 
- * ═══════════════════════════════════════════════════════════════════════════════
- * ENTERPRISE EDITION - World-Class Terminal Experience
- * ═══════════════════════════════════════════════════════════════════════════════
- */
-
-const fs = require("fs");
-const path = require("path");
-const { parseGlobalFlags, shouldShowBanner } = require("./lib/global-flags");
-const { buildTruthpack, writeTruthpack } = require("./lib/truth");
-const { detectPackageManager, detectNext, detectFastify, detectFastifyEntry } = require("./lib/detect");
-const { readPkg, writePkg, upsertScripts } = require("./lib/pkgjson");
-const { writeEnvTemplateFromTruthpack } = require("./lib/env-template");
-
-// ═══════════════════════════════════════════════════════════════════════════════
-// ADVANCED TERMINAL - ANSI CODES & UTILITIES
-// ═══════════════════════════════════════════════════════════════════════════════
-
-const c = {
-  reset: '\x1b[0m',
-  bold: '\x1b[1m',
-  dim: '\x1b[2m',
-  italic: '\x1b[3m',
-  red: '\x1b[31m',
-  green: '\x1b[32m',
-  yellow: '\x1b[33m',
-  blue: '\x1b[34m',
-  magenta: '\x1b[35m',
-  cyan: '\x1b[36m',
-  white: '\x1b[37m',
-  gray: '\x1b[90m',
-  clearLine: '\x1b[2K',
-  hideCursor: '\x1b[?25l',
-  showCursor: '\x1b[?25h',
-};
-
-const rgb = (r, g, b) => `\x1b[38;2;${r};${g};${b}m`;
-
-const colors = {
-  gradient1: rgb(255, 200, 100),
-  gradient2: rgb(255, 180, 80),
-  gradient3: rgb(255, 160, 60),
-  shipGreen: rgb(0, 255, 150),
-  warnAmber: rgb(255, 200, 0),
-  blockRed: rgb(255, 80, 80),
-  accent: rgb(255, 200, 100),
-  muted: rgb(120, 120, 140),
-  next: rgb(100, 200, 255),
-  fastify: rgb(255, 150, 200),
-};
-
-// ═══════════════════════════════════════════════════════════════════════════════
-// PREMIUM BANNER
-// ═══════════════════════════════════════════════════════════════════════════════
-
-const INSTALL_BANNER = `
-${rgb(255, 200, 100)}  ██╗███╗   ██╗███████╗████████╗ █████╗ ██╗     ██╗     ${c.reset}
-${rgb(255, 180, 80)}  ██║████╗  ██║██╔════╝╚══██╔══╝██╔══██╗██║     ██║     ${c.reset}
-${rgb(255, 160, 60)}  ██║██╔██╗ ██║███████╗   ██║   ███████║██║     ██║     ${c.reset}
-${rgb(255, 140, 40)}  ██║██║╚██╗██║╚════██║   ██║   ██╔══██║██║     ██║     ${c.reset}
-${rgb(255, 120, 20)}  ██║██║ ╚████║███████║   ██║   ██║  ██║███████╗███████╗${c.reset}
-${rgb(255, 100, 0)}  ╚═╝╚═╝  ╚═══╝╚══════╝   ╚═╝   ╚═╝  ╚═╝╚══════╝╚══════╝${c.reset}
-`;
-
-const BANNER_FULL = `
-${rgb(255, 200, 100)}  ██╗   ██╗██╗██████╗ ███████╗ ██████╗██╗  ██╗███████╗ ██████╗██╗  ██╗${c.reset}
-${rgb(255, 190, 90)}  ██║   ██║██║██╔══██╗██╔════╝██╔════╝██║  ██║██╔════╝██╔════╝██║ ██╔╝${c.reset}
-${rgb(255, 180, 80)}  ██║   ██║██║██████╔╝█████╗  ██║     ███████║█████╗  ██║     █████╔╝ ${c.reset}
-${rgb(255, 160, 60)}  ╚██╗ ██╔╝██║██╔══██╗██╔══╝  ██║     ██╔══██║██╔══╝  ██║     ██╔═██╗ ${c.reset}
-${rgb(255, 140, 40)}   ╚████╔╝ ██║██████╔╝███████╗╚██████╗██║  ██║███████╗╚██████╗██║  ██╗${c.reset}
-${rgb(255, 120, 20)}    ╚═══╝  ╚═╝╚═════╝ ╚══════╝ ╚═════╝╚═╝  ╚═╝╚══════╝ ╚═════╝╚═╝  ╚═╝${c.reset}
-
-${c.dim}  ┌─────────────────────────────────────────────────────────────────────┐${c.reset}
-${c.dim}  │${c.reset}  ${rgb(255, 200, 100)}📥${c.reset} ${c.bold}INSTALL${c.reset} ${c.dim}•${c.reset} ${rgb(200, 200, 200)}Zero-Friction${c.reset} ${c.dim}•${c.reset} ${rgb(150, 150, 150)}Auto-Detect${c.reset} ${c.dim}•${c.reset} ${rgb(100, 100, 100)}Onboarding${c.reset}   ${c.dim}│${c.reset}
-${c.dim}  └─────────────────────────────────────────────────────────────────────┘${c.reset}
-`;
-
-const ICONS = {
-  install: '📥',
-  package: '📦',
-  file: '📄',
-  check: '✓',
-  cross: '✗',
-  warning: '⚠',
-  arrow: '→',
-  bullet: '•',
-  sparkle: '✨',
-  folder: '📁',
-  next: '▲',
-  fastify: '⚡',
-  npm: '📦',
-  gear: '⚙️',
-};
-
-const SPINNER_DOTS = ['⣾', '⣽', '⣻', '⢿', '⡿', '⣟', '⣯', '⣷'];
-let spinnerIndex = 0;
-let spinnerInterval = null;
-let spinnerStartTime = null;
-
-function formatDuration(ms) {
-  if (ms < 1000) return `${ms}ms`;
-  return `${(ms / 1000).toFixed(1)}s`;
-}
-
-function startSpinner(message) {
-  spinnerStartTime = Date.now();
-  process.stdout.write(c.hideCursor);
-  spinnerInterval = setInterval(() => {
-    const elapsed = formatDuration(Date.now() - spinnerStartTime);
-    process.stdout.write(`\r${c.clearLine}  ${colors.accent}${SPINNER_DOTS[spinnerIndex]}${c.reset} ${message} ${c.dim}${elapsed}${c.reset}`);
-    spinnerIndex = (spinnerIndex + 1) % SPINNER_DOTS.length;
-  }, 80);
-}
-
-function stopSpinner(message, success = true) {
-  if (spinnerInterval) {
-    clearInterval(spinnerInterval);
-    spinnerInterval = null;
-  }
-  const elapsed = spinnerStartTime ? formatDuration(Date.now() - spinnerStartTime) : '';
-  const icon = success ? `${colors.shipGreen}${ICONS.check}${c.reset}` : `${colors.blockRed}${ICONS.cross}${c.reset}`;
-  process.stdout.write(`\r${c.clearLine}  ${icon} ${message} ${c.dim}${elapsed}${c.reset}\n`);
-  process.stdout.write(c.showCursor);
-  spinnerStartTime = null;
-}
-
-function printDivider(char = '─', width = 69, color = c.dim) {
-  console.log(`${color}  ${char.repeat(width)}${c.reset}`);
-}
-
-function printSection(title, icon = '◆') {
-  console.log();
-  console.log(`  ${colors.accent}${icon}${c.reset} ${c.bold}${title}${c.reset}`);
-  printDivider();
-}
-
-function printHelp(opts = {}) {
-  if (shouldShowBanner(opts)) {
-    console.log(BANNER_FULL);
-  }
-  console.log(`
-  ${c.bold}Usage:${c.reset} vibecheck install [options]
-
-  ${c.bold}Zero-Friction Onboarding${c.reset} — Auto-detect and configure your project.
-
-  ${c.bold}Options:${c.reset}
-    ${colors.accent}--path, -p <dir>${c.reset}    Project path ${c.dim}(default: current directory)${c.reset}
-    ${colors.accent}--help, -h${c.reset}          Show this help
-
-  ${c.bold}What It Does:${c.reset}
-    ${colors.shipGreen}1.${c.reset} Detects package manager ${c.dim}(npm, yarn, pnpm)${c.reset}
-    ${colors.shipGreen}2.${c.reset} Detects frameworks ${c.dim}(Next.js, Fastify)${c.reset}
-    ${colors.shipGreen}3.${c.reset} Builds initial truthpack
-    ${colors.shipGreen}4.${c.reset} Creates .vibecheck/config.json
-    ${colors.shipGreen}5.${c.reset} Generates env template from truthpack
-    ${colors.shipGreen}6.${c.reset} Adds vibecheck scripts to package.json
-
-  ${c.bold}Created Files:${c.reset}
-    ${ICONS.file} ${colors.accent}.vibecheck/config.json${c.reset}     ${c.dim}Local configuration${c.reset}
-    ${ICONS.file} ${colors.accent}.vibecheck/truthpack.json${c.reset}  ${c.dim}Ground truth for AI agents${c.reset}
-    ${ICONS.file} ${colors.accent}.env.template${c.reset}              ${c.dim}Env vars from truthpack${c.reset}
-
-  ${c.bold}Examples:${c.reset}
-    ${c.dim}# Install in current directory${c.reset}
-    vibecheck install
-
-    ${c.dim}# Install in specific directory${c.reset}
-    vibecheck install --path ./my-app
-  `);
-}
-
-function ensureDir(p) {
-  fs.mkdirSync(p, { recursive: true });
-}
-
-async function runInstall(argsOrContext = {}) {
-  // Handle array args from CLI
-  let opts = { noBanner: false, json: false, quiet: false, ci: false };
-  if (Array.isArray(argsOrContext)) {
-    const { flags } = parseGlobalFlags(argsOrContext);
-    opts = { ...opts, ...flags };
-    if (opts.help) {
-      printHelp(opts);
-      return 0;
-    }
-    argsOrContext = { repoRoot: opts.path || process.cwd() };
-  }
-  
-  const { repoRoot } = argsOrContext;
-  const root = repoRoot || process.cwd();
-  const projectName = path.basename(root);
-
-  // Print banner
-  if (shouldShowBanner(opts)) {
-    console.log(BANNER_FULL);
-  }
-  console.log(`  ${c.dim}Project:${c.reset}  ${c.bold}${projectName}${c.reset}`);
-  console.log(`  ${c.dim}Path:${c.reset}     ${root}`);
-  console.log();
-
-  const { path: pkgPath, json: pkg } = readPkg(root);
-
-  // Detect environment
-  startSpinner('Detecting environment...');
-  const pm = detectPackageManager(root);
-  const next = detectNext(root, pkg);
-  const fastify = detectFastify(root, pkg);
-  const fastifyEntry = fastify.enabled ? await detectFastifyEntry(root) : null;
-  stopSpinner('Environment detected', true);
-
-  // Build truthpack
-  startSpinner('Building truthpack...');
-  const truthpack = await buildTruthpack({ repoRoot: root, fastifyEntry: fastifyEntry || undefined });
-  writeTruthpack(root, truthpack);
-  stopSpinner('Truthpack built', true);
-
-  // Write config
-  startSpinner('Writing configuration...');
-  const cfgDir = path.join(root, ".vibecheck");
-  ensureDir(cfgDir);
-
-  const cfg = {
-    version: 1,
-    detected: {
-      packageManager: pm,
-      next: next.enabled,
-      fastify: fastify.enabled
-    },
-    fastifyEntry: fastifyEntry || null
-  };
-
-  fs.writeFileSync(path.join(cfgDir, "config.json"), JSON.stringify(cfg, null, 2), "utf8");
-  stopSpinner('Configuration written', true);
-
-  // Generate env template
-  startSpinner('Generating env template...');
-  const envRes = writeEnvTemplateFromTruthpack(root, truthpack);
-  stopSpinner(envRes.wrote ? `Env template generated (+${envRes.added.length} vars)` : 'Env template up to date', true);
-
-  // Add scripts
-  startSpinner('Updating package.json scripts...');
-  const scriptsToAdd = {
-    "vibecheck:ctx": "vibecheck ctx",
-    "vibecheck:ship": "vibecheck ship",
-    "vibecheck:fix": "vibecheck fix --apply",
-    "vibecheck:pr": "vibecheck pr"
-  };
-  const changedScripts = upsertScripts(pkg, scriptsToAdd);
-  if (changedScripts.length) writePkg(pkgPath, pkg);
-  stopSpinner(changedScripts.length ? `Added ${changedScripts.length} scripts` : 'Scripts up to date', true);
-
-  // Summary
-  printSection('DETECTED', ICONS.gear);
-  console.log();
-  console.log(`  ${ICONS.npm} ${c.bold}Package Manager:${c.reset} ${colors.accent}${pm}${c.reset}`);
-  console.log(`  ${colors.next}${ICONS.next}${c.reset} ${c.bold}Next.js:${c.reset}         ${next.enabled ? `${colors.shipGreen}yes${c.reset}` : `${c.dim}no${c.reset}`}`);
-  console.log(`  ${colors.fastify}${ICONS.fastify}${c.reset} ${c.bold}Fastify:${c.reset}         ${fastify.enabled ? `${colors.shipGreen}yes${c.reset}` : `${c.dim}no${c.reset}`}`);
-  if (fastifyEntry) {
-    console.log(`  ${c.dim}   Entry:${c.reset}          ${colors.accent}${fastifyEntry}${c.reset}`);
-  }
-
-  printSection('CREATED FILES', ICONS.folder);
-  console.log();
-  console.log(`  ${colors.shipGreen}${ICONS.check}${c.reset} ${ICONS.file} ${colors.accent}.vibecheck/config.json${c.reset}`);
-  console.log(`  ${colors.shipGreen}${ICONS.check}${c.reset} ${ICONS.file} ${colors.accent}.vibecheck/truthpack.json${c.reset}`);
-  if (envRes.wrote) {
-    console.log(`  ${colors.shipGreen}${ICONS.check}${c.reset} ${ICONS.file} ${colors.accent}${envRes.outRel}${c.reset} ${c.dim}(+${envRes.added.length} vars)${c.reset}`);
-  }
-  if (changedScripts.length) {
-    console.log(`  ${colors.shipGreen}${ICONS.check}${c.reset} ${ICONS.file} ${colors.accent}package.json${c.reset} ${c.dim}(${changedScripts.join(', ')})${c.reset}`);
-  }
-
-  // Installation complete
-  console.log();
-  console.log(`  ${colors.shipGreen}${ICONS.sparkle}${c.reset} Installation complete!`);
-  console.log();
-}
-
-module.exports = { runInstall };