@vibecheckai/cli 3.2.2 → 3.2.4

package/bin/runners/lib/enterprise-detect.js

@@ -1,603 +1,603 @@
-// bin/runners/lib/enterprise-detect.js
-// Enterprise-grade project detection: frameworks, databases, cloud, CI/CD, security tools
-const fs = require("fs");
-const path = require("path");
-
-function fileExists(root, rel) {
-  return fs.existsSync(path.join(root, rel));
-}
-
-function readJsonSafe(filePath) {
-  try {
-    return JSON.parse(fs.readFileSync(filePath, "utf8"));
-  } catch {
-    return null;
-  }
-}
-
-function readFileSafe(filePath) {
-  try {
-    return fs.readFileSync(filePath, "utf8");
-  } catch {
-    return "";
-  }
-}
-
-// ============================================================================
-// FRAMEWORK DETECTION
-// ============================================================================
-const FRAMEWORKS = {
-  nextjs: {
-    name: "Next.js",
-    icon: "▲",
-    category: "frontend",
-    detect: (root, pkg) => {
-      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
-      return !!(deps.next || fileExists(root, "next.config.js") || 
-                fileExists(root, "next.config.mjs") || fileExists(root, "next.config.ts"));
-    },
-    checks: ["routes", "auth", "api", "security", "ssr"],
-    invariants: ["INV_NO_FAKE_SUCCESS", "INV_NO_ROUTE_INVENTION", "INV_NO_GHOST_AUTH"],
-  },
-  remix: {
-    name: "Remix",
-    icon: "💿",
-    category: "frontend",
-    detect: (root, pkg) => {
-      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
-      return !!deps["@remix-run/node"] || !!deps["@remix-run/react"];
-    },
-    checks: ["routes", "auth", "api", "security", "loaders"],
-    invariants: ["INV_NO_FAKE_SUCCESS", "INV_NO_ROUTE_INVENTION"],
-  },
-  nuxt: {
-    name: "Nuxt",
-    icon: "💚",
-    category: "frontend",
-    detect: (root, pkg) => {
-      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
-      return !!deps.nuxt || fileExists(root, "nuxt.config.ts") || fileExists(root, "nuxt.config.js");
-    },
-    checks: ["routes", "auth", "api", "security"],
-    invariants: ["INV_NO_FAKE_SUCCESS", "INV_NO_ROUTE_INVENTION"],
-  },
-  sveltekit: {
-    name: "SvelteKit",
-    icon: "🔥",
-    category: "frontend",
-    detect: (root, pkg) => {
-      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
-      return !!deps["@sveltejs/kit"] || fileExists(root, "svelte.config.js");
-    },
-    checks: ["routes", "auth", "api", "security"],
-    invariants: ["INV_NO_FAKE_SUCCESS", "INV_NO_ROUTE_INVENTION"],
-  },
-  react: {
-    name: "React",
-    icon: "⚛️",
-    category: "frontend",
-    detect: (root, pkg) => {
-      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
-      return !!deps.react && !FRAMEWORKS.nextjs.detect(root, pkg) && !FRAMEWORKS.remix.detect(root, pkg);
-    },
-    checks: ["components", "api", "security"],
-    invariants: ["INV_NO_FAKE_SUCCESS"],
-  },
-  vue: {
-    name: "Vue",
-    icon: "💚",
-    category: "frontend",
-    detect: (root, pkg) => {
-      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
-      return !!deps.vue && !FRAMEWORKS.nuxt.detect(root, pkg);
-    },
-    checks: ["components", "api", "security"],
-    invariants: ["INV_NO_FAKE_SUCCESS"],
-  },
-  fastify: {
-    name: "Fastify",
-    icon: "⚡",
-    category: "backend",
-    detect: (root, pkg) => {
-      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
-      return !!deps.fastify;
-    },
-    checks: ["routes", "auth", "api", "security", "webhooks"],
-    invariants: ["INV_NO_FAKE_SUCCESS", "INV_NO_ROUTE_INVENTION", "INV_NO_GHOST_AUTH", "INV_NO_SILENT_CATCH_AUTH"],
-  },
-  express: {
-    name: "Express",
-    icon: "🚂",
-    category: "backend",
-    detect: (root, pkg) => {
-      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
-      return !!deps.express;
-    },
-    checks: ["routes", "auth", "api", "security"],
-    invariants: ["INV_NO_FAKE_SUCCESS", "INV_NO_ROUTE_INVENTION", "INV_NO_GHOST_AUTH"],
-  },
-  hono: {
-    name: "Hono",
-    icon: "🔥",
-    category: "backend",
-    detect: (root, pkg) => {
-      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
-      return !!deps.hono;
-    },
-    checks: ["routes", "auth", "api", "security"],
-    invariants: ["INV_NO_FAKE_SUCCESS", "INV_NO_ROUTE_INVENTION"],
-  },
-  nestjs: {
-    name: "NestJS",
-    icon: "🐈",
-    category: "backend",
-    detect: (root, pkg) => {
-      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
-      return !!deps["@nestjs/core"];
-    },
-    checks: ["routes", "auth", "api", "security", "guards"],
-    invariants: ["INV_NO_FAKE_SUCCESS", "INV_NO_ROUTE_INVENTION", "INV_NO_GHOST_AUTH"],
-  },
-};
-
-// ============================================================================
-// DATABASE DETECTION
-// ============================================================================
-const DATABASES = {
-  prisma: {
-    name: "Prisma",
-    icon: "◮",
-    detect: (root, pkg) => {
-      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
-      return !!deps["@prisma/client"] || fileExists(root, "prisma/schema.prisma");
-    },
-    checks: ["migrations", "models"],
-  },
-  drizzle: {
-    name: "Drizzle",
-    icon: "💧",
-    detect: (root, pkg) => {
-      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
-      return !!deps["drizzle-orm"] || fileExists(root, "drizzle.config.ts");
-    },
-    checks: ["migrations", "schema"],
-  },
-  mongoose: {
-    name: "Mongoose",
-    icon: "🍃",
-    detect: (root, pkg) => {
-      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
-      return !!deps.mongoose;
-    },
-    checks: ["models", "connections"],
-  },
-  supabase: {
-    name: "Supabase",
-    icon: "⚡",
-    detect: (root, pkg) => {
-      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
-      return !!deps["@supabase/supabase-js"];
-    },
-    checks: ["rls", "auth", "realtime"],
-  },
-  firebase: {
-    name: "Firebase",
-    icon: "🔥",
-    detect: (root, pkg) => {
-      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
-      return !!deps.firebase || !!deps["firebase-admin"];
-    },
-    checks: ["rules", "auth", "functions"],
-  },
-  redis: {
-    name: "Redis",
-    icon: "🔴",
-    detect: (root, pkg) => {
-      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
-      return !!deps.redis || !!deps.ioredis || !!deps["@upstash/redis"];
-    },
-    checks: ["connections", "caching"],
-  },
-};
-
-// ============================================================================
-// AUTH PROVIDER DETECTION
-// ============================================================================
-const AUTH_PROVIDERS = {
-  nextauth: {
-    name: "NextAuth.js",
-    icon: "🔐",
-    detect: (root, pkg) => {
-      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
-      return !!deps["next-auth"] || !!deps["@auth/core"];
-    },
-    checks: ["session", "providers", "callbacks"],
-  },
-  clerk: {
-    name: "Clerk",
-    icon: "🔑",
-    detect: (root, pkg) => {
-      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
-      return !!deps["@clerk/nextjs"] || !!deps["@clerk/clerk-sdk-node"];
-    },
-    checks: ["middleware", "organizations"],
-  },
-  auth0: {
-    name: "Auth0",
-    icon: "🔒",
-    detect: (root, pkg) => {
-      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
-      return !!deps["@auth0/nextjs-auth0"] || !!deps["auth0"];
-    },
-    checks: ["rules", "actions", "rbac"],
-  },
-  lucia: {
-    name: "Lucia",
-    icon: "🔐",
-    detect: (root, pkg) => {
-      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
-      return !!deps.lucia;
-    },
-    checks: ["sessions", "adapters"],
-  },
-  passport: {
-    name: "Passport.js",
-    icon: "🛂",
-    detect: (root, pkg) => {
-      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
-      return !!deps.passport;
-    },
-    checks: ["strategies", "serialization"],
-  },
-};
-
-// ============================================================================
-// PAYMENT PROVIDER DETECTION
-// ============================================================================
-const PAYMENT_PROVIDERS = {
-  stripe: {
-    name: "Stripe",
-    icon: "💳",
-    detect: (root, pkg) => {
-      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
-      return !!deps.stripe || !!deps["@stripe/stripe-js"];
-    },
-    checks: ["webhooks", "idempotency", "signature"],
-    invariants: ["INV_NO_BYPASS_ENTITLEMENTS", "INV_STRIPE_WEBHOOK_VERIFIED", "INV_STRIPE_IDEMPOTENT"],
-  },
-  lemonSqueezy: {
-    name: "Lemon Squeezy",
-    icon: "🍋",
-    detect: (root, pkg) => {
-      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
-      return !!deps["@lemonsqueezy/lemonsqueezy.js"];
-    },
-    checks: ["webhooks", "subscriptions"],
-  },
-  paddle: {
-    name: "Paddle",
-    icon: "🏓",
-    detect: (root, pkg) => {
-      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
-      return !!deps["@paddle/paddle-js"];
-    },
-    checks: ["webhooks", "subscriptions"],
-  },
-};
-
-// ============================================================================
-// CI/CD DETECTION
-// ============================================================================
-const CI_PROVIDERS = {
-  githubActions: {
-    name: "GitHub Actions",
-    icon: "🐙",
-    detect: (root) => fileExists(root, ".github/workflows") && 
-      fs.readdirSync(path.join(root, ".github/workflows")).some(f => f.endsWith(".yml") || f.endsWith(".yaml")),
-    configPath: ".github/workflows/vibecheck.yml",
-  },
-  gitlabCI: {
-    name: "GitLab CI",
-    icon: "🦊",
-    detect: (root) => fileExists(root, ".gitlab-ci.yml"),
-    configPath: ".gitlab-ci.yml",
-  },
-  circleci: {
-    name: "CircleCI",
-    icon: "⭕",
-    detect: (root) => fileExists(root, ".circleci/config.yml"),
-    configPath: ".circleci/config.yml",
-  },
-  jenkins: {
-    name: "Jenkins",
-    icon: "🎩",
-    detect: (root) => fileExists(root, "Jenkinsfile"),
-    configPath: "Jenkinsfile",
-  },
-};
-
-// ============================================================================
-// DEPLOYMENT PLATFORM DETECTION
-// ============================================================================
-const DEPLOY_PLATFORMS = {
-  vercel: {
-    name: "Vercel",
-    icon: "▲",
-    detect: (root) => fileExists(root, "vercel.json") || fileExists(root, ".vercel"),
-    configPath: "vercel.json",
-  },
-  netlify: {
-    name: "Netlify",
-    icon: "◆",
-    detect: (root) => fileExists(root, "netlify.toml"),
-    configPath: "netlify.toml",
-  },
-  railway: {
-    name: "Railway",
-    icon: "🚂",
-    detect: (root) => fileExists(root, "railway.toml") || fileExists(root, "railway.json"),
-    configPath: "railway.toml",
-  },
-  render: {
-    name: "Render",
-    icon: "🎨",
-    detect: (root) => fileExists(root, "render.yaml"),
-    configPath: "render.yaml",
-  },
-  fly: {
-    name: "Fly.io",
-    icon: "🪁",
-    detect: (root) => fileExists(root, "fly.toml"),
-    configPath: "fly.toml",
-  },
-  docker: {
-    name: "Docker",
-    icon: "🐳",
-    detect: (root) => fileExists(root, "Dockerfile") || fileExists(root, "docker-compose.yml"),
-    configPath: "Dockerfile",
-  },
-  kubernetes: {
-    name: "Kubernetes",
-    icon: "☸️",
-    detect: (root) => fileExists(root, "k8s") || fileExists(root, "kubernetes") || 
-      fileExists(root, "charts") || fileExists(root, "helm"),
-    configPath: "k8s/",
-  },
-};
-
-// ============================================================================
-// TESTING FRAMEWORK DETECTION
-// ============================================================================
-const TEST_FRAMEWORKS = {
-  jest: {
-    name: "Jest",
-    icon: "🃏",
-    detect: (root, pkg) => {
-      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
-      return !!deps.jest || fileExists(root, "jest.config.js") || fileExists(root, "jest.config.ts");
-    },
-  },
-  vitest: {
-    name: "Vitest",
-    icon: "⚡",
-    detect: (root, pkg) => {
-      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
-      return !!deps.vitest || fileExists(root, "vitest.config.ts");
-    },
-  },
-  playwright: {
-    name: "Playwright",
-    icon: "🎭",
-    detect: (root, pkg) => {
-      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
-      return !!deps["@playwright/test"] || fileExists(root, "playwright.config.ts");
-    },
-  },
-  cypress: {
-    name: "Cypress",
-    icon: "🌲",
-    detect: (root, pkg) => {
-      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
-      return !!deps.cypress || fileExists(root, "cypress.config.ts") || fileExists(root, "cypress.config.js");
-    },
-  },
-};
-
-// ============================================================================
-// SECURITY TOOLS DETECTION
-// ============================================================================
-const SECURITY_TOOLS = {
-  eslintSecurity: {
-    name: "ESLint Security",
-    icon: "🔒",
-    detect: (root, pkg) => {
-      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
-      return !!deps["eslint-plugin-security"];
-    },
-  },
-  snyk: {
-    name: "Snyk",
-    icon: "🐕",
-    detect: (root) => fileExists(root, ".snyk"),
-  },
-  dependabot: {
-    name: "Dependabot",
-    icon: "🤖",
-    detect: (root) => fileExists(root, ".github/dependabot.yml"),
-  },
-  codeql: {
-    name: "CodeQL",
-    icon: "🔬",
-    detect: (root) => {
-      const workflowDir = path.join(root, ".github/workflows");
-      if (!fs.existsSync(workflowDir)) return false;
-      const files = fs.readdirSync(workflowDir);
-      return files.some(f => {
-        const content = readFileSafe(path.join(workflowDir, f));
-        return content.includes("codeql") || content.includes("CodeQL");
-      });
-    },
-  },
-};
-
-// ============================================================================
-// COMPREHENSIVE DETECTION
-// ============================================================================
-function detectAll(root) {
-  const pkgPath = path.join(root, "package.json");
-  const pkg = readJsonSafe(pkgPath);
-  
-  if (!pkg) {
-    return { error: "No package.json found", pkg: null };
-  }
-
-  const result = {
-    pkg,
-    packageManager: detectPackageManager(root),
-    monorepo: detectMonorepo(root, pkg),
-    frameworks: {},
-    databases: {},
-    auth: {},
-    payments: {},
-    ci: {},
-    deploy: {},
-    testing: {},
-    security: {},
-  };
-
-  // Detect all categories
-  for (const [key, fw] of Object.entries(FRAMEWORKS)) {
-    if (fw.detect(root, pkg)) {
-      result.frameworks[key] = { ...fw, detected: true };
-    }
-  }
-
-  for (const [key, db] of Object.entries(DATABASES)) {
-    if (db.detect(root, pkg)) {
-      result.databases[key] = { ...db, detected: true };
-    }
-  }
-
-  for (const [key, auth] of Object.entries(AUTH_PROVIDERS)) {
-    if (auth.detect(root, pkg)) {
-      result.auth[key] = { ...auth, detected: true };
-    }
-  }
-
-  for (const [key, pay] of Object.entries(PAYMENT_PROVIDERS)) {
-    if (pay.detect(root, pkg)) {
-      result.payments[key] = { ...pay, detected: true };
-    }
-  }
-
-  for (const [key, ci] of Object.entries(CI_PROVIDERS)) {
-    if (ci.detect(root)) {
-      result.ci[key] = { ...ci, detected: true };
-    }
-  }
-
-  for (const [key, dp] of Object.entries(DEPLOY_PLATFORMS)) {
-    if (dp.detect(root)) {
-      result.deploy[key] = { ...dp, detected: true };
-    }
-  }
-
-  for (const [key, tf] of Object.entries(TEST_FRAMEWORKS)) {
-    if (tf.detect(root, pkg)) {
-      result.testing[key] = { ...tf, detected: true };
-    }
-  }
-
-  for (const [key, st] of Object.entries(SECURITY_TOOLS)) {
-    if (st.detect(root, pkg)) {
-      result.security[key] = { ...st, detected: true };
-    }
-  }
-
-  // Aggregate invariants from detected frameworks and payments
-  result.invariants = aggregateInvariants(result);
-
-  // Aggregate checks
-  result.checks = aggregateChecks(result);
-
-  return result;
-}
-
-function detectPackageManager(root) {
-  if (fileExists(root, "pnpm-lock.yaml")) return "pnpm";
-  if (fileExists(root, "yarn.lock")) return "yarn";
-  if (fileExists(root, "bun.lockb")) return "bun";
-  if (fileExists(root, "package-lock.json")) return "npm";
-  return "npm";
-}
-
-function detectMonorepo(root, pkg) {
-  const indicators = {
-    pnpmWorkspaces: fileExists(root, "pnpm-workspace.yaml"),
-    lernaConfig: fileExists(root, "lerna.json"),
-    nxConfig: fileExists(root, "nx.json"),
-    turborepo: fileExists(root, "turbo.json"),
-    workspaces: Array.isArray(pkg?.workspaces) || typeof pkg?.workspaces === "object",
-  };
-  
-  const isMonorepo = Object.values(indicators).some(Boolean);
-  return { isMonorepo, indicators };
-}
-
-function aggregateInvariants(detection) {
-  const invariants = new Set();
-  
-  // From frameworks
-  for (const fw of Object.values(detection.frameworks)) {
-    if (fw.invariants) {
-      fw.invariants.forEach(inv => invariants.add(inv));
-    }
-  }
-  
-  // From payments
-  for (const pay of Object.values(detection.payments)) {
-    if (pay.invariants) {
-      pay.invariants.forEach(inv => invariants.add(inv));
-    }
-  }
-  
-  // Always include base invariants
-  invariants.add("INV_NO_HARDCODED_SECRETS");
-  
-  return Array.from(invariants).sort();
-}
-
-function aggregateChecks(detection) {
-  const checks = new Set(["security", "quality"]);
-  
-  for (const fw of Object.values(detection.frameworks)) {
-    if (fw.checks) {
-      fw.checks.forEach(c => checks.add(c));
-    }
-  }
-  
-  for (const db of Object.values(detection.databases)) {
-    if (db.checks) {
-      db.checks.forEach(c => checks.add(c));
-    }
-  }
-  
-  return Array.from(checks).sort();
-}
-
-// ============================================================================
-// EXPORTS
-// ============================================================================
-module.exports = {
-  detectAll,
-  detectPackageManager,
-  detectMonorepo,
-  FRAMEWORKS,
-  DATABASES,
-  AUTH_PROVIDERS,
-  PAYMENT_PROVIDERS,
-  CI_PROVIDERS,
-  DEPLOY_PLATFORMS,
-  TEST_FRAMEWORKS,
-  SECURITY_TOOLS,
-};
+// bin/runners/lib/enterprise-detect.js
+// Enterprise-grade project detection: frameworks, databases, cloud, CI/CD, security tools
+const fs = require("fs");
+const path = require("path");
+
+function fileExists(root, rel) {
+  return fs.existsSync(path.join(root, rel));
+}
+
+function readJsonSafe(filePath) {
+  try {
+    return JSON.parse(fs.readFileSync(filePath, "utf8"));
+  } catch {
+    return null;
+  }
+}
+
+function readFileSafe(filePath) {
+  try {
+    return fs.readFileSync(filePath, "utf8");
+  } catch {
+    return "";
+  }
+}
+
+// ============================================================================
+// FRAMEWORK DETECTION
+// ============================================================================
+const FRAMEWORKS = {
+  nextjs: {
+    name: "Next.js",
+    icon: "▲",
+    category: "frontend",
+    detect: (root, pkg) => {
+      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
+      return !!(deps.next || fileExists(root, "next.config.js") || 
+                fileExists(root, "next.config.mjs") || fileExists(root, "next.config.ts"));
+    },
+    checks: ["routes", "auth", "api", "security", "ssr"],
+    invariants: ["INV_NO_FAKE_SUCCESS", "INV_NO_ROUTE_INVENTION", "INV_NO_GHOST_AUTH"],
+  },
+  remix: {
+    name: "Remix",
+    icon: "💿",
+    category: "frontend",
+    detect: (root, pkg) => {
+      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
+      return !!deps["@remix-run/node"] || !!deps["@remix-run/react"];
+    },
+    checks: ["routes", "auth", "api", "security", "loaders"],
+    invariants: ["INV_NO_FAKE_SUCCESS", "INV_NO_ROUTE_INVENTION"],
+  },
+  nuxt: {
+    name: "Nuxt",
+    icon: "💚",
+    category: "frontend",
+    detect: (root, pkg) => {
+      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
+      return !!deps.nuxt || fileExists(root, "nuxt.config.ts") || fileExists(root, "nuxt.config.js");
+    },
+    checks: ["routes", "auth", "api", "security"],
+    invariants: ["INV_NO_FAKE_SUCCESS", "INV_NO_ROUTE_INVENTION"],
+  },
+  sveltekit: {
+    name: "SvelteKit",
+    icon: "🔥",
+    category: "frontend",
+    detect: (root, pkg) => {
+      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
+      return !!deps["@sveltejs/kit"] || fileExists(root, "svelte.config.js");
+    },
+    checks: ["routes", "auth", "api", "security"],
+    invariants: ["INV_NO_FAKE_SUCCESS", "INV_NO_ROUTE_INVENTION"],
+  },
+  react: {
+    name: "React",
+    icon: "⚛️",
+    category: "frontend",
+    detect: (root, pkg) => {
+      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
+      return !!deps.react && !FRAMEWORKS.nextjs.detect(root, pkg) && !FRAMEWORKS.remix.detect(root, pkg);
+    },
+    checks: ["components", "api", "security"],
+    invariants: ["INV_NO_FAKE_SUCCESS"],
+  },
+  vue: {
+    name: "Vue",
+    icon: "💚",
+    category: "frontend",
+    detect: (root, pkg) => {
+      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
+      return !!deps.vue && !FRAMEWORKS.nuxt.detect(root, pkg);
+    },
+    checks: ["components", "api", "security"],
+    invariants: ["INV_NO_FAKE_SUCCESS"],
+  },
+  fastify: {
+    name: "Fastify",
+    icon: "⚡",
+    category: "backend",
+    detect: (root, pkg) => {
+      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
+      return !!deps.fastify;
+    },
+    checks: ["routes", "auth", "api", "security", "webhooks"],
+    invariants: ["INV_NO_FAKE_SUCCESS", "INV_NO_ROUTE_INVENTION", "INV_NO_GHOST_AUTH", "INV_NO_SILENT_CATCH_AUTH"],
+  },
+  express: {
+    name: "Express",
+    icon: "🚂",
+    category: "backend",
+    detect: (root, pkg) => {
+      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
+      return !!deps.express;
+    },
+    checks: ["routes", "auth", "api", "security"],
+    invariants: ["INV_NO_FAKE_SUCCESS", "INV_NO_ROUTE_INVENTION", "INV_NO_GHOST_AUTH"],
+  },
+  hono: {
+    name: "Hono",
+    icon: "🔥",
+    category: "backend",
+    detect: (root, pkg) => {
+      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
+      return !!deps.hono;
+    },
+    checks: ["routes", "auth", "api", "security"],
+    invariants: ["INV_NO_FAKE_SUCCESS", "INV_NO_ROUTE_INVENTION"],
+  },
+  nestjs: {
+    name: "NestJS",
+    icon: "🐈",
+    category: "backend",
+    detect: (root, pkg) => {
+      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
+      return !!deps["@nestjs/core"];
+    },
+    checks: ["routes", "auth", "api", "security", "guards"],
+    invariants: ["INV_NO_FAKE_SUCCESS", "INV_NO_ROUTE_INVENTION", "INV_NO_GHOST_AUTH"],
+  },
+};
+
+// ============================================================================
+// DATABASE DETECTION
+// ============================================================================
+const DATABASES = {
+  prisma: {
+    name: "Prisma",
+    icon: "◮",
+    detect: (root, pkg) => {
+      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
+      return !!deps["@prisma/client"] || fileExists(root, "prisma/schema.prisma");
+    },
+    checks: ["migrations", "models"],
+  },
+  drizzle: {
+    name: "Drizzle",
+    icon: "💧",
+    detect: (root, pkg) => {
+      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
+      return !!deps["drizzle-orm"] || fileExists(root, "drizzle.config.ts");
+    },
+    checks: ["migrations", "schema"],
+  },
+  mongoose: {
+    name: "Mongoose",
+    icon: "🍃",
+    detect: (root, pkg) => {
+      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
+      return !!deps.mongoose;
+    },
+    checks: ["models", "connections"],
+  },
+  supabase: {
+    name: "Supabase",
+    icon: "⚡",
+    detect: (root, pkg) => {
+      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
+      return !!deps["@supabase/supabase-js"];
+    },
+    checks: ["rls", "auth", "realtime"],
+  },
+  firebase: {
+    name: "Firebase",
+    icon: "🔥",
+    detect: (root, pkg) => {
+      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
+      return !!deps.firebase || !!deps["firebase-admin"];
+    },
+    checks: ["rules", "auth", "functions"],
+  },
+  redis: {
+    name: "Redis",
+    icon: "🔴",
+    detect: (root, pkg) => {
+      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
+      return !!deps.redis || !!deps.ioredis || !!deps["@upstash/redis"];
+    },
+    checks: ["connections", "caching"],
+  },
+};
+
+// ============================================================================
+// AUTH PROVIDER DETECTION
+// ============================================================================
+const AUTH_PROVIDERS = {
+  nextauth: {
+    name: "NextAuth.js",
+    icon: "🔐",
+    detect: (root, pkg) => {
+      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
+      return !!deps["next-auth"] || !!deps["@auth/core"];
+    },
+    checks: ["session", "providers", "callbacks"],
+  },
+  clerk: {
+    name: "Clerk",
+    icon: "🔑",
+    detect: (root, pkg) => {
+      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
+      return !!deps["@clerk/nextjs"] || !!deps["@clerk/clerk-sdk-node"];
+    },
+    checks: ["middleware", "organizations"],
+  },
+  auth0: {
+    name: "Auth0",
+    icon: "🔒",
+    detect: (root, pkg) => {
+      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
+      return !!deps["@auth0/nextjs-auth0"] || !!deps["auth0"];
+    },
+    checks: ["rules", "actions", "rbac"],
+  },
+  lucia: {
+    name: "Lucia",
+    icon: "🔐",
+    detect: (root, pkg) => {
+      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
+      return !!deps.lucia;
+    },
+    checks: ["sessions", "adapters"],
+  },
+  passport: {
+    name: "Passport.js",
+    icon: "🛂",
+    detect: (root, pkg) => {
+      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
+      return !!deps.passport;
+    },
+    checks: ["strategies", "serialization"],
+  },
+};
+
+// ============================================================================
+// PAYMENT PROVIDER DETECTION
+// ============================================================================
+const PAYMENT_PROVIDERS = {
+  stripe: {
+    name: "Stripe",
+    icon: "💳",
+    detect: (root, pkg) => {
+      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
+      return !!deps.stripe || !!deps["@stripe/stripe-js"];
+    },
+    checks: ["webhooks", "idempotency", "signature"],
+    invariants: ["INV_NO_BYPASS_ENTITLEMENTS", "INV_STRIPE_WEBHOOK_VERIFIED", "INV_STRIPE_IDEMPOTENT"],
+  },
+  lemonSqueezy: {
+    name: "Lemon Squeezy",
+    icon: "🍋",
+    detect: (root, pkg) => {
+      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
+      return !!deps["@lemonsqueezy/lemonsqueezy.js"];
+    },
+    checks: ["webhooks", "subscriptions"],
+  },
+  paddle: {
+    name: "Paddle",
+    icon: "🏓",
+    detect: (root, pkg) => {
+      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
+      return !!deps["@paddle/paddle-js"];
+    },
+    checks: ["webhooks", "subscriptions"],
+  },
+};
+
+// ============================================================================
+// CI/CD DETECTION
+// ============================================================================
+const CI_PROVIDERS = {
+  githubActions: {
+    name: "GitHub Actions",
+    icon: "🐙",
+    detect: (root) => fileExists(root, ".github/workflows") && 
+      fs.readdirSync(path.join(root, ".github/workflows")).some(f => f.endsWith(".yml") || f.endsWith(".yaml")),
+    configPath: ".github/workflows/vibecheck.yml",
+  },
+  gitlabCI: {
+    name: "GitLab CI",
+    icon: "🦊",
+    detect: (root) => fileExists(root, ".gitlab-ci.yml"),
+    configPath: ".gitlab-ci.yml",
+  },
+  circleci: {
+    name: "CircleCI",
+    icon: "⭕",
+    detect: (root) => fileExists(root, ".circleci/config.yml"),
+    configPath: ".circleci/config.yml",
+  },
+  jenkins: {
+    name: "Jenkins",
+    icon: "🎩",
+    detect: (root) => fileExists(root, "Jenkinsfile"),
+    configPath: "Jenkinsfile",
+  },
+};
+
+// ============================================================================
+// DEPLOYMENT PLATFORM DETECTION
+// ============================================================================
+const DEPLOY_PLATFORMS = {
+  vercel: {
+    name: "Vercel",
+    icon: "▲",
+    detect: (root) => fileExists(root, "vercel.json") || fileExists(root, ".vercel"),
+    configPath: "vercel.json",
+  },
+  netlify: {
+    name: "Netlify",
+    icon: "◆",
+    detect: (root) => fileExists(root, "netlify.toml"),
+    configPath: "netlify.toml",
+  },
+  railway: {
+    name: "Railway",
+    icon: "🚂",
+    detect: (root) => fileExists(root, "railway.toml") || fileExists(root, "railway.json"),
+    configPath: "railway.toml",
+  },
+  render: {
+    name: "Render",
+    icon: "🎨",
+    detect: (root) => fileExists(root, "render.yaml"),
+    configPath: "render.yaml",
+  },
+  fly: {
+    name: "Fly.io",
+    icon: "🪁",
+    detect: (root) => fileExists(root, "fly.toml"),
+    configPath: "fly.toml",
+  },
+  docker: {
+    name: "Docker",
+    icon: "🐳",
+    detect: (root) => fileExists(root, "Dockerfile") || fileExists(root, "docker-compose.yml"),
+    configPath: "Dockerfile",
+  },
+  kubernetes: {
+    name: "Kubernetes",
+    icon: "☸️",
+    detect: (root) => fileExists(root, "k8s") || fileExists(root, "kubernetes") || 
+      fileExists(root, "charts") || fileExists(root, "helm"),
+    configPath: "k8s/",
+  },
+};
+
+// ============================================================================
+// TESTING FRAMEWORK DETECTION
+// ============================================================================
+const TEST_FRAMEWORKS = {
+  jest: {
+    name: "Jest",
+    icon: "🃏",
+    detect: (root, pkg) => {
+      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
+      return !!deps.jest || fileExists(root, "jest.config.js") || fileExists(root, "jest.config.ts");
+    },
+  },
+  vitest: {
+    name: "Vitest",
+    icon: "⚡",
+    detect: (root, pkg) => {
+      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
+      return !!deps.vitest || fileExists(root, "vitest.config.ts");
+    },
+  },
+  playwright: {
+    name: "Playwright",
+    icon: "🎭",
+    detect: (root, pkg) => {
+      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
+      return !!deps["@playwright/test"] || fileExists(root, "playwright.config.ts");
+    },
+  },
+  cypress: {
+    name: "Cypress",
+    icon: "🌲",
+    detect: (root, pkg) => {
+      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
+      return !!deps.cypress || fileExists(root, "cypress.config.ts") || fileExists(root, "cypress.config.js");
+    },
+  },
+};
+
+// ============================================================================
+// SECURITY TOOLS DETECTION
+// ============================================================================
+const SECURITY_TOOLS = {
+  eslintSecurity: {
+    name: "ESLint Security",
+    icon: "🔒",
+    detect: (root, pkg) => {
+      const deps = { ...(pkg?.dependencies || {}), ...(pkg?.devDependencies || {}) };
+      return !!deps["eslint-plugin-security"];
+    },
+  },
+  snyk: {
+    name: "Snyk",
+    icon: "🐕",
+    detect: (root) => fileExists(root, ".snyk"),
+  },
+  dependabot: {
+    name: "Dependabot",
+    icon: "🤖",
+    detect: (root) => fileExists(root, ".github/dependabot.yml"),
+  },
+  codeql: {
+    name: "CodeQL",
+    icon: "🔬",
+    detect: (root) => {
+      const workflowDir = path.join(root, ".github/workflows");
+      if (!fs.existsSync(workflowDir)) return false;
+      const files = fs.readdirSync(workflowDir);
+      return files.some(f => {
+        const content = readFileSafe(path.join(workflowDir, f));
+        return content.includes("codeql") || content.includes("CodeQL");
+      });
+    },
+  },
+};
+
+// ============================================================================
+// COMPREHENSIVE DETECTION
+// ============================================================================
+function detectAll(root) {
+  const pkgPath = path.join(root, "package.json");
+  const pkg = readJsonSafe(pkgPath);
+  
+  if (!pkg) {
+    return { error: "No package.json found", pkg: null };
+  }
+
+  const result = {
+    pkg,
+    packageManager: detectPackageManager(root),
+    monorepo: detectMonorepo(root, pkg),
+    frameworks: {},
+    databases: {},
+    auth: {},
+    payments: {},
+    ci: {},
+    deploy: {},
+    testing: {},
+    security: {},
+  };
+
+  // Detect all categories
+  for (const [key, fw] of Object.entries(FRAMEWORKS)) {
+    if (fw.detect(root, pkg)) {
+      result.frameworks[key] = { ...fw, detected: true };
+    }
+  }
+
+  for (const [key, db] of Object.entries(DATABASES)) {
+    if (db.detect(root, pkg)) {
+      result.databases[key] = { ...db, detected: true };
+    }
+  }
+
+  for (const [key, auth] of Object.entries(AUTH_PROVIDERS)) {
+    if (auth.detect(root, pkg)) {
+      result.auth[key] = { ...auth, detected: true };
+    }
+  }
+
+  for (const [key, pay] of Object.entries(PAYMENT_PROVIDERS)) {
+    if (pay.detect(root, pkg)) {
+      result.payments[key] = { ...pay, detected: true };
+    }
+  }
+
+  for (const [key, ci] of Object.entries(CI_PROVIDERS)) {
+    if (ci.detect(root)) {
+      result.ci[key] = { ...ci, detected: true };
+    }
+  }
+
+  for (const [key, dp] of Object.entries(DEPLOY_PLATFORMS)) {
+    if (dp.detect(root)) {
+      result.deploy[key] = { ...dp, detected: true };
+    }
+  }
+
+  for (const [key, tf] of Object.entries(TEST_FRAMEWORKS)) {
+    if (tf.detect(root, pkg)) {
+      result.testing[key] = { ...tf, detected: true };
+    }
+  }
+
+  for (const [key, st] of Object.entries(SECURITY_TOOLS)) {
+    if (st.detect(root, pkg)) {
+      result.security[key] = { ...st, detected: true };
+    }
+  }
+
+  // Aggregate invariants from detected frameworks and payments
+  result.invariants = aggregateInvariants(result);
+
+  // Aggregate checks
+  result.checks = aggregateChecks(result);
+
+  return result;
+}
+
+function detectPackageManager(root) {
+  if (fileExists(root, "pnpm-lock.yaml")) return "pnpm";
+  if (fileExists(root, "yarn.lock")) return "yarn";
+  if (fileExists(root, "bun.lockb")) return "bun";
+  if (fileExists(root, "package-lock.json")) return "npm";
+  return "npm";
+}
+
+function detectMonorepo(root, pkg) {
+  const indicators = {
+    pnpmWorkspaces: fileExists(root, "pnpm-workspace.yaml"),
+    lernaConfig: fileExists(root, "lerna.json"),
+    nxConfig: fileExists(root, "nx.json"),
+    turborepo: fileExists(root, "turbo.json"),
+    workspaces: Array.isArray(pkg?.workspaces) || typeof pkg?.workspaces === "object",
+  };
+  
+  const isMonorepo = Object.values(indicators).some(Boolean);
+  return { isMonorepo, indicators };
+}
+
+function aggregateInvariants(detection) {
+  const invariants = new Set();
+  
+  // From frameworks
+  for (const fw of Object.values(detection.frameworks)) {
+    if (fw.invariants) {
+      fw.invariants.forEach(inv => invariants.add(inv));
+    }
+  }
+  
+  // From payments
+  for (const pay of Object.values(detection.payments)) {
+    if (pay.invariants) {
+      pay.invariants.forEach(inv => invariants.add(inv));
+    }
+  }
+  
+  // Always include base invariants
+  invariants.add("INV_NO_HARDCODED_SECRETS");
+  
+  return Array.from(invariants).sort();
+}
+
+function aggregateChecks(detection) {
+  const checks = new Set(["security", "quality"]);
+  
+  for (const fw of Object.values(detection.frameworks)) {
+    if (fw.checks) {
+      fw.checks.forEach(c => checks.add(c));
+    }
+  }
+  
+  for (const db of Object.values(detection.databases)) {
+    if (db.checks) {
+      db.checks.forEach(c => checks.add(c));
+    }
+  }
+  
+  return Array.from(checks).sort();
+}
+
+// ============================================================================
+// EXPORTS
+// ============================================================================
+module.exports = {
+  detectAll,
+  detectPackageManager,
+  detectMonorepo,
+  FRAMEWORKS,
+  DATABASES,
+  AUTH_PROVIDERS,
+  PAYMENT_PROVIDERS,
+  CI_PROVIDERS,
+  DEPLOY_PLATFORMS,
+  TEST_FRAMEWORKS,
+  SECURITY_TOOLS,
+};