@vibecheckai/cli 3.2.6 → 3.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (84) hide show
  1. package/bin/registry.js +192 -5
  2. package/bin/runners/lib/agent-firewall/change-packet/builder.js +280 -6
  3. package/bin/runners/lib/agent-firewall/critic/index.js +151 -0
  4. package/bin/runners/lib/agent-firewall/critic/judge.js +432 -0
  5. package/bin/runners/lib/agent-firewall/critic/prompts.js +305 -0
  6. package/bin/runners/lib/agent-firewall/lawbook/distributor.js +465 -0
  7. package/bin/runners/lib/agent-firewall/lawbook/evaluator.js +604 -0
  8. package/bin/runners/lib/agent-firewall/lawbook/index.js +304 -0
  9. package/bin/runners/lib/agent-firewall/lawbook/registry.js +514 -0
  10. package/bin/runners/lib/agent-firewall/lawbook/schema.js +420 -0
  11. package/bin/runners/lib/agent-firewall/logger.js +141 -0
  12. package/bin/runners/lib/agent-firewall/policy/loader.js +312 -4
  13. package/bin/runners/lib/agent-firewall/policy/rules/ghost-env.js +113 -1
  14. package/bin/runners/lib/agent-firewall/policy/rules/ghost-route.js +133 -6
  15. package/bin/runners/lib/agent-firewall/proposal/extractor.js +394 -0
  16. package/bin/runners/lib/agent-firewall/proposal/index.js +212 -0
  17. package/bin/runners/lib/agent-firewall/proposal/schema.js +251 -0
  18. package/bin/runners/lib/agent-firewall/proposal/validator.js +386 -0
  19. package/bin/runners/lib/agent-firewall/reality/index.js +332 -0
  20. package/bin/runners/lib/agent-firewall/reality/state.js +625 -0
  21. package/bin/runners/lib/agent-firewall/reality/watcher.js +322 -0
  22. package/bin/runners/lib/agent-firewall/risk/index.js +173 -0
  23. package/bin/runners/lib/agent-firewall/risk/scorer.js +328 -0
  24. package/bin/runners/lib/agent-firewall/risk/thresholds.js +321 -0
  25. package/bin/runners/lib/agent-firewall/risk/vectors.js +421 -0
  26. package/bin/runners/lib/agent-firewall/simulator/diff-simulator.js +472 -0
  27. package/bin/runners/lib/agent-firewall/simulator/import-resolver.js +346 -0
  28. package/bin/runners/lib/agent-firewall/simulator/index.js +181 -0
  29. package/bin/runners/lib/agent-firewall/simulator/route-validator.js +380 -0
  30. package/bin/runners/lib/agent-firewall/time-machine/incident-correlator.js +661 -0
  31. package/bin/runners/lib/agent-firewall/time-machine/index.js +267 -0
  32. package/bin/runners/lib/agent-firewall/time-machine/replay-engine.js +436 -0
  33. package/bin/runners/lib/agent-firewall/time-machine/state-reconstructor.js +490 -0
  34. package/bin/runners/lib/agent-firewall/time-machine/timeline-builder.js +530 -0
  35. package/bin/runners/lib/analyzers.js +81 -18
  36. package/bin/runners/lib/authority-badge.js +425 -0
  37. package/bin/runners/lib/cli-output.js +7 -1
  38. package/bin/runners/lib/error-handler.js +16 -9
  39. package/bin/runners/lib/exit-codes.js +275 -0
  40. package/bin/runners/lib/global-flags.js +37 -0
  41. package/bin/runners/lib/help-formatter.js +413 -0
  42. package/bin/runners/lib/logger.js +38 -0
  43. package/bin/runners/lib/unified-cli-output.js +604 -0
  44. package/bin/runners/lib/upsell.js +148 -0
  45. package/bin/runners/runApprove.js +1200 -0
  46. package/bin/runners/runAuth.js +324 -95
  47. package/bin/runners/runCheckpoint.js +39 -21
  48. package/bin/runners/runClassify.js +859 -0
  49. package/bin/runners/runContext.js +136 -24
  50. package/bin/runners/runDoctor.js +108 -68
  51. package/bin/runners/runFix.js +6 -5
  52. package/bin/runners/runGuard.js +212 -118
  53. package/bin/runners/runInit.js +3 -2
  54. package/bin/runners/runMcp.js +130 -52
  55. package/bin/runners/runPolish.js +43 -20
  56. package/bin/runners/runProve.js +1 -2
  57. package/bin/runners/runReport.js +3 -2
  58. package/bin/runners/runScan.js +63 -44
  59. package/bin/runners/runShip.js +3 -4
  60. package/bin/runners/runValidate.js +19 -2
  61. package/bin/runners/runWatch.js +104 -53
  62. package/bin/vibecheck.js +106 -19
  63. package/mcp-server/HARDENING_SUMMARY.md +299 -0
  64. package/mcp-server/agent-firewall-interceptor.js +367 -31
  65. package/mcp-server/authority-tools.js +569 -0
  66. package/mcp-server/conductor/conflict-resolver.js +588 -0
  67. package/mcp-server/conductor/execution-planner.js +544 -0
  68. package/mcp-server/conductor/index.js +377 -0
  69. package/mcp-server/conductor/lock-manager.js +615 -0
  70. package/mcp-server/conductor/request-queue.js +550 -0
  71. package/mcp-server/conductor/session-manager.js +500 -0
  72. package/mcp-server/conductor/tools.js +510 -0
  73. package/mcp-server/index.js +1149 -243
  74. package/mcp-server/lib/{api-client.js → api-client.cjs} +40 -4
  75. package/mcp-server/lib/logger.cjs +30 -0
  76. package/mcp-server/logger.js +173 -0
  77. package/mcp-server/package.json +2 -2
  78. package/mcp-server/premium-tools.js +2 -2
  79. package/mcp-server/tier-auth.js +245 -35
  80. package/mcp-server/truth-firewall-tools.js +145 -15
  81. package/mcp-server/vibecheck-tools.js +2 -2
  82. package/package.json +2 -3
  83. package/mcp-server/index.old.js +0 -4137
  84. package/mcp-server/package-lock.json +0 -165
@@ -0,0 +1,332 @@
1
+ /**
2
+ * Reality Engine
3
+ *
4
+ * Entry point for the Reality State Engine.
5
+ * Provides a unified API for accessing and monitoring repository reality.
6
+ *
7
+ * Usage:
8
+ * const { reality } = require('./reality');
9
+ *
10
+ * // Get current state
11
+ * const state = reality.getState(projectRoot);
12
+ *
13
+ * // Check if something exists
14
+ * reality.routeExists(state, 'GET', '/api/users');
15
+ * reality.envVarExists(state, 'JWT_SECRET');
16
+ *
17
+ * // Watch for changes
18
+ * const watcher = reality.watch(projectRoot);
19
+ * watcher.on('change', ({ state, changes }) => { ... });
20
+ */
21
+
22
+ "use strict";
23
+
24
+ const {
25
+ buildRealityState,
26
+ getRealityState,
27
+ invalidateCache,
28
+ routeExists,
29
+ envVarExists,
30
+ fileExists,
31
+ getFilesByDomain,
32
+ getStateSummary,
33
+ classifyFileDomain,
34
+ hashFile,
35
+ } = require("./state");
36
+
37
+ const { RealityWatcher, createWatcher } = require("./watcher");
38
+
39
+ /**
40
+ * Reality Engine singleton
41
+ */
42
+ const reality = {
43
+ /**
44
+ * Get the current reality state for a project
45
+ * @param {string} projectRoot - Project root directory
46
+ * @param {Object} options - Options
47
+ * @returns {RealityState} The reality state
48
+ */
49
+ getState(projectRoot, options = {}) {
50
+ return getRealityState(projectRoot, options);
51
+ },
52
+
53
+ /**
54
+ * Build a fresh reality state (bypasses cache)
55
+ * @param {string} projectRoot - Project root directory
56
+ * @param {Object} options - Options
57
+ * @returns {RealityState} The reality state
58
+ */
59
+ build(projectRoot, options = {}) {
60
+ return buildRealityState(projectRoot, { ...options, forceRefresh: true });
61
+ },
62
+
63
+ /**
64
+ * Invalidate the cached reality state
65
+ */
66
+ invalidate() {
67
+ invalidateCache();
68
+ },
69
+
70
+ /**
71
+ * Create a watcher for reality state changes
72
+ * @param {string} projectRoot - Project root directory
73
+ * @param {Object} options - Watcher options
74
+ * @returns {RealityWatcher} The watcher instance
75
+ */
76
+ watch(projectRoot, options = {}) {
77
+ const watcher = createWatcher(projectRoot, options);
78
+ return watcher;
79
+ },
80
+
81
+ /**
82
+ * Check if a route exists in the reality state
83
+ * @param {RealityState} state - Reality state
84
+ * @param {string} method - HTTP method
85
+ * @param {string} path - Route path
86
+ * @returns {boolean} True if route exists
87
+ */
88
+ routeExists(state, method, path) {
89
+ return routeExists(state, method, path);
90
+ },
91
+
92
+ /**
93
+ * Check if an environment variable exists (is declared)
94
+ * @param {RealityState} state - Reality state
95
+ * @param {string} varName - Variable name
96
+ * @returns {boolean} True if env var is declared
97
+ */
98
+ envVarExists(state, varName) {
99
+ return envVarExists(state, varName);
100
+ },
101
+
102
+ /**
103
+ * Check if a file exists in the reality state
104
+ * @param {RealityState} state - Reality state
105
+ * @param {string} filePath - File path (relative to project root)
106
+ * @returns {boolean} True if file exists
107
+ */
108
+ fileExists(state, filePath) {
109
+ return fileExists(state, filePath);
110
+ },
111
+
112
+ /**
113
+ * Get all files in a specific domain
114
+ * @param {RealityState} state - Reality state
115
+ * @param {string} domain - Domain name (auth, payments, routes, etc.)
116
+ * @returns {Array} Array of file objects
117
+ */
118
+ getFilesByDomain(state, domain) {
119
+ return getFilesByDomain(state, domain);
120
+ },
121
+
122
+ /**
123
+ * Get a summary of the reality state
124
+ * @param {RealityState} state - Reality state
125
+ * @returns {Object} Summary object
126
+ */
127
+ getSummary(state) {
128
+ return getStateSummary(state);
129
+ },
130
+
131
+ /**
132
+ * Classify a file path into a domain
133
+ * @param {string} filePath - File path
134
+ * @returns {string} Domain name
135
+ */
136
+ classifyDomain(filePath) {
137
+ return classifyFileDomain(filePath);
138
+ },
139
+
140
+ /**
141
+ * Calculate a file's content hash
142
+ * @param {string} filePath - Absolute file path
143
+ * @returns {string|null} Hash or null if file can't be read
144
+ */
145
+ hashFile(filePath) {
146
+ return hashFile(filePath);
147
+ },
148
+
149
+ /**
150
+ * Validate assumptions against reality
151
+ * @param {RealityState} state - Reality state
152
+ * @param {Array} assumptions - Array of assumptions to validate
153
+ * @returns {Object} Validation results
154
+ */
155
+ validateAssumptions(state, assumptions) {
156
+ const results = {
157
+ valid: [],
158
+ invalid: [],
159
+ unknown: [],
160
+ };
161
+
162
+ for (const assumption of assumptions) {
163
+ const result = {
164
+ assumption,
165
+ status: "unknown",
166
+ evidence: null,
167
+ };
168
+
169
+ switch (assumption.type) {
170
+ case "env":
171
+ if (envVarExists(state, assumption.key)) {
172
+ result.status = "valid";
173
+ result.evidence = state.envVars.get(assumption.key);
174
+ } else {
175
+ result.status = "invalid";
176
+ result.evidence = `Environment variable '${assumption.key}' is not declared`;
177
+ }
178
+ break;
179
+
180
+ case "route":
181
+ if (routeExists(state, assumption.method || "GET", assumption.path)) {
182
+ result.status = "valid";
183
+ const route = state.routes.find(r =>
184
+ r.path === assumption.path ||
185
+ r.method.toUpperCase() === (assumption.method || "GET").toUpperCase()
186
+ );
187
+ result.evidence = route;
188
+ } else {
189
+ result.status = "invalid";
190
+ result.evidence = `Route '${assumption.method || "GET"} ${assumption.path}' is not registered`;
191
+ }
192
+ break;
193
+
194
+ case "file":
195
+ if (fileExists(state, assumption.path)) {
196
+ result.status = "valid";
197
+ result.evidence = state.files.get(assumption.path.replace(/\\/g, "/"));
198
+ } else {
199
+ result.status = "invalid";
200
+ result.evidence = `File '${assumption.path}' does not exist`;
201
+ }
202
+ break;
203
+
204
+ case "service":
205
+ const service = state.services.find(s =>
206
+ s.name === assumption.name || s.name === assumption.key
207
+ );
208
+ if (service) {
209
+ result.status = "valid";
210
+ result.evidence = service;
211
+ } else {
212
+ result.status = "invalid";
213
+ result.evidence = `Service '${assumption.name || assumption.key}' is not registered`;
214
+ }
215
+ break;
216
+
217
+ default:
218
+ result.status = "unknown";
219
+ result.evidence = `Unknown assumption type: ${assumption.type}`;
220
+ }
221
+
222
+ if (result.status === "valid") {
223
+ results.valid.push(result);
224
+ } else if (result.status === "invalid") {
225
+ results.invalid.push(result);
226
+ } else {
227
+ results.unknown.push(result);
228
+ }
229
+ }
230
+
231
+ return results;
232
+ },
233
+
234
+ /**
235
+ * Get reality diff between two states
236
+ * @param {RealityState} oldState - Previous state
237
+ * @param {RealityState} newState - Current state
238
+ * @returns {Object} Diff object
239
+ */
240
+ diff(oldState, newState) {
241
+ const diff = {
242
+ files: {
243
+ added: [],
244
+ removed: [],
245
+ modified: [],
246
+ },
247
+ routes: {
248
+ added: [],
249
+ removed: [],
250
+ },
251
+ envVars: {
252
+ added: [],
253
+ removed: [],
254
+ },
255
+ };
256
+
257
+ // File diff
258
+ const oldFiles = new Set(oldState.files.keys());
259
+ const newFiles = new Set(newState.files.keys());
260
+
261
+ for (const file of newFiles) {
262
+ if (!oldFiles.has(file)) {
263
+ diff.files.added.push(file);
264
+ } else {
265
+ const oldMeta = oldState.files.get(file);
266
+ const newMeta = newState.files.get(file);
267
+ if (oldMeta.hash !== newMeta.hash) {
268
+ diff.files.modified.push(file);
269
+ }
270
+ }
271
+ }
272
+
273
+ for (const file of oldFiles) {
274
+ if (!newFiles.has(file)) {
275
+ diff.files.removed.push(file);
276
+ }
277
+ }
278
+
279
+ // Route diff
280
+ const oldRoutes = new Set(oldState.routes.map(r => `${r.method}:${r.path}`));
281
+ const newRoutes = new Set(newState.routes.map(r => `${r.method}:${r.path}`));
282
+
283
+ for (const route of newState.routes) {
284
+ const key = `${route.method}:${route.path}`;
285
+ if (!oldRoutes.has(key)) {
286
+ diff.routes.added.push(route);
287
+ }
288
+ }
289
+
290
+ for (const route of oldState.routes) {
291
+ const key = `${route.method}:${route.path}`;
292
+ if (!newRoutes.has(key)) {
293
+ diff.routes.removed.push(route);
294
+ }
295
+ }
296
+
297
+ // Env var diff
298
+ const oldEnvVars = new Set(oldState.envVars.keys());
299
+ const newEnvVars = new Set(newState.envVars.keys());
300
+
301
+ for (const varName of newEnvVars) {
302
+ if (!oldEnvVars.has(varName)) {
303
+ diff.envVars.added.push(varName);
304
+ }
305
+ }
306
+
307
+ for (const varName of oldEnvVars) {
308
+ if (!newEnvVars.has(varName)) {
309
+ diff.envVars.removed.push(varName);
310
+ }
311
+ }
312
+
313
+ return diff;
314
+ },
315
+ };
316
+
317
+ module.exports = {
318
+ reality,
319
+ RealityWatcher,
320
+ createWatcher,
321
+ // Re-export individual functions for direct access
322
+ buildRealityState,
323
+ getRealityState,
324
+ invalidateCache,
325
+ routeExists,
326
+ envVarExists,
327
+ fileExists,
328
+ getFilesByDomain,
329
+ getStateSummary,
330
+ classifyFileDomain,
331
+ hashFile,
332
+ };