@vibecheckai/cli 3.2.6 → 3.3.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/bin/registry.js +192 -5
- package/bin/runners/lib/agent-firewall/change-packet/builder.js +280 -6
- package/bin/runners/lib/agent-firewall/critic/index.js +151 -0
- package/bin/runners/lib/agent-firewall/critic/judge.js +432 -0
- package/bin/runners/lib/agent-firewall/critic/prompts.js +305 -0
- package/bin/runners/lib/agent-firewall/lawbook/distributor.js +465 -0
- package/bin/runners/lib/agent-firewall/lawbook/evaluator.js +604 -0
- package/bin/runners/lib/agent-firewall/lawbook/index.js +304 -0
- package/bin/runners/lib/agent-firewall/lawbook/registry.js +514 -0
- package/bin/runners/lib/agent-firewall/lawbook/schema.js +420 -0
- package/bin/runners/lib/agent-firewall/logger.js +141 -0
- package/bin/runners/lib/agent-firewall/policy/loader.js +312 -4
- package/bin/runners/lib/agent-firewall/policy/rules/ghost-env.js +113 -1
- package/bin/runners/lib/agent-firewall/policy/rules/ghost-route.js +133 -6
- package/bin/runners/lib/agent-firewall/proposal/extractor.js +394 -0
- package/bin/runners/lib/agent-firewall/proposal/index.js +212 -0
- package/bin/runners/lib/agent-firewall/proposal/schema.js +251 -0
- package/bin/runners/lib/agent-firewall/proposal/validator.js +386 -0
- package/bin/runners/lib/agent-firewall/reality/index.js +332 -0
- package/bin/runners/lib/agent-firewall/reality/state.js +625 -0
- package/bin/runners/lib/agent-firewall/reality/watcher.js +322 -0
- package/bin/runners/lib/agent-firewall/risk/index.js +173 -0
- package/bin/runners/lib/agent-firewall/risk/scorer.js +328 -0
- package/bin/runners/lib/agent-firewall/risk/thresholds.js +321 -0
- package/bin/runners/lib/agent-firewall/risk/vectors.js +421 -0
- package/bin/runners/lib/agent-firewall/simulator/diff-simulator.js +472 -0
- package/bin/runners/lib/agent-firewall/simulator/import-resolver.js +346 -0
- package/bin/runners/lib/agent-firewall/simulator/index.js +181 -0
- package/bin/runners/lib/agent-firewall/simulator/route-validator.js +380 -0
- package/bin/runners/lib/agent-firewall/time-machine/incident-correlator.js +661 -0
- package/bin/runners/lib/agent-firewall/time-machine/index.js +267 -0
- package/bin/runners/lib/agent-firewall/time-machine/replay-engine.js +436 -0
- package/bin/runners/lib/agent-firewall/time-machine/state-reconstructor.js +490 -0
- package/bin/runners/lib/agent-firewall/time-machine/timeline-builder.js +530 -0
- package/bin/runners/lib/analyzers.js +81 -18
- package/bin/runners/lib/authority-badge.js +425 -0
- package/bin/runners/lib/cli-output.js +7 -1
- package/bin/runners/lib/error-handler.js +16 -9
- package/bin/runners/lib/exit-codes.js +275 -0
- package/bin/runners/lib/global-flags.js +37 -0
- package/bin/runners/lib/help-formatter.js +413 -0
- package/bin/runners/lib/logger.js +38 -0
- package/bin/runners/lib/unified-cli-output.js +604 -0
- package/bin/runners/lib/upsell.js +148 -0
- package/bin/runners/runApprove.js +1200 -0
- package/bin/runners/runAuth.js +324 -95
- package/bin/runners/runCheckpoint.js +39 -21
- package/bin/runners/runClassify.js +859 -0
- package/bin/runners/runContext.js +136 -24
- package/bin/runners/runDoctor.js +108 -68
- package/bin/runners/runFix.js +6 -5
- package/bin/runners/runGuard.js +212 -118
- package/bin/runners/runInit.js +3 -2
- package/bin/runners/runMcp.js +130 -52
- package/bin/runners/runPolish.js +43 -20
- package/bin/runners/runProve.js +1 -2
- package/bin/runners/runReport.js +3 -2
- package/bin/runners/runScan.js +63 -44
- package/bin/runners/runShip.js +3 -4
- package/bin/runners/runValidate.js +19 -2
- package/bin/runners/runWatch.js +104 -53
- package/bin/vibecheck.js +106 -19
- package/mcp-server/HARDENING_SUMMARY.md +299 -0
- package/mcp-server/agent-firewall-interceptor.js +367 -31
- package/mcp-server/authority-tools.js +569 -0
- package/mcp-server/conductor/conflict-resolver.js +588 -0
- package/mcp-server/conductor/execution-planner.js +544 -0
- package/mcp-server/conductor/index.js +377 -0
- package/mcp-server/conductor/lock-manager.js +615 -0
- package/mcp-server/conductor/request-queue.js +550 -0
- package/mcp-server/conductor/session-manager.js +500 -0
- package/mcp-server/conductor/tools.js +510 -0
- package/mcp-server/index.js +1149 -243
- package/mcp-server/lib/{api-client.js → api-client.cjs} +40 -4
- package/mcp-server/lib/logger.cjs +30 -0
- package/mcp-server/logger.js +173 -0
- package/mcp-server/package.json +2 -2
- package/mcp-server/premium-tools.js +2 -2
- package/mcp-server/tier-auth.js +245 -35
- package/mcp-server/truth-firewall-tools.js +145 -15
- package/mcp-server/vibecheck-tools.js +2 -2
- package/package.json +2 -3
- package/mcp-server/index.old.js +0 -4137
- package/mcp-server/package-lock.json +0 -165
|
@@ -0,0 +1,332 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Reality Engine
|
|
3
|
+
*
|
|
4
|
+
* Entry point for the Reality State Engine.
|
|
5
|
+
* Provides a unified API for accessing and monitoring repository reality.
|
|
6
|
+
*
|
|
7
|
+
* Usage:
|
|
8
|
+
* const { reality } = require('./reality');
|
|
9
|
+
*
|
|
10
|
+
* // Get current state
|
|
11
|
+
* const state = reality.getState(projectRoot);
|
|
12
|
+
*
|
|
13
|
+
* // Check if something exists
|
|
14
|
+
* reality.routeExists(state, 'GET', '/api/users');
|
|
15
|
+
* reality.envVarExists(state, 'JWT_SECRET');
|
|
16
|
+
*
|
|
17
|
+
* // Watch for changes
|
|
18
|
+
* const watcher = reality.watch(projectRoot);
|
|
19
|
+
* watcher.on('change', ({ state, changes }) => { ... });
|
|
20
|
+
*/
|
|
21
|
+
|
|
22
|
+
"use strict";
|
|
23
|
+
|
|
24
|
+
const {
|
|
25
|
+
buildRealityState,
|
|
26
|
+
getRealityState,
|
|
27
|
+
invalidateCache,
|
|
28
|
+
routeExists,
|
|
29
|
+
envVarExists,
|
|
30
|
+
fileExists,
|
|
31
|
+
getFilesByDomain,
|
|
32
|
+
getStateSummary,
|
|
33
|
+
classifyFileDomain,
|
|
34
|
+
hashFile,
|
|
35
|
+
} = require("./state");
|
|
36
|
+
|
|
37
|
+
const { RealityWatcher, createWatcher } = require("./watcher");
|
|
38
|
+
|
|
39
|
+
/**
|
|
40
|
+
* Reality Engine singleton
|
|
41
|
+
*/
|
|
42
|
+
const reality = {
|
|
43
|
+
/**
|
|
44
|
+
* Get the current reality state for a project
|
|
45
|
+
* @param {string} projectRoot - Project root directory
|
|
46
|
+
* @param {Object} options - Options
|
|
47
|
+
* @returns {RealityState} The reality state
|
|
48
|
+
*/
|
|
49
|
+
getState(projectRoot, options = {}) {
|
|
50
|
+
return getRealityState(projectRoot, options);
|
|
51
|
+
},
|
|
52
|
+
|
|
53
|
+
/**
|
|
54
|
+
* Build a fresh reality state (bypasses cache)
|
|
55
|
+
* @param {string} projectRoot - Project root directory
|
|
56
|
+
* @param {Object} options - Options
|
|
57
|
+
* @returns {RealityState} The reality state
|
|
58
|
+
*/
|
|
59
|
+
build(projectRoot, options = {}) {
|
|
60
|
+
return buildRealityState(projectRoot, { ...options, forceRefresh: true });
|
|
61
|
+
},
|
|
62
|
+
|
|
63
|
+
/**
|
|
64
|
+
* Invalidate the cached reality state
|
|
65
|
+
*/
|
|
66
|
+
invalidate() {
|
|
67
|
+
invalidateCache();
|
|
68
|
+
},
|
|
69
|
+
|
|
70
|
+
/**
|
|
71
|
+
* Create a watcher for reality state changes
|
|
72
|
+
* @param {string} projectRoot - Project root directory
|
|
73
|
+
* @param {Object} options - Watcher options
|
|
74
|
+
* @returns {RealityWatcher} The watcher instance
|
|
75
|
+
*/
|
|
76
|
+
watch(projectRoot, options = {}) {
|
|
77
|
+
const watcher = createWatcher(projectRoot, options);
|
|
78
|
+
return watcher;
|
|
79
|
+
},
|
|
80
|
+
|
|
81
|
+
/**
|
|
82
|
+
* Check if a route exists in the reality state
|
|
83
|
+
* @param {RealityState} state - Reality state
|
|
84
|
+
* @param {string} method - HTTP method
|
|
85
|
+
* @param {string} path - Route path
|
|
86
|
+
* @returns {boolean} True if route exists
|
|
87
|
+
*/
|
|
88
|
+
routeExists(state, method, path) {
|
|
89
|
+
return routeExists(state, method, path);
|
|
90
|
+
},
|
|
91
|
+
|
|
92
|
+
/**
|
|
93
|
+
* Check if an environment variable exists (is declared)
|
|
94
|
+
* @param {RealityState} state - Reality state
|
|
95
|
+
* @param {string} varName - Variable name
|
|
96
|
+
* @returns {boolean} True if env var is declared
|
|
97
|
+
*/
|
|
98
|
+
envVarExists(state, varName) {
|
|
99
|
+
return envVarExists(state, varName);
|
|
100
|
+
},
|
|
101
|
+
|
|
102
|
+
/**
|
|
103
|
+
* Check if a file exists in the reality state
|
|
104
|
+
* @param {RealityState} state - Reality state
|
|
105
|
+
* @param {string} filePath - File path (relative to project root)
|
|
106
|
+
* @returns {boolean} True if file exists
|
|
107
|
+
*/
|
|
108
|
+
fileExists(state, filePath) {
|
|
109
|
+
return fileExists(state, filePath);
|
|
110
|
+
},
|
|
111
|
+
|
|
112
|
+
/**
|
|
113
|
+
* Get all files in a specific domain
|
|
114
|
+
* @param {RealityState} state - Reality state
|
|
115
|
+
* @param {string} domain - Domain name (auth, payments, routes, etc.)
|
|
116
|
+
* @returns {Array} Array of file objects
|
|
117
|
+
*/
|
|
118
|
+
getFilesByDomain(state, domain) {
|
|
119
|
+
return getFilesByDomain(state, domain);
|
|
120
|
+
},
|
|
121
|
+
|
|
122
|
+
/**
|
|
123
|
+
* Get a summary of the reality state
|
|
124
|
+
* @param {RealityState} state - Reality state
|
|
125
|
+
* @returns {Object} Summary object
|
|
126
|
+
*/
|
|
127
|
+
getSummary(state) {
|
|
128
|
+
return getStateSummary(state);
|
|
129
|
+
},
|
|
130
|
+
|
|
131
|
+
/**
|
|
132
|
+
* Classify a file path into a domain
|
|
133
|
+
* @param {string} filePath - File path
|
|
134
|
+
* @returns {string} Domain name
|
|
135
|
+
*/
|
|
136
|
+
classifyDomain(filePath) {
|
|
137
|
+
return classifyFileDomain(filePath);
|
|
138
|
+
},
|
|
139
|
+
|
|
140
|
+
/**
|
|
141
|
+
* Calculate a file's content hash
|
|
142
|
+
* @param {string} filePath - Absolute file path
|
|
143
|
+
* @returns {string|null} Hash or null if file can't be read
|
|
144
|
+
*/
|
|
145
|
+
hashFile(filePath) {
|
|
146
|
+
return hashFile(filePath);
|
|
147
|
+
},
|
|
148
|
+
|
|
149
|
+
/**
|
|
150
|
+
* Validate assumptions against reality
|
|
151
|
+
* @param {RealityState} state - Reality state
|
|
152
|
+
* @param {Array} assumptions - Array of assumptions to validate
|
|
153
|
+
* @returns {Object} Validation results
|
|
154
|
+
*/
|
|
155
|
+
validateAssumptions(state, assumptions) {
|
|
156
|
+
const results = {
|
|
157
|
+
valid: [],
|
|
158
|
+
invalid: [],
|
|
159
|
+
unknown: [],
|
|
160
|
+
};
|
|
161
|
+
|
|
162
|
+
for (const assumption of assumptions) {
|
|
163
|
+
const result = {
|
|
164
|
+
assumption,
|
|
165
|
+
status: "unknown",
|
|
166
|
+
evidence: null,
|
|
167
|
+
};
|
|
168
|
+
|
|
169
|
+
switch (assumption.type) {
|
|
170
|
+
case "env":
|
|
171
|
+
if (envVarExists(state, assumption.key)) {
|
|
172
|
+
result.status = "valid";
|
|
173
|
+
result.evidence = state.envVars.get(assumption.key);
|
|
174
|
+
} else {
|
|
175
|
+
result.status = "invalid";
|
|
176
|
+
result.evidence = `Environment variable '${assumption.key}' is not declared`;
|
|
177
|
+
}
|
|
178
|
+
break;
|
|
179
|
+
|
|
180
|
+
case "route":
|
|
181
|
+
if (routeExists(state, assumption.method || "GET", assumption.path)) {
|
|
182
|
+
result.status = "valid";
|
|
183
|
+
const route = state.routes.find(r =>
|
|
184
|
+
r.path === assumption.path ||
|
|
185
|
+
r.method.toUpperCase() === (assumption.method || "GET").toUpperCase()
|
|
186
|
+
);
|
|
187
|
+
result.evidence = route;
|
|
188
|
+
} else {
|
|
189
|
+
result.status = "invalid";
|
|
190
|
+
result.evidence = `Route '${assumption.method || "GET"} ${assumption.path}' is not registered`;
|
|
191
|
+
}
|
|
192
|
+
break;
|
|
193
|
+
|
|
194
|
+
case "file":
|
|
195
|
+
if (fileExists(state, assumption.path)) {
|
|
196
|
+
result.status = "valid";
|
|
197
|
+
result.evidence = state.files.get(assumption.path.replace(/\\/g, "/"));
|
|
198
|
+
} else {
|
|
199
|
+
result.status = "invalid";
|
|
200
|
+
result.evidence = `File '${assumption.path}' does not exist`;
|
|
201
|
+
}
|
|
202
|
+
break;
|
|
203
|
+
|
|
204
|
+
case "service":
|
|
205
|
+
const service = state.services.find(s =>
|
|
206
|
+
s.name === assumption.name || s.name === assumption.key
|
|
207
|
+
);
|
|
208
|
+
if (service) {
|
|
209
|
+
result.status = "valid";
|
|
210
|
+
result.evidence = service;
|
|
211
|
+
} else {
|
|
212
|
+
result.status = "invalid";
|
|
213
|
+
result.evidence = `Service '${assumption.name || assumption.key}' is not registered`;
|
|
214
|
+
}
|
|
215
|
+
break;
|
|
216
|
+
|
|
217
|
+
default:
|
|
218
|
+
result.status = "unknown";
|
|
219
|
+
result.evidence = `Unknown assumption type: ${assumption.type}`;
|
|
220
|
+
}
|
|
221
|
+
|
|
222
|
+
if (result.status === "valid") {
|
|
223
|
+
results.valid.push(result);
|
|
224
|
+
} else if (result.status === "invalid") {
|
|
225
|
+
results.invalid.push(result);
|
|
226
|
+
} else {
|
|
227
|
+
results.unknown.push(result);
|
|
228
|
+
}
|
|
229
|
+
}
|
|
230
|
+
|
|
231
|
+
return results;
|
|
232
|
+
},
|
|
233
|
+
|
|
234
|
+
/**
|
|
235
|
+
* Get reality diff between two states
|
|
236
|
+
* @param {RealityState} oldState - Previous state
|
|
237
|
+
* @param {RealityState} newState - Current state
|
|
238
|
+
* @returns {Object} Diff object
|
|
239
|
+
*/
|
|
240
|
+
diff(oldState, newState) {
|
|
241
|
+
const diff = {
|
|
242
|
+
files: {
|
|
243
|
+
added: [],
|
|
244
|
+
removed: [],
|
|
245
|
+
modified: [],
|
|
246
|
+
},
|
|
247
|
+
routes: {
|
|
248
|
+
added: [],
|
|
249
|
+
removed: [],
|
|
250
|
+
},
|
|
251
|
+
envVars: {
|
|
252
|
+
added: [],
|
|
253
|
+
removed: [],
|
|
254
|
+
},
|
|
255
|
+
};
|
|
256
|
+
|
|
257
|
+
// File diff
|
|
258
|
+
const oldFiles = new Set(oldState.files.keys());
|
|
259
|
+
const newFiles = new Set(newState.files.keys());
|
|
260
|
+
|
|
261
|
+
for (const file of newFiles) {
|
|
262
|
+
if (!oldFiles.has(file)) {
|
|
263
|
+
diff.files.added.push(file);
|
|
264
|
+
} else {
|
|
265
|
+
const oldMeta = oldState.files.get(file);
|
|
266
|
+
const newMeta = newState.files.get(file);
|
|
267
|
+
if (oldMeta.hash !== newMeta.hash) {
|
|
268
|
+
diff.files.modified.push(file);
|
|
269
|
+
}
|
|
270
|
+
}
|
|
271
|
+
}
|
|
272
|
+
|
|
273
|
+
for (const file of oldFiles) {
|
|
274
|
+
if (!newFiles.has(file)) {
|
|
275
|
+
diff.files.removed.push(file);
|
|
276
|
+
}
|
|
277
|
+
}
|
|
278
|
+
|
|
279
|
+
// Route diff
|
|
280
|
+
const oldRoutes = new Set(oldState.routes.map(r => `${r.method}:${r.path}`));
|
|
281
|
+
const newRoutes = new Set(newState.routes.map(r => `${r.method}:${r.path}`));
|
|
282
|
+
|
|
283
|
+
for (const route of newState.routes) {
|
|
284
|
+
const key = `${route.method}:${route.path}`;
|
|
285
|
+
if (!oldRoutes.has(key)) {
|
|
286
|
+
diff.routes.added.push(route);
|
|
287
|
+
}
|
|
288
|
+
}
|
|
289
|
+
|
|
290
|
+
for (const route of oldState.routes) {
|
|
291
|
+
const key = `${route.method}:${route.path}`;
|
|
292
|
+
if (!newRoutes.has(key)) {
|
|
293
|
+
diff.routes.removed.push(route);
|
|
294
|
+
}
|
|
295
|
+
}
|
|
296
|
+
|
|
297
|
+
// Env var diff
|
|
298
|
+
const oldEnvVars = new Set(oldState.envVars.keys());
|
|
299
|
+
const newEnvVars = new Set(newState.envVars.keys());
|
|
300
|
+
|
|
301
|
+
for (const varName of newEnvVars) {
|
|
302
|
+
if (!oldEnvVars.has(varName)) {
|
|
303
|
+
diff.envVars.added.push(varName);
|
|
304
|
+
}
|
|
305
|
+
}
|
|
306
|
+
|
|
307
|
+
for (const varName of oldEnvVars) {
|
|
308
|
+
if (!newEnvVars.has(varName)) {
|
|
309
|
+
diff.envVars.removed.push(varName);
|
|
310
|
+
}
|
|
311
|
+
}
|
|
312
|
+
|
|
313
|
+
return diff;
|
|
314
|
+
},
|
|
315
|
+
};
|
|
316
|
+
|
|
317
|
+
module.exports = {
|
|
318
|
+
reality,
|
|
319
|
+
RealityWatcher,
|
|
320
|
+
createWatcher,
|
|
321
|
+
// Re-export individual functions for direct access
|
|
322
|
+
buildRealityState,
|
|
323
|
+
getRealityState,
|
|
324
|
+
invalidateCache,
|
|
325
|
+
routeExists,
|
|
326
|
+
envVarExists,
|
|
327
|
+
fileExists,
|
|
328
|
+
getFilesByDomain,
|
|
329
|
+
getStateSummary,
|
|
330
|
+
classifyFileDomain,
|
|
331
|
+
hashFile,
|
|
332
|
+
};
|