@vibecheckai/cli 3.2.6 → 3.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (84) hide show
  1. package/bin/registry.js +192 -5
  2. package/bin/runners/lib/agent-firewall/change-packet/builder.js +280 -6
  3. package/bin/runners/lib/agent-firewall/critic/index.js +151 -0
  4. package/bin/runners/lib/agent-firewall/critic/judge.js +432 -0
  5. package/bin/runners/lib/agent-firewall/critic/prompts.js +305 -0
  6. package/bin/runners/lib/agent-firewall/lawbook/distributor.js +465 -0
  7. package/bin/runners/lib/agent-firewall/lawbook/evaluator.js +604 -0
  8. package/bin/runners/lib/agent-firewall/lawbook/index.js +304 -0
  9. package/bin/runners/lib/agent-firewall/lawbook/registry.js +514 -0
  10. package/bin/runners/lib/agent-firewall/lawbook/schema.js +420 -0
  11. package/bin/runners/lib/agent-firewall/logger.js +141 -0
  12. package/bin/runners/lib/agent-firewall/policy/loader.js +312 -4
  13. package/bin/runners/lib/agent-firewall/policy/rules/ghost-env.js +113 -1
  14. package/bin/runners/lib/agent-firewall/policy/rules/ghost-route.js +133 -6
  15. package/bin/runners/lib/agent-firewall/proposal/extractor.js +394 -0
  16. package/bin/runners/lib/agent-firewall/proposal/index.js +212 -0
  17. package/bin/runners/lib/agent-firewall/proposal/schema.js +251 -0
  18. package/bin/runners/lib/agent-firewall/proposal/validator.js +386 -0
  19. package/bin/runners/lib/agent-firewall/reality/index.js +332 -0
  20. package/bin/runners/lib/agent-firewall/reality/state.js +625 -0
  21. package/bin/runners/lib/agent-firewall/reality/watcher.js +322 -0
  22. package/bin/runners/lib/agent-firewall/risk/index.js +173 -0
  23. package/bin/runners/lib/agent-firewall/risk/scorer.js +328 -0
  24. package/bin/runners/lib/agent-firewall/risk/thresholds.js +321 -0
  25. package/bin/runners/lib/agent-firewall/risk/vectors.js +421 -0
  26. package/bin/runners/lib/agent-firewall/simulator/diff-simulator.js +472 -0
  27. package/bin/runners/lib/agent-firewall/simulator/import-resolver.js +346 -0
  28. package/bin/runners/lib/agent-firewall/simulator/index.js +181 -0
  29. package/bin/runners/lib/agent-firewall/simulator/route-validator.js +380 -0
  30. package/bin/runners/lib/agent-firewall/time-machine/incident-correlator.js +661 -0
  31. package/bin/runners/lib/agent-firewall/time-machine/index.js +267 -0
  32. package/bin/runners/lib/agent-firewall/time-machine/replay-engine.js +436 -0
  33. package/bin/runners/lib/agent-firewall/time-machine/state-reconstructor.js +490 -0
  34. package/bin/runners/lib/agent-firewall/time-machine/timeline-builder.js +530 -0
  35. package/bin/runners/lib/analyzers.js +81 -18
  36. package/bin/runners/lib/authority-badge.js +425 -0
  37. package/bin/runners/lib/cli-output.js +7 -1
  38. package/bin/runners/lib/error-handler.js +16 -9
  39. package/bin/runners/lib/exit-codes.js +275 -0
  40. package/bin/runners/lib/global-flags.js +37 -0
  41. package/bin/runners/lib/help-formatter.js +413 -0
  42. package/bin/runners/lib/logger.js +38 -0
  43. package/bin/runners/lib/unified-cli-output.js +604 -0
  44. package/bin/runners/lib/upsell.js +148 -0
  45. package/bin/runners/runApprove.js +1200 -0
  46. package/bin/runners/runAuth.js +324 -95
  47. package/bin/runners/runCheckpoint.js +39 -21
  48. package/bin/runners/runClassify.js +859 -0
  49. package/bin/runners/runContext.js +136 -24
  50. package/bin/runners/runDoctor.js +108 -68
  51. package/bin/runners/runFix.js +6 -5
  52. package/bin/runners/runGuard.js +212 -118
  53. package/bin/runners/runInit.js +3 -2
  54. package/bin/runners/runMcp.js +130 -52
  55. package/bin/runners/runPolish.js +43 -20
  56. package/bin/runners/runProve.js +1 -2
  57. package/bin/runners/runReport.js +3 -2
  58. package/bin/runners/runScan.js +63 -44
  59. package/bin/runners/runShip.js +3 -4
  60. package/bin/runners/runValidate.js +19 -2
  61. package/bin/runners/runWatch.js +104 -53
  62. package/bin/vibecheck.js +106 -19
  63. package/mcp-server/HARDENING_SUMMARY.md +299 -0
  64. package/mcp-server/agent-firewall-interceptor.js +367 -31
  65. package/mcp-server/authority-tools.js +569 -0
  66. package/mcp-server/conductor/conflict-resolver.js +588 -0
  67. package/mcp-server/conductor/execution-planner.js +544 -0
  68. package/mcp-server/conductor/index.js +377 -0
  69. package/mcp-server/conductor/lock-manager.js +615 -0
  70. package/mcp-server/conductor/request-queue.js +550 -0
  71. package/mcp-server/conductor/session-manager.js +500 -0
  72. package/mcp-server/conductor/tools.js +510 -0
  73. package/mcp-server/index.js +1149 -243
  74. package/mcp-server/lib/{api-client.js → api-client.cjs} +40 -4
  75. package/mcp-server/lib/logger.cjs +30 -0
  76. package/mcp-server/logger.js +173 -0
  77. package/mcp-server/package.json +2 -2
  78. package/mcp-server/premium-tools.js +2 -2
  79. package/mcp-server/tier-auth.js +245 -35
  80. package/mcp-server/truth-firewall-tools.js +145 -15
  81. package/mcp-server/vibecheck-tools.js +2 -2
  82. package/package.json +2 -3
  83. package/mcp-server/index.old.js +0 -4137
  84. package/mcp-server/package-lock.json +0 -165
@@ -0,0 +1,472 @@
1
+ /**
2
+ * Diff Simulator
3
+ *
4
+ * Simulates applying changes in memory before touching the disk.
5
+ * Validates that the change won't break imports, routes, or other invariants.
6
+ */
7
+
8
+ "use strict";
9
+
10
+ const fs = require("fs");
11
+ const path = require("path");
12
+ const { extractImports, validateImport, buildImportGraph, detectCircularDeps } = require("./import-resolver");
13
+ const { extractRoutes, validateRoutes } = require("./route-validator");
14
+
15
+ /**
16
+ * @typedef {Object} SimulationResult
17
+ * @property {boolean} passed - Whether simulation passed
18
+ * @property {Array} errors - Critical errors that would break the build
19
+ * @property {Array} warnings - Non-critical issues
20
+ * @property {Object} importAnalysis - Import validation results
21
+ * @property {Object} routeAnalysis - Route validation results
22
+ * @property {Object} orphanAnalysis - Orphan file detection results
23
+ * @property {Object} circularDeps - Circular dependency detection
24
+ */
25
+
26
+ /**
27
+ * Apply changes to virtual file system
28
+ * @param {string} projectRoot - Project root
29
+ * @param {Array} changes - Array of change operations
30
+ * @returns {Object} Virtual file system state
31
+ */
32
+ function buildVirtualFS(projectRoot, changes) {
33
+ const virtualFiles = new Map(); // path -> content
34
+ const deletedFiles = new Set();
35
+ const modifiedFiles = new Set();
36
+ const createdFiles = new Set();
37
+
38
+ for (const change of changes) {
39
+ const relativePath = change.path?.replace(/\\/g, "/") || change.filePath?.replace(/\\/g, "/");
40
+
41
+ switch (change.type?.toLowerCase() || change.operation?.toLowerCase()) {
42
+ case "create":
43
+ case "add":
44
+ virtualFiles.set(relativePath, change.content || change.newContent || "");
45
+ createdFiles.add(relativePath);
46
+ break;
47
+
48
+ case "modify":
49
+ case "update":
50
+ case "change":
51
+ virtualFiles.set(relativePath, change.content || change.newContent || "");
52
+ modifiedFiles.add(relativePath);
53
+ break;
54
+
55
+ case "delete":
56
+ case "remove":
57
+ deletedFiles.add(relativePath);
58
+ virtualFiles.delete(relativePath);
59
+ break;
60
+ }
61
+ }
62
+
63
+ return {
64
+ virtualFiles,
65
+ deletedFiles,
66
+ modifiedFiles,
67
+ createdFiles,
68
+ };
69
+ }
70
+
71
+ /**
72
+ * Load existing file content
73
+ * @param {string} projectRoot - Project root
74
+ * @param {string} filePath - Relative file path
75
+ * @returns {string|null} File content or null
76
+ */
77
+ function loadFileContent(projectRoot, filePath) {
78
+ const fullPath = path.join(projectRoot, filePath);
79
+ try {
80
+ if (fs.existsSync(fullPath)) {
81
+ return fs.readFileSync(fullPath, "utf-8");
82
+ }
83
+ } catch {
84
+ // Ignore read errors
85
+ }
86
+ return null;
87
+ }
88
+
89
+ /**
90
+ * Get effective file content (virtual or real)
91
+ * @param {string} projectRoot - Project root
92
+ * @param {string} filePath - File path
93
+ * @param {Map} virtualFiles - Virtual file system
94
+ * @param {Set} deletedFiles - Deleted files
95
+ * @returns {string|null} Content or null if deleted/missing
96
+ */
97
+ function getEffectiveContent(projectRoot, filePath, virtualFiles, deletedFiles) {
98
+ if (deletedFiles.has(filePath)) {
99
+ return null;
100
+ }
101
+
102
+ if (virtualFiles.has(filePath)) {
103
+ return virtualFiles.get(filePath);
104
+ }
105
+
106
+ return loadFileContent(projectRoot, filePath);
107
+ }
108
+
109
+ /**
110
+ * Validate imports after changes
111
+ * @param {string} projectRoot - Project root
112
+ * @param {Object} vfs - Virtual file system state
113
+ * @returns {Object} Import validation result
114
+ */
115
+ function validateImportsAfterChanges(projectRoot, vfs) {
116
+ const { virtualFiles, deletedFiles, modifiedFiles, createdFiles } = vfs;
117
+ const errors = [];
118
+ const warnings = [];
119
+
120
+ // Get all files that need import validation
121
+ const filesToCheck = new Set([...modifiedFiles, ...createdFiles]);
122
+
123
+ // Also check files that might import deleted files
124
+ if (deletedFiles.size > 0) {
125
+ // Scan source files to find potential importers
126
+ const srcDirs = ["src", "lib", "app", "pages", "components"];
127
+ for (const srcDir of srcDirs) {
128
+ const srcPath = path.join(projectRoot, srcDir);
129
+ if (fs.existsSync(srcPath)) {
130
+ scanForImporters(srcPath, deletedFiles, filesToCheck, projectRoot);
131
+ }
132
+ }
133
+ }
134
+
135
+ // Validate imports in each file
136
+ for (const filePath of filesToCheck) {
137
+ const content = getEffectiveContent(projectRoot, filePath, virtualFiles, deletedFiles);
138
+ if (!content) continue;
139
+
140
+ const imports = extractImports(content);
141
+
142
+ for (const imp of imports) {
143
+ const result = validateImport(
144
+ imp,
145
+ path.join(projectRoot, filePath),
146
+ projectRoot,
147
+ virtualFiles,
148
+ deletedFiles
149
+ );
150
+
151
+ if (!result.valid) {
152
+ if (result.resolution?.type === "internal") {
153
+ errors.push({
154
+ type: "broken_import",
155
+ file: filePath,
156
+ line: imp.line,
157
+ import: imp.source,
158
+ message: result.error,
159
+ });
160
+ } else if (result.resolution?.type === "unresolved") {
161
+ // Only error for internal unresolved imports
162
+ if (imp.source.startsWith(".") || imp.source.startsWith("@/")) {
163
+ errors.push({
164
+ type: "unresolved_import",
165
+ file: filePath,
166
+ line: imp.line,
167
+ import: imp.source,
168
+ message: result.error,
169
+ });
170
+ }
171
+ }
172
+ }
173
+ }
174
+ }
175
+
176
+ return {
177
+ valid: errors.length === 0,
178
+ errors,
179
+ warnings,
180
+ checkedFiles: filesToCheck.size,
181
+ };
182
+ }
183
+
184
+ /**
185
+ * Scan directory for files that might import deleted files
186
+ */
187
+ function scanForImporters(dir, deletedFiles, filesToCheck, projectRoot, depth = 0) {
188
+ if (depth > 5) return;
189
+
190
+ try {
191
+ const entries = fs.readdirSync(dir, { withFileTypes: true });
192
+
193
+ for (const entry of entries) {
194
+ if (entry.name.startsWith(".") || entry.name === "node_modules") continue;
195
+
196
+ const fullPath = path.join(dir, entry.name);
197
+
198
+ if (entry.isDirectory()) {
199
+ scanForImporters(fullPath, deletedFiles, filesToCheck, projectRoot, depth + 1);
200
+ } else if (entry.isFile()) {
201
+ const ext = path.extname(entry.name);
202
+ if ([".ts", ".tsx", ".js", ".jsx"].includes(ext)) {
203
+ const relativePath = path.relative(projectRoot, fullPath).replace(/\\/g, "/");
204
+
205
+ // Quick check if file might reference deleted files
206
+ try {
207
+ const content = fs.readFileSync(fullPath, "utf-8");
208
+ for (const deleted of deletedFiles) {
209
+ const basename = path.basename(deleted, path.extname(deleted));
210
+ if (content.includes(basename)) {
211
+ filesToCheck.add(relativePath);
212
+ break;
213
+ }
214
+ }
215
+ } catch {
216
+ // Ignore read errors
217
+ }
218
+ }
219
+ }
220
+ }
221
+ } catch {
222
+ // Ignore directory errors
223
+ }
224
+ }
225
+
226
+ /**
227
+ * Detect orphaned files after changes
228
+ * @param {string} projectRoot - Project root
229
+ * @param {Object} vfs - Virtual file system state
230
+ * @returns {Object} Orphan analysis result
231
+ */
232
+ function detectOrphanedFiles(projectRoot, vfs) {
233
+ const { virtualFiles, deletedFiles, createdFiles } = vfs;
234
+ const orphans = [];
235
+ const warnings = [];
236
+
237
+ // Check for orphaned test files (test files without corresponding source)
238
+ for (const created of createdFiles) {
239
+ if (created.includes(".test.") || created.includes(".spec.")) {
240
+ const sourcePath = created
241
+ .replace(".test.", ".")
242
+ .replace(".spec.", ".")
243
+ .replace("__tests__/", "")
244
+ .replace("/tests/", "/");
245
+
246
+ const sourceExists =
247
+ virtualFiles.has(sourcePath) ||
248
+ fs.existsSync(path.join(projectRoot, sourcePath));
249
+
250
+ if (!sourceExists) {
251
+ warnings.push({
252
+ type: "orphaned_test",
253
+ file: created,
254
+ expectedSource: sourcePath,
255
+ message: `Test file '${created}' has no corresponding source file`,
256
+ });
257
+ }
258
+ }
259
+ }
260
+
261
+ // Check if deleted files are still imported somewhere
262
+ for (const deleted of deletedFiles) {
263
+ // This is handled by import validation
264
+ orphans.push({
265
+ file: deleted,
266
+ type: "deleted",
267
+ });
268
+ }
269
+
270
+ return {
271
+ orphans,
272
+ warnings,
273
+ };
274
+ }
275
+
276
+ /**
277
+ * Simulate changes and validate
278
+ * @param {string} projectRoot - Project root directory
279
+ * @param {Array} changes - Array of change operations
280
+ * @param {Object} options - Simulation options
281
+ * @returns {SimulationResult} Simulation result
282
+ */
283
+ function simulate(projectRoot, changes, options = {}) {
284
+ const {
285
+ validateImports: shouldValidateImports = true,
286
+ validateRoutes: shouldValidateRoutes = true,
287
+ detectOrphans = true,
288
+ detectCircular = true,
289
+ existingRoutes = [],
290
+ } = options;
291
+
292
+ const result = {
293
+ passed: true,
294
+ errors: [],
295
+ warnings: [],
296
+ importAnalysis: null,
297
+ routeAnalysis: null,
298
+ orphanAnalysis: null,
299
+ circularDeps: null,
300
+ summary: {},
301
+ };
302
+
303
+ // Build virtual file system
304
+ const vfs = buildVirtualFS(projectRoot, changes);
305
+
306
+ result.summary.filesCreated = vfs.createdFiles.size;
307
+ result.summary.filesModified = vfs.modifiedFiles.size;
308
+ result.summary.filesDeleted = vfs.deletedFiles.size;
309
+
310
+ // Validate imports
311
+ if (shouldValidateImports) {
312
+ const importResult = validateImportsAfterChanges(projectRoot, vfs);
313
+ result.importAnalysis = importResult;
314
+
315
+ if (!importResult.valid) {
316
+ result.passed = false;
317
+ result.errors.push(...importResult.errors.map(e => ({
318
+ ...e,
319
+ category: "import",
320
+ })));
321
+ }
322
+
323
+ result.warnings.push(...importResult.warnings.map(w => ({
324
+ ...w,
325
+ category: "import",
326
+ })));
327
+ }
328
+
329
+ // Validate routes
330
+ if (shouldValidateRoutes && existingRoutes.length > 0) {
331
+ const changedFiles = new Map();
332
+ for (const [filePath, content] of vfs.virtualFiles) {
333
+ if (filePath.includes("route") || filePath.includes("api")) {
334
+ changedFiles.set(filePath, content);
335
+ }
336
+ }
337
+
338
+ const routeResult = validateRoutes(existingRoutes, changedFiles, vfs.deletedFiles);
339
+ result.routeAnalysis = routeResult;
340
+
341
+ if (!routeResult.valid) {
342
+ result.passed = false;
343
+ result.errors.push(...routeResult.issues
344
+ .filter(i => i.severity === "error")
345
+ .map(e => ({
346
+ ...e,
347
+ category: "route",
348
+ })));
349
+ }
350
+
351
+ result.warnings.push(...routeResult.issues
352
+ .filter(i => i.severity === "warning")
353
+ .map(w => ({
354
+ ...w,
355
+ category: "route",
356
+ })));
357
+ }
358
+
359
+ // Detect orphans
360
+ if (detectOrphans) {
361
+ const orphanResult = detectOrphanedFiles(projectRoot, vfs);
362
+ result.orphanAnalysis = orphanResult;
363
+
364
+ result.warnings.push(...orphanResult.warnings.map(w => ({
365
+ ...w,
366
+ category: "orphan",
367
+ })));
368
+ }
369
+
370
+ // Detect circular dependencies
371
+ if (detectCircular && vfs.virtualFiles.size > 0) {
372
+ // Build import graph with virtual files
373
+ const allFiles = new Map();
374
+
375
+ // Add virtual files
376
+ for (const [filePath, content] of vfs.virtualFiles) {
377
+ allFiles.set(filePath, content);
378
+ }
379
+
380
+ const graph = buildImportGraph(allFiles, projectRoot);
381
+
382
+ if (graph.circularDeps.length > 0) {
383
+ result.circularDeps = graph.circularDeps;
384
+
385
+ for (const cycle of graph.circularDeps) {
386
+ result.warnings.push({
387
+ type: "circular_dependency",
388
+ category: "circular",
389
+ cycle,
390
+ message: `Circular dependency detected: ${cycle.join(" -> ")}`,
391
+ });
392
+ }
393
+ }
394
+ }
395
+
396
+ // Update summary
397
+ result.summary.errorCount = result.errors.length;
398
+ result.summary.warningCount = result.warnings.length;
399
+ result.summary.passed = result.passed;
400
+
401
+ return result;
402
+ }
403
+
404
+ /**
405
+ * Quick simulation for single file changes
406
+ * @param {string} projectRoot - Project root
407
+ * @param {string} filePath - File path
408
+ * @param {string} newContent - New content
409
+ * @param {string} oldContent - Old content (optional)
410
+ * @returns {Object} Quick simulation result
411
+ */
412
+ function quickSimulate(projectRoot, filePath, newContent, oldContent = null) {
413
+ const changes = [{
414
+ type: oldContent ? "modify" : "create",
415
+ path: filePath,
416
+ content: newContent,
417
+ }];
418
+
419
+ return simulate(projectRoot, changes, {
420
+ validateRoutes: false,
421
+ detectOrphans: false,
422
+ detectCircular: false,
423
+ });
424
+ }
425
+
426
+ /**
427
+ * Format simulation result for display
428
+ * @param {SimulationResult} result - Simulation result
429
+ * @returns {string} Formatted output
430
+ */
431
+ function formatResult(result) {
432
+ const lines = [];
433
+
434
+ lines.push(`Simulation ${result.passed ? "PASSED" : "FAILED"}`);
435
+ lines.push("");
436
+ lines.push(`Summary:`);
437
+ lines.push(` Files Created: ${result.summary.filesCreated}`);
438
+ lines.push(` Files Modified: ${result.summary.filesModified}`);
439
+ lines.push(` Files Deleted: ${result.summary.filesDeleted}`);
440
+ lines.push(` Errors: ${result.summary.errorCount}`);
441
+ lines.push(` Warnings: ${result.summary.warningCount}`);
442
+
443
+ if (result.errors.length > 0) {
444
+ lines.push("");
445
+ lines.push("Errors:");
446
+ for (const error of result.errors) {
447
+ lines.push(` [${error.category}] ${error.message}`);
448
+ if (error.file) {
449
+ lines.push(` at ${error.file}${error.line ? `:${error.line}` : ""}`);
450
+ }
451
+ }
452
+ }
453
+
454
+ if (result.warnings.length > 0) {
455
+ lines.push("");
456
+ lines.push("Warnings:");
457
+ for (const warning of result.warnings) {
458
+ lines.push(` [${warning.category}] ${warning.message}`);
459
+ }
460
+ }
461
+
462
+ return lines.join("\n");
463
+ }
464
+
465
+ module.exports = {
466
+ simulate,
467
+ quickSimulate,
468
+ buildVirtualFS,
469
+ validateImportsAfterChanges,
470
+ detectOrphanedFiles,
471
+ formatResult,
472
+ };