@vibecheckai/cli 3.5.0 → 3.5.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (224) hide show
  1. package/bin/registry.js +214 -237
  2. package/bin/runners/cli-utils.js +33 -2
  3. package/bin/runners/context/analyzer.js +52 -1
  4. package/bin/runners/context/generators/cursor.js +2 -49
  5. package/bin/runners/context/git-context.js +3 -1
  6. package/bin/runners/context/team-conventions.js +33 -7
  7. package/bin/runners/lib/analysis-core.js +25 -5
  8. package/bin/runners/lib/analyzers.js +431 -481
  9. package/bin/runners/lib/default-config.js +127 -0
  10. package/bin/runners/lib/doctor/modules/security.js +3 -1
  11. package/bin/runners/lib/engine/ast-cache.js +210 -0
  12. package/bin/runners/lib/engine/auth-extractor.js +211 -0
  13. package/bin/runners/lib/engine/billing-extractor.js +112 -0
  14. package/bin/runners/lib/engine/enforcement-extractor.js +100 -0
  15. package/bin/runners/lib/engine/env-extractor.js +207 -0
  16. package/bin/runners/lib/engine/express-extractor.js +208 -0
  17. package/bin/runners/lib/engine/extractors.js +849 -0
  18. package/bin/runners/lib/engine/index.js +207 -0
  19. package/bin/runners/lib/engine/repo-index.js +514 -0
  20. package/bin/runners/lib/engine/types.js +124 -0
  21. package/bin/runners/lib/engines/accessibility-engine.js +18 -218
  22. package/bin/runners/lib/engines/api-consistency-engine.js +30 -335
  23. package/bin/runners/lib/engines/cross-file-analysis-engine.js +27 -292
  24. package/bin/runners/lib/engines/empty-catch-engine.js +17 -127
  25. package/bin/runners/lib/engines/mock-data-engine.js +10 -53
  26. package/bin/runners/lib/engines/performance-issues-engine.js +36 -176
  27. package/bin/runners/lib/engines/security-vulnerabilities-engine.js +54 -382
  28. package/bin/runners/lib/engines/type-aware-engine.js +39 -263
  29. package/bin/runners/lib/engines/vibecheck-engines/index.js +13 -122
  30. package/bin/runners/lib/engines/vibecheck-engines/lib/ast-cache.js +164 -0
  31. package/bin/runners/lib/engines/vibecheck-engines/lib/code-quality-engine.js +291 -0
  32. package/bin/runners/lib/engines/vibecheck-engines/lib/console-logs-engine.js +83 -0
  33. package/bin/runners/lib/engines/vibecheck-engines/lib/dead-code-engine.js +198 -0
  34. package/bin/runners/lib/engines/vibecheck-engines/lib/deprecated-api-engine.js +275 -0
  35. package/bin/runners/lib/engines/vibecheck-engines/lib/empty-catch-engine.js +167 -0
  36. package/bin/runners/lib/engines/vibecheck-engines/lib/file-filter.js +217 -0
  37. package/bin/runners/lib/engines/vibecheck-engines/lib/hardcoded-secrets-engine.js +73 -373
  38. package/bin/runners/lib/engines/vibecheck-engines/lib/mock-data-engine.js +140 -0
  39. package/bin/runners/lib/engines/vibecheck-engines/lib/parallel-processor.js +164 -0
  40. package/bin/runners/lib/engines/vibecheck-engines/lib/performance-issues-engine.js +234 -0
  41. package/bin/runners/lib/engines/vibecheck-engines/lib/type-aware-engine.js +217 -0
  42. package/bin/runners/lib/engines/vibecheck-engines/lib/unsafe-regex-engine.js +78 -0
  43. package/bin/runners/lib/entitlements-v2.js +73 -97
  44. package/bin/runners/lib/error-handler.js +44 -3
  45. package/bin/runners/lib/error-messages.js +289 -0
  46. package/bin/runners/lib/evidence-pack.js +7 -1
  47. package/bin/runners/lib/finding-id.js +69 -0
  48. package/bin/runners/lib/finding-sorter.js +89 -0
  49. package/bin/runners/lib/html-proof-report.js +700 -350
  50. package/bin/runners/lib/missions/plan.js +6 -46
  51. package/bin/runners/lib/missions/templates.js +0 -232
  52. package/bin/runners/lib/next-action.js +560 -0
  53. package/bin/runners/lib/prerequisites.js +149 -0
  54. package/bin/runners/lib/route-detection.js +137 -68
  55. package/bin/runners/lib/scan-output.js +91 -76
  56. package/bin/runners/lib/scan-runner.js +135 -0
  57. package/bin/runners/lib/schemas/ajv-validator.js +464 -0
  58. package/bin/runners/lib/schemas/error-envelope.schema.json +105 -0
  59. package/bin/runners/lib/schemas/finding-v3.schema.json +151 -0
  60. package/bin/runners/lib/schemas/report-artifact.schema.json +120 -0
  61. package/bin/runners/lib/schemas/run-request.schema.json +108 -0
  62. package/bin/runners/lib/schemas/validator.js +27 -0
  63. package/bin/runners/lib/schemas/verdict.schema.json +140 -0
  64. package/bin/runners/lib/ship-output-enterprise.js +23 -23
  65. package/bin/runners/lib/ship-output.js +75 -31
  66. package/bin/runners/lib/terminal-ui.js +6 -113
  67. package/bin/runners/lib/truth.js +351 -10
  68. package/bin/runners/lib/unified-cli-output.js +430 -603
  69. package/bin/runners/lib/unified-output.js +13 -9
  70. package/bin/runners/runAIAgent.js +10 -5
  71. package/bin/runners/runAgent.js +0 -3
  72. package/bin/runners/runAllowlist.js +389 -0
  73. package/bin/runners/runApprove.js +0 -33
  74. package/bin/runners/runAuth.js +73 -45
  75. package/bin/runners/runCheckpoint.js +51 -11
  76. package/bin/runners/runClassify.js +85 -21
  77. package/bin/runners/runContext.js +0 -3
  78. package/bin/runners/runDoctor.js +41 -28
  79. package/bin/runners/runEvidencePack.js +362 -0
  80. package/bin/runners/runFirewall.js +0 -3
  81. package/bin/runners/runFirewallHook.js +0 -3
  82. package/bin/runners/runFix.js +66 -76
  83. package/bin/runners/runGuard.js +18 -411
  84. package/bin/runners/runInit.js +113 -30
  85. package/bin/runners/runLabs.js +424 -0
  86. package/bin/runners/runMcp.js +19 -25
  87. package/bin/runners/runPolish.js +64 -240
  88. package/bin/runners/runPromptFirewall.js +12 -5
  89. package/bin/runners/runProve.js +57 -22
  90. package/bin/runners/runQuickstart.js +531 -0
  91. package/bin/runners/runReality.js +59 -68
  92. package/bin/runners/runReport.js +38 -33
  93. package/bin/runners/runRuntime.js +8 -5
  94. package/bin/runners/runScan.js +1413 -190
  95. package/bin/runners/runShip.js +113 -719
  96. package/bin/runners/runTruth.js +0 -3
  97. package/bin/runners/runValidate.js +13 -9
  98. package/bin/runners/runWatch.js +23 -14
  99. package/bin/scan.js +6 -1
  100. package/bin/vibecheck.js +204 -185
  101. package/mcp-server/deprecation-middleware.js +282 -0
  102. package/mcp-server/handlers/index.ts +15 -0
  103. package/mcp-server/handlers/tool-handler.ts +554 -0
  104. package/mcp-server/index-v1.js +698 -0
  105. package/mcp-server/index.js +210 -238
  106. package/mcp-server/lib/cache-wrapper.cjs +383 -0
  107. package/mcp-server/lib/error-envelope.js +138 -0
  108. package/mcp-server/lib/executor.ts +499 -0
  109. package/mcp-server/lib/index.ts +19 -0
  110. package/mcp-server/lib/rate-limiter.js +166 -0
  111. package/mcp-server/lib/sandbox.test.ts +519 -0
  112. package/mcp-server/lib/sandbox.ts +395 -0
  113. package/mcp-server/lib/types.ts +267 -0
  114. package/mcp-server/package.json +12 -3
  115. package/mcp-server/registry/tool-registry.js +794 -0
  116. package/mcp-server/registry/tools.json +605 -0
  117. package/mcp-server/registry.test.ts +334 -0
  118. package/mcp-server/tests/tier-gating.test.js +297 -0
  119. package/mcp-server/tier-auth.js +378 -45
  120. package/mcp-server/tools-v3.js +353 -442
  121. package/mcp-server/tsconfig.json +37 -0
  122. package/mcp-server/vibecheck-2.0-tools.js +14 -1
  123. package/package.json +1 -1
  124. package/bin/runners/lib/agent-firewall/learning/learning-engine.js +0 -849
  125. package/bin/runners/lib/audit-logger.js +0 -532
  126. package/bin/runners/lib/authority/authorities/architecture.js +0 -364
  127. package/bin/runners/lib/authority/authorities/compliance.js +0 -341
  128. package/bin/runners/lib/authority/authorities/human.js +0 -343
  129. package/bin/runners/lib/authority/authorities/quality.js +0 -420
  130. package/bin/runners/lib/authority/authorities/security.js +0 -228
  131. package/bin/runners/lib/authority/index.js +0 -293
  132. package/bin/runners/lib/bundle/bundle-intelligence.js +0 -846
  133. package/bin/runners/lib/cli-charts.js +0 -368
  134. package/bin/runners/lib/cli-config-display.js +0 -405
  135. package/bin/runners/lib/cli-demo.js +0 -275
  136. package/bin/runners/lib/cli-errors.js +0 -438
  137. package/bin/runners/lib/cli-help-formatter.js +0 -439
  138. package/bin/runners/lib/cli-interactive-menu.js +0 -509
  139. package/bin/runners/lib/cli-prompts.js +0 -441
  140. package/bin/runners/lib/cli-scan-cards.js +0 -362
  141. package/bin/runners/lib/compliance-reporter.js +0 -710
  142. package/bin/runners/lib/conductor/index.js +0 -671
  143. package/bin/runners/lib/easy/README.md +0 -123
  144. package/bin/runners/lib/easy/index.js +0 -140
  145. package/bin/runners/lib/easy/interactive-wizard.js +0 -788
  146. package/bin/runners/lib/easy/one-click-firewall.js +0 -564
  147. package/bin/runners/lib/easy/zero-config-reality.js +0 -714
  148. package/bin/runners/lib/engines/async-patterns-engine.js +0 -444
  149. package/bin/runners/lib/engines/bundle-size-engine.js +0 -433
  150. package/bin/runners/lib/engines/confidence-scoring.js +0 -276
  151. package/bin/runners/lib/engines/context-detection.js +0 -264
  152. package/bin/runners/lib/engines/database-patterns-engine.js +0 -429
  153. package/bin/runners/lib/engines/duplicate-code-engine.js +0 -354
  154. package/bin/runners/lib/engines/env-variables-engine.js +0 -458
  155. package/bin/runners/lib/engines/error-handling-engine.js +0 -437
  156. package/bin/runners/lib/engines/false-positive-prevention.js +0 -630
  157. package/bin/runners/lib/engines/framework-adapters/index.js +0 -607
  158. package/bin/runners/lib/engines/framework-detection.js +0 -508
  159. package/bin/runners/lib/engines/import-order-engine.js +0 -429
  160. package/bin/runners/lib/engines/naming-conventions-engine.js +0 -544
  161. package/bin/runners/lib/engines/noise-reduction-engine.js +0 -452
  162. package/bin/runners/lib/engines/orchestrator.js +0 -334
  163. package/bin/runners/lib/engines/react-patterns-engine.js +0 -457
  164. package/bin/runners/lib/engines/vibecheck-engines/lib/ai-hallucination-engine.js +0 -806
  165. package/bin/runners/lib/engines/vibecheck-engines/lib/smart-fix-engine.js +0 -577
  166. package/bin/runners/lib/engines/vibecheck-engines/lib/vibe-score-engine.js +0 -543
  167. package/bin/runners/lib/engines/vibecheck-engines.js +0 -514
  168. package/bin/runners/lib/enhanced-features/index.js +0 -305
  169. package/bin/runners/lib/enhanced-output.js +0 -631
  170. package/bin/runners/lib/enterprise.js +0 -300
  171. package/bin/runners/lib/firewall/command-validator.js +0 -351
  172. package/bin/runners/lib/firewall/config.js +0 -341
  173. package/bin/runners/lib/firewall/content-validator.js +0 -519
  174. package/bin/runners/lib/firewall/index.js +0 -101
  175. package/bin/runners/lib/firewall/path-validator.js +0 -256
  176. package/bin/runners/lib/intelligence/cross-repo-intelligence.js +0 -817
  177. package/bin/runners/lib/mcp-utils.js +0 -425
  178. package/bin/runners/lib/output/index.js +0 -1022
  179. package/bin/runners/lib/policy-engine.js +0 -652
  180. package/bin/runners/lib/polish/autofix/accessibility-fixes.js +0 -333
  181. package/bin/runners/lib/polish/autofix/async-handlers.js +0 -273
  182. package/bin/runners/lib/polish/autofix/dead-code.js +0 -280
  183. package/bin/runners/lib/polish/autofix/imports-optimizer.js +0 -344
  184. package/bin/runners/lib/polish/autofix/index.js +0 -200
  185. package/bin/runners/lib/polish/autofix/remove-consoles.js +0 -209
  186. package/bin/runners/lib/polish/autofix/strengthen-types.js +0 -245
  187. package/bin/runners/lib/polish/backend-checks.js +0 -148
  188. package/bin/runners/lib/polish/documentation-checks.js +0 -111
  189. package/bin/runners/lib/polish/frontend-checks.js +0 -168
  190. package/bin/runners/lib/polish/index.js +0 -71
  191. package/bin/runners/lib/polish/infrastructure-checks.js +0 -131
  192. package/bin/runners/lib/polish/library-detection.js +0 -175
  193. package/bin/runners/lib/polish/performance-checks.js +0 -100
  194. package/bin/runners/lib/polish/security-checks.js +0 -148
  195. package/bin/runners/lib/polish/utils.js +0 -203
  196. package/bin/runners/lib/prompt-builder.js +0 -540
  197. package/bin/runners/lib/proof-certificate.js +0 -634
  198. package/bin/runners/lib/reality/accessibility-audit.js +0 -946
  199. package/bin/runners/lib/reality/api-contract-validator.js +0 -1012
  200. package/bin/runners/lib/reality/chaos-engineering.js +0 -1084
  201. package/bin/runners/lib/reality/performance-tracker.js +0 -1077
  202. package/bin/runners/lib/reality/scenario-generator.js +0 -1404
  203. package/bin/runners/lib/reality/visual-regression.js +0 -852
  204. package/bin/runners/lib/reality-profiler.js +0 -717
  205. package/bin/runners/lib/replay/flight-recorder-viewer.js +0 -1160
  206. package/bin/runners/lib/review/ai-code-review.js +0 -832
  207. package/bin/runners/lib/rules/custom-rule-engine.js +0 -985
  208. package/bin/runners/lib/sbom-generator.js +0 -641
  209. package/bin/runners/lib/scan-output-enhanced.js +0 -512
  210. package/bin/runners/lib/security/owasp-scanner.js +0 -939
  211. package/bin/runners/lib/validators/contract-validator.js +0 -283
  212. package/bin/runners/lib/validators/dead-export-detector.js +0 -279
  213. package/bin/runners/lib/validators/dep-audit.js +0 -245
  214. package/bin/runners/lib/validators/env-validator.js +0 -319
  215. package/bin/runners/lib/validators/index.js +0 -120
  216. package/bin/runners/lib/validators/license-checker.js +0 -252
  217. package/bin/runners/lib/validators/route-validator.js +0 -290
  218. package/bin/runners/runAuthority.js +0 -528
  219. package/bin/runners/runConductor.js +0 -772
  220. package/bin/runners/runContainer.js +0 -366
  221. package/bin/runners/runEasy.js +0 -410
  222. package/bin/runners/runIaC.js +0 -372
  223. package/bin/runners/runVibe.js +0 -791
  224. package/mcp-server/tools.js +0 -495
@@ -1,123 +0,0 @@
1
- # Vibecheck Easy Mode
2
-
3
- **The simplest way to use Vibecheck.** No coding knowledge required.
4
-
5
- ---
6
-
7
- ## Getting Started
8
-
9
- Just run this in your project folder:
10
-
11
- ```bash
12
- npx vibecheck
13
- ```
14
-
15
- That's it! An interactive wizard will guide you through everything.
16
-
17
- ---
18
-
19
- ## Commands
20
-
21
- ### Test Your App (Reality Mode)
22
-
23
- ```bash
24
- npx vibecheck test
25
- ```
26
-
27
- This opens your app in a browser and tests it like a real user would:
28
- - Clicks all the buttons
29
- - Fills out forms
30
- - Checks if everything works
31
- - Creates a report of any issues found
32
-
33
- **Have a specific URL?**
34
- ```bash
35
- npx vibecheck test http://localhost:3000
36
- ```
37
-
38
- ---
39
-
40
- ### Protect Your Code (Firewall)
41
-
42
- ```bash
43
- npx vibecheck protect
44
- ```
45
-
46
- This sets up automatic protection that:
47
- - Watches your code as you write it
48
- - Warns you about security issues
49
- - Blocks bad code from being committed
50
- - Learns from your feedback
51
-
52
- **Turn it off:**
53
- ```bash
54
- npx vibecheck protect --off
55
- ```
56
-
57
- ---
58
-
59
- ### Check Status
60
-
61
- ```bash
62
- npx vibecheck status
63
- ```
64
-
65
- See what's currently enabled.
66
-
67
- ---
68
-
69
- ## What Gets Detected?
70
-
71
- ### Security Issues
72
- - Passwords in your code (should be in environment variables)
73
- - SQL injection vulnerabilities
74
- - Cross-site scripting (XSS) risks
75
-
76
- ### Quality Issues
77
- - Fake/mock data that shouldn't be in production
78
- - `console.log` statements (debugging leftovers)
79
- - TODO comments that need attention
80
-
81
- ### Suggestions
82
- - Missing error handling
83
- - TypeScript `any` types
84
- - Magic numbers (unexplained constants)
85
-
86
- ---
87
-
88
- ## Reports
89
-
90
- After testing, find your report at:
91
- ```
92
- vibecheck-report.html
93
- ```
94
-
95
- Just open it in your browser to see the full results.
96
-
97
- ---
98
-
99
- ## Need Help?
100
-
101
- - Run `npx vibecheck help` for more options
102
- - Visit [vibecheck.dev/docs](https://vibecheck.dev/docs)
103
- - Email support@vibecheck.dev
104
-
105
- ---
106
-
107
- ## Modes
108
-
109
- | Mode | Description |
110
- |------|-------------|
111
- | `protect` | Block critical issues, warn about others (default) |
112
- | `monitor` | Only warn, don't block anything |
113
- | `strict` | Block everything, including suggestions |
114
-
115
- Set mode when enabling:
116
- ```bash
117
- npx vibecheck protect --strict
118
- npx vibecheck protect --monitor
119
- ```
120
-
121
- ---
122
-
123
- Made with ♥ by the Vibecheck team
@@ -1,140 +0,0 @@
1
- /**
2
- * Easy Mode - Unified Export
3
- *
4
- * ═══════════════════════════════════════════════════════════════════════════════
5
- * EVERYTHING YOU NEED FOR ZERO-FRICTION VIBECHECK
6
- * ═══════════════════════════════════════════════════════════════════════════════
7
- *
8
- * This module exports all the easy-to-use components:
9
- *
10
- * 1. Interactive Wizard - Guided setup for new users
11
- * 2. Zero-Config Reality - One command to test your app
12
- * 3. One-Click Firewall - Instant protection
13
- */
14
-
15
- "use strict";
16
-
17
- // Interactive Wizard
18
- const {
19
- Wizard,
20
- showWelcomeBanner,
21
- colors,
22
- icons
23
- } = require("./interactive-wizard");
24
-
25
- // Zero-Config Reality Mode
26
- const {
27
- ZeroConfigReality,
28
- ProjectDetector,
29
- ServerManager,
30
- SimpleOutput
31
- } = require("./zero-config-reality");
32
-
33
- // One-Click Firewall
34
- const {
35
- OneClickFirewall,
36
- quickCheck,
37
- DEFAULT_FIREWALL_CONFIG
38
- } = require("./one-click-firewall");
39
-
40
- // ═══════════════════════════════════════════════════════════════════════════════
41
- // SUPER SIMPLE API
42
- // ═══════════════════════════════════════════════════════════════════════════════
43
-
44
- /**
45
- * Start the interactive wizard
46
- * @example
47
- * const { startWizard } = require('vibecheck/easy');
48
- * startWizard();
49
- */
50
- async function startWizard() {
51
- const wizard = new Wizard();
52
- return wizard.start();
53
- }
54
-
55
- /**
56
- * Test your app with zero configuration
57
- * @param {string} [url] - Optional URL to test (auto-detects if not provided)
58
- * @example
59
- * const { testApp } = require('vibecheck/easy');
60
- * testApp(); // Auto-detects your app
61
- * testApp('http://localhost:3000'); // Test specific URL
62
- */
63
- async function testApp(url) {
64
- const reality = new ZeroConfigReality({ url });
65
- return reality.run();
66
- }
67
-
68
- /**
69
- * Enable firewall protection with one line
70
- * @param {Object} [options] - Configuration options
71
- * @param {string} [options.mode='protect'] - 'monitor' | 'protect' | 'strict'
72
- * @example
73
- * const { enableProtection } = require('vibecheck/easy');
74
- * enableProtection(); // Enable with defaults
75
- * enableProtection({ mode: 'strict' }); // Enable strict mode
76
- */
77
- async function enableProtection(options = {}) {
78
- const firewall = new OneClickFirewall(options);
79
- return firewall.enable();
80
- }
81
-
82
- /**
83
- * Disable firewall protection
84
- * @example
85
- * const { disableProtection } = require('vibecheck/easy');
86
- * disableProtection();
87
- */
88
- async function disableProtection() {
89
- const firewall = new OneClickFirewall();
90
- return firewall.disable();
91
- }
92
-
93
- /**
94
- * Get current status
95
- * @example
96
- * const { getStatus } = require('vibecheck/easy');
97
- * const status = await getStatus();
98
- */
99
- async function getStatus() {
100
- const firewall = new OneClickFirewall({ quiet: true });
101
- return firewall.status();
102
- }
103
-
104
- /**
105
- * Quick check files (used by git hooks)
106
- * @param {Object} options
107
- * @param {boolean} options.staged - Check only staged files
108
- */
109
- async function checkFiles(options = {}) {
110
- return quickCheck(options);
111
- }
112
-
113
- // ═══════════════════════════════════════════════════════════════════════════════
114
- // EXPORTS
115
- // ═══════════════════════════════════════════════════════════════════════════════
116
-
117
- module.exports = {
118
- // Super simple API
119
- startWizard,
120
- testApp,
121
- enableProtection,
122
- disableProtection,
123
- getStatus,
124
- checkFiles,
125
-
126
- // Classes (for advanced usage)
127
- Wizard,
128
- ZeroConfigReality,
129
- OneClickFirewall,
130
- ProjectDetector,
131
- ServerManager,
132
- SimpleOutput,
133
-
134
- // Utilities
135
- colors,
136
- icons,
137
- showWelcomeBanner,
138
- quickCheck,
139
- DEFAULT_FIREWALL_CONFIG
140
- };