@vibecheckai/cli 3.5.1 → 3.5.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (272) hide show
  1. package/bin/registry.js +406 -154
  2. package/bin/runners/context/analyzer.js +52 -1
  3. package/bin/runners/context/generators/mcp.js +15 -13
  4. package/bin/runners/context/git-context.js +3 -1
  5. package/bin/runners/context/proof-context.js +248 -1
  6. package/bin/runners/context/team-conventions.js +33 -7
  7. package/bin/runners/lib/agent-firewall/ai/false-positive-analyzer.js +474 -0
  8. package/bin/runners/lib/agent-firewall/change-packet/builder.js +488 -0
  9. package/bin/runners/lib/agent-firewall/change-packet/schema.json +228 -0
  10. package/bin/runners/lib/agent-firewall/change-packet/store.js +200 -0
  11. package/bin/runners/lib/agent-firewall/claims/claim-types.js +21 -0
  12. package/bin/runners/lib/agent-firewall/claims/extractor.js +303 -0
  13. package/bin/runners/lib/agent-firewall/claims/patterns.js +24 -0
  14. package/bin/runners/lib/agent-firewall/critic/index.js +151 -0
  15. package/bin/runners/lib/agent-firewall/critic/judge.js +432 -0
  16. package/bin/runners/lib/agent-firewall/critic/prompts.js +305 -0
  17. package/bin/runners/lib/agent-firewall/evidence/auth-evidence.js +88 -0
  18. package/bin/runners/lib/agent-firewall/evidence/contract-evidence.js +75 -0
  19. package/bin/runners/lib/agent-firewall/evidence/env-evidence.js +127 -0
  20. package/bin/runners/lib/agent-firewall/evidence/resolver.js +102 -0
  21. package/bin/runners/lib/agent-firewall/evidence/route-evidence.js +213 -0
  22. package/bin/runners/lib/agent-firewall/evidence/side-effect-evidence.js +145 -0
  23. package/bin/runners/lib/agent-firewall/fs-hook/daemon.js +19 -0
  24. package/bin/runners/lib/agent-firewall/fs-hook/installer.js +87 -0
  25. package/bin/runners/lib/agent-firewall/fs-hook/watcher.js +184 -0
  26. package/bin/runners/lib/agent-firewall/git-hook/pre-commit.js +163 -0
  27. package/bin/runners/lib/agent-firewall/ide-extension/cursor.js +107 -0
  28. package/bin/runners/lib/agent-firewall/ide-extension/vscode.js +68 -0
  29. package/bin/runners/lib/agent-firewall/ide-extension/windsurf.js +66 -0
  30. package/bin/runners/lib/agent-firewall/interceptor/base.js +304 -0
  31. package/bin/runners/lib/agent-firewall/interceptor/cursor.js +35 -0
  32. package/bin/runners/lib/agent-firewall/interceptor/vscode.js +35 -0
  33. package/bin/runners/lib/agent-firewall/interceptor/windsurf.js +34 -0
  34. package/bin/runners/lib/agent-firewall/lawbook/distributor.js +465 -0
  35. package/bin/runners/lib/agent-firewall/lawbook/evaluator.js +604 -0
  36. package/bin/runners/lib/agent-firewall/lawbook/index.js +304 -0
  37. package/bin/runners/lib/agent-firewall/lawbook/registry.js +514 -0
  38. package/bin/runners/lib/agent-firewall/lawbook/schema.js +420 -0
  39. package/bin/runners/lib/agent-firewall/logger.js +141 -0
  40. package/bin/runners/lib/agent-firewall/policy/default-policy.json +90 -0
  41. package/bin/runners/lib/agent-firewall/policy/engine.js +103 -0
  42. package/bin/runners/lib/agent-firewall/policy/loader.js +451 -0
  43. package/bin/runners/lib/agent-firewall/policy/rules/auth-drift.js +50 -0
  44. package/bin/runners/lib/agent-firewall/policy/rules/contract-drift.js +50 -0
  45. package/bin/runners/lib/agent-firewall/policy/rules/fake-success.js +86 -0
  46. package/bin/runners/lib/agent-firewall/policy/rules/ghost-env.js +162 -0
  47. package/bin/runners/lib/agent-firewall/policy/rules/ghost-route.js +189 -0
  48. package/bin/runners/lib/agent-firewall/policy/rules/scope.js +93 -0
  49. package/bin/runners/lib/agent-firewall/policy/rules/unsafe-side-effect.js +57 -0
  50. package/bin/runners/lib/agent-firewall/policy/schema.json +183 -0
  51. package/bin/runners/lib/agent-firewall/policy/verdict.js +54 -0
  52. package/bin/runners/lib/agent-firewall/proposal/extractor.js +394 -0
  53. package/bin/runners/lib/agent-firewall/proposal/index.js +212 -0
  54. package/bin/runners/lib/agent-firewall/proposal/schema.js +251 -0
  55. package/bin/runners/lib/agent-firewall/proposal/validator.js +386 -0
  56. package/bin/runners/lib/agent-firewall/reality/index.js +332 -0
  57. package/bin/runners/lib/agent-firewall/reality/state.js +625 -0
  58. package/bin/runners/lib/agent-firewall/reality/watcher.js +322 -0
  59. package/bin/runners/lib/agent-firewall/risk/index.js +173 -0
  60. package/bin/runners/lib/agent-firewall/risk/scorer.js +328 -0
  61. package/bin/runners/lib/agent-firewall/risk/thresholds.js +321 -0
  62. package/bin/runners/lib/agent-firewall/risk/vectors.js +421 -0
  63. package/bin/runners/lib/agent-firewall/simulator/diff-simulator.js +472 -0
  64. package/bin/runners/lib/agent-firewall/simulator/import-resolver.js +346 -0
  65. package/bin/runners/lib/agent-firewall/simulator/index.js +181 -0
  66. package/bin/runners/lib/agent-firewall/simulator/route-validator.js +380 -0
  67. package/bin/runners/lib/agent-firewall/time-machine/incident-correlator.js +661 -0
  68. package/bin/runners/lib/agent-firewall/time-machine/index.js +267 -0
  69. package/bin/runners/lib/agent-firewall/time-machine/replay-engine.js +436 -0
  70. package/bin/runners/lib/agent-firewall/time-machine/state-reconstructor.js +490 -0
  71. package/bin/runners/lib/agent-firewall/time-machine/timeline-builder.js +530 -0
  72. package/bin/runners/lib/agent-firewall/truthpack/index.js +67 -0
  73. package/bin/runners/lib/agent-firewall/truthpack/loader.js +137 -0
  74. package/bin/runners/lib/agent-firewall/unblock/planner.js +337 -0
  75. package/bin/runners/lib/agent-firewall/utils/ignore-checker.js +118 -0
  76. package/bin/runners/lib/analysis-core.js +220 -182
  77. package/bin/runners/lib/analyzers.js +2145 -224
  78. package/bin/runners/lib/api-client.js +269 -0
  79. package/bin/runners/lib/authority-badge.js +425 -0
  80. package/bin/runners/lib/cli-output.js +242 -210
  81. package/bin/runners/lib/default-config.js +127 -0
  82. package/bin/runners/lib/detectors-v2.js +547 -785
  83. package/bin/runners/lib/doctor/modules/security.js +3 -1
  84. package/bin/runners/lib/engine/ast-cache.js +210 -0
  85. package/bin/runners/lib/engine/auth-extractor.js +211 -0
  86. package/bin/runners/lib/engine/billing-extractor.js +112 -0
  87. package/bin/runners/lib/engine/enforcement-extractor.js +100 -0
  88. package/bin/runners/lib/engine/env-extractor.js +207 -0
  89. package/bin/runners/lib/engine/express-extractor.js +208 -0
  90. package/bin/runners/lib/engine/extractors.js +849 -0
  91. package/bin/runners/lib/engine/index.js +207 -0
  92. package/bin/runners/lib/engine/repo-index.js +514 -0
  93. package/bin/runners/lib/engine/types.js +124 -0
  94. package/bin/runners/lib/engines/accessibility-engine.js +190 -0
  95. package/bin/runners/lib/engines/api-consistency-engine.js +162 -0
  96. package/bin/runners/lib/engines/ast-cache.js +99 -0
  97. package/bin/runners/lib/engines/code-quality-engine.js +255 -0
  98. package/bin/runners/lib/engines/console-logs-engine.js +115 -0
  99. package/bin/runners/lib/engines/cross-file-analysis-engine.js +268 -0
  100. package/bin/runners/lib/engines/dead-code-engine.js +198 -0
  101. package/bin/runners/lib/engines/deprecated-api-engine.js +226 -0
  102. package/bin/runners/lib/engines/empty-catch-engine.js +150 -0
  103. package/bin/runners/lib/engines/file-filter.js +131 -0
  104. package/bin/runners/lib/engines/hardcoded-secrets-engine.js +251 -0
  105. package/bin/runners/lib/engines/mock-data-engine.js +272 -0
  106. package/bin/runners/lib/engines/parallel-processor.js +71 -0
  107. package/bin/runners/lib/engines/performance-issues-engine.js +265 -0
  108. package/bin/runners/lib/engines/security-vulnerabilities-engine.js +243 -0
  109. package/bin/runners/lib/engines/todo-fixme-engine.js +115 -0
  110. package/bin/runners/lib/engines/type-aware-engine.js +152 -0
  111. package/bin/runners/lib/engines/unsafe-regex-engine.js +225 -0
  112. package/bin/runners/lib/engines/vibecheck-engines/README.md +53 -0
  113. package/bin/runners/lib/engines/vibecheck-engines/index.js +15 -0
  114. package/bin/runners/lib/engines/vibecheck-engines/lib/ast-cache.js +164 -0
  115. package/bin/runners/lib/engines/vibecheck-engines/lib/code-quality-engine.js +291 -0
  116. package/bin/runners/lib/engines/vibecheck-engines/lib/console-logs-engine.js +83 -0
  117. package/bin/runners/lib/engines/vibecheck-engines/lib/dead-code-engine.js +198 -0
  118. package/bin/runners/lib/engines/vibecheck-engines/lib/deprecated-api-engine.js +275 -0
  119. package/bin/runners/lib/engines/vibecheck-engines/lib/empty-catch-engine.js +167 -0
  120. package/bin/runners/lib/engines/vibecheck-engines/lib/file-filter.js +217 -0
  121. package/bin/runners/lib/engines/vibecheck-engines/lib/hardcoded-secrets-engine.js +139 -0
  122. package/bin/runners/lib/engines/vibecheck-engines/lib/mock-data-engine.js +140 -0
  123. package/bin/runners/lib/engines/vibecheck-engines/lib/parallel-processor.js +164 -0
  124. package/bin/runners/lib/engines/vibecheck-engines/lib/performance-issues-engine.js +234 -0
  125. package/bin/runners/lib/engines/vibecheck-engines/lib/type-aware-engine.js +217 -0
  126. package/bin/runners/lib/engines/vibecheck-engines/lib/unsafe-regex-engine.js +78 -0
  127. package/bin/runners/lib/engines/vibecheck-engines/package.json +13 -0
  128. package/bin/runners/lib/entitlements-v2.js +152 -446
  129. package/bin/runners/lib/error-handler.js +60 -12
  130. package/bin/runners/lib/error-messages.js +289 -0
  131. package/bin/runners/lib/evidence-pack.js +7 -1
  132. package/bin/runners/lib/exit-codes.js +275 -0
  133. package/bin/runners/lib/finding-id.js +69 -0
  134. package/bin/runners/lib/finding-sorter.js +89 -0
  135. package/bin/runners/lib/fingerprint.js +377 -0
  136. package/bin/runners/lib/global-flags.js +37 -0
  137. package/bin/runners/lib/help-formatter.js +413 -0
  138. package/bin/runners/lib/logger.js +38 -0
  139. package/bin/runners/lib/next-action.js +560 -0
  140. package/bin/runners/lib/prerequisites.js +149 -0
  141. package/bin/runners/lib/route-detection.js +137 -68
  142. package/bin/runners/lib/route-truth.js +1167 -322
  143. package/bin/runners/lib/scan-output.js +504 -463
  144. package/bin/runners/lib/scan-runner.js +135 -0
  145. package/bin/runners/lib/schemas/ajv-validator.js +464 -0
  146. package/bin/runners/lib/schemas/error-envelope.schema.json +105 -0
  147. package/bin/runners/lib/schemas/finding-v3.schema.json +151 -0
  148. package/bin/runners/lib/schemas/report-artifact.schema.json +120 -0
  149. package/bin/runners/lib/schemas/run-request.schema.json +108 -0
  150. package/bin/runners/lib/schemas/validator.js +27 -0
  151. package/bin/runners/lib/schemas/verdict.schema.json +140 -0
  152. package/bin/runners/lib/ship-output-enterprise.js +239 -0
  153. package/bin/runners/lib/ship-output.js +328 -31
  154. package/bin/runners/lib/terminal-ui.js +234 -731
  155. package/bin/runners/lib/truth.js +1332 -308
  156. package/bin/runners/lib/unified-cli-output.js +604 -0
  157. package/bin/runners/lib/unified-output.js +163 -155
  158. package/bin/runners/lib/upsell.js +104 -204
  159. package/bin/runners/runAgent.d.ts +5 -0
  160. package/bin/runners/runAgent.js +161 -0
  161. package/bin/runners/runAllowlist.js +166 -101
  162. package/bin/runners/runApprove.js +1200 -0
  163. package/bin/runners/runAuth.js +373 -95
  164. package/bin/runners/runCheckpoint.js +59 -21
  165. package/bin/runners/runClassify.js +926 -0
  166. package/bin/runners/runContext.d.ts +4 -0
  167. package/bin/runners/runContext.js +136 -24
  168. package/bin/runners/runDoctor.js +115 -67
  169. package/bin/runners/runEvidencePack.js +239 -96
  170. package/bin/runners/runFirewall.d.ts +5 -0
  171. package/bin/runners/runFirewall.js +134 -0
  172. package/bin/runners/runFirewallHook.d.ts +5 -0
  173. package/bin/runners/runFirewallHook.js +56 -0
  174. package/bin/runners/runFix.js +6 -5
  175. package/bin/runners/runGuard.js +212 -118
  176. package/bin/runners/runInit.js +66 -21
  177. package/bin/runners/runLabs.js +204 -121
  178. package/bin/runners/runMcp.js +131 -60
  179. package/bin/runners/runPolish.d.ts +4 -0
  180. package/bin/runners/runPolish.js +43 -20
  181. package/bin/runners/runProof.zip +0 -0
  182. package/bin/runners/runProve.js +15 -5
  183. package/bin/runners/runQuickstart.js +531 -0
  184. package/bin/runners/runReality.js +14 -0
  185. package/bin/runners/runReport.js +36 -4
  186. package/bin/runners/runScan.js +689 -91
  187. package/bin/runners/runShip.js +96 -40
  188. package/bin/runners/runTruth.d.ts +5 -0
  189. package/bin/runners/runTruth.js +101 -0
  190. package/bin/runners/runValidate.js +21 -4
  191. package/bin/runners/runWatch.js +118 -54
  192. package/bin/scan.js +6 -1
  193. package/bin/vibecheck.js +297 -52
  194. package/mcp-server/HARDENING_SUMMARY.md +299 -0
  195. package/mcp-server/agent-firewall-interceptor.js +500 -0
  196. package/mcp-server/authority-tools.js +569 -0
  197. package/mcp-server/conductor/conflict-resolver.js +588 -0
  198. package/mcp-server/conductor/execution-planner.js +544 -0
  199. package/mcp-server/conductor/index.js +377 -0
  200. package/mcp-server/conductor/lock-manager.js +615 -0
  201. package/mcp-server/conductor/request-queue.js +550 -0
  202. package/mcp-server/conductor/session-manager.js +500 -0
  203. package/mcp-server/conductor/tools.js +510 -0
  204. package/mcp-server/deprecation-middleware.js +282 -0
  205. package/mcp-server/handlers/index.ts +15 -0
  206. package/mcp-server/handlers/tool-handler.ts +474 -591
  207. package/mcp-server/index.js +1748 -1099
  208. package/mcp-server/lib/api-client.cjs +13 -0
  209. package/mcp-server/lib/cache-wrapper.cjs +383 -0
  210. package/mcp-server/lib/error-envelope.js +138 -0
  211. package/mcp-server/lib/executor.ts +428 -721
  212. package/mcp-server/lib/index.ts +19 -0
  213. package/mcp-server/lib/logger.cjs +30 -0
  214. package/mcp-server/lib/rate-limiter.js +166 -0
  215. package/mcp-server/lib/sandbox.test.ts +519 -0
  216. package/mcp-server/lib/sandbox.ts +342 -284
  217. package/mcp-server/lib/types.ts +267 -0
  218. package/mcp-server/logger.js +173 -0
  219. package/mcp-server/package.json +11 -27
  220. package/mcp-server/premium-tools.js +2 -2
  221. package/mcp-server/registry/tool-registry.js +794 -0
  222. package/mcp-server/registry/tools.json +507 -378
  223. package/mcp-server/registry.test.ts +334 -0
  224. package/mcp-server/tests/tier-gating.test.js +297 -0
  225. package/mcp-server/tier-auth.js +492 -347
  226. package/mcp-server/tools-v3.js +950 -0
  227. package/mcp-server/truth-context.js +131 -90
  228. package/mcp-server/truth-firewall-tools.js +1612 -1001
  229. package/mcp-server/tsconfig.json +8 -5
  230. package/mcp-server/vibecheck-2.0-tools.js +14 -1
  231. package/mcp-server/vibecheck-mcp-server-3.2.0.tgz +0 -0
  232. package/mcp-server/vibecheck-tools.js +2 -2
  233. package/package.json +4 -3
  234. package/bin/runners/runInstall.js +0 -281
  235. package/mcp-server/ARCHITECTURE.md +0 -339
  236. package/mcp-server/__tests__/cache.test.ts +0 -313
  237. package/mcp-server/__tests__/executor.test.ts +0 -239
  238. package/mcp-server/__tests__/fixtures/exclusion-test/.cache/webpack/cache.pack +0 -1
  239. package/mcp-server/__tests__/fixtures/exclusion-test/.next/server/chunk.js +0 -3
  240. package/mcp-server/__tests__/fixtures/exclusion-test/.turbo/cache.json +0 -3
  241. package/mcp-server/__tests__/fixtures/exclusion-test/.venv/lib/env.py +0 -3
  242. package/mcp-server/__tests__/fixtures/exclusion-test/dist/bundle.js +0 -3
  243. package/mcp-server/__tests__/fixtures/exclusion-test/package.json +0 -5
  244. package/mcp-server/__tests__/fixtures/exclusion-test/src/app.ts +0 -5
  245. package/mcp-server/__tests__/fixtures/exclusion-test/venv/lib/config.py +0 -4
  246. package/mcp-server/__tests__/ids.test.ts +0 -345
  247. package/mcp-server/__tests__/integration/tools.test.ts +0 -410
  248. package/mcp-server/__tests__/registry.test.ts +0 -365
  249. package/mcp-server/__tests__/sandbox.test.ts +0 -323
  250. package/mcp-server/__tests__/schemas.test.ts +0 -372
  251. package/mcp-server/benchmarks/run-benchmarks.ts +0 -304
  252. package/mcp-server/examples/doctor.request.json +0 -14
  253. package/mcp-server/examples/doctor.response.json +0 -53
  254. package/mcp-server/examples/error.response.json +0 -15
  255. package/mcp-server/examples/scan.request.json +0 -14
  256. package/mcp-server/examples/scan.response.json +0 -108
  257. package/mcp-server/index-v3.ts +0 -293
  258. package/mcp-server/index.old.js +0 -4137
  259. package/mcp-server/lib/cache.ts +0 -341
  260. package/mcp-server/lib/errors.ts +0 -346
  261. package/mcp-server/lib/ids.ts +0 -238
  262. package/mcp-server/lib/logger.ts +0 -368
  263. package/mcp-server/lib/metrics.ts +0 -365
  264. package/mcp-server/lib/validator.ts +0 -229
  265. package/mcp-server/package-lock.json +0 -165
  266. package/mcp-server/schemas/error-envelope.schema.json +0 -125
  267. package/mcp-server/schemas/finding.schema.json +0 -167
  268. package/mcp-server/schemas/report-artifact.schema.json +0 -88
  269. package/mcp-server/schemas/run-request.schema.json +0 -75
  270. package/mcp-server/schemas/verdict.schema.json +0 -168
  271. package/mcp-server/tier-auth.d.ts +0 -71
  272. package/mcp-server/vitest.config.ts +0 -16
@@ -0,0 +1,531 @@
1
+ /**
2
+ * Vibecheck Quickstart - 2-Minute Onboarding Flow
3
+ *
4
+ * Orchestrates: doctor → ctx → scan → ship → report
5
+ * Gets user to first proof in under 2 minutes.
6
+ *
7
+ * @module bin/runners/runQuickstart
8
+ */
9
+
10
+ "use strict";
11
+
12
+ const fs = require("fs");
13
+ const path = require("path");
14
+ const { withErrorHandling } = require("./lib/error-handler");
15
+ const { parseGlobalFlags, shouldShowBanner } = require("./lib/global-flags");
16
+ const { generateRunId, createJsonOutput, writeJsonOutput, saveArtifact } = require("./lib/cli-output");
17
+ const { formatNextAction, formatDashboardLink, DASHBOARD_URL } = require("./lib/next-action");
18
+ const { EXIT } = require("./lib/exit-codes");
19
+
20
+ // ═══════════════════════════════════════════════════════════════════════════════
21
+ // ANSI STYLING
22
+ // ═══════════════════════════════════════════════════════════════════════════════
23
+
24
+ const SUPPORTS_COLOR = process.stdout.isTTY && !process.env.NO_COLOR;
25
+
26
+ const c = SUPPORTS_COLOR ? {
27
+ reset: "\x1b[0m",
28
+ bold: "\x1b[1m",
29
+ dim: "\x1b[2m",
30
+ red: "\x1b[31m",
31
+ green: "\x1b[32m",
32
+ yellow: "\x1b[33m",
33
+ cyan: "\x1b[36m",
34
+ magenta: "\x1b[35m",
35
+ white: "\x1b[37m",
36
+ gray: "\x1b[90m",
37
+ bgGreen: "\x1b[42m",
38
+ bgYellow: "\x1b[43m",
39
+ bgRed: "\x1b[41m",
40
+ bgCyan: "\x1b[46m",
41
+ } : {
42
+ reset: "", bold: "", dim: "", red: "", green: "", yellow: "",
43
+ cyan: "", magenta: "", white: "", gray: "", bgGreen: "", bgYellow: "", bgRed: "", bgCyan: "",
44
+ };
45
+
46
+ const sym = {
47
+ check: "✓",
48
+ cross: "✗",
49
+ arrow: "→",
50
+ spinner: ["⠋", "⠙", "⠹", "⠸", "⠼", "⠴", "⠦", "⠧", "⠇", "⠏"],
51
+ rocket: "🚀",
52
+ shield: "🛡️",
53
+ doc: "📄",
54
+ link: "🔗",
55
+ star: "★",
56
+ clock: "⏱",
57
+ warning: "⚠",
58
+ };
59
+
60
+ // ═══════════════════════════════════════════════════════════════════════════════
61
+ // BANNER
62
+ // ═══════════════════════════════════════════════════════════════════════════════
63
+
64
+ const QUICKSTART_BANNER = `
65
+ ${c.cyan} ╔═══════════════════════════════════════════════════════════════╗${c.reset}
66
+ ${c.cyan} ║${c.reset} ${c.bold}VIBECHECK QUICKSTART${c.reset} ${c.cyan}║${c.reset}
67
+ ${c.cyan} ╠═══════════════════════════════════════════════════════════════╣${c.reset}
68
+ ${c.cyan} ║${c.reset} ${c.dim}Get your first proof in under 2 minutes${c.reset} ${c.cyan}║${c.reset}
69
+ ${c.cyan} ║${c.reset} ${c.cyan}║${c.reset}
70
+ ${c.cyan} ║${c.reset} ${c.dim}This will run:${c.reset} doctor ${c.dim}→${c.reset} ctx ${c.dim}→${c.reset} scan ${c.dim}→${c.reset} ship ${c.dim}→${c.reset} report ${c.cyan}║${c.reset}
71
+ ${c.cyan} ║${c.reset} ${c.dim}Estimated time:${c.reset} ~90 seconds ${c.cyan}║${c.reset}
72
+ ${c.cyan} ╚═══════════════════════════════════════════════════════════════╝${c.reset}
73
+ `;
74
+
75
+ function printBanner() {
76
+ console.log(QUICKSTART_BANNER);
77
+ }
78
+
79
+ // ═══════════════════════════════════════════════════════════════════════════════
80
+ // PROGRESS DISPLAY
81
+ // ═══════════════════════════════════════════════════════════════════════════════
82
+
83
+ function printStepStart(stepNum, totalSteps, stepName, description) {
84
+ const progress = `[${stepNum}/${totalSteps}]`;
85
+ console.log(` ${c.cyan}${progress}${c.reset} ${stepName}... ${c.dim}${description}${c.reset}`);
86
+ }
87
+
88
+ function printStepSuccess(stepName, duration, detail = "") {
89
+ const durationStr = duration ? `${c.dim}(${duration}ms)${c.reset}` : "";
90
+ const detailStr = detail ? `${c.dim}${detail}${c.reset}` : "";
91
+ console.log(` ${c.green}${sym.check}${c.reset} ${stepName} ${durationStr} ${detailStr}`);
92
+ }
93
+
94
+ function printStepFailure(stepName, error) {
95
+ console.log(` ${c.red}${sym.cross}${c.reset} ${stepName} failed: ${error}`);
96
+ }
97
+
98
+ function printStepSkipped(stepName, reason) {
99
+ console.log(` ${c.yellow}${sym.arrow}${c.reset} ${stepName} skipped: ${c.dim}${reason}${c.reset}`);
100
+ }
101
+
102
+ // ═══════════════════════════════════════════════════════════════════════════════
103
+ // VERDICT DISPLAY
104
+ // ═══════════════════════════════════════════════════════════════════════════════
105
+
106
+ function printVerdictBox(verdict, score, findings) {
107
+ const blockers = findings.filter(f => f.severity === "BLOCK" || f.severity === "critical").length;
108
+ const warnings = findings.filter(f => f.severity === "WARN" || f.severity === "warning").length;
109
+
110
+ let bgColor, icon, headline;
111
+ if (verdict === "SHIP") {
112
+ bgColor = c.bgGreen;
113
+ icon = sym.rocket;
114
+ headline = "SHIP";
115
+ } else if (verdict === "WARN") {
116
+ bgColor = c.bgYellow;
117
+ icon = sym.warning;
118
+ headline = "WARN";
119
+ } else {
120
+ bgColor = c.bgRed;
121
+ icon = sym.cross;
122
+ headline = "BLOCK";
123
+ }
124
+
125
+ console.log();
126
+ console.log(` ${c.dim}══════════════════════════════════════════════════════════════════${c.reset}`);
127
+ console.log(` ${bgColor}${c.bold}${c.white} ${icon} VERDICT: ${headline} ${c.reset}`);
128
+ console.log(` ${c.dim}══════════════════════════════════════════════════════════════════${c.reset}`);
129
+ console.log();
130
+ console.log(` ${c.bold}Score:${c.reset} ${score}/100`);
131
+ console.log(` ${c.bold}Blockers:${c.reset} ${blockers > 0 ? c.red : c.green}${blockers}${c.reset}`);
132
+ console.log(` ${c.bold}Warnings:${c.reset} ${warnings > 0 ? c.yellow : c.green}${warnings}${c.reset}`);
133
+ console.log();
134
+ }
135
+
136
+ // ═══════════════════════════════════════════════════════════════════════════════
137
+ // ARGS PARSER
138
+ // ═══════════════════════════════════════════════════════════════════════════════
139
+
140
+ function parseArgs(args) {
141
+ const { flags: globalFlags, cleanArgs } = parseGlobalFlags(args);
142
+
143
+ const opts = {
144
+ path: globalFlags.path || process.cwd(),
145
+ json: globalFlags.json || false,
146
+ ci: globalFlags.ci || false,
147
+ quiet: globalFlags.quiet || false,
148
+ verbose: globalFlags.verbose || false,
149
+ noBanner: globalFlags.noBanner || false,
150
+ help: globalFlags.help || false,
151
+ fast: false, // Skip optional checks
152
+ noOpen: false, // Don't open report in browser
153
+ };
154
+
155
+ for (let i = 0; i < cleanArgs.length; i++) {
156
+ const arg = cleanArgs[i];
157
+ if (arg === "--fast") opts.fast = true;
158
+ else if (arg === "--no-open") opts.noOpen = true;
159
+ else if (arg === "--path" || arg === "-p") opts.path = cleanArgs[++i] || process.cwd();
160
+ else if (arg.startsWith("--path=")) opts.path = arg.split("=")[1];
161
+ }
162
+
163
+ return opts;
164
+ }
165
+
166
+ function printHelp(showBanner = true) {
167
+ if (showBanner) printBanner();
168
+ console.log(`
169
+ ${c.bold}USAGE${c.reset}
170
+ ${c.cyan}vibecheck quickstart${c.reset} [options]
171
+
172
+ ${c.dim}Get your first proof in under 2 minutes.${c.reset}
173
+ ${c.dim}Runs: doctor → ctx → scan → ship → report${c.reset}
174
+
175
+ ${c.bold}OPTIONS${c.reset}
176
+ ${c.cyan}--fast${c.reset} Skip optional checks for speed
177
+ ${c.cyan}--no-open${c.reset} Don't open report in browser
178
+ ${c.cyan}--path, -p <dir>${c.reset} Project path ${c.dim}(default: current directory)${c.reset}
179
+ ${c.cyan}--json${c.reset} Output as JSON
180
+ ${c.cyan}--quiet, -q${c.reset} Suppress non-essential output
181
+ ${c.cyan}--help, -h${c.reset} Show this help
182
+
183
+ ${c.bold}EXAMPLES${c.reset}
184
+ ${c.dim}# Quick onboarding${c.reset}
185
+ vibecheck quickstart
186
+
187
+ ${c.dim}# Fast mode (skip optional checks)${c.reset}
188
+ vibecheck quickstart --fast
189
+
190
+ ${c.dim}# JSON output for automation${c.reset}
191
+ vibecheck quickstart --json
192
+ `);
193
+ }
194
+
195
+ // ═══════════════════════════════════════════════════════════════════════════════
196
+ // STEP RUNNERS
197
+ // ═══════════════════════════════════════════════════════════════════════════════
198
+
199
+ async function runDoctorStep(projectPath, opts) {
200
+ const { runDoctor } = require("./runDoctor");
201
+ const start = Date.now();
202
+
203
+ try {
204
+ // Run doctor with quiet mode
205
+ const result = await runDoctor(["--quiet", "--path", projectPath]);
206
+ return {
207
+ success: result === 0,
208
+ duration: Date.now() - start,
209
+ result,
210
+ };
211
+ } catch (error) {
212
+ return {
213
+ success: false,
214
+ duration: Date.now() - start,
215
+ error: error.message,
216
+ };
217
+ }
218
+ }
219
+
220
+ async function runContextStep(projectPath, opts) {
221
+ const start = Date.now();
222
+
223
+ try {
224
+ // Check if context module exists
225
+ let runContext;
226
+ try {
227
+ runContext = require("./runContext").runContext;
228
+ } catch {
229
+ // Context might not exist, skip gracefully
230
+ return {
231
+ success: true,
232
+ skipped: true,
233
+ duration: Date.now() - start,
234
+ reason: "Context module not available",
235
+ };
236
+ }
237
+
238
+ const result = await runContext(["--quiet", "--path", projectPath]);
239
+ return {
240
+ success: result === 0,
241
+ duration: Date.now() - start,
242
+ result,
243
+ };
244
+ } catch (error) {
245
+ return {
246
+ success: false,
247
+ duration: Date.now() - start,
248
+ error: error.message,
249
+ };
250
+ }
251
+ }
252
+
253
+ async function runScanStep(projectPath, opts) {
254
+ const { runScan } = require("./runScan");
255
+ const start = Date.now();
256
+
257
+ try {
258
+ const scanArgs = ["--path", projectPath];
259
+ if (opts.fast) scanArgs.push("--no-baseline");
260
+
261
+ const result = await runScan(scanArgs);
262
+
263
+ // Load scan results
264
+ let scanData = null;
265
+ const latestPath = path.join(projectPath, ".vibecheck", "results", "latest.json");
266
+ if (fs.existsSync(latestPath)) {
267
+ try {
268
+ scanData = JSON.parse(fs.readFileSync(latestPath, "utf-8"));
269
+ } catch {}
270
+ }
271
+
272
+ return {
273
+ success: true, // Scan itself succeeded even if findings exist
274
+ duration: Date.now() - start,
275
+ exitCode: result,
276
+ data: scanData,
277
+ filesScanned: scanData?.result?.stats?.filesScanned || 0,
278
+ findings: scanData?.result?.findings?.length || 0,
279
+ };
280
+ } catch (error) {
281
+ return {
282
+ success: false,
283
+ duration: Date.now() - start,
284
+ error: error.message,
285
+ };
286
+ }
287
+ }
288
+
289
+ async function runShipStep(projectPath, opts, context = {}) {
290
+ const { runShip } = require("./runShip");
291
+ const start = Date.now();
292
+
293
+ try {
294
+ const shipArgs = ["--path", projectPath, "--no-banner"];
295
+
296
+ const result = await runShip(shipArgs, context);
297
+
298
+ // Load ship results
299
+ let shipData = null;
300
+ const shipPath = path.join(projectPath, ".vibecheck", "last_ship.json");
301
+ if (fs.existsSync(shipPath)) {
302
+ try {
303
+ shipData = JSON.parse(fs.readFileSync(shipPath, "utf-8"));
304
+ } catch {}
305
+ }
306
+
307
+ const verdict = shipData?.meta?.verdict ||
308
+ (result === 0 ? "SHIP" : result === 1 ? "WARN" : "BLOCK");
309
+
310
+ return {
311
+ success: true,
312
+ duration: Date.now() - start,
313
+ exitCode: result,
314
+ verdict,
315
+ data: shipData,
316
+ };
317
+ } catch (error) {
318
+ return {
319
+ success: false,
320
+ duration: Date.now() - start,
321
+ error: error.message,
322
+ };
323
+ }
324
+ }
325
+
326
+ async function runReportStep(projectPath, opts) {
327
+ const start = Date.now();
328
+
329
+ try {
330
+ let runReport;
331
+ try {
332
+ runReport = require("./runReport").runReport;
333
+ } catch {
334
+ // Report might not exist, skip gracefully
335
+ return {
336
+ success: true,
337
+ skipped: true,
338
+ duration: Date.now() - start,
339
+ reason: "Report module not available",
340
+ };
341
+ }
342
+
343
+ const reportArgs = ["--format", "html", "--path", projectPath];
344
+ if (!opts.noOpen) reportArgs.push("--open");
345
+
346
+ const result = await runReport(reportArgs);
347
+
348
+ const reportPath = path.join(projectPath, ".vibecheck", "report.html");
349
+
350
+ return {
351
+ success: result === 0,
352
+ duration: Date.now() - start,
353
+ reportPath: fs.existsSync(reportPath) ? reportPath : null,
354
+ };
355
+ } catch (error) {
356
+ return {
357
+ success: false,
358
+ duration: Date.now() - start,
359
+ error: error.message,
360
+ };
361
+ }
362
+ }
363
+
364
+ // ═══════════════════════════════════════════════════════════════════════════════
365
+ // MAIN QUICKSTART FUNCTION
366
+ // ═══════════════════════════════════════════════════════════════════════════════
367
+
368
+ async function runQuickstart(args, context = {}) {
369
+ const runId = context.runId || generateRunId();
370
+ const startTime = context.startTime || new Date().toISOString();
371
+ const opts = parseArgs(args);
372
+ const executionStart = Date.now();
373
+
374
+ // Show help if requested
375
+ if (opts.help) {
376
+ printHelp(shouldShowBanner(opts));
377
+ return 0;
378
+ }
379
+
380
+ const projectPath = path.resolve(opts.path);
381
+ const projectName = path.basename(projectPath);
382
+
383
+ // Print banner
384
+ if (shouldShowBanner(opts)) {
385
+ printBanner();
386
+ console.log(` ${c.dim}Project:${c.reset} ${c.bold}${projectName}${c.reset}`);
387
+ console.log(` ${c.dim}Path:${c.reset} ${projectPath}`);
388
+ console.log();
389
+ }
390
+
391
+ // Validate project path
392
+ if (!fs.existsSync(projectPath)) {
393
+ console.error(`${c.red}${sym.cross}${c.reset} Project path does not exist: ${projectPath}`);
394
+ return EXIT.USER_ERROR;
395
+ }
396
+
397
+ const steps = [
398
+ { name: "Doctor", description: "checking environment", runner: runDoctorStep },
399
+ { name: "Context", description: "generating truth pack", runner: runContextStep },
400
+ { name: "Scan", description: "analyzing code", runner: runScanStep },
401
+ { name: "Ship", description: "computing verdict", runner: runShipStep },
402
+ { name: "Report", description: "generating report", runner: runReportStep },
403
+ ];
404
+
405
+ const results = {};
406
+ let lastResult = null;
407
+ let hasError = false;
408
+
409
+ for (let i = 0; i < steps.length; i++) {
410
+ const step = steps[i];
411
+
412
+ if (!opts.json && !opts.quiet) {
413
+ printStepStart(i + 1, steps.length, step.name, step.description);
414
+ }
415
+
416
+ const stepResult = await step.runner(projectPath, opts, context);
417
+ results[step.name.toLowerCase()] = stepResult;
418
+ lastResult = stepResult;
419
+
420
+ if (!opts.json && !opts.quiet) {
421
+ if (stepResult.skipped) {
422
+ printStepSkipped(step.name, stepResult.reason);
423
+ } else if (stepResult.success) {
424
+ let detail = "";
425
+ if (step.name === "Scan" && stepResult.findings !== undefined) {
426
+ detail = `${stepResult.findings} findings`;
427
+ }
428
+ if (step.name === "Ship" && stepResult.verdict) {
429
+ detail = stepResult.verdict;
430
+ }
431
+ printStepSuccess(step.name, stepResult.duration, detail);
432
+ } else {
433
+ printStepFailure(step.name, stepResult.error);
434
+ hasError = true;
435
+ // Don't break - try to continue with remaining steps
436
+ }
437
+ }
438
+ }
439
+
440
+ const totalDuration = Date.now() - executionStart;
441
+
442
+ // Get final verdict from ship step
443
+ const shipResult = results.ship;
444
+ const scanResult = results.scan;
445
+ const verdict = shipResult?.verdict || "UNKNOWN";
446
+ const score = shipResult?.data?.proofGraph?.summary?.riskScore
447
+ ? 100 - shipResult.data.proofGraph.summary.riskScore
448
+ : scanResult?.data?.result?.score || 0;
449
+ const findings = shipResult?.data?.findings || scanResult?.data?.result?.findings || [];
450
+
451
+ // JSON output
452
+ if (opts.json) {
453
+ const output = createJsonOutput({
454
+ runId,
455
+ command: "quickstart",
456
+ startTime,
457
+ exitCode: hasError ? EXIT.INTERNAL_ERROR : (shipResult?.exitCode || 0),
458
+ verdict,
459
+ result: {
460
+ verdict,
461
+ score,
462
+ steps: results,
463
+ duration: totalDuration,
464
+ findings: findings.length,
465
+ reportPath: results.report?.reportPath,
466
+ dashboardUrl: `${DASHBOARD_URL}/runs/${runId}`,
467
+ },
468
+ artifacts: [
469
+ results.report?.reportPath && {
470
+ type: "report",
471
+ path: results.report.reportPath,
472
+ description: "HTML report",
473
+ },
474
+ ].filter(Boolean),
475
+ });
476
+
477
+ writeJsonOutput(output, opts.output);
478
+ return output.exitCode;
479
+ }
480
+
481
+ // Human-readable output
482
+ if (!opts.quiet) {
483
+ // Print verdict box
484
+ printVerdictBox(verdict, score, findings);
485
+
486
+ // Print report location
487
+ if (results.report?.reportPath) {
488
+ console.log(` ${sym.doc} ${c.bold}Report:${c.reset} ${results.report.reportPath}`);
489
+ }
490
+
491
+ // Print dashboard link
492
+ console.log(` ${sym.link} ${c.bold}Dashboard:${c.reset} ${DASHBOARD_URL}/runs/${runId}`);
493
+ console.log();
494
+
495
+ // Print completion time
496
+ console.log(` ${sym.clock} ${c.dim}Completed in ${(totalDuration / 1000).toFixed(1)}s${c.reset}`);
497
+ console.log();
498
+
499
+ // Print next action
500
+ const { getNextActionForCommand } = require("./lib/next-action");
501
+ const tier = context?.authInfo?.access?.tier || "free";
502
+ const nextAction = getNextActionForCommand("ship", { verdict, runId, findings }, tier);
503
+ console.log(formatNextAction(nextAction));
504
+ }
505
+
506
+ // Save quickstart summary
507
+ saveArtifact(runId, "quickstart-summary", {
508
+ verdict,
509
+ score,
510
+ duration: totalDuration,
511
+ steps: Object.fromEntries(
512
+ Object.entries(results).map(([k, v]) => [k, {
513
+ success: v.success,
514
+ duration: v.duration,
515
+ skipped: v.skipped || false,
516
+ }])
517
+ ),
518
+ timestamp: new Date().toISOString(),
519
+ });
520
+
521
+ // Return ship exit code
522
+ return shipResult?.exitCode || 0;
523
+ }
524
+
525
+ // ═══════════════════════════════════════════════════════════════════════════════
526
+ // EXPORTS
527
+ // ═══════════════════════════════════════════════════════════════════════════════
528
+
529
+ module.exports = {
530
+ runQuickstart: withErrorHandling(runQuickstart, "Quickstart failed"),
531
+ };
@@ -32,6 +32,7 @@ const { parseGlobalFlags, shouldShowBanner } = require("./lib/global-flags");
32
32
 
33
33
  // Entitlements enforcement
34
34
  const entitlements = require("./lib/entitlements-v2");
35
+ const upsell = require("./lib/upsell");
35
36
 
36
37
  let chromium;
37
38
  let playwrightError = null;
@@ -2076,6 +2077,19 @@ async function runReality(argsOrOpts = {}) {
2076
2077
  console.log();
2077
2078
  }
2078
2079
 
2080
+ // Upsell for free tier users running in preview mode
2081
+ const currentTier = entitlements.getCurrentTierSync ? entitlements.getCurrentTierSync() : 'free';
2082
+ if (currentTier === 'free') {
2083
+ console.log(upsell.formatEarnedUpsell({
2084
+ cmd: "reality",
2085
+ why: "cap_hit",
2086
+ topIssues: findings.slice(0, 5),
2087
+ upgradeTier: "starter",
2088
+ }));
2089
+ console.log(upsell.formatNextSteps("reality", blocks > 0 ? "BLOCK" : warns > 0 ? "WARN" : "SHIP", currentTier));
2090
+ console.log();
2091
+ }
2092
+
2079
2093
  process.exitCode = blocks ? 2 : warns ? 1 : 0;
2080
2094
  return process.exitCode;
2081
2095
  }
@@ -18,6 +18,8 @@
18
18
  const path = require("path");
19
19
  const fs = require("fs");
20
20
  const { parseGlobalFlags, shouldShowBanner } = require("./lib/global-flags");
21
+ const { EXIT } = require("./lib/exit-codes");
22
+ const { ensureScanResults } = require("./lib/prerequisites");
21
23
 
22
24
  // Entitlements enforcement
23
25
  let entitlements;
@@ -201,13 +203,43 @@ async function runReport(args) {
201
203
  const spinner = new Spinner({ color: colors.accent });
202
204
  spinner.start(`Generating ${opts.type} report`);
203
205
 
204
- // Load ship results
206
+ // Auto-run scan if results are missing (unless in CI or explicitly disabled)
207
+ const scanPrereq = await ensureScanResults(projectPath, {
208
+ quiet: opts.quiet,
209
+ json: opts.json,
210
+ ci: opts.ci,
211
+ colors,
212
+ icons,
213
+ ansi,
214
+ });
215
+
216
+ if (scanPrereq.ran && !scanPrereq.success && !opts.quiet) {
217
+ spinner.warn("Auto-run scan failed - continuing with available data");
218
+ }
219
+
220
+ // Load ship results (prefer ship results, fall back to scan results)
205
221
  let shipResults = loadShipResults(projectPath, outputDir);
222
+
223
+ // If no ship results, try to load scan results
224
+ if (!shipResults) {
225
+ const scanResultsPath = path.join(projectPath, ".vibecheck", "results", "latest.json");
226
+ if (fs.existsSync(scanResultsPath)) {
227
+ try {
228
+ const scanData = JSON.parse(fs.readFileSync(scanResultsPath, "utf8"));
229
+ shipResults = {
230
+ score: scanData.result?.score || scanData.score || 0,
231
+ verdict: scanData.result?.verdict || scanData.verdict || "UNKNOWN",
232
+ findings: scanData.result?.findings || scanData.findings || [],
233
+ truthpack: scanData.truthpack || null,
234
+ };
235
+ } catch {}
236
+ }
237
+ }
206
238
 
207
239
  if (!shipResults) {
208
240
  spinner.warn("No scan results found - using demo data");
209
241
  if (!opts.quiet) {
210
- console.log(` ${ansi.dim}Tip: Run 'vibecheck ship' first for real results.${ansi.reset}\n`);
242
+ console.log(` ${ansi.dim}Tip: Run 'vibecheck scan' first for real results.${ansi.reset}\n`);
211
243
  }
212
244
  shipResults = getDemoData();
213
245
  }
@@ -264,11 +296,11 @@ async function runReport(args) {
264
296
  default:
265
297
  spinner.fail(`Unknown format: ${format}`);
266
298
  console.log(` ${ansi.dim}Supported: html, md, json, sarif, csv, pdf${ansi.reset}`);
267
- return 1;
299
+ return EXIT.USER_ERROR;
268
300
  }
269
301
  } catch (err) {
270
302
  spinner.fail(`Failed to generate report: ${err.message}`);
271
- return 1;
303
+ return EXIT.INTERNAL_ERROR;
272
304
  }
273
305
 
274
306
  // Determine output path