@vibecheckai/cli 3.5.1 → 3.5.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (272) hide show
  1. package/bin/registry.js +406 -154
  2. package/bin/runners/context/analyzer.js +52 -1
  3. package/bin/runners/context/generators/mcp.js +15 -13
  4. package/bin/runners/context/git-context.js +3 -1
  5. package/bin/runners/context/proof-context.js +248 -1
  6. package/bin/runners/context/team-conventions.js +33 -7
  7. package/bin/runners/lib/agent-firewall/ai/false-positive-analyzer.js +474 -0
  8. package/bin/runners/lib/agent-firewall/change-packet/builder.js +488 -0
  9. package/bin/runners/lib/agent-firewall/change-packet/schema.json +228 -0
  10. package/bin/runners/lib/agent-firewall/change-packet/store.js +200 -0
  11. package/bin/runners/lib/agent-firewall/claims/claim-types.js +21 -0
  12. package/bin/runners/lib/agent-firewall/claims/extractor.js +303 -0
  13. package/bin/runners/lib/agent-firewall/claims/patterns.js +24 -0
  14. package/bin/runners/lib/agent-firewall/critic/index.js +151 -0
  15. package/bin/runners/lib/agent-firewall/critic/judge.js +432 -0
  16. package/bin/runners/lib/agent-firewall/critic/prompts.js +305 -0
  17. package/bin/runners/lib/agent-firewall/evidence/auth-evidence.js +88 -0
  18. package/bin/runners/lib/agent-firewall/evidence/contract-evidence.js +75 -0
  19. package/bin/runners/lib/agent-firewall/evidence/env-evidence.js +127 -0
  20. package/bin/runners/lib/agent-firewall/evidence/resolver.js +102 -0
  21. package/bin/runners/lib/agent-firewall/evidence/route-evidence.js +213 -0
  22. package/bin/runners/lib/agent-firewall/evidence/side-effect-evidence.js +145 -0
  23. package/bin/runners/lib/agent-firewall/fs-hook/daemon.js +19 -0
  24. package/bin/runners/lib/agent-firewall/fs-hook/installer.js +87 -0
  25. package/bin/runners/lib/agent-firewall/fs-hook/watcher.js +184 -0
  26. package/bin/runners/lib/agent-firewall/git-hook/pre-commit.js +163 -0
  27. package/bin/runners/lib/agent-firewall/ide-extension/cursor.js +107 -0
  28. package/bin/runners/lib/agent-firewall/ide-extension/vscode.js +68 -0
  29. package/bin/runners/lib/agent-firewall/ide-extension/windsurf.js +66 -0
  30. package/bin/runners/lib/agent-firewall/interceptor/base.js +304 -0
  31. package/bin/runners/lib/agent-firewall/interceptor/cursor.js +35 -0
  32. package/bin/runners/lib/agent-firewall/interceptor/vscode.js +35 -0
  33. package/bin/runners/lib/agent-firewall/interceptor/windsurf.js +34 -0
  34. package/bin/runners/lib/agent-firewall/lawbook/distributor.js +465 -0
  35. package/bin/runners/lib/agent-firewall/lawbook/evaluator.js +604 -0
  36. package/bin/runners/lib/agent-firewall/lawbook/index.js +304 -0
  37. package/bin/runners/lib/agent-firewall/lawbook/registry.js +514 -0
  38. package/bin/runners/lib/agent-firewall/lawbook/schema.js +420 -0
  39. package/bin/runners/lib/agent-firewall/logger.js +141 -0
  40. package/bin/runners/lib/agent-firewall/policy/default-policy.json +90 -0
  41. package/bin/runners/lib/agent-firewall/policy/engine.js +103 -0
  42. package/bin/runners/lib/agent-firewall/policy/loader.js +451 -0
  43. package/bin/runners/lib/agent-firewall/policy/rules/auth-drift.js +50 -0
  44. package/bin/runners/lib/agent-firewall/policy/rules/contract-drift.js +50 -0
  45. package/bin/runners/lib/agent-firewall/policy/rules/fake-success.js +86 -0
  46. package/bin/runners/lib/agent-firewall/policy/rules/ghost-env.js +162 -0
  47. package/bin/runners/lib/agent-firewall/policy/rules/ghost-route.js +189 -0
  48. package/bin/runners/lib/agent-firewall/policy/rules/scope.js +93 -0
  49. package/bin/runners/lib/agent-firewall/policy/rules/unsafe-side-effect.js +57 -0
  50. package/bin/runners/lib/agent-firewall/policy/schema.json +183 -0
  51. package/bin/runners/lib/agent-firewall/policy/verdict.js +54 -0
  52. package/bin/runners/lib/agent-firewall/proposal/extractor.js +394 -0
  53. package/bin/runners/lib/agent-firewall/proposal/index.js +212 -0
  54. package/bin/runners/lib/agent-firewall/proposal/schema.js +251 -0
  55. package/bin/runners/lib/agent-firewall/proposal/validator.js +386 -0
  56. package/bin/runners/lib/agent-firewall/reality/index.js +332 -0
  57. package/bin/runners/lib/agent-firewall/reality/state.js +625 -0
  58. package/bin/runners/lib/agent-firewall/reality/watcher.js +322 -0
  59. package/bin/runners/lib/agent-firewall/risk/index.js +173 -0
  60. package/bin/runners/lib/agent-firewall/risk/scorer.js +328 -0
  61. package/bin/runners/lib/agent-firewall/risk/thresholds.js +321 -0
  62. package/bin/runners/lib/agent-firewall/risk/vectors.js +421 -0
  63. package/bin/runners/lib/agent-firewall/simulator/diff-simulator.js +472 -0
  64. package/bin/runners/lib/agent-firewall/simulator/import-resolver.js +346 -0
  65. package/bin/runners/lib/agent-firewall/simulator/index.js +181 -0
  66. package/bin/runners/lib/agent-firewall/simulator/route-validator.js +380 -0
  67. package/bin/runners/lib/agent-firewall/time-machine/incident-correlator.js +661 -0
  68. package/bin/runners/lib/agent-firewall/time-machine/index.js +267 -0
  69. package/bin/runners/lib/agent-firewall/time-machine/replay-engine.js +436 -0
  70. package/bin/runners/lib/agent-firewall/time-machine/state-reconstructor.js +490 -0
  71. package/bin/runners/lib/agent-firewall/time-machine/timeline-builder.js +530 -0
  72. package/bin/runners/lib/agent-firewall/truthpack/index.js +67 -0
  73. package/bin/runners/lib/agent-firewall/truthpack/loader.js +137 -0
  74. package/bin/runners/lib/agent-firewall/unblock/planner.js +337 -0
  75. package/bin/runners/lib/agent-firewall/utils/ignore-checker.js +118 -0
  76. package/bin/runners/lib/analysis-core.js +220 -182
  77. package/bin/runners/lib/analyzers.js +2145 -224
  78. package/bin/runners/lib/api-client.js +269 -0
  79. package/bin/runners/lib/authority-badge.js +425 -0
  80. package/bin/runners/lib/cli-output.js +242 -210
  81. package/bin/runners/lib/default-config.js +127 -0
  82. package/bin/runners/lib/detectors-v2.js +547 -785
  83. package/bin/runners/lib/doctor/modules/security.js +3 -1
  84. package/bin/runners/lib/engine/ast-cache.js +210 -0
  85. package/bin/runners/lib/engine/auth-extractor.js +211 -0
  86. package/bin/runners/lib/engine/billing-extractor.js +112 -0
  87. package/bin/runners/lib/engine/enforcement-extractor.js +100 -0
  88. package/bin/runners/lib/engine/env-extractor.js +207 -0
  89. package/bin/runners/lib/engine/express-extractor.js +208 -0
  90. package/bin/runners/lib/engine/extractors.js +849 -0
  91. package/bin/runners/lib/engine/index.js +207 -0
  92. package/bin/runners/lib/engine/repo-index.js +514 -0
  93. package/bin/runners/lib/engine/types.js +124 -0
  94. package/bin/runners/lib/engines/accessibility-engine.js +190 -0
  95. package/bin/runners/lib/engines/api-consistency-engine.js +162 -0
  96. package/bin/runners/lib/engines/ast-cache.js +99 -0
  97. package/bin/runners/lib/engines/code-quality-engine.js +255 -0
  98. package/bin/runners/lib/engines/console-logs-engine.js +115 -0
  99. package/bin/runners/lib/engines/cross-file-analysis-engine.js +268 -0
  100. package/bin/runners/lib/engines/dead-code-engine.js +198 -0
  101. package/bin/runners/lib/engines/deprecated-api-engine.js +226 -0
  102. package/bin/runners/lib/engines/empty-catch-engine.js +150 -0
  103. package/bin/runners/lib/engines/file-filter.js +131 -0
  104. package/bin/runners/lib/engines/hardcoded-secrets-engine.js +251 -0
  105. package/bin/runners/lib/engines/mock-data-engine.js +272 -0
  106. package/bin/runners/lib/engines/parallel-processor.js +71 -0
  107. package/bin/runners/lib/engines/performance-issues-engine.js +265 -0
  108. package/bin/runners/lib/engines/security-vulnerabilities-engine.js +243 -0
  109. package/bin/runners/lib/engines/todo-fixme-engine.js +115 -0
  110. package/bin/runners/lib/engines/type-aware-engine.js +152 -0
  111. package/bin/runners/lib/engines/unsafe-regex-engine.js +225 -0
  112. package/bin/runners/lib/engines/vibecheck-engines/README.md +53 -0
  113. package/bin/runners/lib/engines/vibecheck-engines/index.js +15 -0
  114. package/bin/runners/lib/engines/vibecheck-engines/lib/ast-cache.js +164 -0
  115. package/bin/runners/lib/engines/vibecheck-engines/lib/code-quality-engine.js +291 -0
  116. package/bin/runners/lib/engines/vibecheck-engines/lib/console-logs-engine.js +83 -0
  117. package/bin/runners/lib/engines/vibecheck-engines/lib/dead-code-engine.js +198 -0
  118. package/bin/runners/lib/engines/vibecheck-engines/lib/deprecated-api-engine.js +275 -0
  119. package/bin/runners/lib/engines/vibecheck-engines/lib/empty-catch-engine.js +167 -0
  120. package/bin/runners/lib/engines/vibecheck-engines/lib/file-filter.js +217 -0
  121. package/bin/runners/lib/engines/vibecheck-engines/lib/hardcoded-secrets-engine.js +139 -0
  122. package/bin/runners/lib/engines/vibecheck-engines/lib/mock-data-engine.js +140 -0
  123. package/bin/runners/lib/engines/vibecheck-engines/lib/parallel-processor.js +164 -0
  124. package/bin/runners/lib/engines/vibecheck-engines/lib/performance-issues-engine.js +234 -0
  125. package/bin/runners/lib/engines/vibecheck-engines/lib/type-aware-engine.js +217 -0
  126. package/bin/runners/lib/engines/vibecheck-engines/lib/unsafe-regex-engine.js +78 -0
  127. package/bin/runners/lib/engines/vibecheck-engines/package.json +13 -0
  128. package/bin/runners/lib/entitlements-v2.js +152 -446
  129. package/bin/runners/lib/error-handler.js +60 -12
  130. package/bin/runners/lib/error-messages.js +289 -0
  131. package/bin/runners/lib/evidence-pack.js +7 -1
  132. package/bin/runners/lib/exit-codes.js +275 -0
  133. package/bin/runners/lib/finding-id.js +69 -0
  134. package/bin/runners/lib/finding-sorter.js +89 -0
  135. package/bin/runners/lib/fingerprint.js +377 -0
  136. package/bin/runners/lib/global-flags.js +37 -0
  137. package/bin/runners/lib/help-formatter.js +413 -0
  138. package/bin/runners/lib/logger.js +38 -0
  139. package/bin/runners/lib/next-action.js +560 -0
  140. package/bin/runners/lib/prerequisites.js +149 -0
  141. package/bin/runners/lib/route-detection.js +137 -68
  142. package/bin/runners/lib/route-truth.js +1167 -322
  143. package/bin/runners/lib/scan-output.js +504 -463
  144. package/bin/runners/lib/scan-runner.js +135 -0
  145. package/bin/runners/lib/schemas/ajv-validator.js +464 -0
  146. package/bin/runners/lib/schemas/error-envelope.schema.json +105 -0
  147. package/bin/runners/lib/schemas/finding-v3.schema.json +151 -0
  148. package/bin/runners/lib/schemas/report-artifact.schema.json +120 -0
  149. package/bin/runners/lib/schemas/run-request.schema.json +108 -0
  150. package/bin/runners/lib/schemas/validator.js +27 -0
  151. package/bin/runners/lib/schemas/verdict.schema.json +140 -0
  152. package/bin/runners/lib/ship-output-enterprise.js +239 -0
  153. package/bin/runners/lib/ship-output.js +328 -31
  154. package/bin/runners/lib/terminal-ui.js +234 -731
  155. package/bin/runners/lib/truth.js +1332 -308
  156. package/bin/runners/lib/unified-cli-output.js +604 -0
  157. package/bin/runners/lib/unified-output.js +163 -155
  158. package/bin/runners/lib/upsell.js +104 -204
  159. package/bin/runners/runAgent.d.ts +5 -0
  160. package/bin/runners/runAgent.js +161 -0
  161. package/bin/runners/runAllowlist.js +166 -101
  162. package/bin/runners/runApprove.js +1200 -0
  163. package/bin/runners/runAuth.js +373 -95
  164. package/bin/runners/runCheckpoint.js +59 -21
  165. package/bin/runners/runClassify.js +926 -0
  166. package/bin/runners/runContext.d.ts +4 -0
  167. package/bin/runners/runContext.js +136 -24
  168. package/bin/runners/runDoctor.js +115 -67
  169. package/bin/runners/runEvidencePack.js +239 -96
  170. package/bin/runners/runFirewall.d.ts +5 -0
  171. package/bin/runners/runFirewall.js +134 -0
  172. package/bin/runners/runFirewallHook.d.ts +5 -0
  173. package/bin/runners/runFirewallHook.js +56 -0
  174. package/bin/runners/runFix.js +6 -5
  175. package/bin/runners/runGuard.js +212 -118
  176. package/bin/runners/runInit.js +66 -21
  177. package/bin/runners/runLabs.js +204 -121
  178. package/bin/runners/runMcp.js +131 -60
  179. package/bin/runners/runPolish.d.ts +4 -0
  180. package/bin/runners/runPolish.js +43 -20
  181. package/bin/runners/runProof.zip +0 -0
  182. package/bin/runners/runProve.js +15 -5
  183. package/bin/runners/runQuickstart.js +531 -0
  184. package/bin/runners/runReality.js +14 -0
  185. package/bin/runners/runReport.js +36 -4
  186. package/bin/runners/runScan.js +689 -91
  187. package/bin/runners/runShip.js +96 -40
  188. package/bin/runners/runTruth.d.ts +5 -0
  189. package/bin/runners/runTruth.js +101 -0
  190. package/bin/runners/runValidate.js +21 -4
  191. package/bin/runners/runWatch.js +118 -54
  192. package/bin/scan.js +6 -1
  193. package/bin/vibecheck.js +297 -52
  194. package/mcp-server/HARDENING_SUMMARY.md +299 -0
  195. package/mcp-server/agent-firewall-interceptor.js +500 -0
  196. package/mcp-server/authority-tools.js +569 -0
  197. package/mcp-server/conductor/conflict-resolver.js +588 -0
  198. package/mcp-server/conductor/execution-planner.js +544 -0
  199. package/mcp-server/conductor/index.js +377 -0
  200. package/mcp-server/conductor/lock-manager.js +615 -0
  201. package/mcp-server/conductor/request-queue.js +550 -0
  202. package/mcp-server/conductor/session-manager.js +500 -0
  203. package/mcp-server/conductor/tools.js +510 -0
  204. package/mcp-server/deprecation-middleware.js +282 -0
  205. package/mcp-server/handlers/index.ts +15 -0
  206. package/mcp-server/handlers/tool-handler.ts +474 -591
  207. package/mcp-server/index.js +1748 -1099
  208. package/mcp-server/lib/api-client.cjs +13 -0
  209. package/mcp-server/lib/cache-wrapper.cjs +383 -0
  210. package/mcp-server/lib/error-envelope.js +138 -0
  211. package/mcp-server/lib/executor.ts +428 -721
  212. package/mcp-server/lib/index.ts +19 -0
  213. package/mcp-server/lib/logger.cjs +30 -0
  214. package/mcp-server/lib/rate-limiter.js +166 -0
  215. package/mcp-server/lib/sandbox.test.ts +519 -0
  216. package/mcp-server/lib/sandbox.ts +342 -284
  217. package/mcp-server/lib/types.ts +267 -0
  218. package/mcp-server/logger.js +173 -0
  219. package/mcp-server/package.json +11 -27
  220. package/mcp-server/premium-tools.js +2 -2
  221. package/mcp-server/registry/tool-registry.js +794 -0
  222. package/mcp-server/registry/tools.json +507 -378
  223. package/mcp-server/registry.test.ts +334 -0
  224. package/mcp-server/tests/tier-gating.test.js +297 -0
  225. package/mcp-server/tier-auth.js +492 -347
  226. package/mcp-server/tools-v3.js +950 -0
  227. package/mcp-server/truth-context.js +131 -90
  228. package/mcp-server/truth-firewall-tools.js +1612 -1001
  229. package/mcp-server/tsconfig.json +8 -5
  230. package/mcp-server/vibecheck-2.0-tools.js +14 -1
  231. package/mcp-server/vibecheck-mcp-server-3.2.0.tgz +0 -0
  232. package/mcp-server/vibecheck-tools.js +2 -2
  233. package/package.json +4 -3
  234. package/bin/runners/runInstall.js +0 -281
  235. package/mcp-server/ARCHITECTURE.md +0 -339
  236. package/mcp-server/__tests__/cache.test.ts +0 -313
  237. package/mcp-server/__tests__/executor.test.ts +0 -239
  238. package/mcp-server/__tests__/fixtures/exclusion-test/.cache/webpack/cache.pack +0 -1
  239. package/mcp-server/__tests__/fixtures/exclusion-test/.next/server/chunk.js +0 -3
  240. package/mcp-server/__tests__/fixtures/exclusion-test/.turbo/cache.json +0 -3
  241. package/mcp-server/__tests__/fixtures/exclusion-test/.venv/lib/env.py +0 -3
  242. package/mcp-server/__tests__/fixtures/exclusion-test/dist/bundle.js +0 -3
  243. package/mcp-server/__tests__/fixtures/exclusion-test/package.json +0 -5
  244. package/mcp-server/__tests__/fixtures/exclusion-test/src/app.ts +0 -5
  245. package/mcp-server/__tests__/fixtures/exclusion-test/venv/lib/config.py +0 -4
  246. package/mcp-server/__tests__/ids.test.ts +0 -345
  247. package/mcp-server/__tests__/integration/tools.test.ts +0 -410
  248. package/mcp-server/__tests__/registry.test.ts +0 -365
  249. package/mcp-server/__tests__/sandbox.test.ts +0 -323
  250. package/mcp-server/__tests__/schemas.test.ts +0 -372
  251. package/mcp-server/benchmarks/run-benchmarks.ts +0 -304
  252. package/mcp-server/examples/doctor.request.json +0 -14
  253. package/mcp-server/examples/doctor.response.json +0 -53
  254. package/mcp-server/examples/error.response.json +0 -15
  255. package/mcp-server/examples/scan.request.json +0 -14
  256. package/mcp-server/examples/scan.response.json +0 -108
  257. package/mcp-server/index-v3.ts +0 -293
  258. package/mcp-server/index.old.js +0 -4137
  259. package/mcp-server/lib/cache.ts +0 -341
  260. package/mcp-server/lib/errors.ts +0 -346
  261. package/mcp-server/lib/ids.ts +0 -238
  262. package/mcp-server/lib/logger.ts +0 -368
  263. package/mcp-server/lib/metrics.ts +0 -365
  264. package/mcp-server/lib/validator.ts +0 -229
  265. package/mcp-server/package-lock.json +0 -165
  266. package/mcp-server/schemas/error-envelope.schema.json +0 -125
  267. package/mcp-server/schemas/finding.schema.json +0 -167
  268. package/mcp-server/schemas/report-artifact.schema.json +0 -88
  269. package/mcp-server/schemas/run-request.schema.json +0 -75
  270. package/mcp-server/schemas/verdict.schema.json +0 -168
  271. package/mcp-server/tier-auth.d.ts +0 -71
  272. package/mcp-server/vitest.config.ts +0 -16
@@ -0,0 +1,269 @@
1
+ /**
2
+ * API Client for Vibecheck Dashboard Integration
3
+ *
4
+ * Handles communication with the web dashboard API for:
5
+ * - Creating scan records
6
+ * - Updating scan progress
7
+ * - Submitting scan results
8
+ * - Broadcasting real-time updates
9
+ */
10
+
11
+ "use strict";
12
+
13
+ const https = require("https");
14
+ const http = require("http");
15
+ const { logger } = require("./logger");
16
+
17
+ // Configuration
18
+ const API_BASE_URL = process.env.VIBECHECK_API_URL || "https://api.vibecheckai.dev";
19
+ const API_TIMEOUT = 30000; // 30 seconds
20
+
21
+ /**
22
+ * Make HTTP request to API
23
+ */
24
+ async function makeRequest(path, options = {}) {
25
+ const url = new URL(path, API_BASE_URL);
26
+ const isHttps = url.protocol === "https:";
27
+ const client = isHttps ? https : http;
28
+
29
+ const defaultOptions = {
30
+ method: "POST",
31
+ headers: {
32
+ "Content-Type": "application/json",
33
+ "User-Agent": "vibecheck-cli/3.3.0",
34
+ },
35
+ timeout: API_TIMEOUT,
36
+ };
37
+
38
+ const requestOptions = {
39
+ ...defaultOptions,
40
+ ...options,
41
+ hostname: url.hostname,
42
+ port: url.port || (isHttps ? 443 : 80),
43
+ path: url.pathname + url.search,
44
+ };
45
+
46
+ // Add Authorization header if API key is available
47
+ const apiKey = process.env.VIBECHECK_API_KEY || getApiKey();
48
+ if (apiKey) {
49
+ requestOptions.headers.Authorization = `Bearer ${apiKey}`;
50
+ }
51
+
52
+ return new Promise((resolve, reject) => {
53
+ const req = client.request(requestOptions, (res) => {
54
+ let data = "";
55
+
56
+ res.on("data", (chunk) => {
57
+ data += chunk;
58
+ });
59
+
60
+ res.on("end", () => {
61
+ try {
62
+ const jsonData = data ? JSON.parse(data) : {};
63
+ resolve({
64
+ ok: res.statusCode >= 200 && res.statusCode < 300,
65
+ status: res.statusCode,
66
+ data: jsonData,
67
+ });
68
+ } catch (err) {
69
+ resolve({
70
+ ok: false,
71
+ status: res.statusCode,
72
+ data: { error: "Invalid JSON response" },
73
+ });
74
+ }
75
+ });
76
+ });
77
+
78
+ req.on("error", (err) => {
79
+ logger.debug(`API request failed: ${err.message}`);
80
+ resolve({
81
+ ok: false,
82
+ error: err.message,
83
+ data: { error: err.message },
84
+ });
85
+ });
86
+
87
+ req.on("timeout", () => {
88
+ req.destroy();
89
+ resolve({
90
+ ok: false,
91
+ error: "Request timeout",
92
+ data: { error: "Request timeout" },
93
+ });
94
+ });
95
+
96
+ if (options.body) {
97
+ req.write(JSON.stringify(options.body));
98
+ }
99
+
100
+ req.end();
101
+ });
102
+ }
103
+
104
+ /**
105
+ * Get API key from environment or config
106
+ */
107
+ function getApiKey() {
108
+ // Try various environment variables
109
+ const envVars = [
110
+ "VIBECHECK_API_KEY",
111
+ "VIBECHECK_TOKEN",
112
+ "API_KEY",
113
+ "TOKEN",
114
+ ];
115
+
116
+ for (const envVar of envVars) {
117
+ if (process.env[envVar]) {
118
+ return process.env[envVar];
119
+ }
120
+ }
121
+
122
+ // Try to read from config file
123
+ try {
124
+ const fs = require("fs");
125
+ const path = require("path");
126
+ const os = require("os");
127
+
128
+ const configPaths = [
129
+ path.join(os.homedir(), ".vibecheck", "config.json"),
130
+ path.join(process.cwd(), ".vibecheckrc.json"),
131
+ path.join(process.cwd(), "vibecheck.config.json"),
132
+ ];
133
+
134
+ for (const configPath of configPaths) {
135
+ if (fs.existsSync(configPath)) {
136
+ const config = JSON.parse(fs.readFileSync(configPath, "utf8"));
137
+ if (config.apiKey || config.token) {
138
+ return config.apiKey || config.token;
139
+ }
140
+ }
141
+ }
142
+ } catch (err) {
143
+ // Ignore config file errors
144
+ }
145
+
146
+ return null;
147
+ }
148
+
149
+ /**
150
+ * Create a new scan record
151
+ */
152
+ async function createScan(options) {
153
+ const {
154
+ repositoryId,
155
+ repositoryUrl,
156
+ localPath,
157
+ branch = "main",
158
+ enableLLM = false,
159
+ } = options;
160
+
161
+ const response = await makeRequest("/api/scans", {
162
+ body: {
163
+ repositoryId,
164
+ repositoryUrl,
165
+ localPath,
166
+ branch,
167
+ enableLLM,
168
+ },
169
+ });
170
+
171
+ if (!response.ok) {
172
+ throw new Error(`Failed to create scan: ${response.data?.error || response.error}`);
173
+ }
174
+
175
+ return response.data.data;
176
+ }
177
+
178
+ /**
179
+ * Update scan progress
180
+ */
181
+ async function updateScanProgress(scanId, progress, status = null) {
182
+ const response = await makeRequest(`/api/scans/${scanId}/progress`, {
183
+ body: {
184
+ progress,
185
+ status,
186
+ },
187
+ });
188
+
189
+ if (!response.ok) {
190
+ logger.debug(`Failed to update scan progress: ${response.data?.error || response.error}`);
191
+ }
192
+
193
+ return response.data;
194
+ }
195
+
196
+ /**
197
+ * Submit scan results
198
+ */
199
+ async function submitScanResults(scanId, results) {
200
+ const {
201
+ verdict,
202
+ score,
203
+ findings,
204
+ filesScanned,
205
+ linesScanned,
206
+ durationMs,
207
+ metadata = {},
208
+ } = results;
209
+
210
+ const response = await makeRequest(`/api/scans/${scanId}/complete`, {
211
+ body: {
212
+ verdict,
213
+ score,
214
+ findings,
215
+ filesScanned,
216
+ linesScanned,
217
+ durationMs,
218
+ metadata,
219
+ },
220
+ });
221
+
222
+ if (!response.ok) {
223
+ throw new Error(`Failed to submit scan results: ${response.data?.error || response.error}`);
224
+ }
225
+
226
+ return response.data;
227
+ }
228
+
229
+ /**
230
+ * Report scan error
231
+ */
232
+ async function reportScanError(scanId, error) {
233
+ const response = await makeRequest(`/api/scans/${scanId}/error`, {
234
+ body: {
235
+ error: error.message || String(error),
236
+ stack: error.stack,
237
+ },
238
+ });
239
+
240
+ if (!response.ok) {
241
+ logger.debug(`Failed to report scan error: ${response.data?.error || response.error}`);
242
+ }
243
+
244
+ return response.data;
245
+ }
246
+
247
+ /**
248
+ * Check if API is available
249
+ */
250
+ async function isApiAvailable() {
251
+ try {
252
+ const response = await makeRequest("/api/health", {
253
+ method: "GET",
254
+ timeout: 5000,
255
+ });
256
+ return response.ok;
257
+ } catch (err) {
258
+ return false;
259
+ }
260
+ }
261
+
262
+ module.exports = {
263
+ createScan,
264
+ updateScanProgress,
265
+ submitScanResults,
266
+ reportScanError,
267
+ isApiAvailable,
268
+ getApiKey,
269
+ };
@@ -0,0 +1,425 @@
1
+ /**
2
+ * Authority Badge Generator
3
+ *
4
+ * Generates SVG badges for PROCEED verdicts from the Authority System.
5
+ * Part of the PRO tier - requires verified verdicts.
6
+ *
7
+ * Badge Types:
8
+ * - authority-approved: Standard approval badge
9
+ * - safe-consolidation: Safe Consolidation authority badge
10
+ * - inventory: Inventory analysis badge
11
+ *
12
+ * Output formats:
13
+ * - SVG (default, scalable)
14
+ * - Markdown (for README embedding)
15
+ * - HTML (for web embedding)
16
+ */
17
+
18
+ const path = require("path");
19
+ const fs = require("fs");
20
+
21
+ // ═══════════════════════════════════════════════════════════════════════════════
22
+ // COLOR PALETTE
23
+ // ═══════════════════════════════════════════════════════════════════════════════
24
+
25
+ const BADGE_COLORS = {
26
+ PROCEED: {
27
+ background: '#22C55E',
28
+ text: '#FFFFFF',
29
+ },
30
+ DEFER: {
31
+ background: '#F59E0B',
32
+ text: '#000000',
33
+ },
34
+ STOP: {
35
+ background: '#EF4444',
36
+ text: '#FFFFFF',
37
+ },
38
+ neutral: {
39
+ background: '#555555',
40
+ text: '#FFFFFF',
41
+ },
42
+ };
43
+
44
+ // ═══════════════════════════════════════════════════════════════════════════════
45
+ // SVG TEMPLATES
46
+ // ═══════════════════════════════════════════════════════════════════════════════
47
+
48
+ /**
49
+ * Generate an SVG badge
50
+ */
51
+ function generateSVGBadge(options) {
52
+ const {
53
+ label = 'Authority Approved',
54
+ message,
55
+ color,
56
+ textColor = '#FFFFFF',
57
+ logo = null,
58
+ style = 'flat',
59
+ } = options;
60
+
61
+ // Calculate widths based on text length
62
+ const labelWidth = Math.max(label.length * 7 + 10, 80);
63
+ const messageWidth = Math.max(message.length * 7 + 10, 50);
64
+ const totalWidth = labelWidth + messageWidth;
65
+
66
+ if (style === 'flat-square') {
67
+ return generateFlatSquareBadge({ label, message, color, textColor, labelWidth, messageWidth, totalWidth, logo });
68
+ }
69
+
70
+ return generateFlatBadge({ label, message, color, textColor, labelWidth, messageWidth, totalWidth, logo });
71
+ }
72
+
73
+ function generateFlatBadge(opts) {
74
+ const { label, message, color, textColor, labelWidth, messageWidth, totalWidth, logo } = opts;
75
+
76
+ let logoSvg = '';
77
+ let logoOffset = 0;
78
+
79
+ if (logo === 'vibecheck') {
80
+ logoOffset = 16;
81
+ logoSvg = `
82
+ <g transform="translate(5, 3)">
83
+ <path fill="${textColor}" d="M7 1l7 12H0L7 1zm0 3l-4 7h8L7 4z"/>
84
+ </g>`;
85
+ }
86
+
87
+ return `<svg xmlns="http://www.w3.org/2000/svg" width="${totalWidth + logoOffset}" height="20" role="img" aria-label="${label}: ${message}">
88
+ <title>${label}: ${message}</title>
89
+ <linearGradient id="s" x2="0" y2="100%">
90
+ <stop offset="0" stop-color="#bbb" stop-opacity=".1"/>
91
+ <stop offset="1" stop-opacity=".1"/>
92
+ </linearGradient>
93
+ <clipPath id="r">
94
+ <rect width="${totalWidth + logoOffset}" height="20" rx="3" fill="#fff"/>
95
+ </clipPath>
96
+ <g clip-path="url(#r)">
97
+ <rect width="${labelWidth + logoOffset}" height="20" fill="#555"/>
98
+ <rect x="${labelWidth + logoOffset}" width="${messageWidth}" height="20" fill="${color}"/>
99
+ <rect width="${totalWidth + logoOffset}" height="20" fill="url(#s)"/>
100
+ </g>
101
+ ${logoSvg}
102
+ <g fill="#fff" text-anchor="middle" font-family="Verdana,Geneva,DejaVu Sans,sans-serif" text-rendering="geometricPrecision" font-size="11">
103
+ <text aria-hidden="true" x="${(labelWidth + logoOffset) / 2 + logoOffset/2}" y="15" fill="#010101" fill-opacity=".3">${label}</text>
104
+ <text x="${(labelWidth + logoOffset) / 2 + logoOffset/2}" y="14" fill="#fff">${label}</text>
105
+ <text aria-hidden="true" x="${labelWidth + logoOffset + messageWidth / 2}" y="15" fill="#010101" fill-opacity=".3">${message}</text>
106
+ <text x="${labelWidth + logoOffset + messageWidth / 2}" y="14" fill="${textColor}">${message}</text>
107
+ </g>
108
+ </svg>`;
109
+ }
110
+
111
+ function generateFlatSquareBadge(opts) {
112
+ const { label, message, color, textColor, labelWidth, messageWidth, totalWidth, logo } = opts;
113
+
114
+ let logoSvg = '';
115
+ let logoOffset = 0;
116
+
117
+ if (logo === 'vibecheck') {
118
+ logoOffset = 16;
119
+ logoSvg = `
120
+ <g transform="translate(5, 3)">
121
+ <path fill="${textColor}" d="M7 1l7 12H0L7 1zm0 3l-4 7h8L7 4z"/>
122
+ </g>`;
123
+ }
124
+
125
+ return `<svg xmlns="http://www.w3.org/2000/svg" width="${totalWidth + logoOffset}" height="20" role="img" aria-label="${label}: ${message}">
126
+ <title>${label}: ${message}</title>
127
+ <g shape-rendering="crispEdges">
128
+ <rect width="${labelWidth + logoOffset}" height="20" fill="#555"/>
129
+ <rect x="${labelWidth + logoOffset}" width="${messageWidth}" height="20" fill="${color}"/>
130
+ </g>
131
+ ${logoSvg}
132
+ <g fill="#fff" text-anchor="middle" font-family="Verdana,Geneva,DejaVu Sans,sans-serif" text-rendering="geometricPrecision" font-size="11">
133
+ <text x="${(labelWidth + logoOffset) / 2 + logoOffset/2}" y="14" fill="#fff">${label}</text>
134
+ <text x="${labelWidth + logoOffset + messageWidth / 2}" y="14" fill="${textColor}">${message}</text>
135
+ </g>
136
+ </svg>`;
137
+ }
138
+
139
+ // ═══════════════════════════════════════════════════════════════════════════════
140
+ // BADGE GENERATORS
141
+ // ═══════════════════════════════════════════════════════════════════════════════
142
+
143
+ /**
144
+ * Generate an authority verdict badge
145
+ */
146
+ function generateVerdictBadge(verdict, options = {}) {
147
+ const {
148
+ style = 'flat',
149
+ logo = 'vibecheck',
150
+ includeConfidence = true,
151
+ } = options;
152
+
153
+ const action = verdict.action || 'UNKNOWN';
154
+ const confidence = verdict.confidence || 0;
155
+ const authorityId = verdict.authority || 'authority';
156
+
157
+ const colors = BADGE_COLORS[action] || BADGE_COLORS.neutral;
158
+
159
+ let message = action;
160
+ if (includeConfidence && action !== 'STOP') {
161
+ message = `${action} ${Math.round(confidence * 100)}%`;
162
+ }
163
+
164
+ return generateSVGBadge({
165
+ label: `Authority: ${authorityId}`,
166
+ message,
167
+ color: colors.background,
168
+ textColor: colors.text,
169
+ logo,
170
+ style,
171
+ });
172
+ }
173
+
174
+ /**
175
+ * Generate a simple "Authority Approved" badge
176
+ */
177
+ function generateApprovedBadge(options = {}) {
178
+ const {
179
+ authority = 'vibecheck',
180
+ confidence = 100,
181
+ version = '1.0',
182
+ style = 'flat',
183
+ } = options;
184
+
185
+ return generateSVGBadge({
186
+ label: 'Authority Approved',
187
+ message: `${authority} v${version}`,
188
+ color: BADGE_COLORS.PROCEED.background,
189
+ textColor: BADGE_COLORS.PROCEED.text,
190
+ logo: 'vibecheck',
191
+ style,
192
+ });
193
+ }
194
+
195
+ /**
196
+ * Generate a Safe Consolidation badge
197
+ */
198
+ function generateSafeConsolidationBadge(verdict, options = {}) {
199
+ const {
200
+ style = 'flat',
201
+ } = options;
202
+
203
+ const action = verdict.action || 'PROCEED';
204
+ const confidence = verdict.confidence || 0.95;
205
+ const colors = BADGE_COLORS[action] || BADGE_COLORS.PROCEED;
206
+
207
+ return generateSVGBadge({
208
+ label: 'Safe Consolidation',
209
+ message: `${action} ${Math.round(confidence * 100)}%`,
210
+ color: colors.background,
211
+ textColor: colors.text,
212
+ logo: 'vibecheck',
213
+ style,
214
+ });
215
+ }
216
+
217
+ /**
218
+ * Generate a CI status badge
219
+ */
220
+ function generateCIBadge(verdict, options = {}) {
221
+ const {
222
+ style = 'flat',
223
+ ciName = 'CI',
224
+ } = options;
225
+
226
+ const action = verdict.action || 'UNKNOWN';
227
+ const exitCode = verdict.exitCode ?? (action === 'PROCEED' ? 0 : action === 'DEFER' ? 1 : 2);
228
+
229
+ let status, color;
230
+ if (exitCode === 0) {
231
+ status = 'passing';
232
+ color = BADGE_COLORS.PROCEED.background;
233
+ } else if (exitCode === 1) {
234
+ status = 'review';
235
+ color = BADGE_COLORS.DEFER.background;
236
+ } else {
237
+ status = 'failing';
238
+ color = BADGE_COLORS.STOP.background;
239
+ }
240
+
241
+ return generateSVGBadge({
242
+ label: ciName,
243
+ message: status,
244
+ color,
245
+ textColor: '#FFFFFF',
246
+ style,
247
+ });
248
+ }
249
+
250
+ // ═══════════════════════════════════════════════════════════════════════════════
251
+ // OUTPUT FORMATTERS
252
+ // ═══════════════════════════════════════════════════════════════════════════════
253
+
254
+ /**
255
+ * Format badge for markdown embedding
256
+ */
257
+ function formatBadgeMarkdown(badge, options = {}) {
258
+ const {
259
+ altText = 'Authority Approved by VibeCheck',
260
+ link = 'https://vibecheckai.dev',
261
+ } = options;
262
+
263
+ // Encode SVG for data URI
264
+ const encoded = encodeURIComponent(badge)
265
+ .replace(/'/g, '%27')
266
+ .replace(/"/g, '%22');
267
+
268
+ const dataUri = `data:image/svg+xml,${encoded}`;
269
+
270
+ if (link) {
271
+ return `[![${altText}](${dataUri})](${link})`;
272
+ }
273
+
274
+ return `![${altText}](${dataUri})`;
275
+ }
276
+
277
+ /**
278
+ * Format badge for HTML embedding
279
+ */
280
+ function formatBadgeHTML(badge, options = {}) {
281
+ const {
282
+ altText = 'Authority Approved by VibeCheck',
283
+ link = 'https://vibecheckai.dev',
284
+ className = 'vibecheck-badge',
285
+ } = options;
286
+
287
+ // Encode SVG for data URI
288
+ const encoded = encodeURIComponent(badge)
289
+ .replace(/'/g, '%27')
290
+ .replace(/"/g, '%22');
291
+
292
+ const dataUri = `data:image/svg+xml,${encoded}`;
293
+
294
+ const img = `<img src="${dataUri}" alt="${altText}" class="${className}">`;
295
+
296
+ if (link) {
297
+ return `<a href="${link}" target="_blank" rel="noopener noreferrer">${img}</a>`;
298
+ }
299
+
300
+ return img;
301
+ }
302
+
303
+ // ═══════════════════════════════════════════════════════════════════════════════
304
+ // FILE OUTPUT
305
+ // ═══════════════════════════════════════════════════════════════════════════════
306
+
307
+ /**
308
+ * Save badge to file
309
+ */
310
+ async function saveBadge(badge, filePath, format = 'svg') {
311
+ const dir = path.dirname(filePath);
312
+
313
+ // Ensure directory exists
314
+ if (!fs.existsSync(dir)) {
315
+ fs.mkdirSync(dir, { recursive: true });
316
+ }
317
+
318
+ let content = badge;
319
+ let ext = '.svg';
320
+
321
+ if (format === 'markdown' || format === 'md') {
322
+ content = formatBadgeMarkdown(badge);
323
+ ext = '.md';
324
+ } else if (format === 'html') {
325
+ content = formatBadgeHTML(badge);
326
+ ext = '.html';
327
+ }
328
+
329
+ // Ensure file has correct extension
330
+ let finalPath = filePath;
331
+ if (!filePath.endsWith(ext) && format !== 'svg') {
332
+ finalPath = filePath.replace(/\.[^.]+$/, ext);
333
+ }
334
+
335
+ await fs.promises.writeFile(finalPath, content);
336
+
337
+ return finalPath;
338
+ }
339
+
340
+ /**
341
+ * Generate and save all badge variants
342
+ */
343
+ async function generateAllBadges(verdict, outputDir, options = {}) {
344
+ const {
345
+ prefix = verdict.authority || 'authority',
346
+ } = options;
347
+
348
+ const badges = {};
349
+
350
+ // Main verdict badge
351
+ const verdictBadge = generateVerdictBadge(verdict, options);
352
+ badges.verdict = await saveBadge(
353
+ verdictBadge,
354
+ path.join(outputDir, `${prefix}-badge.svg`)
355
+ );
356
+
357
+ // If PROCEED, also generate approved badge
358
+ if (verdict.action === 'PROCEED') {
359
+ const approvedBadge = generateApprovedBadge({
360
+ authority: verdict.authority,
361
+ confidence: verdict.confidence,
362
+ version: verdict.version,
363
+ });
364
+ badges.approved = await saveBadge(
365
+ approvedBadge,
366
+ path.join(outputDir, `${prefix}-approved-badge.svg`)
367
+ );
368
+
369
+ // CI badge
370
+ const ciBadge = generateCIBadge(verdict);
371
+ badges.ci = await saveBadge(
372
+ ciBadge,
373
+ path.join(outputDir, `${prefix}-ci-badge.svg`)
374
+ );
375
+ }
376
+
377
+ // Generate markdown snippet
378
+ const mdContent = `# ${verdict.authority || 'Authority'} Badge
379
+
380
+ ${formatBadgeMarkdown(verdictBadge, { altText: \`\${verdict.authority} - \${verdict.action}\` })}
381
+
382
+ ## Embed Code
383
+
384
+ ### Markdown
385
+ \`\`\`markdown
386
+ ${formatBadgeMarkdown(verdictBadge, { altText: \`\${verdict.authority} - \${verdict.action}\` })}
387
+ \`\`\`
388
+
389
+ ### HTML
390
+ \`\`\`html
391
+ ${formatBadgeHTML(verdictBadge, { altText: \`\${verdict.authority} - \${verdict.action}\` })}
392
+ \`\`\`
393
+
394
+ ---
395
+ Generated: ${new Date().toISOString()}
396
+ `;
397
+
398
+ badges.readme = await saveBadge(mdContent, path.join(outputDir, `${prefix}-BADGE.md`), 'md');
399
+
400
+ return badges;
401
+ }
402
+
403
+ // ═══════════════════════════════════════════════════════════════════════════════
404
+ // EXPORTS
405
+ // ═══════════════════════════════════════════════════════════════════════════════
406
+
407
+ module.exports = {
408
+ // Badge generators
409
+ generateSVGBadge,
410
+ generateVerdictBadge,
411
+ generateApprovedBadge,
412
+ generateSafeConsolidationBadge,
413
+ generateCIBadge,
414
+
415
+ // Formatters
416
+ formatBadgeMarkdown,
417
+ formatBadgeHTML,
418
+
419
+ // File operations
420
+ saveBadge,
421
+ generateAllBadges,
422
+
423
+ // Constants
424
+ BADGE_COLORS,
425
+ };