@vibgrate/cli 1.0.58 → 1.0.60

package/DOCS.md

@@ -283,15 +283,18 @@ Upload is always optional. Best-effort by default — use `--strict` in CI if yo
 Generate an HMAC-signed DSN token for API authentication.
 
 ```bash
-vibgrate dsn create --workspace <id> [--region <region>] [--ingest <url>] [--write <path>]
+vibgrate dsn create --workspace <id|new> [--region <region>] [--ingest <url>] [--write <path>]
 ```
 
-| Flag          | Default    | Description                                  |
-| ------------- | ---------- | -------------------------------------------- |
-| `--workspace` | _required_ | Your workspace ID                            |
-| `--region`    | `us`       | Data residency region (`us`, `eu`)           |
-| `--ingest`    | —          | Custom ingest API URL (overrides `--region`) |
-| `--write`     | —          | Write DSN to a file (add to `.gitignore`!)   |
+| Flag          | Default    | Description                                                                 |
+| ------------- | ---------- | --------------------------------------------------------------------------- |
+| `--workspace` | _required_ | Your workspace ID, or `new` to auto-generate a workspace                    |
+| `--region`    | `us`       | Data residency region (`us`, `eu`)                                          |
+| `--ingest`    | —          | Custom ingest API URL (overrides `--region`)                                |
+| `--write`     | —          | Write DSN to a file (add to `.gitignore`!)                                  |
+
+When using `--workspace new`, the CLI auto-generates a workspace ID and provisions the DSN
+with the Vibgrate API. Rate limited to 1 new DSN per 5 minutes per IP address.
 
 ---
 

package/README.md

@@ -78,6 +78,23 @@ Add an npm script:
 
 ---
 
+## Quick start with AI assistants
+
+Paste this prompt into your AI coding tool (GitHub Copilot, Cursor, Claude, etc.) to get started:
+
+```
+Set up Vibgrate for upgrade drift tracking:
+1. Install: npm install -g @vibgrate/cli@latest
+2. Create DSN: npx vibgrate dsn create --workspace new
+3. Save DSN: echo 'export VIBGRATE_DSN="<dsn>"' >> ~/.zshrc && source ~/.zshrc
+4. Scan: npx vibgrate scan . --push
+Then explain my drift score and top 3 upgrade priorities.
+```
+
+See [docs/QUICKSTART-PROMPT.md](./docs/QUICKSTART-PROMPT.md) for the full onboarding prompt.
+
+---
+
 ## What the report contains
 
 Every scan includes:
@@ -181,7 +198,7 @@ vibgrate baseline [path]
 vibgrate report [--in <artifact.json>] [--format md|text|json]
 vibgrate push [--dsn <dsn>] [--file <artifact.json>] [--strict]
 vibgrate init [path] [--baseline] [--yes]
-vibgrate dsn create --workspace <id> [--region us|eu] [--write <path>]
+vibgrate dsn create --workspace <id|new> [--region us|eu] [--write <path>]
 ```
 
 ### Command examples with expected results

package/dist/{baseline-NZZNS4UI.js → baseline-MNQTPXHY.js}

@@ -1,8 +1,8 @@
 import {
   baselineCommand,
   runBaseline
-} from "./chunk-KLJ5NIGX.js";
-import "./chunk-H473HICY.js";
+} from "./chunk-ZE2RZFB4.js";
+import "./chunk-BEASN7E5.js";
 import "./chunk-43ACU2WV.js";
 export {
   baselineCommand,

package/dist/{chunk-H473HICY.js → chunk-BEASN7E5.js}

@@ -1092,9 +1092,28 @@ function resolveIngestHost(region, ingest) {
   }
   return host;
 }
+async function provisionDsn(keyId, secret, workspaceId, ingestHost) {
+  const url = `https://${ingestHost}/v1/provision`;
+  try {
+    const response = await fetch(url, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json"
+      },
+      body: JSON.stringify({ keyId, secret, workspaceId })
+    });
+    if (!response.ok) {
+      const result = await response.json();
+      return { success: false, error: result.error || `HTTP ${response.status}` };
+    }
+    return { success: true };
+  } catch (e) {
+    return { success: false, error: e instanceof Error ? e.message : String(e) };
+  }
+}
 var dsnCommand = new Command("dsn").description("Manage DSN tokens");
-dsnCommand.command("create").description("Create a new DSN token").option("--ingest <url>", "Ingest API URL (overrides --region)").option("--region <region>", "Data residency region (us, eu)", "us").requiredOption("--workspace <id>", "Workspace ID").option("--write <path>", "Write DSN to file").action(async (opts) => {
-  const keyId = crypto2.randomBytes(8).toString("hex");
+dsnCommand.command("create").description("Create a new DSN token").option("--ingest <url>", "Ingest API URL (overrides --region)").option("--region <region>", "Data residency region (us, eu)", "us").requiredOption("--workspace <id>", 'Workspace ID (use "new" to auto-generate)').option("--write <path>", "Write DSN to file").action(async (opts) => {
+  const keyId = crypto2.randomBytes(12).toString("hex");
   const secret = crypto2.randomBytes(32).toString("hex");
   let ingestHost;
   try {
@@ -1103,7 +1122,20 @@ dsnCommand.command("create").description("Create a new DSN token").option("--ing
     console.error(chalk2.red(e instanceof Error ? e.message : String(e)));
     process.exit(1);
   }
-  const dsn = `vibgrate+https://${keyId}:${secret}@${ingestHost}/${opts.workspace}`;
+  let workspaceId = opts.workspace;
+  const isNewWorkspace = opts.workspace.toLowerCase() === "new";
+  if (isNewWorkspace) {
+    workspaceId = crypto2.randomBytes(8).toString("hex");
+    console.log(chalk2.dim(`Provisioning new workspace ${workspaceId}...`));
+  }
+  if (isNewWorkspace) {
+    const result = await provisionDsn(keyId, secret, workspaceId, ingestHost);
+    if (!result.success) {
+      console.error(chalk2.red(`Failed to provision DSN: ${result.error}`));
+      process.exit(1);
+    }
+  }
+  const dsn = `vibgrate+https://${keyId}:${secret}@${ingestHost}/${workspaceId}`;
   console.log(chalk2.green("\u2714") + " DSN created");
   console.log("");
   console.log(chalk2.bold("DSN:"));
@@ -1111,9 +1143,16 @@ dsnCommand.command("create").description("Create a new DSN token").option("--ing
   console.log("");
   console.log(chalk2.bold("Key ID:"));
   console.log(`  ${keyId}`);
+  if (isNewWorkspace) {
+    console.log("");
+    console.log(chalk2.bold("Workspace ID:"));
+    console.log(`  ${workspaceId}`);
+  }
   console.log("");
   console.log(chalk2.dim("Set this as VIBGRATE_DSN in your CI environment."));
-  console.log(chalk2.dim("The secret must be registered on your Vibgrate ingest API."));
+  if (!isNewWorkspace) {
+    console.log(chalk2.dim("The secret must be registered on your Vibgrate ingest API."));
+  }
   if (opts.write) {
     const writePath = path.resolve(opts.write);
     await writeTextFile(writePath, dsn + "\n");
@@ -8022,7 +8061,7 @@ async function runScan(rootDir, opts) {
         );
       }
     }
-    if (!maxPrivacyMode && (opts.uiPurpose || scanners?.uiPurpose?.enabled === true)) {
+    if (!maxPrivacyMode && scanners?.uiPurpose?.enabled !== false) {
       progress.startStep("uipurpose");
       extended.uiPurpose = await scanUiPurpose(rootDir, fileCache);
       const up = extended.uiPurpose;

package/dist/{chunk-KLJ5NIGX.js → chunk-ZE2RZFB4.js}

@@ -1,6 +1,6 @@
 import {
   runScan
-} from "./chunk-H473HICY.js";
+} from "./chunk-BEASN7E5.js";
 import {
   writeJsonFile
 } from "./chunk-43ACU2WV.js";

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   baselineCommand
-} from "./chunk-KLJ5NIGX.js";
+} from "./chunk-ZE2RZFB4.js";
 import {
   VERSION,
   dsnCommand,
@@ -10,7 +10,7 @@ import {
   pushCommand,
   scanCommand,
   writeDefaultConfig
-} from "./chunk-H473HICY.js";
+} from "./chunk-BEASN7E5.js";
 import {
   ensureDir,
   pathExists,
@@ -39,7 +39,7 @@ var initCommand = new Command("init").description("Initialize vibgrate in a proj
     console.log(chalk.green("\u2714") + ` Created ${chalk.bold("vibgrate.config.ts")}`);
   }
   if (opts.baseline) {
-    const { runBaseline } = await import("./baseline-NZZNS4UI.js");
+    const { runBaseline } = await import("./baseline-MNQTPXHY.js");
     await runBaseline(rootDir);
   }
   console.log("");
@@ -569,14 +569,15 @@ var detailedHelp = {
     console.log(`  ${chalk5.cyan("vibgrate dsn create")}   Generate a new DSN token`);
     console.log("");
     console.log(chalk5.bold("dsn create options:"));
-    console.log(`  ${chalk5.cyan("--workspace <id>")}   Workspace ID ${chalk5.red("(required)")}`);
+    console.log(`  ${chalk5.cyan("--workspace <id>")}   Workspace ID or "new" to auto-generate ${chalk5.red("(required)")}`);
     console.log(`  ${chalk5.cyan("--region <region>")}  Data residency region: us | eu  (default: us)`);
     console.log(`  ${chalk5.cyan("--ingest <url>")}     Override ingest API URL`);
     console.log(`  ${chalk5.cyan("--write <path>")}     Write the DSN to a file (add to .gitignore!)`);
     console.log("");
     console.log(chalk5.bold("Examples:"));
+    console.log("  vibgrate dsn create --workspace new");
     console.log("  vibgrate dsn create --workspace abc123");
-    console.log("  vibgrate dsn create --workspace abc123 --region eu --write .vibgrate/.dsn");
+    console.log("  vibgrate dsn create --workspace new --region eu --write .vibgrate/.dsn");
   },
   update: () => {
     console.log("");

package/dist/index.js

@@ -5,7 +5,7 @@ import {
   formatText,
   generateFindings,
   runScan
-} from "./chunk-H473HICY.js";
+} from "./chunk-BEASN7E5.js";
 import "./chunk-43ACU2WV.js";
 export {
   computeDriftScore,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vibgrate/cli",
-  "version": "1.0.58",
+  "version": "1.0.60",
   "description": "CLI for measuring upgrade drift across Node, .NET, Python & Java projects",
   "type": "module",
   "bin": {