guardrail-cli 2.4.13 → 2.5.0

package/dist/index.js

@@ -164,6 +164,8 @@ const styles = {
     bgBlue: '\x1b[44m',
     bgMagenta: '\x1b[45m',
     bgCyan: '\x1b[46m',
+    // Symbols
+    bullet: '•',
 };
 // Styled text helpers
 const style = {
@@ -300,25 +302,58 @@ function printStatusBadge(status) {
     };
     console.log(`  ${badges[status] || badges.free}`);
 }
-// Enterprise-styled prompt helpers
+// Enterprise-styled prompt helpers with arrow key navigation
 async function promptSelect(message, choices) {
-    const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
     return new Promise((resolve) => {
-        console.log('');
-        console.log(`  ${styles.brightCyan}${styles.bold}?${styles.reset} ${styles.bold}${message}${styles.reset}`);
-        console.log(`  ${styles.dim}${box.teeLeft}${box.horizontal.repeat(50)}${styles.reset}`);
-        choices.forEach((c, i) => {
-            const num = `${styles.cyan}${styles.bold}[${i + 1}]${styles.reset}`;
-            const badge = c.badge ? ` ${c.badge}` : '';
-            console.log(`  ${styles.dim}${box.vertical}${styles.reset}  ${num} ${c.name}${badge}`);
-        });
-        console.log(`  ${styles.dim}${box.bottomLeft}${box.horizontal.repeat(50)}${styles.reset}`);
-        console.log('');
-        rl.question(`  ${styles.brightCyan}❯${styles.reset} Enter choice ${styles.dim}(1-${choices.length})${styles.reset}: `, (answer) => {
-            rl.close();
-            const idx = parseInt(answer, 10) - 1;
-            resolve(choices[Math.max(0, Math.min(idx, choices.length - 1))].value);
+        const rl = readline.createInterface({
+            input: process.stdin,
+            output: process.stdout,
+            terminal: true
         });
+        let selectedIndex = 0;
+        const renderMenu = () => {
+            console.clear();
+            console.log('');
+            console.log(`  ${styles.brightCyan}${styles.bold}?${styles.reset} ${styles.bold}${message}${styles.reset}`);
+            console.log(`  ${styles.dim}${box.teeLeft}${box.horizontal.repeat(50)}${styles.reset}`);
+            choices.forEach((choice, i) => {
+                const isSelected = i === selectedIndex;
+                const prefix = isSelected ? `${styles.brightCyan}${styles.bold}❯${styles.reset}` : ' ';
+                const badge = choice.badge ? ` ${choice.badge}` : '';
+                const color = isSelected ? styles.brightWhite : styles.dim;
+                console.log(`  ${styles.dim}${box.vertical}${styles.reset}  ${prefix} ${color}${choice.name}${badge}${styles.reset}`);
+            });
+            console.log(`  ${styles.dim}${box.bottomLeft}${box.horizontal.repeat(50)}${styles.reset}`);
+            console.log('');
+            console.log(`  ${styles.dim}Use ↑↓ arrows to move, Enter to select${styles.reset}`);
+        };
+        renderMenu();
+        // Handle keypress events
+        readline.emitKeypressEvents(process.stdin);
+        process.stdin.setRawMode(true);
+        const onKeyPress = (str, key) => {
+            if (key.name === 'up') {
+                selectedIndex = selectedIndex > 0 ? selectedIndex - 1 : choices.length - 1;
+                renderMenu();
+            }
+            else if (key.name === 'down') {
+                selectedIndex = selectedIndex < choices.length - 1 ? selectedIndex + 1 : 0;
+                renderMenu();
+            }
+            else if (key.name === 'return' || key.name === 'enter') {
+                process.stdin.setRawMode(false);
+                process.stdin.removeListener('keypress', onKeyPress);
+                rl.close();
+                resolve(choices[selectedIndex].value);
+            }
+            else if (key.ctrl && key.name === 'c') {
+                process.stdin.setRawMode(false);
+                process.stdin.removeListener('keypress', onKeyPress);
+                rl.close();
+                process.exit(0);
+            }
+        };
+        process.stdin.on('keypress', onKeyPress);
     });
 }
 async function promptInput(message, defaultValue) {
@@ -1494,7 +1529,7 @@ program
                 console.log(`  ${styles.dim}List backups:${styles.reset} ${styles.bold}guardrail fix rollback --list${styles.reset}`);
                 console.log('');
             }
-            (0, exit_codes_1.exitWith)(exit_codes_1.ExitCode.INVALID_INPUT, 'Run ID required');
+            (0, exit_codes_1.exitWith)(exit_codes_1.ExitCode.USER_ERROR, 'Run ID required');
         }
         if (!options.json) {
             console.log('');
@@ -1667,38 +1702,156 @@ program
                     });
                 }
             }
-            if (options.badge && shipResult.verdict === 'ship') {
-                const badgeLines = [
-                    `${styles.brightGreen}${styles.bold}${icons.success} SHIP BADGE READY${styles.reset}`,
-                    '',
-                    `${styles.dim}Permalink:${styles.reset}   ${shipResult.permalink}`,
-                    `${styles.dim}Embed code:${styles.reset}  ${shipResult.embedCode}`,
-                ];
-                const framedBadge = frameLines(badgeLines, { padding: 2 });
-                console.log(framedBadge.join('\n'));
+            // Show badge embed code
+            if (shipResult.embedCode) {
+                console.log(`${styles.bold}BADGE EMBED CODE${styles.reset}`);
+                printDivider();
+                console.log(`  ${styles.dim}${shipResult.embedCode}${styles.reset}`);
                 console.log('');
             }
         }
         if (options.output) {
-            const reportData = {
+            const output = {
                 ship: shipResult,
                 mockproof: mockproofResult,
-                generated: new Date().toISOString()
+                timestamp: new Date().toISOString(),
+                project: {
+                    name: projectName,
+                    path: projectPath
+                }
             };
-            (0, fs_1.writeFileSync)(options.output, JSON.stringify(reportData, null, 2));
-            console.log(`  ${styles.brightGreen}${icons.success}${styles.reset} Report written to ${options.output}`);
+            (0, fs_1.writeFileSync)(options.output, JSON.stringify(output, null, 2));
+            console.log(`${styles.dim}Report saved to:${styles.reset} ${options.output}`);
+        }
+        // Exit with appropriate code
+        const exitCode = shipResult.verdict === 'ship' ? exit_codes_1.ExitCode.SUCCESS : exit_codes_1.ExitCode.POLICY_FAIL;
+        (0, exit_codes_1.exitWith)(exitCode);
+    }
+    catch (error) {
+        console.error(`${styles.brightRed}Error:${styles.reset} ${error.message}`);
+        (0, exit_codes_1.exitWith)(exit_codes_1.ExitCode.SYSTEM_ERROR, 'Ship check failed');
+    }
+});
+// Pro Ship command (Pro feature - $99/month)
+program
+    .command('ship:pro')
+    .description('Pro Ship Check - Comprehensive scanning with all services (Pro $99/mo)')
+    .option('-p, --path <path>', 'Project path to analyze', '.')
+    .option('-f, --format <format>', 'Output format: table, json, markdown', 'table')
+    .option('-o, --output <file>', 'Output file path')
+    .option('--url <baseUrl>', 'Base URL for reality mode scanning')
+    .option('--no-reality', 'Skip reality mode scan')
+    .option('--no-security', 'Skip security scan')
+    .option('--no-performance', 'Skip performance check')
+    .option('--no-accessibility', 'Skip accessibility check')
+    .option('--badge', 'Generate dynamic badge', true)
+    .action(async (options) => {
+    const config = requireAuth('pro');
+    printLogo();
+    const projectPath = (0, path_1.resolve)(options.path);
+    const projectName = (0, path_1.basename)(projectPath);
+    (0, ui_1.printCommandHeader)({
+        title: 'PRO SHIP CHECK',
+        icon: icons.ship,
+        projectName,
+        projectPath,
+        metadata: [
+            { key: 'Reality Mode', value: !options.noReality ? 'Enabled' : 'Disabled' },
+            { key: 'Security Scan', value: !options.noSecurity ? 'Enabled' : 'Disabled' },
+            { key: 'Performance', value: !options.noPerformance ? 'Enabled' : 'Disabled' },
+            { key: 'Accessibility', value: !options.noAccessibility ? 'Enabled' : 'Disabled' },
+            { key: 'Dynamic Badge', value: options.badge ? 'Enabled' : 'Disabled' },
+        ],
+        tier: (await config).tier,
+        authenticated: !!(await config).apiKey,
+    });
+    try {
+        // Import pro ship scanner
+        const { ProShipScanner } = require('guardrail-ship');
+        const proShipScanner = new ProShipScanner();
+        const scanConfig = {
+            projectPath,
+            baseUrl: options.url,
+            includeRealityMode: !options.noReality,
+            includeSecurityScan: !options.noSecurity,
+            includePerformanceCheck: !options.noPerformance,
+            includeAccessibilityCheck: !options.noAccessibility,
+        };
+        console.log(`${styles.dim}Running comprehensive scan...${styles.reset}`);
+        console.log('');
+        const result = await proShipScanner.runComprehensiveScan(scanConfig);
+        if (options.format === 'json') {
+            console.log(JSON.stringify(result, null, 2));
+        }
+        else {
+            // Display comprehensive results
+            const verdictColor = result.verdict === 'SHIP' ? styles.brightGreen :
+                result.verdict === 'NO-SHIP' ? styles.brightRed : styles.brightYellow;
+            const verdictIcon = result.verdict === 'SHIP' ? icons.success :
+                result.verdict === 'NO-SHIP' ? icons.error : icons.warning;
+            const verdictLines = [
+                `${verdictColor}${styles.bold}${verdictIcon} ${result.verdict}${styles.reset}`,
+                '',
+                `${styles.dim}Overall Score:${styles.reset} ${styles.bold}${result.overallScore}${styles.reset}/100`,
+                `${styles.dim}Scans Completed:${styles.reset} ${result.summary.totalScans}/${result.summary.totalScans}`,
+                `${styles.dim}Passed:${styles.reset} ${styles.brightGreen}${result.summary.passedScans}${styles.reset}`,
+                `${styles.dim}Failed:${styles.reset} ${styles.brightRed}${result.summary.failedScans}${styles.reset}`,
+                `${styles.dim}Critical Issues:${styles.reset} ${styles.brightRed}${result.summary.criticalIssues}${styles.reset}`,
+                `${styles.dim}Warnings:${styles.reset} ${styles.brightYellow}${result.summary.warnings}${styles.reset}`,
+                `${styles.dim}Duration:${styles.reset} ${(result.summary.totalDuration / 1000).toFixed(2)}s`,
+            ];
+            const framedVerdict = frameLines(verdictLines, { padding: 2 });
+            console.log(framedVerdict.join('\n'));
+            console.log('');
+            // Show individual scan results
+            console.log(`${styles.bold}SCAN RESULTS${styles.reset}`);
+            printDivider();
+            result.scans.forEach((scan, index) => {
+                const statusColor = scan.status === 'pass' ? styles.brightGreen :
+                    scan.status === 'fail' ? styles.brightRed :
+                        scan.status === 'warning' ? styles.brightYellow : styles.brightRed;
+                const statusIcon = scan.status === 'pass' ? icons.success :
+                    scan.status === 'fail' ? icons.error :
+                        scan.status === 'warning' ? icons.warning : icons.error;
+                console.log(`${styles.cyan}${index + 1}.${styles.reset} ${styles.bold}${scan.name}${styles.reset}`);
+                console.log(`   Status: ${statusColor}${statusIcon} ${scan.status.toUpperCase()}${styles.reset}`);
+                console.log(`   Score: ${styles.bold}${scan.score}${styles.reset}/100`);
+                console.log(`   Duration: ${(scan.duration / 1000).toFixed(2)}s`);
+                if (scan.criticalIssues > 0) {
+                    console.log(`   Critical: ${styles.brightRed}${scan.criticalIssues}${styles.reset}`);
+                }
+                if (scan.warnings > 0) {
+                    console.log(`   Warnings: ${styles.brightYellow}${scan.warnings}${styles.reset}`);
+                }
+                console.log('');
+            });
+            // Show recommendation
+            console.log(`${styles.bold}RECOMMENDATION${styles.reset}`);
+            printDivider();
+            console.log(`${styles.dim}${result.recommendation}${styles.reset}`);
             console.log('');
+            // Show badge info
+            if (options.badge && result.badge) {
+                console.log(`${styles.bold}DYNAMIC BADGE${styles.reset}`);
+                printDivider();
+                console.log(`${styles.dim}SVG URL:${styles.reset} ${result.badge.svgUrl}`);
+                console.log(`${styles.dim}JSON URL:${styles.reset} ${result.badge.jsonUrl}`);
+                console.log(`${styles.dim}Embed Code:${styles.reset}`);
+                console.log(`  ${styles.dim}${result.badge.embedCode}${styles.reset}`);
+                console.log('');
+            }
         }
-        // Exit with error if not ready
-        if (shipResult.verdict !== 'ship' || (mockproofResult && mockproofResult.verdict === 'fail')) {
-            (0, exit_codes_1.exitWith)(exit_codes_1.ExitCode.POLICY_FAIL, 'Ship check failed');
+        if (options.output) {
+            (0, fs_1.writeFileSync)(options.output, JSON.stringify(result, null, 2));
+            console.log(`${styles.dim}Report saved to:${styles.reset} ${options.output}`);
         }
+        // Exit with appropriate code
+        const exitCode = result.verdict === 'SHIP' ? exit_codes_1.ExitCode.SUCCESS : exit_codes_1.ExitCode.POLICY_FAIL;
+        (0, exit_codes_1.exitWith)(exitCode);
     }
     catch (error) {
-        console.log('');
-        console.log(`  ${styles.brightRed}${icons.error}${styles.reset} ${styles.bold}Ship check failed:${styles.reset} ${error.message}`);
-        console.log('');
-        (0, exit_codes_1.exitWith)(exit_codes_1.ExitCode.SYSTEM_ERROR, 'Ship check execution failed');
+        console.error(`${styles.brightRed}Error:${styles.reset} ${error.message}`);
+        (0, exit_codes_1.exitWith)(exit_codes_1.ExitCode.SYSTEM_ERROR, 'Pro ship check failed');
     }
 });
 // Reality command (Starter+ feature)
@@ -1755,22 +1908,53 @@ program
             // Check dependencies first
             const depCheck = checkPlaywrightDependencies(projectPath);
             if (!depCheck.playwrightInstalled) {
-                console.log(`  ${styles.brightRed}${icons.error} Playwright not installed${styles.reset}`);
+                console.log(`  ${styles.brightYellow}${icons.warning} Playwright not installed${styles.reset}`);
                 console.log('');
-                console.log(`  ${styles.bold}Install commands:${styles.reset}`);
-                depCheck.installCommands.forEach(cmd => {
-                    console.log(`    ${styles.brightCyan}${cmd}${styles.reset}`);
-                });
+                // Try to install automatically
+                console.log(`  ${styles.brightCyan}${icons.info} Attempting automatic installation...${styles.reset}`);
+                const installResult = await installPlaywrightDependencies(projectPath);
+                if (!installResult.success) {
+                    console.log(`  ${styles.brightRed}${icons.error} Auto-installation failed: ${installResult.error}${styles.reset}`);
+                    console.log('');
+                    console.log(`  ${styles.bold}Manual install commands:${styles.reset}`);
+                    depCheck.installCommands.forEach(cmd => {
+                        console.log(`    ${styles.brightCyan}${cmd}${styles.reset}`);
+                    });
+                    console.log('');
+                    (0, exit_codes_1.exitWith)(exit_codes_1.ExitCode.SYSTEM_ERROR, 'Playwright not installed');
+                }
+                console.log(`  ${styles.brightGreen}${icons.success} Playwright installed successfully${styles.reset}`);
                 console.log('');
-                (0, exit_codes_1.exitWith)(exit_codes_1.ExitCode.SYSTEM_ERROR, 'Playwright not installed');
             }
             if (!depCheck.browsersInstalled) {
                 console.log(`  ${styles.brightYellow}${icons.warning} Playwright browsers not installed${styles.reset}`);
                 console.log('');
-                console.log(`  ${styles.bold}Install command:${styles.reset}`);
-                console.log(`    ${styles.brightCyan}npx playwright install${styles.reset}`);
-                console.log('');
-                (0, exit_codes_1.exitWith)(exit_codes_1.ExitCode.SYSTEM_ERROR, 'Playwright browsers not installed');
+                // Try to install browsers only
+                console.log(`  ${styles.brightCyan}${icons.info} Installing browsers...${styles.reset}`);
+                try {
+                    await new Promise((resolve, reject) => {
+                        const browserInstall = spawn('npx', ['playwright', 'install'], {
+                            cwd: projectPath,
+                            stdio: 'pipe'
+                        });
+                        browserInstall.on('close', (code) => {
+                            if (code === 0) {
+                                console.log(`  ${styles.brightGreen}${icons.success} Browsers installed successfully${styles.reset}`);
+                                resolve();
+                            }
+                            else {
+                                reject(new Error('browser install failed'));
+                            }
+                        });
+                        browserInstall.on('error', reject);
+                    });
+                }
+                catch (error) {
+                    console.log(`  ${styles.brightRed}${icons.error} Browser installation failed: ${error.message}${styles.reset}`);
+                    console.log(`  ${styles.brightCyan}npx playwright install${styles.reset}`);
+                    console.log('');
+                    (0, exit_codes_1.exitWith)(exit_codes_1.ExitCode.SYSTEM_ERROR, 'Playwright browsers not installed');
+                }
             }
             // Create artifact directory for recorded test
             const artifacts = createArtifactDirectory(projectPath, options.flow);
@@ -1852,22 +2036,60 @@ program
             console.log('');
             const depCheck = checkPlaywrightDependencies(projectPath);
             if (!depCheck.playwrightInstalled) {
-                console.log(`  ${styles.brightRed}${icons.error} Playwright not installed${styles.reset}`);
+                console.log(`  ${styles.brightYellow}${icons.warning} Playwright not installed${styles.reset}`);
                 console.log('');
-                console.log(`  ${styles.bold}Install commands:${styles.reset}`);
-                depCheck.installCommands.forEach(cmd => {
-                    console.log(`    ${styles.brightCyan}${cmd}${styles.reset}`);
-                });
+                // Try to install automatically
+                console.log(`  ${styles.brightCyan}${icons.info} Attempting automatic installation...${styles.reset}`);
+                const installResult = await installPlaywrightDependencies(projectPath);
+                if (!installResult.success) {
+                    console.log(`  ${styles.brightRed}${icons.error} Auto-installation failed: ${installResult.error}${styles.reset}`);
+                    console.log('');
+                    console.log(`  ${styles.bold}Manual install commands:${styles.reset}`);
+                    depCheck.installCommands.forEach(cmd => {
+                        console.log(`    ${styles.brightCyan}${cmd}${styles.reset}`);
+                    });
+                    console.log('');
+                    (0, exit_codes_1.exitWith)(exit_codes_1.ExitCode.SYSTEM_ERROR, 'Playwright not installed');
+                }
+                // Re-check after installation
+                const newDepCheck = checkPlaywrightDependencies(projectPath);
+                if (!newDepCheck.playwrightInstalled) {
+                    console.log(`  ${styles.brightRed}${icons.error} Installation verification failed${styles.reset}`);
+                    (0, exit_codes_1.exitWith)(exit_codes_1.ExitCode.SYSTEM_ERROR, 'Playwright installation failed');
+                }
+                console.log(`  ${styles.brightGreen}${icons.success} Playwright installed successfully${styles.reset}`);
                 console.log('');
-                (0, exit_codes_1.exitWith)(exit_codes_1.ExitCode.SYSTEM_ERROR, 'Playwright not installed');
             }
             if (!depCheck.browsersInstalled) {
                 console.log(`  ${styles.brightYellow}${icons.warning} Playwright browsers not installed${styles.reset}`);
                 console.log('');
-                console.log(`  ${styles.bold}Install command:${styles.reset}`);
-                console.log(`    ${styles.brightCyan}npx playwright install${styles.reset}`);
-                console.log('');
-                process.exit(2);
+                // Try to install browsers only
+                console.log(`  ${styles.brightCyan}${icons.info} Installing browsers...${styles.reset}`);
+                try {
+                    const { spawn } = require('child_process');
+                    await new Promise((resolve, reject) => {
+                        const browserInstall = spawn('npx', ['playwright', 'install'], {
+                            cwd: projectPath,
+                            stdio: 'pipe'
+                        });
+                        browserInstall.on('close', (code) => {
+                            if (code === 0) {
+                                console.log(`  ${styles.brightGreen}${icons.success} Browsers installed successfully${styles.reset}`);
+                                resolve();
+                            }
+                            else {
+                                reject(new Error('browser install failed'));
+                            }
+                        });
+                        browserInstall.on('error', reject);
+                    });
+                }
+                catch (error) {
+                    console.log(`  ${styles.brightRed}${icons.error} Browser installation failed: ${error.message}${styles.reset}`);
+                    console.log(`  ${styles.brightCyan}npx playwright install${styles.reset}`);
+                    console.log('');
+                    process.exit(2);
+                }
             }
             console.log(`  ${styles.brightGreen}${icons.success}${styles.reset} Playwright installed`);
             console.log(`  ${styles.brightGreen}${icons.success}${styles.reset} Browsers available`);
@@ -2674,23 +2896,64 @@ async function runScanEnterprise(projectPath, options) {
         since: options.since,
         baseline: options.baseline,
     });
+    // Adapter functions for baseline management
+    const secretToBaselineFinding = (secret) => ({
+        type: secret.type,
+        category: 'secret',
+        title: secret.type,
+        file: secret.file,
+        line: secret.line,
+        match: secret.match,
+        snippet: secret.match,
+    });
+    const vulnToBaselineFinding = (vuln) => ({
+        type: 'vulnerability',
+        category: vuln.severity,
+        title: vuln.title || vuln.cve,
+        file: vuln.path || 'package.json',
+        line: 1,
+        match: vuln.cve,
+        snippet: `${vuln.package}@${vuln.version}`,
+    });
+    const baselineToSecretFinding = (finding) => ({
+        type: finding.type || 'unknown',
+        file: finding.file,
+        line: finding.line,
+        risk: 'medium', // Default risk
+        confidence: 0.8,
+        entropy: 0,
+        match: finding.match || '',
+        isTest: false,
+        recommendation: 'Review and remediate',
+    });
+    const baselineToVulnFinding = (finding) => ({
+        package: finding.snippet?.split('@')[0] || 'unknown',
+        version: finding.snippet?.split('@')[1] || 'unknown',
+        severity: finding.category || 'medium',
+        cve: finding.match || 'unknown',
+        title: finding.title,
+        fixedIn: 'unknown',
+        path: finding.file,
+    });
     if (options.baseline) {
         if (results.secrets) {
-            const { filtered, suppressed } = BaselineManager.filterFindings(results.secrets.findings, options.baseline);
-            results.secrets.findings = filtered;
+            const secretFindings = results.secrets.findings.map(secretToBaselineFinding);
+            const { filtered, suppressed } = BaselineManager.filterFindings(secretFindings, options.baseline);
+            results.secrets.findings = filtered.map(baselineToSecretFinding);
             results.secrets.summary.total = filtered.length;
             results.secrets.suppressedByBaseline = suppressed;
         }
         if (results.vulnerabilities) {
-            const { filtered, suppressed } = BaselineManager.filterFindings(results.vulnerabilities.findings, options.baseline);
-            results.vulnerabilities.findings = filtered;
+            const vulnFindings = results.vulnerabilities.findings.map(vulnToBaselineFinding);
+            const { filtered, suppressed } = BaselineManager.filterFindings(vulnFindings, options.baseline);
+            results.vulnerabilities.findings = filtered.map(baselineToVulnFinding);
             const summary = {
                 critical: filtered.filter((f) => f.severity === 'critical').length,
                 high: filtered.filter((f) => f.severity === 'high').length,
                 medium: filtered.filter((f) => f.severity === 'medium').length,
                 low: filtered.filter((f) => f.severity === 'low').length,
             };
-            results.vulnerabilities.summary = summary;
+            results.vulnerabilities.summary = { ...results.vulnerabilities.summary, ...summary };
             results.vulnerabilities.suppressedByBaseline = suppressed;
         }
     }
@@ -2893,9 +3156,15 @@ async function initProject(projectPath, options) {
     if (!validation.success) {
         s3.stop(false, 'Configuration validation failed');
         console.log(`  ${styles.brightRed}${icons.error}${styles.reset} Config validation errors:`);
-        validation.error.errors.forEach(err => {
-            console.log(`    ${styles.dim}${err.path.join('.')}:${styles.reset} ${err.message}`);
-        });
+        const validationError = validation;
+        if (validationError.error && Array.isArray(validationError.error.errors)) {
+            validationError.error.errors.forEach((err) => {
+                console.log(`    ${styles.dim}${err.path?.join('.') || 'field'}:${styles.reset} ${err.message}`);
+            });
+        }
+        else {
+            console.log(`    ${styles.dim}Unknown validation error${styles.reset}`);
+        }
         return;
     }
     // Atomic write
@@ -3162,6 +3431,54 @@ function outputComplianceResults(results, options) {
     }
     console.log(`  ${styles.dim}Run${styles.reset} ${styles.bold}guardrail scan:compliance --framework gdpr${styles.reset} ${styles.dim}for other frameworks.${styles.reset}\n`);
 }
+/**
+ * Install Playwright dependencies automatically
+ */
+async function installPlaywrightDependencies(projectPath) {
+    const { spawn } = require('child_process');
+    try {
+        console.log(`  ${styles.brightCyan}${icons.info} Installing Playwright...${styles.reset}`);
+        // Install @playwright/test
+        await new Promise((resolve, reject) => {
+            const npmInstall = spawn('npm', ['install', '-D', '@playwright/test'], {
+                cwd: projectPath,
+                stdio: 'pipe'
+            });
+            npmInstall.on('close', (code) => {
+                if (code === 0) {
+                    console.log(`  ${styles.brightGreen}${icons.success} Playwright package installed${styles.reset}`);
+                    resolve();
+                }
+                else {
+                    reject(new Error('npm install failed'));
+                }
+            });
+            npmInstall.on('error', reject);
+        });
+        // Install browsers
+        console.log(`  ${styles.brightCyan}${icons.info} Installing Playwright browsers...${styles.reset}`);
+        await new Promise((resolve, reject) => {
+            const browserInstall = spawn('npx', ['playwright', 'install'], {
+                cwd: projectPath,
+                stdio: 'pipe'
+            });
+            browserInstall.on('close', (code) => {
+                if (code === 0) {
+                    console.log(`  ${styles.brightGreen}${icons.success} Playwright browsers installed${styles.reset}`);
+                    resolve();
+                }
+                else {
+                    reject(new Error('browser install failed'));
+                }
+            });
+            browserInstall.on('error', reject);
+        });
+        return { success: true };
+    }
+    catch (error) {
+        return { success: false, error: error.message };
+    }
+}
 async function runInteractiveMenu() {
     const cfg = loadConfig();
     while (true) {
@@ -3172,6 +3489,9 @@ async function runInteractiveMenu() {
             { name: `${styles.brightGreen}${icons.scan}${styles.reset}  Vulnerability Scan     ${styles.dim}Check dependencies for CVEs${styles.reset}`, value: 'scan_vulns' },
             { name: `${styles.brightYellow}${icons.compliance}${styles.reset} Compliance Scan        ${proBadge} ${styles.dim}SOC2/GDPR/HIPAA${styles.reset}`, value: 'scan_compliance' },
             { name: `${styles.brightBlue}${icons.sbom}${styles.reset} Generate SBOM          ${proBadge} ${styles.dim}Software bill of materials${styles.reset}`, value: 'sbom' },
+            { name: `${styles.brightMagenta}${icons.reality}${styles.reset} Reality Mode           ${styles.dim}Browser testing & auth flows${styles.reset}`, value: 'reality' },
+            { name: `${styles.brightGreen}${icons.ship}${styles.reset} Ship Check             ${styles.dim}Pre-deployment validation${styles.reset}`, value: 'ship' },
+            { name: `${styles.cyan}${icons.autopilot}${styles.reset} Initialize Project    ${styles.dim}Setup Guardrail configuration${styles.reset}`, value: 'init' },
             { name: `${styles.brightMagenta}${icons.auth}${styles.reset} Auth / Status          ${styles.dim}Login, logout, view status${styles.reset}`, value: 'auth' },
             { name: `${styles.dim}${icons.error} Exit${styles.reset}`, value: 'exit' },
         ]);
@@ -3319,6 +3639,127 @@ async function runInteractiveMenu() {
             console.log(`${c.success('✓')} SBOM written to ${output}\n`);
             continue;
         }
+        if (action === 'reality') {
+            requireAuth('starter');
+            const url = await promptInput('Base URL of running app', 'http://localhost:3000');
+            const flow = await promptSelect('Flow to test', [
+                { name: 'Authentication Flow', value: 'auth' },
+                { name: 'Checkout Flow', value: 'checkout' },
+                { name: 'Dashboard Flow', value: 'dashboard' },
+            ]);
+            const mode = await promptSelect('Mode', [
+                { name: 'Generate test only', value: 'generate' },
+                { name: 'Generate and run', value: 'run' },
+                { name: 'Record user actions', value: 'record' },
+            ]);
+            console.log(`\n${c.dim('Command:')} ${c.bold(`guardrail reality --url "${url}" --flow ${flow}${mode === 'run' ? ' --run' : mode === 'record' ? ' --record' : ''}`)}\n`);
+            printLogo();
+            console.log(`\n${c.bold('🌐 REALITY MODE')}\n`);
+            // Check dependencies and install if needed
+            const { checkPlaywrightDependencies } = require('./reality/reality-runner');
+            const depCheck = checkPlaywrightDependencies(projectPath);
+            if (!depCheck.playwrightInstalled || !depCheck.browsersInstalled) {
+                console.log(`  ${styles.brightYellow}${icons.warning} Playwright dependencies missing${styles.reset}`);
+                console.log('');
+                const shouldInstall = await promptConfirm('Install Playwright dependencies automatically?', true);
+                if (shouldInstall) {
+                    const installResult = await installPlaywrightDependencies(projectPath);
+                    if (!installResult.success) {
+                        console.log(`  ${styles.brightRed}${icons.error} Failed to install: ${installResult.error}${styles.reset}`);
+                        console.log('');
+                        console.log(`  ${styles.bold}Manual install commands:${styles.reset}`);
+                        depCheck.installCommands.forEach(cmd => {
+                            console.log(`    ${styles.brightCyan}${cmd}${styles.reset}`);
+                        });
+                        console.log('');
+                        continue;
+                    }
+                }
+                else {
+                    console.log(`  ${styles.dim}Installation skipped. Run manually when ready.${styles.reset}`);
+                    console.log('');
+                    continue;
+                }
+            }
+            // Execute reality mode based on selection
+            const { spawn } = require('child_process');
+            const args = ['reality', '--url', url, '--flow', flow];
+            if (mode === 'run')
+                args.push('--run');
+            if (mode === 'record')
+                args.push('--record');
+            const realityProc = spawn('guardrail', args, {
+                stdio: 'inherit',
+                shell: process.platform === 'win32',
+                cwd: projectPath
+            });
+            realityProc.on('close', (code) => {
+                if (code === 0) {
+                    console.log(`\n  ${styles.brightGreen}${icons.success} Reality mode completed${styles.reset}`);
+                }
+                else {
+                    console.log(`\n  ${styles.brightRed}${icons.error} Reality mode failed${styles.reset}`);
+                }
+            });
+            continue;
+        }
+        if (action === 'ship') {
+            requireAuth();
+            const baseline = await promptConfirm('Use baseline file?', false);
+            const output = await promptConfirm('Generate ship report?', true);
+            const outputPath = output ? defaultReportPath(projectPath, 'ship', 'json') : undefined;
+            console.log(`\n${c.dim('Command:')} ${c.bold(`guardrail ship -p "${projectPath}"${baseline ? ' --baseline .guardrail/baseline.json' : ''}${outputPath ? ` --output "${outputPath}"` : ''}`)}\n`);
+            printLogo();
+            console.log(`\n${c.bold('🚀 SHIP CHECK')}\n`);
+            // Import ship functionality
+            const { runShipCheck } = require('guardrail-ship');
+            try {
+                const shipResult = await runShipCheck(projectPath, {
+                    baseline: baseline ? '.guardrail/baseline.json' : undefined,
+                    output: outputPath
+                });
+                if (shipResult.verdict === 'ship') {
+                    console.log(`  ${styles.brightGreen}${icons.success} Ready to ship!${styles.reset}`);
+                }
+                else {
+                    console.log(`  ${styles.brightYellow}${icons.warning} Issues need to be addressed before shipping${styles.reset}`);
+                }
+                if (outputPath) {
+                    console.log(`  ${styles.dim}Report saved to ${outputPath}${styles.reset}`);
+                }
+            }
+            catch (error) {
+                console.log(`  ${styles.brightRed}${icons.error} Ship check failed: ${error.message}${styles.reset}`);
+            }
+            console.log('');
+            continue;
+        }
+        if (action === 'init') {
+            const template = await promptSelect('Configuration template', [
+                { name: 'Startup - Fast, minimal setup', value: 'startup' },
+                { name: 'Enterprise - Strict, compliant', value: 'enterprise' },
+                { name: 'OSS - Supply chain focus', value: 'oss' },
+            ]);
+            const setupCI = await promptConfirm('Setup CI/CD integration?', false);
+            const setupHooks = await promptConfirm('Install git hooks?', false);
+            console.log(`\n${c.dim('Command:')} ${c.bold(`guardrail init -p "${projectPath}" --template ${template}${setupCI ? ' --ci' : ''}${setupHooks ? ' --hooks' : ''}`)}\n`);
+            printLogo();
+            console.log(`\n${c.bold('🔧 INITIALIZING PROJECT')}\n`);
+            try {
+                await initProject(projectPath, {
+                    template,
+                    ci: setupCI,
+                    hooks: setupHooks,
+                    interactive: true
+                });
+                console.log(`  ${styles.brightGreen}${icons.success} Project initialized successfully${styles.reset}`);
+            }
+            catch (error) {
+                console.log(`  ${styles.brightRed}${icons.error} Initialization failed: ${error.message}${styles.reset}`);
+            }
+            console.log('');
+            continue;
+        }
     }
 }
 // Register cache management commands