mantiz-cli 0.1.2

package/README.md

@@ -0,0 +1,65 @@
+# @mantiz/cli
+
+**Mantiz CLI — AI lie detector for coding agents.**
+
+Scan git diffs for AI agent cheating patterns — like a polygraph for your test suite.
+
+## Installation
+
+```bash
+npm install -g @mantiz/cli
+```
+
+Or run without installation:
+
+```bash
+npx @mantiz/cli
+```
+
+## Usage
+
+```bash
+# Scan your current git diff
+mantiz-scan
+
+# Scan with JSON output (for CI)
+mantiz-scan --json
+
+# Scan a specific diff file
+mantiz-scan --diff "$(cat my-diff.diff)"
+
+# Cloud scan with API token
+mantiz-scan --token mtz_abc123
+
+# Help
+mantiz-scan --help
+```
+
+## CI/CD Integration
+
+```yaml
+# .github/workflows/mantiz.yml
+name: Mantiz Scan
+on: [pull_request]
+jobs:
+  scan:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+      - run: npx @mantiz/cli --token ${{ secrets.MANTIZ_API_TOKEN }}
+```
+
+Get your API token at: https://mantiz-wine.vercel.app/settings
+
+## Exit Codes
+
+- `0` — All clean (Trust Score ≥ 70)
+- `1` — Cheating detected (Trust Score < 70)
+
+## Environment Variables
+
+| Variable | Description |
+|----------|-------------|
+| `MANTIZ_API_TOKEN` | API token for cloud scan mode |
+| `MANTIZ_API_URL` | API URL (default: https://mantiz-wine.vercel.app) |

package/package.json

@@ -0,0 +1,34 @@
+{
+  "name": "mantiz-cli",
+  "version": "0.1.2",
+  "description": "Mantiz CLI — AI lie detector for coding agents. Scan git diffs for cheating patterns.",
+  "type": "module",
+  "main": "./src/index.ts",
+  "bin": {
+    "mantiz-scan": "./src/index.ts"
+  },
+  "files": [
+    "src",
+    "README.md"
+  ],
+  "scripts": {
+    "scan": "tsx src/index.ts"
+  },
+  "dependencies": {
+    "mantiz-core": "0.1.2",
+    "tsx": "^4.19.0"
+  },
+  "devDependencies": {
+    "@types/node": "22.20.0",
+    "typescript": "^6.0.2"
+  },
+  "keywords": [
+    "ai",
+    "lie-detector",
+    "cheating",
+    "test",
+    "mantiz",
+    "cli"
+  ],
+  "license": "MIT"
+}

package/src/index.ts

@@ -0,0 +1,194 @@
+#!/usr/bin/env tsx
+/**
+ * Mantiz CLI — AI Lie Detector for Coding Agents
+ *
+ * Usage:
+ *   mantiz-scan              # Scan local git diff
+ *   mantiz-scan --diff <str> # Scan provided diff text
+ *   mantiz-scan --token x    # Send to Mantiz API for cloud scan
+ *   mantiz-scan --help       # Show help
+ *
+ * Install:
+ *   npm install -g @mantiz/cli
+ */
+
+import { execSync } from 'node:child_process'
+import { scanDiff, type ScanResult } from 'mantiz-core'
+
+const PASS_THRESHOLD = 70
+
+function getGitDiff(): string {
+  try {
+    const diff = execSync('git diff', { encoding: 'utf-8', maxBuffer: 10 * 1024 * 1024 })
+    if (diff.trim()) return diff
+    const staged = execSync('git diff --staged', { encoding: 'utf-8', maxBuffer: 10 * 1024 * 1024 })
+    if (staged.trim()) return staged
+    const head = execSync('git diff HEAD~1', { encoding: 'utf-8', maxBuffer: 10 * 1024 * 1024 })
+    return head
+  } catch {
+    return ''
+  }
+}
+
+function printResults(result: ScanResult): void {
+  const scoreColor = result.trustScore >= 80 ? '\x1b[32m' : result.trustScore >= 50 ? '\x1b[33m' : '\x1b[31m'
+  const scoreLabel = result.trustScore >= 80 ? 'CLEAN ✅' : result.trustScore >= 50 ? 'SUSPICIOUS 🟡' : 'CHEATING DETECTED 🔴'
+  const reset = '\x1b[0m'
+  const bold = '\x1b[1m'
+  const dim = '\x1b[2m'
+
+  console.log('\n' + '='.repeat(50))
+  console.log(`${bold}🔍  MANTIZ SCAN RESULTS${reset}`)
+  console.log('='.repeat(50))
+  console.log(`\n${bold}Trust Score:${reset} ${scoreColor}${result.trustScore}/100${reset} ${scoreLabel}`)
+  console.log(`${dim}Threshold:${reset} ${PASS_THRESHOLD}${dim} (scores below this will fail)${reset}`)
+  console.log(`\n${bold}Summary:${reset}`)
+  console.log(`  Findings:  ${result.summary.totalFindings}`)
+  console.log(`  Files:     ${result.summary.filesScanned}`)
+  console.log(`  Verdict:   ${scoreColor}${scoreLabel}${reset}`)
+
+  if (result.findings.length > 0) {
+    console.log(`\n${bold}Findings:${reset}`)
+    for (const f of result.findings) {
+      const confColor = f.confidence === 'high' ? '\x1b[31m' : f.confidence === 'medium' ? '\x1b[33m' : '\x1b[90m'
+      console.log(`  ${confColor}${f.confidence.toUpperCase()}${reset}  ${f.filePath}:${f.lineStart}`)
+      console.log(`       ${dim}${f.explanation}${reset}`)
+    }
+  } else {
+    console.log(`\n  ${bold}No cheating detected.${reset} ${dim}Code looks honest.${reset}`)
+  }
+
+  if (result.fixInstructions.length > 0) {
+    console.log(`\n${bold}Fix Instructions:${reset}`)
+    for (const fi of result.fixInstructions) {
+      console.log(`  [${fi.patternType}] ${fi.instruction}`)
+    }
+  }
+
+  console.log(`\n${dim}${'='.repeat(50)}${reset}\n`)
+}
+
+function printHelp(): void {
+  console.log(`
+Mantiz CLI — AI Lie Detector for Coding Agents
+
+USAGE
+  mantiz-scan                  Scan current git diff
+  mantiz-scan --diff <text>    Scan provided diff text
+  mantiz-scan --token <key>    Send to Mantiz cloud API
+  mantiz-scan --json           Output results as JSON
+  mantiz-scan --help           Show this help
+
+EXIT CODES
+  0  — All clean (Trust Score >= ${PASS_THRESHOLD})
+  1  — Cheating detected (Trust Score < ${PASS_THRESHOLD})
+
+ENVIRONMENT VARIABLES
+  MANTIZ_API_TOKEN   API token for cloud scanning
+  MANTIZ_API_URL     API URL (default: https://mantiz-wine.vercel.app)
+
+EXAMPLES
+  mantiz-scan
+  cat my-diff.txt | mantiz-scan --diff -
+  mantiz-scan --json | jq '.trustScore'
+  mantiz-scan --token mtz_abc123
+`)
+}
+
+async function main(): Promise<void> {
+  const args = process.argv.slice(2)
+
+  if (args.includes('--help') || args.includes('-h')) {
+    printHelp()
+    process.exit(0)
+  }
+
+  const jsonOutput = args.includes('--json')
+  const tokenIndex = args.indexOf('--token')
+  const token = tokenIndex !== -1 ? args[tokenIndex + 1] : process.env.MANTIZ_API_TOKEN
+  const diffIndex = args.indexOf('--diff')
+  const diffArg = diffIndex !== -1 ? args[diffIndex + 1] : undefined
+
+  let diffText: string
+  if (diffArg) {
+    diffText = diffArg === '-' ? execSync('cat', { encoding: 'utf-8' }) : diffArg
+  } else {
+    diffText = getGitDiff()
+  }
+
+  if (!diffText || !diffText.trim()) {
+    if (jsonOutput) {
+      console.log(JSON.stringify({ error: 'No git diff found', trustScore: 0 }))
+    } else {
+      console.log('\x1b[33m⚠️  No git diff found. Run `git add` first or make some changes.\x1b[0m')
+    }
+    process.exit(1)
+  }
+
+  if (token) {
+    const apiUrl = process.env.MANTIZ_API_URL || 'https://mantiz-wine.vercel.app'
+    try {
+      const res = await fetch(`${apiUrl}/api/scan`, {
+        method: 'POST',
+        headers: {
+          'Content-Type': 'application/json',
+          'Authorization': `Bearer ${token}`,
+        },
+        body: JSON.stringify({ diff: diffText }),
+      })
+
+      if (!res.ok) {
+        const errBody = await res.text()
+        if (jsonOutput) {
+          console.log(JSON.stringify({ error: `API error: ${res.status}`, trustScore: 0 }))
+        } else {
+          console.log(`\x1b[31mAPI error: ${res.status} — ${errBody}\x1b[0m`)
+        }
+        process.exit(1)
+      }
+
+      const result = await res.json() as { trustScore: number; findings: any[]; summary: any }
+
+      if (jsonOutput) {
+        console.log(JSON.stringify(result, null, 2))
+      } else {
+        const scoreColor = result.trustScore >= 80 ? '\x1b[32m' : '\x1b[33m'
+        console.log(`\n${scoreColor}Trust Score: ${result.trustScore}/100\x1b[0m`)
+        console.log(`Findings: ${result.findings.length}`)
+        result.findings.slice(0, 5).forEach((f: any) => {
+          console.log(`  [${f.confidence}] ${f.filePath}:${f.lineStart} — ${f.explanation}`)
+        })
+      }
+
+      process.exit(result.trustScore < PASS_THRESHOLD ? 1 : 0)
+    } catch (err) {
+      if (jsonOutput) {
+        console.log(JSON.stringify({ error: `Failed to reach Mantiz API: ${err}`, trustScore: 0 }))
+      } else {
+        console.log(`\x1b[31mFailed to reach Mantiz API: ${err}\x1b[0m`)
+      }
+      process.exit(1)
+    }
+  }
+
+  const result = scanDiff(diffText)
+
+  if (jsonOutput) {
+    console.log(JSON.stringify({
+      trustScore: result.trustScore,
+      summary: result.summary,
+      findings: result.findings,
+      fixInstructions: result.fixInstructions,
+      passed: result.trustScore >= PASS_THRESHOLD,
+    }, null, 2))
+  } else {
+    printResults(result)
+  }
+
+  process.exit(result.trustScore < PASS_THRESHOLD ? 1 : 0)
+}
+
+main().catch((err) => {
+  console.error('Fatal error:', err)
+  process.exit(1)
+})