openpitstop 1.0.0 → 1.1.0

package/README.md

@@ -40,11 +40,13 @@ your agent.
 
 | Jump to | |
 |---|---|
-| [Feature tour](#feature-tour) — the 11 demos | [Install](#install) · [Usage](#usage) · [Tool support](#tool-support) |
+| [Feature tour](#feature-tour) — the 13 demos | [Install](#install) · [Usage](#usage) · [Tool support](#tool-support) |
 | [See it in 90 seconds](#see-it-in-90-seconds) | [What OpenPitStop actually does](#what-openpitstop-actually-does) · [Every command](#every-command) |
 | [Architecture](#architecture) | [Known limitations](#known-limitations) · [Contributing](#contributing) · [License](#license) |
 
-**Straight to one feature:** [The scan](#the-scan) · [Verify](#verify) · [Trends](#trends) · [Inspect](#inspect) · [Repro](#repro) · [The pen test](#the-pen-test) · [Report](#report) · [Share](#share) · [Honesty](#honesty) · [Try it on your repo](#try-it-on-your-repo) · [The live shield](#the-live-shield)
+**Straight to one feature:** [The scan](#the-scan) · [Verify](#verify) · [Trends](#trends) · [Inspect](#inspect) · [Repro](#repro) · [The pen test](#the-pen-test) · [Report](#report) · [Share](#share) · [Honesty](#honesty) · [Try it on your repo](#try-it-on-your-repo) · [The live shield](#the-live-shield) · [The GitHub Action](#the-github-action) · [The pre-commit hook](#the-pre-commit-hook)
+
+**Receipts:** [Caught in the wild](docs/caught-in-the-wild.md) — real gate output, screenshot-ready.
 
 ---
 
@@ -142,6 +144,19 @@ Every clip below is real command output — the only thing that was trimmed is d
   <img src="docs/media/pitstop-watch.gif" alt="pitstop watch — live score delta when a file changes" width="700">
 </p>
 
+### The GitHub Action
+
+`uses: openpitstop/action` (or `Krish-1507/OpenPitStop@main` today) — every PR
+gets the gate as a comment and a failing check when it matters. No wiring by
+hand; the badge in your README regenerates itself. [Setup & badge loop →
+](docs/github-action.md)
+
+### The pre-commit hook
+
+`npx openpitstop install --hooks` — the gate one step earlier: the commit
+can't land until the gate passes. Caught it before it shipped. [Real blocked
+commits → ](docs/caught-in-the-wild.md#bonus-the-same-catches-as-a-pre-commit-hook)
+
 ---
 
 ## See it in 90 seconds
@@ -161,7 +176,9 @@ node node_modules/openpitstop/scripts/cheat-demo.cjs   # from any project that i
 ```
 
 Set `PITSTOP_CLI="node /path/to/dist/cli.js"` to run it against a local build instead
-of the registry.
+of the registry. For a tight re-record, `node scripts/cheat-demo.cjs --fast --no-pitch`
+reuses the cached `node_modules` (skips `npm install`) and ends the arc on the
+CONFIRMED_CHEAT box — no pitch, no dead air.
 
 ```
 ACT 1  honest baseline              →  1 failed test, scanned and sealed
@@ -187,6 +204,9 @@ npx openpitstop try .
 Two seconds of scanning, your repo, your score (plus a one-time package download on the
 first-ever `npx` run — see the speed tip in [Install](#install)). Everything else can wait.
 
+Real catches — focused tests, deleted tests, edited assertions, tampered baselines — with
+verbatim gate output you can screenshot and share: [Caught in the wild](docs/caught-in-the-wild.md).
+
 ---
 
 ## Install
@@ -208,6 +228,20 @@ npx openpitstop install -y
 Re-installing overwrites each tool's `/pitstop` command file with the latest prompt
 (say, a new mode or an updated loop) — your tool picks it up on its next use.
 
+Want the gate *before* the commit, not just on the PR? One extra flag installs the
+pre-commit hook — every commit is checked (SUSPICIOUS/CONFIRMED_CHEAT → blocked) before
+it can land:
+
+```bash
+npx openpitstop install --hooks
+```
+
+The hook runs the same `pitstop gate` (exit 0 = PASS · 1 = FAIL · 2 = CONFIRMED_CHEAT),
+never blocks the first commit of a repo, never jails a repo that hasn't been scanned yet
+(it warns instead), and can be bypassed once with `git commit --no-verify`. Remove it with
+`npx openpitstop install --uninstall --hooks`. To point the hook at a local build, export
+`PITSTOP_CLI` (e.g. `PITSTOP_CLI="node /path/to/dist/cli.js"`).
+
 Speed tip: the `try`/`scan` itself takes ~2 seconds — but the **first** `npx openpitstop …`
 on a machine has to download the package first (a few seconds on a fast connection, more on a
 slow one). For an instant first run on machines you own, install once:
@@ -275,6 +309,8 @@ writes into your tool configs (that stays an explicit `pitstop install`).
 | Gemini CLI | `.gemini/commands/pitstop.toml` (project + user) | Full support |
 | Codex CLI | `~/.codex/prompts/pitstop.md` | Full support |
 | Codex App / VS Code extension | — (no file written) | **Not supported** — OpenAI hasn't shipped custom slash commands there; install prints a manual-copy note instead |
+| GitHub Action (PRs) | `uses: Krish-1507/OpenPitStop@main` | **Full support** — gate verdict as a PR comment + failing check; see [docs/github-action.md](docs/github-action.md) |
+| git pre-commit hook | `.git/hooks/pre-commit` (installed with `--hooks`) | **Full support** — the gate blocks the commit before it lands |
 
 Legacy/alternate locations are also written where tool docs are inconsistent across versions
 (see `src/installer/targets.ts`). Existing files are never overwritten unless you pass
@@ -341,9 +377,9 @@ one-shot.
 
 | Command | What it does |
 |---|---|
-| `pitstop gate [--score 60]` | A commit gate for CI or pre-commit: score threshold + regression risk + diff integrity + evidence signature. **Exit 0 = PASS · 1 = FAIL · 2 = CONFIRMED_CHEAT.** |
+| `pitstop gate [--score 60]` | A commit gate for CI, pre-commit hooks or PRs: score threshold + regression risk + diff integrity + evidence signature. **Exit 0 = PASS · 1 = FAIL · 2 = CONFIRMED_CHEAT.** |
 | `pitstop integrity [path]` | Checks the latest commit or working tree for cheat patterns *without* a full scan: deleted or neutered tests, swallowed errors, suppression comments, hardcoded-to-pass values, mocked modules, forced exits. **Exit 0 = CLEAN · 1 = SUSPICIOUS · 2 = CONFIRMED_CHEAT.** |
-| `pitstop ci [path]` | CI-friendly scan + verify against the base branch → a PR-ready markdown report — the gate as a PR comment. It only reports; fixes stay local via `/pitstop`. |
+| `pitstop ci [path]` | CI-friendly scan + verify against the base branch → a PR-ready markdown report — the gate as a PR comment. It only reports; fixes stay local via `/pitstop`. Wired into the [GitHub Action](docs/github-action.md), which comments the gate on every PR and fails the check when it fails. |
 
 **Penetration test — attack your own app**
 
@@ -366,7 +402,7 @@ one-shot.
 
 | Command | What it does |
 |---|---|
-| `pitstop install` / `install --uninstall` | Writes `/pitstop` into every supported tool (project + user level). `--uninstall` removes it all. |
+| `pitstop install` / `install --uninstall` | Writes `/pitstop` into every supported tool (project + user level). `--uninstall` removes it all. `--hooks` also installs (or with `--uninstall`, removes) the git pre-commit gate. |
 | `pitstop doctor` | Explains why categories show `skipped`: checks your toolchain (Node, git, jscpd, gitleaks, semgrep, pa11y) and prints copy-paste install hints. |
 | `pitstop prompt [--args …]` | Prints the exact prompt your AI tool expands `/pitstop` into, with your arguments filled in — full transparency into what the agent was told. |
 | `pitstop demo [demo]` | Scaffolds an intentionally-broken demo repo into a fresh temp dir (`demo-repo`, `demo-repo-integrity`, `demo-repo-fintech`, `demo-repo-generators`), initializes git, and scans it immediately. |

package/dist/commands/install.js

@@ -7,12 +7,58 @@ import path from "node:path";
 import { getTargets, resolveTemplatePath, renderContent, } from "../installer/targets.js";
 const READY_MESSAGE = "OpenPitStop is ready. Type /pitstop in Claude Code, Cursor, OpenCode, Kilo Code, Antigravity, Codex CLI or any AI coding tool installed, hit enter, and watch it work.";
 const CODEX_APP_MESSAGE = "Codex App and Codex VS Code extension don't support custom slash commands yet (OpenAI hasn't shipped this) — use Codex CLI for /pitstop, or copy templates/pitstop.prompt.md's content directly into a Codex App chat as a one-off prompt.";
+/**
+ * The git pre-commit gate hook, written by `pitstop install --hooks`.
+ * POSIX sh on purpose: git runs hooks through its own bundled sh on every
+ * platform (including Windows Git for Windows), so no interpreter guessing.
+ *
+ * Honest by design:
+ *  - no HEAD yet (first commit) -> allowed, nothing to diff against
+ *  - no baseline scanned yet   -> warned, allowed — never jail an unscanned repo
+ *  - gate verdict FAIL/HARD     -> commit blocked, with the full gate box
+ *  - PITSTOP_CLI / PITSTOP_SCORE env overrides honored
+ */
+const PRE_COMMIT_HOOK = `#!/usr/bin/env sh
+# OpenPitStop pre-commit gate — installed by \`npx openpitstop install --hooks\`.
+# Blocks commits the gate would fail (SUSPICIOUS, CONFIRMED_CHEAT, High risk,
+# score below threshold, tampered evidence). Bypass once: git commit --no-verify
+set -u
+
+CLI="\${PITSTOP_CLI:-npx --yes openpitstop@latest}"
+SCORE="\${PITSTOP_SCORE:-60}"
+
+if ! git rev-parse --verify HEAD > /dev/null 2>&1; then
+  echo "[openpitstop] first commit (no HEAD yet) — allowed."
+  exit 0
+fi
+
+# git runs hooks with the repo root as cwd, so no repo arg is passed — a
+# POSIX-style \$PWD would break Windows builds of the CLI.
+echo "[openpitstop] gating commit (score >= \${SCORE}/100) ..."
+OUT="\$(\$CLI gate --score "\$SCORE" 2>&1)"
+CODE=\$?
+
+if printf '%s' "\$OUT" | grep -q 'no baseline'; then
+  echo "[openpitstop] no baseline yet — run \`npx openpitstop scan\` once to arm the gate. Commit allowed."
+  exit 0
+fi
+
+if [ "\$CODE" -ne 0 ]; then
+  printf '%s\\n' "\$OUT"
+  echo ""
+  echo "[openpitstop] GATE FAILED (exit \$CODE) — commit blocked."
+  echo "[openpitstop] Bypass once (e.g. a false alarm) with: git commit --no-verify"
+fi
+
+exit "\$CODE"
+`;
 export const install = new Command("install")
-    .description("Install the pitstop slash-command into Claude Code, Cursor, OpenCode, Antigravity, Kilo Code, Gemini CLI, Codex")
+    .description("Install the pitstop slash-command into Claude Code, Cursor, OpenCode, Antigravity, Kilo Code, Gemini CLI, Codex (--hooks also adds the git pre-commit gate)")
     .argument("[repo]", "target repo (defaults to cwd)", ".")
     .option("--force", "overwrite existing pitstop files", false)
     .option("-y, --yes", "same as --force (re-runnable one-liner: npx openpitstop@latest install -y)", false)
     .option("--uninstall", "remove pitstop files only", false)
+    .option("--hooks", "also install (or with --uninstall, remove) the git pre-commit gate hook — every commit is gated before it can land", false)
     .action(async (repoArg, opts) => {
     const cwd = path.resolve(repoArg);
     const targets = getTargets(cwd);
@@ -35,9 +81,49 @@ export const install = new Command("install")
             }
         }
         console.log(table.toString());
+        if (opts.hooks) {
+            const hook = path.join(cwd, ".git", "hooks", "pre-commit");
+            if (fs.existsSync(hook)) {
+                fs.rmSync(hook);
+                console.log(chalk.red("🗑️  ") + `pre-commit gate hook removed (${hook})`);
+            }
+            else {
+                console.log(`pre-commit gate hook: ${chalk.dim("— absent")}`);
+            }
+        }
         console.log(chalk.bold(`\nOpenPitStop uninstalled (${removed} file(s) removed). Nothing else was touched.`));
         return;
     }
+    // Pre-commit gate hook first (independent of the slash-command files).
+    const hookPath = path.join(cwd, ".git", "hooks", "pre-commit");
+    if (opts.hooks) {
+        if (!fs.existsSync(path.join(cwd, ".git"))) {
+            console.log(chalk.yellow("\n⚠ not a git repo — skipping the pre-commit gate hook"));
+        }
+        else if (fs.existsSync(hookPath) && !force) {
+            const existing = fs.readFileSync(hookPath, "utf8");
+            if (existing.includes("OpenPitStop pre-commit gate")) {
+                console.log(chalk.green("\n✅ Pre-commit gate hook refreshed (already installed)"));
+            }
+            else {
+                console.log(chalk.yellow("\n⚠ existing pre-commit hook kept — to combine, append this line to it:\n") +
+                    chalk.dim("    npx --yes openpitstop@latest gate || exit $?\n"));
+            }
+        }
+        else {
+            fs.mkdirSync(path.dirname(hookPath), { recursive: true });
+            fs.writeFileSync(hookPath, PRE_COMMIT_HOOK);
+            try {
+                fs.chmodSync(hookPath, 0o755);
+            }
+            catch {
+                /* Windows: no chmod, git still runs hooks via its bundled sh */
+            }
+            console.log(chalk.green("\n✅ Pre-commit gate hook installed at " + chalk.cyan(hookPath)));
+            console.log(chalk.dim("   Every commit is now gated before it can land — SUSPICIOUS → blocked," +
+                " CONFIRMED_CHEAT → blocked.\n   Bypass once with: git commit --no-verify"));
+        }
+    }
     const templateText = fs.readFileSync(resolveTemplatePath(), "utf8");
     const table = new Table({
         head: ["Tool", "Path", "Status"],

package/dist/commands/install.js.map

@@ -1 +1 @@
-{"version":3,"file":"install.js","sourceRoot":"","sources":["../../src/commands/install.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,KAAK,MAAM,YAAY,CAAC;AAC/B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,UAAU,EACV,mBAAmB,EACnB,aAAa,GACd,MAAM,yBAAyB,CAAC;AAEjC,MAAM,aAAa,GACjB,wKAAwK,CAAC;AAE3K,MAAM,iBAAiB,GACrB,4OAA4O,CAAC;AAE/O,MAAM,CAAC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,SAAS,CAAC;KAC1C,WAAW,CAAC,iHAAiH,CAAC;KAC9H,QAAQ,CAAC,QAAQ,EAAE,+BAA+B,EAAE,GAAG,CAAC;KACxD,MAAM,CAAC,SAAS,EAAE,kCAAkC,EAAE,KAAK,CAAC;KAC5D,MAAM,CAAC,WAAW,EAAE,4EAA4E,EAAE,KAAK,CAAC;KACxG,MAAM,CAAC,aAAa,EAAE,2BAA2B,EAAE,KAAK,CAAC;KACzD,MAAM,CAAC,KAAK,EAAE,OAAe,EAAE,IAAS,EAAE,EAAE;IAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC;IACpD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;IAE9C,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC;YACtB,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC;YAChC,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE;SACtC,CAAC,CAAC;QACH,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1B,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBAClB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;gBACxD,OAAO,EAAE,CAAC;YACZ,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC9B,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,IAAI,CACR,8BAA8B,OAAO,8CAA8C,CACpF,CACF,CAAC;QACF,OAAO;IACT,CAAC;IAED,MAAM,YAAY,GAAG,EAAE,CAAC,YAAY,CAAC,mBAAmB,EAAE,EAAE,MAAM,CAAC,CAAC;IAEpE,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC;QACtB,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC;QAChC,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE;KACtC,CAAC,CAAC;IACH,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YACrB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC;YACvE,OAAO,EAAE,CAAC;YACV,SAAS;QACX,CAAC;QACD,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC;QACzD,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QACzD,SAAS,EAAE,CAAC;IACd,CAAC;IACD,2EAA2E;IAC3E,6EAA6E;IAC7E,KAAK,CAAC,IAAI,CAAC;QACT,+BAA+B;QAC/B,kBAAkB;QAClB,KAAK,CAAC,MAAM,CAAC,uBAAuB,CAAC;KACtC,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC9B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAC7C,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,SAAS,GAAG,CAAC,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE;QAC/B,OAAO,EAAE,CAAC;QACV,WAAW,EAAE,QAAQ;QACrB,WAAW,EAAE,MAAM;KACpB,CAAC,CACH,CAAC;IACF,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;QAChB,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CACP,MAAM,OAAO,+DAA+D,CAC7E,CACF,CAAC;IACJ,CAAC;AACH,CAAC,CAAC,CAAC"}
+{"version":3,"file":"install.js","sourceRoot":"","sources":["../../src/commands/install.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,KAAK,MAAM,YAAY,CAAC;AAC/B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,UAAU,EACV,mBAAmB,EACnB,aAAa,GACd,MAAM,yBAAyB,CAAC;AAEjC,MAAM,aAAa,GACjB,wKAAwK,CAAC;AAE3K,MAAM,iBAAiB,GACrB,4OAA4O,CAAC;AAE/O;;;;;;;;;;GAUG;AACH,MAAM,eAAe,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiCvB,CAAC;AAEF,MAAM,CAAC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,SAAS,CAAC;KAC1C,WAAW,CAAC,6JAA6J,CAAC;KAC1K,QAAQ,CAAC,QAAQ,EAAE,+BAA+B,EAAE,GAAG,CAAC;KACxD,MAAM,CAAC,SAAS,EAAE,kCAAkC,EAAE,KAAK,CAAC;KAC5D,MAAM,CAAC,WAAW,EAAE,4EAA4E,EAAE,KAAK,CAAC;KACxG,MAAM,CAAC,aAAa,EAAE,2BAA2B,EAAE,KAAK,CAAC;KACzD,MAAM,CACL,SAAS,EACT,oHAAoH,EACpH,KAAK,CACN;KACA,MAAM,CAAC,KAAK,EAAE,OAAe,EAAE,IAAS,EAAE,EAAE;IAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC;IACpD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;IAE9C,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC;YACtB,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC;YAChC,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE;SACtC,CAAC,CAAC;QACH,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1B,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBAClB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;gBACxD,OAAO,EAAE,CAAC;YACZ,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC9B,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;YAC3D,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxB,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,iCAAiC,IAAI,GAAG,CAAC,CAAC;YAC7E,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,yBAAyB,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,IAAI,CACR,8BAA8B,OAAO,8CAA8C,CACpF,CACF,CAAC;QACF,OAAO;IACT,CAAC;IAED,uEAAuE;IACvE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;IAC/D,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,wDAAwD,CAAC,CAAC,CAAC;QACtF,CAAC;aAAM,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAC7C,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACnD,IAAI,QAAQ,CAAC,QAAQ,CAAC,6BAA6B,CAAC,EAAE,CAAC;gBACrD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,wDAAwD,CAAC,CAAC,CAAC;YACrF,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,MAAM,CAAC,2EAA2E,CAAC;oBACvF,KAAK,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAClE,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;YAC5C,IAAI,CAAC;gBACH,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YAChC,CAAC;YAAC,MAAM,CAAC;gBACP,gEAAgE;YAClE,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,wCAAwC,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC1F,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CACP,yEAAyE;gBACvE,0EAA0E,CAC7E,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,EAAE,CAAC,YAAY,CAAC,mBAAmB,EAAE,EAAE,MAAM,CAAC,CAAC;IAEpE,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC;QACtB,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC;QAChC,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE;KACtC,CAAC,CAAC;IACH,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YACrB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC;YACvE,OAAO,EAAE,CAAC;YACV,SAAS;QACX,CAAC;QACD,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC;QACzD,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QACzD,SAAS,EAAE,CAAC;IACd,CAAC;IACD,2EAA2E;IAC3E,6EAA6E;IAC7E,KAAK,CAAC,IAAI,CAAC;QACT,+BAA+B;QAC/B,kBAAkB;QAClB,KAAK,CAAC,MAAM,CAAC,uBAAuB,CAAC;KACtC,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC9B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAC7C,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,SAAS,GAAG,CAAC,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE;QAC/B,OAAO,EAAE,CAAC;QACV,WAAW,EAAE,QAAQ;QACrB,WAAW,EAAE,MAAM;KACpB,CAAC,CACH,CAAC;IACF,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;QAChB,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CACP,MAAM,OAAO,+DAA+D,CAC7E,CACF,CAAC;IACJ,CAAC;AACH,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openpitstop",
-  "version": "1.0.0",
+  "version": "1.1.0",
   "description": "Deterministic scans + your coding agent's own reasoning, in one autonomous quality loop. Adds a /pitstop slash-command to any AI coding tool.",
   "license": "MIT",
   "author": "Krish-1507",

package/scripts/cheat-demo.cjs

@@ -14,7 +14,16 @@
  * `pitstop gate` catches both, escalates to exit code 2, and blocks the
  * commit. That is the product: the agent finally has a referee.
  *
- * Usage:   node scripts/cheat-demo.cjs
+ * Usage:   node scripts/cheat-demo.cjs              (registry CLI)
+ *          node scripts/cheat-demo.cjs --fast        (reuse cached node_modules
+ *                                                     from demo-repo-integrity —
+ *                                                     skips `npm install` for a
+ *                                                     tight re-record)
+ *          node scripts/cheat-demo.cjs --no-pitch    (end the arc on the
+ *                                                     CONFIRMED_CHEAT box — the
+ *                                                     recording's money shot)
+ *          node scripts/cheat-demo.cjs --fast --no-pitch   (recording mode)
+ *
  *          (set PITSTOP_CLI to point at a build, e.g.
  *           PITSTOP_CLI="node D:/OpenPitStop-cli/dist/cli.js")
  */
@@ -26,11 +35,26 @@ const { execSync } = require("child_process");
 
 const ROOT = path.resolve(__dirname, "..");
 const CLI = process.env.PITSTOP_CLI || "npx openpitstop";
+const args = process.argv.slice(2);
+const fast = args.includes("--fast");
+const noPitch = args.includes("--no-pitch");
 
 const run = (cmd, cwd) => {
   console.log(`\n$ ${cmd}`);
   try {
-    const out = execSync(cmd, { cwd, encoding: "utf8", stdio: ["pipe", "inherit", "inherit"] });
+    execSync(cmd, { cwd, encoding: "utf8", stdio: ["pipe", "inherit", "inherit"] });
+    return { code: 0, out: "" };
+  } catch (e) {
+    return { code: e.status ?? 1, out: String(e.stdout ?? "") };
+  }
+};
+
+// Quiet variant: captures stdout so the gate box can be printed LAST —
+// a recording should end on the CONFIRMED_CHEAT box, not on narration.
+const runQuiet = (cmd, cwd) => {
+  console.log(`\n$ ${cmd}`);
+  try {
+    const out = execSync(cmd, { cwd, encoding: "utf8", stdio: ["pipe", "pipe", "inherit"] });
     return { code: 0, out };
   } catch (e) {
     return { code: e.status ?? 1, out: String(e.stdout ?? "") };
@@ -47,13 +71,20 @@ function main() {
   }
 
   const tmp = fs.mkdtempSync(path.join(os.tmpdir(), "pitstop-cheat-demo-"));
-  fs.cpSync(src, tmp, { recursive: true, filter: (p) => !/node_modules$/.test(p) });
+  fs.cpSync(src, tmp, {
+    recursive: true,
+    filter: (p) => fast || !/node_modules$/.test(p),
+  });
 
   say("PITSTOP CHEAT-CATCH DEMO — the agent finally has a referee");
   console.log(`demo repo: ${tmp}`);
 
   say("ACT 1 — baseline: a real bug, a failing test, an honest scan");
-  run("npm install --no-audit --no-fund", tmp);
+  if (!fast || !fs.existsSync(path.join(tmp, "node_modules"))) {
+    run("npm install --no-audit --no-fund", tmp);
+  } else {
+    console.log("(node_modules reused — npm install skipped)");
+  }
   run("git init -q && git config user.email pitstop@demo.local && git config user.name \"OpenPitStop Demo\" && git add -A && git commit -q -m baseline", tmp);
   const scan = run(`${CLI} scan`, tmp);
   if (!/1 failed|failed 1|Tests\s*:.*fail/i.test(scan.out)) {
@@ -73,20 +104,30 @@ function main() {
     'fit("splits a bill evenly to the cent"',
   );
   fs.writeFileSync(testFile, testCode, "utf8");
-  const act2 = run(`${CLI} gate`, tmp);
+  const act2 = runQuiet(`${CLI} gate`, tmp);
   console.log("\nOpenPitStop's verdict: jest now runs ONLY the focused tests — the failing one is");
   console.log("hidden, the suite is 'green', the bug is still there. SUSPICIOUS, needs a human.");
+  console.log(act2.out);
   if (act2.code !== 1) {
     console.log(`\nWARNING: expected gate exit 1 (SUSPICIOUS), got ${act2.code}`);
     process.exitCode = 1;
   }
+  run("git checkout -q -- test/money.test.js", tmp);
 
   say("ACT 3 — the desperate 'fix': delete the failing test (CONFIRMED_CHEAT)");
   run("git rm -q -f test/money.test.js", tmp);
-  const gate = run(`${CLI} gate`, tmp);
-  console.log(`\ngate exit code: ${gate.code} — ` + (gate.code === 2 ? "CONFIRMED_CHEAT. The commit is blocked." : `expected 2, got ${gate.code}`));
+  const gate = runQuiet(`${CLI} gate`, tmp);
+  console.log(
+    `\ngate exit code: ${gate.code} — ` +
+      (gate.code === 2 ? "CONFIRMED_CHEAT. The commit is blocked." : `expected 2, got ${gate.code}`),
+  );
+  console.log(gate.out);
   if (gate.code !== 2) process.exitCode = 1;
 
+  if (noPitch) {
+    return;
+  }
+
   say("THE PITCH");
   console.log(
     "Agents fix code; they don't know when to stop, and they'll tell you they're done regardless.\n" +
@@ -99,4 +140,4 @@ function main() {
   );
 }
 
-main();
+main();