securevibe 0.1.10 → 0.1.13

package/dist/ui/repl-tui/StatusLine.js

@@ -0,0 +1,15 @@
+import React from "react";
+import { Box, Text } from "ink";
+import path from "node:path";
+import { llmAvailability } from "../../engine/fix/llm.js";
+const h = React.createElement;
+/**
+ * target: <basename> · fixer: <groq|anthropic|none>, right-aligned, dim.
+ * fixer reflects the same provider-selection precedence fix's LLM path
+ * already uses (llmAvailability), not a separately reimplemented rule.
+ */
+export function StatusLine({ targetRoot }) {
+    const avail = llmAvailability(false);
+    const fixer = avail.provider ?? "none";
+    return h(Box, { justifyContent: "flex-end" }, h(Text, { dimColor: true }, `target: ${path.basename(targetRoot)} · fixer: ${fixer}`));
+}

package/dist/ui/repl-tui/commandRegistry.js

@@ -0,0 +1,38 @@
+export const COMMANDS = [
+    { name: "scan", args: "[--json]", description: "full scan" },
+    { name: "fix", args: "[--apply] [--yes] [--no-llm] [--json]", description: "fix findings" },
+    { name: "explain", args: "[--json]", description: "AI explanations for critical/high findings" },
+    { name: "ai-audit", args: "[--json]", description: "focus on the AI-agent attack surface" },
+    { name: "protect", args: "[--json]", description: "AI execution firewall guidance" },
+    { name: "attack-map", args: "[--json]", description: "map findings to attacker paths" },
+    { name: "score", args: "[--json]", description: "score-only view" },
+    { name: "deps", args: "[--json]", description: "dependency / CVE audit" },
+    { name: "ready", args: "[--json]", description: "launch readiness scorecard" },
+    { name: "init", args: "[--force]", description: "wire up the pre-commit guard + CI" },
+    {
+        name: "config",
+        args: "show | set-key <groq|anthropic> | unset-key <groq|anthropic>",
+        description: "manage AI-fixer keys",
+    },
+    { name: "db", args: "update | status", description: "manage the local OSV database" },
+    { name: "cd", args: "<path>", description: "change the scan target" },
+    { name: "pwd", args: "", description: "show the current scan target" },
+    { name: "help", args: "", description: "this message" },
+    { name: "exit", args: "", description: "leave the session (aliases: quit, q)" },
+];
+/** Prefix match on command name, case-insensitive. Empty query returns all. */
+export function filterCommands(query) {
+    const q = query.toLowerCase();
+    return COMMANDS.filter((c) => c.name.toLowerCase().startsWith(q));
+}
+/** Plain-text `help` output, one line per command. */
+export function renderHelp() {
+    const lines = ["  Commands:"];
+    for (const c of COMMANDS) {
+        const left = `    ${c.name}${c.args ? " " + c.args : ""}`;
+        lines.push(left.length < 44 ? left.padEnd(44) + c.description : left + "  " + c.description);
+    }
+    lines.push("");
+    lines.push("  Anything else you type is a question for the AI about your last scan (needs a key: `config set-key groq`).");
+    return lines.join("\n");
+}

package/dist/ui/repl-tui/outputStream.js

@@ -0,0 +1,16 @@
+import { Writable } from "node:stream";
+/**
+ * A real Writable whose _write feeds every chunk to a callback instead of a
+ * terminal. Lets dispatch()'s existing `io.output.write(text)` calls feed
+ * Ink's <Static> scrollback region instead of writing directly to stdout,
+ * which would corrupt Ink's own live-region redraws (the input box, status
+ * line, spinner, and slash menu all redraw in place on every keystroke).
+ */
+export function makeCallbackWritable(onWrite) {
+    return new Writable({
+        write(chunk, _encoding, callback) {
+            onWrite(chunk.toString());
+            callback();
+        },
+    });
+}

package/dist/version.js

@@ -2,4 +2,4 @@
 // Single source of truth for the CLI's own version, so it can't drift from
 // what commander reports and what the update-check compares against.
 // Kept in sync with the "version" field in package.json by hand at release time.
-export const VERSION = "0.1.10";
+export const VERSION = "0.1.13";

package/package.json

@@ -1,66 +1,71 @@
-{
-  "name": "securevibe",
-  "version": "0.1.10",
-  "description": "Autonomous AI security engineer for AI generated apps: scan, fix, verify, and gate every commit before you launch",
-  "type": "module",
-  "license": "SEE LICENSE IN LICENSE",
-  "author": "Benedict Patrick <benedictroger2006@gmail.com>",
-  "homepage": "https://github.com/Benedictpatrick/secure-vibe#readme",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/Benedictpatrick/secure-vibe.git",
-    "directory": "packages/cli"
-  },
-  "bugs": {
-    "url": "https://github.com/Benedictpatrick/secure-vibe/issues"
-  },
-  "keywords": [
-    "security",
-    "scanner",
-    "sast",
-    "ai security",
-    "prompt injection",
-    "vulnerability",
-    "secrets",
-    "sca",
-    "cve",
-    "launch readiness",
-    "vibe coding",
-    "cli"
-  ],
-  "engines": {
-    "node": ">=20"
-  },
-  "bin": {
-    "securevibe": "./dist/index.js"
-  },
-  "files": [
-    "dist",
-    "data",
-    "LICENSE"
-  ],
-  "scripts": {
-    "build": "tsc -p tsconfig.json",
-    "dev": "tsx src/index.ts",
-    "start": "node dist/index.js",
-    "test": "node run-tests.mjs"
-  },
-  "dependencies": {
-    "commander": "^12.1.0",
-    "diff": "^5.2.0",
-    "picocolors": "^1.1.1",
-    "tree-sitter-wasms": "^0.1.12",
-    "web-tree-sitter": "^0.25.10",
-    "yauzl": "^3.2.0"
-  },
-  "optionalDependencies": {
-    "@anthropic-ai/sdk": "^0.39.0"
-  },
-  "devDependencies": {
-    "@types/diff": "^5.2.0",
-    "@types/node": "^20.14.0",
-    "@types/yauzl": "^2.10.3",
-    "tsx": "^4.19.0",
-    "typescript": "^5.6.0"
-  }
-}
+{
+  "name": "securevibe",
+  "version": "0.1.13",
+  "description": "Autonomous AI security engineer for AI generated apps: scan, fix, verify, and gate every commit before you launch",
+  "type": "module",
+  "license": "SEE LICENSE IN LICENSE",
+  "author": "Benedict Patrick <benedictroger2006@gmail.com>",
+  "homepage": "https://github.com/Benedictpatrick/secure-vibe#readme",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Benedictpatrick/secure-vibe.git",
+    "directory": "packages/cli"
+  },
+  "bugs": {
+    "url": "https://github.com/Benedictpatrick/secure-vibe/issues"
+  },
+  "keywords": [
+    "security",
+    "scanner",
+    "sast",
+    "ai security",
+    "prompt injection",
+    "vulnerability",
+    "secrets",
+    "sca",
+    "cve",
+    "launch readiness",
+    "vibe coding",
+    "cli"
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "bin": {
+    "securevibe": "./dist/index.js"
+  },
+  "files": [
+    "dist",
+    "data",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "dev": "tsx src/index.ts",
+    "start": "node dist/index.js",
+    "test": "node run-tests.mjs"
+  },
+  "dependencies": {
+    "commander": "^12.1.0",
+    "diff": "^5.2.0",
+    "ink": "^6.8.0",
+    "ink-text-input": "^6.0.0",
+    "picocolors": "^1.1.1",
+    "react": "^19.2.7",
+    "tree-sitter-wasms": "^0.1.12",
+    "web-tree-sitter": "^0.25.10",
+    "yauzl": "^3.2.0"
+  },
+  "optionalDependencies": {
+    "@anthropic-ai/sdk": "^0.39.0"
+  },
+  "devDependencies": {
+    "@types/diff": "^5.2.0",
+    "@types/node": "^20.14.0",
+    "@types/react": "^19.2.17",
+    "@types/yauzl": "^2.10.3",
+    "ink-testing-library": "^4.0.0",
+    "tsx": "^4.19.0",
+    "typescript": "^5.6.0"
+  }
+}