vibecheck-ai 2.0.2 → 5.0.1

package/bin/runners/lib/schemas/share-pack.schema.json

@@ -0,0 +1,180 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://vibecheck.dev/schemas/share-pack.schema.json",
+  "title": "Vibecheck Share Pack",
+  "description": "Sanitized bundle for sharing analysis results without sensitive data",
+  "type": "object",
+  "required": ["specVersion", "generatedAt", "fingerprint", "redaction", "report"],
+  "properties": {
+    "specVersion": {
+      "type": "string",
+      "const": "2.0"
+    },
+    "generatedAt": {
+      "type": "string",
+      "format": "date-time"
+    },
+    "fingerprint": {
+      "type": "string",
+      "pattern": "^sha256:[a-f0-9]{64}$",
+      "description": "Hash of share pack contents"
+    },
+    "projectName": {
+      "type": "string",
+      "description": "Sanitized project name (no paths)"
+    },
+    "redaction": {
+      "$ref": "#/$defs/redactionMetadata"
+    },
+    "report": {
+      "$ref": "#/$defs/sanitizedReport"
+    },
+    "proofGraph": {
+      "$ref": "#/$defs/sanitizedProofGraph"
+    },
+    "missions": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/sanitizedMission" }
+    },
+    "artifacts": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/artifact" }
+    }
+  },
+  "$defs": {
+    "redactionMetadata": {
+      "type": "object",
+      "required": ["level", "redactedFields", "originalFingerprints"],
+      "properties": {
+        "level": {
+          "type": "string",
+          "enum": ["minimal", "standard", "paranoid"],
+          "description": "Redaction level applied"
+        },
+        "redactedFields": {
+          "type": "array",
+          "items": { "type": "string" },
+          "description": "List of field paths that were redacted"
+        },
+        "pathsRedacted": {
+          "type": "boolean",
+          "description": "Whether file paths were anonymized"
+        },
+        "envVarsRedacted": {
+          "type": "boolean",
+          "description": "Whether env var names were replaced"
+        },
+        "codeSnippetsRedacted": {
+          "type": "boolean",
+          "description": "Whether code snippets were removed"
+        },
+        "originalFingerprints": {
+          "type": "object",
+          "description": "Original fingerprints before redaction for verification",
+          "properties": {
+            "truthpack": { "type": "string" },
+            "contracts": { "type": "string" },
+            "shipReport": { "type": "string" }
+          }
+        }
+      }
+    },
+    "sanitizedReport": {
+      "type": "object",
+      "properties": {
+        "verdict": {
+          "type": "object",
+          "properties": {
+            "status": { "type": "string", "enum": ["SHIP", "WARN", "BLOCK"] },
+            "exitCode": { "type": "integer" },
+            "reason": { "type": "string" }
+          }
+        },
+        "stats": {
+          "type": "object",
+          "properties": {
+            "findingsTotal": { "type": "integer" },
+            "bySeverity": {
+              "type": "object",
+              "additionalProperties": { "type": "integer" }
+            },
+            "byCategory": {
+              "type": "object",
+              "additionalProperties": { "type": "integer" }
+            }
+          }
+        },
+        "coverage": {
+          "$ref": "#/$defs/coverageMetrics"
+        },
+        "findings": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/sanitizedFinding" }
+        }
+      }
+    },
+    "sanitizedFinding": {
+      "type": "object",
+      "properties": {
+        "id": { "type": "string" },
+        "detectorId": { "type": "string" },
+        "severity": { "type": "string" },
+        "category": { "type": "string" },
+        "title": { "type": "string" },
+        "confidence": { "type": "string" },
+        "fileRef": {
+          "type": "string",
+          "description": "Anonymized file reference (e.g., 'file_001')"
+        },
+        "lineRange": { "type": "string" }
+      }
+    },
+    "sanitizedProofGraph": {
+      "type": "object",
+      "properties": {
+        "nodeCount": { "type": "integer" },
+        "edgeCount": { "type": "integer" },
+        "coverage": {
+          "type": "object",
+          "properties": {
+            "uiBindingsLinked": { "type": "number" },
+            "clientCallsLinked": { "type": "number" },
+            "serverRoutesLinked": { "type": "number" }
+          }
+        },
+        "gapCount": { "type": "integer" }
+      }
+    },
+    "sanitizedMission": {
+      "type": "object",
+      "properties": {
+        "id": { "type": "string" },
+        "type": { "type": "string" },
+        "priority": { "type": "string" },
+        "status": { "type": "string" },
+        "title": { "type": "string" }
+      }
+    },
+    "coverageMetrics": {
+      "type": "object",
+      "properties": {
+        "clientCallsMappedPct": { "type": "number" },
+        "serverRoutesCoveredPct": { "type": "number" },
+        "uiActionsVerifiedPct": { "type": "number" },
+        "authVerifiedPct": { "type": ["number", "null"] }
+      }
+    },
+    "artifact": {
+      "type": "object",
+      "required": ["name", "sha256"],
+      "properties": {
+        "name": {
+          "type": "string",
+          "description": "Artifact type name (not path)"
+        },
+        "sha256": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+        "included": { "type": "boolean" }
+      }
+    }
+  }
+}

package/bin/runners/lib/schemas/ship-manifest.schema.json

@@ -0,0 +1,251 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "vibecheck/ship-manifest/v1",
+  "title": "Ship Manifest",
+  "description": "Vibecheck Ship Manifest - The authoritative artifact for ship verdicts",
+  "type": "object",
+  "required": ["version", "schema", "verdict", "repo", "evidence", "checks", "meta", "signature"],
+  "properties": {
+    "version": {
+      "type": "string",
+      "pattern": "^\\d+\\.\\d+\\.\\d+$",
+      "description": "Manifest format version (semver)"
+    },
+    "schema": {
+      "type": "string",
+      "const": "vibecheck/ship-manifest/v1",
+      "description": "Schema identifier"
+    },
+    "verdict": {
+      "type": "object",
+      "required": ["status", "exitCode", "score", "ciStatus", "canShip"],
+      "properties": {
+        "status": {
+          "type": "string",
+          "enum": ["SHIP", "WARN", "BLOCK"],
+          "description": "Final verdict"
+        },
+        "exitCode": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 10,
+          "description": "CLI exit code (0=SHIP, 1=WARN, 2=BLOCK)"
+        },
+        "score": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 100,
+          "description": "Quality score out of 100"
+        },
+        "ciStatus": {
+          "type": "string",
+          "enum": ["success", "warning", "failure"],
+          "description": "CI status string"
+        },
+        "canShip": {
+          "type": "boolean",
+          "description": "Whether the code is ready to ship"
+        }
+      },
+      "additionalProperties": false
+    },
+    "repo": {
+      "type": "object",
+      "required": ["root", "name", "fingerprint", "commit", "branch", "isDirty"],
+      "properties": {
+        "root": {
+          "type": "string",
+          "description": "Absolute path to repository root"
+        },
+        "name": {
+          "type": "string",
+          "maxLength": 100,
+          "description": "Repository name"
+        },
+        "fingerprint": {
+          "type": "string",
+          "pattern": "^[a-f0-9]{32}$",
+          "description": "Deterministic repo state fingerprint"
+        },
+        "commit": {
+          "type": "string",
+          "description": "Git commit hash (12 chars) or 'unknown'"
+        },
+        "branch": {
+          "type": "string",
+          "description": "Git branch name or 'unknown'"
+        },
+        "treeHash": {
+          "type": "string",
+          "description": "Git tree hash (12 chars) or 'unknown'"
+        },
+        "isDirty": {
+          "type": "boolean",
+          "description": "Whether working tree has uncommitted changes"
+        },
+        "gitAvailable": {
+          "type": "boolean",
+          "description": "Whether git was available for fingerprinting"
+        }
+      },
+      "additionalProperties": false
+    },
+    "evidence": {
+      "type": "object",
+      "required": ["summary", "whyTree", "coverage"],
+      "properties": {
+        "summary": {
+          "type": "object",
+          "required": ["total", "blockers", "warnings", "info"],
+          "properties": {
+            "total": { "type": "integer", "minimum": 0 },
+            "blockers": { "type": "integer", "minimum": 0 },
+            "warnings": { "type": "integer", "minimum": 0 },
+            "info": { "type": "integer", "minimum": 0 }
+          },
+          "additionalProperties": false
+        },
+        "whyTree": {
+          "type": "object",
+          "required": ["summary", "topIssues", "fixMissions"],
+          "properties": {
+            "summary": { "type": "string" },
+            "topIssues": {
+              "type": "array",
+              "items": {
+                "type": "object",
+                "required": ["id", "category", "title"],
+                "properties": {
+                  "id": { "type": "string", "maxLength": 64 },
+                  "category": { "type": "string", "maxLength": 50 },
+                  "title": { "type": "string", "maxLength": 500 },
+                  "why": { "type": ["string", "null"], "maxLength": 1000 },
+                  "evidence": {
+                    "type": ["object", "null"],
+                    "properties": {
+                      "file": { "type": ["string", "null"] },
+                      "lines": { "type": ["string", "null"] },
+                      "snippet": { "type": ["string", "null"] },
+                      "kind": { "type": "string" }
+                    }
+                  },
+                  "fixHint": { "type": ["string", "null"] }
+                }
+              },
+              "maxItems": 10
+            },
+            "fixMissions": {
+              "type": "array",
+              "items": {
+                "type": "object",
+                "properties": {
+                  "target": { "type": "string" },
+                  "action": { "type": "string" },
+                  "priority": { "type": "string", "enum": ["critical", "recommended"] }
+                }
+              },
+              "maxItems": 10
+            }
+          }
+        },
+        "coverage": {
+          "type": "object",
+          "properties": {
+            "routeCoverage": { "type": "number", "minimum": 0, "maximum": 100 },
+            "envCoverage": { "type": "number", "minimum": 0, "maximum": 100 },
+            "authCoverage": { "type": ["number", "null"] },
+            "runtimeCoverage": { "type": ["number", "null"] }
+          }
+        }
+      }
+    },
+    "checks": {
+      "type": "object",
+      "required": ["audit", "reality", "shield"],
+      "properties": {
+        "audit": {
+          "type": "object",
+          "required": ["ran", "findingsCount"],
+          "properties": {
+            "ran": { "type": "boolean" },
+            "findingsCount": { "type": "integer", "minimum": 0 },
+            "truthpackHash": { "type": ["string", "null"] }
+          }
+        },
+        "reality": {
+          "type": "object",
+          "required": ["ran", "actionsCount", "requestsCount"],
+          "properties": {
+            "ran": { "type": "boolean" },
+            "actionsCount": { "type": "integer", "minimum": 0 },
+            "requestsCount": { "type": "integer", "minimum": 0 }
+          }
+        },
+        "shield": {
+          "type": "object",
+          "required": ["ran", "mode", "enforcing", "locked"],
+          "properties": {
+            "ran": { "type": "boolean" },
+            "mode": { "type": "string" },
+            "enforcing": { "type": "boolean" },
+            "locked": { "type": "boolean" }
+          }
+        }
+      }
+    },
+    "meta": {
+      "type": "object",
+      "required": ["generatedAt", "durationMs", "tool", "toolVersion"],
+      "properties": {
+        "generatedAt": {
+          "type": "string",
+          "format": "date-time",
+          "description": "ISO 8601 timestamp"
+        },
+        "durationMs": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "Evaluation duration in milliseconds"
+        },
+        "tool": {
+          "type": "string",
+          "const": "vibecheck"
+        },
+        "toolVersion": {
+          "type": "string",
+          "description": "Vibecheck version"
+        },
+        "platform": {
+          "type": "string",
+          "description": "Platform identifier (os-arch)"
+        },
+        "nodeVersion": {
+          "type": "string",
+          "description": "Node.js version"
+        }
+      }
+    },
+    "signature": {
+      "type": "object",
+      "required": ["algorithm", "digest", "verifiable"],
+      "properties": {
+        "algorithm": {
+          "type": "string",
+          "enum": ["sha256"],
+          "description": "Signature algorithm"
+        },
+        "digest": {
+          "type": "string",
+          "pattern": "^[a-f0-9]{32}$",
+          "description": "Signature digest"
+        },
+        "verifiable": {
+          "type": "boolean",
+          "description": "Whether signature can be verified"
+        }
+      },
+      "additionalProperties": false
+    }
+  },
+  "additionalProperties": false
+}

package/bin/runners/lib/schemas/ship-report.schema.json

@@ -0,0 +1,117 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://vibecheck.dev/schemas/ship-report.schema.json",
+  "title": "Vibecheck Ship Report",
+  "description": "Final ship verdict with findings and proof chain",
+  "type": "object",
+  "required": ["meta", "verdict", "findings", "stats"],
+  "properties": {
+    "meta": {
+      "type": "object",
+      "required": ["version", "generatedAt", "repoRoot"],
+      "properties": {
+        "version": { "type": "string", "const": "2.0.0" },
+        "generatedAt": { "type": "string", "format": "date-time" },
+        "repoRoot": { "type": "string" },
+        "commit": {
+          "type": "object",
+          "properties": {
+            "sha": { "type": "string" },
+            "branch": { "type": "string" },
+            "message": { "type": "string" }
+          }
+        },
+        "durationMs": { "type": "integer" },
+        "truthpackHash": { "type": "string" }
+      }
+    },
+    "verdict": {
+      "type": "object",
+      "required": ["status", "exitCode"],
+      "properties": {
+        "status": { "type": "string", "enum": ["SHIP", "WARN", "BLOCK"] },
+        "exitCode": { "type": "integer", "enum": [0, 1, 2] },
+        "summary": { "type": "string" },
+        "blockReasons": {
+          "type": "array",
+          "items": { "type": "string" }
+        }
+      }
+    },
+    "findings": {
+      "type": "array",
+      "items": { "$ref": "finding.schema.json" }
+    },
+    "stats": {
+      "type": "object",
+      "properties": {
+        "total": { "type": "integer" },
+        "byCategory": { "type": "object", "additionalProperties": { "type": "integer" } },
+        "bySeverity": {
+          "type": "object",
+          "properties": {
+            "BLOCK": { "type": "integer" },
+            "WARN": { "type": "integer" },
+            "INFO": { "type": "integer" }
+          }
+        },
+        "byScope": { "type": "object", "additionalProperties": { "type": "integer" } }
+      }
+    },
+    "proofChain": {
+      "type": "object",
+      "description": "Summary proof chain for top blockers",
+      "properties": {
+        "topBlockers": {
+          "type": "array",
+          "maxItems": 5,
+          "items": {
+            "type": "object",
+            "properties": {
+              "findingId": { "type": "string" },
+              "chain": {
+                "type": "array",
+                "items": {
+                  "type": "object",
+                  "properties": {
+                    "nodeType": { "type": "string" },
+                    "label": { "type": "string" },
+                    "evidence": { "type": "string" }
+                  }
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "artifacts": {
+      "type": "object",
+      "properties": {
+        "truthpack": { "type": "string" },
+        "realityReport": { "type": "string" },
+        "proofGraph": { "type": "string" },
+        "missionPack": { "type": "string" }
+      }
+    },
+    "runtime": {
+      "type": "object",
+      "description": "Runtime verification summary if available",
+      "properties": {
+        "ran": { "type": "boolean" },
+        "url": { "type": "string" },
+        "actionsCount": { "type": "integer" },
+        "requestsCount": { "type": "integer" },
+        "toastsDetected": { "type": "integer" },
+        "coverage": {
+          "type": "object",
+          "properties": {
+            "routesHit": { "type": "integer" },
+            "routesTotal": { "type": "integer" },
+            "percent": { "type": "number" }
+          }
+        }
+      }
+    }
+  }
+}