vibecheck-ai 5.0.1 → 5.1.0

package/dist/scanner/index.d.ts

@@ -112,6 +112,26 @@ interface ScanReport {
         filesPerSecond: number;
         engineTimings: Record<string, number>;
     };
+    /** ISL spec compliance (if spec.isl exists) */
+    specCompliance?: {
+        specFound: boolean;
+        domain: string;
+        score: number;
+        summary: {
+            totalChecks: number;
+            passed: number;
+            failed: number;
+            warnings: number;
+        };
+        checks: Array<{
+            type: 'behavior' | 'entity' | 'policy';
+            name: string;
+            status: 'pass' | 'fail' | 'warn';
+            message: string;
+            specLine: number;
+            matchedFiles?: string[];
+        }>;
+    };
 }
 interface EngineResult {
     engine: string;
@@ -247,18 +267,90 @@ declare function getRuleOrDefault(ruleId: string): RuleDefinition;
 
 declare function classifyPath(relativePath: string): PathClassification;
 
+/**
+ * ISL Spec Compliance Checker
+ *
+ * Post-scan step that reads spec.isl from the project root and cross-references
+ * declared behaviors, entities, and policies against the actual codebase.
+ *
+ * Rules:
+ *   ISL001 — Behavior declared but no matching route/handler found
+ *   ISL002 — Entity declared but no matching type/model/schema found
+ *   ISL003 — Security policy declared but no matching enforcement found
+ *   ISL004 — Rate limiting policy declared but no rate limiter found
+ *   ISL005 — spec.isl parse error (malformed spec)
+ *
+ * This runs AFTER the 10 scanner engines, using the loaded file map.
+ */
+
+interface ISLSpec {
+    domain: string;
+    version?: string;
+    behaviors: ISLBehavior[];
+    entities: ISLEntity[];
+    policies: ISLPolicy[];
+}
+interface ISLBehavior {
+    name: string;
+    line: number;
+    preconditions: string[];
+    postconditions: string[];
+}
+interface ISLEntity {
+    name: string;
+    line: number;
+    fields: string[];
+}
+interface ISLPolicy {
+    name: string;
+    line: number;
+    rule: string;
+    enforce: string;
+}
+interface SpecComplianceResult {
+    specFound: boolean;
+    specPath: string;
+    domain: string;
+    parseSuccess: boolean;
+    parseErrors: string[];
+    checks: SpecComplianceCheck[];
+    score: number;
+    summary: {
+        totalChecks: number;
+        passed: number;
+        failed: number;
+        warnings: number;
+    };
+}
+interface SpecComplianceCheck {
+    type: 'behavior' | 'entity' | 'policy';
+    name: string;
+    status: 'pass' | 'fail' | 'warn';
+    message: string;
+    specLine: number;
+    matchedFiles?: string[];
+}
+declare function checkISLCompliance(projectRoot: string, files: Map<string, FileContext>): {
+    result: SpecComplianceResult;
+    findings: Finding[];
+};
+
 /**
  * VibeCheck Unified Scanner
  *
  * The most accurate AI code scanner on the market.
  *
- * Combines 6 specialized engines running in parallel:
+ * Combines 10 specialized engines running in parallel:
  *   1. Credentials — hardcoded secrets, API keys, tokens (20 patterns)
  *   2. Security — injection, XSS, SSRF, prototype pollution (30 patterns)
  *   3. Fake Features — stubs, fake success, auth bypass, silent failures (25+ patterns)
  *   4. Hallucinations — fake packages, ghost routes, placeholder URLs (13 patterns)
  *   5. Dead UI — dead links, noop handlers, coming soon, disabled without reason (5 checks)
  *   6. Code Quality — debug code, type safety, mock data (18 patterns)
+ *   7. Import Graph — circular deps, orphan modules, ghost routes/env vars
+ *   8. Runtime Verify — unhandled promises, dead exports, race conditions
+ *   9. AST Analysis — Babel-powered scope-aware detection (empty bodies, async bugs, stubs)
+ *  10. Flow Trace — Intra-file taint tracking from user input to dangerous sinks
  *
  * Plus:
  *   - PathClassifier for smart file filtering (from FOUR v3.5.1)
@@ -267,7 +359,7 @@ declare function classifyPath(relativePath: string): PathClassification;
  *   - Severity escalation for critical-path files (api/, auth/, payment/)
  *
  * Architecture:
- *   Files → Classify → [6 Engines in parallel] → Deduplicate → Score → Report
+ *   Files → Classify → [10 Engines in parallel] → Deduplicate → Score → Report
  */
 
 declare const ALL_ENGINES: ScanEngine[];
@@ -279,4 +371,4 @@ declare function fix(options: ScanOptions & {
     fixReport: FixReport;
 }>;
 
-export { ALL_ENGINES, type FileContext, type Finding, type FixReport, RULE_CATALOG, type ScanEngine, type ScanOptions, type ScanReport, applyFixes, classifyPath, fix, getRuleOrDefault, scan };
+export { ALL_ENGINES, type FileContext, type Finding, type FixReport, type ISLSpec, RULE_CATALOG, type ScanEngine, type ScanOptions, type ScanReport, type SpecComplianceCheck, type SpecComplianceResult, applyFixes, checkISLCompliance, classifyPath, fix, getRuleOrDefault, scan };