vibecodedshit 0.2.0 → 0.3.0

package/README.md

@@ -8,9 +8,18 @@ Codebase Health benchmark. See `methodology/v1.0/METHODOLOGY.md` for how scores
 npx vibecodedshit scan .
 ```
 
-Needs Node 22 or later and `git`. No clone, no plugin, no repository access for anyone. With Docker and the `health:1.0` image the scan is a full run. Without them it falls back to a preview scan, prints why and which parameters it skipped (they need Docker), and writes `run.json`. The scan runs on your machine. Your code is not uploaded; it only looks up your dependencies' names and versions on the public npm and PyPI registries (and OSV, if osv-scanner is installed). To get the full run, build the image with `docker build -t health:1.0 -f <package>/docker/Dockerfile <package>/docker` (the scan prints the exact command).
+Needs Node 22 or later and `git`. No clone, no plugin, no repository access for anyone. In a terminal the scan walks you through it:
 
-Submitting is opt-in: `npx vibecodedshit submit run.json --email <you@example.com>` prints the payload and sends it only with `--confirm`. Only full, comparable runs can be submitted.
+1. Docker not installed: asks whether to install and start it (Homebrew on macOS, get.docker.com on Linux, winget on Windows).
+2. Docker installed but not running: asks whether to start it.
+3. Scan image `health:1.0` missing or out of date: asks whether to build it (5 to 10 minutes the first time).
+4. Runs the scan and writes `run.json`. Any No above runs a preview scan instead (static layer only, not comparable).
+5. Asks whether to submit the score to the global leaderboard (full, comparable runs only). Sends your scores, a hash of the repository URL and your email; no code, no file paths.
+6. For a Vibe-coded or Fragile result, asks whether you want a quote from Peter for fixing the app. Sends your name, email, run.json and the HTML report.
+
+Every question defaults to No, and nothing leaves your machine without a yes. The scan itself only looks up your dependencies' names and versions on the public npm and PyPI registries (and OSV, if osv-scanner is installed).
+
+Without a terminal (CI, `CI` set, or piped output) nothing is asked: the scan falls back to a preview when Docker or the image is missing, prints the image build command, and submitting stays the explicit `npx vibecodedshit submit run.json --email <you@example.com> --confirm`.
 
 ## From a clone
 

package/dist/bin.js

@@ -1,8 +1,11 @@
 #!/usr/bin/env node
 import { run } from './cli.js';
+import { terminalPrompter } from './interactive/prompt.js';
+const interactive = Boolean(process.stdin.isTTY && process.stdout.isTTY) && !process.env.CI;
 const code = await run(process.argv.slice(2), {
     stdout: (text) => process.stdout.write(text),
     stderr: (text) => process.stderr.write(text),
     cwd: process.cwd(),
+    ...(interactive ? { prompt: terminalPrompter } : {}),
 });
 process.exitCode = code;

package/dist/cli.js

@@ -7,7 +7,10 @@ import { footer, imageBuildCommand } from './commands/footer.js';
 import { imageDigest } from './exec/docker.js';
 import { runReport } from './commands/report.js';
 import { runRoute } from './commands/route.js';
-import { runSubmit } from './commands/submit.js';
+import { defaultGit, runSubmit } from './commands/submit.js';
+import { afterScan } from './interactive/after-scan.js';
+import { setUpDocker } from './interactive/docker-setup.js';
+import { hostSystem } from './interactive/system.js';
 import { summarize } from './commands/summary.js';
 import { CURRENT_METHODOLOGY_VERSION, loadMethodology, MethodologyError, packageRoot } from './methodology/load.js';
 import { invalidRun, NoLogicFilesError, runScan } from './run/scan.js';
@@ -86,20 +89,34 @@ export async function run(argv, io, deps = {}) {
     if (opts.mode === 'full' && !deps.execRunner && deps.imageDigest === undefined) {
         // No Docker, or no usable image: fall back to the static layer so `scan .` works from an npx install.
         const tag = methodology.execution.runner.image;
-        try {
-            opts.imageDigest = await imageDigest(tag);
+        if (io.prompt) {
+            const setup = await setUpDocker(tag, { io, prompt: io.prompt, system: deps.system ?? hostSystem, packageRoot, imageDigest: deps.inspectImage ?? imageDigest });
+            if ('digest' in setup)
+                opts.imageDigest = setup.digest;
+            else {
+                opts.mode = 'preview';
+                io.stderr(`${setup.previewReason}\nRunning a preview scan (static layer only, not comparable).\n`);
+            }
         }
-        catch (err) {
-            if (!(err instanceof ToolError))
-                throw err;
-            opts.mode = 'preview';
-            io.stderr(`${err.message}\nRunning a preview scan (static layer only, not comparable). For a full run: ${imageBuildCommand(packageRoot, tag)}\n`);
+        else {
+            try {
+                opts.imageDigest = await imageDigest(tag);
+            }
+            catch (err) {
+                if (!(err instanceof ToolError))
+                    throw err;
+                opts.mode = 'preview';
+                io.stderr(`${err.message}\nRunning a preview scan (static layer only, not comparable). For a full run: ${imageBuildCommand(packageRoot, tag)}\n`);
+            }
         }
     }
     try {
         const result = await runScan(opts, methodology);
         writeRun(outFile, result);
-        io.stdout(summarize(result, methodology) + footer(result, outFile));
+        io.stdout(summarize(result, methodology) + footer(result, outFile, io.prompt !== undefined));
+        if (io.prompt) {
+            await afterScan(result, methodology, { io, prompt: io.prompt, git: deps.git ?? defaultGit, fetch: deps.fetch ?? fetch });
+        }
         return EXIT.ok;
     }
     catch (err) {

package/dist/commands/footer.js

@@ -6,7 +6,7 @@ export function imageBuildCommand(packageRoot, tag) {
     return `docker build -t ${tag} -f ${path.join(docker, 'Dockerfile')} ${docker}`;
 }
 /** Lines printed after the scan summary: what a preview skipped, that nothing was uploaded, and how to submit. */
-export function footer(run, outFile) {
+export function footer(run, outFile, interactive = false) {
     const lines = [];
     if (run.mode === 'preview') {
         const skipped = run.parameters.filter((p) => p.status === 'not_measured' && p.reason?.startsWith('execution layer')).map((p) => p.id);
@@ -14,6 +14,9 @@ export function footer(run, outFile) {
             lines.push(`Skipped (needs Docker): ${skipped.join(', ')}. Run a full scan with Docker to measure them.`);
     }
     lines.push(PRIVACY);
+    // An interactive scan asks about the leaderboard next instead of printing the command.
+    if (interactive)
+        return `${lines.join('\n')}\n`;
     if (run.valid && run.comparable && run.mode === 'full') {
         lines.push(`To compare your result on app.vibecodedshit.com, run: npx vibecodedshit submit ${outFile} --email <you@example.com>`);
         lines.push('It prints the payload first and sends nothing unless you add --confirm.');

package/dist/interactive/after-scan.js

@@ -0,0 +1,121 @@
+import { renderReport } from '../report/render.js';
+import { EMAIL_PATTERN, MAX_EMAIL_CHARS, MAX_PAYLOAD_BYTES, PRIVACY_URL, QUOTE_URL } from '../submit/constants.js';
+import { buildPayload, PayloadError } from '../submit/payload.js';
+import { repoIdentity, RepoIdentityError } from '../submit/repo-identity.js';
+import { sendPayload } from '../submit/send.js';
+/** Bands whose owners are offered a quote for the fixing service. */
+const QUOTE_BANDS = new Set(['vibe_coded', 'fragile']);
+const QUOTE_TIMEOUT_MS = 30_000;
+async function askEmail(prompt, io) {
+    for (let attempt = 0; attempt < 3; attempt += 1) {
+        const email = await prompt.text('Your email:');
+        if (email.length <= MAX_EMAIL_CHARS && EMAIL_PATTERN.test(email))
+            return email;
+        io.stderr('That is not a valid email address.\n');
+    }
+    return null;
+}
+async function submitToLeaderboard(run, ctx, emailFor) {
+    const { io, prompt } = ctx;
+    if (run.mode !== 'full' || !run.comparable) {
+        const why = run.mode === 'full' ? (run.comparableReason ?? 'not comparable') : 'a preview scan, a full scan with Docker is needed';
+        io.stdout(`This run cannot go on the global leaderboard: ${why}.\n`);
+        return;
+    }
+    io.stdout(`The leaderboard gets your scores, a hash of your repository URL and your email. No code, no file paths. Privacy: ${PRIVACY_URL}\n`);
+    if (!(await prompt.confirm('Submit your score to the global leaderboard?')))
+        return;
+    const email = await emailFor();
+    if (email === null)
+        return;
+    try {
+        const identity = await repoIdentity(run.repo.path, ctx.git);
+        const payload = buildPayload({ run, repoHash: identity.hash, email });
+        if (Buffer.byteLength(JSON.stringify(payload), 'utf8') > MAX_PAYLOAD_BYTES) {
+            io.stderr('Not submitted: the payload is larger than 64 KB, the server limit.\n');
+            return;
+        }
+        const result = await sendPayload(payload, ctx.fetch);
+        if (!result.ok) {
+            io.stderr(`Not submitted. ${result.message}\n`);
+            return;
+        }
+        const rank = result.rank;
+        const rankLine = rank ? ` Rank ${rank.rank} of ${rank.total}.${rank.top10Threshold === null ? '' : ` Top 10 starts at ${rank.top10Threshold}.`}` : '';
+        io.stdout(`Submitted.${rankLine}\n`);
+    }
+    catch (err) {
+        if (err instanceof RepoIdentityError || err instanceof PayloadError) {
+            io.stderr(`Not submitted: ${err.message}\n`);
+            return;
+        }
+        throw err;
+    }
+}
+async function requestQuote(run, methodology, ctx, emailFor) {
+    const { io, prompt } = ctx;
+    if (!run.health || !QUOTE_BANDS.has(run.health.band))
+        return;
+    const bandName = methodology.bands.find((b) => b.key === run.health?.band)?.name ?? run.health.band;
+    io.stdout(`\nYour app is ${bandName}. Peter, the creator of this scan, runs a service that fixes vibe-coded apps.\n`);
+    io.stdout('A quote request sends your name, email, run.json and the HTML report (scores and file paths, no source code).\n');
+    if (!(await prompt.confirm('Do you want to ask for a quote?')))
+        return;
+    const name = await prompt.text('Your name:');
+    if (name === '') {
+        io.stderr('A name is needed for the quote request. Nothing was sent.\n');
+        return;
+    }
+    const email = await emailFor();
+    if (email === null)
+        return;
+    const note = await prompt.text('Anything Peter should know? (optional, press Enter to skip)');
+    let repoHash;
+    try {
+        repoHash = (await repoIdentity(run.repo.path, ctx.git)).hash;
+    }
+    catch (err) {
+        if (!(err instanceof RepoIdentityError))
+            throw err;
+        io.stderr(`Nothing was sent: ${err.message}\n`);
+        return;
+    }
+    const body = {
+        contact: { name, email, ...(note === '' ? {} : { note }) },
+        methodologyVersion: run.methodology.version,
+        health: run.health.displayed,
+        band: run.health.band,
+        repoHash,
+        run,
+        report: renderReport(run, methodology),
+    };
+    try {
+        const response = await ctx.fetch(QUOTE_URL, {
+            method: 'POST',
+            headers: { 'content-type': 'application/json' },
+            body: JSON.stringify(body),
+            signal: AbortSignal.timeout(QUOTE_TIMEOUT_MS),
+        });
+        if (response.ok) {
+            io.stdout('Quote requested. Peter will reply by email.\n');
+            return;
+        }
+        io.stderr(`The quote request failed (${response.status}): ${(await response.text()).slice(0, 300)}. Reach Peter at https://vibecodedshit.com\n`);
+    }
+    catch (err) {
+        io.stderr(`The quote request failed: ${err instanceof Error ? err.message : String(err)}. Reach Peter at https://vibecodedshit.com\n`);
+    }
+}
+/** After an interactive scan: offer the leaderboard, then a quote for Vibe-coded and Fragile apps. Nothing is sent without a yes. */
+export async function afterScan(run, methodology, ctx) {
+    if (!run.valid)
+        return;
+    let email;
+    const emailFor = async () => {
+        if (email === undefined)
+            email = await askEmail(ctx.prompt, ctx.io);
+        return email;
+    };
+    await submitToLeaderboard(run, ctx, emailFor);
+    await requestQuote(run, methodology, ctx, emailFor);
+}

package/dist/interactive/docker-setup.js

@@ -0,0 +1,97 @@
+import { imageBuildCommand } from '../commands/footer.js';
+import { ToolError } from '../scope/types.js';
+const DOWNLOAD_URL = 'https://www.docker.com/products/docker-desktop/';
+const START_TIMEOUT_MS = 180_000;
+const POLL_MS = 3_000;
+const ok = (code) => code === 0;
+async function install(ctx) {
+    const { system, io } = ctx;
+    if (system.platform === 'darwin') {
+        if (!ok(await system.exec('brew', ['--version']))) {
+            io.stderr(`Homebrew is not installed, so Docker cannot be installed for you. Download Docker Desktop from ${DOWNLOAD_URL}\n`);
+            return false;
+        }
+        return ok(await system.exec('brew', ['install', '--cask', 'docker-desktop'], { inherit: true }));
+    }
+    if (system.platform === 'linux') {
+        return ok(await system.exec('sh', ['-c', 'curl -fsSL https://get.docker.com | sudo sh'], { inherit: true }));
+    }
+    if (system.platform === 'win32') {
+        const args = ['install', '-e', '--id', 'Docker.DockerDesktop', '--accept-package-agreements', '--accept-source-agreements'];
+        return ok(await system.exec('winget', args, { inherit: true }));
+    }
+    io.stderr(`Docker cannot be installed for you on ${system.platform}. Download it from ${DOWNLOAD_URL}\n`);
+    return false;
+}
+async function start(ctx) {
+    const { system, io } = ctx;
+    if (system.platform === 'darwin') {
+        await system.exec('open', ['-a', 'Docker']);
+        io.stdout('Starting Docker Desktop. If it asks you to accept its terms, do that in its window.\n');
+    }
+    else if (system.platform === 'linux') {
+        await system.exec('sudo', ['systemctl', 'start', 'docker'], { inherit: true });
+    }
+    else if (system.platform === 'win32') {
+        await system.exec('cmd', ['/c', 'start', '', 'C:\\Program Files\\Docker\\Docker\\Docker Desktop.exe']);
+        io.stdout('Starting Docker Desktop. If it asks you to accept its terms, do that in its window.\n');
+    }
+    io.stdout('Waiting for Docker to start (up to 3 minutes)...\n');
+    for (let waited = 0; waited < START_TIMEOUT_MS; waited += POLL_MS) {
+        if (ok(await system.exec('docker', ['info'])))
+            return true;
+        await system.sleep(POLL_MS);
+    }
+    return false;
+}
+function notStarted(platform) {
+    const linux = platform === 'linux' ? ' If Docker runs but needs sudo, run `sudo usermod -aG docker $USER`, log in again and rerun the scan.' : '';
+    return `Docker did not start within 3 minutes.${linux}`;
+}
+/**
+ * Get Docker and the scan image ready for a full run, asking before each install, start or build.
+ * Any No, or a step that fails, returns the reason to fall back to a preview scan.
+ */
+export async function setUpDocker(tag, ctx) {
+    const { system, prompt, io } = ctx;
+    if (!ok(await system.exec('docker', ['--version']))) {
+        if (!(await prompt.confirm('Docker is not installed. A full scan needs it. Install and start Docker now?'))) {
+            return { previewReason: 'Docker is not installed.' };
+        }
+        if (!(await install(ctx)))
+            return { previewReason: 'Docker could not be installed.' };
+        if (!(await start(ctx)))
+            return { previewReason: notStarted(system.platform) };
+    }
+    else if (!ok(await system.exec('docker', ['info']))) {
+        if (!(await prompt.confirm('Docker is installed but not running. Start it now?'))) {
+            return { previewReason: 'Docker is not running.' };
+        }
+        if (!(await start(ctx)))
+            return { previewReason: notStarted(system.platform) };
+    }
+    try {
+        return { digest: await ctx.imageDigest(tag) };
+    }
+    catch (err) {
+        if (!(err instanceof ToolError))
+            throw err;
+        const state = err.message.includes('out of date') ? 'is out of date' : 'is not built yet';
+        if (!(await prompt.confirm(`The scan image ${tag} ${state}. Build it now? The first build takes about 5 to 10 minutes.`))) {
+            return { previewReason: `The scan image ${tag} ${state}.` };
+        }
+    }
+    const build = imageBuildCommand(ctx.packageRoot, tag).split(' ');
+    if (!ok(await system.exec(build[0] ?? 'docker', build.slice(1), { inherit: true }))) {
+        return { previewReason: `Building the scan image failed. Retry with: ${build.join(' ')}` };
+    }
+    try {
+        io.stdout(`Built ${tag}.\n`);
+        return { digest: await ctx.imageDigest(tag) };
+    }
+    catch (err) {
+        if (!(err instanceof ToolError))
+            throw err;
+        return { previewReason: err.message };
+    }
+}

package/dist/interactive/prompt.js

@@ -0,0 +1,17 @@
+import { createInterface } from 'node:readline/promises';
+async function ask(question) {
+    const rl = createInterface({ input: process.stdin, output: process.stdout });
+    try {
+        return (await rl.question(question)).trim();
+    }
+    finally {
+        rl.close();
+    }
+}
+export const terminalPrompter = {
+    async confirm(question) {
+        const answer = await ask(`${question} [y/N] `);
+        return /^y(es)?$/i.test(answer);
+    },
+    text: (question) => ask(`${question} `),
+};

package/dist/interactive/system.js

@@ -0,0 +1,10 @@
+import { spawn } from 'node:child_process';
+export const hostSystem = {
+    platform: process.platform,
+    exec: (command, args, opts = {}) => new Promise((resolve) => {
+        const child = spawn(command, args, { stdio: opts.inherit ? 'inherit' : 'ignore' });
+        child.on('error', () => resolve(null));
+        child.on('close', (code) => resolve(code));
+    }),
+    sleep: (ms) => new Promise((resolve) => setTimeout(resolve, ms)),
+};

package/dist/submit/constants.js

@@ -1,5 +1,6 @@
 export const SUBMIT_URL = 'https://app.vibecodedshit.com/api/submissions';
 export const PRIVACY_URL = 'https://app.vibecodedshit.com/privacy';
+export const QUOTE_URL = 'https://app.vibecodedshit.com/api/quote-requests';
 /** The server rejects larger bodies. */
 export const MAX_PAYLOAD_BYTES = 65536;
 /** The server rejects longer summaries. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vibecodedshit",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Codebase Health benchmark CLI",
   "license": "Elastic-2.0",
   "type": "module",