Rebuild Vibeflow as an n8n safety gate

This commit is contained in:
Felipe Domingues 2026-07-22 11:43:41 -03:00
parent 79fc67166a
commit febec32131
101 changed files with 2405 additions and 3557 deletions

32
docs/demo.md Normal file
View file

@ -0,0 +1,32 @@
# Reproducible demo
## Safe workflow
```bash
node bin/vibeflow.mjs check examples/safe-support-agent.workflow.json
```
Expected result: exit `0`, zero findings.
## Unsafe workflow
```bash
node bin/vibeflow.mjs check examples/unsafe-support-agent.workflow.json --fail-on never
```
Expected result: VF001-VF009 findings covering secrets, dangerous nodes, webhook authentication, error handling, idempotency, AI safety, timeouts, and retries.
## Automation output
```bash
node bin/vibeflow.mjs check examples/unsafe-support-agent.workflow.json --format json --fail-on never
node bin/vibeflow.mjs check examples/unsafe-support-agent.workflow.json --format sarif --output vibeflow.sarif --fail-on never
```
For pull requests or other untrusted checkouts, add `--locked`. The bundled GitHub Action does this automatically.
## Full project gate
```bash
npm run verify
```