🛡️ Tcha Protect

An ultra-fast, zero-daemon developer safety and pre-flight CLI for solo entrepreneurs, vibe coders, and freelance developers running on Windows laptops.

                              TCHA PROTECT CORE
                                      │
         ┌───────────────┬────────────┴───────────┬───────────────┐
         ▼               ▼                        ▼               ▼
     [FAST CLI]   [ZERO-DAEMON]            [GHOST PURGE]    [SECRET SHIELD]
    < 500ms check   Takes 0 MB RAM when    1-click reclaim   Blocks git push
    single command  not actively running   20GB+ node_modules if live keys found

🚀 Quick Start

Run the unified pre-flight check in your terminal:

# In your project or terminal
tcha check

Output:

  🛡️  TCHA PROTECT  v0.1.0  ·  Pre-Flight Report

  [✓] VITALS    RAM: 1.8 GB free (8035 MB total) · C:\: 15.4 GB free
  [✓] PORTS     6 localhost listener(s) safely bound · 0 external tunnels
  [✓] SWEEP     7 process(es) inspected · 7 tool/agent processes allowlisted · 0 rogue loops
  [✓] PURGE     No stale development sprawl found across allowlist
  [✓] GUARD     0 staged secrets detected · Hook ACTIVE
  [✓] AUDIT     0 newly added packages in staged diff

  ────────────────────────────────────────────────────────────────────
  🚀 Status: ALL CLEAR TO SHIP

For AI agents and CI/CD pipelines, append --json:

tcha check --json

🛠️ Command Reference

1. tcha check

Runs all 6 local checks concurrently in < 500ms:

• Vitals: Monitors available RAM (<1.2 GB warning) and C:\ SSD buffer (<10 GB warning).
• Ports: Checks TCP listeners and flags wildcard bindings (0.0.0.0) on dev ports.
• Sweep: Diagnostic inspection of background dev servers.
• Purge: Identifies inactive dependency sprawl (>30 days).
• Guard: Verifies staged diff against live secrets.
• Audit: Checks staged dependencies for hallucinations and typosquatting.

Exit codes:

• 0: All clear.
• 1: Review recommended.
• 2: Blocked / Critical findings.

2. tcha purge (Safety-Critical Storage Reclaimer)

Reclaims 15–35 GB of disk space from dead development trees without risking your code.

• Strict Allowlist: Only touches ['node_modules', '.next', '.venv'].
• Same-Drive Atomic Quarantine: Moves folders to .tcha-trash/ on the same drive (instant pointer swap, no slow copying).

# Dry-run review (modifies 0 files)
tcha purge

# Execute quarantine to same-drive .tcha-trash/
tcha purge --yes

# Restore a quarantined batch atomically
tcha purge --restore <quarantine_id>

3. tcha guard (Git Pre-Commit Secret Shield)

Stops you from accidentally committing live Stripe keys, OpenAI tokens, or AWS credentials to GitHub.

# Check status and verify synthetic key blocking
tcha guard status

# Install local pre-commit hook into your repo (.git/hooks/pre-commit)
tcha guard install

# Manually scan staged files or specific file
tcha guard scan --staged
tcha guard scan src/config/stripe.ts

Supports .tchaignore for legitimate mock tokens.

4. tcha ports (Listener & Tunnel Evidence)

Inspects local listeners and reports evidence:

• Flags active public tunnels (ngrok, cloudflared, localtunnel).
• Correlates PIDs to executables (svchost.exe, Antigravity.exe).

tcha ports

5. tcha sweep (Diagnostic Process Inspector)

Inspects background node.exe, python.exe, and ruby.exe processes:

• Whitelists editor extension hosts and AI coding tools (Antigravity, language_server, playwright, rea-agents).
• Displays RAM consumption in MB.
• Diagnostic only: does not kill processes in v1.0.

tcha sweep

6. tcha audit (AI Package Slopsquatting & Dependency Checker)

Protects vibe coders from AI-hallucinated or newly registered malicious packages:

• Diff-Only Mode: Audits only packages newly added in staged git diffs.
• Hallucination Detection: Flags 404 non-existent packages on npm.
• Typosquatting Detection: Uses Levenshtein distance against top 50 popular packages.
• Freshness Warning: Flags packages registered < 14 days ago.

# Audit staged package additions
tcha audit

# Audit a specific package.json file
tcha audit package.json

📁 Color-Coded Architecture

tcha protect/ (Red Folder)
├── 01. System Health & Hardware Scanner/ (Blue Folder)   -> Vitals & Sweep
├── 02. Security & Vulnerability Scanner/ (Orange Folder) -> Ports & Tunnels
├── 03. Application & Codebase Scanner/   (Purple Folder) -> Guard & Audit
├── 04. Storage & Junk Cleaner Scanner/   (Green Folder)  -> Purge & Quarantine
└── specs/                                                -> 6-Pillar Blueprints

📄 License

MIT © 2026 Jean Jacques Tchapwo