code-casino-heist

Casino heist for developers. Break into the prod vault, bypass code review vault doors, crack the CI/CD safe.

Usage

const { Heist, HEIST_PHASES } = require('./src/heist');
const { VAULT_TYPES } = require('./src/vault');
const { CREW_ROLES } = require('./src/crew');

const heist = new Heist('The Production Job');

// Set up vaults
heist.addVault(VAULT_TYPES.CODE_REVIEW);
heist.addVault(VAULT_TYPES.CI_CD);
heist.addVault(VAULT_TYPES.PROD_DB);

// Recruit crew
heist.recruitCrew('Alice', CREW_ROLES.SAFECRACKER);
heist.recruitCrew('Bob', CREW_ROLES.CAT_BURGLAR);
heist.recruitCrew('Carol', CREW_ROLES.MASTERMIND);

// Case the joint
heist.caseVault('code_review', 'Bob');
heist.setPhase(HEIST_PHASES.CRACK);

// Crack vaults
heist.crackVault('code_review', ['Alice', 'Bob']);

// Exfiltrate
heist.exfiltrate('Bob');
heist.cleanup('Carol');

// Finish
const success = heist.finish();
console.log(heist.floorPlan());
console.log(heist.report());

Vaults

• Code Review Vault (security 40) — 2 reviewers + stale bot
• CI/CD Safe (security 60) — All tests must pass
• Production Database (security 85) — Encrypted, audit logged
• Secrets Manager (security 90) — API keys, private keys, tokens
• Artifact Repository (security 50) — Docker images, npm packages

Crew Roles

• Frontend Cat Burglar — Slips through XSS, smooth animations
• Backend Safecracker — Listens to API ticks, cracks endpoints
• DBA Hacker — OR 1=1, sees the matrix in the schema
• DevOps Wheelman — Knows every k8s route, escape pod ready
• PM Mastermind — Convinces everyone it's a sprint goal
• QA Demolitions — Blows up test suites, destroys coverage

Heist Phases

Casing the Repo -> Infiltration -> The Crack -> Exfiltration -> Cleanup