@chimix/agentscan 0.1.0 → 0.2.0

package/src/report/score.ts

@@ -1,47 +0,0 @@
-import type { Finding } from "../facts/types";
-
-/**
- * Points deducted per finding. Published deliberately — see the note below.
- */
-export const ERROR_COST = 10;
-export const WARNING_COST = 3;
-
-/**
- * A 0–100 score: start at 100, deduct per finding by severity, floor at zero.
- *
- *     score = max(0, 100 - 10 x errors - 3 x warnings)
- *
- * **Deduction, not coverage.** The obvious model — passed checks over total
- * checks — was measured against 17 real projects and rejected: every one landed
- * between 97.7% and 100%, and it *inverted* severity, because the denominator
- * grows with the config while the defects do not. A project with 85 skills and
- * one warning outscored a project with 10 skills and one warning, for the same
- * defect. Deduction has no denominator, so it cannot do that. Verified on the
- * same 17 projects: 40 to 100, and the 85-skill project scores 97 while the
- * 54-skill one with six broken hooks scores 40.
- *
- * **Info costs nothing.** Info findings are budgets and hygiene notes, and they
- * do correlate with project size — charging for them would reintroduce exactly
- * the inversion above. Measured: including them at one point each pulled a
- * healthy 51-skill project from 94 down to 84 purely for having more config.
- *
- * **The formula is published.** Both comparable tools score 0–100 and neither
- * documents how. A number whose derivation cannot be inspected is the false
- * precision this scoring model exists to avoid; anyone can recompute this one
- * by counting two lines of the report.
- *
- * The score is a summary, not a verdict. `--fail-on <severity>` remains the
- * precise gate: it says which *kind* of problem fails a build, where a
- * threshold only says how many points of unspecified trouble is too much.
- */
-export function score(findings: Finding[]): number {
-  let deduction = 0;
-  for (const f of findings) {
-    if (f.severity === "error") {
-      deduction += ERROR_COST;
-    } else if (f.severity === "warning") {
-      deduction += WARNING_COST;
-    }
-  }
-  return Math.max(0, 100 - deduction);
-}

package/src/report/sort.ts

@@ -1,26 +0,0 @@
-import type { Action, Finding, Severity } from "../facts/types";
-
-const SEVERITY_RANK: Record<Severity, number> = {
-  error: 0,
-  warning: 1,
-  info: 2,
-};
-
-/** Deterministic: severity error>warning>info, then action, then id */
-export function sortFindings(findings: Finding[]): Finding[] {
-  return [...findings].sort((a, b) => {
-    const sev = SEVERITY_RANK[a.severity] - SEVERITY_RANK[b.severity];
-    if (sev !== 0) {
-      return sev;
-    }
-    const act = compareAction(a.action, b.action);
-    if (act !== 0) {
-      return act;
-    }
-    return a.id.localeCompare(b.id);
-  });
-}
-
-function compareAction(a: Action, b: Action): number {
-  return a.localeCompare(b);
-}

package/src/report/text.ts

@@ -1,142 +0,0 @@
-import { basename } from "node:path";
-import type { Action, Facts, Finding } from "../facts/types";
-import { safe } from "./safe";
-import { score } from "./score";
-import { sortFindings } from "./sort";
-
-const ACTION_LABEL: Record<Action, string> = {
-  keep: "KEEP",
-  delete: "DELETE",
-  add: "ADD",
-  refresh: "REFRESH",
-  warn: "WARN",
-  drift: "DRIFT",
-};
-
-/** Left-pad action label to 7 chars for column alignment (DELETE = 6). */
-function actionColumn(action: Action): string {
-  return ACTION_LABEL[action].padEnd(7, " ");
-}
-
-export function renderText(args: {
-  version: string;
-  facts: Facts;
-  findings: Finding[];
-  resolvedFrom?: string;
-  verbose: boolean;
-  quiet: boolean;
-}): string {
-  const { version, facts, verbose, quiet } = args;
-  const sorted = sortFindings(args.findings);
-
-  // Default / quiet: hide KEEP and info severity. Verbose: full listing.
-  const visible = verbose
-    ? sorted
-    : sorted.filter((f) => f.action !== "keep" && f.severity !== "info");
-
-  const summary = formatSummary(sorted, verbose);
-
-  if (quiet) {
-    return `${summary}\n`;
-  }
-
-  const lines: string[] = [];
-  const name = projectLabel(facts.root);
-  lines.push(`agentscan v${version} — ${safe(name)}`);
-  if (args.resolvedFrom !== undefined) {
-    // The scan silently targeting an ancestor is worse than it refusing to run.
-    lines.push(
-      `       no package.json in ${safe(args.resolvedFrom)} — scanned ${safe(facts.root)}`,
-    );
-  }
-  lines.push("");
-  lines.push(`Stack: ${formatStack(facts)}`);
-  lines.push("");
-
-  for (const f of visible) {
-    lines.push(...formatFinding(f));
-    lines.push("");
-  }
-
-  lines.push(summary);
-  lines.push("");
-  return lines.join("\n");
-}
-
-function projectLabel(root: string): string {
-  const base = basename(root);
-  return base.length > 0 ? base : root;
-}
-
-/**
- * Orientation only — which project is this and how big. Listing dependencies
- * here told the reader nothing about their agent config, and a real app has
- * 100+ of them.
- */
-function formatStack(facts: Facts): string {
-  const deps =
-    Object.keys(facts.dependencies).length +
-    Object.keys(facts.devDependencies).length;
-  const global = facts.skills.filter((s) => s.source === "global").length;
-  const skills =
-    global === 0
-      ? `${facts.skills.length} skills`
-      : `${facts.skills.length} skills (${facts.skills.length - global} project + ${global} global)`;
-  return [
-    `${deps} deps`,
-    skills,
-    `${facts.mcp.length} mcp`,
-    `${facts.agents.length} agents`,
-    `packageManager=${facts.packageManager}`,
-  ].join(" · ");
-}
-
-function formatFinding(f: Finding): string[] {
-  const out: string[] = [];
-  out.push(`${actionColumn(f.action)} ${safe(f.subject)}`);
-  out.push(`        rule:${safe(f.ruleId)}`);
-  out.push(`        ${safe(f.message)}`);
-  if (f.evidence.length > 0) {
-    const ev = f.evidence
-      .map((e) => `${safe(e.kind)} ${safe(e.value)}`)
-      .join(" · ");
-    out.push(`        evidence: ${ev}`);
-  }
-  return out;
-}
-
-function formatSummary(findings: Finding[], verbose: boolean): string {
-  const counts: Record<Action, number> = {
-    keep: 0,
-    delete: 0,
-    add: 0,
-    refresh: 0,
-    warn: 0,
-    drift: 0,
-  };
-  let infoHidden = 0;
-  for (const f of findings) {
-    if (!verbose && f.severity === "info") {
-      infoHidden += 1;
-      continue;
-    }
-    counts[f.action] += 1;
-  }
-
-  // Only non-zero actions — most rule sets never emit most actions, and a row of
-  // permanent zeros buried the one number that moved.
-  const order: Action[] = ["delete", "add", "refresh", "drift", "warn", "keep"];
-  const parts = order
-    .filter((action) => counts[action] > 0)
-    .map((action) => `${counts[action]} ${action}`);
-
-  if (!verbose && infoHidden > 0) {
-    parts.push(`${infoHidden} info hidden (--verbose)`);
-  }
-  const points = score(findings);
-  if (parts.length === 0) {
-    return `Summary: no findings · score ${points}/100`;
-  }
-
-  return `Summary: ${parts.join(" · ")} · score ${points}/100`;
-}

package/src/version.ts

@@ -1 +0,0 @@
-export const VERSION = "0.1.0";