@chimix/agentscan 0.2.1 → 0.4.0

package/README.md

@@ -164,6 +164,7 @@ Flags for `check`:
 | `--json` | JSON report (alias for `--output json`) |
 | `--output <format>` | `human` (default) · `json` · `prompt` |
 | `--copy` | Also copy the report to the system clipboard |
+| `--no-color` | Never colour, even on a terminal (`NO_COLOR=1` does the same) |
 | `--quiet` | Summary line only |
 | `--verbose` | Show KEEP + info-severity findings |
 | `--fail-on <level>` | `never` (default) · `warning` · `error` |
@@ -176,23 +177,30 @@ Flags for `check`:
 ## Sample output
 
 ```text
-agentscan v0.1.0 — touchagency
+  ┌─────┐   40/100  broken  ·  touchagency
+  │ ✕ ✕ │   ██████████░░░░░░░░░░░░░░░
+  │  ⌒  │   6 warn · 4 info hidden (--verbose)
+  └─────┘
 
-Stack: 46 deps · 54 skills · 1 mcp · 2 agents · packageManager=bun
+agentscan v0.4.0 — touchagency
 
-WARN    hook:PreToolUse:.claude/hooks/guard-destructive-bash.js
-        rule:hook.missing-script
-        PreToolUse hook points at a script that does not exist: .claude/hooks/guard-destructive-bash.js
-        evidence: hook PreToolUse @ …/.claude/settings.json · script .claude/hooks/guard-destructive-bash.js
+Scanned: 46 deps · 54 skills · 1 mcp · 2 agents · packageManager=bun
 
-WARN    hook:PreToolUse:.claude/hooks/protect-artists-json.js
-        rule:hook.missing-script
-        PreToolUse hook points at a script that does not exist: .claude/hooks/protect-artists-json.js
-        evidence: hook PreToolUse @ …/.claude/settings.json · script .claude/hooks/protect-artists-json.js
+WARN    rule:hook.missing-script  ×6
+        PreToolUse hook points at a script that does not exist
+          PostToolUse @ .claude/settings.json · .claude/hooks/notify-related-tests.js
+          PreToolUse @ .claude/settings.json · .claude/hooks/guard-destructive-bash.js
+          PreToolUse @ .claude/settings.json · .claude/hooks/protect-artists-json.js
+          PreToolUse @ .claude/settings.json · .claude/hooks/protect-env.js
 
-Summary: 6 warn · 4 info hidden (--verbose) · score 40/100
+Summary: 6 warn · 4 info hidden (--verbose) · score 40/100 broken
 ```
 
+On a terminal the header is coloured green, yellow or red and the face tracks
+the score. Redirect or pipe it and you get exactly the text above, with no
+escape sequences — the header box is dropped too, so `--json`, `--output
+prompt`, CI logs and `--copy` are unchanged by any of this.
+
 The `Stack:` line is orientation only — which project, how big. The summary lists
 only actions that actually occurred; a clean project prints `Summary: no findings`.
 

package/dist/cli.js

@@ -12534,6 +12534,45 @@ function score(findings) {
   }
   return Math.max(0, 100 - deduction);
 }
+function scoreLabel(points) {
+  if (points === 100) {
+    return "clean";
+  }
+  if (points >= 90) {
+    return "good";
+  }
+  if (points >= 70) {
+    return "needs work";
+  }
+  if (points >= 50) {
+    return "poor";
+  }
+  return "broken";
+}
+function scoreTone(points) {
+  if (points >= 90) {
+    return "green";
+  }
+  if (points >= 50) {
+    return "yellow";
+  }
+  return "red";
+}
+function scoreFace(points) {
+  if (points === 100) {
+    return ["◠ ◠", " ▽ "];
+  }
+  if (points >= 90) {
+    return ["• •", " ‿ "];
+  }
+  if (points >= 70) {
+    return ["• •", " ─ "];
+  }
+  if (points >= 50) {
+    return ["◡ ◡", " ⌒ "];
+  }
+  return ["✕ ✕", " ⌒ "];
+}
 
 // src/report/exit-code.ts
 function exitCode(findings, failOn, failUnder) {
@@ -12658,6 +12697,50 @@ function headingFor(severity) {
 
 // src/report/text.ts
 import { basename as basename4 } from "node:path";
+
+// src/report/ansi.ts
+var CODES = {
+  green: "\x1B[32m",
+  yellow: "\x1B[33m",
+  red: "\x1B[31m",
+  dim: "\x1B[2m",
+  bold: "\x1B[1m",
+  reset: "\x1B[0m"
+};
+var PLAIN = {
+  tone: (_tone, text) => text,
+  strong: (_tone, text) => text,
+  dim: (text) => text,
+  bold: (text) => text,
+  enabled: false
+};
+function paint(enabled) {
+  if (!enabled) {
+    return PLAIN;
+  }
+  return {
+    tone: (tone, text) => `${CODES[tone]}${text}${CODES.reset}`,
+    strong: (tone, text) => `${CODES.bold}${CODES[tone]}${text}${CODES.reset}`,
+    dim: (text) => `${CODES.dim}${text}${CODES.reset}`,
+    bold: (text) => `${CODES.bold}${text}${CODES.reset}`,
+    enabled: true
+  };
+}
+function shouldColour(args) {
+  if (args.noColorFlag === true) {
+    return false;
+  }
+  const { NO_COLOR, FORCE_COLOR } = args.env;
+  if (NO_COLOR !== undefined && NO_COLOR !== "") {
+    return false;
+  }
+  if (FORCE_COLOR !== undefined && FORCE_COLOR !== "" && FORCE_COLOR !== "0") {
+    return true;
+  }
+  return args.isTTY;
+}
+
+// src/report/text.ts
 var ACTION_LABEL = {
   keep: "KEEP",
   delete: "DELETE",
@@ -12671,24 +12754,28 @@ function actionColumn(action) {
 }
 function renderText(args) {
   const { version, facts, verbose, quiet } = args;
+  const ink = paint(args.colour === true);
   const sorted = sortFindings(args.findings);
   const visible = verbose ? sorted : sorted.filter((f) => f.action !== "keep" && f.severity !== "info");
-  const summary = formatSummary(sorted, verbose);
+  const summary = formatSummary(sorted, verbose, ink);
   if (quiet) {
     return `${summary}
 `;
   }
   const lines = [];
   const name = projectLabel(facts.root);
-  lines.push(`agentscan v${version} — ${safe(name)}`);
+  if (ink.enabled) {
+    lines.push(...formatHeaderBox(sorted, verbose, safe(name), ink));
+  }
+  lines.push(ink.dim(`agentscan v${version} — ${safe(name)}`));
   if (args.resolvedFrom !== undefined) {
     lines.push(`       no package.json in ${safe(args.resolvedFrom)} — scanned ${safe(facts.root)}`);
   }
   lines.push("");
-  lines.push(`Stack: ${formatStack(facts)}`);
+  lines.push(ink.dim(`Scanned: ${formatStack(facts)}`));
   lines.push("");
-  for (const f of visible) {
-    lines.push(...formatFinding(f));
+  for (const group of groupByRule(visible)) {
+    lines.push(...formatGroup(group, facts.root, ink));
     lines.push("");
   }
   lines.push(summary);
@@ -12696,6 +12783,22 @@ function renderText(args) {
   return lines.join(`
 `);
 }
+var BAR_CELLS = 25;
+function formatHeaderBox(findings, verbose, name, ink) {
+  const points = score(findings);
+  const tone = scoreTone(points);
+  const [eyes, mouth] = scoreFace(points);
+  const filled = Math.round(points / 100 * BAR_CELLS);
+  const bar = ink.tone(tone, "█".repeat(filled)) + ink.dim("░".repeat(BAR_CELLS - filled));
+  const verdict = `${ink.strong(tone, `${points}/100`)}  ${ink.tone(tone, scoreLabel(points))}${ink.dim(`  ·  ${name}`)}`;
+  return [
+    `  ${ink.tone(tone, "┌─────┐")}   ${verdict}`,
+    `  ${ink.tone(tone, `│ ${eyes} │`)}   ${bar}`,
+    `  ${ink.tone(tone, `│ ${mouth} │`)}   ${ink.dim(countsLine(findings, verbose))}`,
+    `  ${ink.tone(tone, "└─────┘")}`,
+    ""
+  ];
+}
 function projectLabel(root) {
   const base = basename4(root);
   return base.length > 0 ? base : root;
@@ -12712,18 +12815,52 @@ function formatStack(facts) {
     `packageManager=${facts.packageManager}`
   ].join(" · ");
 }
-function formatFinding(f) {
+function groupByRule(findings) {
+  const byRule = new Map;
+  for (const f of findings) {
+    const bucket = byRule.get(f.ruleId);
+    if (bucket === undefined) {
+      byRule.set(f.ruleId, [f]);
+    } else {
+      bucket.push(f);
+    }
+  }
+  return [...byRule.values()];
+}
+function shortPath(value, root) {
+  return value.split(`${root}/`).join("");
+}
+var ACTION_TONE = {
+  delete: "red",
+  warn: "yellow",
+  drift: "yellow",
+  add: "green",
+  refresh: "green"
+};
+function formatGroup(group, root, ink) {
+  const first = group[0];
+  const count = group.length;
   const out = [];
-  out.push(`${actionColumn(f.action)} ${safe(f.subject)}`);
-  out.push(`        rule:${safe(f.ruleId)}`);
-  out.push(`        ${safe(f.message)}`);
-  if (f.evidence.length > 0) {
-    const ev = f.evidence.map((e) => `${safe(e.kind)} ${safe(e.value)}`).join(" · ");
-    out.push(`        evidence: ${ev}`);
+  const tone = ACTION_TONE[first.action];
+  const label = actionColumn(first.action);
+  out.push(`${tone === undefined ? ink.dim(label) : ink.tone(tone, label)} ${ink.dim(`rule:${safe(first.ruleId)}`)}${count > 1 ? ink.bold(`  ×${count}`) : ""}`);
+  out.push(`        ${safe(count === 1 ? first.message : ruleHeadline(first))}`);
+  for (const f of group) {
+    const where = f.evidence.filter((e) => e.kind !== "count" && e.kind !== "threshold").map((e) => shortPath(e.value, root));
+    const location = where.length > 0 ? where.join(" · ") : f.subject;
+    out.push(ink.dim(`          ${safe(shortPath(location, root))}`));
   }
   return out;
 }
-function formatSummary(findings, verbose) {
+function ruleHeadline(f) {
+  const cut = f.message.indexOf(": ");
+  return cut === -1 ? f.message : f.message.slice(0, cut);
+}
+function countsLine(findings, verbose) {
+  const parts = actionParts(findings, verbose);
+  return parts.length === 0 ? "no findings" : parts.join(" · ");
+}
+function actionParts(findings, verbose) {
   const counts = {
     keep: 0,
     delete: 0,
@@ -12745,15 +12882,20 @@ function formatSummary(findings, verbose) {
   if (!verbose && infoHidden > 0) {
     parts.push(`${infoHidden} info hidden (--verbose)`);
   }
+  return parts;
+}
+function formatSummary(findings, verbose, ink) {
+  const parts = actionParts(findings, verbose);
   const points = score(findings);
+  const scored = `score ${ink.tone(scoreTone(points), `${points}/100 ${scoreLabel(points)}`)}`;
   if (parts.length === 0) {
-    return `Summary: no findings · score ${points}/100`;
+    return `Summary: no findings · ${scored}`;
   }
-  return `Summary: ${parts.join(" · ")} · score ${points}/100`;
+  return `Summary: ${parts.join(" · ")} · ${scored}`;
 }
 
 // src/version.ts
-var VERSION = "0.2.1";
+var VERSION = "0.4.0";
 
 // src/commands/check.ts
 async function runCheck(options) {
@@ -12765,23 +12907,30 @@ async function runCheck(options) {
   });
   const format = options.output ?? (options.json === true ? "json" : "human");
   let stdout;
+  let plain;
   if (format === "json") {
     stdout = renderJson({ version: VERSION, root, facts, findings, resolvedFrom });
   } else if (format === "prompt") {
     stdout = renderPrompt({ version: VERSION, facts, findings });
   } else {
-    stdout = renderText({
+    const text = (colour) => renderText({
       version: VERSION,
       facts,
       findings,
       resolvedFrom,
       verbose: options.verbose ?? false,
-      quiet: options.quiet ?? false
+      quiet: options.quiet ?? false,
+      colour
     });
+    stdout = text(options.colour === true);
+    if (options.colour === true) {
+      plain = text(false);
+    }
   }
   return {
     exitCode: exitCode(findings, config.failOn, options.failUnder),
-    stdout
+    stdout,
+    ...plain === undefined ? {} : { plain }
   };
 }
 
@@ -12950,6 +13099,7 @@ check options:
   --output <format>      human (default) | json | prompt
                          prompt: a paste-ready handoff for a fixing agent
   --copy                 Also copy the report to the system clipboard
+  --no-color             Never colour, even on a terminal (also: NO_COLOR=1)
   --quiet                Summary only
   --verbose              Show KEEP findings
   --fail-on <level>      never | warning | error (default: never)
@@ -12979,6 +13129,7 @@ async function main(argv) {
         json: { type: "boolean", default: false },
         output: { type: "string" },
         copy: { type: "boolean", default: false },
+        "no-color": { type: "boolean", default: false },
         quiet: { type: "boolean", default: false },
         verbose: { type: "boolean", default: false },
         "fail-on": { type: "string" },
@@ -13045,11 +13196,16 @@ async function main(argv) {
           failOn: failOnRaw,
           ...failUnder === undefined ? {} : { failUnder },
           global: values.global,
-          configPath: values.config
+          configPath: values.config,
+          colour: shouldColour({
+            isTTY: process.stdout.isTTY === true,
+            env: process.env,
+            noColorFlag: values["no-color"]
+          })
         });
         process.stdout.write(result.stdout);
         if (values.copy === true) {
-          const copied = await copyToClipboard(result.stdout);
+          const copied = await copyToClipboard(result.plain ?? result.stdout);
           process.stderr.write(copied.ok ? `Copied to clipboard via ${copied.tool}.
 ` : `Could not copy: ${safe(copied.reason)}. Redirect instead: agentscan check > report.md
 `);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@chimix/agentscan",
-  "version": "0.2.1",
+  "version": "0.4.0",
   "description": "Find broken agent configuration in a project — hooks whose scripts are gone, MCP servers that cannot start, skills that disagree with their lockfile",
   "type": "module",
   "bin": {