@qasshq/qass 0.1.2 → 0.1.3

package/dist/server/dashboard-server.js

@@ -0,0 +1,212 @@
+import { createServer } from "node:http";
+import { readFile, readdir } from "node:fs/promises";
+import { join, resolve } from "node:path";
+import { loadConfig } from "../core/config.js";
+import { runTests } from "../core/runner.js";
+import { checkLicense } from "../core/license.js";
+import { getTelemetryStatus, readLocalUsage } from "../core/telemetry.js";
+export async function startDashboardServer(opts) {
+    let running = false;
+    let lastRun = {
+        state: "idle",
+    };
+    const server = createServer(async (req, res) => {
+        const sendJson = (status, body) => {
+            res.writeHead(status, { "Content-Type": "application/json; charset=utf-8" });
+            res.end(JSON.stringify(body));
+        };
+        try {
+            if (!req.url)
+                return sendJson(400, { error: "Invalid request" });
+            const url = new URL(req.url, "http://localhost");
+            if (url.pathname === "/") {
+                res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
+                res.end(renderDashboardHtml());
+                return;
+            }
+            if (url.pathname === "/api/status") {
+                const [license, telemetry] = await Promise.all([
+                    checkLicense(),
+                    getTelemetryStatus(),
+                ]);
+                return sendJson(200, { license, telemetry, lastRun });
+            }
+            if (url.pathname === "/api/report") {
+                const reportPath = resolve(opts.projectPath, ".qass", "results", "latest.json");
+                const raw = await readFile(reportPath, "utf-8").catch(() => "{}");
+                return sendJson(200, JSON.parse(raw));
+            }
+            if (url.pathname === "/api/usage") {
+                const usage = await readLocalUsage(opts.projectPath);
+                return sendJson(200, usage ?? { message: "No usage data yet." });
+            }
+            if (url.pathname === "/api/business") {
+                const [license, usage, telemetry, reportRaw] = await Promise.all([
+                    checkLicense(),
+                    readLocalUsage(opts.projectPath),
+                    getTelemetryStatus(),
+                    readFile(resolve(opts.projectPath, ".qass", "results", "latest.json"), "utf-8").catch(() => "{}"),
+                ]);
+                const report = JSON.parse(reportRaw);
+                const runs = usage?.totals?.runs ?? 0;
+                const success = usage?.totals?.success ?? 0;
+                const failed = usage?.totals?.failed ?? 0;
+                const successRate = runs > 0 ? Number(((success / runs) * 100).toFixed(1)) : 0;
+                const automationCoverage = runs > 0
+                    ? Number(((((usage?.commands?.scan?.runs ?? 0) + (usage?.commands?.test?.runs ?? 0)) / runs) *
+                        100).toFixed(1))
+                    : 0;
+                const high = report.securityFindings?.filter((f) => f.severity === "HIGH").length ?? 0;
+                const medium = report.securityFindings?.filter((f) => f.severity === "MEDIUM").length ?? 0;
+                const low = report.securityFindings?.filter((f) => f.severity === "LOW").length ?? 0;
+                return sendJson(200, {
+                    plan: license.plan,
+                    validLicense: license.valid,
+                    totalRuns: runs,
+                    successfulRuns: success,
+                    failedRuns: failed,
+                    successRate,
+                    automationCoverage,
+                    findingsPressure: { high, medium, low },
+                    endpointConfigured: telemetry.endpointConfigured,
+                    summary: {
+                        passedTests: report.summary?.passed ?? 0,
+                        failedTests: report.summary?.failed ?? 0,
+                        totalFindings: report.summary?.securityFindings ?? 0,
+                    },
+                    recommendations: [
+                        automationCoverage < 70
+                            ? "Increase automated scan/test usage after each change."
+                            : "Automation coverage is strong.",
+                        high > 0
+                            ? "Resolve HIGH findings before release."
+                            : "No HIGH security findings detected.",
+                        !telemetry.endpointConfigured
+                            ? "Set QASS_TELEMETRY_ENDPOINT for centralized team/business dashboards."
+                            : "Remote telemetry endpoint configured.",
+                    ],
+                });
+            }
+            if (url.pathname === "/api/screenshots") {
+                const shotDir = resolve(opts.projectPath, ".qass", "results", "screenshots");
+                const files = await readdir(shotDir).catch(() => []);
+                return sendJson(200, files.map((f) => ({ name: f, path: join(".qass", "results", "screenshots", f) })));
+            }
+            if (url.pathname === "/api/run" && req.method === "POST") {
+                if (running)
+                    return sendJson(409, { error: "A run is already in progress." });
+                const chunks = [];
+                for await (const chunk of req)
+                    chunks.push(Buffer.from(chunk));
+                const payload = chunks.length
+                    ? JSON.parse(Buffer.concat(chunks).toString("utf-8"))
+                    : {};
+                const type = payload.type === "scan" ? "security" : "all";
+                running = true;
+                lastRun = { state: "running", type: payload.type ?? "test", startedAt: new Date().toISOString() };
+                try {
+                    const config = await loadConfig(opts.projectPath);
+                    await runTests(config, opts.projectPath, payload.diff ?? "HEAD", type, Boolean(payload.full));
+                    lastRun = { state: "idle", type: payload.type ?? "test", startedAt: new Date().toISOString() };
+                    return sendJson(200, { ok: true });
+                }
+                finally {
+                    running = false;
+                }
+            }
+            sendJson(404, { error: "Not found" });
+        }
+        catch (e) {
+            sendJson(500, { error: e instanceof Error ? e.message : "Unknown error" });
+        }
+    });
+    await new Promise((resolveStart) => {
+        server.listen(opts.port, "127.0.0.1", () => resolveStart());
+    });
+    return server;
+}
+function renderDashboardHtml() {
+    return `<!doctype html>
+<html>
+<head>
+  <meta charset="utf-8" />
+  <meta name="viewport" content="width=device-width,initial-scale=1" />
+  <title>QASS Dashboard</title>
+  <style>
+    body { font-family: Inter, Arial, sans-serif; background:#0b0b0b; color:#e8e8e8; margin:0; }
+    .wrap { max-width: 1100px; margin: 0 auto; padding: 24px; }
+    .row { display:flex; gap:12px; flex-wrap:wrap; margin-bottom:16px; }
+    button { background:#00ff88; border:none; color:#000; padding:10px 14px; border-radius:8px; font-weight:700; cursor:pointer; }
+    .card { background:#111; border:1px solid #222; border-radius:12px; padding:16px; margin-bottom:12px; }
+    .kpis { display:grid; grid-template-columns:repeat(auto-fit,minmax(170px,1fr)); gap:10px; margin-bottom:12px; }
+    .kpi { background:#0f0f0f; border:1px solid #202020; border-radius:10px; padding:10px; }
+    .kpi .label { color:#8f8f8f; font-size:11px; text-transform:uppercase; letter-spacing:.5px; }
+    .kpi .value { font-size:22px; font-weight:800; margin-top:4px; }
+    .green { color:#00ff88; }
+    .yellow { color:#ffcc66; }
+    .red { color:#ff6666; }
+    pre { white-space:pre-wrap; word-break:break-word; color:#bdbdbd; }
+    .muted { color:#888; font-size:12px; }
+  </style>
+</head>
+<body>
+  <div class="wrap">
+    <h1>QASS Dashboard</h1>
+    <p class="muted">Automation-first CLI with visual observability.</p>
+    <div class="row">
+      <button onclick="run('scan')">Run Security Scan</button>
+      <button onclick="run('test')">Run Full Test</button>
+      <button onclick="refreshAll()">Refresh</button>
+    </div>
+    <div class="card">
+      <h3>Business Snapshot</h3>
+      <div class="kpis">
+        <div class="kpi"><div class="label">Plan</div><div class="value" id="kpiPlan">-</div></div>
+        <div class="kpi"><div class="label">Runs</div><div class="value" id="kpiRuns">0</div></div>
+        <div class="kpi"><div class="label">Success Rate</div><div class="value green" id="kpiSuccess">0%</div></div>
+        <div class="kpi"><div class="label">Automation Coverage</div><div class="value yellow" id="kpiAuto">0%</div></div>
+        <div class="kpi"><div class="label">Open High Findings</div><div class="value red" id="kpiHigh">0</div></div>
+        <div class="kpi"><div class="label">Failed Tests</div><div class="value red" id="kpiFailed">0</div></div>
+      </div>
+      <pre id="business"></pre>
+    </div>
+    <div class="card"><h3>Status</h3><pre id="status"></pre></div>
+    <div class="card"><h3>Latest Report</h3><pre id="report"></pre></div>
+    <div class="card"><h3>Usage</h3><pre id="usage"></pre></div>
+    <div class="card"><h3>Screenshots</h3><pre id="shots"></pre></div>
+  </div>
+<script>
+async function get(path) {
+  const res = await fetch(path);
+  return await res.json();
+}
+async function run(type) {
+  await fetch('/api/run', { method:'POST', headers:{'Content-Type':'application/json'}, body: JSON.stringify({ type }) });
+  await refreshAll();
+}
+async function refreshAll() {
+  const [status, report, usage, shots, business] = await Promise.all([
+    get('/api/status'),
+    get('/api/report'),
+    get('/api/usage'),
+    get('/api/screenshots'),
+    get('/api/business')
+  ]);
+  document.getElementById('kpiPlan').textContent = String(business.plan || '-').toUpperCase();
+  document.getElementById('kpiRuns').textContent = String(business.totalRuns || 0);
+  document.getElementById('kpiSuccess').textContent = String((business.successRate || 0) + '%');
+  document.getElementById('kpiAuto').textContent = String((business.automationCoverage || 0) + '%');
+  document.getElementById('kpiHigh').textContent = String(business.findingsPressure?.high || 0);
+  document.getElementById('kpiFailed').textContent = String(business.summary?.failedTests || 0);
+  document.getElementById('business').textContent = JSON.stringify(business, null, 2);
+  document.getElementById('status').textContent = JSON.stringify(status, null, 2);
+  document.getElementById('report').textContent = JSON.stringify(report, null, 2);
+  document.getElementById('usage').textContent = JSON.stringify(usage, null, 2);
+  document.getElementById('shots').textContent = JSON.stringify(shots, null, 2);
+}
+refreshAll();
+</script>
+</body>
+</html>`;
+}
+//# sourceMappingURL=dashboard-server.js.map

package/dist/server/dashboard-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dashboard-server.js","sourceRoot":"","sources":["../../src/server/dashboard-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAO1E,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAAkB;IAC3D,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,OAAO,GAAqE;QAC9E,KAAK,EAAE,MAAM;KACd,CAAC;IAEF,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC7C,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAE,IAAa,EAAE,EAAE;YACjD,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,iCAAiC,EAAE,CAAC,CAAC;YAC7E,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QAChC,CAAC,CAAC;QAEF,IAAI,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,GAAG;gBAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;YACjE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;YAEjD,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,EAAE,CAAC;gBACzB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;gBACnE,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC,CAAC;gBAC/B,OAAO;YACT,CAAC;YAED,IAAI,GAAG,CAAC,QAAQ,KAAK,aAAa,EAAE,CAAC;gBACnC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;oBAC7C,YAAY,EAAE;oBACd,kBAAkB,EAAE;iBACrB,CAAC,CAAC;gBACH,OAAO,QAAQ,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;YACxD,CAAC;YAED,IAAI,GAAG,CAAC,QAAQ,KAAK,aAAa,EAAE,CAAC;gBACnC,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;gBAChF,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;gBAClE,OAAO,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YACxC,CAAC;YAED,IAAI,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;gBAClC,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBACrD,OAAO,QAAQ,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,CAAC;YACnE,CAAC;YAED,IAAI,GAAG,CAAC,QAAQ,KAAK,eAAe,EAAE,CAAC;gBACrC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;oBAC/D,YAAY,EAAE;oBACd,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC;oBAChC,kBAAkB,EAAE;oBACpB,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,CAAC,EAAE,OAAO,CAAC,CAAC,KAAK,CACnF,GAAG,EAAE,CAAC,IAAI,CACX;iBACF,CAAC,CAAC;gBAEH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAGlC,CAAC;gBAEF,MAAM,IAAI,GAAG,KAAK,EAAE,MAAM,EAAE,IAAI,IAAI,CAAC,CAAC;gBACtC,MAAM,OAAO,GAAG,KAAK,EAAE,MAAM,EAAE,OAAO,IAAI,CAAC,CAAC;gBAC5C,MAAM,MAAM,GAAG,KAAK,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC,CAAC;gBAC1C,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC/E,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;oBACjC,CAAC,CAAC,MAAM,CACJ,CACE,CAAC,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;wBAClF,GAAG,CACJ,CAAC,OAAO,CAAC,CAAC,CAAC,CACb;oBACH,CAAC,CAAC,CAAC,CAAC;gBACN,MAAM,IAAI,GAAG,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;gBACvF,MAAM,MAAM,GAAG,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;gBAC3F,MAAM,GAAG,GAAG,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;gBAErF,OAAO,QAAQ,CAAC,GAAG,EAAE;oBACnB,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,YAAY,EAAE,OAAO,CAAC,KAAK;oBAC3B,SAAS,EAAE,IAAI;oBACf,cAAc,EAAE,OAAO;oBACvB,UAAU,EAAE,MAAM;oBAClB,WAAW;oBACX,kBAAkB;oBAClB,gBAAgB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE;oBACvC,kBAAkB,EAAE,SAAS,CAAC,kBAAkB;oBAChD,OAAO,EAAE;wBACP,WAAW,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC;wBACxC,WAAW,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC;wBACxC,aAAa,EAAE,MAAM,CAAC,OAAO,EAAE,gBAAgB,IAAI,CAAC;qBACrD;oBACD,eAAe,EAAE;wBACf,kBAAkB,GAAG,EAAE;4BACrB,CAAC,CAAC,uDAAuD;4BACzD,CAAC,CAAC,gCAAgC;wBACpC,IAAI,GAAG,CAAC;4BACN,CAAC,CAAC,uCAAuC;4BACzC,CAAC,CAAC,qCAAqC;wBACzC,CAAC,SAAS,CAAC,kBAAkB;4BAC3B,CAAC,CAAC,uEAAuE;4BACzE,CAAC,CAAC,uCAAuC;qBAC5C;iBACF,CAAC,CAAC;YACL,CAAC;YAED,IAAI,GAAG,CAAC,QAAQ,KAAK,kBAAkB,EAAE,CAAC;gBACxC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;gBAC7E,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;gBACrD,OAAO,QAAQ,CACb,GAAG,EACH,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAClF,CAAC;YACJ,CAAC;YAED,IAAI,GAAG,CAAC,QAAQ,KAAK,UAAU,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBACzD,IAAI,OAAO;oBAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC,CAAC;gBAC9E,MAAM,MAAM,GAAa,EAAE,CAAC;gBAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG;oBAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC/D,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM;oBAC3B,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAIjD;oBACJ,CAAC,CAAC,EAAE,CAAC;gBAEP,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC;gBAC1D,OAAO,GAAG,IAAI,CAAC;gBACf,OAAO,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,MAAM,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;gBAElG,IAAI,CAAC;oBACH,MAAM,MAAM,GAAe,MAAM,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;oBAC9D,MAAM,QAAQ,CACZ,MAAM,EACN,IAAI,CAAC,WAAW,EAChB,OAAO,CAAC,IAAI,IAAI,MAAM,EACtB,IAAI,EACJ,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CACtB,CAAC;oBACF,OAAO,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,MAAM,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;oBAC/F,OAAO,QAAQ,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;gBACrC,CAAC;wBAAS,CAAC;oBACT,OAAO,GAAG,KAAK,CAAC;gBAClB,CAAC;YACH,CAAC;YAED,QAAQ,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,QAAQ,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,OAAO,CAAO,CAAC,YAAY,EAAE,EAAE;QACvC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,mBAAmB;IAC1B,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAiFD,CAAC;AACT,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@qasshq/qass",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "QA + Security Scanner for vibe-coded applications. Your AI writes code. QASS catches what it got wrong.",
   "type": "module",
   "bin": {
@@ -15,7 +15,13 @@
     "dev": "tsx src/cli.ts",
     "build": "tsc",
     "start": "node dist/cli.js",
-    "test": "vitest run"
+    "test": "vitest run",
+    "ui": "tsx src/cli.ts ui --project .",
+    "doctor": "tsx src/cli.ts doctor --project .",
+    "prepublishOnly": "npm run build"
+  },
+  "publishConfig": {
+    "access": "public"
   },
   "keywords": [
     "qa",