codebase-ai 0.1.0 → 0.1.2

package/commands/review.md

@@ -67,7 +67,7 @@ Follow the complete `/vb-review` workflow across all phases:
 
 - **Phase 0** — Scope (`--pr N` or full codebase)
 - **Phase 1** — Security Review (OWASP top 10, CVEs, secrets, auth/authz)
-- **Phase 2** — Quality Review (CLAUDE.md conventions, dead code, lint, complexity)
+- **Phase 2** — Quality Review (CLAUDE.md conventions, dead code, lint, complexity, defensive programming, minimal code)
 - **Phase 3** — Dependency Health (outdated, vulnerable, alternatives)
 - **Phase 4** — UI/Accessibility (contrast, ARIA, keyboard, responsive)
 - **Phase 5** — Consolidate & prioritize
@@ -147,4 +147,60 @@ Auto-fix:      [yes | no]
 ════════════════════════════════════════════════════════
 ```
 
-All other behavior (security agent prompts, quality rules, CVE research, accessibility checks, test generation) follows the `/vb-review` specification exactly.
+All other behavior (security agent prompts, CVE research, accessibility checks, test generation) follows the `/vb-review` specification exactly.
+
+---
+
+## Phase 2 — Quality Review (Extended Rules)
+
+The quality agent must check the following **in addition** to the base `/vb-review` quality rules.
+
+### Defensive Programming
+
+Check every function, method, and handler for:
+
+- **Missing guard clauses** — function body has deep nesting where an early return/throw would flatten it. Flag any function with 3+ levels of nesting that could use guard clauses.
+- **Missing input validation at boundaries** — functions that accept external input (API params, user input, env vars, CLI args, file reads) without validating type, range, or presence before use.
+- **Unchecked null/undefined** — property access on values that could be null/undefined without a prior check (e.g. `user.name` where `user` could be null).
+- **Silent failures** — empty `catch` blocks, `.catch(() => {})`, swallowed errors with no logging or rethrow. Every error boundary must either handle, log, or rethrow.
+- **Missing error handling at I/O boundaries** — file reads, network calls, subprocess exec, DB queries with no error handling.
+- **Optimistic assumptions** — code that assumes an array is non-empty before indexing, assumes a map key exists before accessing, or assumes an async call always resolves.
+- **No fail-fast** — configuration or required env vars read lazily (mid-request) instead of validated at startup, so failures surface late and with poor context.
+
+Severity guide:
+- `high` — missing validation on external input, unchecked null on a hot path, silent catch hiding errors
+- `medium` — deep nesting fixable with guard clauses, missing fail-fast for config
+- `low` — optimistic array/map access in low-risk paths
+
+### Minimal Code
+
+Check for over-engineering and unnecessary complexity:
+
+- **YAGNI violations** — abstractions, interfaces, config options, or generics added for hypothetical future use that have exactly one concrete caller/case today.
+- **Premature abstraction** — a helper/utility/class created for code used in only one place. Three similar lines of code is better than a one-use abstraction.
+- **Over-parameterization** — functions with options objects or boolean flags that only ever receive the same values. Flags that were never flipped from their default since they were added.
+- **Unnecessary indirection** — wrapper functions that do nothing but call another function with the same signature.
+- **Dead feature flags** — flags/toggles that are always `true` or always `false` in all environments; can just be removed.
+- **Backwards-compatibility shims for internal code** — deprecated aliases, re-exports, or `_unused` renames for code that has no external consumers.
+- **Excessive comments explaining obvious code** — comments that restate what the code already says clearly (e.g. `// increment counter` above `count++`). Flag only; do not auto-fix.
+- **Over-engineered error messages** — error classes with elaborate hierarchies for a project that throws 2-3 distinct error types.
+
+Severity guide:
+- `medium` — YAGNI abstractions, over-parameterization, unnecessary indirection
+- `low` — dead flags, excessive comments, minor shims
+
+### Code Simplicity Principles
+
+- **Flat over nested** — prefer early returns, guard clauses, and linear flow over pyramid/callback-hell structures.
+- **Explicit over clever** — flag code that uses obscure language tricks, complex one-liners, or metaprogramming where a simple loop/condition would be clearer.
+- **Consistent patterns** — same operation done differently in 2+ places (e.g. one place uses `?.` optional chaining, another uses explicit null check for the same pattern). Flag the inconsistency; suggest unifying to the simpler form.
+- **Functions do one thing** — flag functions that mix concerns (e.g. validate + transform + persist in one function body >30 lines with no clear single responsibility).
+
+Severity guide:
+- `medium` — mixed concerns in large functions, inconsistent patterns across the codebase
+- `low` — clever one-liners, minor style inconsistencies
+
+### Auto-fixable vs Architectural
+
+- **Auto-fixable (`--fix`)**: guard clause refactors (simple cases), removing empty catch blocks (replace with `// TODO: handle error`), removing dead flags set to constant values, removing unused re-exports.
+- **Architectural (create issue, no auto-fix)**: adding input validation that requires schema/type decisions, restructuring mixed-concern functions, replacing premature abstractions (requires understanding callers).

package/commands/setup.md

@@ -171,10 +171,65 @@ Mark genuinely unknown sections with `[INFERRED: ...]`.
 
 **Never hardcode example industries, roles, or countries** — infer from codebase or ask the user.
 
-Commit:
+---
+
+## Step 7 — CLAUDE.md
+
+Write (or update) `CLAUDE.md` for this specific project. Read `.codebase.json` and the codebase structure to produce a file that is genuinely useful to an AI starting a fresh session on this project.
+
+**If `CLAUDE.md` already exists:** read it first. Preserve any existing sections. Only update the `<!-- codebase:start -->...<!-- codebase:end -->` block and add missing sections without removing human-authored content.
+
+**If `CLAUDE.md` does not exist:** generate it from scratch.
+
+The file must include these sections, tailored to the actual project:
+
+### Project Overview
+One paragraph describing what the project does, who it's for, and its current state (alpha/beta/production).
+
+### Build & Development Commands
+Exact commands from `.codebase.json` → `commands.*`. Include build, dev, test, lint, typecheck.
+
+### Architecture
+How the codebase is structured — key directories, entry points, data flow. Infer from `structure`, `patterns`, and file scanning. Be specific, not generic.
+
+### Key Conventions
+Language/framework conventions detected. Coding patterns observed. Things an AI must know to not break the codebase (e.g. "zero runtime dependencies", "no cross-module state", "all DB calls go through /lib/db").
+
+### Current Status
+From `.codebase.json` → `status`: open issues count, any blockers, active milestone. One short paragraph.
+
+### Vibekit Workflow
+Always include this verbatim at the end (before the codebase injection block):
+
+```markdown
+## Vibekit Workflow
+
+```
+/simulate → /build → /launch
+```
+
+- `/simulate` — Playwright customer journeys find & fix bugs inline. Creates GitHub issues for arch problems.
+- `/build` — Implements architectural issues autonomously. Runs until all `arch`+`vibekit` issues are closed.
+- `/launch` — Gates on open bugs, generates GTM artifacts, creates GitHub release, merges to main.
+
+### Browser Automation (agent-browser)
+
+Commands: `open <url>`, `snapshot -i` (→ `@e1`/`@e2` refs), `click @e1`, `fill @e2 "text"`, `screenshot`, `auth save/login <profile>`, `state save/load <name>`.
+```
+
+After writing CLAUDE.md, re-run the codebase injection to ensure the context block is up to date:
+
+```bash
+npx codebase init --quiet 2>/dev/null || true
+```
+
+---
+
+## Step 8 — Commit
+
 ```bash
 git checkout develop 2>/dev/null || git checkout -b develop
-git add docs/PRODUCT.md .vibekit/ .gitignore 2>/dev/null || true
+git add docs/PRODUCT.md CLAUDE.md .vibekit/ .gitignore 2>/dev/null || true
 git diff --cached --quiet || git commit -m "chore: bootstrap codebase + vibekit setup
 
 Initialized by /setup"
@@ -182,7 +237,7 @@ Initialized by /setup"
 
 ---
 
-## Step 7 — Summary
+## Step 9 — Summary
 
 ```
 /setup COMPLETE
@@ -192,6 +247,7 @@ GitHub labels:       13 ready
 Milestone:           v0.1 (#N)
 Highlights Index:    #N
 docs/PRODUCT.md:     [generated | updated]
+CLAUDE.md:           [generated | updated]
 Branch:              develop
 Claude hooks:        git-guard + git-post active
 

package/dist/index.js

@@ -174,6 +174,17 @@ Returns: project identity, tech stack, commands, structure, current status, next
 - **Check \`next\` before starting work** \u2014 don't duplicate in-progress tasks
 - **Create issues for bugs/TODOs you find** \u2014 keep the project brain alive
 - **Close issues when you fix them** \u2014 with a reason so the team knows why
+
+### Vibekit Workflow
+\`\`\`
+/simulate \u2192 /build \u2192 /launch
+\`\`\`
+- \`/simulate\` \u2014 Playwright customer journeys find & fix bugs inline. Creates GitHub issues for arch problems.
+- \`/build\` \u2014 Implements architectural issues autonomously. Runs until all \`arch\`+\`vibekit\` issues are closed.
+- \`/launch\` \u2014 Gates on open bugs, generates GTM artifacts, creates GitHub release, merges to main.
+
+### Browser Automation (agent-browser)
+Commands: \`open <url>\`, \`snapshot -i\` (\u2192 \`@e1\`/\`@e2\` refs), \`click @e1\`, \`fill @e2 "text"\`, \`screenshot\`, \`auth save/login <profile>\`, \`state save/load <name>\`.
 ${ie}`}function bs(e,t){return rt(Le(e,t))}function ys(e,t){let s=Le(e,t),n=rt(s)?ot(s,"utf-8"):"";if(n.includes(be)){let i=n.indexOf(be),o=n.indexOf(ie);i!==-1&&o!==-1&&(n=n.slice(0,i)+n.slice(o+ie.length),n=n.replace(/\n{3,}/g,`
 
 `).trimEnd())}hs(s,n.trimEnd()+`
@@ -208,6 +219,17 @@ Returns: project identity, tech stack, commands, structure, current status, next
 - **Check \`next\` before starting work** \u2014 don't duplicate in-progress tasks
 - **Create issues for bugs/TODOs you find** \u2014 keep the project brain alive
 - **Close issues when you fix them** \u2014 with a reason so the team knows why
+
+### Vibekit Workflow
+\`\`\`
+/simulate \u2192 /build \u2192 /launch
+\`\`\`
+- \`/simulate\` \u2014 Playwright customer journeys find & fix bugs inline. Creates GitHub issues for arch problems.
+- \`/build\` \u2014 Implements architectural issues autonomously. Runs until all \`arch\`+\`vibekit\` issues are closed.
+- \`/launch\` \u2014 Gates on open bugs, generates GTM artifacts, creates GitHub release, merges to main.
+
+### Browser Automation (agent-browser)
+Commands: \`open <url>\`, \`snapshot -i\` (\u2192 \`@e1\`/\`@e2\` refs), \`click @e1\`, \`fill @e2 "text"\`, \`screenshot\`, \`auth save/login <profile>\`, \`state save/load <name>\`.
 ${ie}`,ac=`
 ${fo}
 # Project Context (auto-generated by codebase)
@@ -258,7 +280,7 @@ ${s}
 ${ke}
 ${s}
 `,"utf-8");Cs(i,493)}var ke,js,He=$(()=>{"use strict";ke="# codebase-auto-update";js="# codebase-pre-commit"});var dt={};yt(dt,{installClaudeCommandsForFix:()=>Eo,installClaudeHooksForFix:()=>So,runSetup:()=>ut});import{resolve as xo,dirname as $o,join as A}from"path";import{writeFileSync as Q,existsSync as J,mkdirSync as Ge,readFileSync as ue,chmodSync as lt,readdirSync as Co,copyFileSync as Es}from"fs";import{execFile as le}from"child_process";async function ut(e){let t=xo(e.path);await Me({...e,sync:!0}),j("Claude Code Integration"),J(A(t,"CLAUDE.md"))||Q(A(t,"CLAUDE.md"),`# Project Rules
-`,"utf-8"),V.inject(t),h("CLAUDE.md - added .codebase.json reference"),j("Git Hooks"),ce(t,!1)?(h("post-commit hook (auto-updates .codebase.json)"),h("pre-commit hook (runs typecheck + lint before every commit)"),Ro(t),h("commit-msg hook (blocks direct commits to main/master)")):y("Not a git repository - skipping hooks"),j("Claude Code Hooks"),Rs(t),j("Browser Automation"),await Po(),j("Claude Commands"),await Do()?Ss(t):(S("Claude Code CLI not detected \u2014 skipping slash commands"),S("Install Claude Code then re-run: codebase setup")),oe(t),_o(t,[".vibekit/daemon.lock",".vibekit/daemon.log",".vibekit/build.lock"]),h(".gitignore updated"),j("Vibekit Bootstrap");let i=A(t,".vibekit");J(i)?y(".vibekit/ already exists"):(Ge(i,{recursive:!0}),h(".vibekit/ directory created")),j("GitHub Labels"),await Oo()?(await Ao(t),await Io(t)):(S("gh CLI not authenticated \u2014 skipping label/issue setup"),S("Run: gh auth login  then  codebase setup")),j("Product Brief");let r=A(t,"docs");J(r)||Ge(r,{recursive:!0});let a=A(r,"PRODUCT.md");J(a)?y("docs/PRODUCT.md already exists \u2014 skipping (delete to regenerate)"):(No(t,a),h("docs/PRODUCT.md generated \u2014 review and fill in [INFERRED] sections")),l(`
+`,"utf-8"),V.inject(t),h("CLAUDE.md - added .codebase.json reference"),j("Git Hooks"),ce(t,!1)?(h("post-commit hook (auto-updates .codebase.json)"),h("pre-commit hook (runs typecheck + lint before every commit)"),Ro(t),h("commit-msg hook (blocks direct commits to main/master)")):y("Not a git repository - skipping hooks"),j("Claude Code Hooks"),Rs(t),j("Browser Automation"),await Po(),j("Claude Commands"),await Do()?Ss(t):(S("Claude Code CLI not detected \u2014 skipping slash commands"),S("Install Claude Code then re-run: codebase setup")),oe(t),_o(t,[".vibekit/daemon.lock",".vibekit/daemon.log",".vibekit/build.lock",".vibekit/milestone.env",".mcp.json"]),h(".gitignore updated"),j("Vibekit Bootstrap");let i=A(t,".vibekit");J(i)?y(".vibekit/ already exists"):(Ge(i,{recursive:!0}),h(".vibekit/ directory created")),j("GitHub Labels"),await Oo()?(await Ao(t),await Io(t)):(S("gh CLI not authenticated \u2014 skipping label/issue setup"),S("Run: gh auth login  then  codebase setup")),j("Product Brief");let r=A(t,"docs");J(r)||Ge(r,{recursive:!0});let a=A(r,"PRODUCT.md");J(a)?y("docs/PRODUCT.md already exists \u2014 skipping (delete to regenerate)"):(No(t,a),h("docs/PRODUCT.md generated \u2014 review and fill in [INFERRED] sections")),l(`
 Done! Your project is wired for AI + autonomous loop.`),l(`
   1. Review docs/PRODUCT.md and fill in any [INFERRED] sections`),l("  2. /simulate   \u2014 AI customer journeys find & fix bugs"),l("  3. /build      \u2014 implement architectural issues autonomously"),l("  4. /launch     \u2014 gate check, release, merge to main")}function Eo(e){Ss(e)}function Ss(e){let t=A($o(new URL(import.meta.url).pathname),"..","commands");if(!J(t)){S("Claude commands not found in package \u2014 skipping");return}let s=A(e,".claude","commands");Ge(s,{recursive:!0});let n=Co(t).filter(c=>c.endsWith(".md")),i=0,o=0,r=0;for(let c of n){let u=A(t,c),g=A(s,c);if(J(g)){let f=ue(u,"utf-8"),p=ue(g,"utf-8");f!==p?(Es(u,g),o++):r++}else Es(u,g),i++}let a=[];i>0&&a.push(`${i} new`),o>0&&a.push(`${o} updated`),r>0&&a.push(`${r} unchanged`),i>0||o>0?(h(`Claude commands installed \u2192 .claude/commands/ (${a.join(", ")})`),y("Available: /setup /simulate /build /launch /review"),y("Tip: commit .claude/commands/ to share these with your team")):y(`All ${r} Claude commands up to date`)}function So(e){Rs(e)}function Rs(e){let t=A(e,".claude","hooks");Ge(t,{recursive:!0});let s=A(t,"git-guard.sh");Q(s,`#!/bin/bash
 # codebase git-guard \u2014 PreToolUse hook
@@ -495,7 +517,7 @@ ${v("SEE ALSO")}
 `:""}${v("MORE HELP")}
   ${k("codebase --help")}  Show all commands
   ${_e("https://github.com/your-repo/codebase/docs","Full documentation")}
-`)}var sa={E_NO_GIT:{message:"Not a git repository",suggestion:"Initialize git first: "+k("git init")},E_NO_PACKAGE_JSON:{message:"No package.json found",suggestion:"Initialize project: "+k("npm init")+" or "+k("pnpm init")},E_GH_NOT_AUTHENTICATED:{message:"GitHub CLI not authenticated",suggestion:"Run: "+k("gh auth login")},E_MANIFEST_NOT_FOUND:{message:".codebase.json not found",suggestion:"Run: "+k("codebase init")+" to generate it"},E_INVALID_PATH:{message:"Invalid directory path",suggestion:"Use absolute path or path relative to current directory"},E_PERMISSION_DENIED:{message:"Permission denied",suggestion:"Check file permissions or run with appropriate access"}};var rn={command:"scan",subcommand:"",positionals:[],path:process.cwd(),format:"text",depth:4,categories:[],incremental:!1,quiet:!1,raw:!1,verbose:!1,port:7432,tools:[],dryRun:!1,since:"",sync:!1,message:"",reason:"",examples:!1,helpCommand:!1},xt=new Set(["scan","setup","query","mcp","issue","status","init","scan-only","brief","next","doctor","fix","release"]);function $t(e){let t={...rn},s=[];for(let n=0;n<e.length;n++){let i=e[n];if(!i.startsWith("-")&&xt.has(i)){if(t.command=i,e[n+1]==="--help"||e[n+1]==="-h")return t.helpCommand=!0,t;break}}for(let n=0;n<e.length;n++){let i=e[n];if((i==="--help"||i==="-h")&&!t.command&&(vt(),process.exit(0)),(i==="--version"||i==="-v")&&(console.log("codebase 0.1.0"),process.exit(0)),i.startsWith("--")){let o=i.slice(2);if(o==="quiet"||o==="q"){t.quiet=!0;continue}if(o==="raw"){t.raw=!0;continue}if(o==="verbose"||o==="V"){t.verbose=!0;continue}if(o==="incremental"){t.incremental=!0;continue}if(o==="dry-run"){t.dryRun=!0;continue}if(o==="sync"){t.sync=!0;continue}if(o==="examples"){t.examples=!0;continue}if(o==="mine"){s.push("mine");continue}let r=e[n+1];if(!r||r.startsWith("--"))continue;n++,o==="path"?t.path=r:o==="format"?t.format=r:o==="depth"?t.depth=parseInt(r,10)||4:o==="categories"?t.categories=r.split(",").map(a=>a.trim()):o==="port"?t.port=parseInt(r,10)||7432:o==="tools"?t.tools=r.split(",").map(a=>a.trim()):o==="since"?t.since=r:o==="message"||o==="m"?t.message=r:o==="reason"&&(t.reason=r);continue}s.push(i)}if(s.length>0&&xt.has(s[0])&&(t.command=s.shift()),s.length>0){let n=s[0];["install","uninstall","create","close","comment","list","map"].includes(n)&&(t.subcommand=s.shift())}return t.positionals=s,s.length>0&&/^[\/\.~]/.test(s[0])&&(t.path=s[0]),process.env.CODEBASE_OUTPUT&&(t.path=process.env.CODEBASE_OUTPUT),process.env.CODEBASE_PORT&&(t.port=parseInt(process.env.CODEBASE_PORT,10)||7432),process.env.CODEBASE_DEPTH&&(t.depth=parseInt(process.env.CODEBASE_DEPTH,10)||4),process.env.CODEBASE_QUIET==="true"&&(t.quiet=!0),t}function Ct(e){jt(e),process.exit(0)}I();it();Ue();he();import{resolve as qo,join as Je}from"path";import{existsSync as Ds,writeFileSync as Os,readFileSync as Mo}from"fs";import{execFile as Ps}from"child_process";import{writeFile as Lo}from"fs/promises";import{homedir as To}from"os";ye();var Fo=[V];function _s(e){return Fo.filter(t=>t.detect(e))}ye();Te();He();I();async function pt(e){U(e.quiet);let t=qo(e.path);j(`codebase \u2014 activating project intelligence
+`)}var sa={E_NO_GIT:{message:"Not a git repository",suggestion:"Initialize git first: "+k("git init")},E_NO_PACKAGE_JSON:{message:"No package.json found",suggestion:"Initialize project: "+k("npm init")+" or "+k("pnpm init")},E_GH_NOT_AUTHENTICATED:{message:"GitHub CLI not authenticated",suggestion:"Run: "+k("gh auth login")},E_MANIFEST_NOT_FOUND:{message:".codebase.json not found",suggestion:"Run: "+k("codebase init")+" to generate it"},E_INVALID_PATH:{message:"Invalid directory path",suggestion:"Use absolute path or path relative to current directory"},E_PERMISSION_DENIED:{message:"Permission denied",suggestion:"Check file permissions or run with appropriate access"}};var rn={command:"scan",subcommand:"",positionals:[],path:process.cwd(),format:"text",depth:4,categories:[],incremental:!1,quiet:!1,raw:!1,verbose:!1,port:7432,tools:[],dryRun:!1,since:"",sync:!1,message:"",reason:"",examples:!1,helpCommand:!1},xt=new Set(["scan","setup","query","mcp","issue","status","init","scan-only","brief","next","doctor","fix","release"]);function $t(e){let t={...rn},s=[];for(let n=0;n<e.length;n++){let i=e[n];if(!i.startsWith("-")&&xt.has(i)){if(t.command=i,e[n+1]==="--help"||e[n+1]==="-h")return t.helpCommand=!0,t;break}}for(let n=0;n<e.length;n++){let i=e[n];if((i==="--help"||i==="-h")&&!t.command&&(vt(),process.exit(0)),(i==="--version"||i==="-v")&&(console.log("codebase 0.1.2"),process.exit(0)),i.startsWith("--")){let o=i.slice(2);if(o==="quiet"||o==="q"){t.quiet=!0;continue}if(o==="raw"){t.raw=!0;continue}if(o==="verbose"||o==="V"){t.verbose=!0;continue}if(o==="incremental"){t.incremental=!0;continue}if(o==="dry-run"){t.dryRun=!0;continue}if(o==="sync"){t.sync=!0;continue}if(o==="examples"){t.examples=!0;continue}if(o==="mine"){s.push("mine");continue}let r=e[n+1];if(!r||r.startsWith("--"))continue;n++,o==="path"?t.path=r:o==="format"?t.format=r:o==="depth"?t.depth=parseInt(r,10)||4:o==="categories"?t.categories=r.split(",").map(a=>a.trim()):o==="port"?t.port=parseInt(r,10)||7432:o==="tools"?t.tools=r.split(",").map(a=>a.trim()):o==="since"?t.since=r:o==="message"||o==="m"?t.message=r:o==="reason"&&(t.reason=r);continue}s.push(i)}if(s.length>0&&xt.has(s[0])&&(t.command=s.shift()),s.length>0){let n=s[0];["install","uninstall","create","close","comment","list","map"].includes(n)&&(t.subcommand=s.shift())}return t.positionals=s,s.length>0&&/^[\/\.~]/.test(s[0])&&(t.path=s[0]),process.env.CODEBASE_OUTPUT&&(t.path=process.env.CODEBASE_OUTPUT),process.env.CODEBASE_PORT&&(t.port=parseInt(process.env.CODEBASE_PORT,10)||7432),process.env.CODEBASE_DEPTH&&(t.depth=parseInt(process.env.CODEBASE_DEPTH,10)||4),process.env.CODEBASE_QUIET==="true"&&(t.quiet=!0),t}function Ct(e){jt(e),process.exit(0)}I();it();Ue();he();import{resolve as qo,join as Je}from"path";import{existsSync as Ds,writeFileSync as Os,readFileSync as Mo}from"fs";import{execFile as Ps}from"child_process";import{writeFile as Lo}from"fs/promises";import{homedir as To}from"os";ye();var Fo=[V];function _s(e){return Fo.filter(t=>t.detect(e))}ye();Te();He();I();async function pt(e){U(e.quiet);let t=qo(e.path);j(`codebase \u2014 activating project intelligence
 `);let s=await ve();s==="authenticated"?h("GitHub CLI \u2014 authenticated"):s==="not-authenticated"?(S("GitHub CLI installed but not logged in"),y("Run: gh auth login"),y("After login, re-run `npx codebase` for full GitHub integration\n")):(y("GitHub CLI not found \u2014 GitHub features disabled"),y(`To enable: brew install gh && gh auth login
 `));let n=s==="authenticated";l(`Scanning ${t}...`);let i=await z(t,{depth:e.depth,categories:e.categories.length?e.categories:void 0,quiet:e.quiet,sync:n});for(let[d,m]of Object.entries(i))d==="version"||d==="generated_at"||typeof m!="object"||m===null||h(`${Ho(d)} (${qe(d,m)})`);let o=Je(t,".codebase.json"),r=JSON.stringify(i,null,2);await Lo(o,r,"utf-8");let a=(Buffer.byteLength(r)/1024).toFixed(1);l(`
 Written: .codebase.json (${a} KB)`),j("AI Tool Integration");let c=_s(t),u=Go(),g=new Set(c.map(d=>d.name));for(let d of u)g.has(d.name)||(c.push(d),g.add(d.name));c.length===0?(y("No AI tool detected in project or system configs"),y("Creating CLAUDE.md as default (works with Claude Code, and readable by all tools)"),Os(Je(t,"CLAUDE.md"),`# Project Rules

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codebase-ai",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "One command. Every AI tool understands your project instantly.",
   "type": "module",
   "homepage": "https://github.com/ZySec-AI/codebase",