codehere 0.2.1 → 0.2.2

package/dist/monitoring.js

@@ -230,21 +230,11 @@ export function getMetrics() {
  * Format health status for display
  */
 export function formatHealthStatus(health) {
-    const statusIcon = {
-        healthy: '✓',
-        degraded: '⚠',
-        unhealthy: '✗',
-    }[health.status];
-    const statusColor = {
-        healthy: 'green',
-        degraded: 'yellow',
-        unhealthy: 'red',
-    }[health.status];
-    let output = `${statusIcon} System Status: ${health.status.toUpperCase()}\n\n`;
-    output += 'Component Checks:\n';
+    const statusIcon = health.status === 'healthy' ? '✓' : health.status === 'degraded' ? '!' : '✗';
+    let output = `  ${statusIcon} ${health.status.toUpperCase()}\n\n`;
     for (const [component, check] of Object.entries(health.checks)) {
-        const icon = check.status === 'ok' ? '✓' : check.status === 'warning' ? '⚠' : '✗';
-        output += `  ${icon} ${component}: ${check.message}\n`;
+        const icon = check.status === 'ok' ? '✓' : check.status === 'warning' ? '!' : '✗';
+        output += `  ${icon} ${component.padEnd(12)} ${check.message}\n`;
     }
     return output;
 }

package/dist/parallel-processor.js

@@ -9,14 +9,14 @@ import { encoding_for_model } from 'tiktoken';
 // Load .env
 config();
 const enc = encoding_for_model('gpt-3.5-turbo');
-const CHUNK_SIZE = 300;
+const CHUNK_SIZE = 2000; // ~500 tokens. OpenAI handles 8191 tokens per embedding.
 const OVERLAP = 50;
 // Rate limiting state
 let lastApiCallTime = 0;
 let apiCallCount = 0;
 let monthlyApiCallCount = 0;
-const MIN_DELAY_MS = 1500; // 1.5s between calls (40 calls/min = 1.5s)
-const MONTHLY_LIMIT = 1000; // Trial key limit
+const MIN_DELAY_MS = 200; // 200ms between calls (OpenAI allows 3000 RPM for embeddings)
+const MONTHLY_LIMIT = 50000; // OpenAI production limit is much higher
 /**
  * Rate-limited API call wrapper
  */
@@ -42,8 +42,8 @@ async function rateLimitedCall(fn) {
     catch (error) {
         // If rate limit error, wait longer and retry once
         if (error instanceof Error && error.message.includes('429')) {
-            console.log('Rate limit hit, waiting 60 seconds...');
-            await new Promise(resolve => setTimeout(resolve, 60000)); // Wait 1 minute
+            console.log('Rate limit hit, waiting 5 seconds...');
+            await new Promise(resolve => setTimeout(resolve, 5000));
             lastApiCallTime = Date.now();
             monthlyApiCallCount++;
             return await fn();
@@ -363,8 +363,8 @@ function findCodeFiles(dir) {
         const entries = readdirSync(dir, { withFileTypes: true });
         for (const entry of entries) {
             const fullPath = join(dir, entry.name);
-            // Skip node_modules, .git, etc.
-            if (entry.name.startsWith('.') || entry.name === 'node_modules' || entry.name === 'dist' || entry.name === 'build') {
+            // Skip build artifacts, caches, and hidden dirs
+            if (entry.name.startsWith('.') || entry.name === 'node_modules' || entry.name === 'dist' || entry.name === 'build' || entry.name === '.codehere-cache' || entry.name === '.codehere') {
                 continue;
             }
             if (entry.isDirectory()) {
@@ -444,6 +444,8 @@ async function embedTextLocal(text, retries = 3) {
         for (let attempt = 0; attempt < retries; attempt++) {
             try {
                 if (process.env.OPENAI_API_KEY) {
+                    const controller = new AbortController();
+                    const timeout = setTimeout(() => controller.abort(), 10000);
                     const response = await fetch('https://api.openai.com/v1/embeddings', {
                         method: 'POST',
                         headers: {
@@ -451,7 +453,9 @@ async function embedTextLocal(text, retries = 3) {
                             'Content-Type': 'application/json',
                         },
                         body: JSON.stringify({ input: text, model: 'text-embedding-3-small' }),
+                        signal: controller.signal,
                     });
+                    clearTimeout(timeout);
                     if (!response.ok)
                         throw new Error(`OpenAI embedding error: ${response.status}`);
                     const data = await response.json();

package/dist/presentation/cli/commands/status-command.js

@@ -239,27 +239,26 @@ export async function executeStatusCommand(options = {}) {
     }
     else {
         // Activity table
-        const col = (n, color) => {
-            const s = String(n);
-            return color && n > 0 ? color(s) : colors.dim(s);
+        // Pad number BEFORE applying color, so ANSI codes don't break alignment
+        const fmtNum = (n, color) => {
+            const padded = String(n).padStart(10);
+            return color && n > 0 ? color(padded) : colors.dim(padded);
         };
         const labelW = 12;
-        const numW = 10;
         const label = (s) => s.padEnd(labelW);
-        const num = (s) => s.padStart(numW);
-        const header = `  ${label('')}${num('Last 24h')}${num('This week')}${num('All time')}`;
+        const header = `  ${label('')}${'Last 24h'.padStart(10)}${'This week'.padStart(10)}${'All time'.padStart(10)}`;
         console.log(colors.dim(header));
-        console.log(colors.dim(`  ${'-'.repeat(labelW + numW * 3)}`));
-        console.log(`  ${label('Scans')}${num(col(s24.total))}${num(col(s7d.total))}${num(col(sAll.total))}`);
-        console.log(`  ${label('Blocked')}${num(col(s24.blocked, colors.red))}${num(col(s7d.blocked, colors.red))}${num(col(sAll.blocked, colors.red))}`);
+        console.log(colors.dim(`  ${'-'.repeat(labelW + 30)}`));
+        console.log(`  ${label('Scans')}${fmtNum(s24.total)}${fmtNum(s7d.total)}${fmtNum(sAll.total)}`);
+        console.log(`  ${label('Blocked')}${fmtNum(s24.blocked, colors.red)}${fmtNum(s7d.blocked, colors.red)}${fmtNum(sAll.blocked, colors.red)}`);
         if (sAll.critical > 0) {
-            console.log(`  ${label('Critical')}${num(col(s24.critical, colors.red))}${num(col(s7d.critical, colors.red))}${num(col(sAll.critical, colors.red))}`);
+            console.log(`  ${label('Critical')}${fmtNum(s24.critical, colors.red)}${fmtNum(s7d.critical, colors.red)}${fmtNum(sAll.critical, colors.red)}`);
         }
         newline();
         // Recent blocks
         const recentBlocked = [...entries].reverse().filter(e => e.blocked).slice(0, 5);
         if (recentBlocked.length > 0) {
-            console.log(colors.bold('Recent blocks:'));
+            console.log(colors.dim('  RECENT BLOCKS'));
             for (const entry of recentBlocked) {
                 const tool = colors.cyan(entry.toolName.padEnd(10));
                 const time = colors.dim(timeAgo(entry.timestamp).padEnd(8));
@@ -275,11 +274,12 @@ export async function executeStatusCommand(options = {}) {
         }
     }
     // Skills status
+    console.log(colors.dim('  ─────'));
     if (hasSkills) {
-        console.log(colors.dim('  Skills: /codehere:trust  /codehere:report  /codehere:audit  /codehere:hook-status'));
+        console.log(colors.dim('  /codehere:trust  /codehere:report  /codehere:audit  /codehere:hook-status'));
     }
     else {
-        console.log(colors.dim('  Skills not installed. Run `codehere hook install` to add them.'));
+        console.log(colors.dim('  Run codehere hook install to add slash commands'));
     }
     newline();
     // Multi-agent session analysis

package/dist/presentation/cli/commands/trust-command.js

@@ -206,59 +206,58 @@ export async function executeTrustCommand(target, options = {}) {
     newline();
     sectionHeader('codehere Trust Report');
     newline();
+    // Score
     console.log(`  Score    ${scoreBar(overallScore)}  ${colors.bold(String(overallScore))}/100  ${gradeColor(grade)}`);
     newline();
-    // Findings summary
-    const rows = [
-        criticalCount > 0 ? `  ${colors.red('●')} ${colors.red(String(criticalCount) + ' critical')}` : null,
-        highCount > 0 ? `  ${colors.yellow('●')} ${colors.yellow(String(highCount) + ' high')}` : null,
-        mediumCount > 0 ? `  ${colors.dim('●')} ${mediumCount} medium` : null,
-        lowCount > 0 ? `  ${colors.dim('●')} ${lowCount} low` : null,
+    // Findings summary (inline, compact)
+    const parts = [
+        criticalCount > 0 ? colors.red(`${criticalCount} critical`) : null,
+        highCount > 0 ? colors.yellow(`${highCount} high`) : null,
+        mediumCount > 0 ? colors.dim(`${mediumCount} medium`) : null,
+        lowCount > 0 ? colors.dim(`${lowCount} low`) : null,
     ].filter(Boolean);
-    if (rows.length === 0) {
+    if (parts.length === 0) {
         console.log(`  ${colors.green('✓')} ${randomCleanScan()}`);
     }
     else {
-        rows.forEach(r => console.log(r));
+        console.log(`  ${parts.join(colors.dim('  ·  '))}`);
     }
     newline();
     // Per-file results (show worst first)
     if (results.length > 1) {
         const sorted = [...results].sort((a, b) => a.score - b.score);
-        console.log(colors.bold('Files:'));
+        console.log(colors.dim('  FILES'));
         for (const r of sorted.slice(0, 10)) {
-            const icon = r.score >= 75 ? colors.green('✓') : r.score >= 60 ? colors.yellow('⚠') : colors.red('✗');
-            console.log(`  ${icon} ${gradeColor(r.grade)}  ${String(r.score).padStart(3)}/100  ${colors.dim(r.filepath)}`);
+            const icon = r.score >= 75 ? colors.green('✓') : r.score >= 60 ? colors.yellow('!') : colors.red('✗');
+            console.log(`  ${icon} ${gradeColor(r.grade)}  ${String(r.score).padStart(3)}/100  ${r.filepath}`);
         }
         if (sorted.length > 10) {
-            console.log(colors.dim(`  ... and ${sorted.length - 10} more files`));
+            console.log(colors.dim(`  + ${sorted.length - 10} more files`));
         }
         newline();
     }
-    // Verbose: show all findings
+    // Findings detail
     if (options.verbose) {
+        console.log(colors.dim('  FINDINGS'));
         for (const r of results) {
             if (r.findings.length === 0)
                 continue;
-            console.log(colors.bold(r.filepath) + ':');
+            console.log(`  ${colors.bold(r.filepath)}`);
             for (const f of r.findings) {
-                const sev = f.severity === 'critical' ? colors.red(f.severity)
-                    : f.severity === 'high' ? colors.yellow(f.severity)
-                        : colors.dim(f.severity);
-                const line = f.line ? colors.dim(`:${f.line}`) : '';
-                const cwe = f.cwe ? colors.dim(` [${f.cwe}]`) : '';
-                console.log(`  ${sev}  ${f.category}${cwe}${line} — ${f.description}`);
+                const sev = f.severity === 'critical' ? colors.red('crit')
+                    : f.severity === 'high' ? colors.yellow('high')
+                        : colors.dim(f.severity.slice(0, 4));
+                const ln = f.line ? colors.dim(`L${f.line}`) : '';
+                console.log(`    ${sev}  ${ln.padEnd(6)} ${f.description}`);
             }
-            newline();
         }
+        newline();
     }
     else if (criticalCount + highCount > 0) {
-        // Show only critical/high findings without verbose flag
-        console.log(colors.bold('Top findings:'));
+        console.log(colors.dim('  FINDINGS'));
         const allFindings = results.flatMap(r => r.findings
             .filter(f => f.severity === 'critical' || f.severity === 'high')
             .map(f => ({ ...f, filepath: r.filepath })));
-        // Show critical first, then high
         const sorted = allFindings.sort((a, b) => {
             if (a.severity === 'critical' && b.severity !== 'critical')
                 return -1;
@@ -267,9 +266,13 @@ export async function executeTrustCommand(target, options = {}) {
             return 0;
         });
         for (const f of sorted.slice(0, 5)) {
-            const sev = f.severity === 'critical' ? colors.red(f.severity) : colors.yellow(f.severity);
-            const line = f.line ? `:${f.line}` : '';
-            console.log(`  ${sev}  ${f.filepath}${line} — ${f.description}`);
+            const sev = f.severity === 'critical' ? colors.red('crit') : colors.yellow('high');
+            const ln = f.line ? `:${f.line}` : '';
+            console.log(`  ${sev}  ${f.filepath}${ln}`);
+            console.log(`        ${colors.dim(f.description)}`);
+        }
+        if (sorted.length > 5) {
+            console.log(colors.dim(`  + ${sorted.length - 5} more findings (use --verbose to see all)`));
         }
         newline();
     }
@@ -277,10 +280,11 @@ export async function executeTrustCommand(target, options = {}) {
     const recColor = criticalCount > 0 ? colors.red : highCount > 0 ? colors.yellow : colors.green;
     console.log(recColor(recommendation));
     newline();
-    // Helpful tips
+    // Tips footer (quiet, separated)
     if (results.length > 0 && !options.ci) {
-        console.log(colors.dim('  codehere trust --badge') + colors.dim('  Add a badge to your README'));
-        console.log(colors.dim('  codehere trust --ci') + colors.dim('     Exit 1 on critical findings (for CI)'));
+        console.log(colors.dim('  ─────'));
+        console.log(colors.dim('  trust --badge  Add a badge to your README'));
+        console.log(colors.dim('  trust --ci     Exit 1 on critical findings'));
         newline();
     }
     if (ciFailed) {

package/dist/session.js

@@ -254,6 +254,14 @@ export async function startSession() {
         }
         // Enter
         if (key === '\r' || key === '\n') {
+            // If palette is visible, complete the selected command first
+            if (pLines > 0 && line.startsWith('/') && !line.includes(' ')) {
+                const filter = line.slice(1).toLowerCase();
+                const filtered = PALETTE_CMDS.filter(c => c.name.startsWith(filter)).slice(0, maxPalette());
+                if (filtered[selected]) {
+                    line = `/${filtered[selected].name}`;
+                }
+            }
             stdout.write('\r\x1b[J\n');
             const trimmed = line.trim();
             if (trimmed) {
@@ -302,29 +310,42 @@ export async function startSession() {
     // ── Initial render ──
     render();
     // ── Stdin with escape buffering ──
+    // CRITICAL: raw mode can deliver multiple chars in one data event (fast typing, paste).
+    // We must process each character individually, except escape sequences which are multi-byte.
     stdin.on('data', (raw) => {
         if (processing)
             return;
-        if (escBuf.length > 0) {
-            escBuf += raw;
-            if (escTimer)
-                clearTimeout(escTimer);
-            if (escBuf.length >= 3) {
-                const seq = escBuf;
-                escBuf = '';
-                handle(seq);
+        // If the whole chunk is a known escape sequence, handle it directly
+        if (raw.startsWith('\x1b') && raw.length >= 2) {
+            handle(raw);
+            return;
+        }
+        // Otherwise iterate character by character
+        for (let i = 0; i < raw.length; i++) {
+            if (processing)
+                return; // stop if a command started executing mid-chunk
+            const ch = raw[i];
+            if (escBuf.length > 0) {
+                escBuf += ch;
+                if (escTimer)
+                    clearTimeout(escTimer);
+                if (escBuf.length >= 3) {
+                    const seq = escBuf;
+                    escBuf = '';
+                    handle(seq);
+                }
+                else {
+                    escTimer = setTimeout(() => { const seq = escBuf; escBuf = ''; handle(seq); }, 50);
+                }
+                continue;
             }
-            else {
+            if (ch === '\x1b') {
+                escBuf = ch;
                 escTimer = setTimeout(() => { const seq = escBuf; escBuf = ''; handle(seq); }, 50);
+                continue;
             }
-            return;
-        }
-        if (raw === '\x1b') {
-            escBuf = raw;
-            escTimer = setTimeout(() => { const seq = escBuf; escBuf = ''; handle(seq); }, 50);
-            return;
+            handle(ch);
         }
-        handle(raw);
     });
 }
 // ── Command list (for bare / or help) ──────────────────────────────────────
@@ -363,13 +384,14 @@ async function executeInput(input, state) {
         stdout.write('\x1b[2J\x1b[H');
         return;
     }
-    // Bare command names: "explain src/auth.js" → same as "/explain src/auth.js"
-    const BARE_CMDS = PALETTE_CMDS.map(c => c.name);
+    // Bare command names: "trust ." or "status" → same as "/trust ." or "/status"
+    // Only match unambiguous commands — skip words that are common English ("help", "fix", "run", "plan", "report", "test")
+    const BARE_SAFE = ['trust', 'hook', 'status', 'health', 'setup', 'serve', 'models', 'config', 'index', 'explain', 'review', 'cost', 'undo'];
     const lower = input.toLowerCase();
     const firstWord = lower.split(/\s+/)[0];
-    if (BARE_CMDS.includes(firstWord)) {
-        const args = input.slice(firstWord.length).trim();
-        await handleSlash(firstWord, args, state);
+    const restArgs = input.slice(firstWord.length).trim();
+    if (BARE_SAFE.includes(firstWord)) {
+        await handleSlash(firstWord, restArgs, state);
         return;
     }
     // Everything else → AI query (the router decides what to do)
@@ -448,7 +470,13 @@ async function handleSlash(cmd, args, state) {
             break;
         }
         case 'test': {
-            console.log(colors.dim('  Run from terminal: ') + colors.cyan(`codehere test ${args || '<file>'}`));
+            if (!args) {
+                console.log(colors.dim('  Usage: /test <file>'));
+                return;
+            }
+            if (!(await requireKey()))
+                return;
+            await handleQuery(`Generate tests for ${args}`, state);
             break;
         }
         case 'docs': {
@@ -457,7 +485,13 @@ async function handleSlash(cmd, args, state) {
             break;
         }
         case 'refactor': {
-            console.log(colors.dim('  Run from terminal: ') + colors.cyan(`codehere refactor ${args || '<pattern> <instruction>'}`));
+            if (!args) {
+                console.log(colors.dim('  Usage: /refactor <goal>'));
+                return;
+            }
+            if (!(await requireKey()))
+                return;
+            await handleQuery('Refactor: ' + args, state);
             break;
         }
         case 'orchestrate': {
@@ -479,12 +513,25 @@ async function handleSlash(cmd, args, state) {
             break;
         }
         case 'git-review': {
-            console.log(colors.dim('  Run from terminal: ') + colors.cyan('codehere git-review'));
+            if (!(await requireKey()))
+                return;
+            await handleQuery('Review the recent git changes in this project', state);
             break;
         }
-        case 'index':
-            console.log(colors.dim('  Run from terminal: ') + colors.cyan('codehere index'));
+        case 'index': {
+            if (!(await requireKey()))
+                return;
+            const { indexRepositoryParallel } = await import('./embed.js');
+            const spinner = startSpinner('Indexing codebase...');
+            try {
+                await indexRepositoryParallel(process.cwd(), { useCache: true, maxConcurrency: 5 });
+                spinner.succeed(colors.green('Index built'));
+            }
+            catch (err) {
+                spinner.fail(error('Index failed: ' + (err instanceof Error ? err.message : String(err))));
+            }
             break;
+        }
         case 'health': {
             const { performHealthCheck, formatHealthStatus } = await import('./monitoring.js');
             console.log(formatHealthStatus(performHealthCheck()));
@@ -496,7 +543,8 @@ async function handleSlash(cmd, args, state) {
             break;
         }
         case 'serve': {
-            console.log(colors.dim('  Run from terminal: ') + colors.cyan('codehere serve'));
+            console.log(colors.dim('  MCP server must run in its own process:'));
+            console.log(colors.cyan('  codehere serve'));
             break;
         }
         case 'config': {
@@ -516,7 +564,8 @@ async function handleSlash(cmd, args, state) {
             break;
         }
         case 'undo': {
-            console.log(colors.dim('  Run from terminal: ') + colors.cyan(`codehere undo ${args || '<file>'}`));
+            const { executeUndoCommand } = await import('./presentation/cli/commands/undo-command.js');
+            await executeUndoCommand(args ? 'undo' : 'list', args || undefined);
             break;
         }
         case 'clear':
@@ -584,6 +633,9 @@ async function handleQuery(query, state) {
         else if (result.error) {
             console.log(error('  ' + result.error));
         }
+        else {
+            console.log(colors.dim('  No response. Try rephrasing, or run "codehere index" first.'));
+        }
         state.history.push({ command: query, response: result.message || result.error || '', timestamp: new Date().toISOString() });
         const entities = conversationContextManager.extractEntities(query);
         conversationContextManager.addTurn(sessionId, query, result.message || '', entities, result.intent);

package/dist/ui.js

@@ -19,7 +19,12 @@ export function isMinimalStyle() {
 }
 // Minimal header for commands (used in minimal style)
 export function printMinimalHeader(command, query) {
-    console.log(colors.cyan(`codehere ${command}`) + colors.dim(' ▸ ') + query);
+    if (query) {
+        console.log(colors.cyan(`codehere ${command}`) + colors.dim(' ▸ ') + query);
+    }
+    else {
+        console.log(colors.cyan(`codehere ${command}`));
+    }
     console.log();
 }
 // Minimal safety note (used at end of AI responses)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codehere",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "description": "Know what your AI agent actually did — scans every AI write before it touches your codebase",
   "main": "dist/index.js",
   "type": "module",
@@ -19,12 +19,14 @@
     "start:api": "npm run build && node dist/api/server.js",
     "dev": "tsx src/index.ts",
     "dev:api": "tsx api/server.ts",
-    "test": "npm run build && tsx ./test/run-tests.ts",
-    "test:comprehensive": "npm run build && RUN_COMPREHENSIVE_TESTS=true tsx ./test/comprehensive-use-cases.test.ts",
-    "test:execution": "npm run build && tsx ./test/run-comprehensive-test-execution.ts",
-    "test:suite": "npm run build && tsx test/test-suite.ts",
-    "test:integration": "npm run build && tsx test/integration/run-integration-tests.ts",
+    "test": "npm run build && vitest run",
+    "test:unit": "npm run build && tsx test/unit/run-unit-tests.ts",
     "test:cli": "npm run build && tsx test/integration/run-cli-tests.ts",
+    "test:watch": "vitest",
+    "lint": "eslint src/ --ext .ts",
+    "format": "prettier --write 'src/**/*.ts' 'test/**/*.ts'",
+    "format:check": "prettier --check 'src/**/*.ts' 'test/**/*.ts'",
+    "test:integration": "npm run build && tsx test/integration/run-integration-tests.ts",
     "test:scenarios": "npm run build && tsx test/scenarios/real-world-scenarios.ts",
     "test:security": "npm run build && tsx test/security/sast-scanner.test.ts",
     "test:security-gate": "npm run build && tsx test/security/security-gate.test.ts",
@@ -36,7 +38,6 @@
     "test:compound-instruction": "npm run build && tsx test/compound-instruction/compound-instruction.test.ts",
     "check-api": "npm run build && tsx -e \"import('./dist/utils/check-api-status.js').then(m => m.checkAPIStatus().then(s => { console.log(s.canProceed ? '✅ ' + s.message : '❌ ' + s.message); process.exit(s.canProceed ? 0 : 1); }))\"",
     "test:all": "npm run build && npm run test:integration && npm run test:scenarios && npm run test:security && npm run test:security-gate && npm run test:git-workflow && npm run test:memory && npm run test:performance",
-    "test:unit": "npm run build && tsx test/unit/run-unit-tests.ts",
     "test:coverage": "c8 npm run test:unit && c8 report --reporter=text --reporter=html",
     "test:rerank": "tsx test/rerank-integration.test.ts",
     "eval:command-r": "tsx test/command-a-evaluation.test.ts",
@@ -97,6 +98,7 @@
     "wrap-ansi": "^9.0.2"
   },
   "devDependencies": {
+    "@eslint/js": "^10.0.1",
     "@types/cli-progress": "^3.11.5",
     "@types/cors": "^2.8.19",
     "@types/diff": "^5.0.8",
@@ -105,8 +107,12 @@
     "@types/sql.js": "^1.4.8",
     "@types/supertest": "^6.0.3",
     "c8": "^10.1.3",
+    "eslint": "^10.2.0",
+    "prettier": "^3.8.3",
     "supertest": "^7.1.4",
     "tsx": "^4.21.0",
-    "typescript": "^5.9.3"
+    "typescript": "^5.9.3",
+    "typescript-eslint": "^8.58.2",
+    "vitest": "^4.1.4"
   }
 }