codehere 0.2.1 → 0.3.0-rc.1

package/dist/presentation/cli/commands/trust-command.js

@@ -18,40 +18,27 @@
  *   codehere trust --diff HEAD           # equivalent using git directly
  *   codehere trust --badge               # output badge markdown
  */
-import { readFileSync, existsSync, statSync, readdirSync } from 'fs';
-import { join, extname, relative, isAbsolute } from 'path';
-import { execSync } from 'child_process';
+import { existsSync } from 'fs';
+import { join, relative, isAbsolute } from 'path';
+import { execFileSync } from 'child_process';
 import { scoreFile } from '../../../infrastructure/security/trust-scorer.js';
+import { collectCodeFiles } from '../../../infrastructure/security/file-collection.js';
 import { colors, sectionHeader, error, newline, info, randomCleanScan } from '../../../ui.js';
 import { loadProductContext, adjustRecommendation } from '../../../infrastructure/config/product-context.js';
 // ── File collection ──────────────────────────────────────────────────────────
-const CODE_EXTENSIONS = new Set([
-    '.ts', '.tsx', '.js', '.jsx', '.mjs', '.cjs',
-    '.py', '.rb', '.go', '.java', '.cs', '.php',
-    '.sh', '.bash', '.zsh',
-    '.sql', '.html', '.vue', '.svelte',
-]);
-const IGNORE_DIRS = new Set(['node_modules', '.git', 'dist', 'build', '.next', 'coverage', '.cache', '.codehere', '.codehere-cache']);
-function collectFiles(target) {
-    const stat = statSync(target);
-    if (stat.isFile())
-        return [target];
-    const files = [];
-    function walk(dir) {
-        for (const entry of readdirSync(dir, { withFileTypes: true })) {
-            if (IGNORE_DIRS.has(entry.name))
-                continue;
-            const full = join(dir, entry.name);
-            if (entry.isDirectory()) {
-                walk(full);
-            }
-            else if (CODE_EXTENSIONS.has(extname(entry.name))) {
-                files.push(full);
-            }
-        }
+// See src/infrastructure/security/file-collection.ts for exclusion rules.
+/**
+ * Read a file safely — handles iCloud-evicted files on macOS.
+ * readFileSync blocks forever on iCloud-evicted files (dehydrated placeholders in ~/Documents).
+ * We use cat with a timeout as a subprocess so the main thread never blocks.
+ */
+function safeReadFile(filepath) {
+    try {
+        return execFileSync('cat', [filepath], { encoding: 'utf-8', timeout: 2000, maxBuffer: 5 * 1024 * 1024 });
+    }
+    catch {
+        return null; // File unreadable (iCloud-evicted, permissions, too large) — skip silently
     }
-    walk(target);
-    return files;
 }
 // ── Git diff mode ────────────────────────────────────────────────────────────
 function parseDiffFiles(diff) {
@@ -68,8 +55,8 @@ function parseDiffFiles(diff) {
         // Extract added lines only (lines starting with +, excluding +++)
         const addedLines = block
             .split('\n')
-            .filter(l => l.startsWith('+') && !l.startsWith('+++'))
-            .map(l => l.substring(1))
+            .filter((l) => l.startsWith('+') && !l.startsWith('+++'))
+            .map((l) => l.substring(1))
             .join('\n');
         if (addedLines.trim()) {
             files.push({ filepath, code: addedLines });
@@ -80,12 +67,18 @@ function parseDiffFiles(diff) {
 // ── Report formatting ────────────────────────────────────────────────────────
 function gradeColor(grade) {
     switch (grade) {
-        case 'A': return colors.green(grade);
-        case 'B': return colors.cyan(grade);
-        case 'C': return colors.yellow(grade);
-        case 'D': return colors.red(grade);
-        case 'F': return colors.red(colors.bold(grade));
-        default: return grade;
+        case 'A':
+            return colors.green(grade);
+        case 'B':
+            return colors.cyan(grade);
+        case 'C':
+            return colors.yellow(grade);
+        case 'D':
+            return colors.red(grade);
+        case 'F':
+            return colors.red(colors.bold(grade));
+        default:
+            return grade;
     }
 }
 function scoreBar(score, width = 20) {
@@ -98,10 +91,14 @@ function scoreBar(score, width = 20) {
     return colors.red(bar);
 }
 function badgeMarkdown(report) {
-    const color = report.grade === 'A' ? 'brightgreen'
-        : report.grade === 'B' ? 'green'
-            : report.grade === 'C' ? 'yellow'
-                : report.grade === 'D' ? 'orange'
+    const color = report.grade === 'A'
+        ? 'brightgreen'
+        : report.grade === 'B'
+            ? 'green'
+            : report.grade === 'C'
+                ? 'yellow'
+                : report.grade === 'D'
+                    ? 'orange'
                     : 'red';
     return `![codehere trust](https://img.shields.io/badge/codehere%20trust-${report.overallScore}%25%20${report.grade}-${color}?logo=shield)`;
 }
@@ -113,8 +110,12 @@ export async function executeTrustCommand(target, options = {}) {
     if (options.diff !== undefined) {
         // Run git diff and scan added lines
         try {
+            // THREAT-2 fix · ref comes from a user-supplied CLI flag. Using template-
+            // string interpolation with execSync allows shell metacharacters in `ref`
+            // (e.g. `--diff "main; rm -rf /"`) to escape the git invocation. Use the
+            // execFileSync array form so the shell is never invoked.
             const ref = options.diff || 'HEAD';
-            const diffOutput = execSync(`git diff ${ref}`, { cwd, encoding: 'utf-8' });
+            const diffOutput = execFileSync('git', ['diff', ref], { cwd, encoding: 'utf-8' });
             filesToScan = parseDiffFiles(diffOutput);
             if (filesToScan.length === 0) {
                 console.log(info('No changed files to scan'));
@@ -151,30 +152,42 @@ export async function executeTrustCommand(target, options = {}) {
             console.error(error(`Not found: ${resolved}`));
             process.exit(1);
         }
-        const paths = collectFiles(resolved);
-        filesToScan = paths.map(p => ({
-            filepath: relative(cwd, p),
-            code: readFileSync(p, 'utf-8'),
-        }));
+        const paths = collectCodeFiles(resolved);
+        let skippedCount = 0;
+        for (const p of paths) {
+            const code = safeReadFile(p);
+            if (code !== null) {
+                filesToScan.push({ filepath: relative(cwd, p), code });
+            }
+            else {
+                skippedCount++;
+            }
+        }
+        if (skippedCount > 0) {
+            console.log(colors.dim(`  Skipped ${skippedCount} unreadable file${skippedCount > 1 ? 's' : ''}`));
+        }
+        if (filesToScan.length === 0 && skippedCount > 0) {
+            console.log(info('No readable files to scan.'));
+            console.log(colors.dim('  Check file permissions or availability and retry.'));
+            return;
+        }
     }
     // ── Scan ──────────────────────────────────────────────────────────────────
-    const results = filesToScan.map(f => scoreFile(f.filepath, f.code));
+    const results = filesToScan.map((f) => scoreFile(f.filepath, f.code));
     const totalFindings = results.reduce((s, r) => s + r.findings.length, 0);
-    const criticalCount = results.reduce((s, r) => s + r.findings.filter(f => f.severity === 'critical').length, 0);
-    const highCount = results.reduce((s, r) => s + r.findings.filter(f => f.severity === 'high').length, 0);
-    const mediumCount = results.reduce((s, r) => s + r.findings.filter(f => f.severity === 'medium').length, 0);
-    const lowCount = results.reduce((s, r) => s + r.findings.filter(f => f.severity === 'low').length, 0);
-    const overallScore = results.length > 0
-        ? Math.round(results.reduce((s, r) => s + r.score, 0) / results.length)
-        : 100;
+    const criticalCount = results.reduce((s, r) => s + r.findings.filter((f) => f.severity === 'critical').length, 0);
+    const highCount = results.reduce((s, r) => s + r.findings.filter((f) => f.severity === 'high').length, 0);
+    const mediumCount = results.reduce((s, r) => s + r.findings.filter((f) => f.severity === 'medium').length, 0);
+    const lowCount = results.reduce((s, r) => s + r.findings.filter((f) => f.severity === 'low').length, 0);
+    const overallScore = results.length > 0 ? Math.round(results.reduce((s, r) => s + r.score, 0) / results.length) : 100;
     const grade = overallScore >= 90 ? 'A' : overallScore >= 75 ? 'B' : overallScore >= 60 ? 'C' : overallScore >= 40 ? 'D' : 'F';
     const baseRecommendation = criticalCount > 0
         ? `${criticalCount} critical ${criticalCount === 1 ? 'issue' : 'issues'} — worth sorting before this merges.`
         : highCount > 0
             ? `Nothing critical, but ${highCount} high-severity ${highCount === 1 ? 'pattern' : 'patterns'} worth a look.`
-            : overallScore >= 75
-                ? 'Clean scan. Nothing blocking a merge.'
-                : 'A few things to look at — nothing critical, but worth a pass.';
+            : mediumCount + lowCount > 0
+                ? `${mediumCount + lowCount} low-priority ${mediumCount + lowCount === 1 ? 'finding' : 'findings'} — nothing blocking, but worth a pass.`
+                : 'Clean scan. Nothing blocking a merge.';
     const productCtx = loadProductContext(process.cwd());
     const recommendation = adjustRecommendation(baseRecommendation, criticalCount, highCount, overallScore, productCtx);
     const report = {
@@ -206,70 +219,72 @@ export async function executeTrustCommand(target, options = {}) {
     newline();
     sectionHeader('codehere Trust Report');
     newline();
+    // Score
     console.log(`  Score    ${scoreBar(overallScore)}  ${colors.bold(String(overallScore))}/100  ${gradeColor(grade)}`);
     newline();
-    // Findings summary
-    const rows = [
-        criticalCount > 0 ? `  ${colors.red('●')} ${colors.red(String(criticalCount) + ' critical')}` : null,
-        highCount > 0 ? `  ${colors.yellow('●')} ${colors.yellow(String(highCount) + ' high')}` : null,
-        mediumCount > 0 ? `  ${colors.dim('●')} ${mediumCount} medium` : null,
-        lowCount > 0 ? `  ${colors.dim('●')} ${lowCount} low` : null,
+    // Findings summary (inline, compact)
+    const parts = [
+        criticalCount > 0 ? colors.red(`${criticalCount} critical`) : null,
+        highCount > 0 ? colors.yellow(`${highCount} high`) : null,
+        mediumCount > 0 ? colors.dim(`${mediumCount} medium`) : null,
+        lowCount > 0 ? colors.dim(`${lowCount} low`) : null,
     ].filter(Boolean);
-    if (rows.length === 0) {
+    if (parts.length === 0) {
         console.log(`  ${colors.green('✓')} ${randomCleanScan()}`);
     }
     else {
-        rows.forEach(r => console.log(r));
+        console.log(`  ${parts.join(colors.dim('  ·  '))}`);
     }
     newline();
     // Per-file results (show worst first)
     if (results.length > 1) {
         const sorted = [...results].sort((a, b) => a.score - b.score);
-        console.log(colors.bold('Files:'));
+        console.log(colors.dim('  FILES'));
         for (const r of sorted.slice(0, 10)) {
-            const icon = r.score >= 75 ? colors.green('✓') : r.score >= 60 ? colors.yellow('⚠') : colors.red('✗');
-            console.log(`  ${icon} ${gradeColor(r.grade)}  ${String(r.score).padStart(3)}/100  ${colors.dim(r.filepath)}`);
+            const icon = r.score >= 75 ? colors.green('✓') : r.score >= 60 ? colors.yellow('!') : colors.red('✗');
+            console.log(`  ${icon} ${gradeColor(r.grade)}  ${String(r.score).padStart(3)}/100  ${r.filepath}`);
         }
         if (sorted.length > 10) {
-            console.log(colors.dim(`  ... and ${sorted.length - 10} more files`));
+            console.log(colors.dim(`  + ${sorted.length - 10} more files`));
         }
         newline();
     }
-    // Verbose: show all findings
+    // Findings detail
     if (options.verbose) {
+        console.log(colors.dim('  FINDINGS'));
         for (const r of results) {
             if (r.findings.length === 0)
                 continue;
-            console.log(colors.bold(r.filepath) + ':');
+            console.log(`  ${colors.bold(r.filepath)}`);
             for (const f of r.findings) {
-                const sev = f.severity === 'critical' ? colors.red(f.severity)
-                    : f.severity === 'high' ? colors.yellow(f.severity)
-                        : colors.dim(f.severity);
-                const line = f.line ? colors.dim(`:${f.line}`) : '';
-                const cwe = f.cwe ? colors.dim(` [${f.cwe}]`) : '';
-                console.log(`  ${sev}  ${f.category}${cwe}${line} — ${f.description}`);
+                const sev = f.severity === 'critical'
+                    ? colors.red('crit')
+                    : f.severity === 'high'
+                        ? colors.yellow('high')
+                        : colors.dim(f.severity.slice(0, 4));
+                const ln = f.line ? colors.dim(`L${f.line}`) : '';
+                console.log(`    ${sev}  ${ln.padEnd(6)} ${f.description}`);
             }
-            newline();
         }
+        newline();
     }
-    else if (criticalCount + highCount > 0) {
-        // Show only critical/high findings without verbose flag
-        console.log(colors.bold('Top findings:'));
-        const allFindings = results.flatMap(r => r.findings
-            .filter(f => f.severity === 'critical' || f.severity === 'high')
-            .map(f => ({ ...f, filepath: r.filepath })));
-        // Show critical first, then high
-        const sorted = allFindings.sort((a, b) => {
-            if (a.severity === 'critical' && b.severity !== 'critical')
-                return -1;
-            if (a.severity !== 'critical' && b.severity === 'critical')
-                return 1;
-            return 0;
-        });
+    else if (totalFindings > 0) {
+        console.log(colors.dim('  FINDINGS'));
+        const severityRank = { critical: 0, high: 1, medium: 2, low: 3 };
+        const allFindings = results.flatMap((r) => r.findings.map((f) => ({ ...f, filepath: r.filepath })));
+        const sorted = allFindings.sort((a, b) => severityRank[a.severity] - severityRank[b.severity]);
         for (const f of sorted.slice(0, 5)) {
-            const sev = f.severity === 'critical' ? colors.red(f.severity) : colors.yellow(f.severity);
-            const line = f.line ? `:${f.line}` : '';
-            console.log(`  ${sev}  ${f.filepath}${line} — ${f.description}`);
+            const sev = f.severity === 'critical'
+                ? colors.red('crit')
+                : f.severity === 'high'
+                    ? colors.yellow('high')
+                    : colors.dim(f.severity.slice(0, 4));
+            const ln = f.line ? `:${f.line}` : '';
+            console.log(`  ${sev}  ${f.filepath}${ln}`);
+            console.log(`        ${colors.dim(f.description)}`);
+        }
+        if (sorted.length > 5) {
+            console.log(colors.dim(`  + ${sorted.length - 5} more findings (use --verbose to see all)`));
         }
         newline();
     }
@@ -277,10 +292,11 @@ export async function executeTrustCommand(target, options = {}) {
     const recColor = criticalCount > 0 ? colors.red : highCount > 0 ? colors.yellow : colors.green;
     console.log(recColor(recommendation));
     newline();
-    // Helpful tips
+    // Tips footer (quiet, separated)
     if (results.length > 0 && !options.ci) {
-        console.log(colors.dim('  codehere trust --badge') + colors.dim('  Add a badge to your README'));
-        console.log(colors.dim('  codehere trust --ci') + colors.dim('     Exit 1 on critical findings (for CI)'));
+        console.log(colors.dim('  ─────'));
+        console.log(colors.dim('  trust --badge  Add a badge to your README'));
+        console.log(colors.dim('  trust --ci     Exit 1 on critical findings'));
         newline();
     }
     if (ciFailed) {

package/dist/presentation/cli/error-display.js

@@ -63,11 +63,7 @@ function extractFilePath(errorMessage) {
  */
 function extractLineNumber(errorMessage) {
     // Patterns: "line 42", ":42", "at line 42"
-    const patterns = [
-        /(?:line|Line)\s+(\d+)/i,
-        /:(\d+):/,
-        /\((\d+)\)/,
-    ];
+    const patterns = [/(?:line|Line)\s+(\d+)/i, /:(\d+):/, /\((\d+)\)/];
     for (const pattern of patterns) {
         const match = errorMessage.match(pattern);
         if (match && match[1]) {
@@ -89,9 +85,8 @@ function getRecoveryCommands(errorType, errorMessage, context) {
         case ErrorType.VALIDATION:
             if (lowerMessage.includes('file') || lowerMessage.includes('not found')) {
                 if (context.filepath) {
-                    commands.push(`codehere explain ${context.filepath}${context.lineNumber ? `:${context.lineNumber}` : ''}`);
+                    commands.push(`codehere trust ${context.filepath}`);
                 }
-                commands.push('codehere index');
             }
             break;
         case ErrorType.API_ERROR:
@@ -102,7 +97,7 @@ function getRecoveryCommands(errorType, errorMessage, context) {
             break;
         case ErrorType.POLICY:
             if (context.filepath) {
-                commands.push(`codehere explain ${context.filepath}`);
+                commands.push(`codehere trust ${context.filepath}`);
                 commands.push('codehere config policies');
             }
             break;
@@ -174,7 +169,7 @@ function getDocumentationLink(errorType) {
 function generateErrorCode(errorType, errorMessage) {
     const prefix = errorType.toUpperCase().substring(0, 3);
     const hash = errorMessage.split('').reduce((acc, char) => {
-        return ((acc << 5) - acc) + char.charCodeAt(0);
+        return (acc << 5) - acc + char.charCodeAt(0);
     }, 0);
     const code = Math.abs(hash).toString(16).substring(0, 4).toUpperCase();
     return `${prefix}-${code}`;
@@ -183,7 +178,7 @@ function generateErrorCode(errorType, errorMessage) {
  * Display error with helpful context and recovery suggestions
  */
 export function displayError(error, options = {}) {
-    const { operation = 'operation', query, showSuggestions = true, showStack = false, } = options;
+    const { operation = 'operation', query, showSuggestions = true, showStack = false } = options;
     const errorType = classifyError(error);
     const errorMessage = error instanceof Error ? error.message : String(error);
     const isEnterpriseError = error instanceof EnterpriseError;
@@ -227,16 +222,21 @@ export function displayError(error, options = {}) {
         const suggestions = getErrorSuggestions(errorType, errorMessage, { operation, query, filepath: fileContext });
         if (suggestions.length > 0) {
             console.log(colors.bold('Suggestions:'));
-            suggestions.forEach(suggestion => {
+            suggestions.forEach((suggestion) => {
                 console.log(colors.dim(`  ${symbols.bullet} ${suggestion}`));
             });
             newline();
         }
         // Show recovery commands for certain error types
-        const recoveryCommands = getRecoveryCommands(errorType, errorMessage, { operation, query, filepath: fileContext, lineNumber: lineContext });
+        const recoveryCommands = getRecoveryCommands(errorType, errorMessage, {
+            operation,
+            query,
+            filepath: fileContext,
+            lineNumber: lineContext,
+        });
         if (recoveryCommands.length > 0) {
             console.log(colors.bold('Recovery Commands:'));
-            recoveryCommands.forEach(cmd => {
+            recoveryCommands.forEach((cmd) => {
                 console.log(colors.cyan(`  $ ${cmd}`));
             });
             newline();
@@ -271,7 +271,7 @@ function getErrorSuggestions(errorType, errorMessage, context) {
     const lowerMessage = errorMessage.toLowerCase();
     switch (errorType) {
         case ErrorType.RATE_LIMIT:
-            suggestions.push('You\'ve reached the API rate limit or monthly quota');
+            suggestions.push("You've reached the API rate limit or monthly quota");
             suggestions.push('Wait a moment and try again');
             suggestions.push('Check your API key limits at: https://dashboard.cohere.com/api-keys');
             suggestions.push('Consider upgrading your API key for higher limits');
@@ -286,11 +286,8 @@ function getErrorSuggestions(errorType, errorMessage, context) {
                 suggestions.push('For troubleshooting, include the error code when reporting issues');
             }
             else if (lowerMessage.includes('not found') || lowerMessage.includes('missing')) {
-                if (context.query) {
-                    suggestions.push(`Try searching: codehere "find ${context.query.split(' ').slice(0, 3).join(' ')}"`);
-                }
-                suggestions.push('Make sure you\'re in the correct directory');
-                suggestions.push('Run "codehere index" to build search index');
+                suggestions.push("Make sure you're in the correct directory");
+                suggestions.push('Run "codehere trust ." to verify the path is scanned');
             }
             else {
                 suggestions.push('Check the error message above for specific details');
@@ -319,8 +316,7 @@ function getErrorSuggestions(errorType, errorMessage, context) {
                 suggestions.push('Check file permissions');
             }
             else if (lowerMessage.includes('memory') || lowerMessage.includes('database')) {
-                suggestions.push('The memory system may need initialization');
-                suggestions.push('Try running "codehere index" to rebuild the index');
+                suggestions.push('Run "codehere health" to inspect runtime state');
             }
             else {
                 suggestions.push('This error may be temporary - try again');

package/dist/ui.js

@@ -19,7 +19,12 @@ export function isMinimalStyle() {
 }
 // Minimal header for commands (used in minimal style)
 export function printMinimalHeader(command, query) {
-    console.log(colors.cyan(`codehere ${command}`) + colors.dim(' ▸ ') + query);
+    if (query) {
+        console.log(colors.cyan(`codehere ${command}`) + colors.dim(' ▸ ') + query);
+    }
+    else {
+        console.log(colors.cyan(`codehere ${command}`));
+    }
     console.log();
 }
 // Minimal safety note (used at end of AI responses)
@@ -34,7 +39,7 @@ export function printContextSummary(files, maxShow = 3) {
     const shown = unique.slice(0, maxShow);
     const more = unique.length - maxShow;
     console.log(colors.dim('Context:'));
-    shown.forEach(f => console.log(colors.dim(`  - ${f}`)));
+    shown.forEach((f) => console.log(colors.dim(`  - ${f}`)));
     if (more > 0) {
         console.log(colors.dim(`  ... and ${more} more file${more > 1 ? 's' : ''}`));
     }
@@ -142,35 +147,35 @@ export function info(message) {
 // Create professional table - minimal styling
 export function createTable(headers, rows) {
     const table = new Table({
-        head: headers.map(h => colors.bold(h)),
+        head: headers.map((h) => colors.bold(h)),
         style: {
             head: [],
             border: ['gray'],
             compact: false,
         },
         chars: {
-            'top': '─',
+            top: '─',
             'top-mid': '┬',
             'top-left': '┌',
             'top-right': '┐',
-            'bottom': '─',
+            bottom: '─',
             'bottom-mid': '┴',
             'bottom-left': '└',
             'bottom-right': '┘',
-            'left': '│',
+            left: '│',
             'left-mid': '├',
-            'mid': '─',
+            mid: '─',
             'mid-mid': '┼',
-            'right': '│',
+            right: '│',
             'right-mid': '┤',
-            'middle': '│',
+            middle: '│',
         },
         colWidths: headers.map((_, i) => {
-            const maxWidth = Math.max(headers[i].length, ...rows.map(row => (row[i] || '').length));
+            const maxWidth = Math.max(headers[i].length, ...rows.map((row) => (row[i] || '').length));
             return Math.min(maxWidth + 2, 50);
         }),
     });
-    rows.forEach(row => table.push(row));
+    rows.forEach((row) => table.push(row));
     return table;
 }
 // Format file path - subtle
@@ -431,7 +436,7 @@ export function showSlashCommandMenu() {
     newline();
     console.log(colors.bold('  Slash commands'));
     newline();
-    const maxNameLen = Math.max(...SLASH_COMMANDS.map(c => c.name.length + c.args.length)) + 1;
+    const maxNameLen = Math.max(...SLASH_COMMANDS.map((c) => c.name.length + c.args.length)) + 1;
     for (const cmd of SLASH_COMMANDS) {
         const signature = `/${cmd.name}${cmd.args ? ' ' + cmd.args : ''}`;
         const pad = ' '.repeat(Math.max(0, maxNameLen + 2 - signature.length + 8));

package/package.json

@@ -1,112 +1,80 @@
 {
   "name": "codehere",
-  "version": "0.2.1",
-  "description": "Know what your AI agent actually did — scans every AI write before it touches your codebase",
+  "version": "0.3.0-rc.1",
+  "description": "A PM for your AI coding agents. Delegate, orchestrate, and audit Claude Code, Codex, Aider, and OpenCode from one local web UI — every AI action traced, every file scored.",
   "main": "dist/index.js",
   "type": "module",
   "bin": {
-    "codehere": "dist/index.js"
+    "codehere": "dist/index.js",
+    "ch": "dist/index.js"
   },
   "files": [
     "dist",
     "README.md",
     "LICENSE"
   ],
+  "engines": {
+    "node": ">=20"
+  },
   "scripts": {
+    "prebuild": "rm -rf dist",
     "build": "tsc",
-    "prepublishOnly": "npm run build && find dist -name '*.map' -delete && find dist -name '*.d.ts' -delete",
+    "postbuild": "chmod +x dist/index.js",
+    "repomap": "node scripts/gen-repo-map.mjs",
+    "prepublishOnly": "npm run build && find dist -name '*.map' -delete && find dist -name '*.d.ts' -delete && find dist -name '*.d.ts.map' -delete",
     "start": "node dist/index.js",
-    "start:api": "npm run build && node dist/api/server.js",
     "dev": "tsx src/index.ts",
-    "dev:api": "tsx api/server.ts",
-    "test": "npm run build && tsx ./test/run-tests.ts",
-    "test:comprehensive": "npm run build && RUN_COMPREHENSIVE_TESTS=true tsx ./test/comprehensive-use-cases.test.ts",
-    "test:execution": "npm run build && tsx ./test/run-comprehensive-test-execution.ts",
-    "test:suite": "npm run build && tsx test/test-suite.ts",
-    "test:integration": "npm run build && tsx test/integration/run-integration-tests.ts",
-    "test:cli": "npm run build && tsx test/integration/run-cli-tests.ts",
-    "test:scenarios": "npm run build && tsx test/scenarios/real-world-scenarios.ts",
-    "test:security": "npm run build && tsx test/security/sast-scanner.test.ts",
-    "test:security-gate": "npm run build && tsx test/security/security-gate.test.ts",
-    "test:git-workflow": "npm run build && tsx test/git/git-workflow.test.ts",
-    "test:git-react": "npm run build && tsx test/git/react-git-integration.test.ts",
-    "test:memory": "npm run build && tsx test/memory/memory-system.test.ts",
-    "test:performance": "npm run build && tsx test/performance/performance-analysis.test.ts",
-    "test:context-depth": "npm run build && tsx test/context-depth/context-depth.test.ts",
-    "test:compound-instruction": "npm run build && tsx test/compound-instruction/compound-instruction.test.ts",
-    "check-api": "npm run build && tsx -e \"import('./dist/utils/check-api-status.js').then(m => m.checkAPIStatus().then(s => { console.log(s.canProceed ? '✅ ' + s.message : '❌ ' + s.message); process.exit(s.canProceed ? 0 : 1); }))\"",
-    "test:all": "npm run build && npm run test:integration && npm run test:scenarios && npm run test:security && npm run test:security-gate && npm run test:git-workflow && npm run test:memory && npm run test:performance",
-    "test:unit": "npm run build && tsx test/unit/run-unit-tests.ts",
-    "test:coverage": "c8 npm run test:unit && c8 report --reporter=text --reporter=html",
-    "test:rerank": "tsx test/rerank-integration.test.ts",
-    "eval:command-r": "tsx test/command-a-evaluation.test.ts",
-    "test:verification": "npm run build && node test-verification-simple.js",
-    "measure:metrics": "npm run build && node test/measure-metrics.js",
-    "analyze:feedback": "tsx scripts/analyze-feedback.ts",
-    "check:trust": "tsx scripts/check-trust-thresholds.ts",
-    "smoke:cohere": "npm run build && tsx scripts/smoke-cohere.ts",
-    "smoke:openai": "npm run build && tsx scripts/smoke-openai.ts",
-    "test:real-providers": "npm run build && tsx test/integration/real-provider-comprehensive.test.ts",
-    "test:user-flows": "npm run build && tsx test/integration/user-flow-validation.test.ts"
+    "test": "npm run build && vitest run",
+    "test:watch": "vitest",
+    "lint": "eslint src/ --ext .ts",
+    "format": "prettier --write 'src/**/*.ts' 'test/**/*.ts'",
+    "format:check": "prettier --check 'src/**/*.ts' 'test/**/*.ts'",
+    "sbom": "npm sbom --sbom-format=spdx --omit=dev"
   },
   "keywords": [
-    "ai-coding-agent",
-    "code-security",
-    "sast",
+    "ai-coding-agents",
+    "agent-orchestration",
+    "audit-trail",
     "trust-scoring",
     "ai-safety",
-    "multi-agent",
-    "orchestration",
+    "ai-governance",
     "claude-code",
-    "cursor",
-    "coding-assistant",
-    "cli-tool",
-    "code-review",
+    "codex",
+    "aider",
+    "opencode",
     "hook-system",
-    "audit-trail",
+    "sast",
+    "cli-tool",
     "typescript"
   ],
-  "author": "Muhammad Ega",
+  "author": "The codehere authors",
   "license": "MIT",
   "repository": {
     "type": "git",
-    "url": "https://github.com/muhammadegaa/codehere.git"
+    "url": "git+https://github.com/muhammadegaa/codehere.git"
   },
   "bugs": {
     "url": "https://github.com/muhammadegaa/codehere/issues"
   },
   "homepage": "https://codehere.uk",
-  "logo": "https://codehere.uk/icon.svg",
   "dependencies": {
     "boxen": "^8.0.1",
     "chalk": "^5.3.0",
     "cli-progress": "^3.12.0",
     "cli-table3": "^0.6.5",
-    "cohere-ai": "^7.7.0",
     "commander": "^11.1.0",
-    "cors": "^2.8.5",
-    "diff": "^5.1.0",
     "dotenv": "^16.3.1",
-    "express": "^5.1.0",
-    "get-tsconfig": "^4.13.0",
-    "inquirer": "^13.0.1",
-    "ora": "^7.0.1",
-    "resolve-pkg-maps": "^1.0.0",
-    "sql.js": "^1.10.3",
-    "tiktoken": "^1.0.10",
-    "wrap-ansi": "^9.0.2"
+    "ora": "^7.0.1"
   },
   "devDependencies": {
+    "@eslint/js": "^10.0.1",
     "@types/cli-progress": "^3.11.5",
-    "@types/cors": "^2.8.19",
-    "@types/diff": "^5.0.8",
-    "@types/express": "^5.0.5",
     "@types/node": "^20.19.25",
-    "@types/sql.js": "^1.4.8",
-    "@types/supertest": "^6.0.3",
-    "c8": "^10.1.3",
-    "supertest": "^7.1.4",
+    "eslint": "^10.2.0",
+    "prettier": "^3.8.3",
     "tsx": "^4.21.0",
-    "typescript": "^5.9.3"
+    "typescript": "^5.9.3",
+    "typescript-eslint": "^8.58.2",
+    "vitest": "^4.1.4"
   }
 }