codehere 0.2.2 → 0.3.0-rc.2

package/dist/presentation/cli/commands/report-command.js

@@ -17,57 +17,34 @@
  *   - Actionable recommendations in plain English
  *   - A shareable badge and attribution
  */
-import { writeFileSync } from 'fs';
-import { basename, relative } from 'path';
+import { writeFileSync, readFileSync, existsSync } from 'fs';
+import { basename, relative, join, isAbsolute } from 'path';
 import { colors, success, error, newline, info } from '../../../ui.js';
 import { scoreFile } from '../../../infrastructure/security/trust-scorer.js';
-import { readFileSync, existsSync, statSync, readdirSync } from 'fs';
-import { join, extname } from 'path';
+import { collectCodeFiles } from '../../../infrastructure/security/file-collection.js';
 import { loadProductContext, adjustRecommendation } from '../../../infrastructure/config/product-context.js';
-// ── File collection (mirrors trust-command) ──────────────────────────────────
-const CODE_EXTENSIONS = new Set([
-    '.ts', '.tsx', '.js', '.jsx', '.mjs', '.cjs',
-    '.py', '.rb', '.go', '.java', '.cs', '.php',
-    '.sh', '.bash', '.zsh',
-    '.sql', '.html', '.vue', '.svelte',
-]);
-const IGNORE_DIRS = new Set(['node_modules', '.git', 'dist', 'build', '.next', 'coverage', '.cache', '.codehere', '.codehere-cache']);
-function collectFiles(target) {
-    const stat = statSync(target);
-    if (stat.isFile())
-        return [target];
-    const files = [];
-    function walk(dir) {
-        for (const entry of readdirSync(dir, { withFileTypes: true })) {
-            if (IGNORE_DIRS.has(entry.name))
-                continue;
-            const full = join(dir, entry.name);
-            if (entry.isDirectory()) {
-                walk(full);
-            }
-            else if (CODE_EXTENSIONS.has(extname(entry.name))) {
-                files.push(full);
-            }
-        }
-    }
-    walk(target);
-    return files;
-}
 // ── Markdown generation ───────────────────────────────────────────────────────
 function gradeEmoji(grade) {
     return grade === 'A' ? '🟢' : grade === 'B' ? '🟡' : grade === 'C' ? '🟠' : grade === 'D' ? '🔴' : '🚨';
 }
 function severityLabel(severity) {
-    return severity === 'critical' ? '🚨 Critical'
-        : severity === 'high' ? '⚠️  High'
-            : severity === 'medium' ? '🔵 Medium'
+    return severity === 'critical'
+        ? '🚨 Critical'
+        : severity === 'high'
+            ? '⚠️  High'
+            : severity === 'medium'
+                ? '🔵 Medium'
                 : '⬇️  Low';
 }
 function badgeUrl(score, grade) {
-    const color = grade === 'A' ? 'brightgreen'
-        : grade === 'B' ? 'green'
-            : grade === 'C' ? 'yellow'
-                : grade === 'D' ? 'orange'
+    const color = grade === 'A'
+        ? 'brightgreen'
+        : grade === 'B'
+            ? 'green'
+            : grade === 'C'
+                ? 'yellow'
+                : grade === 'D'
+                    ? 'orange'
                     : 'red';
     return `https://img.shields.io/badge/codehere%20trust-${score}%25%20${grade}-${color}?logo=shield&logoColor=white`;
 }
@@ -75,14 +52,16 @@ function narrativeSummary(report) {
     const { overallScore, grade, criticalCount, highCount, mediumCount, lowCount, files } = report;
     if (criticalCount === 0 && highCount === 0) {
         if (overallScore >= 90) {
-            return `Clean codebase. ${files.length} file${files.length !== 1 ? 's' : ''} scanned, nothing blocking a merge. ` +
-                (mediumCount > 0 ? `${mediumCount} medium-severity pattern${mediumCount !== 1 ? 's' : ''} worth reviewing in a future sprint.` : 'No significant findings.');
+            return (`Clean codebase. ${files.length} file${files.length !== 1 ? 's' : ''} scanned, nothing blocking a merge. ` +
+                (mediumCount > 0
+                    ? `${mediumCount} medium-severity pattern${mediumCount !== 1 ? 's' : ''} worth reviewing in a future sprint.`
+                    : 'No significant findings.'));
         }
         return `Solid codebase with some medium/low findings. ${overallScore}/100 — worth a review pass but not blocking.`;
     }
     if (criticalCount > 0) {
-        return `${criticalCount} critical issue${criticalCount !== 1 ? 's' : ''} found that should be resolved before this merges. ` +
-            `${highCount > 0 ? `Also ${highCount} high-severity pattern${highCount !== 1 ? 's' : ''} to address.` : ''}`;
+        return (`${criticalCount} critical issue${criticalCount !== 1 ? 's' : ''} found that should be resolved before this merges. ` +
+            `${highCount > 0 ? `Also ${highCount} high-severity pattern${highCount !== 1 ? 's' : ''} to address.` : ''}`);
     }
     return `No critical issues, but ${highCount} high-severity pattern${highCount !== 1 ? 's' : ''} worth addressing before merge.`;
 }
@@ -111,7 +90,7 @@ function findingsMarkdown(files, cwd) {
     for (const severity of ['critical', 'high', 'medium', 'low']) {
         const allFindings = [];
         for (const f of files) {
-            for (const finding of f.findings.filter(x => x.severity === severity)) {
+            for (const finding of f.findings.filter((x) => x.severity === severity)) {
                 allFindings.push({ filepath: f.filepath, ...finding });
             }
         }
@@ -186,7 +165,7 @@ Renders as: ![codehere trust](${badge})
 
 ---
 
-*Generated with [codehere](https://github.com/codehere-dev/codehere) — the coding agent that makes you smarter, not just faster.*
+*Generated with [codehere](https://github.com/codehere-dev/codehere) — every AI action, traced. Every agent, verified.*
 `;
 }
 // ── Command ───────────────────────────────────────────────────────────────────
@@ -210,10 +189,14 @@ function generateSimpleReport(report, target) {
     }
     lines.push('');
     // Score in human terms
-    const gradeMeaning = grade === 'A' ? 'Excellent'
-        : grade === 'B' ? 'Good'
-            : grade === 'C' ? 'Fair — some issues to address'
-                : grade === 'D' ? 'Needs work'
+    const gradeMeaning = grade === 'A'
+        ? 'Excellent'
+        : grade === 'B'
+            ? 'Good'
+            : grade === 'C'
+                ? 'Fair — some issues to address'
+                : grade === 'D'
+                    ? 'Needs work'
                     : 'Urgent attention needed';
     lines.push(`Security score: ${overallScore}/100 (${gradeMeaning})`);
     lines.push(`Files checked: ${files.length}`);
@@ -256,34 +239,37 @@ function generateSimpleReport(report, target) {
 }
 export async function executeReportCommand(target, options = {}) {
     const cwd = process.cwd();
-    const resolved = target ? join(cwd, target) : cwd;
+    const resolved = target ? (isAbsolute(target) ? target : join(cwd, target)) : cwd;
+    // Default: write to a file so the user gets a shareable artifact instead of
+    // raw markdown sprayed at the terminal. --stdout opts into the old behavior
+    // for piping; --out overrides the default path.
+    const defaultOutName = options.json ? 'codehere-audit.json' : 'codehere-audit.md';
+    const effectiveOut = options.stdout ? undefined : (options.out ?? defaultOutName);
     if (!existsSync(resolved)) {
         console.error(error(`Not found: ${resolved}`));
         process.exit(1);
     }
     // Collect and scan
-    const paths = collectFiles(resolved);
+    const paths = collectCodeFiles(resolved);
     if (paths.length === 0) {
         console.log(info('No code files found to scan.'));
         return;
     }
     // Show progress for large codebases
-    if (!options.out && paths.length > 20 && process.stderr.isTTY) {
+    if (!effectiveOut && paths.length > 20 && process.stderr.isTTY) {
         process.stderr.write(colors.dim(`  Scanning ${paths.length} files...`));
     }
-    const results = paths.map(p => scoreFile(relative(cwd, p), readFileSync(p, 'utf-8')));
+    const results = paths.map((p) => scoreFile(relative(cwd, p), readFileSync(p, 'utf-8')));
     // Clear progress line
-    if (!options.out && paths.length > 20 && process.stderr.isTTY) {
+    if (!effectiveOut && paths.length > 20 && process.stderr.isTTY) {
         process.stderr.write('\r\x1b[K');
     }
     const totalFindings = results.reduce((s, r) => s + r.findings.length, 0);
-    const criticalCount = results.reduce((s, r) => s + r.findings.filter(f => f.severity === 'critical').length, 0);
-    const highCount = results.reduce((s, r) => s + r.findings.filter(f => f.severity === 'high').length, 0);
-    const mediumCount = results.reduce((s, r) => s + r.findings.filter(f => f.severity === 'medium').length, 0);
-    const lowCount = results.reduce((s, r) => s + r.findings.filter(f => f.severity === 'low').length, 0);
-    const overallScore = results.length > 0
-        ? Math.round(results.reduce((s, r) => s + r.score, 0) / results.length)
-        : 100;
+    const criticalCount = results.reduce((s, r) => s + r.findings.filter((f) => f.severity === 'critical').length, 0);
+    const highCount = results.reduce((s, r) => s + r.findings.filter((f) => f.severity === 'high').length, 0);
+    const mediumCount = results.reduce((s, r) => s + r.findings.filter((f) => f.severity === 'medium').length, 0);
+    const lowCount = results.reduce((s, r) => s + r.findings.filter((f) => f.severity === 'low').length, 0);
+    const overallScore = results.length > 0 ? Math.round(results.reduce((s, r) => s + r.score, 0) / results.length) : 100;
     const grade = overallScore >= 90 ? 'A' : overallScore >= 75 ? 'B' : overallScore >= 60 ? 'C' : overallScore >= 40 ? 'D' : 'F';
     const recommendation = criticalCount > 0
         ? `${criticalCount} critical issue${criticalCount !== 1 ? 's' : ''} need${criticalCount === 1 ? 's' : ''} attention before this merges.`
@@ -310,9 +296,9 @@ export async function executeReportCommand(target, options = {}) {
     // JSON output
     if (options.json) {
         const output = JSON.stringify(report, null, 2);
-        if (options.out) {
-            writeFileSync(options.out, output);
-            console.log(success(`Report written to ${options.out}`));
+        if (effectiveOut) {
+            writeFileSync(effectiveOut, output);
+            console.log(success(`Report written to ${effectiveOut}`));
         }
         else {
             console.log(output);
@@ -322,9 +308,9 @@ export async function executeReportCommand(target, options = {}) {
     // Simple (non-technical) output
     if (options.simple) {
         const simple = generateSimpleReport(report, resolved);
-        if (options.out) {
-            writeFileSync(options.out, simple);
-            console.log(success(`Plain-English report written to ${options.out}`));
+        if (effectiveOut) {
+            writeFileSync(effectiveOut, simple);
+            console.log(success(`Plain-English report written to ${effectiveOut}`));
         }
         else {
             process.stdout.write(simple + '\n');
@@ -333,20 +319,21 @@ export async function executeReportCommand(target, options = {}) {
     }
     // Markdown output
     const markdown = generateMarkdown(report, resolved, cwd);
-    if (options.out) {
-        writeFileSync(options.out, markdown);
+    if (effectiveOut) {
+        writeFileSync(effectiveOut, markdown);
         newline();
-        console.log(success(`Report written to ${options.out}`));
+        console.log(success(`Report written to ${effectiveOut}`));
         console.log(colors.dim(`  ${paths.length} files · score ${overallScore}/100 · grade ${grade}`));
         if (criticalCount > 0) {
             console.log(colors.red(`  ${criticalCount} critical issue${criticalCount !== 1 ? 's' : ''} — check the report`));
         }
         newline();
         console.log(colors.dim('  Share it: paste it in your PR, add the badge to your README.'));
+        console.log(colors.dim('  Use --stdout to pipe the report instead of writing a file.'));
         newline();
     }
     else {
-        // Print to stdout (can be piped to file)
+        // --stdout: print to stdout (can be piped)
         process.stdout.write(markdown);
     }
 }

package/dist/presentation/cli/commands/setup-command.js

@@ -188,7 +188,7 @@ export async function executeSetupCommand(force = false) {
         }
         else {
             console.log(warning('Codebase: Not detected'));
-            console.log(colors.dim('  Make sure you\'re in your project directory.'));
+            console.log(colors.dim("  Make sure you're in your project directory."));
             result.codebaseDetected = false;
         }
         newline();
@@ -221,9 +221,9 @@ export async function executeSetupCommand(force = false) {
             console.log(success('Done.'));
             newline();
             console.log(colors.bold('Next steps:'));
-            console.log(colors.dim(`  1. ${colors.cyan('codehere index')}    Build search index`));
-            console.log(colors.dim(`  2. ${colors.cyan('codehere trust .')}  Scan for vulnerabilities`));
-            console.log(colors.dim(`  3. ${colors.cyan('codehere')}          Launch interactive session`));
+            console.log(colors.dim(`  1. ${colors.cyan('codehere start')}        Open the task intake at :3773`));
+            console.log(colors.dim(`  2. ${colors.cyan('codehere hook install')} Audit every Claude Code action`));
+            console.log(colors.dim(`  3. ${colors.cyan('codehere trust .')}      Scan your project (no API key)`));
             newline();
             saveSetupConfig(result);
             // Track onboarding completion for first-time users