coverme-scanner 1.0.1 → 1.0.3

package/dist/cli/init.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/cli/init.ts"],"names":[],"mappings":"AAIA,UAAU,WAAW;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAiiBD,wBAAsB,IAAI,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CA2D9D"}
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/cli/init.ts"],"names":[],"mappings":"AAIA,UAAU,WAAW;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAyfD,wBAAsB,IAAI,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CA0E9D"}

package/dist/cli/init.js

@@ -510,66 +510,26 @@ Combine all results:
 
 ## Phase 4: Generate Report
 
-Create a JSON file named \`coverme-scan.json\` with this EXACT structure:
-
-\`\`\`json
-{
-  "projectName": "<name from package.json or folder name>",
-  "scanDate": "<today's date formatted nicely>",
-  "findings": [
-    {
-      "id": "SEC-001",
-      "title": "Issue title",
-      "severity": "critical|high|medium|low|info",
-      "category": "security|auth|api|infrastructure|privacy|ai-security|performance|business-logic|quality|testing",
-      "file": "path/to/file.ts",
-      "line": 123,
-      "description": "Clear description of the issue",
-      "code": "the problematic code snippet (include 5+ lines of context)",
-      "recommendation": "Specific fix with code example if possible",
-      "confidence": 95,
-      "cwe": "CWE-XXX if applicable"
-    }
-  ],
-  "falsePositives": [
-    {
-      "id": "SEC-002",
-      "title": "What was originally flagged",
-      "file": "path/to/file.ts",
-      "reason": "Why it was rejected"
-    }
-  ],
-  "positiveObservations": [
-    "Uses parameterized queries for all database access",
-    "Implements proper rate limiting on authentication endpoints",
-    "PKCE implemented for OAuth flow",
-    "Proper secret management with environment variables",
-    "Comprehensive error handling with proper logging",
-    "Input validation using Zod/Joi schemas"
-  ],
-  "scanDuration": 300000,
-  "agentCount": 13
-}
-\`\`\`
+Update the existing \`.coverme/scan.json\` file with the scan results. The file already exists with the correct structure - just fill in the values:
+
+- **projectName**: from package.json or folder name
+- **scanDate**: today's date
+- **findings**: array of issues found (each with id, title, severity, category, file, line, description, code, recommendation, confidence)
+- **positiveObservations**: array of good patterns found
+- **scanDuration**: time taken in ms
+- **agentCount**: 7
 
-Use the Write tool to save this JSON to \`coverme-scan.json\`.
+Use the Edit tool to update \`.coverme/scan.json\` with the results.
 
 ---
 
 ## Phase 5: Generate HTML Report
 
-1. Create the .coverme directory and save the JSON:
-\`\`\`bash
-mkdir -p .coverme
-\`\`\`
-
-2. Use the Write tool to save the JSON to \`coverme-scan.json\`
-
-3. Generate the HTML report and open it:
+Generate the HTML report and open it:
 \`\`\`bash
 TIMESTAMP=$(date +%Y-%m-%d_%H-%M-%S)
-npx coverme report coverme-scan.json -f html -o ".coverme/report_$TIMESTAMP.html"
-mv coverme-scan.json ".coverme/scan_$TIMESTAMP.json"
+npx coverme-scanner report .coverme/scan.json -f html -o ".coverme/report_$TIMESTAMP.html"
+cp .coverme/scan.json ".coverme/scan_$TIMESTAMP.json"
 open ".coverme/report_$TIMESTAMP.html"
 \`\`\`
 
@@ -599,6 +559,20 @@ async function init(options) {
         fs.mkdirSync(covermeDir, { recursive: true });
         console.log(`Created: ${covermeDir}/`);
     }
+    // Create scan.json template
+    const scanJsonPath = path.join(covermeDir, 'scan.json');
+    if (!fs.existsSync(scanJsonPath)) {
+        const scanTemplate = {
+            projectName: "",
+            scanDate: "",
+            findings: [],
+            positiveObservations: [],
+            scanDuration: 0,
+            agentCount: 7
+        };
+        fs.writeFileSync(scanJsonPath, JSON.stringify(scanTemplate, null, 2));
+        console.log(`Created: ${scanJsonPath}`);
+    }
     // Add .coverme to .gitignore if not already there
     const gitignorePath = path.join(process.cwd(), '.gitignore');
     const covermeIgnore = '\n# CoverMe scan reports\n.coverme/\n';

package/dist/cli/init.js.map

@@ -1 +1 @@
-{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/cli/init.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuiBA,oBA2DC;AAlmBD,uCAAyB;AACzB,2CAA6B;AAC7B,uCAAyB;AAMzB,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6hBrB,CAAC;AAEK,KAAK,UAAU,IAAI,CAAC,OAAoB;IAC7C,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM;QAC9B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC;QAChD,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IAEpD,OAAO,CAAC,GAAG,CAAC,oCAAoC,SAAS,EAAE,CAAC,CAAC;IAE7D,6BAA6B;IAC7B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,sBAAsB,SAAS,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,0BAA0B;IAC1B,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IACvD,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,YAAY,WAAW,EAAE,CAAC,CAAC;IAEvC,wCAAwC;IACxC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,UAAU,CAAC,CAAC;IACxD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,YAAY,UAAU,GAAG,CAAC,CAAC;IACzC,CAAC;IAED,kDAAkD;IAClD,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,YAAY,CAAC,CAAC;IAC7D,MAAM,aAAa,GAAG,uCAAuC,CAAC;IAE9D,IAAI,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QACjC,MAAM,gBAAgB,GAAG,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QACjE,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3C,EAAE,CAAC,cAAc,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;YAChD,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;SAAM,CAAC;QACN,EAAE,CAAC,aAAa,CAAC,aAAa,EAAE,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;IACnD,CAAC;IAED,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;CAkBb,CAAC,CAAC;AACH,CAAC"}
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/cli/init.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+fA,oBA0EC;AAzkBD,uCAAyB;AACzB,2CAA6B;AAC7B,uCAAyB;AAMzB,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqfrB,CAAC;AAEK,KAAK,UAAU,IAAI,CAAC,OAAoB;IAC7C,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM;QAC9B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC;QAChD,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IAEpD,OAAO,CAAC,GAAG,CAAC,oCAAoC,SAAS,EAAE,CAAC,CAAC;IAE7D,6BAA6B;IAC7B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,sBAAsB,SAAS,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,0BAA0B;IAC1B,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IACvD,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,YAAY,WAAW,EAAE,CAAC,CAAC;IAEvC,wCAAwC;IACxC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,UAAU,CAAC,CAAC;IACxD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,YAAY,UAAU,GAAG,CAAC,CAAC;IACzC,CAAC;IAED,4BAA4B;IAC5B,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IACxD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACjC,MAAM,YAAY,GAAG;YACnB,WAAW,EAAE,EAAE;YACf,QAAQ,EAAE,EAAE;YACZ,QAAQ,EAAE,EAAE;YACZ,oBAAoB,EAAE,EAAE;YACxB,YAAY,EAAE,CAAC;YACf,UAAU,EAAE,CAAC;SACd,CAAC;QACF,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACtE,OAAO,CAAC,GAAG,CAAC,YAAY,YAAY,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,kDAAkD;IAClD,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,YAAY,CAAC,CAAC;IAC7D,MAAM,aAAa,GAAG,uCAAuC,CAAC;IAE9D,IAAI,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QACjC,MAAM,gBAAgB,GAAG,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QACjE,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3C,EAAE,CAAC,cAAc,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;YAChD,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;SAAM,CAAC;QACN,EAAE,CAAC,aAAa,CAAC,aAAa,EAAE,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;IACnD,CAAC;IAED,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;CAkBb,CAAC,CAAC;AACH,CAAC"}

package/dist/templates/scan-result.json

@@ -0,0 +1,37 @@
+{
+  "projectName": "",
+  "scanDate": "",
+  "duration": "",
+  "score": "",
+  "findings": [
+    {
+      "id": "",
+      "title": "",
+      "severity": "critical|high|medium|low",
+      "category": "security|quality|architecture|dependencies|performance",
+      "file": "",
+      "line": 0,
+      "description": "",
+      "whyItMatters": "",
+      "codeSnippet": "",
+      "checkBeforeFixing": "",
+      "suggestedFix": "",
+      "claudeCodePrompt": "",
+      "confidence": 0
+    }
+  ],
+  "positiveObservations": [
+    {
+      "title": "",
+      "description": ""
+    }
+  ],
+  "summary": {
+    "critical": 0,
+    "high": 0,
+    "medium": 0,
+    "low": 0,
+    "total": 0
+  },
+  "agentCount": 7
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "coverme-scanner",
-  "version": "1.0.1",
+  "version": "1.0.3",
   "description": "AI-powered code scanner with multi-agent verification for Claude Code. One command scans everything.",
   "main": "dist/index.js",
   "bin": {

package/src/cli/init.ts

@@ -479,66 +479,26 @@ Combine all results:
 
 ## Phase 4: Generate Report
 
-Create a JSON file named \`coverme-scan.json\` with this EXACT structure:
-
-\`\`\`json
-{
-  "projectName": "<name from package.json or folder name>",
-  "scanDate": "<today's date formatted nicely>",
-  "findings": [
-    {
-      "id": "SEC-001",
-      "title": "Issue title",
-      "severity": "critical|high|medium|low|info",
-      "category": "security|auth|api|infrastructure|privacy|ai-security|performance|business-logic|quality|testing",
-      "file": "path/to/file.ts",
-      "line": 123,
-      "description": "Clear description of the issue",
-      "code": "the problematic code snippet (include 5+ lines of context)",
-      "recommendation": "Specific fix with code example if possible",
-      "confidence": 95,
-      "cwe": "CWE-XXX if applicable"
-    }
-  ],
-  "falsePositives": [
-    {
-      "id": "SEC-002",
-      "title": "What was originally flagged",
-      "file": "path/to/file.ts",
-      "reason": "Why it was rejected"
-    }
-  ],
-  "positiveObservations": [
-    "Uses parameterized queries for all database access",
-    "Implements proper rate limiting on authentication endpoints",
-    "PKCE implemented for OAuth flow",
-    "Proper secret management with environment variables",
-    "Comprehensive error handling with proper logging",
-    "Input validation using Zod/Joi schemas"
-  ],
-  "scanDuration": 300000,
-  "agentCount": 13
-}
-\`\`\`
+Update the existing \`.coverme/scan.json\` file with the scan results. The file already exists with the correct structure - just fill in the values:
+
+- **projectName**: from package.json or folder name
+- **scanDate**: today's date
+- **findings**: array of issues found (each with id, title, severity, category, file, line, description, code, recommendation, confidence)
+- **positiveObservations**: array of good patterns found
+- **scanDuration**: time taken in ms
+- **agentCount**: 7
 
-Use the Write tool to save this JSON to \`coverme-scan.json\`.
+Use the Edit tool to update \`.coverme/scan.json\` with the results.
 
 ---
 
 ## Phase 5: Generate HTML Report
 
-1. Create the .coverme directory and save the JSON:
-\`\`\`bash
-mkdir -p .coverme
-\`\`\`
-
-2. Use the Write tool to save the JSON to \`coverme-scan.json\`
-
-3. Generate the HTML report and open it:
+Generate the HTML report and open it:
 \`\`\`bash
 TIMESTAMP=$(date +%Y-%m-%d_%H-%M-%S)
-npx coverme report coverme-scan.json -f html -o ".coverme/report_$TIMESTAMP.html"
-mv coverme-scan.json ".coverme/scan_$TIMESTAMP.json"
+npx coverme-scanner report .coverme/scan.json -f html -o ".coverme/report_$TIMESTAMP.html"
+cp .coverme/scan.json ".coverme/scan_$TIMESTAMP.json"
 open ".coverme/report_$TIMESTAMP.html"
 \`\`\`
 
@@ -574,6 +534,21 @@ export async function init(options: InitOptions): Promise<void> {
     console.log(`Created: ${covermeDir}/`);
   }
 
+  // Create scan.json template
+  const scanJsonPath = path.join(covermeDir, 'scan.json');
+  if (!fs.existsSync(scanJsonPath)) {
+    const scanTemplate = {
+      projectName: "",
+      scanDate: "",
+      findings: [],
+      positiveObservations: [],
+      scanDuration: 0,
+      agentCount: 7
+    };
+    fs.writeFileSync(scanJsonPath, JSON.stringify(scanTemplate, null, 2));
+    console.log(`Created: ${scanJsonPath}`);
+  }
+
   // Add .coverme to .gitignore if not already there
   const gitignorePath = path.join(process.cwd(), '.gitignore');
   const covermeIgnore = '\n# CoverMe scan reports\n.coverme/\n';

package/src/templates/scan-result.json

@@ -0,0 +1,37 @@
+{
+  "projectName": "",
+  "scanDate": "",
+  "duration": "",
+  "score": "",
+  "findings": [
+    {
+      "id": "",
+      "title": "",
+      "severity": "critical|high|medium|low",
+      "category": "security|quality|architecture|dependencies|performance",
+      "file": "",
+      "line": 0,
+      "description": "",
+      "whyItMatters": "",
+      "codeSnippet": "",
+      "checkBeforeFixing": "",
+      "suggestedFix": "",
+      "claudeCodePrompt": "",
+      "confidence": 0
+    }
+  ],
+  "positiveObservations": [
+    {
+      "title": "",
+      "description": ""
+    }
+  ],
+  "summary": {
+    "critical": 0,
+    "high": 0,
+    "medium": 0,
+    "low": 0,
+    "total": 0
+  },
+  "agentCount": 7
+}