coverme-scanner 4.0.1 → 4.0.2

package/dist/prompts/coverme-command.md

@@ -566,47 +566,47 @@ Return ONLY: "done"
 
 ---
 
-## Phase 3: Aggregate Results
+## Phase 3: Aggregate Results (FAST)
 
-**CRITICAL: Use Write tool directly, NOT bash heredoc**
+**SPEED IS CRITICAL - Do this quickly:**
 
-1. List agent files:
+1. Read agent files in PARALLEL:
 ```bash
-ls .coverme/agents/*.json 2>/dev/null | head -30
+cat .coverme/agents/*.json 2>/dev/null | head -500
 ```
 
-2. Read each agent JSON file using the Read tool (in parallel if possible)
-
-3. **Use the Write tool** to save `.coverme/scan.json` with this structure:
+2. Build a MINIMAL scan.json with only essential fields:
 ```json
 {
-  "projectName": "from package.json or folder name",
-  "scanDate": "ISO timestamp",
-  "filesScanned": N,
-  "linesOfCode": N,
-  "findings": [merged from all agent files, deduplicated],
-  "positiveObservations": [from POSITIVE.json],
+  "projectName": "PROJECT_NAME",
+  "scanDate": "DATE",
+  "findings": [/* max 30 findings, critical/high first */],
   "summary": {"critical":N,"high":N,"medium":N,"low":N}
 }
 ```
 
-**IMPORTANT**:
-- Use Write tool, not bash echo/cat
-- Keep max 50 findings (prioritize by severity)
-- Max 3 code snippets per finding
+3. **Write scan.json using Write tool** - keep it under 50KB!
+   - Max 30 findings total
+   - Max 100 chars per code snippet
+   - No duplicate findings
 
 ---
 
-## Phase 4: Generate Report
+## Phase 4: Generate PDF Report
+
+**Run this IMMEDIATELY after writing scan.json:**
+
+```bash
+coverme .coverme/scan.json security-report-$(date +%Y-%m-%d).pdf && open security-report-$(date +%Y-%m-%d).pdf
+```
 
+If that fails, try:
 ```bash
-TIMESTAMP=$(date +%Y-%m-%d_%H-%M-%S)
-npx coverme-scanner report .coverme/scan.json -f html -o ".coverme/report_$TIMESTAMP.html"
-open ".coverme/report_$TIMESTAMP.html"
+npx coverme-scanner .coverme/scan.json security-report.pdf && open security-report.pdf
 ```
 
 ---
 
 ## DONE
 
-Tell user: "Scan complete! Report opened."
+Tell user: "Scan complete! PDF report opened."

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "coverme-scanner",
-  "version": "4.0.1",
+  "version": "4.0.2",
   "description": "AI-powered security scanner with 33 agents including AI-generated code detection. STRIDE/DREAD scoring, adversarial review, professional PDF reports.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",