create-backlist 10.0.1 → 10.0.3

package/bin/index.js

@@ -15,6 +15,7 @@
 //  ✦ Rich error diagnostics with stack-trace filtering
 //  ✦ Session diff — shows what changed since last run
 //  ✦ Post-gen file-tree summary
+//  ✦ QA Engine v10.0 — URL QA, HTTP probe, security, SEO, a11y
 // ═══════════════════════════════════════════════════════════════════════════
 
 import * as p from '@clack/prompts';
@@ -30,7 +31,7 @@ import { performance } from 'node:perf_hooks';
 const __filename = fileURLToPath(import.meta.url);
 const __dirname  = path.dirname(__filename);
 
-// ── CLI boot timestamp (10X: measure cold-start time) ────────────────────
+// ── CLI boot timestamp ────────────────────────────────────────────────────
 const BOOT_START = performance.now();
 
 // ── Internal Modules ─────────────────────────────────────────────────────
@@ -47,20 +48,25 @@ import { generateDotnetProject } from '../src/generators/dotnet.js';
 import { generateJavaProject }   from '../src/generators/java.js';
 import { generatePythonProject } from '../src/generators/python.js';
 
-// ── QA System ────────────────────────────────────────────────────────────
-import { runManualQA, runAutomatedQA,
-         viewQAHistory, initQASystem,
-         autoRunPostGeneration }                                        from '../src/qa/qa-engine.js';
+// ── QA System v10.0 ───────────────────────────────────────────────────────
+import {
+  runManualQA,
+  runAutomatedQA,
+  runUrlQA,
+  viewQAHistory,
+  initQASystem,
+  autoRunPostGeneration,
+} from '../src/qa/qa-engine.js';
 
 // ═══════════════════════════════════════════════════════════════════════════
 //  Constants & Paths
 // ═══════════════════════════════════════════════════════════════════════════
 
-const CONFIG_PATH    = path.join(os.homedir(), '.backlist-config.json');
-const SESSIONS_PATH  = path.join(os.homedir(), '.backlist-sessions.json');
-const PLUGINS_DIR    = path.join(os.homedir(), '.backlist-plugins');
-const VERSION        = '8.0.0-10X';
-const MAX_RETRIES    = 3;   // 10X: auto-retry generation up to 3 times
+const CONFIG_PATH   = path.join(os.homedir(), '.backlist-config.json');
+const SESSIONS_PATH = path.join(os.homedir(), '.backlist-sessions.json');
+const PLUGINS_DIR   = path.join(os.homedir(), '.backlist-plugins');
+const VERSION       = '8.0.0-10X';
+const MAX_RETRIES   = 3;
 
 // ── Pricing Table ─────────────────────────────────────────────────────────
 const PRICING = {
@@ -87,17 +93,26 @@ const PREFLIGHT_HINTS = {
   'Python 3 installed'  : 'Download from https://python.org or use `winget install Python.Python.3`',
 };
 
+// ── RSS memory helper (used in banner) ───────────────────────────────────
+const rssMB = (() => {
+  try { return (process.memoryUsage().rss / 1024 / 1024).toFixed(0); } catch { return '?'; }
+})();
+
 // ═══════════════════════════════════════════════════════════════════════════
-//  10X: Graceful Shutdown Handler
+//  Graceful Shutdown Handler
 // ═══════════════════════════════════════════════════════════════════════════
 
-let _cleanupDir = null;   // set during generation so SIGINT can clean up
+let _cleanupDir = null;
 
 async function gracefulShutdown(signal) {
   console.log('');
   console.log(chalk.yellow(`\n  ⚠️  ${signal} received — shutting down gracefully...`));
   if (_cleanupDir && await fs.pathExists(_cleanupDir)) {
-    const sc = ora({ text: chalk.yellow('Cleaning up partial output...'), spinner: 'line', color: 'yellow' }).start();
+    const sc = ora({
+      text   : chalk.yellow('Cleaning up partial output...'),
+      spinner: 'line',
+      color  : 'yellow',
+    }).start();
     await fs.remove(_cleanupDir).catch(() => {});
     sc.succeed(chalk.yellow('Partial output removed.'));
   }
@@ -131,11 +146,9 @@ function printBanner() {
   console.log(c1('  ╚══════════════════════════════════════════════════════════════╝'));
   console.log('');
 
-  // 10X: Boot time + live system status bar
   const bootMs   = (performance.now() - BOOT_START).toFixed(0);
   const mem      = process.memoryUsage();
   const heapMB   = (mem.heapUsed / 1024 / 1024).toFixed(0);
-  const rssMB    = (mem.rss / 1024 / 1024).toFixed(0);
   const uptime   = process.uptime().toFixed(1);
   const nodeVer  = process.version;
   const platform = process.platform;
@@ -144,24 +157,19 @@ function printBanner() {
   console.log(
     dim('  ') +
     c4('◉ LIVE') + dim(' │ ') +
-    dim('Boot ') + chalk.white(bootMs + 'ms') + dim(' │ ') +
-    dim('Node ') + chalk.white(nodeVer) + dim(' │ ') +
-    dim('Heap ') + chalk.white(heapMB + 'MB') + dim('/') + chalk.gray(rssMP + 'MB RSS') + dim(' │ ') +
-    dim('CPUs ') + chalk.white(cpus) + dim(' │ ') +
-    dim('OS ') + chalk.white(platform) + dim(' │ ') +
-    dim('v') + chalk.white(VERSION)
+    dim('Boot ')  + chalk.white(bootMs + 'ms')  + dim(' │ ') +
+    dim('Node ')  + chalk.white(nodeVer)         + dim(' │ ') +
+    dim('Heap ')  + chalk.white(heapMB + 'MB')   + dim('/') + chalk.gray(rssMB + 'MB RSS') + dim(' │ ') +
+    dim('CPUs ')  + chalk.white(cpus)             + dim(' │ ') +
+    dim('OS ')    + chalk.white(platform)         + dim(' │ ') +
+    dim('v')      + chalk.white(VERSION)
   );
   console.log(dim('  ─────────────────────────────────────────────────────────────'));
   console.log('');
 }
 
-// ── RSS typo fix helper (used in banner) ─────────────────────────────────
-const rssMP = (() => {
-  try { return (process.memoryUsage().rss / 1024 / 1024).toFixed(0); } catch { return '?'; }
-})();
-
 // ═══════════════════════════════════════════════════════════════════════════
-//  10X: Smart Session Manager — with diff display
+//  Smart Session Manager
 // ═══════════════════════════════════════════════════════════════════════════
 
 async function loadLastSession() {
@@ -183,7 +191,6 @@ async function saveSession(options) {
         generationMode: options.generationMode,
         projectName   : options.projectName,
         savedAt       : new Date().toISOString(),
-        // 10X: track extra features for diff
         extraFeatures : options.extraFeatures ?? [],
         addAuth       : options.addAuth,
         addSeeder     : options.addSeeder,
@@ -192,13 +199,15 @@ async function saveSession(options) {
   } catch {}
 }
 
-// 10X: Show what changed vs last session
 function printSessionDiff(last, current) {
   if (!last) return;
   const changes = [];
-  if (last.stack          !== current.stack)          changes.push(`Stack: ${chalk.red(last.stack)} → ${chalk.green(current.stack)}`);
-  if (last.dbType         !== current.dbType)         changes.push(`DB: ${chalk.red(last.dbType)} → ${chalk.green(current.dbType)}`);
-  if (last.generationMode !== current.generationMode) changes.push(`Mode: ${chalk.red(last.generationMode)} → ${chalk.green(current.generationMode)}`);
+  if (last.stack          !== current.stack)
+    changes.push(`Stack: ${chalk.red(last.stack)} → ${chalk.green(current.stack)}`);
+  if (last.dbType         !== current.dbType)
+    changes.push(`DB: ${chalk.red(last.dbType)} → ${chalk.green(current.dbType)}`);
+  if (last.generationMode !== current.generationMode)
+    changes.push(`Mode: ${chalk.red(last.generationMode)} → ${chalk.green(current.generationMode)}`);
   if (changes.length === 0) return;
   console.log(chalk.dim('  ── 🔀 Changes from last session:'));
   changes.forEach(c => console.log(chalk.dim('     ' + c)));
@@ -206,7 +215,7 @@ function printSessionDiff(last, current) {
 }
 
 // ═══════════════════════════════════════════════════════════════════════════
-//  Plugin Loader — parallel loading (10X)
+//  Plugin Loader — parallel loading
 // ═══════════════════════════════════════════════════════════════════════════
 
 async function loadPlugins() {
@@ -214,8 +223,6 @@ async function loadPlugins() {
   try {
     await fs.ensureDir(PLUGINS_DIR);
     const entries = await fs.readdir(PLUGINS_DIR);
-
-    // 10X: load all plugins in parallel
     const results = await Promise.allSettled(
       entries.map(async (entry) => {
         const pluginPath = path.join(PLUGINS_DIR, entry, 'index.js');
@@ -224,7 +231,6 @@ async function loadPlugins() {
         return (plugin.default?.name && plugin.default?.run) ? plugin.default : null;
       })
     );
-
     for (const r of results) {
       if (r.status === 'fulfilled' && r.value) plugins.push(r.value);
     }
@@ -233,7 +239,7 @@ async function loadPlugins() {
 }
 
 // ═══════════════════════════════════════════════════════════════════════════
-//  10X: Pre-flight Environment Checker with auto-fix hints
+//  Pre-flight Environment Checker
 // ═══════════════════════════════════════════════════════════════════════════
 
 async function runPreflightChecks(stack) {
@@ -245,20 +251,22 @@ async function runPreflightChecks(stack) {
   const pkgOk = await fs.pathExists(path.join(process.cwd(), 'package.json'));
   checks.push({ name: 'package.json present', pass: pkgOk });
 
-  if (stack === 'dotnet-webapi')  checks.push({ name: '.NET SDK installed',  pass: await isCommandAvailable('dotnet')  });
-  if (stack === 'java-spring')    checks.push({ name: 'Java JDK installed',  pass: await isCommandAvailable('java')    });
-  if (stack === 'python-fastapi') checks.push({ name: 'Python 3 installed',  pass: await isCommandAvailable('python3') || await isCommandAvailable('python') });
+  if (stack === 'dotnet-webapi')
+    checks.push({ name: '.NET SDK installed',  pass: await isCommandAvailable('dotnet')  });
+  if (stack === 'java-spring')
+    checks.push({ name: 'Java JDK installed',  pass: await isCommandAvailable('java')    });
+  if (stack === 'python-fastapi')
+    checks.push({ name: 'Python 3 installed',  pass: await isCommandAvailable('python3') || await isCommandAvailable('python') });
 
-  const failed = checks.filter((c) => !c.pass);
+  const failed = checks.filter(c => !c.pass);
 
   if (checks.length > 0) {
     console.log('');
     console.log(chalk.hex('#00F5FF').bold('  ── 🔍 Pre-flight Checks ──────────────────────────────'));
-    checks.forEach((c) => {
+    checks.forEach(c => {
       const icon  = c.pass ? chalk.green('  ✓') : chalk.red('  ✗');
       const label = c.pass ? chalk.dim(c.name) : chalk.red.bold(c.name);
       console.log(`${icon} ${label}`);
-      // 10X: print fix hint for failed checks
       if (!c.pass && PREFLIGHT_HINTS[c.name]) {
         console.log(chalk.gray(`     💡 Fix: ${PREFLIGHT_HINTS[c.name]}`));
       }
@@ -279,14 +287,12 @@ function buildProgressBar(pct, width = 24) {
 }
 
 // ═══════════════════════════════════════════════════════════════════════════
-//  10X: Token / Pricing Display with ETA
+//  Token / Pricing Display
 // ═══════════════════════════════════════════════════════════════════════════
 
 function printTokenUsage(mode, startTime, extra = {}) {
   const elapsed  = ((Date.now() - startTime) / 1000).toFixed(2);
   const pricing  = PRICING[mode] || PRICING.free;
-
-  // 10X: files/sec throughput
   const throughput = extra.filesGenerated && elapsed > 0
     ? (extra.filesGenerated / parseFloat(elapsed)).toFixed(1) + ' files/s'
     : null;
@@ -298,19 +304,10 @@ function printTokenUsage(mode, startTime, extra = {}) {
   console.log('');
   console.log(`  ${chalk.dim('Mode:')}          ${mode === 'pro' ? chalk.hex('#BF40FF').bold('PRO AI ✦') : chalk.hex('#00F5FF').bold('Standard ◉')}`);
   console.log(`  ${chalk.dim('Elapsed:')}       ${chalk.white(elapsed + 's')}`);
-
-  if (extra.endpointCount !== undefined) {
-    console.log(`  ${chalk.dim('Endpoints:')}     ${chalk.white(extra.endpointCount + ' detected')}`);
-  }
-  if (extra.filesGenerated !== undefined) {
-    console.log(`  ${chalk.dim('Files written:')} ${chalk.white(extra.filesGenerated)}`);
-  }
-  if (throughput) {
-    console.log(`  ${chalk.dim('Throughput:')}    ${chalk.cyan(throughput)}`);
-  }
-  if (extra.retries && extra.retries > 0) {
-    console.log(`  ${chalk.dim('Retries:')}       ${chalk.yellow(extra.retries)}`);
-  }
+  if (extra.endpointCount  !== undefined) console.log(`  ${chalk.dim('Endpoints:')}     ${chalk.white(extra.endpointCount + ' detected')}`);
+  if (extra.filesGenerated !== undefined) console.log(`  ${chalk.dim('Files written:')} ${chalk.white(extra.filesGenerated)}`);
+  if (throughput)                         console.log(`  ${chalk.dim('Throughput:')}    ${chalk.cyan(throughput)}`);
+  if (extra.retries && extra.retries > 0) console.log(`  ${chalk.dim('Retries:')}       ${chalk.yellow(extra.retries)}`);
   if (mode === 'pro') {
     const usagePct = Math.round((pricing.outputTokens / 16000) * 100);
     console.log(`  ${chalk.dim('Input tokens:')}  ${chalk.yellow(pricing.inputTokens.toLocaleString())}`);
@@ -344,7 +341,7 @@ async function detectFrontendFramework(srcDir) {
 }
 
 // ═══════════════════════════════════════════════════════════════════════════
-//  API Key Management — masked display & expiry check
+//  API Key Management
 // ═══════════════════════════════════════════════════════════════════════════
 
 async function getProApiKey() {
@@ -375,13 +372,13 @@ async function getProApiKey() {
     message : 'Enter your Backlist Pro API Key:',
     validate: (input) => {
       if (!input || input.trim().length < 10) return '❌ Invalid key — must be at least 10 characters.';
-      if (/\s/.test(input)) return '❌ Key must not contain spaces.';
+      if (/\s/.test(input))                   return '❌ Key must not contain spaces.';
     },
   });
   if (p.isCancel(apiKey)) { p.cancel('Cancelled.'); process.exit(0); }
 
   const spinner = ora({ text: chalk.cyan('Validating API key...'), spinner: 'arc', color: 'cyan' }).start();
-  await new Promise((r) => setTimeout(r, 1800));
+  await new Promise(r => setTimeout(r, 1800));
   spinner.succeed(chalk.green('API key validated ✓'));
 
   await fs.writeJson(CONFIG_PATH, { apiKey, savedAt: new Date().toISOString() }, { spaces: 2 });
@@ -390,7 +387,7 @@ async function getProApiKey() {
 }
 
 // ═══════════════════════════════════════════════════════════════════════════
-//  10X: Free Mode Pipeline with ETA tracker
+//  Free Mode Pipeline
 // ═══════════════════════════════════════════════════════════════════════════
 
 async function runFreeModePipeline(options) {
@@ -398,17 +395,20 @@ async function runFreeModePipeline(options) {
   console.log(chalk.hex('#00F5FF').bold('  ─── 🚀 Standard Mode: AST + EJS Static Generation ───'));
   console.log('');
 
-  const t0 = performance.now();
-  const steps = 5;
-  let stepsDone = 0;
-
+  const t0       = performance.now();
+  const steps    = 5;
+  let stepsDone  = 0;
   const stepLabel = () => chalk.dim(`[${++stepsDone}/${steps}]`);
 
   // Step 1 — AST
-  const spinnerAST = ora({ text: `${stepLabel()} ${chalk.white('Parsing frontend files with Babel AST...')}`, spinner: 'dots12', color: 'cyan' }).start();
+  const spinnerAST = ora({
+    text   : `${stepLabel()} ${chalk.white('Parsing frontend files with Babel AST...')}`,
+    spinner: 'dots12',
+    color  : 'cyan',
+  }).start();
   let endpoints = [];
   try { endpoints = await analyzeFrontend(options.frontendSrcDir); } catch {}
-  await new Promise((r) => setTimeout(r, 800));
+  await new Promise(r => setTimeout(r, 800));
   spinnerAST.succeed(chalk.green(`AST parsing complete — ${chalk.bold(endpoints.length)} endpoint(s) mapped.`));
 
   // Step 2 — Framework detection
@@ -416,12 +416,16 @@ async function runFreeModePipeline(options) {
   p.log.info(chalk.dim(`${stepLabel()} Frontend detected: ${fw.icon} ${chalk.white(fw.name)}`));
 
   // Step 3 — DOM Live Check
-  const spinnerDOM = ora({ text: `${stepLabel()} ${chalk.white('Running DOM Live Check...')}`, spinner: 'bouncingBar', color: 'yellow' }).start();
+  const spinnerDOM = ora({
+    text   : `${stepLabel()} ${chalk.white('Running DOM Live Check...')}`,
+    spinner: 'bouncingBar',
+    color  : 'yellow',
+  }).start();
   const inconsistencies = await performLowCostPathScan(options.frontendSrcDir, endpoints);
-  await new Promise((r) => setTimeout(r, 1200));
+  await new Promise(r => setTimeout(r, 1200));
   if (inconsistencies.length > 0) {
     spinnerDOM.warn(chalk.yellow(`DOM Live Check — ${inconsistencies.length} path drift(s) detected.`));
-    inconsistencies.slice(0, 3).forEach((i) => console.log(chalk.gray(`  → ${i.warning}`)));
+    inconsistencies.slice(0, 3).forEach(i => console.log(chalk.gray(`  → ${i.warning}`)));
   } else {
     spinnerDOM.succeed(chalk.green('DOM Live Check passed — ') + chalk.yellow.bold('15% false positives eliminated!'));
   }
@@ -429,8 +433,12 @@ async function runFreeModePipeline(options) {
   // Step 4 — EJS Scaffolding
   const meta       = STACK_META[options.stack] || {};
   const stackLabel = `${meta.icon || '⚙️'} ${options.stack}`;
-  const spinnerEJS = ora({ text: `${stepLabel()} ${chalk.white(`Scaffolding ${stackLabel} via Hexagonal EJS Templates...`)}`, spinner: 'material', color: 'magenta' }).start();
-  await new Promise((r) => setTimeout(r, 600));
+  const spinnerEJS = ora({
+    text   : `${stepLabel()} ${chalk.white(`Scaffolding ${stackLabel} via Hexagonal EJS Templates...`)}`,
+    spinner: 'material',
+    color  : 'magenta',
+  }).start();
+  await new Promise(r => setTimeout(r, 600));
 
   try {
     await dispatchGenerator(options);
@@ -440,13 +448,16 @@ async function runFreeModePipeline(options) {
     throw err;
   }
 
-  // Step 5 — Count generated files + print tree summary
-  const spinnerCount = ora({ text: `${stepLabel()} ${chalk.white('Counting generated files...')}`, spinner: 'line', color: 'cyan' }).start();
+  // Step 5 — Count generated files
+  const spinnerCount = ora({
+    text   : `${stepLabel()} ${chalk.white('Counting generated files...')}`,
+    spinner: 'line',
+    color  : 'cyan',
+  }).start();
   let fileCount = 0;
   try { fileCount = await globCount(options.projectDir); } catch {}
   spinnerCount.succeed(chalk.green(`${fileCount} file(s) written to ${chalk.bold(options.projectName)}/`));
 
-  // 10X: Print top-level file tree
   await printFileTreeSummary(options.projectDir);
 
   options._meta = {
@@ -457,7 +468,7 @@ async function runFreeModePipeline(options) {
 }
 
 // ═══════════════════════════════════════════════════════════════════════════
-//  10X: File Tree Summary (top 2 levels)
+//  File Tree Summary (top 2 levels)
 // ═══════════════════════════════════════════════════════════════════════════
 
 async function printFileTreeSummary(dir, depth = 0, maxDepth = 2) {
@@ -466,7 +477,7 @@ async function printFileTreeSummary(dir, depth = 0, maxDepth = 2) {
     console.log(chalk.dim('  ── 📁 Generated Project Structure ─────────────────────'));
   }
   try {
-    const entries = await fs.readdir(dir, { withFileTypes: true });
+    const entries  = await fs.readdir(dir, { withFileTypes: true });
     const filtered = entries.filter(e => e.name !== 'node_modules' && !e.name.startsWith('.'));
     for (const entry of filtered.slice(0, 12)) {
       const indent = '  ' + '  '.repeat(depth + 1);
@@ -486,7 +497,10 @@ async function printFileTreeSummary(dir, depth = 0, maxDepth = 2) {
 
 async function globCount(dir) {
   const { glob } = await import('glob');
-  const files = await glob(`${dir.replace(/\\/g, '/')}/**/*`, { nodir: true, ignore: ['**/node_modules/**'] });
+  const files = await glob(`${dir.replace(/\\/g, '/')}/**/*`, {
+    nodir : true,
+    ignore: ['**/node_modules/**'],
+  });
   return files.length;
 }
 
@@ -504,12 +518,14 @@ async function dispatchGenerator(options) {
     'python-fastapi'  : () => generatePythonProject(options),
   };
   const runner = gen[options.stack];
-  if (!runner) throw new Error(`Stack '${options.stack}' is not supported. Valid options: ${Object.keys(gen).join(', ')}`);
+  if (!runner) throw new Error(
+    `Stack '${options.stack}' is not supported. Valid options: ${Object.keys(gen).join(', ')}`
+  );
   await runner();
 }
 
 // ═══════════════════════════════════════════════════════════════════════════
-//  Pro AI Mode — streaming thought display
+//  Pro AI Mode
 // ═══════════════════════════════════════════════════════════════════════════
 
 async function callAIProcessor(astJsonData, apiKey, options) {
@@ -523,7 +539,11 @@ async function callAIProcessor(astJsonData, apiKey, options) {
 
   let thoughtCount   = 0;
   let warnCount      = 0;
-  let currentSpinner = ora({ text: chalk.cyan('Initialising autonomous agents...'), spinner: 'mindblown', color: 'magenta' }).start();
+  let currentSpinner = ora({
+    text   : chalk.cyan('Initialising autonomous agents...'),
+    spinner: 'mindblown',
+    color  : 'magenta',
+  }).start();
 
   const onThought = (msg) => {
     thoughtCount++;
@@ -540,7 +560,7 @@ async function callAIProcessor(astJsonData, apiKey, options) {
   await aiAgent.init();
 
   let existingPrisma = null;
-  const prismaPath = path.join(options.projectDir, 'prisma', 'schema.prisma');
+  const prismaPath   = path.join(options.projectDir, 'prisma', 'schema.prisma');
   if (await fs.pathExists(prismaPath)) existingPrisma = await fs.readFile(prismaPath, 'utf8');
 
   const pass1Data   = await aiAgent.generateBackendBlocks(astJsonData, existingPrisma);
@@ -555,12 +575,12 @@ async function callAIProcessor(astJsonData, apiKey, options) {
 }
 
 // ═══════════════════════════════════════════════════════════════════════════
-//  Health Dashboard — v8.0-10X
+//  Health Dashboard
 // ═══════════════════════════════════════════════════════════════════════════
 
 function printHealthDashboard(blocks, options = {}) {
   const secScore  = blocks.aiSecurityConfig && blocks.aiSecurityConfig.length > 20 ? 98 : 75;
-  const archScore = blocks.aiDbRelations    && blocks.aiDbRelations.length > 20    ? 99 : 80;
+  const archScore = blocks.aiDbRelations    && blocks.aiDbRelations.length    > 20 ? 99 : 80;
   const testScore = 85;
   const depsScore = 92;
   const overall   = Math.round((secScore + archScore + testScore + depsScore) / 4);
@@ -571,7 +591,6 @@ function printHealthDashboard(blocks, options = {}) {
     if (s >= 70) return chalk.yellow.bold(`${s}% B`);
     return chalk.red.bold(`${s}% C`);
   };
-
   const bar = (s) => buildProgressBar(s, 16);
 
   console.log('');
@@ -586,7 +605,6 @@ function printHealthDashboard(blocks, options = {}) {
   console.log('');
   console.log(`  🏆  Overall Score:         [${bar(overall)}] ${colorScore(overall)}`);
   console.log('');
-
   if (options.stack) {
     const meta = STACK_META[options.stack] || {};
     console.log(chalk.dim(`  Stack: ${meta.icon || ''} ${options.stack} (${meta.lang || ''} / ${meta.runtime || ''})`));
@@ -597,7 +615,7 @@ function printHealthDashboard(blocks, options = {}) {
 }
 
 // ═══════════════════════════════════════════════════════════════════════════
-//  Post-generation Next Steps Guide
+//  Post-generation Next Steps
 // ═══════════════════════════════════════════════════════════════════════════
 
 function printNextSteps(projectName, stack, dbType) {
@@ -628,7 +646,10 @@ function printNextSteps(projectName, stack, dbType) {
   }
 
   console.log('');
-  console.log(chalk.dim('  💡 Tip: Run') + chalk.white(' npm run qa ') + chalk.dim('to validate your generated backend.'));
+  console.log(
+    chalk.dim('  💡 Tip: Run') + chalk.white(' npm run qa ') +
+    chalk.dim('to validate your generated backend.')
+  );
   console.log(chalk.dim('  📖 Docs: https://backlist.dev/docs'));
   console.log('');
 }
@@ -648,7 +669,9 @@ async function runConfigManager() {
   if (exists) {
     try {
       const cfg    = await fs.readJson(CONFIG_PATH);
-      const masked = cfg.apiKey ? cfg.apiKey.slice(0, 4) + '●'.repeat(12) + cfg.apiKey.slice(-4) : 'none';
+      const masked = cfg.apiKey
+        ? cfg.apiKey.slice(0, 4) + '●'.repeat(12) + cfg.apiKey.slice(-4)
+        : 'none';
       console.log(`  ${chalk.dim('API Key:')}    ${chalk.white(masked)}`);
       console.log(`  ${chalk.dim('Saved at:')}   ${chalk.gray(cfg.savedAt || 'unknown')}`);
     } catch {}
@@ -674,17 +697,27 @@ async function runConfigManager() {
     message: 'What would you like to do?',
     options: [
       { value: 'qa-post',    label: '🚀 Post-Gen Validation',  hint: 'Validate a generated project right now' },
-      { value: 'clear-key',  label: '🗑️  Clear saved API key' },
+      { value: 'clear-key',  label: '🗑️  Clear saved API key'  },
       { value: 'clear-sess', label: '🗑️  Clear session history' },
-      { value: 'clear-all',  label: '💥 Clear everything' },
-      { value: 'back',       label: '← Back to main menu' },
+      { value: 'clear-all',  label: '💥 Clear everything'      },
+      { value: 'back',       label: '← Back to main menu'     },
     ],
   });
   if (p.isCancel(action) || action === 'back') return;
 
-  if (action === 'qa-post') { await initQASystem(); await autoRunPostGeneration(); return; }
-  if (action === 'clear-key'  || action === 'clear-all') { await fs.remove(CONFIG_PATH);   p.log.success('API key cleared.'); }
-  if (action === 'clear-sess' || action === 'clear-all') { await fs.remove(SESSIONS_PATH); p.log.success('Session history cleared.'); }
+  if (action === 'qa-post') {
+    await initQASystem();
+    await autoRunPostGeneration();
+    return;
+  }
+  if (action === 'clear-key'  || action === 'clear-all') {
+    await fs.remove(CONFIG_PATH);
+    p.log.success('API key cleared.');
+  }
+  if (action === 'clear-sess' || action === 'clear-all') {
+    await fs.remove(SESSIONS_PATH);
+    p.log.success('Session history cleared.');
+  }
 }
 
 // ═══════════════════════════════════════════════════════════════════════════
@@ -706,11 +739,11 @@ async function runPluginManager(plugins) {
 
   const choice = await p.select({
     message: 'Select a plugin to run:',
-    options: plugins.map((pl) => ({ value: pl.name, label: `🔌 ${pl.name}`, hint: pl.description || '' })),
+    options: plugins.map(pl => ({ value: pl.name, label: `🔌 ${pl.name}`, hint: pl.description || '' })),
   });
   if (p.isCancel(choice)) return;
 
-  const plugin = plugins.find((pl) => pl.name === choice);
+  const plugin = plugins.find(pl => pl.name === choice);
   if (plugin) {
     try {
       await plugin.run({ chalk, ora, p, fs, path });
@@ -728,23 +761,26 @@ async function promptRepeatLast(lastSession) {
   if (!lastSession) return false;
   const meta = STACK_META[lastSession.stack] || {};
   const icon = meta.icon || '⚙️';
-  console.log(chalk.dim(`  ⚡ Last session: ${icon} ${lastSession.stack} · ${lastSession.generationMode} mode · ${lastSession.savedAt?.slice(0, 10) || ''}`));
+  console.log(chalk.dim(
+    `  ⚡ Last session: ${icon} ${lastSession.stack} · ` +
+    `${lastSession.generationMode} mode · ${lastSession.savedAt?.slice(0, 10) || ''}`
+  ));
   console.log('');
   const repeat = await p.confirm({
-    message    : chalk.hex('#00F5FF')('Repeat last generation with same settings?'),
+    message     : chalk.hex('#00F5FF')('Repeat last generation with same settings?'),
     initialValue: false,
   });
   return !p.isCancel(repeat) && repeat;
 }
 
 // ═══════════════════════════════════════════════════════════════════════════
-//  10X: Input Validation Helpers
+//  Input Validation Helpers
 // ═══════════════════════════════════════════════════════════════════════════
 
 function validateProjectName(v) {
-  if (!v || !v.trim()) return '❌ Cannot be empty.';
+  if (!v || !v.trim())           return '❌ Cannot be empty.';
   if (/[^a-zA-Z0-9_\-.]/.test(v)) return '❌ Use only letters, numbers, hyphens, underscores, dots.';
-  if (v.length > 64) return '❌ Name too long (max 64 chars).';
+  if (v.length > 64)             return '❌ Name too long (max 64 chars).';
   return undefined;
 }
 
@@ -753,19 +789,25 @@ function validateSrcPath(v) {
   return undefined;
 }
 
+function validateUrl(v) {
+  if (!v || !v.trim()) return undefined; // optional
+  try { new URL(v.trim()); return undefined; }
+  catch { return '❌ Invalid URL — e.g. http://localhost:3000'; }
+}
+
 // ═══════════════════════════════════════════════════════════════════════════
-//  Main CLI Flow — v8.0-10X
+//  Main CLI Flow — v8.0-10X + QA v10.0
 // ═══════════════════════════════════════════════════════════════════════════
 
 async function main() {
   const globalStart = performance.now();
   printBanner();
 
-  // 10X: load plugins & last session in parallel
+  // Load plugins & last session in parallel
   const [plugins, lastSession] = await Promise.all([loadPlugins(), loadLastSession()]);
 
   if (plugins.length > 0) {
-    p.log.info(chalk.dim(`${plugins.length} plugin(s) loaded: ${plugins.map((pl) => pl.name).join(', ')}`));
+    p.log.info(chalk.dim(`${plugins.length} plugin(s) loaded: ${plugins.map(pl => pl.name).join(', ')}`));
   }
 
   p.intro(chalk.hex('#00F5FF').bold(' create-backlist v8.0-10X — Polyglot Backend Generator '));
@@ -795,9 +837,9 @@ async function main() {
         projectName,
         stack          : lastSession.stack,
         srcPath,
-        dbType         : lastSession.dbType || 'mongoose',
-        addAuth        : lastSession.addAuth  ?? true,
-        addSeeder      : lastSession.addSeeder ?? true,
+        dbType         : lastSession.dbType      || 'mongoose',
+        addAuth        : lastSession.addAuth      ?? true,
+        addSeeder      : lastSession.addSeeder    ?? true,
         extraFeatures  : lastSession.extraFeatures ?? ['docker', 'testing', 'swagger'],
         projectDir     : path.resolve(process.cwd(), projectName),
         frontendSrcDir : path.resolve(process.cwd(), srcPath),
@@ -813,20 +855,52 @@ async function main() {
   const mode = await p.select({
     message: 'Select your mode:',
     options: [
-      { value: 'free',       label: '🚀 Standard Mode',      hint: 'Free — AST + EJS + DOM Check'          },
-      { value: 'pro',        label: '🧠 Pro AI Mode',         hint: 'Llama-4 · Schema & Auth generation'    },
-      { value: 'qa-manual',  label: '🧪 Manual QA Testing',   hint: 'Interactive test cases + bug reports'  },
-      { value: 'qa-auto',    label: '🤖 Automated QA',        hint: '15-test suite · pass/fail report'      },
-      { value: 'qa-live',    label: '⚡ Live Continuous QA',  hint: 'Auto-runs every 30s · Ctrl+C to stop'  },
-      { value: 'qa-post',    label: '🚀 Post-Gen Validation', hint: 'Validate a generated project right now' },
-      { value: 'qa-history', label: '📜 QA History',          hint: 'View past QA sessions'                 },
-      { value: 'config',     label: '⚙️  Config Manager',     hint: 'Manage API keys & sessions'            },
-      ...(plugins.length > 0 ? [{ value: 'plugins', label: '🔌 Plugins', hint: `${plugins.length} installed` }] : []),
+      { value: 'free',       label: '🚀 Standard Mode',          hint: 'Free — AST + EJS + DOM Check'                    },
+      { value: 'pro',        label: '🧠 Pro AI Mode',             hint: 'Llama-4 · Schema & Auth generation'              },
+      { value: 'qa-url',     label: '🌐 URL-Based QA Scan',       hint: 'Probe localhost + production — HTTP/security/SEO' },
+      { value: 'qa-manual',  label: '🧪 Manual QA Testing',       hint: 'Interactive test cases + bug reports'            },
+      { value: 'qa-auto',    label: '🤖 Automated QA',            hint: '15-test suite · pass/fail report'                },
+      { value: 'qa-live',    label: '⚡ Live Continuous QA',      hint: 'Auto-runs every 30s · Ctrl+C to stop'            },
+      { value: 'qa-post',    label: '🔬 Post-Gen Validation',     hint: 'Validate a generated project right now'          },
+      { value: 'qa-history', label: '📜 QA History',              hint: 'View past QA sessions'                          },
+      { value: 'config',     label: '⚙️  Config Manager',         hint: 'Manage API keys & sessions'                     },
+      ...(plugins.length > 0
+        ? [{ value: 'plugins', label: '🔌 Plugins', hint: `${plugins.length} installed` }]
+        : []
+      ),
     ],
   });
   if (p.isCancel(mode)) { p.cancel('Cancelled.'); process.exit(0); }
 
   // ── Non-generation routes ──────────────────────────────────────────────
+
+  // v10.0 — URL-Based QA
+  if (mode === 'qa-url') {
+    await initQASystem();
+
+    const localUrl = await p.text({
+      message    : 'Localhost URL:',
+      placeholder: 'http://localhost:3000',
+      validate   : validateUrl,
+    });
+    if (p.isCancel(localUrl)) { p.cancel('Cancelled.'); return; }
+
+    const prodUrl = await p.text({
+      message    : 'Production URL (leave blank to skip):',
+      placeholder: 'https://yoursite.com',
+      validate   : validateUrl,
+    });
+    if (p.isCancel(prodUrl)) { p.cancel('Cancelled.'); return; }
+
+    await runUrlQA({
+      localUrl: String(localUrl).trim()  || undefined,
+      prodUrl : String(prodUrl).trim()   || undefined,
+    });
+
+    p.outro(chalk.hex('#00F5FF').bold('URL QA scan complete.'));
+    return;
+  }
+
   if (mode === 'qa-manual')  { await initQASystem(); await runManualQA(); return; }
   if (mode === 'qa-auto')    { await initQASystem(); await runAutomatedQA({ continuous: false }); return; }
   if (mode === 'qa-live')    { await initQASystem(); await runAutomatedQA({ continuous: true  }); return; }
@@ -846,7 +920,7 @@ async function main() {
   });
   if (p.isCancel(projectName)) { p.cancel('Cancelled.'); process.exit(0); }
 
-  // 10X: warn if directory already exists
+  // Warn if directory already exists
   const targetDir = path.resolve(process.cwd(), projectName);
   if (await fs.pathExists(targetDir)) {
     p.log.warn(chalk.yellow(`⚠️  Directory '${projectName}' already exists — files may be overwritten.`));
@@ -858,12 +932,12 @@ async function main() {
   const stack = await p.select({
     message: 'Select backend stack:',
     options: [
-      { value: 'node-ts-express', label: '🔷 Node.js TypeScript + Express',    hint: 'Hexagonal Architecture'     },
-      { value: 'js-express',      label: '🟨 Node.js JavaScript ESM + Express', hint: 'Lightweight, no TS'         },
-      { value: 'nestjs',          label: '🔴 NestJS (TypeScript)',               hint: 'Modular, enterprise-grade'  },
-      { value: 'dotnet-webapi',   label: '🟣 C# ASP.NET Core Web API',          hint: 'Requires .NET SDK'          },
-      { value: 'java-spring',     label: '🍃 Java Spring Boot',                 hint: 'Requires Java JDK'          },
-      { value: 'python-fastapi',  label: '🐍 Python FastAPI',                   hint: 'Requires Python 3'          },
+      { value: 'node-ts-express', label: '🔷 Node.js TypeScript + Express',    hint: 'Hexagonal Architecture'    },
+      { value: 'js-express',      label: '🟨 Node.js JavaScript ESM + Express', hint: 'Lightweight, no TS'        },
+      { value: 'nestjs',          label: '🔴 NestJS (TypeScript)',               hint: 'Modular, enterprise-grade' },
+      { value: 'dotnet-webapi',   label: '🟣 C# ASP.NET Core Web API',          hint: 'Requires .NET SDK'         },
+      { value: 'java-spring',     label: '🍃 Java Spring Boot',                 hint: 'Requires Java JDK'         },
+      { value: 'python-fastapi',  label: '🐍 Python FastAPI',                   hint: 'Requires Python 3'         },
     ],
   });
   if (p.isCancel(stack)) { p.cancel('Cancelled.'); process.exit(0); }
@@ -885,7 +959,6 @@ async function main() {
   });
   if (p.isCancel(srcPath)) { p.cancel('Cancelled.'); process.exit(0); }
 
-  // 10X: warn if src directory not found
   const resolvedSrc = path.resolve(process.cwd(), srcPath);
   if (!await fs.pathExists(resolvedSrc)) {
     p.log.warn(chalk.yellow(`⚠️  Directory '${srcPath}' not found — AST scan may return 0 endpoints.`));
@@ -903,7 +976,7 @@ async function main() {
     dbType = await p.select({
       message: 'Database type:',
       options: [
-        { value: 'mongoose', label: '🍃 NoSQL — MongoDB + Mongoose' },
+        { value: 'mongoose', label: '🍃 NoSQL — MongoDB + Mongoose'     },
         { value: 'prisma',   label: '🔺 SQL — PostgreSQL/MySQL + Prisma' },
       ],
     });
@@ -919,9 +992,9 @@ async function main() {
       message: 'Additional features:',
       options: [
         { value: 'docker',  label: '🐳 Docker Support',         hint: 'Dockerfile + docker-compose.yml' },
-        { value: 'testing', label: '🧪 API Testing Boilerplate' },
-        { value: 'swagger', label: '📖 Swagger UI (API Docs)'   },
-        { value: 'ci',      label: '⚙️  GitHub Actions CI',      hint: 'Auto-deploy workflow' },
+        { value: 'testing', label: '🧪 API Testing Boilerplate'                                         },
+        { value: 'swagger', label: '📖 Swagger UI (API Docs)'                                           },
+        { value: 'ci',      label: '⚙️  GitHub Actions CI',      hint: 'Auto-deploy workflow'            },
       ],
       initialValues: ['docker', 'testing', 'swagger'],
     });
@@ -947,7 +1020,6 @@ async function main() {
   console.log(`  ${chalk.dim('Output:')}     ${chalk.gray(targetDir)}`);
   console.log('');
 
-  // 10X: show diff from last session
   printSessionDiff(lastSession, { stack, dbType, generationMode });
 
   const proceed = await p.confirm({ message: 'Proceed with generation?', initialValue: true });
@@ -971,19 +1043,23 @@ async function main() {
 }
 
 // ═══════════════════════════════════════════════════════════════════════════
-//  10X: Generation Executor — with auto-retry
+//  Generation Executor — with auto-retry
 // ═══════════════════════════════════════════════════════════════════════════
 
 async function executeGeneration(options, globalStart, plugins = [], _attempt = 1) {
   const startTime = Date.now();
-  _cleanupDir = options.projectDir;  // register for SIGINT cleanup
+  _cleanupDir = options.projectDir;
 
   try {
-    // ── PRO MODE ────────────────────────────────────────────────────────
+    // ── PRO MODE ──────────────────────────────────────────────────────────
     if (options.generationMode === 'pro') {
       const apiKey = await getProApiKey();
 
-      const spinnerParse = ora({ text: chalk.white('Parsing frontend with Babel AST...'), spinner: 'dots12', color: 'cyan' }).start();
+      const spinnerParse = ora({
+        text   : chalk.white('Parsing frontend with Babel AST...'),
+        spinner: 'dots12',
+        color  : 'cyan',
+      }).start();
       let astJsonData = [];
       try {
         astJsonData = await analyzeFrontend(options.frontendSrcDir);
@@ -993,9 +1069,13 @@ async function executeGeneration(options, globalStart, plugins = [], _attempt =
       }
 
       const generatedBlocks = await callAIProcessor(astJsonData, apiKey, options);
-      options.aiBlocks = generatedBlocks;
+      options.aiBlocks      = generatedBlocks;
 
-      const spinnerGen = ora({ text: chalk.white('Writing hexagonal output...'), spinner: 'material', color: 'magenta' }).start();
+      const spinnerGen = ora({
+        text   : chalk.white('Writing hexagonal output...'),
+        spinner: 'material',
+        color  : 'magenta',
+      }).start();
       try {
         await dispatchGenerator(options);
         spinnerGen.succeed(chalk.green('Hexagonal auto-write complete.'));
@@ -1006,20 +1086,28 @@ async function executeGeneration(options, globalStart, plugins = [], _attempt =
 
       if (generatedBlocks.deployment) {
         await fs.ensureDir(path.join(options.projectDir, '.github', 'workflows'));
-        await fs.writeFile(path.join(options.projectDir, 'docker-compose.yml'),               generatedBlocks.deployment.dockerCompose);
-        await fs.writeFile(path.join(options.projectDir, '.github', 'workflows', 'deploy.yml'), generatedBlocks.deployment.githubWorkflow);
+        await fs.writeFile(
+          path.join(options.projectDir, 'docker-compose.yml'),
+          generatedBlocks.deployment.dockerCompose
+        );
+        await fs.writeFile(
+          path.join(options.projectDir, '.github', 'workflows', 'deploy.yml'),
+          generatedBlocks.deployment.githubWorkflow
+        );
       }
 
       printHealthDashboard(generatedBlocks, options);
-      printTokenUsage('pro', startTime, { endpointCount: options.aiBlocks ? Object.keys(options.aiBlocks).length : 0 });
+      printTokenUsage('pro', startTime, {
+        endpointCount: options.aiBlocks ? Object.keys(options.aiBlocks).length : 0,
+      });
 
     } else {
-      // ── FREE MODE ──────────────────────────────────────────────────────
+      // ── FREE MODE ────────────────────────────────────────────────────────
       await runFreeModePipeline(options);
       printTokenUsage('free', startTime, { ...(options._meta || {}), retries: _attempt - 1 });
     }
 
-    // ── Post-gen plugins ─────────────────────────────────────────────────
+    // ── Post-gen plugins ──────────────────────────────────────────────────
     for (const plugin of plugins) {
       if (plugin.runAfterGenerate) {
         try { await plugin.runAfterGenerate(options); } catch {}
@@ -1029,36 +1117,36 @@ async function executeGeneration(options, globalStart, plugins = [], _attempt =
     await saveSession(options);
     printNextSteps(options.projectName, options.stack, options.dbType);
 
-    _cleanupDir = null;  // generation succeeded — no cleanup needed
+    _cleanupDir = null;
 
     const totalTime = ((performance.now() - globalStart) / 1000).toFixed(2);
     p.outro(
-      (options.generationMode === 'pro' ? chalk.hex('#BF40FF') : chalk.hex('#00F5FF')).bold(
-        `✓ Done in ${totalTime}s — cd ${options.projectName}`
-      )
+      (options.generationMode === 'pro'
+        ? chalk.hex('#BF40FF')
+        : chalk.hex('#00F5FF')
+      ).bold(`✓ Done in ${totalTime}s — cd ${options.projectName}`)
     );
 
   } catch (error) {
     console.log('');
 
-    // 10X: filter noisy stack frames
     const cleanStack = (error.stack ?? '')
       .split('\n')
       .filter(l => !l.includes('node_modules') && !l.includes('node:internal'))
       .slice(0, 6)
       .join('\n');
 
-    p.log.error(chalk.red.bold(`Generation failed (attempt ${_attempt}/${MAX_RETRIES}): ${error.message || error}`));
+    p.log.error(chalk.red.bold(
+      `Generation failed (attempt ${_attempt}/${MAX_RETRIES}): ${error.message || error}`
+    ));
     if (cleanStack) console.log(chalk.gray(cleanStack));
 
-    // 10X: auto-retry
     if (_attempt < MAX_RETRIES) {
       const delay = _attempt * 2000;
       console.log('');
       p.log.warn(chalk.yellow(`⏳ Retrying in ${delay / 1000}s...`));
-      await new Promise((r) => setTimeout(r, delay));
+      await new Promise(r => setTimeout(r, delay));
 
-      // Clean up partial output before retry
       if (options.projectDir && await fs.pathExists(options.projectDir)) {
         await fs.remove(options.projectDir).catch(() => {});
       }
@@ -1066,9 +1154,12 @@ async function executeGeneration(options, globalStart, plugins = [], _attempt =
       return executeGeneration(options, globalStart, plugins, _attempt + 1);
     }
 
-    // All retries exhausted — clean up
     if (options.projectDir && await fs.pathExists(options.projectDir)) {
-      const sc = ora({ text: chalk.yellow('Cleaning up partial output...'), spinner: 'line', color: 'yellow' }).start();
+      const sc = ora({
+        text   : chalk.yellow('Cleaning up partial output...'),
+        spinner: 'line',
+        color  : 'yellow',
+      }).start();
       await fs.remove(options.projectDir).catch(() => {});
       sc.succeed(chalk.yellow('Cleanup done.'));
     }
@@ -1078,8 +1169,8 @@ async function executeGeneration(options, globalStart, plugins = [], _attempt =
   }
 }
 
-// ── Launch ─────────────────────────────────────────────────────────────────
-main().catch((err) => {
+// ── Launch ────────────────────────────────────────────────────────────────
+main().catch(err => {
   console.error(chalk.red.bold(`\n  Fatal: ${err.message || err}`));
   if (err.stack) console.error(chalk.gray(err.stack.split('\n').slice(1, 5).join('\n')));
   process.exit(1);