qodfy 0.1.5 → 0.2.0

package/dist/index.js

@@ -5,10 +5,12 @@ import fs from "fs/promises";
 import path from "path";
 import { Command } from "commander";
 import pc from "picocolors";
-import { scanProject } from "@qodfy/core";
+import {
+  scanProject
+} from "@qodfy/core";
 var program = new Command();
-program.name("qodfy").description("Launch readiness scanner for AI-built apps.").version("0.1.5");
-program.command("scan").description("Scan a project for launch readiness issues.").option("-p, --path <path>", "Project path to scan", process.cwd()).option("--max-issues <number>", "Maximum number of issues to display", "50").action(async (options) => {
+program.name("qodfy").description("Launch readiness scanner for AI-built apps.").version("0.2.0");
+program.command("scan").description("Scan a project for launch readiness issues.").option("-p, --path <path>", "Project path to scan", process.cwd()).option("--max-issues <number>", "Maximum number of issues to display", "50").option("--prompts", "Show safe copy-paste fix prompts for displayed issues").action(async (options) => {
   const pathResult = await resolveProjectPath(options.path);
   if (!pathResult.ok) {
     printScanError(pathResult.reason);
@@ -18,12 +20,30 @@ program.command("scan").description("Scan a project for launch readiness issues.
   try {
     console.log(pc.cyan("Qodfy is scanning your project...\n"));
     const report = await scanProject(pathResult.projectPath);
-    printReport(report, parseMaxIssues(options.maxIssues));
+    printReport(report, parseMaxIssues(options.maxIssues), Boolean(options.prompts));
   } catch (error) {
     printScanError(getErrorMessage(error));
     process.exitCode = 1;
   }
 });
+var categoryOrder = [
+  "security",
+  "api",
+  "webhook",
+  "ai",
+  "environment",
+  "maintainability",
+  "project"
+];
+var categoryLabels = {
+  security: "Security",
+  api: "API",
+  webhook: "Webhooks",
+  ai: "AI",
+  environment: "Environment",
+  maintainability: "Maintainability",
+  project: "Project"
+};
 await program.parseAsync();
 async function resolveProjectPath(projectPath) {
   const inputPath = projectPath.trim() || process.cwd();
@@ -60,7 +80,7 @@ async function resolveProjectPath(projectPath) {
     };
   }
 }
-function printReport(report, maxIssues) {
+function printReport(report, maxIssues, showPrompts) {
   console.log(pc.bold("Qodfy Report"));
   console.log("");
   const scoreColor = report.score >= 80 ? pc.green : report.score >= 60 ? pc.yellow : pc.red;
@@ -73,6 +93,7 @@ function printReport(report, maxIssues) {
   console.log(`Large files: ${report.stats.largeFiles}`);
   console.log(`Scan duration: ${formatDuration(report.stats.durationMs)}`);
   console.log("");
+  printSummary(report.issues);
   if (report.issues.length === 0) {
     console.log(pc.green("No issues found. Your project looks clean."));
     return;
@@ -83,21 +104,129 @@ function printReport(report, maxIssues) {
     console.log(`Showing ${maxIssues} of ${report.issues.length} issues.`);
     console.log(`Use --max-issues <number> to show more.`);
   }
-  for (const issue of issuesToShow) {
-    const label = issue.severity === "critical" ? pc.red("CRITICAL") : issue.severity === "warning" ? pc.yellow("WARNING") : pc.blue("INFO");
-    console.log(`
-${label} ${pc.bold(issue.title)}`);
-    console.log(issue.message);
-    if (issue.file) {
-      console.log(pc.dim(`File: ${issue.file}`));
+  printGroupedIssues(issuesToShow, showPrompts);
+  console.log("");
+  console.log(pc.bold("Recommended next step:"));
+  console.log("Fix critical issues first, then warnings, then cleanup items.");
+}
+function printSummary(issues) {
+  const criticalCount = countIssuesBySeverity(issues, "critical");
+  const warningCount = countIssuesBySeverity(issues, "warning");
+  const infoCount = countIssuesBySeverity(issues, "info");
+  console.log(pc.bold("Summary"));
+  console.log(`Critical: ${criticalCount}`);
+  console.log(`Warnings: ${warningCount}`);
+  console.log(`Info: ${infoCount}`);
+  console.log("");
+  if (issues.length === 0) {
+    return;
+  }
+  console.log(pc.bold("Categories"));
+  for (const category of categoryOrder) {
+    const count = issues.filter((issue) => issue.category === category).length;
+    if (count > 0) {
+      console.log(`${categoryLabels[category]}: ${count}`);
     }
-    if (issue.suggestion) {
-      console.log(pc.dim(`Suggestion: ${issue.suggestion}`));
+  }
+  const priorities = getTopPriorities(issues);
+  if (priorities.length > 0) {
+    console.log("");
+    console.log(pc.bold("Top priorities"));
+    for (const [index, priority] of priorities.entries()) {
+      console.log(`${index + 1}. ${priority}`);
     }
   }
   console.log("");
-  console.log(pc.bold("Recommended next step:"));
-  console.log("Fix critical issues first, then warnings, then cleanup items.");
+}
+function printGroupedIssues(issues, showPrompts) {
+  for (const category of categoryOrder) {
+    const categoryIssues = issues.filter((issue) => issue.category === category);
+    if (categoryIssues.length === 0) {
+      continue;
+    }
+    console.log("");
+    console.log(pc.bold(categoryLabels[category]));
+    for (const issue of categoryIssues) {
+      printIssue(issue, showPrompts);
+    }
+  }
+}
+function printIssue(issue, showPrompts) {
+  console.log("");
+  console.log(`${pc.dim(`[${issue.id}]`)} ${getSeverityLabel(issue.severity)} ${pc.bold(issue.title)}`);
+  console.log(issue.message);
+  if (issue.file) {
+    console.log(pc.dim(`File: ${issue.file}`));
+  }
+  if (issue.suggestion) {
+    console.log(pc.dim(`Suggestion: ${issue.suggestion}`));
+  }
+  if (showPrompts && issue.fixPrompt) {
+    console.log("");
+    console.log(pc.bold("Fix Prompt:"));
+    console.log(issue.fixPrompt);
+  }
+}
+function getSeverityLabel(severity) {
+  if (severity === "critical") {
+    return pc.red("CRITICAL");
+  }
+  if (severity === "warning") {
+    return pc.yellow("WARNING");
+  }
+  return pc.blue("INFO");
+}
+function countIssuesBySeverity(issues, severity) {
+  return issues.filter((issue) => issue.severity === severity).length;
+}
+function getTopPriorities(issues) {
+  const priorities = [
+    {
+      ruleIds: ["security-hardcoded-secret"],
+      message: "Remove possible hardcoded secrets and rotate any real exposed values."
+    },
+    {
+      ruleIds: ["webhook-missing-signature-verification"],
+      message: "Verify webhook signatures before handling external events."
+    },
+    {
+      ruleIds: ["ai-route-missing-rate-limit"],
+      message: "Add cost and abuse protection to AI-related API routes."
+    },
+    {
+      ruleIds: ["security-client-side-secret"],
+      message: "Move possible server-only secrets out of client-side code."
+    },
+    {
+      ruleIds: ["api-route-missing-auth"],
+      message: "Review API routes that may be missing authentication."
+    },
+    {
+      ruleIds: [
+        "environment-missing-env-example",
+        "environment-variable-missing-from-example"
+      ],
+      message: "Add missing environment variables to .env.example."
+    },
+    {
+      ruleIds: [
+        "maintainability-large-file",
+        "maintainability-large-file-skipped"
+      ],
+      message: "Review large files for maintainability before launch."
+    },
+    {
+      ruleIds: [
+        "project-missing-package-json",
+        "project-invalid-package-json",
+        "project-next-not-detected"
+      ],
+      message: "Confirm Qodfy is scanning the correct project root."
+    }
+  ];
+  return priorities.filter(
+    (priority) => issues.some((issue) => priority.ruleIds.includes(issue.ruleId))
+  ).slice(0, 3).map((priority) => priority.message);
 }
 function printScanError(reason) {
   console.error(pc.red("Qodfy could not scan this project."));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "qodfy",
-  "version": "0.1.5",
+  "version": "0.2.0",
   "description": "Open-source launch readiness scanner for AI-built apps.",
   "keywords": [
     "qodfy",
@@ -51,7 +51,7 @@
   "dependencies": {
     "commander": "^14.0.3",
     "picocolors": "^1.1.1",
-    "@qodfy/core": "^0.1.5"
+    "@qodfy/core": "^0.2.0"
   },
   "devDependencies": {
     "@types/node": "^25.7.0",