qodfy 0.2.2 → 0.2.4

package/dist/index.js

@@ -11,10 +11,10 @@ import {
   scanProject,
   validScanChecks
 } from "@qodfy/core";
-var DEFAULT_MAX_ISSUES = 20;
+var DEFAULT_MAX_ISSUES = 5;
 var program = new Command();
-program.name("qodfy").description("Launch readiness scanner for AI-built apps.").version("0.2.2");
-program.command("scan").description("Scan a project for launch readiness issues.").option("-p, --path <path>", "Project path to scan", process.cwd()).option("--max-issues <number>", "Maximum number of issues to display", String(DEFAULT_MAX_ISSUES)).option("--prompts", "Show safe copy-paste fix prompts for displayed issues").option("--checks <checks>", "Comma-separated checks to run").option("--all", "Run all checks without prompting").option("--no-interactive", "Skip interactive prompts and run the recommended scan").action(async (options) => {
+program.name("qodfy").description("Launch readiness scanner for AI-built apps.").version("0.2.4");
+program.command("scan").description("Scan a project for launch readiness issues.").option("-p, --path <path>", "Project path to scan", process.cwd()).option("--max-issues <number>", "Maximum number of issues to display", String(DEFAULT_MAX_ISSUES)).option("--prompts", "Show safe copy-paste fix prompts for displayed issues").option("--prompt <issue-id>", "Show the safe AI fix prompt for one issue").option("--checks <checks>", "Comma-separated checks to run").option("--all", "Run all checks without prompting").option("--no-interactive", "Skip interactive prompts and run the recommended scan").action(async (options) => {
   const pathResult = await resolveProjectPath(options.path);
   if (!pathResult.ok) {
     printScanError(pathResult.reason);
@@ -35,13 +35,20 @@ program.command("scan").description("Scan a project for launch readiness issues.
     console.log(pc.cyan("Qodfy is scanning your project...\n"));
     const report = await scanProject({
       projectPath: pathResult.projectPath,
-      checks: scanModeResult.checks
+      checks: scanModeResult.checks,
+      includeLowConfidence: Boolean(scanModeResult.includeLowConfidence)
     });
+    if (options.prompt) {
+      printPromptFromReport(report, options.prompt);
+      return;
+    }
     printReport(
       report,
       parseMaxIssues(options.maxIssues),
       Boolean(options.prompts),
-      scanModeResult.label
+      scanModeResult.label,
+      Boolean(options.all),
+      Boolean(options.all)
     );
   } catch (error) {
     if (isPromptCancelError(error)) {
@@ -67,7 +74,8 @@ program.command("prompt <issue-id>").description("Print the safe AI fix prompt f
   }
   const report = await scanProject({
     projectPath: pathResult.projectPath,
-    checks: checksResult.checks
+    checks: checksResult.checks,
+    includeLowConfidence: true
   });
   const issue = report.issues.find((scanIssue) => scanIssue.id === issueId);
   if (!issue) {
@@ -120,7 +128,16 @@ async function resolveScanMode(options) {
     return {
       ok: true,
       checks: [...validScanChecks],
-      label: "All checks"
+      label: "All checks",
+      includeLowConfidence: true
+    };
+  }
+  if (options.prompt) {
+    return {
+      ok: true,
+      checks: [...validScanChecks],
+      label: "All checks",
+      includeLowConfidence: true
     };
   }
   if (options.interactive === false) {
@@ -362,7 +379,7 @@ async function resolveProjectPath(projectPath) {
     };
   }
 }
-function printReport(report, maxIssues, showPrompts, scanModeLabel) {
+function printReport(report, maxIssues, showPrompts, scanModeLabel, showDetails, showAllIssues) {
   console.log(pc.bold("Qodfy Report"));
   console.log("");
   const scoreColor = report.score >= 80 ? pc.green : report.score >= 60 ? pc.yellow : pc.red;
@@ -381,14 +398,15 @@ function printReport(report, maxIssues, showPrompts, scanModeLabel) {
     console.log(pc.green("No issues found. Your project looks clean."));
     return;
   }
-  console.log(pc.bold("Issues"));
+  console.log(pc.bold(showAllIssues ? "Issues" : "Top issues"));
   const displayIssues = getSortedDisplayIssues(report.issues);
-  const issuesToShow = displayIssues.slice(0, maxIssues);
-  if (report.issues.length > maxIssues) {
-    console.log(`Showing ${maxIssues} of ${report.issues.length} issues.`);
-    console.log(`Use --max-issues <number> to show more.`);
+  const issueLimit = showAllIssues ? displayIssues.length : maxIssues;
+  const issuesToShow = displayIssues.slice(0, issueLimit);
+  if (report.issues.length > issueLimit) {
+    console.log(`Showing ${issueLimit} of ${report.issues.length} issues.`);
+    console.log(`Use --max-issues <number> to show more, or --all for full details.`);
   }
-  printGroupedIssues(issuesToShow, showPrompts, report.projectPath);
+  printGroupedIssues(issuesToShow, showPrompts, showDetails, report.projectPath);
   console.log("");
   console.log(pc.bold("Recommended next step:"));
   console.log("Fix critical issues first, then warnings, then cleanup items.");
@@ -399,7 +417,7 @@ function printReport(report, maxIssues, showPrompts, scanModeLabel) {
     console.log(getPromptCommand(firstPromptIssue.id, report.projectPath));
   }
   console.log("qodfy scan --checks api,environment");
-  console.log("qodfy scan --max-issues 50");
+  console.log("qodfy scan --all");
 }
 function printSummary(issues) {
   const criticalCount = countIssuesBySeverity(issues, "critical");
@@ -430,7 +448,7 @@ function printSummary(issues) {
   }
   console.log("");
 }
-function printGroupedIssues(issues, showPrompts, projectPath) {
+function printGroupedIssues(issues, showPrompts, showDetails, projectPath) {
   for (const category of categoryOrder) {
     const categoryIssues = issues.filter((issue) => issue.category === category);
     if (categoryIssues.length === 0) {
@@ -439,18 +457,24 @@ function printGroupedIssues(issues, showPrompts, projectPath) {
     console.log("");
     console.log(pc.bold(categoryLabels[category]));
     for (const issue of categoryIssues) {
-      printIssue(issue, showPrompts, projectPath);
+      printIssue(issue, showPrompts, showDetails, projectPath);
     }
   }
 }
-function printIssue(issue, showPrompts, projectPath) {
+function printIssue(issue, showPrompts, showDetails, projectPath) {
   console.log("");
   console.log(`${pc.dim(`[${issue.id}]`)} ${getSeverityLabel(issue.severity)} ${pc.bold(issue.title)}`);
-  console.log(issue.message);
+  console.log(pc.dim(`Confidence: ${issue.confidence}`));
   if (issue.file) {
     console.log(pc.dim(`File: ${issue.file}`));
   }
-  if (issue.suggestion) {
+  if (showDetails || showPrompts) {
+    console.log(issue.message);
+  }
+  if ((showDetails || showPrompts) && issue.evidence && issue.evidence.length > 0) {
+    printEvidence(issue.evidence);
+  }
+  if ((showDetails || showPrompts) && issue.suggestion) {
     console.log(pc.dim(`Suggestion: ${issue.suggestion}`));
   }
   if (showPrompts && issue.fixPrompt) {
@@ -458,19 +482,48 @@ function printIssue(issue, showPrompts, projectPath) {
     console.log(pc.bold("Fix Prompt:"));
     console.log(issue.fixPrompt);
   } else if (issue.fixPrompt) {
-    console.log(pc.dim(`AI fix prompt: ${getPromptCommand(issue.id, projectPath)}`));
+    console.log(pc.dim(`Fix: ${getPromptCommand(issue.id, projectPath)}`));
   }
 }
 function printFixPrompt(issue) {
   console.log(pc.bold("Qodfy Fix Prompt"));
   console.log("");
   console.log(`${pc.dim(`[${issue.id}]`)} ${getSeverityLabel(issue.severity)} ${pc.bold(issue.title)}`);
+  console.log(pc.dim(`Confidence: ${issue.confidence}`));
   if (issue.file) {
     console.log(pc.dim(`File: ${issue.file}`));
   }
+  if (issue.evidence && issue.evidence.length > 0) {
+    printEvidence(issue.evidence);
+  }
   console.log("");
   console.log(issue.fixPrompt);
 }
+function printEvidence(evidence) {
+  console.log("");
+  console.log(pc.bold("Evidence:"));
+  for (const item of evidence) {
+    const detail = item.detail ? ` ${item.detail}` : "";
+    console.log(pc.dim(`- ${item.label}${detail}`));
+  }
+}
+function printPromptFromReport(report, issueId) {
+  const issue = report.issues.find((scanIssue) => scanIssue.id === issueId);
+  if (!issue) {
+    printPromptError(
+      `Issue "${issueId}" was not found in this project scan.
+Run qodfy scan --all to see the current issue IDs.`
+    );
+    process.exitCode = 1;
+    return;
+  }
+  if (!issue.fixPrompt) {
+    printPromptError(`Issue "${issueId}" does not have an AI fix prompt yet.`);
+    process.exitCode = 1;
+    return;
+  }
+  printFixPrompt(issue);
+}
 function getSeverityLabel(severity) {
   if (severity === "critical") {
     return pc.red("CRITICAL");
@@ -485,7 +538,7 @@ function countIssuesBySeverity(issues, severity) {
 }
 function getSortedDisplayIssues(issues) {
   return [...issues].sort((leftIssue, rightIssue) => {
-    return getSeverityRank(leftIssue.severity) - getSeverityRank(rightIssue.severity) || categoryOrder.indexOf(leftIssue.category) - categoryOrder.indexOf(rightIssue.category) || leftIssue.ruleId.localeCompare(rightIssue.ruleId) || getIssueNumber(leftIssue.id) - getIssueNumber(rightIssue.id) || (leftIssue.file ?? "").localeCompare(rightIssue.file ?? "") || leftIssue.id.localeCompare(rightIssue.id);
+    return getSeverityRank(leftIssue.severity) - getSeverityRank(rightIssue.severity) || getConfidenceRank(leftIssue.confidence) - getConfidenceRank(rightIssue.confidence) || categoryOrder.indexOf(leftIssue.category) - categoryOrder.indexOf(rightIssue.category) || leftIssue.ruleId.localeCompare(rightIssue.ruleId) || getIssueNumber(leftIssue.id) - getIssueNumber(rightIssue.id) || (leftIssue.file ?? "").localeCompare(rightIssue.file ?? "") || leftIssue.id.localeCompare(rightIssue.id);
   });
 }
 function getIssueNumber(issueId) {
@@ -501,6 +554,15 @@ function getSeverityRank(severity) {
   }
   return 2;
 }
+function getConfidenceRank(confidence) {
+  if (confidence === "high") {
+    return 0;
+  }
+  if (confidence === "medium") {
+    return 1;
+  }
+  return 2;
+}
 function getTopPriorities(issues) {
   const priorities = [
     {
@@ -520,9 +582,20 @@ function getTopPriorities(issues) {
       message: "Move possible server-only secrets out of client-side code."
     },
     {
-      ruleIds: ["api-route-missing-auth"],
+      ruleIds: [
+        "sensitive-api-route-missing-auth",
+        "api-mutation-route-review-auth"
+      ],
       message: "Review API routes that may be missing authentication."
     },
+    {
+      ruleIds: ["internal-route-missing-protection"],
+      message: "Protect internal or operational API routes before launch."
+    },
+    {
+      ruleIds: ["public-form-missing-abuse-protection"],
+      message: "Add abuse protection to public form routes."
+    },
     {
       ruleIds: [
         "environment-missing-env-example",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "qodfy",
-  "version": "0.2.2",
+  "version": "0.2.4",
   "description": "Open-source launch readiness scanner for AI-built apps.",
   "keywords": [
     "qodfy",
@@ -52,7 +52,7 @@
     "@inquirer/prompts": "^8.4.3",
     "commander": "^14.0.3",
     "picocolors": "^1.1.1",
-    "@qodfy/core": "^0.2.2"
+    "@qodfy/core": "^0.2.4"
   },
   "devDependencies": {
     "@types/node": "^25.7.0",