qodfy 0.2.3 → 0.2.5

package/dist/index.js

@@ -13,7 +13,7 @@ import {
 } from "@qodfy/core";
 var DEFAULT_MAX_ISSUES = 5;
 var program = new Command();
-program.name("qodfy").description("Launch readiness scanner for AI-built apps.").version("0.2.3");
+program.name("qodfy").description("Launch readiness scanner for AI-built apps.").version("0.2.4");
 program.command("scan").description("Scan a project for launch readiness issues.").option("-p, --path <path>", "Project path to scan", process.cwd()).option("--max-issues <number>", "Maximum number of issues to display", String(DEFAULT_MAX_ISSUES)).option("--prompts", "Show safe copy-paste fix prompts for displayed issues").option("--prompt <issue-id>", "Show the safe AI fix prompt for one issue").option("--checks <checks>", "Comma-separated checks to run").option("--all", "Run all checks without prompting").option("--no-interactive", "Skip interactive prompts and run the recommended scan").action(async (options) => {
   const pathResult = await resolveProjectPath(options.path);
   if (!pathResult.ok) {
@@ -463,13 +463,17 @@ function printGroupedIssues(issues, showPrompts, showDetails, projectPath) {
 }
 function printIssue(issue, showPrompts, showDetails, projectPath) {
   console.log("");
-  console.log(`${pc.dim(`[${issue.id}]`)} ${getSeverityLabel(issue.severity)} ${pc.bold(issue.title)} ${pc.dim(`(${issue.confidence} confidence)`)}`);
+  console.log(`${pc.dim(`[${issue.id}]`)} ${getSeverityLabel(issue.severity)} ${pc.bold(issue.title)}`);
+  console.log(pc.dim(`Confidence: ${issue.confidence}`));
   if (issue.file) {
     console.log(pc.dim(`File: ${issue.file}`));
   }
   if (showDetails || showPrompts) {
     console.log(issue.message);
   }
+  if ((showDetails || showPrompts) && issue.evidence && issue.evidence.length > 0) {
+    printEvidence(issue.evidence);
+  }
   if ((showDetails || showPrompts) && issue.suggestion) {
     console.log(pc.dim(`Suggestion: ${issue.suggestion}`));
   }
@@ -484,13 +488,25 @@ function printIssue(issue, showPrompts, showDetails, projectPath) {
 function printFixPrompt(issue) {
   console.log(pc.bold("Qodfy Fix Prompt"));
   console.log("");
-  console.log(`${pc.dim(`[${issue.id}]`)} ${getSeverityLabel(issue.severity)} ${pc.bold(issue.title)} ${pc.dim(`(${issue.confidence} confidence)`)}`);
+  console.log(`${pc.dim(`[${issue.id}]`)} ${getSeverityLabel(issue.severity)} ${pc.bold(issue.title)}`);
+  console.log(pc.dim(`Confidence: ${issue.confidence}`));
   if (issue.file) {
     console.log(pc.dim(`File: ${issue.file}`));
   }
+  if (issue.evidence && issue.evidence.length > 0) {
+    printEvidence(issue.evidence);
+  }
   console.log("");
   console.log(issue.fixPrompt);
 }
+function printEvidence(evidence) {
+  console.log("");
+  console.log(pc.bold("Evidence:"));
+  for (const item of evidence) {
+    const detail = item.detail ? ` ${item.detail}` : "";
+    console.log(pc.dim(`- ${item.label}${detail}`));
+  }
+}
 function printPromptFromReport(report, issueId) {
   const issue = report.issues.find((scanIssue) => scanIssue.id === issueId);
   if (!issue) {
@@ -566,9 +582,20 @@ function getTopPriorities(issues) {
       message: "Move possible server-only secrets out of client-side code."
     },
     {
-      ruleIds: ["api-route-missing-auth"],
+      ruleIds: [
+        "sensitive-api-route-missing-auth",
+        "api-mutation-route-review-auth"
+      ],
       message: "Review API routes that may be missing authentication."
     },
+    {
+      ruleIds: ["internal-route-missing-protection"],
+      message: "Protect internal or operational API routes before launch."
+    },
+    {
+      ruleIds: ["public-form-missing-abuse-protection"],
+      message: "Add abuse protection to public form routes."
+    },
     {
       ruleIds: [
         "environment-missing-env-example",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "qodfy",
-  "version": "0.2.3",
+  "version": "0.2.5",
   "description": "Open-source launch readiness scanner for AI-built apps.",
   "keywords": [
     "qodfy",
@@ -52,7 +52,7 @@
     "@inquirer/prompts": "^8.4.3",
     "commander": "^14.0.3",
     "picocolors": "^1.1.1",
-    "@qodfy/core": "^0.2.3"
+    "@qodfy/core": "^0.2.5"
   },
   "devDependencies": {
     "@types/node": "^25.7.0",