shimwrappercheck 0.2.0 → 0.3.0

package/AGENTS.md

@@ -19,3 +19,7 @@ It can be edited via the dashboard (Config → AGENTS.md) so agents and humans s
 
 - Keep checks fast; run lint/type/build in `scripts/run-checks.sh`.
 - When changing shim behavior, update README and docs/SHIM_WRAPPER_CONCEPT.md if needed.
+
+## Hard Rules (optional tools)
+
+For full shim checks (SAST, architecture, complexity, mutation, E2E, AI deductive review), projects can install: `dependency-cruiser`, `eslint-plugin-complexity`, `@stryker-mutator/core`, and optionally `semgrep` (CLI). Config templates live in `templates/` (e.g. `.dependency-cruiser.json`, `.semgrep.example.yml`, `stryker.config.json`, `eslint.complexity.json`). Run `npx shimwrappercheck init` to optionally copy these into the project.

package/README.md

@@ -31,17 +31,23 @@ Run the full setup in one go (installs package if needed, then runs the wizard):
 npx shimwrappercheck setup
 ```
 
-This installs `shimwrappercheck` as a devDependency if missing, then runs the init wizard (Supabase/Git shims, which commands, AI review, hooks, run-checks.sh, etc.). At the end you get a link to start the dashboard to change settings later.
+This installs `shimwrappercheck` as a devDependency if missing, then runs the init wizard (Supabase/Git shims, which commands, AI review, hooks, run-checks.sh, etc.). **After the wizard, the dashboard starts automatically and your browser opens at http://localhost:3000.**
 
 ## Dashboard (Web UI)
 
-A Next.js dashboard lets you manage presets, checks, config, and AGENTS.md:
+A Next.js dashboard lets you manage presets, checks, config, and AGENTS.md. When you run `npx shimwrappercheck setup`, it starts automatically at the end and opens in your browser. **A free port is chosen automatically** (3000, 3001, 3002, …) so it never conflicts with other apps. To start it again later:
 
 ```bash
 cd node_modules/shimwrappercheck/dashboard && npm install && npm run dev
 ```
 
-Then open http://localhost:3000. You can:
+Then open the URL shown in the terminal (e.g. http://localhost:3000). **In this repo** you can also run from the project root:
+
+```bash
+npm run dashboard
+```
+
+You can:
 
 - **Einstellungen**: Presets (Vibe Code default, custom presets), Supabase/Git command toggles (which commands run checks/hooks), check toggles (frontend, backend, AI review)
 - View status (config, presets file, AGENTS.md, run-checks script, hooks)
@@ -116,6 +122,17 @@ npm run supabase:checked -- functions deploy <function-name>
 npx supabase functions deploy <function-name>
 ```
 
+## Hard Rules (optional tools and configs)
+
+For the full check pipeline (SAST, architecture, complexity, mutation testing, E2E, AI deductive review), install in your project:
+
+- **dependency-cruiser**: `npm i -D dependency-cruiser` — enforces no circular deps and layer separation
+- **eslint-plugin-complexity**: `npm i -D eslint-plugin-complexity` — cyclomatic complexity max 10 per function
+- **Stryker**: `npm i -D @stryker-mutator/core` — mutation testing (min 80% score in full mode)
+- **semgrep**: `pip install semgrep` or `brew install semgrep` (or use `npx semgrep`); optional SAST
+
+Config templates are in `templates/`: `.dependency-cruiser.json`, `.semgrep.example.yml`, `stryker.config.json`, `eslint.complexity.json`. Copy into your project root or use the init wizard to optionally install them.
+
 ## Setup wizard (init)
 
 Run the interactive init to scan your codebase and configure the shim (or use `npx shimwrappercheck setup` to install + init in one step):

package/dashboard/app/agents/page.tsx

@@ -56,18 +56,18 @@ export default function AgentsPage() {
   }
 
   return (
-    <div className="space-y-6">
+    <div className="space-y-6 text-white">
       <h1 className="text-3xl font-bold">AGENTS.md</h1>
-      <p className="text-base-content/80">
+      <p className="text-neutral-300">
         Agent-Anweisungen für Cursor/Codex. Wird von Agents gelesen; hier bearbeitbar. Änderungen gelten sofort.
       </p>
       {!exists && (
-        <div className="alert alert-info">
+        <div className="alert bg-neutral-800 border-neutral-600 text-neutral-300">
           <span>AGENTS.md existiert noch nicht. Beim Speichern wird sie im Projekt-Root angelegt.</span>
         </div>
       )}
       <textarea
-        className="textarea textarea-bordered w-full font-mono text-sm min-h-[400px]"
+        className="textarea w-full font-mono text-sm min-h-[400px] bg-neutral-800 border-neutral-600 text-white"
         value={raw}
         onChange={(e) => setRaw(e.target.value)}
         placeholder="# Agent instructions..."

package/dashboard/app/api/run-checks/route.ts

@@ -1,5 +1,5 @@
 /**
- * POST /api/run-checks – run scripts/run-checks.sh and return stdout/stderr.
+ * POST /api/run-checks – run Node orchestrator (npx shimwrappercheck run) or fallback to scripts/run-checks.sh.
  * Vercel-compatible; uses SHIM_PROJECT_ROOT. Runs in project root.
  */
 import { NextResponse } from "next/server";
@@ -11,34 +11,61 @@ import { getProjectRoot } from "@/lib/projectRoot";
 
 const execAsync = promisify(exec);
 
-type ExecResult = { stdout: string; stderr: string; code?: number };
-
 export async function POST() {
   try {
     const root = getProjectRoot();
-    const scriptPath = path.join(root, "scripts", "run-checks.sh");
-    if (!fs.existsSync(scriptPath)) {
-      return NextResponse.json({
-        error: "scripts/run-checks.sh not found",
-        stdout: "",
-        stderr: "",
-        code: 1,
-      });
-    }
-    const opts = { cwd: root, maxBuffer: 2 * 1024 * 1024, shell: "/bin/bash" };
+    const opts = { cwd: root, maxBuffer: 4 * 1024 * 1024, shell: "/bin/bash", env: { ...process.env, SHIM_PROJECT_ROOT: root } };
     let stdout = "";
     let stderr = "";
     let code = 0;
-    try {
-      const out = await execAsync(`bash "${scriptPath}"`, opts);
-      stdout = out.stdout ?? "";
-      stderr = out.stderr ?? "";
-    } catch (e: unknown) {
-      const err = e as { stdout?: string; stderr?: string; code?: number };
-      stdout = err.stdout ?? "";
-      stderr = err.stderr ?? (err instanceof Error ? err.message : String(e));
-      code = err.code ?? 1;
+
+    const runnerPath = path.join(root, "scripts", "shim-runner.js");
+    const hasPackageRunner = fs.existsSync(path.join(root, "node_modules", "shimwrappercheck", "scripts", "shim-runner.js"));
+
+    if (fs.existsSync(runnerPath)) {
+      try {
+        const out = await execAsync(`node "${runnerPath}"`, opts);
+        stdout = out.stdout ?? "";
+        stderr = out.stderr ?? "";
+      } catch (e: unknown) {
+        const err = e as { stdout?: string; stderr?: string; code?: number };
+        stdout = err.stdout ?? "";
+        stderr = err.stderr ?? (err instanceof Error ? err.message : String(e));
+        code = err.code ?? 1;
+      }
+    } else if (hasPackageRunner) {
+      try {
+        const out = await execAsync("npx shimwrappercheck run", opts);
+        stdout = out.stdout ?? "";
+        stderr = out.stderr ?? "";
+      } catch (e: unknown) {
+        const err = e as { stdout?: string; stderr?: string; code?: number };
+        stdout = err.stdout ?? "";
+        stderr = err.stderr ?? (err instanceof Error ? err.message : String(e));
+        code = err.code ?? 1;
+      }
+    } else {
+      const scriptPath = path.join(root, "scripts", "run-checks.sh");
+      if (!fs.existsSync(scriptPath)) {
+        return NextResponse.json({
+          error: "scripts/run-checks.sh not found; install shimwrappercheck for full runner.",
+          stdout: "",
+          stderr: "",
+          code: 1,
+        });
+      }
+      try {
+        const out = await execAsync(`bash "${scriptPath}"`, { ...opts, maxBuffer: 2 * 1024 * 1024 });
+        stdout = out.stdout ?? "";
+        stderr = out.stderr ?? "";
+      } catch (e: unknown) {
+        const err = e as { stdout?: string; stderr?: string; code?: number };
+        stdout = err.stdout ?? "";
+        stderr = err.stderr ?? (err instanceof Error ? err.message : String(e));
+        code = err.code ?? 1;
+      }
     }
+
     return NextResponse.json({ stdout, stderr, code });
   } catch (err) {
     console.error("run-checks error:", err);

package/dashboard/app/api/settings/route.ts

@@ -11,6 +11,7 @@ import {
   type Preset,
   DEFAULT_SETTINGS,
   DEFAULT_VIBE_CODE_PRESET,
+  DEFAULT_CHECK_TOGGLES,
   buildRcContent,
   SUPABASE_COMMAND_IDS,
   GIT_COMMAND_IDS,
@@ -27,13 +28,18 @@ function getRcPath(): string {
 }
 
 function parseRcToSettings(rawRc: string): Partial<SettingsData> {
-  const checkToggles = { frontend: true, backend: true, aiReview: true };
+  const checkToggles = { ...DEFAULT_CHECK_TOGGLES };
   const argsMatch = rawRc.match(/SHIM_CHECKS_ARGS="([^"]*)"/);
   if (argsMatch) {
     const args = argsMatch[1];
     if (args.includes("--no-frontend")) checkToggles.frontend = false;
     if (args.includes("--no-backend")) checkToggles.backend = false;
     if (args.includes("--no-ai-review")) checkToggles.aiReview = false;
+    if (args.includes("--no-sast")) checkToggles.sast = false;
+    if (args.includes("--no-architecture")) checkToggles.architecture = false;
+    if (args.includes("--no-complexity")) checkToggles.complexity = false;
+    if (args.includes("--no-mutation")) checkToggles.mutation = false;
+    if (args.includes("--no-e2e")) checkToggles.e2e = false;
   }
   const enforceMatch = rawRc.match(/SHIM_ENFORCE_COMMANDS="([^"]*)"/);
   const hookMatch = rawRc.match(/SHIM_HOOK_COMMANDS="([^"]*)"/);
@@ -71,6 +77,8 @@ export async function GET() {
         if (parsed.presets?.length) settings.presets = parsed.presets;
         if (parsed.activePresetId) settings.activePresetId = parsed.activePresetId;
         if (parsed.checkToggles) settings.checkToggles = { ...DEFAULT_SETTINGS.checkToggles, ...parsed.checkToggles };
+        if (parsed.checkSettings) settings.checkSettings = { ...parsed.checkSettings };
+        if (Array.isArray(parsed.checkOrder)) settings.checkOrder = parsed.checkOrder;
       } catch {
         // use defaults
       }
@@ -105,6 +113,8 @@ export async function POST(request: NextRequest) {
       presets: body.presets,
       activePresetId: body.activePresetId ?? DEFAULT_SETTINGS.activePresetId,
       checkToggles: { ...DEFAULT_SETTINGS.checkToggles, ...body.checkToggles },
+      checkSettings: body.checkSettings ?? undefined,
+      checkOrder: Array.isArray(body.checkOrder) ? body.checkOrder : undefined,
     };
 
     const root = getProjectRoot();

package/dashboard/app/api/status/route.ts

@@ -14,19 +14,33 @@ export async function GET() {
     const hasPresets = fs.existsSync(path.join(root, ".shimwrappercheck-presets.json"));
     const hasAgents = fs.existsSync(path.join(root, "AGENTS.md"));
     const hasRunChecks = fs.existsSync(path.join(root, "scripts", "run-checks.sh"));
+    const hasRunner = fs.existsSync(path.join(root, "scripts", "shim-runner.js")) ||
+      fs.existsSync(path.join(root, "node_modules", "shimwrappercheck", "scripts", "shim-runner.js"));
     const hasHusky = fs.existsSync(path.join(root, ".husky", "pre-push"));
     const hasGitHook = fs.existsSync(path.join(root, ".git", "hooks", "pre-push"));
     const hasSupabase = fs.existsSync(path.join(root, "supabase", "config.toml"));
 
+    let lastError: { check?: string; message?: string; suggestion?: string; timestamp?: string } | null = null;
+    const lastErrorPath = path.join(root, ".shim", "last_error.json");
+    if (fs.existsSync(lastErrorPath)) {
+      try {
+        lastError = JSON.parse(fs.readFileSync(lastErrorPath, "utf8"));
+      } catch {
+        lastError = { message: "(parse error)" };
+      }
+    }
+
     return NextResponse.json({
       projectRoot: root,
       config: hasRc,
       presetsFile: hasPresets,
       agentsMd: hasAgents,
       runChecksScript: hasRunChecks,
+      shimRunner: hasRunner,
       prePushHusky: hasHusky,
       prePushGit: hasGitHook,
       supabase: hasSupabase,
+      lastError,
     });
   } catch (err) {
     console.error("status error:", err);

package/dashboard/app/config/page.tsx

@@ -50,13 +50,13 @@ export default function ConfigPage() {
   }
 
   return (
-    <div className="space-y-6">
+    <div className="space-y-6 text-white">
       <h1 className="text-3xl font-bold">Config (.shimwrappercheckrc)</h1>
-      <p className="text-base-content/80">
+      <p className="text-neutral-300">
         Shell-Variablen und Kommentare. Wird beim nächsten Aufruf des Shims verwendet.
       </p>
       <textarea
-        className="textarea textarea-bordered w-full font-mono text-sm min-h-[320px]"
+        className="textarea w-full font-mono text-sm min-h-[320px] bg-neutral-800 border-neutral-600 text-white"
         value={raw}
         onChange={(e) => setRaw(e.target.value)}
         placeholder="# shimwrappercheck config\nSHIM_ENFORCE_COMMANDS=\"functions,db,migration\"\n..."

package/dashboard/app/globals.css

@@ -3,15 +3,8 @@
 @tailwind utilities;
 
 :root {
-  --background: #f8fafc;
-  --foreground: #0f172a;
-}
-
-@media (prefers-color-scheme: dark) {
-  :root {
-    --background: #0f172a;
-    --foreground: #f8fafc;
-  }
+  --background: #0f0f0f;
+  --foreground: #fafafa;
 }
 
 body {

package/dashboard/app/layout.tsx

@@ -1,6 +1,7 @@
 import type { Metadata } from "next";
 import "./globals.css";
-import Nav from "@/components/Nav";
+import Header from "@/components/Header";
+import SidebarMyShim from "@/components/SidebarMyShim";
 
 export const metadata: Metadata = {
   title: "shimwrappercheck Dashboard",
@@ -13,10 +14,15 @@ export default function RootLayout({
   children: React.ReactNode;
 }>) {
   return (
-    <html lang="de" data-theme="light">
-      <body className="min-h-screen bg-base-200">
-        <Nav />
-        <main className="container mx-auto px-4 py-6">{children}</main>
+    <html lang="de" data-theme="dark">
+      <body className="min-h-screen bg-[#0f0f0f] text-white">
+        <Header />
+        <div className="flex">
+          <aside className="w-80 min-h-[calc(100vh-4rem)] border-r border-neutral-700 flex-shrink-0">
+            <SidebarMyShim />
+          </aside>
+          <main className="flex-1 p-6 overflow-auto">{children}</main>
+        </div>
       </body>
     </html>
   );

package/dashboard/app/page.tsx

@@ -14,9 +14,11 @@ type Status = {
   presetsFile?: boolean;
   agentsMd?: boolean;
   runChecksScript?: boolean;
+  shimRunner?: boolean;
   prePushHusky?: boolean;
   prePushGit?: boolean;
   supabase?: boolean;
+  lastError?: { check?: string; message?: string; suggestion?: string; timestamp?: string } | null;
 };
 
 export default function DashboardPage() {
@@ -59,11 +61,28 @@ export default function DashboardPage() {
   }
 
   return (
-    <div className="space-y-8">
-      <h1 className="text-3xl font-bold">Dashboard</h1>
-      <p className="text-base-content/80">
-        Status und Aktionen für shimwrappercheck. AGENTS.md und Config können hier bearbeitet werden (auch für Agents).
-      </p>
+    <div className="space-y-8 text-white">
+      <div className="flex items-center justify-between gap-4 flex-wrap">
+        <h1 className="text-2xl font-bold">Available Checks</h1>
+        <div className="relative">
+          <input
+            type="text"
+            placeholder="Suchen..."
+            className="input input-bordered input-sm bg-neutral-800 border-neutral-600 text-white w-56 pl-8"
+          />
+          <svg
+            className="absolute left-2 top-1/2 -translate-y-1/2 w-4 h-4 text-neutral-500 pointer-events-none"
+            fill="none"
+            stroke="currentColor"
+            viewBox="0 0 24 24"
+          >
+            <path strokeLinecap="round" strokeLinejoin="round" strokeWidth={2} d="M21 21l-6-6m2-5a7 7 0 11-14 0 7 7 0 0114 0z" />
+          </svg>
+        </div>
+      </div>
+      <div className="border border-neutral-600 rounded-lg bg-neutral-800/40 min-h-[320px] p-4">
+        {/* Platz für verfügbare Checks / Detail-Ansicht */}
+      </div>
 
       <div>
         <h2 className="text-xl font-semibold mb-4">Status</h2>
@@ -72,12 +91,22 @@ export default function DashboardPage() {
           <StatusCard label="Presets (.shimwrappercheck-presets.json)" ok={!!status.presetsFile} detail="Presets & Check-Toggles (Einstellungen)" />
           <StatusCard label="AGENTS.md" ok={!!status.agentsMd} detail="Agent-Anweisungen (über GUI bearbeitbar)" />
           <StatusCard label="scripts/run-checks.sh" ok={!!status.runChecksScript} />
+          <StatusCard label="Shim Runner" ok={!!status.shimRunner} detail="Node orchestrator (npx shimwrappercheck run)" />
           <StatusCard label="Husky pre-push" ok={!!status.prePushHusky} />
           <StatusCard label="Git pre-push Hook" ok={!!status.prePushGit} />
           <StatusCard label="Supabase" ok={!!status.supabase} />
         </div>
         {status.projectRoot && (
-          <p className="mt-2 text-sm text-base-content/70">Projekt-Root: {status.projectRoot}</p>
+          <p className="mt-2 text-sm text-neutral-400">Projekt-Root: {status.projectRoot}</p>
+        )}
+        {status.lastError && (
+          <div className="mt-4 alert alert-warning shadow-lg">
+            <div>
+              <h3 className="font-bold">Letzter Check-Fehler (.shim/last_error.json)</h3>
+              <p className="text-sm">{status.lastError.check}: {status.lastError.message}</p>
+              {status.lastError.suggestion && <p className="text-sm opacity-90">Vorschlag: {status.lastError.suggestion}</p>}
+            </div>
+          </div>
         )}
       </div>
 
@@ -86,31 +115,31 @@ export default function DashboardPage() {
         <div className="flex flex-wrap gap-4">
           <button
             type="button"
-            className="btn btn-primary"
+            className="btn btn-primary bg-primary text-primary-content"
             onClick={runChecks}
-            disabled={running || !status.runChecksScript}
+            disabled={running || (!status.runChecksScript && !status.shimRunner)}
           >
             {running ? "Läuft…" : "Nur Checks ausführen"}
           </button>
-          <Link href="/settings" className="btn btn-outline">
+          <Link href="/settings" className="btn btn-outline border-neutral-600 text-neutral-300">
             Einstellungen (Presets & Checks)
           </Link>
-          <Link href="/config" className="btn btn-outline">
+          <Link href="/config" className="btn btn-outline border-neutral-600 text-neutral-300">
             Config (Raw)
           </Link>
-          <Link href="/agents" className="btn btn-outline">
+          <Link href="/agents" className="btn btn-outline border-neutral-600 text-neutral-300">
             AGENTS.md bearbeiten
           </Link>
         </div>
       </div>
 
       {runResult && (
-        <div className="card bg-base-100 shadow-md">
+        <div className="card bg-neutral-800 border border-neutral-600 shadow-md">
           <div className="card-body">
-            <h3 className="card-title">
+            <h3 className="card-title text-white">
               Letzte Check-Ausgabe {runResult.code === 0 ? "(OK)" : "(Fehler)"}
             </h3>
-            <pre className="bg-base-200 p-4 rounded-lg text-sm overflow-auto max-h-64 whitespace-pre-wrap">
+            <pre className="bg-neutral-900 p-4 rounded-lg text-sm overflow-auto max-h-64 whitespace-pre-wrap text-neutral-300">
               {runResult.stdout || "(keine Ausgabe)"}
               {runResult.stderr ? `\n${runResult.stderr}` : ""}
             </pre>

package/dashboard/app/settings/page.tsx

@@ -203,16 +203,16 @@ export default function SettingsPage() {
   }
 
   return (
-    <div className="space-y-8">
+    <div className="space-y-8 text-white">
       <h1 className="text-3xl font-bold">Einstellungen</h1>
-      <p className="text-base-content/80">
+      <p className="text-neutral-300">
         Preset wählen, Befehle (Supabase / GitHub) und Checks ein-/ausschalten. Speichern schreibt .shimwrappercheckrc.
       </p>
 
       {/* Preset selector */}
-      <div className="card bg-base-100 shadow-md">
+      <div className="card bg-neutral-800 border border-neutral-600 shadow-md">
         <div className="card-body">
-          <h2 className="card-title">Preset</h2>
+          <h2 className="card-title text-white">Preset</h2>
           <div className="flex flex-wrap gap-2 items-center">
             {settings.presets.map((p) => (
               <div key={p.id} className="flex items-center gap-1">
@@ -263,10 +263,10 @@ export default function SettingsPage() {
       {/* Active preset: providers (for custom) + command toggles */}
       <div className="space-y-6">
         {activePreset.id !== DEFAULT_VIBE_CODE_PRESET.id && (
-          <div className="card bg-base-100 shadow-md">
+          <div className="card bg-neutral-800 border border-neutral-600 shadow-md">
             <div className="card-body">
-              <h2 className="card-title">Provider in diesem Preset</h2>
-              <p className="text-sm text-base-content/70">Provider hinzufügen (z. B. GitHub, Supabase).</p>
+              <h2 className="card-title text-white">Provider in diesem Preset</h2>
+              <p className="text-sm text-neutral-400">Provider hinzufügen (z. B. GitHub, Supabase).</p>
               <div className="flex gap-2 flex-wrap">
                 {(["supabase", "git"] as const).map((prov) => (
                   <div key={prov} className="flex items-center gap-1">
@@ -295,10 +295,10 @@ export default function SettingsPage() {
 
         {/* Supabase */}
         {activePreset.providers.includes("supabase") && (
-          <div className="card bg-base-100 shadow-md">
+          <div className="card bg-neutral-800 border border-neutral-600 shadow-md">
             <div className="card-body">
-              <h2 className="card-title">Supabase</h2>
-              <p className="text-sm text-base-content/70">Für welche Befehle Checks und Hooks laufen.</p>
+              <h2 className="card-title text-white">Supabase</h2>
+              <p className="text-sm text-neutral-400">Für welche Befehle Checks und Hooks laufen.</p>
               <div className="overflow-x-auto">
                 <table className="table table-sm">
                   <thead>
@@ -350,10 +350,10 @@ export default function SettingsPage() {
 
         {/* Git */}
         {activePreset.providers.includes("git") && (
-          <div className="card bg-base-100 shadow-md">
+          <div className="card bg-neutral-800 border border-neutral-600 shadow-md">
             <div className="card-body">
-              <h2 className="card-title">GitHub (Git)</h2>
-              <p className="text-sm text-base-content/70">Für welche Git-Befehle Checks laufen.</p>
+              <h2 className="card-title text-white">GitHub (Git)</h2>
+              <p className="text-sm text-neutral-400">Für welche Git-Befehle Checks laufen.</p>
               <div className="flex flex-wrap gap-4">
                 {GIT_COMMAND_IDS.map((cmd) => (
                   <label key={cmd} className="flex items-center gap-2 cursor-pointer">
@@ -373,10 +373,10 @@ export default function SettingsPage() {
       </div>
 
       {/* Check toggles */}
-      <div className="card bg-base-100 shadow-md">
+      <div className="card bg-neutral-800 border border-neutral-600 shadow-md">
         <div className="card-body">
-          <h2 className="card-title">Checks (run-checks.sh)</h2>
-          <p className="text-sm text-base-content/70">Welche Schritte beim Check-Lauf ausgeführt werden.</p>
+          <h2 className="card-title text-white">Checks (Shim Runner / run-checks.sh)</h2>
+          <p className="text-sm text-neutral-400">Welche Schritte beim Check-Lauf ausgeführt werden.</p>
           <div className="flex flex-wrap gap-6">
             <label className="flex items-center gap-2 cursor-pointer">
               <input
@@ -396,6 +396,51 @@ export default function SettingsPage() {
               />
               <span>Backend (deno fmt/lint/audit)</span>
             </label>
+            <label className="flex items-center gap-2 cursor-pointer">
+              <input
+                type="checkbox"
+                className="toggle toggle-sm"
+                checked={settings.checkToggles.sast}
+                onChange={(e) => setCheckToggles("sast", e.target.checked)}
+              />
+              <span>SAST (semgrep)</span>
+            </label>
+            <label className="flex items-center gap-2 cursor-pointer">
+              <input
+                type="checkbox"
+                className="toggle toggle-sm"
+                checked={settings.checkToggles.architecture}
+                onChange={(e) => setCheckToggles("architecture", e.target.checked)}
+              />
+              <span>Architektur (dependency-cruiser)</span>
+            </label>
+            <label className="flex items-center gap-2 cursor-pointer">
+              <input
+                type="checkbox"
+                className="toggle toggle-sm"
+                checked={settings.checkToggles.complexity}
+                onChange={(e) => setCheckToggles("complexity", e.target.checked)}
+              />
+              <span>Komplexität (max 10)</span>
+            </label>
+            <label className="flex items-center gap-2 cursor-pointer">
+              <input
+                type="checkbox"
+                className="toggle toggle-sm"
+                checked={settings.checkToggles.mutation}
+                onChange={(e) => setCheckToggles("mutation", e.target.checked)}
+              />
+              <span>Mutation (Stryker ≥80%)</span>
+            </label>
+            <label className="flex items-center gap-2 cursor-pointer">
+              <input
+                type="checkbox"
+                className="toggle toggle-sm"
+                checked={settings.checkToggles.e2e}
+                onChange={(e) => setCheckToggles("e2e", e.target.checked)}
+              />
+              <span>E2E (Playwright)</span>
+            </label>
             <label className="flex items-center gap-2 cursor-pointer">
               <input
                 type="checkbox"
@@ -403,7 +448,7 @@ export default function SettingsPage() {
                 checked={settings.checkToggles.aiReview}
                 onChange={(e) => setCheckToggles("aiReview", e.target.checked)}
               />
-              <span>AI Review (Codex/Cursor)</span>
+              <span>AI Review (Deductive 95%)</span>
             </label>
           </div>
         </div>