technical-debt-radar 1.11.0 → 1.13.0

package/dist/index.js

@@ -161,6 +161,7 @@ var require_credits = __commonJS({
     (function(AiOperation2) {
       AiOperation2["FIX"] = "fix";
       AiOperation2["FIX_GROUPED"] = "fix-grouped";
+      AiOperation2["FIX_MULTI"] = "fix-multi";
       AiOperation2["SCAN_SUMMARY"] = "scan-summary";
       AiOperation2["PR_COMMENT"] = "pr-comment";
       AiOperation2["CROSS_FILE"] = "cross-file";
@@ -168,6 +169,7 @@ var require_credits = __commonJS({
     exports2.CREDIT_COSTS = {
       [AiOperation.FIX]: 1,
       [AiOperation.FIX_GROUPED]: 1,
+      [AiOperation.FIX_MULTI]: 3,
       [AiOperation.SCAN_SUMMARY]: 1,
       [AiOperation.PR_COMMENT]: 3,
       [AiOperation.CROSS_FILE]: 5
@@ -20737,6 +20739,12 @@ var RadarApiClient = class _RadarApiClient {
       body: JSON.stringify(data)
     });
   }
+  async requestMultiFix(data) {
+    return this.fetch("/cli/ai/fix-multi", {
+      method: "POST",
+      body: JSON.stringify(data)
+    });
+  }
 };
 
 // src/commands/scan.ts
@@ -21949,6 +21957,7 @@ async function validateCommand(options) {
 var fs5 = __toESM(require("fs/promises"));
 var fsSync2 = __toESM(require("fs"));
 var path5 = __toESM(require("path"));
+var import_child_process2 = require("child_process");
 var import_chalk4 = __toESM(require("chalk"));
 var import_inquirer2 = __toESM(require("inquirer"));
 var import_analyzers3 = __toESM(require_dist3());
@@ -22003,6 +22012,38 @@ async function runScan(targetPath, options) {
     policy
   };
 }
+async function quickScanFile(targetPath, filePath, options) {
+  try {
+    const result = await runScan(targetPath, { ...options, file: filePath });
+    return result.violations;
+  } catch {
+    return [];
+  }
+}
+function resolveViolationPath(vFile, projectRoot) {
+  if (path5.isAbsolute(vFile)) return vFile;
+  return path5.resolve(projectRoot, vFile);
+}
+function detectTestCommand(projectRoot) {
+  try {
+    const pkg = JSON.parse(fsSync2.readFileSync(path5.join(projectRoot, "package.json"), "utf-8"));
+    const scripts = pkg.scripts ?? {};
+    if (scripts.test && scripts.test !== 'echo "Error: no test specified" && exit 1') return "npm test";
+    if (scripts["test:unit"]) return "npm run test:unit";
+    if (scripts.jest) return "npm run jest";
+    return null;
+  } catch {
+    return null;
+  }
+}
+function runTests(projectRoot, testCmd) {
+  try {
+    (0, import_child_process2.execSync)(testCmd, { cwd: projectRoot, stdio: "pipe", timeout: 12e4 });
+    return true;
+  } catch {
+    return false;
+  }
+}
 function groupBy(items, key) {
   const result = {};
   for (const item of items) {
@@ -22012,6 +22053,102 @@ function groupBy(items, key) {
   }
   return result;
 }
+async function handleMultiFileFix(client, violation, violationFile, projectRoot, framework, architecture, filesToChange, options) {
+  console.log(import_chalk4.default.magenta.bold("\n  MULTI-FILE FIX"));
+  console.log(import_chalk4.default.dim("  Gathering file contents..."));
+  const files = {};
+  const allPaths = [violationFile, ...filesToChange.map((f) => resolveViolationPath(f, projectRoot))];
+  for (const fp of allPaths) {
+    try {
+      files[fp] = await fs5.readFile(fp, "utf-8");
+    } catch {
+      console.log(import_chalk4.default.yellow(`  Could not read: ${fp} \u2014 skipping`));
+    }
+  }
+  if (Object.keys(files).length < 2) {
+    console.log(import_chalk4.default.yellow("  Not enough files found for multi-file fix."));
+    return;
+  }
+  console.log(import_chalk4.default.dim(`  Sending ${Object.keys(files).length} files to Radar for analysis...`));
+  const result = await client.requestMultiFix({
+    violation: {
+      file: violation.file,
+      line: violation.line,
+      ruleId: violation.ruleId,
+      message: violation.message,
+      severity: violation.severity,
+      category: violation.category
+    },
+    files,
+    framework,
+    architecture
+  });
+  console.log("");
+  if (result.explanation) {
+    console.log(import_chalk4.default.white.bold("  WHY:"));
+    console.log(import_chalk4.default.white(`  ${result.explanation}`));
+  }
+  if (result.risk) {
+    console.log(import_chalk4.default.yellow(`  RISK: ${result.risk}`));
+  }
+  if (result.pattern) {
+    console.log(import_chalk4.default.cyan(`  PATTERN: ${result.pattern}`));
+  }
+  console.log("");
+  for (let i = 0; i < result.changes.length; i++) {
+    const change = result.changes[i];
+    const rel = path5.relative(projectRoot, resolveViolationPath(change.filePath, projectRoot));
+    console.log(import_chalk4.default.bold(`  FILE ${i + 1}: ${rel}`));
+    console.log(import_chalk4.default.dim(`  ${change.description}`));
+    const beforeLines = change.before.split("\n");
+    const afterLines = change.after.split("\n");
+    let diffShown = 0;
+    for (let j = 0; j < Math.max(beforeLines.length, afterLines.length) && diffShown < 10; j++) {
+      if (beforeLines[j] !== afterLines[j]) {
+        if (beforeLines[j]) console.log(import_chalk4.default.red(`  - ${beforeLines[j]}`));
+        if (afterLines[j]) console.log(import_chalk4.default.green(`  + ${afterLines[j]}`));
+        diffShown++;
+      }
+    }
+    if (diffShown >= 10) console.log(import_chalk4.default.dim("  ... (more changes)"));
+    console.log("");
+  }
+  console.log(import_chalk4.default.cyan(`  ${result.creditsUsed} AI credits used (${result.creditsRemaining} remaining)`));
+  if (options.dryRun) {
+    console.log(import_chalk4.default.dim("  [dry-run] Would apply all changes"));
+    return;
+  }
+  const originals = {};
+  for (const change of result.changes) {
+    const fp = resolveViolationPath(change.filePath, projectRoot);
+    try {
+      originals[fp] = await fs5.readFile(fp, "utf-8");
+    } catch {
+      originals[fp] = "";
+    }
+  }
+  for (const change of result.changes) {
+    const fp = resolveViolationPath(change.filePath, projectRoot);
+    fsSync2.writeFileSync(fp, change.after, "utf-8");
+  }
+  console.log(import_chalk4.default.green(`  Applied changes to ${result.changes.length} files`));
+  if (options.safe) {
+    const testCmd = detectTestCommand(projectRoot);
+    if (testCmd) {
+      console.log(import_chalk4.default.dim(`  Running tests: ${testCmd}...`));
+      const passed = runTests(projectRoot, testCmd);
+      if (passed) {
+        console.log(import_chalk4.default.green("  \u2705 Tests passed"));
+      } else {
+        console.log(import_chalk4.default.red("  \u274C Tests failed \u2014 reverting all changes"));
+        for (const [fp, content] of Object.entries(originals)) {
+          fsSync2.writeFileSync(fp, content, "utf-8");
+        }
+        return;
+      }
+    }
+  }
+}
 async function fixCommand(targetPath, options) {
   const client = RadarApiClient.fromConfigOrEnv();
   if (!client) {
@@ -22034,6 +22171,16 @@ async function fixCommand(targetPath, options) {
     console.error(import_chalk4.default.red("\u274C Invalid or expired token. Run: radar login"));
     process.exit(1);
   }
+  const projectRoot = path5.resolve(targetPath);
+  let testCmd = null;
+  if (options.safe) {
+    testCmd = detectTestCommand(projectRoot);
+    if (!testCmd) {
+      console.log(import_chalk4.default.yellow("\u26A0\uFE0F  No test command found in package.json. --safe will skip test verification."));
+    } else {
+      console.log(import_chalk4.default.dim(`  Test command: ${testCmd}`));
+    }
+  }
   console.log(import_chalk4.default.blue("Scanning for violations..."));
   const scanResult = await runScan(targetPath, {
     config: options.config,
@@ -22054,10 +22201,11 @@ async function fixCommand(targetPath, options) {
   }
   console.log(import_chalk4.default.yellow(`Found ${violations.length} violations. Generating AI fixes...
 `));
-  const byFile = groupBy(violations, (v) => v.file);
+  const byFile = groupBy(violations, (v) => resolveViolationPath(v.file, projectRoot));
   let totalFixed = 0;
   let totalSkipped = 0;
   let totalFailed = 0;
+  let totalReverted = 0;
   let totalCreditsUsed = 0;
   let creditsRemaining = -1;
   let fixCount = 0;
@@ -22067,15 +22215,16 @@ async function fixCommand(targetPath, options) {
   const orm = scanResult.config?.stack?.orm || "Prisma";
   for (const [filePath, fileViolations] of Object.entries(byFile)) {
     if (quit) break;
-    const relativePath = path5.relative(path5.resolve(targetPath), filePath);
+    const absPath = path5.resolve(filePath);
+    const relativePath = path5.relative(projectRoot, absPath);
     console.log(import_chalk4.default.bold(`
 ${relativePath} (${fileViolations.length} violations)
 `));
     let fileContent;
     try {
-      fileContent = await fs5.readFile(filePath, "utf-8");
+      fileContent = await fs5.readFile(absPath, "utf-8");
     } catch {
-      console.log(import_chalk4.default.red(`  Could not read file: ${filePath}`));
+      console.log(import_chalk4.default.red(`  Could not read file: ${absPath}`));
       totalFailed += fileViolations.length;
       continue;
     }
@@ -22150,13 +22299,29 @@ ${relativePath} (${fileViolations.length} violations)
         totalCreditsUsed += fix.creditsUsed;
         creditsRemaining = fix.creditsRemaining;
         fixCount++;
+        if (fix.explanation) {
+          console.log(import_chalk4.default.white.bold("  WHY THIS IS A VIOLATION:"));
+          console.log(import_chalk4.default.white(`  ${fix.explanation}`));
+        }
+        if (fix.risk) {
+          console.log(import_chalk4.default.yellow(`  RISK: ${fix.risk}`));
+        }
+        if (fix.pattern) {
+          console.log(import_chalk4.default.cyan(`  PATTERN: ${fix.pattern}`));
+        }
+        if (fix.multiFile && fix.filesToChange && fix.filesToChange.length > 0) {
+          console.log(import_chalk4.default.magenta(`  MULTI-FILE: Also needs changes in ${fix.filesToChange.length} other file(s):`));
+          for (const f of fix.filesToChange) {
+            console.log(import_chalk4.default.magenta(`    \u2192 ${f}`));
+          }
+        }
+        console.log("");
         console.log(import_chalk4.default.red("  BEFORE:"));
         fix.originalCode.split("\n").forEach((l) => console.log(import_chalk4.default.red(`  - ${l}`)));
         console.log("");
         console.log(import_chalk4.default.green("  AFTER:"));
         fix.fixedCode.split("\n").forEach((l) => console.log(import_chalk4.default.green(`  + ${l}`)));
         console.log("");
-        console.log(import_chalk4.default.dim(`  ${fix.explanation}`));
         console.log(import_chalk4.default.dim(`  Confidence: ${fix.confidence}`));
         console.log(import_chalk4.default.cyan(`  ${fix.creditsUsed} AI credit used (${fix.creditsRemaining} remaining)`));
         console.log("");
@@ -22164,21 +22329,23 @@ ${relativePath} (${fileViolations.length} violations)
         if (options.dryRun) {
           console.log(import_chalk4.default.dim("  [dry-run] Would apply this fix"));
           totalSkipped += lineViolations.length;
-        } else if (applyAll || options.auto && fix.confidence === "high") {
+        } else if (applyAll || options.auto) {
           shouldApply = true;
-          console.log(import_chalk4.default.green("  Auto-applying..."));
+          if (!options.auto) console.log(import_chalk4.default.green("  Auto-applying (all)..."));
         } else {
+          const choices = [
+            { name: "Yes - apply this fix", value: "yes" },
+            ...fix.multiFile && fix.filesToChange?.length ? [{ name: `Multi-file fix (${fix.filesToChange.length + 1} files, 3 credits)`, value: "multi" }] : [],
+            { name: "No - skip", value: "no" },
+            { name: "All - apply all remaining fixes", value: "all" },
+            { name: "Quit - stop fixing", value: "quit" }
+          ];
           const { action } = await import_inquirer2.default.prompt([
             {
               type: "list",
               name: "action",
               message: `Apply this fix? (${lineViolations.length} violation${lineViolations.length > 1 ? "s" : ""})`,
-              choices: [
-                { name: "Yes - apply this fix", value: "yes" },
-                { name: "No - skip", value: "no" },
-                { name: "All - apply all remaining fixes", value: "all" },
-                { name: "Quit - stop fixing", value: "quit" }
-              ]
+              choices
             }
           ]);
           if (action === "quit") {
@@ -22194,26 +22361,70 @@ ${relativePath} (${fileViolations.length} violations)
             totalSkipped += lineViolations.length;
             continue;
           }
+          if (action === "multi") {
+            await handleMultiFileFix(
+              client,
+              lineViolations[0],
+              absPath,
+              projectRoot,
+              framework,
+              scanResult.config?.architecture,
+              fix.filesToChange ?? [],
+              options
+            );
+            totalFixed += lineViolations.length;
+            fileContent = await fs5.readFile(absPath, "utf-8");
+            lines = fileContent.split("\n");
+            continue;
+          }
         }
         if (shouldApply) {
-          applyFix(filePath, fix);
-          totalFixed += lineViolations.length;
-          console.log(import_chalk4.default.green(`  Fixed! (${lineViolations.length} violation${lineViolations.length > 1 ? "s" : ""})`));
-          fileContent = await fs5.readFile(filePath, "utf-8");
+          const originalContent = options.safe ? fileContent : null;
+          applyFix(absPath, fix);
+          console.log(import_chalk4.default.green(`  Applied fix (${lineViolations.length} violation${lineViolations.length > 1 ? "s" : ""})`));
+          const remaining = await quickScanFile(targetPath, absPath, {
+            config: options.config,
+            rules: options.rules
+          });
+          const stillPresent = remaining.some(
+            (rv) => lineViolations.some(
+              (lv) => rv.ruleId === lv.ruleId && rv.file === lv.file && Math.abs(rv.line - lv.line) <= 3
+            )
+          );
+          if (stillPresent) {
+            console.log(import_chalk4.default.yellow("  \u26A0\uFE0F  Fix applied but violation persists \u2014 manual review needed"));
+          } else {
+            console.log(import_chalk4.default.green("  \u2705 Violation resolved"));
+          }
+          if (options.safe && testCmd) {
+            console.log(import_chalk4.default.dim(`  Running tests: ${testCmd}...`));
+            const testsPassed = runTests(projectRoot, testCmd);
+            if (testsPassed) {
+              console.log(import_chalk4.default.green("  \u2705 Tests passed"));
+              totalFixed += lineViolations.length;
+            } else {
+              console.log(import_chalk4.default.red("  \u274C Tests failed \u2014 reverting fix"));
+              fsSync2.writeFileSync(absPath, originalContent, "utf-8");
+              totalReverted += lineViolations.length;
+            }
+          } else {
+            totalFixed += lineViolations.length;
+          }
+          fileContent = await fs5.readFile(absPath, "utf-8");
           lines = fileContent.split("\n");
         }
       } catch (error) {
         const message = error instanceof Error ? error.message : String(error);
         if (message.includes("403") && message.includes("credits exhausted")) {
-          console.log(import_chalk4.default.red(`  \u274C AI credits exhausted. Upgrade for more: radar upgrade`));
+          console.log(import_chalk4.default.red("  \u274C AI credits exhausted. Upgrade for more: radar upgrade"));
           quit = true;
           break;
         } else if (message.includes("403") && message.includes("Solo")) {
-          console.log(import_chalk4.default.red(`  \u274C radar fix requires Solo plan or higher. Upgrade: radar upgrade`));
+          console.log(import_chalk4.default.red("  \u274C radar fix requires Solo plan or higher. Upgrade: radar upgrade"));
           quit = true;
           break;
         } else if (message.includes("401")) {
-          console.log(import_chalk4.default.red(`  \u274C Authentication failed. Run: radar login`));
+          console.log(import_chalk4.default.red("  \u274C Authentication failed. Run: radar login"));
           quit = true;
           break;
         } else {
@@ -22227,16 +22438,17 @@ ${relativePath} (${fileViolations.length} violations)
   console.log(import_chalk4.default.bold("\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550"));
   console.log(import_chalk4.default.bold("  FIX SUMMARY"));
   console.log(import_chalk4.default.bold("\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550"));
-  console.log(import_chalk4.default.green(`  Fixed:   ${totalFixed}`));
-  console.log(import_chalk4.default.yellow(`  Skipped: ${totalSkipped}`));
-  if (totalFailed > 0) console.log(import_chalk4.default.red(`  Failed:  ${totalFailed}`));
+  console.log(import_chalk4.default.green(`  Fixed:    ${totalFixed}`));
+  console.log(import_chalk4.default.yellow(`  Skipped:  ${totalSkipped}`));
+  if (totalReverted > 0) console.log(import_chalk4.default.red(`  Reverted: ${totalReverted} (tests failed)`));
+  if (totalFailed > 0) console.log(import_chalk4.default.red(`  Failed:   ${totalFailed}`));
   console.log(import_chalk4.default.cyan(`  AI credits used: ${totalCreditsUsed}`));
   if (creditsRemaining >= 0) {
     console.log(import_chalk4.default.cyan(`  Credits remaining: ${creditsRemaining}`));
   }
   console.log("");
   if (totalFixed > 0 && !options.dryRun) {
-    console.log(import_chalk4.default.blue("Re-scanning to verify fixes...\n"));
+    console.log(import_chalk4.default.blue("Re-scanning to verify all fixes...\n"));
     const newResult = await runScan(targetPath, {
       config: options.config,
       rules: options.rules,
@@ -22627,7 +22839,7 @@ program.command("check <file>").description("Check a single file against policy"
 program.command("init").description("Generate radar.yml + rules.yml from project structure").option("--path <dir>", "Target directory", ".").option("--architecture <pattern>", "Force architecture: ddd, hexagonal, clean, layered, mvc, event-driven").option("--regenerate-rules", "Regenerate rules.yml from existing radar.yml", false).option("--no-ai", "Skip AI refinement (deterministic only)").action(async (options) => {
   await initCommand(options);
 });
-program.command("fix <path>").description("AI-powered fix: generates code diffs, applies with confirmation").option("-c, --config <path>", "Path to radar.yml", "./radar.yml").option("-r, --rules <path>", "Path to rules.yml (default: ./rules.yml)").option("--severity <level>", "Only include: critical, all", "all").option("--dry-run", "Show fixes without applying", false).option("--auto", "Apply all high-confidence fixes without asking", false).option("--file <file>", "Fix single file only").option("--max-fixes <count>", "Max number of AI fixes to generate (0 = unlimited)", "0").action(async (targetPath, options) => {
+program.command("fix <path>").description("AI-powered fix: generates code diffs, applies with confirmation").option("-c, --config <path>", "Path to radar.yml", "./radar.yml").option("-r, --rules <path>", "Path to rules.yml (default: ./rules.yml)").option("--severity <level>", "Only include: critical, all", "all").option("--dry-run", "Show fixes without applying", false).option("--auto", "Apply all fixes automatically without asking", false).option("--safe", "Run tests after each fix, revert on failure", false).option("--file <file>", "Fix single file only").option("--max-fixes <count>", "Max number of AI fixes to generate (0 = unlimited)", "0").action(async (targetPath, options) => {
   await fixCommand(targetPath, {
     ...options,
     maxFixes: parseInt(options.maxFixes, 10)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "technical-debt-radar",
-  "version": "1.11.0",
+  "version": "1.13.0",
   "description": "Stop Node.js production crashes before merge. 47 detection patterns across 5 categories.",
   "bin": {
     "radar": "dist/index.js",