thuban 0.4.3 → 0.4.6

package/dist/packages/scanner/tech-debt-analyzer.js

@@ -1 +1 @@
-const fs=require("fs"),path=require("path"),CodeScanner=require("./code-scanner"),DependencyGraph=require("./dependency-graph"),DriftDetector=require("./drift-detector"),WidgetGenerator=require("./widget-generator"),SecretScanner=require("./secret-scanner");function formatWidgetComment(e,t){const s=path.extname(t).toLowerCase();return".py"===s?e.replace(/^\/\*\*\n/,"").replace(/\s*\*\/\s*$/,"").split("\n").map(e=>e.replace(/^\s*\*\s?/,"# ")).join("\n"):".go"===s?e.replace(/^\/\*\*\n/,"").replace(/\s*\*\/\s*$/,"").split("\n").map(e=>e.replace(/^\s*\*\s?/,"// ")).join("\n"):e}class TechDebtAnalyzer{constructor(e={}){this.config={rootPath:e.rootPath||process.cwd(),...e},this.scanner=new CodeScanner(this.config),this.depGraph=new DependencyGraph(this.config),this.driftDetector=new DriftDetector(this.config),this.widgetGen=new WidgetGenerator({...this.config,dryRun:!0}),this.secretScanner=new SecretScanner(this.config)}async analyze(e){const t=Date.now();await this.depGraph.build(e),this.widgetGen.dependencyGraph=this.depGraph;const s=await this.scanner.scanFiles(e);await this.driftDetector.detectAll();let i={issues:[]};try{i=await this.secretScanner.scanFiles(e)}catch(e){}const a={scores:{overall:100,security:100,architecture:100,codeQuality:100,documentation:100,dependencies:100,motherCode:100},fixable:[],manual:[],info:[],stats:{totalFiles:e.length,totalIssues:0,fixableCount:0,manualCount:0,estimatedFixTime:"0 minutes",scanTime:0},categories:{}},o=[];for(const e of s.issues||[])(e.id?.startsWith("SEC")||"security"===e.category)&&o.push({file:path.relative(this.config.rootPath,e.file),...e,fixable:"SEC001"===e.id||"SEC002"===e.id,fixAction:"SEC001"===e.id||"SEC002"===e.id?"extract_to_env":null});for(const e of i.issues||[])o.push({file:e.file?path.relative(this.config.rootPath,e.file):e.file||"unknown",id:e.id,category:"security",severity:e.severity||"critical",message:e.message||e.type,type:e.type,line:e.line,fixable:!1,fixAction:null});a.scores.security=Math.max(0,100-25*o.filter(e=>"critical"===e.severity).length-10*o.filter(e=>"high"===e.severity).length),a.categories.security={score:a.scores.security,issues:o,label:"Security",icon:"shield"};const r=[],n=this.depGraph.circularDeps||[],c=this.depGraph.getOrphanFiles()||[],l=this.depGraph.getMostCriticalFiles(5)||[];for(const e of n)r.push({type:"circular_dependency",severity:"high",files:Array.isArray(e)?e.map(e=>path.relative(this.config.rootPath,e)):[String(e)],message:"Circular dependency detected",fixable:!0,fixAction:"break_circular",suggestion:"Extract shared code into a new module to break the cycle"});for(const e of c){const t="string"==typeof e?e:e.file||e.path||String(e);r.push({type:"orphan_file",severity:"low",file:path.relative(this.config.rootPath,t),message:"File has no imports and no exports consumed — potential dead code",fixable:!0,fixAction:"flag_for_removal",suggestion:"Review and remove if truly unused"})}for(const e of l){const t="string"==typeof e?e:e.file||e.path||String(e),s="object"==typeof e&&(e.dependents||e.score||e.count)||0;s>10&&r.push({type:"god_file",severity:"medium",file:path.relative(this.config.rootPath,t),dependents:s,message:`${s} files depend on this — high blast radius if changed`,fixable:!1,suggestion:"Consider splitting into smaller, focused modules"})}a.scores.architecture=Math.max(0,100-15*n.length-1*c.length-5*r.filter(e=>"god_file"===e.type).length),a.categories.architecture={score:a.scores.architecture,issues:r,label:"Architecture",icon:"building"};const f=[],u=new(require("./hallucination-detector"))(this.config),d=await u.scan(e);for(const e of d.deprecatedAPIs||[])f.push({file:path.relative(this.config.rootPath,e.file),type:"deprecated_api",severity:"high",message:`${e.name} — deprecated since ${e.since}`,fixable:!0,fixAction:"update_deprecated_api",suggestion:e.fix});for(const e of d.aiSmells||[])e.message&&e.message.includes("localhost")&&f.push({file:path.relative(this.config.rootPath,e.file),type:"hardcoded_localhost",severity:"medium",message:e.message,fixable:!0,fixAction:"wrap_localhost_url",suggestion:"Use environment variable with localhost fallback"});for(const e of s.issues||[])(e.id?.startsWith("QUAL")||"quality"===e.category||"maintainability"===e.category)&&f.push({file:path.relative(this.config.rootPath,e.file),...e,fixable:["QUAL001","QUAL003","QUAL005"].includes(e.id),fixAction:"QUAL001"===e.id?"remove_console_log":null});a.scores.codeQuality=Math.max(0,100-5*f.filter(e=>"high"===e.severity).length-2*f.filter(e=>"medium"===e.severity).length),a.categories.codeQuality={score:a.scores.codeQuality,issues:f,label:"Code Quality",icon:"code"};const h=[];let p=0,g=0,m=0;for(const t of e)try{const e=fs.readFileSync(t,"utf-8");if(/\/\*\*[\s\S]*?@(purpose|module|layer)[\s\S]*?\*\//.test(e)){p++;const e=await this.driftDetector.analyzeFile(t);if(e.issues&&e.issues.length>0){m++;for(const s of e.issues)h.push({file:path.relative(this.config.rootPath,t),...s,fixable:!0,fixAction:"regenerate_widget"})}}else g++,h.push({file:path.relative(this.config.rootPath,t),type:"missing_mother_code",severity:"info",message:"No Mother Code DNA — file lacks contextual awareness",fixable:!0,fixAction:"inject_widget"})}catch(e){}const $=e.length>0?Math.round(p/e.length*100):0;a.scores.motherCode=Math.min(100,$+(m>0?-10:0)),a.scores.documentation=a.scores.motherCode,a.categories.motherCode={score:a.scores.motherCode,coverage:$,annotated:p,missing:g,drifted:m,issues:h,label:"Mother Code",icon:"dna"},this.depGraph.getModuleSummary&&this.depGraph.getModuleSummary(),a.scores.dependencies=Math.max(0,100-10*n.length-.5*c.length),a.categories.dependencies={score:a.scores.dependencies,issues:[],label:"Dependencies",icon:"link"};a.scores.overall=Math.round(.25*a.scores.security+.2*a.scores.architecture+.2*a.scores.codeQuality+.2*a.scores.motherCode+.15*a.scores.dependencies);for(const e of Object.values(a.categories))for(const t of e.issues||[])a.stats.totalIssues++,t.fixable?(a.fixable.push(t),a.stats.fixableCount++):"info"===t.severity?a.info.push(t):(a.manual.push(t),a.stats.manualCount++);const y=.5*a.stats.fixableCount+15*a.stats.manualCount;return a.stats.estimatedFixTime=y<60?`${Math.round(y)} minutes`:`${Math.round(y/60)} hours`,a.stats.scanTime=Date.now()-t,a}async fix(e,t={}){const s=await this.analyze(e),i=[],a=[],o=path.resolve(this.config.rootPath);for(const e of s.fixable)if(t.dryRun)i.push({...e,status:"would_fix"});else try{const t=path.resolve(this.config.rootPath,e.file);if(!t.startsWith(o+path.sep)&&t!==o){i.push({...e,status:"skipped",reason:"Path escapes project root — blocked for safety"});continue}switch(e.fixAction){case"inject_widget":{const t=path.resolve(this.config.rootPath,e.file),s=fs.readFileSync(t,"utf-8"),a=await this.widgetGen.generateWidget(t,s);if(a&&a.widgetString){const o=formatWidgetComment(a.widgetString,t);fs.writeFileSync(t,o+"\n\n"+s,"utf-8"),i.push({...e,status:"fixed"})}break}case"regenerate_widget":{const t=path.resolve(this.config.rootPath,e.file),s=fs.readFileSync(t,"utf-8").replace(/\/\*\*[\s\S]*?@(purpose|module|layer)[\s\S]*?\*\/\s*\n?\s*\n?/,""),a=await this.widgetGen.generateWidget(t,s);if(a&&a.widgetString){const o=formatWidgetComment(a.widgetString,t);fs.writeFileSync(t,o+"\n\n"+s,"utf-8"),i.push({...e,status:"fixed"})}break}case"remove_console_log":{const t=path.resolve(this.config.rootPath,e.file);let s=fs.readFileSync(t,"utf-8");const a=s;s=s.replace(/^\s*console\.log\(.*?\);\s*$/gm,""),s!==a&&(fs.writeFileSync(t,s,"utf-8"),i.push({...e,status:"fixed"}));break}case"update_deprecated_api":{const t=path.resolve(this.config.rootPath,e.file);let s=fs.readFileSync(t,"utf-8");const a=s;s=s.replace(/url\.parse\(([^)]+)\)/g,"new URL($1)"),s=s.replace(/new Buffer\(([^)]+)\)/g,(e,t)=>{const s=t.trim();return/\d/.test(s)&&/^[\d\s+\-*/%().]+$/.test(s)?`Buffer.alloc(${s})`:`Buffer.from(${t})`}),s=s.replace(/require\(['"]sys['"]\)/g,"require('util')"),s=s.replace(/util\.isArray\(/g,"Array.isArray("),s=s.replace(/fs\.exists\(([^,]+),\s*/g,"fs.access($1, "),s!==a?(fs.writeFileSync(t,s,"utf-8"),i.push({...e,status:"fixed",detail:"Replaced deprecated API with modern equivalent"})):i.push({...e,status:"skipped",reason:"Pattern not matched for auto-replacement"});break}case"wrap_localhost_url":{const t=path.resolve(this.config.rootPath,e.file);let s=fs.readFileSync(t,"utf-8");const a=s;s=s.replace(/(['"`])(https?:\/\/localhost:\d{2,5}(?:\/[^'"`]*)?)\1/g,(e,t,s)=>{const i=s.match(/:(\d+)/);return`(process.env.SERVICE_URL_${i?i[1]:"PORT"} || ${t}${s}${t})`}),s!==a?(fs.writeFileSync(t,s,"utf-8"),i.push({...e,status:"fixed",detail:"Wrapped localhost URL in env var fallback"})):i.push({...e,status:"skipped",reason:"Pattern not matched for auto-replacement"});break}case"extract_to_env":i.push({...e,status:"flagged_for_review",reason:"Secrets require manual extraction to .env"});break;case"flag_for_removal":i.push({...e,status:"confirmed_orphan",reason:"Verified no imports. Safe to remove manually."});break;default:i.push({...e,status:"skipped",reason:"No auto-fix available"})}}catch(t){a.push({...e,status:"failed",error:t.message})}return{totalFixable:s.fixable.length,fixed:i.filter(e=>"fixed"===e.status).length,flagged:i.filter(e=>"flagged_for_review"===e.status||"confirmed_orphan"===e.status).length,skipped:i.filter(e=>"skipped"===e.status).length,failed:a.length,fixes:i,failures:a,debtBefore:s.scores.overall,...t.dryRun?{}:{note:"Run thuban report again to see updated scores"}}}formatReport(e){const t="",s="",i="",a="",o="",r="",n="",c=e=>{const s=Math.round(e/5),r=20-s,c=e>=80?a:e>=60?o:i;return`${c}${"█".repeat(s)}${n}${"░".repeat(r)}${t} ${c}${e}%${t}`};let l="";var f;l+=`\n${r}  ╔══════════════════════════════════════════════╗${t}\n`,l+=`${r}  ║${s}         THUBAN TECH DEBT REPORT               ${t}${r}║${t}\n`,l+=`${r}  ╚══════════════════════════════════════════════╝${t}\n\n`,l+=`  ${s}Overall Health:${t}  ${c(e.scores.overall)}  Grade: ${f=e.scores.overall,f>=90?`${a}A${t}`:f>=80?`${a}B${t}`:f>=70?`${o}C${t}`:f>=60?`${o}D${t}`:`${i}F${t}`}\n\n`,l+=`  ${s}Category Breakdown:${t}\n\n`;const u=[["Security",e.scores.security,"shield"],["Architecture",e.scores.architecture,"building"],["Code Quality",e.scores.codeQuality,"code"],["Mother Code",e.scores.motherCode,"dna"],["Dependencies",e.scores.dependencies,"link"]];for(const[e,t]of u)l+=`  ${e.padEnd(18)} ${c(t)}\n`;if(l+="\n",e.categories.motherCode){const n=e.categories.motherCode;l+=`  ${s}Mother Code Coverage:${t}\n`,l+=`  Annotated: ${r}${n.annotated}${t}  |  Missing: ${o}${n.missing}${t}  |  Drifted: ${n.drifted>0?i:a}${n.drifted}${t}  |  Coverage: ${n.coverage>=80?a:n.coverage>=40?o:i}${n.coverage}%${t}\n\n`}if(l+=`  ${s}Tech Debt Summary:${t}\n`,l+=`  Total issues:     ${s}${e.stats.totalIssues}${t}\n`,l+=`  Auto-fixable:     ${a}${e.stats.fixableCount}${t}  ${n}← run 'thuban fix' to resolve${t}\n`,l+=`  Manual review:    ${o}${e.stats.manualCount}${t}\n`,l+=`  Est. manual time: ${n}${e.stats.estimatedFixTime}${t}\n`,l+=`  Scan time:        ${n}${e.stats.scanTime}ms${t}\n\n`,e.fixable.length>0){l+=`  ${s}Top Auto-Fixable Items:${t}\n`;const i={};for(const t of e.fixable){const e=t.fixAction||"unknown";i[e]||(i[e]={count:0,label:e}),i[e].count++}for(const[e,o]of Object.entries(i).sort((e,t)=>t[1].count-e[1].count))l+=`    ${a}→${t} ${{inject_widget:"Inject Mother Code DNA",regenerate_widget:"Update stale annotations",remove_console_log:"Remove debug console.logs",extract_to_env:"Extract hardcoded secrets to .env",flag_for_removal:"Remove orphan files",break_circular:"Break circular dependencies"}[e]||e}: ${s}${o.count}${t} items\n`;l+=`\n  ${r}Run 'thuban fix [path]' to auto-fix all ${e.stats.fixableCount} items${t}\n\n`}if(e.manual.length>0){l+=`  ${s}Manual Review Required:${t}\n`;for(const s of e.manual.slice(0,5))l+=`  ${"critical"===s.severity||"high"===s.severity?i:o}${(s.severity||"").toUpperCase().padEnd(8)}${t} ${r}${s.file||""}${t}\n`,l+=`  ${n}         ${s.message||s.suggestion||""}${t}\n`;e.manual.length>5&&(l+=`  ${n}  ... and ${e.manual.length-5} more${t}\n`),l+="\n"}return l}toJSON(e){return{timestamp:(new Date).toISOString(),scores:e.scores,categories:Object.fromEntries(Object.entries(e.categories).map(([e,t])=>[e,{score:t.score,label:t.label,issueCount:t.issues?.length||0,coverage:t.coverage}])),stats:e.stats,fixable:e.fixable.map(e=>({file:e.file,action:e.fixAction,severity:e.severity})),manual:e.manual.map(e=>({file:e.file,message:e.message,severity:e.severity}))}}}module.exports=TechDebtAnalyzer;
+const fs=require("fs"),path=require("path"),CodeScanner=require("./code-scanner"),DependencyGraph=require("./dependency-graph"),DriftDetector=require("./drift-detector"),WidgetGenerator=require("./widget-generator"),SecretScanner=require("./secret-scanner");function formatWidgetComment(e,t){const s=path.extname(t).toLowerCase();return".py"===s?e.replace(/^\/\*\*\r?\n/,"").replace(/\s*\*\/\s*$/,"").split(/\r?\n/).map(e=>e.replace(/^\s*\*\s?/,"# ")).join("\n"):".go"===s?e.replace(/^\/\*\*\r?\n/,"").replace(/\s*\*\/\s*$/,"").split(/\r?\n/).map(e=>e.replace(/^\s*\*\s?/,"// ")).join("\n"):e}class TechDebtAnalyzer{constructor(e={}){this.config={rootPath:e.rootPath||process.cwd(),...e},this.scanner=new CodeScanner(this.config),this.depGraph=new DependencyGraph(this.config),this.driftDetector=new DriftDetector(this.config),this.widgetGen=new WidgetGenerator({...this.config,dryRun:!0}),this.secretScanner=new SecretScanner(this.config)}async analyze(e){const t=Date.now();await this.depGraph.build(e),this.widgetGen.dependencyGraph=this.depGraph;const s=await this.scanner.scanFiles(e);await this.driftDetector.detectAll();let i={issues:[]};try{i=await this.secretScanner.scanFiles(e)}catch(e){}const a={scores:{overall:100,security:100,architecture:100,codeQuality:100,documentation:100,dependencies:100,motherCode:100},fixable:[],manual:[],info:[],stats:{totalFiles:e.length,totalIssues:0,fixableCount:0,manualCount:0,estimatedFixTime:"0 minutes",scanTime:0},categories:{}},r=[];for(const e of s.issues||[])(e.id?.startsWith("SEC")||"security"===e.category)&&r.push({file:path.relative(this.config.rootPath,e.file),...e,fixable:"SEC001"===e.id||"SEC002"===e.id,fixAction:"SEC001"===e.id||"SEC002"===e.id?"extract_to_env":null});for(const e of i.issues||[])r.push({file:e.file?path.relative(this.config.rootPath,e.file):e.file||"unknown",id:e.id,category:"security",severity:e.severity||"critical",message:e.message||e.type,type:e.type,line:e.line,fixable:!1,fixAction:null});a.scores.security=Math.max(0,100-25*r.filter(e=>"critical"===e.severity).length-10*r.filter(e=>"high"===e.severity).length),a.categories.security={score:a.scores.security,issues:r,label:"Security",icon:"shield"};const o=[],n=this.depGraph.circularDeps||[],c=this.depGraph.getOrphanFiles()||[],l=this.depGraph.getMostCriticalFiles(5)||[];for(const e of n)o.push({type:"circular_dependency",severity:"high",files:Array.isArray(e)?e.map(e=>path.relative(this.config.rootPath,e)):[String(e)],message:"Circular dependency detected",fixable:!0,fixAction:"break_circular",suggestion:"Extract shared code into a new module to break the cycle"});for(const e of c){const t="string"==typeof e?e:e.file||e.path||String(e);o.push({type:"orphan_file",severity:"low",file:path.relative(this.config.rootPath,t),message:"File has no imports and no exports consumed — potential dead code",fixable:!0,fixAction:"flag_for_removal",suggestion:"Review and remove if truly unused"})}for(const e of l){const t="string"==typeof e?e:e.file||e.path||String(e),s="object"==typeof e&&(e.dependents||e.score||e.count)||0;s>10&&o.push({type:"god_file",severity:"medium",file:path.relative(this.config.rootPath,t),dependents:s,message:`${s} files depend on this — high blast radius if changed`,fixable:!1,suggestion:"Consider splitting into smaller, focused modules"})}a.scores.architecture=Math.max(0,100-15*n.length-1*c.length-5*o.filter(e=>"god_file"===e.type).length),a.categories.architecture={score:a.scores.architecture,issues:o,label:"Architecture",icon:"building"};const f=[],u=new(require("./hallucination-detector"))(this.config),d=await u.scan(e);for(const e of d.deprecatedAPIs||[])f.push({file:path.relative(this.config.rootPath,e.file),type:"deprecated_api",severity:"high",message:`${e.name} — deprecated since ${e.since}`,fixable:!0,fixAction:"update_deprecated_api",suggestion:e.fix});for(const e of d.aiSmells||[])e.message&&e.message.includes("localhost")&&f.push({file:path.relative(this.config.rootPath,e.file),type:"hardcoded_localhost",severity:"medium",message:e.message,fixable:!0,fixAction:"wrap_localhost_url",suggestion:"Use environment variable with localhost fallback"});for(const e of s.issues||[])(e.id?.startsWith("QUAL")||"quality"===e.category||"maintainability"===e.category)&&f.push({file:path.relative(this.config.rootPath,e.file),...e,fixable:["QUAL001","QUAL003","QUAL005"].includes(e.id),fixAction:"QUAL001"===e.id?"remove_console_log":null});a.scores.codeQuality=Math.max(0,100-5*f.filter(e=>"high"===e.severity).length-2*f.filter(e=>"medium"===e.severity).length),a.categories.codeQuality={score:a.scores.codeQuality,issues:f,label:"Code Quality",icon:"code"};const h=[];let p=0,g=0,m=0;for(const t of e)try{const e=fs.readFileSync(t,"utf-8").replace(/\r\n/g,"\n");if(/\/\*\*[\s\S]*?@(purpose|module|layer)[\s\S]*?\*\//.test(e)){p++;const e=await this.driftDetector.analyzeFile(t);if(e.issues&&e.issues.length>0){m++;for(const s of e.issues)h.push({file:path.relative(this.config.rootPath,t),...s,fixable:!0,fixAction:"regenerate_widget"})}}else g++,h.push({file:path.relative(this.config.rootPath,t),type:"missing_mother_code",severity:"info",message:"No Mother Code DNA — file lacks contextual awareness",fixable:!0,fixAction:"inject_widget"})}catch(e){}const $=e.length>0?Math.round(p/e.length*100):0;a.scores.motherCode=Math.min(100,$+(m>0?-10:0)),a.scores.documentation=a.scores.motherCode,a.categories.motherCode={score:a.scores.motherCode,coverage:$,annotated:p,missing:g,drifted:m,issues:h,label:"Mother Code",icon:"dna"},this.depGraph.getModuleSummary&&this.depGraph.getModuleSummary(),a.scores.dependencies=Math.max(0,100-10*n.length-.5*c.length),a.categories.dependencies={score:a.scores.dependencies,issues:[],label:"Dependencies",icon:"link"};a.scores.overall=Math.round(.25*a.scores.security+.2*a.scores.architecture+.2*a.scores.codeQuality+.2*a.scores.motherCode+.15*a.scores.dependencies);for(const e of Object.values(a.categories))for(const t of e.issues||[])a.stats.totalIssues++,t.fixable?(a.fixable.push(t),a.stats.fixableCount++):"info"===t.severity?a.info.push(t):(a.manual.push(t),a.stats.manualCount++);const y=.5*a.stats.fixableCount+15*a.stats.manualCount;return a.stats.estimatedFixTime=y<60?`${Math.round(y)} minutes`:`${Math.round(y/60)} hours`,a.stats.scanTime=Date.now()-t,a}async fix(e,t={}){const s=await this.analyze(e),i=[],a=[],r=path.resolve(this.config.rootPath);for(const e of s.fixable)if(t.dryRun)i.push({...e,status:"would_fix"});else try{const t=path.resolve(this.config.rootPath,e.file);if(!t.startsWith(r+path.sep)&&t!==r){i.push({...e,status:"skipped",reason:"Path escapes project root — blocked for safety"});continue}switch(e.fixAction){case"inject_widget":{const t=path.resolve(this.config.rootPath,e.file),s=fs.readFileSync(t,"utf-8").replace(/\r\n/g,"\n"),a=await this.widgetGen.generateWidget(t,s);if(a&&a.widgetString){const r=formatWidgetComment(a.widgetString,t);fs.writeFileSync(t,r+"\n\n"+s,"utf-8"),i.push({...e,status:"fixed"})}break}case"regenerate_widget":{const t=path.resolve(this.config.rootPath,e.file),s=fs.readFileSync(t,"utf-8").replace(/\/\*\*[\s\S]*?@(purpose|module|layer)[\s\S]*?\*\/\s*\n?\s*\n?/,""),a=await this.widgetGen.generateWidget(t,s);if(a&&a.widgetString){const r=formatWidgetComment(a.widgetString,t);fs.writeFileSync(t,r+"\n\n"+s,"utf-8"),i.push({...e,status:"fixed"})}break}case"remove_console_log":{const t=path.resolve(this.config.rootPath,e.file);let s=fs.readFileSync(t,"utf-8").replace(/\r\n/g,"\n");const a=s;s=s.replace(/^\s*console\.log\(.*?\);\s*$/gm,""),s!==a&&(fs.writeFileSync(t,s,"utf-8"),i.push({...e,status:"fixed"}));break}case"update_deprecated_api":{const t=path.resolve(this.config.rootPath,e.file);let s=fs.readFileSync(t,"utf-8").replace(/\r\n/g,"\n");const a=s;s=s.replace(/url\.parse\(([^)]+)\)/g,"new URL($1)"),s=s.replace(/new Buffer\(([^)]+)\)/g,(e,t)=>{const s=t.trim();return/\d/.test(s)&&/^[\d\s+\-*/%().]+$/.test(s)?`Buffer.alloc(${s})`:`Buffer.from(${t})`}),s=s.replace(/require\(['"]sys['"]\)/g,"require('util')"),s=s.replace(/util\.isArray\(/g,"Array.isArray("),s=s.replace(/fs\.exists\(([^,]+),\s*/g,"fs.access($1, "),s!==a?(fs.writeFileSync(t,s,"utf-8"),i.push({...e,status:"fixed",detail:"Replaced deprecated API with modern equivalent"})):i.push({...e,status:"skipped",reason:"Pattern not matched for auto-replacement"});break}case"wrap_localhost_url":{const t=path.resolve(this.config.rootPath,e.file);let s=fs.readFileSync(t,"utf-8").replace(/\r\n/g,"\n");const a=s;s=s.replace(/(['"`])(https?:\/\/localhost:\d{2,5}(?:\/[^'"`]*)?)\1/g,(e,t,s)=>{const i=s.match(/:(\d+)/);return`(process.env.SERVICE_URL_${i?i[1]:"PORT"} || ${t}${s}${t})`}),s!==a?(fs.writeFileSync(t,s,"utf-8"),i.push({...e,status:"fixed",detail:"Wrapped localhost URL in env var fallback"})):i.push({...e,status:"skipped",reason:"Pattern not matched for auto-replacement"});break}case"extract_to_env":i.push({...e,status:"flagged_for_review",reason:"Secrets require manual extraction to .env"});break;case"flag_for_removal":i.push({...e,status:"confirmed_orphan",reason:"Verified no imports. Safe to remove manually."});break;default:i.push({...e,status:"skipped",reason:"No auto-fix available"})}}catch(t){a.push({...e,status:"failed",error:t.message})}return{totalFixable:s.fixable.length,fixed:i.filter(e=>"fixed"===e.status).length,flagged:i.filter(e=>"flagged_for_review"===e.status||"confirmed_orphan"===e.status).length,skipped:i.filter(e=>"skipped"===e.status).length,failed:a.length,fixes:i,failures:a,debtBefore:s.scores.overall,...t.dryRun?{}:{note:"Run thuban report again to see updated scores"}}}formatReport(e){const t="",s="",i="",a="",r="",o="",n="",c=e=>{const s=Math.round(e/5),o=20-s,c=e>=80?a:e>=60?r:i;return`${c}${"█".repeat(s)}${n}${"░".repeat(o)}${t} ${c}${e}%${t}`};let l="";var f;l+=`\n${o}  ╔══════════════════════════════════════════════╗${t}\n`,l+=`${o}  ║${s}         THUBAN TECH DEBT REPORT               ${t}${o}║${t}\n`,l+=`${o}  ╚══════════════════════════════════════════════╝${t}\n\n`,l+=`  ${s}Overall Health:${t}  ${c(e.scores.overall)}  Grade: ${f=e.scores.overall,f>=90?`${a}A${t}`:f>=80?`${a}B${t}`:f>=70?`${r}C${t}`:f>=60?`${r}D${t}`:`${i}F${t}`}\n\n`,l+=`  ${s}Category Breakdown:${t}\n\n`;const u=[["Security",e.scores.security,"shield"],["Architecture",e.scores.architecture,"building"],["Code Quality",e.scores.codeQuality,"code"],["Mother Code",e.scores.motherCode,"dna"],["Dependencies",e.scores.dependencies,"link"]];for(const[e,t]of u)l+=`  ${e.padEnd(18)} ${c(t)}\n`;if(l+="\n",e.categories.motherCode){const n=e.categories.motherCode;l+=`  ${s}Mother Code Coverage:${t}\n`,l+=`  Annotated: ${o}${n.annotated}${t}  |  Missing: ${r}${n.missing}${t}  |  Drifted: ${n.drifted>0?i:a}${n.drifted}${t}  |  Coverage: ${n.coverage>=80?a:n.coverage>=40?r:i}${n.coverage}%${t}\n\n`}if(l+=`  ${s}Tech Debt Summary:${t}\n`,l+=`  Total issues:     ${s}${e.stats.totalIssues}${t}\n`,l+=`  Auto-fixable:     ${a}${e.stats.fixableCount}${t}  ${n}← run 'thuban fix' to resolve${t}\n`,l+=`  Manual review:    ${r}${e.stats.manualCount}${t}\n`,l+=`  Est. manual time: ${n}${e.stats.estimatedFixTime}${t}\n`,l+=`  Scan time:        ${n}${e.stats.scanTime}ms${t}\n\n`,e.fixable.length>0){l+=`  ${s}Top Auto-Fixable Items:${t}\n`;const i={};for(const t of e.fixable){const e=t.fixAction||"unknown";i[e]||(i[e]={count:0,label:e}),i[e].count++}for(const[e,r]of Object.entries(i).sort((e,t)=>t[1].count-e[1].count))l+=`    ${a}→${t} ${{inject_widget:"Inject Mother Code DNA",regenerate_widget:"Update stale annotations",remove_console_log:"Remove debug console.logs",extract_to_env:"Extract hardcoded secrets to .env",flag_for_removal:"Remove orphan files",break_circular:"Break circular dependencies"}[e]||e}: ${s}${r.count}${t} items\n`;l+=`\n  ${o}Run 'thuban fix [path]' to auto-fix all ${e.stats.fixableCount} items${t}\n\n`}if(e.manual.length>0){l+=`  ${s}Manual Review Required:${t}\n`;for(const s of e.manual.slice(0,5))l+=`  ${"critical"===s.severity||"high"===s.severity?i:r}${(s.severity||"").toUpperCase().padEnd(8)}${t} ${o}${s.file||""}${t}\n`,l+=`  ${n}         ${s.message||s.suggestion||""}${t}\n`;e.manual.length>5&&(l+=`  ${n}  ... and ${e.manual.length-5} more${t}\n`),l+="\n"}return l}toJSON(e){return{timestamp:(new Date).toISOString(),scores:e.scores,categories:Object.fromEntries(Object.entries(e.categories).map(([e,t])=>[e,{score:t.score,label:t.label,issueCount:t.issues?.length||0,coverage:t.coverage}])),stats:e.stats,fixable:e.fixable.map(e=>({file:e.file,action:e.fixAction,severity:e.severity})),manual:e.manual.map(e=>({file:e.file,message:e.message,severity:e.severity}))}}}module.exports=TechDebtAnalyzer;

package/package.json

@@ -1,63 +1,64 @@
-{
-  "name": "thuban",
-  "version": "0.4.3",
-  "description": "The safety layer for AI-coded software. Detect hallucinated APIs, ghost code, tech debt, and architecture drift. One command. Minimal dependencies.",
-  "bin": {
-    "thuban": "./dist/cli.js"
-  },
-  "scripts": {
-    "scan": "node cli.js scan",
-    "test": "node cli.js scan . --json > NUL",
-    "build": "node build.js",
-    "prepublishOnly": "npm run build"
-  },
-  "keywords": [
-    "code-quality",
-    "static-analysis",
-    "ai-hallucination",
-    "hallucination-detection",
-    "ghost-code",
-    "tech-debt",
-    "ai-code-review",
-    "code-health",
-    "pre-commit",
-    "copilot",
-    "cursor",
-    "ai-safety",
-    "developer-tools",
-    "devtools",
-    "linter",
-    "code-scanner"
-  ],
-  "author": "Silverwings Benefits <hello@thuban.dev>",
-  "license": "SEE LICENSE IN LICENSE",
-  "homepage": "https://thuban.dev",
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/SilverwingsBenefitsGit/thuban.git"
-  },
-  "bugs": {
-    "url": "https://github.com/SilverwingsBenefitsGit/thuban/issues"
-  },
-  "engines": {
-    "node": ">=16.0.0"
-  },
-  "files": [
-    "dist/cli.js",
-    "dist/packages/scanner/*.js",
-    "dist/packages/crucible/*.js",
-    "dist/packages/crucible/seeds/**",
-    "dist/packages/crucible/.golden/",
-    "dist/packages/crucible/rules/**",
-    "dist/README.md",
-    "dist/LICENSE",
-    "dist/package.json"
-  ],
-  "dependencies": {
-    "@babel/parser": "^8.0.0",
-    "docx": "^9.7.1"
-  },
-  "devDependencies": {
-    "terser": "^5.48.0"
-  }
-}
+{
+  "name": "thuban",
+  "version": "0.4.6",
+  "description": "The safety layer for AI-coded software. Detect hallucinated APIs, ghost code, tech debt, and architecture drift. One command. Minimal dependencies.",
+  "bin": {
+    "thuban": "./dist/cli.js"
+  },
+  "scripts": {
+    "scan": "node cli.js scan",
+    "test": "node build.js && node --test tests/build-integrity.test.js tests/crlf-safety.test.js tests/windows-paths.test.js tests/npm-publish-smoke.test.js",
+    "test:all": "node --test tests/*.test.js packages/scanner/*.test.js packages/crucible/*.test.js",
+    "test:build": "node build.js && node --test tests/build-integrity.test.js tests/npm-publish-smoke.test.js",
+    "build": "node build.js",
+    "prepublishOnly": "npm run build && node --test tests/build-integrity.test.js tests/npm-publish-smoke.test.js"
+  },
+  "keywords": [
+    "code-quality",
+    "static-analysis",
+    "ai-hallucination",
+    "hallucination-detection",
+    "ghost-code",
+    "tech-debt",
+    "ai-code-review",
+    "code-health",
+    "pre-commit",
+    "copilot",
+    "cursor",
+    "ai-safety",
+    "developer-tools",
+    "devtools",
+    "linter",
+    "code-scanner"
+  ],
+  "author": "Silverwings Benefits <hello@thuban.dev>",
+  "license": "SEE LICENSE IN LICENSE",
+  "homepage": "https://thuban.dev",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/SilverwingsBenefitsGit/thuban.git"
+  },
+  "bugs": {
+    "url": "https://github.com/SilverwingsBenefitsGit/thuban/issues"
+  },
+  "engines": {
+    "node": ">=16.0.0"
+  },
+  "files": [
+    "dist/cli.js",
+    "dist/packages/scanner/*.js",
+    "dist/packages/crucible/*.js",
+    "dist/packages/crucible/seeds/**",
+    "dist/packages/crucible/.golden/",
+    "dist/packages/crucible/rules/**",
+    "dist/README.md",
+    "dist/LICENSE",
+    "dist/package.json"
+  ],
+  "dependencies": {
+    "@babel/parser": "^7.29.7"
+  },
+  "devDependencies": {
+    "terser": "^5.48.0"
+  }
+}