feat: ship remote scanning and reporting upgrades

Author: Rohan5commit

.github/workflows/verify.yml

@@ -2,60 +2,72 @@ name: Verify Roast CLI
 
 on:
   workflow_dispatch:
+  push:
+    branches:
+      - main
+    paths:
+      - '.github/workflows/verify.yml'
+      - 'README.md'
+      - 'pyproject.toml'
+      - 'roast/**'
+      - 'tests/**'
+  pull_request:
+    paths:
+      - '.github/workflows/verify.yml'
+      - 'README.md'
+      - 'pyproject.toml'
+      - 'roast/**'
+      - 'tests/**'
+
+permissions:
+  contents: read
 
 jobs:
   verify:
     runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: ['3.11', '3.12']
+
     steps:
       - name: Checkout
         uses: actions/checkout@v4
 
       - name: Setup Python
         uses: actions/setup-python@v5
         with:
-          python-version: '3.11'
+          python-version: ${{ matrix.python-version }}
 
       - name: Install
         run: |
           python -m pip install --upgrade pip
           pip install -e .
           pip install pytest
 
-      - name: Run analyzer tests
-        run: pytest tests/test_analyzer.py
+      - name: Run test suite
+        run: pytest -q
+
+      - name: CLI smoke test (local path + config + JSON + fail-under)
+        run: roast . --no-llm --max-files 12 --include-config --json-output roast-report.json --fail-under 1
 
-      - name: CLI smoke test (local path)
-        run: roast . --no-llm --max-files 10
+      - name: Validate JSON report schema
+        run: |
+          python - <<'PY'
+          import json
+          with open('roast-report.json', encoding='utf-8') as fh:
+              data = json.load(fh)
+          assert 'summary' in data
+          assert 'counts' in data
+          assert 'hotspots' in data
+          assert 'issues' in data
+          assert 'share' in data
+          assert 'Overall' in data['summary']['scores']
+          PY
 
       - name: CLI smoke test (GitHub URL path)
         run: roast https://github.com/psf/requests --no-llm --max-files 10
 
-      - name: CLI smoke test (LLM Groq primary + NIM backup)
-        env:
-          GROQ_API_KEY: ${{ secrets.GROQ_API_KEY }}
-          NVIDIA_NIM_API_KEY: ${{ secrets.NVIDIA_NIM_API_KEY }}
-        run: |
-          if [ -z "$GROQ_API_KEY" ] && [ -z "$NVIDIA_NIM_API_KEY" ]; then
-            echo "No LLM secrets configured; skipping LLM smoke test."
-            exit 0
-          fi
-          roast . --max-files 8 \
-            --provider auto \
-            --model llama-3.3-70b-versatile \
-            --backup-provider nim \
-            --backup-model microsoft/phi-4-mini-instruct
-
-      - name: CLI smoke test (forced NIM fallback)
-        env:
-          GROQ_API_KEY: invalid
-          NVIDIA_NIM_API_KEY: ${{ secrets.NVIDIA_NIM_API_KEY }}
-        run: |
-          if [ -z "$NVIDIA_NIM_API_KEY" ]; then
-            echo "No NIM secret configured; skipping fallback smoke test."
-            exit 0
-          fi
-          roast . --max-files 8 \
-            --provider auto \
-            --model llama-3.3-70b-versatile \
-            --backup-provider nim \
-            --backup-model microsoft/phi-4-mini-instruct
+      - name: Note on LLM smoke coverage
+        if: matrix.python-version == '3.11'
+        run: echo "Provider-backed LLM smoke remains manual to keep verify.yml deterministic. Use roast-famous.yml for secret-backed LLM checks."

README.md

@@ -24,6 +24,12 @@ export GROQ_API_KEY="your-groq-key"
 export NVIDIA_NIM_API_KEY="your-nim-key"
 ```
 
+If you want to roast a private GitHub repository by URL, also set:
+
+```bash
+export GITHUB_TOKEN="your-github-token"
+```
+
 Default model choices in this project:
 - Primary: `llama-3.3-70b-versatile` (Groq)
 - Backup: `microsoft/phi-4-mini-instruct` (NIM)
@@ -33,6 +39,7 @@ Default model choices in this project:
 ```bash
 roast ./my-project
 roast https://github.com/user/repo
+roast https://github.com/user/repo/tree/main --no-llm
 roast ./my-project --no-llm --output report.html
 ```
 
@@ -43,6 +50,20 @@ roast ./my-project --provider groq --model llama-3.3-70b-versatile
 roast ./my-project --provider auto --backup-provider nim --backup-model microsoft/phi-4-mini-instruct
 ```
 
+CI and machine-readable output:
+
+```bash
+roast ./my-project --no-llm --json-output roast-report.json
+roast ./my-project --no-llm --fail-under 70
+roast ./my-project --no-llm --include-config --max-files 80
+```
+
+What changed in `0.2.0`:
+- GitHub URL scans now download repo archives instead of cloning full git history.
+- Private GitHub repo URLs work when `GITHUB_TOKEN` is configured.
+- HTML reports now include hotspot summaries and interactive issue filters.
+- JSON report export and `--fail-under` make the CLI usable in CI.
+
 ## Demo
 
 ![roast-my-code demo](./demo.gif)
@@ -57,4 +78,4 @@ _Recorded with VHS._
 
 ## Contributing
 
-Contributions are welcome. Open an issue for bugs/ideas, then submit a PR with tests for behavior changes.
+Contributions are welcome. Open an issue for bugs or ideas, then submit a PR with tests for behavior changes. The main verification workflow now runs on pushes and pull requests that touch the CLI, reporter, scanner, or tests.

pyproject.toml

@@ -4,15 +4,14 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "roast-my-code"
-version = "0.1.0"
+version = "0.2.0"
 description = "A brutally honest, funny AI-powered code quality roaster"
 readme = "README.md"
 requires-python = ">=3.11"
 dependencies = [
   "typer[all]",
   "rich",
   "openai",
-  "gitpython",
   "jinja2",
 ]