@fortressjs/cli 0.1.1 → 0.1.3

package/dist/index.d.ts

@@ -1 +1 @@
-export declare function runAudit(): void;
+export declare function runAudit(targetPath?: string, jsonOutput?: boolean): void;

package/dist/index.js

@@ -17,6 +17,20 @@ const C = {
     yellow: "\x1b[33m",
     cyan: "\x1b[36m"
 };
+function getTargetFiles(targetPath) {
+    if (!fs_1.default.existsSync(targetPath)) {
+        throw new Error(`Path does not exist: ${targetPath}`);
+    }
+    const stat = fs_1.default.statSync(targetPath);
+    if (stat.isFile()) {
+        if (targetPath.endsWith(".ts") ||
+            targetPath.endsWith(".js")) {
+            return [targetPath];
+        }
+        return [];
+    }
+    return getFilesRecursively(targetPath);
+}
 function getFilesRecursively(dir, fileList = []) {
     if (!fs_1.default.existsSync(dir))
         return fileList;
@@ -44,16 +58,36 @@ function getFilesRecursively(dir, fileList = []) {
     }
     return fileList;
 }
-function runAudit() {
-    console.log(`\n${C.bold}${C.cyan}🛡️  FortressJS Security Audit CLI${C.reset}`);
-    console.log(`${C.dim}=========================================${C.reset}\n`);
-    const cwd = process.cwd();
-    const files = getFilesRecursively(cwd);
+function runAudit(targetPath, jsonOutput = false) {
+    const target = path_1.default.resolve(targetPath || process.cwd());
+    let files;
+    try {
+        files = getTargetFiles(target);
+    }
+    catch (error) {
+        console.error(`${C.red}${error.message}${C.reset}`);
+        process.exit(1);
+    }
     if (files.length === 0) {
-        console.log(`${C.yellow}No JavaScript or TypeScript files found to scan in: ${cwd}${C.reset}`);
+        if (jsonOutput) {
+            console.log(JSON.stringify({
+                target,
+                score: 0,
+                missing: [],
+                recommendations: [],
+                message: "No JavaScript or TypeScript files found"
+            }, null, 2));
+            return;
+        }
+        console.log(`${C.yellow}No JavaScript or TypeScript files found to scan in: ${target}${C.reset}`);
         return;
     }
-    console.log(`${C.dim}Scanning ${files.length} file(s)...${C.reset}`);
+    if (!jsonOutput) {
+        console.log(`\n${C.bold}${C.cyan}🛡️  FortressJS Security Audit CLI${C.reset}`);
+        console.log(`${C.dim}=========================================${C.reset}\n`);
+        console.log(`${C.dim}Target: ${target}${C.reset}`);
+        console.log(`${C.dim}Scanning ${files.length} file(s)...${C.reset}\n`);
+    }
     const scanner = new scanner_1.RegexScanner();
     // Aggregate results across all files in the project
     const aggregated = {
@@ -120,6 +154,16 @@ function runAudit() {
         recommendations.push("Configure fortress.headers({ strictTransportSecurity: ... }) for HSTS");
     }
     score = Math.max(0, score);
+    const auditResult = {
+        target,
+        score,
+        missing,
+        recommendations
+    };
+    if (jsonOutput) {
+        console.log(JSON.stringify(auditResult, null, 2));
+        return;
+    }
     // Pick color based on score
     let scoreColor = C.red;
     if (score >= 90)
@@ -144,9 +188,16 @@ function runAudit() {
 // CLI entry point
 const args = process.argv.slice(2);
 if (args[0] === "audit") {
-    runAudit();
+    const jsonOutput = args.includes("--json");
+    const target = args.find((arg) => arg !== "audit" &&
+        arg !== "--json");
+    runAudit(target, jsonOutput);
 }
 else {
     console.log(`\n${C.bold}FortressJS CLI${C.reset}`);
-    console.log(`${C.dim}Usage: npx fortress audit${C.reset}\n`);
+    console.log(`${C.dim}Usage:${C.reset}`);
+    console.log(`  fortress audit`);
+    console.log(`  fortress audit .`);
+    console.log(`  fortress audit ./src`);
+    console.log(`  fortress audit ./src/app.ts\n`);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fortressjs/cli",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "description": "Security audit CLI for Express applications. Detect missing security headers, rate limits, request validation, and threat protection.",
   "license": "MIT",
   "author": "Davanesh Saminathan",
@@ -39,7 +39,7 @@
     "build": "tsc"
   },
   "dependencies": {
-    "@fortressjs/core": "^0.1.0"
+    "@fortressjs/core": "^0.1.2"
   },
   "devDependencies": {
     "typescript": "^5.0.0"