@greenarmor/ges 0.3.5 → 0.5.0

package/dist/cli.js

@@ -12,6 +12,7 @@ import { generateCommand } from "./commands/generate.js";
 import { policyCommand } from "./commands/policy.js";
 import { updateCommand } from "./commands/update.js";
 import { mcpCommand } from "./commands/mcp.js";
+import { badgeCommand } from "./commands/badge.js";
 import { GESF_VERSION } from "@greenarmor/ges-core";
 const program = new Command();
 program
@@ -30,4 +31,5 @@ program.addCommand(generateCommand);
 program.addCommand(policyCommand);
 program.addCommand(updateCommand);
 program.addCommand(mcpCommand);
+program.addCommand(badgeCommand);
 program.parse();

package/dist/commands/audit.js

@@ -1,9 +1,10 @@
 import { Command } from "commander";
 import { ensureGESInitialized, readJsonFile, writeJsonFile } from "../utils/project.js";
-import { getAllPacks } from "@greenarmor/ges-policy-engine";
+import { getPacksForProjectType, getAllPacks } from "@greenarmor/ges-policy-engine";
 import { generateScoreFile, formatScoreOutput } from "@greenarmor/ges-scoring-engine";
 import { runAudit, deduplicateFindings } from "@greenarmor/ges-audit-engine";
 import { showNextStepsMenu } from "../utils/next-steps.js";
+import * as fs from "node:fs";
 import * as path from "node:path";
 export const auditCommand = new Command("audit")
     .description("Run a compliance audit on the project")
@@ -19,14 +20,29 @@ export const auditCommand = new Command("audit")
     const findings = deduplicateFindings(rawFindings);
     console.log(`  Scanned ${scannedFiles} files\n`);
     const frameworks = (config?.frameworks || ["GDPR", "OWASP"]);
-    const controls = getAllPacks().flatMap(p => p.controls);
-    const updatedControls = updateControlsFromFindings(controls, findings);
-    const scoreData = generateScoreFile(updatedControls, frameworks);
+    const projectPacks = getPacksForProjectType(config?.project_type || "generic-web-application");
+    const packIds = new Set(projectPacks.map(p => p.id));
+    const fwLower = new Set(frameworks.map(f => f.toLowerCase()));
+    const allPacks = getAllPacks();
+    for (const p of allPacks) {
+        if (fwLower.has(p.id))
+            packIds.add(p.id);
+    }
+    const controls = allPacks.filter(p => packIds.has(p.id)).flatMap(p => p.controls);
+    const overrides = loadControlOverrides(root);
+    const updatedControls = applyControlOverrides(controls, overrides);
+    const auditedControls = updateControlsFromFindings(updatedControls, findings);
+    const scoreData = generateScoreFile(auditedControls, frameworks, findings);
     writeJsonFile(path.join(root, ".ges", "score.json"), scoreData);
     const critical = findings.filter(f => f.severity === "critical");
     const high = findings.filter(f => f.severity === "high");
     const medium = findings.filter(f => f.severity === "medium");
     const low = findings.filter(f => f.severity === "low");
+    if (overrides.length > 0) {
+        const naCount = overrides.filter(o => o.status === "not-applicable").length;
+        const passCount = overrides.filter(o => o.status === "pass").length;
+        console.log(`  Control overrides: ${naCount} not-applicable, ${passCount} pre-verified\n`);
+    }
     if (options.json) {
         console.log(JSON.stringify({ findings, score: scoreData }, null, 2));
         if (options.ci && critical.length > 0)
@@ -67,8 +83,32 @@ export const auditCommand = new Command("audit")
     }
     await showNextStepsMenu("audit");
 });
+function loadControlOverrides(root) {
+    const overridePath = path.join(root, ".ges", "control-overrides.json");
+    if (!fs.existsSync(overridePath))
+        return [];
+    const overrides = readJsonFile(overridePath);
+    return Array.isArray(overrides) ? overrides : [];
+}
+function applyControlOverrides(controls, overrides) {
+    if (overrides.length === 0)
+        return controls;
+    const overrideMap = new Map(overrides.map(o => [o.control_id, o]));
+    return controls.map(control => {
+        const override = overrideMap.get(control.id);
+        if (!override)
+            return control;
+        return {
+            ...control,
+            status: override.status,
+            checks: control.checks.map(check => ({ ...check, status: override.status })),
+        };
+    });
+}
 function updateControlsFromFindings(controls, findings) {
     return controls.map(control => {
+        if (control.status === "pass" || control.status === "not-applicable")
+            return control;
         const relevantFindings = findings.filter(f => f.controlIds.includes(control.id));
         if (relevantFindings.length === 0)
             return control;

package/dist/commands/badge.d.ts

@@ -0,0 +1,2 @@
+import { Command } from "commander";
+export declare const badgeCommand: Command;

package/dist/commands/badge.js

@@ -0,0 +1,42 @@
+import { Command } from "commander";
+import { ensureGESInitialized, readJsonFile } from "../utils/project.js";
+import { generateBadgeSvg, injectBadgeIntoReadme, computeGrade } from "@greenarmor/ges-scoring-engine";
+import { showNextStepsMenu } from "../utils/next-steps.js";
+import * as fs from "node:fs";
+import * as path from "node:path";
+export const badgeCommand = new Command("badge")
+    .description("Generate compliance score badge for README")
+    .option("-o, --output <path>", "Output path for badge SVG", "badge.svg")
+    .option("--readme <path>", "README file to inject badge into", "README.md")
+    .option("--no-readme", "Do not inject badge into README")
+    .action(async (options) => {
+    const root = ensureGESInitialized();
+    const scorePath = path.join(root, ".ges", "score.json");
+    const score = readJsonFile(scorePath);
+    if (!score || !score.frameworks || Object.keys(score.frameworks).length === 0) {
+        console.log("\n  No compliance score available. Run 'ges audit' first.\n");
+        await showNextStepsMenu("badge");
+        return;
+    }
+    const svg = generateBadgeSvg(score);
+    const outputPath = path.resolve(root, options.output);
+    fs.mkdirSync(path.dirname(outputPath), { recursive: true });
+    fs.writeFileSync(outputPath, svg);
+    console.log(`\n  Badge generated: ${options.output}`);
+    console.log(`  Score: ${score.overall}% (${score.overall_grade ?? computeGrade(score.overall)})`);
+    if (options.readme !== false) {
+        const readmePath = path.resolve(root, options.readme);
+        if (fs.existsSync(readmePath)) {
+            const readmeContent = fs.readFileSync(readmePath, "utf-8");
+            const relativeBadgePath = path.relative(path.dirname(readmePath), outputPath);
+            const updated = injectBadgeIntoReadme(readmeContent, relativeBadgePath);
+            fs.writeFileSync(readmePath, updated);
+            console.log(`  Badge injected into ${options.readme}`);
+        }
+        else {
+            console.log(`  ${options.readme} not found — skipping badge injection`);
+        }
+    }
+    console.log("");
+    await showNextStepsMenu("badge");
+});

package/dist/commands/compliance.js

@@ -25,7 +25,10 @@ export const complianceCommand = new Command("compliance")
             const controls = readJsonFile(controlsFile);
             const total = controls?.length || 0;
             const passed = controls?.filter(c => c.status === "pass").length || 0;
-            console.log(`    ${pack.id.padEnd(15)} ${passed}/${total} controls passed`);
+            const failed = controls?.filter(c => c.status === "fail").length || 0;
+            const criticalFailed = controls?.filter(c => c.status === "fail" && c.severity === "critical").length || 0;
+            const statusTag = criticalFailed > 0 ? " ⚠" : "";
+            console.log(`    ${pack.id.padEnd(15)} ${passed}/${total} passed  ${failed} failed${statusTag}`);
         }
     }
     console.log("");

package/dist/commands/score.js

@@ -1,5 +1,6 @@
 import { Command } from "commander";
 import { ensureGESInitialized, readJsonFile } from "../utils/project.js";
+import { formatScoreOutput } from "@greenarmor/ges-scoring-engine";
 import { showNextStepsMenu } from "../utils/next-steps.js";
 import * as path from "node:path";
 export const scoreCommand = new Command("score")
@@ -18,18 +19,8 @@ export const scoreCommand = new Command("score")
         console.log(JSON.stringify(score, null, 2));
     }
     else {
-        const lines = [""];
-        for (const [fw, data] of Object.entries(score.frameworks)) {
-            const padding = Math.max(1, 20 - fw.length);
-            const dots = ".".repeat(padding);
-            lines.push(`  ${fw} ${dots} ${data.score}%`);
-        }
-        const overallPadding = Math.max(1, 20 - "Overall".length);
-        lines.push(`  Overall ${".".repeat(overallPadding)} ${score.overall}%`);
-        lines.push("");
-        lines.push(`  Last evaluated: ${score.evaluated_at}`);
-        lines.push("");
-        console.log(lines.join("\n"));
+        console.log(formatScoreOutput(score));
+        console.log(`  Last evaluated: ${score.evaluated_at}\n`);
     }
     await showNextStepsMenu("score");
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@greenarmor/ges",
-  "version": "0.3.5",
+  "version": "0.5.0",
   "description": "Green Engineering Standard Framework - Compliance-as-Code CLI",
   "type": "module",
   "main": "./dist/index.js",
@@ -13,17 +13,17 @@
   ],
   "dependencies": {
     "commander": "^13.0.0",
-    "@greenarmor/ges-audit-engine": "0.3.5",
-    "@greenarmor/ges-cicd-generator": "0.3.5",
-    "@greenarmor/ges-core": "0.3.5",
-    "@greenarmor/ges-compliance-engine": "0.3.5",
-    "@greenarmor/ges-report-generator": "0.3.5",
-    "@greenarmor/ges-rules-engine": "0.3.5",
-    "@greenarmor/ges-policy-engine": "0.3.5",
-    "@greenarmor/ges-scoring-engine": "0.3.5",
-    "@greenarmor/ges-scanner-integration": "0.3.5",
-    "@greenarmor/ges-doc-generator": "0.3.5",
-    "@greenarmor/ges-mcp-server": "0.3.5"
+    "@greenarmor/ges-audit-engine": "0.5.0",
+    "@greenarmor/ges-doc-generator": "0.5.0",
+    "@greenarmor/ges-cicd-generator": "0.5.0",
+    "@greenarmor/ges-compliance-engine": "0.5.0",
+    "@greenarmor/ges-policy-engine": "0.5.0",
+    "@greenarmor/ges-rules-engine": "0.5.0",
+    "@greenarmor/ges-report-generator": "0.5.0",
+    "@greenarmor/ges-scanner-integration": "0.5.0",
+    "@greenarmor/ges-scoring-engine": "0.5.0",
+    "@greenarmor/ges-mcp-server": "0.5.0",
+    "@greenarmor/ges-core": "0.5.0"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",