@greenarmor/ges 0.6.0 → 0.6.2

package/dist/commands/mcp-setup.js

@@ -23,6 +23,9 @@ const CLIENTS = [
         name: "VS Code (Copilot)",
         configPaths: [
             path.join(".vscode", "mcp.json"),
+            path.join(os.homedir(), "Library", "Application Support", "Code", "User", "mcp.json"),
+            path.join(os.homedir(), ".config", "Code", "User", "mcp.json"),
+            path.join(os.homedir(), "AppData", "Roaming", "Code", "User", "mcp.json"),
         ],
         configKey: "servers",
         format: "servers",
@@ -44,7 +47,7 @@ const CLIENTS = [
             path.join(".config", "opencode", "opencode.json"),
         ],
         configKey: "mcp",
-        format: "mcp",
+        format: "opencode",
     },
     {
         id: "crush",
@@ -66,14 +69,27 @@ const CLIENTS = [
     },
 ];
 function resolveServerPath() {
-    const cliDist = path.resolve(__dirname, "..", "..", "mcp-server", "dist", "server.js");
-    if (fs.existsSync(cliDist)) {
-        return { command: "node", args: [cliDist] };
+    const searchPaths = [
+        path.resolve(__dirname, "..", "..", "..", "mcp-server", "dist", "server.js"),
+        path.resolve(__dirname, "..", "..", "mcp-server", "dist", "server.js"),
+        path.resolve(__dirname, "..", "..", "mcp-server", "bundle", "server.js"),
+    ];
+    for (const serverPath of searchPaths) {
+        if (fs.existsSync(serverPath)) {
+            return { command: "node", args: [serverPath] };
+        }
     }
     return { command: "npx", args: ["-y", "@greenarmor/ges-mcp-server"] };
 }
 function buildServerEntry(client) {
     const { command, args } = resolveServerPath();
+    if (client.format === "opencode") {
+        return {
+            type: "local",
+            command: [command, ...args],
+            enabled: true,
+        };
+    }
     const entry = { command, args };
     if (client.format === "servers" || client.format === "mcp") {
         entry.type = "stdio";
@@ -123,7 +139,8 @@ function printSetupInstructions(client, configPath) {
             console.log("  Restart Claude Desktop to load the server.");
             break;
         case "vscode":
-            console.log("  Reload the VS Code window (Cmd+Shift+P → Developer: Reload Window).");
+            console.log("  Reload the VS Code window (Cmd+Shift+P / Ctrl+Shift+P → Developer: Reload Window).");
+            console.log("  Verify: Open Copilot Chat → Agent mode → tools icon (🔨) → look for 'gesf'.");
             break;
         case "cursor":
             console.log("  Restart Cursor to load the server.");
@@ -139,12 +156,16 @@ function printSetupInstructions(client, configPath) {
             break;
     }
 }
-async function setupClient(clientId) {
+async function setupClient(clientId, defaultToGlobal = false) {
     const client = CLIENTS.find((c) => c.id === clientId);
     if (!client) {
         console.error(`Unknown client: ${clientId}`);
         process.exit(1);
     }
+    if (client.id === "vscode") {
+        await setupVsCode(client, defaultToGlobal);
+        return;
+    }
     const configPath = getConfigPath(client);
     const existing = readJsonFile(configPath) || {};
     const updated = addServerToConfig(existing, client);
@@ -153,12 +174,46 @@ async function setupClient(clientId) {
     console.log(`  Status: configured\n`);
     await showNextStepsMenu("mcp-setup");
 }
+async function setupVsCode(client, defaultToGlobal = false) {
+    const globalPaths = client.configPaths.slice(1);
+    const globalPath = globalPaths.find((p) => fs.existsSync(p)) || globalPaths[0];
+    const projectPath = client.configPaths[0];
+    let choice;
+    if (defaultToGlobal) {
+        choice = "global";
+    }
+    else {
+        console.log("\n  VS Code MCP Setup\n");
+        console.log("  Choose configuration scope:\n");
+        console.log(`  1) Global — available in all projects (${globalPath})`);
+        console.log(`  2) Project — current project only (${projectPath})`);
+        console.log("");
+        choice = await select({
+            message: "Configuration scope:",
+            choices: [
+                { name: "Global (recommended — all projects)", value: "global" },
+                { name: "Project (current project only)", value: "project" },
+            ],
+        });
+    }
+    const configPath = choice === "global" ? globalPath : projectPath;
+    const existing = readJsonFile(configPath) || {};
+    if (existing.inputs) {
+        delete existing.inputs;
+        console.log("  Removed invalid 'inputs' section from existing config.");
+    }
+    const updated = addServerToConfig(existing, client);
+    writeJsonFile(configPath, updated);
+    printSetupInstructions(client, configPath);
+    console.log(`  Status: configured\n`);
+    await showNextStepsMenu("mcp-setup");
+}
 async function setupAll() {
     console.log("\n  GESF MCP Server Setup\n");
     console.log("  ─────────────────────\n");
     for (const client of CLIENTS) {
         try {
-            await setupClient(client.id);
+            await setupClient(client.id, true);
         }
         catch (err) {
             console.log(`  ${client.name}: skipped (${err instanceof Error ? err.message : String(err)})\n`);

package/dist/commands/scan.js

@@ -1,15 +1,23 @@
 import { Command } from "commander";
 import { ensureGESInitialized } from "../utils/project.js";
-import { runAllScans, formatScanResults } from "@greenarmor/ges-scanner-integration";
+import { runAllScansWithSbom, formatScanResults, formatSbomResults, detectProject } from "@greenarmor/ges-scanner-integration";
 import { showNextStepsMenu } from "../utils/next-steps.js";
 export const scanCommand = new Command("scan")
     .description("Run security scans")
     .option("--ci", "CI mode")
     .action(async (options) => {
     const root = ensureGESInitialized();
-    console.log("\n  Running security scans...\n");
-    const results = runAllScans();
+    const detection = detectProject(root);
+    const detail = detection.ecosystem === "node" && detection.nodePackageManager
+        ? `node (${detection.nodePackageManager})`
+        : detection.ecosystem === "python" && detection.pythonToolchain
+            ? `python (${detection.pythonToolchain})`
+            : detection.ecosystem;
+    console.log(`\n  Detected ecosystem: ${detail}`);
+    console.log("  Running security scans...\n");
+    const results = runAllScansWithSbom(detection);
     console.log(formatScanResults(results));
+    console.log(formatSbomResults(results));
     if (options.ci) {
         const failed = results.filter(r => r.status === "fail");
         if (failed.length > 0) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@greenarmor/ges",
-  "version": "0.6.0",
+  "version": "0.6.2",
   "description": "Green Engineering Standard Framework - Compliance-as-Code CLI",
   "type": "module",
   "main": "./dist/index.js",
@@ -13,17 +13,17 @@
   ],
   "dependencies": {
     "commander": "^13.0.0",
-    "@greenarmor/ges-cicd-generator": "0.6.0",
-    "@greenarmor/ges-core": "0.6.0",
-    "@greenarmor/ges-doc-generator": "0.6.0",
-    "@greenarmor/ges-policy-engine": "0.6.0",
-    "@greenarmor/ges-scanner-integration": "0.6.0",
-    "@greenarmor/ges-audit-engine": "0.6.0",
-    "@greenarmor/ges-report-generator": "0.6.0",
-    "@greenarmor/ges-rules-engine": "0.6.0",
-    "@greenarmor/ges-scoring-engine": "0.6.0",
-    "@greenarmor/ges-mcp-server": "0.6.0",
-    "@greenarmor/ges-compliance-engine": "0.6.0"
+    "@greenarmor/ges-audit-engine": "0.6.2",
+    "@greenarmor/ges-cicd-generator": "0.6.2",
+    "@greenarmor/ges-doc-generator": "0.6.2",
+    "@greenarmor/ges-report-generator": "0.6.2",
+    "@greenarmor/ges-scanner-integration": "0.6.2",
+    "@greenarmor/ges-compliance-engine": "0.6.2",
+    "@greenarmor/ges-core": "0.6.2",
+    "@greenarmor/ges-scoring-engine": "0.6.2",
+    "@greenarmor/ges-rules-engine": "0.6.2",
+    "@greenarmor/ges-mcp-server": "0.6.2",
+    "@greenarmor/ges-policy-engine": "0.6.2"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",