@greenarmor/ges 1.1.7 → 1.2.1

package/dist/cli.js

@@ -17,12 +17,12 @@ import { controlCommand } from "./commands/control.js";
 import { fixCommand } from "./commands/fix.js";
 import { hooksCommand } from "./commands/hooks.js";
 import { dashboardCommand } from "./commands/dashboard.js";
-import { GESF_VERSION } from "@greenarmor/ges-core";
+import { CLI_VERSION } from "./utils/version.js";
 const program = new Command();
 program
     .name("ges")
     .description("Green Engineering Standard Framework - Compliance-as-Code CLI")
-    .version(GESF_VERSION);
+    .version(CLI_VERSION);
 program.addCommand(initCommand);
 program.addCommand(auditCommand);
 program.addCommand(scoreCommand);

package/dist/commands/doctor.js

@@ -1,6 +1,7 @@
 import { Command } from "commander";
 import { findProjectRoot, readJsonFile } from "../utils/project.js";
-import { GESF_VERSION, GES_DIR } from "@greenarmor/ges-core";
+import { CLI_VERSION } from "../utils/version.js";
+import { GES_DIR } from "@greenarmor/ges-core";
 import { showNextStepsMenu } from "../utils/next-steps.js";
 import * as fs from "node:fs";
 import * as path from "node:path";
@@ -51,7 +52,7 @@ export const doctorCommand = new Command("doctor")
             checks.push({ name: "Frameworks", status: "OK", detail: config.frameworks.join(", ") });
         }
     }
-    checks.push({ name: "GESF Version", status: "OK", detail: GESF_VERSION });
+    checks.push({ name: "GESF Version", status: "OK", detail: CLI_VERSION });
     for (const check of checks) {
         const icon = check.status === "OK" ? "✓" : check.status === "WARN" ? "!" : "✗";
         const line = `  [${icon}] ${check.name}`;

package/dist/commands/fix.js

@@ -2,6 +2,25 @@ import { Command } from "commander";
 import { ensureGESInitialized } from "../utils/project.js";
 import { runAudit, deduplicateFindings } from "@greenarmor/ges-audit-engine";
 import { createAutoFixPlan, applyAutoFixAction, getNpmInstallsFromActions } from "@greenarmor/ges-mcp-server";
+import { appendFixHistory, createFixHistoryEntry } from "@greenarmor/ges-core";
+import { getAllPacks } from "@greenarmor/ges-policy-engine";
+import * as fs from "node:fs";
+import * as path from "node:path";
+function loadProjectControls(root) {
+    try {
+        const configPath = path.join(root, ".ges", "config.json");
+        if (!fs.existsSync(configPath))
+            return [];
+        const config = JSON.parse(fs.readFileSync(configPath, "utf-8"));
+        const fwLower = new Set(config.frameworks.map((f) => f.toLowerCase()));
+        const allPacks = getAllPacks();
+        const filtered = allPacks.filter(pack => fwLower.has(pack.id.toLowerCase()));
+        return filtered.flatMap((p) => p.controls);
+    }
+    catch {
+        return [];
+    }
+}
 export const fixCommand = new Command("fix")
     .description("Automatically fix security and compliance findings")
     .option("-d, --dry-run", "Show what would be fixed without making changes")
@@ -14,6 +33,7 @@ export const fixCommand = new Command("fix")
     console.log("  Scanning project files...");
     const { findings: rawFindings, scannedFiles } = runAudit(root);
     const findings = deduplicateFindings(rawFindings);
+    const projectControls = loadProjectControls(root);
     console.log(`  Scanned ${scannedFiles} files`);
     console.log(`  Found ${findings.length} findings\n`);
     if (findings.length === 0) {
@@ -45,11 +65,35 @@ export const fixCommand = new Command("fix")
     }
     let applied = 0;
     let failed = 0;
+    const historyEntries = [];
     for (const action of actions) {
+        const matchingFindings = findings.filter(f => f.ruleId === action.ruleId);
+        const primaryFinding = matchingFindings[0];
+        const matchedControls = primaryFinding
+            ? projectControls.filter((c) => primaryFinding.controlIds.includes(c.id))
+            : [];
         if (dryRun) {
             console.log(`    [${action.type}] ${action.filePath}`);
             console.log(`        ${action.description}  [${action.ruleId}]`);
             applied++;
+            historyEntries.push(createFixHistoryEntry({
+                source: "cli",
+                dry_run: true,
+                finding: primaryFinding ?? {
+                    ruleId: action.ruleId,
+                    severity: "medium",
+                    category: "",
+                    title: action.description,
+                    file: "",
+                    evidence: "",
+                    description: action.description,
+                    controlIds: [],
+                    fix: action.description,
+                },
+                action,
+                controls: matchedControls,
+                applied: false,
+            }));
         }
         else {
             const result = applyAutoFixAction(root, action);
@@ -62,8 +106,31 @@ export const fixCommand = new Command("fix")
                 console.log(`        ${result.error}`);
                 failed++;
             }
+            historyEntries.push(createFixHistoryEntry({
+                source: "cli",
+                dry_run: false,
+                finding: primaryFinding ?? {
+                    ruleId: action.ruleId,
+                    severity: "medium",
+                    category: "",
+                    title: action.description,
+                    file: "",
+                    evidence: "",
+                    description: action.description,
+                    controlIds: [],
+                    fix: action.description,
+                },
+                action,
+                controls: matchedControls,
+                applied: result.applied,
+                error: result.applied ? undefined : result.error,
+            }));
         }
     }
+    if (historyEntries.length > 0 && !dryRun) {
+        appendFixHistory(root, historyEntries);
+        console.log(`\n  Fix history recorded in .ges/fix-history.json`);
+    }
     console.log("");
     console.log(`  Fixes ${dryRun ? "planned" : "applied"}: ${applied}${failed > 0 ? ` (${failed} failed)` : ""}`);
     if (npmInstalls.length > 0) {

package/dist/commands/init.js

@@ -1,6 +1,7 @@
 import { Command } from "commander";
 import { input, select, checkbox } from "../utils/prompts.js";
-import { PROJECT_TYPES, FRAMEWORKS, DEFAULT_FRAMEWORKS, GESF_VERSION, GES_DIR, COMPLIANCE_DIR, SECURITY_DIR, CONTROLS_DIR, POLICIES_DIR, CHECKLISTS_DIR, DOCS_DIR, REPORTS_DIR, } from "@greenarmor/ges-core";
+import { PROJECT_TYPES, FRAMEWORKS, DEFAULT_FRAMEWORKS, GES_DIR, COMPLIANCE_DIR, SECURITY_DIR, CONTROLS_DIR, POLICIES_DIR, CHECKLISTS_DIR, DOCS_DIR, REPORTS_DIR, } from "@greenarmor/ges-core";
+import { CLI_VERSION } from "../utils/version.js";
 import { getPacksForProjectType } from "@greenarmor/ges-policy-engine";
 import { generateComplianceDocs, generateSecurityDocs, generateConfigJson, generateMetadataJson, generateFrameworkVersionJson, generateScoreJson, } from "@greenarmor/ges-doc-generator";
 import { generateAllWorkflows } from "@greenarmor/ges-cicd-generator";
@@ -15,7 +16,7 @@ export const initCommand = new Command("init")
     .option("-f, --frameworks <frameworks>", "Comma-separated frameworks")
     .option("--force", "Re-initialize even if GESF is already set up")
     .action(async (options) => {
-    console.log("\n  Green Engineering Standard Framework (GESF) v" + GESF_VERSION);
+    console.log("\n  Green Engineering Standard Framework (GESF) v" + CLI_VERSION);
     console.log("  ─────────────────────────────────────────────\n");
     const gesDir = path.join(process.cwd(), GES_DIR);
     if (fs.existsSync(gesDir)) {
@@ -71,7 +72,7 @@ export const initCommand = new Command("init")
             privacy_controls: { required: true, level: "mandatory" },
         },
         created_at: now,
-        version: GESF_VERSION,
+        version: CLI_VERSION,
     };
     const dirs = [GES_DIR, COMPLIANCE_DIR, SECURITY_DIR, CONTROLS_DIR, POLICIES_DIR, CHECKLISTS_DIR, DOCS_DIR, REPORTS_DIR];
     for (const dir of dirs) {

package/dist/commands/update.js

@@ -1,10 +1,10 @@
 import { Command } from "commander";
-import { GESF_VERSION } from "@greenarmor/ges-core";
+import { CLI_VERSION } from "../utils/version.js";
 import { showNextStepsMenu } from "../utils/next-steps.js";
 export const updateCommand = new Command("update")
     .description("Check for GESF updates")
     .action(async () => {
-    console.log(`\n  GESF Version: ${GESF_VERSION}`);
+    console.log(`\n  GESF Version: ${CLI_VERSION}`);
     console.log("  Update check: Run 'npm update -g @greenarmor/ges' or 'pnpm update -g @greenarmor/ges'\n");
     await showNextStepsMenu("update");
 });

package/dist/utils/version.d.ts

@@ -0,0 +1 @@
+export declare const CLI_VERSION: string;

package/dist/utils/version.js

@@ -0,0 +1,8 @@
+import { createRequire } from "node:module";
+import * as url from "node:url";
+import * as path from "node:path";
+const __filename = url.fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+const require = createRequire(import.meta.url);
+const pkg = require(path.join(__dirname, "..", "..", "package.json"));
+export const CLI_VERSION = pkg.version;

package/package.json

@@ -1,34 +1,24 @@
 {
-  "name": "@greenarmor/ges",
-  "version": "1.1.7",
-  "description": "Green Engineering Standard Framework - Compliance-as-Code CLI",
-  "type": "module",
-  "main": "./dist/index.js",
-  "types": "./dist/index.d.ts",
   "bin": {
     "ges": "./dist/cli.js"
   },
-  "files": [
-    "dist",
-    "LICENSE",
-    "README.md"
-  ],
   "dependencies": {
-    "@greenarmor/ges-audit-engine": "1.1.5",
-    "@greenarmor/ges-cicd-generator": "1.1.5",
-    "@greenarmor/ges-compliance-engine": "1.1.5",
-    "@greenarmor/ges-core": "1.1.5",
-    "@greenarmor/ges-doc-generator": "1.1.5",
-    "@greenarmor/ges-policy-engine": "1.1.5",
-    "@greenarmor/ges-report-generator": "1.1.5",
-    "@greenarmor/ges-rules-engine": "1.1.5",
-    "@greenarmor/ges-scanner-integration": "1.1.5",
-    "@greenarmor/ges-scoring-engine": "1.1.5",
-    "@greenarmor/ges-mcp-server": "1.1.5",
-    "@greenarmor/ges-git-hooks": "1.1.5",
-    "@greenarmor/ges-web-dashboard": "1.1.5",
+    "@greenarmor/ges-audit-engine": "1.2.1",
+    "@greenarmor/ges-cicd-generator": "1.2.1",
+    "@greenarmor/ges-compliance-engine": "1.2.1",
+    "@greenarmor/ges-core": "1.2.1",
+    "@greenarmor/ges-doc-generator": "1.2.1",
+    "@greenarmor/ges-git-hooks": "1.2.1",
+    "@greenarmor/ges-mcp-server": "1.2.1",
+    "@greenarmor/ges-policy-engine": "1.2.1",
+    "@greenarmor/ges-report-generator": "1.2.1",
+    "@greenarmor/ges-rules-engine": "1.2.1",
+    "@greenarmor/ges-scanner-integration": "1.2.1",
+    "@greenarmor/ges-scoring-engine": "1.2.1",
+    "@greenarmor/ges-web-dashboard": "1.2.1",
     "commander": "^13.0.0"
   },
+  "description": "Green Engineering Standard Framework - Compliance-as-Code CLI",
   "devDependencies": {
     "@types/node": "^22.0.0",
     "typescript": "^6.0.0",
@@ -37,6 +27,12 @@
   "engines": {
     "node": ">=20.0.0"
   },
+  "files": [
+    "dist",
+    "LICENSE",
+    "README.md"
+  ],
+  "homepage": "https://github.com/greenarmor/gesf",
   "keywords": [
     "compliance",
     "gdpr",
@@ -49,11 +45,15 @@
     "compliance-as-code"
   ],
   "license": "MIT",
+  "main": "./dist/index.js",
+  "name": "@greenarmor/ges",
   "repository": {
     "type": "git",
     "url": "https://github.com/greenarmor/gesf"
   },
-  "homepage": "https://github.com/greenarmor/gesf",
+  "type": "module",
+  "types": "./dist/index.d.ts",
+  "version": "1.2.1",
   "scripts": {
     "build": "tsc",
     "clean": "rm -rf dist tsconfig.tsbuildinfo",