@greenarmor/ges 1.2.0 → 1.2.1

package/dist/commands/fix.js

@@ -2,6 +2,25 @@ import { Command } from "commander";
 import { ensureGESInitialized } from "../utils/project.js";
 import { runAudit, deduplicateFindings } from "@greenarmor/ges-audit-engine";
 import { createAutoFixPlan, applyAutoFixAction, getNpmInstallsFromActions } from "@greenarmor/ges-mcp-server";
+import { appendFixHistory, createFixHistoryEntry } from "@greenarmor/ges-core";
+import { getAllPacks } from "@greenarmor/ges-policy-engine";
+import * as fs from "node:fs";
+import * as path from "node:path";
+function loadProjectControls(root) {
+    try {
+        const configPath = path.join(root, ".ges", "config.json");
+        if (!fs.existsSync(configPath))
+            return [];
+        const config = JSON.parse(fs.readFileSync(configPath, "utf-8"));
+        const fwLower = new Set(config.frameworks.map((f) => f.toLowerCase()));
+        const allPacks = getAllPacks();
+        const filtered = allPacks.filter(pack => fwLower.has(pack.id.toLowerCase()));
+        return filtered.flatMap((p) => p.controls);
+    }
+    catch {
+        return [];
+    }
+}
 export const fixCommand = new Command("fix")
     .description("Automatically fix security and compliance findings")
     .option("-d, --dry-run", "Show what would be fixed without making changes")
@@ -14,6 +33,7 @@ export const fixCommand = new Command("fix")
     console.log("  Scanning project files...");
     const { findings: rawFindings, scannedFiles } = runAudit(root);
     const findings = deduplicateFindings(rawFindings);
+    const projectControls = loadProjectControls(root);
     console.log(`  Scanned ${scannedFiles} files`);
     console.log(`  Found ${findings.length} findings\n`);
     if (findings.length === 0) {
@@ -45,11 +65,35 @@ export const fixCommand = new Command("fix")
     }
     let applied = 0;
     let failed = 0;
+    const historyEntries = [];
     for (const action of actions) {
+        const matchingFindings = findings.filter(f => f.ruleId === action.ruleId);
+        const primaryFinding = matchingFindings[0];
+        const matchedControls = primaryFinding
+            ? projectControls.filter((c) => primaryFinding.controlIds.includes(c.id))
+            : [];
         if (dryRun) {
             console.log(`    [${action.type}] ${action.filePath}`);
             console.log(`        ${action.description}  [${action.ruleId}]`);
             applied++;
+            historyEntries.push(createFixHistoryEntry({
+                source: "cli",
+                dry_run: true,
+                finding: primaryFinding ?? {
+                    ruleId: action.ruleId,
+                    severity: "medium",
+                    category: "",
+                    title: action.description,
+                    file: "",
+                    evidence: "",
+                    description: action.description,
+                    controlIds: [],
+                    fix: action.description,
+                },
+                action,
+                controls: matchedControls,
+                applied: false,
+            }));
         }
         else {
             const result = applyAutoFixAction(root, action);
@@ -62,8 +106,31 @@ export const fixCommand = new Command("fix")
                 console.log(`        ${result.error}`);
                 failed++;
             }
+            historyEntries.push(createFixHistoryEntry({
+                source: "cli",
+                dry_run: false,
+                finding: primaryFinding ?? {
+                    ruleId: action.ruleId,
+                    severity: "medium",
+                    category: "",
+                    title: action.description,
+                    file: "",
+                    evidence: "",
+                    description: action.description,
+                    controlIds: [],
+                    fix: action.description,
+                },
+                action,
+                controls: matchedControls,
+                applied: result.applied,
+                error: result.applied ? undefined : result.error,
+            }));
         }
     }
+    if (historyEntries.length > 0 && !dryRun) {
+        appendFixHistory(root, historyEntries);
+        console.log(`\n  Fix history recorded in .ges/fix-history.json`);
+    }
     console.log("");
     console.log(`  Fixes ${dryRun ? "planned" : "applied"}: ${applied}${failed > 0 ? ` (${failed} failed)` : ""}`);
     if (npmInstalls.length > 0) {

package/package.json

@@ -3,19 +3,19 @@
     "ges": "./dist/cli.js"
   },
   "dependencies": {
-    "@greenarmor/ges-audit-engine": "1.2.0",
-    "@greenarmor/ges-cicd-generator": "1.2.0",
-    "@greenarmor/ges-compliance-engine": "1.2.0",
-    "@greenarmor/ges-core": "1.2.0",
-    "@greenarmor/ges-doc-generator": "1.2.0",
-    "@greenarmor/ges-git-hooks": "1.2.0",
-    "@greenarmor/ges-mcp-server": "1.2.0",
-    "@greenarmor/ges-policy-engine": "1.2.0",
-    "@greenarmor/ges-report-generator": "1.2.0",
-    "@greenarmor/ges-rules-engine": "1.2.0",
-    "@greenarmor/ges-scanner-integration": "1.2.0",
-    "@greenarmor/ges-scoring-engine": "1.2.0",
-    "@greenarmor/ges-web-dashboard": "1.2.0",
+    "@greenarmor/ges-audit-engine": "1.2.1",
+    "@greenarmor/ges-cicd-generator": "1.2.1",
+    "@greenarmor/ges-compliance-engine": "1.2.1",
+    "@greenarmor/ges-core": "1.2.1",
+    "@greenarmor/ges-doc-generator": "1.2.1",
+    "@greenarmor/ges-git-hooks": "1.2.1",
+    "@greenarmor/ges-mcp-server": "1.2.1",
+    "@greenarmor/ges-policy-engine": "1.2.1",
+    "@greenarmor/ges-report-generator": "1.2.1",
+    "@greenarmor/ges-rules-engine": "1.2.1",
+    "@greenarmor/ges-scanner-integration": "1.2.1",
+    "@greenarmor/ges-scoring-engine": "1.2.1",
+    "@greenarmor/ges-web-dashboard": "1.2.1",
     "commander": "^13.0.0"
   },
   "description": "Green Engineering Standard Framework - Compliance-as-Code CLI",
@@ -53,7 +53,7 @@
   },
   "type": "module",
   "types": "./dist/index.d.ts",
-  "version": "1.2.0",
+  "version": "1.2.1",
   "scripts": {
     "build": "tsc",
     "clean": "rm -rf dist tsconfig.tsbuildinfo",