@greenarmor/ges 1.5.2 → 1.5.4

package/dist/commands/assign.js

@@ -151,15 +151,15 @@ async function assignFinding(root, options) {
         errorOut("Governance record not found.");
         return;
     }
-    const assignee = options.assignee || await input({ message: "Assignee name:" });
+    const assignee = options.assignee || await input({ message: "Assignee name (who will fix this):" });
     if (!assignee.trim()) {
-        errorOut("Assignee name is required.");
+        errorOut("Assignee name is required.", "Please provide the name of the person responsible for this fix.");
         return;
     }
-    const assigneeRole = options.assigneeRole || await input({ message: "Assignee role (optional):" });
-    const notes = options.notes || await input({ message: "Notes (optional):" });
-    const actorName = options.actor || await input({ message: "Your name (for audit trail):" });
-    const actorRole = options.actorRole || await input({ message: "Your role (optional):" });
+    const assigneeRole = options.assigneeRole || await input({ message: "Assignee role (optional, e.g., 'Security Engineer'):", default: "" });
+    const notes = options.notes || await input({ message: "Notes (optional, e.g., 'Urgent — fix before release'):", default: "" });
+    const actorName = options.actor || await input({ message: "Your name (for audit trail):", default: "cli-user" });
+    const actorRole = options.actorRole || await input({ message: "Your role (optional):", default: "" });
     const assignment = createFixAssignment({
         finding_key: fkey,
         finding_rule_id: selectedFinding.ruleId,

package/dist/commands/governance.js

@@ -1,7 +1,7 @@
 import { Command } from "commander";
 import { ensureGESInitialized } from "../utils/project.js";
 import { input, select } from "../utils/prompts.js";
-import { banner, divider, blank, success, info, kv, statusBadge, severityBadge, BOLD, DIM, GREEN, RED, YELLOW, GRAY, } from "../utils/ui.js";
+import { banner, divider, blank, success, error, warn, info, kv, label, statusBadge, severityBadge, BOLD, DIM, GREEN, RED, YELLOW, GRAY, } from "../utils/ui.js";
 import { loadGovernanceRecords, createGovernanceRecord, addGovernanceRecord, findGovernanceRecord, setGovernanceApproval, addGovernanceEvidence, createEvidenceRef, verifyGovernanceRecord, deleteGovernanceRecord, setGovernanceRiskAssessment, setGovernancePolicyBasis, setGovernanceReviewCycle, setGovernanceDataInventory, setGovernanceComplianceLinks, setGovernanceCommittee, } from "@greenarmor/ges-core";
 import { recordActivity } from "@greenarmor/ges-core";
 const STATUS_BADGE = {
@@ -32,8 +32,157 @@ function printRecordSummary(record) {
     }
     console.log(`     ${DIM("Ev")}     ${record.evidence.length} reference(s)`);
 }
+async function showGovernanceNextAction(root, records, lastShownId) {
+    if (process.stdin.isTTY !== true || process.stdout.isTTY !== true)
+        return;
+    const choices = [];
+    if (lastShownId) {
+        choices.push({ name: `Verify this record ${DIM("— check provenance completeness")}`, value: `ges governance verify ${lastShownId}` });
+        if (records.length > 1) {
+            choices.push({ name: `Show another record ${DIM("— pick from list")}`, value: `__pick_show__` });
+        }
+        choices.push({ name: `Record an approval ${DIM("— add approval decision")}`, value: `ges governance approve ${lastShownId}` });
+        choices.push({ name: `Add evidence reference ${DIM("— link to Jira/Confluence/etc")}`, value: `ges governance evidence ${lastShownId}` });
+        choices.push({ name: `Link risk assessment ${DIM("— assessor, methodology, score")}`, value: `ges governance risk-assessment ${lastShownId}` });
+        choices.push({ name: `Document policy basis ${DIM("— which policy applies")}`, value: `ges governance policy-basis ${lastShownId}` });
+    }
+    else if (records.length > 0) {
+        choices.push({ name: `Show a record's full provenance chain ${DIM("— all dimensions in detail")}`, value: `__pick_show__` });
+        choices.push({ name: `Verify a record's completeness ${DIM("— check all 8 dimensions")}`, value: `__pick_verify__` });
+    }
+    choices.push({ name: `Create a new governance record ${DIM("— start a new approval chain")}`, value: `ges governance add` });
+    if (records.length === 0) {
+        choices.length = 0;
+        choices.push({ name: `Create a new governance record ${DIM("— start a new approval chain")}`, value: `ges governance add` });
+    }
+    choices.push({ name: `${YELLOW("Exit")} ${DIM("— return to terminal")}`, value: `exit` });
+    divider();
+    label("What would you like to do next?");
+    const answer = await select({
+        message: "Choose your next action:",
+        choices,
+    });
+    if (answer === "exit") {
+        blank();
+        return;
+    }
+    let cmd = answer;
+    if (answer === "__pick_show__" || answer === "__pick_verify__") {
+        let recordChoice;
+        if (records.length === 1) {
+            recordChoice = records[0].id;
+        }
+        else {
+            recordChoice = await select({
+                message: "Select a record:",
+                choices: records.map(r => ({
+                    name: `${r.system_name} ${GRAY(`(${r.status}, ${r.risk_level})`)}`,
+                    value: r.id,
+                })),
+            });
+        }
+        const sub = answer === "__pick_show__" ? "show" : "verify";
+        cmd = `ges governance ${sub} ${recordChoice}`;
+    }
+    blank();
+    info("Running", GREEN(cmd));
+    divider();
+    blank();
+    const { execSync } = await import("node:child_process");
+    try {
+        execSync(cmd, { stdio: "inherit" });
+    }
+    catch {
+        process.exit(1);
+    }
+}
 export const governanceCommand = new Command("governance")
     .description("Manage governance approval provenance chains")
+    .action(async () => {
+    if (!process.stdin.isTTY || !process.stdout.isTTY) {
+        governanceCommand.outputHelp();
+        return;
+    }
+    banner("GESF Governance", "Provenance Chain Management");
+    let root;
+    try {
+        root = ensureGESInitialized();
+    }
+    catch {
+        error("GESF is not initialized.", "Run `ges init` first.");
+        blank();
+        return;
+    }
+    const records = loadGovernanceRecords(root);
+    if (records.length > 0) {
+        console.log(`  ${BOLD("Existing Records")} ${GRAY(`(${records.length})`)}`);
+        records.forEach(r => printRecordSummary(r));
+        console.log("");
+    }
+    else {
+        warn("No governance records yet.", "Create one to start building a provenance chain.");
+        blank();
+    }
+    const action = await select({
+        message: "What would you like to do?",
+        choices: [
+            { name: `Create a new governance record ${DIM("— start a new approval chain")}`, value: "add" },
+            ...(records.length > 0 ? [
+                { name: `List all records ${DIM(`(${records.length} existing)`)}`, value: "list" },
+                { name: `Show a record's full provenance chain ${DIM("— all dimensions in detail")}`, value: "show" },
+                { name: `Verify a record's completeness ${DIM("— check all 8 dimensions")}`, value: "verify" },
+                { name: `Record an approval decision ${DIM("— who approved, under what authority")}`, value: "approve" },
+                { name: `Add an evidence reference ${DIM("— link to Jira, Confluence, etc.")}`, value: "evidence" },
+                { name: `Link a risk assessment ${DIM("— assessor, methodology, score")}`, value: "risk-assessment" },
+                { name: `Document the policy basis ${DIM("— which policy/standard applies")}`, value: "policy-basis" },
+                { name: `Set up a review cycle ${DIM("— when to re-review")}`, value: "review-cycle" },
+                { name: `Document data inventory ${DIM("— what personal data is processed")}`, value: "data-inventory" },
+                { name: `Record committee approval ${DIM("— formal committee sign-off")}`, value: "committee" },
+                { name: `Map compliance frameworks ${DIM("— GDPR, OWASP, etc.")}`, value: "compliance-links" },
+                { name: `Delete a record ${DIM("— permanently remove")}`, value: "delete" },
+            ] : []),
+            { name: `${YELLOW("Exit")} ${DIM("— return to terminal")}`, value: "exit" },
+        ],
+    });
+    if (action === "exit") {
+        blank();
+        return;
+    }
+    let cmd = `ges governance ${action}`;
+    if (["show", "verify", "approve", "evidence", "risk-assessment", "policy-basis", "review-cycle", "data-inventory", "committee", "compliance-links", "delete"].includes(action)) {
+        if (records.length === 0) {
+            error("No records to work with.", "Create one first with: ges governance add");
+            blank();
+            return;
+        }
+        if (records.length === 1) {
+            cmd += ` ${records[0].id}`;
+        }
+        else {
+            const recordChoice = await select({
+                message: "Select a record:",
+                choices: [
+                    ...records.map(r => ({
+                        name: `${r.system_name} ${GRAY(`(${r.status}, ${r.risk_level})`)}`,
+                        value: r.id,
+                    })),
+                ],
+            });
+            cmd += ` ${recordChoice}`;
+        }
+    }
+    blank();
+    info("Running", GREEN(cmd));
+    divider();
+    blank();
+    const { execSync } = await import("node:child_process");
+    try {
+        execSync(cmd, { stdio: "inherit" });
+    }
+    catch {
+        process.exit(1);
+    }
+})
     .addCommand(new Command("add")
     .description("Create a new governance record")
     .option("-n, --name <name>", "System name")
@@ -119,10 +268,10 @@ export const governanceCommand = new Command("governance")
         console.error(`  Error: Governance record "${id}" not found.`);
         process.exit(1);
     }
-    const approverName = options.approver || await input({ message: "Approver name:", default: "" });
-    const approverRole = options.role || await input({ message: "Approver role:", default: "" });
-    const approverEmail = options.email || await input({ message: "Approver email:", default: "" });
-    const authority = options.authority || await input({ message: "Approval authority:", default: "" });
+    const approverName = options.approver || await input({ message: "Approver full name:", default: "" });
+    const approverRole = options.role || await input({ message: "Approver role/title (e.g., 'CISO', 'CTO'):", default: "" });
+    const approverEmail = options.email || await input({ message: "Approver email (optional):", default: "" });
+    const authority = options.authority || await input({ message: "Approval authority (e.g., 'AI Ethics Board', 'Security Committee'):", default: "" });
     const decision = (options.decision || await select({
         message: "Decision:",
         choices: [
@@ -132,9 +281,9 @@ export const governanceCommand = new Command("governance")
         ],
     }));
     const validFrom = options.validFrom || new Date().toISOString().split("T")[0];
-    const validUntil = options.validUntil || await input({ message: "Valid until (YYYY-MM-DD, or blank for indefinite):", default: "" });
-    const conditionsStr = options.conditions || await input({ message: "Conditions (comma-separated):", default: "" });
-    const rationale = options.rationale || await input({ message: "Rationale:", default: "" });
+    const validUntil = options.validUntil || await input({ message: "Valid until YYYY-MM-DD (or press Enter for indefinite):", default: "" });
+    const conditionsStr = options.conditions || await input({ message: "Conditions (comma-separated, or press Enter to skip):", default: "" });
+    const rationale = options.rationale || await input({ message: "Rationale (why was this decision made?):", default: "" });
     const updated = setGovernanceApproval(root, record.id, {
         approver_name: approverName,
         approver_role: approverRole,
@@ -182,7 +331,7 @@ export const governanceCommand = new Command("governance")
         console.error(`  Error: Governance record "${id}" not found.`);
         process.exit(1);
     }
-    const title = options.title || await input({ message: "Evidence title:", default: "" });
+    const title = options.title || await input({ message: "Evidence title (e.g., 'DPIA Report Q4 2026'):", default: "" });
     const sourceSystem = (options.source || await select({
         message: "Source system:",
         choices: [
@@ -198,7 +347,7 @@ export const governanceCommand = new Command("governance")
             { name: "Other", value: "other" },
         ],
     }));
-    const reference = options.reference || await input({ message: "Reference (ticket ID, URL, doc name):", default: "" });
+    const reference = options.reference || await input({ message: "Reference (ticket ID, URL, or document path):", default: "" });
     const evidenceType = await select({
         message: "Evidence type:",
         choices: [
@@ -214,7 +363,7 @@ export const governanceCommand = new Command("governance")
             { name: "Other", value: "other" },
         ],
     });
-    const locationDesc = await input({ message: "Location description:", default: "" });
+    const locationDesc = await input({ message: "Location description (where to find it, optional):", default: "" });
     const evidence = createEvidenceRef({
         type: evidenceType,
         title,
@@ -247,12 +396,13 @@ export const governanceCommand = new Command("governance")
 }))
     .addCommand(new Command("list")
     .description("List all governance records")
-    .action(() => {
+    .action(async () => {
     const root = ensureGESInitialized();
     const records = loadGovernanceRecords(root);
     if (records.length === 0) {
         info("No governance records found.");
         console.log(`  ${DIM("Create one with:")} ${GREEN("ges governance add")}\n`);
+        await showGovernanceNextAction(root, records);
         return;
     }
     blank();
@@ -262,11 +412,12 @@ export const governanceCommand = new Command("governance")
         printRecordSummary(r);
         console.log();
     });
+    await showGovernanceNextAction(root, records);
 }))
     .addCommand(new Command("show")
     .description("Show full provenance chain for a governance record")
     .argument("<id>", "Record ID or system name")
-    .action((id) => {
+    .action(async (id) => {
     const root = ensureGESInitialized();
     const record = findGovernanceRecord(root, id);
     if (!record) {
@@ -409,11 +560,12 @@ export const governanceCommand = new Command("governance")
     }
     console.log(`\n  Created: ${record.created_at} by ${record.created_by}`);
     console.log(`  Updated: ${record.updated_at} by ${record.updated_by} (v${record.record_version})\n`);
+    await showGovernanceNextAction(root, [record], record.id);
 }))
     .addCommand(new Command("verify")
     .description("Verify the provenance chain completeness of a governance record")
     .argument("<id>", "Record ID or system name")
-    .action((id) => {
+    .action(async (id) => {
     const root = ensureGESInitialized();
     const record = findGovernanceRecord(root, id);
     if (!record) {
@@ -458,6 +610,7 @@ export const governanceCommand = new Command("governance")
         result.warnings.forEach(w => console.log(`    ${YELLOW("△")} ${w}`));
     }
     console.log();
+    await showGovernanceNextAction(root, [record], record.id);
 }))
     .addCommand(new Command("delete")
     .description("Delete a governance record")
@@ -507,12 +660,12 @@ export const governanceCommand = new Command("governance")
         console.error(`  Error: Governance record "${id}" not found.`);
         process.exit(1);
     }
-    const assessor = options.assessor || await input({ message: "Assessor name:", default: "" });
-    const methodology = options.methodology || await input({ message: "Methodology:", default: "" });
-    const score = options.score || await input({ message: "Risk score:", default: "" });
-    const residual = options.residual || await input({ message: "Residual risk level:", default: "" });
-    const risksStr = await input({ message: "Identified risks (comma-separated):", default: "" });
-    const mitigationsStr = await input({ message: "Mitigation measures (comma-separated):", default: "" });
+    const assessor = options.assessor || await input({ message: "Risk assessor name:", default: "" });
+    const methodology = options.methodology || await input({ message: "Methodology (e.g., 'NIST RMF', 'ISO 27005'):", default: "" });
+    const score = options.score || await input({ message: "Risk score (e.g., '7.5/10', 'High'):", default: "" });
+    const residual = options.residual || await input({ message: "Residual risk level (low/medium/high):", default: "" });
+    const risksStr = await input({ message: "Identified risks (comma-separated, or Enter to skip):", default: "" });
+    const mitigationsStr = await input({ message: "Mitigation measures (comma-separated, or Enter to skip):", default: "" });
     const updated = setGovernanceRiskAssessment(root, record.id, {
         id: `risk-${Date.now()}`,
         assessor,
@@ -552,11 +705,11 @@ export const governanceCommand = new Command("governance")
         console.error(`  Error: Governance record "${id}" not found.`);
         process.exit(1);
     }
-    const policyId = options.policyId || await input({ message: "Policy ID:", default: "" });
-    const policyName = options.policyName || await input({ message: "Policy name:", default: "" });
+    const policyId = options.policyId || await input({ message: "Policy ID (e.g., 'POL-SEC-001'):", default: "" });
+    const policyName = options.policyName || await input({ message: "Policy name (e.g., 'Information Security Policy'):", default: "" });
     const version = options.pv || await input({ message: "Policy version:", default: "1.0" });
-    const standard = options.standard || await input({ message: "Standard:", default: "" });
-    const clausesStr = await input({ message: "Applicable clauses (comma-separated):", default: "" });
+    const standard = options.standard || await input({ message: "Standard (e.g., 'GDPR', 'ISO 27001'):", default: "" });
+    const clausesStr = await input({ message: "Applicable clauses (comma-separated, or Enter to skip):", default: "" });
     const updated = setGovernancePolicyBasis(root, record.id, {
         policy_id: policyId,
         policy_name: policyName,
@@ -633,11 +786,11 @@ export const governanceCommand = new Command("governance")
         console.error(`  Error: Governance record "${id}" not found.`);
         process.exit(1);
     }
-    const categoriesStr = options.categories || await input({ message: "Personal data categories (comma-separated):", default: "" });
-    const purposesStr = options.purposes || await input({ message: "Processing purposes (comma-separated):", default: "" });
-    const subjectsStr = await input({ message: "Data subjects (comma-separated):", default: "" });
-    const transfersStr = await input({ message: "Cross-border transfers (comma-separated):", default: "" });
-    const retention = options.retention || await input({ message: "Retention period:", default: "" });
+    const categoriesStr = options.categories || await input({ message: "Personal data categories (e.g., 'names,emails,IP addresses'):", default: "" });
+    const purposesStr = options.purposes || await input({ message: "Processing purposes (e.g., 'user auth,analytics'):", default: "" });
+    const subjectsStr = await input({ message: "Data subjects (e.g., 'customers,employees', or Enter to skip):", default: "" });
+    const transfersStr = await input({ message: "Cross-border transfers (e.g., 'US,EU', or Enter to skip):", default: "" });
+    const retention = options.retention || await input({ message: "Retention period (e.g., '2 years', '90 days'):", default: "" });
     const updated = setGovernanceDataInventory(root, record.id, {
         personal_data_categories: categoriesStr ? categoriesStr.split(",").map((s) => s.trim()).filter(Boolean) : [],
         processing_purposes: purposesStr ? purposesStr.split(",").map((s) => s.trim()).filter(Boolean) : [],
@@ -669,11 +822,11 @@ export const governanceCommand = new Command("governance")
         console.error(`  Error: Governance record "${id}" not found.`);
         process.exit(1);
     }
-    const committeeName = options.committee || await input({ message: "Committee name:", default: "" });
-    const meetingRef = options.meetingRef || await input({ message: "Meeting reference:", default: "" });
+    const committeeName = options.committee || await input({ message: "Committee name (e.g., 'AI Ethics Board'):", default: "" });
+    const meetingRef = options.meetingRef || await input({ message: "Meeting reference (e.g., 'MIN-2026-001'):", default: "" });
     const meetingDate = options.meetingDate || await input({ message: "Meeting date (YYYY-MM-DD):", default: "" });
-    const attendeesStr = await input({ message: "Attendees (comma-separated):", default: "" });
-    const summary = await input({ message: "Decision summary:", default: "" });
+    const attendeesStr = await input({ message: "Attendees (comma-separated names, or Enter to skip):", default: "" });
+    const summary = await input({ message: "Decision summary (what was decided):", default: "" });
     const updated = setGovernanceCommittee(root, record.id, {
         committee_name: committeeName,
         meeting_date: meetingDate,
@@ -707,9 +860,9 @@ export const governanceCommand = new Command("governance")
         console.error(`  Error: Governance record "${id}" not found.`);
         process.exit(1);
     }
-    const frameworksStr = options.frameworks || await input({ message: "Frameworks (comma-separated):", default: "" });
-    const controlsStr = options.controls || await input({ message: "Controls satisfied (comma-separated):", default: "" });
-    const packsStr = await input({ message: "Control pack IDs (comma-separated):", default: "" });
+    const frameworksStr = options.frameworks || await input({ message: "Frameworks (e.g., 'GDPR,OWASP'):", default: "" });
+    const controlsStr = options.controls || await input({ message: "Controls satisfied (e.g., 'GDPR-ART32-002', or Enter to skip):", default: "" });
+    const packsStr = await input({ message: "Control pack IDs (comma-separated, or Enter to skip):", default: "" });
     const updated = setGovernanceComplianceLinks(root, record.id, {
         frameworks: frameworksStr ? frameworksStr.split(",").map((s) => s.trim()).filter(Boolean) : [],
         controls_satisfied: controlsStr ? controlsStr.split(",").map((s) => s.trim()).filter(Boolean) : [],

package/dist/commands/hooks.js

@@ -2,8 +2,52 @@ import { Command } from "commander";
 import { ensureGESInitialized } from "../utils/project.js";
 import { installHooks, uninstallHooks } from "@greenarmor/ges-git-hooks";
 import { recordActivity } from "@greenarmor/ges-core";
+import { banner, blank, DIM, YELLOW } from "../utils/ui.js";
+import { select } from "../utils/prompts.js";
+import * as fs from "node:fs";
+import * as path from "node:path";
 export const hooksCommand = new Command("hooks")
     .description("Manage GESF git hooks (pre-commit compliance enforcement)")
+    .action(async () => {
+    if (!process.stdin.isTTY || !process.stdout.isTTY) {
+        hooksCommand.outputHelp();
+        return;
+    }
+    banner("Git Hooks", "Pre-commit compliance enforcement");
+    let root;
+    try {
+        root = ensureGESInitialized();
+    }
+    catch {
+        const { error } = await import("../utils/ui.js");
+        error("GESF is not initialized.", "Run `ges init` first.");
+        blank();
+        return;
+    }
+    const hookPath = path.join(root, ".git", "hooks", "pre-commit");
+    const isInstalled = fs.existsSync(hookPath);
+    const action = await select({
+        message: "What would you like to do?",
+        choices: [
+            ...(isInstalled
+                ? [{ name: `Uninstall pre-commit hook ${DIM("— remove compliance gate")}`, value: "uninstall" }]
+                : [{ name: `Install pre-commit hook ${DIM("— blocks commits with critical findings")}`, value: "install" }]),
+            { name: `${YELLOW("Exit")} ${DIM("— return to terminal")}`, value: "exit" },
+        ],
+    });
+    if (action === "exit") {
+        blank();
+        return;
+    }
+    blank();
+    const { execSync } = await import("node:child_process");
+    try {
+        execSync(`ges hooks ${action}`, { stdio: "inherit" });
+    }
+    catch {
+        process.exit(1);
+    }
+})
     .addCommand(new Command("install")
     .description("Install the pre-commit hook that runs ges audit before each commit")
     .action(async () => {

package/dist/commands/mcp.js

@@ -2,8 +2,37 @@ import { Command } from "commander";
 import * as readline from "node:readline";
 import { handleRequest } from "@greenarmor/ges-mcp-server";
 import { mcpSetupCommand } from "./mcp-setup.js";
+import { banner, blank, DIM, YELLOW } from "../utils/ui.js";
+import { select } from "../utils/prompts.js";
 export const mcpCommand = new Command("mcp")
     .description("MCP AI Compliance Assistant")
+    .action(async () => {
+    if (!process.stdin.isTTY || !process.stdout.isTTY) {
+        mcpCommand.outputHelp();
+        return;
+    }
+    banner("GESF MCP Server", "AI Compliance Assistant Integration");
+    const action = await select({
+        message: "What would you like to do?",
+        choices: [
+            { name: `Setup MCP clients ${DIM("— configure Claude, Cursor, VS Code, etc.")}`, value: "setup" },
+            { name: `Start MCP server ${DIM("— JSON-RPC over stdio (for advanced use)")}`, value: "start" },
+            { name: `${YELLOW("Exit")} ${DIM("— return to terminal")}`, value: "exit" },
+        ],
+    });
+    if (action === "exit") {
+        blank();
+        return;
+    }
+    blank();
+    const { execSync } = await import("node:child_process");
+    try {
+        execSync(`ges mcp ${action}`, { stdio: "inherit" });
+    }
+    catch {
+        process.exit(1);
+    }
+})
     .addCommand(new Command("start")
     .description("Start the GESF MCP server (JSON-RPC over stdio)")
     .action(() => {

package/dist/commands/policy.js

@@ -3,11 +3,92 @@ import { getAllPacks, listPackIds } from "@greenarmor/ges-policy-engine";
 import { ensureGESInitialized, writeFileSync } from "../utils/project.js";
 import { addFrameworkToConfig, removeFrameworkFromConfig, recordActivity } from "@greenarmor/ges-core";
 import { showNextStepsMenu } from "../utils/next-steps.js";
-import { banner, blank, success, error, BOLD, CYAN, DIM, GRAY } from "../utils/ui.js";
+import { banner, blank, success, error, BOLD, CYAN, DIM, GRAY, YELLOW } from "../utils/ui.js";
+import { select } from "../utils/prompts.js";
 import * as fs from "node:fs";
 import * as path from "node:path";
 const policyCmd = new Command("policy")
-    .description("Manage policy packs");
+    .description("Manage policy packs")
+    .action(async () => {
+    if (!process.stdin.isTTY || !process.stdout.isTTY) {
+        policyCmd.outputHelp();
+        return;
+    }
+    banner("Policy Packs", "Compliance control management");
+    let root;
+    try {
+        root = ensureGESInitialized();
+    }
+    catch {
+        error("GESF is not initialized.", "Run `ges init` first.");
+        blank();
+        return;
+    }
+    const installedPacks = fs.existsSync(path.join(root, "controls"))
+        ? fs.readdirSync(path.join(root, "controls")).filter(d => {
+            try {
+                return fs.statSync(path.join(root, "controls", d)).isDirectory();
+            }
+            catch {
+                return false;
+            }
+        })
+        : [];
+    if (installedPacks.length > 0) {
+        console.log(`  ${BOLD("Installed Packs")} ${GRAY(`(${installedPacks.length})`)}`);
+        installedPacks.forEach(p => console.log(`    ${GRAY("•")} ${p}`));
+        console.log("");
+    }
+    const action = await select({
+        message: "What would you like to do?",
+        choices: [
+            { name: `List all available packs ${DIM("— see what can be installed")}`, value: "list" },
+            { name: `Install a pack ${DIM("— add compliance controls")}`, value: "install" },
+            ...(installedPacks.length > 0 ? [
+                { name: `Remove a pack ${DIM(`(${installedPacks.length} installed)`)}`, value: "remove" },
+            ] : []),
+            { name: `${YELLOW("Exit")} ${DIM("— return to terminal")}`, value: "exit" },
+        ],
+    });
+    if (action === "exit") {
+        blank();
+        return;
+    }
+    let cmd = "ges policy";
+    if (action === "list") {
+        cmd += " list";
+    }
+    else if (action === "install") {
+        const packs = getAllPacks();
+        const packChoice = await select({
+            message: "Select a pack to install:",
+            choices: [
+                ...packs.map(p => ({
+                    name: `${p.id.padEnd(16)} ${DIM(p.name)} ${GRAY(`(${p.controls.length} controls)`)}`,
+                    value: p.id,
+                })),
+            ],
+        });
+        cmd += ` install ${packChoice}`;
+    }
+    else if (action === "remove") {
+        const packChoice = await select({
+            message: "Select a pack to remove:",
+            choices: [
+                ...installedPacks.map(p => ({ name: p, value: p })),
+            ],
+        });
+        cmd += ` remove ${packChoice}`;
+    }
+    blank();
+    const { execSync } = await import("node:child_process");
+    try {
+        execSync(cmd, { stdio: "inherit" });
+    }
+    catch {
+        process.exit(1);
+    }
+});
 policyCmd
     .command("list")
     .description("List available policy packs")

package/package.json

@@ -3,19 +3,19 @@
     "ges": "./dist/cli.js"
   },
   "dependencies": {
-    "@greenarmor/ges-audit-engine": "1.5.2",
-    "@greenarmor/ges-cicd-generator": "1.5.2",
-    "@greenarmor/ges-compliance-engine": "1.5.2",
-    "@greenarmor/ges-core": "1.5.2",
-    "@greenarmor/ges-doc-generator": "1.5.2",
-    "@greenarmor/ges-git-hooks": "1.5.2",
-    "@greenarmor/ges-mcp-server": "1.5.2",
-    "@greenarmor/ges-policy-engine": "1.5.2",
-    "@greenarmor/ges-report-generator": "1.5.2",
-    "@greenarmor/ges-rules-engine": "1.5.2",
-    "@greenarmor/ges-scanner-integration": "1.5.2",
-    "@greenarmor/ges-scoring-engine": "1.5.2",
-    "@greenarmor/ges-web-dashboard": "1.5.2",
+    "@greenarmor/ges-audit-engine": "1.5.4",
+    "@greenarmor/ges-cicd-generator": "1.5.4",
+    "@greenarmor/ges-compliance-engine": "1.5.4",
+    "@greenarmor/ges-core": "1.5.4",
+    "@greenarmor/ges-doc-generator": "1.5.4",
+    "@greenarmor/ges-git-hooks": "1.5.4",
+    "@greenarmor/ges-mcp-server": "1.5.4",
+    "@greenarmor/ges-policy-engine": "1.5.4",
+    "@greenarmor/ges-report-generator": "1.5.4",
+    "@greenarmor/ges-rules-engine": "1.5.4",
+    "@greenarmor/ges-scanner-integration": "1.5.4",
+    "@greenarmor/ges-scoring-engine": "1.5.4",
+    "@greenarmor/ges-web-dashboard": "1.5.4",
     "chalk": "^5.6.2",
     "commander": "^13.0.0"
   },
@@ -60,7 +60,7 @@
   },
   "type": "module",
   "types": "./dist/index.d.ts",
-  "version": "1.5.2",
+  "version": "1.5.4",
   "scripts": {
     "build": "tsc",
     "clean": "rm -rf dist tsconfig.tsbuildinfo",