@lhi/tdd-audit 1.1.1 → 1.1.2

package/README.md

@@ -34,6 +34,7 @@ node index.js
 | `--claude` | Use `.claude/` instead of `.agents/` as the skill directory |
 | `--with-hooks` | Install a pre-commit hook that blocks commits if security tests fail |
 | `--skip-scan` | Skip the automatic vulnerability scan on install |
+| `--scan-only` | Run the vulnerability scan without installing anything |
 
 **Install to a Claude Code project with pre-commit protection:**
 ```bash

package/index.js

@@ -9,13 +9,16 @@ const isLocal = args.includes('--local');
 const isClaude = args.includes('--claude');
 const withHooks = args.includes('--with-hooks');
 const skipScan = args.includes('--skip-scan');
+const scanOnly = args.includes('--scan-only');
 
 const agentBaseDir = isLocal ? process.cwd() : os.homedir();
 const agentDirName = isClaude ? '.claude' : '.agents';
 const projectDir = process.cwd();
 
 const targetSkillDir = path.join(agentBaseDir, agentDirName, 'skills', 'tdd-remediation');
-const targetWorkflowDir = path.join(agentBaseDir, agentDirName, 'workflows');
+const targetWorkflowDir = isClaude
+  ? path.join(agentBaseDir, agentDirName, 'commands')
+  : path.join(agentBaseDir, agentDirName, 'workflows');
 
 // ─── 1. Framework Detection ──────────────────────────────────────────────────
 
@@ -127,7 +130,17 @@ function printFindings(findings) {
   console.log('\n   Run /tdd-audit in your agent to remediate.\n');
 }
 
-// ─── 4. Install Skill Files ───────────────────────────────────────────────────
+// ─── 4. Scan-only early exit ──────────────────────────────────────────────────
+
+if (scanOnly) {
+  process.stdout.write('\n🔍 Scanning for vulnerability patterns...');
+  const findings = quickScan();
+  process.stdout.write('\n');
+  printFindings(findings);
+  process.exit(0);
+}
+
+// ─── 5. Install Skill Files ───────────────────────────────────────────────────
 
 console.log(`\nInstalling TDD Remediation Skill (${isLocal ? 'local' : 'global'}, framework: ${framework}, test dir: ${testBaseDir}/)...\n`);
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lhi/tdd-audit",
-  "version": "1.1.1",
+  "version": "1.1.2",
   "description": "Anti-Gravity Skill for TDD Remediation. Patches security vulnerabilities using a Red-Green-Refactor protocol with automated exploit tests.",
   "main": "index.js",
   "bin": {