@shieldly/cli 1.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Shieldly
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,81 @@
+# @shieldly/cli
+
+**AI-Powered Security Analysis for AWS — official CLI.**
+
+Analyze AWS IAM policies and CloudFormation templates for security risks from
+any terminal, shell script, or CI/CD pipeline. Powered by
+[Shieldly](https://www.shieldly.io).
+
+```bash
+npm install -g @shieldly/cli
+```
+
+## Quick start
+
+```bash
+# Authenticate (get a key at https://www.shieldly.io/app/api)
+export SHIELDLY_API_KEY=sk_live_...
+
+# Analyze an IAM policy
+shieldly analyze-iam policy.json
+
+# Analyze a CloudFormation template
+shieldly analyze-cf template.yaml
+
+# Manage API keys
+shieldly api-keys list
+```
+
+Without an API key, `analyze-iam` runs in demo mode (5 lifetime analyses, IAM only).
+`analyze-cf` and `api-keys` require a key.
+
+## Commands
+
+| Command | Description |
+| --- | --- |
+| `shieldly analyze-iam <policy-file>` | Analyze an IAM policy for security issues |
+| `shieldly analyze-cf <template-file>` | Analyze a CloudFormation template |
+| `shieldly api-keys list\|create\|revoke` | Manage API keys |
+| `shieldly completion bash\|zsh\|install` | Shell completion |
+
+## Global options
+
+| Option | Description |
+| --- | --- |
+| `--api-key <key>` | API key (or set `SHIELDLY_API_KEY`) |
+| `--version` | Show version |
+| `-h`, `--help` | Show help |
+
+## Use in CI
+
+```yaml
+- name: AI-Powered IAM Analysis
+  run: |
+    npm install -g @shieldly/cli
+    shieldly analyze-iam ./iam-policy.json
+  env:
+    SHIELDLY_API_KEY: ${{ secrets.SHIELDLY_API_KEY }}
+```
+
+For pull-request gating with PR comments, use the
+[Shieldly GitHub Action](https://github.com/shieldly-io/action) instead.
+
+## Privacy
+
+Shieldly does **not** log your policy input. Cache keys are one-way SHA-256
+hashes of the input.
+
+## Links
+
+- Web app & demo: https://www.shieldly.io
+- API reference: https://www.shieldly.io/docs/api
+- Issues: https://github.com/shieldly-io/cli/issues
+
+## License
+
+MIT © Shieldly
+
+---
+
+*Amazon Web Services (AWS) is a trademark of Amazon.com, Inc. Shieldly is not
+affiliated with, endorsed by, or sponsored by Amazon Web Services.*

package/dist/cli.cjs

@@ -0,0 +1,249 @@
+#!/usr/bin/env node
+var J=Object.create;var O=Object.defineProperty;var B=Object.getOwnPropertyDescriptor;var q=Object.getOwnPropertyNames;var V=Object.getPrototypeOf,Z=Object.prototype.hasOwnProperty;var Q=(e,o,t,n)=>{if(o&&typeof o=="object"||typeof o=="function")for(let s of q(o))!Z.call(e,s)&&s!==t&&O(e,s,{get:()=>o[s],enumerable:!(n=B(o,s))||n.enumerable});return e};var C=(e,o,t)=>(t=e!=null?J(V(e)):{},Q(o||!e||!e.__esModule?O(t,"default",{value:e,enumerable:!0}):t,e));var $=require("node:fs"),j=require("node:os"),D=require("node:path"),b="Shieldly-CLI/1.0.0",z=(0,D.join)((0,j.homedir)(),".shieldly","config.json"),X="https://api.shieldly.io",ee="https://www.shieldly.io";function g(e){if(e)return e;if(process.env.SHIELDLY_API_KEY)return process.env.SHIELDLY_API_KEY;if((0,$.existsSync)(z))try{let o=JSON.parse((0,$.readFileSync)(z,"utf8"));if(o.apiKey)return o.apiKey}catch{}return null}function _(){return(process.env.SHIELDLY_API_URL||X).replace(/\/$/,"")}function oe(){return(process.env.SHIELDLY_WEB_URL||ee).replace(/\/$/,"")}async function R(e,o){let t=oe(),n=await fetch(`${t}${e}`,{method:"POST",headers:{"Content-Type":"application/json","User-Agent":b},body:JSON.stringify(o)});if(!n.ok){let s=await n.json().catch(()=>({}));throw new Error(s.error||`API error ${n.status}`)}return n.json()}async function I(e,o,t){let n=_(),s=await fetch(`${n}${e}`,{method:"POST",headers:{"Content-Type":"application/json","User-Agent":b,Authorization:`Bearer ${t}`},body:JSON.stringify(o)});if(s.status===202){let r=await s.json().catch(()=>({}));if(r.jobId)return se(r.jobId,t)}if(!s.ok){let r=await s.json().catch(()=>({}));throw new Error(r.error||`API error ${s.status}`)}return s.json()}async function se(e,o){let t=[2e3,3e3,5e3],n=Date.now(),s=0;for(let r=0;r<180;r++){let i=t[Math.min(r,t.length-1)];await new Promise(c=>setTimeout(c,i));let l=Math.round((Date.now()-n)/1e3);process.stderr.write(`\rAI-Powered analysis in progress\u2026 (${l}s)`);let a;try{a=await v(`/v1/jobs/${encodeURIComponent(e)}`,o),s=0}catch(c){if(++s>=3)throw process.stderr.write(`
+`),c;continue}if(a.status==="complete")return process.stderr.write(`
+`),{...a.result,unitInfo:a.unitInfo};if(a.status==="failed")throw process.stderr.write(`
+`),new Error(a.error||"Analysis failed")}throw process.stderr.write(`
+`),new Error("Analysis timed out after polling")}async function v(e,o){let t=_(),n=await fetch(`${t}${e}`,{headers:{Authorization:`Bearer ${o}`,"User-Agent":b}});if(!n.ok){let s=await n.json().catch(()=>({}));throw new Error(s.error||`API error ${n.status}`)}return n.json()}async function M(e,o,t){let n=_(),s=await fetch(`${n}${e}`,{method:"DELETE",headers:{"Content-Type":"application/json","User-Agent":b,Authorization:`Bearer ${t}`},body:JSON.stringify(o)});if(!s.ok){let r=await s.json().catch(()=>({}));throw new Error(r.error||`API error ${s.status}`)}return s.json()}function w(e){return(0,$.existsSync)(e)||(console.error(`Error: File not found: ${e}`),process.exit(1)),(0,$.readFileSync)(e,"utf8")}var K={CRITICAL:"\x1B[31m",HIGH:"\x1B[33m",MEDIUM:"\x1B[36m",LOW:"\x1B[32m",INFO:"\x1B[90m"},m="\x1B[0m",k="\x1B[1m",L="\x1B[2m",Y="\x1B[36m";function x(e,o){if(o==="json"){console.log(JSON.stringify(e,null,2));return}let{score:t,riskLevel:n,findings:s=[],cached:r}=e;if(console.log(""),console.log(`${k}AI-Powered Security Analysis \u2014 Shieldly${m}`),console.log(`${L}${"\u2500".repeat(50)}${m}`),console.log(`  ${k}Security Score:${m}  ${te(t)}${t}/100${m}`),console.log(`  ${k}Risk Level:${m}  ${ne(n)}${n}${m}`),r&&console.log(`  ${L}(cached result)${m}`),console.log(""),s.length===0)console.log(`  ${Y}[PASS] No findings${m}`);else{console.log(`${k}Findings (${s.length}):${m}`);for(let i of s){let l=K[(i.severity||"").toUpperCase()]||"";console.log(`
+  ${l}[${i.severity}]${m} ${k}${i.title}${m}`),i.description&&console.log(`         ${L}${i.description}${m}`),i.remediation&&console.log(`  ${Y}Fix:${m}  ${i.remediation}`)}}console.log("")}function te(e){return e>=80?"\x1B[32m":e>=50?"\x1B[33m":"\x1B[31m"}function ne(e){let o=(e||"").toUpperCase();return K[o]||""}var le=`
+Usage: shieldly analyze-cf <template-file> [options]
+
+Analyze a CloudFormation template for security issues using AI.
+
+Arguments:
+  template-file     Path to a JSON or YAML CloudFormation template
+
+Options:
+  --format <fmt>    Output format: table | json  (default: table)
+  --api-key <key>   API key (or set SHIELDLY_API_KEY env var)
+  -h, --help        Show this help
+
+Examples:
+  shieldly analyze-cf template.json
+  shieldly analyze-cf template.yaml --format json
+`;async function H(e){if(e.includes("-h")||e.includes("--help")||e.length===0){console.log(le);return}let o=e.find(l=>!l.startsWith("--"));o||(console.error("Error: template-file argument is required"),process.exit(1));let t=e.indexOf("--format"),n=t!==-1?e[t+1]:"table",s=e.indexOf("--api-key"),r=g(s!==-1?e[s+1]:null);r||(console.error(`Error: API key required. Set SHIELDLY_API_KEY env var or use --api-key.
+Get your free key at https://www.shieldly.io/app/api`),process.exit(1));let i=w(o);n!=="json"&&console.log(`Analyzing ${o}\u2026`);try{let l=await I("/v1/analyze/cf",{template:i},r);x(l,n);let a=(l.findings||[]).filter(y=>y.severity==="CRITICAL").length,c=(l.findings||[]).filter(y=>y.severity==="HIGH").length;(a>0||c>0)&&process.exit(1)}catch(l){console.error(`Error: ${l.message}`),process.exit(1)}}var re=`
+Usage: shieldly analyze-iam <policy-file> [options]
+
+Analyze an AWS IAM policy for security issues using AI.
+
+Arguments:
+  policy-file       Path to a JSON file containing the IAM policy
+
+Options:
+  --type <type>     identity (default) | cross_account
+                    Any IAM or resource policy JSON works as 'identity'.
+                    'cross_account' expects {"identityPolicy":\u2026,"trustPolicy":\u2026}.
+  --format <fmt>    Output format: table | json  (default: table)
+  --api-key <key>   API key (or set SHIELDLY_API_KEY env var)
+  -h, --help        Show this help
+
+Examples:
+  shieldly analyze-iam policy.json
+  shieldly analyze-iam policy.json --type resource --format json
+  SHIELDLY_API_KEY=sk_... shieldly analyze-iam policy.json
+`;async function F(e){if(e.includes("-h")||e.includes("--help")||e.length===0){console.log(re);return}let o=e.find(y=>!y.startsWith("--"));o||(console.error("Error: policy-file argument is required"),process.exit(1));let t=e.indexOf("--type"),n=t!==-1?e[t+1]:"identity",s=e.indexOf("--format"),r=s!==-1?e[s+1]:"table",i=e.indexOf("--api-key"),l=g(i!==-1?e[i+1]:null),a=w(o),c;try{c=JSON.parse(a)}catch{console.error("Error: policy-file must be valid JSON"),process.exit(1)}r!=="json"&&(console.log(`Analyzing ${o} (type: ${n})\u2026`),l||console.log("Demo mode (5 lifetime analyses). Get a free key at https://www.shieldly.io/app/api"));try{let y=l?await I("/v1/analyze/iam",{policy:c,policyType:n},l):await R("/api/demo/analyze-iam",{policy:c,policyType:n});x(y,r);let E=(y.findings||[]).filter(S=>S.severity==="CRITICAL").length,d=(y.findings||[]).filter(S=>S.severity==="HIGH").length;(E>0||d>0)&&process.exit(1)}catch(y){console.error(`Error: ${y.message}`),process.exit(1)}}var U=`
+Usage: shieldly api-keys <subcommand> [options]
+
+Manage Shieldly API keys.
+
+Subcommands:
+  list                        List all your API keys
+  create --label <label>      Create a new API key
+         --scopes <scopes>    Comma-separated scopes: iam,cf,cost (default: iam,cf)
+  revoke <key-id>             Revoke an API key by ID
+
+Options:
+  --api-key <key>   API key (or set SHIELDLY_API_KEY env var)
+  --format json     Output as JSON
+  -h, --help        Show this help
+
+Examples:
+  shieldly api-keys list
+  shieldly api-keys create --label "CI/CD Key" --scopes iam,cf
+  shieldly api-keys revoke key_abc123
+`,u="\x1B[1m",N="\x1B[2m",T="\x1B[36m",h="\x1B[0m";function ie(e){return e?new Date(e).toLocaleDateString("en-US",{month:"short",day:"numeric",year:"numeric"}):"\u2014"}async function G(e){if(e.includes("-h")||e.includes("--help")||e.length===0){console.log(U);return}let o=e[0],t=e.slice(1),n=t.indexOf("--api-key"),s=g(n!==-1?t[n+1]:null),r=t.indexOf("--format"),i=r!==-1?t[r+1]:"table";if(s||(console.error(`Error: API key required. Set SHIELDLY_API_KEY env var or use --api-key.
+Get your free key at https://www.shieldly.io/app/api`),process.exit(1)),o==="list"){try{let a=(await v("/v1/api-keys",s)).keys||[];if(i==="json"){console.log(JSON.stringify(a,null,2));return}if(a.length===0){console.log("No API keys found. Create one at https://www.shieldly.io/app/api");return}console.log(""),console.log(`${u}API Keys (${a.length}):${h}`),console.log(`${N}${"\u2500".repeat(60)}${h}`);for(let c of a){let y=(c.scopes||[]).join(", ")||"all";console.log(`  ${T}${c.keyId}${h}`),console.log(`    ${u}Label:${h}  ${c.label||"(unlabeled)"}`),console.log(`    ${u}Scopes:${h} ${y}`),console.log(`    ${u}Uses:${h}   ${c.usageCount||0}`),console.log(`    ${u}Created:${h} ${ie(c.createdAt)}`),console.log("")}}catch(l){console.error(`Error: ${l.message}`),process.exit(1)}return}if(o==="create"){let l=t.indexOf("--label"),a=l!==-1?t[l+1]:"CLI Key",c=t.indexOf("--scopes"),E=(c!==-1?t[c+1]:"iam,cf").split(",").map(d=>d.trim()).filter(Boolean);try{let d=await I("/v1/api-keys",{label:a,scopes:E},s);if(i==="json"){console.log(JSON.stringify(d,null,2));return}console.log(""),console.log(`${u}[OK] API key created${h}`),console.log(`  ${u}Key ID:${h} ${d.keyId}`),console.log(`  ${u}API Key:${h} ${T}${d.apiKey}${h}`),console.log(`  ${N}Store this key securely \u2014 it won't be shown again.${h}`),console.log("")}catch(d){console.error(`Error: ${d.message}`),process.exit(1)}return}if(o==="revoke"){let l=t.find(a=>!a.startsWith("--")&&a!=="revoke");l||(console.error(`Error: key-id argument is required
+  Usage: shieldly api-keys revoke <key-id>`),process.exit(1));try{if(await M("/v1/api-keys",{keyId:l},s),i==="json"){console.log(JSON.stringify({success:!0,keyId:l}));return}console.log(`[OK] API key ${l} revoked`)}catch(a){console.error(`Error: ${a.message}`),process.exit(1)}return}console.error(`Unknown subcommand: ${o}`),console.log(U),process.exit(1)}var ae=`
+_shieldly() {
+  local cur prev words cword
+  _init_completion || return
+
+  local commands="analyze-iam analyze-cf api-keys completion"
+  local global_opts="--api-key --help -h --version -v"
+
+  case $prev in
+    analyze-iam)
+      if [[ $cur == -* ]]; then
+        COMPREPLY=($(compgen -W "--type --format --api-key --help -h" -- "$cur"))
+      else
+        COMPREPLY=($(compgen -f -- "$cur"))
+      fi
+      return
+      ;;
+    analyze-cf)
+      if [[ $cur == -* ]]; then
+        COMPREPLY=($(compgen -W "--format --api-key --help -h" -- "$cur"))
+      else
+        COMPREPLY=($(compgen -f -- "$cur"))
+      fi
+      return
+      ;;
+    api-keys)
+      COMPREPLY=($(compgen -W "list create revoke" -- "$cur"))
+      return
+      ;;
+    completion)
+      COMPREPLY=($(compgen -W "bash zsh install" -- "$cur"))
+      return
+      ;;
+    --type)
+      COMPREPLY=($(compgen -W "identity resource trust s3 sqs kms sns cross_account" -- "$cur"))
+      return
+      ;;
+    --format)
+      COMPREPLY=($(compgen -W "table json" -- "$cur"))
+      return
+      ;;
+    --label)
+      return
+      ;;
+    --scopes)
+      COMPREPLY=($(compgen -W "iam cf cost" -- "$cur"))
+      return
+      ;;
+    --api-key)
+      return
+      ;;
+  esac
+
+  if [[ $cur == -* ]]; then
+    COMPREPLY=($(compgen -W "$global_opts" -- "$cur"))
+  elif [[ $cword -eq 1 ]]; then
+    COMPREPLY=($(compgen -W "$commands" -- "$cur"))
+  fi
+} &&
+  complete -F _shieldly shieldly
+`,ce=`
+#compdef shieldly
+
+_shieldly() {
+  local -a opts
+  local curcontext="$curcontext" state line ret=1
+
+  _arguments -C     '(-h --help)'{-h,--help}'[Show help]'     '(-v --version)'{-v,--version}'[Show version]'     '--api-key[API key]:api key'     '1: :->command'     '*: :->args'     && ret=0
+
+  case $state in
+    command)
+      local commands; commands=(
+        'analyze-iam:Analyze an IAM policy for security issues'
+        'analyze-cf:Analyze a CloudFormation template'
+        'api-keys:Manage API keys'
+        'completion:Generate shell completion script'
+      )
+      _describe 'command' commands && ret=0
+      ;;
+    args)
+      case $words[1] in
+        analyze-iam)
+          _arguments             '--type[Policy type]:type:(identity resource trust s3 sqs kms sns cross_account)'             '--format[Output format]:format:(table json)'             '--api-key[API key]:api key'             '(-h --help)'{-h,--help}'[Show help]'             '*:policy file:_files'             && ret=0
+          ;;
+        analyze-cf)
+          _arguments             '--format[Output format]:format:(table json)'             '--api-key[API key]:api key'             '(-h --help)'{-h,--help}'[Show help]'             '*:template file:_files'             && ret=0
+          ;;
+        api-keys)
+          _arguments             '--format[Output format]:format:(table json)'             '--api-key[API key]:api key'             '1: :->subcommand'             '*: :->args'             && ret=0
+          case $state in
+            subcommand)
+              local subcommands; subcommands=(
+                'list:List all API keys'
+                'create:Create a new API key'
+                'revoke:Revoke an API key'
+              )
+              _describe 'subcommand' subcommands && ret=0
+              ;;
+            args)
+              case $words[2] in
+                create)
+                  _arguments                     '--label[Key label]'                     '--scopes[Comma-separated scopes]:scopes:(iam cf cost)'                     && ret=0
+                  ;;
+                revoke)
+                  _arguments '*:key id' && ret=0
+                  ;;
+              esac
+              ;;
+          esac
+          ;;
+        completion)
+          _arguments             '1: :->shell'             && ret=0
+          case $state in
+            shell)
+              local shells; shells=(
+                'bash:Generate bash completion'
+                'zsh:Generate zsh completion'
+                'install:Install completion for current shell'
+              )
+              _describe 'shell' shells && ret=0
+              ;;
+          esac
+          ;;
+      esac
+      ;;
+  esac
+
+  return ret
+}
+
+_shieldly
+`,pe=`
+Usage: shieldly completion <shell>
+
+Generate shell completion scripts for the shieldly CLI.
+
+Shells:
+  bash       Generate bash completion
+  zsh        Generate zsh completion
+  install    Auto-detect shell and install completion
+
+Examples:
+  eval "$(shieldly completion bash)"       # Source bash completion
+  shieldly completion zsh > /usr/local/share/zsh/site-functions/_shieldly  # Install zsh completion
+  shieldly completion install                # Auto-detect and install
+`;async function W(e){if(!e.length||e.includes("-h")||e.includes("--help")){console.log(pe);return}let o=e[0];switch(o){case"bash":console.log(ae.trimStart());break;case"zsh":console.log(ce.trimStart());break;case"install":await ye();break;default:console.error(`Unsupported shell: ${o}`),console.log("Supported shells: bash, zsh"),process.exit(1)}}async function ye(){let e=process.env.SHELL||"",o=process.env.HOME||"";if(e.includes("zsh")){let t=`${o}/.zshrc`,n=`
+# shieldly CLI completion
+autoload -Uz compinit && compinit -C 2>/dev/null
+eval "$(shieldly completion zsh)" 2>/dev/null`;try{let{readFileSync:s,appendFileSync:r,existsSync:i}=await import("node:fs");if(i(t)&&s(t,"utf8").includes("shieldly completion")){console.log("shieldly completion already installed in ~/.zshrc");return}r(t,n),console.log("Installed shieldly completion in ~/.zshrc"),console.log("Run: source ~/.zshrc")}catch(s){console.error(`Failed to install: ${s.message}`),process.exit(1)}}else if(e.includes("bash")){let t=`${o}/.bashrc`,n=`
+# shieldly CLI completion
+source /dev/stdin <<< "$(shieldly completion bash)" 2>/dev/null`;try{let{readFileSync:s,appendFileSync:r,existsSync:i}=await import("node:fs");if(i(t)&&s(t,"utf8").includes("shieldly completion")){console.log("shieldly completion already installed in ~/.bashrc");return}r(t,n),console.log("Installed shieldly completion in ~/.bashrc"),console.log("Run: source ~/.bashrc")}catch(s){console.error(`Failed to install: ${s.message}`),process.exit(1)}}else console.error(`Unsupported shell: ${e}. Install manually:`),console.log('  eval "$(shieldly completion bash)"  # For bash'),console.log('  eval "$(shieldly completion zsh)"   # For zsh'),process.exit(1)}var f="\x1B[1m",A="\x1B[36m",P="\x1B[2m",p="\x1B[0m",me="1.0.0",he=`
+${f}shieldly${p} \u2014 AI-Powered Security Analysis for AWS
+
+${f}Usage:${p}
+  shieldly <command> [args] [options]
+
+${f}Commands:${p}
+  ${A}analyze-iam${p}  <policy-file>   Analyze an IAM policy for security issues
+  ${A}analyze-cf${p}   <template-file> Analyze a CloudFormation template
+  ${A}api-keys${p}     list|create|revoke  Manage API keys
+  ${A}completion${p}   bash|zsh|install  Generate shell completion
+
+${f}Global Options:${p}
+  --api-key <key>   API key (or set SHIELDLY_API_KEY env var)
+  --version         Show version
+  -h, --help        Show this help
+
+${f}Authentication:${p}
+  Set your API key via env var:   export SHIELDLY_API_KEY=sk_...
+  Get a free API key at:          ${A}https://www.shieldly.io/app/api${p}
+
+${f}Examples:${p}
+  ${P}# Analyze an IAM policy${p}
+  shieldly analyze-iam policy.json
+
+  ${P}# Analyze a CloudFormation template${p}
+  shieldly analyze-cf template.yaml
+
+  ${P}# List API keys${p}
+  shieldly api-keys list
+
+  ${P}# Use in CI${p}
+  SHIELDLY_API_KEY=\${{ secrets.SHIELDLY_API_KEY }} shieldly analyze-iam policy.json
+`;async function de(){let[,,e,...o]=process.argv;switch((!e||e==="-h"||e==="--help")&&(console.log(he),process.exit(0)),(e==="--version"||e==="-v")&&(console.log(me),process.exit(0)),e){case"analyze-iam":await F(o);break;case"analyze-cf":await H(o);break;case"api-keys":await G(o);break;case"completion":await W(o);break;default:console.error(`Unknown command: ${e}`),console.log(`Run ${f}shieldly --help${p} for usage`),process.exit(1)}}de().catch(e=>{console.error("Fatal error:",e.message),process.exit(1)});

package/package.json

@@ -0,0 +1,44 @@
+{
+  "name": "@shieldly/cli",
+  "version": "1.0.0",
+  "description": "AI-Powered Security Analysis for AWS — official CLI",
+  "license": "MIT",
+  "homepage": "https://www.shieldly.io",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/shieldly-io/cli.git"
+  },
+  "bugs": {
+    "url": "https://github.com/shieldly-io/cli/issues"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "type": "module",
+  "bin": {
+    "shieldly": "dist/cli.cjs"
+  },
+  "files": [
+    "dist/cli.cjs"
+  ],
+  "keywords": [
+    "aws",
+    "iam",
+    "security",
+    "cloudformation",
+    "ai",
+    "shieldly",
+    "cli"
+  ],
+  "engines": {
+    "node": ">=22.0.0"
+  },
+  "scripts": {
+    "build": "node build.js",
+    "build:dev": "node build.js --dev",
+    "prepublishOnly": "npm run build"
+  },
+  "devDependencies": {
+    "esbuild": "^0.25.0"
+  }
+}