@vaultcompass/vault-guard 1.1.0 → 1.1.2

package/dist/cli-entry.js

@@ -9,11 +9,8 @@ if (nodeMajor < 22) {
 }
 const program = (0, cli_1.buildCli)();
 // Parse arguments and execute command
-program.parseAsync().then(() => {
-    // Successful completion
-    process.exit(0);
-}).catch((error) => {
+program.parseAsync().catch((error) => {
     // Handle errors
     console.error(error);
-    process.exit(1);
+    process.exitCode = 1;
 });

package/dist/cli.js

@@ -52,6 +52,11 @@ function readCliVersion() {
     const raw = fs.readFileSync(pkgPath, 'utf-8');
     return JSON.parse(raw).version;
 }
+function setExitCode(exitCode) {
+    if (exitCode !== 0) {
+        process.exitCode = exitCode;
+    }
+}
 function buildCli() {
     const program = new commander_1.Command();
     program
@@ -64,8 +69,7 @@ function buildCli() {
         .description('Validate the nearest .vault-guard.json (structure + scanner load)')
         .action(async () => {
         const exitCode = await (0, config_1.configValidateCommand)(process.cwd());
-        if (exitCode !== 0)
-            process.exit(exitCode);
+        setExitCode(exitCode);
     });
     // Scan command
     program
@@ -77,9 +81,7 @@ function buildCli() {
         .action(async (path, options) => {
         const format = options.format ?? 'text';
         const exitCode = await (0, scan_1.scanCommand)(path, format, Boolean(options.staged));
-        if (exitCode !== 0) {
-            process.exit(exitCode);
-        }
+        setExitCode(exitCode);
     });
     // Install-hook command
     program
@@ -90,7 +92,8 @@ function buildCli() {
         const m = (options.manager ?? 'native').toLowerCase();
         if (!['native', 'husky', 'lefthook', 'precommit'].includes(m)) {
             console.error(`Unknown manager: ${options.manager}`);
-            process.exit(1);
+            process.exitCode = 1;
+            return;
         }
         await (0, install_hook_1.installHookCommand)(m);
     });
@@ -108,20 +111,16 @@ function buildCli() {
         .argument('[files...]', 'Files to check')
         .action(async (files) => {
         const exitCode = await (0, fix_1.fixCommand)(files);
-        if (exitCode !== 0) {
-            process.exit(exitCode);
-        }
+        setExitCode(exitCode);
     });
     // Check command
     program
         .command('check')
-        .description('Quick check')
+        .description('Scan files with config and baselines')
         .argument('[files...]', 'Files to check')
         .action(async (files) => {
         const exitCode = await (0, check_1.checkCommand)(files);
-        if (exitCode !== 0) {
-            process.exit(exitCode);
-        }
+        setExitCode(exitCode);
     });
     program
         .command('statusline')
@@ -162,7 +161,8 @@ function buildCli() {
                 const n = Number(options.maxRpm);
                 if (!Number.isFinite(n) || n < 1) {
                     console.error('--max-rpm must be a positive number');
-                    process.exit(1);
+                    process.exitCode = 1;
+                    return;
                 }
                 maxRpm = Math.floor(n);
             }
@@ -192,7 +192,7 @@ function buildCli() {
         }
         catch (e) {
             console.error(String(e));
-            process.exit(1);
+            process.exitCode = 1;
         }
     });
     // `data` parent command — inspects, exports, and resets the local
@@ -207,8 +207,7 @@ function buildCli() {
         .option('--json', 'Print JSON', false)
         .action(async (options) => {
         const exitCode = await (0, data_1.dataStatusCommand)({ json: Boolean(options.json) });
-        if (exitCode !== 0)
-            process.exit(exitCode);
+        setExitCode(exitCode);
     });
     dataCmd
         .command('reset')
@@ -222,8 +221,7 @@ function buildCli() {
             dryRun: Boolean(options.dryRun),
             json: Boolean(options.json),
         });
-        if (exitCode !== 0)
-            process.exit(exitCode);
+        setExitCode(exitCode);
     });
     dataCmd
         .command('export')
@@ -233,8 +231,7 @@ function buildCli() {
         .action(async (options) => {
         const fmt = options.format === 'jsonl' ? 'jsonl' : 'json';
         const exitCode = await (0, data_1.dataExportCommand)({ output: options.output, format: fmt });
-        if (exitCode !== 0)
-            process.exit(exitCode);
+        setExitCode(exitCode);
     });
     return program;
 }

package/dist/commands/check.js

@@ -1,39 +1,7 @@
 "use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.checkCommand = checkCommand;
-const vault_guard_core_1 = require("@vaultcompass/vault-guard-core");
-const chalk_1 = __importDefault(require("chalk"));
-const path_1 = __importDefault(require("path"));
-const scan_utils_1 = require("../utils/scan-utils");
+const scan_1 = require("./scan");
 async function checkCommand(files) {
-    const scanner = new vault_guard_core_1.SecretScanner();
-    const filesToCheck = files.length > 0 ? files : ['.'];
-    console.log(chalk_1.default.blue('✅ Quick check\n'));
-    // Use async scanning logic with same safeguards as scan command
-    const results = await (0, scan_utils_1.scanFilesAsync)(filesToCheck, scanner, {
-        verbose: false,
-        skipBinary: true,
-        progress: false
-    });
-    if (results.length === 0) {
-        console.log(chalk_1.default.green.bold('✅ Clean:'), chalk_1.default.white('No secrets found\n'));
-        return 0; // Success exit code
-    }
-    else {
-        const totalSecrets = results.reduce((sum, r) => sum + r.matches.length, 0);
-        console.log(chalk_1.default.red.bold('🔴 BLOCKED:'), chalk_1.default.white(`Found ${totalSecrets} secret${totalSecrets > 1 ? 's' : ''}\n`));
-        // Display simplified results
-        for (const { file, matches } of results) {
-            const relativePath = relativePathCwd(file);
-            console.log(chalk_1.default.red('🔴'), chalk_1.default.white(`${relativePath}: ${matches.length} secret${matches.length > 1 ? 's' : ''}`));
-        }
-        console.log('');
-        return 1; // Error exit code (secrets found)
-    }
-}
-function relativePathCwd(filePath) {
-    return path_1.default.relative(process.cwd(), filePath);
+    return (0, scan_1.scanCommand)(files.length > 0 ? files : '.', 'text', false);
 }

package/dist/commands/scan.d.ts

@@ -1,2 +1,2 @@
 export type OutputFormat = 'text' | 'json' | 'sarif';
-export declare function scanCommand(targetPath: string, format?: OutputFormat, staged?: boolean): Promise<number>;
+export declare function scanCommand(targetPath: string | string[], format?: OutputFormat, staged?: boolean): Promise<number>;

package/dist/commands/scan.js

@@ -9,6 +9,8 @@ const chalk_1 = __importDefault(require("chalk"));
 const scan_utils_1 = require("../utils/scan-utils");
 async function scanCommand(targetPath, format = 'text', staged = false) {
     const cwd = process.cwd();
+    const targetPaths = Array.isArray(targetPath) ? targetPath : [targetPath];
+    const targetLabel = targetPaths.length === 1 ? targetPaths[0] : `${targetPaths.length} paths`;
     let config;
     try {
         config = (0, vault_guard_core_1.loadConfig)(cwd);
@@ -54,7 +56,7 @@ async function scanCommand(targetPath, format = 'text', staged = false) {
             'you have audited every pattern.\n'));
     }
     if (format === 'text' && !staged) {
-        console.log(chalk_1.default.blue('🔍 Scanning'), chalk_1.default.cyan(targetPath));
+        console.log(chalk_1.default.blue('🔍 Scanning'), chalk_1.default.cyan(targetLabel));
     }
     const stats = { filesScanned: 0, bytesScanned: 0 };
     const t0 = Date.now();
@@ -96,7 +98,7 @@ async function scanCommand(targetPath, format = 'text', staged = false) {
             });
         }
         else {
-            results = await (0, scan_utils_1.scanFilesAsync)([targetPath], scanner, {
+            results = await (0, scan_utils_1.scanFilesAsync)(targetPaths, scanner, {
                 verbose: format === 'text',
                 skipBinary: true,
                 progress: format === 'text',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vaultcompass/vault-guard",
-  "version": "1.1.0",
+  "version": "1.1.2",
   "description": "Block secrets at commit and in CI. Pre-commit hooks, SARIF output, and fast staged-file scans for AI-native workflows.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -36,12 +36,12 @@
   "dependencies": {
     "chalk": "^4.1.2",
     "commander": "^12.0.0",
-    "@vaultcompass/vault-guard-core": "1.1.0",
-    "@vaultcompass/vault-guard-telemetry": "1.1.0"
+    "@vaultcompass/vault-guard-core": "1.1.2",
+    "@vaultcompass/vault-guard-telemetry": "1.1.2"
   },
   "devDependencies": {
     "@types/jest": "^30.0.0",
-    "@types/node": "^25.9.1",
+    "@types/node": "^25.9.3",
     "jest": "^30.4.2",
     "ts-jest": "^29.4.11",
     "typescript": "^5.3.3"