builtwith-official-cli 1.0.0 → 1.2.0

package/lib/cli.js

@@ -18,7 +18,9 @@ function run() {
     .option('--no-color', 'Disable color on stderr')
     .option('--dry-run', 'Print request URL (key masked) and exit')
     .option('--debug', 'Print HTTP metadata to stderr')
-    .option('--quiet', 'Suppress spinner/info stderr output');
+    .option('--quiet', 'Suppress spinner/info stderr output')
+    .option('--params <json>', 'Extra API params as JSON object (merged after command params; KEY is protected)')
+    .option('--fields <fields>', 'Comma-separated dot-notation fields to include in output (e.g. "Results,Paths.0")');
 
   // Register all command modules
   require('./commands/domain')(program);
@@ -33,9 +35,11 @@ function run() {
   require('./commands/trends')(program);
   require('./commands/products')(program);
   require('./commands/trust')(program);
+  require('./commands/vector')(program);
   require('./commands/account')(program);
   require('./commands/live')(program);
   require('./commands/mcp')(program);
+  require('./commands/schema')(program);
 
   program.parseAsync(process.argv).catch(err => {
     if (err.code === 'commander.helpDisplayed' || err.code === 'commander.version') {

package/lib/client.js

@@ -2,6 +2,26 @@
 
 const fetch = require('node-fetch');
 const { ApiError, NetworkError } = require('./errors');
+const output = require('./output');
+
+const INJECTION_PATTERNS = [
+  /ignore\s+(previous|above|all)\s+(instructions?|prompts?)/i,
+  /system\s*prompt/i,
+  /\[INST\]/,
+  /<\|im_start\|>/,
+];
+
+function scanForInjection(data) {
+  if (typeof data === 'string') {
+    for (const p of INJECTION_PATTERNS) {
+      if (p.test(data)) output.warn(`Possible prompt injection in response: "${data.slice(0, 80)}"`);
+    }
+  } else if (Array.isArray(data)) {
+    for (const item of data) scanForInjection(item);
+  } else if (data !== null && typeof data === 'object') {
+    for (const v of Object.values(data)) scanForInjection(v);
+  }
+}
 
 const BASE_URLS = {
   domain:          'https://api.builtwith.com/v22/api.json',
@@ -16,6 +36,7 @@ const BASE_URLS = {
   trends:          'https://api.builtwith.com/trends/v6/api.json',
   products:        'https://api.builtwith.com/productv1/api.json',
   trust:           'https://api.builtwith.com/trustv1/api.json',
+  vector:          'https://api.builtwith.com/vector/v1/api.json',
   whoami:          'https://api.builtwith.com/whoamiv1/api.json',
   usage:           'https://api.builtwith.com/usagev2/api.json',
 };
@@ -95,7 +116,8 @@ async function request(endpoint, params, opts = {}) {
     throw new ApiError(msg, isAuth ? 403 : 400);
   }
 
+  scanForInjection(body);
   return body;
 }
 
-module.exports = { buildUrl, maskKey, request, BASE_URLS };
+module.exports = { buildUrl, maskKey, request, scanForInjection, BASE_URLS };

package/lib/commands/account.js

@@ -1,11 +1,21 @@
 'use strict';
 
-const { Command } = require('commander');
 const { requireKey } = require('../config');
 const { request } = require('../client');
+const { InputError } = require('../errors');
 const output = require('../output');
 const ora = require('ora');
 
+function mergeParams(params, rawJson) {
+  if (!rawJson) return;
+  let extra;
+  try { extra = JSON.parse(rawJson); } catch (_) { throw new InputError('--params must be valid JSON'); }
+  if (typeof extra !== 'object' || extra === null || Array.isArray(extra)) throw new InputError('--params must be a JSON object');
+  const savedKey = params.KEY;
+  Object.assign(params, extra);
+  params.KEY = savedKey;
+}
+
 module.exports = function registerAccount(program) {
   const account = program.command('account').description('Account information');
 
@@ -16,10 +26,12 @@ module.exports = function registerAccount(program) {
       const opts = program.opts();
       if (opts.noColor) output.setNoColor(true);
       const key = requireKey(opts.key);
+      const params = { KEY: key };
+      mergeParams(params, opts.params);
       const spinner = opts.quiet ? null : ora({ text: 'Fetching account...', stream: process.stderr }).start();
       try {
-        const data = await request('whoami', { KEY: key }, { dryRun: opts.dryRun, debug: opts.debug, spinner });
-        output.print(data, { format: opts.format });
+        const data = await request('whoami', params, { dryRun: opts.dryRun, debug: opts.debug, spinner });
+        output.print(data, { format: opts.format, fields: opts.fields });
       } catch (err) {
         if (spinner) spinner.stop();
         throw err;
@@ -33,10 +45,12 @@ module.exports = function registerAccount(program) {
       const opts = program.opts();
       if (opts.noColor) output.setNoColor(true);
       const key = requireKey(opts.key);
+      const params = { KEY: key };
+      mergeParams(params, opts.params);
       const spinner = opts.quiet ? null : ora({ text: 'Fetching usage...', stream: process.stderr }).start();
       try {
-        const data = await request('usage', { KEY: key }, { dryRun: opts.dryRun, debug: opts.debug, spinner });
-        output.print(data, { format: opts.format });
+        const data = await request('usage', params, { dryRun: opts.dryRun, debug: opts.debug, spinner });
+        output.print(data, { format: opts.format, fields: opts.fields });
       } catch (err) {
         if (spinner) spinner.stop();
         throw err;

package/lib/commands/company.js

@@ -2,6 +2,8 @@
 
 const { requireKey } = require('../config');
 const { request } = require('../client');
+const { InputError } = require('../errors');
+const { validateInput } = require('../validate');
 const output = require('../output');
 const ora = require('ora');
 
@@ -15,11 +17,22 @@ module.exports = function registerCompany(program) {
       const opts = program.opts();
       if (opts.noColor) output.setNoColor(true);
       const key = requireKey(opts.key);
+      validateInput(name, 'name');
       const params = { KEY: key, COMPANY: name };
+
+      if (opts.params) {
+        let extra;
+        try { extra = JSON.parse(opts.params); } catch (_) { throw new InputError('--params must be valid JSON'); }
+        if (typeof extra !== 'object' || extra === null || Array.isArray(extra)) throw new InputError('--params must be a JSON object');
+        const savedKey = params.KEY;
+        Object.assign(params, extra);
+        params.KEY = savedKey;
+      }
+
       const spinner = opts.quiet ? null : ora({ text: `Finding company "${name}"...`, stream: process.stderr }).start();
       try {
         const data = await request('company', params, { dryRun: opts.dryRun, debug: opts.debug, spinner });
-        output.print(data, { format: opts.format });
+        output.print(data, { format: opts.format, fields: opts.fields });
       } catch (err) {
         if (spinner) spinner.stop();
         throw err;

package/lib/commands/domain.js

@@ -3,6 +3,7 @@
 const { requireKey } = require('../config');
 const { request } = require('../client');
 const { InputError } = require('../errors');
+const { validateInput, validateDateRange } = require('../validate');
 const output = require('../output');
 const ora = require('ora');
 
@@ -21,8 +22,10 @@ module.exports = function registerDomain(program) {
     .action(async (domainArg, cmdOpts) => {
       const opts = program.opts();
       if (opts.noColor) output.setNoColor(true);
-      if (!domainArg) throw new InputError('Domain argument is required');
       const key = requireKey(opts.key);
+      validateInput(domainArg, 'domain');
+      if (cmdOpts.fdrange) validateDateRange(cmdOpts.fdrange);
+      if (cmdOpts.ldrange) validateDateRange(cmdOpts.ldrange);
 
       const params = { KEY: key, LOOKUP: domainArg };
       // Boolean flags: true → '' so URL gets ?NOPII= which BuiltWith treats as present
@@ -33,10 +36,19 @@ module.exports = function registerDomain(program) {
       if (cmdOpts.fdrange) params.FDRANGE = cmdOpts.fdrange;
       if (cmdOpts.ldrange) params.LDRANGE = cmdOpts.ldrange;
 
+      if (opts.params) {
+        let extra;
+        try { extra = JSON.parse(opts.params); } catch (_) { throw new InputError('--params must be valid JSON'); }
+        if (typeof extra !== 'object' || extra === null || Array.isArray(extra)) throw new InputError('--params must be a JSON object');
+        const savedKey = params.KEY;
+        Object.assign(params, extra);
+        params.KEY = savedKey;
+      }
+
       const spinner = opts.quiet ? null : ora({ text: `Looking up ${domainArg}...`, stream: process.stderr }).start();
       try {
         const data = await request('domain', params, { dryRun: opts.dryRun, debug: opts.debug, spinner });
-        output.print(data, { format: opts.format });
+        output.print(data, { format: opts.format, fields: opts.fields });
       } catch (err) {
         if (spinner) spinner.stop();
         throw err;

package/lib/commands/free.js

@@ -2,6 +2,8 @@
 
 const { requireKey } = require('../config');
 const { request } = require('../client');
+const { InputError } = require('../errors');
+const { validateInput } = require('../validate');
 const output = require('../output');
 const ora = require('ora');
 
@@ -15,11 +17,22 @@ module.exports = function registerFree(program) {
       const opts = program.opts();
       if (opts.noColor) output.setNoColor(true);
       const key = requireKey(opts.key);
+      validateInput(domainArg, 'domain');
       const params = { KEY: key, LOOKUP: domainArg };
+
+      if (opts.params) {
+        let extra;
+        try { extra = JSON.parse(opts.params); } catch (_) { throw new InputError('--params must be valid JSON'); }
+        if (typeof extra !== 'object' || extra === null || Array.isArray(extra)) throw new InputError('--params must be a JSON object');
+        const savedKey = params.KEY;
+        Object.assign(params, extra);
+        params.KEY = savedKey;
+      }
+
       const spinner = opts.quiet ? null : ora({ text: `Fetching free data for ${domainArg}...`, stream: process.stderr }).start();
       try {
         const data = await request('free', params, { dryRun: opts.dryRun, debug: opts.debug, spinner });
-        output.print(data, { format: opts.format });
+        output.print(data, { format: opts.format, fields: opts.fields });
       } catch (err) {
         if (spinner) spinner.stop();
         throw err;

package/lib/commands/keywords.js

@@ -2,6 +2,8 @@
 
 const { requireKey } = require('../config');
 const { request } = require('../client');
+const { InputError } = require('../errors');
+const { validateInput } = require('../validate');
 const output = require('../output');
 const ora = require('ora');
 
@@ -15,11 +17,22 @@ module.exports = function registerKeywords(program) {
       const opts = program.opts();
       if (opts.noColor) output.setNoColor(true);
       const key = requireKey(opts.key);
+      validateInput(domainArg, 'domain');
       const params = { KEY: key, LOOKUP: domainArg };
+
+      if (opts.params) {
+        let extra;
+        try { extra = JSON.parse(opts.params); } catch (_) { throw new InputError('--params must be valid JSON'); }
+        if (typeof extra !== 'object' || extra === null || Array.isArray(extra)) throw new InputError('--params must be a JSON object');
+        const savedKey = params.KEY;
+        Object.assign(params, extra);
+        params.KEY = savedKey;
+      }
+
       const spinner = opts.quiet ? null : ora({ text: `Fetching keywords for ${domainArg}...`, stream: process.stderr }).start();
       try {
         const data = await request('keywords', params, { dryRun: opts.dryRun, debug: opts.debug, spinner });
-        output.print(data, { format: opts.format });
+        output.print(data, { format: opts.format, fields: opts.fields });
       } catch (err) {
         if (spinner) spinner.stop();
         throw err;

package/lib/commands/lists.js

@@ -2,6 +2,8 @@
 
 const { requireKey } = require('../config');
 const { request } = require('../client');
+const { InputError } = require('../errors');
+const { validateInput, validatePosInt } = require('../validate');
 const output = require('../output');
 const ora = require('ora');
 
@@ -17,11 +19,24 @@ module.exports = function registerLists(program) {
       const opts = program.opts();
       if (opts.noColor) output.setNoColor(true);
       const key = requireKey(opts.key);
-      const params = { KEY: key, TECH: tech, OFFSET: cmdOpts.offset, LIMIT: cmdOpts.limit };
+      validateInput(tech, 'tech');
+      const offset = validatePosInt(cmdOpts.offset, 'offset');
+      const limit = validatePosInt(cmdOpts.limit, 'limit');
+      const params = { KEY: key, TECH: tech, OFFSET: offset, LIMIT: limit };
+
+      if (opts.params) {
+        let extra;
+        try { extra = JSON.parse(opts.params); } catch (_) { throw new InputError('--params must be valid JSON'); }
+        if (typeof extra !== 'object' || extra === null || Array.isArray(extra)) throw new InputError('--params must be a JSON object');
+        const savedKey = params.KEY;
+        Object.assign(params, extra);
+        params.KEY = savedKey;
+      }
+
       const spinner = opts.quiet ? null : ora({ text: `Fetching list for ${tech}...`, stream: process.stderr }).start();
       try {
         const data = await request('lists', params, { dryRun: opts.dryRun, debug: opts.debug, spinner });
-        output.print(data, { format: opts.format });
+        output.print(data, { format: opts.format, fields: opts.fields });
       } catch (err) {
         if (spinner) spinner.stop();
         throw err;

package/lib/commands/products.js

@@ -2,6 +2,8 @@
 
 const { requireKey } = require('../config');
 const { request } = require('../client');
+const { InputError } = require('../errors');
+const { validateInput, validatePosInt } = require('../validate');
 const output = require('../output');
 const ora = require('ora');
 
@@ -17,11 +19,24 @@ module.exports = function registerProducts(program) {
       const opts = program.opts();
       if (opts.noColor) output.setNoColor(true);
       const key = requireKey(opts.key);
-      const params = { KEY: key, QUERY: query, PAGE: cmdOpts.page, LIMIT: cmdOpts.limit };
+      validateInput(query, 'query');
+      const page = validatePosInt(cmdOpts.page, 'page');
+      const limit = validatePosInt(cmdOpts.limit, 'limit');
+      const params = { KEY: key, QUERY: query, PAGE: page, LIMIT: limit };
+
+      if (opts.params) {
+        let extra;
+        try { extra = JSON.parse(opts.params); } catch (_) { throw new InputError('--params must be valid JSON'); }
+        if (typeof extra !== 'object' || extra === null || Array.isArray(extra)) throw new InputError('--params must be a JSON object');
+        const savedKey = params.KEY;
+        Object.assign(params, extra);
+        params.KEY = savedKey;
+      }
+
       const spinner = opts.quiet ? null : ora({ text: `Searching products for "${query}"...`, stream: process.stderr }).start();
       try {
         const data = await request('products', params, { dryRun: opts.dryRun, debug: opts.debug, spinner });
-        output.print(data, { format: opts.format });
+        output.print(data, { format: opts.format, fields: opts.fields });
       } catch (err) {
         if (spinner) spinner.stop();
         throw err;

package/lib/commands/recommendations.js

@@ -2,6 +2,8 @@
 
 const { requireKey } = require('../config');
 const { request } = require('../client');
+const { InputError } = require('../errors');
+const { validateInput } = require('../validate');
 const output = require('../output');
 const ora = require('ora');
 
@@ -15,11 +17,22 @@ module.exports = function registerRecommendations(program) {
       const opts = program.opts();
       if (opts.noColor) output.setNoColor(true);
       const key = requireKey(opts.key);
+      validateInput(domainArg, 'domain');
       const params = { KEY: key, LOOKUP: domainArg };
+
+      if (opts.params) {
+        let extra;
+        try { extra = JSON.parse(opts.params); } catch (_) { throw new InputError('--params must be valid JSON'); }
+        if (typeof extra !== 'object' || extra === null || Array.isArray(extra)) throw new InputError('--params must be a JSON object');
+        const savedKey = params.KEY;
+        Object.assign(params, extra);
+        params.KEY = savedKey;
+      }
+
       const spinner = opts.quiet ? null : ora({ text: `Fetching recommendations for ${domainArg}...`, stream: process.stderr }).start();
       try {
         const data = await request('recommendations', params, { dryRun: opts.dryRun, debug: opts.debug, spinner });
-        output.print(data, { format: opts.format });
+        output.print(data, { format: opts.format, fields: opts.fields });
       } catch (err) {
         if (spinner) spinner.stop();
         throw err;

package/lib/commands/redirects.js

@@ -2,6 +2,8 @@
 
 const { requireKey } = require('../config');
 const { request } = require('../client');
+const { InputError } = require('../errors');
+const { validateInput } = require('../validate');
 const output = require('../output');
 const ora = require('ora');
 
@@ -15,11 +17,22 @@ module.exports = function registerRedirects(program) {
       const opts = program.opts();
       if (opts.noColor) output.setNoColor(true);
       const key = requireKey(opts.key);
+      validateInput(domainArg, 'domain');
       const params = { KEY: key, LOOKUP: domainArg };
+
+      if (opts.params) {
+        let extra;
+        try { extra = JSON.parse(opts.params); } catch (_) { throw new InputError('--params must be valid JSON'); }
+        if (typeof extra !== 'object' || extra === null || Array.isArray(extra)) throw new InputError('--params must be a JSON object');
+        const savedKey = params.KEY;
+        Object.assign(params, extra);
+        params.KEY = savedKey;
+      }
+
       const spinner = opts.quiet ? null : ora({ text: `Fetching redirects for ${domainArg}...`, stream: process.stderr }).start();
       try {
         const data = await request('redirects', params, { dryRun: opts.dryRun, debug: opts.debug, spinner });
-        output.print(data, { format: opts.format });
+        output.print(data, { format: opts.format, fields: opts.fields });
       } catch (err) {
         if (spinner) spinner.stop();
         throw err;

package/lib/commands/relationships.js

@@ -2,6 +2,8 @@
 
 const { requireKey } = require('../config');
 const { request } = require('../client');
+const { InputError } = require('../errors');
+const { validateInput } = require('../validate');
 const output = require('../output');
 const ora = require('ora');
 
@@ -15,11 +17,22 @@ module.exports = function registerRelationships(program) {
       const opts = program.opts();
       if (opts.noColor) output.setNoColor(true);
       const key = requireKey(opts.key);
+      validateInput(domainArg, 'domain');
       const params = { KEY: key, LOOKUP: domainArg };
+
+      if (opts.params) {
+        let extra;
+        try { extra = JSON.parse(opts.params); } catch (_) { throw new InputError('--params must be valid JSON'); }
+        if (typeof extra !== 'object' || extra === null || Array.isArray(extra)) throw new InputError('--params must be a JSON object');
+        const savedKey = params.KEY;
+        Object.assign(params, extra);
+        params.KEY = savedKey;
+      }
+
       const spinner = opts.quiet ? null : ora({ text: `Fetching relationships for ${domainArg}...`, stream: process.stderr }).start();
       try {
         const data = await request('relationships', params, { dryRun: opts.dryRun, debug: opts.debug, spinner });
-        output.print(data, { format: opts.format });
+        output.print(data, { format: opts.format, fields: opts.fields });
       } catch (err) {
         if (spinner) spinner.stop();
         throw err;

package/lib/commands/schema.js

@@ -0,0 +1,50 @@
+'use strict';
+
+module.exports = function registerSchema(program) {
+  program
+    .command('schema')
+    .description('Output CLI schema as JSON for agent introspection')
+    .option('--command <name>', 'Filter output to one command (e.g. "domain lookup")')
+    .action(function(cmdOpts) {
+      function serializeOption(opt) {
+        return { flags: opt.flags, description: opt.description || '', default: opt.defaultValue ?? null };
+      }
+      function serializeArg(arg) {
+        return { name: arg._name || arg.name(), required: arg.required };
+      }
+      function serializeCommand(cmd, prefix) {
+        const name = prefix ? `${prefix} ${cmd.name()}` : cmd.name();
+        const result = {};
+        if (cmd.commands && cmd.commands.length > 0) {
+          for (const sub of cmd.commands) Object.assign(result, serializeCommand(sub, name));
+        } else {
+          result[name] = {
+            description: cmd.description() || '',
+            arguments: (cmd.registeredArguments || []).map(serializeArg),
+            options: (cmd.options || []).map(serializeOption),
+          };
+        }
+        return result;
+      }
+
+      const schema = {
+        version: program.version(),
+        globalOptions: program.options.map(serializeOption),
+        commands: {},
+      };
+      for (const cmd of program.commands) {
+        if (cmd.name() === 'schema' || cmd.name() === 'help') continue;
+        Object.assign(schema.commands, serializeCommand(cmd, ''));
+      }
+
+      if (cmdOpts.command) {
+        if (!schema.commands[cmdOpts.command]) {
+          process.stderr.write(`[error] Unknown command: ${cmdOpts.command}\n`);
+          process.exit(7);
+        }
+        schema.commands = { [cmdOpts.command]: schema.commands[cmdOpts.command] };
+      }
+
+      process.stdout.write(JSON.stringify(schema, null, 2) + '\n');
+    });
+};

package/lib/commands/tags.js

@@ -2,6 +2,8 @@
 
 const { requireKey } = require('../config');
 const { request } = require('../client');
+const { InputError } = require('../errors');
+const { validateInput } = require('../validate');
 const output = require('../output');
 const ora = require('ora');
 
@@ -15,11 +17,22 @@ module.exports = function registerTags(program) {
       const opts = program.opts();
       if (opts.noColor) output.setNoColor(true);
       const key = requireKey(opts.key);
+      validateInput(lookup, 'lookup');
       const params = { KEY: key, LOOKUP: lookup };
+
+      if (opts.params) {
+        let extra;
+        try { extra = JSON.parse(opts.params); } catch (_) { throw new InputError('--params must be valid JSON'); }
+        if (typeof extra !== 'object' || extra === null || Array.isArray(extra)) throw new InputError('--params must be a JSON object');
+        const savedKey = params.KEY;
+        Object.assign(params, extra);
+        params.KEY = savedKey;
+      }
+
       const spinner = opts.quiet ? null : ora({ text: `Fetching tags for ${lookup}...`, stream: process.stderr }).start();
       try {
         const data = await request('tags', params, { dryRun: opts.dryRun, debug: opts.debug, spinner });
-        output.print(data, { format: opts.format });
+        output.print(data, { format: opts.format, fields: opts.fields });
       } catch (err) {
         if (spinner) spinner.stop();
         throw err;

package/lib/commands/trends.js

@@ -2,6 +2,8 @@
 
 const { requireKey } = require('../config');
 const { request } = require('../client');
+const { InputError } = require('../errors');
+const { validateInput } = require('../validate');
 const output = require('../output');
 const ora = require('ora');
 
@@ -15,11 +17,22 @@ module.exports = function registerTrends(program) {
       const opts = program.opts();
       if (opts.noColor) output.setNoColor(true);
       const key = requireKey(opts.key);
+      validateInput(tech, 'tech');
       const params = { KEY: key, TECH: tech };
+
+      if (opts.params) {
+        let extra;
+        try { extra = JSON.parse(opts.params); } catch (_) { throw new InputError('--params must be valid JSON'); }
+        if (typeof extra !== 'object' || extra === null || Array.isArray(extra)) throw new InputError('--params must be a JSON object');
+        const savedKey = params.KEY;
+        Object.assign(params, extra);
+        params.KEY = savedKey;
+      }
+
       const spinner = opts.quiet ? null : ora({ text: `Fetching trends for ${tech}...`, stream: process.stderr }).start();
       try {
         const data = await request('trends', params, { dryRun: opts.dryRun, debug: opts.debug, spinner });
-        output.print(data, { format: opts.format });
+        output.print(data, { format: opts.format, fields: opts.fields });
       } catch (err) {
         if (spinner) spinner.stop();
         throw err;

package/lib/commands/trust.js

@@ -2,6 +2,8 @@
 
 const { requireKey } = require('../config');
 const { request } = require('../client');
+const { InputError } = require('../errors');
+const { validateInput } = require('../validate');
 const output = require('../output');
 const ora = require('ora');
 
@@ -15,11 +17,22 @@ module.exports = function registerTrust(program) {
       const opts = program.opts();
       if (opts.noColor) output.setNoColor(true);
       const key = requireKey(opts.key);
+      validateInput(domainArg, 'domain');
       const params = { KEY: key, LOOKUP: domainArg };
+
+      if (opts.params) {
+        let extra;
+        try { extra = JSON.parse(opts.params); } catch (_) { throw new InputError('--params must be valid JSON'); }
+        if (typeof extra !== 'object' || extra === null || Array.isArray(extra)) throw new InputError('--params must be a JSON object');
+        const savedKey = params.KEY;
+        Object.assign(params, extra);
+        params.KEY = savedKey;
+      }
+
       const spinner = opts.quiet ? null : ora({ text: `Fetching trust score for ${domainArg}...`, stream: process.stderr }).start();
       try {
         const data = await request('trust', params, { dryRun: opts.dryRun, debug: opts.debug, spinner });
-        output.print(data, { format: opts.format });
+        output.print(data, { format: opts.format, fields: opts.fields });
       } catch (err) {
         if (spinner) spinner.stop();
         throw err;

package/lib/commands/vector.js

@@ -0,0 +1,30 @@
+'use strict';
+
+const { requireKey } = require('../config');
+const { request } = require('../client');
+const output = require('../output');
+const ora = require('ora');
+
+module.exports = function registerVector(program) {
+  const vector = program.command('vector').description('Vector search for technologies and categories');
+
+  vector
+    .command('search <query>')
+    .description('Search technologies and categories by text using semantic similarity')
+    .option('--limit <n>', 'Number of results (default 10, max 100)', parseInt)
+    .action(async (queryArg, cmdOpts) => {
+      const opts = program.opts();
+      if (opts.noColor) output.setNoColor(true);
+      const key = requireKey(opts.key);
+      const params = { KEY: key, QUERY: queryArg };
+      if (cmdOpts.limit) params.LIMIT = cmdOpts.limit;
+      const spinner = opts.quiet ? null : ora({ text: `Searching for "${queryArg}"...`, stream: process.stderr }).start();
+      try {
+        const data = await request('vector', params, { dryRun: opts.dryRun, debug: opts.debug, spinner });
+        output.print(data, { format: opts.format });
+      } catch (err) {
+        if (spinner) spinner.stop();
+        throw err;
+      }
+    });
+};

package/lib/output.js

@@ -75,11 +75,31 @@ function printCsv(data) {
   process.stdout.write(output);
 }
 
+function extractPath(obj, dotPath) {
+  return dotPath.split('.').reduce((cur, key) => (cur !== null && cur !== undefined ? cur[key] : undefined), obj);
+}
+
+function filterOne(item, paths) {
+  if (item === null || typeof item !== 'object') return { value: item };
+  const out = {};
+  for (const p of paths) out[p] = extractPath(item, p);
+  return out;
+}
+
+function filterFields(data, fieldsStr) {
+  if (!fieldsStr) return data;
+  const paths = fieldsStr.split(',').map(s => s.trim()).filter(Boolean);
+  if (paths.length === 0) return data;
+  if (Array.isArray(data)) return data.map(item => filterOne(item, paths));
+  return filterOne(data, paths);
+}
+
 function print(data, opts = {}) {
+  const d = opts.fields ? filterFields(data, opts.fields) : data;
   const fmt = (opts.format || 'json').toLowerCase();
-  if (fmt === 'table') return printTable(data);
-  if (fmt === 'csv') return printCsv(data);
-  return printJson(data);
+  if (fmt === 'table') return printTable(d);
+  if (fmt === 'csv') return printCsv(d);
+  return printJson(d);
 }
 
 function error(msg) {
@@ -97,4 +117,4 @@ function info(msg) {
   process.stderr.write(`${prefix} ${msg}\n`);
 }
 
-module.exports = { print, error, warn, info, setNoColor };
+module.exports = { print, error, warn, info, setNoColor, filterFields };

package/lib/validate.js

@@ -0,0 +1,35 @@
+'use strict';
+
+const { InputError } = require('./errors');
+
+function validateInput(value, label) {
+  if (value === null || value === undefined || String(value).trim() === '') {
+    throw new InputError(`${label} is required and must not be empty`);
+  }
+  if (/[\x00-\x1f\x7f]/.test(value)) {
+    throw new InputError(`${label} must not contain control characters`);
+  }
+  if (/(\.\.\/|\.\.\\)/.test(value)) {
+    throw new InputError(`${label} contains invalid path traversal sequence`);
+  }
+  if (/[?&]/.test(value)) {
+    throw new InputError(`${label} must not contain query string characters`);
+  }
+  return value;
+}
+
+function validateDateRange(value) {
+  if (!/^\d{8}-\d{8}$/.test(value)) {
+    throw new InputError(`Date range must be in YYYYMMDD-YYYYMMDD format, got: ${value}`);
+  }
+  return value;
+}
+
+function validatePosInt(value, label) {
+  if (!/^\d+$/.test(String(value))) {
+    throw new InputError(`${label} must be a non-negative integer, got: ${value}`);
+  }
+  return parseInt(value, 10);
+}
+
+module.exports = { validateInput, validateDateRange, validatePosInt };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "builtwith-official-cli",
-  "version": "1.0.0",
+  "version": "1.2.0",
   "description": "Non-interactive, scriptable CLI for the BuiltWith API",
   "main": "lib/cli.js",
   "bin": {