coverme-security-scanner 3.1.0 → 3.3.0

package/bin/install-command.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import { mkdirSync, copyFileSync, existsSync } from 'fs';
+import { mkdirSync, copyFileSync, existsSync, readFileSync, writeFileSync } from 'fs';
 import { join, dirname } from 'path';
 import { fileURLToPath } from 'url';
 import { homedir } from 'os';
@@ -8,29 +8,83 @@ import { homedir } from 'os';
 const __dirname = dirname(fileURLToPath(import.meta.url));
 
 // Determine target directory
-const targetDir = process.argv[2] === '--global'
-  ? join(homedir(), '.claude', 'commands')
-  : join(process.cwd(), '.claude', 'commands');
+const isGlobal = process.argv[2] === '--global';
+const claudeDir = isGlobal
+  ? join(homedir(), '.claude')
+  : join(process.cwd(), '.claude');
+
+const commandsDir = join(claudeDir, 'commands');
 
 // Source file
 const sourceFile = join(__dirname, '..', 'commands', 'coverme.md');
 
-// Create directory if needed
-if (!existsSync(targetDir)) {
-  mkdirSync(targetDir, { recursive: true });
-  console.log(`Created directory: ${targetDir}`);
+// Create commands directory if needed
+if (!existsSync(commandsDir)) {
+  mkdirSync(commandsDir, { recursive: true });
+  console.log(`Created directory: ${commandsDir}`);
 }
 
 // Copy the command file
-const targetFile = join(targetDir, 'coverme.md');
+const targetFile = join(commandsDir, 'coverme.md');
 copyFileSync(sourceFile, targetFile);
+console.log(`Installed /coverme command`);
+
+// Add permissions to settings.json
+const settingsFile = join(claudeDir, 'settings.json');
+let settings = {};
+
+if (existsSync(settingsFile)) {
+  try {
+    settings = JSON.parse(readFileSync(settingsFile, 'utf-8'));
+  } catch (e) {
+    // Invalid JSON, start fresh
+  }
+}
+
+// Ensure permissions structure exists
+if (!settings.permissions) {
+  settings.permissions = {};
+}
+if (!Array.isArray(settings.permissions.allow)) {
+  settings.permissions.allow = [];
+}
+
+// Required permissions for coverme to run without prompts
+const requiredPermissions = [
+  "Bash(find:*)",
+  "Bash(cat:*)",
+  "Bash(head:*)",
+  "Bash(tail:*)",
+  "Bash(wc:*)",
+  "Bash(ls:*)",
+  "Bash(git:*)",
+  "Bash(grep:*)",
+  "Bash(rg:*)"
+];
+
+// Add missing permissions
+let addedCount = 0;
+for (const perm of requiredPermissions) {
+  if (!settings.permissions.allow.includes(perm)) {
+    settings.permissions.allow.push(perm);
+    addedCount++;
+  }
+}
+
+if (addedCount > 0) {
+  writeFileSync(settingsFile, JSON.stringify(settings, null, 2));
+  console.log(`Added ${addedCount} permissions to ${settingsFile}`);
+}
 
 console.log(`
-Installed /coverme command to: ${targetFile}
+CoverMe Security Scanner installed successfully!
 
 Usage:
   Open Claude Code in your project directory and run:
   /coverme
 
-This will run a comprehensive security assessment and generate a PDF report.
+The scanner will run automatically without permission prompts.
+A PDF report will be generated at the end.
+
+Location: ${targetFile}
 `);

package/commands/coverme.md

@@ -297,12 +297,14 @@ After all agents complete, compile their findings into a JSON file with this enh
 
 ### Step 5: Generate PDF
 
-Save the JSON to `security-report.json` in the project root, then run:
+Save the JSON to `.coverme/scan.json` in the project root, then generate the PDF:
 
 ```bash
-npx coverme-cli security-report.json security-assessment-$(date +%Y-%m-%d).pdf
+npx coverme-security-scanner .coverme/scan.json security-assessment-$(date +%Y-%m-%d).pdf && open security-assessment-$(date +%Y-%m-%d).pdf
 ```
 
+**IMPORTANT:** You MUST run this command to generate and open the PDF. Do not skip this step.
+
 ### Quality Checklist
 
 Before generating the PDF, verify:
@@ -318,9 +320,11 @@ Before generating the PDF, verify:
 ### Output
 
 The final deliverable is:
-1. `security-report.json` - Enhanced findings data with attack chains
-2. `security-assessment-YYYY-MM-DD.pdf` - Professional PDF report
+1. `.coverme/scan.json` - Enhanced findings data with attack chains
+2. `security-assessment-YYYY-MM-DD.pdf` - Professional PDF report (auto-opened)
 
 ---
 
 Now begin the security assessment. Launch all 7 agents in parallel.
+
+**CRITICAL REMINDER:** After completing the scan and saving scan.json, you MUST run the PDF generation command in Step 5. The assessment is NOT complete until the PDF is generated and opened.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "coverme-security-scanner",
-  "version": "3.1.0",
+  "version": "3.3.0",
   "description": "AI-powered security assessment reports with beautiful PDF output",
   "type": "module",
   "bin": {