fortly-cli 1.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Fortly
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,195 @@
+# fortly
+
+Automated web security scanner with AI-powered vulnerability detection.
+
+[![npm version](https://img.shields.io/npm/v/fortly.svg)](https://www.npmjs.com/package/fortly)
+[![license](https://img.shields.io/npm/l/fortly.svg)](https://github.com/fortly/fortly-cli/blob/main/LICENSE)
+[![node](https://img.shields.io/node/v/fortly.svg)](https://nodejs.org/)
+
+> Requires Node.js >= 18
+
+---
+
+## Installation
+
+```bash
+# Run without installing
+npx fortly scan https://example.com
+
+# Install globally
+npm install -g fortly
+```
+
+---
+
+## Quick Start
+
+```bash
+# Basic scan
+fortly scan https://myapp.com
+
+# Scan with options
+fortly scan https://myapp.com --depth 5 --format html --output ./reports
+
+# Cloud mode (unlimited scans)
+fortly config set api-key ft_sk_your_key_here
+fortly scan https://myapp.com --cloud
+
+# CI/CD mode (exit code 1 if score below threshold)
+fortly scan https://staging.myapp.com --ci --fail-threshold 70
+```
+
+---
+
+## Commands
+
+### `fortly scan <target>`
+
+Run a security scan against a target URL.
+
+| Option | Type | Default | Description |
+|---|---|---|---|
+| `--depth <n>` | number | `3` | Maximum crawl depth |
+| `--timeout <ms>` | number | `30000` | Request timeout in milliseconds |
+| `--threads <n>` | number | `10` | Number of concurrent threads |
+| `--format <type>` | string | `terminal` | Output format (`terminal`, `json`, `html`, `both`, `sarif`) |
+| `--output <path>` | string | `./` | Directory for saved reports |
+| `--fail-threshold <n>` | number | `0` | Minimum score to pass (0-100). Exit code 1 if below |
+| `--cloud` | boolean | `false` | Use cloud engine for unlimited scans |
+| `--api-key <key>` | string | &mdash; | API key for cloud mode (overrides config) |
+| `--no-ai` | boolean | `false` | Disable AI-powered vulnerability detection |
+| `--ci` | boolean | `false` | CI-friendly output (no color, no interactive prompts) |
+| `--verbose` | boolean | `false` | Enable verbose logging |
+
+### `fortly report <path>`
+
+View a previously saved report file in the terminal.
+
+### `fortly config <action> [key] [value]`
+
+Manage CLI configuration.
+
+| Action | Description |
+|---|---|
+| `set <key> <value>` | Set a configuration value |
+| `get <key>` | Get a configuration value |
+| `list` | List all configuration values |
+| `reset` | Reset configuration to defaults |
+
+---
+
+## Output Formats
+
+| Format | Description |
+|---|---|
+| `terminal` | Colored output with tables (default) |
+| `json` | Machine-readable JSON |
+| `html` | Full HTML report with charts and details |
+| `both` | JSON + HTML |
+| `sarif` | SARIF 2.1.0 for GitHub Code Scanning |
+
+---
+
+## CI/CD Integration
+
+### GitHub Actions
+
+```yaml
+- name: Run Fortly
+  run: |
+    npx fortly scan ${{ secrets.TARGET_URL }} \
+      --ci \
+      --fail-threshold 70 \
+      --format sarif \
+      --output ./results
+
+- name: Upload SARIF
+  uses: github/codeql-action/upload-sarif@v3
+  with:
+    sarif_file: ./results
+```
+
+### GitLab CI
+
+```yaml
+security_scan:
+  image: node:20
+  script:
+    - npx fortly scan $TARGET_URL --ci --fail-threshold 70 --format json --output ./results
+  artifacts:
+    paths:
+      - results/
+    when: always
+```
+
+### Azure Pipelines
+
+```yaml
+- script: |
+    npx fortly scan $(TARGET_URL) --ci --fail-threshold 70 --format json --output $(Build.ArtifactStagingDirectory)/fortly
+  displayName: "Run Fortly Scan"
+
+- publish: $(Build.ArtifactStagingDirectory)/fortly
+  artifact: fortly-report
+  condition: always()
+```
+
+### Jenkins
+
+```groovy
+stage('Security Scan') {
+    steps {
+        sh 'npx fortly scan $TARGET_URL --ci --fail-threshold 70 --format json --output ./fortly-report'
+    }
+    post {
+        always {
+            archiveArtifacts artifacts: 'fortly-report/**', allowEmptyArchive: true
+        }
+    }
+}
+```
+
+---
+
+## Exit Codes
+
+| Code | Meaning |
+|---|---|
+| `0` | Scan passed (score above threshold) |
+| `1` | Scan failed (score below threshold or error) |
+
+---
+
+## Configuration
+
+Configuration is stored in `~/.config/fortly/`.
+
+| Key | Description |
+|---|---|
+| `api-key` | API key for cloud mode |
+| `default-threshold` | Default fail threshold for scans |
+| `default-format` | Default output format |
+
+```bash
+fortly config set api-key ft_sk_your_key_here
+fortly config set default-threshold 70
+fortly config set default-format json
+fortly config list
+```
+
+---
+
+## Features
+
+- **15 security scanners** covering a wide range of vulnerability classes
+- **AI-powered vulnerability detection** for reduced false positives
+- **OWASP Top 10 + API Top 10** full coverage
+- **IaC scanning** for Terraform, Dockerfile, and Kubernetes manifests
+- **Compliance mapping** to SOC2, ISO 27001, PCI DSS, HIPAA, and NIST frameworks
+- **SARIF output** for native GitHub Code Scanning integration
+
+---
+
+## License
+
+[MIT](./LICENSE)

package/bin/fortly.js

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+require('../dist/cli.js');

package/dist/api/client.d.ts

@@ -0,0 +1,10 @@
+export declare class CloudClient {
+    private http;
+    constructor(baseUrl: string, apiKey: string);
+    createScan(targetUrl: string): Promise<{
+        scanId: string;
+    }>;
+    getScan(scanId: string): Promise<any>;
+    waitForCompletion(scanId: string, timeoutSeconds: number): Promise<any>;
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/api/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAEA,qBAAa,WAAW;IACtB,OAAO,CAAC,IAAI,CAAgB;gBAEhB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAQrC,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAK1D,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAKrC,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;CAU9E"}

package/dist/api/client.js

@@ -0,0 +1,39 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CloudClient = void 0;
+const axios_1 = __importDefault(require("axios"));
+class CloudClient {
+    http;
+    constructor(baseUrl, apiKey) {
+        this.http = axios_1.default.create({
+            baseURL: baseUrl,
+            headers: { Authorization: `Bearer ${apiKey}`, "Content-Type": "application/json" },
+            timeout: 30000,
+        });
+    }
+    async createScan(targetUrl) {
+        const { data } = await this.http.post("/api/v2/scans", { targetUrl });
+        return data.data;
+    }
+    async getScan(scanId) {
+        const { data } = await this.http.get(`/api/v2/scans/${scanId}`);
+        return data.data;
+    }
+    async waitForCompletion(scanId, timeoutSeconds) {
+        const deadline = Date.now() + timeoutSeconds * 1000;
+        while (Date.now() < deadline) {
+            const scan = await this.getScan(scanId);
+            if (scan.status === "completed")
+                return scan;
+            if (scan.status === "failed")
+                throw new Error(`Scan failed: ${scan.error || "unknown"}`);
+            await new Promise(r => setTimeout(r, 5000));
+        }
+        throw new Error(`Scan timed out after ${timeoutSeconds}s`);
+    }
+}
+exports.CloudClient = CloudClient;
+//# sourceMappingURL=client.js.map

package/dist/api/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":";;;;;;AAAA,kDAA6C;AAE7C,MAAa,WAAW;IACd,IAAI,CAAgB;IAE5B,YAAY,OAAe,EAAE,MAAc;QACzC,IAAI,CAAC,IAAI,GAAG,eAAK,CAAC,MAAM,CAAC;YACvB,OAAO,EAAE,OAAO;YAChB,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAClF,OAAO,EAAE,KAAK;SACf,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,SAAiB;QAChC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QACtE,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAAc;QAC1B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,MAAM,EAAE,CAAC,CAAC;QAChE,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,MAAc,EAAE,cAAsB;QAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,cAAc,GAAG,IAAI,CAAC;QACpD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACxC,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW;gBAAE,OAAO,IAAI,CAAC;YAC7C,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,CAAC,KAAK,IAAI,SAAS,EAAE,CAAC,CAAC;YACzF,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QAC9C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,wBAAwB,cAAc,GAAG,CAAC,CAAC;IAC7D,CAAC;CACF;AA/BD,kCA+BC"}

package/dist/cli.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}

package/dist/cli.js

@@ -0,0 +1,40 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const commander_1 = require("commander");
+const scan_1 = require("./commands/scan");
+const report_1 = require("./commands/report");
+const config_1 = require("./commands/config");
+const program = new commander_1.Command();
+program
+    .name("fortly")
+    .description("Fortly CLI — Automated web security scanner")
+    .version("1.0.0");
+program
+    .command("scan <target>")
+    .description("Scan a target URL for security vulnerabilities")
+    .option("-d, --depth <number>", "Maximum crawl depth", "3")
+    .option("-t, --timeout <number>", "Request timeout in ms", "10000")
+    .option("--threads <number>", "Concurrent requests", "5")
+    .option("-f, --format <type>", "Output format: html, json, both, terminal", "terminal")
+    .option("-o, --output <dir>", "Output directory for reports", "./fortly-reports")
+    .option("--fail-threshold <number>", "Exit with code 1 if score below threshold (for CI)")
+    .option("--cloud", "Use Fortly cloud API instead of local scan")
+    .option("--api-key <key>", "API key for cloud mode (or set FT_API_KEY env var)")
+    .option("--no-ai", "Disable AI-powered scanning")
+    .option("--ci", "CI mode: minimal output, JSON to stdout, exit codes")
+    .option("-v, --verbose", "Verbose output")
+    .action(scan_1.scanCommand);
+program
+    .command("report <path>")
+    .description("View a previously generated scan report")
+    .option("-f, --format <type>", "Output format: terminal, json", "terminal")
+    .action(report_1.reportCommand);
+program
+    .command("config")
+    .description("Manage Fortly CLI configuration")
+    .argument("<action>", "Action: set, get, list, reset")
+    .argument("[key]", "Config key (e.g., api-key, default-threshold)")
+    .argument("[value]", "Config value")
+    .action(config_1.configCommand);
+program.parse();
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";;AAAA,yCAAoC;AACpC,0CAA8C;AAC9C,8CAAkD;AAClD,8CAAkD;AAElD,MAAM,OAAO,GAAG,IAAI,mBAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,QAAQ,CAAC;KACd,WAAW,CAAC,6CAA6C,CAAC;KAC1D,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,OAAO;KACJ,OAAO,CAAC,eAAe,CAAC;KACxB,WAAW,CAAC,gDAAgD,CAAC;KAC7D,MAAM,CAAC,sBAAsB,EAAE,qBAAqB,EAAE,GAAG,CAAC;KAC1D,MAAM,CAAC,wBAAwB,EAAE,uBAAuB,EAAE,OAAO,CAAC;KAClE,MAAM,CAAC,oBAAoB,EAAE,qBAAqB,EAAE,GAAG,CAAC;KACxD,MAAM,CAAC,qBAAqB,EAAE,2CAA2C,EAAE,UAAU,CAAC;KACtF,MAAM,CAAC,oBAAoB,EAAE,8BAA8B,EAAE,kBAAkB,CAAC;KAChF,MAAM,CAAC,2BAA2B,EAAE,oDAAoD,CAAC;KACzF,MAAM,CAAC,SAAS,EAAE,4CAA4C,CAAC;KAC/D,MAAM,CAAC,iBAAiB,EAAE,oDAAoD,CAAC;KAC/E,MAAM,CAAC,SAAS,EAAE,6BAA6B,CAAC;KAChD,MAAM,CAAC,MAAM,EAAE,qDAAqD,CAAC;KACrE,MAAM,CAAC,eAAe,EAAE,gBAAgB,CAAC;KACzC,MAAM,CAAC,kBAAW,CAAC,CAAC;AAEvB,OAAO;KACJ,OAAO,CAAC,eAAe,CAAC;KACxB,WAAW,CAAC,yCAAyC,CAAC;KACtD,MAAM,CAAC,qBAAqB,EAAE,+BAA+B,EAAE,UAAU,CAAC;KAC1E,MAAM,CAAC,sBAAa,CAAC,CAAC;AAEzB,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,iCAAiC,CAAC;KAC9C,QAAQ,CAAC,UAAU,EAAE,+BAA+B,CAAC;KACrD,QAAQ,CAAC,OAAO,EAAE,+CAA+C,CAAC;KAClE,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;KACnC,MAAM,CAAC,sBAAa,CAAC,CAAC;AAEzB,OAAO,CAAC,KAAK,EAAE,CAAC"}

package/dist/commands/config.d.ts

@@ -0,0 +1,2 @@
+export declare function configCommand(action: string, key?: string, value?: string): Promise<void>;
+//# sourceMappingURL=config.d.ts.map

package/dist/commands/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/commands/config.ts"],"names":[],"mappings":"AAGA,wBAAsB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,iBA4B/E"}

package/dist/commands/config.js

@@ -0,0 +1,43 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.configCommand = configCommand;
+const chalk_1 = __importDefault(require("chalk"));
+const store_1 = require("../config/store");
+async function configCommand(action, key, value) {
+    const store = new store_1.ConfigStore();
+    switch (action) {
+        case "set":
+            if (!key || !value) {
+                console.error("Usage: fortly config set <key> <value>");
+                process.exit(1);
+            }
+            store.set(key, value);
+            console.log(chalk_1.default.green(`Set ${key}`));
+            break;
+        case "get":
+            if (!key) {
+                console.error("Usage: fortly config get <key>");
+                process.exit(1);
+            }
+            const val = store.get(key);
+            console.log(val ?? chalk_1.default.gray("(not set)"));
+            break;
+        case "list":
+            const all = store.getAll();
+            for (const [k, v] of Object.entries(all)) {
+                console.log(`${chalk_1.default.cyan(k)}: ${k.includes("key") ? "****" + String(v).slice(-4) : v}`);
+            }
+            break;
+        case "reset":
+            store.reset();
+            console.log(chalk_1.default.green("Configuration reset"));
+            break;
+        default:
+            console.error(`Unknown action: ${action}`);
+            process.exit(1);
+    }
+}
+//# sourceMappingURL=config.js.map

package/dist/commands/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/commands/config.ts"],"names":[],"mappings":";;;;;AAGA,sCA4BC;AA/BD,kDAA0B;AAC1B,2CAA8C;AAEvC,KAAK,UAAU,aAAa,CAAC,MAAc,EAAE,GAAY,EAAE,KAAc;IAC9E,MAAM,KAAK,GAAG,IAAI,mBAAW,EAAE,CAAC;IAEhC,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,KAAK;YACR,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;gBAAC,OAAO,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;gBAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;YACjG,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC,CAAC;YACvC,MAAM;QACR,KAAK,KAAK;YACR,IAAI,CAAC,GAAG,EAAE,CAAC;gBAAC,OAAO,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;gBAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;YAC/E,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,eAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;YAC5C,MAAM;QACR,KAAK,MAAM;YACT,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAC3B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzC,OAAO,CAAC,GAAG,CAAC,GAAG,eAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC3F,CAAC;YACD,MAAM;QACR,KAAK,OAAO;YACV,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC;YAChD,MAAM;QACR;YACE,OAAO,CAAC,KAAK,CAAC,mBAAmB,MAAM,EAAE,CAAC,CAAC;YAC3C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;AACH,CAAC"}

package/dist/commands/report.d.ts

@@ -0,0 +1,2 @@
+export declare function reportCommand(path: string, options: any): Promise<void>;
+//# sourceMappingURL=report.d.ts.map

package/dist/commands/report.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.d.ts","sourceRoot":"","sources":["../../src/commands/report.ts"],"names":[],"mappings":"AAIA,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,iBAe7D"}

package/dist/commands/report.js

@@ -0,0 +1,25 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.reportCommand = reportCommand;
+const fs_1 = require("fs");
+const chalk_1 = __importDefault(require("chalk"));
+const terminal_1 = require("../output/terminal");
+async function reportCommand(path, options) {
+    if (!(0, fs_1.existsSync)(path)) {
+        console.error(chalk_1.default.red(`File not found: ${path}`));
+        process.exit(1);
+    }
+    const content = (0, fs_1.readFileSync)(path, "utf-8");
+    const report = JSON.parse(content);
+    if (options.format === "json") {
+        console.log(JSON.stringify(report, null, 2));
+    }
+    else {
+        const reporter = new terminal_1.TerminalReporter();
+        reporter.printResults(report);
+    }
+}
+//# sourceMappingURL=report.js.map

package/dist/commands/report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.js","sourceRoot":"","sources":["../../src/commands/report.ts"],"names":[],"mappings":";;;;;AAIA,sCAeC;AAnBD,2BAA8C;AAC9C,kDAA0B;AAC1B,iDAAsD;AAE/C,KAAK,UAAU,aAAa,CAAC,IAAY,EAAE,OAAY;IAC5D,IAAI,CAAC,IAAA,eAAU,EAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,KAAK,CAAC,eAAK,CAAC,GAAG,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC,CAAC;QACpD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,OAAO,GAAG,IAAA,iBAAY,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAEnC,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;SAAM,CAAC;QACN,MAAM,QAAQ,GAAG,IAAI,2BAAgB,EAAE,CAAC;QACxC,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;AACH,CAAC"}

package/dist/commands/scan.d.ts

@@ -0,0 +1,2 @@
+export declare function scanCommand(target: string, options: any): Promise<void>;
+//# sourceMappingURL=scan.d.ts.map

package/dist/commands/scan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.d.ts","sourceRoot":"","sources":["../../src/commands/scan.ts"],"names":[],"mappings":"AAOA,wBAAsB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CA+B7E"}

package/dist/commands/scan.js

@@ -0,0 +1,127 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.scanCommand = scanCommand;
+const ora_1 = __importDefault(require("ora"));
+const chalk_1 = __importDefault(require("chalk"));
+const terminal_1 = require("../output/terminal");
+const ci_1 = require("../output/ci");
+const client_1 = require("../api/client");
+const store_1 = require("../config/store");
+async function scanCommand(target, options) {
+    const config = new store_1.ConfigStore();
+    const isCloud = options.cloud || false;
+    const isCi = options.ci || false;
+    const reporter = isCi ? new ci_1.CiReporter() : new terminal_1.TerminalReporter();
+    // Banner (skip in CI)
+    if (!isCi) {
+        reporter.banner();
+    }
+    // Validate target URL
+    try {
+        new URL(target);
+    }
+    catch {
+        console.error(chalk_1.default.red(`Invalid URL: ${target}`));
+        process.exit(1);
+    }
+    if (isCloud) {
+        // Cloud mode: use API
+        const apiKey = options.apiKey || process.env.FT_API_KEY || config.get("api-key");
+        if (!apiKey) {
+            console.error(chalk_1.default.red("API key required for cloud mode. Use --api-key or set FT_API_KEY"));
+            process.exit(1);
+        }
+        await runCloudScan(target, apiKey, options, reporter);
+    }
+    else {
+        // Local mode: use embedded engine
+        await runLocalScan(target, options, reporter);
+    }
+}
+async function runCloudScan(target, apiKey, options, reporter) {
+    const client = new client_1.CloudClient(options.apiUrl || "https://api.fortly.io", apiKey);
+    const spinner = (0, ora_1.default)("Creating scan...").start();
+    try {
+        const scan = await client.createScan(target);
+        spinner.text = "Scanning target...";
+        const result = await client.waitForCompletion(scan.scanId, 300);
+        spinner.succeed("Scan complete");
+        reporter.printResults(result);
+        handleThreshold(result.score, options.failThreshold);
+    }
+    catch (err) {
+        spinner.fail(err.message);
+        process.exit(1);
+    }
+}
+async function runLocalScan(target, options, reporter) {
+    // Dynamic import of the scan engine (from scan-execute lib)
+    // In published npm package, this would be bundled
+    // For development, we import from the sibling project
+    const spinner = (0, ora_1.default)("Initializing scan engine...").start();
+    try {
+        let runScan;
+        try {
+            // Dynamic require to avoid TypeScript static analysis on optional dependency
+            const engineName = "fortly-scan-engine";
+            // eslint-disable-next-line @typescript-eslint/no-var-requires
+            const engine = require(engineName);
+            runScan = engine.runScan;
+        }
+        catch {
+            spinner.fail("Scan engine not available. Use --cloud mode or install fortly-scan-engine.");
+            process.exit(1);
+        }
+        const scanConfig = {
+            target,
+            maxDepth: parseInt(options.depth) || 3,
+            maxRequests: 500,
+            timeout: parseInt(options.timeout) || 10000,
+            delay: 100,
+            threads: parseInt(options.threads) || 5,
+            retryAttempts: 2,
+            userAgent: "Fortly-CLI/1.0",
+            followRedirects: true,
+            excludePaths: ["/logout", "/signout"],
+            outputDir: options.output || "./fortly-reports",
+            outputFormat: options.format === "terminal" ? "both" : options.format,
+            verbose: options.verbose || false,
+            aiEnabled: options.ai !== false,
+            aiMaxCalls: 80,
+        };
+        spinner.text = `Scanning ${target}...`;
+        const report = await runScan(scanConfig);
+        spinner.succeed("Scan complete");
+        // Print results
+        reporter.printResults({
+            score: report.score,
+            grade: report.grade,
+            summary: report.summary,
+            vulnerabilities: report.vulnerabilities,
+            target: report.target,
+            scanDuration: report.scanDuration,
+        });
+        // Handle output format
+        if (options.format !== "terminal") {
+            reporter.printReportPaths(options.output);
+        }
+        handleThreshold(report.score, options.failThreshold);
+    }
+    catch (err) {
+        spinner.fail(`Scan failed: ${err.message}`);
+        process.exit(1);
+    }
+}
+function handleThreshold(score, threshold) {
+    if (threshold) {
+        const t = parseInt(threshold);
+        if (score < t) {
+            console.error(chalk_1.default.red(`\nScore ${score} is below threshold ${t}. Failing.`));
+            process.exit(1);
+        }
+    }
+}
+//# sourceMappingURL=scan.js.map

package/dist/commands/scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.js","sourceRoot":"","sources":["../../src/commands/scan.ts"],"names":[],"mappings":";;;;;AAOA,kCA+BC;AAtCD,8CAAsB;AACtB,kDAA0B;AAC1B,iDAAsD;AACtD,qCAA0C;AAC1C,0CAA4C;AAC5C,2CAA8C;AAEvC,KAAK,UAAU,WAAW,CAAC,MAAc,EAAE,OAAY;IAC5D,MAAM,MAAM,GAAG,IAAI,mBAAW,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC;IACvC,MAAM,IAAI,GAAG,OAAO,CAAC,EAAE,IAAI,KAAK,CAAC;IACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,eAAU,EAAE,CAAC,CAAC,CAAC,IAAI,2BAAgB,EAAE,CAAC;IAElE,sBAAsB;IACtB,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,QAAQ,CAAC,MAAM,EAAE,CAAC;IACpB,CAAC;IAED,sBAAsB;IACtB,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CAAC,eAAK,CAAC,GAAG,CAAC,gBAAgB,MAAM,EAAE,CAAC,CAAC,CAAC;QACnD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,OAAO,EAAE,CAAC;QACZ,sBAAsB;QACtB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACjF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,KAAK,CAAC,eAAK,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC,CAAC;YAC7F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IACxD,CAAC;SAAM,CAAC;QACN,kCAAkC;QAClC,MAAM,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAChD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,MAAc,EAAE,MAAc,EAAE,OAAY,EAAE,QAAa;IACrF,MAAM,MAAM,GAAG,IAAI,oBAAW,CAAC,OAAO,CAAC,MAAM,IAAI,uBAAuB,EAAE,MAAM,CAAC,CAAC;IAClF,MAAM,OAAO,GAAG,IAAA,aAAG,EAAC,kBAAkB,CAAC,CAAC,KAAK,EAAE,CAAC;IAEhD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC7C,OAAO,CAAC,IAAI,GAAG,oBAAoB,CAAC;QAEpC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAChE,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAEjC,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC9B,eAAe,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC1B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,MAAc,EAAE,OAAY,EAAE,QAAa;IACrE,4DAA4D;IAC5D,kDAAkD;IAClD,sDAAsD;IACtD,MAAM,OAAO,GAAG,IAAA,aAAG,EAAC,6BAA6B,CAAC,CAAC,KAAK,EAAE,CAAC;IAE3D,IAAI,CAAC;QACH,IAAI,OAAY,CAAC;QACjB,IAAI,CAAC;YACH,6EAA6E;YAC7E,MAAM,UAAU,GAAG,oBAAoB,CAAC;YACxC,8DAA8D;YAC9D,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;YACnC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,4EAA4E,CAAC,CAAC;YAC3F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,UAAU,GAAG;YACjB,MAAM;YACN,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;YACtC,WAAW,EAAE,GAAG;YAChB,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK;YAC3C,KAAK,EAAE,GAAG;YACV,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;YACvC,aAAa,EAAE,CAAC;YAChB,SAAS,EAAE,gBAAgB;YAC3B,eAAe,EAAE,IAAI;YACrB,YAAY,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC;YACrC,SAAS,EAAE,OAAO,CAAC,MAAM,IAAI,kBAAkB;YAC/C,YAAY,EAAE,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM;YACrE,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,KAAK;YACjC,SAAS,EAAE,OAAO,CAAC,EAAE,KAAK,KAAK;YAC/B,UAAU,EAAE,EAAE;SACf,CAAC;QAEF,OAAO,CAAC,IAAI,GAAG,YAAY,MAAM,KAAK,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAiB,CAAC,CAAC;QAChD,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAEjC,gBAAgB;QAChB,QAAQ,CAAC,YAAY,CAAC;YACpB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,YAAY,EAAE,MAAM,CAAC,YAAY;SAClC,CAAC,CAAC;QAEH,uBAAuB;QACvB,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAClC,QAAQ,CAAC,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC5C,CAAC;QAED,eAAe,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,IAAI,CAAC,gBAAgB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAAa,EAAE,SAAkB;IACxD,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC9B,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,OAAO,CAAC,KAAK,CAAC,eAAK,CAAC,GAAG,CAAC,WAAW,KAAK,uBAAuB,CAAC,YAAY,CAAC,CAAC,CAAC;YAC/E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/config/store.d.ts

@@ -0,0 +1,9 @@
+export declare class ConfigStore {
+    private store;
+    constructor();
+    get(key: string): string | undefined;
+    set(key: string, value: string): void;
+    getAll(): Record<string, unknown>;
+    reset(): void;
+}
+//# sourceMappingURL=store.d.ts.map

package/dist/config/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/config/store.ts"],"names":[],"mappings":"AAEA,qBAAa,WAAW;IACtB,OAAO,CAAC,KAAK,CAAO;;IAMpB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAIpC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAIrC,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAIjC,KAAK,IAAI,IAAI;CAGd"}

package/dist/config/store.js

@@ -0,0 +1,27 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ConfigStore = void 0;
+const conf_1 = __importDefault(require("conf"));
+class ConfigStore {
+    store;
+    constructor() {
+        this.store = new conf_1.default({ projectName: "fortly" });
+    }
+    get(key) {
+        return this.store.get(key);
+    }
+    set(key, value) {
+        this.store.set(key, value);
+    }
+    getAll() {
+        return this.store.store;
+    }
+    reset() {
+        this.store.clear();
+    }
+}
+exports.ConfigStore = ConfigStore;
+//# sourceMappingURL=store.js.map

package/dist/config/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/config/store.ts"],"names":[],"mappings":";;;;;;AAAA,gDAAwB;AAExB,MAAa,WAAW;IACd,KAAK,CAAO;IAEpB;QACE,IAAI,CAAC,KAAK,GAAG,IAAI,cAAI,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,GAAG,CAAC,GAAW;QACb,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAuB,CAAC;IACnD,CAAC;IAED,GAAG,CAAC,GAAW,EAAE,KAAa;QAC5B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;IAC1B,CAAC;IAED,KAAK;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;CACF;AAtBD,kCAsBC"}

package/dist/output/ci.d.ts

@@ -0,0 +1,6 @@
+export declare class CiReporter {
+    banner(): void;
+    printResults(result: any): void;
+    printReportPaths(outputDir: string): void;
+}
+//# sourceMappingURL=ci.d.ts.map

package/dist/output/ci.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ci.d.ts","sourceRoot":"","sources":["../../src/output/ci.ts"],"names":[],"mappings":"AAAA,qBAAa,UAAU;IACrB,MAAM,IAAI,IAAI;IAId,YAAY,CAAC,MAAM,EAAE,GAAG,GAAG,IAAI;IA6B/B,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;CAG1C"}

package/dist/output/ci.js

@@ -0,0 +1,39 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CiReporter = void 0;
+class CiReporter {
+    banner() {
+        // No banner in CI mode
+    }
+    printResults(result) {
+        // Single JSON line to stdout for easy parsing
+        const output = {
+            score: result.score,
+            grade: result.grade,
+            target: result.target,
+            vulnerabilities: result.summary.totalVulnerabilities,
+            critical: result.summary.critical,
+            high: result.summary.high,
+            medium: result.summary.medium,
+            low: result.summary.low,
+            info: result.summary.info,
+            duration: result.scanDuration,
+        };
+        console.log(JSON.stringify(output));
+        // Also output GitHub Actions annotations if running in GH Actions
+        if (process.env.GITHUB_ACTIONS) {
+            if (result.summary.critical > 0) {
+                console.log(`::error::Fortly found ${result.summary.critical} critical vulnerabilities`);
+            }
+            if (result.summary.high > 0) {
+                console.log(`::warning::Fortly found ${result.summary.high} high severity vulnerabilities`);
+            }
+            console.log(`::notice::Security Score: ${result.score}/100 (${result.grade})`);
+        }
+    }
+    printReportPaths(outputDir) {
+        console.log(JSON.stringify({ reportDir: outputDir }));
+    }
+}
+exports.CiReporter = CiReporter;
+//# sourceMappingURL=ci.js.map

package/dist/output/ci.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ci.js","sourceRoot":"","sources":["../../src/output/ci.ts"],"names":[],"mappings":";;;AAAA,MAAa,UAAU;IACrB,MAAM;QACJ,uBAAuB;IACzB,CAAC;IAED,YAAY,CAAC,MAAW;QACtB,8CAA8C;QAC9C,MAAM,MAAM,GAAG;YACb,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,eAAe,EAAE,MAAM,CAAC,OAAO,CAAC,oBAAoB;YACpD,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ;YACjC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI;YACzB,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM;YAC7B,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG;YACvB,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI;YACzB,QAAQ,EAAE,MAAM,CAAC,YAAY;SAC9B,CAAC;QAEF,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAEpC,kEAAkE;QAClE,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC;YAC/B,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;gBAChC,OAAO,CAAC,GAAG,CAAC,yBAAyB,MAAM,CAAC,OAAO,CAAC,QAAQ,2BAA2B,CAAC,CAAC;YAC3F,CAAC;YACD,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;gBAC5B,OAAO,CAAC,GAAG,CAAC,2BAA2B,MAAM,CAAC,OAAO,CAAC,IAAI,gCAAgC,CAAC,CAAC;YAC9F,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,6BAA6B,MAAM,CAAC,KAAK,SAAS,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC;QACjF,CAAC;IACH,CAAC;IAED,gBAAgB,CAAC,SAAiB;QAChC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IACxD,CAAC;CACF;AArCD,gCAqCC"}

package/dist/output/sarif.d.ts

@@ -0,0 +1,21 @@
+interface SarifReport {
+    $schema: string;
+    version: string;
+    runs: Array<{
+        tool: {
+            driver: {
+                name: string;
+                version: string;
+                informationUri: string;
+                rules: any[];
+            };
+        };
+        results: any[];
+    }>;
+}
+export declare class SarifExporter {
+    static generate(result: any): SarifReport;
+    static write(result: any, outputPath: string): void;
+}
+export {};
+//# sourceMappingURL=sarif.d.ts.map

package/dist/output/sarif.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sarif.d.ts","sourceRoot":"","sources":["../../src/output/sarif.ts"],"names":[],"mappings":"AAAA,UAAU,WAAW;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,KAAK,CAAC;QACV,IAAI,EAAE;YAAE,MAAM,EAAE;gBAAE,IAAI,EAAE,MAAM,CAAC;gBAAC,OAAO,EAAE,MAAM,CAAC;gBAAC,cAAc,EAAE,MAAM,CAAC;gBAAC,KAAK,EAAE,GAAG,EAAE,CAAA;aAAE,CAAA;SAAE,CAAC;QAC1F,OAAO,EAAE,GAAG,EAAE,CAAC;KAChB,CAAC,CAAC;CACJ;AAED,qBAAa,aAAa;IACxB,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,GAAG,WAAW;IA6CzC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI;CAMpD"}

package/dist/output/sarif.js

@@ -0,0 +1,54 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SarifExporter = void 0;
+class SarifExporter {
+    static generate(result) {
+        const rules = (result.vulnerabilities || []).map((v, i) => ({
+            id: `VH-${v.type}`,
+            name: v.type,
+            shortDescription: { text: v.title },
+            fullDescription: { text: v.description || v.title },
+            defaultConfiguration: {
+                level: v.severity === "critical" || v.severity === "high" ? "error" :
+                    v.severity === "medium" ? "warning" : "note",
+            },
+            helpUri: `https://docs.fortly.io/vulns/${v.type}`,
+        }));
+        // Deduplicate rules by id
+        const uniqueRules = [...new Map(rules.map((r) => [r.id, r])).values()];
+        const results = (result.vulnerabilities || []).map((v) => ({
+            ruleId: `VH-${v.type}`,
+            level: v.severity === "critical" || v.severity === "high" ? "error" :
+                v.severity === "medium" ? "warning" : "note",
+            message: { text: `${v.title}: ${v.description || ""}`.trim() },
+            locations: [{
+                    physicalLocation: {
+                        artifactLocation: { uri: v.url || result.target },
+                    },
+                }],
+        }));
+        return {
+            $schema: "https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json",
+            version: "2.1.0",
+            runs: [{
+                    tool: {
+                        driver: {
+                            name: "Fortly",
+                            version: "1.0.0",
+                            informationUri: "https://fortly.io",
+                            rules: uniqueRules,
+                        },
+                    },
+                    results,
+                }],
+        };
+    }
+    static write(result, outputPath) {
+        const { writeFileSync, mkdirSync } = require("fs");
+        const { dirname } = require("path");
+        mkdirSync(dirname(outputPath), { recursive: true });
+        writeFileSync(outputPath, JSON.stringify(SarifExporter.generate(result), null, 2));
+    }
+}
+exports.SarifExporter = SarifExporter;
+//# sourceMappingURL=sarif.js.map

package/dist/output/sarif.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sarif.js","sourceRoot":"","sources":["../../src/output/sarif.ts"],"names":[],"mappings":";;;AASA,MAAa,aAAa;IACxB,MAAM,CAAC,QAAQ,CAAC,MAAW;QACzB,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC;YACvE,EAAE,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE;YAClB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,gBAAgB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE;YACnC,eAAe,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,KAAK,EAAE;YACnD,oBAAoB,EAAE;gBACpB,KAAK,EAAE,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;oBAC9D,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM;aACpD;YACD,OAAO,EAAE,gCAAgC,CAAC,CAAC,IAAI,EAAE;SAClD,CAAC,CAAC,CAAC;QAEJ,0BAA0B;QAC1B,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAE5E,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC;YAC9D,MAAM,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE;YACtB,KAAK,EAAE,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;gBAC9D,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM;YACnD,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE;YAC9D,SAAS,EAAE,CAAC;oBACV,gBAAgB,EAAE;wBAChB,gBAAgB,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE;qBAClD;iBACF,CAAC;SACH,CAAC,CAAC,CAAC;QAEJ,OAAO;YACL,OAAO,EAAE,gGAAgG;YACzG,OAAO,EAAE,OAAO;YAChB,IAAI,EAAE,CAAC;oBACL,IAAI,EAAE;wBACJ,MAAM,EAAE;4BACN,IAAI,EAAE,QAAQ;4BACd,OAAO,EAAE,OAAO;4BAChB,cAAc,EAAE,mBAAmB;4BACnC,KAAK,EAAE,WAAW;yBACnB;qBACF;oBACD,OAAO;iBACR,CAAC;SACH,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,MAAW,EAAE,UAAkB;QAC1C,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACnD,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QACpC,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACrF,CAAC;CACF;AApDD,sCAoDC"}

package/dist/output/terminal.d.ts

@@ -0,0 +1,33 @@
+interface ScanResultData {
+    score: number;
+    grade: string;
+    target: string;
+    scanDuration?: number;
+    summary: {
+        totalVulnerabilities: number;
+        critical: number;
+        high: number;
+        medium: number;
+        low: number;
+        info: number;
+    };
+    vulnerabilities: Array<{
+        severity: string;
+        title: string;
+        type: string;
+        url: string;
+        cwe?: string;
+    }>;
+}
+export declare class TerminalReporter {
+    banner(): void;
+    printResults(result: ScanResultData): void;
+    printReportPaths(outputDir: string): void;
+    private printScoreBar;
+    private getScoreColor;
+    private severityBadge;
+    private colorCount;
+    private formatDuration;
+}
+export {};
+//# sourceMappingURL=terminal.d.ts.map

package/dist/output/terminal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal.d.ts","sourceRoot":"","sources":["../../src/output/terminal.ts"],"names":[],"mappings":"AAGA,UAAU,cAAc;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE;QACP,oBAAoB,EAAE,MAAM,CAAC;QAC7B,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,GAAG,EAAE,MAAM,CAAC;QACZ,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;IACF,eAAe,EAAE,KAAK,CAAC;QACrB,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,GAAG,EAAE,MAAM,CAAC;QACZ,GAAG,CAAC,EAAE,MAAM,CAAC;KACd,CAAC,CAAC;CACJ;AAED,qBAAa,gBAAgB;IAC3B,MAAM,IAAI,IAAI;IAYd,YAAY,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI;IA6E1C,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAMzC,OAAO,CAAC,aAAa;IASrB,OAAO,CAAC,aAAa;IAOrB,OAAO,CAAC,aAAa;IAUrB,OAAO,CAAC,UAAU;IAUlB,OAAO,CAAC,cAAc;CAKvB"}

package/dist/output/terminal.js

@@ -0,0 +1,130 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TerminalReporter = void 0;
+const chalk_1 = __importDefault(require("chalk"));
+const cli_table3_1 = __importDefault(require("cli-table3"));
+class TerminalReporter {
+    banner() {
+        console.log("");
+        console.log(chalk_1.default.bold.red("  ██╗   ██╗██╗   ██╗██╗     ███╗   ██╗"));
+        console.log(chalk_1.default.bold.red("  ██║   ██║██║   ██║██║     ████╗  ██║"));
+        console.log(chalk_1.default.bold.red("  ██║   ██║██║   ██║██║     ██╔██╗ ██║"));
+        console.log(chalk_1.default.bold.red("  ╚██╗ ██╔╝██║   ██║██║     ██║╚██╗██║"));
+        console.log(chalk_1.default.bold.red("   ╚████╔╝ ╚██████╔╝███████╗██║ ╚████║"));
+        console.log(chalk_1.default.bold.red("    ╚═══╝   ╚═════╝ ╚══════╝╚═╝  ╚═══╝"));
+        console.log(chalk_1.default.gray("  Fortly CLI — Automated Web Security Scanner"));
+        console.log(chalk_1.default.gray("  Use only on applications you have authorization to test.\n"));
+    }
+    printResults(result) {
+        console.log("");
+        // Score section
+        const scoreColor = this.getScoreColor(result.score);
+        console.log(chalk_1.default.bold("  Target: ") + chalk_1.default.cyan(result.target));
+        if (result.scanDuration) {
+            console.log(chalk_1.default.bold("  Duration: ") + chalk_1.default.gray(this.formatDuration(result.scanDuration)));
+        }
+        console.log("");
+        console.log(chalk_1.default.bold("  Security Score: ") + scoreColor(` ${result.score}/100 `) + chalk_1.default.bold(` Grade: ${result.grade}`));
+        console.log("");
+        // Progress bar
+        this.printScoreBar(result.score);
+        console.log("");
+        // Summary table
+        const summaryTable = new cli_table3_1.default({
+            head: [
+                chalk_1.default.white("Severity"),
+                chalk_1.default.white("Count"),
+            ],
+            colWidths: [20, 10],
+            style: { head: [], border: ["gray"] },
+        });
+        summaryTable.push([chalk_1.default.red("Critical"), this.colorCount(result.summary.critical, "critical")], [chalk_1.default.hex("#ff6b35")("High"), this.colorCount(result.summary.high, "high")], [chalk_1.default.yellow("Medium"), this.colorCount(result.summary.medium, "medium")], [chalk_1.default.green("Low"), this.colorCount(result.summary.low, "low")], [chalk_1.default.gray("Info"), String(result.summary.info)], [chalk_1.default.bold("Total"), chalk_1.default.bold(String(result.summary.totalVulnerabilities))]);
+        console.log(summaryTable.toString());
+        console.log("");
+        // Top vulnerabilities (max 10)
+        if (result.vulnerabilities.length > 0) {
+            console.log(chalk_1.default.bold("  Top Findings:"));
+            console.log("");
+            const vulnTable = new cli_table3_1.default({
+                head: [
+                    chalk_1.default.white("Sev"),
+                    chalk_1.default.white("Title"),
+                    chalk_1.default.white("Type"),
+                    chalk_1.default.white("URL"),
+                ],
+                colWidths: [12, 30, 22, 40],
+                style: { head: [], border: ["gray"] },
+                wordWrap: true,
+            });
+            for (const vuln of result.vulnerabilities.slice(0, 10)) {
+                vulnTable.push([
+                    this.severityBadge(vuln.severity),
+                    vuln.title,
+                    vuln.type,
+                    vuln.url.length > 38 ? vuln.url.substring(0, 35) + "..." : vuln.url,
+                ]);
+            }
+            console.log(vulnTable.toString());
+            if (result.vulnerabilities.length > 10) {
+                console.log(chalk_1.default.gray(`  ... and ${result.vulnerabilities.length - 10} more vulnerabilities`));
+            }
+        }
+        else {
+            console.log(chalk_1.default.green("  No vulnerabilities found. The target appears well-secured."));
+        }
+        console.log("");
+    }
+    printReportPaths(outputDir) {
+        console.log(chalk_1.default.bold("  Reports saved to:"));
+        console.log(chalk_1.default.cyan(`  ${outputDir}/`));
+        console.log("");
+    }
+    printScoreBar(score) {
+        const width = 40;
+        const filled = Math.round((score / 100) * width);
+        const empty = width - filled;
+        const color = this.getScoreColor(score);
+        const bar = color("█".repeat(filled)) + chalk_1.default.gray("░".repeat(empty));
+        console.log(`  ${bar} ${score}%`);
+    }
+    getScoreColor(score) {
+        if (score >= 90)
+            return chalk_1.default.bgGreen.black;
+        if (score >= 70)
+            return chalk_1.default.bgYellow.black;
+        if (score >= 50)
+            return chalk_1.default.bgHex("#ff6b35").black;
+        return chalk_1.default.bgRed.white;
+    }
+    severityBadge(severity) {
+        switch (severity.toLowerCase()) {
+            case "critical": return chalk_1.default.bgRed.white.bold(" CRIT ");
+            case "high": return chalk_1.default.bgHex("#ff6b35").white.bold(" HIGH ");
+            case "medium": return chalk_1.default.bgYellow.black(" MED  ");
+            case "low": return chalk_1.default.bgGreen.black(" LOW  ");
+            default: return chalk_1.default.bgGray.white(" INFO ");
+        }
+    }
+    colorCount(count, severity) {
+        if (count === 0)
+            return chalk_1.default.green("0");
+        switch (severity) {
+            case "critical": return chalk_1.default.red.bold(String(count));
+            case "high": return chalk_1.default.hex("#ff6b35").bold(String(count));
+            case "medium": return chalk_1.default.yellow(String(count));
+            default: return String(count);
+        }
+    }
+    formatDuration(ms) {
+        if (ms < 1000)
+            return `${ms}ms`;
+        if (ms < 60000)
+            return `${(ms / 1000).toFixed(1)}s`;
+        return `${Math.floor(ms / 60000)}m ${Math.floor((ms % 60000) / 1000)}s`;
+    }
+}
+exports.TerminalReporter = TerminalReporter;
+//# sourceMappingURL=terminal.js.map

package/dist/output/terminal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal.js","sourceRoot":"","sources":["../../src/output/terminal.ts"],"names":[],"mappings":";;;;;;AAAA,kDAA0B;AAC1B,4DAA+B;AAwB/B,MAAa,gBAAgB;IAC3B,MAAM;QACJ,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC,CAAC;QACtE,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC,CAAC;QACtE,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC,CAAC;QACtE,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC,CAAC;QACtE,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC,CAAC;QACtE,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC,CAAC;QACtE,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC,CAAC;QACzE,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC,CAAC;IAC1F,CAAC;IAED,YAAY,CAAC,MAAsB;QACjC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEhB,gBAAgB;QAChB,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,eAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAClE,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,eAAK,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACjG,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,GAAG,UAAU,CAAC,IAAI,MAAM,CAAC,KAAK,OAAO,CAAC,GAAG,eAAK,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC5H,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEhB,eAAe;QACf,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEhB,gBAAgB;QAChB,MAAM,YAAY,GAAG,IAAI,oBAAK,CAAC;YAC7B,IAAI,EAAE;gBACJ,eAAK,CAAC,KAAK,CAAC,UAAU,CAAC;gBACvB,eAAK,CAAC,KAAK,CAAC,OAAO,CAAC;aACrB;YACD,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;YACnB,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE;SACtC,CAAC,CAAC;QAEH,YAAY,CAAC,IAAI,CACf,CAAC,eAAK,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,EAC7E,CAAC,eAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,EAC5E,CAAC,eAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,EAC1E,CAAC,eAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,EAChE,CAAC,eAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EACjD,CAAC,eAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,eAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAC/E,CAAC;QAEF,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEhB,+BAA+B;QAC/B,IAAI,MAAM,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtC,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAEhB,MAAM,SAAS,GAAG,IAAI,oBAAK,CAAC;gBAC1B,IAAI,EAAE;oBACJ,eAAK,CAAC,KAAK,CAAC,KAAK,CAAC;oBAClB,eAAK,CAAC,KAAK,CAAC,OAAO,CAAC;oBACpB,eAAK,CAAC,KAAK,CAAC,MAAM,CAAC;oBACnB,eAAK,CAAC,KAAK,CAAC,KAAK,CAAC;iBACnB;gBACD,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;gBAC3B,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE;gBACrC,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;YAEH,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;gBACvD,SAAS,CAAC,IAAI,CAAC;oBACb,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC;oBACjC,IAAI,CAAC,KAAK;oBACV,IAAI,CAAC,IAAI;oBACT,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG;iBACpE,CAAC,CAAC;YACL,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;YAElC,IAAI,MAAM,CAAC,eAAe,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;gBACvC,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,eAAe,CAAC,MAAM,GAAG,EAAE,uBAAuB,CAAC,CAAC,CAAC;YAClG,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,8DAA8D,CAAC,CAAC,CAAC;QAC3F,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAED,gBAAgB,CAAC,SAAiB;QAChC,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,KAAK,SAAS,GAAG,CAAC,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAEO,aAAa,CAAC,KAAa;QACjC,MAAM,KAAK,GAAG,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,KAAK,GAAG,MAAM,CAAC;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,eAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACtE,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,IAAI,KAAK,GAAG,CAAC,CAAC;IACpC,CAAC;IAEO,aAAa,CAAC,KAAa;QACjC,IAAI,KAAK,IAAI,EAAE;YAAE,OAAO,eAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAC5C,IAAI,KAAK,IAAI,EAAE;YAAE,OAAO,eAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC7C,IAAI,KAAK,IAAI,EAAE;YAAE,OAAO,eAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC;QACrD,OAAO,eAAK,CAAC,KAAK,CAAC,KAAK,CAAC;IAC3B,CAAC;IAEO,aAAa,CAAC,QAAgB;QACpC,QAAQ,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;YAC/B,KAAK,UAAU,CAAC,CAAC,OAAO,eAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACzD,KAAK,MAAM,CAAC,CAAC,OAAO,eAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAChE,KAAK,QAAQ,CAAC,CAAC,OAAO,eAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACrD,KAAK,KAAK,CAAC,CAAC,OAAO,eAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACjD,OAAO,CAAC,CAAC,OAAO,eAAK,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAEO,UAAU,CAAC,KAAa,EAAE,QAAgB;QAChD,IAAI,KAAK,KAAK,CAAC;YAAE,OAAO,eAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzC,QAAQ,QAAQ,EAAE,CAAC;YACjB,KAAK,UAAU,CAAC,CAAC,OAAO,eAAK,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACtD,KAAK,MAAM,CAAC,CAAC,OAAO,eAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC7D,KAAK,QAAQ,CAAC,CAAC,OAAO,eAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAClD,OAAO,CAAC,CAAC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAEO,cAAc,CAAC,EAAU;QAC/B,IAAI,EAAE,GAAG,IAAI;YAAE,OAAO,GAAG,EAAE,IAAI,CAAC;QAChC,IAAI,EAAE,GAAG,KAAK;YAAE,OAAO,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;QACpD,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,KAAK,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC;IAC1E,CAAC;CACF;AAzID,4CAyIC"}

package/package.json

@@ -0,0 +1,33 @@
+{
+  "name": "fortly-cli",
+  "version": "1.0.0",
+  "description": "Fortly CLI — Automated web security scanner with AI-powered vulnerability detection",
+  "bin": {
+    "fortly": "./bin/fortly.js"
+  },
+  "main": "dist/cli.js",
+  "files": ["bin/", "dist/", "README.md", "LICENSE"],
+  "scripts": {
+    "build": "tsc",
+    "test": "jest --coverage",
+    "start": "ts-node src/cli.ts"
+  },
+  "keywords": ["security", "scanner", "vulnerability", "dast", "owasp", "pentest", "cli"],
+  "dependencies": {
+    "commander": "^12.0.0",
+    "ora": "^5.4.1",
+    "chalk": "^4.1.2",
+    "cli-table3": "^0.6.0",
+    "conf": "^10.2.0",
+    "axios": "^1.6.0"
+  },
+  "devDependencies": {
+    "@types/node": "^20.0.0",
+    "@types/jest": "^29.0.0",
+    "jest": "^29.0.0",
+    "ts-jest": "^29.0.0",
+    "ts-node": "^10.9.2",
+    "typescript": "^5.0.0"
+  },
+  "engines": { "node": ">=18.0.0" }
+}