guardvibe 1.9.4 → 1.9.5

package/build/cli.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from "module";
-import { readFileSync, writeFileSync, mkdirSync, existsSync, chmodSync, unlinkSync } from "fs";
+import { readFileSync, writeFileSync, mkdirSync, existsSync, chmodSync, unlinkSync, statSync } from "fs";
 import { join, dirname } from "path";
 import { homedir } from "os";
 const require = createRequire(import.meta.url);
@@ -523,8 +523,8 @@ function printUsage() {
   Options:
     --format <type>       Output format: markdown (default), json, sarif
     --output <file>       Write results to file instead of stdout
-    --fail-on <level>     Exit 1 when findings at this level exist
-                          Options: critical (default), high, medium, low, none
+    --fail-on <level>     Exit 1 when findings at this level or above exist
+                          critical (default) | high | medium | low | none
     --baseline <file>     Compare against a previous scan JSON for fix tracking
     --save-baseline       Save current scan as baseline (.guardvibe-baseline.json)
     --version, -V         Print version and exit
@@ -618,7 +618,14 @@ async function main() {
         const cliArgs = args.slice(1);
         const { flags, positional } = parseArgs(cliArgs);
         const targetPath = positional[0] ?? ".";
-        await runDirectoryScan(targetPath, flags);
+        // If target is a file (not directory), auto-redirect to check mode
+        if (targetPath !== "." && existsSync(targetPath) && !statSync(targetPath).isDirectory()) {
+            console.log(`  [INFO] "${targetPath}" is a file. Running: guardvibe check ${targetPath}\n`);
+            await runFileCheck(targetPath, flags);
+        }
+        else {
+            await runDirectoryScan(targetPath, flags);
+        }
     }
     else if (command === "diff") {
         const cliArgs = args.slice(1);

package/build/tools/check-code.js

@@ -163,6 +163,10 @@ export function analyzeCode(code, language, framework, filePath, configDir, rule
         const rateLimitRuleIds = new Set(["VG956", "VG030"]);
         if (isCronRoute && rateLimitRuleIds.has(rule.id))
             continue;
+        // Context-aware: skip rate limiting rules for webhook routes
+        // Webhooks are called by external services, not users — rate limiting is irrelevant
+        if (isWebhookRoute && rateLimitRuleIds.has(rule.id))
+            continue;
         // Context-aware: skip rate limiting rules for admin routes that have admin auth
         const isAdminRoute = filePath && /\/admin\//i.test(filePath);
         const hasAdminAuth = isAdminRoute && /(?:requireAdmin|adminOnly|orgRole|org:admin|isAdmin|checkRole|requireRole)/i.test(code);

package/build/tools/check-project.js

@@ -126,7 +126,7 @@ export function checkProject(files, format = "markdown", rules) {
             actionItems.forEach((item, i) => {
                 const fileCount = item.files.size;
                 const fileLabel = fileCount === 1 ? "1 file" : `${fileCount} files`;
-                lines.push(`${i + 1}. **[${item.rule.severity.toUpperCase()}] ${item.rule.name}** (${item.rule.id}) — ${item.count} occurrences in ${fileLabel}`, `   ${item.rule.fix}`, ``);
+                lines.push(`${i + 1}. **[${item.rule.severity.toUpperCase()}] ${item.rule.name}** (${item.rule.id}) — ${item.count} ${item.count === 1 ? "occurrence" : "occurrences"} in ${fileLabel}`, `   ${item.rule.fix}`, ``);
             });
         }
         lines.push(`---`, ``);

package/build/tools/scan-directory.js

@@ -220,7 +220,7 @@ export function scanDirectory(path, recursive = true, exclude = [], format = "ma
         actionItems.forEach((item, i) => {
             const fileCount = item.files.size;
             const fileLabel = fileCount === 1 ? "1 file" : `${fileCount} files`;
-            lines.push(`${i + 1}. **[${item.rule.severity.toUpperCase()}] ${item.rule.name}** (${item.rule.id}) — ${item.count} occurrences in ${fileLabel}`, `   ${item.rule.fix}`, ``);
+            lines.push(`${i + 1}. **[${item.rule.severity.toUpperCase()}] ${item.rule.name}** (${item.rule.id}) — ${item.count} ${item.count === 1 ? "occurrence" : "occurrences"} in ${fileLabel}`, `   ${item.rule.fix}`, ``);
         });
         lines.push(`---`, ``);
         for (const result of scanResults) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "guardvibe",
-  "version": "1.9.4",
+  "version": "1.9.5",
   "description": "Security MCP for vibe coding. 277 rules, 24 tools for Next.js, Supabase, Clerk, Stripe, Prisma, tRPC, Hono, GraphQL, Convex, Turso, Uploadthing, AI SDK, and the full AI-generated stack.",
   "type": "module",
   "bin": {