itworksbut 0.7.0 → 0.7.1

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "itworksbut",
-    "version": "0.7.0",
+    "version": "0.7.1",
     "description": "Static CI checks for common security, repo, dependency, build, and deployment risks in JavaScript vibe coding projects.",
     "type": "module",
     "bin": {
@@ -13,7 +13,7 @@
         "itworksbut.config.json"
     ],
     "engines": {
-        "node": ">=20"
+        "node": ">=26"
     },
     "scripts": {
         "test": "node --test",
@@ -36,7 +36,10 @@
     ],
     "license": "MIT",
     "dependencies": {
-        "artillery": "^2.0.30",
+        "@smithy/config-resolver": "4.5.3",
+        "@smithy/node-config-provider": "4.4.3",
+        "@smithy/property-provider": "4.2.3",
+        "artillery": "2.0.30",
         "boxen": "^8.0.1",
         "chalk": "^5.6.2",
         "cli-table3": "^0.6.5",

package/src/commands/stress.js

@@ -36,9 +36,10 @@ export async function runStressCommand(args, options = {}) {
 
 export async function runStress(options, runnerOptions = {}) {
   const startedAt = new Date();
-  const discovery = await discoverEndpoints(options.rootPath);
+  const discovery = withExplicitTargetEndpoint(await discoverEndpoints(options.rootPath), options.targetPath);
   const baseDetails = {
     target: options.target,
+    artilleryTarget: options.artilleryTarget || options.target,
     duration: options.duration,
     arrivalRate: options.arrivalRate,
     maxVusers: options.maxVusers,
@@ -77,7 +78,7 @@ export async function runStress(options, runnerOptions = {}) {
   }
 
   const config = createArtilleryConfig({
-    target: options.target,
+    target: options.artilleryTarget || options.target,
     duration: options.duration,
     arrivalRate: options.arrivalRate,
     maxVusers: options.maxVusers,
@@ -112,3 +113,30 @@ function stressResult(result) {
     ...result
   };
 }
+
+function withExplicitTargetEndpoint(discovery, targetPath) {
+  if (!targetPath) return discovery;
+  if (discovery.endpoints.some((endpoint) => endpoint.method === "GET" && endpoint.path === targetPath)) {
+    return discovery;
+  }
+
+  const explicitEndpoint = {
+    method: "GET",
+    path: targetPath,
+    source: "--target",
+    type: "explicit-target",
+    dynamic: false,
+    status: "selected"
+  };
+
+  return {
+    status: "pass",
+    endpoints: sortEndpoints([...discovery.endpoints, explicitEndpoint]),
+    safeEndpoints: sortEndpoints([...discovery.safeEndpoints, explicitEndpoint]),
+    skippedEndpoints: discovery.skippedEndpoints
+  };
+}
+
+function sortEndpoints(endpoints) {
+  return [...endpoints].sort((a, b) => `${a.method} ${a.path}`.localeCompare(`${b.method} ${b.path}`));
+}

package/src/utils/targetSafety.js

@@ -15,6 +15,8 @@ export const STRESS_LIMITS = {
 
 export function validateStressOptions(args = {}) {
   const target = normalizeTarget(args.target || STRESS_DEFAULTS.target);
+  const parsedTarget = new URL(target);
+  const targetPath = getExplicitTargetPath(parsedTarget);
   const duration = parsePositiveNumber(args.duration, STRESS_DEFAULTS.duration, "duration");
   const arrivalRate = parsePositiveNumber(args.arrivalRate, STRESS_DEFAULTS.arrivalRate, "arrival-rate");
   const maxVusers = parsePositiveInteger(args.maxVusers, STRESS_DEFAULTS.maxVusers, "max-vusers");
@@ -32,6 +34,8 @@ export function validateStressOptions(args = {}) {
 
   return {
     target,
+    artilleryTarget: targetPath ? parsedTarget.origin : target,
+    targetPath,
     duration,
     arrivalRate,
     maxVusers,
@@ -66,6 +70,12 @@ function normalizeTarget(value) {
   return parsed.toString().replace(/\/$/, "");
 }
 
+function getExplicitTargetPath(parsed) {
+  const pathname = parsed.pathname.replace(/\/$/, "") || "/";
+  if (pathname === "/" && !parsed.search) return null;
+  return `${pathname}${parsed.search}`;
+}
+
 function parsePositiveNumber(value, fallback, label) {
   if (value === undefined || value === null || value === "") return fallback;
   const number = Number(value);