korext 0.9.4 → 0.9.6

package/README.md

@@ -99,6 +99,16 @@ OWASP Top 10 | PCI-DSS | HIPAA | GDPR | SOC 2 | NIST SP 800-53 | NIST SP 800-171
 | `KOREXT_API_TOKEN` | API authentication token (recommended) |
 | `KOREXT_TOKEN` | Deprecated alias (shows warning) |
 
+## Changelog
+
+### v0.9.5
+
+Fixed
+- Watch mode now detects file changes correctly and scans on startup
+- Enforcing a nonexistent directory now prints an error and exits with code 2 instead of silently passing
+- Offline enforcement prints how many rules are available versus how many require server analysis
+- Policy commands now default to the production API instead of localhost
+
 ## Links
 
 - Website: [korext.com](https://www.korext.com)
@@ -112,4 +122,4 @@ OWASP Top 10 | PCI-DSS | HIPAA | GDPR | SOC 2 | NIST SP 800-53 | NIST SP 800-171
 
 **Publisher**: Korext
 **License**: Proprietary
-**Version**: 0.8.0
+**Version**: 0.9.5

package/bin/korext.js

@@ -254,19 +254,30 @@ program
 program
   .command('enforce [dir]')
   .description('Statically analyze files in a directory against Korext policies')
-  .option('-p, --pack <packId>', 'Policy Pack ID to enforce', 'web')
+  .option('-p, --pack <packIds>', 'Policy Pack ID(s) to enforce (comma-separated, e.g. web,pci-dss-v1)', 'web')
   .option('-f, --format <format>', 'Output format (text, json, sarif)', 'text')
   .option('--offline', 'Force local-only analysis using cached rule definitions (no server calls)', false)
   .option('--sync-rules', 'Fetch and cache latest rule definitions before running analysis', false)
   .action(async (dirArg, options) => {
     const dir = dirArg || '.';
-    const pack = options.pack;
+    const packInput = options.pack;
+    // Multi-pack: split on comma, trim whitespace
+    const packIds = packInput.split(',').map(p => p.trim()).filter(Boolean);
+    const pack = packIds.length === 1 ? packIds[0] : packIds;
     const format = options.format.toLowerCase();
     const isText = format === 'text';
 
     let forceOffline = options.offline;
     let localDefinitions = null;
 
+    // Pre-flight: verify directory exists
+    const resolvedInputDir = path.resolve(dir);
+    if (!fs.existsSync(resolvedInputDir)) {
+      if (isText) console.error(chalk.red(`\n✖ Directory does not exist: ${resolvedInputDir}`));
+      else console.error(JSON.stringify({ error: `Directory does not exist: ${resolvedInputDir}` }));
+      process.exit(2);
+    }
+
     if (isText) {
       console.log(`\n${chalk.bold.hex('#F27D26')('▲ KOREXT CLI ENFORCEMENT ENGINE')} v${version}`);
       console.log(chalk.dim('======================================='));
@@ -295,6 +306,11 @@ program
       if (isText) {
         console.log(chalk.yellow('\n⚡ Offline mode: using local rule engine (regex-based analysis)'));
         console.log(chalk.dim(`   Cached rules: v${localDefinitions.version} · ${localDefinitions.ruleCount} rules · ${localDefinitions.packCount} packs`));
+        // Show rule coverage breakdown
+        const packRules = localDefinitions.packs?.[pack]?.rules || [];
+        const availableCount = packRules.filter(r => localDefinitions.rules?.[r]).length;
+        const serverOnlyCount = packRules.length - availableCount;
+        console.log(chalk.dim(`   Offline mode: ${availableCount} of ${packRules.length} rules available. ${serverOnlyCount} rules require server analysis.`));
         console.log(chalk.dim('   Note: AI-powered deep analysis is unavailable in offline mode.\n'));
       }
     }
@@ -308,7 +324,8 @@ program
 
     const report = {
       version,
-      packId: pack,
+      packId: Array.isArray(pack) ? pack[0] : pack,
+      packIds,
       directory: dir,
       summary: { totalFiles: 0, scannedFiles: 0, skippedFiles: 0, errorFiles: 0, critical: 0, high: 0, medium: 0, low: 0, totalViolations: 0 },
       results: []
@@ -330,7 +347,7 @@ program
       process.exit(0);
     }
 
-    if (isText) console.log(`Found ${files.length} files. Starting analysis with pack: ${chalk.cyan(pack)}...\n`);
+    if (isText) console.log(`Found ${files.length} files. Starting analysis with pack${packIds.length > 1 ? 's' : ''}: ${chalk.cyan(packIds.join(', '))}...\n`);
 
     let usedLocalEngine = false;
 
@@ -364,6 +381,8 @@ program
       } else {
         // Online mode: try server, fall back to local on failure
         try {
+          const controller = new AbortController();
+          const timeoutId = setTimeout(() => controller.abort(), 10000);
           const res = await fetch(`${API_URL}/api/ide/analyze`, {
             method: 'POST',
             headers: {
@@ -377,8 +396,10 @@ program
               packId: pack,
               requestSignature: false,
               asyncExplanations: false
-            })
+            }),
+            signal: controller.signal
           });
+          clearTimeout(timeoutId);
 
           if (!res.ok) {
             throw new Error(`HTTP ${res.status}`);
@@ -1309,6 +1330,29 @@ program
           if (fs.existsSync(fullPath)) analyzeWatchedFile(fullPath);
         }, DEBOUNCE_MS));
       });
+
+      // Also do an initial scan of all existing files on startup
+      const initialFiles = [];
+      function walkDir(d) {
+        let entries;
+        try { entries = fs.readdirSync(d, { withFileTypes: true }); } catch { return; }
+        for (const entry of entries) {
+          if (IGNORE_DIRS.has(entry.name)) continue;
+          const fullPath = path.join(d, entry.name);
+          if (entry.isDirectory()) {
+            walkDir(fullPath);
+          } else if (SUPPORTED_EXTS.has(path.extname(entry.name))) {
+            initialFiles.push(fullPath);
+          }
+        }
+      }
+      walkDir(dir);
+      if (initialFiles.length > 0) {
+        console.log(chalk.dim(`  Initial scan: ${initialFiles.length} file(s)...\n`));
+        for (const f of initialFiles) {
+          await analyzeWatchedFile(f);
+        }
+      }
     } catch (e) {
       console.error(chalk.red(`Failed to watch ${dir}: ${e.message}`));
       process.exit(1);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "korext",
-  "version": "0.9.4",
+  "version": "0.9.6",
   "description": "Korext Command Line Interface",
   "type": "module",
   "main": "bin/korext.js",