vibe-guard 1.2.0 → 2.1.0

package/README.md

@@ -1,45 +1,43 @@
 # ██ Vibe-Guard Security Scanner
 
-**Professional Security Scanner** - Zero dependencies, instant setup, works everywhere. Optimized performance for security scanning. Current ruleset: 28 essential security rules including container security.
+Vibe-Guard gives you a quick security pass over source code and configuration files, with 30 pattern-based rules covering common application, AI, dependency, and container risks. Findings include a suggested next step, so scans can also help you learn what to look for.
+
+It is a heuristic scanner, not a substitute for code review or a full security audit. It requires Node.js 20 or newer; npm installs its declared third-party runtime dependencies for you.
 
 [![npm version](https://img.shields.io/npm/v/vibe-guard.svg)](https://www.npmjs.com/package/vibe-guard)
 [![Downloads (total)](https://img.shields.io/npm/dt/vibe-guard.svg)](https://www.npmjs.com/package/vibe-guard)
 [![License](https://img.shields.io/npm/l/vibe-guard.svg)](https://github.com/Devjosef/vibe-guard/blob/main/LICENSE)
 
+
 ## Quick Start
 
 ```bash
 # Install globally
 npm install -g vibe-guard
 
-# Start interactive session
+# Interactive menu (scan and view rules)
 vibe-guard start
 
 # Scan your project
 vibe-guard scan .
 
-# Learn about security concepts
-vibe-guard learn xss-detection
-
-# Try with demo files
-vibe-guard demo
+# Export a SARIF report
+vibe-guard scan . --format sarif --output-file security-report.sarif
 ```
 
-## Interactive Security Learning
+`vibe-guard scan` requires a target path. Supported formats are `table`, `json`, `sarif`, and `html`. A scan with findings exits with code 1; scan errors exit with code 2. The interactive `start` menu lets you scan, view the rule list, and create or view a configuration file. There are no separate `learn`, `demo`, or `stats` commands.
 
-Vibe-Guard is more than a scanner—it's an educational platform that teaches you about web security through hands-on experience:
-
-### Understanding Vulnerabilities
+## Common issues and safer patterns
 
 **XSS (Cross-Site Scripting):**
 ```javascript
-// ❌ Vulnerable code
+// Vulnerable code
 app.get('/user', (req, res) => {
   const userInput = req.query.name;
   res.send('<h1>Hello ' + userInput + '</h1>'); // XSS vulnerability!
 });
 
-// ✅ Secure code
+// Secure code
 app.get('/user', (req, res) => {
   const userInput = req.query.name;
   res.send('<h1>Hello ' + escapeHtml(userInput) + '</h1>');
@@ -48,26 +46,26 @@ app.get('/user', (req, res) => {
 
 **SQL Injection:**
 ```javascript
-// ❌ Vulnerable code
+// Vulnerable code
 const query = 'SELECT * FROM users WHERE id = ' + userId; // SQL injection risk!
 
-// ✅ Secure code
+// Secure code
 const query = 'SELECT * FROM users WHERE id = ?';
 db.query(query, [userId]);
 ```
 
 **Exposed Secrets:**
 ```javascript
-// ❌ Vulnerable code
+// Vulnerable code
 const API_KEY = 'sk-1234567890abcdef'; // Secret exposed in source code!
 
-// ✅ Secure code
+// Secure code
 const API_KEY = process.env.API_KEY; // Environment variable
 ```
 
 **Container Security:**
 ```yaml
-# ❌ Vulnerable Kubernetes manifest
+# Vulnerable Kubernetes manifest
 apiVersion: apps/v1
 kind: Deployment
 spec:
@@ -80,7 +78,7 @@ spec:
           runAsUser: 0       # Root user vulnerability
           privileged: true   # Privileged container vulnerability
 
-# ✅ Secure Kubernetes manifest
+# Secure Kubernetes manifest
 apiVersion: apps/v1
 kind: Deployment
 spec:
@@ -88,7 +86,7 @@ spec:
     spec:
       containers:
       - name: app
-        image: nginx:1.21.6@sha256:abc123...  # Pinned digest
+        image: nginx:1.21.6@sha256:<real-image-digest>  # Replace with the registry's actual digest
         securityContext:
           runAsUser: 1000    # Non-root user
           runAsNonRoot: true
@@ -102,21 +100,22 @@ spec:
 3. **Parameterized Queries** - Use prepared statements for database operations
 4. **Environment Variables** - Never hardcode secrets in source code
 5. **Security Headers** - Implement proper HTTP security headers
+
 6. **Container Security** - Use non-root users, pinned image digests, and proper security contexts
 
 ## Comprehensive Security Coverage
 
-Vibe-Guard detects 28 types of vulnerabilities across multiple categories:
+Vibe-Guard detects 30 types of vulnerabilities across multiple categories:
 
 - **Authentication & Authorization**: Missing authentication, broken access control, session management
 - **Input Validation**: SQL injection, XSS, unvalidated input, directory traversal
 - **Data Protection**: Exposed secrets, hardcoded sensitive data, insecure logging
 - **Configuration**: Insecure configuration, missing security headers, CORS issues
-- **Modern Threats**: CSRF protection, AI-generated code validation, prompt injection
-- **Dependencies**: Insecure dependencies, outdated packages, vulnerability assessment
+- **Modern Threats**: AI provider tokens, unsafe LLM prompt construction, prompt injection, MCP security
+- **Dependencies**: Known vulnerable packages, floating versions, and mutable Git references
 - **Container Security**: Kubernetes security, Dockerfile vulnerabilities, container registry issues
 
-## Professional Use Cases
+## Use it in your workflow
 
 **CI/CD Integration:**
 ```yaml
@@ -125,6 +124,10 @@ Vibe-Guard detects 28 types of vulnerabilities across multiple categories:
   run: vibe-guard scan . --format sarif --output-file security-report.sarif
 ```
 
+## SARIF test reporting
+
+For local Jest test-result reporting, see [TEST_SCANNING.md](docs/TEST_SCANNING.md); that utility is separate from scanning project code.
+
 **Pre-commit Hook:**
 ```bash
 # .git/hooks/pre-commit
@@ -132,17 +135,9 @@ Vibe-Guard detects 28 types of vulnerabilities across multiple categories:
 vibe-guard scan . || exit 1
 ```
 
-**Interactive Learning:**
+**Interactive menu:**
 ```bash
-# Start interactive session
 vibe-guard start
-
-# Learn specific security concepts
-vibe-guard learn sql-injection
-vibe-guard learn xss-detection
-
-# Practice with demo files
-vibe-guard demo
 ```
 
 ## Installation Options
@@ -157,62 +152,31 @@ npm install -g vibe-guard
 brew install devjosef/tap/vibe-guard
 ```
 
-**Direct Download:**
-```bash
-# Linux
-curl -L https://github.com/Devjosef/vibe-guard/releases/latest/download/vibe-guard-linux-x64 -o vibe-guard
-chmod +x vibe-guard
-
-# macOS
-curl -L https://github.com/Devjosef/vibe-guard/releases/latest/download/vibe-guard-macos-x64 -o vibe-guard
-chmod +x vibe-guard
-
-# Windows
-curl -L https://github.com/Devjosef/vibe-guard/releases/latest/download/vibe-guard-windows-x64.exe -o vibe-guard.exe
-```
+Standalone binaries for Linux x64/arm64, macOS x64/arm64, and Windows x64 are built in CI and uploaded as workflow artifacts. They are not currently published as GitHub release downloads.
 
 ## Documentation & Resources
 
 - **[Getting Started](https://devjosef.github.io/vibe-guard/getting-started.html)** - Complete setup and configuration guide
-- **[Security Rules](https://devjosef.github.io/vibe-guard/rules.html)** - Detailed rule explanations and examples
+- **[Security Rules](https://devjosef.github.io/vibe-guard/features.html)** - Rule coverage and descriptions
 - **[Performance Guide](https://devjosef.github.io/vibe-guard/performance.html)** - Optimization and best practices
 - **[API Reference](https://devjosef.github.io/vibe-guard/docs.html)** - Programmatic usage and integration
 
 ## Community & Support
 
-**Join our community of security professionals and developers:**
+**Questions, feedback, or a finding that looks wrong?**
 
-- **Interactive Learning**: `vibe-guard start` - Begin your security journey
-- **Educational Commands**: `vibe-guard learn [topic]` - Master security concepts
-- **Hands-on Practice**: `vibe-guard demo` - Test with example vulnerabilities
-- **Performance Insights**: `vibe-guard stats` - Track your security impact
+- **Interactive menu**: `vibe-guard start` - Scan or view available rules
+- **SARIF export**: `vibe-guard scan . --format sarif --output-file report.sarif`
 - **Community Discussion**: [GitHub Discussions](https://github.com/Devjosef/vibe-guard/discussions)
 - **Issue Reporting**: [GitHub Issues](https://github.com/Devjosef/vibe-guard/issues)
 - **Repository**: [GitHub Repository](https://github.com/Devjosef/vibe-guard)
 
-## Why Choose Vibe-Guard?
-
-**Built for developers who code fast and need security that keeps up:**
-
-- **Zero Dependencies** - Lightweight, fast, and reliable
-- **28 Security Rules** - Comprehensive coverage of modern threats including container security
-- **Cross-Platform** - Works seamlessly across all operating systems
-- **Educational Focus** - Learn security while you scan
-- **OWASP Aligned** - Industry best practices and standards
-- **Developer-Friendly** - Simple, intuitive CLI interface
-- **Interactive Mode** - Guided learning with `vibe-guard start`
-- **Container Security** - Kubernetes, Dockerfile, and registry security scanning
-
-## Impact & Adoption
-
-Every scan contributes to a more secure web ecosystem:
+## What to expect
 
-- **500+ total downloads** on NPM with growing adoption
-- **28 security rules** covering contemporary threat vectors including container security
-- **Cross-platform support** for Linux, macOS, and Windows
-- **Zero dependencies** ensuring maximum compatibility
-- **Educational approach** - building security awareness
-- **Container security** - Kubernetes, Dockerfile, and registry vulnerability detection
+- Findings include the rule, severity, file and line, explanation, and suggested remediation.
+- Pattern-based checks can miss issues or flag safe code; review findings in context and do not treat a clean scan as proof that code is secure.
+- `start` is a small interactive menu for scanning and browsing rule descriptions, not a guided course.
+- CI runs the Jest suite on Node.js 20 and 22. Binary builds are CI artifacts until attached to a release.
 
 ## License
 

package/dist/bin/vibe-guard.js

@@ -41,10 +41,11 @@ const commander_1 = require("commander");
 const chalk_1 = __importDefault(require("chalk"));
 const index_1 = __importDefault(require("../index"));
 const version_1 = require("../types/version");
+const fs = __importStar(require("fs"));
+const readline = __importStar(require("readline"));
 const program = new commander_1.Command();
 // ASCII Art Logo
 function displayLogo() {
-    // Professional blue gradient effect
     const logo = [
         '██╗   ██╗██╗██████╗ ███████╗     ██████╗ ██╗   ██╗ █████╗ ██████╗ ██████╗ ',
         '╚██╗ ██╔╝██║██╔══██╗██╔════╝    ██╔════╝ ██║   ██║██╔══██╗██╔══██╗██╔══██╗',
@@ -53,7 +54,6 @@ function displayLogo() {
         '   ██║   ██║██████╔╝███████╗    ╚██████╔╝╚██████╔╝██║  ██║██║  ██║██████╔╝',
         '   ╚═╝   ╚═╝╚═════╝ ╚══════╝     ╚═════╝  ╚═════╝ ╚═╝  ╚═╝╚═╝  ╚═╝╚═════╝ '
     ];
-    // Subtle gradient from dark blue to lighter blue
     logo.forEach((line, index) => {
         let color;
         switch (index) {
@@ -79,294 +79,123 @@ function displayLogo() {
         }
         console.log(color.bold(line));
     });
-    // Clean subtitle with subtle accent
     console.log(chalk_1.default.blue.bold('                           ██  SECURITY SCANNER  ██\n'));
 }
-program
-    .name('vibe-guard')
-    .description('██  Vibe-Guard Security Scanner - Catch security issues before they catch you!')
-    .version(version_1.VERSION)
-    .hook('preAction', () => {
-    displayLogo();
-});
-const fs = __importStar(require("fs"));
+/**
+ * Run a scan and return an exit code instead of terminating the process.
+ * Returns: 0 = success (no issues), 1 = issues found, 2 = error/invalid args
+ */
 async function handleScan(target, options) {
     try {
-        console.log(chalk_1.default.blue.bold('╔══════════════════════════════════════════════════════════════════════════════╗'));
-        console.log(chalk_1.default.blue.bold('║                        STARTING VIBE-GUARD SECURITY SCAN                        ║'));
-        console.log(chalk_1.default.blue.bold('║                              THREAT DETECTION ACTIVE                           ║'));
-        console.log(chalk_1.default.blue.bold('╚══════════════════════════════════════════════════════════════════════════════╝\n'));
-        // Validate severity level if provided
-        if (options.severity && !['critical', 'high', 'medium', 'low'].includes(options.severity)) {
-            console.error(chalk_1.default.red.bold('❌ Error: Invalid severity level. Must be one of: critical, high, medium, low'));
-            process.exit(1);
-        }
         const scanOptions = {
             target,
-            format: options.format,
-            verbose: options.verbose,
-            exclude: options.exclude,
-            include: options.include
+            format: options.format ?? 'table',
+            verbose: false
         };
-        // Add optional properties only when they have values
-        if (options.severity)
-            scanOptions.severity = options.severity;
-        if (options.config)
-            scanOptions.config = options.config;
-        if (options.parallel)
-            scanOptions.parallel = options.parallel;
-        if (options.maxFiles)
-            scanOptions.maxFiles = parseInt(options.maxFiles);
         const vibeGuard = new index_1.default();
-        const output = await vibeGuard.scanAndFormat(scanOptions);
+        const result = await vibeGuard.scan(scanOptions);
+        const output = vibeGuard.formatResults(result, scanOptions.format);
         if (options.outputFile) {
             fs.writeFileSync(options.outputFile, output);
-            console.log(chalk_1.default.green(`✅ Results written to: ${options.outputFile}`));
+            console.error(chalk_1.default.green(`Results written to: ${options.outputFile}`));
         }
         else {
             console.log(output);
         }
-        const result = await vibeGuard.scan(scanOptions);
         if (result.issuesFound > 0) {
-            process.exit(1);
+            return 1;
         }
+        return 0;
     }
     catch (error) {
-        console.error(chalk_1.default.red.bold('❌ Error:'), error instanceof Error ? error.message : 'Unknown error');
-        process.exit(1);
+        console.error(chalk_1.default.red.bold('Error:'), error instanceof Error ? error.message : 'Unknown error');
+        return 2;
     }
 }
 program
-    .command('scan')
-    .description('Scan files or directories for security issues')
-    .argument('<target>', 'File or directory to scan')
-    .option('-f, --format <format>', 'Output format (table, json, sarif, html)')
-    .option('-o, --output-file <file>', 'Write output to file')
-    .option('-v, --verbose', 'Verbose output', false)
-    .option('-s, --severity <level>', 'Minimum severity level (critical, high, medium, low)')
-    .option('-c, --config <file>', 'Path to configuration file')
-    .option('--parallel', 'Enable parallel processing for better performance')
-    .option('--max-files <number>', 'Maximum files to process concurrently')
-    .option('--exclude <patterns...>', 'Exclude patterns')
-    .option('--include <patterns...>', 'Include patterns')
-    .action(handleScan);
-program
-    .command('rules')
-    .description('List all available security rules')
-    .action(() => {
-    const vibeGuard = new index_1.default();
-    const rules = vibeGuard.getRules();
-    console.log(chalk_1.default.blue.bold('╔══════════════════════════════════════════════════════════════════════════════╗'));
-    console.log(chalk_1.default.blue.bold('║                           AVAILABLE SECURITY RULES                           ║'));
-    console.log(chalk_1.default.blue.bold('║                              THREAT DETECTION MATRIX                          ║'));
-    console.log(chalk_1.default.blue.bold('╚══════════════════════════════════════════════════════════════════════════════╝\n'));
-    rules.forEach(rule => {
-        const severityColor = rule.severity === 'critical' ? chalk_1.default.red.bold :
-            rule.severity === 'high' ? chalk_1.default.red :
-                rule.severity === 'medium' ? chalk_1.default.yellow :
-                    chalk_1.default.blue;
-        console.log(`${chalk_1.default.bold(rule.name)} ${severityColor(`[${rule.severity.toUpperCase()}]`)}`);
-        console.log(`  ${chalk_1.default.gray(rule.description)}\n`);
-    });
-});
-program
-    .command('version')
-    .description('Show version information')
-    .action(() => {
-    console.log(chalk_1.default.blue.bold('╔══════════════════════════════════════════════════════════════════════════════╗'));
-    console.log(chalk_1.default.blue.bold('║                           VIBE-GUARD SECURITY SCANNER                        ║'));
-    console.log(chalk_1.default.blue.bold('║                              THREAT DETECTION ENGINE                          ║'));
-    console.log(chalk_1.default.blue.bold('╚══════════════════════════════════════════════════════════════════════════════╝'));
-    const vibeGuard = new index_1.default();
-    console.log(chalk_1.default.blue.bold(`\nVERSION: ${vibeGuard.getVersion()}`));
-    console.log(chalk_1.default.gray('Built for developers who code fast and need security that keeps up! 🚀'));
-    console.log(chalk_1.default.gray('TypeScript-powered, zero-dependency security scanning'));
-});
-program
-    .command('init')
-    .description('Create a default vibe-guard.json configuration file')
-    .action(() => {
-    const vibeGuard = new index_1.default();
-    vibeGuard.createConfigFile();
-});
+    .name('vibe-guard')
+    .description('██  Vibe-Guard Security Scanner - Catch security issues before they catch you!')
+    .version(version_1.VERSION);
 program
     .command('start')
     .description('Start interactive Vibe-Guard session')
-    .action(async () => {
-    console.log(chalk_1.default.blue.bold('╔══════════════════════════════════════════════════════════════════════════════╗'));
-    console.log(chalk_1.default.blue.bold('║                        WELCOME TO VIBE-GUARD INTERACTIVE                        ║'));
-    console.log(chalk_1.default.blue.bold('║                              INTERACTIVE SECURITY SCANNING                      ║'));
-    console.log(chalk_1.default.blue.bold('╚══════════════════════════════════════════════════════════════════════════════╝\n'));
-    console.log(chalk_1.default.cyan.bold('Choose an option:\n'));
-    console.log(chalk_1.default.white('1. 🔍 Scan a file or directory'));
-    console.log(chalk_1.default.white('2. 📋 View all security rules'));
-    console.log(chalk_1.default.white('3. ⚙️  Create configuration file'));
-    console.log(chalk_1.default.white('4. 📊 Show sample configuration'));
-    console.log(chalk_1.default.white('5. ℹ️  About Vibe-Guard'));
-    console.log(chalk_1.default.white('6. 🚪 Exit\n'));
-    // For now, just show the menu and exit
-    // In a full implementation, you'd use a library like 'inquirer' for interactive prompts
-    console.log(chalk_1.default.yellow('💡 Tip: Use specific commands for direct access:'));
-    console.log(chalk_1.default.gray('   vibe-guard scan <target>     - Scan files/directories'));
-    console.log(chalk_1.default.gray('   vibe-guard rules             - View security rules'));
-    console.log(chalk_1.default.gray('   vibe-guard init              - Create config file'));
-    console.log(chalk_1.default.gray('   vibe-guard config            - Show sample config'));
-    console.log(chalk_1.default.gray('   vibe-guard version           - Show version info\n'));
-    console.log(chalk_1.default.blue.bold('╔══════════════════════════════════════════════════════════════════════════════╗'));
-    console.log(chalk_1.default.blue.bold('║                              THANK YOU FOR USING VIBE-GUARD                    ║'));
-    console.log(chalk_1.default.blue.bold('║                              STAY SECURE! 🚀                                ║'));
-    console.log(chalk_1.default.blue.bold('╚══════════════════════════════════════════════════════════════════════════════╝'));
-});
-program
-    .command('config')
-    .description('Show sample configuration')
     .action(() => {
-    const vibeGuard = new index_1.default();
-    console.log(chalk_1.default.blue.bold('📝 Sample vibe-guard.json Configuration:\n'));
-    console.log(vibeGuard.generateConfig());
-});
-program
-    .command('learn')
-    .description('Learn about security concepts and vulnerabilities')
-    .argument('[topic]', 'Security topic to learn about (xss, sql-injection, csrf, etc.)')
-    .action((topic) => {
-    const vibeGuard = new index_1.default();
-    if (topic) {
-        const rule = vibeGuard.getRuleByName(topic);
-        if (rule) {
-            console.log(chalk_1.default.blue.bold(`📚 Learning about: ${rule.name}\n`));
-            console.log(chalk_1.default.white(rule.description));
-            console.log(chalk_1.default.yellow(`\nSeverity: ${rule.severity.toUpperCase()}`));
-            console.log(chalk_1.default.gray(`\nThis rule helps detect ${rule.name.toLowerCase()} vulnerabilities.`));
-        }
-        else {
-            console.log(chalk_1.default.red(`❌ Unknown topic: ${topic}`));
-            console.log(chalk_1.default.gray('Use "vibe-guard rules" to see available topics.'));
-        }
-    }
-    else {
-        console.log(chalk_1.default.blue.bold('📚 Vibe-Guard Security Learning Center\n'));
-        console.log(chalk_1.default.white('Learn about security vulnerabilities and how to prevent them.\n'));
-        console.log(chalk_1.default.yellow('Available topics:'));
-        const rules = vibeGuard.getRules();
-        rules.forEach(rule => {
-            console.log(`  • ${rule.name.toLowerCase().replace(/-/g, ' ')}`);
-        });
-        console.log(chalk_1.default.gray('\nExample: vibe-guard learn xss-detection'));
-    }
-});
-program
-    .command('demo')
-    .description('Run security scan on demo files to see how it works')
-    .action(async () => {
-    console.log(chalk_1.default.blue.bold('🎯 Vibe-Guard Security Demo\n'));
-    console.log(chalk_1.default.white('Creating demo files with security vulnerabilities...\n'));
-    const demoDir = './vibe-guard-demo';
-    if (!fs.existsSync(demoDir)) {
-        fs.mkdirSync(demoDir);
-    }
-    const xssDemo = `${demoDir}/vulnerable-app.js`;
-    fs.writeFileSync(xssDemo, `
-// Demo file with XSS vulnerability
-app.get('/user', (req, res) => {
-  const userInput = req.query.name;
-  res.send('<h1>Hello ' + userInput + '</h1>'); // XSS vulnerability
-});
-
-// SQL Injection demo
-app.get('/users', (req, res) => {
-  const id = req.query.id;
-  const query = 'SELECT * FROM users WHERE id = ' + id; // SQL injection
-  db.query(query);
-});
-
-// Hardcoded secrets
-const API_KEY = 'sk-1234567890abcdef'; // Exposed secret
-const PASSWORD = 'admin123'; // Hardcoded password
-`);
-    console.log(chalk_1.default.green('✅ Created demo files with security vulnerabilities'));
-    console.log(chalk_1.default.gray(`Location: ${demoDir}`));
-    console.log(chalk_1.default.white('\nRunning security scan...\n'));
-    try {
-        const vibeGuard = new index_1.default();
-        const output = await vibeGuard.scanAndFormat({
-            target: demoDir,
-            format: 'table',
-            verbose: true
+    const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+    const menu = `\nChoose an option:\n1. Scan a file or directory\n2. View all security rules\n3. Create configuration file\n4. Show sample configuration\n5. About Vibe-Guard\n6. Exit\n\nPlease enter your choice (1-6): `;
+    displayLogo();
+    const pause = (next) => rl.question(chalk_1.default.gray('\nPress Enter to continue...'), () => next());
+    const showMenu = () => {
+        rl.question(menu, (answer) => {
+            const choice = answer.trim();
+            switch (choice) {
+                case '1': {
+                    rl.question('Enter file or directory to scan (default: .): ', (target) => {
+                        Promise.resolve(handleScan(target || '.', {}))
+                            .catch(err => console.error(chalk_1.default.red('Scan error:'), err))
+                            .finally(() => pause(() => showMenu()));
+                    });
+                    break;
+                }
+                case '2': {
+                    const vibeGuard = new index_1.default();
+                    const rules = vibeGuard.getRules();
+                    console.log(chalk_1.default.blue.bold('\nAvailable Security Rules:\n'));
+                    rules.forEach(rule => {
+                        const severityColor = rule.severity === 'critical' ? chalk_1.default.red.bold :
+                            rule.severity === 'high' ? chalk_1.default.red :
+                                rule.severity === 'medium' ? chalk_1.default.yellow :
+                                    chalk_1.default.blue;
+                        console.log(`${chalk_1.default.bold(rule.name)} ${severityColor(`[${rule.severity.toUpperCase()}]`)}`);
+                        console.log(`  ${chalk_1.default.gray(rule.description)}\n`);
+                    });
+                    pause(() => showMenu());
+                    break;
+                }
+                case '3': {
+                    const vibeGuard = new index_1.default();
+                    vibeGuard.createConfigFile();
+                    pause(() => showMenu());
+                    break;
+                }
+                case '4': {
+                    const vibeGuard = new index_1.default();
+                    console.log(chalk_1.default.blue.bold('\nSample vibe-guard.json Configuration:\n'));
+                    console.log(vibeGuard.generateConfig());
+                    pause(() => showMenu());
+                    break;
+                }
+                case '5': {
+                    console.log(chalk_1.default.white('\nVibe-Guard Security Scanner - Designed for fast and secure development with AI-powered scanning.\n'));
+                    pause(() => showMenu());
+                    break;
+                }
+                case '6': {
+                    console.log(chalk_1.default.green('\nExiting Vibe-Guard. Stay secure!'));
+                    rl.close();
+                    break;
+                }
+                default: {
+                    console.log(chalk_1.default.red('\nInvalid choice. Please select 1-6.'));
+                    showMenu();
+                }
+            }
         });
-        console.log(output);
-        console.log(chalk_1.default.blue('\n🎓 What you learned:'));
-        console.log(chalk_1.default.white('• XSS vulnerabilities in user input'));
-        console.log(chalk_1.default.white('• SQL injection in database queries'));
-        console.log(chalk_1.default.white('• Exposed secrets and hardcoded credentials'));
-        console.log(chalk_1.default.gray('\nClean up: rm -rf vibe-guard-demo'));
-    }
-    catch (error) {
-        console.error(chalk_1.default.red('Error running demo:', error));
-    }
-});
-program
-    .command('community')
-    .description('Join the Vibe-Guard community and contribute')
-    .action(() => {
-    console.log(chalk_1.default.blue.bold('🤝 Vibe-Guard Community\n'));
-    console.log(chalk_1.default.white('Join us in making the web more secure!\n'));
-    console.log(chalk_1.default.yellow('📚 Learn:'));
-    console.log(chalk_1.default.white('  • vibe-guard learn [topic] - Learn about security concepts'));
-    console.log(chalk_1.default.white('  • vibe-guard demo - Try the tool with demo files\n'));
-    console.log(chalk_1.default.yellow('🔧 Contribute:'));
-    console.log(chalk_1.default.white('  • GitHub: https://github.com/Devjosef/vibe-guard'));
-    console.log(chalk_1.default.white('  • Issues: https://github.com/Devjosef/vibe-guard/issues'));
-    console.log(chalk_1.default.white('  • Discussions: https://github.com/Devjosef/vibe-guard/discussions\n'));
-    console.log(chalk_1.default.yellow('📖 Resources:'));
-    console.log(chalk_1.default.white('  • Documentation: https://devjosef.github.io/vibe-guard/'));
-    console.log(chalk_1.default.white('  • Security Rules: vibe-guard rules'));
-    console.log(chalk_1.default.white('  • Examples: vibe-guard demo\n'));
-    console.log(chalk_1.default.gray('Built for developers who code fast and need security that keeps up!'));
-});
-program
-    .command('stats')
-    .description('Show Vibe-Guard usage statistics and impact')
-    .action(() => {
-    console.log(chalk_1.default.blue.bold('📊 Vibe-Guard Impact Statistics\n'));
-    console.log(chalk_1.default.white('Your security scanning impact:\n'));
-    console.log(chalk_1.default.yellow('██ Security Rules: 25'));
-    console.log(chalk_1.default.white('  • Covers OWASP Top 10'));
-    console.log(chalk_1.default.white('  • Modern web vulnerabilities'));
-    console.log(chalk_1.default.white('  • AI/ML security concerns\n'));
-    console.log(chalk_1.default.yellow('🌍 Global Reach:'));
-    console.log(chalk_1.default.white('  • Cross-platform (Linux, macOS, Windows)'));
-    console.log(chalk_1.default.white('  • Multiple package managers'));
-    console.log(chalk_1.default.white('  • Zero dependencies\n'));
-    console.log(chalk_1.default.yellow('🎯 Use Cases:'));
-    console.log(chalk_1.default.white('  • CI/CD security scanning'));
-    console.log(chalk_1.default.white('  • Pre-commit hooks'));
-    console.log(chalk_1.default.white('  • Security audits'));
-    console.log(chalk_1.default.white('  • Educational tool\n'));
-    console.log(chalk_1.default.gray('Every scan makes the web a little more secure! 🚀'));
-});
-process.on('unhandledRejection', (reason, promise) => {
-    console.error(chalk_1.default.red.bold('❌ Unhandled Rejection at:'), promise, chalk_1.default.red('reason:'), reason);
-    process.exit(1);
-});
-process.on('uncaughtException', (error) => {
-    console.error(chalk_1.default.red.bold('❌ Uncaught Exception:'), error);
-    process.exit(1);
+    };
+    showMenu();
+    rl.on('close', () => {
+        process.exit(0);
+    });
 });
 program
-    .argument('[target]', 'File or directory to scan')
-    .option('-f, --format <format>', 'Output format (table, json, sarif, html)')
-    .option('-o, --output-file <file>', 'Write output to file')
-    .option('-v, --verbose', 'Verbose output', false)
-    .option('--exclude <patterns...>', 'Exclude patterns')
-    .option('--include <patterns...>', 'Include patterns')
-    .action((target, options) => {
-    if (target) {
-        handleScan(target, options);
-    }
-    else {
-        program.help();
-    }
-});
-program.parse();
+    .command('scan')
+    .description('Scan files or directories for security issues')
+    .argument('<target>', 'File or directory to scan')
+    .addOption(new commander_1.Option('-f, --format <format>', 'Output format')
+    .choices(['table', 'json', 'sarif', 'html'])
+    .default('table'))
+    .option('-o, --output-file <file>', 'Write output to a file')
+    .action(async (target, options) => {
+    process.exitCode = await handleScan(target, options);
+});
+void program.parseAsync(process.argv);
 //# sourceMappingURL=vibe-guard.js.map