web3guard-cli 1.0.0 → 1.1.0

package/dist/cli.js

@@ -41,6 +41,8 @@ const commander_1 = require("commander");
 const chalk_1 = __importDefault(require("chalk"));
 const ora_1 = __importDefault(require("ora"));
 const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const child_process_1 = require("child_process");
 const api_1 = require("./api");
 const config_1 = require("./config");
 const program = new commander_1.Command();
@@ -49,24 +51,42 @@ program
     .description('CLI for Web3 Guard - Intelligent Multi-Chain Auditing & Security Oracle')
     .version('1.0.0');
 program
-    .command('scan <path>')
+    .command('scan [path]')
     .description('Scan a local smart contract file or directory for vulnerabilities')
     .option('--json', 'Output result in JSON format')
     .option('--out <file>', 'Save output to a file (JSON format)')
+    .option('--staged', 'Scan only staged files in Git')
+    .option('--strict', 'Exit with code 1 if vulnerabilities are found')
     .action(async (scanPath, options) => {
     let filesToScan = [];
-    try {
-        const stat = fs.statSync(scanPath);
-        if (stat.isDirectory()) {
-            filesToScan = (0, api_1.findContracts)(scanPath);
+    if (options.staged) {
+        try {
+            const output = (0, child_process_1.execSync)('git diff --cached --name-only --diff-filter=ACM').toString();
+            filesToScan = output.split('\n').filter(f => f.endsWith('.rs') || f.endsWith('.sol')).map(f => f.trim()).filter(f => f.length > 0);
         }
-        else {
-            filesToScan = [scanPath];
+        catch (e) {
+            console.error(chalk_1.default.red('Error running git command. Are you in a git repository?'));
+            process.exit(1);
         }
     }
-    catch (e) {
-        console.error(chalk_1.default.red(`Error accessing path: ${e.message}`));
-        return;
+    else {
+        if (!scanPath) {
+            console.error(chalk_1.default.red('Error: path is required if --staged is not used.'));
+            process.exit(1);
+        }
+        try {
+            const stat = fs.statSync(scanPath);
+            if (stat.isDirectory()) {
+                filesToScan = (0, api_1.findContracts)(scanPath);
+            }
+            else {
+                filesToScan = [scanPath];
+            }
+        }
+        catch (e) {
+            console.error(chalk_1.default.red(`Error accessing path: ${e.message}`));
+            return;
+        }
     }
     if (filesToScan.length === 0) {
         console.log(chalk_1.default.yellow('No .rs or .sol files found to scan.'));
@@ -126,6 +146,12 @@ program
             }
         });
     }
+    if (options.strict) {
+        const hasVulnerabilities = allResults.some(r => r.result && r.result.vulnerabilities && r.result.vulnerabilities.length > 0);
+        if (hasVulnerabilities) {
+            process.exit(1);
+        }
+    }
 });
 program
     .command('score <address>')
@@ -181,4 +207,31 @@ program
         console.log(chalk_1.default.yellow('Usage: web3guard config set api-url <url>'));
     }
 });
+program
+    .command('init-hook')
+    .description('Initialize a Git pre-commit hook for Web3 Guard')
+    .action(() => {
+    const hookDir = path.join(process.cwd(), '.git', 'hooks');
+    const hookPath = path.join(hookDir, 'pre-commit');
+    if (!fs.existsSync(hookDir)) {
+        console.error(chalk_1.default.red('Error: .git/hooks directory not found. Are you in a Git repository?'));
+        process.exit(1);
+    }
+    const hookContent = `#!/bin/sh
+echo "🛡️ Running Web3 Guard Pre-Commit Scan..."
+npx web3guard-cli scan --staged --strict
+if [ $? -ne 0 ]; then
+  echo "❌ Security vulnerabilities found! Commit rejected."
+  exit 1
+fi
+`;
+    try {
+        fs.writeFileSync(hookPath, hookContent, { mode: 0o755 });
+        console.log(chalk_1.default.green('✅ Successfully installed Web3 Guard pre-commit hook at .git/hooks/pre-commit'));
+    }
+    catch (e) {
+        console.error(chalk_1.default.red(`Error writing hook file: ${e.message}`));
+        process.exit(1);
+    }
+});
 program.parse(process.argv);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "web3guard-cli",
-  "version": "1.0.0",
+  "version": "1.1.0",
   "description": "Web3 Guard CLI and MCP Server",
   "main": "dist/index.js",
   "files": [