web3guard-cli 1.0.0 → 1.1.1

package/dist/api.js

@@ -56,7 +56,13 @@ async function scanContract(filePath) {
         throw new Error(`File not found: ${absolutePath}`);
     }
     const sourceCode = fs.readFileSync(absolutePath, 'utf8');
-    const ecosystem = absolutePath.endsWith('.sol') ? 'Solidity' : 'Rust';
+    let ecosystem = 'Rust';
+    if (absolutePath.endsWith('.sol'))
+        ecosystem = 'Solidity';
+    else if (absolutePath.endsWith('.move'))
+        ecosystem = 'Move';
+    else if (absolutePath.endsWith('.cairo'))
+        ecosystem = 'Cairo';
     const response = await client.post('/scan', {
         source_code: sourceCode,
         ecosystem: ecosystem,
@@ -79,7 +85,7 @@ function findContracts(dir) {
             }
         }
         else {
-            if (filePath.endsWith('.rs') || filePath.endsWith('.sol')) {
+            if (filePath.endsWith('.rs') || filePath.endsWith('.sol') || filePath.endsWith('.move') || filePath.endsWith('.cairo')) {
                 results.push(filePath);
             }
         }

package/dist/cli.js

@@ -41,6 +41,8 @@ const commander_1 = require("commander");
 const chalk_1 = __importDefault(require("chalk"));
 const ora_1 = __importDefault(require("ora"));
 const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const child_process_1 = require("child_process");
 const api_1 = require("./api");
 const config_1 = require("./config");
 const program = new commander_1.Command();
@@ -49,27 +51,45 @@ program
     .description('CLI for Web3 Guard - Intelligent Multi-Chain Auditing & Security Oracle')
     .version('1.0.0');
 program
-    .command('scan <path>')
+    .command('scan [path]')
     .description('Scan a local smart contract file or directory for vulnerabilities')
     .option('--json', 'Output result in JSON format')
     .option('--out <file>', 'Save output to a file (JSON format)')
+    .option('--staged', 'Scan only staged files in Git')
+    .option('--strict', 'Exit with code 1 if vulnerabilities are found')
     .action(async (scanPath, options) => {
     let filesToScan = [];
-    try {
-        const stat = fs.statSync(scanPath);
-        if (stat.isDirectory()) {
-            filesToScan = (0, api_1.findContracts)(scanPath);
+    if (options.staged) {
+        try {
+            const output = (0, child_process_1.execSync)('git diff --cached --name-only --diff-filter=ACM').toString();
+            filesToScan = output.split('\n').filter(f => f.endsWith('.rs') || f.endsWith('.sol') || f.endsWith('.move') || f.endsWith('.cairo')).map(f => f.trim()).filter(f => f.length > 0);
         }
-        else {
-            filesToScan = [scanPath];
+        catch (e) {
+            console.error(chalk_1.default.red('Error running git command. Are you in a git repository?'));
+            process.exit(1);
         }
     }
-    catch (e) {
-        console.error(chalk_1.default.red(`Error accessing path: ${e.message}`));
-        return;
+    else {
+        if (!scanPath) {
+            console.error(chalk_1.default.red('Error: path is required if --staged is not used.'));
+            process.exit(1);
+        }
+        try {
+            const stat = fs.statSync(scanPath);
+            if (stat.isDirectory()) {
+                filesToScan = (0, api_1.findContracts)(scanPath);
+            }
+            else {
+                filesToScan = [scanPath];
+            }
+        }
+        catch (e) {
+            console.error(chalk_1.default.red(`Error accessing path: ${e.message}`));
+            return;
+        }
     }
     if (filesToScan.length === 0) {
-        console.log(chalk_1.default.yellow('No .rs or .sol files found to scan.'));
+        console.log(chalk_1.default.yellow('No .rs, .sol, .move, or .cairo files found to scan.'));
         return;
     }
     let allResults = [];
@@ -102,7 +122,13 @@ program
         allResults.forEach(({ file, result, error }) => {
             console.log(`\n${chalk_1.default.cyan.bold(file)}:`);
             if (error) {
-                console.log(chalk_1.default.red(`Error: ${error}`));
+                if (String(error).includes("429") || String(error).toLowerCase().includes("exhausted")) {
+                    console.log(chalk_1.default.bgRed.white.bold(' ⏳ AI SCANNER RATE LIMITED '));
+                    console.log(chalk_1.default.yellow('The backend is under heavy load. Exponential backoff retry limit reached. Please try again in a few seconds.'));
+                }
+                else {
+                    console.log(chalk_1.default.red(`Error: ${error}`));
+                }
                 return;
             }
             if (result.vulnerabilities && result.vulnerabilities.length > 0) {
@@ -126,6 +152,12 @@ program
             }
         });
     }
+    if (options.strict) {
+        const hasVulnerabilities = allResults.some(r => r.result && r.result.vulnerabilities && r.result.vulnerabilities.length > 0);
+        if (hasVulnerabilities) {
+            process.exit(1);
+        }
+    }
 });
 program
     .command('score <address>')
@@ -181,4 +213,31 @@ program
         console.log(chalk_1.default.yellow('Usage: web3guard config set api-url <url>'));
     }
 });
+program
+    .command('init-hook')
+    .description('Initialize a Git pre-commit hook for Web3 Guard')
+    .action(() => {
+    const hookDir = path.join(process.cwd(), '.git', 'hooks');
+    const hookPath = path.join(hookDir, 'pre-commit');
+    if (!fs.existsSync(hookDir)) {
+        console.error(chalk_1.default.red('Error: .git/hooks directory not found. Are you in a Git repository?'));
+        process.exit(1);
+    }
+    const hookContent = `#!/bin/sh
+echo "🛡️ Running Web3 Guard Pre-Commit Scan..."
+npx web3guard-cli scan --staged --strict
+if [ $? -ne 0 ]; then
+  echo "❌ Security vulnerabilities found! Commit rejected."
+  exit 1
+fi
+`;
+    try {
+        fs.writeFileSync(hookPath, hookContent, { mode: 0o755 });
+        console.log(chalk_1.default.green('✅ Successfully installed Web3 Guard pre-commit hook at .git/hooks/pre-commit'));
+    }
+    catch (e) {
+        console.error(chalk_1.default.red(`Error writing hook file: ${e.message}`));
+        process.exit(1);
+    }
+});
 program.parse(process.argv);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "web3guard-cli",
-  "version": "1.0.0",
+  "version": "1.1.1",
   "description": "Web3 Guard CLI and MCP Server",
   "main": "dist/index.js",
   "files": [