xploitscan 1.2.0 → 1.2.1

package/dist/index.js

@@ -7,6 +7,7 @@ import {
   clearProRulesCache,
   clearToken,
   detectFramework,
+  detectPlatform,
   downloadProRulesBundle,
   filterFalsePositives,
   getStoredToken,
@@ -18,14 +19,14 @@ import {
   storeToken,
   syncUser,
   uploadScanResults
-} from "./chunk-KE2IZNH6.js";
+} from "./chunk-4OFR3SIS.js";
 
 // src/index.ts
 import { Command } from "commander";
 
 // src/commands/scan.ts
 import { resolve as resolve2, join as join6 } from "path";
-import { watch as fsWatch } from "fs";
+import { watch as fsWatch, existsSync as existsSync5 } from "fs";
 import ora from "ora";
 import chalk2 from "chalk";
 
@@ -1769,6 +1770,21 @@ function renderTerminalReport(result, files) {
     if (frameworks.length > 0 && frameworks[0] !== "unknown") {
       console.log(chalk.gray("  Frameworks: ") + chalk.white(frameworks.join(", ")));
     }
+    const platforms = detectPlatform(files);
+    if (platforms.length > 0) {
+      const PLATFORM_LABELS = {
+        lovable: "Lovable",
+        bolt: "Bolt",
+        replit: "Replit",
+        cursor: "Cursor",
+        v0: "v0",
+        "claude-code": "Claude Code"
+      };
+      const labels = platforms.map((p) => PLATFORM_LABELS[p] ?? p);
+      console.log(
+        chalk.gray("  Detected: ") + chalk.cyan(labels.join(" + ") + " project") + chalk.gray(" \u2014 rules tuned for what these tools ship by default")
+      );
+    }
   }
   const GRADE_PERCENTILES = { "A+": 98, "A": 90, "B": 70, "C": 45, "D": 20, "F": 5 };
   const { grade, score, summary } = calculateGrade(findings, filesScanned);
@@ -2327,6 +2343,17 @@ ${isMonthlyCap ? "Monthly" : "Daily"} scan limit reached.`));
     timestamp: (/* @__PURE__ */ new Date()).toISOString(),
     directory: dir
   };
+  const PLATFORM_MARKERS = [
+    ".cursorrules",
+    ".cursor/",
+    ".replit",
+    "replit.nix",
+    ".bolt/",
+    ".stackblitzrc",
+    "CLAUDE.md",
+    ".claude/"
+  ];
+  const platformMarkerFiles = PLATFORM_MARKERS.filter((m) => existsSync5(join6(dir, m.replace(/\/$/, "")))).map((m) => ({ path: m, content: "" }));
   switch (format) {
     case "json":
       renderJsonReport(result);
@@ -2344,7 +2371,7 @@ ${isMonthlyCap ? "Monthly" : "Daily"} scan limit reached.`));
       renderDatadogReport(result);
       break;
     default:
-      renderTerminalReport(result, fileContentsForAnalysis);
+      renderTerminalReport(result, [...fileContentsForAnalysis, ...platformMarkerFiles]);
       break;
   }
   if (aiReviewed && !isSilent) {
@@ -2573,7 +2600,7 @@ Open this URL in your browser to log in:`));
 // src/commands/hook.ts
 import { execSync } from "child_process";
 import {
-  existsSync as existsSync5,
+  existsSync as existsSync6,
   readFileSync as readFileSync4,
   writeFileSync,
   chmodSync,
@@ -2636,7 +2663,7 @@ async function installHookCommand(options) {
   const hookPath = join7(hooksDir, "pre-commit");
   let existingContent = "";
   let hadExisting = false;
-  if (existsSync5(hookPath)) {
+  if (existsSync6(hookPath)) {
     existingContent = readFileSync4(hookPath, "utf-8");
     hadExisting = true;
     const alreadyInstalled = existingContent.includes(HOOK_START_MARKER) && existingContent.includes(HOOK_END_MARKER);
@@ -2683,7 +2710,7 @@ async function uninstallHookCommand() {
     process.exit(1);
   }
   const hookPath = join7(gitRoot, ".git", "hooks", "pre-commit");
-  if (!existsSync5(hookPath)) {
+  if (!existsSync6(hookPath)) {
     console.log(chalk4.yellow("\u26A0  No pre-commit hook found. Nothing to uninstall."));
     return;
   }
@@ -2713,7 +2740,7 @@ async function uninstallHookCommand() {
 
 // src/commands/cursor.ts
 import chalk5 from "chalk";
-import { mkdirSync, existsSync as existsSync6, writeFileSync as writeFileSync2, readFileSync as readFileSync5 } from "fs";
+import { mkdirSync, existsSync as existsSync7, writeFileSync as writeFileSync2, readFileSync as readFileSync5 } from "fs";
 import { join as join8, dirname } from "path";
 import { fileURLToPath } from "url";
 async function cursorInstallCommand(opts = {}) {
@@ -2724,7 +2751,7 @@ async function cursorInstallCommand(opts = {}) {
     join8(here, "..", "templates"),
     join8(here, "..", "src", "templates")
   ];
-  const templatesDir = candidates.find((p) => existsSync6(join8(p, "cursor-security.mdc")));
+  const templatesDir = candidates.find((p) => existsSync7(join8(p, "cursor-security.mdc")));
   if (!templatesDir) {
     console.error(chalk5.red("Could not locate XploitScan rule templates. Try reinstalling: npm i -g xploitscan@latest"));
     process.exit(1);
@@ -2734,7 +2761,7 @@ async function cursorInstallCommand(opts = {}) {
   if (!opts.legacyOnly) {
     const mdcDir = join8(cwd, ".cursor", "rules");
     const mdcPath = join8(mdcDir, "xploitscan-security.mdc");
-    if (existsSync6(mdcPath) && !opts.force) {
+    if (existsSync7(mdcPath) && !opts.force) {
       console.log(chalk5.yellow(`Skipping ${mdcPath} (already exists, use --force to overwrite)`));
     } else {
       mkdirSync(mdcDir, { recursive: true });
@@ -2743,7 +2770,7 @@ async function cursorInstallCommand(opts = {}) {
     }
   }
   const legacyPath = join8(cwd, ".cursorrules");
-  if (existsSync6(legacyPath) && !opts.force) {
+  if (existsSync7(legacyPath) && !opts.force) {
     console.log(chalk5.yellow(`Skipping ${legacyPath} (already exists, use --force to overwrite)`));
   } else {
     writeFileSync2(legacyPath, legacySrc);
@@ -2758,7 +2785,7 @@ async function cursorInstallCommand(opts = {}) {
 var program = new Command();
 program.name("xploitscan").description(
   "AI security scanner for vibe-coded apps. Find vulnerabilities before attackers do."
-).version("1.2.0");
+).version("1.2.1");
 program.command("scan").description("Scan a directory for security vulnerabilities").argument("[directory]", "Directory to scan", ".").option("--no-ai", "Skip AI-powered analysis").option(
   "-f, --format <format>",
   "Output format: terminal, json, sarif, splunk-hec, elastic-ecs, datadog-logs",
@@ -2787,7 +2814,7 @@ cursor.command("install").description("Drop XploitScan security rules into .curs
   await cursorInstallCommand({ force: opts.force, legacyOnly: opts.legacyOnly });
 });
 program.command("upgrade").description("Upgrade to XploitScan Pro for unlimited scans").action(async () => {
-  const { getStoredToken: getStoredToken2, getCheckoutUrl } = await import("./api-4UFZFIDO.js");
+  const { getStoredToken: getStoredToken2, getCheckoutUrl } = await import("./api-MFCSQQ2Y.js");
   const chalk6 = (await import("chalk")).default;
   const token = getStoredToken2();
   if (!token) {