Initial implementation of fred-cli

TypeScript CLI + library wrapping all 31 FRED API v2 endpoints.
Zero runtime dependencies, Node 18+, JSON/CSV/table output formats.
Includes unit tests (mocked HTTP), integration tests (live API),
and CI/CD workflows (test, npm publish, security audit).

Author: bearmug

.github/workflows/npm-publish.yml

@@ -0,0 +1,43 @@
+name: Publish to npm
+
+on:
+  release:
+    types: [published]
+
+permissions:
+  contents: read
+  id-token: write
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20.x
+          registry-url: 'https://registry.npmjs.org'
+          cache: 'npm'
+
+      - run: npm ci
+
+      - name: Set version from tag
+        run: |
+          VERSION="${GITHUB_REF_NAME#v}"
+          npm version "$VERSION" --no-git-tag-version
+
+      - run: npm run build
+      - run: npm test
+
+      - name: Publish
+        run: npm publish --provenance --access public
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+
+      - name: Verify publication
+        run: |
+          VERSION="${GITHUB_REF_NAME#v}"
+          sleep 10
+          npm view fred-cli@"$VERSION"

.github/workflows/security.yml

@@ -0,0 +1,44 @@
+name: Security Audit
+
+on:
+  schedule:
+    - cron: '0 9 * * 1'  # Monday 9am UTC
+  workflow_dispatch:
+
+jobs:
+  audit:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20.x
+          cache: 'npm'
+
+      - run: npm ci
+
+      - name: Audit all dependencies (moderate+)
+        run: npm audit --audit-level=moderate || true
+
+      - name: Audit production dependencies (high+)
+        run: npm audit --omit=dev --audit-level=high
+
+      - name: Check outdated dependencies
+        run: npm outdated || true
+
+      - name: Save audit report
+        if: always()
+        run: |
+          mkdir -p audit-reports
+          npm audit --json > audit-reports/audit.json || true
+          npm outdated --json > audit-reports/outdated.json || true
+
+      - name: Upload audit artifacts
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: audit-reports
+          path: audit-reports/
+          retention-days: 30

.github/workflows/test.yml

@@ -0,0 +1,35 @@
+name: Test
+
+on:
+  pull_request:
+  push:
+    branches: [main]
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        node-version: [18.x, 20.x]
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: ${{ matrix.node-version }}
+          cache: 'npm'
+
+      - run: npm ci
+      - run: npm run build
+      - run: npm test
+
+      - name: Integration tests
+        if: github.event_name == 'push' && github.ref == 'refs/heads/main'
+        env:
+          FRED_API_KEY: ${{ secrets.FRED_API_KEY }}
+        run: npm run test:integration

.gitignore

@@ -0,0 +1,4 @@
+node_modules/
+dist/
+*.tsbuildinfo
+.DS_Store

CLAUDE.md

@@ -0,0 +1,29 @@
+# fred-cli
+
+Unofficial CLI + TypeScript client for the FRED API v2 (Federal Reserve Economic Data).
+
+## Build & Test
+
+```bash
+npm run build        # tsc -> dist/
+npm test             # unit tests (mocked HTTP)
+npm run test:integration  # live API tests (needs FRED_API_KEY)
+npm run dev -- <args>     # run CLI directly via tsx
+```
+
+## Architecture
+
+- `src/api/client.ts` — `FredClient` class, one method per API endpoint, uses native `fetch`
+- `src/api/types.ts` — all TypeScript types for FRED API requests/responses
+- `src/cli.ts` — CLI entry point, routes commands to handlers
+- `src/commands/` — one file per command group (series, category, release, source, tags)
+- `src/cli/` — parseArgs configs, formatters (json/csv/table), help text
+- `src/tests/` — node:test runner, fixtures in `tests/fixtures/`
+
+## Conventions
+
+- Zero runtime dependencies (Node 18+ native fetch, parseArgs, test runner)
+- ESM (`"type": "module"`) with `.js` import extensions
+- All API params use snake_case (matching FRED API), CLI flags use kebab-case
+- JSON output includes `_truncated` and `_next_offset` when results are paginated
+- Tests mock `global.fetch` — no external mock libraries

LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 fiale-plus
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.