ai_git 0.2.0 → 1.0.1

data/lib/ai_git/secrets.rb

@@ -0,0 +1,66 @@
+# frozen_string_literal: true
+# lib/ai_git/secrets.rb
+#
+# @purpose      Screen the staged paths and diff for credentials before the
+#               diff leaves the machine, splitting blocking hits from warnings.
+# @exports      AIGit::Secrets: RISKY_PATHS, RISKY_CONTENT,
+#               SUSPICIOUS_ASSIGNMENT, .scan.
+# @sideEffects  None.
+# @notes        Only added lines are scanned: removing a secret is not a leak.
+#               A bare key/secret/password assignment warns rather than blocks,
+#               because the pattern also matches ordinary code.
+
+module AIGit
+  module Secrets
+    module_function
+
+    RISKY_PATHS = {
+      "an environment file" => %r{(\A|/)\.env(\.[^/]+)?\z},
+      "an SSH private key" => %r{(\A|/)id_(rsa|dsa|ecdsa|ed25519)\z},
+      "a private key file" => /\.(pem|key|p12|pfx|jks|keystore)\z/i,
+      "a credentials file" => %r{(\A|/)(credentials|\.netrc|\.npmrc|\.pypirc|\.htpasswd)\z},
+      "a secrets file" => %r{(\A|/)secrets?\.(ya?ml|json|toml)\z}i
+    }.freeze
+
+    RISKY_CONTENT = {
+      "a private key block" => /-----BEGIN [A-Z ]*PRIVATE KEY-----/,
+      "an AWS access key id" => /\bAKIA[0-9A-Z]{16}\b/,
+      "a GitHub token" => /\b(gh[posur]_[A-Za-z0-9]{16,}|github_pat_[A-Za-z0-9_]{20,})\b/,
+      "an OpenAI-style API key" => /\bsk-[A-Za-z0-9_-]{20,}\b/,
+      "a Slack token" => /\bxox[abprs]-[A-Za-z0-9-]{10,}\b/,
+      "a Google API key" => /\bAIza[0-9A-Za-z_-]{35}\b/
+    }.freeze
+
+    SUSPICIOUS_ASSIGNMENT = /
+      \b(api[_-]?key|secret|password|passwd|token|access[_-]?key)\b
+      \s*[:=]\s*["'][^"']{8,}["']
+    /ix.freeze
+
+    def scan(staged_files, diff)
+      { blocking: blocking_findings(staged_files, diff), warnings: warning_findings(diff) }
+    end
+
+    def blocking_findings(staged_files, diff)
+      paths = staged_files.to_s.lines.map(&:strip).reject(&:empty?)
+      added = added_lines(diff)
+
+      findings = paths.flat_map do |path|
+        RISKY_PATHS.filter_map { |label, pattern| "#{path} looks like #{label}" if path.match?(pattern) }
+      end
+
+      findings + RISKY_CONTENT.filter_map do |label, pattern|
+        "added lines contain what looks like #{label}" if added.match?(pattern)
+      end
+    end
+
+    def warning_findings(diff)
+      return [] unless added_lines(diff).match?(SUSPICIOUS_ASSIGNMENT)
+
+      ["added lines assign a value to a key/secret/password/token name"]
+    end
+
+    def added_lines(diff)
+      diff.to_s.lines.select { |line| line.start_with?("+") && !line.start_with?("+++") }.join
+    end
+  end
+end

data/lib/ai_git/ui.rb

@@ -0,0 +1,79 @@
+# frozen_string_literal: true
+# lib/ai_git/ui.rb
+#
+# @purpose      Render every line the CLI prints, adding ANSI color only when
+#               the terminal and the configuration both allow it.
+# @exports      AIGit::UI: CODES, .color?, .no_color?, .paint, .bold, .dim,
+#               .kv, .heading, .info, .success, .warning, .error.
+# @dependencies ai_git/config: supplies the no_color setting from
+#               ~/.ai_git/config.yml.
+# @sideEffects  Writes to stdout and stderr; inspects $stdout.tty?.
+# @notes        Color is off whenever the config file sets no_color or stdout
+#               is not a terminal, so piped output stays plain. A config file
+#               that fails to load also turns color off rather than raising, so
+#               that error itself can still be printed.
+
+require_relative "config"
+
+module AIGit
+  module UI
+    module_function
+
+    CODES = {
+      bold: 1, dim: 2, red: 31, green: 32, yellow: 33, blue: 34, cyan: 36, gray: 90
+    }.freeze
+
+    def color?
+      return false if no_color?
+
+      $stdout.tty?
+    end
+
+    def no_color?
+      AIGit::Config.no_color?
+    rescue StandardError
+      true
+    end
+
+    def paint(text, *styles)
+      return text.to_s unless color?
+
+      codes = styles.map { |style| CODES[style] }.compact
+      return text.to_s if codes.empty?
+
+      "\e[#{codes.join(';')}m#{text}\e[0m"
+    end
+
+    def bold(text)
+      paint(text, :bold)
+    end
+
+    def dim(text)
+      paint(text, :dim)
+    end
+
+    def kv(key, value)
+      puts "#{paint("#{key}:", :bold)} #{value}"
+    end
+
+    def heading(text)
+      puts paint(text, :bold, :cyan)
+    end
+
+    def info(text)
+      puts text
+    end
+
+    def success(text)
+      puts paint(text, :green)
+    end
+
+    def warning(text)
+      warn paint(text, :yellow)
+    end
+
+    def error(text)
+      $stderr.puts paint(text, :red) # rubocop:disable Style/StderrPuts
+    end
+  end
+end

data/lib/ai_git/version.rb

@@ -1,5 +1,11 @@
 # frozen_string_literal: true
+# lib/ai_git/version.rb
+#
+# @purpose      Hold the single source of truth for the gem's version number,
+#               read by the gemspec, the CLI, and the release check.
+# @exports      AIGit::VERSION.
+# @sideEffects  None.
 
 module AIGit
-  VERSION = "0.2.0"
+  VERSION = "1.0.1"
 end

data/lib/ai_git.rb

@@ -1,24 +1,81 @@
 # frozen_string_literal: true
+# lib/ai_git.rb
+#
+# @purpose      Library entry point and CLI router: load every component, then
+#               dispatch the argument vector to the matching subcommand.
+# @exports      AIGit: SUBCOMMANDS, HELP_FLAGS, VERSION_FLAGS, USAGE, .start.
+# @dependencies ai_git/version, ai_git/config, ai_git/ui, ai_git/ai_client,
+#               ai_git/git: the components the subcommands build on;
+#               ai_git/commands/default, ai_git/commands/config: the two
+#               subcommands .start dispatches to.
+# @sideEffects  Prints usage or the version to stdout; warns and exits 1 on an
+#               unknown subcommand; .start runs the selected subcommand.
+# @notes        A first argument starting with "-" is left in place for the
+#               default command's parser, so bare flags need no subcommand.
 
 require_relative "ai_git/version"
 require_relative "ai_git/config"
+require_relative "ai_git/ui"
+require_relative "ai_git/ai_client"
 require_relative "ai_git/git"
-require_relative "ai_git/review"
-require_relative "ai_git/default"
+require_relative "ai_git/commands/default"
+require_relative "ai_git/commands/config"
 
 module AIGit
   module_function
 
   SUBCOMMANDS = {
-    "review" => AIGit::Review,
-    "default" => AIGit::Default
+    "config" => AIGit::Commands::Config,
+    "default" => AIGit::Commands::Default
   }.freeze
 
+  HELP_FLAGS    = %w[-h --help help].freeze
+  VERSION_FLAGS = %w[-v --version].freeze
+
+  USAGE = <<~USAGE
+    Usage: ai_git [subcommand] [options]
+
+    Subcommands:
+      (none)    Generate a commit message, commit, and push staged files
+      config    Show the resolved provider configuration
+
+    Options:
+      -n, --dry-run  Print the generated message and change nothing
+          --no-push  Commit locally without pushing
+      -y, --yes      Skip the confirmation prompt (unattended)
+      -f, --force    Proceed despite secret or remote-server warnings
+      -h, --help     Show this message
+      -v, --version  Print version
+
+    On a terminal ai_git asks before committing: accept, edit, regenerate or
+    quit. Piped or scripted runs commit and push unattended.
+
+    Configuration (~/.ai_git/config.yml, or config.yaml):
+      model_name: ggml-org/gemma-4-E4B-it-GGUF:Q8_0   Model to prompt
+      base_url: http://127.0.0.1:8080                 llama.cpp server
+      no_color: true                                  Disable colored output
+
+    Run `ai_git config` to see the resolved settings and the file they
+    come from.
+  USAGE
+
   def start(args)
-    command = args.first || "default"
+    args = args.dup
+    first = args.first
+
+    return puts(USAGE) if first && HELP_FLAGS.include?(first)
+    return puts(VERSION) if first && VERSION_FLAGS.include?(first)
 
-    raise "Unknown subcommand: #{command}" unless SUBCOMMANDS.key?(command)
+    command = "default"
+    if first && !first.start_with?("-")
+      unless SUBCOMMANDS.key?(first)
+        warn "Unknown subcommand: #{first}"
+        warn USAGE
+        exit 1
+      end
+      command = args.shift
+    end
 
-    SUBCOMMANDS[command].call
+    SUBCOMMANDS[command].call(args)
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: ai_git
 version: !ruby/object:Gem::Version
-  version: 0.2.0
+  version: 1.0.1
 platform: ruby
 authors:
 - Kaíque Kandy Koga
@@ -9,23 +9,36 @@ bindir: bin
 cert_chain: []
 date: 1980-01-02 00:00:00.000000000 Z
 dependencies: []
-description: AI‑powered Git using SLMs
+description: Generate Git commit messages from staged changes via a local llama.cpp
+  server, then commit and push.
 executables:
 - ai_git
 extensions: []
 extra_rdoc_files: []
 files:
+- LICENSE
+- README.md
 - bin/ai_git
+- doc/RELEASE.md
+- doc/USAGE.md
 - lib/ai_git.rb
+- lib/ai_git/ai_client.rb
+- lib/ai_git/commands/config.rb
+- lib/ai_git/commands/default.rb
 - lib/ai_git/config.rb
-- lib/ai_git/default.rb
 - lib/ai_git/git.rb
-- lib/ai_git/review.rb
+- lib/ai_git/options.rb
+- lib/ai_git/prompt.rb
+- lib/ai_git/secrets.rb
+- lib/ai_git/ui.rb
 - lib/ai_git/version.rb
 homepage: https://github.com/kaiquekandykoga/ai_git
 licenses:
 - BSD-3-Clause
-metadata: {}
+metadata:
+  source_code_uri: https://github.com/kaiquekandykoga/ai_git
+  bug_tracker_uri: https://github.com/kaiquekandykoga/ai_git/issues
+  rubygems_mfa_required: 'true'
 rdoc_options: []
 require_paths:
 - lib
@@ -40,7 +53,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 4.0.9
+rubygems_version: 4.0.16
 specification_version: 4
-summary: AI‑powered Git using SLMs
+summary: AI-powered Git commit messages using a local LLM
 test_files: []

data/lib/ai_git/default.rb

@@ -1,177 +0,0 @@
-# frozen_string_literal: true
-
-require "benchmark"
-require "net/http"
-require "uri"
-require "json"
-require_relative "version"
-require_relative "git"
-
-module AIGit
-  module Default
-    module_function
-
-    def escape_json(string)
-      string.gsub("\\", "\\\\")
-            .gsub('"', '\"')
-            .gsub("\n", '\\n')
-            .gsub("\r", '\\r')
-            .gsub("\t", '\\t')
-    end
-
-    def generate_commit_message(diff, model_name)
-      raise "No staged changes to generate commit message for" if diff.to_s.strip.empty?
-
-      prompt = <<~PROMPT
-        You are an expert Git commit message writer. Output ONLY the commit message — no explanations, no markdown, no backticks, no preamble.
-
-        Here are the changes:
-        #{diff}
-
-        STRICT OUTPUT FORMAT (follow exactly):
-
-        <short imperative title, max 72 chars>
-
-        <blank line>
-
-        ## Summary
-        <2–4 bullet points covering the most important changes. Each bullet starts with a verb.>
-
-        ## Why
-        <1–3 sentences explaining the motivation or context behind the change. Omit if the reason is obvious.>
-
-        RULES:
-        - Title line: short, specific, imperative mood (e.g. "Add JWT login with refresh token support"). Avoid vague titles like "Update stuff" or "Fix bug".
-        - Summary bullets: describe WHAT changed, not HOW the code looks. Focus on behaviour and impact.
-        - Why section: explain the problem being solved or the goal being achieved. Skip if it adds no value.
-        - No filler phrases ("this commit", "this PR", "as per discussion").
-        - No line should exceed 72 characters.
-
-        EXAMPLES OF GOOD OUTPUT:
-
-        Add JWT-based login with refresh token support
-
-        ## Summary
-        - Implement login endpoint with access and refresh token issuance
-        - Add token refresh route with rotation and expiry validation
-        - Protect private routes via middleware that verifies access tokens
-        - Store refresh tokens using encrypted HTTP-only cookies
-
-        ## Why
-        Users were being logged out on every page reload. Refresh tokens allow
-        sessions to persist securely without requiring re-authentication.
-
-        ---
-
-        Prevent nil crash when user preferences are missing
-
-        ## Summary
-        - Add nil guard in ReportGenerator#process before accessing preferences
-        - Fall back to system defaults when preferences object is absent
-
-        ## Why
-        Reports were raising NoMethodError in production for users created
-        before the preferences feature shipped.
-
-        ---
-
-        Now generate the commit message:
-      PROMPT
-
-      if AIGit::Config.request_format == :ollama
-        json_body = {
-          model: model_name,
-          prompt: prompt,
-          stream: false,
-          temperature: 0.3,
-          top_p: 0.9,
-          stop: ["\n\n\n", "```", "Here is", "The commit message"],
-          num_predict: 400
-        }.to_json
-
-        uri = URI("#{AIGit::Config.base_url}#{AIGit::Config.endpoint}")
-        request = Net::HTTP::Post.new(uri)
-        request["Content-Type"] = "application/json"
-        request.body = json_body
-
-        response = Net::HTTP.start(uri.host, uri.port, read_timeout: 120) do |http|
-          http.request(request)
-        end
-
-        raise "Failed to connect to #{AIGit::Config.provider}. Is it running?" unless response.is_a?(Net::HTTPSuccess)
-
-        data = JSON.parse(response.body)
-        message = data["response"].to_s.strip
-      else # Jan AI
-        json_body = {
-          model: model_name,
-          messages: [{ role: "user", content: prompt }],
-          stream: false,
-          temperature: 0.3
-        }.to_json
-
-        uri = URI("#{AIGit::Config.base_url}#{AIGit::Config.endpoint}")
-        request = Net::HTTP::Post.new(uri)
-        request["Content-Type"] = "application/json"
-        request.body = json_body
-
-        response = Net::HTTP.start(uri.host, uri.port, read_timeout: 120) do |http|
-          http.request(request)
-        end
-
-        raise "Failed to connect to #{AIGit::Config.provider}. Is it running?" unless response.is_a?(Net::HTTPSuccess)
-
-        data = JSON.parse(response.body)
-        message = data["choices"][0]["message"]["content"].to_s.strip
-      end
-
-      message = message.gsub(/^(Here is|The commit message is|```|json|markdown)/i, "")
-                       .gsub(/^>\s*/, "")
-                       .gsub(/\\n/, "\n")
-                       .strip
-
-      lines = message.lines.map(&:strip)
-      lines.reject! { |line| line.match?(/^(Here|Output|Generated|Based on|The changes)/i) }
-
-      message = lines.join("\n").strip
-
-      message = "chore: update code" if message.lines.count < 1 || message.strip.empty?
-
-      message
-    end
-
-    def call
-      provider = AIGit::Config.provider
-      model_name = AIGit::Config.model_name
-
-      staged = AIGit::Git.staged_files
-      abort "Error: No staged files. Use `git add` first." if staged.to_s.strip.empty?
-
-      diff = AIGit::Git.diff
-      branch = AIGit::Git.current_branch
-
-      puts "\e[1mAI Provider:\e[0m #{provider}"
-      puts "\e[1mModel Name:\e[0m #{model_name}"
-      puts "\e[1mStaged Files:\e[0m #{staged}"
-      puts "\e[1mBranch:\e[0m #{branch}"
-      puts "\e[1mAI Generating Commit Message\e[0m"
-
-      result = Benchmark.measure do
-        message = generate_commit_message(diff, model_name)
-        message = message.gsub(/\n{2,}/, "\n")
-
-        puts "\e[1mCommit Message:\e[0m\n\n#{message}\n"
-
-        escaped_msg = message.gsub(/[\\"`$]/) { |c| "\\#{c}" }
-        AIGit::Git.run_command("git", "commit -m \"#{escaped_msg}\"")
-        puts "\e[1mGit Commited\e[0m"
-
-        AIGit::Git.run_command("git", "push -u origin HEAD")
-        puts "\e[1mGit Pushed\e[0m"
-      end
-
-      puts "\e[1mBenchmark\e[0m"
-      puts result
-    end
-  end
-end

data/lib/ai_git/review.rb

@@ -1,173 +0,0 @@
-# frozen_string_literal: true
-
-require "benchmark"
-require "net/http"
-require "uri"
-require "json"
-require_relative "version"
-require_relative "git"
-
-module AIGit
-  module Review
-    module_function
-
-    def generate_review(diff, model_name)
-      raise "No staged changes to review" if diff.to_s.strip.empty?
-
-      prompt = <<~PROMPT
-        You are a senior software engineer conducting a thorough code review. Output ONLY the review — no explanations, no markdown preamble, no backticks, no preamble.
-
-        Here are the staged changes:
-        #{diff}
-
-        STRICT OUTPUT FORMAT (follow exactly):
-
-        ## Summary
-        <2–5 bullet points describing what this change does at a high level. Each bullet starts with a verb.>
-
-        ## Suggestions
-        <For each issue or improvement, use this format:>
-
-        **<File and location, e.g. "app/models/user.rb">**
-        - <Concise description of the issue or suggestion. Start with a verb. Be specific.>
-        - <Another suggestion for the same file, if applicable.>
-
-        <Repeat the file block for each file with suggestions. Omit files that look clean.>
-
-        ## Verdict
-        <One of: ✅ Looks good | ⚠️ Minor issues | 🚨 Needs attention>
-        <One sentence explaining the verdict.>
-
-        RULES:
-        - Summary: describe WHAT the change does, not HOW the code looks. Focus on behaviour and intent.
-        - Suggestions: flag real issues — bugs, edge cases, security problems, missing error handling, naming confusion, performance concerns, missing tests. Do NOT invent problems. If a file is clean, omit it entirely.
-        - Be direct and constructive. No filler like "great job" or "consider possibly maybe".
-        - No line should exceed 72 characters.
-        - If the diff is a minor or trivial change (e.g. version bump, typo fix), keep the review brief.
-
-        EXAMPLES OF GOOD OUTPUT:
-
-        ## Summary
-        - Add password reset flow with tokenised email verification
-        - Introduce PasswordResetMailer with expiry-aware token links
-        - Add DB migration for reset_token and reset_token_expires_at columns
-
-        ## Suggestions
-
-        **app/models/user.rb**
-        - Ensure reset_token is invalidated after successful use to
-          prevent token reuse attacks.
-        - Add an index on reset_token column for fast lookup queries.
-
-        **app/controllers/passwords_controller.rb**
-        - Handle the case where the token has expired with a user-facing
-          error message rather than a silent redirect.
-
-        ## Verdict
-        ⚠️ Minor issues
-        Core logic is solid but token invalidation and expiry feedback
-        need addressing before merge.
-
-        ---
-
-        ## Summary
-        - Fix nil guard in ReportGenerator when preferences are absent
-
-        ## Suggestions
-
-        ## Verdict
-        ✅ Looks good
-        Safe defensive fix with no side effects.
-
-        ---
-
-        Now review the staged changes:
-      PROMPT
-
-      if AIGit::Config.request_format == :ollama
-        json_body = {
-          model: model_name,
-          prompt: prompt,
-          stream: false,
-          temperature: 0.2,
-          top_p: 0.9,
-          stop: ["\n\n\n", "```", "Here is", "The review"],
-          num_predict: 600
-        }.to_json
-
-        uri = URI("#{AIGit::Config.base_url}#{AIGit::Config.endpoint}")
-        request = Net::HTTP::Post.new(uri)
-        request["Content-Type"] = "application/json"
-        request.body = json_body
-
-        response = Net::HTTP.start(uri.host, uri.port, read_timeout: 120) do |http|
-          http.request(request)
-        end
-
-        raise "Failed to connect to #{AIGit::Config.provider}. Is it running?" unless response.is_a?(Net::HTTPSuccess)
-
-        data = JSON.parse(response.body)
-        review = data["response"].to_s.strip
-      else # Jan AI
-        json_body = {
-          model: model_name,
-          messages: [{ role: "user", content: prompt }],
-          stream: false,
-          temperature: 0.2
-        }.to_json
-
-        uri = URI("#{AIGit::Config.base_url}#{AIGit::Config.endpoint}")
-        request = Net::HTTP::Post.new(uri)
-        request["Content-Type"] = "application/json"
-        request.body = json_body
-
-        response = Net::HTTP.start(uri.host, uri.port, read_timeout: 120) do |http|
-          http.request(request)
-        end
-
-        raise "Failed to connect to #{AIGit::Config.provider}. Is it running?" unless response.is_a?(Net::HTTPSuccess)
-
-        data = JSON.parse(response.body)
-        review = data["choices"][0]["message"]["content"].to_s.strip
-      end
-
-      review = review.gsub(/^(Here is|The review is|```|json|markdown)/i, "")
-                     .gsub(/^>\s*/, "")
-                     .gsub(/\\n/, "\n")
-                     .strip
-
-      lines = review.lines.map(&:strip)
-      lines.reject! { |line| line.match?(/^(Here|Output|Generated|Based on|The changes)/i) }
-
-      review = lines.join("\n").strip
-      review = "No review generated." if review.empty?
-
-      review
-    end
-
-    def call
-      provider = AIGit::Config.provider
-      model_name = AIGit::Config.model_name
-
-      staged = AIGit::Git.staged_files
-      abort "Error: No staged files. Use `git add` first." if staged.to_s.strip.empty?
-
-      diff = AIGit::Git.diff
-      branch = AIGit::Git.current_branch
-
-      puts "\e[1mAI Provider:\e[0m #{provider}"
-      puts "\e[1mModel Name:\e[0m #{model_name}"
-      puts "\e[1mStaged Files:\e[0m #{staged}"
-      puts "\e[1mBranch:\e[0m #{branch}"
-      puts "\e[1mAI Reviewing Changes\e[0m"
-
-      result = Benchmark.measure do
-        review = generate_review(diff, model_name)
-        puts "\e[1mCode Review:\e[0m\n\n#{review}\n"
-      end
-
-      puts "\e[1mBenchmark\e[0m"
-      puts result
-    end
-  end
-end