lex-detect 0.1.6 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: edcef9c9b6e0a5f99c27eca63fc3a5783fbb05ebc77bc7cfd59be8b7d4c55024
-  data.tar.gz: e9af1f652264e129b975075d9a1b5a8897da5169a736c94e5ae4a6aa3551971d
+  metadata.gz: 7e40e042cb6111ce0d3708ed3de574e32baf92839704e2a22ed4c239bcaf4907
+  data.tar.gz: 4fdd6b3f2388a5aeb8a5a862e57cc29d57aa239793dbccdcabbdc1967267a031
 SHA512:
-  metadata.gz: a43632f0552297b75762cfa43699c6d861fafd53cd3d8b61783647bfbda23a4b3fed89f6dab78f2b60676862ec1591236826ab865424aef71961ca7063ec1c0a
-  data.tar.gz: 3509ff7f76c246f3ce38a411b8ac639248220f62712d31820892d7de2a798cab90eb96e871ca6a4be5d505aab64ae8869168af47df77eb747795064fe8d58ba4
+  metadata.gz: 8d8a294a962b08b21d08d26b9189ab01e7194a244e04299b2094e3eecfd5b00f40cebc56d438ea71b5ed2a47aab10bb77bf465eb8b71eff5821fdb5e11cd9f55
+  data.tar.gz: 634257c97700a444f7a846ef249d69d718e5cf2d0202793bd38ba156bb48fae025410d98e7aeba56a8735647334d34c2f4bfd7cbdf53fc2c8870e50bf55297ce

data/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## [0.2.0] - 2026-03-22
+
+### Added
+- SARIF 2.1.0 formatter (`Formatters::Sarif`) for GitHub Code Scanning integration
+- Markdown PR comment formatter (`Formatters::MarkdownPr`) for GitHub PR annotations
+- `format_results(format:, detections:)` public API method supporting `:sarif`, `:markdown`, and `:json` output formats
+
+## [0.1.7] - 2026-03-22
+
+### Fixed
+- `TaskObserver` queries now use `created` column instead of nonexistent `started_at` on the tasks table, fixing `PG::UndefinedColumn` errors on PostgreSQL
+
 ## [0.1.6] - 2026-03-20
 
 ### Fixed

data/CLAUDE.md

@@ -10,7 +10,7 @@ Legion Extension that scans the local environment and recommends which `lex-*` e
 
 **GitHub**: https://github.com/LegionIO/lex-detect
 **License**: MIT
-**Version**: 0.1.4
+**Version**: 0.2.0
 
 ## Architecture
 
@@ -57,7 +57,7 @@ Legion::Extensions::Detect.catalog          # raw CATALOG constant
 
 ## Testing
 
-40 specs across 6 spec files.
+54 specs across 9 spec files.
 
 ```bash
 bundle install

data/lib/legion/extensions/detect/formatters/markdown_pr.rb

@@ -0,0 +1,61 @@
+# frozen_string_literal: true
+
+module Legion
+  module Extensions
+    module Detect
+      module Formatters
+        module MarkdownPr
+          module_function
+
+          def format(detections)
+            missing   = collect_missing(detections)
+            installed = collect_installed(detections)
+
+            lines = ["## Legion Detect Findings\n"]
+
+            if missing.any?
+              lines << "### Missing Extensions (#{missing.size})\n"
+              missing.each do |m|
+                lines << "- **#{m[:name]}**: `#{m[:extension]}` not installed"
+                lines << "  Detected by: #{m[:signals].join(', ')}"
+                lines << "  Install: `gem install #{m[:extension]}`\n"
+              end
+            end
+
+            if installed.any?
+              lines << "### Installed (#{installed.size})\n"
+              installed.each do |i|
+                lines << "- #{i[:name]}: `#{i[:extension]}` :white_check_mark:"
+              end
+            end
+
+            lines << "No extensions detected.\n" if missing.empty? && installed.empty?
+
+            lines << "\n---\n*Generated by legion-detect v#{VERSION}*"
+            lines.join("\n")
+          end
+
+          def collect_missing(detections)
+            detections.flat_map do |d|
+              d[:extensions].filter_map do |ext|
+                next if d[:installed][ext]
+
+                { name: d[:name], extension: ext, signals: d[:matched_signals] }
+              end
+            end
+          end
+
+          def collect_installed(detections)
+            detections.flat_map do |d|
+              d[:extensions].filter_map do |ext|
+                next unless d[:installed][ext]
+
+                { name: d[:name], extension: ext }
+              end
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/lib/legion/extensions/detect/formatters/sarif.rb

@@ -0,0 +1,82 @@
+# frozen_string_literal: true
+
+require 'json'
+
+module Legion
+  module Extensions
+    module Detect
+      module Formatters
+        module Sarif
+          SCHEMA = 'https://json.schemastore.org/sarif-2.1.0.json'
+          SARIF_VERSION = '2.1.0'
+
+          SEVERITY_MAP = {
+            missing:   'warning',
+            installed: 'note'
+          }.freeze
+
+          module_function
+
+          def format(detections)
+            rules   = build_rules(detections)
+            results = build_results(detections)
+
+            {
+              '$schema' => SCHEMA,
+              'version' => SARIF_VERSION,
+              'runs'    => [{
+                'tool'    => {
+                  'driver' => {
+                    'name'           => 'legion-detect',
+                    'version'        => VERSION,
+                    'informationUri' => 'https://github.com/LegionIO/lex-detect',
+                    'rules'          => rules
+                  }
+                },
+                'results' => results
+              }]
+            }
+          end
+
+          def to_json(detections)
+            ::JSON.pretty_generate(format(detections))
+          end
+
+          def build_rules(detections)
+            rules = detections.flat_map do |detection|
+              detection[:extensions].map do |ext|
+                {
+                  'id'                   => "detect/#{ext}",
+                  'name'                 => detection[:name],
+                  'shortDescription'     => { 'text' => "#{detection[:name]} detected — #{ext} recommended" },
+                  'defaultConfiguration' => { 'level' => 'warning' }
+                }
+              end
+            end
+            rules.uniq { |r| r['id'] }
+          end
+
+          def build_results(detections)
+            detections.flat_map do |detection|
+              detection[:extensions].filter_map do |ext|
+                next if detection[:installed][ext]
+
+                {
+                  'ruleId'     => "detect/#{ext}",
+                  'level'      => 'warning',
+                  'message'    => {
+                    'text' => "#{detection[:name]} detected (#{detection[:matched_signals].join(', ')}) but #{ext} is not installed"
+                  },
+                  'properties' => {
+                    'matched_signals' => detection[:matched_signals],
+                    'detection_name'  => detection[:name]
+                  }
+                }
+              end
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/lib/legion/extensions/detect/runners/task_observer.rb

@@ -26,7 +26,7 @@ module Legion
 
             since ||= Time.now - 60
             db_tasks = Legion::Data.connection[:tasks]
-                                   .where { started_at > since }
+                                   .where { created > since }
                                    .all
 
             alerts = db_tasks.filter_map { |task| evaluate_rules(task) }
@@ -46,9 +46,9 @@ module Legion
           end
 
           def check_timeout_risk(task, expected_duration: 120)
-            return nil unless task[:status] == 'running' && task[:started_at]
+            return nil unless task[:status] == 'running' && task[:created]
 
-            elapsed = Time.now - task[:started_at]
+            elapsed = Time.now - task[:created]
             return nil unless elapsed > (expected_duration * 2)
 
             {
@@ -66,7 +66,7 @@ module Legion
 
             count = Legion::Data.connection[:tasks]
                                 .where(runner_class: task[:runner_class], status: 'failed')
-                                .where { started_at > Time.now - 600 }
+                                .where { created > Time.now - 600 }
                                 .count
             return nil unless count >= 3
 
@@ -109,7 +109,7 @@ module Legion
                 runner:      task[:runner_class],
                 rule:        alert&.dig(:rule),
                 severity:    alert&.dig(:severity),
-                duration:    task[:started_at] ? (Time.now - task[:started_at]).round(2) : nil,
+                duration:    task[:created] ? (Time.now - task[:created]).round(2) : nil,
                 token_cost:  nil,
                 observed_at: Time.now.utc
               )

data/lib/legion/extensions/detect/version.rb

@@ -3,7 +3,7 @@
 module Legion
   module Extensions
     module Detect
-      VERSION = '0.1.6'
+      VERSION = '0.2.0'
     end
   end
 end

data/lib/legion/extensions/detect.rb

@@ -4,6 +4,8 @@ require 'legion/extensions/detect/version'
 require 'legion/extensions/detect/catalog'
 require 'legion/extensions/detect/scanner'
 require 'legion/extensions/detect/installer'
+require 'legion/extensions/detect/formatters/sarif'
+require 'legion/extensions/detect/formatters/markdown_pr'
 require_relative 'detect/runners/task_observer'
 require_relative 'detect/runners/cancel_task'
 
@@ -41,6 +43,15 @@ module Legion
         def catalog
           CATALOG
         end
+
+        def format_results(format: :json, detections: nil)
+          results = detections || scan
+          case format.to_sym
+          when :sarif    then Formatters::Sarif.to_json(results)
+          when :markdown then Formatters::MarkdownPr.format(results)
+          else results
+          end
+        end
       end
 
       require_relative 'detect/actors/full_scan' if defined?(Legion::Extensions::Actors::Once)

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: lex-detect
 version: !ruby/object:Gem::Version
-  version: 0.1.6
+  version: 0.2.0
 platform: ruby
 authors:
 - Esity
@@ -31,6 +31,8 @@ files:
 - lib/legion/extensions/detect/actors/full_scan.rb
 - lib/legion/extensions/detect/actors/observer_tick.rb
 - lib/legion/extensions/detect/catalog.rb
+- lib/legion/extensions/detect/formatters/markdown_pr.rb
+- lib/legion/extensions/detect/formatters/sarif.rb
 - lib/legion/extensions/detect/installer.rb
 - lib/legion/extensions/detect/local_migrations/20260319000001_create_detect_results.rb
 - lib/legion/extensions/detect/local_migrations/20260320000001_create_observer_events.rb