omamori 0.1.4 → 0.2.0

data/lib/omamori.rb

@@ -1,16 +1,16 @@
 # frozen_string_literal: true
 
-require_relative "omamori/version"
-require_relative "omamori/core_runner"
-require_relative "omamori/ai_analysis_engine/gemini_client"
-require_relative "omamori/ai_analysis_engine/prompt_manager"
-require_relative "omamori/ai_analysis_engine/diff_splitter"
-require_relative "omamori/report_generator/console_formatter"
-require_relative "omamori/report_generator/html_formatter"
-require_relative "omamori/report_generator/json_formatter"
-require_relative "omamori/static_analysers/brakeman_runner"
-require_relative "omamori/static_analysers/bundler_audit_runner"
+require_relative 'omamori/version'
+require_relative 'omamori/core_runner'
+require_relative 'omamori/ai_analysis_engine/llm_client'
+require_relative 'omamori/ai_analysis_engine/prompt_manager'
+require_relative 'omamori/ai_analysis_engine/diff_splitter'
+require_relative 'omamori/report_generator/console_formatter'
+require_relative 'omamori/report_generator/html_formatter'
+require_relative 'omamori/report_generator/json_formatter'
+require_relative 'omamori/static_analysers/brakeman_runner'
+require_relative 'omamori/static_analysers/bundler_audit_runner'
 
 module Omamori
   # Your code goes here...
-end
+end

metadata

@@ -1,85 +1,84 @@
 --- !ruby/object:Gem::Specification
 name: omamori
 version: !ruby/object:Gem::Version
-  version: 0.1.4
+  version: 0.2.0
 platform: ruby
 authors:
 - rira100000000
-autorequire: 
 bindir: exe
 cert_chain: []
-date: 2025-05-18 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
-  name: colorize
+  name: brakeman
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.8'
+        version: '7.0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.8'
+        version: '7.0'
 - !ruby/object:Gem::Dependency
-  name: dotenv
+  name: bundler-audit
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.0'
+        version: 0.9.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.0'
+        version: 0.9.2
 - !ruby/object:Gem::Dependency
-  name: ruby-gemini-api
+  name: colorize
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.1.1
+        version: '0.8'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.1.1
+        version: '0.8'
 - !ruby/object:Gem::Dependency
-  name: brakeman
+  name: dotenv
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '7.0'
+        version: '2.0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '7.0'
+        version: '2.0'
 - !ruby/object:Gem::Dependency
-  name: bundler-audit
+  name: ruby_llm
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.9.2
+        version: '2.1'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.9.2
+        version: '2.1'
 - !ruby/object:Gem::Dependency
   name: bundler
   requirement: !ruby/object:Gem::Requirement
@@ -136,8 +135,9 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '1.0'
-description: omamori scans Ruby code and diffs using AI (Google Gemini) to detect
-  security vulnerabilities often missed by traditional tools.
+description: omamori scans Ruby code and diffs using AI (any LLM via RubyLLM, fast
+  decision models such as Jev, or Claude Code / Codex) to detect security vulnerabilities
+  often missed by traditional tools.
 email:
 - 101010hayakawa@gmail
 executables:
@@ -145,6 +145,7 @@ executables:
 extensions: []
 extra_rdoc_files: []
 files:
+- CHANGELOG.md
 - Gemfile
 - Gemfile.lock
 - LICENSE
@@ -160,25 +161,44 @@ files:
 - demo/xss_vulnerability.rb
 - exe/omamori
 - lib/omamori.rb
+- lib/omamori/ai_analysis_engine/checklist_scanner.rb
+- lib/omamori/ai_analysis_engine/cli_clients/base.rb
+- lib/omamori/ai_analysis_engine/cli_clients/claude_code_client.rb
+- lib/omamori/ai_analysis_engine/cli_clients/codex_client.rb
 - lib/omamori/ai_analysis_engine/diff_splitter.rb
-- lib/omamori/ai_analysis_engine/gemini_client.rb
+- lib/omamori/ai_analysis_engine/fallback_client.rb
+- lib/omamori/ai_analysis_engine/judge_client.rb
+- lib/omamori/ai_analysis_engine/llm_client.rb
 - lib/omamori/ai_analysis_engine/prompt_manager.rb
+- lib/omamori/ai_analysis_engine/ruby_llm_context.rb
+- lib/omamori/ai_analysis_engine/sub_checks/audit_log_missing.yml
+- lib/omamori/ai_analysis_engine/sub_checks/csrf.yml
+- lib/omamori/ai_analysis_engine/sub_checks/insecure_deserialization_rce.yml
+- lib/omamori/ai_analysis_engine/sub_checks/insufficient_encryption.yml
+- lib/omamori/ai_analysis_engine/sub_checks/mass_assignment.yml
+- lib/omamori/ai_analysis_engine/sub_checks/open_redirect.yml
+- lib/omamori/ai_analysis_engine/sub_checks/sql_injection.yml
+- lib/omamori/ai_analysis_engine/sub_checks/xss.yml
+- lib/omamori/ai_settings.rb
 - lib/omamori/config.rb
 - lib/omamori/core_runner.rb
+- lib/omamori/doctor.rb
+- lib/omamori/parallel.rb
 - lib/omamori/report_generator/console_formatter.rb
 - lib/omamori/report_generator/html_formatter.rb
 - lib/omamori/report_generator/json_formatter.rb
 - lib/omamori/report_generator/report_template.erb
+- lib/omamori/setup_files.rb
 - lib/omamori/static_analysers/brakeman_runner.rb
 - lib/omamori/static_analysers/bundler_audit_runner.rb
 - lib/omamori/version.rb
 homepage: https://github.com/rira100000000/omamori
-licenses: []
+licenses:
+- MIT
 metadata:
   homepage_uri: https://github.com/rira100000000/omamori
   source_code_uri: https://github.com/rira100000000/omamori
   changelog_uri: https://github.com/rira100000000/omamori/blob/main/CHANGELOG.md
-post_install_message: 
 rdoc_options: []
 require_paths:
 - lib
@@ -186,15 +206,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '0'
+      version: '3.2'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.5.11
-signing_key: 
+rubygems_version: 3.6.9
 specification_version: 4
 summary: AI-powered security vulnerability scanner for Ruby projects.
 test_files: []

data/lib/omamori/ai_analysis_engine/gemini_client.rb

@@ -1,71 +0,0 @@
-# frozen_string_literal: true
-
-require 'gemini'
-
-module Omamori
-  module AIAnalysisEngine
-    class GeminiClient
-      def initialize(api_key)
-        @api_key = api_key || ENV["GEMINI_API_KEY"]
-        @client = nil # Initialize client later
-      end
-
-      def analyze(prompt, json_schema, model: "gemini-2.5-flash-preview-04-17")
-        # Ensure the client is initialized
-        client
-
-        begin
-          response = client.generate_content(
-            prompt,
-            model: model,
-            response_schema: json_schema, # Use response_schema for Structured Output
-            temperature: 0.0
-          )
-
-          # Debug: Inspect the response object
-          # puts "Debug: response object: #{response.inspect}"
-          # puts "Debug: response methods: #{response.methods.sort}"
-
-          # Extract and parse JSON from the response text
-          json_string = response.text.gsub(/\A```json\n|```\z/, '').strip
-          begin
-            parsed_response = JSON.parse(json_string)
-            # Validate the parsed output structure
-            if parsed_response.is_a?(Hash) && parsed_response.key?('security_risks')
-              # Return the parsed JSON data
-              parsed_response
-            else
-              puts "Warning: Unexpected AI analysis response structure."
-              puts "Raw response text: #{response.text}"
-              nil # Return nil if the structure is unexpected
-            end
-          rescue JSON::ParserError
-            puts "Warning: Failed to parse response text as JSON."
-            puts "Raw response text: #{response.text}"
-            nil # Or handle the error appropriately
-          end
-        rescue Faraday::Error => e
-          puts "API Error: #{e.message}"
-          puts "Response body: #{e.response[:body]}" if e.response
-          nil # Handle API errors
-        rescue => e
-          puts "An unexpected error occurred during API call: #{e.message}"
-          nil # Handle other errors
-        end
-      end
-
-      private
-
-      def client
-        @client ||= begin
-          # Configure the client with the API key
-          Gemini.configure do |config|
-            config.api_key = @api_key
-          end
-          # Create a new client instance
-          Gemini::Client.new
-        end
-      end
-    end
-  end
-end