zwischen 0.1.0

data/lib/zwischen/setup.rb

@@ -0,0 +1,167 @@
+# frozen_string_literal: true
+
+require "thor"
+require "fileutils"
+require_relative "credentials"
+require_relative "hooks"
+require_relative "config"
+
+module Zwischen
+  class Setup
+    def self.run
+      new.run
+    end
+
+    def self.uninstall
+      new.uninstall
+    end
+
+    def initialize
+      @shell = Thor::Shell::Color.new
+    end
+
+    def run
+      @shell.say("\n🛡️  Installing Zwischen security layer...\n", :bold)
+
+      check_tools
+      configure_credentials
+      install_hook
+      create_config
+
+      @shell.say("  ✓ Done!", :green)
+      @shell.say("\nZwischen will now scan automatically before pushes.")
+      @shell.say("Run 'zwischen scan' to test it now.\n")
+    end
+
+    def uninstall
+      @shell.say("\n🗑️  Zwischen Uninstall\n", :bold)
+
+      project_root = Dir.pwd
+      hook_path = Hooks.hook_path(project_root)
+
+      # Remove hook
+      if Hooks.installed?(project_root)
+        if @shell.yes?("Remove git hook?", default: true)
+          if Hooks.uninstall(project_root)
+            @shell.say("  ✓ Removed .git/hooks/pre-push", :green)
+          else
+            @shell.say("  ✗ Failed to remove hook", :red)
+          end
+        end
+      else
+        @shell.say("  ↳ No Zwischen hook found", :yellow)
+      end
+
+      # Remove config
+      config_path = File.join(project_root, Config::CONFIG_FILE)
+      if File.exist?(config_path)
+        if @shell.yes?("Remove project config (.zwischen.yml)?", default: false)
+          File.delete(config_path)
+          @shell.say("  ✓ Removed .zwischen.yml", :green)
+        else
+          @shell.say("  ↳ Kept .zwischen.yml", :yellow)
+        end
+      end
+
+      # Remove credentials
+      if File.exist?(Credentials.credentials_path)
+        if @shell.yes?("Remove global credentials (~/.zwischen/credentials)?", default: false)
+          File.delete(Credentials.credentials_path)
+          @shell.say("  ✓ Removed credentials", :green)
+        else
+          @shell.say("  ↳ Kept credentials", :yellow)
+        end
+      end
+
+      @shell.say("\n✅ Zwischen uninstalled from this project.\n", :green)
+    end
+
+    private
+
+    def check_tools
+      installer = Installer.new
+
+      # Auto-install gitleaks if missing
+      unless installer.gitleaks_available?
+        @shell.say("  ↳ Installing gitleaks...", :yellow)
+        if installer.auto_install_gitleaks
+          @shell.say("  ✓ Installed gitleaks to ~/.zwischen/bin/", :green)
+        else
+          @shell.say("  ⚠️  Could not auto-install gitleaks", :yellow)
+          @shell.say("    → #{installer.preferred_command('gitleaks')}", :yellow)
+        end
+      else
+        @shell.say("  ✓ gitleaks available", :green)
+      end
+
+      # Check semgrep (optional, not auto-installed)
+      if installer.check_tool("semgrep")
+        @shell.say("  ✓ semgrep available", :green)
+      else
+        @shell.say("  ↳ semgrep not found (optional)", :yellow)
+        @shell.say("    → #{installer.preferred_command('semgrep')}", :yellow)
+      end
+    end
+
+    def configure_credentials
+      api_key = ENV["ANTHROPIC_API_KEY"]
+      return unless api_key && !api_key.strip.empty?
+
+      Credentials.save(api_key: api_key)
+      @shell.say("  ✓ Credentials stored in ~/.zwischen/credentials - never committed", :green)
+    end
+
+    def install_hook
+      project_root = Dir.pwd
+      git_dir = File.join(project_root, ".git")
+
+      unless File.directory?(git_dir)
+        @shell.say("  ⚠️  No .git directory found. Skipping hook installation.", :yellow)
+        return false
+      end
+
+      hook_path = Hooks.hook_path(project_root)
+
+      if File.exist?(hook_path)
+        if Hooks.zwischen_hook?(hook_path)
+          @shell.say("  ✓ Pre-push hook already installed", :green)
+          return true
+        end
+
+        backup_path = "#{hook_path}.zwischen.backup"
+        if File.exist?(backup_path)
+          timestamp = Time.now.strftime("%Y%m%d%H%M%S")
+          backup_path = "#{backup_path}.#{timestamp}"
+        end
+        FileUtils.cp(hook_path, backup_path)
+        @shell.say("  ✓ Backed up existing hook to #{backup_path}", :green)
+      end
+
+      if Hooks.install(project_root)
+        @shell.say("  ✓ Installing pre-push hook", :green)
+        true
+      else
+        @shell.say("  ✗ Failed to install hook", :red)
+        false
+      end
+    end
+
+    def create_config
+      project_root = Dir.pwd
+      config_path = File.join(project_root, Config::CONFIG_FILE)
+
+      if File.exist?(config_path)
+        @shell.say("  ✓ Config already exists (.zwischen.yml)", :green)
+        return false
+      end
+
+      if Config.init(project_root, quiet: true)
+        @shell.say("  ✓ Creating config (.zwischen.yml)", :green)
+        true
+      else
+        @shell.say("  ✗ Failed to create config", :red)
+        false
+      end
+    end
+  end
+end

data/lib/zwischen/version.rb

@@ -0,0 +1,5 @@
+# frozen_string_literal: true
+
+module Zwischen
+  VERSION = "0.1.0"
+end

data/lib/zwischen.rb

@@ -0,0 +1,29 @@
+# frozen_string_literal: true
+
+require_relative "zwischen/version"
+
+module Zwischen
+  class Error < StandardError; end
+end
+
+# Load all modules when gem is required
+require_relative "zwischen/config"
+require_relative "zwischen/project_detector"
+require_relative "zwischen/finding/finding"
+require_relative "zwischen/finding/aggregator"
+require_relative "zwischen/scanner/base"
+require_relative "zwischen/scanner/gitleaks"
+require_relative "zwischen/scanner/semgrep"
+require_relative "zwischen/scanner/orchestrator"
+require_relative "zwischen/installer"
+require_relative "zwischen/credentials"
+require_relative "zwischen/git_diff"
+require_relative "zwischen/hooks"
+require_relative "zwischen/setup"
+require_relative "zwischen/ai/anthropic_client"
+require_relative "zwischen/ai/ollama_client"
+require_relative "zwischen/ai/openai_client"
+require_relative "zwischen/ai/analyzer"
+require_relative "zwischen/reporter/terminal"
+require_relative "zwischen/reporter/sarif"
+require_relative "zwischen/cli"

data/zwischen.gemspec

@@ -0,0 +1,34 @@
+# frozen_string_literal: true
+
+require_relative "lib/zwischen/version"
+
+Gem::Specification.new do |spec|
+  spec.name          = "zwischen"
+  spec.version       = Zwischen::VERSION
+  spec.authors       = ["Conner Jordan"]
+  spec.email         = ["connercharlesjordan@gmail.com"]
+
+  spec.summary       = "AI-augmented security scanning CLI for vibe coders"
+  spec.description   = "Orchestrates Gitleaks and Semgrep scanners, aggregates findings, and uses AI to prioritize and explain security issues"
+  spec.homepage      = "https://github.com/cjordan223/zwischen"
+  spec.license       = "MIT"
+  spec.required_ruby_version = ">= 3.3.0"
+
+  spec.metadata["homepage_uri"] = spec.homepage
+  spec.metadata["source_code_uri"] = spec.homepage
+  spec.metadata["changelog_uri"] = "#{spec.homepage}/blob/main/CHANGELOG.md"
+
+  spec.files = Dir["lib/**/*", "bin/**/*", "*.md", "*.gemspec", ".zwischen.yml.example"].reject do |f|
+    File.directory?(f) || f.start_with?(*%w[spec/ test/ features/ .git .github])
+  end
+  spec.bindir        = "bin"
+  spec.executables   = ["zwischen"]
+  spec.require_paths = ["lib"]
+
+  spec.add_dependency "thor", "~> 1.3"
+  spec.add_dependency "faraday", "~> 2.0"
+  spec.add_dependency "colorize", "~> 0.8.1"
+
+  spec.add_development_dependency "rspec", "~> 3.12"
+  spec.add_development_dependency "rake", "~> 13.0"
+end

metadata

@@ -0,0 +1,145 @@
+--- !ruby/object:Gem::Specification
+name: zwischen
+version: !ruby/object:Gem::Version
+  version: 0.1.0
+platform: ruby
+authors:
+- Conner Jordan
+bindir: bin
+cert_chain: []
+date: 1980-01-02 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: thor
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.3'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.3'
+- !ruby/object:Gem::Dependency
+  name: faraday
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.0'
+- !ruby/object:Gem::Dependency
+  name: colorize
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.8.1
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.8.1
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.12'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.12'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '13.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '13.0'
+description: Orchestrates Gitleaks and Semgrep scanners, aggregates findings, and
+  uses AI to prioritize and explain security issues
+email:
+- connercharlesjordan@gmail.com
+executables:
+- zwischen
+extensions: []
+extra_rdoc_files: []
+files:
+- ".zwischen.yml.example"
+- CHANGELOG.md
+- DEVELOPMENT.md
+- README.md
+- TESTING.md
+- bin/zwischen
+- lib/zwischen.rb
+- lib/zwischen/ai/analyzer.rb
+- lib/zwischen/ai/anthropic_client.rb
+- lib/zwischen/ai/base_client.rb
+- lib/zwischen/ai/ollama_client.rb
+- lib/zwischen/ai/openai_client.rb
+- lib/zwischen/cli.rb
+- lib/zwischen/config.rb
+- lib/zwischen/credentials.rb
+- lib/zwischen/finding/aggregator.rb
+- lib/zwischen/finding/finding.rb
+- lib/zwischen/git_diff.rb
+- lib/zwischen/hooks.rb
+- lib/zwischen/installer.rb
+- lib/zwischen/project_detector.rb
+- lib/zwischen/reporter/sarif.rb
+- lib/zwischen/reporter/terminal.rb
+- lib/zwischen/scanner/base.rb
+- lib/zwischen/scanner/gitleaks.rb
+- lib/zwischen/scanner/orchestrator.rb
+- lib/zwischen/scanner/semgrep.rb
+- lib/zwischen/setup.rb
+- lib/zwischen/version.rb
+- zwischen.gemspec
+homepage: https://github.com/cjordan223/zwischen
+licenses:
+- MIT
+metadata:
+  homepage_uri: https://github.com/cjordan223/zwischen
+  source_code_uri: https://github.com/cjordan223/zwischen
+  changelog_uri: https://github.com/cjordan223/zwischen/blob/main/CHANGELOG.md
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: 3.3.0
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.6.9
+specification_version: 4
+summary: AI-augmented security scanning CLI for vibe coders
+test_files: []