@lowwattlabs/clawsec 2.0.1 → 2.1.0

package/bin/setup-venv.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 /**
- * ClawSec postinstall — sets up Python venv
+ * ⚡ ClawSec postinstall — sets up Python venv and runs initial intel sync
  * Called by npm postinstall. Safe to run multiple times.
  */
 
@@ -12,23 +12,63 @@ const os = require('os');
 const CLAWSEC_HOME = process.env.CLAWSEC_HOME || path.join(os.homedir(), '.clawsec');
 const VENV_DIR = path.join(CLAWSEC_HOME, 'venv');
 const PYTHON = path.join(VENV_DIR, 'bin', 'python3');
+const INTEL_DIR = path.join(CLAWSEC_HOME, 'intel');
 
 // Don't fail install if setup fails — user can run clawsec setup later
 try {
-  if (fs.existsSync(PYTHON)) {
-    process.exit(0); // Already set up
-  }
+  // Step 1: Create Python venv if needed
+  if (!fs.existsSync(PYTHON)) {
+    fs.mkdirSync(CLAWSEC_HOME, { recursive: true });
+    console.log('⚡ Setting up ClawSec Python environment (first run)...');
+    execSync(`python3 -m venv "${VENV_DIR}"`, { stdio: 'inherit' });
 
-  fs.mkdirSync(CLAWSEC_HOME, { recursive: true });
-  execSync(`python3 -m venv "${VENV_DIR}"`, { stdio: 'pipe' });
+    const PKG_ROOT = path.resolve(__dirname, '..');
+    const REQUIREMENTS = path.join(PKG_ROOT, 'requirements.txt');
 
-  const PKG_ROOT = path.resolve(__dirname, '..');
-  const REQUIREMENTS = path.join(PKG_ROOT, 'requirements.txt');
+    if (fs.existsSync(REQUIREMENTS)) {
+      execSync(`"${PYTHON}" -m pip install --quiet --upgrade pip`, { stdio: 'pipe' });
+      execSync(`"${PYTHON}" -m pip install --quiet -r "${REQUIREMENTS}"`, { stdio: 'pipe' });
+    }
+    console.log('  ✅ Python environment ready.');
+  }
 
-  if (fs.existsSync(REQUIREMENTS)) {
-    execSync(`"${PYTHON}" -m pip install --quiet --upgrade pip`, { stdio: 'pipe' });
-    execSync(`"${PYTHON}" -m pip install --quiet -r "${REQUIREMENTS}"`, { stdio: 'pipe' });
+  // Step 2: Create intel directories and sync
+  const intelDirs = [
+    'cisa-kev', 'osv', 'osv/npm', 'osv/PyPI', 'epss',
+    'malwarebazaar', 'urlhaus', 'threatfox', 'feodo',
+    'yara-rules', 'yara-rules/repo', 'semgrep-rules', 'semgrep-rules/repo'
+  ];
+  for (const d of intelDirs) {
+    fs.mkdirSync(path.join(INTEL_DIR, d), { recursive: true });
   }
+  fs.mkdirSync(path.join(CLAWSEC_HOME, 'reports'), { recursive: true });
+
+  // Only sync if intel cache is empty (first install)
+  const manifest = path.join(INTEL_DIR, 'manifest.json');
+  if (!fs.existsSync(manifest)) {
+    console.log('⚡ Downloading threat intel (first run, may take a few minutes)...');
+    const PKG_ROOT = path.resolve(__dirname, '..');
+    const syncSh = path.join(PKG_ROOT, 'lib', 'intel-sync', 'sync.sh');
+    if (fs.existsSync(syncSh)) {
+      try {
+        execSync(`bash "${syncSh}"`, {
+          stdio: 'inherit',
+          env: {
+            ...process.env,
+            CLAWSEC_HOME: CLAWSEC_HOME,
+            CLAWSEC_INTEL_DIR: INTEL_DIR,
+            CLAWSEC_REPORTS_DIR: path.join(CLAWSEC_HOME, 'reports'),
+            PATH: `${path.join(os.homedir(), '.local', 'bin')}:${process.env.PATH || '/usr/local/bin:/usr/bin:/bin'}`,
+          }
+        });
+      } catch {
+        // Sync failure is non-fatal — user can run clawsec sync later
+        console.log('  ⚠ Intel sync had issues. Run "clawsec sync" to retry.');
+      }
+    }
+  }
+
+  console.log('⚡ ClawSec ready. Run "clawsec scan ./my-skill" to get started.');
 } catch {
   // Postinstall is best-effort. The CLI will try again on first run.
   process.exit(0);

package/cli/clawsec.py

@@ -19,7 +19,7 @@ import sys
 import time
 from pathlib import Path
 
-VERSION = "2.0.1"
+VERSION = "2.1.0"
 CLAWSEC_DIR = os.environ.get("CLAWSEC_HOME", os.path.expanduser("~/.clawsec"))
 INTEL_DIR = os.environ.get("CLAWSEC_INTEL_DIR", os.path.join(CLAWSEC_DIR, "intel"))
 REPORTS_DIR = os.environ.get("CLAWSEC_REPORTS_DIR", os.path.join(CLAWSEC_DIR, "reports"))

package/lib/intel-sync/sync.sh

@@ -31,12 +31,12 @@ usage() {
 ALL_SOURCES=(cisa-kev osv epss malwarebazaar urlhaus threatfox feodo yara-rules semgrep-rules)
 
 # Ensure intel directories exist
-INTEL_DIR=
-for src in ; do
-    mkdir -p /
+INTEL_DIR="${CLAWSEC_INTEL_DIR}"
+for src in "${ALL_SOURCES[@]}"; do
+    mkdir -p "${INTEL_DIR}/${src}"
 done
-mkdir -p /osv/npm /osv/PyPI
-mkdir -p 
+mkdir -p "${INTEL_DIR}/osv/npm" "${INTEL_DIR}/osv/PyPI"
+mkdir -p "${CLAWSEC_REPORTS_DIR}" 
 requested_sources=()
 json_output=0
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lowwattlabs/clawsec",
-  "version": "2.0.1",
+  "version": "2.1.0",
   "description": "ClawSec - Security Verification for ClawHub Skills",
   "bin": {
     "clawsec": "./bin/clawsec.js",