@maverick006/vibeguard 1.0.0

package/dist/index.js

@@ -0,0 +1,72 @@
+#!/usr/bin/env node
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+require("dotenv/config");
+const commander_1 = require("commander");
+const chalk_1 = __importDefault(require("chalk"));
+const ora_1 = __importDefault(require("ora"));
+const ai_engine_1 = require("@maverick006/ai-engine");
+const types_1 = require("@maverick006/types");
+const fs_1 = require("fs");
+const path_1 = require("path");
+const program = new commander_1.Command();
+program
+    .name('vibeguard')
+    .description('VibeGuard Deterministic DevSecOps CLI')
+    .version('1.0.0');
+program
+    .command('scan')
+    .description('Run a security scan on the current directory')
+    .option('-d, --dir <path>', 'Directory to scan', process.cwd())
+    .option('--fix', 'Automatically generate AI remediation fixes')
+    .action(async (options) => {
+    console.log(chalk_1.default.bold.magenta('\n🛡️  VibeGuard Orchestrator Initiated\n'));
+    const spinner = (0, ora_1.default)('Scanning repository for vulnerabilities...').start();
+    // Simulate orchestration of underlying tools since this is the demo CLI
+    await new Promise(resolve => setTimeout(resolve, 2000));
+    spinner.succeed('Scans completed via deterministic engines');
+    // Generate mock findings that would come from the scanners
+    const findings = [
+        {
+            id: 'vg-001',
+            title: 'SQL Injection Vulnerability',
+            description: 'User input is directly concatenated into a SQL query, allowing for injection attacks.',
+            severity: types_1.Severity.HIGH,
+            scanner: 'Semgrep',
+            file: 'src/api/users.ts',
+            line: 42
+        }
+    ];
+    console.log(chalk_1.default.bold(`\nFound ${findings.length} vulnerabilities.`));
+    for (const finding of findings) {
+        console.log(chalk_1.default.red(`\n[${finding.severity}] ${finding.title}`));
+        console.log(chalk_1.default.gray(`File: ${finding.file}:${finding.line}`));
+        console.log(`${finding.description}`);
+        if (options.fix) {
+            console.log(chalk_1.default.blue('\nGenerating AI Remediation...'));
+            try {
+                const explainer = new ai_engine_1.ContextualExplainer();
+                // Mock file context
+                let snippet = 'const query = "SELECT * FROM users WHERE name = " + req.query.name;';
+                if ((0, fs_1.existsSync)((0, path_1.join)(options.dir, finding.file))) {
+                    const content = (0, fs_1.readFileSync)((0, path_1.join)(options.dir, finding.file), 'utf-8');
+                    snippet = content.split('\n').slice(Math.max(0, finding.line - 5), finding.line + 5).join('\n');
+                }
+                const explanation = await explainer.explainFinding(finding, { codeContext: snippet });
+                console.log(chalk_1.default.green('\n✅ AI Remediation Plan:'));
+                console.log(chalk_1.default.white(explanation.summary));
+                console.log(chalk_1.default.white(explanation.details));
+                console.log(chalk_1.default.green('\nSuggested Fix:'));
+                console.log(chalk_1.default.white(explanation.codeFix || explanation.remediation));
+            }
+            catch (e) {
+                console.log(chalk_1.default.yellow(`AI Fix generation failed: ${e.message}`));
+            }
+        }
+    }
+    console.log(chalk_1.default.magenta('\nScan complete.\n'));
+});
+program.parse(process.argv);

package/package.json

@@ -0,0 +1,26 @@
+{
+  "name": "@maverick006/vibeguard",
+  "version": "1.0.0",
+  "description": "VibeGuard CLI",
+  "main": "dist/index.js",
+  "bin": {
+    "vibeguard": "./dist/index.js"
+  },
+  "scripts": {
+    "build": "tsc",
+    "dev": "ts-node src/index.ts",
+    "start": "node dist/index.js"
+  },
+  "dependencies": {
+    "@maverick006/ai-engine": "*",
+    "@maverick006/types": "*",
+    "chalk": "^4.1.2",
+    "commander": "^11.1.0",
+    "dotenv": "^17.4.2",
+    "ora": "^5.4.1"
+  },
+  "devDependencies": {
+    "@types/node": "^20.0.0",
+    "typescript": "^5.0.0"
+  }
+}

package/src/index.ts

@@ -0,0 +1,81 @@
+#!/usr/bin/env node
+import 'dotenv/config';
+import { Command } from 'commander';
+import chalk from 'chalk';
+import ora from 'ora';
+import { ContextualExplainer } from '@maverick006/ai-engine';
+import { NormalizedFinding, Severity } from '@maverick006/types';
+import { readFileSync, existsSync } from 'fs';
+import { join } from 'path';
+
+const program = new Command();
+
+program
+  .name('vibeguard')
+  .description('VibeGuard Deterministic DevSecOps CLI')
+  .version('1.0.0');
+
+program
+  .command('scan')
+  .description('Run a security scan on the current directory')
+  .option('-d, --dir <path>', 'Directory to scan', process.cwd())
+  .option('--fix', 'Automatically generate AI remediation fixes')
+  .action(async (options) => {
+    console.log(chalk.bold.magenta('\n🛡️  VibeGuard Orchestrator Initiated\n'));
+    
+    const spinner = ora('Scanning repository for vulnerabilities...').start();
+    
+    // Simulate orchestration of underlying tools since this is the demo CLI
+    await new Promise(resolve => setTimeout(resolve, 2000));
+    
+    spinner.succeed('Scans completed via deterministic engines');
+
+    // Generate mock findings that would come from the scanners
+    const findings: NormalizedFinding[] = [
+      {
+        id: 'vg-001',
+        title: 'SQL Injection Vulnerability',
+        description: 'User input is directly concatenated into a SQL query, allowing for injection attacks.',
+        severity: Severity.HIGH,
+        scanner: 'Semgrep',
+        file: 'src/api/users.ts',
+        line: 42
+      }
+    ];
+
+    console.log(chalk.bold(`\nFound ${findings.length} vulnerabilities.`));
+
+    for (const finding of findings) {
+      console.log(chalk.red(`\n[${finding.severity}] ${finding.title}`));
+      console.log(chalk.gray(`File: ${finding.file}:${finding.line}`));
+      console.log(`${finding.description}`);
+
+      if (options.fix) {
+        console.log(chalk.blue('\nGenerating AI Remediation...'));
+        try {
+          const explainer = new ContextualExplainer();
+          // Mock file context
+          let snippet = 'const query = "SELECT * FROM users WHERE name = " + req.query.name;';
+          if (existsSync(join(options.dir, finding.file as string))) {
+            const content = readFileSync(join(options.dir, finding.file as string), 'utf-8');
+            snippet = content.split('\n').slice(Math.max(0, (finding.line as number) - 5), (finding.line as number) + 5).join('\n');
+          }
+
+          const explanation = await explainer.explainFinding(finding, { codeContext: snippet });
+          
+          console.log(chalk.green('\n✅ AI Remediation Plan:'));
+          console.log(chalk.white(explanation.summary));
+          console.log(chalk.white(explanation.details));
+          
+          console.log(chalk.green('\nSuggested Fix:'));
+          console.log(chalk.white(explanation.codeFix || explanation.remediation));
+        } catch (e: any) {
+          console.log(chalk.yellow(`AI Fix generation failed: ${e.message}`));
+        }
+      }
+    }
+    
+    console.log(chalk.magenta('\nScan complete.\n'));
+  });
+
+program.parse(process.argv);

package/tsconfig.json

@@ -0,0 +1,12 @@
+{
+  "extends": "../../tsconfig.json",
+  "compilerOptions": {
+    "outDir": "./dist",
+    "rootDir": "./src"
+  },
+  "include": ["src/**/*"],
+  "references": [
+    { "path": "../types" },
+    { "path": "../ai-engine" }
+  ]
+}