@polarityinc/paragon 0.0.12 → 0.0.13

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@polarityinc/paragon",
-  "version": "0.0.12",
+  "version": "0.0.13",
   "description": "Paragon is the First AI QA Engineer and the Worlds best code reviewer.",
   "author": "Polarity Inc.",
   "private": false,

package/scripts/npm-install.js

@@ -81,6 +81,16 @@ function downloadFile(url, dest) {
   });
 }
 
+// Check if a command exists
+function commandExists(cmd) {
+  try {
+    execSync(`which ${cmd}`, { stdio: 'ignore' });
+    return true;
+  } catch (e) {
+    return false;
+  }
+}
+
 // Check for ripgrep
 function checkRipgrep() {
   try {
@@ -91,79 +101,189 @@ function checkRipgrep() {
   }
 }
 
-// Install ripgrep automatically
-function installRipgrep() {
-  console.log('Installing ripgrep...');
+// Check if Homebrew is available
+function hasHomebrew() {
+  try {
+    execSync('brew --version', { stdio: 'ignore' });
+    return true;
+  } catch (e) {
+    return false;
+  }
+}
+
+// Check if pip/pipx is available
+function hasPipx() {
+  try {
+    execSync('pipx --version', { stdio: 'ignore' });
+    return true;
+  } catch (e) {
+    return false;
+  }
+}
 
+function hasPip() {
   try {
+    execSync('pip3 --version', { stdio: 'ignore' });
+    return true;
+  } catch (e) {
+    return false;
+  }
+}
+
+// Install a tool using available package manager
+function installTool(toolName, brewName, pipxName, aptName) {
+  if (commandExists(toolName)) {
+    console.log(`  ✓ ${toolName} already installed`);
+    return true;
+  }
+
+  console.log(`  Installing ${toolName}...`);
+
+  // Try Homebrew first (macOS and Linux)
+  if (hasHomebrew()) {
+    try {
+      execSync(`brew install ${brewName || toolName}`, { stdio: 'inherit' });
+      console.log(`  ✓ ${toolName} installed via Homebrew`);
+      return true;
+    } catch (e) {
+      console.log(`  ⚠ Failed to install ${toolName} via Homebrew`);
+    }
+  }
+
+  // Try pipx for Python-based tools
+  if (pipxName && hasPipx()) {
+    try {
+      execSync(`pipx install ${pipxName}`, { stdio: 'inherit' });
+      console.log(`  ✓ ${toolName} installed via pipx`);
+      return true;
+    } catch (e) {
+      console.log(`  ⚠ Failed to install ${toolName} via pipx`);
+    }
+  }
+
+  // Try pip for Python-based tools
+  if (pipxName && hasPip()) {
+    try {
+      execSync(`pip3 install ${pipxName}`, { stdio: 'inherit' });
+      console.log(`  ✓ ${toolName} installed via pip`);
+      return true;
+    } catch (e) {
+      console.log(`  ⚠ Failed to install ${toolName} via pip`);
+    }
+  }
+
+  // Linux: try apt
+  if (platform === 'linux' && aptName) {
+    try {
+      // Check if apt is available
+      execSync('apt --version', { stdio: 'ignore' });
+      console.log(`  Attempting apt install (may require sudo)...`);
+      execSync(`sudo apt update && sudo apt install -y ${aptName}`, { stdio: 'inherit' });
+      console.log(`  ✓ ${toolName} installed via apt`);
+      return true;
+    } catch (e) {
+      // apt not available or failed
+    }
+  }
+
+  return false;
+}
+
+// Show manual installation instructions for security tools
+function showSecurityToolInstructions(toolName) {
+  console.log(`\n⚠️  ${toolName} could not be auto-installed`);
+  console.log(`\nPlease install it manually:\n`);
+
+  if (toolName === 'trivy') {
     if (platform === 'darwin') {
-      // macOS - try brew
-      try {
-        execSync('brew --version', { stdio: 'ignore' });
-        console.log('Installing ripgrep via Homebrew...');
-        execSync('brew install ripgrep', { stdio: 'inherit' });
-        return true;
-      } catch (e) {
-        console.error('✗ Homebrew not found. Please install Homebrew first: https://brew.sh');
-        return false;
-      }
+      console.log('  macOS (Homebrew):');
+      console.log('    brew install trivy\n');
     } else if (platform === 'linux') {
-      // Linux - try various package managers
-      // Try apt (Debian/Ubuntu)
-      try {
-        execSync('apt --version', { stdio: 'ignore' });
-        console.log('Installing ripgrep via apt...');
-        execSync('sudo apt update && sudo apt install -y ripgrep', { stdio: 'inherit' });
-        return true;
-      } catch (e) {
-        // Try dnf (Fedora)
-        try {
-          execSync('dnf --version', { stdio: 'ignore' });
-          console.log('Installing ripgrep via dnf...');
-          execSync('sudo dnf install -y ripgrep', { stdio: 'inherit' });
-          return true;
-        } catch (e2) {
-          // Try yum (RHEL/CentOS)
-          try {
-            execSync('yum --version', { stdio: 'ignore' });
-            console.log('Installing ripgrep via yum...');
-            execSync('sudo yum install -y ripgrep', { stdio: 'inherit' });
-            return true;
-          } catch (e3) {
-            console.error('✗ No supported package manager found (apt/dnf/yum)');
-            console.error('Please install ripgrep manually: https://github.com/BurntSushi/ripgrep');
-            return false;
-          }
-        }
-      }
-    } else if (platform === 'windows') {
-      // Windows - try choco first, then scoop
-      try {
-        execSync('choco --version', { stdio: 'ignore' });
-        console.log('Installing ripgrep via Chocolatey...');
-        execSync('choco install ripgrep -y', { stdio: 'inherit' });
-        return true;
-      } catch (e) {
-        try {
-          execSync('scoop --version', { stdio: 'ignore' });
-          console.log('Installing ripgrep via Scoop...');
-          execSync('scoop install ripgrep', { stdio: 'inherit' });
-          return true;
-        } catch (e2) {
-          console.error('✗ No supported package manager found (choco/scoop)');
-          console.error('Please install Chocolatey or Scoop first');
-          return false;
-        }
-      }
+      console.log('  Debian/Ubuntu:');
+      console.log('    sudo apt-get install wget apt-transport-https gnupg lsb-release');
+      console.log('    wget -qO - https://aquasecurity.github.io/trivy-repo/deb/public.key | sudo apt-key add -');
+      console.log('    echo deb https://aquasecurity.github.io/trivy-repo/deb $(lsb_release -sc) main | sudo tee -a /etc/apt/sources.list.d/trivy.list');
+      console.log('    sudo apt-get update && sudo apt-get install trivy\n');
+    }
+    console.log('  Or visit: https://aquasecurity.github.io/trivy/latest/getting-started/installation/\n');
+  } else if (toolName === 'semgrep') {
+    console.log('  Using pip/pipx:');
+    console.log('    pipx install semgrep');
+    console.log('    # or: pip3 install semgrep\n');
+    if (platform === 'darwin') {
+      console.log('  macOS (Homebrew):');
+      console.log('    brew install semgrep\n');
+    }
+    console.log('  Or visit: https://semgrep.dev/docs/getting-started/\n');
+  } else if (toolName === 'gitleaks') {
+    if (platform === 'darwin') {
+      console.log('  macOS (Homebrew):');
+      console.log('    brew install gitleaks\n');
+    } else if (platform === 'linux') {
+      console.log('  Download from GitHub releases:');
+      console.log('    https://github.com/gitleaks/gitleaks/releases\n');
+    }
+    console.log('  Or visit: https://github.com/gitleaks/gitleaks#installing\n');
+  }
+}
+
+// Install security scanning tools
+function installSecurityTools() {
+  console.log('\n🔒 Installing security scanning tools...\n');
+
+  const tools = [
+    { name: 'trivy', brew: 'trivy', pipx: null, apt: null },
+    { name: 'semgrep', brew: 'semgrep', pipx: 'semgrep', apt: null },
+    { name: 'gitleaks', brew: 'gitleaks', pipx: null, apt: null },
+  ];
+
+  const failed = [];
+
+  for (const tool of tools) {
+    const success = installTool(tool.name, tool.brew, tool.pipx, tool.apt);
+    if (!success) {
+      failed.push(tool.name);
     }
-  } catch (err) {
-    console.error('✗ Failed to install ripgrep:', err.message);
-    return false;
   }
+
+  if (failed.length > 0) {
+    console.log('\n━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━');
+    for (const toolName of failed) {
+      showSecurityToolInstructions(toolName);
+    }
+  } else {
+    console.log('\n✓ All security tools installed successfully!\n');
+  }
+}
+
+// Show instructions for installing ripgrep
+function showRipgrepInstructions() {
+  console.log('\n⚠️  ripgrep is required but not found on your system');
+  console.log('\nPlease install it using your package manager:\n');
+
+  if (platform === 'darwin') {
+    console.log('  macOS (Homebrew):');
+    console.log('    brew install ripgrep\n');
+  } else if (platform === 'linux') {
+    console.log('  Debian/Ubuntu:');
+    console.log('    sudo apt update && sudo apt install ripgrep\n');
+    console.log('  Fedora:');
+    console.log('    sudo dnf install ripgrep\n');
+    console.log('  RHEL/CentOS:');
+    console.log('    sudo yum install ripgrep\n');
+  } else if (platform === 'windows') {
+    console.log('  Chocolatey:');
+    console.log('    choco install ripgrep\n');
+    console.log('  Scoop:');
+    console.log('    scoop install ripgrep\n');
+  }
+
+  console.log('  Or download from: https://github.com/BurntSushi/ripgrep#installation\n');
+  return false;
 }
 
-// Uninstall brew version if it exists
-function uninstallBrewPolarity() {
+// Check for brew version conflict
+function checkBrewPolarity() {
   if (platform !== 'darwin') {
     return; // Only relevant for macOS
   }
@@ -175,9 +295,9 @@ function uninstallBrewPolarity() {
     // Check if polarity is installed via brew
     try {
       execSync('brew list polarity', { stdio: 'ignore' });
-      console.log('Found existing Homebrew installation of polarity, uninstalling...');
-      execSync('brew uninstall polarity', { stdio: 'inherit' });
-      console.log('✓ Homebrew polarity uninstalled successfully\n');
+      console.log('⚠️  Warning: Homebrew version of polarity is installed');
+      console.log('This may conflict with the npm version.');
+      console.log('Consider uninstalling it with: brew uninstall polarity\n');
     } catch (e) {
       // polarity not installed via brew, which is fine
     }
@@ -186,8 +306,8 @@ function uninstallBrewPolarity() {
   }
 }
 
-// Uninstall brew version before installing npm version
-uninstallBrewPolarity();
+// Check for potential brew conflicts
+checkBrewPolarity();
 
 downloadFile(GITHUB_RELEASE_URL, binPath)
   .then(() => {
@@ -207,16 +327,14 @@ downloadFile(GITHUB_RELEASE_URL, binPath)
     console.log('\n  The Best Code Review Agent in the World\n');
     console.log('✓ Paragon installed successfully!\n');
 
-    // Check and install ripgrep if needed
+    // Check for ripgrep
     if (!checkRipgrep()) {
-      if (!installRipgrep()) {
-        console.log('⚠️  Could not auto-install ripgrep');
-        console.log('Please install it manually: https://github.com/BurntSushi/ripgrep#installation\n');
-      } else {
-        console.log('✓ ripgrep installed automatically!\n');
-      }
+      showRipgrepInstructions();
     }
 
+    // Install security scanning tools (trivy, semgrep, gitleaks)
+    installSecurityTools();
+
     console.log('━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━');
     console.log('\n📝 Next Steps:\n');
     console.log('  1. Authenticate with Polarity:');