@rajendra_7/securedev 0.1.0

package/README.md

@@ -0,0 +1,30 @@
+# securedev
+
+CLI agent for SecureDev real-time security scanning.
+
+## Install
+
+```bash
+npm install -D securedev
+```
+
+## Usage
+
+```bash
+npx securedev watch
+```
+
+Required environment variables:
+
+- `SECUREDEV_API_KEY`
+- `SECUREDEV_PROJECT_ID`
+- `SECUREDEV_API_URL` (optional, defaults to `http://localhost:3000`)
+
+Example:
+
+```bash
+SECUREDEV_API_KEY=sk_live_xxx \
+SECUREDEV_PROJECT_ID=proj_xxx \
+SECUREDEV_API_URL=http://localhost:3000 \
+npx securedev watch
+```

package/dist/client.js

@@ -0,0 +1,23 @@
+import { readFile } from "node:fs/promises";
+export const sendFileForScan = async (filePath, config) => {
+    const content = await readFile(filePath, "utf8");
+    const response = await fetch(`${config.apiUrl}/v1/scans`, {
+        method: "POST",
+        headers: {
+            "content-type": "application/json",
+            authorization: `Bearer ${config.apiKey}`
+        },
+        body: JSON.stringify({
+            project_id: config.projectId,
+            triggered_by: "agent",
+            files: [{ path: filePath, content }]
+        })
+    });
+    if (!response.ok) {
+        const text = await response.text();
+        throw new Error(`Scan failed (${response.status}): ${text}`);
+    }
+    const data = (await response.json());
+    const n = data.summary?.total_vulnerabilities ?? 0;
+    console.log(`✅ ${filePath} scanned - ${n} vulnerability${n === 1 ? "" : "ies"} found`);
+};

package/dist/index.js

@@ -0,0 +1,22 @@
+#!/usr/bin/env node
+import "dotenv/config";
+import process from "node:process";
+import { startWatcher } from "./watcher.js";
+const command = process.argv[2];
+if (command !== "watch") {
+    console.error("Usage: securedev watch");
+    process.exit(1);
+}
+const apiKey = process.env.SECUREDEV_API_KEY;
+const projectId = process.env.SECUREDEV_PROJECT_ID;
+const apiUrl = process.env.SECUREDEV_API_URL || "http://localhost:3000";
+if (!apiKey || !projectId) {
+    console.error("Missing SECUREDEV_API_KEY or SECUREDEV_PROJECT_ID");
+    process.exit(1);
+}
+startWatcher({
+    apiKey,
+    projectId,
+    apiUrl,
+    cwd: process.cwd()
+});

package/dist/watcher.js

@@ -0,0 +1,30 @@
+import chokidar from "chokidar";
+import path from "node:path";
+import { sendFileForScan } from "./client.js";
+const codeExtension = /\.(ts|tsx|js|jsx|mjs|cjs|py|go|java|rb|php|rs)$/;
+export const startWatcher = (config) => {
+    const watcher = chokidar.watch(config.cwd, {
+        ignored: [
+            /(^|[\\/])\../,
+            /node_modules/,
+            /dist/,
+            /build/,
+            /.git/
+        ],
+        ignoreInitial: true,
+        persistent: true
+    });
+    watcher.on("change", async (absolutePath) => {
+        if (!codeExtension.test(absolutePath)) {
+            return;
+        }
+        const relative = path.relative(config.cwd, absolutePath);
+        try {
+            await sendFileForScan(relative, config);
+        }
+        catch (error) {
+            console.error(`❌ ${relative} scan failed`, error);
+        }
+    });
+    console.log(`SecureDev watching ${config.cwd}`);
+};

package/package.json

@@ -0,0 +1,29 @@
+{
+  "name": "@rajendra_7/securedev",
+  "version": "0.1.0",
+  "private": false,
+  "type": "module",
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "bin": {
+    "securedev": "dist/index.js"
+  },
+  "scripts": {
+    "dev": "node --import tsx src/index.ts watch",
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "prepublishOnly": "npm run typecheck && npm run build"
+  },
+  "dependencies": {
+    "chokidar": "^4.0.1",
+    "dotenv": "^16.4.5"
+  },
+  "devDependencies": {
+    "@types/node": "^22.9.0",
+    "ts-node": "^10.9.2",
+    "tsx": "^4.21.0",
+    "typescript": "^5.6.3"
+  }
+}