codeant-cli 0.1.5 → 0.1.7

package/src/commands/secrets.js

@@ -1,268 +0,0 @@
-import React, { useState, useEffect } from 'react';
-import { Text, Box, useApp } from 'ink';
-import { getConfigValue } from '../utils/config.js';
-import { fetchApi } from '../utils/fetchApi.js';
-import SecretsApiHelper from '../utils/secretsApiHelper.js';
-
-export default function Secrets({ scanType = 'staged-only', failOn = 'HIGH', include = [], exclude = [], lastNCommits = 1 }) {
-  const { exit } = useApp();
-  const [status, setStatus] = useState('initializing');
-  const [secrets, setSecrets] = useState([]);
-  const [error, setError] = useState(null);
-  const [fileCount, setFileCount] = useState(0);
-
-  const apiKey = getConfigValue('apiKey');
-
-  // Handle not logged in state
-  useEffect(() => {
-    if (!apiKey) {
-      const id = setTimeout(() => exit(new Error('Not logged in')), 0);
-      return () => clearTimeout(id);
-    }
-  }, [apiKey, exit]);
-
-  // Check if logged in
-  if (!apiKey) {
-    return React.createElement(
-      Box,
-      { flexDirection: 'column', padding: 1 },
-      React.createElement(Text, { color: 'red' }, '✗ Not logged in.'),
-      React.createElement(Text, { color: 'gray' }, 'Run "codeant login" to authenticate.')
-    );
-  }
-
-  // Helper to check if a secret should cause failure based on failOn level
-  const shouldFailOn = (confidenceScore) => {
-    const score = confidenceScore?.toUpperCase();
-    if (score === 'FALSE_POSITIVE') return false;
-    if (failOn === 'HIGH') return score === 'HIGH';
-    if (failOn === 'MEDIUM') return score === 'HIGH' || score === 'MEDIUM';
-    return true; // 'all' - fail on any non-false-positive
-  };
-
-  useEffect(() => {
-    let cancelled = false;
-
-    async function scanSecrets() {
-      try {
-        if (cancelled) return;
-        setStatus('scanning');
-
-        // Initialize git helper and get staged files
-        const helper = new SecretsApiHelper(process.cwd());
-        await helper.init();
-
-        if (cancelled) return;
-        const requestBody = await helper.buildSecretsApiRequest(scanType, include, exclude, { lastNCommits });
-        if (cancelled) return;
-
-        if (requestBody.files.length === 0) {
-          if (!cancelled) setStatus('no_files');
-          return;
-        }
-
-        // Call the secrets detection API
-        const response = await fetchApi(
-          '/extension/pr-review/secrets-detection',
-          'POST',
-          requestBody
-        );
-
-        if (cancelled) return;
-        const detectedSecrets = response.secretsDetected || [];
-
-        // Filter to only include files with actual secrets
-        const filesWithSecrets = detectedSecrets.filter(
-          file => file.secrets && file.secrets.length > 0
-        );
-
-        if (!cancelled) {
-          setSecrets(filesWithSecrets);
-          setStatus('done');
-        }
-      } catch (err) {
-        if (!cancelled) {
-          setError(err.message);
-          setStatus('error');
-        }
-      }
-    }
-
-    scanSecrets();
-
-    return () => {
-      cancelled = true;
-    };
-  }, [scanType, include, exclude, lastNCommits]);
-
-  // Handle exit after status changes
-  useEffect(() => {
-    if (status === 'done') {
-      // Check if any secrets should cause failure based on failOn level
-      const hasBlockingSecrets = secrets.some(file =>
-        file.secrets.some(secret => shouldFailOn(secret.confidence_score))
-      );
-
-      if (hasBlockingSecrets) {
-        setTimeout(() => {
-          process.exitCode = 1;
-          exit(new Error('Secrets detected'));
-        }, 100);
-      } else {
-        setTimeout(() => exit(), 100);
-      }
-    } else if (status === 'no_files') {
-      setTimeout(() => exit(), 100);
-    } else if (status === 'error') {
-      setTimeout(() => exit(new Error(error)), 100);
-    }
-  }, [status, secrets]);
-
-  // Render: Initializing
-  if (status === 'initializing') {
-    return React.createElement(
-      Box,
-      { flexDirection: 'column', padding: 1 },
-      React.createElement(Text, { color: 'cyan' }, 'Initializing...')
-    );
-  }
-
-  // Render: Scanning
-  if (status === 'scanning') {
-    return React.createElement(
-      Box,
-      { flexDirection: 'column', padding: 1 },
-      React.createElement(Text, { color: 'cyan' }, `Scanning ${fileCount} file(s) for secrets...`)
-    );
-  }
-
-  // Render: No files to scan
-  if (status === 'no_files') {
-    const noFilesMessages = {
-      'staged-only': 'Stage some changes first with "git add".',
-      'branch-diff': 'No changes found compared to the base branch.',
-      'uncommitted': 'No uncommitted changes found.',
-      'last-commit': 'No files found in the last commit.'
-    };
-
-    return React.createElement(
-      Box,
-      { flexDirection: 'column', padding: 1 },
-      React.createElement(Text, { color: 'yellow' }, 'No files to scan.'),
-      React.createElement(Text, { color: 'gray' }, noFilesMessages[scanType] || 'No files found.')
-    );
-  }
-
-  // Render: Error
-  if (status === 'error') {
-    return React.createElement(
-      Box,
-      { flexDirection: 'column', padding: 1 },
-      React.createElement(Text, { color: 'red' }, '✗ Error: ', error)
-    );
-  }
-
-  // Render: Done with secrets found
-  if (status === 'done' && secrets.length > 0) {
-    const allSecrets = secrets.flatMap(file =>
-      file.secrets.map(s => ({ ...s, file_path: file.file_path }))
-    );
-
-    const blockingSecrets = allSecrets.filter(s => shouldFailOn(s.confidence_score));
-    const falsePositives = allSecrets.filter(s => !shouldFailOn(s.confidence_score));
-
-    const hasBlockingSecrets = blockingSecrets.length > 0;
-
-    // Group by file for display
-    const groupByFile = (secretsList) => {
-      const grouped = {};
-      secretsList.forEach(s => {
-        if (!grouped[s.file_path]) grouped[s.file_path] = [];
-        grouped[s.file_path].push(s);
-      });
-      return grouped;
-    };
-
-    const blockingByFile = groupByFile(blockingSecrets);
-    const falsePositivesByFile = groupByFile(falsePositives);
-
-    const elements = [
-      // Header
-      React.createElement(
-        Text,
-        { key: 'header', color: hasBlockingSecrets ? 'red' : 'yellow', bold: true },
-        hasBlockingSecrets
-          ? `✗ ${blockingSecrets.length} secret(s) found!`
-          : `⚠ ${falsePositives.length} potential secret(s) found (ignored)`
-      ),
-      React.createElement(Text, { key: 'spacer1' }, '')
-    ];
-
-    // Blocking secrets
-    if (blockingSecrets.length > 0) {
-      Object.entries(blockingByFile).forEach(([filePath, fileSecrets]) => {
-        elements.push(
-          React.createElement(Text, { key: `file-${filePath}`, color: 'yellow', bold: true }, filePath)
-        );
-        fileSecrets.forEach((secret, idx) => {
-          elements.push(
-            React.createElement(
-              Text,
-              { key: `secret-${filePath}-${idx}`, color: 'red' },
-              `  Line ${secret.line_number}: ${secret.type} (${secret.confidence_score})`
-            )
-          );
-        });
-      });
-    }
-
-    // False positives / ignored
-    if (falsePositives.length > 0) {
-      if (blockingSecrets.length > 0) {
-        elements.push(React.createElement(Text, { key: 'spacer2' }, ''));
-      }
-      elements.push(
-        React.createElement(Text, { key: 'fp-header', color: 'gray' }, 'Ignored (false positives):')
-      );
-      Object.entries(falsePositivesByFile).forEach(([filePath, fileSecrets]) => {
-        elements.push(
-          React.createElement(Text, { key: `fp-file-${filePath}`, color: 'gray' }, `  ${filePath}`)
-        );
-        fileSecrets.forEach((secret, idx) => {
-          elements.push(
-            React.createElement(
-              Text,
-              { key: `fp-secret-${filePath}-${idx}`, color: 'gray', dimColor: true },
-              `    Line ${secret.line_number}: ${secret.type} (${secret.confidence_score})`
-            )
-          );
-        });
-      });
-    }
-
-    elements.push(React.createElement(Text, { key: 'spacer3' }, ''));
-
-    if (hasBlockingSecrets) {
-      elements.push(
-        React.createElement(Text, { key: 'footer', color: 'gray' }, 'Remove secrets before committing.')
-      );
-    } else {
-      elements.push(
-        React.createElement(Text, { key: 'footer', color: 'green' }, '✓ Commit allowed (only false positives found)')
-      );
-    }
-
-    return React.createElement(
-      Box,
-      { flexDirection: 'column', padding: 1 },
-      ...elements
-    );
-  }
-
-  // Render: Done with no secrets
-  return React.createElement(
-    Box,
-    { flexDirection: 'column', padding: 1 },
-    React.createElement(Text, { color: 'green' }, '✓ No secrets found')
-  );
-}

package/src/commands/securityAnalysis.js

@@ -1,284 +0,0 @@
-import React, { useEffect, useState } from 'react';
-import { Box, Text, useApp } from 'ink';
-import { getConfigValue } from '../utils/config.js';
-import { fetchApi } from '../utils/fetchApi.js';
-import SecurityAnalysisApiHelper from '../utils/securityAnalysisApiHelper.js';
-
-export default function SecurityAnalysis({ scanType = 'staged-only', failOn = 'HIGH', include = [], exclude = [], lastNCommits = 1 }) {
-  const { exit } = useApp();
-  const [status, setStatus] = useState('initializing');
-  const [issues, setIssues] = useState([]);
-  const [error, setError] = useState(null);
-  const [fileCount, setFileCount] = useState(0);
-
-  const apiKey = getConfigValue('apiKey');
-
-  // Handle not logged in state
-  useEffect(() => {
-    if (!apiKey) {
-      const id = setTimeout(() => exit(new Error('Not logged in')), 0);
-      return () => clearTimeout(id);
-    }
-  }, [apiKey, exit]);
-
-  // Check if logged in
-  if (!apiKey) {
-    return React.createElement(
-      Box,
-      { flexDirection: 'column', padding: 1 },
-      React.createElement(Text, { color: 'red' }, '✗ Not logged in.'),
-      React.createElement(Text, { color: 'gray' }, 'Run "codeant login" to authenticate.'),
-    );
-  }
-
-  // Helper to check if an issue should cause failure based on failOn level
-  const shouldFailOn = (severity) => {
-    const score = severity?.toUpperCase();
-    if (score === 'FALSE_POSITIVE') return false;
-    if (failOn === 'CRITICAL') return score === 'CRITICAL';
-    if (failOn === 'HIGH') return score === 'HIGH' || score === 'CRITICAL';
-    if (failOn === 'MEDIUM') return score === 'HIGH' || score === 'MEDIUM';
-    return true; // 'all' - fail on any non-false-positive
-  };
-
-  useEffect(() => {
-    let cancelled = false;
-
-    async function scanForIssues() {
-      try {
-        if (cancelled) return;
-        setStatus('scanning');
-
-        // Initialize git helper and get staged files
-        const helper = new SecurityAnalysisApiHelper(process.cwd());
-        await helper.init();
-
-        if (cancelled) return;
-        const requestBody = await helper.buildSecurityAnalysisApiRequest(scanType, include, exclude, { lastNCommits });
-        if (cancelled) return;
-
-        if (requestBody.files.length === 0) {
-          if (!cancelled) setStatus('no_files');
-          return;
-        }
-
-        // Call the security analysis API
-        const response = await fetchApi(
-          '/extension/pr-review/security-analysis',
-          'POST',
-          requestBody,
-        );
-
-        if (cancelled) return;
-
-        // Transform security issues response to the expected format
-        const detectedIssues = (response.securityIssues || []).map(file => ({
-          file_path: file.file_path,
-          issues: (file.security_issues || []).map(issue => ({
-            line_number: issue.line_number,
-            end_line: issue.end_line,
-            type: issue.issue_text,
-            confidence_score: issue.false_positive ? 'FALSE_POSITIVE' : issue.severity,
-            test_id: issue.test_id,
-            confidence: issue.confidence,
-            likelihood: issue.likelihood,
-            cwe: issue.cwe,
-            owasp: issue.owasp,
-          })),
-        }));
-
-        // Filter to only include files with actual issues
-        const filesWithIssues = detectedIssues.filter(
-          file => file.issues && file.issues.length > 0,
-        );
-
-        if (!cancelled) {
-          setIssues(filesWithIssues);
-          setStatus('done');
-        }
-      } catch (err) {
-        if (!cancelled) {
-          setError(err.message);
-          setStatus('error');
-        }
-      }
-    }
-
-    scanForIssues();
-
-    return () => {
-      cancelled = true;
-    };
-  }, [scanType, include, exclude, lastNCommits]);
-
-  // Handle exit after status changes
-  useEffect(() => {
-    if (status === 'done') {
-      // Check if any issues should cause failure based on failOn level
-      const hasBlockingIssues = issues.some(file =>
-        file.issues.some(issue => issue.false_positive !== true &&shouldFailOn(issue.severity)),
-      );
-
-      if (hasBlockingIssues) {
-        setTimeout(() => {
-          process.exitCode = 1;
-          exit(new Error('Security issues detected'));
-        }, 100);
-      } else {
-        setTimeout(() => exit(), 100);
-      }
-    } else if (status === 'no_files') {
-      setTimeout(() => exit(), 100);
-    } else if (status === 'error') {
-      setTimeout(() => exit(new Error(error)), 100);
-    }
-  }, [status, issues]);
-
-  // Render: Initializing
-  if (status === 'initializing') {
-    return React.createElement(
-      Box,
-      { flexDirection: 'column', padding: 1 },
-      React.createElement(Text, { color: 'cyan' }, 'Initializing...'),
-    );
-  }
-
-  // Render: Scanning
-  if (status === 'scanning') {
-    return React.createElement(
-      Box,
-      { flexDirection: 'column', padding: 1 },
-      React.createElement(Text, { color: 'cyan' }, `Scanning ${fileCount} file(s) for security issues...`),
-    );
-  }
-
-  // Render: No files to scan
-  if (status === 'no_files') {
-    const noFilesMessages = {
-      'staged-only': 'Stage some changes first with "git add".',
-      'branch-diff': 'No changes found compared to the base branch.',
-      'uncommitted': 'No uncommitted changes found.',
-      'last-commit': 'No files found in the last commit.',
-    };
-
-    return React.createElement(
-      Box,
-      { flexDirection: 'column', padding: 1 },
-      React.createElement(Text, { color: 'yellow' }, 'No files to scan.'),
-      React.createElement(Text, { color: 'gray' }, noFilesMessages[scanType] || 'No files found.'),
-    );
-  }
-
-  // Render: Error
-  if (status === 'error') {
-    return React.createElement(
-      Box,
-      { flexDirection: 'column', padding: 1 },
-      React.createElement(Text, { color: 'red' }, '✗ Error: ', error),
-    );
-  }
-
-  // Render: Done with issues found
-  if (status === 'done' && issues.length > 0) {
-    const allIssues = issues.flatMap(file =>
-      file.issues.map(s => ({ ...s, file_path: file.file_path })),
-    );
-
-    const blockingIssues = allIssues.filter(s => s.false_positive !== true && shouldFailOn(s.severity));
-    const falsePositives = allIssues.filter(s => s.false_positive !== true && !shouldFailOn(s.severity));
-
-    const hasBlockingIssues = blockingIssues.length > 0;
-
-    // Group by file for display
-    const groupByFile = (issuesList) => {
-      const grouped = {};
-      issuesList.forEach(s => {
-        if (!grouped[s.file_path]) grouped[s.file_path] = [];
-        grouped[s.file_path].push(s);
-      });
-      return grouped;
-    };
-
-    const blockingByFile = groupByFile(blockingIssues);
-    const falsePositivesByFile = groupByFile(falsePositives);
-
-    const elements = [
-      // Header
-      React.createElement(
-        Text,
-        { key: 'header', color: hasBlockingIssues ? 'red' : 'yellow', bold: true },
-        hasBlockingIssues
-          ? `✗ ${blockingIssues.length} security issue(s) found!`
-          : `⚠ ${falsePositives.length} potential security issue(s) found (ignored)`,
-      ),
-      React.createElement(Text, { key: 'spacer1' }, ''),
-    ];
-
-    // Blocking issues
-    if (blockingIssues.length > 0) {
-      Object.entries(blockingByFile).forEach(([filePath, fileIssues]) => {
-        elements.push(
-          React.createElement(Text, { key: `file-${filePath}`, color: 'yellow', bold: true }, filePath),
-        );
-        fileIssues.forEach((issue, idx) => {
-          elements.push(
-            React.createElement(
-              Text,
-              { key: `issue-${filePath}-${idx}`, color: 'red' },
-              `  Line ${issue.line_number}: ${issue.type} (${issue.confidence_score})`,
-            ),
-          );
-        });
-      });
-    }
-
-    // False positives / ignored
-    if (falsePositives.length > 0) {
-      if (blockingIssues.length > 0) {
-        elements.push(React.createElement(Text, { key: 'spacer2' }, ''));
-      }
-      elements.push(
-        React.createElement(Text, { key: 'fp-header', color: 'gray' }, 'Ignored (false positives):'),
-      );
-      Object.entries(falsePositivesByFile).forEach(([filePath, fileIssues]) => {
-        elements.push(
-          React.createElement(Text, { key: `fp-file-${filePath}`, color: 'gray' }, `  ${filePath}`),
-        );
-        fileIssues.forEach((issue, idx) => {
-          elements.push(
-            React.createElement(
-              Text,
-              { key: `fp-issue-${filePath}-${idx}`, color: 'gray', dimColor: true },
-              `    Line ${issue.line_number}: ${issue.type} (${issue.confidence_score})`,
-            ),
-          );
-        });
-      });
-    }
-
-    elements.push(React.createElement(Text, { key: 'spacer3' }, ''));
-
-    if (hasBlockingIssues) {
-      elements.push(
-        React.createElement(Text, { key: 'footer', color: 'gray' }, 'Fix security issues before committing.'),
-      );
-    } else {
-      elements.push(
-        React.createElement(Text, { key: 'footer', color: 'green' }, '✓ Commit allowed (only false positives found)'),
-      );
-    }
-
-    return React.createElement(
-      Box,
-      { flexDirection: 'column', padding: 1 },
-      ...elements,
-    );
-  }
-
-  // Render: Done with no issues
-  return React.createElement(
-    Box,
-    { flexDirection: 'column', padding: 1 },
-    React.createElement(Text, { color: 'green' }, '✓ No security issues found'),
-  );
-}

package/src/commands/setBaseUrl.js

@@ -1,37 +0,0 @@
-import React, { useEffect } from 'react';
-import { Text, Box, useApp } from 'ink';
-import { setConfigValue, CONFIG_FILE } from '../utils/config.js';
-
-export default function SetBaseUrl({ url }) {
-  const { exit } = useApp();
-
-  useEffect(() => {
-    if (!url) {
-      exit(new Error('URL is required'));
-      return;
-    }
-
-    try {
-      setConfigValue('baseUrl', url);
-      exit();
-    } catch (err) {
-      exit(err);
-    }
-  }, []);
-
-  if (!url) {
-    return React.createElement(
-      Box,
-      { flexDirection: 'column', padding: 1 },
-      React.createElement(Text, { color: 'red' }, '✗ Error: URL is required'),
-      React.createElement(Text, { color: 'gray' }, 'Usage: codeant set-base-url <url>')
-    );
-  }
-
-  return React.createElement(
-    Box,
-    { flexDirection: 'column', padding: 1 },
-    React.createElement(Text, { color: 'green' }, '✓ Base URL set to: ', url),
-    React.createElement(Text, { color: 'gray' }, 'Saved to: ', CONFIG_FILE)
-  );
-}