codeant-cli 0.2.2 → 0.2.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeant-cli",
-  "version": "0.2.2",
+  "version": "0.2.4",
   "description": "Code review CLI tool",
   "type": "module",
   "bin": {

package/src/index.js

@@ -9,8 +9,6 @@ import SetBaseUrl from './commands/setBaseUrl.js';
 import GetBaseUrl from './commands/getBaseUrl.js';
 import Login from './commands/login.js';
 import Logout from './commands/logout.js';
-import StaticAnalysis from './commands/staticAnalysis.js';
-import SecurityAnalysis from './commands/securityAnalysis.js';
 import Review from './commands/review.js';
 import Welcome from './components/Welcome.js';
 import * as scm from './scm/index.js';
@@ -88,87 +86,6 @@ program
     render(React.createElement(Secrets, { scanType, failOn, include, exclude, lastNCommits }));
   });
 
-program
-  .command('static-analysis')
-  .description('Run static analysis on your code')
-  .option('--staged', 'Scan only staged files (default)')
-  .option('--all', 'Scan all changed files')
-  .option('--uncommitted', 'Scan uncommitted changes')
-  .option('--last-commit', 'Scan last commit')
-  .option('--last-n-commits <n>', 'Scan last n commits (max 5)', parseInt)
-  .option('--fail-on <level>', 'Fail on issues at or above this level: BLOCKER, CRITICAL, MAJOR, MINOR, INFO (default: CRITICAL)', 'CRITICAL')
-  .option('--auto-fix', 'Automatically apply fixes when available')
-  .option('--include <paths>', 'Comma-separated list of file paths regex to include')
-  .option('--exclude <paths>', 'Comma-separated list of file paths regex to exclude')
-  .action((options) => {
-    let scanType = 'staged-only';
-    let lastNCommits = 1;
-
-    // Check !== undefined, not truthy — passing 0 is valid and shouldn't fall through
-    if (options.lastNCommits !== undefined) {
-      scanType = 'last-n-commits';
-      lastNCommits = Math.min(Math.max(1, options.lastNCommits), 5);
-    } else if (options.all) {
-      scanType = 'branch-diff';
-    } else if (options.uncommitted) {
-      scanType = 'uncommitted';
-    } else if (options.lastCommit) {
-      scanType = 'last-commit';
-    }
-
-    const include = options.include
-      ? (Array.isArray(options.include) ? options.include : splitGlobs(options.include))
-      : [];
-
-    const exclude = options.exclude
-      ? (Array.isArray(options.exclude) ? options.exclude : splitGlobs(options.exclude))
-      : [];
-
-    const failOn = options.failOn?.toUpperCase() || 'CRITICAL';
-    const autoFix = options.autoFix || false;
-    render(React.createElement(StaticAnalysis, {scanType, failOn, include, exclude, autoFix, lastNCommits}));
-  });
-
-program
-  .command('security-analysis')
-  .description('Run security analysis on your code')
-  .option('--staged', 'Scan only staged files (default)')
-  .option('--all', 'Scan all changed files')
-  .option('--uncommitted', 'Scan uncommitted changes')
-  .option('--last-commit', 'Scan last commit')
-  .option('--last-n-commits <n>', 'Scan last n commits (max 5)', parseInt)
-  .option('--fail-on <level>', 'Fail on issues at or above this level: BLOCKER, CRITICAL, MAJOR, MINOR, INFO (default: CRITICAL)', 'CRITICAL')
-  .option('--include <paths>', 'Comma-separated list of file paths regex to include')
-  .option('--exclude <paths>', 'Comma-separated list of file paths regex to exclude')
-  .action((options) => {
-    let scanType = 'staged-only';
-    let lastNCommits = 1;
-
-    // Check !== undefined, not truthy — passing 0 is valid and shouldn't fall through
-    if (options.lastNCommits !== undefined) {
-      scanType = 'last-n-commits';
-      lastNCommits = Math.min(Math.max(1, options.lastNCommits), 5);
-    } else if (options.all) {
-      scanType = 'branch-diff';
-    } else if (options.uncommitted) {
-      scanType = 'uncommitted';
-    } else if (options.lastCommit) {
-      scanType = 'last-commit';
-    }
-
-    const include = options.include
-      ? (Array.isArray(options.include) ? options.include : splitGlobs(options.include))
-      : [];
-
-    const exclude = options.exclude
-      ? (Array.isArray(options.exclude) ? options.exclude : splitGlobs(options.exclude))
-      : [];
-
-    const failOn = options.failOn?.toUpperCase() || 'HIGH';
-
-    render(React.createElement(SecurityAnalysis, { scanType, failOn, include, exclude, lastNCommits }));
-  });
-
 program
   .command('review')
   .description('Run AI-powered code review')

package/src/scm/azure/listPullRequestComments.js

@@ -21,7 +21,7 @@ export async function listPullRequestComments({ name, prNumber, codeantGenerated
         line: thread.threadContext?.rightFileStart?.line || null,
         createdAt: comment.publishedDate,
         updatedAt: comment.lastUpdatedDate,
-        isCodeantComment: (comment.author?.displayName || '').toLowerCase().includes('codeant'),
+        isCodeantComment: (comment.author?.displayName || '').toLowerCase().includes('codeant') || comment.content?.includes('Suggestion'),
         resolved: thread.status === 2, // Fixed
       });
     }

package/src/scm/bitbucket/listPullRequestComments.js

@@ -15,7 +15,7 @@ export async function listPullRequestComments({ name, prNumber, codeantGenerated
     line: c.inline?.to || null,
     createdAt: c.created_on,
     updatedAt: c.updated_on,
-    isCodeantComment: (c.user?.display_name || c.user?.nickname || '').toLowerCase().includes('codeant'),
+    isCodeantComment: (c.user?.display_name || c.user?.nickname || '').toLowerCase().includes('codeant') || (c.content?.raw || c.content?.markup || '').includes('Suggestion'),
     resolved: c.resolved || false,
   }));
 

package/src/scm/github/listPullRequestComments.js

@@ -20,7 +20,7 @@ export async function listPullRequestComments({ name, prNumber, codeantGenerated
       line: c.line || c.original_line,
       createdAt: c.created_at,
       updatedAt: c.updated_at,
-      isCodeantComment: c.user?.login?.includes('codeant'),
+      isCodeantComment: c.user?.login?.includes('codeant') || c.body?.includes('Suggestion'),
       inReplyToId: c.in_reply_to_id || null,
     })),
     ...issueComments.map(c => ({
@@ -32,7 +32,7 @@ export async function listPullRequestComments({ name, prNumber, codeantGenerated
       line: null,
       createdAt: c.created_at,
       updatedAt: c.updated_at,
-      isCodeantComment: c.user?.login?.includes('codeant'),
+      isCodeantComment: c.user?.login?.includes('codeant') || c.body?.includes('Suggestion'),
       inReplyToId: null,
     })),
   ];

package/src/scm/gitlab/listPullRequestComments.js

@@ -17,7 +17,7 @@ export async function listPullRequestComments({ name, prNumber, codeantGenerated
     line: n.position?.new_line || null,
     createdAt: n.created_at,
     updatedAt: n.updated_at,
-    isCodeantComment: n.author?.username?.includes('codeant'),
+    isCodeantComment: n.author?.username?.includes('codeant') || n.body?.includes('Suggestion'),
     resolved: n.resolved || false,
     discussionId: null,
   }));

package/src/commands/securityAnalysis.js

@@ -1,284 +0,0 @@
-import React, { useEffect, useState } from 'react';
-import { Box, Text, useApp } from 'ink';
-import { getConfigValue } from '../utils/config.js';
-import { fetchApi } from '../utils/fetchApi.js';
-import SecurityAnalysisApiHelper from '../utils/securityAnalysisApiHelper.js';
-
-export default function SecurityAnalysis({ scanType = 'staged-only', failOn = 'HIGH', include = [], exclude = [], lastNCommits = 1 }) {
-  const { exit } = useApp();
-  const [status, setStatus] = useState('initializing');
-  const [issues, setIssues] = useState([]);
-  const [error, setError] = useState(null);
-  const [fileCount, setFileCount] = useState(0);
-
-  const apiKey = getConfigValue('apiKey');
-
-  // Handle not logged in state
-  useEffect(() => {
-    if (!apiKey) {
-      const id = setTimeout(() => exit(new Error('Not logged in')), 0);
-      return () => clearTimeout(id);
-    }
-  }, [apiKey, exit]);
-
-  // Check if logged in
-  if (!apiKey) {
-    return React.createElement(
-      Box,
-      { flexDirection: 'column', padding: 1 },
-      React.createElement(Text, { color: 'red' }, '✗ Not logged in.'),
-      React.createElement(Text, { color: 'gray' }, 'Run "codeant login" to authenticate.'),
-    );
-  }
-
-  // Helper to check if an issue should cause failure based on failOn level
-  const shouldFailOn = (severity) => {
-    const score = severity?.toUpperCase();
-    if (score === 'FALSE_POSITIVE') return false;
-    if (failOn === 'CRITICAL') return score === 'CRITICAL';
-    if (failOn === 'HIGH') return score === 'HIGH' || score === 'CRITICAL';
-    if (failOn === 'MEDIUM') return score === 'HIGH' || score === 'MEDIUM';
-    return true; // 'all' - fail on any non-false-positive
-  };
-
-  useEffect(() => {
-    let cancelled = false;
-
-    async function scanForIssues() {
-      try {
-        if (cancelled) return;
-        setStatus('scanning');
-
-        // Initialize git helper and get staged files
-        const helper = new SecurityAnalysisApiHelper(process.cwd());
-        await helper.init();
-
-        if (cancelled) return;
-        const requestBody = await helper.buildSecurityAnalysisApiRequest(scanType, include, exclude, { lastNCommits });
-        if (cancelled) return;
-
-        if (requestBody.files.length === 0) {
-          if (!cancelled) setStatus('no_files');
-          return;
-        }
-
-        // Call the security analysis API
-        const response = await fetchApi(
-          '/extension/pr-review/security-analysis',
-          'POST',
-          requestBody,
-        );
-
-        if (cancelled) return;
-
-        // Transform security issues response to the expected format
-        const detectedIssues = (response.securityIssues || []).map(file => ({
-          file_path: file.file_path,
-          issues: (file.security_issues || []).map(issue => ({
-            line_number: issue.line_number,
-            end_line: issue.end_line,
-            type: issue.issue_text,
-            confidence_score: issue.false_positive ? 'FALSE_POSITIVE' : issue.severity,
-            test_id: issue.test_id,
-            confidence: issue.confidence,
-            likelihood: issue.likelihood,
-            cwe: issue.cwe,
-            owasp: issue.owasp,
-          })),
-        }));
-
-        // Filter to only include files with actual issues
-        const filesWithIssues = detectedIssues.filter(
-          file => file.issues && file.issues.length > 0,
-        );
-
-        if (!cancelled) {
-          setIssues(filesWithIssues);
-          setStatus('done');
-        }
-      } catch (err) {
-        if (!cancelled) {
-          setError(err.message);
-          setStatus('error');
-        }
-      }
-    }
-
-    scanForIssues();
-
-    return () => {
-      cancelled = true;
-    };
-  }, [scanType, include, exclude, lastNCommits]);
-
-  // Handle exit after status changes
-  useEffect(() => {
-    if (status === 'done') {
-      // Check if any issues should cause failure based on failOn level
-      const hasBlockingIssues = issues.some(file =>
-        file.issues.some(issue => issue.false_positive !== true &&shouldFailOn(issue.severity)),
-      );
-
-      if (hasBlockingIssues) {
-        setTimeout(() => {
-          process.exitCode = 1;
-          exit(new Error('Security issues detected'));
-        }, 100);
-      } else {
-        setTimeout(() => exit(), 100);
-      }
-    } else if (status === 'no_files') {
-      setTimeout(() => exit(), 100);
-    } else if (status === 'error') {
-      setTimeout(() => exit(new Error(error)), 100);
-    }
-  }, [status, issues]);
-
-  // Render: Initializing
-  if (status === 'initializing') {
-    return React.createElement(
-      Box,
-      { flexDirection: 'column', padding: 1 },
-      React.createElement(Text, { color: 'cyan' }, 'Initializing...'),
-    );
-  }
-
-  // Render: Scanning
-  if (status === 'scanning') {
-    return React.createElement(
-      Box,
-      { flexDirection: 'column', padding: 1 },
-      React.createElement(Text, { color: 'cyan' }, `Scanning ${fileCount} file(s) for security issues...`),
-    );
-  }
-
-  // Render: No files to scan
-  if (status === 'no_files') {
-    const noFilesMessages = {
-      'staged-only': 'Stage some changes first with "git add".',
-      'branch-diff': 'No changes found compared to the base branch.',
-      'uncommitted': 'No uncommitted changes found.',
-      'last-commit': 'No files found in the last commit.',
-    };
-
-    return React.createElement(
-      Box,
-      { flexDirection: 'column', padding: 1 },
-      React.createElement(Text, { color: 'yellow' }, 'No files to scan.'),
-      React.createElement(Text, { color: 'gray' }, noFilesMessages[scanType] || 'No files found.'),
-    );
-  }
-
-  // Render: Error
-  if (status === 'error') {
-    return React.createElement(
-      Box,
-      { flexDirection: 'column', padding: 1 },
-      React.createElement(Text, { color: 'red' }, '✗ Error: ', error),
-    );
-  }
-
-  // Render: Done with issues found
-  if (status === 'done' && issues.length > 0) {
-    const allIssues = issues.flatMap(file =>
-      file.issues.map(s => ({ ...s, file_path: file.file_path })),
-    );
-
-    const blockingIssues = allIssues.filter(s => s.false_positive !== true && shouldFailOn(s.severity));
-    const falsePositives = allIssues.filter(s => s.false_positive !== true && !shouldFailOn(s.severity));
-
-    const hasBlockingIssues = blockingIssues.length > 0;
-
-    // Group by file for display
-    const groupByFile = (issuesList) => {
-      const grouped = {};
-      issuesList.forEach(s => {
-        if (!grouped[s.file_path]) grouped[s.file_path] = [];
-        grouped[s.file_path].push(s);
-      });
-      return grouped;
-    };
-
-    const blockingByFile = groupByFile(blockingIssues);
-    const falsePositivesByFile = groupByFile(falsePositives);
-
-    const elements = [
-      // Header
-      React.createElement(
-        Text,
-        { key: 'header', color: hasBlockingIssues ? 'red' : 'yellow', bold: true },
-        hasBlockingIssues
-          ? `✗ ${blockingIssues.length} security issue(s) found!`
-          : `⚠ ${falsePositives.length} potential security issue(s) found (ignored)`,
-      ),
-      React.createElement(Text, { key: 'spacer1' }, ''),
-    ];
-
-    // Blocking issues
-    if (blockingIssues.length > 0) {
-      Object.entries(blockingByFile).forEach(([filePath, fileIssues]) => {
-        elements.push(
-          React.createElement(Text, { key: `file-${filePath}`, color: 'yellow', bold: true }, filePath),
-        );
-        fileIssues.forEach((issue, idx) => {
-          elements.push(
-            React.createElement(
-              Text,
-              { key: `issue-${filePath}-${idx}`, color: 'red' },
-              `  Line ${issue.line_number}: ${issue.type} (${issue.confidence_score})`,
-            ),
-          );
-        });
-      });
-    }
-
-    // False positives / ignored
-    if (falsePositives.length > 0) {
-      if (blockingIssues.length > 0) {
-        elements.push(React.createElement(Text, { key: 'spacer2' }, ''));
-      }
-      elements.push(
-        React.createElement(Text, { key: 'fp-header', color: 'gray' }, 'Ignored (false positives):'),
-      );
-      Object.entries(falsePositivesByFile).forEach(([filePath, fileIssues]) => {
-        elements.push(
-          React.createElement(Text, { key: `fp-file-${filePath}`, color: 'gray' }, `  ${filePath}`),
-        );
-        fileIssues.forEach((issue, idx) => {
-          elements.push(
-            React.createElement(
-              Text,
-              { key: `fp-issue-${filePath}-${idx}`, color: 'gray', dimColor: true },
-              `    Line ${issue.line_number}: ${issue.type} (${issue.confidence_score})`,
-            ),
-          );
-        });
-      });
-    }
-
-    elements.push(React.createElement(Text, { key: 'spacer3' }, ''));
-
-    if (hasBlockingIssues) {
-      elements.push(
-        React.createElement(Text, { key: 'footer', color: 'gray' }, 'Fix security issues before committing.'),
-      );
-    } else {
-      elements.push(
-        React.createElement(Text, { key: 'footer', color: 'green' }, '✓ Commit allowed (only false positives found)'),
-      );
-    }
-
-    return React.createElement(
-      Box,
-      { flexDirection: 'column', padding: 1 },
-      ...elements,
-    );
-  }
-
-  // Render: Done with no issues
-  return React.createElement(
-    Box,
-    { flexDirection: 'column', padding: 1 },
-    React.createElement(Text, { color: 'green' }, '✓ No security issues found'),
-  );
-}