galaxytus 1.0.0

package/index.js

@@ -0,0 +1,248 @@
+#!/usr/bin/env node
+
+import { Command } from 'commander';
+import chalk from 'chalk';
+import ora from 'ora';
+import fs from 'fs';
+import path from 'path';
+import os from 'os';
+
+// Tentukan lokasi penyimpanan API Key di komputer user (~/.galaxytus.json)
+const CONFIG_PATH = path.join(os.homedir(), '.galaxytus.json');
+
+// URL API Pusat
+const API_URL = 'http://localhost:3000/api/v1/scan';
+
+// --- FUNGSI UTAMA: Menyedot isi file dengan Proteksi Memori (OOM) ---
+function readProjectFiles(dir, fileList = []) {
+  const files = fs.readdirSync(dir);
+
+  files.forEach(file => {
+    const filePath = path.join(dir, file);
+    
+    // 1. BLACKLIST: Abaikan folder framework dan file biner raksasa
+    const ignoredNames = ['.git', 'node_modules', '.next', 'dist', 'build', 'vendor', 'storage', 'public'];
+    const ignoredExtensions = ['.jpg', '.jpeg', '.png', '.gif', '.mp4', '.mp3', '.zip', '.tar', '.gz', '.pdf', '.sqlite', '.db', '.log', '.exe', '.dll'];
+    
+    if (ignoredNames.includes(file) || ignoredExtensions.some(ext => file.toLowerCase().endsWith(ext))) {
+      return; 
+    }
+
+    const stats = fs.statSync(filePath);
+
+    if (stats.isDirectory()) {
+      readProjectFiles(filePath, fileList);
+    } else {
+      // 2. PROTEKSI RAM: Batasi ukuran file maksimal 1 MB
+      if (stats.size > 1048576) {
+        return; 
+      }
+
+      try {
+        const content = fs.readFileSync(filePath, 'utf-8');
+        fileList.push({
+          fileName: filePath.replace(process.cwd(), ''), 
+          content: content
+        });
+      } catch (err) {
+        // Abaikan file yang gagal dibaca
+      }
+    }
+  });
+
+  return fileList;
+}
+
+const program = new Command();
+
+program
+  .name('galaxytus')
+  .description('Galaxytus AI Security Agent CLI')
+  .version('1.0.0');
+
+// ─── COMMAND: LOGIN ───
+program
+  .command('login')
+  .description('Hubungkan terminal dengan akun Galaxytus AI')
+  .argument('<user_api_keys>', 'API Key dari Dashboard Galaxytus')
+  .action((apiKey) => {
+    const config = { apiKey };
+    fs.writeFileSync(CONFIG_PATH, JSON.stringify(config, null, 2));
+    fs.chmodSync(CONFIG_PATH, 0o600);
+    console.log(chalk.green('✔ Berhasil!'), 'API Key telah disimpan dengan aman di komputer Anda.');
+    console.log(chalk.cyan('➜ Ketik:'), chalk.bold('galaxytus scan <project_id>'), 'untuk mulai memindai.');
+  });
+  
+  // ─── COMMAND: LOGOUT ───
+program
+  .command('logout')
+  .description('Hapus sesi login Galaxytus dari komputer ini')
+  .action(() => {
+    if (fs.existsSync(CONFIG_PATH)) {
+      fs.unlinkSync(CONFIG_PATH); // Menghancurkan file kredensial
+      console.log(chalk.green('✔ Sesi Dihapus!'), 'Anda telah berhasil logout.');
+      console.log('Jalankan', chalk.yellow('galaxytus login <api_key>'), 'untuk masuk kembali.');
+    } else {
+      console.log(chalk.yellow('ℹ Anda memang belum login.'));
+    }
+  });
+
+// ─── COMMAND: CREATE ───
+program
+  .command('create')
+  .description('Daftarkan project baru (URL live atau folder lokal)')
+  .argument('[url]', 'URL target (opsional, contoh: https://example.com)')
+  .action(async (url) => {
+    if (!fs.existsSync(CONFIG_PATH)) {
+      console.log(chalk.red('✖ Error:'), 'Anda belum login.');
+      process.exit(1);
+    }
+
+    const { apiKey } = JSON.parse(fs.readFileSync(CONFIG_PATH, 'utf-8'));
+    
+    const currentFolder = process.cwd();
+    const folderName = path.basename(currentFolder);
+    
+    const finalUrl = url || `local://${folderName}`;
+    const projectName = url ? url : folderName;
+
+    const spinner = ora(`Mendaftarkan project '${projectName}' ke sistem Galaxytus...`).start();
+
+    try {
+      const response = await fetch('http://localhost:3000/api/v1/project', {
+        method: 'POST',
+        headers: {
+          'Authorization': `Bearer ${apiKey}`,
+          'Content-Type': 'application/json'
+        },
+        body: JSON.stringify({ targetUrl: finalUrl, projectName: projectName })
+      });
+
+      const data = await response.json();
+
+     if (!response.ok) {
+        spinner.fail(chalk.red('Gagal mendaftar project'));
+        
+        // --- LOGIKA BARU: AUTO-LOGOUT KALAU EXPIRED ---
+        if (response.status === 403 && data.error.includes("kedaluwarsa")) {
+           console.log(chalk.yellow('\n⚠ PERINGATAN KEAMANAN:'));
+           console.log('API Key Anda telah kedaluwarsa (Batas 30 Hari).');
+           console.log('Sesi Anda di komputer ini telah dihapus otomatis untuk keamanan.');
+           
+           // Hancurkan kunci dari komputer (Auto-Logout)
+           if (fs.existsSync(CONFIG_PATH)) fs.unlinkSync(CONFIG_PATH);
+           
+           console.log(chalk.cyan('\n➜ Silakan generate API Key baru di: https://dashboard.galaxytus.ai'));
+           console.log('➜ Lalu login kembali dengan perintah:', chalk.white.bold('galaxytus login <key_baru>'));
+           process.exit(1);
+        }
+
+        // Error biasa
+        console.log(chalk.yellow('Alasan:'), data.error);
+        process.exit(1);
+      }
+
+      spinner.succeed(chalk.green('Project Berhasil Didaftarkan!'));
+      console.log(chalk.white('\nNama Project :'), chalk.blue(projectName));
+      console.log(chalk.white('Project ID   :'), chalk.cyan.bold(data.projectId));
+      console.log('\n➜ Mulai pemindaian lokal dengan perintah:');
+      console.log(chalk.yellow(`galaxytus scan ${data.projectId}\n`));
+
+    } catch (error) {
+      spinner.fail(chalk.red('Koneksi Terputus'));
+      console.log(chalk.yellow('\nDetail Error:'), error.message);
+    }
+  });
+
+// ─── COMMAND: SCAN ───
+program
+  .command('scan')
+  .description('Jalankan pemindaian keamanan AI pada source code di folder saat ini')
+  .argument('<project_id>', 'UUID Project Anda')
+  .action(async (projectId) => {
+    if (!fs.existsSync(CONFIG_PATH)) {
+      console.log(chalk.red('✖ Error:'), 'Anda belum login.');
+      process.exit(1);
+    }
+
+    const { apiKey } = JSON.parse(fs.readFileSync(CONFIG_PATH, 'utf-8'));
+    
+    console.log(chalk.hex('#4ade80').bold('\n[ G A L A X Y T U S   A I ]\n'));
+    
+    const currentFolder = process.cwd(); 
+    const folderName = path.basename(currentFolder);
+    
+    console.log(chalk.blue('📂 Target Folder :'), currentFolder);
+    console.log(chalk.blue('📦 Project Name  :'), folderName, '\n');
+
+    const spinnerFolder = ora('Menganalisis dan membungkus source code lokal...').start();
+    
+    // --- PROSES MENYEDOT KODE ---
+    let sourceCodeData = [];
+    try {
+      sourceCodeData = readProjectFiles(currentFolder);
+      spinnerFolder.succeed(chalk.green(`Berhasil menyedot ${sourceCodeData.length} file kode (bebas file sampah)!`));
+    } catch (err) {
+      spinnerFolder.fail(chalk.red('Gagal membaca file di folder ini.'));
+      console.log(chalk.yellow('Detail Error:'), err.message);
+      process.exit(1);
+    }
+
+    // --- MENGIRIM KE API ---
+    const spinner = ora('Mengirim kode ke markas Galaxytus dan membangunkan AI...').start();
+
+    try {
+      const response = await fetch(API_URL, {
+        method: 'POST',
+        headers: {
+          'Authorization': `Bearer ${apiKey}`,
+          'Content-Type': 'application/json'
+        },
+       body: JSON.stringify({ 
+          projectId: projectId, 
+          
+          // 🚀 FIX: Sesuaikan nama parameter dengan backend!
+          targetUrl: `local://${currentFolder}`, 
+          sourceType: 'local_cli',
+          
+          sourceCode: sourceCodeData
+      });
+
+      const data = await response.json();
+
+      if (!response.ok) {
+        spinner.fail(chalk.red('Pemindaian Gagal'));
+        
+        // --- LOGIKA BARU: AUTO-LOGOUT KALAU EXPIRED ---
+        if (response.status === 403 && data.error.includes("kedaluwarsa")) {
+           console.log(chalk.yellow('\n⚠ PERINGATAN KEAMANAN:'));
+           console.log('API Key Anda telah kedaluwarsa (Batas 30 Hari).');
+           console.log('Sesi Anda di komputer ini telah dihapus otomatis untuk keamanan.');
+           
+           // Hancurkan kunci dari komputer (Auto-Logout)
+           if (fs.existsSync(CONFIG_PATH)) fs.unlinkSync(CONFIG_PATH);
+           
+           console.log(chalk.cyan('\n➜ Silakan generate API Key baru di: https://dashboard.galaxytus.ai'));
+           console.log('➜ Lalu login kembali dengan perintah:', chalk.white.bold('galaxytus login <key_baru>'));
+           process.exit(1);
+        }
+
+        // Error biasa
+        console.log(chalk.yellow('Alasan:'), data.error);
+        process.exit(1);
+      }
+
+      spinner.succeed(chalk.green('AI Agent Berhasil Menerima Kode!'));
+      console.log('');
+      console.log(chalk.white('Scan ID   :'), chalk.cyan(data.scanId));
+      console.log(chalk.white('Status    :'), chalk.yellow('RUNNING / PENDING'));
+      console.log(chalk.white('Dashboard :'), chalk.underline.blue(data.dashboardUrl));
+      console.log('\n➜ Pantau temuan celah keamanan (Vulnerabilities) di tautan dashboard di atas.\n');
+
+    } catch (error) {
+      spinner.fail(chalk.red('Koneksi Terputus'));
+      console.log(chalk.yellow('Detail Error:'), error.message);
+    }
+  });
+
+program.parse(process.argv);

package/package.json

@@ -0,0 +1,26 @@
+{
+  "name": "galaxytus",
+  "version": "1.0.0",
+  "description": "Galaxytus AI Security Agent CLI",
+  "main": "index.js",
+  "bin": {
+    "galaxytus": "./index.js" 
+  },
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1"
+  },
+  "keywords": [
+    "security",
+    "ai",
+    "pentest",
+    "gemini",
+    "cli"
+  ],
+  "author": "Nama Lu",
+  "license": "MIT",
+  "dependencies": {
+    "chalk": "^4.1.2",
+    "commander": "^11.0.0",
+    "ora": "^5.4.1"
+  }
+}