grepleaks 1.0.4 → 1.2.0

package/bin/grepleaks.js

@@ -9,185 +9,86 @@ const readline = require('readline');
 const { exec } = require('child_process');
 const archiver = require('archiver');
 
-const VERSION = '1.0.4';
+const VERSION = '1.2.0';
 const API_URL = 'https://grepleaks.com/api/v1';
 const WEB_URL = 'https://grepleaks.com';
 const CONFIG_DIR = path.join(os.homedir(), '.grepleaks');
 const CONFIG_FILE = path.join(CONFIG_DIR, 'config.json');
 const CREDENTIALS_FILE = path.join(CONFIG_DIR, 'credentials.json');
 
-// Translations
-const translations = {
-  en: {
-    // General
-    tagline: 'Security scanner for your code',
-    version: 'grepleaks v',
-
-    // Help
-    helpUsage: 'USAGE:',
-    helpCommands: 'COMMANDS:',
-    helpOptions: 'OPTIONS:',
-    helpExamples: 'EXAMPLES:',
-    helpMoreInfo: 'MORE INFO:',
-    helpLoginDesc: 'Login (email or GitHub)',
-    helpLogoutDesc: 'Logout',
-    helpScanDesc: 'Scan a directory',
-    helpLangDesc: 'Set language (en/fr)',
-    helpShowHelp: 'Show help',
-    helpShowVersion: 'Show version',
-
-    // Login
-    loginTitle: 'Login to grepleaks',
-    loginChooseMethod: 'Choose login method:',
-    loginOptionEmail: 'Email / Password',
-    loginOptionGitHub: 'GitHub',
-    loginChoice: 'Your choice (1 or 2): ',
-    loginBrowserTitle: 'Login via browser',
-    loginGitHubTitle: 'Login with GitHub',
-    loginOpeningBrowser: 'Opening browser...',
-    loginTokenPrompt: 'After logging in on the website, copy your token and paste it here.',
-    loginTokenInput: 'Token: ',
-    loginTokenRequired: 'Token required',
-    loginVerifying: 'Verifying token...',
-    loginInvalidToken: 'Invalid token',
-    loginEmail: 'Email: ',
-    loginPassword: 'Password: ',
-    loginEmailPasswordRequired: 'Email and password required',
-    loginInProgress: 'Logging in...',
-    loginFailed: 'Login failed',
-    loginSuccess: 'Logged in as',
-
-    // Logout
-    logoutSuccess: 'Logged out',
-
-    // Scan
-    scanTitle: 'Security scan',
-    scanMustLogin: 'You must be logged in to scan.',
-    scanPathNotFound: 'Path not found:',
-    scanMustBeDir: 'Path must be a directory:',
-    scanProject: 'Project:',
-    scanPath: 'Path:',
-    scanPreparing: 'Preparing files...',
-    scanArchiveCreated: 'Archive created',
-    scanUploading: 'Uploading to server...',
-    scanUploadFailed: 'Upload failed',
-    scanStarted: 'Scan started',
-    scanAnalyzing: 'Analyzing...',
-    scanStatusFailed: 'Failed to check status',
-    scanFailed: 'Scan failed',
-    scanComplete: 'Scan complete!',
-    scanResults: 'Results:',
-    scanScore: 'Score:',
-    scanVulnerabilities: 'Vulnerabilities:',
-    scanReportSaved: 'Report saved:',
-
-    // Report
-    reportTitle: 'Security Report',
-    reportDate: 'Date:',
-    reportScore: 'Score:',
-    reportVulns: 'Vulnerabilities:',
-    reportNoVulns: 'No vulnerabilities detected',
-    reportCongrats: 'Congratulations! Your code has no known vulnerabilities.',
-    reportVulnsDetected: 'Vulnerabilities detected',
-    reportFile: 'File:',
-    reportLine: 'Line:',
-    reportScanner: 'Scanner:',
-    reportRecommendation: 'Recommendation:',
-    reportGeneratedBy: 'Report generated by',
-
-    // Language
-    langSet: 'Language set to',
-    langInvalid: 'Invalid language. Use: en, fr',
-
-    // Errors
-    errorUnknownCmd: 'Unknown command:',
-    errorUseHelp: "Use 'grepleaks --help' for help."
-  },
-  fr: {
-    // General
-    tagline: 'Scanner de securite pour votre code',
-    version: 'grepleaks v',
-
-    // Help
-    helpUsage: 'USAGE:',
-    helpCommands: 'COMMANDES:',
-    helpOptions: 'OPTIONS:',
-    helpExamples: 'EXEMPLES:',
-    helpMoreInfo: 'PLUS D\'INFO:',
-    helpLoginDesc: 'Connexion (email ou GitHub)',
-    helpLogoutDesc: 'Deconnexion',
-    helpScanDesc: 'Scanner un dossier',
-    helpLangDesc: 'Changer la langue (en/fr)',
-    helpShowHelp: 'Afficher l\'aide',
-    helpShowVersion: 'Afficher la version',
-
-    // Login
-    loginTitle: 'Connexion a grepleaks',
-    loginChooseMethod: 'Choisissez votre methode de connexion:',
-    loginOptionEmail: 'Email / Mot de passe',
-    loginOptionGitHub: 'GitHub',
-    loginChoice: 'Votre choix (1 ou 2): ',
-    loginBrowserTitle: 'Connexion via navigateur',
-    loginGitHubTitle: 'Connexion avec GitHub',
-    loginOpeningBrowser: 'Ouverture du navigateur...',
-    loginTokenPrompt: 'Apres connexion sur le site, copiez votre token et collez-le ici.',
-    loginTokenInput: 'Token: ',
-    loginTokenRequired: 'Token requis',
-    loginVerifying: 'Verification du token...',
-    loginInvalidToken: 'Token invalide',
-    loginEmail: 'Email: ',
-    loginPassword: 'Mot de passe: ',
-    loginEmailPasswordRequired: 'Email et mot de passe requis',
-    loginInProgress: 'Connexion en cours...',
-    loginFailed: 'Echec de connexion',
-    loginSuccess: 'Connecte en tant que',
-
-    // Logout
-    logoutSuccess: 'Deconnecte',
-
-    // Scan
-    scanTitle: 'Scan de securite',
-    scanMustLogin: 'Vous devez etre connecte pour scanner.',
-    scanPathNotFound: 'Chemin introuvable:',
-    scanMustBeDir: 'Le chemin doit etre un dossier:',
-    scanProject: 'Projet:',
-    scanPath: 'Chemin:',
-    scanPreparing: 'Preparation des fichiers...',
-    scanArchiveCreated: 'Archive creee',
-    scanUploading: 'Envoi au serveur...',
-    scanUploadFailed: 'Echec de l\'upload',
-    scanStarted: 'Scan demarre',
-    scanAnalyzing: 'Analyse en cours...',
-    scanStatusFailed: 'Echec de verification du statut',
-    scanFailed: 'Le scan a echoue',
-    scanComplete: 'Scan termine!',
-    scanResults: 'Resultats:',
-    scanScore: 'Score:',
-    scanVulnerabilities: 'Vulnerabilites:',
-    scanReportSaved: 'Rapport sauvegarde:',
-
-    // Report
-    reportTitle: 'Rapport de Securite',
-    reportDate: 'Date:',
-    reportScore: 'Score:',
-    reportVulns: 'Vulnerabilites:',
-    reportNoVulns: 'Aucune vulnerabilite detectee',
-    reportCongrats: 'Felicitations! Votre code ne presente aucune vulnerabilite connue.',
-    reportVulnsDetected: 'Vulnerabilites detectees',
-    reportFile: 'Fichier:',
-    reportLine: 'Ligne:',
-    reportScanner: 'Scanner:',
-    reportRecommendation: 'Recommandation:',
-    reportGeneratedBy: 'Rapport genere par',
-
-    // Language
-    langSet: 'Langue definie:',
-    langInvalid: 'Langue invalide. Utilisez: en, fr',
-
-    // Errors
-    errorUnknownCmd: 'Commande inconnue:',
-    errorUseHelp: "Utilisez 'grepleaks --help' pour l'aide."
-  }
+// Text strings (English only)
+const TEXT = {
+  // General
+  tagline: 'Security scanner for your code',
+  version: 'grepleaks v',
+
+  // Help
+  helpUsage: 'USAGE:',
+  helpCommands: 'COMMANDS:',
+  helpOptions: 'OPTIONS:',
+  helpExamples: 'EXAMPLES:',
+  helpMoreInfo: 'MORE INFO:',
+  helpLoginDesc: 'Login (email or GitHub)',
+  helpLogoutDesc: 'Logout',
+  helpScanDesc: 'Scan a directory',
+  helpShowHelp: 'Show help',
+  helpShowVersion: 'Show version',
+
+  // Login
+  loginTitle: 'Login to grepleaks',
+  loginChooseMethod: 'Choose login method:',
+  loginOptionEmail: 'Email / Password',
+  loginOptionGitHub: 'GitHub',
+  loginChoice: 'Your choice (1 or 2): ',
+  loginGitHubTitle: 'Login with GitHub',
+  loginOpeningBrowser: 'Opening browser...',
+  loginTokenPrompt: 'After logging in on the website, copy your token and paste it here.',
+  loginTokenInput: 'Token: ',
+  loginTokenRequired: 'Token required',
+  loginVerifying: 'Verifying token...',
+  loginInvalidToken: 'Invalid token',
+  loginEmail: 'Email: ',
+  loginPassword: 'Password: ',
+  loginEmailPasswordRequired: 'Email and password required',
+  loginInProgress: 'Logging in...',
+  loginFailed: 'Login failed',
+  loginSuccess: 'Logged in as',
+
+  // Logout
+  logoutSuccess: 'Logged out',
+
+  // Scan
+  scanTitle: 'Security scan',
+  scanMustLogin: 'You must be logged in to scan.',
+  scanPathNotFound: 'Path not found:',
+  scanMustBeDir: 'Path must be a directory:',
+  scanProject: 'Project:',
+  scanPath: 'Path:',
+  scanPreparing: 'Preparing files...',
+  scanArchiveCreated: 'Archive created',
+  scanUploading: 'Uploading to server...',
+  scanUploadFailed: 'Upload failed',
+  scanStarted: 'Scan started',
+  scanAnalyzing: 'Analyzing...',
+  scanStatusFailed: 'Failed to check status',
+  scanFailed: 'Scan failed',
+  scanComplete: 'Scan complete!',
+  scanResults: 'Results:',
+  scanScore: 'Score:',
+  scanVulnerabilities: 'Vulnerabilities:',
+  scanReportSaved: 'Report saved:',
+
+  // Report
+  reportTitle: 'Security Report',
+  reportNoVulns: 'No vulnerabilities detected',
+  reportCongrats: 'Congratulations! Your code has no known vulnerabilities.',
+  reportVulnsDetected: 'Vulnerabilities detected',
+  reportRecommendation: 'Recommendation',
+  reportGeneratedBy: 'Report generated by',
+
+  // Errors
+  errorUnknownCmd: 'Unknown command:',
+  errorUseHelp: "Use 'grepleaks --help' for help."
 };
 
 // Files/folders to skip when zipping
@@ -215,16 +116,9 @@ const c = {
   gray: '\x1b[90m'
 };
 
-// Get current language
-function getLang() {
-  const config = loadConfig();
-  return config.lang || 'en';
-}
-
-// Get translation
+// Get text string
 function t(key) {
-  const lang = getLang();
-  return translations[lang]?.[key] || translations['en'][key] || key;
+  return TEXT[key] || key;
 }
 
 // Helpers
@@ -388,7 +282,7 @@ function request(method, url, data = null, headers = {}) {
 }
 
 // Upload file with multipart
-function uploadFile(url, filePath, token) {
+function uploadFile(url, filePath, token, projectName) {
   return new Promise((resolve, reject) => {
     const boundary = '----grepleaks' + Date.now();
     const fileName = path.basename(filePath);
@@ -422,6 +316,19 @@ function uploadFile(url, filePath, token) {
 
     req.on('error', reject);
 
+    // Add project_name field
+    req.write(`--${boundary}\r\n`);
+    req.write(`Content-Disposition: form-data; name="project_name"\r\n\r\n`);
+    req.write(projectName || 'Unknown');
+    req.write('\r\n');
+
+    // Add source field
+    req.write(`--${boundary}\r\n`);
+    req.write(`Content-Disposition: form-data; name="source"\r\n\r\n`);
+    req.write('cli');
+    req.write('\r\n');
+
+    // Add file
     req.write(`--${boundary}\r\n`);
     req.write(`Content-Disposition: form-data; name="file"; filename="${fileName}"\r\n`);
     req.write('Content-Type: application/zip\r\n\r\n');
@@ -491,9 +398,8 @@ function generateMarkdownReport(result) {
   const score = result.security_score || 0;
   const grade = result.grade_level || 'N/A';
   const projectName = result.project_name || 'Unknown Project';
-  const lang = getLang();
 
-  const dateStr = new Date().toLocaleDateString(lang === 'fr' ? 'fr-FR' : 'en-US', {
+  const dateStr = new Date().toLocaleDateString('en-US', {
     year: 'numeric',
     month: 'long',
     day: 'numeric'
@@ -512,11 +418,11 @@ function generateMarkdownReport(result) {
 
   // Score card
   const scoreEmoji = score >= 90 ? '🛡️' : score >= 75 ? '✅' : score >= 50 ? '⚠️' : '🚨';
-  md += `## ${scoreEmoji} ${lang === 'fr' ? 'Score de Sécurité' : 'Security Score'}: ${score}/100 (${grade})\n\n`;
+  md += `## ${scoreEmoji} Security Score: ${score}/100 (${grade})\n\n`;
 
   // Summary table
   if (vulns.length > 0) {
-    md += `| ${lang === 'fr' ? 'Sévérité' : 'Severity'} | ${lang === 'fr' ? 'Nombre' : 'Count'} |\n`;
+    md += `| Severity | Count |\n`;
     md += `|----------|-------|\n`;
     if (counts.critical > 0) md += `| 🔴 Critical | ${counts.critical} |\n`;
     if (counts.high > 0) md += `| 🟠 High | ${counts.high} |\n`;
@@ -546,9 +452,7 @@ function generateMarkdownReport(result) {
                     severity === 'HIGH' ? '🟠' :
                     severity === 'MEDIUM' ? '🟡' : '🟢';
 
-      const severityLabel = lang === 'fr'
-        ? { CRITICAL: 'Critique', HIGH: 'Élevée', MEDIUM: 'Moyenne', LOW: 'Faible' }[severity]
-        : severity.charAt(0) + severity.slice(1).toLowerCase();
+      const severityLabel = severity.charAt(0) + severity.slice(1).toLowerCase();
 
       md += `### ${emoji} ${severityLabel}\n\n`;
 
@@ -568,7 +472,7 @@ function generateMarkdownReport(result) {
 
         // Location
         if (v.location) {
-          md += `- **${lang === 'fr' ? 'Fichier' : 'File'}:** \`${v.location}\`\n`;
+          md += `- **File:** \`${v.location}\`\n`;
         }
 
         // CVE
@@ -582,7 +486,7 @@ function generateMarkdownReport(result) {
           if (v.current_version) md += ` v${v.current_version}`;
           md += `\n`;
           if (v.fixed_version) {
-            md += `- **${lang === 'fr' ? 'Correction' : 'Fix'}:** ${lang === 'fr' ? 'Mettre à jour vers' : 'Upgrade to'} v${v.fixed_version}\n`;
+            md += `- **Fix:** Upgrade to v${v.fixed_version}\n`;
           }
         }
 
@@ -590,7 +494,7 @@ function generateMarkdownReport(result) {
 
         // Code snippet
         if (v.code_snippet) {
-          md += `**${lang === 'fr' ? 'Code concerné' : 'Affected code'}:**\n\`\`\`\n${v.code_snippet}\n\`\`\`\n\n`;
+          md += `**Affected code:**\n\`\`\`\n${v.code_snippet}\n\`\`\`\n\n`;
         }
 
         // Recommendation
@@ -601,7 +505,7 @@ function generateMarkdownReport(result) {
 
         // Reference
         if (v.reference_url) {
-          md += `[${lang === 'fr' ? 'Plus d\'informations' : 'Learn more'}](${v.reference_url})\n\n`;
+          md += `[Learn more](${v.reference_url})\n\n`;
         }
 
         md += `---\n\n`;
@@ -697,21 +601,6 @@ async function cmdLogout() {
   success(t('logoutSuccess'));
 }
 
-async function cmdLang(args) {
-  const lang = args[1];
-
-  if (!lang) {
-    log(`Current language: ${getLang()}`);
-    return;
-  }
-
-  if (!['en', 'fr'].includes(lang)) {
-    error(t('langInvalid'));
-  }
-
-  saveConfig({ lang });
-  success(`${t('langSet')} ${lang}`);
-}
 
 async function cmdScan(args) {
   const creds = loadCredentials();
@@ -749,7 +638,8 @@ async function cmdScan(args) {
     const uploadRes = await uploadFile(
       `${API_URL}/scan/async`,
       tempZip,
-      creds.access_token
+      creds.access_token,
+      projectName
     );
 
     if (uploadRes.status !== 202) {
@@ -818,11 +708,20 @@ async function cmdScan(args) {
       if (low) log(`    ${c.gray}● Low: ${low}${c.reset}`);
     }
 
-    const report = generateMarkdownReport({ ...scanResult, project_name: projectName });
+    // Use AI-generated report from backend if available, otherwise generate locally
+    let report;
+    if (scanResult.report_markdown && scanResult.report_markdown.trim().length > 0) {
+      report = scanResult.report_markdown;
+      log(`\n${c.cyan}ℹ${c.reset} Using AI-generated report from server`);
+    } else {
+      report = generateMarkdownReport({ ...scanResult, project_name: projectName });
+      log(`\n${c.cyan}ℹ${c.reset} Generated report locally (AI report not available)`);
+    }
+
     const reportPath = path.join(absolutePath, 'grepleaks-report.md');
     fs.writeFileSync(reportPath, report);
 
-    log(`\n${c.green}✓${c.reset} ${t('scanReportSaved')} ${c.cyan}${reportPath}${c.reset}\n`);
+    log(`${c.green}✓${c.reset} ${t('scanReportSaved')} ${c.cyan}${reportPath}${c.reset}\n`);
 
   } finally {
     if (fs.existsSync(tempZip)) {
@@ -842,7 +741,6 @@ ${c.bold}${t('helpCommands')}${c.reset}
   login             ${t('helpLoginDesc')}
   logout            ${t('helpLogoutDesc')}
   scan <path>       ${t('helpScanDesc')}
-  lang <en|fr>      ${t('helpLangDesc')}
 
 ${c.bold}${t('helpOptions')}${c.reset}
   -h, --help        ${t('helpShowHelp')}
@@ -852,7 +750,6 @@ ${c.bold}${t('helpExamples')}${c.reset}
   grepleaks login
   grepleaks scan .
   grepleaks scan ./my-project
-  grepleaks lang fr
 
 ${c.bold}${t('helpMoreInfo')}${c.reset}
   ${c.cyan}https://grepleaks.com${c.reset}
@@ -883,9 +780,6 @@ async function main() {
       case 'logout':
         await cmdLogout();
         break;
-      case 'lang':
-        await cmdLang(args);
-        break;
       case 'scan':
         await cmdScan(args);
         break;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "grepleaks",
-  "version": "1.0.4",
+  "version": "1.2.0",
   "description": "Security scanner for your code - detect vulnerabilities, secrets, and misconfigurations",
   "main": "bin/grepleaks.js",
   "bin": {