grepleaks 1.3.4 → 1.3.7

package/bin/grepleaks.js

@@ -136,8 +136,20 @@ async function createZip() {
   });
 }
 
-// Send scan request to API
+// Send scan request to API (async endpoint with AI analysis)
 async function sendScan(zipPath, apiKey) {
+  // Step 1: Submit the scan job
+  const jobId = await submitScanJob(zipPath, apiKey);
+
+  // Step 2: Poll for completion
+  logInfo('Processing with AI analysis...');
+  const result = await pollForCompletion(jobId, apiKey);
+
+  return result;
+}
+
+// Submit scan job to async endpoint
+function submitScanJob(zipPath, apiKey) {
   return new Promise((resolve, reject) => {
     const boundary = '----FormBoundary' + Math.random().toString(36).slice(2);
     const fileContent = fs.readFileSync(zipPath);
@@ -153,7 +165,7 @@ async function sendScan(zipPath, apiKey) {
     const bodyEndBuf = Buffer.from(bodyEnd);
     const body = Buffer.concat([bodyStart, fileContent, bodyEndBuf]);
 
-    const url = new URL(`${API_URL}/api/v1/scan`);
+    const url = new URL(`${API_URL}/api/v1/scan/async`);
     const options = {
       hostname: url.hostname,
       port: url.port || 80,
@@ -171,7 +183,14 @@ async function sendScan(zipPath, apiKey) {
       res.on('data', (chunk) => data += chunk);
       res.on('end', () => {
         try {
-          resolve(JSON.parse(data));
+          const response = JSON.parse(data);
+          if (response.error) {
+            reject(new Error(response.error));
+          } else if (response.job_id) {
+            resolve(response.job_id);
+          } else {
+            reject(new Error('No job_id in response'));
+          }
         } catch (e) {
           reject(new Error(`Invalid response: ${data}`));
         }
@@ -184,6 +203,57 @@ async function sendScan(zipPath, apiKey) {
   });
 }
 
+// Poll for job completion
+function pollForCompletion(jobId, apiKey, maxAttempts = 60) {
+  return new Promise((resolve, reject) => {
+    let attempts = 0;
+
+    const checkStatus = () => {
+      attempts++;
+
+      const url = new URL(`${API_URL}/api/v1/scan/${jobId}/status`);
+      const options = {
+        hostname: url.hostname,
+        port: url.port || 80,
+        path: url.pathname,
+        method: 'GET',
+        headers: {
+          'X-API-Key': apiKey,
+        },
+      };
+
+      const req = http.request(options, (res) => {
+        let data = '';
+        res.on('data', (chunk) => data += chunk);
+        res.on('end', () => {
+          try {
+            const response = JSON.parse(data);
+
+            if (response.status === 'completed') {
+              resolve(response.result || response);
+            } else if (response.status === 'failed') {
+              reject(new Error(response.error || 'Scan failed'));
+            } else if (attempts >= maxAttempts) {
+              reject(new Error('Scan timed out'));
+            } else {
+              // Still processing, wait and retry
+              process.stdout.write('.');
+              setTimeout(checkStatus, 2000);
+            }
+          } catch (e) {
+            reject(new Error(`Invalid response: ${data}`));
+          }
+        });
+      });
+
+      req.on('error', (e) => reject(e));
+      req.end();
+    };
+
+    checkStatus();
+  });
+}
+
 // Generate markdown report
 function generateReport(result) {
   const date = new Date().toISOString().split('T')[0];
@@ -207,13 +277,13 @@ function generateReport(result) {
 
 `;
 
-  if (result.findings && result.findings.length > 0) {
+  const findings = result.vulnerabilities || result.findings || [];
+  if (findings.length > 0) {
     report += `## Findings\n\n`;
-    result.findings.forEach((finding, i) => {
-      report += `### ${i + 1}. ${finding.title || finding.rule_id || 'Finding'}\n\n`;
+    findings.forEach((finding, i) => {
+      report += `### ${i + 1}. ${finding.rule_id || finding.title || 'Finding'}\n\n`;
       report += `- **Severity:** ${finding.severity || 'Unknown'}\n`;
-      report += `- **File:** ${finding.file || 'N/A'}\n`;
-      if (finding.line) report += `- **Line:** ${finding.line}\n`;
+      report += `- **Location:** ${finding.location || finding.file || 'N/A'}\n`;
       if (finding.description) report += `- **Description:** ${finding.description}\n`;
       report += '\n';
     });
@@ -382,9 +452,14 @@ ${colors.bold}========================================${colors.reset}
 ${colors.bold}========================================${colors.reset}
 `);
 
-  // Create report
+  // Create report - use AI-generated report from API if available
   if (config.createReport !== false) {
-    const report = generateReport(result);
+    let report;
+    if (result.report_markdown) {
+      report = result.report_markdown;
+    } else {
+      report = generateReport(result);
+    }
     const reportPath = path.join(process.cwd(), 'SECURITY_REPORT.md');
     fs.writeFileSync(reportPath, report);
     logSuccess(`Report saved to SECURITY_REPORT.md`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "grepleaks",
-  "version": "1.3.4",
+  "version": "1.3.7",
   "description": "Security scanner for your code - detect vulnerabilities, secrets, and misconfigurations",
   "main": "bin/grepleaks.js",
   "bin": {