korext 0.1.0

package/bin/korext.js

@@ -0,0 +1,278 @@
+#!/usr/bin/env node
+import fs from 'fs';
+import path from 'path';
+import os from 'os';
+import { Command } from 'commander';
+import chalk from 'chalk';
+import ora from 'ora';
+import fetch from 'node-fetch';
+
+// Load version
+const pkgUrl = new URL('../package.json', import.meta.url);
+const pkg = JSON.parse(fs.readFileSync(pkgUrl, 'utf-8'));
+const version = pkg.version;
+
+const CONFIG_DIR = path.join(os.homedir(), '.korext');
+const CONFIG_FILE = path.join(CONFIG_DIR, 'config.json');
+const API_URL = process.env.KOREXT_API_URL || 'https://app.korext.com';
+
+function getConfig() {
+  if (fs.existsSync(CONFIG_FILE)) {
+    try {
+      return JSON.parse(fs.readFileSync(CONFIG_FILE, 'utf-8'));
+    } catch {
+      return {};
+    }
+  }
+  return {};
+}
+
+function saveConfig(config) {
+  if (!fs.existsSync(CONFIG_DIR)) {
+    fs.mkdirSync(CONFIG_DIR, { recursive: true });
+  }
+  fs.writeFileSync(CONFIG_FILE, JSON.stringify(config, null, 2), 'utf-8');
+}
+
+function getToken() {
+  return process.env.KOREXT_TOKEN || getConfig().token || null;
+}
+
+function getLanguageFromExt(ext) {
+  const map = {
+    '.ts': 'typescript', '.tsx': 'typescript',
+    '.js': 'javascript', '.jsx': 'javascript',
+    '.py': 'python', '.go': 'go',
+    '.java': 'java', '.rs': 'rust'
+  };
+  return map[ext] || 'plaintext';
+}
+
+function findFiles(dir, fileList = []) {
+  if (!fs.existsSync(dir)) return fileList;
+  const files = fs.readdirSync(dir);
+  for (const file of files) {
+    if (['node_modules', '.git', 'dist', 'build', '.next'].includes(file)) continue;
+    const filePath = path.join(dir, file);
+    if (fs.statSync(filePath).isDirectory()) {
+      findFiles(filePath, fileList);
+    } else {
+      const ext = path.extname(file);
+      if (['.ts', '.tsx', '.js', '.jsx', '.py', '.go', '.java', '.rs'].includes(ext)) {
+        fileList.push(path.resolve(filePath));
+      }
+    }
+  }
+  return fileList;
+}
+
+const program = new Command();
+
+program
+  .name('korext')
+  .description('Korext Command Line Interface - Enterprise Policy Enforcement')
+  .version(version);
+
+program
+  .command('login [token]')
+  .description('Authenticate with the Korext platform using a personal access token')
+  .action((tokenArg) => {
+    let token = tokenArg;
+    if (!token) {
+      console.log(`\nPlease generate an API token at ${chalk.cyan('https://app.korext.com/settings/tokens')}`);
+      console.log(`Then run: ${chalk.green('korext login <your-token>')}\n`);
+      process.exit(1);
+    }
+    const config = getConfig();
+    config.token = token;
+    saveConfig(config);
+    console.log(chalk.green('✔ Successfully logged in and saved token.'));
+  });
+
+program
+  .command('status')
+  .description('Check current authentication and backend connection status')
+  .action(async () => {
+    const token = getToken();
+    console.log(chalk.bold.hex('#F27D26')('▲ KOREXT CLI ENVIRONMENT STATUS'));
+    console.log(chalk.dim('======================================='));
+    
+    if (!token) {
+      console.log(chalk.yellow('Status: Guest (Unauthenticated)'));
+      console.log(chalk.dim('Anonymous evaluation runs are limited to 20 requests per hour per IP.'));
+      console.log(`Run ${chalk.green('korext login <token>')} to authenticate.\n`);
+      process.exit(0);
+    }
+
+    const spinner = ora('Checking connection...').start();
+    try {
+      const res = await fetch(`${API_URL}/api/ide/status`, {
+        headers: { Authorization: `Bearer ${token}` }
+      });
+      if (res.ok) {
+        const data = await res.json();
+        spinner.succeed(chalk.green('Authenticated to Korext Cloud'));
+        console.log(`Workspace: ${chalk.cyan(data.workspace || 'Default')}`);
+        console.log(`Role: ${chalk.cyan(data.role || 'Developer')}`);
+      } else {
+        spinner.fail(chalk.red('Invalid or expired token.'));
+        process.exit(1);
+      }
+    } catch (e) {
+      spinner.fail(chalk.red(`Failed to connect to ${API_URL}`));
+      process.exit(1);
+    }
+  });
+
+program
+  .command('packs list')
+  .description('List available policy packs from the server')
+  .action(async () => {
+    const token = getToken();
+    const spinner = ora('Fetching policy packs...').start();
+    try {
+      const res = await fetch(`${API_URL}/api/ide/packs`, {
+        headers: token ? { Authorization: `Bearer ${token}` } : {}
+      });
+      if (res.ok) {
+        const data = await res.json();
+        spinner.stop();
+        console.log(chalk.bold.hex('#F27D26')('\n▲ AVAILABLE KOREXT POLICY PACKS'));
+        console.log(chalk.dim('======================================='));
+        if (data.packs && data.packs.length > 0) {
+          data.packs.forEach((p) => {
+            console.log(`${chalk.bold(p.id)} - ${p.name || p.id} ${p.isEnterprise ? chalk.bgRed.white(' ENTERPRISE ') : ''}`);
+            console.log(chalk.dim(`  ${p.description || 'No description provided'}\n`));
+          });
+        } else {
+            console.log(chalk.dim('No policy packs available.'));
+        }
+      } else {
+        spinner.fail(chalk.red('Failed to fetch packs. Check authentication.'));
+      }
+    } catch (e) {
+      spinner.fail(chalk.red('Network error reaching platform.'));
+    }
+  });
+
+program
+  .command('enforce [dir]')
+  .description('Statically analyze files in a directory against Korext policies')
+  .option('-p, --pack <packId>', 'Policy Pack ID to enforce', 'web')
+  .action(async (dirArg, options) => {
+    const dir = dirArg || '.';
+    const pack = options.pack;
+    
+    console.log(`\n${chalk.bold.hex('#F27D26')('▲ KOREXT CLI ENFORCEMENT ENGINE')} v${version}`);
+    console.log(chalk.dim('======================================='));
+
+    const token = getToken();
+    if (!token) {
+      console.log(chalk.yellow('\n⚠ Warning: No authentication token found.'));
+      console.log(chalk.dim('Anonymous evaluation runs are limited to 20 requests per hour per IP.'));
+      console.log(chalk.dim(`Run ${chalk.green('korext login')} to authenticate for unlimited CI/CD analytics.\n`));
+    }
+
+    const spinner = ora(`Scanning directory '${dir}' for supported files...`).start();
+    let files;
+    try {
+      files = findFiles(dir);
+    } catch (e) {
+      spinner.fail(chalk.red(`Error reading directory: ${e.message}`));
+      process.exit(1);
+    }
+
+    if (files.length === 0) {
+      spinner.succeed('Done. No supported files found.');
+      process.exit(0);
+    }
+
+    spinner.succeed(`Found ${files.length} files. Starting analysis with pack: ${chalk.cyan(pack)}...\n`);
+
+    let totalViolations = 0;
+    let criticalCount = 0;
+    let highCount = 0;
+
+    for (let i = 0; i < files.length; i++) {
+      const file = files[i];
+      const displayPath = path.relative(process.cwd(), file);
+      
+      const fileSpinner = ora(`Analyzing ${displayPath} (${i + 1}/${files.length})...`).start();
+      
+      const fileContent = fs.readFileSync(file, 'utf-8');
+      if (fileContent.length > 500000) {
+        fileSpinner.info(chalk.yellow(`Skipped ${displayPath} (File too large)`));
+        continue;
+      }
+
+      const ext = path.extname(file);
+      const language = getLanguageFromExt(ext);
+
+      try {
+        const res = await fetch(`${API_URL}/api/ide/analyze`, {
+          method: 'POST',
+          headers: {
+            'Content-Type': 'application/json',
+            ...(token && { 'Authorization': `Bearer ${token}` })
+          },
+          body: JSON.stringify({
+            fileContent,
+            language,
+            fileName: file,
+            packId: pack,
+            requestSignature: false
+          })
+        });
+
+        if (!res.ok) {
+          fileSpinner.fail(chalk.red(`Server error analyzing ${displayPath}: HTTP ${res.status}`));
+          continue;
+        }
+
+        const result = await res.json();
+        
+        if (result.skipped) {
+          fileSpinner.info(chalk.yellow(`Skipped ${displayPath}: ${result.reason}`));
+          continue;
+        }
+
+        if (result.summary && result.summary.total > 0) {
+          fileSpinner.stop();
+          console.log(`\n📄 ${chalk.bold.underline(displayPath)}`);
+          
+          for (const v of result.violations) {
+            totalViolations++;
+            let severityTag = chalk.blue('LOW');
+            if (v.severity === 'critical') { severityTag = chalk.bgRed.white.bold(' CRITICAL '); criticalCount++; }
+            else if (v.severity === 'high') { severityTag = chalk.red.bold('HIGH'); highCount++; }
+            else if (v.severity === 'medium') { severityTag = chalk.yellow.bold('MED'); }
+
+            console.log(`   ${chalk.dim(v.line + ':' + (v.column || 0))}  ${severityTag}  ${v.ruleName}`);
+            console.log(`   ${chalk.dim('↳')} ${chalk.italic(v.explanation)} `);
+          }
+        } else {
+          fileSpinner.stop();
+        }
+      } catch (e) {
+        fileSpinner.fail(chalk.red(`Failed to analyze ${displayPath}: ${e.message}`));
+      }
+    }
+
+    console.log('\n' + chalk.dim('======================================='));
+    
+    if (totalViolations === 0) {
+      console.log(chalk.green.bold('✔ Success! Found 0 policy violations. Your code is clean.\n'));
+      process.exit(0);
+    } else {
+      console.log(chalk.red.bold(`✖ Analysis complete. Found ${totalViolations} total policy violations.`));
+      if (criticalCount > 0 || highCount > 0) {
+        console.log(chalk.red('Quality Gate Failed: Critical or High severity violations detected.\n'));
+        process.exit(1);
+      } else {
+        console.log(chalk.yellow('Warnings present, but no critical/high gates triggered. Passing build.\n'));
+        process.exit(0);
+      }
+    }
+  });
+
+program.parse(process.argv);

package/node_modules/ansi-regex/index.d.ts

@@ -0,0 +1,37 @@
+declare namespace ansiRegex {
+	interface Options {
+		/**
+		Match only the first ANSI escape.
+
+		@default false
+		*/
+		onlyFirst: boolean;
+	}
+}
+
+/**
+Regular expression for matching ANSI escape codes.
+
+@example
+```
+import ansiRegex = require('ansi-regex');
+
+ansiRegex().test('\u001B[4mcake\u001B[0m');
+//=> true
+
+ansiRegex().test('cake');
+//=> false
+
+'\u001B[4mcake\u001B[0m'.match(ansiRegex());
+//=> ['\u001B[4m', '\u001B[0m']
+
+'\u001B[4mcake\u001B[0m'.match(ansiRegex({onlyFirst: true}));
+//=> ['\u001B[4m']
+
+'\u001B]8;;https://github.com\u0007click\u001B]8;;\u0007'.match(ansiRegex());
+//=> ['\u001B]8;;https://github.com\u0007', '\u001B]8;;\u0007']
+```
+*/
+declare function ansiRegex(options?: ansiRegex.Options): RegExp;
+
+export = ansiRegex;

package/node_modules/ansi-regex/index.js

@@ -0,0 +1,10 @@
+'use strict';
+
+module.exports = ({onlyFirst = false} = {}) => {
+	const pattern = [
+		'[\\u001B\\u009B][[\\]()#;?]*(?:(?:(?:(?:;[-a-zA-Z\\d\\/#&.:=?%@~_]+)*|[a-zA-Z\\d]+(?:;[-a-zA-Z\\d\\/#&.:=?%@~_]*)*)?\\u0007)',
+		'(?:(?:\\d{1,4}(?:;\\d{0,4})*)?[\\dA-PR-TZcf-ntqry=><~]))'
+	].join('|');
+
+	return new RegExp(pattern, onlyFirst ? undefined : 'g');
+};

package/node_modules/ansi-regex/license

@@ -0,0 +1,9 @@
+MIT License
+
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

package/node_modules/ansi-regex/package.json

@@ -0,0 +1,55 @@
+{
+	"name": "ansi-regex",
+	"version": "5.0.1",
+	"description": "Regular expression for matching ANSI escape codes",
+	"license": "MIT",
+	"repository": "chalk/ansi-regex",
+	"author": {
+		"name": "Sindre Sorhus",
+		"email": "sindresorhus@gmail.com",
+		"url": "sindresorhus.com"
+	},
+	"engines": {
+		"node": ">=8"
+	},
+	"scripts": {
+		"test": "xo && ava && tsd",
+		"view-supported": "node fixtures/view-codes.js"
+	},
+	"files": [
+		"index.js",
+		"index.d.ts"
+	],
+	"keywords": [
+		"ansi",
+		"styles",
+		"color",
+		"colour",
+		"colors",
+		"terminal",
+		"console",
+		"cli",
+		"string",
+		"tty",
+		"escape",
+		"formatting",
+		"rgb",
+		"256",
+		"shell",
+		"xterm",
+		"command-line",
+		"text",
+		"regex",
+		"regexp",
+		"re",
+		"match",
+		"test",
+		"find",
+		"pattern"
+	],
+	"devDependencies": {
+		"ava": "^2.4.0",
+		"tsd": "^0.9.0",
+		"xo": "^0.25.3"
+	}
+}

package/node_modules/ansi-regex/readme.md

@@ -0,0 +1,78 @@
+# ansi-regex
+
+> Regular expression for matching [ANSI escape codes](https://en.wikipedia.org/wiki/ANSI_escape_code)
+
+
+## Install
+
+```
+$ npm install ansi-regex
+```
+
+
+## Usage
+
+```js
+const ansiRegex = require('ansi-regex');
+
+ansiRegex().test('\u001B[4mcake\u001B[0m');
+//=> true
+
+ansiRegex().test('cake');
+//=> false
+
+'\u001B[4mcake\u001B[0m'.match(ansiRegex());
+//=> ['\u001B[4m', '\u001B[0m']
+
+'\u001B[4mcake\u001B[0m'.match(ansiRegex({onlyFirst: true}));
+//=> ['\u001B[4m']
+
+'\u001B]8;;https://github.com\u0007click\u001B]8;;\u0007'.match(ansiRegex());
+//=> ['\u001B]8;;https://github.com\u0007', '\u001B]8;;\u0007']
+```
+
+
+## API
+
+### ansiRegex(options?)
+
+Returns a regex for matching ANSI escape codes.
+
+#### options
+
+Type: `object`
+
+##### onlyFirst
+
+Type: `boolean`<br>
+Default: `false` *(Matches any ANSI escape codes in a string)*
+
+Match only the first ANSI escape.
+
+
+## FAQ
+
+### Why do you test for codes not in the ECMA 48 standard?
+
+Some of the codes we run as a test are codes that we acquired finding various lists of non-standard or manufacturer specific codes. We test for both standard and non-standard codes, as most of them follow the same or similar format and can be safely matched in strings without the risk of removing actual string content. There are a few non-standard control codes that do not follow the traditional format (i.e. they end in numbers) thus forcing us to exclude them from the test because we cannot reliably match them.
+
+On the historical side, those ECMA standards were established in the early 90's whereas the VT100, for example, was designed in the mid/late 70's. At that point in time, control codes were still pretty ungoverned and engineers used them for a multitude of things, namely to activate hardware ports that may have been proprietary. Somewhere else you see a similar 'anarchy' of codes is in the x86 architecture for processors; there are a ton of "interrupts" that can mean different things on certain brands of processors, most of which have been phased out.
+
+
+## Maintainers
+
+- [Sindre Sorhus](https://github.com/sindresorhus)
+- [Josh Junon](https://github.com/qix-)
+
+
+---
+
+<div align="center">
+	<b>
+		<a href="https://tidelift.com/subscription/pkg/npm-ansi-regex?utm_source=npm-ansi-regex&utm_medium=referral&utm_campaign=readme">Get professional support for this package with a Tidelift subscription</a>
+	</b>
+	<br>
+	<sub>
+		Tidelift helps make open source sustainable for maintainers while giving companies<br>assurances about security, maintenance, and licensing for their dependencies.
+	</sub>
+</div>