sudeshi-code-review 0.0.0-stage → 1.1.0

package/dist/review/reviewEngine.js

@@ -0,0 +1,116 @@
+import ts from 'typescript';
+import { buildContext } from '../context/buildContext.js';
+const SECRET_ASSIGNMENT_PATTERN = String.raw `\b([\w$]*(?:api[_-]?key|password|secret|client[_-]?secret|token|database[_-]?url))\s*(=|:)\s*(?:(['"])((?:\\.|[^\\])*?)\3|(\`)((?:\\.|(?!\$\{)[^\\])*?)\5)`;
+function createSecretAssignmentRegex(global = false) {
+    return new RegExp(SECRET_ASSIGNMENT_PATTERN, global ? 'gi' : 'i');
+}
+function extractSecretValue(evidence) {
+    const match = evidence?.match(createSecretAssignmentRegex());
+    return match?.[4] ?? match?.[6];
+}
+export class ReviewEngine {
+    config;
+    constructor(config) {
+        this.config = config;
+    }
+    redactHardcodedSecret(source, filePath = 'source.ts') {
+        const scriptKind = filePath.endsWith('.tsx')
+            ? ts.ScriptKind.TSX
+            : filePath.endsWith('.jsx')
+                ? ts.ScriptKind.JSX
+                : filePath.endsWith('.js')
+                    ? ts.ScriptKind.JS
+                    : ts.ScriptKind.TS;
+        const sourceFile = ts.createSourceFile(filePath, source, ts.ScriptTarget.Latest, true, scriptKind);
+        const secretNamePattern = /(?:api[_-]?key|password|secret|client[_-]?secret|token|database[_-]?url)/i;
+        const edits = [];
+        function visit(node) {
+            let name;
+            let initializer;
+            if (ts.isVariableDeclaration(node) && ts.isIdentifier(node.name)) {
+                name = node.name.text;
+                initializer = node.initializer;
+            }
+            else if (ts.isPropertyAssignment(node) && ts.isIdentifier(node.name)) {
+                name = node.name.text;
+                initializer = node.initializer;
+            }
+            if (name &&
+                secretNamePattern.test(name) &&
+                initializer &&
+                (ts.isStringLiteral(initializer) ||
+                    ts.isNoSubstitutionTemplateLiteral(initializer) ||
+                    ts.isTemplateExpression(initializer))) {
+                edits.push({
+                    start: initializer.getStart(sourceFile),
+                    end: initializer.getEnd(),
+                });
+            }
+            ts.forEachChild(node, visit);
+        }
+        visit(sourceFile);
+        let redactedSource = source;
+        for (const edit of edits.sort((a, b) => b.start - a.start)) {
+            redactedSource =
+                redactedSource.slice(0, edit.start) +
+                    "'[REDACTED]'" +
+                    redactedSource.slice(edit.end);
+        }
+        return redactedSource;
+    }
+    redactSecretValue(source, finding) {
+        if (finding.rule !== 'hardcoded-secret') {
+            return source;
+        }
+        const secret = extractSecretValue(finding.evidence);
+        if (!secret) {
+            return source;
+        }
+        return source.replaceAll(secret, '[REDACTED]');
+    }
+    async review(input) {
+        const startTime = performance.now();
+        const findings = input.findings.map((finding) => ({ ...finding }));
+        for (const finding of findings) {
+            if (!finding.requiresAIReview) {
+                continue;
+            }
+            const sourceFile = input.files.find((file) => file.path === finding.file);
+            if (!sourceFile) {
+                continue;
+            }
+            if (finding.rule === 'hardcoded-secret' &&
+                !extractSecretValue(finding.evidence)) {
+                continue;
+            }
+            const safeSourceFile = {
+                ...sourceFile,
+                content: this.redactSecretValue(this.redactHardcodedSecret(sourceFile.content, sourceFile.path), finding),
+            };
+            const safeFinding = {
+                ...finding,
+                ...(finding.evidence !== undefined && {
+                    evidence: this.redactSecretValue(this.redactHardcodedSecret(finding.evidence, sourceFile.path), finding),
+                }),
+            };
+            const context = buildContext(safeSourceFile, safeFinding);
+            const aiResult = await this.config.provider.analyze({
+                ...context,
+                finding: { ...context.finding },
+            });
+            finding.aiReview = {
+                valid: aiResult.valid,
+                ...(aiResult.severity !== undefined && { severity: aiResult.severity }),
+                confidence: aiResult.confidence,
+                reason: aiResult.reason,
+                recommendation: aiResult.recommendation,
+            };
+        }
+        return {
+            findings,
+            filesScanned: input.files.length,
+            durationMs: performance.now() - startTime,
+        };
+    }
+}
+//# sourceMappingURL=reviewEngine.js.map

package/dist/review/reviewEngine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reviewEngine.js","sourceRoot":"","sources":["../../src/review/reviewEngine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,YAAY,CAAC;AAI5B,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAiB1D,MAAM,yBAAyB,GAAG,MAAM,CAAC,GAAG,CAAA,4JAA4J,CAAC;AAEzM,SAAS,2BAA2B,CAAC,MAAM,GAAG,KAAK;IACjD,OAAO,IAAI,MAAM,CAAC,yBAAyB,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,kBAAkB,CAAC,QAA4B;IACtD,MAAM,KAAK,GAAG,QAAQ,EAAE,KAAK,CAAC,2BAA2B,EAAE,CAAC,CAAC;IAC7D,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,OAAO,YAAY;IACM;IAA7B,YAA6B,MAA0B;QAA1B,WAAM,GAAN,MAAM,CAAoB;IAAG,CAAC;IAEnD,qBAAqB,CAC3B,MAAc,EACd,QAAQ,GAAG,WAAW;QAEtB,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC1C,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG;YACnB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACzB,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG;gBACnB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;oBACxB,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE;oBAClB,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;QAEzB,MAAM,UAAU,GAAG,EAAE,CAAC,gBAAgB,CACpC,QAAQ,EACR,MAAM,EACN,EAAE,CAAC,YAAY,CAAC,MAAM,EACtB,IAAI,EACJ,UAAU,CACX,CAAC;QAEF,MAAM,iBAAiB,GACrB,2EAA2E,CAAC;QAE9E,MAAM,KAAK,GAA0C,EAAE,CAAC;QAExD,SAAS,KAAK,CAAC,IAAa;YAC1B,IAAI,IAAwB,CAAC;YAC7B,IAAI,WAAsC,CAAC;YAE3C,IAAI,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjE,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;gBACtB,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;YACjC,CAAC;iBAAM,IAAI,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvE,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;gBACtB,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;YACjC,CAAC;YAED,IACE,IAAI;gBACJ,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC5B,WAAW;gBACX,CAAC,EAAE,CAAC,eAAe,CAAC,WAAW,CAAC;oBAC9B,EAAE,CAAC,+BAA+B,CAAC,WAAW,CAAC;oBAC/C,EAAE,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC,EACvC,CAAC;gBACD,KAAK,CAAC,IAAI,CAAC;oBACT,KAAK,EAAE,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC;oBACvC,GAAG,EAAE,WAAW,CAAC,MAAM,EAAE;iBAC1B,CAAC,CAAC;YACL,CAAC;YAED,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC/B,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,CAAC;QAElB,IAAI,cAAc,GAAG,MAAM,CAAC;QAE5B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3D,cAAc;gBACZ,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC;oBACnC,cAAc;oBACd,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnC,CAAC;QAED,OAAO,cAAc,CAAC;IACxB,CAAC;IAEO,iBAAiB,CAAC,MAAc,EAAE,OAAgB;QACxD,IAAI,OAAO,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;YACxC,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAEpD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,OAAO,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAkB;QAC7B,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAEpC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC;QAEnE,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC;gBAC9B,SAAS;YACX,CAAC;YAED,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;YAE1E,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,SAAS;YACX,CAAC;YAED,IACE,OAAO,CAAC,IAAI,KAAK,kBAAkB;gBACnC,CAAC,kBAAkB,CAAC,OAAO,CAAC,QAAQ,CAAC,EACrC,CAAC;gBACD,SAAS;YACX,CAAC;YAED,MAAM,cAAc,GAAG;gBACrB,GAAG,UAAU;gBACb,OAAO,EAAE,IAAI,CAAC,iBAAiB,CAC7B,IAAI,CAAC,qBAAqB,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,EAC/D,OAAO,CACR;aACF,CAAC;YAEF,MAAM,WAAW,GAAG;gBAClB,GAAG,OAAO;gBACV,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI;oBACpC,QAAQ,EAAE,IAAI,CAAC,iBAAiB,CAC9B,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,EAC7D,OAAO,CACR;iBACF,CAAC;aACH,CAAC;YAEF,MAAM,OAAO,GAAG,YAAY,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;YAC1D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAClD,GAAG,OAAO;gBACV,OAAO,EAAE,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE;aAChC,CAAC,CAAC;YAEH,OAAO,CAAC,QAAQ,GAAG;gBACjB,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,GAAG,CAAC,QAAQ,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBACvE,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,cAAc,EAAE,QAAQ,CAAC,cAAc;aACxC,CAAC;QACJ,CAAC;QAED,OAAO;YACL,QAAQ;YACR,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM;YAChC,UAAU,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS;SAC1C,CAAC;IACJ,CAAC;CACF"}

package/dist/scanner/scanRepository.d.ts

@@ -0,0 +1,2 @@
+export declare function scanRepository(repositoryPath: string): Promise<string[]>;
+//# sourceMappingURL=scanRepository.d.ts.map

package/dist/scanner/scanRepository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanRepository.d.ts","sourceRoot":"","sources":["../../src/scanner/scanRepository.ts"],"names":[],"mappings":"AAwBA,wBAAsB,cAAc,CAClC,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,MAAM,EAAE,CAAC,CAkCnB"}

package/dist/scanner/scanRepository.js

@@ -0,0 +1,55 @@
+import { readdir } from 'node:fs/promises';
+import path from 'node:path';
+const SOURCE_EXTENSIONS = new Set(['.ts', '.tsx', '.js', '.jsx']);
+const IGNORED_DIRECTORIES = new Set([
+    '.git',
+    '.venv',
+    'venv',
+    'env',
+    '.tox',
+    '__pycache__',
+    '.pytest_cache',
+    '.mypy_cache',
+    '.ruff_cache',
+    'node_modules',
+    'dist',
+    'build',
+    '.next',
+    'coverage',
+    '.turbo',
+    '.output',
+    'vendor',
+]);
+export async function scanRepository(repositoryPath) {
+    const files = [];
+    function toRelativePath(repositoryPath, filePath) {
+        const relativePath = path.relative(repositoryPath, filePath);
+        return relativePath.replaceAll(path.sep, '/');
+    }
+    async function scanDirectory(directoryPath) {
+        const entries = await readdir(directoryPath, {
+            withFileTypes: true,
+        });
+        for (const entry of entries) {
+            const entryPath = path.join(directoryPath, entry.name);
+            if (entry.isDirectory()) {
+                if (IGNORED_DIRECTORIES.has(entry.name)) {
+                    continue;
+                }
+                await scanDirectory(entryPath);
+                continue;
+            }
+            if (entry.isFile()) {
+                const extension = path.extname(entry.name);
+                if (!SOURCE_EXTENSIONS.has(extension))
+                    continue;
+                if (/\.(test|spec)\.(ts|tsx|js|jsx)$/.test(entry.name))
+                    continue;
+                files.push(toRelativePath(repositoryPath, entryPath));
+            }
+        }
+    }
+    await scanDirectory(repositoryPath);
+    return files.sort();
+}
+//# sourceMappingURL=scanRepository.js.map

package/dist/scanner/scanRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanRepository.js","sourceRoot":"","sources":["../../src/scanner/scanRepository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;AAClE,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,MAAM;IACN,OAAO;IACP,MAAM;IACN,KAAK;IACL,MAAM;IACN,aAAa;IACb,eAAe;IACf,aAAa;IACb,aAAa;IACb,cAAc;IACd,MAAM;IACN,OAAO;IACP,OAAO;IACP,UAAU;IACV,QAAQ;IACR,SAAS;IACT,QAAQ;CACT,CAAC,CAAC;AAEH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,cAAsB;IAEtB,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,SAAS,cAAc,CAAC,cAAsB,EAAE,QAAgB;QAC9D,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;QAC7D,OAAO,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAChD,CAAC;IACD,KAAK,UAAU,aAAa,CAAC,aAAqB;QAChD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,aAAa,EAAE;YAC3C,aAAa,EAAE,IAAI;SACpB,CAAC,CAAC;QAEH,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAEvD,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,IAAI,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;oBACxC,SAAS;gBACX,CAAC;gBACD,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;gBAC/B,SAAS;YACX,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBACnB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC3C,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC;oBAAE,SAAS;gBAChD,IAAI,iCAAiC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;oBAAE,SAAS;gBACjE,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,aAAa,CAAC,cAAc,CAAC,CAAC;IAEpC,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC"}

package/package.json

@@ -1,6 +1,49 @@
 {
   "name": "sudeshi-code-review",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "1.1.0",
+  "description": "A TypeScript and React code review CLI with security rules and optional Sarvam AI analysis.",
+  "homepage": "https://github.com/sriram23/sudeshi-code-review#readme",
+  "bugs": {
+    "url": "https://github.com/sriram23/sudeshi-code-review/issues"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/sriram23/sudeshi-code-review.git"
+  },
+  "license": "MIT",
+  "author": "Sriram B",
+  "type": "module",
+  "main": "./dist/index.js",
+  "scripts": {
+    "build": "tsc",
+    "test": "vitest run",
+    "lint": "eslint",
+    "format": "prettier --write .",
+    "setup:hooks": "husky",
+    "test:watch": "vitest",
+    "format:check": "prettier --check .",
+    "prepack": "npm run build"
+  },
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "typescript": "^5.9.3"
+  },
+  "devDependencies": {
+    "@eslint/js": "^10.0.1",
+    "@types/node": "^26.6.4",
+    "eslint": "^10.11.0",
+    "globals": "^17.13.0",
+    "husky": "^9.1.7",
+    "prettier": "^3.9.9",
+    "typescript-eslint": "^8.71.0",
+    "vitest": "^5.0.3"
+  },
+  "bin": {
+    "sudeshi-code-review": "dist/index.js"
+  },
+  "engines": {
+    "node": ">=24"
+  }
+}