import { guard } from 'aegis.js';

// Auto-detecta e auto-corrige vulnerabilidades
const aiGeneratedCode = `eval('{"x": 1}');`;
const safeCode = await guard(aiGeneratedCode);
// Resultado: JSON.parse('{"x": 1}');

import { validate } from 'aegis.js';

const code = `
const apiKey = "sk-1234567890abcdef1234567890abcdef";
db.query(\`SELECT * FROM users WHERE id = \${userId}\`);
`;

const result = await validate(code, { autoFix: true });

console.log(result);
// {
//   safe: false,
//   issues: [
//     {
//       type: 'CRITICAL',
//       rule: 'no-hardcoded-secrets',
//       message: 'Hardcoded secret detected...',
//       line: 2,
//       autoFixable: true,
//       fix: 'Move to environment variables: process.env.API_KEY'
//     },
//     {
//       type: 'CRITICAL',
//       rule: 'no-sql-injection',
//       message: 'SQL Injection risk...',
//       line: 3,
//       autoFixable: true,
//       fix: 'Use parameterized queries'
//     }
//   ],
//   fixed: "const apiKey = process.env.API_KEY;\ndb.query('SELECT * FROM users WHERE id = ?', [userId]);",
//   autoFixed: true,
//   stats: {
//     linesScanned: 4,
//     issuesFound: 2,
//     issuesFixed: 2,
//     criticalIssues: 2
//   }
// }

import { validate } from 'aegis.js';

// Integração com editor/IDE
editor.onCopilotSuggestion(async (suggestion) => {
    const result = await validate(suggestion.code);
    
    if (result.stats.criticalIssues > 0) {
        showWarning('⚠️ Código sugerido contém vulnerabilidades!');
        showQuickFix(result.issues);
    }
});

// security-scan.js
import { validate } from 'aegis.js';
import * as fs from 'fs';
import * as glob from 'glob';

const files = glob.sync('src/**/*.{js,ts}');
let hasIssues = false;

for (const file of files) {
    const code = fs.readFileSync(file, 'utf-8');
    const result = await validate(code);
    
    if (result.stats.criticalIssues > 0) {
        console.error(`❌ ${file}: ${result.stats.criticalIssues} critical issue(s)`);
        hasIssues = true;
    }
}

if (hasIssues) {
    process.exit(1);
}

// pre-commit-check.js
import { validate } from 'aegis.js';
import { execSync } from 'child_process';
import * as fs from 'fs';

const stagedFiles = execSync('git diff --cached --name-only --diff-filter=ACM')
    .toString()
    .split('\n')
    .filter(f => f.endsWith('.js') || f.endsWith('.ts'));

for (const file of stagedFiles) {
    const code = fs.readFileSync(file, 'utf-8');
    const result = await validate(code, { autoFix: true });
    
    if (result.autoFixed) {
        fs.writeFileSync(file, result.fixed);
        execSync(`git add ${file}`);
        console.log(`✅ ${file} auto-fixed`);
    }
    
    if (result.stats.criticalIssues > 0) {
        console.error(`❌ ${file} still has critical issues`);
        process.exit(1);
    }
}

import { validate } from 'aegis.js';

// Validação em tempo real
vscode.workspace.onDidSaveTextDocument(async (document) => {
    if (document.languageId === 'javascript' || document.languageId === 'typescript') {
        const result = await validate(document.getText());
        
        // Mostra diagnostics no editor
        diagnosticCollection.set(document.uri, 
            result.issues.map(issue => new vscode.Diagnostic(
                new vscode.Range(issue.line - 1, issue.column, issue.line - 1, 100),
                issue.message,
                vscode.DiagnosticSeverity.Error
            ))
        );
    }
});

const result = await validate(code, {
    rules: {
        noEval: 'error',              // Bloqueia eval()
        noSqlInjection: 'error',      // Bloqueia SQL injection
        noHardcodedSecrets: 'error',  // Bloqueia secrets
        noCommandInjection: 'warn',   // Apenas avisa
        noXSS: 'warn',                // Apenas avisa
        noPathTraversal: 'off'        // Desabilita
    },
    autoFix: true,
    strict: false,
    throwOnError: true
});

interface GuardOptions {
    rules?: {
        noEval?: 'error' | 'warn' | 'off';
        noSqlInjection?: 'error' | 'warn' | 'off';
        noHardcodedSecrets?: 'error' | 'warn' | 'off';
        noCommandInjection?: 'error' | 'warn' | 'off';
        noXSS?: 'error' | 'warn' | 'off';
        noPathTraversal?: 'error' | 'warn' | 'off';
    };
    autoFix?: boolean;      // Aplica correções automáticas (padrão: true)
    strict?: boolean;       // Para no primeiro erro crítico (padrão: false)
    throwOnError?: boolean; // Lança exceção em erros críticos (padrão: true)
}