Shell Automation

# Run a prompt non-interactively (no REPL, exits after response)
gemini -p "Your prompt here" --no-interactive

# Allow Gemini to execute shell commands without asking for confirmation
gemini -p "Your prompt here" --yolo --no-interactive

# Run all tool executions inside an isolated Docker container
gemini -p "Your prompt here" --sandbox --no-interactive

# Combine: sandboxed, non-interactive, quiet output
gemini -p "Your prompt here" --sandbox --no-interactive --quiet

# watch-and-test.ps1 — Run in a background terminal
# Watches src/ for new .ts files and auto-generates Jest tests

$watcher = New-Object System.IO.FileSystemWatcher
$watcher.Path = "$PWD\src"
$watcher.Filter = "*.ts"
$watcher.IncludeSubdirectories = $true
$watcher.EnableRaisingEvents = $true

$action = {
    $filePath = $Event.SourceEventArgs.FullPath
    $fileName = [System.IO.Path]::GetFileNameWithoutExtension($filePath)
    $testPath = $filePath -replace "\\src\\", "\tests\" -replace "\.ts$", ".test.ts"

    # Skip test files themselves
    if ($filePath -match "\.test\.ts$") { return }

    # Skip if test already exists
    if (Test-Path $testPath) { return }

    Write-Host "New file detected: $fileName.ts — generating tests..."

    # Ensure tests directory exists
    $testDir = Split-Path $testPath -Parent
    if (-not (Test-Path $testDir)) { New-Item -ItemType Directory -Force $testDir | Out-Null }

    # Generate test file
    $prompt = "@$filePath
Generate a comprehensive Jest test suite for this TypeScript file.
Requirements:
- Import the module correctly using the relative path
- Test each exported function with at least 3 cases: happy path, edge case, error case
- Mock external dependencies
- Use describe/it/expect syntax
- Include beforeEach/afterEach cleanup where needed
Write only the test file content — no markdown, no explanation."

    $testContent = gemini -p $prompt --no-interactive 2>$null

    if ($LASTEXITCODE -eq 0 -and $testContent) {
        $testContent | Out-File -FilePath $testPath -Encoding utf8
        Write-Host "  Test generated: $([System.IO.Path]::GetFileName($testPath))" -ForegroundColor Green
    } else {
        Write-Warning "  Test generation failed for $fileName.ts"
    }
}

# Register the Created event
Register-ObjectEvent $watcher "Created" -Action $action | Out-Null

Write-Host "Watching src/ for new TypeScript files..." -ForegroundColor Cyan
Write-Host "Press Ctrl+C to stop."

# Keep the script alive
try {
    while ($true) { Start-Sleep -Seconds 1 }
} finally {
    $watcher.EnableRaisingEvents = $false
    $watcher.Dispose()
    Write-Host "`nWatcher stopped."
}

param(
    [string]$ProjectPath = $PSScriptRoot + "\..",
    [string]$LogDir = "$PSScriptRoot\..\logs"
)

# Ensure GEMINI_API_KEY is available (set as System env var)
if (-not $env:GEMINI_API_KEY) {
    Write-Error "GEMINI_API_KEY not set. Aborting audit."
    exit 1
}

$date = Get-Date -Format "yyyyMMdd"
$logFile = "$LogDir\security-audit-$date.json"
New-Item -ItemType Directory -Force $LogDir | Out-Null

$findings = @()

Get-ChildItem -Path $ProjectPath -Recurse -Include "*.py","*.ts","*.js" |
    Where-Object { $_.FullName -notmatch "(node_modules|\.git|dist|build)" } |
    ForEach-Object {
        $result = gemini -p "@$($_.FullName)
Audit for OWASP Top 10 issues. Output JSON array: [{severity,category,line,description}]
Output empty array [] if clean." --no-interactive 2>$null

        $issues = $result | ConvertFrom-Json -ErrorAction SilentlyContinue
        if ($issues -and $issues.Count -gt 0) {
            $findings += @{ file = $_.Name; issues = $issues }
        }
    }

# Write JSON report
$report = @{ date = $date; totalFiles = (Get-ChildItem -Recurse $ProjectPath -Include "*.py","*.ts","*.js").Count; findings = $findings }
$report | ConvertTo-Json -Depth 10 | Out-File $logFile -Encoding utf8

# Alert if high/critical issues found
$critical = $findings | Where-Object { $_.issues | Where-Object { $_.severity -in "HIGH","CRITICAL" } }
if ($critical) {
    Write-Warning "ALERT: $($critical.Count) file(s) with HIGH/CRITICAL security issues found. See $logFile"
    exit 1
}

Write-Host "Nightly audit complete. No HIGH/CRITICAL issues. Report: $logFile"