import { Foundry } from '@withfoundry/sdk';

const foundry = new Foundry({ apiKey: process.env.FOUNDRY_API_KEY });

// Start scan (async; returns scanId)
const { data: scan } = await foundry.security.scanRepo({
  repoUrl: 'https://github.com/your-org/your-repo',
  branch: 'main',           // optional
  waitForCompletion: true,  // optional: wait and return findings
});

if (scan.status === 'completed') {
  console.log('Findings:', scan.findings);
  scan.findings.forEach((f) => {
    console.log(`${f.severity}: ${f.title} at ${f.file}:${f.line}`);
  });
} else {
  console.log('Scan ID:', scan.scanId, 'Status:', scan.status);
}

const { data: scan } = await foundry.security.scanRepo({
  repoUrl: 'https://github.com/your-org/your-repo',
});

const scanId = scan.scanId;
let result = await foundry.security.getScanResult(scanId);

while (result.data.status === 'running' || result.data.status === 'pending') {
  await new Promise((r) => setTimeout(r, 5000));
  result = await foundry.security.getScanResult(scanId);
}

console.log('Findings:', result.data.findings);

{
  "repoUrl": "https://github.com/your-org/your-repo",
  "branch": "main",
  "waitForCompletion": false
}

{
  "success": true,
  "data": {
    "scanId": "scan_abc123",
    "status": "pending"
  },
  "meta": { "requestId": "req_xyz" }
}

{
  "success": true,
  "data": {
    "scanId": "scan_abc123",
    "status": "completed",
    "findings": [
      {
        "id": "fin_1",
        "severity": "high",
        "title": "Hardcoded secret pattern",
        "description": "Possible API key in source.",
        "file": "src/config.js",
        "line": 12,
        "suggestion": "Use environment variables."
      }
    ]
  },
  "meta": { "requestId": "req_xyz" }
}

curl -H "Authorization: Bearer key_YOUR_KEY" \
  "https://api.withfoundry.ai/v1/security/scan/scan_abc123"

const { data } = await foundry.security.scanRepo({
  repoUrl: process.env.GITHUB_REPOSITORY
    ? `https://github.com/${process.env.GITHUB_REPOSITORY}`
    : 'https://github.com/your-org/your-repo',
  branch: process.env.GITHUB_REF_NAME || 'main',
  waitForCompletion: true,
});

const criticalOrHigh = data.findings?.filter(
  (f) => f.severity === 'critical' || f.severity === 'high'
) ?? [];
if (criticalOrHigh.length > 0) {
  console.error('Security findings:', criticalOrHigh);
  process.exit(1);
}