Function ai_remediate

cli/main.py:831–1049

Scan a target then use a local LLM to interactively remediate findings. Checks prerequisites for each finding before offering to execute. Supports: localhost hardening, web headers, SSL, firewall, services. Examples: secsuite ai remediate localhost -p ollama -m qwen2.5:7b

(
    target: str = typer.Argument(..., help="Target to scan and remediate (use 'localhost' for this machine)"),
    provider: str = typer.Option("ollama", "--provider", "-p", help="LLM provider (ollama/anthropic/openai)"),
    model: Optional[str] = typer.Option(None, "--model", "-m", help="Model name (e.g. qwen2.5:7b)"),
    base_url: Optional[str] = typer.Option(None, "--base-url", "-b", help="Ollama/custom API base URL"),
    severity: str = typer.Option("medium", "--severity", "-s", help="Minimum severity to remediate: critical/high/medium/low"),
    dry_run: bool = typer.Option(False, "--dry-run", help="Show commands without executing"),
    quick: bool = typer.Option(False, "--quick", "-q", help="Quick scan (fewer modules)"),
    skip_scan: bool = typer.Option(False, "--skip-scan", help="Skip scan phase, use last cached results if available"),
)

            console.print(f"    {chain.description}")

    # Display recommendations
    if report.recommendations:
        console.print()
        console.print("[bold green]Recommendations:[/bold green]")
        for rec in report.recommendations:
            console.print(f"  • {rec}")


@ai_app.command("remediate")
def ai_remediate(
    target: str = typer.Argument(..., help="Target to scan and remediate (use 'localhost' for this machine)"),
    provider: str = typer.Option("ollama", "--provider", "-p", help="LLM provider (ollama/anthropic/openai)"),
    model: str | None = typer.Option(None, "--model", "-m", help="Model name (e.g. qwen2.5:7b)"),
    base_url: str | None = typer.Option(None, "--base-url", "-b", help="Ollama/custom API base URL"),
    severity: str = typer.Option("medium", "--severity", "-s", help="Minimum severity to remediate: critical/high/medium/low"),
    dry_run: bool = typer.Option(False, "--dry-run", help="Show commands without executing"),
    quick: bool = typer.Option(False, "--quick", "-q", help="Quick scan (fewer modules)"),
    skip_scan: bool = typer.Option(False, "--skip-scan", help="Skip scan phase, use last cached results if available"),
):
    """
    Scan a target then use a local LLM to interactively remediate findings.

    Checks prerequisites for each finding before offering to execute.
    Supports: localhost hardening, web headers, SSL, firewall, services.

    Examples:
      secsuite ai remediate localhost -p ollama -m qwen2.5:7b
      secsuite ai remediate localhost --dry-run
      secsuite ai remediate https://example.com -s high
    """
    from core.models import Severity as SevEnum
    from modules.ai import RemediationCopilot

    setup_logging()

    SEV_MAP = {
        "critical": SevEnum.CRITICAL,
        "high":     SevEnum.HIGH,
        "medium":   SevEnum.MEDIUM,
        "low":      SevEnum.LOW,
    }
    min_sev = SEV_MAP.get(severity.lower(), SevEnum.MEDIUM)

    # ── Severity colour helper ────────────────────────────────────────────────
    SEV_STYLE = {
        "critical": "bold red",
        "high":     "red",
        "medium":   "yellow",
        "low":      "blue",
        "info":     "dim",
    }

    # ── Scan phase ────────────────────────────────────────────────────────────
    console.print(f"\n[bold cyan]SecSuite AI Remediation[/bold cyan] — {target}")
    console.print(f"[dim]Provider: {provider}  Model: {model or 'auto'}  Min-severity: {severity}  Dry-run: {dry_run}[/dim]\n")

    if not skip_scan:
        if quick or target in ("localhost", "127.0.0.1"):