@anyforge/control 0.2.2 → 0.2.3

package/dist/commands/init.js

@@ -1,4 +1,5 @@
 import { promises as fs } from 'fs';
+import { execFileSync } from 'child_process';
 import { homedir } from 'os';
 import { join } from 'path';
 import open from 'open';
@@ -14,8 +15,18 @@ export async function runInit(opts) {
     console.log(bold('AnyForge Control — device authorisation'));
     // eslint-disable-next-line no-console
     console.log(dim(`  endpoint: ${endpoint}`));
-    // 1. Issue a one-time code.
-    const initRes = await fetch(`${endpoint}/api/cli/init`, { method: 'POST' });
+    // 1. Issue a one-time code. We detect the git remote up-front when
+    //    running in a repo so it can be attached to the API key later.
+    //    Detection happens before scope-pick so the server has it
+    //    regardless of which scope the operator chooses.
+    const cwd0 = process.cwd();
+    const gitRoot0 = findGitRoot(cwd0);
+    const earlyRepo = gitRoot0 ? detectGitRemoteRepo(gitRoot0) : null;
+    const initRes = await fetch(`${endpoint}/api/cli/init`, {
+        method: 'POST',
+        headers: { 'content-type': 'application/json' },
+        body: JSON.stringify({ repo: earlyRepo }),
+    });
     const init = (await initRes.json());
     if (!init.ok || !init.data) {
         throw new Error(`Could not start the authorisation flow: ${init.error ?? 'unknown error'}`);
@@ -50,7 +61,7 @@ export async function runInit(opts) {
     //    contract and avoids accidentally writing settings into a
     //    subdirectory the operator didn't mean to target.
     const cwd = process.cwd();
-    const repoRoot = (await isGitRepoRoot(cwd)) ? cwd : null;
+    const repoRoot = findGitRoot(cwd);
     const scope = await pickScope(repoRoot);
     // 6. Patch the chosen target. apiKey is inlined into the env map
     //    so Claude Code can read it without a shell restart.
@@ -146,15 +157,17 @@ async function hasClaudeCodeLogin() {
         return false;
     }
 }
-async function isGitRepoRoot(cwd) {
-    // git worktrees use a `.git` file pointing at the real gitdir, so
-    // accept either a directory or a regular file.
+function findGitRoot(cwd) {
+    // Works from any subdirectory — git walks up the tree to find the root.
     try {
-        const stat = await fs.stat(join(cwd, '.git'));
-        return stat.isDirectory() || stat.isFile();
+        return execFileSync('git', ['rev-parse', '--show-toplevel'], {
+            cwd,
+            encoding: 'utf8',
+            stdio: ['pipe', 'pipe', 'pipe'],
+        }).trim();
     }
     catch {
-        return false;
+        return null;
     }
 }
 async function pickScope(repoRoot) {
@@ -186,6 +199,36 @@ function summarisePatches(patches) {
         console.log(`  ${dim('•')} ${p.label} ${dim('(' + p.path + ')')}`);
     }
 }
+/**
+ * Read the `origin` remote URL and normalise it to `owner/repo`.
+ * Handles both SSH (`git@github.com:owner/repo.git`) and HTTPS forms.
+ * Returns null when there is no remote, git is unavailable, or the
+ * URL can't be parsed into an owner/repo pair.
+ *
+ * Uses execFileSync (not exec/execSync) so no shell interpolation
+ * occurs — the args array is passed directly to the git binary.
+ */
+function detectGitRemoteRepo(repoRoot) {
+    try {
+        const raw = execFileSync('git', ['remote', 'get-url', 'origin'], {
+            cwd: repoRoot,
+            encoding: 'utf8',
+            stdio: ['pipe', 'pipe', 'pipe'],
+        }).trim();
+        // SSH: git@github.com:owner/repo.git
+        const sshMatch = raw.match(/^git@[\w.-]+:([\w.-]+\/[\w.-]+?)(?:\.git)?$/);
+        if (sshMatch)
+            return sshMatch[1];
+        // HTTPS: https://github.com/owner/repo[.git]
+        const httpsMatch = raw.match(/^https?:\/\/[\w.-]+\/([\w.-]+\/[\w.-]+?)(?:\.git)?$/);
+        if (httpsMatch)
+            return httpsMatch[1];
+        return null;
+    }
+    catch {
+        return null;
+    }
+}
 // Re-exported so future commands (e.g. status) can reuse the prompt
 // shape without duplicating the question text.
 export { prompts };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anyforge/control",
-  "version": "0.2.2",
+  "version": "0.2.3",
   "description": "AnyForge Control CLI — governed LLM proxy for Claude Code, Cursor, Cline, and any agent that talks to OpenAI- or Anthropic-shape APIs.",
   "license": "Apache-2.0",
   "homepage": "https://anyforge.ai",