@bussolabs/closeyourit-cli 0.0.10 → 0.0.11

package/dist/commands/tickets/attachment-download.js

@@ -6,10 +6,10 @@ const core_1 = require("@oclif/core");
 const base_1 = require("../../base");
 class TicketsAttachmentDownload extends base_1.BaseCommand {
     static args = {
-        id: core_1.Args.string({ description: 'Ticket id', required: true }),
-        attachment: core_1.Args.string({ description: 'Attachment id', required: true }),
+        id: core_1.Args.string({ description: 'Ticket id or code (e.g. DRFL-3)', required: true }),
+        attachment: core_1.Args.string({ description: 'Attachment id (ticket attachment or comment file)', required: true }),
     };
-    static description = 'Download a ticket attachment to disk';
+    static description = 'Download a ticket binary to disk: works for ticket attachments AND files attached to its comments';
     static examples = [
         '<%= config.bin %> tickets attachment-download <ticket-id> <attachment-id> --project acme-api',
         '<%= config.bin %> tickets attachment-download <ticket-id> <attachment-id> -p acme-api --out ./downloads',

package/dist/commands/tickets/comments.js

@@ -2,11 +2,12 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 const core_1 = require("@oclif/core");
 const base_1 = require("../../base");
+const output_1 = require("../../lib/output");
 class TicketsComments extends base_1.BaseCommand {
     static args = {
-        id: core_1.Args.string({ description: 'Ticket id', required: true }),
+        id: core_1.Args.string({ description: 'Ticket id or code (e.g. DRFL-3)', required: true }),
     };
-    static description = 'List all comments of a ticket (oldest first)';
+    static description = 'List all comments of a ticket (oldest first), including attached files — download them with tickets attachment-download';
     static examples = [
         '<%= config.bin %> tickets comments <ticket-id> --project acme-api',
         '<%= config.bin %> tickets comments <ticket-id> -p acme-api --json',
@@ -33,8 +34,12 @@ class TicketsComments extends base_1.BaseCommand {
             }
             else {
                 for (const comment of all) {
-                    this.log(`\n── ${String(comment.author ?? '?')} · ${String(comment.created_at ?? '')} · ${String(comment.id ?? '')}`);
-                    this.log(String(comment.body ?? ''));
+                    this.log(`\n── ${(0, output_1.sanitize)(comment.author ?? '?')} · ${(0, output_1.sanitize)(comment.created_at ?? '')} · ${(0, output_1.sanitize)(comment.id ?? '')}`);
+                    this.log((0, output_1.sanitizeMultiline)(comment.body ?? ''));
+                    const files = Array.isArray(comment.files) ? comment.files : [];
+                    for (const file of files) {
+                        this.log(`   [file] ${(0, output_1.sanitize)(file.id)} · ${(0, output_1.sanitize)(file.filename)} · ${(0, output_1.sanitize)(file.content_type)} · ${(0, output_1.sanitize)(file.byte_size)} bytes`);
+                    }
                 }
             }
         }

package/dist/commands/tickets/show.d.ts

@@ -9,4 +9,9 @@ export default class TicketsShow extends BaseCommand {
         project: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
     };
     run(): Promise<unknown>;
+    /** Read every page of a collection endpoint: the discussion must be complete, not just page 1. */
+    private fetchAllPages;
+    private renderAttachments;
+    private renderComments;
+    private renderTicket;
 }

package/dist/commands/tickets/show.js

@@ -4,20 +4,104 @@ const core_1 = require("@oclif/core");
 const base_1 = require("../../base");
 const output_1 = require("../../lib/output");
 class TicketsShow extends base_1.BaseCommand {
-    static description = 'Show a single ticket';
-    static examples = ['<%= config.bin %> tickets show <ticket-id> --project acme-api'];
+    static description = 'Show a single ticket in full: body (description + Given/When/Then/Expected), comments (with their files) and attachments';
+    static examples = [
+        '<%= config.bin %> tickets show <ticket-id> --project acme-api',
+        '<%= config.bin %> tickets show DRFL-3 --project driverone-flutter',
+        '<%= config.bin %> tickets show DRFL-3 -p driverone-flutter --json',
+    ];
     static args = {
-        id: core_1.Args.string({ description: 'Ticket id or code', required: true }),
+        id: core_1.Args.string({ description: 'Ticket id or code (e.g. DRFL-3)', required: true }),
     };
     static flags = { ...base_1.projectFlag };
     async run() {
         const { args, flags } = await this.parse(TicketsShow);
         const projectId = await this.resolveProjectId(flags.project);
-        const res = await this.api.get(`/cli/v1/projects/${projectId}/tickets/${args.id}`);
+        const base = `/cli/v1/projects/${encodeURIComponent(projectId)}/tickets/${encodeURIComponent(args.id)}`;
+        // The show is the analysis entry point: always the WHOLE ticket in one command
+        // (fields + full discussion + attachments), so nothing stays hidden behind extra calls.
+        const res = await this.api.get(base);
+        const ticket = res.data ?? {};
+        const comments = await this.fetchAllPages(`${base}/comments`);
+        const attachments = await this.fetchAllPages(`${base}/attachments`);
         if (!this.jsonEnabled()) {
-            this.log((0, output_1.renderRecord)(res.data ?? {}));
+            this.renderTicket(ticket);
+            this.renderComments(comments);
+            this.renderAttachments(attachments);
+        }
+        return { data: { ...ticket, comments, attachments } };
+    }
+    /** Read every page of a collection endpoint: the discussion must be complete, not just page 1. */
+    async fetchAllPages(path) {
+        const all = [];
+        let page = 1;
+        let totalPages = 1;
+        do {
+            // eslint-disable-next-line no-await-in-loop
+            const res = await this.api.get(`${path}?page=${page}&per=100`);
+            all.push(...(Array.isArray(res.data) ? res.data : []));
+            totalPages = Number(res.meta?.total_pages ?? 1);
+            page += 1;
+        } while (page <= totalPages);
+        return all;
+    }
+    renderAttachments(attachments) {
+        this.log(`\nAttachments (${attachments.length})`);
+        if (attachments.length === 0)
+            return;
+        this.log((0, output_1.renderTable)(['ID', 'FILENAME', 'CONTENT_TYPE', 'BYTE_SIZE', 'CREATED_AT'], attachments.map((attachment) => [
+            String(attachment.id ?? ''),
+            String(attachment.filename ?? ''),
+            String(attachment.content_type ?? ''),
+            String(attachment.byte_size ?? ''),
+            String(attachment.created_at ?? ''),
+        ])));
+    }
+    renderComments(comments) {
+        this.log(`\nComments (${comments.length})`);
+        for (const comment of comments) {
+            this.log(`\n── ${(0, output_1.sanitize)(comment.author ?? '?')} · ${(0, output_1.sanitize)(comment.created_at ?? '')} · ${(0, output_1.sanitize)(comment.id ?? '')}`);
+            this.log((0, output_1.sanitizeMultiline)(comment.body ?? ''));
+            const files = Array.isArray(comment.files) ? comment.files : [];
+            for (const file of files) {
+                this.log(`   [file] ${(0, output_1.sanitize)(file.id)} · ${(0, output_1.sanitize)(file.filename)} · ${(0, output_1.sanitize)(file.content_type)} · ${(0, output_1.sanitize)(file.byte_size)} bytes`);
+            }
+        }
+    }
+    renderTicket(ticket) {
+        const platforms = Array.isArray(ticket.platforms) ? ticket.platforms.map(String).join(', ') : null;
+        this.log((0, output_1.renderRecord)({
+            id: ticket.id,
+            code: ticket.code,
+            title: ticket.title,
+            kind: ticket.kind,
+            status: ticket.status,
+            priority: ticket.priority,
+            weight: ticket.weight,
+            votes_count: ticket.votes_count,
+            assignee: ticket.assignee,
+            reporter: ticket.reporter,
+            reviewer: ticket.reviewer,
+            milestone: ticket.milestone,
+            platforms: platforms || null,
+            project_id: ticket.project_id,
+            created_at: ticket.created_at,
+            updated_at: ticket.updated_at,
+        }));
+        // Multi-line body blocks: description first, then the 4 BDD clauses (only those present).
+        const blocks = [
+            ['Description', ticket.description],
+            ['Given', ticket.step_given],
+            ['When', ticket.step_when],
+            ['Then', ticket.step_then],
+            ['Expected', ticket.step_expected],
+        ];
+        for (const [label, value] of blocks) {
+            if (value === null || value === undefined || String(value).trim() === '')
+                continue;
+            this.log(`\n${label}\n${'-'.repeat(label.length)}`);
+            this.log((0, output_1.sanitizeMultiline)(value));
         }
-        return res;
     }
 }
 exports.default = TicketsShow;

package/dist/lib/output.d.ts

@@ -1,3 +1,16 @@
+/**
+ * Neutralize terminal control sequences (CWE-150) in server-supplied strings.
+ * Log/error/ticket text is attacker-influenceable; printing raw ESC (0x1B) & co.
+ * to a TTY allows cursor/color/title injection. Replace every C0/C1 control char
+ * (0x00–0x1F, 0x7F–0x9F) with a space — ANSI is defused, width is preserved.
+ */
+export declare function sanitize(value: unknown): string;
+/**
+ * Like `sanitize`, but preserves line breaks: for multi-line bodies (ticket description,
+ * BDD clauses, comment text) where collapsing `\n` to spaces would destroy readability.
+ * Every other C0/C1 control char is still defused per line.
+ */
+export declare function sanitizeMultiline(value: unknown): string;
 /** Minimal dependency-free table renderer for human output. */
 export declare function renderTable(headers: string[], rows: string[][]): string;
 /** Pretty-print the scalar fields of a record as `key: value` lines. */

package/dist/lib/output.js

@@ -1,5 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.sanitize = sanitize;
+exports.sanitizeMultiline = sanitizeMultiline;
 exports.renderTable = renderTable;
 exports.renderRecord = renderRecord;
 /**
@@ -16,6 +18,17 @@ function sanitize(value) {
     }
     return out;
 }
+/**
+ * Like `sanitize`, but preserves line breaks: for multi-line bodies (ticket description,
+ * BDD clauses, comment text) where collapsing `\n` to spaces would destroy readability.
+ * Every other C0/C1 control char is still defused per line.
+ */
+function sanitizeMultiline(value) {
+    return String(value ?? '')
+        .split('\n')
+        .map((line) => sanitize(line))
+        .join('\n');
+}
 /** Minimal dependency-free table renderer for human output. */
 function renderTable(headers, rows) {
     const safeHeaders = headers.map(sanitize);