@codacy/verity-cli 0.26.0-experimental.fb8a404 → 0.27.0-experimental.1106a16

package/bin/verity.js

@@ -10477,6 +10477,11 @@ var DEFAULT_SERVICE_URL = "https://yyfaqvcgslcrzvrbvqik.supabase.co/functions/v1
 var GITHUB_CLIENT_ID = "Iv23li88HxAi3ZrbYzWh";
 var GITHUB_DEVICE_CODE_URL = "https://github.com/login/device/code";
 var GITHUB_ACCESS_TOKEN_URL = "https://github.com/login/oauth/access_token";
+var GITHUB_APP_SLUG = "verity-auth";
+var GITHUB_APP_INSTALL_URL = `https://github.com/apps/${GITHUB_APP_SLUG}/installations/new`;
+function githubAppInstallUrl(accountId) {
+  return accountId != null ? `https://github.com/apps/${GITHUB_APP_SLUG}/installations/new/permissions?target_id=${accountId}` : GITHUB_APP_INSTALL_URL;
+}
 
 // src/lib/auth.ts
 async function resolveToken(flagToken) {
@@ -10748,10 +10753,48 @@ function analyzeRequest(options) {
 // src/lib/register.ts
 var import_promises3 = require("node:fs/promises");
 var import_node_path3 = require("node:path");
+var readline = __toESM(require("node:readline/promises"));
 
 // src/lib/provider-auth.ts
 var sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
 var form = (fields) => new URLSearchParams(fields).toString();
+async function githubAccountId(owner) {
+  try {
+    const res = await fetch(`https://api.github.com/users/${encodeURIComponent(owner)}`, {
+      headers: {
+        Accept: "application/vnd.github+json",
+        "X-GitHub-Api-Version": "2022-11-28",
+        "User-Agent": "verity-cli"
+      }
+    });
+    if (!res.ok) return null;
+    const body = await res.json();
+    return typeof body.id === "number" ? body.id : null;
+  } catch {
+    return null;
+  }
+}
+async function githubCanSeeRepo(owner, repo, token) {
+  let res;
+  try {
+    res = await fetch(
+      `https://api.github.com/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}`,
+      {
+        headers: {
+          Authorization: `Bearer ${token}`,
+          Accept: "application/vnd.github+json",
+          "X-GitHub-Api-Version": "2022-11-28",
+          "User-Agent": "verity-cli"
+        }
+      }
+    );
+  } catch (err) {
+    return { ok: false, error: `Network error contacting GitHub: ${err.message}` };
+  }
+  if (res.status === 404) return { ok: true, data: false };
+  if (res.ok) return { ok: true, data: true };
+  return { ok: false, error: `GitHub repo lookup failed (HTTP ${res.status})` };
+}
 async function githubDeviceFlow() {
   const override = process.env.VERITY_PROVIDER_TOKEN;
   if (override) return { ok: true, data: override };
@@ -11068,6 +11111,34 @@ function listTrackedFiles() {
 }
 
 // src/lib/register.ts
+var isInteractive = () => Boolean(process.stdin.isTTY && process.stdout.isTTY);
+async function waitForEnter(prompt) {
+  if (!isInteractive()) return;
+  const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+  try {
+    await rl.question(prompt);
+  } finally {
+    rl.close();
+  }
+}
+async function ensureAppInstalled(owner, repo, token, installUrl) {
+  const notInstalledError = {
+    ok: false,
+    error: `The Verity GitHub App can't see ${owner}/${repo}. Install it on "${owner}" and grant access to this repository, then re-run:
+  ${installUrl}`
+  };
+  const maxAttempts = 3;
+  for (let attempt = 1; ; attempt++) {
+    const visible = await githubCanSeeRepo(owner, repo, token);
+    if (!visible.ok) return { ok: true, data: void 0 };
+    if (visible.data) return { ok: true, data: void 0 };
+    if (!isInteractive() || attempt >= maxAttempts) return notInstalledError;
+    printWarn(`The Verity GitHub App can't see ${owner}/${repo} yet.`);
+    printInfo(`Install it on "${owner}" (grant access to this repo):`);
+    printInfo(`  ${installUrl}`);
+    await waitForEnter("Press Enter once installed to retry\u2026 ");
+  }
+}
 async function registerProject(opts) {
   const parsed = parseRemote(opts.remote);
   if (!parsed) {
@@ -11076,11 +11147,27 @@ async function registerProject(opts) {
   if (parsed.provider !== "github") {
     return { ok: false, error: `Provider '${parsed.provider}' is not supported yet \u2014 GitHub only for now.` };
   }
+  const usingTokenOverride = Boolean(process.env.VERITY_PROVIDER_TOKEN);
+  const ownerId = usingTokenOverride ? null : await githubAccountId(parsed.owner);
+  const installUrl = githubAppInstallUrl(ownerId);
+  if (!usingTokenOverride && isInteractive()) {
+    printInfo("");
+    printInfo(`Verity uses a read-only GitHub App to verify write access to ${parsed.owner}/${parsed.repo}.`);
+    printInfo(`Install it on "${parsed.owner}" (grant access to this repo) if you haven't already:`);
+    printInfo(`  ${installUrl}`);
+    await waitForEnter("Press Enter to continue to GitHub authorization\u2026 ");
+  }
   const providerAuth = await githubDeviceFlow();
   if (!providerAuth.ok) {
     return { ok: false, error: providerAuth.error };
   }
   const providerToken = providerAuth.data;
+  if (!usingTokenOverride) {
+    const installed = await ensureAppInstalled(parsed.owner, parsed.repo, providerToken, installUrl);
+    if (!installed.ok) {
+      return { ok: false, error: installed.error };
+    }
+  }
   const result = await apiRequest({
     method: "POST",
     path: "/auth/register",
@@ -15847,7 +15934,7 @@ var import_node_fs24 = require("node:fs");
 var import_promises13 = require("node:fs/promises");
 var import_node_path18 = require("node:path");
 var import_node_child_process9 = require("node:child_process");
-var readline = __toESM(require("node:readline/promises"));
+var readline2 = __toESM(require("node:readline/promises"));
 
 // src/commands/migrate.ts
 var import_node_fs23 = require("node:fs");
@@ -16129,7 +16216,7 @@ function registerMigrateCommand(program2) {
 // src/commands/init.ts
 async function promptYes(question) {
   if (!process.stdin.isTTY || !process.stdout.isTTY) return false;
-  const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+  const rl = readline2.createInterface({ input: process.stdin, output: process.stdout });
   try {
     const answer = (await rl.question(question)).trim().toLowerCase();
     return answer === "" || answer === "y" || answer === "yes";
@@ -17080,7 +17167,7 @@ function registerTelemetryCommands(program2) {
 }
 
 // src/cli.ts
-program.name("verity").description("CLI for Verity quality gate service").version("0.26.0-experimental.fb8a404").option("--token <token>", "Override authentication token").option("--service-url <url>", "Override service URL").option("--verbose", "Log HTTP requests/responses to stderr");
+program.name("verity").description("CLI for Verity quality gate service").version("0.27.0-experimental.1106a16").option("--token <token>", "Override authentication token").option("--service-url <url>", "Override service URL").option("--verbose", "Log HTTP requests/responses to stderr");
 registerAuthCommands(program);
 registerHooksCommands(program);
 registerIntentCommands(program);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@codacy/verity-cli",
-  "version": "0.26.0-experimental.fb8a404",
+  "version": "0.27.0-experimental.1106a16",
   "description": "CLI for Verity quality gate service",
   "homepage": "https://verity.md",
   "repository": {