@kb-labs/cli-commands 2.96.0 → 2.98.0

package/dist/index.js

@@ -11,7 +11,7 @@ import { glob } from 'glob';
 import { defineSystemCommand, defineSystemCommandGroup } from '@kb-labs/shared-command-kit';
 import { createRegistry as createRegistry$1, formatDiagnosticReport } from '@kb-labs/core-registry';
 import { createRequire } from 'module';
-import { platform, platformSync } from '@kb-labs/core-runtime';
+import { platform, platformSync, loadPlatformConfig } from '@kb-labs/core-runtime';
 import { getLogLevel, colors } from '@kb-labs/cli-runtime';
 import { access, readFile } from 'fs/promises';
 import { CredentialsManager } from '@kb-labs/cli-runtime/gateway';
@@ -19,8 +19,13 @@ import os from 'os';
 
 var __defProp = Object.defineProperty;
 var __getOwnPropNames = Object.getOwnPropertyNames;
-var __esm = (fn, res) => function __init() {
-  return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+var __esm = (fn, res, err) => function __init() {
+  if (err) throw err[0];
+  try {
+    return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+  } catch (e) {
+    throw err = [e], e;
+  }
 };
 var __export = (target, all) => {
   for (var name in all)
@@ -4468,6 +4473,174 @@ var webhookRevoke = defineSystemCommand({
     return { ok: true };
   }
 });
+var SENSITIVE_FIELD_PATTERN = /key|secret|token|password|jwt|credential/i;
+function isSensitiveField(dottedField) {
+  return dottedField.split(".").some((segment) => SENSITIVE_FIELD_PATTERN.test(segment));
+}
+var REDACTED = "***REDACTED***";
+function flatten(prefix, value, out) {
+  if (value !== null && typeof value === "object" && !Array.isArray(value)) {
+    const entries = Object.entries(value);
+    if (entries.length === 0) {
+      out.push({ field: prefix, value: {} });
+      return;
+    }
+    for (const [key, nested] of entries) {
+      flatten(prefix ? `${prefix}.${key}` : key, nested, out);
+    }
+    return;
+  }
+  out.push({ field: prefix, value });
+}
+function redactLeaf(field, value) {
+  if (isSensitiveField(field)) {
+    return REDACTED;
+  }
+  return redactNested(field, value);
+}
+function redactNested(fieldPath, value) {
+  if (Array.isArray(value)) {
+    return value.map((item) => redactNested(fieldPath, item));
+  }
+  if (value !== null && typeof value === "object") {
+    const out = {};
+    for (const [key, nested] of Object.entries(value)) {
+      const childPath = fieldPath ? `${fieldPath}.${key}` : key;
+      out[key] = isSensitiveField(childPath) ? REDACTED : redactNested(childPath, nested);
+    }
+    return out;
+  }
+  return value;
+}
+var PLATFORM_SCOPE_FIELDS = /* @__PURE__ */ new Set(["platform", "adapters", "adapterOptions", "core", "execution"]);
+function buildRows(result) {
+  const rows = [];
+  const fieldSources = result.sources.fields ?? {};
+  const defaultOtherSource = result.sameLocation ? "both" : "project";
+  const platformConfig = result.platformConfig;
+  for (const [topField, rawSource] of Object.entries(fieldSources)) {
+    const value = platformConfig[topField];
+    if (value === void 0) {
+      continue;
+    }
+    const source = result.sameLocation ? "both" : rawSource;
+    const leaves = [];
+    flatten(topField, value, leaves);
+    for (const leaf of leaves) {
+      rows.push({ source, field: leaf.field, value: redactLeaf(leaf.field, leaf.value) });
+    }
+  }
+  for (const ignoredField of result.sources.ignoredProjectFields ?? []) {
+    const value = platformConfig[ignoredField];
+    const leaves = [];
+    flatten(ignoredField, value, leaves);
+    for (const leaf of leaves) {
+      rows.push({ source: "ignored", field: leaf.field, value: redactLeaf(leaf.field, leaf.value) });
+    }
+  }
+  const rawPlatformConfig = result.rawPlatformConfig ?? {};
+  const effectiveConfig = result.effectiveConfig ?? {};
+  const otherTopFields = /* @__PURE__ */ new Set([...Object.keys(rawPlatformConfig), ...Object.keys(effectiveConfig)]);
+  for (const topField of otherTopFields) {
+    if (PLATFORM_SCOPE_FIELDS.has(topField)) {
+      continue;
+    }
+    const hasPlatform = rawPlatformConfig[topField] !== void 0;
+    const hasProject = effectiveConfig[topField] !== void 0;
+    let source;
+    let value;
+    if (result.sameLocation) {
+      source = "both";
+      value = hasProject ? effectiveConfig[topField] : rawPlatformConfig[topField];
+    } else if (hasPlatform && hasProject) {
+      source = "both";
+      value = effectiveConfig[topField];
+    } else if (hasProject) {
+      source = defaultOtherSource;
+      value = effectiveConfig[topField];
+    } else {
+      source = "platform";
+      value = rawPlatformConfig[topField];
+    }
+    const leaves = [];
+    flatten(topField, value, leaves);
+    for (const leaf of leaves) {
+      rows.push({ source, field: leaf.field, value: redactLeaf(leaf.field, leaf.value) });
+    }
+  }
+  rows.sort((a, b) => a.source === b.source ? a.field.localeCompare(b.field) : a.source.localeCompare(b.source));
+  return rows;
+}
+function formatValue(value) {
+  if (typeof value === "string") {
+    return value;
+  }
+  return JSON.stringify(value);
+}
+var configShow = defineSystemCommand({
+  name: "show",
+  description: "Show the effective (merged) platform config with per-field provenance",
+  longDescription: "Resolves the fully-merged platform config (platform root + project overrides) and prints each field alongside where it came from: platform, project, both, or ignored (a project attempt to override a platform-only field). Sensitive values (keys, secrets, tokens, passwords, credentials) are always redacted.",
+  category: "config",
+  aliases: [],
+  examples: generateExamples("config show", "kb", [
+    { flags: {} },
+    { flags: { json: true } }
+  ]),
+  flags: {
+    json: { type: "boolean", description: "Output machine-readable JSON" }
+  },
+  analytics: {
+    command: "config.show",
+    startEvent: "CONFIG_SHOW_STARTED",
+    finishEvent: "CONFIG_SHOW_FINISHED"
+  },
+  async handler(ctx) {
+    const cwd = getContextCwd(ctx);
+    const result = await loadPlatformConfig({ startDir: cwd, loadEnvFile: false });
+    const rows = buildRows(result);
+    return {
+      ok: true,
+      status: "success",
+      rows,
+      sameLocation: result.sameLocation,
+      platformRoot: result.platformRoot,
+      projectRoot: result.projectRoot
+    };
+  },
+  formatter(result, ctx, flags) {
+    const rows = result.rows ?? [];
+    if (flags.json) {
+      ctx.ui?.json?.({
+        sameLocation: result.sameLocation,
+        platformRoot: result.platformRoot,
+        projectRoot: result.projectRoot,
+        fields: rows
+      });
+      return;
+    }
+    if (rows.length === 0) {
+      ctx.ui.success("Effective Config", {
+        sections: [{ header: "Config", items: ["No config fields resolved."] }]
+      });
+      return;
+    }
+    const fieldWidth = Math.max(...rows.map((r) => r.field.length), "FIELD".length);
+    const sourceWidth = Math.max(...rows.map((r) => r.source.length), "SOURCE".length);
+    const lines = [
+      `${"SOURCE".padEnd(sourceWidth)}  ${"FIELD".padEnd(fieldWidth)}  VALUE`,
+      ...rows.map(
+        (r) => `${r.source.padEnd(sourceWidth)}  ${r.field.padEnd(fieldWidth)}  ${formatValue(r.value)}`
+      )
+    ];
+    if (result.sameLocation) {
+      lines.push("", "(sameLocation: platform and project resolve to the same file \u2014 merge is a no-op)");
+    }
+    ctx.ui.success("Effective Config", {
+      sections: [{ header: "Config", items: lines }]
+    });
+  }
+});
 
 // src/commands/system/groups.ts
 var infoGroup = defineSystemCommandGroup("info", "System information commands", [
@@ -4505,6 +4678,9 @@ var webhookGroup = defineSystemCommandGroup("webhook", "Webhook management comma
   webhookList,
   webhookRevoke
 ]);
+var configGroup = defineSystemCommandGroup("config", "Config inspection commands", [
+  configShow
+]);
 var MARKER = "# kb completion";
 var ALIAS_MARKER = "# kb alias";
 var STATIC_FILE = path.join(os.homedir(), ".config", "kb", "completion.zsh");
@@ -4808,6 +4984,7 @@ async function registerBuiltinCommands(input = {}) {
   registry.registerGroup(authGroup);
   registry.registerGroup(platformGroup);
   registry.registerGroup(webhookGroup);
+  registry.registerGroup(configGroup);
   registry.register(createCompletionCommand(registry));
   registry.register(diag);
   try {