@vertaaux/cli 0.5.0 → 0.5.1

package/dist/utils/client.js

@@ -10,6 +10,7 @@ import { readFileSync, existsSync, lstatSync, statSync } from "fs";
 import { homedir } from "os";
 import { join } from "path";
 const DEFAULT_API_BASE = "https://vertaaux.ai/api/v1";
+const NO_API_KEY_MESSAGE = "No API key found. Run 'vertaa login' or set VERTAAUX_API_KEY environment variable.";
 /**
  * Read the stored API key from ~/.vertaaux/credentials.json (sync).
  * Returns the accessToken if the file exists and is valid JSON, else undefined.
@@ -54,6 +55,16 @@ export function resolveApiBase(flagBase, configBase) {
         DEFAULT_API_BASE;
     return raw.replace(/\/$/, "");
 }
+function requireNonEmptyApiKey(candidate) {
+    if (candidate === undefined) {
+        return undefined;
+    }
+    const trimmed = candidate.trim();
+    if (!trimmed) {
+        throw new Error(NO_API_KEY_MESSAGE);
+    }
+    return trimmed;
+}
 /**
  * Get API key from environment or config.
  *
@@ -62,9 +73,17 @@ export function resolveApiBase(flagBase, configBase) {
  * @throws Error if no API key is available
  */
 export function getApiKey(configApiKey) {
-    const key = process.env.VERTAAUX_API_KEY || configApiKey || readStoredApiKey();
+    if (Object.prototype.hasOwnProperty.call(process.env, "VERTAAUX_API_KEY")) {
+        const envKey = requireNonEmptyApiKey(process.env.VERTAAUX_API_KEY);
+        if (envKey) {
+            return envKey;
+        }
+        throw new Error(NO_API_KEY_MESSAGE);
+    }
+    const configKey = requireNonEmptyApiKey(configApiKey);
+    const key = configKey || readStoredApiKey();
     if (!key) {
-        throw new Error("No API key found. Run 'vertaa login' or set VERTAAUX_API_KEY environment variable.");
+        throw new Error(NO_API_KEY_MESSAGE);
     }
     return key;
 }
@@ -75,7 +94,13 @@ export function getApiKey(configApiKey) {
  * @returns true if API key is available
  */
 export function hasApiKey(config) {
-    return Boolean(process.env.VERTAAUX_API_KEY || config?.apiKey || readStoredApiKey());
+    if (Object.prototype.hasOwnProperty.call(process.env, "VERTAAUX_API_KEY")) {
+        return Boolean(process.env.VERTAAUX_API_KEY?.trim());
+    }
+    if (config?.apiKey !== undefined) {
+        return Boolean(config.apiKey.trim());
+    }
+    return Boolean(readStoredApiKey());
 }
 /**
  * Create a VertaaUX SDK client instance.
@@ -89,31 +114,8 @@ export function hasApiKey(config) {
  */
 export function createClient(options) {
     const baseUrl = resolveApiBase(options?.base);
-    const apiKey = options?.apiKey ?? getApiKey();
-    // The SDK uses `new URL(path, baseUrl)` in buildUrl(), but SDK paths have
-    // leading slashes (e.g. "/audit"), which makes new URL treat them as absolute
-    // and strips the base path. Work around this by providing a custom fetch that
-    // intercepts URLs and reconstructs them with string concatenation.
-    const baseFetch = globalThis.fetch;
-    const patchedFetch = (input, init) => {
-        if (typeof input === "string") {
-            // If the URL lost its path prefix, reconstruct it.
-            // e.g. "https://vertaaux.ai/audit" → "https://vertaaux.ai/api/v1/audit"
-            try {
-                const parsed = new URL(input);
-                const baseOrigin = new URL(baseUrl).origin;
-                if (parsed.origin === baseOrigin && !input.startsWith(baseUrl)) {
-                    const fixedUrl = baseUrl.replace(/\/$/, "") + parsed.pathname + parsed.search;
-                    return baseFetch(fixedUrl, init);
-                }
-            }
-            catch {
-                // Not a valid URL, pass through
-            }
-        }
-        return baseFetch(input, init);
-    };
-    return new VertaaUX({ apiKey, baseUrl, fetch: patchedFetch });
+    const apiKey = requireNonEmptyApiKey(options?.apiKey) ?? getApiKey();
+    return new VertaaUX({ apiKey, baseUrl });
 }
 /**
  * Make an authenticated API request.

package/dist/utils/root-args.d.ts

@@ -0,0 +1,12 @@
+export declare function hasHelpOrVersionFlag(args: string[]): boolean;
+/**
+ * Return the first non-option token after skipping root global options.
+ *
+ * This keeps the "launch interactive app when no command is present" behavior
+ * while still allowing global flags to appear before the subcommand:
+ *
+ *   vertaa --machine doctor
+ *   vertaa --base https://api.example.test audit https://example.com
+ */
+export declare function getRootCommandToken(args: string[]): string | undefined;
+//# sourceMappingURL=root-args.d.ts.map

package/dist/utils/root-args.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"root-args.d.ts","sourceRoot":"","sources":["../../src/utils/root-args.ts"],"names":[],"mappings":"AAcA,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAE5D;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAyBtE"}

package/dist/utils/root-args.js

@@ -0,0 +1,44 @@
+const ROOT_OPTIONS_WITH_VALUES = new Set([
+    "-b",
+    "--base",
+    "-c",
+    "--config",
+]);
+const HELP_OR_VERSION_FLAGS = new Set([
+    "-h",
+    "--help",
+    "-v",
+    "--version",
+]);
+export function hasHelpOrVersionFlag(args) {
+    return args.some((arg) => HELP_OR_VERSION_FLAGS.has(arg));
+}
+/**
+ * Return the first non-option token after skipping root global options.
+ *
+ * This keeps the "launch interactive app when no command is present" behavior
+ * while still allowing global flags to appear before the subcommand:
+ *
+ *   vertaa --machine doctor
+ *   vertaa --base https://api.example.test audit https://example.com
+ */
+export function getRootCommandToken(args) {
+    for (let i = 0; i < args.length; i++) {
+        const arg = args[i];
+        if (arg === "--") {
+            return args[i + 1];
+        }
+        if (ROOT_OPTIONS_WITH_VALUES.has(arg)) {
+            i++;
+            continue;
+        }
+        if (arg.startsWith("--base=") || arg.startsWith("--config=")) {
+            continue;
+        }
+        if (arg.startsWith("-")) {
+            continue;
+        }
+        return arg;
+    }
+    return undefined;
+}

package/dist/utils/stdin.d.ts

@@ -16,6 +16,13 @@ export interface StdinResult {
     /** Whether the input was valid JSON */
     isJson: boolean;
 }
+/**
+ * Unwrap the standard CLI JSON envelope shape ({ meta, data }).
+ *
+ * Commands that consume the output of other VertaaUX commands usually want
+ * the payload under `data`, not the outer provenance metadata.
+ */
+export declare function unwrapJsonEnvelope<T = unknown>(input: unknown): T;
 /**
  * Check if stdin has piped data available.
  */

package/dist/utils/stdin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"stdin.d.ts","sourceRoot":"","sources":["../../src/utils/stdin.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,oCAAoC;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,0DAA0D;IAC1D,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC;IACrB,uCAAuC;IACvC,MAAM,EAAE,OAAO,CAAC;CACjB;AAED;;GAEG;AACH,wBAAgB,aAAa,IAAI,OAAO,CAEvC;AAED;;;;;;;GAOG;AACH,wBAAsB,SAAS,IAAI,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CA2B7D;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,aAAa,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CA+B9E;AAED;;;;GAIG;AACH,wBAAsB,aAAa,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAG5D"}
+{"version":3,"file":"stdin.d.ts","sourceRoot":"","sources":["../../src/utils/stdin.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,oCAAoC;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,0DAA0D;IAC1D,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC;IACrB,uCAAuC;IACvC,MAAM,EAAE,OAAO,CAAC;CACjB;AAqBD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,GAAG,CAAC,CAKjE;AAED;;GAEG;AACH,wBAAgB,aAAa,IAAI,OAAO,CAEvC;AAED;;;;;;;GAOG;AACH,wBAAsB,SAAS,IAAI,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CA2B7D;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,aAAa,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CA+B9E;AAED;;;;GAIG;AACH,wBAAsB,aAAa,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAG5D"}

package/dist/utils/stdin.js

@@ -5,6 +5,36 @@
  * and provides a consistent interface for all commands that accept
  * piped data (explain, triage, fix-plan, patch-review, etc.).
  */
+/**
+ * Detect the standard CLI JSON envelope shape ({ meta, data }).
+ *
+ * Only matches when `meta` contains `command` and `version` — the fields
+ * that `createEnvelope()` always emits — so legitimate JSON payloads that
+ * happen to have a top-level `data` key are left untouched.
+ */
+function isVertaaEnvelope(input) {
+    if (!input || typeof input !== "object" || !("meta" in input) || !("data" in input)) {
+        return false;
+    }
+    const meta = input.meta;
+    if (!meta || typeof meta !== "object") {
+        return false;
+    }
+    const { command, version } = meta;
+    return command !== undefined && version !== undefined;
+}
+/**
+ * Unwrap the standard CLI JSON envelope shape ({ meta, data }).
+ *
+ * Commands that consume the output of other VertaaUX commands usually want
+ * the payload under `data`, not the outer provenance metadata.
+ */
+export function unwrapJsonEnvelope(input) {
+    if (isVertaaEnvelope(input)) {
+        return input.data;
+    }
+    return input;
+}
 /**
  * Check if stdin has piped data available.
  */
@@ -64,7 +94,7 @@ export async function readJsonInput(filePath) {
         }
         const content = fs.readFileSync(resolved, "utf-8");
         try {
-            return JSON.parse(content);
+            return unwrapJsonEnvelope(JSON.parse(content));
         }
         catch {
             throw new Error(`Invalid JSON in file: ${filePath}`);
@@ -77,7 +107,7 @@ export async function readJsonInput(filePath) {
             throw new Error("Could not parse input as JSON. If piping from vertaa, use --json flag:\n" +
                 "  vertaa audit https://example.com --json | vertaa explain");
         }
-        return stdin.json;
+        return unwrapJsonEnvelope(stdin.json);
     }
     // No input found
     return null;