@vizzly-testing/cli 0.39.0 → 0.39.2

package/dist/reporter-ssr/ssr-entry.js

@@ -1,11 +1,10 @@
 import { renderToString } from "react-dom/server";
 import { Fragment, jsx, jsxs } from "react/jsx-runtime";
-//#region src/utils/status-utils.js
+// src/domains/review/status-utils.js
 function isNewComparisonStatus(status) {
 	return status === "new" || status === "baseline-created";
 }
-//#endregion
-//#region src/components/static-report-view.jsx
+// src/domains/reports/static-report-view.jsx
 /**
 * Static Report View
 *
@@ -637,8 +636,7 @@ function StaticReportView({ reportData }) {
 		})]
 	});
 }
-//#endregion
-//#region src/ssr-entry.jsx
+// src/ssr-entry.jsx
 /**
 * SSR Entry Point
 *
@@ -653,5 +651,4 @@ function StaticReportView({ reportData }) {
 function renderStaticReport(reportData) {
 	return renderToString(/* @__PURE__ */ jsx(StaticReportView, { reportData }));
 }
-//#endregion
 export { renderStaticReport };

package/dist/shared/cloud-protocol.js

@@ -0,0 +1,171 @@
+import { URLSearchParams } from 'node:url';
+
+/**
+ * Build Authorization header for Bearer token auth
+ * @param {string|null} token - API token
+ * @returns {Object} Headers object with Authorization if token provided
+ */
+export function buildAuthHeader(token) {
+  if (!token) return {};
+  return {
+    Authorization: `Bearer ${token}`
+  };
+}
+
+/**
+ * Build User-Agent string from components
+ * @param {string} version - CLI version
+ * @param {string} command - Command being executed (run, upload, tdd, etc.)
+ * @param {string|null} sdkUserAgent - Optional SDK user agent to append
+ * @param {string} nodeVersion - Node.js version to append
+ * @returns {string} Complete User-Agent string
+ */
+export function buildUserAgent(version, command, sdkUserAgent = null, nodeVersion = process.versions.node) {
+  let baseUserAgent = `vizzly-cli/${version} (${command})`;
+  let userAgentParts = [baseUserAgent];
+  if (sdkUserAgent) {
+    userAgentParts.push(sdkUserAgent);
+  }
+  if (nodeVersion) userAgentParts.push(`node/${nodeVersion}`);
+  return userAgentParts.join(' ');
+}
+
+/**
+ * Build complete request headers
+ * @param {Object} options - Header options
+ * @param {string|null} options.token - API token
+ * @param {string} options.userAgent - User-Agent string
+ * @param {string|null} options.contentType - Content-Type header
+ * @param {Object} options.extra - Additional headers to merge
+ * @returns {Object} Complete headers object
+ */
+export function buildRequestHeaders({
+  token,
+  userAgent,
+  contentType = null,
+  extra = {}
+}) {
+  let headers = {
+    'User-Agent': userAgent,
+    ...buildAuthHeader(token),
+    ...extra
+  };
+  if (contentType) {
+    headers['Content-Type'] = contentType;
+  }
+  return headers;
+}
+
+/**
+ * Build URL query parameters from filter object
+ * @param {Object} filters - Filter key-value pairs
+ * @returns {string} URL-encoded query string (without leading ?)
+ */
+export function buildQueryParams(filters) {
+  let params = new URLSearchParams();
+  for (let [key, value] of Object.entries(filters)) {
+    if (value != null && value !== '') {
+      params.append(key, String(value));
+    }
+  }
+  return params.toString();
+}
+
+/**
+ * Check if HTTP status indicates an auth error
+ * @param {number} status - HTTP status code
+ * @returns {boolean} True if auth error
+ */
+export function isAuthError(status) {
+  return status === 401;
+}
+
+/**
+ * Check if HTTP status indicates rate limiting
+ * @param {number} status - HTTP status code
+ * @returns {boolean} True if rate limited
+ */
+export function isRateLimited(status) {
+  return status === 429;
+}
+
+/**
+ * Parse error information from API response
+ * @param {number} status - HTTP status code
+ * @param {string} body - Response body text
+ * @param {string} url - Request URL
+ * @returns {Object} Parsed error info with message and code
+ */
+export function parseApiError(status, body, url) {
+  let message = `API request failed: ${status}`;
+  let responseDetails = null;
+  let responseCode = null;
+  let responseMessage = body;
+  if (body) {
+    try {
+      let parsedBody = JSON.parse(body);
+      responseDetails = parsedBody.details ?? null;
+      responseCode = parsedBody.code ?? parsedBody.details?.code ?? null;
+      responseMessage = parsedBody.error ?? parsedBody.message ?? body;
+    } catch {
+      // Plain-text API errors remain valid and are surfaced unchanged.
+    }
+  }
+  if (responseMessage) {
+    message += ` - ${responseMessage}`;
+  }
+  message += ` (URL: ${url})`;
+  let code = 'API_ERROR';
+  if (status === 401) code = 'AUTH_ERROR';
+  if (status === 403) code = 'FORBIDDEN';
+  if (status === 404) code = 'NOT_FOUND';
+  if (status === 429) code = 'RATE_LIMITED';
+  if (status >= 500) code = 'SERVER_ERROR';
+  return {
+    message,
+    code: responseCode || code,
+    status,
+    details: responseDetails
+  };
+}
+
+/**
+ * Extract error message from response body (JSON or text)
+ * @param {Response} response - Fetch Response object
+ * @returns {Promise<string>} Error message
+ */
+export async function extractErrorBody(response) {
+  try {
+    if (typeof response.text === 'function') {
+      return await response.text();
+    }
+    return response.statusText || '';
+  } catch {
+    return '';
+  }
+}
+
+/**
+ * Build full API URL from base and endpoint
+ * @param {string} baseUrl - Base API URL
+ * @param {string} endpoint - API endpoint (should start with /)
+ * @returns {string} Full URL
+ */
+export function buildApiUrl(baseUrl, endpoint) {
+  // Remove trailing slash from base, ensure endpoint starts with /
+  let base = baseUrl.replace(/\/$/, '');
+  let path = endpoint.startsWith('/') ? endpoint : `/${endpoint}`;
+  return `${base}${path}`;
+}
+
+/**
+ * Build endpoint URL with optional query params
+ * @param {string} endpoint - Base endpoint
+ * @param {Object} params - Query parameters
+ * @returns {string} Endpoint with query string
+ */
+export function buildEndpointWithParams(endpoint, params = {}) {
+  let query = buildQueryParams(params);
+  if (!query) return endpoint;
+  return `${endpoint}?${query}`;
+}

package/dist/{utils → shared}/file-changes.js

@@ -2,7 +2,7 @@ import { randomUUID } from 'node:crypto';
 import { constants } from 'node:fs';
 import { access, lstat, mkdir, rename, rm, writeFile } from 'node:fs/promises';
 import path from 'node:path';
-import { readOptionalFile } from './config-discovery.js';
+import { readOptionalFile } from './files.js';
 export async function fileChange(filename, after) {
   let before = await readOptionalFile(filename);
   return before === after ? null : {

package/dist/shared/files.js

@@ -0,0 +1,9 @@
+import { readFile } from 'node:fs/promises';
+export async function readOptionalFile(filename) {
+  try {
+    return await readFile(filename, 'utf8');
+  } catch (error) {
+    if (error.code === 'ENOENT') return null;
+    throw error;
+  }
+}

package/dist/{utils → shared}/global-config.js

@@ -1,3 +1,5 @@
+/** Global Vizzly JSON settings and external-tool paths. */
+
 /**
  * Global User Configuration Utilities
  * Manages ~/.vizzly/config.json for storing authentication tokens
@@ -52,7 +54,7 @@ export function getGlobalConfigPath() {
  * @returns {Promise<void>}
  */
 async function ensureGlobalConfigDir() {
-  const dir = getGlobalConfigDir();
+  let dir = getGlobalConfigDir();
   if (!existsSync(dir)) {
     await mkdir(dir, {
       recursive: true,
@@ -67,11 +69,11 @@ async function ensureGlobalConfigDir() {
  */
 export async function loadGlobalConfig() {
   try {
-    const configPath = getGlobalConfigPath();
+    let configPath = getGlobalConfigPath();
     if (!existsSync(configPath)) {
       return {};
     }
-    const content = await readFile(configPath, 'utf-8');
+    let content = await readFile(configPath, 'utf-8');
     return JSON.parse(content);
   } catch (error) {
     // If file doesn't exist or is corrupted, return empty config
@@ -92,8 +94,8 @@ export async function loadGlobalConfig() {
  */
 export async function saveGlobalConfig(config) {
   await ensureGlobalConfigDir();
-  const configPath = getGlobalConfigPath();
-  const content = JSON.stringify(config, null, 2);
+  let configPath = getGlobalConfigPath();
+  let content = JSON.stringify(config, null, 2);
 
   // Write file with secure permissions (owner read/write only)
   await writeFile(configPath, content, {
@@ -143,77 +145,4 @@ export async function saveUserPath() {
 export async function getUserPath() {
   let config = await loadGlobalConfig();
   return config.userPath || null;
-}
-
-/**
- * Get authentication tokens from global config
- * @returns {Promise<Object|null>} Token object with accessToken, refreshToken, expiresAt, user, or null if not found
- */
-export async function getAuthTokens() {
-  const config = await loadGlobalConfig();
-  if (!config.auth?.accessToken) {
-    return null;
-  }
-  return config.auth;
-}
-
-/**
- * Save authentication tokens to global config
- * @param {Object} auth - Auth object with accessToken, refreshToken, expiresAt, user
- * @returns {Promise<void>}
- */
-export async function saveAuthTokens(auth) {
-  const config = await loadGlobalConfig();
-  config.auth = {
-    accessToken: auth.accessToken,
-    refreshToken: auth.refreshToken,
-    expiresAt: auth.expiresAt,
-    user: auth.user
-  };
-  await saveGlobalConfig(config);
-}
-
-/**
- * Clear authentication tokens from global config
- * @returns {Promise<void>}
- */
-export async function clearAuthTokens() {
-  const config = await loadGlobalConfig();
-  delete config.auth;
-  await saveGlobalConfig(config);
-}
-
-/**
- * Check if authentication tokens exist and are not expired
- * @returns {Promise<boolean>} True if valid tokens exist
- */
-export async function hasValidTokens() {
-  const auth = await getAuthTokens();
-  if (!auth?.accessToken) {
-    return false;
-  }
-
-  // Check if token is expired
-  if (auth.expiresAt) {
-    const expiresAt = new Date(auth.expiresAt);
-    const now = new Date();
-
-    // Consider expired if within 5 minutes of expiry
-    const bufferMs = 5 * 60 * 1000;
-    if (now.getTime() >= expiresAt.getTime() - bufferMs) {
-      return false;
-    }
-  }
-  return true;
-}
-
-/**
- * Get the access token from global config if valid and not expired
- * @returns {Promise<string|null>} Access token or null
- */
-export async function getAccessToken() {
-  let valid = await hasValidTokens();
-  if (!valid) return null;
-  let auth = await getAuthTokens();
-  return auth?.accessToken || null;
 }

package/dist/shared/log-level.js

@@ -0,0 +1,7 @@
+/**
+ * Get log level from environment
+ * @returns {string} Log level with default
+ */
+export function getLogLevel() {
+  return process.env.VIZZLY_LOG_LEVEL || 'info';
+}

package/dist/{utils → shared}/output.js

@@ -11,7 +11,7 @@
 import { appendFileSync, mkdirSync, writeFileSync } from 'node:fs';
 import { dirname } from 'node:path';
 import { createColors } from './colors.js';
-import { getLogLevel as getEnvLogLevel } from './environment-config.js';
+import { getLogLevel as getEnvLogLevel } from './log-level.js';
 
 /**
  * Log levels in order of severity (lowest to highest)

package/dist/{utils → shared}/package-info.js

@@ -4,11 +4,12 @@
  */
 
 import { readFileSync } from 'node:fs';
-import { dirname, join } from 'node:path';
+import { join } from 'node:path';
 import { fileURLToPath } from 'node:url';
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = dirname(__filename);
 let packageJson;
+export function getPackageRoot() {
+  return fileURLToPath(new URL('../..', import.meta.url));
+}
 
 /**
  * Get package.json information
@@ -16,7 +17,7 @@ let packageJson;
  */
 export function getPackageInfo() {
   if (!packageJson) {
-    packageJson = JSON.parse(readFileSync(join(__dirname, '../../package.json'), 'utf-8'));
+    packageJson = JSON.parse(readFileSync(join(getPackageRoot(), 'package.json'), 'utf-8'));
   }
   return packageJson;
 }

package/dist/shared/paths.js

@@ -0,0 +1,57 @@
+import { join, normalize, resolve } from 'node:path';
+import * as output from './output.js';
+
+/**
+ * Validates that a path stays within the allowed working directory bounds
+ * @param {string} targetPath - Path to validate
+ * @param {string} workingDir - Working directory that serves as the security boundary
+ * @returns {string} Resolved and normalized path if valid
+ * @throws {Error} If path is invalid or outside bounds
+ */
+export function validatePathSecurity(targetPath, workingDir) {
+  if (typeof targetPath !== 'string' || targetPath.length === 0) {
+    throw new Error('Path must be a non-empty string');
+  }
+  if (typeof workingDir !== 'string' || workingDir.length === 0) {
+    throw new Error('Working directory must be a non-empty string');
+  }
+
+  // Normalize and resolve both paths
+  let resolvedWorkingDir = resolve(normalize(workingDir));
+  let resolvedTargetPath = resolve(normalize(targetPath));
+
+  // Ensure the target path starts with the working directory
+  if (!resolvedTargetPath.startsWith(resolvedWorkingDir)) {
+    output.warn(`Path traversal attempt blocked: ${targetPath} (resolved: ${resolvedTargetPath}) is outside working directory: ${resolvedWorkingDir}`);
+    throw new Error('Path is outside the allowed working directory');
+  }
+  return resolvedTargetPath;
+}
+
+/**
+ * Safely constructs a path within the working directory
+ * @param {string} workingDir - Base working directory
+ * @param {...string} pathSegments - Path segments to join
+ * @returns {string} Safely constructed path
+ * @throws {Error} If resulting path would be outside working directory
+ */
+export function safePath(workingDir, ...pathSegments) {
+  if (pathSegments.length === 0) {
+    return validatePathSecurity(workingDir, workingDir);
+  }
+
+  // Sanitize each path segment
+  let sanitizedSegments = pathSegments.map(segment => {
+    if (typeof segment !== 'string') {
+      throw new Error('Path segment must be a string');
+    }
+
+    // Block directory traversal in segments
+    if (segment.includes('..')) {
+      throw new Error('Path segment contains directory traversal sequence');
+    }
+    return segment;
+  });
+  let targetPath = join(workingDir, ...sanitizedSegments);
+  return validatePathSecurity(targetPath, workingDir);
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vizzly-testing/cli",
-  "version": "0.39.0",
+  "version": "0.39.2",
   "description": "Visual regression testing from your terminal",
   "keywords": [
     "llm-context",
@@ -26,28 +26,28 @@
   "packageManager": "pnpm@11.3.0",
   "exports": {
     ".": {
-      "types": "./dist/types/index.d.ts",
+      "types": "./dist/index.d.ts",
       "import": "./dist/index.js",
       "require": "./dist/index.js"
     },
     "./client": {
-      "types": "./dist/types/client.d.ts",
-      "import": "./dist/client/index.js",
-      "require": "./dist/client/index.js"
+      "types": "./dist/adapters/client/index.d.ts",
+      "import": "./dist/adapters/client/index.js",
+      "require": "./dist/adapters/client/index.js"
     },
     "./sdk": {
-      "types": "./dist/types/sdk.d.ts",
-      "import": "./dist/sdk/index.js",
-      "require": "./dist/sdk/index.js"
+      "types": "./dist/adapters/sdk/index.d.ts",
+      "import": "./dist/adapters/sdk/index.js",
+      "require": "./dist/adapters/sdk/index.js"
     },
     "./config": {
-      "types": "./dist/types/config.d.ts",
-      "import": "./dist/utils/config-helpers.js",
-      "require": "./dist/utils/config-helpers.js"
+      "types": "./dist/domains/config/config.d.ts",
+      "import": "./dist/domains/config/config.js",
+      "require": "./dist/domains/config/config.js"
     }
   },
   "main": "./dist/index.js",
-  "types": "./dist/types/index.d.ts",
+  "types": "./dist/index.d.ts",
   "bin": {
     "vizzly": "bin/vizzly.js"
   },
@@ -66,25 +66,26 @@
     "build": "pnpm run clean && pnpm run compile && pnpm run build:reporter && pnpm run build:reporter-ssr && pnpm run copy-types",
     "clean": "rimraf dist",
     "compile": "babel src --out-dir dist --ignore '**/*.test.js'",
-    "copy-types": "mkdir -p dist/types && cp src/types/*.d.ts dist/types/",
+    "copy-types": "cp src/index.d.ts dist/index.d.ts && cp src/adapters/client/index.d.ts dist/adapters/client/index.d.ts && cp src/adapters/sdk/index.d.ts dist/adapters/sdk/index.d.ts && cp src/domains/config/config.d.ts dist/domains/config/config.d.ts",
     "build:reporter": "cd src/reporter && vite build",
     "build:reporter-ssr": "cd src/reporter && vite build --config vite.ssr.config.js",
     "dev:reporter": "cd src/reporter && vite --config vite.dev.config.js",
     "test:types": "tsd",
     "prepublishOnly": "pnpm run build",
-    "test": "node --experimental-test-coverage --test --test-concurrency=1 --test-reporter=spec $(find tests clients/swift/tests-js -name '*.test.js')",
-    "test:watch": "node --test --test-reporter=spec --watch $(find tests -name '*.test.js')",
+    "test": "node scripts/test.js",
+    "test:watch": "node scripts/test.js --watch",
     "test:reporter": "playwright test --config=tests/reporter/playwright.config.js",
     "test:reporter:visual": "node bin/vizzly.js tdd run \"pnpm run test:reporter\" --no-open",
     "test:swift:e2e": "pnpm run build && node clients/swift/scripts/run-e2e.js",
     "test:swift:previews:e2e": "node clients/swift/scripts/run-preview-e2e.js",
     "test:tui": "node --test --test-reporter=spec tests/tui/*.test.js",
     "test:tui:docker": "./tests/tui/run-tui-tests.sh",
-    "lint": "biome check src tests clients/storybook/src clients/storybook/tests clients/static-site/src clients/static-site/tests clients/vitest/src clients/vitest/tests clients/ember/src clients/ember/tests clients/ember/bin clients/swift/src clients/swift/tests-js clients/swift/scripts",
-    "lint:fix": "biome check --write --unsafe src tests clients/storybook/src clients/storybook/tests clients/static-site/src clients/static-site/tests clients/vitest/src clients/vitest/tests clients/ember/src clients/ember/tests clients/ember/bin clients/swift/src clients/swift/tests-js clients/swift/scripts",
-    "format": "biome format --write src tests clients/storybook/src clients/storybook/tests clients/static-site/src clients/static-site/tests clients/vitest/src clients/vitest/tests clients/ember/src clients/ember/tests clients/ember/bin clients/swift/src clients/swift/tests-js clients/swift/scripts",
-    "format:check": "biome format src tests clients/storybook/src clients/storybook/tests clients/static-site/src clients/static-site/tests clients/vitest/src clients/vitest/tests clients/ember/src clients/ember/tests clients/ember/bin clients/swift/src clients/swift/tests-js clients/swift/scripts",
-    "fix": "pnpm run format && pnpm run lint:fix"
+    "lint": "pnpm run check:architecture && biome check src tests clients/storybook/src clients/storybook/tests clients/static-site/src clients/static-site/tests clients/vitest/src clients/vitest/tests clients/ember/src clients/ember/tests clients/ember/bin clients/swift/src clients/swift/tests-js clients/swift/scripts scripts/check-architecture.js scripts/test.js",
+    "lint:fix": "biome check --write --unsafe src tests clients/storybook/src clients/storybook/tests clients/static-site/src clients/static-site/tests clients/vitest/src clients/vitest/tests clients/ember/src clients/ember/tests clients/ember/bin clients/swift/src clients/swift/tests-js clients/swift/scripts scripts/check-architecture.js scripts/test.js",
+    "format": "biome format --write src tests clients/storybook/src clients/storybook/tests clients/static-site/src clients/static-site/tests clients/vitest/src clients/vitest/tests clients/ember/src clients/ember/tests clients/ember/bin clients/swift/src clients/swift/tests-js clients/swift/scripts scripts/check-architecture.js scripts/test.js",
+    "format:check": "biome format src tests clients/storybook/src clients/storybook/tests clients/static-site/src clients/static-site/tests clients/vitest/src clients/vitest/tests clients/ember/src clients/ember/tests clients/ember/bin clients/swift/src clients/swift/tests-js clients/swift/scripts scripts/check-architecture.js scripts/test.js",
+    "fix": "pnpm run format && pnpm run lint:fix",
+    "check:architecture": "node scripts/check-architecture.js"
   },
   "engines": {
     "node": "^22.18.0 || >=24.0.0"
@@ -99,16 +100,16 @@
     "ansis": "^4.4.0",
     "commander": "^15.0.0",
     "cosmiconfig": "^10.0.1",
-    "dotenv": "^18.0.3",
+    "dotenv": "^18.0.9",
     "form-data": "^4.0.6",
-    "glob": "^13.0.6",
-    "react": "^19.3.0",
-    "react-dom": "^19.3.0",
+    "glob": "^14.0.2",
+    "react": "^19.3.1",
+    "react-dom": "^19.3.1",
     "zod": "^4.6.7"
   },
   "tsd": {
     "directory": "test-d",
-    "typingsFile": "src/types/index.d.ts",
+    "typingsFile": "src/index.d.ts",
     "compilerOptions": {
       "esModuleInterop": true,
       "module": "ESNext",
@@ -118,28 +119,28 @@
   },
   "devDependencies": {
     "@babel/cli": "^8.0.6",
-    "@babel/core": "^8.0.6",
-    "@babel/preset-env": "^8.0.6",
+    "@babel/core": "^8.0.7",
+    "@babel/preset-env": "^8.0.7",
     "@babel/preset-react": "^8.0.1",
-    "@babel/preset-typescript": "^8.0.1",
-    "@biomejs/biome": "^2.5.15",
+    "@babel/preset-typescript": "^8.0.7",
+    "@biomejs/biome": "^2.6.2",
     "@heroicons/react": "^2.2.0",
-    "@modelcontextprotocol/sdk": "^1.31.0",
-    "@playwright/test": "^1.63.0",
+    "@modelcontextprotocol/sdk": "^1.32.1",
+    "@playwright/test": "^1.64.1",
     "@tailwindcss/postcss": "^4.3.3",
-    "@tanstack/react-query": "^5.104.0",
-    "@types/node": "^26.6.3",
+    "@tanstack/react-query": "^5.104.5",
+    "@types/node": "^26.6.5",
     "@vitejs/plugin-react": "^6.1.2",
     "autoprefixer": "^10.6.1",
     "babel-plugin-react-compiler": "^1.0.0",
     "babel-plugin-transform-remove-console": "^6.9.4",
-    "postcss": "^8.5.29",
+    "postcss": "^8.5.31",
     "rimraf": "^6.1.3",
     "tailwindcss": "^4.3.3",
     "tsd": "^0.33.0",
     "tui-driver": "github:vizzly-testing/tui-driver",
     "typescript": "^7.0.2",
-    "vite": "^8.3.1",
-    "wouter": "^3.11.1"
+    "vite": "^8.3.5",
+    "wouter": "^3.13.0"
   }
 }