ccperm 1.11.3 → 1.12.0

package/dist/interactive.js

@@ -62,6 +62,7 @@ function startInteractive(merged, results) {
         const projects = merged.filter((r) => r.totalCount > 0 && !r.isGlobal).sort((a, b) => b.totalCount - a.totalCount);
         const withPerms = [...globals, ...projects];
         const emptyCount = merged.filter((r) => r.totalCount === 0 && !r.isGlobal).length;
+        const riskMap = buildRiskMap(results);
         if (withPerms.length === 0) {
             console.log(`\n  ${colors_js_1.GREEN}No projects with permissions found.${colors_js_1.NC}\n`);
             resolve();
@@ -85,7 +86,7 @@ function startInteractive(merged, results) {
         const render = () => {
             process.stdout.write('\x1b[2J\x1b[H\x1b[?25l');
             if (state.view === 'list')
-                renderList(state, withPerms, emptyCount);
+                renderList(state, withPerms, emptyCount, riskMap);
             else
                 renderDetail(state, withPerms, results);
         };
@@ -136,19 +137,38 @@ function startInteractive(merged, results) {
         render();
     });
 }
-function renderList(state, withPerms, emptyCount) {
+function buildRiskMap(results) {
+    const map = new Map();
+    for (const r of results) {
+        let crit = 0, hi = 0;
+        for (const g of r.groups) {
+            for (const item of g.items) {
+                const info = (0, explain_js_1.explain)(g.category, item.name);
+                if (info.risk === 'critical')
+                    crit++;
+                else if (info.risk === 'high')
+                    hi++;
+            }
+        }
+        map.set(r.display, { critical: crit, high: hi });
+    }
+    return map;
+}
+function renderList(state, withPerms, emptyCount, riskMap) {
     const rows = process.stdout.rows || 24;
     const cols = process.stdout.columns || 80;
     const cats = ['Bash', 'WebFetch', 'MCP', 'Tools'];
     const catsPresent = cats.filter((c) => withPerms.some((r) => r.groups.has(c)));
+    const hasRisk = [...riskMap.values()].some((v) => v.critical > 0 || v.high > 0);
+    const riskColWidth = hasRisk ? 3 : 0;
     const catColWidth = catsPresent.length * 7;
-    const typeColWidth = 7; // " local " or " shared"
+    const typeColWidth = 7;
     const maxName = Math.max(...withPerms.map((r) => r.shortName.length), 7);
-    const nameColWidth = Math.min(maxName + typeColWidth, 35); // name + type combined
+    const nameColWidth = Math.min(maxName + typeColWidth, 35);
     const nameWidth = nameColWidth - typeColWidth;
-    // content: marker(2) + nameCol(nameColWidth) + gap(2) + catCols + gap(2) + total(5)
-    const contentWidth = 2 + nameColWidth + 2 + catColWidth + 2 + 5;
-    const w = Math.min(cols, contentWidth + 4); // +4 for box borders + padding
+    // content: marker(2) + nameCol + gap(2) + catCols + gap(2) + total(5) + gap(1) + riskCol
+    const contentWidth = 2 + nameColWidth + 2 + catColWidth + 2 + 5 + (hasRisk ? 1 + riskColWidth : 0);
+    const w = Math.min(cols, contentWidth + 4);
     const inner = w - 4;
     const hasGlobalSep = withPerms.some((r) => r.isGlobal) && withPerms.some((r) => !r.isGlobal);
     // box takes: top(1) + header(2) + sep(1) + content + globalSep?(1) + emptyLine?(1) + bottom(1)
@@ -161,7 +181,8 @@ function renderList(state, withPerms, emptyCount) {
     const scrollInfo = withPerms.length > visibleRows ? `${state.cursor + 1}/${withPerms.length}` : '';
     const lines = [];
     lines.push(boxTop('ccperm', scrollInfo, w));
-    lines.push(boxLine(`${colors_js_1.DIM}${pad('PROJECT', nameColWidth)}  ${catsPresent.map((c) => rpad(c, 5)).join('  ')}  TOTAL${colors_js_1.NC}`, w));
+    const riskHeader = hasRisk ? ` ${colors_js_1.DIM}⚠${colors_js_1.NC}` : '';
+    lines.push(boxLine(`${colors_js_1.DIM}${pad('PROJECT', nameColWidth)}  ${catsPresent.map((c) => rpad(c, 5)).join('  ')}  TOTAL${colors_js_1.NC}${riskHeader}`, w));
     lines.push(boxSep(w));
     const globalCount = withPerms.filter((r) => r.isGlobal).length;
     const end = Math.min(state.scrollOffset + visibleRows, withPerms.length);
@@ -180,7 +201,17 @@ function renderList(state, withPerms, emptyCount) {
             return `${colors_js_1.DIM}${rpad('·', 5)}${colors_js_1.NC}`;
         }).join('  ');
         const totalCol = isCursor ? `${colors_js_1.BOLD}${rpad(r.totalCount, 5)}${colors_js_1.NC}` : rpad(r.totalCount, 5);
-        lines.push(boxLine(`${nameCol}  ${catCols}  ${totalCol}`, w));
+        let riskCol = '';
+        if (hasRisk) {
+            const risk = riskMap.get(r.display) || { critical: 0, high: 0 };
+            if (risk.critical > 0)
+                riskCol = ` ${colors_js_1.RED}${rpad(risk.critical, 2)}${colors_js_1.NC}`;
+            else if (risk.high > 0)
+                riskCol = ` ${colors_js_1.YELLOW}${rpad(risk.high, 2)}${colors_js_1.NC}`;
+            else
+                riskCol = ` ${colors_js_1.DIM}${rpad('·', 2)}${colors_js_1.NC}`;
+        }
+        lines.push(boxLine(`${nameCol}  ${catCols}  ${totalCol}${riskCol}`, w));
         // separator after global section
         if (r.isGlobal && i + 1 < withPerms.length && !withPerms[i + 1].isGlobal) {
             lines.push(boxSep(w));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ccperm",
-  "version": "1.11.3",
+  "version": "1.12.0",
   "description": "Audit Claude Code permissions across all your projects",
   "bin": {
     "ccperm": "bin/ccperm.js"