ccperm 1.12.1 → 1.13.0

package/dist/interactive.js

@@ -6,6 +6,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.startInteractive = startInteractive;
 const node_readline_1 = __importDefault(require("node:readline"));
 const colors_js_1 = require("./colors.js");
+const scanner_js_1 = require("./scanner.js");
 const explain_js_1 = require("./explain.js");
 function severityTag(s) {
     const labels = {
@@ -49,7 +50,7 @@ function boxTop(title, info, width) {
 function boxBottom(hint, width) {
     const inner = width - 2;
     const hintPart = ` ${hint} `;
-    const fill = Math.max(0, inner - hintPart.length);
+    const fill = Math.max(0, inner - visLen(hintPart));
     return `${colors_js_1.DIM}└${'─'.repeat(fill)}${hintPart}┘${colors_js_1.NC}`;
 }
 function boxSep(width) {
@@ -113,7 +114,42 @@ function startInteractive(merged, results) {
                 }
             }
             else {
-                if (key.name === 'escape' || key.name === 'backspace') {
+                if (state.confirmDelete) {
+                    if (key.name === 'y') {
+                        const { rawPerm, filePath } = state.confirmDelete;
+                        if ((0, scanner_js_1.removePerm)(filePath, rawPerm)) {
+                            const idx = results.findIndex((r) => r.path === filePath);
+                            if (idx >= 0) {
+                                const updated = (0, scanner_js_1.scanFile)(filePath);
+                                if (updated) {
+                                    results[idx] = updated;
+                                    const entry = withPerms[state.selectedProject];
+                                    entry.totalCount = updated.totalCount;
+                                    entry.groups = new Map();
+                                    for (const g of updated.groups)
+                                        entry.groups.set(g.category, g.items.length);
+                                }
+                            }
+                            state.flash = `${colors_js_1.GREEN}✔ Deleted${colors_js_1.NC}`;
+                        }
+                        state.confirmDelete = undefined;
+                    }
+                    else {
+                        state.confirmDelete = undefined;
+                    }
+                }
+                else if (state.confirmGlobal) {
+                    if (key.name === 'y') {
+                        if ((0, scanner_js_1.addPermToGlobal)(state.confirmGlobal.rawPerm)) {
+                            state.flash = `${colors_js_1.GREEN}✔ Copied to global${colors_js_1.NC}`;
+                        }
+                        else {
+                            state.flash = `${colors_js_1.DIM}· Already in global${colors_js_1.NC}`;
+                        }
+                    }
+                    state.confirmGlobal = undefined;
+                }
+                else if (key.name === 'escape' || key.name === 'backspace') {
                     state.view = 'list';
                     state.detailCursor = 0;
                     state.detailScroll = 0;
@@ -130,6 +166,12 @@ function startInteractive(merged, results) {
                 else if (key.name === 'i') {
                     state.showInfo = !state.showInfo;
                 }
+                else if (key.name === 'd') {
+                    state._delete = true;
+                }
+                else if (key.name === 'g') {
+                    state._global = true;
+                }
             }
             render();
         };
@@ -267,6 +309,8 @@ function renderDetail(state, withPerms, results) {
         if (isOpen) {
             for (const item of group.items) {
                 const clean = cleanLabel(item.name);
+                // Find the raw permission string from the original permissions array
+                const rawPerm = fileResult.permissions.find((p) => p.includes(item.name)) || '';
                 if (state.showInfo) {
                     const info = (0, explain_js_1.explain)(group.category, item.name);
                     const tag = severityTag(info.risk);
@@ -274,12 +318,12 @@ function renderDetail(state, withPerms, results) {
                     const nameMax = Math.min(30, w - tagLen - 14);
                     const name = clean.length > nameMax ? clean.slice(0, nameMax - 1) + '…' : clean;
                     const desc = info.description ? `${colors_js_1.DIM}${info.description}${colors_js_1.NC}` : '';
-                    navRows.push({ text: `  ${pad(name, nameMax)} ${tag} ${desc}`, perm: item.name });
+                    navRows.push({ text: `  ${pad(name, nameMax)} ${tag} ${desc}`, perm: item.name, rawPerm });
                 }
                 else {
                     const maxLen = w - 8;
                     const name = clean.length > maxLen ? clean.slice(0, maxLen - 1) + '…' : clean;
-                    navRows.push({ text: `  ${colors_js_1.DIM}${name}${colors_js_1.NC}`, perm: item.name });
+                    navRows.push({ text: `  ${colors_js_1.DIM}${name}${colors_js_1.NC}`, perm: item.name, rawPerm });
                 }
             }
         }
@@ -297,6 +341,22 @@ function renderDetail(state, withPerms, results) {
             return;
         }
     }
+    // handle delete
+    if (state._delete) {
+        delete state._delete;
+        const row = navRows[state.detailCursor];
+        if (row?.rawPerm) {
+            state.confirmDelete = { perm: row.perm, rawPerm: row.rawPerm, filePath: fileResult.path };
+        }
+    }
+    // handle global copy
+    if (state._global) {
+        delete state._global;
+        const row = navRows[state.detailCursor];
+        if (row?.rawPerm && !project.isGlobal) {
+            state.confirmGlobal = { perm: row.perm, rawPerm: row.rawPerm };
+        }
+    }
     if (state.detailCursor >= navRows.length)
         state.detailCursor = Math.max(0, navRows.length - 1);
     // box chrome: top(1) + sep(1) + bottom(1) = 3
@@ -317,8 +377,25 @@ function renderDetail(state, withPerms, results) {
         const prefix = isCursor ? `${colors_js_1.CYAN}▸ ` : '  ';
         lines.push(boxLine(`${prefix}${row.text}`, w));
     }
-    const infoHint = state.showInfo ? '[i] hide info' : '[i] info';
-    lines.push(boxBottom(`[↑↓] navigate  [Enter] expand  ${infoHint}  [Esc] back  [q] quit`, w));
+    if (state.flash) {
+        lines.push(boxBottom(state.flash, w));
+        state.flash = undefined;
+    }
+    else if (state.confirmDelete) {
+        const name = cleanLabel(state.confirmDelete.perm);
+        const truncName = name.length > 30 ? name.slice(0, 29) + '…' : name;
+        lines.push(boxBottom(`${colors_js_1.RED}Delete "${truncName}"? [y/N]${colors_js_1.NC}`, w));
+    }
+    else if (state.confirmGlobal) {
+        const name = cleanLabel(state.confirmGlobal.perm);
+        const truncName = name.length > 30 ? name.slice(0, 29) + '…' : name;
+        lines.push(boxBottom(`${colors_js_1.CYAN}Copy "${truncName}" to global? [y/N]${colors_js_1.NC}`, w));
+    }
+    else {
+        const infoHint = state.showInfo ? '[i] hide info' : '[i] info';
+        const globalHint = project.isGlobal ? '' : '  [g] global';
+        lines.push(boxBottom(`[↑↓] navigate  [Enter] expand  ${infoHint}  [d] delete${globalHint}  [Esc] back  [q] quit`, w));
+    }
     process.stdout.write(lines.join('\n') + '\n');
 }
 function pad(s, n) {

package/dist/scanner.js

@@ -3,6 +3,8 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.removePerm = removePerm;
+exports.addPermToGlobal = addPermToGlobal;
 exports.countDeprecated = countDeprecated;
 exports.findSettingsFiles = findSettingsFiles;
 exports.scanFile = scanFile;
@@ -11,6 +13,72 @@ const node_path_1 = __importDefault(require("node:path"));
 const node_os_1 = __importDefault(require("node:os"));
 const PERM_RE = /"(Bash|Write|Edit|Read|Glob|Grep|WebSearch|WebFetch|mcp_)[^"]*"/g;
 const DEPRECATED_RE = /:\*\)|:\*"/g;
+const AUDIT_DIR = node_path_1.default.join(node_os_1.default.homedir(), '.ccperm', 'audit');
+function writeAudit(action, filePath, perm, before, after) {
+    try {
+        node_fs_1.default.mkdirSync(AUDIT_DIR, { recursive: true });
+        const ts = new Date().toISOString().replace(/[:.]/g, '-');
+        const entry = { action, file: filePath, perm, before, after, timestamp: new Date().toISOString() };
+        node_fs_1.default.writeFileSync(node_path_1.default.join(AUDIT_DIR, `${ts}_${action}.json`), JSON.stringify(entry, null, 2) + '\n');
+    }
+    catch { /* audit is best-effort */ }
+}
+function removePerm(filePath, rawPerm) {
+    let content;
+    try {
+        content = node_fs_1.default.readFileSync(filePath, 'utf8');
+    }
+    catch {
+        return false;
+    }
+    let json;
+    try {
+        json = JSON.parse(content);
+    }
+    catch {
+        return false;
+    }
+    const allow = json?.permissions?.allow;
+    if (!Array.isArray(allow))
+        return false;
+    const idx = allow.indexOf(rawPerm);
+    if (idx === -1)
+        return false;
+    const before = [...allow];
+    allow.splice(idx, 1);
+    node_fs_1.default.writeFileSync(filePath, JSON.stringify(json, null, 2) + '\n', 'utf8');
+    writeAudit('DELETE', filePath, rawPerm, before, allow);
+    return true;
+}
+function addPermToGlobal(rawPerm) {
+    const globalPath = node_path_1.default.join(node_os_1.default.homedir(), '.claude', 'settings.json');
+    let content;
+    try {
+        content = node_fs_1.default.readFileSync(globalPath, 'utf8');
+    }
+    catch {
+        content = '{}';
+    }
+    let json;
+    try {
+        json = JSON.parse(content);
+    }
+    catch {
+        return false;
+    }
+    if (!json.permissions)
+        json.permissions = {};
+    if (!Array.isArray(json.permissions.allow))
+        json.permissions.allow = [];
+    const allow = json.permissions.allow;
+    if (allow.includes(rawPerm))
+        return false; // already exists
+    const before = [...allow];
+    allow.push(rawPerm);
+    node_fs_1.default.writeFileSync(globalPath, JSON.stringify(json, null, 2) + '\n', 'utf8');
+    writeAudit('COPY_TO_GLOBAL', globalPath, rawPerm, before, allow);
+    return true;
+}
 function countDeprecated(results) {
     const out = [];
     for (const r of results) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ccperm",
-  "version": "1.12.1",
+  "version": "1.13.0",
   "description": "Audit Claude Code permissions across all your projects",
   "bin": {
     "ccperm": "bin/ccperm.js"