codeply-cli 0.2.0 → 0.3.0

package/lib/auth.js

@@ -1,112 +1,118 @@
-/**
- * Codeply CLI — auth
- *
- * Passwordless (email + 6-digit code) sign-in against the SAME Supabase
- * project the desktop app uses — same account, same ai-proxy access, same
- * daily request/apply caps either way. The session is cached in
- * ~/.codeply/auth.json, mirroring the desktop app's own file-based session
- * storage (there's no OS keychain dependency to add for a CLI).
- */
-const fs = require('fs');
-const os = require('os');
-const path = require('path');
-const readline = require('readline/promises');
-const { createClient } = require('@supabase/supabase-js');
-
-const SUPABASE_URL = 'https://zswkhfkfseclgadhvobg.supabase.co';
-const SUPABASE_ANON_KEY = 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6Inpzd2toZmtmc2VjbGdhZGh2b2JnIiwicm9sZSI6ImFub24iLCJpYXQiOjE3ODAyMzYyOTgsImV4cCI6MjA5NTgxMjI5OH0.EoTQdIGQQDrN1uEqQfya3VmrQMT68jkzPLphbLwNTWg';
-
-const configDir = path.join(os.homedir(), '.codeply');
-const sessionPath = path.join(configDir, 'auth.json');
-
-function ensureConfigDir() {
-  fs.mkdirSync(configDir, { recursive: true });
-}
-
-// File-based storage adapter for Supabase session persistence (Node has no
-// localStorage) — same pattern the desktop app uses in main.js.
-const fileStorage = {
-  getItem(key) {
-    try { const d = JSON.parse(fs.readFileSync(sessionPath, 'utf8')); return d[key] || null; }
-    catch { return null; }
-  },
-  setItem(key, value) {
-    ensureConfigDir();
-    let d = {};
-    try { d = JSON.parse(fs.readFileSync(sessionPath, 'utf8')); } catch { }
-    d[key] = value;
-    try { fs.writeFileSync(sessionPath, JSON.stringify(d)); } catch { }
-  },
-  removeItem(key) {
-    let d = {};
-    try { d = JSON.parse(fs.readFileSync(sessionPath, 'utf8')); } catch { }
-    delete d[key];
-    try { fs.writeFileSync(sessionPath, JSON.stringify(d)); } catch { }
-  },
-};
-
-let client = null;
-function getClient() {
-  if (!client) {
-    client = createClient(SUPABASE_URL, SUPABASE_ANON_KEY, {
-      auth: {
-        storage: fileStorage,
-        autoRefreshToken: true,
-        persistSession: true,
-        detectSessionInUrl: false,
-      },
-    });
-  }
-  return client;
-}
-
-async function prompt(question) {
-  const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
-  try { return (await rl.question(question)).trim(); }
-  finally { rl.close(); }
-}
-
-/** Interactive email + 6-digit-code sign-in. Prints its own progress/errors. */
-async function login() {
-  const supabase = getClient();
-  const email = await prompt('Email: ');
-  if (!email) { console.error('No email entered.'); return false; }
-
-  const { error: otpErr } = await supabase.auth.signInWithOtp({ email, options: { shouldCreateUser: false } });
-  if (otpErr) {
-    console.error(`Could not send a code: ${otpErr.message}`);
-    console.error('(No account with that email? Sign up in the Codeply desktop app first.)');
-    return false;
-  }
-
-  console.log(`Code sent to ${email}.`);
-  const code = await prompt('6-digit code: ');
-  const { data, error } = await supabase.auth.verifyOtp({ email, token: code.replace(/\s+/g, ''), type: 'email' });
-  if (error || !data?.session) {
-    console.error(`Sign-in failed: ${error?.message || 'invalid code'}`);
-    return false;
-  }
-
-  console.log(`Signed in as ${data.session.user.email}.`);
-  return true;
-}
-
-async function logout() {
-  const supabase = getClient();
-  try { await supabase.auth.signOut(); } catch { }
-  console.log('Signed out.');
-}
-
-/** Returns the current session, refreshing it if the client already has one. */
-async function getSession() {
-  const supabase = getClient();
-  const { data: { session } } = await supabase.auth.getSession();
-  return session || null;
-}
-
-async function getAccessToken() {
-  const session = await getSession();
-  return session?.access_token || null;
-}
-
-module.exports = { SUPABASE_URL, SUPABASE_ANON_KEY, getClient, login, logout, getSession, getAccessToken };
+/**
+ * Codeply CLI - auth
+ *
+ * Passwordless (email + emailed code) sign-in against the SAME Supabase
+ * project the desktop app uses - same account, same ai-proxy access, same
+ * daily request/apply caps either way. The session is cached in
+ * ~/.codeply/auth.json, mirroring the desktop app's own file-based session
+ * storage (there's no OS keychain dependency to add for a CLI).
+ */
+const fs = require('fs');
+const os = require('os');
+const path = require('path');
+const readline = require('readline/promises');
+const { createClient } = require('@supabase/supabase-js');
+
+const SUPABASE_URL = 'https://zswkhfkfseclgadhvobg.supabase.co';
+const SUPABASE_ANON_KEY = 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6Inpzd2toZmtmc2VjbGdhZGh2b2JnIiwicm9sZSI6ImFub24iLCJpYXQiOjE3ODAyMzYyOTgsImV4cCI6MjA5NTgxMjI5OH0.EoTQdIGQQDrN1uEqQfya3VmrQMT68jkzPLphbLwNTWg';
+
+const configDir = path.join(os.homedir(), '.codeply');
+const sessionPath = path.join(configDir, 'auth.json');
+
+function ensureConfigDir() {
+  fs.mkdirSync(configDir, { recursive: true });
+}
+
+// File-based storage adapter for Supabase session persistence (Node has no
+// localStorage) - same pattern the desktop app uses in main.js.
+const fileStorage = {
+  getItem(key) {
+    try { const d = JSON.parse(fs.readFileSync(sessionPath, 'utf8')); return d[key] || null; }
+    catch { return null; }
+  },
+  setItem(key, value) {
+    ensureConfigDir();
+    let d = {};
+    try { d = JSON.parse(fs.readFileSync(sessionPath, 'utf8')); } catch { }
+    d[key] = value;
+    try { fs.writeFileSync(sessionPath, JSON.stringify(d)); } catch { }
+  },
+  removeItem(key) {
+    let d = {};
+    try { d = JSON.parse(fs.readFileSync(sessionPath, 'utf8')); } catch { }
+    delete d[key];
+    try { fs.writeFileSync(sessionPath, JSON.stringify(d)); } catch { }
+  },
+};
+
+let client = null;
+function getClient() {
+  if (!client) {
+    client = createClient(SUPABASE_URL, SUPABASE_ANON_KEY, {
+      auth: {
+        storage: fileStorage,
+        autoRefreshToken: true,
+        persistSession: true,
+        detectSessionInUrl: false,
+        // PKCE, not the (default) implicit flow - inert for this CLI's own
+        // email/password/OTP sign-in, but required by any client using
+        // signInWithOAuth + exchangeCodeForSession (e.g. the desktop app's
+        // and Codeply Craft's "Continue with Google" - the OAuth redirect
+        // carries an exchangeable code only under PKCE).
+        flowType: 'pkce',
+      },
+    });
+  }
+  return client;
+}
+
+async function prompt(question) {
+  const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+  try { return (await rl.question(question)).trim(); }
+  finally { rl.close(); }
+}
+
+/** Interactive email + emailed-code sign-in. Prints its own progress/errors. */
+async function login() {
+  const supabase = getClient();
+  const email = await prompt('Email: ');
+  if (!email) { console.error('No email entered.'); return false; }
+
+  const { error: otpErr } = await supabase.auth.signInWithOtp({ email, options: { shouldCreateUser: false } });
+  if (otpErr) {
+    console.error(`Could not send a code: ${otpErr.message}`);
+    console.error('(No account with that email? Sign up in the Codeply desktop app first.)');
+    return false;
+  }
+
+  console.log(`Code sent to ${email}.`);
+  const code = await prompt('Code from the email: ');
+  const { data, error } = await supabase.auth.verifyOtp({ email, token: code.replace(/\D+/g, ''), type: 'email' });
+  if (error || !data?.session) {
+    console.error(`Sign-in failed: ${error?.message || 'invalid code'}`);
+    return false;
+  }
+
+  console.log(`Signed in as ${data.session.user.email}.`);
+  return true;
+}
+
+async function logout() {
+  const supabase = getClient();
+  try { await supabase.auth.signOut(); } catch { }
+  console.log('Signed out.');
+}
+
+/** Returns the current session, refreshing it if the client already has one. */
+async function getSession() {
+  const supabase = getClient();
+  const { data: { session } } = await supabase.auth.getSession();
+  return session || null;
+}
+
+async function getAccessToken() {
+  const session = await getSession();
+  return session?.access_token || null;
+}
+
+module.exports = { SUPABASE_URL, SUPABASE_ANON_KEY, getClient, login, logout, getSession, getAccessToken };

package/lib/commands.js

@@ -0,0 +1,103 @@
+/**
+ * Custom slash commands: a markdown file per command, same layout opencode
+ * and Claude Code use, so existing ones can be copied over.
+ *
+ *   ~/.codeply/commands/<name>.md          (every project)
+ *   <project>/.codeply/commands/<name>.md  (this project; same name wins)
+ *
+ *   ---
+ *   description: Review the changed files for bugs
+ *   mode: Plan            # optional: Build | Plan | Ask
+ *   ---
+ *   Review $ARGUMENTS for correctness bugs. Cite file:line.
+ *
+ * In the body, $ARGUMENTS is everything typed after the command, $1 $2 ...
+ * are single words (the highest one takes the rest), and if the body has no
+ * placeholder at all the arguments are appended on their own line.
+ * Sub-folders become part of the name: commands/git/pr.md is /git/pr.
+ * Installed plugins add theirs as /<plugin>:<name> (see plugins.js).
+ */
+const fs = require('fs');
+const os = require('os');
+const path = require('path');
+const plugins = require('./plugins.js');
+
+const MAX_BODY = 20000;
+const RESERVED = new Set(['goal', 'g', 'skills', 'skill', 'skill-list']);
+
+function parseFrontmatter(text) {
+  const m = /^---\r?\n([\s\S]*?)\r?\n---\r?\n?/.exec(text);
+  if (!m) return { meta: {}, body: text };
+  const meta = {};
+  for (const line of m[1].split(/\r?\n/)) {
+    const kv = /^([A-Za-z_-]+)\s*:\s*(.*)$/.exec(line);
+    if (kv) meta[kv[1].toLowerCase()] = kv[2].trim().replace(/^["']|["']$/g, '');
+  }
+  return { meta, body: text.slice(m[0].length) };
+}
+
+function scan(dir, prefix, out) {
+  let entries;
+  try { entries = fs.readdirSync(dir, { withFileTypes: true }); } catch { return; }
+  for (const e of entries) {
+    const full = path.join(dir, e.name);
+    if (e.isDirectory()) scan(full, `${prefix}${e.name}/`, out);
+    else if (e.isFile() && e.name.toLowerCase().endsWith('.md')) {
+      const name = `${prefix}${e.name.slice(0, -3)}`.toLowerCase().replace(/\s+/g, '-');
+      if (RESERVED.has(name)) continue;
+      try {
+        const { meta, body } = parseFrontmatter(fs.readFileSync(full, 'utf8').slice(0, MAX_BODY));
+        const mode = ['Build', 'Plan', 'Ask'].find((x) => x.toLowerCase() === String(meta.mode || '').toLowerCase());
+        out.set(name, {
+          name,
+          description: meta.description || body.trim().split('\n')[0].slice(0, 100),
+          mode: mode || null,
+          body: body.trim(),
+          file: full,
+        });
+      } catch {}
+    }
+  }
+}
+
+/** @returns {Map<string, {name, description, mode, body, file}>} */
+function loadCommands(cwd) {
+  const out = new Map();
+  for (const { plugin, dir } of plugins.commandDirs(cwd)) scan(dir, `${plugin}:`, out);
+  scan(path.join(os.homedir(), '.codeply', 'commands'), '', out);
+  if (cwd) scan(path.join(cwd, '.codeply', 'commands'), '', out);
+  return out;
+}
+
+/** Fill a command's template with what was typed after it. */
+function expand(cmd, argText) {
+  const args = String(argText || '').trim();
+  const words = args ? args.split(/\s+/) : [];
+  let body = cmd.body;
+  const nums = [...body.matchAll(/\$(\d+)/g)].map((m) => Number(m[1]));
+  const max = nums.length ? Math.max(...nums) : 0;
+  const used = /\$ARGUMENTS|\$\d+/.test(body);
+  body = body.replace(/\$(\d+)/g, (_, n) => {
+    const i = Number(n) - 1;
+    return Number(n) === max ? words.slice(i).join(' ') : (words[i] || '');
+  });
+  body = body.replace(/\$ARGUMENTS/g, args);
+  if (!used && args) body = `${body}\n\n${args}`;
+  return body.trim();
+}
+
+/**
+ * If `text` starts with a known custom command, the expanded prompt and the
+ * command; otherwise null. `/goal` and the app's built-ins are never matched.
+ */
+function resolve(text, cwd) {
+  const m = /^\/([A-Za-z0-9_./:-]+)(?:\s+([\s\S]*))?$/.exec(String(text || '').trim());
+  if (!m) return null;
+  const name = m[1].toLowerCase();
+  if (RESERVED.has(name)) return null;
+  const cmd = loadCommands(cwd).get(name);
+  if (!cmd) return null;
+  return { command: cmd, prompt: expand(cmd, m[2] || '') };
+}
+
+module.exports = { loadCommands, expand, resolve, parseFrontmatter };