codeply-cli 0.3.1 → 0.4.1

package/lib/arity-table.json

@@ -1,138 +1,138 @@
-{
- "cat": 1,
- "cd": 1,
- "chmod": 1,
- "chown": 1,
- "cp": 1,
- "echo": 1,
- "env": 1,
- "export": 1,
- "grep": 1,
- "kill": 1,
- "killall": 1,
- "ln": 1,
- "ls": 1,
- "mkdir": 1,
- "mv": 1,
- "ps": 1,
- "pwd": 1,
- "rm": 1,
- "rmdir": 1,
- "sleep": 1,
- "source": 1,
- "tail": 1,
- "touch": 1,
- "unset": 1,
- "which": 1,
- "aws": 3,
- "az": 3,
- "bazel": 2,
- "brew": 2,
- "bun": 2,
- "bun run": 3,
- "bun x": 3,
- "cargo": 2,
- "cargo add": 3,
- "cargo run": 3,
- "cdk": 2,
- "cf": 2,
- "cmake": 2,
- "composer": 2,
- "consul": 2,
- "consul kv": 3,
- "crictl": 2,
- "deno": 2,
- "deno task": 3,
- "doctl": 3,
- "docker": 2,
- "docker builder": 3,
- "docker compose": 3,
- "docker container": 3,
- "docker image": 3,
- "docker network": 3,
- "docker volume": 3,
- "eksctl": 2,
- "eksctl create": 3,
- "firebase": 2,
- "flyctl": 2,
- "gcloud": 3,
- "gh": 3,
- "git": 2,
- "git config": 3,
- "git remote": 3,
- "git stash": 3,
- "go": 2,
- "gradle": 2,
- "helm": 2,
- "heroku": 2,
- "hugo": 2,
- "ip": 2,
- "ip addr": 3,
- "ip link": 3,
- "ip netns": 3,
- "ip route": 3,
- "kind": 2,
- "kind create": 3,
- "kubectl": 2,
- "kubectl kustomize": 3,
- "kubectl rollout": 3,
- "kustomize": 2,
- "make": 2,
- "mc": 2,
- "mc admin": 3,
- "minikube": 2,
- "mongosh": 2,
- "mysql": 2,
- "mvn": 2,
- "ng": 2,
- "npm": 2,
- "npm exec": 3,
- "npm init": 3,
- "npm run": 3,
- "npm view": 3,
- "nvm": 2,
- "nx": 2,
- "openssl": 2,
- "openssl req": 3,
- "openssl x509": 3,
- "pip": 2,
- "pipenv": 2,
- "pnpm": 2,
- "pnpm dlx": 3,
- "pnpm exec": 3,
- "pnpm run": 3,
- "poetry": 2,
- "podman": 2,
- "podman container": 3,
- "podman image": 3,
- "psql": 2,
- "pulumi": 2,
- "pulumi stack": 3,
- "pyenv": 2,
- "python": 2,
- "rake": 2,
- "rbenv": 2,
- "redis-cli": 2,
- "rustup": 2,
- "serverless": 2,
- "sfdx": 3,
- "skaffold": 2,
- "sls": 2,
- "sst": 2,
- "swift": 2,
- "systemctl": 2,
- "terraform": 2,
- "terraform workspace": 3,
- "tmux": 2,
- "turbo": 2,
- "ufw": 2,
- "vault": 2,
- "vault auth": 3,
- "vault kv": 3,
- "vercel": 2,
- "volta": 2,
- "wp": 2,
- "yarn": 2,
- "yarn dlx": 3,
- "yarn run": 3
-}
+{
+ "cat": 1,
+ "cd": 1,
+ "chmod": 1,
+ "chown": 1,
+ "cp": 1,
+ "echo": 1,
+ "env": 1,
+ "export": 1,
+ "grep": 1,
+ "kill": 1,
+ "killall": 1,
+ "ln": 1,
+ "ls": 1,
+ "mkdir": 1,
+ "mv": 1,
+ "ps": 1,
+ "pwd": 1,
+ "rm": 1,
+ "rmdir": 1,
+ "sleep": 1,
+ "source": 1,
+ "tail": 1,
+ "touch": 1,
+ "unset": 1,
+ "which": 1,
+ "aws": 3,
+ "az": 3,
+ "bazel": 2,
+ "brew": 2,
+ "bun": 2,
+ "bun run": 3,
+ "bun x": 3,
+ "cargo": 2,
+ "cargo add": 3,
+ "cargo run": 3,
+ "cdk": 2,
+ "cf": 2,
+ "cmake": 2,
+ "composer": 2,
+ "consul": 2,
+ "consul kv": 3,
+ "crictl": 2,
+ "deno": 2,
+ "deno task": 3,
+ "doctl": 3,
+ "docker": 2,
+ "docker builder": 3,
+ "docker compose": 3,
+ "docker container": 3,
+ "docker image": 3,
+ "docker network": 3,
+ "docker volume": 3,
+ "eksctl": 2,
+ "eksctl create": 3,
+ "firebase": 2,
+ "flyctl": 2,
+ "gcloud": 3,
+ "gh": 3,
+ "git": 2,
+ "git config": 3,
+ "git remote": 3,
+ "git stash": 3,
+ "go": 2,
+ "gradle": 2,
+ "helm": 2,
+ "heroku": 2,
+ "hugo": 2,
+ "ip": 2,
+ "ip addr": 3,
+ "ip link": 3,
+ "ip netns": 3,
+ "ip route": 3,
+ "kind": 2,
+ "kind create": 3,
+ "kubectl": 2,
+ "kubectl kustomize": 3,
+ "kubectl rollout": 3,
+ "kustomize": 2,
+ "make": 2,
+ "mc": 2,
+ "mc admin": 3,
+ "minikube": 2,
+ "mongosh": 2,
+ "mysql": 2,
+ "mvn": 2,
+ "ng": 2,
+ "npm": 2,
+ "npm exec": 3,
+ "npm init": 3,
+ "npm run": 3,
+ "npm view": 3,
+ "nvm": 2,
+ "nx": 2,
+ "openssl": 2,
+ "openssl req": 3,
+ "openssl x509": 3,
+ "pip": 2,
+ "pipenv": 2,
+ "pnpm": 2,
+ "pnpm dlx": 3,
+ "pnpm exec": 3,
+ "pnpm run": 3,
+ "poetry": 2,
+ "podman": 2,
+ "podman container": 3,
+ "podman image": 3,
+ "psql": 2,
+ "pulumi": 2,
+ "pulumi stack": 3,
+ "pyenv": 2,
+ "python": 2,
+ "rake": 2,
+ "rbenv": 2,
+ "redis-cli": 2,
+ "rustup": 2,
+ "serverless": 2,
+ "sfdx": 3,
+ "skaffold": 2,
+ "sls": 2,
+ "sst": 2,
+ "swift": 2,
+ "systemctl": 2,
+ "terraform": 2,
+ "terraform workspace": 3,
+ "tmux": 2,
+ "turbo": 2,
+ "ufw": 2,
+ "vault": 2,
+ "vault auth": 3,
+ "vault kv": 3,
+ "vercel": 2,
+ "volta": 2,
+ "wp": 2,
+ "yarn": 2,
+ "yarn dlx": 3,
+ "yarn run": 3
+}

package/lib/arity.js

@@ -1,70 +1,70 @@
-/**
- * How many words name a shell command, so "always allow" can be scoped to
- * `npm run dev` or `git checkout` instead of every command there is.
- *
- * The ARITY table and the prefix() rule are from opencode
- * (packages/opencode/src/permission/arity.ts), MIT License,
- * Copyright (c) 2025 opencode - https://github.com/sst/opencode
- * Command splitting and tokenizing below are Codeply's own.
- */
-
-const ARITY = require('./arity-table.json');
-
-// "Always allow node" would allow every script there is. For interpreters the
-// script (or module) is part of the name: `node server.js`, `python app.py`.
-const INTERPRETERS = new Set(['node', 'python', 'python3', 'py', 'deno', 'bun', 'ruby', 'php', 'perl', 'bash', 'sh', 'zsh', 'powershell', 'pwsh', 'cmd', 'tsx', 'ts-node']);
-
-/** Longest listed prefix wins; unlisted commands are named by their first word. */
-function prefix(tokens) {
-  if (tokens.length && INTERPRETERS.has(tokens[0]) && !ARITY[tokens.slice(0, 2).join(' ')]) return tokens.slice(0, 2);
-  for (let len = tokens.length; len > 0; len--) {
-    const arity = ARITY[tokens.slice(0, len).join(' ')];
-    if (arity !== undefined) return tokens.slice(0, arity);
-  }
-  return tokens.slice(0, 1);
-}
-
-/** Split a command line into its separate commands (&&, ||, ;, |, newlines). Quotes are respected. */
-function splitCommands(line) {
-  const out = [];
-  let cur = '';
-  let quote = null;
-  for (let i = 0; i < line.length; i++) {
-    const c = line[i];
-    const n = line[i + 1];
-    if (quote) { cur += c; if (c === quote) quote = null; continue; }
-    if (c === '"' || c === "'") { quote = c; cur += c; continue; }
-    if ((c === '&' && n === '&') || (c === '|' && n === '|')) { out.push(cur); cur = ''; i++; continue; }
-    if (c === ';' || c === '|' || c === '\n' || c === '&') { out.push(cur); cur = ''; continue; }
-    cur += c;
-  }
-  out.push(cur);
-  return out.map((s) => s.trim()).filter(Boolean);
-}
-
-/** Words of one command, without leading VAR=value assignments or flags. */
-function tokenize(cmd) {
-  const words = cmd.match(/"[^"]*"|'[^']*'|\S+/g) || [];
-  const clean = words.map((w) => w.replace(/^["']|["']$/g, ''));
-  let i = 0;
-  while (i < clean.length && /^[A-Za-z_][A-Za-z0-9_]*=/.test(clean[i])) i++;
-  const rest = clean.slice(i).filter((w) => !w.startsWith('-'));
-  // A path to a program is still that program: C:\tools\git.exe -> git
-  if (rest.length) rest[0] = rest[0].split(/[\\/]/).pop().replace(/\.(exe|cmd|bat|ps1)$/i, '').toLowerCase();
-  return rest;
-}
-
-/**
- * The permission patterns a command line needs, one per command in it:
- *   'npm run dev && git status'  ->  ['npm run dev', 'git status']
- * Subshells, backticks and redirections into files return null: too dynamic
- * (or too destructive) to approve by name alone.
- */
-function commandPatterns(line) {
-  const text = String(line || '');
-  if (/\$\(|`|>/.test(text)) return null;
-  const pats = splitCommands(text).map((c) => prefix(tokenize(c)).join(' ')).filter(Boolean);
-  return pats.length ? [...new Set(pats)] : null;
-}
-
-module.exports = { commandPatterns, prefix, tokenize, splitCommands };
+/**
+ * How many words name a shell command, so "always allow" can be scoped to
+ * `npm run dev` or `git checkout` instead of every command there is.
+ *
+ * The ARITY table and the prefix() rule are from opencode
+ * (packages/opencode/src/permission/arity.ts), MIT License,
+ * Copyright (c) 2025 opencode - https://github.com/sst/opencode
+ * Command splitting and tokenizing below are Codeply's own.
+ */
+
+const ARITY = require('./arity-table.json');
+
+// "Always allow node" would allow every script there is. For interpreters the
+// script (or module) is part of the name: `node server.js`, `python app.py`.
+const INTERPRETERS = new Set(['node', 'python', 'python3', 'py', 'deno', 'bun', 'ruby', 'php', 'perl', 'bash', 'sh', 'zsh', 'powershell', 'pwsh', 'cmd', 'tsx', 'ts-node']);
+
+/** Longest listed prefix wins; unlisted commands are named by their first word. */
+function prefix(tokens) {
+  if (tokens.length && INTERPRETERS.has(tokens[0]) && !ARITY[tokens.slice(0, 2).join(' ')]) return tokens.slice(0, 2);
+  for (let len = tokens.length; len > 0; len--) {
+    const arity = ARITY[tokens.slice(0, len).join(' ')];
+    if (arity !== undefined) return tokens.slice(0, arity);
+  }
+  return tokens.slice(0, 1);
+}
+
+/** Split a command line into its separate commands (&&, ||, ;, |, newlines). Quotes are respected. */
+function splitCommands(line) {
+  const out = [];
+  let cur = '';
+  let quote = null;
+  for (let i = 0; i < line.length; i++) {
+    const c = line[i];
+    const n = line[i + 1];
+    if (quote) { cur += c; if (c === quote) quote = null; continue; }
+    if (c === '"' || c === "'") { quote = c; cur += c; continue; }
+    if ((c === '&' && n === '&') || (c === '|' && n === '|')) { out.push(cur); cur = ''; i++; continue; }
+    if (c === ';' || c === '|' || c === '\n' || c === '&') { out.push(cur); cur = ''; continue; }
+    cur += c;
+  }
+  out.push(cur);
+  return out.map((s) => s.trim()).filter(Boolean);
+}
+
+/** Words of one command, without leading VAR=value assignments or flags. */
+function tokenize(cmd) {
+  const words = cmd.match(/"[^"]*"|'[^']*'|\S+/g) || [];
+  const clean = words.map((w) => w.replace(/^["']|["']$/g, ''));
+  let i = 0;
+  while (i < clean.length && /^[A-Za-z_][A-Za-z0-9_]*=/.test(clean[i])) i++;
+  const rest = clean.slice(i).filter((w) => !w.startsWith('-'));
+  // A path to a program is still that program: C:\tools\git.exe -> git
+  if (rest.length) rest[0] = rest[0].split(/[\\/]/).pop().replace(/\.(exe|cmd|bat|ps1)$/i, '').toLowerCase();
+  return rest;
+}
+
+/**
+ * The permission patterns a command line needs, one per command in it:
+ *   'npm run dev && git status'  ->  ['npm run dev', 'git status']
+ * Subshells, backticks and redirections into files return null: too dynamic
+ * (or too destructive) to approve by name alone.
+ */
+function commandPatterns(line) {
+  const text = String(line || '');
+  if (/\$\(|`|>/.test(text)) return null;
+  const pats = splitCommands(text).map((c) => prefix(tokenize(c)).join(' ')).filter(Boolean);
+  return pats.length ? [...new Set(pats)] : null;
+}
+
+module.exports = { commandPatterns, prefix, tokenize, splitCommands };

package/lib/auth.mjs

@@ -1,6 +1,6 @@
-import { createRequire } from 'module';
-const require = createRequire(import.meta.url);
-
-const auth = require('./auth.js');
-export default auth;
-export const { SUPABASE_URL, SUPABASE_ANON_KEY, getClient, login, logout, getSession, getAccessToken } = auth;
+import { createRequire } from 'module';
+const require = createRequire(import.meta.url);
+
+const auth = require('./auth.js');
+export default auth;
+export const { SUPABASE_URL, SUPABASE_ANON_KEY, getClient, login, logout, getSession, getAccessToken } = auth;