codeslick-cli 1.5.2 → 1.5.4

package/bin/codeslick.cjs

@@ -1,188 +1,7 @@
 #!/usr/bin/env node
-
 /**
- * CodeSlick CLI - Pre-commit Security Scanner
- *
- * This is the main entry point for the CodeSlick CLI tool.
- * It handles command routing and error handling for all CLI commands.
- *
- * Usage:
- *   codeslick init          - Initialize CodeSlick in repository
- *   codeslick scan          - Scan staged files for vulnerabilities
- *   codeslick config        - Manage configuration
- *   codeslick auth          - Authenticate CLI (login, logout, whoami)
- *
- * Short alias: Use 'cs' instead of 'codeslick' for faster typing
- *   cs init                 - Same as 'codeslick init'
- *   cs scan                 - Same as 'codeslick scan'
- *
- * @see https://codeslick.dev/docs/cli for full documentation
+ * CodeSlick CLI entry shim.
+ * All logic is bundled in dist/codeslick-bundle.cjs via esbuild.
+ * This shim exists only to provide the #!/usr/bin/env node line and the bin path.
  */
-
-const yargs = require('yargs');
-const { hideBin } = require('yargs/helpers');
-const { scanCommand } = require('../dist/packages/cli/src/commands/scan');
-const { initCommand } = require('../dist/packages/cli/src/commands/init');
-const { configCommand } = require('../dist/packages/cli/src/commands/config');
-const { loginCommand, logoutCommand, whoamiCommand } = require('../dist/packages/cli/src/commands/auth');
-const { startBackgroundUpdateCheck } = require('../dist/packages/cli/src/utils/version-check');
-const { version } = require('../package.json');
-
-// Start version check in background (non-blocking)
-// Will print notification at the end if update is available
-void startBackgroundUpdateCheck();
-
-// Detect if running as 'cs' or 'codeslick'
-const scriptName = process.argv[1].includes('/cs') ? 'cs' : 'codeslick';
-
-// Main CLI application
-yargs(hideBin(process.argv))
-  .scriptName(scriptName)
-  .usage('$0 <command> [options]')
-  .command(
-    'init',
-    'Initialize CodeSlick in your repository',
-    (yargs) => {
-      return yargs
-        .option('force', {
-          alias: 'f',
-          type: 'boolean',
-          description: 'Force re-initialization (overwrite existing config)',
-          default: false,
-        })
-        .option('severity', {
-          alias: 's',
-          type: 'string',
-          description: 'Default severity threshold (critical|high|medium|low)',
-          default: 'critical',
-          choices: ['critical', 'high', 'medium', 'low'],
-        });
-    },
-    initCommand
-  )
-  .command(
-    'scan [files..]',
-    'Scan files for security vulnerabilities',
-    (yargs) => {
-      return yargs
-        .positional('files', {
-          type: 'string',
-          array: true,
-          description: 'Files or patterns to scan (default: staged files)',
-        })
-        .option('staged', {
-          type: 'boolean',
-          description: 'Scan only staged files (git) - this is the default',
-          default: true,
-        })
-        .option('all', {
-          alias: 'a',
-          type: 'boolean',
-          description: 'Scan all files in repository (overrides --staged)',
-          default: false,
-        })
-        .option('quick', {
-          alias: 'q',
-          type: 'boolean',
-          description: 'Quick scan - skip deep TypeScript type checking for speed',
-          default: false,
-        })
-        .option('verbose', {
-          alias: 'v',
-          type: 'boolean',
-          description: 'Show detailed results for all files (default: top 10 only)',
-          default: false,
-        })
-        .option('severity', {
-          alias: 's',
-          type: 'string',
-          description: 'Severity threshold (critical|high|medium|low)',
-          choices: ['critical', 'high', 'medium', 'low'],
-        })
-        .option('fix', {
-          type: 'boolean',
-          description: 'Auto-apply fixes (where possible)',
-          default: false,
-        })
-        .option('json', {
-          type: 'boolean',
-          description: 'Output results as JSON',
-          default: false,
-        })
-        .option('verify', {
-          type: 'boolean',
-          description: 'Run tests after security scan (combined pass/fail)',
-          default: false,
-        })
-        .option('test-command', {
-          type: 'string',
-          description: 'Custom test command (e.g., "npm test", "pytest")',
-        });
-    },
-    scanCommand
-  )
-  .command(
-    'config <action> [key] [value]',
-    'Manage CodeSlick configuration',
-    (yargs) => {
-      return yargs
-        .positional('action', {
-          type: 'string',
-          description: 'Action to perform (get|set|list)',
-          choices: ['get', 'set', 'list'],
-        })
-        .positional('key', {
-          type: 'string',
-          description: 'Configuration key',
-        })
-        .positional('value', {
-          type: 'string',
-          description: 'Configuration value',
-        });
-    },
-    configCommand
-  )
-  .command(
-    'auth <action>',
-    'Manage CLI authentication',
-    (yargs) => {
-      return yargs
-        .positional('action', {
-          type: 'string',
-          description: 'Action to perform (login|logout|whoami)',
-          choices: ['login', 'logout', 'whoami'],
-        });
-    },
-    async (argv) => {
-      switch (argv.action) {
-        case 'login':
-          await loginCommand();
-          break;
-        case 'logout':
-          await logoutCommand();
-          break;
-        case 'whoami':
-          await whoamiCommand();
-          break;
-      }
-    }
-  )
-  .example('$0 init', 'Initialize CodeSlick in your repository')
-  .example('$0 scan', 'Scan all staged files')
-  .example('$0 scan src/**/*.js', 'Scan specific files')
-  .example('$0 scan --staged --severity high', 'Scan staged files, block on HIGH+')
-  .example('$0 scan --verify', 'Scan files AND run tests (combined pass/fail)')
-  .example('$0 scan --verify --test-command "pytest"', 'Scan + run custom test command')
-  .example('$0 config set severity critical', 'Set severity threshold')
-  .example('$0 config list', 'List all configuration')
-  .example('$0 auth login', 'Authenticate CLI via browser')
-  .example('$0 auth whoami', 'Show current user and quota')
-  .example('$0 auth logout', 'Remove local credentials')
-  .demandCommand(1, 'You must provide a command')
-  .help()
-  .alias('help', 'h')
-  .version(version)
-  .alias('version', 'v')
-  .epilog('For more information, visit https://codeslick.dev/docs/cli')
-  .strict()
-  .parse();
+require('../dist/codeslick-bundle.cjs');

package/build.mjs

@@ -0,0 +1,70 @@
+/**
+ * CLI Bundle Script
+ *
+ * Bundles the CLI and all internal dependencies into a single CJS file.
+ * This permanently solves the "missing module" class of bugs that occur
+ * when internal monorepo packages (@codeslick/*, acorn) aren't published.
+ *
+ * Externals (NOT bundled — must be present in node_modules at runtime):
+ *   - typescript: compiler API requires dynamic file resolution
+ *   - glob, chalk, ora, cli-table3, yargs, yargs/helpers: declared in package.json
+ *   - All node:* built-ins
+ */
+
+import esbuild from 'esbuild';
+import { mkdirSync, existsSync } from 'fs';
+
+console.log('[build] Bundling codeslick-cli...');
+
+if (!existsSync('./dist')) mkdirSync('./dist', { recursive: true });
+
+await esbuild.build({
+  entryPoints: ['src/cli-entry.ts'],
+  bundle: true,
+  platform: 'node',
+  target: 'node18',
+  format: 'cjs',
+  outfile: 'dist/codeslick-bundle.cjs',
+  sourcemap: false,   // keep published output clean
+  minify: false,      // readable for debugging
+
+  external: [
+    // Runtime deps — declared in package.json, installed by npm
+    'typescript',
+    'glob',
+    'chalk',
+    'ora',
+    'cli-table3',
+    'yargs',
+    'yargs/helpers',
+    // Node.js built-ins
+    'child_process',
+    'fs',
+    'fs/promises',
+    'path',
+    'os',
+    'crypto',
+    'util',
+    'readline',
+    'stream',
+    'url',
+    'http',
+    'https',
+    'net',
+    'tls',
+    'buffer',
+    'events',
+    'module',
+    'perf_hooks',
+    'vm',
+    'assert',
+    'tty',
+    'zlib',
+  ],
+
+}).then(() => {
+  console.log('[build] Done → dist/codeslick-bundle.cjs');
+}).catch(err => {
+  console.error('[build] Failed:', err.message);
+  process.exit(1);
+});