codiedev 0.7.8 → 0.7.10

package/dist/connect.js

@@ -42,11 +42,73 @@ const connectFlow_1 = require("./connectFlow");
 const version_1 = require("./version");
 const upgradeNudge_1 = require("./upgradeNudge");
 const BACKEND_URL = process.env.CODIEDEV_URL || "https://judicious-falcon-861.convex.site";
-function prompt(rl, question) {
+/**
+ * Reads a line from stdin without echoing the typed/pasted characters —
+ * for tokens, passwords, anything that shouldn't end up in terminal
+ * scrollback or screenshots. Echoes `*` per character so the user gets
+ * visual feedback that input is being received.
+ *
+ * Falls back to the regular `prompt()` if stdin isn't a TTY (e.g., piped
+ * input in CI). Without a TTY there's no echo to suppress anyway, and
+ * raw mode would error.
+ */
+function promptHidden(question) {
     return new Promise((resolve) => {
-        rl.question(question, (answer) => {
-            resolve(answer.trim());
-        });
+        const stdin = process.stdin;
+        const stdout = process.stdout;
+        if (!stdin.isTTY) {
+            // CI / piped input — no terminal to mute. Fall back to readline.
+            const rl = readline.createInterface({ input: stdin, output: stdout });
+            rl.question(question, (answer) => {
+                rl.close();
+                resolve(answer.trim());
+            });
+            return;
+        }
+        stdout.write(question);
+        let buf = "";
+        const cleanup = () => {
+            stdin.removeListener("data", onData);
+            stdin.setRawMode(false);
+            stdin.pause();
+        };
+        const onData = (chunk) => {
+            const key = chunk.toString("utf8");
+            // Iterate so a single `chunk` containing a multi-char paste still
+            // masks each character individually.
+            for (const ch of key) {
+                // Ctrl+C — abort like a normal terminal interrupt.
+                if (ch === "") {
+                    cleanup();
+                    stdout.write("\n");
+                    process.exit(130);
+                }
+                // Enter — finalize.
+                if (ch === "\r" || ch === "\n") {
+                    cleanup();
+                    stdout.write("\n");
+                    resolve(buf.trim());
+                    return;
+                }
+                // Backspace / DEL — erase one masked char.
+                if (ch === "" || ch === "\b") {
+                    if (buf.length > 0) {
+                        buf = buf.slice(0, -1);
+                        stdout.write("\b \b");
+                    }
+                    continue;
+                }
+                // Ignore other control bytes (escape sequences from arrow keys, etc.)
+                if (ch.charCodeAt(0) < 0x20)
+                    continue;
+                buf += ch;
+                stdout.write("*");
+            }
+        };
+        stdin.setRawMode(true);
+        stdin.resume();
+        stdin.setEncoding("utf8");
+        stdin.on("data", onData);
     });
 }
 function postJson(url, body) {
@@ -109,16 +171,9 @@ async function runConnect(args = []) {
         console.log(`Reusing API token from ~/.codiedev/config.json (run with --force to use a new one).\n`);
     }
     else {
-        const rl = readline.createInterface({
-            input: process.stdin,
-            output: process.stdout,
-        });
-        try {
-            token = await prompt(rl, "Enter your CodieDev API token: ");
-        }
-        finally {
-            rl.close();
-        }
+        // Hidden prompt — masks the token with `*` as it's typed/pasted so it
+        // doesn't end up in terminal scrollback or screenshots.
+        token = await promptHidden("Enter your CodieDev API token: ");
         if (!token) {
             console.error("Error: API token is required.");
             process.exit(1);

package/dist/secret.d.ts

@@ -0,0 +1 @@
+export declare function maskToken(token: string | null | undefined): string;

package/dist/secret.js

@@ -0,0 +1,14 @@
+"use strict";
+// Display helpers for credential-shaped strings. Use anywhere a token /
+// secret might end up in user-visible output (logs, success lines, error
+// messages) so a stray `console.log` can't leak the full value.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.maskToken = maskToken;
+const PREFIX_LEN = 12;
+function maskToken(token) {
+    if (typeof token !== "string" || token.length === 0)
+        return "";
+    if (token.length <= PREFIX_LEN)
+        return token;
+    return `${token.slice(0, PREFIX_LEN)}...`;
+}

package/package.json

@@ -1,10 +1,10 @@
 {
   "name": "codiedev",
-  "version": "0.7.8",
+  "version": "0.7.10",
   "description": "Connect Claude Code, Codex, Cursor, or VS Code Copilot to CodieDev for org-wide session capture and artifact collaboration",
   "bin": {
-    "codiedev": "./dist/cli.js",
-    "codiedev-hook": "./dist/hook.js"
+    "codiedev": "dist/cli.js",
+    "codiedev-hook": "dist/hook.js"
   },
   "scripts": {
     "build": "tsc",

package/dist/__tests__/connectFlow.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/__tests__/connectFlow.test.js

@@ -1,33 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const vitest_1 = require("vitest");
-const connectFlow_1 = require("../connectFlow");
-const SAVED = {
-    token: "cdv_savedToken_xxxx",
-    companyId: "co_1",
-    companyName: "Sonifi",
-    repos: [],
-    lastSynced: new Date().toISOString(),
-    backendUrl: "https://example.test",
-};
-(0, vitest_1.describe)("resolveConnectToken", () => {
-    (0, vitest_1.it)("uses saved token when present and force=false", () => {
-        const res = (0, connectFlow_1.resolveConnectToken)({ savedConfig: SAVED, force: false });
-        (0, vitest_1.expect)(res).toEqual({ source: "reused", token: SAVED.token });
-    });
-    (0, vitest_1.it)("requires a prompt when no config exists", () => {
-        const res = (0, connectFlow_1.resolveConnectToken)({ savedConfig: null, force: false });
-        (0, vitest_1.expect)(res).toEqual({ source: "prompt-required" });
-    });
-    (0, vitest_1.it)("requires a prompt when --force is set, even if a saved token exists", () => {
-        const res = (0, connectFlow_1.resolveConnectToken)({ savedConfig: SAVED, force: true });
-        (0, vitest_1.expect)(res).toEqual({ source: "prompt-required" });
-    });
-    (0, vitest_1.it)("requires a prompt when saved config has empty token", () => {
-        const res = (0, connectFlow_1.resolveConnectToken)({
-            savedConfig: { ...SAVED, token: "" },
-            force: false,
-        });
-        (0, vitest_1.expect)(res).toEqual({ source: "prompt-required" });
-    });
-});

package/dist/__tests__/detection.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/__tests__/detection.test.js

@@ -1,18 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const vitest_1 = require("vitest");
-const detection_1 = require("../detection");
-(0, vitest_1.describe)("detectClaudeCode", () => {
-    (0, vitest_1.it)("returns false when neither ~/.claude nor `claude` binary present", () => {
-        (0, vitest_1.expect)((0, detection_1.detectClaudeCode)({ dirExists: false, binOnPath: false })).toBe(false);
-    });
-    (0, vitest_1.it)("returns true when only ~/.claude exists", () => {
-        (0, vitest_1.expect)((0, detection_1.detectClaudeCode)({ dirExists: true, binOnPath: false })).toBe(true);
-    });
-    (0, vitest_1.it)("returns true when only `claude` is on PATH (CC installed but never launched)", () => {
-        (0, vitest_1.expect)((0, detection_1.detectClaudeCode)({ dirExists: false, binOnPath: true })).toBe(true);
-    });
-    (0, vitest_1.it)("returns true when both are present", () => {
-        (0, vitest_1.expect)((0, detection_1.detectClaudeCode)({ dirExists: true, binOnPath: true })).toBe(true);
-    });
-});

package/dist/__tests__/prUrl.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/__tests__/prUrl.test.js

@@ -1,50 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const vitest_1 = require("vitest");
-const prUrl_1 = require("../prUrl");
-(0, vitest_1.describe)("parsePrOrMrUrl", () => {
-    (0, vitest_1.it)("parses a GitHub PR url", () => {
-        (0, vitest_1.expect)((0, prUrl_1.parsePrOrMrUrl)("https://github.com/foo/bar/pull/123")).toEqual({
-            provider: "github",
-            host: "github.com",
-            owner: "foo",
-            repo: "bar",
-            number: 123,
-        });
-    });
-    (0, vitest_1.it)("parses a GitLab.com MR url", () => {
-        (0, vitest_1.expect)((0, prUrl_1.parsePrOrMrUrl)("https://gitlab.com/sonifi/platform/-/merge_requests/42")).toEqual({
-            provider: "gitlab",
-            host: "gitlab.com",
-            owner: "sonifi",
-            repo: "platform",
-            number: 42,
-        });
-    });
-    (0, vitest_1.it)("parses a self-hosted GitLab MR url", () => {
-        (0, vitest_1.expect)((0, prUrl_1.parsePrOrMrUrl)("https://git.sonifi.com/internal/platform/-/merge_requests/7")).toEqual({
-            provider: "gitlab",
-            host: "git.sonifi.com",
-            owner: "internal",
-            repo: "platform",
-            number: 7,
-        });
-    });
-    (0, vitest_1.it)("parses a GitLab MR url with a nested group path", () => {
-        (0, vitest_1.expect)((0, prUrl_1.parsePrOrMrUrl)("https://gitlab.com/sonifi/team-a/platform/-/merge_requests/9")).toEqual({
-            provider: "gitlab",
-            host: "gitlab.com",
-            owner: "sonifi/team-a",
-            repo: "platform",
-            number: 9,
-        });
-    });
-    (0, vitest_1.it)("returns null for unrecognized URLs", () => {
-        (0, vitest_1.expect)((0, prUrl_1.parsePrOrMrUrl)("https://example.com/foo")).toBe(null);
-        (0, vitest_1.expect)((0, prUrl_1.parsePrOrMrUrl)("not a url")).toBe(null);
-        (0, vitest_1.expect)((0, prUrl_1.parsePrOrMrUrl)("")).toBe(null);
-    });
-    (0, vitest_1.it)("returns null when the number segment isn't an integer", () => {
-        (0, vitest_1.expect)((0, prUrl_1.parsePrOrMrUrl)("https://github.com/foo/bar/pull/abc")).toBe(null);
-    });
-});

package/dist/__tests__/repoResolver.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/__tests__/repoResolver.test.js

@@ -1,72 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const vitest_1 = require("vitest");
-const repoResolver_1 = require("../repoResolver");
-const ghRepo = { _id: "rep_gh1", owner: "Signal-and-Code", name: "vm-demo", gitProvider: "github" };
-const glRepo = { _id: "rep_gl1", owner: "sonifi", name: "platform", gitProvider: "gitlab" };
-(0, vitest_1.describe)("resolveRepoForCapture", () => {
-    (0, vitest_1.it)("returns the provided repoId when it matches a current repo", () => {
-        const res = (0, repoResolver_1.resolveRepoForCapture)({
-            remoteUrl: "https://github.com/Signal-and-Code/vm-demo.git",
-            providedRepoId: "rep_gh1",
-            companyRepos: [ghRepo],
-        });
-        (0, vitest_1.expect)(res).toEqual({ repoId: "rep_gh1", source: "provided" });
-    });
-    (0, vitest_1.it)("falls back to remoteUrl resolution when providedRepoId is stale", () => {
-        const res = (0, repoResolver_1.resolveRepoForCapture)({
-            remoteUrl: "https://github.com/Signal-and-Code/vm-demo.git",
-            providedRepoId: "rep_deleted",
-            companyRepos: [ghRepo],
-        });
-        (0, vitest_1.expect)(res).toEqual({ repoId: "rep_gh1", source: "resolved" });
-    });
-    (0, vitest_1.it)("resolves from remoteUrl when no providedRepoId is given (HTTPS form)", () => {
-        const res = (0, repoResolver_1.resolveRepoForCapture)({
-            remoteUrl: "https://github.com/Signal-and-Code/vm-demo.git",
-            providedRepoId: null,
-            companyRepos: [ghRepo],
-        });
-        (0, vitest_1.expect)(res).toEqual({ repoId: "rep_gh1", source: "resolved" });
-    });
-    (0, vitest_1.it)("resolves from remoteUrl when no providedRepoId is given (SSH form)", () => {
-        const res = (0, repoResolver_1.resolveRepoForCapture)({
-            remoteUrl: "git@github.com:Signal-and-Code/vm-demo.git",
-            providedRepoId: null,
-            companyRepos: [ghRepo],
-        });
-        (0, vitest_1.expect)(res).toEqual({ repoId: "rep_gh1", source: "resolved" });
-    });
-    (0, vitest_1.it)("resolves a GitLab remote against a gitlab-provider repo", () => {
-        const res = (0, repoResolver_1.resolveRepoForCapture)({
-            remoteUrl: "https://gitlab.com/sonifi/platform.git",
-            providedRepoId: null,
-            companyRepos: [ghRepo, glRepo],
-        });
-        (0, vitest_1.expect)(res).toEqual({ repoId: "rep_gl1", source: "resolved" });
-    });
-    (0, vitest_1.it)("resolves SSH-form GitLab URL", () => {
-        const res = (0, repoResolver_1.resolveRepoForCapture)({
-            remoteUrl: "git@gitlab.com:sonifi/platform.git",
-            providedRepoId: null,
-            companyRepos: [glRepo],
-        });
-        (0, vitest_1.expect)(res).toEqual({ repoId: "rep_gl1", source: "resolved" });
-    });
-    (0, vitest_1.it)("returns unmatched when remoteUrl matches no repo (don't drop the session — let backend decide)", () => {
-        const res = (0, repoResolver_1.resolveRepoForCapture)({
-            remoteUrl: "https://github.com/some/other-repo.git",
-            providedRepoId: null,
-            companyRepos: [ghRepo, glRepo],
-        });
-        (0, vitest_1.expect)(res).toEqual({ repoId: null, source: "unmatched" });
-    });
-    (0, vitest_1.it)("matches case-insensitively on owner/name (GitHub is case-insensitive on org/repo names)", () => {
-        const res = (0, repoResolver_1.resolveRepoForCapture)({
-            remoteUrl: "https://github.com/SIGNAL-AND-CODE/vm-demo.git",
-            providedRepoId: null,
-            companyRepos: [ghRepo],
-        });
-        (0, vitest_1.expect)(res).toEqual({ repoId: "rep_gh1", source: "resolved" });
-    });
-});

package/dist/__tests__/scope.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/__tests__/scope.test.js

@@ -1,24 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const vitest_1 = require("vitest");
-const scope_1 = require("../scope");
-(0, vitest_1.describe)("formatScope", () => {
-    (0, vitest_1.it)("formats matched-repo case", () => {
-        (0, vitest_1.expect)((0, scope_1.formatScope)({
-            workspaceName: "Sonifi",
-            matchedRepo: { fullName: "Signal-and-Code/codiedev-ea" },
-        })).toBe("→ Sonifi (matched Signal-and-Code/codiedev-ea)");
-    });
-    (0, vitest_1.it)("formats no-match case", () => {
-        (0, vitest_1.expect)((0, scope_1.formatScope)({ workspaceName: "Sonifi", matchedRepo: null })).toBe("→ Sonifi (default profile, no repo match)");
-    });
-    (0, vitest_1.it)("handles unknown workspace gracefully", () => {
-        (0, vitest_1.expect)((0, scope_1.formatScope)({ workspaceName: "", matchedRepo: null })).toBe("→ unknown workspace");
-    });
-    (0, vitest_1.it)("handles unknown workspace with matched repo", () => {
-        (0, vitest_1.expect)((0, scope_1.formatScope)({
-            workspaceName: "",
-            matchedRepo: { fullName: "Foo/Bar" },
-        })).toBe("→ unknown workspace");
-    });
-});

package/dist/__tests__/versionCheck.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/__tests__/versionCheck.test.js

@@ -1,85 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const vitest_1 = require("vitest");
-const versionCheck_1 = require("../versionCheck");
-(0, vitest_1.describe)("parseSemver", () => {
-    (0, vitest_1.it)("parses a normal version", () => {
-        (0, vitest_1.expect)((0, versionCheck_1.parseSemver)("0.7.7")).toEqual({ major: 0, minor: 7, patch: 7 });
-    });
-    (0, vitest_1.it)("strips a leading v", () => {
-        (0, vitest_1.expect)((0, versionCheck_1.parseSemver)("v1.2.3")).toEqual({ major: 1, minor: 2, patch: 3 });
-    });
-    (0, vitest_1.it)("ignores prerelease/build suffixes", () => {
-        (0, vitest_1.expect)((0, versionCheck_1.parseSemver)("1.2.3-beta.1+build.99")).toEqual({
-            major: 1,
-            minor: 2,
-            patch: 3,
-        });
-    });
-    (0, vitest_1.it)("returns null for malformed input", () => {
-        (0, vitest_1.expect)((0, versionCheck_1.parseSemver)("")).toBe(null);
-        (0, vitest_1.expect)((0, versionCheck_1.parseSemver)("not.a.version")).toBe(null);
-        (0, vitest_1.expect)((0, versionCheck_1.parseSemver)("1.2")).toBe(null);
-    });
-});
-(0, vitest_1.describe)("compareSemver", () => {
-    (0, vitest_1.it)("returns -1 when current is older (patch)", () => {
-        (0, vitest_1.expect)((0, versionCheck_1.compareSemver)("0.7.6", "0.7.7")).toBe(-1);
-    });
-    (0, vitest_1.it)("returns -1 when current is older (minor)", () => {
-        (0, vitest_1.expect)((0, versionCheck_1.compareSemver)("0.6.99", "0.7.0")).toBe(-1);
-    });
-    (0, vitest_1.it)("returns -1 when current is older (major)", () => {
-        (0, vitest_1.expect)((0, versionCheck_1.compareSemver)("0.99.99", "1.0.0")).toBe(-1);
-    });
-    (0, vitest_1.it)("returns 0 when equal", () => {
-        (0, vitest_1.expect)((0, versionCheck_1.compareSemver)("0.7.7", "0.7.7")).toBe(0);
-    });
-    (0, vitest_1.it)("returns 1 when current is ahead of latest (e.g. local dev build)", () => {
-        (0, vitest_1.expect)((0, versionCheck_1.compareSemver)("0.8.0", "0.7.7")).toBe(1);
-    });
-    (0, vitest_1.it)("treats malformed inputs as equal — never warn on garbage", () => {
-        (0, vitest_1.expect)((0, versionCheck_1.compareSemver)("garbage", "0.7.7")).toBe(0);
-        (0, vitest_1.expect)((0, versionCheck_1.compareSemver)("0.7.7", "garbage")).toBe(0);
-    });
-});
-(0, vitest_1.describe)("shouldShowUpdateWarning", () => {
-    const now = 1_777_777_777_000;
-    const dayMs = 24 * 60 * 60 * 1000;
-    (0, vitest_1.it)("warns when current is older AND cache is fresh", () => {
-        (0, vitest_1.expect)((0, versionCheck_1.shouldShowUpdateWarning)({
-            current: "0.7.6",
-            latest: "0.7.7",
-            lastChecked: now - 1000,
-            nowMs: now,
-            cacheTtlMs: dayMs,
-        })).toBe(true);
-    });
-    (0, vitest_1.it)("does not warn when current matches latest", () => {
-        (0, vitest_1.expect)((0, versionCheck_1.shouldShowUpdateWarning)({
-            current: "0.7.7",
-            latest: "0.7.7",
-            lastChecked: now,
-            nowMs: now,
-            cacheTtlMs: dayMs,
-        })).toBe(false);
-    });
-    (0, vitest_1.it)("does not warn when latest is unknown (no fetch yet)", () => {
-        (0, vitest_1.expect)((0, versionCheck_1.shouldShowUpdateWarning)({
-            current: "0.7.6",
-            latest: null,
-            lastChecked: 0,
-            nowMs: now,
-            cacheTtlMs: dayMs,
-        })).toBe(false);
-    });
-    (0, vitest_1.it)("does not warn when current is ahead of latest (dev build)", () => {
-        (0, vitest_1.expect)((0, versionCheck_1.shouldShowUpdateWarning)({
-            current: "0.8.0",
-            latest: "0.7.7",
-            lastChecked: now,
-            nowMs: now,
-            cacheTtlMs: dayMs,
-        })).toBe(false);
-    });
-});