commandmate 0.1.6 → 0.1.8

package/dist/cli/utils/env-setup.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"env-setup.d.ts","sourceRoot":"","sources":["../../../src/cli/utils/env-setup.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAUH,OAAO,EACL,SAAS,EACT,eAAe,EACf,gBAAgB,EACjB,MAAM,UAAU,CAAC;AAElB;;;GAGG;AACH,eAAO,MAAM,YAAY;;;;;;CAMf,CAAC;AAEX;;;GAGG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAGnD;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAGlD;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAMlD;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAUpD;AAED;;GAEG;AACH,qBAAa,QAAQ;IACnB,OAAO,CAAC,OAAO,CAAS;gBAEZ,OAAO,CAAC,EAAE,MAAM;IAI5B;;;OAGG;IACG,aAAa,CACjB,MAAM,EAAE,SAAS,EACjB,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,IAAI,CAAC;IAiChB;;OAEG;IACG,cAAc,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAY9C;;OAEG;IACH,iBAAiB,IAAI,MAAM;IAI3B;;OAEG;IACH,cAAc,CAAC,MAAM,EAAE,SAAS,GAAG,gBAAgB;CAoCpD"}
+{"version":3,"file":"env-setup.d.ts","sourceRoot":"","sources":["../../../src/cli/utils/env-setup.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAaH,OAAO,EACL,SAAS,EACT,eAAe,EACf,gBAAgB,EACjB,MAAM,UAAU,CAAC;AAElB;;;GAGG;AACH,eAAO,MAAM,YAAY;;;;;;CAMf,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,gBAAgB,QAA2B,CAAC;AAEzD;;;;;GAKG;AACH,wBAAgB,eAAe,IAAI,OAAO,CAYzC;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,IAAI,MAAM,CAcnC;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,MAAM,CASpF;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAqBrC;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAGnD;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAGlD;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAMlD;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAUpD;AAED;;GAEG;AACH,qBAAa,QAAQ;IACnB,OAAO,CAAC,OAAO,CAAS;gBAEZ,OAAO,CAAC,EAAE,MAAM;IAI5B;;;OAGG;IACG,aAAa,CACjB,MAAM,EAAE,SAAS,EACjB,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,IAAI,CAAC;IAiChB;;OAEG;IACG,cAAc,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAY9C;;OAEG;IACH,iBAAiB,IAAI,MAAM;IAI3B;;OAEG;IACH,cAAc,CAAC,MAAM,EAAE,SAAS,GAAG,gBAAgB;CAoCpD"}

package/dist/cli/utils/env-setup.js

@@ -5,7 +5,12 @@
  * Migrated from scripts/setup-env.sh
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.EnvSetup = exports.ENV_DEFAULTS = void 0;
+exports.EnvSetup = exports.DEFAULT_ROOT_DIR = exports.ENV_DEFAULTS = void 0;
+exports.isGlobalInstall = isGlobalInstall;
+exports.getEnvPath = getEnvPath;
+exports.resolveSecurePath = resolveSecurePath;
+exports.getConfigDir = getConfigDir;
+exports.getPidFilePath = getPidFilePath;
 exports.sanitizeInput = sanitizeInput;
 exports.sanitizePath = sanitizePath;
 exports.validatePort = validatePort;
@@ -13,6 +18,7 @@ exports.escapeEnvValue = escapeEnvValue;
 const fs_1 = require("fs");
 const path_1 = require("path");
 const crypto_1 = require("crypto");
+const os_1 = require("os");
 /**
  * Default environment configuration values
  * SF-4: DRY - Centralized defaults
@@ -24,6 +30,97 @@ exports.ENV_DEFAULTS = {
     CM_LOG_LEVEL: 'info',
     CM_LOG_FORMAT: 'text',
 };
+/**
+ * Default root directory for worktrees
+ */
+exports.DEFAULT_ROOT_DIR = (0, path_1.join)((0, os_1.homedir)(), 'repos');
+/**
+ * Check if running as global npm package
+ * Issue #119: Determine .env location based on install type
+ *
+ * @returns true if running as global npm package
+ */
+function isGlobalInstall() {
+    // Check if running from global node_modules
+    // Global installs typically have paths like:
+    // - /usr/local/lib/node_modules/
+    // - /Users/xxx/.npm-global/lib/node_modules/
+    // - C:\Users\xxx\AppData\Roaming\npm\node_modules\
+    const currentPath = (0, path_1.dirname)(__dirname);
+    return (currentPath.includes('/lib/node_modules/') ||
+        currentPath.includes('\\node_modules\\') ||
+        currentPath.includes('/node_modules/commandmate'));
+}
+/**
+ * Get the path to .env file based on install type
+ * Issue #119: Global install uses ~/.commandmate/, local uses cwd
+ *
+ * @returns Path to .env file
+ */
+function getEnvPath() {
+    if (isGlobalInstall()) {
+        const configDir = (0, path_1.join)((0, os_1.homedir)(), '.commandmate');
+        // Create config directory if it doesn't exist
+        if (!(0, fs_1.existsSync)(configDir)) {
+            (0, fs_1.mkdirSync)(configDir, { recursive: true, mode: 0o700 });
+        }
+        return (0, path_1.join)(configDir, '.env');
+    }
+    // Local install - use current working directory
+    return (0, path_1.join)(process.cwd(), '.env');
+}
+/**
+ * Resolve path securely by resolving symlinks and verifying within allowed directory
+ * Issue #125: Path traversal protection (OWASP A01:2021 - Broken Access Control)
+ *
+ * @param targetPath - The path to resolve and verify
+ * @param allowedBaseDir - The base directory that targetPath must be within
+ * @returns The resolved real path
+ * @throws Error if path resolves outside allowed directory
+ */
+function resolveSecurePath(targetPath, allowedBaseDir) {
+    const realPath = (0, fs_1.realpathSync)(targetPath);
+    const realBaseDir = (0, fs_1.realpathSync)(allowedBaseDir);
+    if (!realPath.startsWith(realBaseDir)) {
+        throw new Error(`Path traversal detected: ${targetPath} resolves outside of ${allowedBaseDir}`);
+    }
+    return realPath;
+}
+/**
+ * Get the config directory path
+ * Issue #119: Returns ~/.commandmate for global, cwd for local
+ * Issue #125: Added symlink resolution for security (path traversal protection)
+ *
+ * @returns Path to config directory (absolute, with symlinks resolved)
+ */
+function getConfigDir() {
+    if (isGlobalInstall()) {
+        const configDir = (0, path_1.join)((0, os_1.homedir)(), '.commandmate');
+        // Verify config directory is within home directory (security check)
+        // Only validate if the directory exists (it may not exist yet during init)
+        if ((0, fs_1.existsSync)(configDir)) {
+            const realPath = (0, fs_1.realpathSync)(configDir);
+            const realHome = (0, fs_1.realpathSync)((0, os_1.homedir)());
+            if (!realPath.startsWith(realHome)) {
+                throw new Error(`Security error: Config directory ${configDir} is outside home directory`);
+            }
+            return realPath;
+        }
+        return configDir;
+    }
+    // Local install - resolve symlinks in cwd
+    const cwd = process.cwd();
+    return (0, fs_1.realpathSync)(cwd);
+}
+/**
+ * Get the PID file path based on install type
+ * Issue #125: DRY principle - centralized PID file path resolution
+ *
+ * @returns Path to PID file (uses getConfigDir for consistency)
+ */
+function getPidFilePath() {
+    return (0, path_1.join)(getConfigDir(), '.commandmate.pid');
+}
 /**
  * Sanitize input by removing control characters
  * SF-SEC-3: Input sanitization

package/dist/cli/utils/prompt.d.ts

@@ -0,0 +1,68 @@
+/**
+ * Interactive Prompt Utilities
+ * Issue #119: Interactive init support
+ *
+ * Provides readline-based prompts for CLI commands.
+ * Reference implementation: scripts/setup-env.sh
+ */
+import { PromptOptions, ConfirmOptions } from '../types';
+/**
+ * Close readline interface
+ * Should be called when all prompts are done
+ */
+export declare function closeReadline(): void;
+/**
+ * Expand tilde (~) to home directory
+ *
+ * @param path - Path that may contain tilde
+ * @returns Path with tilde expanded to home directory
+ *
+ * @example
+ * expandTilde('~/repos') // '/Users/xxx/repos'
+ * expandTilde('/absolute/path') // '/absolute/path'
+ */
+export declare function expandTilde(path: string): string;
+/**
+ * Resolve path to absolute path
+ * Handles tilde expansion and relative paths
+ *
+ * @param path - Path to resolve
+ * @returns Absolute path
+ */
+export declare function resolvePath(path: string): string;
+/**
+ * Validate port number
+ *
+ * @param input - Port number as string
+ * @returns Error message or true if valid
+ */
+export declare function validatePort(input: string): string | true;
+/**
+ * Interactive prompt with default value and validation
+ *
+ * @param question - Question to display
+ * @param options - Prompt options (default, validate)
+ * @returns User input or default value
+ *
+ * @example
+ * const port = await prompt('Server port', { default: '3000', validate: validatePort });
+ */
+export declare function prompt(question: string, options?: PromptOptions): Promise<string>;
+/**
+ * Interactive Yes/No confirmation
+ *
+ * @param question - Question to display
+ * @param options - Confirm options (default)
+ * @returns true for Yes, false for No
+ *
+ * @example
+ * const enableExternal = await confirm('Enable external access?', { default: false });
+ */
+export declare function confirm(question: string, options?: ConfirmOptions): Promise<boolean>;
+/**
+ * Check if running in interactive mode (TTY)
+ *
+ * @returns true if stdin is a TTY (interactive terminal)
+ */
+export declare function isInteractive(): boolean;
+//# sourceMappingURL=prompt.d.ts.map

package/dist/cli/utils/prompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt.d.ts","sourceRoot":"","sources":["../../../src/cli/utils/prompt.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAqBzD;;;GAGG;AACH,wBAAgB,aAAa,IAAI,IAAI,CAKpC;AAED;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAQhD;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAGhD;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CASzD;AAED;;;;;;;;;GASG;AACH,wBAAsB,MAAM,CAC1B,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,aAAkB,GAC1B,OAAO,CAAC,MAAM,CAAC,CA8BjB;AAED;;;;;;;;;GASG;AACH,wBAAsB,OAAO,CAC3B,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,OAAO,CAAC,CAmClB;AAED;;;;GAIG;AACH,wBAAgB,aAAa,IAAI,OAAO,CAEvC"}

package/dist/cli/utils/prompt.js

@@ -0,0 +1,208 @@
+"use strict";
+/**
+ * Interactive Prompt Utilities
+ * Issue #119: Interactive init support
+ *
+ * Provides readline-based prompts for CLI commands.
+ * Reference implementation: scripts/setup-env.sh
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.closeReadline = closeReadline;
+exports.expandTilde = expandTilde;
+exports.resolvePath = resolvePath;
+exports.validatePort = validatePort;
+exports.prompt = prompt;
+exports.confirm = confirm;
+exports.isInteractive = isInteractive;
+const readline = __importStar(require("readline"));
+const os_1 = require("os");
+const path_1 = require("path");
+/**
+ * Readline interface singleton
+ * Reused across prompts to avoid creating multiple interfaces
+ */
+let rlInstance = null;
+/**
+ * Get or create readline interface
+ */
+function getReadlineInterface() {
+    if (!rlInstance) {
+        rlInstance = readline.createInterface({
+            input: process.stdin,
+            output: process.stdout,
+        });
+    }
+    return rlInstance;
+}
+/**
+ * Close readline interface
+ * Should be called when all prompts are done
+ */
+function closeReadline() {
+    if (rlInstance) {
+        rlInstance.close();
+        rlInstance = null;
+    }
+}
+/**
+ * Expand tilde (~) to home directory
+ *
+ * @param path - Path that may contain tilde
+ * @returns Path with tilde expanded to home directory
+ *
+ * @example
+ * expandTilde('~/repos') // '/Users/xxx/repos'
+ * expandTilde('/absolute/path') // '/absolute/path'
+ */
+function expandTilde(path) {
+    if (path.startsWith('~/')) {
+        return path.replace(/^~/, (0, os_1.homedir)());
+    }
+    if (path === '~') {
+        return (0, os_1.homedir)();
+    }
+    return path;
+}
+/**
+ * Resolve path to absolute path
+ * Handles tilde expansion and relative paths
+ *
+ * @param path - Path to resolve
+ * @returns Absolute path
+ */
+function resolvePath(path) {
+    const expanded = expandTilde(path);
+    return (0, path_1.resolve)(expanded);
+}
+/**
+ * Validate port number
+ *
+ * @param input - Port number as string
+ * @returns Error message or true if valid
+ */
+function validatePort(input) {
+    const port = parseInt(input, 10);
+    if (isNaN(port)) {
+        return 'Port must be a number';
+    }
+    if (port < 1 || port > 65535) {
+        return 'Port must be between 1 and 65535';
+    }
+    return true;
+}
+/**
+ * Interactive prompt with default value and validation
+ *
+ * @param question - Question to display
+ * @param options - Prompt options (default, validate)
+ * @returns User input or default value
+ *
+ * @example
+ * const port = await prompt('Server port', { default: '3000', validate: validatePort });
+ */
+async function prompt(question, options = {}) {
+    const rl = getReadlineInterface();
+    const { default: defaultValue, validate } = options;
+    const displayQuestion = defaultValue
+        ? `? ${question} [${defaultValue}]: `
+        : `? ${question}: `;
+    return new Promise((resolvePromise) => {
+        const askQuestion = () => {
+            rl.question(displayQuestion, (answer) => {
+                const trimmedAnswer = answer.trim();
+                const result = trimmedAnswer || defaultValue || '';
+                // Validate if validator provided
+                if (validate && result) {
+                    const validationResult = validate(result);
+                    if (validationResult !== true) {
+                        console.log(`  Error: ${validationResult}`);
+                        askQuestion(); // Re-ask
+                        return;
+                    }
+                }
+                resolvePromise(result);
+            });
+        };
+        askQuestion();
+    });
+}
+/**
+ * Interactive Yes/No confirmation
+ *
+ * @param question - Question to display
+ * @param options - Confirm options (default)
+ * @returns true for Yes, false for No
+ *
+ * @example
+ * const enableExternal = await confirm('Enable external access?', { default: false });
+ */
+async function confirm(question, options = {}) {
+    const rl = getReadlineInterface();
+    const defaultValue = options.default ?? false;
+    const hint = defaultValue ? '(Y/n)' : '(y/N)';
+    const displayQuestion = `? ${question} ${hint}: `;
+    return new Promise((resolvePromise) => {
+        const askQuestion = () => {
+            rl.question(displayQuestion, (answer) => {
+                const trimmedAnswer = answer.trim().toLowerCase();
+                if (trimmedAnswer === '') {
+                    resolvePromise(defaultValue);
+                    return;
+                }
+                if (trimmedAnswer === 'y' || trimmedAnswer === 'yes') {
+                    resolvePromise(true);
+                    return;
+                }
+                if (trimmedAnswer === 'n' || trimmedAnswer === 'no') {
+                    resolvePromise(false);
+                    return;
+                }
+                // Invalid input - re-ask
+                console.log('  Please answer with y/n or yes/no');
+                askQuestion();
+            });
+        };
+        askQuestion();
+    });
+}
+/**
+ * Check if running in interactive mode (TTY)
+ *
+ * @returns true if stdin is a TTY (interactive terminal)
+ */
+function isInteractive() {
+    return process.stdin.isTTY === true;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "commandmate",
-  "version": "0.1.6",
+  "version": "0.1.8",
   "description": "Git worktree management with Claude CLI and tmux sessions",
   "repository": {
     "type": "git",
@@ -41,6 +41,7 @@
     "better-sqlite3": "^12.4.1",
     "commander": "^14.0.2",
     "date-fns": "^4.1.0",
+    "dotenv": "^17.2.3",
     "gray-matter": "^4.0.3",
     "http-proxy": "^1.18.1",
     "isomorphic-dompurify": "^2.35.0",