commitshow 0.3.28 → 0.3.29

package/dist/commands/audit.js

@@ -23,10 +23,22 @@ export async function audit(args) {
         ?? (sourceIdx >= 0 ? args[sourceIdx + 1] : undefined)
         ?? process.env.COMMITSHOW_SOURCE
         ?? null;
-    const positional = args.find(a => !a.startsWith('--') && a !== sourceFlag);
+    // --workspace <path> · explicit override of the server-side auto-pick
+    // for monorepo audits. Both --workspace=apps/web and --workspace apps/web
+    // forms accepted. Passes through to the Edge Function as `workspace`
+    // in the audit request body. Inline path inside the URL
+    // (`github.com/o/r/apps/web`) is the second-priority source — picked
+    // up by resolveTarget() if the flag isn't set.
+    const workspaceIdx = args.indexOf('--workspace');
+    const workspaceFlag = args.find(a => a.startsWith('--workspace='))?.split('=')[1]
+        ?? (workspaceIdx >= 0 ? args[workspaceIdx + 1] : undefined)
+        ?? null;
+    const positional = args.find(a => !a.startsWith('--') &&
+        a !== sourceFlag &&
+        a !== workspaceFlag);
     let target;
     try {
-        target = resolveTarget(positional);
+        target = resolveTarget(positional, { workspace: workspaceFlag });
     }
     catch (err) {
         if (err instanceof TargetError) {
@@ -141,7 +153,11 @@ export async function audit(args) {
         else
             console.log(c.dim('First time on commit.show for this repo — running a preview audit…'));
     }
-    const result = await runPreviewAudit(target.github_url, undefined, { force, source: sourceFlag });
+    const result = await runPreviewAudit(target.github_url, undefined, {
+        force,
+        source: sourceFlag,
+        workspace: target.workspace,
+    });
     // Error envelope
     if ('error' in result) {
         const err = result;

package/dist/index.js

@@ -39,15 +39,21 @@ ${c.muted('COMMANDS')}
   ${c.gold('whoami')}                who am I signed in as
 
 ${c.muted('FLAGS')}
-  ${c.gold('--json')}     stable machine-readable output (for agents · CI · jq pipes)
-  ${c.gold('--refresh')}  bypass the 7-day cache · re-run a fresh audit ${c.dim('(counts against IP cap)')}
+  ${c.gold('--json')}                stable machine-readable output (for agents · CI · jq pipes)
+  ${c.gold('--refresh')}             bypass the 7-day cache · re-run a fresh audit ${c.dim('(counts against IP cap)')}
+  ${c.gold('--workspace')} ${c.cream('<path>')}   monorepo: audit only this sub-app (e.g. apps/web · packages/next)
 
 ${c.muted('TARGET FORMS')}  ${c.dim('(default: cwd)')}
-  ${c.cream('commitshow audit')}                          ${c.dim('# cwd · git remote origin')}
-  ${c.cream('commitshow audit ./my-repo')}                ${c.dim('# local path')}
-  ${c.cream('commitshow audit github.com/owner/repo')}    ${c.dim('# remote shorthand')}
-  ${c.cream('commitshow audit https://github.com/o/r')}   ${c.dim('# full URL')}
-  ${c.cream('commitshow audit owner/repo')}               ${c.dim('# last-ditch shorthand')}
+  ${c.cream('commitshow audit')}                                  ${c.dim('# cwd · git remote origin')}
+  ${c.cream('commitshow audit ./my-repo')}                        ${c.dim('# local path')}
+  ${c.cream('commitshow audit github.com/owner/repo')}            ${c.dim('# remote shorthand')}
+  ${c.cream('commitshow audit https://github.com/o/r')}           ${c.dim('# full URL')}
+  ${c.cream('commitshow audit owner/repo')}                       ${c.dim('# last-ditch shorthand')}
+
+${c.muted('MONOREPO TARGETS')}  ${c.dim('(all three forms produce the same audit)')}
+  ${c.cream('commitshow audit github.com/o/r --workspace apps/web')}     ${c.dim('# explicit flag')}
+  ${c.cream('commitshow audit github.com/o/r/apps/web')}                 ${c.dim('# inline path')}
+  ${c.cream('commitshow audit https://github.com/o/r/tree/main/apps/web')} ${c.dim('# paste a GitHub browse URL')}
 
 ${c.muted('FOR AGENTS')}
   ${c.cream('commitshow audit github.com/owner/repo --json | jq .concerns')}

package/dist/lib/api.js

@@ -98,6 +98,10 @@ export async function runPreviewAudit(githubUrl, liveUrl, opts = {}) {
             live_url: liveUrl,
             force: opts.force === true,
             source: opts.source ?? null,
+            // Workspace = explicit override of the server's monorepo auto-pick.
+            // null/undefined = let the server pick (default); a path like
+            // 'apps/web' = audit only that workspace.
+            workspace: opts.workspace ?? null,
         }),
     });
     const body = await res.json().catch(() => ({ error: 'invalid_json' }));

package/dist/lib/target.js

@@ -2,12 +2,19 @@
 // { kind: 'remote-url', github_url } or { kind: 'local', path, github_url? }.
 //
 // Accepted inputs (all resolve to a GitHub HTTPS URL):
-//   · (omitted)                         → cwd · read `git remote get-url origin`
-//   · ./my-repo · /abs/path             → local dir · same remote inference
-//   · github.com/owner/repo             → bare host shorthand
-//   · https://github.com/owner/repo     → full URL
-//   · git@github.com:owner/repo.git     → ssh form (common in `git remote`)
-//   · owner/repo                        → last-ditch shorthand (2 segments, no dot)
+//   · (omitted)                                       → cwd · read `git remote get-url origin`
+//   · ./my-repo · /abs/path                           → local dir · same remote inference
+//   · github.com/owner/repo                           → bare host shorthand
+//   · https://github.com/owner/repo                   → full URL
+//   · git@github.com:owner/repo.git                   → ssh form (common in `git remote`)
+//   · owner/repo                                      → last-ditch shorthand (2 segments, no dot)
+//   · github.com/owner/repo/apps/web                  → inline workspace (post-2026-05-06)
+//   · https://github.com/owner/repo/tree/main/apps/web → GitHub browse URL (paste-friendly)
+//
+// Workspace selection precedence:
+//   1. --workspace <path> CLI flag (highest · explicit override)
+//   2. Inline path in target URL (sub-path after <owner>/<repo>)
+//   3. Auto-pick on the server (Edge Function priority-name → repo-name → file count)
 import { execSync } from 'node:child_process';
 import { existsSync, statSync } from 'node:fs';
 import { resolve } from 'node:path';
@@ -45,21 +52,65 @@ export async function verifyRemoteExists(githubUrl) {
         return { exists: true, ambiguous: true };
     }
 }
-const GITHUB_URL_RE = /^https?:\/\/github\.com\/([^/\s]+)\/([^/\s]+?)(?:\.git)?\/?$/i;
-const GITHUB_HOST_RE = /^github\.com\/([^/\s]+)\/([^/\s]+?)(?:\.git)?\/?$/i;
+// `github_url` patterns. Each captures (owner, repo, optional sub-path).
+// The sub-path lets users inline a workspace inside the URL itself instead
+// of using the --workspace flag (`github.com/o/r/apps/web` or paste of a
+// GitHub browse URL `https://github.com/o/r/tree/main/apps/web`).
+const GITHUB_URL_RE = /^https?:\/\/github\.com\/([^/\s]+)\/([^/\s]+?)(?:\.git)?(?:\/(.+))?\/?$/i;
+const GITHUB_HOST_RE = /^github\.com\/([^/\s]+)\/([^/\s]+?)(?:\.git)?(?:\/(.+))?\/?$/i;
 const GITHUB_SSH_RE = /^git@github\.com:([^/\s]+)\/([^/\s]+?)(?:\.git)?\/?$/i;
 const SLUG_RE = /^([A-Za-z0-9][\w.-]*)\/([A-Za-z0-9][\w.-]*)$/;
 function canonical(owner, repo) {
     return `https://github.com/${owner}/${repo.replace(/\.git$/, '')}`;
 }
+/**
+ * Normalize the sub-path portion of a GitHub URL into a workspace path.
+ * Handles the GitHub browse URL prefixes (`tree/<branch>/...` ·
+ * `blob/<branch>/...`) so users can paste any URL they're looking at.
+ *
+ * Rejects non-workspace prefixes (issues · pulls · actions · settings ·
+ * releases · wiki · etc.) — those aren't workspaces, returning null
+ * means "no inline workspace" rather than a confusing error.
+ */
+function normalizeSubpath(raw) {
+    if (!raw)
+        return null;
+    let s = raw.replace(/^\/+/, '').replace(/\/+$/, '');
+    if (!s)
+        return null;
+    // GitHub browse URL prefixes — strip and keep the path part
+    const browseMatch = s.match(/^(?:tree|blob)\/[^/]+\/(.+)$/i);
+    if (browseMatch)
+        s = browseMatch[1];
+    // Non-workspace GitHub URL prefixes — ignore the sub-path entirely
+    const NON_WORKSPACE_PREFIXES = [
+        'issues', 'pull', 'pulls', 'actions', 'settings', 'releases',
+        'wiki', 'security', 'pulse', 'graphs', 'network', 'commits',
+        'commit', 'compare', 'tags', 'branches', 'discussions', 'projects',
+    ];
+    const head = s.split('/')[0].toLowerCase();
+    if (NON_WORKSPACE_PREFIXES.includes(head))
+        return null;
+    return s;
+}
 function matchUrl(raw) {
     const s = raw.trim();
-    const urlMatch = s.match(GITHUB_URL_RE) ?? s.match(GITHUB_HOST_RE) ?? s.match(GITHUB_SSH_RE);
-    if (urlMatch)
-        return { owner: urlMatch[1], repo: urlMatch[2] };
+    const urlMatch = s.match(GITHUB_URL_RE) ?? s.match(GITHUB_HOST_RE);
+    if (urlMatch) {
+        return {
+            owner: urlMatch[1],
+            repo: urlMatch[2],
+            workspace: normalizeSubpath(urlMatch[3]),
+        };
+    }
+    const sshMatch = s.match(GITHUB_SSH_RE);
+    if (sshMatch) {
+        return { owner: sshMatch[1], repo: sshMatch[2], workspace: null };
+    }
     const slug = s.match(SLUG_RE);
-    if (slug && !slug[2].includes('.'))
-        return { owner: slug[1], repo: slug[2] };
+    if (slug && !slug[2].includes('.')) {
+        return { owner: slug[1], repo: slug[2], workspace: null };
+    }
     return null;
 }
 function gitRemoteOrigin(cwd) {
@@ -79,7 +130,11 @@ function gitRemoteOrigin(cwd) {
         return null;
     }
 }
-export function resolveTarget(rawArg) {
+export function resolveTarget(rawArg, opts = {}) {
+    // Workspace precedence: --workspace flag wins over inline URL path.
+    // Both normalized through the same path so the server receives a
+    // single shape.
+    const flagWorkspace = normalizeSubpath(opts.workspace ?? null);
     // 1 · Explicit URL forms
     if (rawArg) {
         const m = matchUrl(rawArg);
@@ -88,6 +143,7 @@ export function resolveTarget(rawArg) {
                 kind: 'remote-url',
                 github_url: canonical(m.owner, m.repo),
                 slug: `${m.owner}/${m.repo.replace(/\.git$/, '')}`,
+                workspace: flagWorkspace ?? m.workspace ?? null,
             };
         }
     }
@@ -115,5 +171,6 @@ export function resolveTarget(rawArg) {
         github_url: canonical(m.owner, m.repo),
         localPath: path,
         slug: `${m.owner}/${m.repo.replace(/\.git$/, '')}`,
+        workspace: flagWorkspace, // local repos don't carry an inline URL workspace
     };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "commitshow",
-  "version": "0.3.28",
+  "version": "0.3.29",
   "description": "commit.show CLI \u2014 audit any vibe-coded project from your terminal.",
   "type": "module",
   "bin": {