copilotkit 0.0.24 → 0.0.26

package/dist/commands/init.js

@@ -222,7 +222,7 @@ import { Command } from "@oclif/core";
 import Sentry, { consoleIntegration } from "@sentry/node";
 
 // src/utils/version.ts
-var LIB_VERSION = "0.0.24";
+var LIB_VERSION = "0.0.26";
 
 // src/commands/base-command.ts
 import chalk2 from "chalk";
@@ -273,17 +273,110 @@ var BaseCommand = class extends Command {
 };
 
 // src/lib/init/types/questions.ts
+import { z } from "zod";
 import { Flags } from "@oclif/core";
 var AGENT_FRAMEWORKS = ["CrewAI", "LangGraph", "None"];
 var CREW_TYPES = ["Crews", "Flows"];
 var CHAT_COMPONENTS = ["CopilotChat", "CopilotSidebar", "Headless", "CopilotPopup"];
 var LANGGRAPH_AGENTS = ["Python Starter", "TypeScript Starter", "None"];
 var CREW_FLOW_TEMPLATES = ["Starter", "None"];
+var YES_NO = ["Yes", "No"];
+var sanitizers = {
+  // Remove trailing slash from URLs
+  url: (value) => {
+    if (!value) return value;
+    return value.trim().replace(/\/+$/, "");
+  },
+  // Trim whitespace from strings
+  trim: (value) => {
+    if (!value) return value;
+    return value.trim();
+  },
+  // Lowercase strings
+  lowercase: (value) => {
+    if (!value) return value;
+    return value.toLowerCase().trim();
+  },
+  // Clean API keys (remove whitespace)
+  apiKey: (value) => {
+    if (!value) return value;
+    return value.trim().replace(/\s/g, "");
+  }
+};
+var AgentFrameworkSchema = z.enum(AGENT_FRAMEWORKS);
+var CrewTypeSchema = z.enum(CREW_TYPES);
+var ChatComponentSchema = z.enum(CHAT_COMPONENTS);
+var LangGraphAgentSchema = z.enum(LANGGRAPH_AGENTS);
+var CrewFlowTemplateSchema = z.enum(CREW_FLOW_TEMPLATES);
+var YesNoSchema = z.enum(YES_NO);
+var UrlSchema = z.preprocess(
+  (val) => sanitizers.url(String(val)),
+  z.string().url("Please enter a valid URL").min(1, "URL is required")
+);
+var TokenSchema = z.preprocess(
+  (val) => sanitizers.trim(String(val)),
+  z.string().min(1, "Token is required")
+);
+var ApiKeySchema = z.preprocess(
+  (val) => sanitizers.apiKey(String(val)),
+  z.string().min(1, "API key is required")
+);
+var NameSchema = z.preprocess(
+  (val) => sanitizers.trim(String(val)),
+  z.string().min(1, "Name is required")
+);
+var ConfigSchema = z.object({
+  // Core fields
+  copilotKitVersion: z.string().optional(),
+  agentFramework: AgentFrameworkSchema,
+  chatUi: ChatComponentSchema.optional(),
+  // Yes/No fields
+  alreadyDeployed: YesNoSchema.optional(),
+  fastApiEnabled: YesNoSchema.optional(),
+  useCopilotCloud: YesNoSchema.optional(),
+  // LangGraph specific fields 
+  langGraphAgent: LangGraphAgentSchema.optional(),
+  langGraphPlatform: YesNoSchema.optional(),
+  langGraphPlatformUrl: UrlSchema.optional(),
+  langGraphRemoteEndpointURL: UrlSchema.optional(),
+  // CrewAI specific fields
+  crewType: CrewTypeSchema.optional(),
+  crewName: NameSchema.optional(),
+  crewUrl: UrlSchema.optional(),
+  crewBearerToken: TokenSchema.optional(),
+  crewFlowAgent: CrewFlowTemplateSchema.optional(),
+  // API keys and tokens
+  copilotCloudPublicApiKey: z.string().optional(),
+  langSmithApiKey: ApiKeySchema.optional(),
+  llmToken: ApiKeySchema.optional()
+}).refine(
+  (data) => {
+    if (data.agentFramework === "CrewAI" && data.crewType === "Crews") {
+      return !!data.crewUrl && !!data.crewBearerToken;
+    }
+    return true;
+  },
+  {
+    message: "Crew URL and bearer token are required for CrewAI Crews",
+    path: ["crewUrl", "crewBearerToken"]
+  }
+).refine(
+  (data) => {
+    if (data.agentFramework === "LangGraph" && data.alreadyDeployed === "Yes" && data.langGraphPlatform === "Yes") {
+      return !!data.langGraphPlatformUrl && !!data.langSmithApiKey;
+    }
+    return true;
+  },
+  {
+    message: "LangGraph Platform URL and LangSmith API key are required",
+    path: ["langGraphPlatformUrl", "langSmithApiKey"]
+  }
+);
 var ConfigFlags = {
   copilotKitVersion: Flags.string({ description: "CopilotKit version to use (e.g. 1.7.0)" }),
   agentFramework: Flags.string({ description: "Agent framework to power your copilot", options: AGENT_FRAMEWORKS }),
-  fastApiEnabled: Flags.string({ description: "Use FastAPI to serve your agent locally", options: ["Yes", "No"] }),
-  useCopilotCloud: Flags.string({ description: "Use Copilot Cloud for production-ready hosting", options: ["Yes", "No"] }),
+  fastApiEnabled: Flags.string({ description: "Use FastAPI to serve your agent locally", options: YES_NO }),
+  useCopilotCloud: Flags.string({ description: "Use Copilot Cloud for production-ready hosting", options: YES_NO }),
   chatUi: Flags.string({ description: "Chat UI component to add to your app", options: CHAT_COMPONENTS }),
   langGraphAgent: Flags.string({ description: "LangGraph agent template to use", options: LANGGRAPH_AGENTS }),
   crewType: Flags.string({ description: "CrewAI implementation type", options: CREW_TYPES }),
@@ -320,13 +413,34 @@ var templateMapping = {
 };
 
 // src/lib/init/questions.ts
+var validateUrl = (input) => {
+  try {
+    const sanitized = sanitizers.url(input);
+    const result = UrlSchema.safeParse(sanitized);
+    if (result.success) return true;
+    return result.error.errors[0]?.message || "Invalid URL format";
+  } catch (error) {
+    return "Invalid URL format";
+  }
+};
+var validateRequired = (input) => {
+  return sanitizers.trim(input) ? true : "This field is required";
+};
 var questions = [
   // Core setup questions - always shown first
   {
     type: "select",
     name: "agentFramework",
     message: "\u{1F916} Choose your AI framework:",
-    choices: Array.from(AGENT_FRAMEWORKS)
+    choices: Array.from(AGENT_FRAMEWORKS),
+    validate: (input) => {
+      try {
+        AgentFrameworkSchema.parse(input);
+        return true;
+      } catch (error) {
+        return "Please select a valid framework";
+      }
+    }
   },
   // CrewAI specific questions - shown when CrewAI selected
   {
@@ -334,7 +448,15 @@ var questions = [
     name: "crewType",
     message: "\u{1F465} What kind of CrewAI implementation would you like to use?",
     choices: Array.from(CREW_TYPES),
-    when: (answers) => answers.agentFramework === "CrewAI"
+    when: (answers) => answers.agentFramework === "CrewAI",
+    validate: (input) => {
+      try {
+        CrewTypeSchema.parse(input);
+        return true;
+      } catch (error) {
+        return "Please select a valid crew type";
+      }
+    }
   },
   // CrewAI Crews specific questions - shown when CrewAI Crews selected
   {
@@ -342,20 +464,26 @@ var questions = [
     name: "crewName",
     message: "\u{1F465} What would you like to name your crew? (can be anything)",
     when: (answers) => answers.agentFramework === "CrewAI" && answers.crewType === "Crews",
-    default: "MyCopilotCrew"
+    default: "MyCopilotCrew",
+    validate: validateRequired,
+    sanitize: sanitizers.trim
   },
   {
     type: "input",
     name: "crewUrl",
     message: "\u{1F517} Enter your Crew's URL:",
-    when: (answers) => answers.agentFramework === "CrewAI" && answers.crewType === "Crews"
+    when: (answers) => answers.agentFramework === "CrewAI" && answers.crewType === "Crews",
+    validate: validateUrl,
+    sanitize: sanitizers.url
   },
   {
     type: "input",
     name: "crewBearerToken",
     message: "\u{1F511} Enter your Crew's bearer token:",
     when: (answers) => answers.agentFramework === "CrewAI" && answers.crewType === "Crews",
-    sensitive: true
+    sensitive: true,
+    validate: validateRequired,
+    sanitize: sanitizers.trim
   },
   // CrewAI Flows specific questions - shown when CrewAI Flows selected
   {
@@ -370,25 +498,45 @@ var questions = [
     type: "yes/no",
     name: "alreadyDeployed",
     message: "\u{1F680} Is your LangGraph agent already deployed?",
-    when: (answers) => answers.agentFramework === "LangGraph"
+    when: (answers) => answers.agentFramework === "LangGraph",
+    validate: (input) => {
+      try {
+        YesNoSchema.parse(input);
+        return true;
+      } catch (error) {
+        return "Please select Yes or No";
+      }
+    }
   },
   {
     type: "yes/no",
     name: "langGraphPlatform",
     message: "\u{1F99C}\u{1F517} Is it hosted with LangGraph Platform (local or cloud)?",
-    when: (answers) => answers.agentFramework === "LangGraph" && answers.alreadyDeployed === "Yes"
+    when: (answers) => answers.agentFramework === "LangGraph" && answers.alreadyDeployed === "Yes",
+    validate: (input) => {
+      try {
+        YesNoSchema.parse(input);
+        return true;
+      } catch (error) {
+        return "Please select Yes or No";
+      }
+    }
   },
   {
     type: "input",
     name: "langGraphPlatformUrl",
     message: "\u{1F99C}\u{1F517} Enter your LangGraph platform URL:",
-    when: (answers) => answers.agentFramework === "LangGraph" && answers.alreadyDeployed === "Yes" && answers.langGraphPlatform === "Yes"
+    when: (answers) => answers.agentFramework === "LangGraph" && answers.alreadyDeployed === "Yes" && answers.langGraphPlatform === "Yes",
+    validate: validateUrl,
+    sanitize: sanitizers.url
   },
   {
     type: "input",
     name: "langGraphRemoteEndpointURL",
     message: "\u{1F50C} Enter your LangGraph endpoint URL:",
-    when: (answers) => answers.agentFramework === "LangGraph" && answers.alreadyDeployed === "Yes" && answers.langGraphPlatform === "No"
+    when: (answers) => answers.agentFramework === "LangGraph" && answers.alreadyDeployed === "Yes" && answers.langGraphPlatform === "No",
+    validate: validateUrl,
+    sanitize: sanitizers.url
   },
   {
     type: "select",
@@ -402,14 +550,24 @@ var questions = [
     name: "langSmithApiKey",
     message: "\u{1F99C}\u{1F517} Enter your LangSmith API key (required by LangGraph Platform) :",
     when: (answers) => answers.agentFramework === "LangGraph" && answers.langGraphPlatform === "Yes",
-    sensitive: true
+    sensitive: true,
+    validate: validateRequired,
+    sanitize: sanitizers.apiKey
   },
   // Deployment options
   {
     type: "yes/no",
     name: "useCopilotCloud",
     message: "\u{1FA81} Deploy with Copilot Cloud? (recommended for production)",
-    when: (answers) => !(answers.agentFramework === "CrewAI" && answers.crewType === "Crews") && answers.crewType !== "Flows" && answers.alreadyDeployed === "Yes"
+    when: (answers) => !(answers.agentFramework === "CrewAI" && answers.crewType === "Crews") && answers.crewType !== "Flows" && answers.alreadyDeployed === "Yes",
+    validate: (input) => {
+      try {
+        YesNoSchema.parse(input);
+        return true;
+      } catch (error) {
+        return "Please select Yes or No";
+      }
+    }
   },
   // {
   //   type: 'yes/no',
@@ -435,7 +593,9 @@ var questions = [
     name: "llmToken",
     message: "\u{1F511} Enter your OpenAI API key (required for agent functionality):",
     when: (answers) => answers.agentFramework === "LangGraph" && answers.alreadyDeployed === "No" || answers.agentFramework === "CrewAI" && answers.crewType === "Flows",
-    sensitive: true
+    sensitive: true,
+    validate: validateRequired,
+    sanitize: sanitizers.apiKey
   }
 ];
 
@@ -466,6 +626,18 @@ async function scaffoldShadCN(userAnswers) {
           components.push(templateMapping.RemoteEndpoint);
           break;
       }
+    } else {
+      switch (userAnswers.chatUi) {
+        case "CopilotChat":
+          components.push(...templateMapping.CopilotChat);
+          break;
+        case "CopilotSidebar":
+          components.push(...templateMapping.CopilotSidebar);
+          break;
+        case "CopilotPopup":
+          components.push(...templateMapping.CopilotPopup);
+          break;
+      }
     }
     await new Promise((resolve) => setTimeout(resolve, 100));
     try {
@@ -492,7 +664,7 @@ import fs from "fs";
 async function getLangGraphAgents(url, langSmithApiKey) {
   try {
     const response = await fetch(
-      `${url}/assistants/search`,
+      `${url.trim().replace(/\/$/, "")}/assistants/search`,
       {
         method: "POST",
         headers: {
@@ -505,10 +677,9 @@ async function getLangGraphAgents(url, langSmithApiKey) {
         })
       }
     );
-    const result = await response.json();
-    return result;
+    return await response.json();
   } catch (error) {
-    throw new Error("Failed to get LangGraph agents");
+    throw new Error(`Failed to get LangGraph agents: ${error}`);
   }
 }
 
@@ -781,7 +952,7 @@ async function addCrewInputs(url, token) {
   }
 }
 async function getCrewInputs(url, token) {
-  const response = await fetch(`${url}/inputs`, {
+  const response = await fetch(`${url.trim()}/inputs`, {
     headers: {
       Authorization: `Bearer ${token}`
     }
@@ -838,7 +1009,8 @@ var CloudInit = class _CloudInit extends BaseCommand {
         name: q.name,
         message: q.message,
         when: q.when,
-        default: q.default
+        default: q.default,
+        validate: q.validate
       };
       switch (q.type) {
         case "yes/no":
@@ -858,12 +1030,32 @@ var CloudInit = class _CloudInit extends BaseCommand {
           return {
             ...baseQuestion,
             type: q.sensitive ? "password" : "input",
-            mask: q.sensitive ? "*" : void 0
+            mask: q.sensitive ? "*" : void 0,
+            // Add sanitization filter for input fields
+            filter: q.sanitize ? (input) => q.sanitize(input) : void 0
           };
       }
     });
     const answers = await inquirer3.prompt(inquirerQuestions);
-    return { ...answers };
+    try {
+      const spinner = ora5({ text: "Validating configuration...", color: "green" }).start();
+      const validatedConfig = ConfigSchema.parse(answers);
+      spinner.succeed(`\u{1F50D} Configuration validated successfully`);
+      return validatedConfig;
+    } catch (error) {
+      const spinner = ora5({ text: "Validation failed...", color: "red" }).start();
+      if (error.errors) {
+        const formattedErrors = error.errors.map(
+          (err) => `- ${err.path.join(".")}: ${err.message}`
+        ).join("\n");
+        spinner.fail(chalk6.red("Configuration validation failed:"));
+        console.error(chalk6.red(formattedErrors));
+        process.exit(1);
+      }
+      spinner.fail(chalk6.red("Unexpected validation error:"));
+      console.error(chalk6.red(error.message || "Unknown error"));
+      process.exit(1);
+    }
   }
   async setupCloud(flags, userAnswers) {
     const { cliToken, organization } = await this.authService.requireLogin(this);
@@ -892,24 +1084,46 @@ var CloudInit = class _CloudInit extends BaseCommand {
       selectedProjectId = projectId;
     }
     const copilotCloudPublicApiKey = await this.trpcClient.getCopilotCloudPublicApiKey.query({ projectId: selectedProjectId });
-    userAnswers.copilotCloudPublicApiKey = copilotCloudPublicApiKey?.key;
+    try {
+      const sanitizedConfig = {
+        ...userAnswers,
+        copilotCloudPublicApiKey: copilotCloudPublicApiKey?.key,
+        crewUrl: userAnswers.crewUrl ? sanitizers.url(userAnswers.crewUrl) : void 0,
+        langGraphPlatformUrl: userAnswers.langGraphPlatformUrl ? sanitizers.url(userAnswers.langGraphPlatformUrl) : void 0,
+        langGraphRemoteEndpointURL: userAnswers.langGraphRemoteEndpointURL ? sanitizers.url(userAnswers.langGraphRemoteEndpointURL) : void 0,
+        crewBearerToken: userAnswers.crewBearerToken ? sanitizers.apiKey(userAnswers.crewBearerToken) : void 0,
+        langSmithApiKey: userAnswers.langSmithApiKey ? sanitizers.apiKey(userAnswers.langSmithApiKey) : void 0,
+        llmToken: userAnswers.llmToken ? sanitizers.apiKey(userAnswers.llmToken) : void 0
+      };
+      const updatedConfig = ConfigSchema.parse(sanitizedConfig);
+      Object.assign(userAnswers, updatedConfig);
+    } catch (error) {
+      this.log(chalk6.red(`Failed to update configuration with Copilot Cloud API key: ${error.message}`));
+    }
     if (userAnswers.crewUrl && userAnswers.crewName && userAnswers.crewBearerToken) {
       const crewSpinner = ora5({
         text: chalk6("\u{1F465} Adding Crew to Copilot Cloud..."),
         color: "cyan"
       }).start();
-      await this.trpcClient.createRemoteEndpoint.mutate({
-        type: "CrewAI",
-        projectId: selectedProjectId,
-        config: {
+      try {
+        await this.trpcClient.createRemoteEndpoint.mutate({
           type: "CrewAI",
-          url: userAnswers.crewUrl,
-          agentName: userAnswers.crewName,
-          agentDescription: "A helpful Crew",
-          crewApiBearerToken: userAnswers.crewBearerToken
-        }
-      });
-      crewSpinner.succeed(chalk6("\u{1F465} Crew added to Copilot Cloud"));
+          projectId: selectedProjectId,
+          config: {
+            type: "CrewAI",
+            url: userAnswers.crewUrl,
+            // Already sanitized
+            agentName: userAnswers.crewName,
+            agentDescription: "A helpful Crew",
+            crewApiBearerToken: userAnswers.crewBearerToken
+          }
+        });
+        crewSpinner.succeed(chalk6("\u{1F465} Crew added to Copilot Cloud"));
+      } catch (error) {
+        crewSpinner.fail(chalk6("\u{1F465} Failed to add Crew to Copilot Cloud"));
+        console.error(error);
+        process.exit(1);
+      }
     }
     if (userAnswers.agentFramework === "LangGraph" && userAnswers.useCopilotCloud === "Yes" && userAnswers.alreadyDeployed === "Yes") {
       const langGraphSpinner = ora5({
@@ -927,6 +1141,7 @@ var CloudInit = class _CloudInit extends BaseCommand {
             projectId: selectedProjectId,
             config: {
               deploymentUrl: userAnswers.langGraphPlatformUrl,
+              // Already sanitized
               langsmithApiKey: userAnswers.langSmithApiKey,
               agents: []
             }
@@ -944,6 +1159,7 @@ var CloudInit = class _CloudInit extends BaseCommand {
             config: {
               type: "CopilotKit",
               url: userAnswers.langGraphRemoteEndpointURL
+              // Already sanitized
             }
           });
           langGraphSpinner.succeed(chalk6("\u{1F99C}\u{1F517} LangGraph remote endpoint created"));
@@ -955,24 +1171,33 @@ var CloudInit = class _CloudInit extends BaseCommand {
     }
   }
   validateProjectCompatibility(flags) {
-    const projectPath = path5.resolve(process.cwd(), flags.dir);
-    if (!fs5.existsSync(projectPath)) {
-      this.gracefulError(`Directory ${flags.dir} does not exist. Please provide a valid Next.js project directory.`);
-      return;
-    }
-    const packageJsonPath = path5.join(projectPath, "package.json");
-    if (!fs5.existsSync(packageJsonPath)) {
-      this.gracefulError(`Directory ${projectPath} does not contain a package.json file. Please provide a valid Next.js project.`);
-      process.exit(1);
-    }
-    const packageJson = JSON.parse(fs5.readFileSync(packageJsonPath, "utf8"));
-    if (!packageJson.dependencies?.next && !packageJson.devDependencies?.next) {
-      this.gracefulError(`Directory ${projectPath} does not appear to be a Next.js project. Make sure it has next in dependencies.`);
+    const spinner = ora5("Checking Next.js project compatibility...").start();
+    try {
+      const projectPath = path5.resolve(process.cwd(), flags.dir);
+      if (!fs5.existsSync(projectPath)) {
+        spinner.fail(`Directory ${flags.dir} does not exist`);
+        throw new Error(`Please provide a valid Next.js project directory.`);
+      }
+      const packageJsonPath = path5.join(projectPath, "package.json");
+      if (!fs5.existsSync(packageJsonPath)) {
+        spinner.fail(`No package.json found in ${projectPath}`);
+        throw new Error(`Please provide a valid Next.js project with a package.json file.`);
+      }
+      const packageJson = JSON.parse(fs5.readFileSync(packageJsonPath, "utf8"));
+      if (!packageJson.dependencies?.next && !packageJson.devDependencies?.next) {
+        spinner.fail(`Not a Next.js project`);
+        throw new Error(`Directory ${projectPath} does not appear to be a Next.js project. Make sure it has next in dependencies.`);
+      }
+      spinner.succeed(chalk6.green(`Valid Next.js project detected at ${projectPath}`));
+      return true;
+    } catch (error) {
+      if (!spinner.isSpinning) {
+        this.log(chalk6.red(error.message));
+      } else {
+        spinner.fail(chalk6.red(error.message));
+      }
       process.exit(1);
     }
-    this.log(chalk6.green(`Valid Next.js project detected
-`));
-    return true;
   }
   finalSummary(userAnswers) {
     let agentDevInstructions = "";