securewithtrace 0.16.0 → 0.17.0

package/dist/index.js

@@ -23943,7 +23943,9 @@ var VulnerabilityAggregatedCountsRequestSchema = external_exports.object({
   excludeStatuses: external_exports.array(VulnerabilityStatus).optional(),
   defaultBranchOnly: external_exports.boolean().default(true).optional(),
   /** Lower bound for time-series data. Only vulnerabilities created on or after this date are included in the timeSeries field. Does not affect byRepoAndSeverity or byStatusAndSeverity. */
-  timeSeriesSince: external_exports.coerce.date().optional()
+  timeSeriesSince: external_exports.coerce.date().optional(),
+  /** When provided, only include vulnerabilities belonging to this repository. */
+  repositoryId: external_exports.uuid().optional()
 });
 var VulnerabilityAggregatedCountsResponseSchema = external_exports.object({
   byRepoAndSeverity: external_exports.array(RepoSeverityCountSchema),
@@ -24957,8 +24959,24 @@ async function authenticatedRequestSafe(request) {
     return null;
   }
 }
+function extractOrganizationIdFromToken(token) {
+  if (!token || token.trim().length === 0) {
+    return null;
+  }
+  const parts = token.split(".");
+  const payload = parts[1];
+  if (!payload) {
+    return null;
+  }
+  try {
+    const decoded = JSON.parse(Buffer.from(payload, "base64url").toString("utf-8"));
+    return typeof decoded.org_id === "string" && decoded.org_id.trim().length > 0 ? decoded.org_id : null;
+  } catch {
+    return null;
+  }
+}
 var SAFE_ID_PATTERN = /^[a-zA-Z0-9_-]+$/;
-function determineActiveOrganization(organizations, selectedOrganizationId) {
+function determineActiveOrganization(organizations, selectedOrganizationId, tokenOrganizationId) {
   if (organizations.length === 0) {
     return null;
   }
@@ -24974,6 +24992,18 @@ function determineActiveOrganization(organizations, selectedOrganizationId) {
       };
     }
   }
+  if (tokenOrganizationId && SAFE_ID_PATTERN.test(tokenOrganizationId)) {
+    const tokenOrganization = organizations.find(
+      (organization) => organization.organizationId === tokenOrganizationId
+    );
+    if (tokenOrganization) {
+      return {
+        organization: tokenOrganization,
+        source: "default",
+        staleSelectionDetected: selectedOrganizationId != null
+      };
+    }
+  }
   const [fallbackOrganization] = organizations;
   if (!fallbackOrganization) {
     return null;
@@ -24994,7 +25024,12 @@ async function resolveOrganizationId(client) {
   }
   const organizations = result.body;
   const selectedOrganizationId = readSelectedOrganizationId();
-  const activeOrganization = determineActiveOrganization(organizations, selectedOrganizationId);
+  const tokenOrganizationId = extractOrganizationIdFromToken(readToken());
+  const activeOrganization = determineActiveOrganization(
+    organizations,
+    selectedOrganizationId,
+    tokenOrganizationId
+  );
   if (!activeOrganization) {
     console.error("No organization found for your account.");
     process.exit(1);
@@ -25030,7 +25065,12 @@ async function resolveOrganizationIdSafe(client) {
     }
     const organizations = result.body;
     const selectedOrganizationId = readSelectedOrganizationId();
-    const activeOrganization = determineActiveOrganization(organizations, selectedOrganizationId);
+    const tokenOrganizationId = extractOrganizationIdFromToken(readToken());
+    const activeOrganization = determineActiveOrganization(
+      organizations,
+      selectedOrganizationId,
+      tokenOrganizationId
+    );
     if (!activeOrganization) {
       return null;
     }
@@ -25050,6 +25090,21 @@ async function resolveOrganizationIdSafe(client) {
   }
 }
 
+// src/format.ts
+var SEVERITY_ORDER = {
+  CRITICAL: 0,
+  HIGH: 1,
+  MEDIUM: 2,
+  LOW: 3,
+  INFORMATIONAL: 4
+};
+function formatStatus(status) {
+  return status.toLowerCase().replace("_", " ");
+}
+function tsvSafe(value) {
+  return (value ?? "").replace(/[\t\r\n]/g, " ");
+}
+
 // src/auth/commands.ts
 function getClientId() {
   const clientId = "client_01KEZ01W5Q3107GTBY51WQ67HT";
@@ -25312,7 +25367,14 @@ function createStatusCommand() {
   });
 }
 function createOrgListCommand() {
-  return new Command("list").description("List organizations available to your account").option("--json", "Output as JSON").action(async (options) => {
+  return new Command("list").description("List organizations available to your account").option("-o, --output <format>", "Output format: table (default), json, tsv").addHelpText(
+    "after",
+    `
+Examples:
+  tracecli org list
+  tracecli org list --output json
+  tracecli org list --output tsv | cut -f1`
+  ).action(async (options) => {
     const organizationContext = await fetchOrganizationContext();
     const items = organizationContext.organizations.map(
       (organization) => ({
@@ -25321,10 +25383,23 @@ function createOrgListCommand() {
         selected: organization.organizationId === organizationContext.selectedOrganizationId
       })
     );
-    if (options.json) {
+    if (options.output === "json") {
       console.log(JSON.stringify(items, null, 2));
       return;
     }
+    if (options.output === "tsv") {
+      for (const item of items) {
+        console.log(
+          [
+            tsvSafe(item.name),
+            tsvSafe(item.slug),
+            tsvSafe(item.organizationId),
+            item.active ? "true" : "false"
+          ].join("	")
+        );
+      }
+      return;
+    }
     for (const item of items) {
       const marker = item.active ? "*" : " ";
       const labels = [item.active ? "active" : null, item.selected ? "selected" : null].filter(
@@ -25341,11 +25416,18 @@ function createOrgListCommand() {
   });
 }
 function createOrgCurrentCommand() {
-  return new Command("current").description("Show the active organization used by CLI commands").option("--json", "Output as JSON").action(async (options) => {
+  return new Command("current").description("Show the active organization used by CLI commands").option("-o, --output <format>", "Output format: table (default), json, tsv").addHelpText(
+    "after",
+    `
+Examples:
+  tracecli org current
+  tracecli org current --output json
+  tracecli org current --output tsv`
+  ).action(async (options) => {
     const organizationContext = await fetchOrganizationContext();
     const active = organizationContext.activeOrganization;
     const source = organizationContext.selectedOrganizationId === active.organizationId ? "selected" : "default";
-    if (options.json) {
+    if (options.output === "json") {
       console.log(
         JSON.stringify(
           {
@@ -25358,6 +25440,17 @@ function createOrgCurrentCommand() {
       );
       return;
     }
+    if (options.output === "tsv") {
+      console.log(
+        [
+          tsvSafe(active.name),
+          tsvSafe(active.slug),
+          tsvSafe(active.organizationId),
+          tsvSafe(source)
+        ].join("	")
+      );
+      return;
+    }
     console.log(
       `Active organization: ${sanitizeForOutput(active.name)} (${sanitizeForOutput(active.slug)})`
     );
@@ -25792,22 +25885,10 @@ function createCompletionCommand(program3) {
   });
 }
 
-// src/format.ts
-var SEVERITY_ORDER = {
-  CRITICAL: 0,
-  HIGH: 1,
-  MEDIUM: 2,
-  LOW: 3,
-  INFORMATIONAL: 4
-};
-function formatStatus(status) {
-  return status.toLowerCase().replace("_", " ");
-}
-
 // src/pentest/commands.ts
 var DEFAULT_LIMIT = 30;
 var MAX_LIMIT = 100;
-function tsvSafe(value) {
+function tsvSafe2(value) {
   return value.replace(/[\t\n\r]/g, " ");
 }
 function formatDate(date5) {
@@ -25926,7 +26007,7 @@ Examples:
       for (const pt of pentests) {
         const cols = [
           `PT-${pt.displayId}`,
-          tsvSafe(pt.title),
+          tsvSafe2(pt.title),
           pt.status,
           pt.startedAt ? String(pt.startedAt) : "",
           pt.endedAt ? String(pt.endedAt) : "",
@@ -26009,8 +26090,8 @@ Examples:
         const cols = [
           finding.severity,
           finding.status,
-          tsvSafe(finding.category),
-          tsvSafe(finding.title),
+          tsvSafe2(finding.category),
+          tsvSafe2(finding.title),
           finding.cweIds.join(";"),
           finding.cvssScore != null ? String(finding.cvssScore) : ""
         ];
@@ -26098,6 +26179,8 @@ function extractRepoName(input) {
 }
 var BRANCH_NAME_PATTERN = /^[a-zA-Z0-9._/+-]+$/;
 var TRACE_GIT_ASKPASS_TOKEN_ENV = "TRACE_GIT_ASKPASS_TOKEN";
+var DEFAULT_LIMIT2 = 30;
+var MAX_LIMIT2 = 100;
 var REPOSITORY_PLATFORMS = ["GITHUB", "GITLAB", "BITBUCKET"];
 var REPOSITORY_STATUSES = ["CONNECTED", "DISCONNECTED"];
 function validateBranchName(branch) {
@@ -26304,6 +26387,29 @@ function filterRepositories(repositories, options) {
     return true;
   });
 }
+function parseListLimit(value) {
+  const n = Number(value);
+  if (!Number.isInteger(n) || n < 1) {
+    throw new Error("--limit must be a positive integer");
+  }
+  if (n > MAX_LIMIT2) {
+    throw new Error(`--limit cannot exceed ${MAX_LIMIT2}`);
+  }
+  return n;
+}
+function printRepositoriesTsv(repositories) {
+  for (const repo of repositories) {
+    console.log(
+      [
+        tsvSafe(repo.repositoryUrl),
+        tsvSafe(repo.platform),
+        tsvSafe(repo.status),
+        tsvSafe(repo.defaultBranch),
+        tsvSafe(repo.primaryLanguage)
+      ].join("	")
+    );
+  }
+}
 function collectFilterExpression(value, previous) {
   previous.push(value);
   return previous;
@@ -26328,11 +26434,16 @@ function addRepositoryFilterOptions(command) {
     "Filter by status (CONNECTED, DISCONNECTED)",
     (value) => value.toUpperCase()
   ).option("--query <query>", "Case-insensitive search across URL, repo, branch, and language").option("--default-branch <branch>", "Filter by default branch (case-insensitive contains)").option("--language <language>", "Filter by primary language (case-insensitive contains)").option(
-    "--filter <expression>",
-    "Advanced filter expression. Repeatable. Examples: platform=GITHUB, repo:trace, status!=DISCONNECTED, language!:typescript",
+    "-f, --filter <expression>",
+    "Advanced filter expression. Repeatable. Examples: platform=GITHUB, repo:trace, status!=DISCONNECTED",
     collectFilterExpression,
     []
-  ).option("--json", "Output as JSON").option(
+  ).option("-o, --output <format>", "Output format: table (default), json, tsv").option(
+    "-L, --limit <n>",
+    `Maximum repositories to display (default ${DEFAULT_LIMIT2}, max ${MAX_LIMIT2})`,
+    parseListLimit,
+    DEFAULT_LIMIT2
+  ).option(
     "--dependency <pkg>",
     "Filter repositories that use a dependency (e.g. lodash, lodash@4.17.21, @types/node@20)"
   );
@@ -26371,11 +26482,17 @@ async function runRepositoryListCommand(options) {
     console.log("No repositories found.");
     return;
   }
-  if (options.json) {
-    console.log(JSON.stringify(filteredRepositories, null, 2));
+  const limit = options.limit ?? DEFAULT_LIMIT2;
+  const displayedRepositories = filteredRepositories.slice(0, limit);
+  if (options.output === "json") {
+    console.log(JSON.stringify(displayedRepositories, null, 2));
     return;
   }
-  for (const repo of filteredRepositories) {
+  if (options.output === "tsv") {
+    printRepositoriesTsv(displayedRepositories);
+    return;
+  }
+  for (const repo of displayedRepositories) {
     const status = repo.status === "CONNECTED" ? "connected" : "disconnected";
     const url2 = stripAnsi(String(repo.repositoryUrl));
     const platform = stripAnsi(String(repo.platform)).toLowerCase();
@@ -26430,11 +26547,19 @@ async function runDependencyFilter(organizationId, options) {
     console.log(`No repositories found using dependency '${label}'.`);
     return;
   }
-  if (options.json) {
-    console.log(JSON.stringify(repos, null, 2));
+  const limit = options.limit ?? DEFAULT_LIMIT2;
+  const displayedRepos = repos.slice(0, limit);
+  if (options.output === "json") {
+    console.log(JSON.stringify(displayedRepos, null, 2));
     return;
   }
-  for (const repo of repos) {
+  if (options.output === "tsv") {
+    for (const repo of displayedRepos) {
+      console.log(`${tsvSafe(repo.fullName)}	${tsvSafe(repo.versions.join(","))}`);
+    }
+    return;
+  }
+  for (const repo of displayedRepos) {
     const versions = repo.versions.join(", ");
     console.log(`${repo.fullName}  (${versions})`);
   }
@@ -26442,6 +26567,16 @@ async function runDependencyFilter(organizationId, options) {
 function createListCommand2() {
   return addRepositoryFilterOptions(
     new Command("list").description("List repositories in your organization")
+  ).addHelpText(
+    "after",
+    `
+Examples:
+  tracecli repo list
+  tracecli repo list --platform GITHUB --status CONNECTED
+  tracecli repo list --output json | jq '.[].repositoryUrl'
+  tracecli repo list --output tsv | cut -f1
+  tracecli repo list --filter "language:typescript" --limit 10
+  tracecli repo list --dependency lodash@4.17.21`
   ).action(async (options) => {
     await runRepositoryListCommand(options);
   });
@@ -26449,6 +26584,12 @@ function createListCommand2() {
 function createFilterCommand() {
   return addRepositoryFilterOptions(
     new Command("filter").description("Filter repositories in your organization")
+  ).addHelpText(
+    "after",
+    `
+Examples:
+  tracecli repo filter --filter "platform=GITHUB" --filter "status=CONNECTED"
+  tracecli repo filter --language typescript --output json`
   ).action(async (options) => {
     await runRepositoryListCommand(options);
   });
@@ -26570,8 +26711,8 @@ function createRepoCommand() {
 }
 
 // src/vulnerabilities/commands.ts
-var DEFAULT_LIMIT2 = 30;
-var MAX_LIMIT2 = 100;
+var DEFAULT_LIMIT3 = 30;
+var MAX_LIMIT3 = 100;
 async function resolveRepositoryIdAuthenticated(organizationId, repoIdentifier) {
   const result = await authenticatedRequest(
     (client) => client.repository.listRepositories({
@@ -26680,13 +26821,13 @@ function createListCommand3() {
     (value) => value.toUpperCase()
   ).option(
     "-L, --limit <n>",
-    `Max results to return (default: ${DEFAULT_LIMIT2}, max: ${MAX_LIMIT2})`,
+    `Max results to return (default: ${DEFAULT_LIMIT3}, max: ${MAX_LIMIT3})`,
     (v) => {
       const n = Number.parseInt(v, 10);
       if (Number.isNaN(n) || n < 1) {
         throw new Error("--limit must be a positive integer");
       }
-      return Math.min(n, MAX_LIMIT2);
+      return Math.min(n, MAX_LIMIT3);
     }
   ).option("-o, --output <format>", "Output format: table, json, tsv (default: table)", "table").addHelpText(
     "after",
@@ -26717,7 +26858,7 @@ Examples:
         sortBy: "severity",
         sortOrder: "desc"
       };
-      const limit = options.limit ?? DEFAULT_LIMIT2;
+      const limit = options.limit ?? DEFAULT_LIMIT3;
       const isJson = options.output === "json";
       const isTsv = options.output === "tsv";
       const collected = [];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "securewithtrace",
-  "version": "0.16.0",
+  "version": "0.17.0",
   "description": "Official Trace CLI for vulnerability intelligence in your terminal",
   "type": "module",
   "bin": {