securewithtrace 0.20.1 → 0.20.3

package/dist/index.js

@@ -26173,6 +26173,7 @@ function colorAccentUnderline(text, colorizer = source_default) {
 var readTokenSafe = readToken;
 var PRODUCTION_API_URL = "https://api.securewithtrace.com";
 var UNAUTHORIZED_STATUS = 401;
+var REFRESH_AUTH_FAILURE_STATUS_CODES = /* @__PURE__ */ new Set([400, 401]);
 function getApiBaseUrl() {
   const raw = process.env["TRACE_API_URL"];
   if (!raw) {
@@ -26217,9 +26218,24 @@ function getWorkosClientId() {
   }
   return clientId;
 }
+function parseRefreshFailureStatus(error48) {
+  if (!(error48 instanceof Error)) {
+    return null;
+  }
+  const statusMatch = error48.message.match(/\b([1-5]\d{2})\b/);
+  if (!statusMatch?.[1]) {
+    return null;
+  }
+  return Number.parseInt(statusMatch[1], 10);
+}
+function isRefreshAuthFailure(error48) {
+  const status = parseRefreshFailureStatus(error48);
+  return status !== null && REFRESH_AUTH_FAILURE_STATUS_CODES.has(status);
+}
 async function refreshStoredAccessToken() {
   const clientId = getWorkosClientId();
   const refreshToken = readRefreshToken();
+  const tokenOrganizationId = extractOrganizationIdFromToken(readToken());
   if (!clientId || !refreshToken) {
     return null;
   }
@@ -26229,7 +26245,20 @@ async function refreshStoredAccessToken() {
     writeTokens(tokenResponse.access_token, nextRefreshToken);
     return tokenResponse.access_token;
   } catch (error48) {
-    if (error48 instanceof Error && (error48.message.includes(" 400 ") || error48.message.includes(" 401 "))) {
+    if (tokenOrganizationId && isRefreshAuthFailure(error48)) {
+      try {
+        const tokenResponse = await refreshAccessToken(clientId, refreshToken, tokenOrganizationId);
+        const nextRefreshToken = tokenResponse.refresh_token ?? refreshToken;
+        writeTokens(tokenResponse.access_token, nextRefreshToken);
+        return tokenResponse.access_token;
+      } catch (orgRefreshError) {
+        if (isRefreshAuthFailure(orgRefreshError)) {
+          removeToken();
+        }
+        return null;
+      }
+    }
+    if (isRefreshAuthFailure(error48)) {
       removeToken();
     }
     return null;
@@ -26247,7 +26276,7 @@ async function refreshStoredAccessTokenForOrganization(workosOrganizationId) {
     writeTokens(tokenResponse.access_token, nextRefreshToken);
     return true;
   } catch (error48) {
-    if (error48 instanceof Error && (error48.message.includes(" 400 ") || error48.message.includes(" 401 "))) {
+    if (isRefreshAuthFailure(error48)) {
       removeToken();
     }
     return false;
@@ -26383,6 +26412,32 @@ async function resolveOrganizationId(client) {
   }
   return id;
 }
+async function resolveOrganizationSlug() {
+  const result = await authenticatedRequest((client) => client.organization.listMyOrganizations());
+  if (result.status === 401) {
+    console.error(
+      colorError("Authentication failed. Run `tracecli auth login` to re-authenticate.")
+    );
+    process.exit(1);
+  }
+  if (result.status !== 200) {
+    console.error(colorError(`Failed to resolve organization (status ${result.status}).`));
+    process.exit(1);
+  }
+  const organizations = result.body;
+  const selectedOrganizationId = readSelectedOrganizationId();
+  const tokenOrganizationId = extractOrganizationIdFromToken(readToken());
+  const activeOrganization = determineActiveOrganization(
+    organizations,
+    selectedOrganizationId,
+    tokenOrganizationId
+  );
+  if (!activeOrganization) {
+    console.error(colorError("No organization found for your account."));
+    process.exit(1);
+  }
+  return activeOrganization.organization.slug;
+}
 async function resolveOrganizationIdSafe(client) {
   try {
     const result = client ? await client.organization.listMyOrganizations() : await authenticatedRequestSafe(
@@ -26502,6 +26557,10 @@ function isSafeOrganizationId(organizationId) {
 }
 async function fetchOrganizationContext() {
   const result = await authenticatedRequest((client) => client.organization.listMyOrganizations());
+  if (result.status === 401) {
+    console.error("Authentication failed. Run `tracecli auth login` to re-authenticate.");
+    process.exit(1);
+  }
   if (result.status !== 200) {
     console.error(`Failed to list organizations (status ${result.status}).`);
     process.exit(1);
@@ -26828,22 +26887,30 @@ Examples:
   });
 }
 function createOrgListCommand() {
-  return new Command("list").description("List organizations available to your account").option("-o, --output <format>", "Output format: table (default), json, tsv").addHelpText(
+  return new Command("list").description("List organizations available to your account").option("-o, --output <format>", "Output format: table (default), json, tsv").option("-L, --limit <n>", "Max organizations to display (default: all)", (v) => {
+    const n = Number.parseInt(v, 10);
+    if (Number.isNaN(n) || n < 1) {
+      throw new Error("--limit must be a positive integer");
+    }
+    return n;
+  }).addHelpText(
     "after",
     `
 Examples:
   tracecli org list
   tracecli org list --output json
-  tracecli org list --output tsv | cut -f1`
+  tracecli org list --output tsv | cut -f1
+  tracecli org list --limit 5`
   ).action(async (options) => {
     const organizationContext = await fetchOrganizationContext();
-    const items = organizationContext.organizations.map(
+    const allItems = organizationContext.organizations.map(
       (organization) => ({
         ...organization,
         active: organization.organizationId === organizationContext.activeOrganization.organizationId,
         selected: organization.organizationId === organizationContext.selectedOrganizationId
       })
     );
+    const items = options.limit !== void 0 ? allItems.slice(0, options.limit) : allItems;
     if (options.output === "json") {
       console.log(JSON.stringify(items, null, 2));
       return;
@@ -26862,15 +26929,27 @@ Examples:
       }
       return;
     }
-    for (const item of items) {
-      const marker = item.active ? "*" : " ";
+    const headers = ["", "Name", "Slug", "Org ID"];
+    const rows = items.map((item) => {
       const labels = [item.active ? "active" : null, item.selected ? "selected" : null].filter(
         Boolean
       );
-      const suffix = labels.length > 0 ? ` [${labels.join(", ")}]` : "";
-      console.log(
-        `${marker} ${sanitizeForOutput(item.name)} (${sanitizeForOutput(item.slug)}) - ${item.organizationId}${suffix}`
-      );
+      const marker = item.active ? "*" : " ";
+      const nameSuffix = labels.length > 0 ? ` [${labels.join(", ")}]` : "";
+      return [
+        marker,
+        sanitizeForOutput(item.name) + nameSuffix,
+        sanitizeForOutput(item.slug),
+        item.organizationId
+      ];
+    });
+    const colWidths = headers.map(
+      (h, i) => Math.max(h.length, ...rows.map((r) => (r[i] ?? "").length))
+    );
+    const pad = (s, w3) => s.padEnd(w3);
+    console.log(headers.map((h, i) => pad(h, colWidths[i] ?? h.length)).join("  "));
+    for (const row of rows) {
+      console.log(row.map((cell, i) => pad(cell, colWidths[i] ?? 0)).join("  "));
     }
     if (organizationContext.staleSelectionDetected) {
       console.log("\nYour previous organization selection is no longer available and was reset.");
@@ -27698,6 +27777,41 @@ function createPentestCommand() {
 import { chmodSync, mkdtempSync, rmSync as rmSync2, writeFileSync as writeFileSync3 } from "fs";
 import { tmpdir } from "os";
 import { join as join4 } from "path";
+
+// src/browser.ts
+var DEFAULT_APP_BASE_URL = "https://app.securewithtrace.com";
+function getAppBaseUrl() {
+  const override = process.env["TRACE_APP_URL"];
+  if (typeof override === "string" && override.trim().length > 0) {
+    try {
+      const parsed = new URL(override);
+      if (parsed.protocol === "https:") {
+        return override.replace(/\/+$/, "");
+      }
+    } catch {
+    }
+  }
+  return DEFAULT_APP_BASE_URL;
+}
+async function openBrowser2(url2) {
+  try {
+    const parsed = new URL(url2);
+    if (parsed.protocol !== "https:") {
+      return false;
+    }
+    const proc = Bun.spawn(["open", url2], { stdout: "ignore", stderr: "ignore" });
+    const exitCode = await proc.exited;
+    if (exitCode !== 0) {
+      const linuxProc = Bun.spawn(["xdg-open", url2], { stdout: "ignore", stderr: "ignore" });
+      return await linuxProc.exited === 0;
+    }
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+// src/repo/commands.ts
 function stripAnsi(str) {
   const ESC2 = String.fromCharCode(27);
   const CSI2 = String.fromCharCode(155);
@@ -27984,7 +28098,9 @@ function printRepositoriesTable(repositories) {
       repo.status === "CONNECTED" ? "connected" : "disconnected"
     ]
   );
-  const colWidths = headers.map((h, i) => Math.max(h.length, ...rows.map((r) => r[i].length)));
+  const colWidths = headers.map(
+    (h, i) => Math.max(h.length, ...rows.map((r) => (r[i] ?? "").length))
+  );
   const pad = (s, w3) => s.padEnd(w3);
   console.log(headers.map((h, i) => pad(h, colWidths[i] ?? h.length)).join("  "));
   for (const row of rows) {
@@ -28122,9 +28238,18 @@ function addRepositoryFilterOptions(command) {
   ).option(
     "--dependency <pkg>",
     "Filter repositories that use a dependency (e.g. lodash, lodash@4.17.21, @types/node@20)"
-  );
+  ).option("-w, --web", "Open the repositories dashboard in a browser");
 }
 async function runRepositoryListCommand(options) {
+  if (options.web) {
+    const slug = await resolveOrganizationSlug();
+    const url2 = `${getAppBaseUrl()}/dashboard/${slug}/repositories`;
+    const opened = await openBrowser2(url2);
+    if (!opened) {
+      console.log(`Open in browser: ${url2}`);
+    }
+    return;
+  }
   const organizationId = await resolveOrganizationId();
   if (options.dependency) {
     await runDependencyFilter(organizationId, {
@@ -28256,7 +28381,8 @@ Examples:
   tracecli repo list --output json | jq '.[].repositoryUrl'
   tracecli repo list --output tsv | cut -f1
   tracecli repo list --filter "language:typescript" --limit 10
-  tracecli repo list --dependency lodash@4.17.21`
+  tracecli repo list --dependency lodash@4.17.21
+  tracecli repo list --web`
   ).action(async (options) => {
     await runRepositoryListCommand(options);
   });
@@ -28269,7 +28395,8 @@ function createFilterCommand() {
     `
 Examples:
   tracecli repo filter --filter "platform=GITHUB" --filter "status=CONNECTED"
-  tracecli repo filter --language typescript --output json`
+  tracecli repo filter --language typescript --output json
+  tracecli repo filter --web`
   ).action(async (options) => {
     await runRepositoryListCommand(options);
   });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "securewithtrace",
-  "version": "0.20.1",
+  "version": "0.20.3",
   "description": "Official Trace CLI for vulnerability intelligence in your terminal",
   "type": "module",
   "bin": {