securewithtrace 0.24.0 → 0.26.0

package/dist/index.js

@@ -4051,14 +4051,14 @@ var ye = (e) => {
 };
 var et2 = (e, i, s, r, u2) => {
   let n = i, o = 0;
-  for (let c26 = s; c26 < r; c26++) {
-    const a = e[c26];
+  for (let c27 = s; c27 < r; c27++) {
+    const a = e[c27];
     if (n = n - a.length, o++, n <= u2) break;
   }
   return { lineCount: n, removals: o };
 };
 var Y2 = ({ cursor: e, options: i, style: s, output: r = process.stdout, maxItems: u2 = Number.POSITIVE_INFINITY, columnPadding: n = 0, rowPadding: o = 4 }) => {
-  const c26 = O(r) - n, a = A(r), l = t("dim", "..."), $2 = Math.max(a - o, 0), y2 = Math.max(Math.min(u2, $2), 5);
+  const c27 = O(r) - n, a = A(r), l = t("dim", "..."), $2 = Math.max(a - o, 0), y2 = Math.max(Math.min(u2, $2), 5);
   let p2 = 0;
   e >= y2 - 3 && (p2 = Math.max(Math.min(e - y2 + 3, i.length - y2), 0));
   let m = y2 < i.length && p2 > 0, g = y2 < i.length && p2 + y2 < i.length;
@@ -4067,7 +4067,7 @@ var Y2 = ({ cursor: e, options: i, style: s, output: r = process.stdout, maxItem
   m && f++, g && f++;
   const v = p2 + (m ? 1 : 0), T = S2 - (g ? 1 : 0);
   for (let b = v; b < T; b++) {
-    const x = wrapAnsi(s(i[b], b === e), c26, { hard: true, trim: false }).split(`
+    const x = wrapAnsi(s(i[b], b === e), c27, { hard: true, trim: false }).split(`
 `);
     h.push(x), f += x.length;
   }
@@ -4108,19 +4108,19 @@ var _t = (e) => {
 `;
     switch (this.state) {
       case "submit": {
-        const c26 = s ? `${t("gray", d2)}  ` : "", a = R(e.output, i(this.options[this.cursor], "selected"), c26);
+        const c27 = s ? `${t("gray", d2)}  ` : "", a = R(e.output, i(this.options[this.cursor], "selected"), c27);
         return `${o}${a}`;
       }
       case "cancel": {
-        const c26 = s ? `${t("gray", d2)}  ` : "", a = R(e.output, i(this.options[this.cursor], "cancelled"), c26);
+        const c27 = s ? `${t("gray", d2)}  ` : "", a = R(e.output, i(this.options[this.cursor], "cancelled"), c27);
         return `${o}${a}${s ? `
 ${t("gray", d2)}` : ""}`;
       }
       default: {
-        const c26 = s ? `${t("cyan", d2)}  ` : "", a = s ? t("cyan", E2) : "", l = o.split(`
+        const c27 = s ? `${t("cyan", d2)}  ` : "", a = s ? t("cyan", E2) : "", l = o.split(`
 `).length, $2 = s ? 2 : 1;
-        return `${o}${c26}${Y2({ output: e.output, cursor: this.cursor, options: this.options, maxItems: e.maxItems, columnPadding: c26.length, rowPadding: l + $2, style: (y2, p2) => i(y2, y2.disabled ? "disabled" : p2 ? "active" : "inactive") }).join(`
-${c26}`)}
+        return `${o}${c27}${Y2({ output: e.output, cursor: this.cursor, options: this.options, maxItems: e.maxItems, columnPadding: c27.length, rowPadding: l + $2, style: (y2, p2) => i(y2, y2.disabled ? "disabled" : p2 ? "active" : "inactive") }).join(`
+${c27}`)}
 ${a}
 `;
       }
@@ -10897,7 +10897,7 @@ var $ZodBase64 = /* @__PURE__ */ $constructor("$ZodBase64", (inst, def) => {
 function isValidBase64URL(data) {
   if (!base64url.test(data))
     return false;
-  const base643 = data.replace(/[-_]/g, (c26) => c26 === "-" ? "+" : "/");
+  const base643 = data.replace(/[-_]/g, (c27) => c27 === "-" ? "+" : "/");
   const padded = base643.padEnd(Math.ceil(base643.length / 4) * 4, "=");
   return isValidBase64(padded);
 }
@@ -20941,9 +20941,9 @@ var ZodDate2 = /* @__PURE__ */ $constructor("ZodDate", (inst, def) => {
   inst._zod.processJSONSchema = (ctx, json2, params) => dateProcessor(inst, ctx, json2, params);
   inst.min = (value, params) => inst.check(_gte(value, params));
   inst.max = (value, params) => inst.check(_lte(value, params));
-  const c26 = inst._zod.bag;
-  inst.minDate = c26.minimum ? new Date(c26.minimum) : null;
-  inst.maxDate = c26.maximum ? new Date(c26.maximum) : null;
+  const c27 = inst._zod.bag;
+  inst.minDate = c27.minimum ? new Date(c27.minimum) : null;
+  inst.maxDate = c27.maximum ? new Date(c27.maximum) : null;
 });
 function date3(params) {
   return _date(ZodDate2, params);
@@ -24767,6 +24767,93 @@ var BulkUpdateVulnerabilitiesResponseSchema = external_exports.object({
   )
 });
 
+// ../../packages/api-contracts/src/schemas/api/v1/vulnerability-share.api.ts
+var VulnerabilityShareAccessModeSchema = external_exports.enum(["ANYONE_WITH_LINK", "ALLOWED_EMAILS"]);
+var VulnerabilityShareTokenSchema = external_exports.string().min(32).max(512).regex(/^[A-Za-z0-9_-]+$/, {
+  message: "shareToken must contain only URL-safe base64 characters"
+});
+var VulnerabilityShareLookupParamsSchema = OrgIdParamsSchema.extend({
+  vulnerabilityId: VulnerabilityLookupIdSchema
+});
+var VulnerabilityShareLinkParamsSchema = VulnerabilityShareLookupParamsSchema.extend({
+  shareLinkId: external_exports.uuid()
+});
+var VulnerabilityShareTokenParamsSchema = external_exports.object({
+  shareToken: VulnerabilityShareTokenSchema
+});
+var VulnerabilityShareResolveQuerySchema = external_exports.object({
+  viewerToken: external_exports.string().min(32).max(512).optional()
+});
+var CreateVulnerabilityShareLinkRequestSchema = external_exports.object({
+  accessMode: VulnerabilityShareAccessModeSchema,
+  allowedEmails: external_exports.array(external_exports.string().email().max(320)).max(100).default([]).optional()
+});
+var VulnerabilityShareLinkResponseSchema = external_exports.object({
+  shareLinkId: external_exports.uuid(),
+  vulnerabilityId: external_exports.uuid(),
+  organizationId: external_exports.uuid(),
+  createdById: external_exports.uuid(),
+  createdByName: external_exports.string(),
+  createdByEmail: external_exports.string().email(),
+  accessMode: VulnerabilityShareAccessModeSchema,
+  allowedEmails: external_exports.array(external_exports.string().email()),
+  revokedAt: external_exports.coerce.date().nullable(),
+  createdAt: external_exports.coerce.date(),
+  updatedAt: external_exports.coerce.date()
+});
+var CreateVulnerabilityShareLinkResponseSchema = VulnerabilityShareLinkResponseSchema.extend({
+  shareUrl: external_exports.url()
+});
+var ListVulnerabilityShareLinksResponseSchema = external_exports.array(
+  VulnerabilityShareLinkResponseSchema
+);
+var SharedVulnerabilityResponseSchema = external_exports.object({
+  vulnerabilityId: external_exports.uuid(),
+  traceId: external_exports.string(),
+  title: external_exports.string(),
+  description: external_exports.string(),
+  severity: VulnerabilitySeverity,
+  status: VulnerabilityStatus,
+  vulnerabilityType: VulnerabilityType,
+  repositoryName: external_exports.string(),
+  repositoryHtmlUrl: external_exports.string().nullable(),
+  cweId: external_exports.string().nullable(),
+  explanation: external_exports.string().nullable(),
+  codeSnippet: external_exports.object({
+    filePath: external_exports.string(),
+    startLine: external_exports.number(),
+    endLine: external_exports.number().nullable(),
+    snippet: external_exports.string().nullable()
+  }),
+  createdAt: external_exports.coerce.date(),
+  updatedAt: external_exports.coerce.date()
+});
+var ResolveSharedVulnerabilityResponseSchema = external_exports.object({
+  shareLinkId: external_exports.uuid(),
+  accessMode: VulnerabilityShareAccessModeSchema,
+  requiresEmailVerification: external_exports.boolean(),
+  viewerEmail: external_exports.string().email().nullable(),
+  vulnerability: SharedVulnerabilityResponseSchema.nullable()
+});
+var RequestSharedVulnerabilityEmailVerificationSchema = external_exports.object({
+  email: external_exports.string().email().max(320)
+});
+var RequestSharedVulnerabilityEmailVerificationResponseSchema = external_exports.object({
+  verificationId: external_exports.uuid(),
+  email: external_exports.string().email(),
+  expiresAt: external_exports.coerce.date()
+});
+var VerifySharedVulnerabilityEmailCodeSchema = external_exports.object({
+  verificationId: external_exports.uuid(),
+  email: external_exports.string().email().max(320),
+  code: external_exports.string().trim().min(4).max(16)
+});
+var VerifySharedVulnerabilityEmailCodeResponseSchema = external_exports.object({
+  viewerToken: external_exports.string().min(32).max(512),
+  email: external_exports.string().email(),
+  expiresAt: external_exports.coerce.date()
+});
+
 // ../../packages/api-contracts/src/contracts/v1/vulnerability.ts
 var c17 = initContract();
 var vulnerabilityContract = c17.router({
@@ -24899,6 +24986,47 @@ var vulnerabilityContract = c17.router({
       404: ErrorResponseSchema,
       500: ErrorResponseSchema
     }
+  },
+  createShareLink: {
+    method: "POST",
+    path: "/organizations/:organizationId/vulnerabilities/:vulnerabilityId/share-links",
+    pathParams: VulnerabilityLookupIdParamsSchema,
+    body: CreateVulnerabilityShareLinkRequestSchema,
+    responses: {
+      201: CreateVulnerabilityShareLinkResponseSchema,
+      400: ErrorResponseSchema,
+      401: ErrorResponseSchema,
+      403: ErrorResponseSchema,
+      404: ErrorResponseSchema,
+      500: ErrorResponseSchema
+    }
+  },
+  listShareLinks: {
+    method: "GET",
+    path: "/organizations/:organizationId/vulnerabilities/:vulnerabilityId/share-links",
+    pathParams: VulnerabilityLookupIdParamsSchema,
+    responses: {
+      200: ListVulnerabilityShareLinksResponseSchema,
+      400: ErrorResponseSchema,
+      401: ErrorResponseSchema,
+      403: ErrorResponseSchema,
+      404: ErrorResponseSchema,
+      500: ErrorResponseSchema
+    }
+  },
+  revokeShareLink: {
+    method: "POST",
+    path: "/organizations/:organizationId/vulnerabilities/:vulnerabilityId/share-links/:shareLinkId/revoke",
+    pathParams: VulnerabilityShareLinkParamsSchema,
+    body: null,
+    responses: {
+      200: VulnerabilityShareLinkResponseSchema,
+      400: ErrorResponseSchema,
+      401: ErrorResponseSchema,
+      403: ErrorResponseSchema,
+      404: ErrorResponseSchema,
+      500: ErrorResponseSchema
+    }
   }
 });
 
@@ -25361,6 +25489,57 @@ var healthContract = c24.router({
   }
 });
 
+// ../../packages/api-contracts/src/contracts/v1/vulnerability-share.ts
+var c25 = initContract();
+var vulnerabilityShareContract = c25.router(
+  {
+    resolveShareLink: {
+      method: "GET",
+      path: "/vulnerabilities/share/:shareToken/resolve",
+      pathParams: VulnerabilityShareTokenParamsSchema,
+      responses: {
+        200: ResolveSharedVulnerabilityResponseSchema,
+        400: ErrorResponseSchema,
+        401: ErrorResponseSchema,
+        403: ErrorResponseSchema,
+        404: ErrorResponseSchema,
+        500: ErrorResponseSchema
+      }
+    },
+    requestShareEmailVerification: {
+      method: "POST",
+      path: "/vulnerabilities/share/:shareToken/verify/start",
+      pathParams: VulnerabilityShareTokenParamsSchema,
+      body: RequestSharedVulnerabilityEmailVerificationSchema,
+      responses: {
+        200: RequestSharedVulnerabilityEmailVerificationResponseSchema,
+        400: ErrorResponseSchema,
+        401: ErrorResponseSchema,
+        403: ErrorResponseSchema,
+        404: ErrorResponseSchema,
+        500: ErrorResponseSchema
+      }
+    },
+    verifyShareEmailCode: {
+      method: "POST",
+      path: "/vulnerabilities/share/:shareToken/verify/complete",
+      pathParams: VulnerabilityShareTokenParamsSchema,
+      body: VerifySharedVulnerabilityEmailCodeSchema,
+      responses: {
+        200: VerifySharedVulnerabilityEmailCodeResponseSchema,
+        400: ErrorResponseSchema,
+        401: ErrorResponseSchema,
+        403: ErrorResponseSchema,
+        404: ErrorResponseSchema,
+        500: ErrorResponseSchema
+      }
+    }
+  },
+  {
+    pathPrefix: "/v1"
+  }
+);
+
 // ../../packages/api-contracts/src/schemas/api/v1/pr-vulnerability.api.ts
 var PrParamsSchema = external_exports.object({
   owner: external_exports.string(),
@@ -25399,8 +25578,8 @@ var UpdatePrVulnerabilityRequestSchema = external_exports.object({
 });
 
 // ../../packages/api-contracts/src/contracts/v1/pr-vulnerability.ts
-var c25 = initContract();
-var prVulnerabilityContract = c25.router(
+var c26 = initContract();
+var prVulnerabilityContract = c26.router(
   {
     listPrVulnerabilities: {
       method: "GET",
@@ -27034,14 +27213,22 @@ Examples:
     }
   });
 }
+var ORG_LIST_MAX_LIMIT = 100;
 function createOrgListCommand() {
-  return new Command("list").description("List organizations available to your account").option("-o, --output <format>", "Output format: table, json, tsv (default: table)", "table").option("-L, --limit <n>", "Max organizations to display (default: all)", (v) => {
-    const n = Number.parseInt(v, 10);
-    if (Number.isNaN(n) || n < 1) {
-      throw new Error("--limit must be a positive integer");
+  return new Command("list").description("List organizations available to your account").option("-o, --output <format>", "Output format: table, json, tsv (default: table)", "table").option(
+    "-L, --limit <n>",
+    `Max organizations to display, max ${ORG_LIST_MAX_LIMIT} (default: all)`,
+    (v) => {
+      const n = Number.parseInt(v, 10);
+      if (Number.isNaN(n) || n < 1) {
+        throw new Error("--limit must be a positive integer");
+      }
+      if (n > ORG_LIST_MAX_LIMIT) {
+        throw new Error(`--limit cannot exceed ${ORG_LIST_MAX_LIMIT}`);
+      }
+      return n;
     }
-    return n;
-  }).option(
+  ).option(
     "-f, --filter <expression>",
     "Filter expression (repeatable). Fields: name, slug. Operators: = exact, != not exact, : contains, !: not contains",
     (val, prev) => [...prev, val],
@@ -27325,7 +27512,7 @@ function extractCommandTree(cmd) {
     description: o.description,
     takesValue: o.required || o.optional
   }));
-  const subcommands = cmd.commands.filter((c26) => !c26._hidden).map((c26) => extractCommandTree(c26));
+  const subcommands = cmd.commands.filter((c27) => !c27._hidden).map((c27) => extractCommandTree(c27));
   return {
     name: cmd.name(),
     description: cmd.description(),
@@ -27391,7 +27578,7 @@ function generateBashCompletion(tree, binName) {
 }
 function collectBashCases(tree, prefix) {
   const cases = /* @__PURE__ */ new Map();
-  const subcommandNames = tree.subcommands.map((c26) => c26.name);
+  const subcommandNames = tree.subcommands.map((c27) => c27.name);
   const optionNames = tree.options.flatMap((o) => o.short ? [o.long, o.short] : [o.long]);
   const extraOptions = prefix === "" ? ["--help", "--version"] : ["--help"];
   const allOptions = [.../* @__PURE__ */ new Set([...optionNames, ...extraOptions])];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "securewithtrace",
-  "version": "0.24.0",
+  "version": "0.26.0",
   "description": "Official Trace CLI for vulnerability intelligence in your terminal",
   "type": "module",
   "bin": {