ai-cli-toolkit 0.2.0__py3-none-any.whl

ai_cli/__init__.py

@@ -0,0 +1,3 @@
+"""ai-cli: Unified AI CLI wrapper for Claude, Codex, Copilot, and Gemini."""
+
+__version__ = "0.2.0"

ai_cli/__main__.py

@@ -0,0 +1,6 @@
+"""Entry point for python -m ai_cli."""
+
+from ai_cli.main import main
+
+if __name__ == "__main__":
+    raise SystemExit(main())

ai_cli/bin/remote-tty-wrapper

@@ -0,0 +1,153 @@
+#!/usr/bin/env zsh
+set -euo pipefail
+
+die() { print -u2 -- "Error: $*"; exit 1; }
+
+usage() {
+  cat <<'USAGE'
+remote-tty-wrapper -H user@host [-s session] [--ssh-opt "..."] <mode> [mode args]
+
+Global:
+  -H, --host user@host        required
+  -s, --session NAME          tmux session name (default: sshwrap)
+  --ssh-opt "..."             extra ssh option (repeatable)
+
+Modes:
+  start [--init 'CMD']        ensure tmux session exists; optionally run CMD inside it
+  shell [--init 'CMD']        attach to tmux session; optionally run CMD inside it first
+  send  CMD...                send one command line into the tmux session
+  send  -- 'CMD1' -- 'CMD2'   send multiple command lines (separator is literal --)
+  close                       kill the tmux session
+
+Examples:
+  remote-tty-wrapper -H example@192.168.1.117 start
+  remote-tty-wrapper -H example@192.168.1.117 shell
+  remote-tty-wrapper -H example@192.168.1.117 shell --init 'source ~/miniconda3/bin/activate; conda activate bot-refactor/conda'
+  remote-tty-wrapper -H example@192.168.1.117 send 'cd bot-refactor'
+  remote-tty-wrapper -H example@192.168.1.117 send -- 'cd bot-refactor' -- 'pwd' -- 'python -V'
+USAGE
+}
+
+REMOTE_USER_HOST="${REMOTE_USER_HOST:-}"
+SESSION="sshwrap"
+MODE=""
+INIT_CMD=""
+
+typeset -a SSH_OPTS
+SSH_OPTS=(-o PermitLocalCommand=no -o ServerAliveInterval=30 -o ServerAliveCountMax=3)
+
+# ---- parse globals ----
+while (( $# )); do
+  case "$1" in
+    -H|--host) shift; (( $# )) || die "Missing --host"; REMOTE_USER_HOST="$1"; shift;;
+    -s|--session) shift; (( $# )) || die "Missing --session"; SESSION="$1"; shift;;
+    --ssh-opt) shift; (( $# )) || die "Missing --ssh-opt"; SSH_OPTS+=("$1"); shift;;
+    -h|--help) usage; exit 0;;
+    start|shell|send|close) MODE="$1"; shift; break;;
+    *) die "Unknown option or missing mode: $1 (use --help)";;
+  esac
+done
+
+[[ -n "$REMOTE_USER_HOST" ]] || die "No host set (-H user@host)"
+[[ -n "$MODE" ]] || die "No mode (use --help)"
+
+# ---- helper: run a shell snippet on remote with argv preserved ----
+ssh_sh() {
+  ssh "${SSH_OPTS[@]}" "$REMOTE_USER_HOST" sh -s -- "$@"
+}
+
+ensure_tmux_session() {
+  ssh_sh "$SESSION" <<'SH'
+sess="$1"
+command -v tmux >/dev/null 2>&1 || { echo "tmux not found on remote" >&2; exit 127; }
+tmux has-session -t "$sess" 2>/dev/null || tmux new-session -d -s "$sess"
+SH
+}
+
+tmux_send_line() {
+  ssh_sh "$SESSION" "$1" <<'SH'
+sess="$1"
+line="$2"
+tmux has-session -t "$sess" 2>/dev/null || tmux new-session -d -s "$sess"
+tmux send-keys -t "$sess" -l -- "$line"
+tmux send-keys -t "$sess" Enter
+SH
+}
+typeset -a REMAINING_ARGS
+parse_init() {
+  INIT_CMD=""
+  REMAINING_ARGS=()
+  if (( $# >= 2 )) && [[ "$1" == "--init" ]]; then
+    INIT_CMD="$2"
+    shift 2
+  fi
+  REMAINING_ARGS=("$@")
+}
+
+do_start() {
+  parse_init "$@"
+  (( ${#REMAINING_ARGS[@]} == 0 )) || die "start takes no extra args (use --init '...')"
+
+  ensure_tmux_session
+  [[ -n "$INIT_CMD" ]] && tmux_send_line "$INIT_CMD"
+}
+
+do_shell() {
+  parse_init "$@"
+  (( ${#REMAINING_ARGS[@]} == 0 )) || die "shell takes no extra args (use --init '...')"
+
+  [[ -r /dev/tty && -w /dev/tty ]] || die "shell requires a real terminal (/dev/tty unavailable). Use start/send."
+
+  local remote_cmd
+  remote_cmd="tmux has-session -t $(printf %q "$SESSION") 2>/dev/null || tmux new-session -d -s $(printf %q "$SESSION")"
+  if [[ -n "$INIT_CMD" ]]; then
+    remote_cmd="$remote_cmd; tmux send-keys -t $(printf %q "$SESSION") -l -- $(printf %q "$INIT_CMD"); tmux send-keys -t $(printf %q "$SESSION") Enter"
+  fi
+  remote_cmd="$remote_cmd; tmux attach -t $(printf %q "$SESSION")"
+
+  exec </dev/tty >/dev/tty 2>&1 \
+    ssh "${SSH_OPTS[@]}" -o RequestTTY=force "$REMOTE_USER_HOST" "$remote_cmd"
+}
+
+do_send() {
+  ensure_tmux_session
+  (( $# > 0 )) || die "send requires a command (or: send -- 'CMD1' -- 'CMD2' ...)"
+
+  if [[ "$1" == "--" ]]; then
+    shift
+    local cur=""
+    while (( $# )); do
+      if [[ "$1" == "--" ]]; then
+        [[ -n "$cur" ]] && tmux_send_line "$cur"
+        cur=""
+        shift
+        continue
+      fi
+      if [[ -z "$cur" ]]; then
+        cur="$1"
+      else
+        cur="$cur $1"
+      fi
+      shift
+    done
+    [[ -n "$cur" ]] && tmux_send_line "$cur"
+  else
+    tmux_send_line "$*"
+  fi
+}
+
+do_close() {
+  (( $# == 0 )) || die "close takes no arguments"
+  ssh_sh "$SESSION" <<'SH'
+sess="$1"
+command -v tmux >/dev/null 2>&1 || exit 0
+tmux kill-session -t "$sess" 2>/dev/null || true
+SH
+}
+
+case "$MODE" in
+  start) do_start "$@";;
+  shell) do_shell "$@";;
+  send)  do_send  "$@";;
+  close) do_close "$@";;
+esac

ai_cli/ca.py

@@ -0,0 +1,175 @@
+"""CA certificate bootstrap and optional trust-store installation.
+
+Handles generating mitmproxy CA certificates on first run, and optionally
+installing them into the macOS or Linux system trust store.
+"""
+
+from __future__ import annotations
+
+import random
+import shutil
+import subprocess
+import time
+from pathlib import Path
+from typing import Any
+
+from ai_cli.log import append_log, fmt_cmd
+
+DEFAULT_CA_PATH = "~/.mitmproxy/mitmproxy-ca-cert.pem"
+
+
+def _stop_process(proc: subprocess.Popen[Any]) -> None:
+    """Terminate a subprocess, escalating to kill after timeout."""
+    if proc.poll() is not None:
+        return
+    proc.terminate()
+    try:
+        proc.wait(timeout=3)
+    except subprocess.TimeoutExpired:
+        proc.kill()
+
+
+def bootstrap_ca_cert(
+    ca_path: Path,
+    mitmdump_bin: str,
+    log_path: Path,
+) -> bool:
+    """Ensure mitmproxy CA cert exists at *ca_path*.
+
+    If missing, runs a short-lived mitmdump process to generate CA material.
+    Returns True if cert is available after bootstrap.
+    """
+    if ca_path.is_file():
+        return True
+
+    confdir = ca_path.parent
+    generated_path = confdir / "mitmproxy-ca-cert.pem"
+    try:
+        confdir.mkdir(parents=True, exist_ok=True)
+    except OSError as exc:
+        append_log(log_path, f"Failed to create CA directory {confdir}: {exc}")
+        return False
+
+    append_log(log_path, f"CA cert missing at {ca_path}. Bootstrapping with mitmdump.")
+
+    for _ in range(3):
+        port = random.randint(39000, 49000)
+        bootstrap_cmd = [
+            mitmdump_bin,
+            "--quiet",
+            "--set",
+            f"confdir={confdir}",
+            "--listen-host",
+            "127.0.0.1",
+            "-p",
+            str(port),
+        ]
+        append_log(log_path, f"CA bootstrap command: {fmt_cmd(bootstrap_cmd)}")
+
+        try:
+            bootstrap_proc = subprocess.Popen(
+                bootstrap_cmd,
+                stdin=subprocess.DEVNULL,
+                stdout=subprocess.DEVNULL,
+                stderr=subprocess.DEVNULL,
+                start_new_session=True,
+            )
+        except OSError as exc:
+            append_log(log_path, f"Failed to start bootstrap mitmdump: {exc}")
+            continue
+
+        time.sleep(0.6)
+        _stop_process(bootstrap_proc)
+        if generated_path.is_file() or ca_path.is_file():
+            break
+
+    if generated_path.is_file() and generated_path != ca_path:
+        try:
+            shutil.copy2(generated_path, ca_path)
+        except OSError as exc:
+            append_log(
+                log_path, f"Failed to copy generated CA cert to {ca_path}: {exc}"
+            )
+
+    if ca_path.is_file():
+        append_log(log_path, f"CA cert available at {ca_path}.")
+        return True
+
+    append_log(log_path, f"CA bootstrap failed. Expected cert at {ca_path}.")
+    return False
+
+
+def install_ca_macos(ca_path: Path, log_path: Path) -> bool:
+    """Install CA cert into the macOS system keychain (requires sudo)."""
+    if not ca_path.is_file():
+        append_log(log_path, f"CA cert not found at {ca_path}")
+        return False
+
+    cmd = [
+        "sudo",
+        "security",
+        "add-trusted-cert",
+        "-d",
+        "-r",
+        "trustRoot",
+        "-k",
+        "/Library/Keychains/System.keychain",
+        str(ca_path),
+    ]
+    append_log(log_path, f"Installing CA to macOS keychain: {fmt_cmd(cmd)}")
+    try:
+        result = subprocess.run(cmd, check=False, capture_output=True, text=True)
+        if result.returncode == 0:
+            append_log(log_path, "CA cert installed to macOS system keychain.")
+            return True
+        append_log(
+            log_path,
+            f"CA install failed (exit={result.returncode}): {result.stderr.strip()}",
+        )
+    except OSError as exc:
+        append_log(log_path, f"CA install failed: {exc}")
+    return False
+
+
+def install_ca_linux(ca_path: Path, log_path: Path) -> bool:
+    """Install CA cert into the Linux system trust store."""
+    if not ca_path.is_file():
+        append_log(log_path, f"CA cert not found at {ca_path}")
+        return False
+
+    # Try Debian/Ubuntu style
+    dest_dir = Path("/usr/local/share/ca-certificates")
+    update_cmd = "update-ca-certificates"
+    if not dest_dir.exists():
+        # Try RHEL/Fedora style
+        dest_dir = Path("/etc/pki/ca-trust/source/anchors")
+        update_cmd = "update-ca-trust"
+
+    if not dest_dir.exists():
+        append_log(log_path, "No known CA trust directory found on this system.")
+        return False
+
+    dest = dest_dir / "mitmproxy-ca-cert.crt"
+    try:
+        result = subprocess.run(
+            ["sudo", "cp", str(ca_path), str(dest)],
+            check=False,
+            capture_output=True,
+            text=True,
+        )
+        if result.returncode != 0:
+            append_log(log_path, f"Failed to copy CA cert: {result.stderr.strip()}")
+            return False
+        result = subprocess.run(
+            ["sudo", update_cmd],
+            check=False,
+            capture_output=True,
+            text=True,
+        )
+        if result.returncode == 0:
+            append_log(log_path, f"CA cert installed via {update_cmd}.")
+            return True
+        append_log(log_path, f"{update_cmd} failed: {result.stderr.strip()}")
+    except OSError as exc:
+        append_log(log_path, f"CA install failed: {exc}")
+    return False