bevor-cli 0.1.0__tar.gz

bevor_cli-0.1.0/.gitignore

@@ -0,0 +1,60 @@
+# Python
+__pycache__/
+*.py[cod]
+*.egg-info/
+build/
+dist/
+
+# Node (railway.ts)
+node_modules/
+
+# uv / virtualenvs
+.venv/
+
+# tmp
+services/rust_contracts/rust_contracts
+
+# Tooling caches
+.ruff_cache/
+.pytest_cache/
+.mypy_cache/
+.coverage
+.coverage.*
+htmlcov/
+
+# Env files
+.env
+.env.*
+!.env.example
+
+# Terraform
+.terraform/
+*.tfstate
+*.tfstate.*
+*.tfvars
+*.tfvars.json
+!*.tfvars.example
+crash.log
+crash.*.log
+
+# Editors / OS
+.vscode/
+.idea/
+.zed/
+.DS_Store
+
+# Scratch
+*.ipynb
+mock.py
+tmp/
+logs/
+*.log
+
+# Local development / tests
+.local/
+.test-repo-cache/
+tests/integration/fixtures/real_repos/*
+!tests/integration/fixtures/real_repos/config.py
+
+# Bevor
+.bevor

bevor_cli-0.1.0/PKG-INFO

@@ -0,0 +1,14 @@
+Metadata-Version: 2.5
+Name: bevor-cli
+Version: 0.1.0
+Summary: Bevor CLI tool for security analysis and graph inspection
+Classifier: Development Status :: 3 - Alpha
+Requires-Python: >=3.13
+Requires-Dist: bevor-sdk==0.1.0
+Requires-Dist: click~=8.1
+Requires-Dist: httpx~=0.28
+Requires-Dist: pydantic~=2.12
+Requires-Dist: pyyaml~=6.0
+Requires-Dist: questionary~=2.0
+Requires-Dist: rich~=15.0
+Requires-Dist: typer~=0.26

bevor_cli-0.1.0/README.md

@@ -0,0 +1,113 @@
+# Bevor CLI
+
+The official command-line interface for [Bevor](https://bevor.io) — smart contract security analysis and code graph exploration.
+
+Use `bevor` to upload Solidity codebases, run security analyses, explore the code graph interactively, and manage findings — all from your terminal.
+
+---
+
+## Installation
+
+```bash
+curl -LsSf https://bevor.io/install.sh | bash
+```
+
+---
+
+## Setup
+
+```bash
+bevor login
+bevor link
+#
+bevor codes push
+bevor analyses create
+```
+
+---
+
+## Contents
+
+`[]` -> optional args.
+`<>` -> required args.
+
+Simplification: EVERYTHING operates on the currently configured analysis. Findings as well.
+Simplifies the DX, and we can take the stance that it's a rare state to want to operate on OTHER things via the CLI.
+"version" is a flag that can be passed, but it's intentionally hard to act on arbitrary versions, unless the head is moved or the flag is passed.
+
+### Local Configuration
+- workspace [id]
+- project [id]
+- code [id, fingerprint]
+- analysis [id]
+
+```bash
+help
+login
+logout
+whoami [--json]
+link
+context [--json]
+sessions
+sessions list
+sessions revoke <token_id>
+workspaces
+workspaces list [--json]
+workspaces view [workspace_id] [--json]
+workspaces select [workspace_id]
+projects
+projects list [--json]
+projects view [project_id] [--json]
+projects select [project_id]
+projects create [--name] [--description] [--kind] [--yes]
+codes
+codes list [--page] [--page-size] [--order] [--order-by] [--project] [--network] [--identifier] [--status] [--json]
+codes view [code_id] [--json]
+codes select [code_id]
+codes push [--path] [--no-wait] [--yes]
+codes nodes
+codes nodes list [--code] [--entrypoints] [--file] [--no-deps] [--name] [--node-type] [--json]
+codes nodes view <node_id> [--code] [--json]
+codes nodes content <node_id> [--code]
+codes nodes edges <node_id> [--code] [--direction] [--type] [--json]
+codes nodes call-chain <node_id> [--code] [--json]
+codes nodes interactive <node_id> [--code]
+analyses
+analyses list [--page] [--page-size] [--order] [--order-by] [--project] [--user] [--is-owner] [--json]
+analyses view [analysis_id] [--version] [--json]
+analyses select [analysis_id] [--page] [--page-size]
+analyses recent [--json]
+analyses create [--name] [--collision] [--yes] [--json] [--force]
+analyses set-head <version_id>
+analyses run [--version] [--no-wait] [--silent]
+analyses retry [--version] [--no-wait] [--silent]
+analyses diff [--version] [--staged] [--json]
+analyses commit [--version]
+analyses child [--version] [--collision]
+analyses fork [--version]
+analyses merge <from_analysis> [--to]
+analyses findings [--version] [--interactive] [--json] [--sarif]
+analyses entrypoints [--version] [--json]
+analyses transitions [--page] [--page-size] [--order] [--order-by] [--reason] [--version] [--project-wide] [--json]
+analyses delete
+analyses delete full
+analyses delete version [version]
+findings
+findings list [--page] [--page-size] [--order] [--order-by] [--project] [--self] [--user] [--code] [--analyses] [--type] [--level] [--acknowledged] [--operation] [--created-by-self] [--created-by] [--json]
+findings view <finding_id> [--json]
+findings add [--version] [--file] [--interactive] [--type] [--level] [--name] [--explanation] [--recommendation] [--poc] [--tool] [--node] [--location] [--uri] [--start-line] [--start-column] [--end-line] [--end-column] [--char-offset] [--char-length] [--byte-offset] [--byte-length] [--fqn]
+findings bulk <source> [--version]
+findings edit <finding_id> [--file]
+findings delete <finding_id>
+findings revert <finding_id>
+findings acknowledge <finding_id>
+agent
+agent setup
+agent materialize
+chats
+chats list --page --page-size --order --order-by --project [--json]
+chats view <chat_id> [--json]
+chats messages <chat_id> [--json]
+chats new <mode>
+chats resume <chat_id>
+```

bevor_cli-0.1.0/bevor_cli/annotations/confirmations.py

@@ -0,0 +1,16 @@
+from typing import Annotated
+
+import typer
+
+YES = Annotated[bool, typer.Option("--yes", help="Skip confirmation of action.")]
+NO_WAIT = Annotated[
+    bool,
+    typer.Option(
+        "--no-wait", help="Return immediately without waiting for the event stream to complete."
+    ),
+]
+JSON_OUT = Annotated[bool, typer.Option("--json", help="JSON output")]
+FORCE = Annotated[bool, typer.Option("--force", help="Skip checks. Not recommended.")]
+SILENT = Annotated[bool, typer.Option("--silent", help="Suppress intermediate output logs.")]
+
+__all__ = ["YES", "JSON_OUT", "NO_WAIT", "FORCE", "SILENT"]

bevor_cli-0.1.0/bevor_cli/annotations/query.py

@@ -0,0 +1,25 @@
+from typing import Annotated, Literal
+
+import typer
+
+PAGE = Annotated[
+    int | None,
+    typer.Option("--page", help="Page number to use for resource that supports pagination"),
+]
+PAGE_SIZE = Annotated[
+    int | None,
+    typer.Option("--page-size", help="Page size to use for resource that supports pagination"),
+]
+ORDER = Annotated[
+    Literal["desc", "asc"] | None,
+    typer.Option("--order", help="How to order results when a resource supports pagination"),
+]
+
+ORDER_BY = Annotated[
+    Literal["created_at", "updated_at"] | None,
+    typer.Option(
+        "--order-by", help="What field to order results by when a resource supports pagination"
+    ),
+]
+
+__all__ = ["PAGE", "PAGE_SIZE", "ORDER", "ORDER_BY"]

bevor_cli-0.1.0/bevor_cli/apps/agent.py

@@ -0,0 +1,10 @@
+import typer
+from bevor_cli.commands.agent.materialze_cmd import scopes_materialize
+from bevor_cli.commands.agent.setup_cmd import agent_setup
+
+app = typer.Typer(help="Audit agent workflow shorthands.", no_args_is_help=True)
+
+app.command("setup")(agent_setup)
+app.command("materialize")(scopes_materialize)
+
+__all__ = ["app"]

bevor_cli-0.1.0/bevor_cli/apps/analyses.py

@@ -0,0 +1,47 @@
+import typer
+from bevor_cli.commands.analyses.active import active_analysis
+from bevor_cli.commands.analyses.child import create_child_analysis
+from bevor_cli.commands.analyses.commit import commit_analysis
+from bevor_cli.commands.analyses.create import create_analysis
+from bevor_cli.commands.analyses.delete import delete_analysis_full, delete_analysis_version
+from bevor_cli.commands.analyses.diff import diff_analysis
+from bevor_cli.commands.analyses.entrypoints import list_entrypoints
+from bevor_cli.commands.analyses.findings import list_analysis_findings
+from bevor_cli.commands.analyses.fork import fork_analysis
+from bevor_cli.commands.analyses.list import list_analyses
+from bevor_cli.commands.analyses.merge import merge_analysis
+from bevor_cli.commands.analyses.retry import retry_analysis
+from bevor_cli.commands.analyses.run import run_analysis
+from bevor_cli.commands.analyses.select import select_analysis
+from bevor_cli.commands.analyses.set_head import set_analysis_head
+from bevor_cli.commands.analyses.transitions import list_transitions
+from bevor_cli.commands.analyses.view import view_analysis
+
+app = typer.Typer(help="Manage analyses.", no_args_is_help=True)
+
+app.command("list")(list_analyses)
+app.command("view")(view_analysis)
+app.command("select")(select_analysis)
+app.command("recent")(active_analysis)
+app.command("create")(create_analysis)
+app.command("set-head")(set_analysis_head)
+
+delete_app = typer.Typer(help="Delete an analysis container or version.", no_args_is_help=True)
+delete_app.command("full")(delete_analysis_full)
+delete_app.command("version")(delete_analysis_version)
+app.add_typer(delete_app, name="delete")
+
+app.command("run")(run_analysis)
+app.command("retry")(retry_analysis)
+app.command("diff")(diff_analysis)
+app.command("commit")(commit_analysis)
+app.command("child")(create_child_analysis)
+app.command("fork")(fork_analysis)
+app.command("merge")(merge_analysis)
+app.command("findings")(list_analysis_findings)
+
+
+app.command("entrypoints")(list_entrypoints)
+app.command("transitions")(list_transitions)
+
+__all__ = ["app"]

bevor_cli-0.1.0/bevor_cli/apps/chat.py

@@ -0,0 +1,16 @@
+import typer
+from bevor_cli.commands.analyses.chats.get import get_chat
+from bevor_cli.commands.analyses.chats.list import list_chats
+from bevor_cli.commands.analyses.chats.messages import chat_messages
+from bevor_cli.commands.analyses.chats.new import chat_new
+from bevor_cli.commands.analyses.chats.resume import chat_resume
+
+app = typer.Typer(help="Manage analysis chats.")
+
+app.command("list")(list_chats)
+app.command("view")(get_chat)
+app.command("messages")(chat_messages)
+app.command("new")(chat_new)
+app.command("resume")(chat_resume)
+
+__all__ = ["app"]

bevor_cli-0.1.0/bevor_cli/apps/codes.py

@@ -0,0 +1,18 @@
+import typer
+from bevor_cli.apps import nodes
+from bevor_cli.commands.codes.list import list_code_versions
+from bevor_cli.commands.codes.push import push_code
+from bevor_cli.commands.codes.select import select_code
+from bevor_cli.commands.codes.view import view_code
+
+app = typer.Typer(
+    help="List, inspect, and upload code versions for the active project.",
+    no_args_is_help=True,
+)
+app.command("list")(list_code_versions)
+app.command("view")(view_code)
+app.command("select")(select_code)
+app.command("push")(push_code)
+app.add_typer(nodes.app, name="nodes")
+
+__all__ = ["app"]

bevor_cli-0.1.0/bevor_cli/apps/findings.py

@@ -0,0 +1,22 @@
+import typer
+from bevor_cli.commands.findings.acknowledge import acknowledge_finding
+from bevor_cli.commands.findings.add import add_finding
+from bevor_cli.commands.findings.bulk import bulk_findings
+from bevor_cli.commands.findings.delete import delete_finding
+from bevor_cli.commands.findings.edit import edit_finding
+from bevor_cli.commands.findings.get import get_finding
+from bevor_cli.commands.findings.list import list_findings
+from bevor_cli.commands.findings.revert import revert_finding
+
+app = typer.Typer(help="Findings for the configured analysis.", no_args_is_help=True)
+
+app.command("list")(list_findings)
+app.command("view")(get_finding)
+app.command("add")(add_finding)
+app.command("bulk")(bulk_findings)
+app.command("edit")(edit_finding)
+app.command("delete")(delete_finding)
+app.command("revert")(revert_finding)
+app.command("acknowledge")(acknowledge_finding)
+
+__all__ = ["app"]

bevor_cli-0.1.0/bevor_cli/apps/main.py

@@ -0,0 +1,61 @@
+import typer
+from bevor_cli import output
+from bevor_cli.apps import (
+    agent,
+    analyses,
+    chat,
+    codes,
+    findings,
+    projects,
+    sessions,
+    workspaces,
+)
+from bevor_cli.commands.auth import login, logout, whoami
+from bevor_cli.commands.context import run_context
+from bevor_cli.commands.link import run_link
+from bevor_cli.output import console
+
+app = typer.Typer(
+    name="bevor",
+    help="Bevor CLI — smart contract security analysis and code graph exploration.",
+    invoke_without_command=True,
+    no_args_is_help=True,
+    pretty_exceptions_enable=False,
+)
+
+
+@app.callback(invoke_without_command=True)
+def _root(
+    quiet: bool = typer.Option(
+        False,
+        "--quiet",
+        help="Suppress informational output; useful for scripting.",
+        is_eager=False,
+    ),
+) -> None:
+    output.set_quiet(quiet)
+
+
+@app.command("help")
+def help_command(ctx: typer.Context) -> None:
+    """Show root help text (alias for --help)."""
+    root_ctx = ctx.parent or ctx
+    console.print(root_ctx.get_help())
+
+
+app.command("login")(login)
+app.command("logout")(logout)
+app.command("whoami")(whoami)
+app.command("link")(run_link)
+app.command("context")(run_context)
+
+app.add_typer(sessions.app, name="sessions")
+app.add_typer(workspaces.app, name="workspaces")
+app.add_typer(projects.app, name="projects")
+app.add_typer(codes.app, name="codes")
+app.add_typer(analyses.app, name="analyses")
+app.add_typer(findings.app, name="findings")
+app.add_typer(agent.app, name="agent")
+app.add_typer(chat.app, name="chats")
+
+__all__ = ["app"]

bevor_cli-0.1.0/bevor_cli/apps/nodes.py

@@ -0,0 +1,17 @@
+import typer
+from bevor_cli.commands.graph.call_chain import call_chain_cmd
+from bevor_cli.commands.graph.edges import list_node_edges
+from bevor_cli.commands.graph.interactive import interactive_cmd
+from bevor_cli.commands.nodes.get import get_node
+from bevor_cli.commands.nodes.list import list_nodes
+from bevor_cli.commands.nodes.source import show_source
+
+app = typer.Typer(help="Inspect the code graph.", no_args_is_help=True)
+app.command("list")(list_nodes)
+app.command("view")(get_node)
+app.command("content")(show_source)
+app.command("edges")(list_node_edges)
+app.command("call-chain")(call_chain_cmd)
+app.command("interactive")(interactive_cmd)
+
+__all__ = ["app"]

bevor_cli-0.1.0/bevor_cli/apps/projects.py

@@ -0,0 +1,14 @@
+import typer
+from bevor_cli.commands.projects.create import create_project
+from bevor_cli.commands.projects.list import list_projects
+from bevor_cli.commands.projects.select import select_project
+from bevor_cli.commands.projects.view import view_project
+
+app = typer.Typer(help="List, view, select, and create projects.", no_args_is_help=True)
+
+app.command("list")(list_projects)
+app.command("view")(view_project)
+app.command("select")(select_project)
+app.command("create")(create_project)
+
+__all__ = ["app"]

bevor_cli-0.1.0/bevor_cli/apps/sessions.py

@@ -0,0 +1,13 @@
+import typer
+from bevor_cli.commands.sessions.list import sessions_list
+from bevor_cli.commands.sessions.revoke import sessions_revoke
+
+app = typer.Typer(
+    help="List and revoke CLI sessions.",
+    no_args_is_help=True,
+)
+
+app.command("list")(sessions_list)
+app.command("revoke")(sessions_revoke)
+
+__all__ = ["app"]

bevor_cli-0.1.0/bevor_cli/apps/workspaces.py

@@ -0,0 +1,16 @@
+import typer
+from bevor_cli.commands.workspaces.list import list_workspaces
+from bevor_cli.commands.workspaces.pick import pick_workspace
+from bevor_cli.commands.workspaces.select import select_workspace
+from bevor_cli.commands.workspaces.view import view_workspace
+
+app = typer.Typer(
+    help="List, view, and select workspaces.",
+    no_args_is_help=True,
+)
+
+app.command("list")(list_workspaces)
+app.command("view")(view_workspace)
+app.command("select")(select_workspace)
+
+__all__ = ["app", "pick_workspace"]

bevor_cli-0.1.0/bevor_cli/client.py

@@ -0,0 +1,157 @@
+"""Thin httpx wrapper that injects auth headers for the Bevor API."""
+
+from __future__ import annotations
+
+from typing import Any, Dict, cast
+
+import httpx
+import typer
+from bevor_sdk import BevorClient
+from bevor_sdk.exceptions import ERROR_REGISTRY, AppErrorTypes
+from bevor_sdk.types.requests.manage import CreateProjectBodyDict
+from bevor_sdk.types.responses import ResultsResponse
+from bevor_sdk.types.responses.manage import (
+    ProjectSchema,
+    UserDetailedSchema,
+    WorkspaceDetailedSchema,
+)
+from httpx._types import QueryParamTypes, TimeoutTypes
+
+from bevor_cli import output
+from bevor_cli.configuration.creds import Credentials
+from bevor_cli.settings import API_URL
+
+
+class BevorInternalClient(BevorClient):
+    """Public SDK client authenticated with the CLI's user token.
+
+    Project-level endpoints resolve scope from the injected headers, so pass ``project_id`` for anything below
+    project selection.
+    """
+
+    def __init__(
+        self,
+        creds: Credentials,
+        workspace_id: str | None = None,
+        project_id: str | None = None,
+    ) -> None:
+        headers = {}
+
+        if not creds.token:
+            output.error("Not Authenticated", hint="Run `bevor login`.")
+            raise typer.Exit(1)
+
+        if workspace_id:
+            headers.update({"bevor-workspace-id": workspace_id})
+        if project_id:
+            headers.update({"bevor-project-id": project_id})
+        super().__init__(api_key=creds.token, base_url=API_URL, default_headers=headers)
+
+
+class BevorInternalBusinessClient(httpx.Client):
+    """User-scoped endpoints that API keys can't reach: navigation above the project, sessions."""
+
+    _TIMEOUT = httpx.Timeout(10.0)
+
+    def __init__(
+        self, creds: Credentials, workspace_id: str | None = None, timeout: TimeoutTypes = None
+    ) -> None:
+        super().__init__(base_url=API_URL, timeout=timeout or self._TIMEOUT)
+
+        if creds.token:
+            self.headers.update({"Authorization": f"Bearer {creds.token}"})
+        if workspace_id:
+            self.headers.update({"Bevor-Workspace-Id": workspace_id})
+
+    def _parse_error_body(
+        self,
+        response: httpx.Response,
+    ) -> tuple[str | None, str, int]:
+        status = response.status_code
+        try:
+            body = response.json()
+            if not isinstance(body, dict):
+                return None, response.text or "no details", status
+            code_raw = body.get("code")
+            code: str | None
+            if code_raw is None:
+                code = None
+            elif isinstance(code_raw, str):
+                code = code_raw
+            else:
+                code = str(code_raw)
+            if body.get("message") is not None:
+                message = str(body.get("message"))
+            else:
+                d = body.get("detail")
+                if d is not None and not isinstance(d, str):
+                    message = str(d)
+                else:
+                    message = str(d) if d is not None else str(body)
+            return code, message, status
+        except Exception:
+            return None, response.text or "no details", status
+
+    def _handle_http_error(self, response: httpx.Response) -> bool:
+        if response.is_success:
+            if response.status_code == 204 or not response.content:
+                return False
+            return True
+
+        code, message, status = self._parse_error_body(response)
+
+        if not code:
+            # couldn't parse, so raise.
+            response.raise_for_status()
+
+        exc_cls = ERROR_REGISTRY.get(cast(AppErrorTypes, code))
+        if exc_cls is None:
+            response.raise_for_status()
+            return False  # just for typing...
+
+        raise exc_cls(message)
+
+    def _prune_query_params(self, params: QueryParamTypes | None = None) -> QueryParamTypes | None:
+        if not params:
+            return None
+        qp = httpx.QueryParams(params)
+        out: Dict[str, Any] = {}
+        for k, v in qp.items():
+            if v is None:
+                continue
+            if v == "":
+                continue
+            if isinstance(v, bool):
+                out[k] = "true" if v else "false"
+            else:
+                out[k] = v
+        return httpx.QueryParams(out) if out else None
+
+    def _merge_queryparams(self, params: QueryParamTypes | None = None) -> QueryParamTypes | None:
+        params = super()._merge_queryparams(params)
+        return self._prune_query_params(params)
+
+    def send(self, request: httpx.Request, **kwargs) -> httpx.Response:
+        response = super().send(request, **kwargs)
+        self._handle_http_error(response)
+        return response
+
+    def me(self) -> UserDetailedSchema:
+        data = self.get("/v1/me").json()
+        return UserDetailedSchema.model_validate(data)
+
+    def list_workspaces(self) -> ResultsResponse[WorkspaceDetailedSchema]:
+        data = self.get("/v1/me/workspaces").json()
+        return ResultsResponse[WorkspaceDetailedSchema].model_validate(data)
+
+    def get_workspace(self) -> WorkspaceDetailedSchema:
+        data = self.get("/v1/workspace").json()
+        return WorkspaceDetailedSchema.model_validate(data)
+
+    def list_projects(self) -> ResultsResponse[ProjectSchema]:
+        data = self.get("/v1/workspace/projects").json()
+        return ResultsResponse[ProjectSchema].model_validate(data)
+
+    def create_project(self, body: CreateProjectBodyDict) -> ProjectSchema:
+        data = self.post("/v1/workspace/projects", json=body).json()
+        return ProjectSchema.model_validate(data)