codedd-cli 0.1.0__tar.gz → 0.1.2__tar.gz

{codedd_cli-0.1.0 → codedd_cli-0.1.2}/PKG-INFO

@@ -1,12 +1,12 @@
 Metadata-Version: 2.4
 Name: codedd-cli
-Version: 0.1.0
+Version: 0.1.2
 Summary: CLI tool for CodeDD — run code audits from your terminal
 License: MIT
 License-File: LICENSE
 Keywords: code-audit,security,cli,codedd
 Author: CodeDD
-Author-email: support@codedd.ai
+Author-email: info@codedd.ai
 Requires-Python: >=3.10,<4.0
 Classifier: Development Status :: 3 - Alpha
 Classifier: Environment :: Console
@@ -20,6 +20,9 @@ Classifier: Programming Language :: Python :: 3.13
 Classifier: Programming Language :: Python :: 3.14
 Classifier: Topic :: Security
 Classifier: Topic :: Software Development :: Quality Assurance
+Provides-Extra: esprima
+Requires-Dist: defusedxml (>=0.7.1)
+Requires-Dist: esprima (>=4.0.0) ; extra == "esprima"
 Requires-Dist: httpx (>=0.27.0)
 Requires-Dist: keyring (>=25.0.0)
 Requires-Dist: lizard (>=1.17.0)
@@ -29,7 +32,7 @@ Requires-Dist: tomli (>=2.0.0) ; python_version < "3.11"
 Requires-Dist: tomli-w (>=1.0.0)
 Requires-Dist: typer[all] (>=0.9.0)
 Project-URL: Homepage, https://codedd.ai
-Project-URL: Repository, https://github.com/codedd/codedd-cli
+Project-URL: Repository, https://gitlab.com/codedd1/codedd-cli
 Description-Content-Type: text/markdown
 
 # CodeDD CLI
@@ -66,18 +69,18 @@ Ideal for teams who want to keep source code local while still using CodeDD’s
 
 ### Requirements
 
-- **Python 3.10+**
+- **Python 3.11+**
 - A [CodeDD](https://codedd.ai) account and a CLI token (Account → CLI Access → Generate Token)
 
 ### From source (development)
 
 ```bash
-git clone https://github.com/codedd/codedd-cli.git
+git clone https://gitlab.com/codedd1/codedd-cli
 cd codedd-cli
 pip install -e .
 ```
 
-### From PyPI (when available)
+### From PyPI
 
 ```bash
 pip install codedd-cli
@@ -91,11 +94,11 @@ codedd --version
 
 ---
 
-## Quick start
+## Quick start (recommended workflow)
 
-### 1. Authenticate
+### 1. Authenticate once
 
-Generate a CLI token at [codedd.ai](https://codedd.ai) (Account → CLI Access), then:
+Generate a CLI token at [codedd.ai](https://codedd.ai) (Account -> CLI Access), then:
 
 ```bash
 codedd auth login --token <your_token>
@@ -103,18 +106,24 @@ codedd auth login --token <your_token>
 
 Or run `codedd auth login` and paste the token when prompted.
 
-### 2. Select an audit
+Optional sanity check:
+
+```bash
+codedd auth status
+```
+
+### 2. Select the active audit context
 
 ```bash
 codedd audits list
 codedd audits select
 ```
 
-Choose a **group audit** (multiple repos) or a **single audit** (one repo). The selected audit becomes the active context for scope and audit commands.
+Choose a **group audit** (multiple repos) or a **single audit** (one repo). The selected audit becomes the active context used by all `scope` and `audit` commands.
 
-### 3. Define scope
+### 3. Define local scope
 
-Add the local paths that correspond to the audit’s repositories (each must be a Git repo root):
+Add local paths that correspond to the repositories in that audit (each path must be a Git repository root with commits):
 
 ```bash
 codedd scope add /path/to/my-repo
@@ -122,18 +131,25 @@ codedd scope list
 codedd scope confirm
 ```
 
-`scope confirm` scans the directories, shows a preview (files, LoC), and registers scope with CodeDD. If you change files later, run `codedd audit start` — it will offer to re-sync scope (delta update) before starting.
+`scope confirm` performs a metadata scan (paths, file types, LoC) and registers scope with CodeDD.  
+If files change later, `codedd audit start` auto-checks sync and prompts for re-confirmation when needed.
 
-### 4. Run an audit
+### 4. Configure LLM key(s)
 
-Configure at least one LLM API key (used for file-level auditing):
+Configure at least one provider key (used for local file-level auditing):
 
 ```bash
 codedd config set-key anthropic
 # or: codedd config set-key openai
 ```
 
-Then start the audit:
+Optional (recommended if both are configured):
+
+```bash
+codedd config provider both
+```
+
+### 5. Start the audit
 
 ```bash
 codedd audit start
@@ -144,7 +160,7 @@ The CLI will:
 - Sync scope with CodeDD (and prompt to re-confirm if local files changed).
 - Run pre-flight checks (payment, LoC budget).
 - Optionally open payment in the browser or deduct from budget.
-- Fetch the audit plan, run file auditing and complexity analysis locally, submit results, submit dependencies, submit architecture, and trigger server-side post-processing (consolidation, recommendations, completion email).
+- Fetch the plan, run local analysis, submit structured results, and trigger server-side post-processing.
 
 Results and recommendations are available in the CodeDD dashboard; you can also run `codedd audits list` to see status.
 
@@ -152,22 +168,35 @@ Results and recommendations are available in the CodeDD dashboard; you can also
 
 ## Workflow overview
 
-High-level flow:
+Use this exact order for a predictable run:
 
+```text
+1. codedd auth login
+2. codedd audits select
+3. codedd scope add <repo-path> [more paths...]
+4. codedd scope confirm
+5. codedd config set-key <anthropic|openai>   # at least one
+6. codedd audit start
 ```
-┌─────────────────────────────────────────────────────────────────────────────┐
-│  LOCAL                                                                       │
-│  1. codedd audits select     → Pick audit (group or single)                 │
-│  2. codedd scope add <path>  → Add repo root(s)                              │
-│  3. codedd scope confirm      → Scan & register scope with CodeDD            │
-│  4. codedd audit start        → Sync (if needed) → Pre-flight → Pay/budget   │
-│     └─ File audit (LLM)       → Local                                        │
-│     └─ Complexity            → Local                                        │
-│     └─ Submit results        → CodeDD                                       │
-│     └─ Dependencies          → Local scan → Submit → CodeDD                │
-│     └─ Architecture          → Local phases → Submit → CodeDD               │
-│     └─ Complete              → CodeDD runs consolidation & recommendations   │
-└─────────────────────────────────────────────────────────────────────────────┘
+
+What `codedd audit start` does, in order:
+
+```text
+A. Auto-sync scope -> if changed, asks to re-confirm
+B. Pre-flight on CodeDD -> checks status/payment/budget
+C. Payment path -> budget deduction OR checkout flow
+D. Local execution -> file audit (LLM), complexity, dependencies, git stats, architecture
+E. Submission -> sends structured outputs to CodeDD
+F. Completion -> triggers server-side consolidation/recommendations
+```
+
+If you update files after confirming scope:
+
+```text
+Run: codedd audit start
+-> CLI detects drift
+-> Re-confirm prompt appears
+-> Continue with updated scope
 ```
 
 | Step              | Where it runs | What happens |
@@ -176,8 +205,9 @@ High-level flow:
 | Pre-flight        | CodeDD        | Check payment, budget, status. |
 | File audit        | Local         | LLM (Anthropic/OpenAI) analyses each file; results sent to CodeDD. |
 | Complexity        | Local         | Radon/Lizard; metrics sent to CodeDD. |
-| Dependencies      | Local + CodeDD| Lockfiles/imports sent; CodeDD does metadata, vulns, licenses. |
-| Architecture     | Local + CodeDD| Components/relations sent; CodeDD does Phase 3 and storage. |
+| Dependencies      | Local + CodeDD| Lockfiles/imports scanned locally; package/vuln data stored and enriched on CodeDD. |
+| Git statistics    | Local + CodeDD| Commit/churn/collaboration metrics collected locally, then submitted. |
+| Architecture      | Local + CodeDD| Components/relations extracted locally; persisted and processed on CodeDD. |
 | Recommendations   | CodeDD        | Consolidation, technical debt, security, licenses, etc. |
 
 ---
@@ -215,7 +245,7 @@ High-level flow:
 
 | Command | Description |
 |--------|-------------|
-| `codedd audit start` | Sync scope (if needed), pre-flight, pay/budget, then run full local audit and submit to CodeDD. Use `--skip-sync` to skip scope sync; `--yes` to auto-confirm; `--debug-llm` for LLM debug output. |
+| `codedd audit start` | Sync scope (if needed), pre-flight, pay/budget, then run full local audit and submit to CodeDD. Use `--skip-sync` to skip scope sync; `--yes` to auto-confirm; `--show` for one-shot transparency summary; `--show-interactive` for per-request confirmations (debug); `--show-force-interactive` to override large-audit guardrails; `--debug-llm` for LLM debug output. |
 
 ### Configuration
 
@@ -225,6 +255,7 @@ High-level flow:
 | `codedd config set <key> <value>` | Set a config value |
 | `codedd config set-key [anthropic\|openai]` | Store an LLM API key in the OS keychain |
 | `codedd config show-keys` | List which providers have keys configured (not the keys themselves) |
+| `codedd config remove-key <anthropic\|openai>` | Remove a stored LLM API key from keychain |
 | `codedd config provider [anthropic\|openai\|both]` | Set preferred LLM provider |
 | `codedd config concurrency <n>` | Set max concurrent LLM requests (default 6) |
 
@@ -240,7 +271,7 @@ High-level flow:
 | Variable | Purpose |
 |---------|---------|
 | `CODEDD_API_TOKEN` | Override the stored CLI token (e.g. for CI) |
-| `CODEDD_API_URL`   | Override API base URL (default from config) |
+
 
 ---
 
@@ -256,7 +287,8 @@ High-level flow:
 ## Development
 
 ```bash
-pip install -e ".[dev]"
+pip install -e .
+pip install pytest pytest-httpx pytest-mock ruff
 pytest
 ruff check .
 ```
@@ -271,6 +303,6 @@ MIT License — see [LICENSE](LICENSE).
 
 ## Support
 
-- **Issues:** [GitHub Issues](https://github.com/codedd/codedd-cli/issues)
+- **Issues:** [GitLab Issues](https://gitlab.com/codedd1/codedd-cli/-/work_items)
 - **Product:** [CodeDD](https://codedd.ai)
 

{codedd_cli-0.1.0 → codedd_cli-0.1.2}/README.md

@@ -32,18 +32,18 @@ Ideal for teams who want to keep source code local while still using CodeDD’s
 
 ### Requirements
 
-- **Python 3.10+**
+- **Python 3.11+**
 - A [CodeDD](https://codedd.ai) account and a CLI token (Account → CLI Access → Generate Token)
 
 ### From source (development)
 
 ```bash
-git clone https://github.com/codedd/codedd-cli.git
+git clone https://gitlab.com/codedd1/codedd-cli
 cd codedd-cli
 pip install -e .
 ```
 
-### From PyPI (when available)
+### From PyPI
 
 ```bash
 pip install codedd-cli
@@ -57,11 +57,11 @@ codedd --version
 
 ---
 
-## Quick start
+## Quick start (recommended workflow)
 
-### 1. Authenticate
+### 1. Authenticate once
 
-Generate a CLI token at [codedd.ai](https://codedd.ai) (Account → CLI Access), then:
+Generate a CLI token at [codedd.ai](https://codedd.ai) (Account -> CLI Access), then:
 
 ```bash
 codedd auth login --token <your_token>
@@ -69,18 +69,24 @@ codedd auth login --token <your_token>
 
 Or run `codedd auth login` and paste the token when prompted.
 
-### 2. Select an audit
+Optional sanity check:
+
+```bash
+codedd auth status
+```
+
+### 2. Select the active audit context
 
 ```bash
 codedd audits list
 codedd audits select
 ```
 
-Choose a **group audit** (multiple repos) or a **single audit** (one repo). The selected audit becomes the active context for scope and audit commands.
+Choose a **group audit** (multiple repos) or a **single audit** (one repo). The selected audit becomes the active context used by all `scope` and `audit` commands.
 
-### 3. Define scope
+### 3. Define local scope
 
-Add the local paths that correspond to the audit’s repositories (each must be a Git repo root):
+Add local paths that correspond to the repositories in that audit (each path must be a Git repository root with commits):
 
 ```bash
 codedd scope add /path/to/my-repo
@@ -88,18 +94,25 @@ codedd scope list
 codedd scope confirm
 ```
 
-`scope confirm` scans the directories, shows a preview (files, LoC), and registers scope with CodeDD. If you change files later, run `codedd audit start` — it will offer to re-sync scope (delta update) before starting.
+`scope confirm` performs a metadata scan (paths, file types, LoC) and registers scope with CodeDD.  
+If files change later, `codedd audit start` auto-checks sync and prompts for re-confirmation when needed.
 
-### 4. Run an audit
+### 4. Configure LLM key(s)
 
-Configure at least one LLM API key (used for file-level auditing):
+Configure at least one provider key (used for local file-level auditing):
 
 ```bash
 codedd config set-key anthropic
 # or: codedd config set-key openai
 ```
 
-Then start the audit:
+Optional (recommended if both are configured):
+
+```bash
+codedd config provider both
+```
+
+### 5. Start the audit
 
 ```bash
 codedd audit start
@@ -110,7 +123,7 @@ The CLI will:
 - Sync scope with CodeDD (and prompt to re-confirm if local files changed).
 - Run pre-flight checks (payment, LoC budget).
 - Optionally open payment in the browser or deduct from budget.
-- Fetch the audit plan, run file auditing and complexity analysis locally, submit results, submit dependencies, submit architecture, and trigger server-side post-processing (consolidation, recommendations, completion email).
+- Fetch the plan, run local analysis, submit structured results, and trigger server-side post-processing.
 
 Results and recommendations are available in the CodeDD dashboard; you can also run `codedd audits list` to see status.
 
@@ -118,22 +131,35 @@ Results and recommendations are available in the CodeDD dashboard; you can also
 
 ## Workflow overview
 
-High-level flow:
+Use this exact order for a predictable run:
 
+```text
+1. codedd auth login
+2. codedd audits select
+3. codedd scope add <repo-path> [more paths...]
+4. codedd scope confirm
+5. codedd config set-key <anthropic|openai>   # at least one
+6. codedd audit start
 ```
-┌─────────────────────────────────────────────────────────────────────────────┐
-│  LOCAL                                                                       │
-│  1. codedd audits select     → Pick audit (group or single)                 │
-│  2. codedd scope add <path>  → Add repo root(s)                              │
-│  3. codedd scope confirm      → Scan & register scope with CodeDD            │
-│  4. codedd audit start        → Sync (if needed) → Pre-flight → Pay/budget   │
-│     └─ File audit (LLM)       → Local                                        │
-│     └─ Complexity            → Local                                        │
-│     └─ Submit results        → CodeDD                                       │
-│     └─ Dependencies          → Local scan → Submit → CodeDD                │
-│     └─ Architecture          → Local phases → Submit → CodeDD               │
-│     └─ Complete              → CodeDD runs consolidation & recommendations   │
-└─────────────────────────────────────────────────────────────────────────────┘
+
+What `codedd audit start` does, in order:
+
+```text
+A. Auto-sync scope -> if changed, asks to re-confirm
+B. Pre-flight on CodeDD -> checks status/payment/budget
+C. Payment path -> budget deduction OR checkout flow
+D. Local execution -> file audit (LLM), complexity, dependencies, git stats, architecture
+E. Submission -> sends structured outputs to CodeDD
+F. Completion -> triggers server-side consolidation/recommendations
+```
+
+If you update files after confirming scope:
+
+```text
+Run: codedd audit start
+-> CLI detects drift
+-> Re-confirm prompt appears
+-> Continue with updated scope
 ```
 
 | Step              | Where it runs | What happens |
@@ -142,8 +168,9 @@ High-level flow:
 | Pre-flight        | CodeDD        | Check payment, budget, status. |
 | File audit        | Local         | LLM (Anthropic/OpenAI) analyses each file; results sent to CodeDD. |
 | Complexity        | Local         | Radon/Lizard; metrics sent to CodeDD. |
-| Dependencies      | Local + CodeDD| Lockfiles/imports sent; CodeDD does metadata, vulns, licenses. |
-| Architecture     | Local + CodeDD| Components/relations sent; CodeDD does Phase 3 and storage. |
+| Dependencies      | Local + CodeDD| Lockfiles/imports scanned locally; package/vuln data stored and enriched on CodeDD. |
+| Git statistics    | Local + CodeDD| Commit/churn/collaboration metrics collected locally, then submitted. |
+| Architecture      | Local + CodeDD| Components/relations extracted locally; persisted and processed on CodeDD. |
 | Recommendations   | CodeDD        | Consolidation, technical debt, security, licenses, etc. |
 
 ---
@@ -181,7 +208,7 @@ High-level flow:
 
 | Command | Description |
 |--------|-------------|
-| `codedd audit start` | Sync scope (if needed), pre-flight, pay/budget, then run full local audit and submit to CodeDD. Use `--skip-sync` to skip scope sync; `--yes` to auto-confirm; `--debug-llm` for LLM debug output. |
+| `codedd audit start` | Sync scope (if needed), pre-flight, pay/budget, then run full local audit and submit to CodeDD. Use `--skip-sync` to skip scope sync; `--yes` to auto-confirm; `--show` for one-shot transparency summary; `--show-interactive` for per-request confirmations (debug); `--show-force-interactive` to override large-audit guardrails; `--debug-llm` for LLM debug output. |
 
 ### Configuration
 
@@ -191,6 +218,7 @@ High-level flow:
 | `codedd config set <key> <value>` | Set a config value |
 | `codedd config set-key [anthropic\|openai]` | Store an LLM API key in the OS keychain |
 | `codedd config show-keys` | List which providers have keys configured (not the keys themselves) |
+| `codedd config remove-key <anthropic\|openai>` | Remove a stored LLM API key from keychain |
 | `codedd config provider [anthropic\|openai\|both]` | Set preferred LLM provider |
 | `codedd config concurrency <n>` | Set max concurrent LLM requests (default 6) |
 
@@ -206,7 +234,7 @@ High-level flow:
 | Variable | Purpose |
 |---------|---------|
 | `CODEDD_API_TOKEN` | Override the stored CLI token (e.g. for CI) |
-| `CODEDD_API_URL`   | Override API base URL (default from config) |
+
 
 ---
 
@@ -222,7 +250,8 @@ High-level flow:
 ## Development
 
 ```bash
-pip install -e ".[dev]"
+pip install -e .
+pip install pytest pytest-httpx pytest-mock ruff
 pytest
 ruff check .
 ```
@@ -237,5 +266,5 @@ MIT License — see [LICENSE](LICENSE).
 
 ## Support
 
-- **Issues:** [GitHub Issues](https://github.com/codedd/codedd-cli/issues)
+- **Issues:** [GitLab Issues](https://gitlab.com/codedd1/codedd-cli/-/work_items)
 - **Product:** [CodeDD](https://codedd.ai)

{codedd_cli-0.1.0 → codedd_cli-0.1.2}/codedd_cli/__init__.py

@@ -1,3 +1,3 @@
 """CodeDD CLI — run code audits from your terminal."""
 
-__version__ = "0.1.0"
+__version__ = "0.1.2"

{codedd_cli-0.1.0 → codedd_cli-0.1.2}/codedd_cli/api/client.py

@@ -10,7 +10,7 @@ Wraps ``httpx`` with:
 """
 
 import time
-from typing import Any, Optional
+from typing import Any
 
 import httpx
 
@@ -36,15 +36,17 @@ class CodeDDClient:
         data = resp.json()
     """
 
-    def __init__(self, config: Optional[ConfigManager] = None) -> None:
+    def __init__(self, config: ConfigManager | None = None) -> None:
         self._config = config or ConfigManager()
         self._base_url = self._config.api_url.rstrip("/")
         self._token = TokenManager.retrieve()
-        
+
         # For localhost HTTP, disable TLS verification (not applicable anyway)
         # For HTTPS, always verify certificates
-        verify_tls = not self._base_url.startswith("http://localhost") and not self._base_url.startswith("http://127.0.0.1")
-        
+        verify_tls = not self._base_url.startswith("http://localhost") and not self._base_url.startswith(
+            "http://127.0.0.1"
+        )
+
         self._client = httpx.Client(
             base_url=self._base_url,
             headers=self._build_headers(),
@@ -79,7 +81,7 @@ class CodeDDClient:
         Retries on 5xx responses and connection errors using exponential
         back-off (1s, 2s, 4s …).
         """
-        last_exc: Optional[Exception] = None
+        last_exc: Exception | None = None
 
         for attempt in range(1, MAX_RETRIES + 1):
             try:

{codedd_cli-0.1.0 → codedd_cli-0.1.2}/codedd_cli/api/endpoints.py

@@ -17,6 +17,7 @@ class Endpoints:
     # Scope
     REGISTER_SCOPE = "/api/cli/scope/register/"
     SCOPE_FILES = "/api/cli/scope/files/"
+    DELETE_REPO_FROM_SCOPE = "/delete_repo_from_scope/"
 
     # Audit lifecycle
     AUDIT_CAN_START = "/api/cli/audit/can-start/"
@@ -38,6 +39,7 @@ class Endpoints:
 
     # Local git statistics (for CLI-driven audits; enables dashboards)
     AUDIT_GIT_STATISTICS = "/api/cli/audit/git-statistics/"
+    AUDIT_GIT_DEVELOPMENT_ANALYSIS = "/api/cli/audit/git-development-analysis/"
     AUDIT_VULNERABILITY_VALIDATION = "/api/cli/audit/vulnerability-validation/"
 
     # Architecture analysis (Phase 1+2 run locally; server runs Phase 3 + storage)

{codedd_cli-0.1.0 → codedd_cli-0.1.2}/codedd_cli/api/exceptions.py

@@ -6,7 +6,6 @@ timeout, server disconnected, etc.). Handled at the CLI entry point to
 display a single, clear message instead of a full traceback.
 """
 
-
 # Pre-defined message shown when the remote is not responding.
 CONNECTION_ERROR_MESSAGE = (
     "Unable to reach CodeDD. "