codedd-cli 0.1.1__py3-none-any.whl

codedd_cli/utils/validators.py

@@ -0,0 +1,37 @@
+"""
+Input validation helpers for the CLI.
+"""
+
+import re
+
+# Standard UUID v4 pattern
+_UUID_RE = re.compile(
+    r"^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$",
+    re.IGNORECASE,
+)
+
+# CLI token format: codedd_cli_ followed by base64url characters (A-Za-z0-9_-)
+# Base64url encoding can produce 64+ character strings after the prefix
+_TOKEN_RE = re.compile(r"^codedd_cli_[A-Za-z0-9_\-]{32,}$")
+
+
+def is_valid_uuid(value: str) -> bool:
+    """Return True when *value* looks like a valid UUID v4."""
+    if not value:
+        return False
+    return bool(_UUID_RE.match(value.strip()))
+
+
+def is_valid_cli_token(value: str) -> bool:
+    """
+    Return True when *value* matches the expected CLI token format.
+
+    Tokens are base64url-encoded (48 bytes = ~64 chars after encoding),
+    so we require at least 32 characters after the prefix to ensure
+    sufficient entropy. Handles whitespace stripping automatically.
+    """
+    if not value:
+        return False
+    # Strip whitespace (handles copy-paste issues)
+    cleaned = value.strip()
+    return bool(_TOKEN_RE.match(cleaned))

codedd_cli-0.1.1.dist-info/METADATA

@@ -0,0 +1,306 @@
+Metadata-Version: 2.4
+Name: codedd-cli
+Version: 0.1.1
+Summary: CLI tool for CodeDD — run code audits from your terminal
+License: MIT
+License-File: LICENSE
+Keywords: code-audit,security,cli,codedd
+Author: CodeDD
+Author-email: support@codedd.ai
+Requires-Python: >=3.10,<4.0
+Classifier: Development Status :: 3 - Alpha
+Classifier: Environment :: Console
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Classifier: Topic :: Security
+Classifier: Topic :: Software Development :: Quality Assurance
+Requires-Dist: defusedxml (>=0.7.1)
+Requires-Dist: httpx (>=0.27.0)
+Requires-Dist: keyring (>=25.0.0)
+Requires-Dist: lizard (>=1.17.0)
+Requires-Dist: radon (>=6.0.0)
+Requires-Dist: rich (>=13.0.0)
+Requires-Dist: tomli (>=2.0.0) ; python_version < "3.11"
+Requires-Dist: tomli-w (>=1.0.0)
+Requires-Dist: typer[all] (>=0.9.0)
+Project-URL: Homepage, https://codedd.ai
+Project-URL: Repository, https://gitlab.com/codedd1/codedd-cli
+Description-Content-Type: text/markdown
+
+# CodeDD CLI
+
+**Run code audits from your terminal.** The CodeDD CLI lets you define scope locally, run file-level and complexity analysis on your machine (using your own LLM API keys), and sync results to [CodeDD](https://codedd.ai) for consolidation, recommendations, and dashboards.
+
+---
+
+## What is CodeDD CLI?
+
+CodeDD CLI is the official command-line interface for the CodeDD platform. You:
+
+- **Define scope** — Add one or more local Git repository roots to an audit.
+- **Run analysis locally** — File audits (LLM-based) and complexity metrics run on your machine; only metadata and results are sent to CodeDD.
+- **Sync to CodeDD** — Scope metadata, audit results, complexity data, dependencies, and architecture are submitted to CodeDD, where consolidation, dependency enrichment, security scoring, and recommendations run on the server.
+
+Ideal for teams who want to keep source code local while still using CodeDD’s analytics, recommendations, and reporting.
+
+---
+
+## Features
+
+- **Scope management** — Add/remove local directories, sync with CodeDD, detect changes and re-confirm scope (delta updates).
+- **Local file auditing** — LLM-based file analysis using your Anthropic or OpenAI API keys; supports batching and progress feedback.
+- **Complexity analysis** — Cyclomatic complexity and Halstead metrics (Radon/Lizard) run locally and are submitted to CodeDD.
+- **Dependency scanning** — Local lockfile/manifest and import parsing; dependency data is sent to CodeDD for vulnerability and license analysis.
+- **Architecture analysis** — Local component/relationship extraction with optional LLM enhancement; Phase 3 synthesis and storage on CodeDD.
+- **Payment and budget** — Pre-flight checks, LoC budget deduction, or Stripe checkout when additional payment is required.
+- **Secure auth** — CLI tokens stored in the OS credential store (Windows Credential Locker, macOS Keychain, Linux Secret Service).
+
+---
+
+## Installation
+
+### Requirements
+
+- **Python 3.11+**
+- A [CodeDD](https://codedd.ai) account and a CLI token (Account → CLI Access → Generate Token)
+
+### From source (development)
+
+```bash
+git clone https://gitlab.com/codedd1/codedd-cli
+cd codedd-cli
+pip install -e .
+```
+
+### From PyPI (when available)
+
+```bash
+pip install codedd-cli
+```
+
+Verify:
+
+```bash
+codedd --version
+```
+
+---
+
+## Quick start (recommended workflow)
+
+### 1. Authenticate once
+
+Generate a CLI token at [codedd.ai](https://codedd.ai) (Account -> CLI Access), then:
+
+```bash
+codedd auth login --token <your_token>
+```
+
+Or run `codedd auth login` and paste the token when prompted.
+
+Optional sanity check:
+
+```bash
+codedd auth status
+```
+
+### 2. Select the active audit context
+
+```bash
+codedd audits list
+codedd audits select
+```
+
+Choose a **group audit** (multiple repos) or a **single audit** (one repo). The selected audit becomes the active context used by all `scope` and `audit` commands.
+
+### 3. Define local scope
+
+Add local paths that correspond to the repositories in that audit (each path must be a Git repository root with commits):
+
+```bash
+codedd scope add /path/to/my-repo
+codedd scope list
+codedd scope confirm
+```
+
+`scope confirm` performs a metadata scan (paths, file types, LoC) and registers scope with CodeDD.  
+If files change later, `codedd audit start` auto-checks sync and prompts for re-confirmation when needed.
+
+### 4. Configure LLM key(s)
+
+Configure at least one provider key (used for local file-level auditing):
+
+```bash
+codedd config set-key anthropic
+# or: codedd config set-key openai
+```
+
+Optional (recommended if both are configured):
+
+```bash
+codedd config provider both
+```
+
+### 5. Start the audit
+
+```bash
+codedd audit start
+```
+
+The CLI will:
+
+- Sync scope with CodeDD (and prompt to re-confirm if local files changed).
+- Run pre-flight checks (payment, LoC budget).
+- Optionally open payment in the browser or deduct from budget.
+- Fetch the plan, run local analysis, submit structured results, and trigger server-side post-processing.
+
+Results and recommendations are available in the CodeDD dashboard; you can also run `codedd audits list` to see status.
+
+---
+
+## Workflow overview
+
+Use this exact order for a predictable run:
+
+```text
+1. codedd auth login
+2. codedd audits select
+3. codedd scope add <repo-path> [more paths...]
+4. codedd scope confirm
+5. codedd config set-key <anthropic|openai>   # at least one
+6. codedd audit start
+```
+
+What `codedd audit start` does, in order:
+
+```text
+A. Auto-sync scope -> if changed, asks to re-confirm
+B. Pre-flight on CodeDD -> checks status/payment/budget
+C. Payment path -> budget deduction OR checkout flow
+D. Local execution -> file audit (LLM), complexity, dependencies, git stats, architecture
+E. Submission -> sends structured outputs to CodeDD
+F. Completion -> triggers server-side consolidation/recommendations
+```
+
+If you update files after confirming scope:
+
+```text
+Run: codedd audit start
+-> CLI detects drift
+-> Re-confirm prompt appears
+-> Continue with updated scope
+```
+
+| Step              | Where it runs | What happens |
+|-------------------|---------------|--------------|
+| Scope add/confirm | Local         | Scan dirs, count files/LoC; register or delta-update scope on CodeDD. |
+| Pre-flight        | CodeDD        | Check payment, budget, status. |
+| File audit        | Local         | LLM (Anthropic/OpenAI) analyses each file; results sent to CodeDD. |
+| Complexity        | Local         | Radon/Lizard; metrics sent to CodeDD. |
+| Dependencies      | Local + CodeDD| Lockfiles/imports scanned locally; package/vuln data stored and enriched on CodeDD. |
+| Git statistics    | Local + CodeDD| Commit/churn/collaboration metrics collected locally, then submitted. |
+| Architecture      | Local + CodeDD| Components/relations extracted locally; persisted and processed on CodeDD. |
+| Recommendations   | CodeDD        | Consolidation, technical debt, security, licenses, etc. |
+
+---
+
+## Commands reference
+
+### Authentication
+
+| Command | Description |
+|--------|-------------|
+| `codedd auth login` | Log in with a CLI token (prompt or `--token`) |
+| `codedd auth logout` | Clear stored credentials |
+| `codedd auth status` | Show current account and token state |
+
+### Audits
+
+| Command | Description |
+|--------|-------------|
+| `codedd audits list` | List audits (`--type single\|group`, `--limit`, `--page`) |
+| `codedd audits select [uuid]` | Set active audit (interactive if UUID omitted) |
+
+### Scope
+
+| Command | Description |
+|--------|-------------|
+| `codedd scope add <path> [path ...]` | Add Git repository root(s) to the active audit’s scope |
+| `codedd scope remove <n>` | Remove directory by list number |
+| `codedd scope list` | List directories in scope |
+| `codedd scope clear` | Remove all directories from scope |
+| `codedd scope status` | Show scope and sync state per directory |
+| `codedd scope confirm` | Scan, preview, and register scope with CodeDD |
+| `codedd scope sync` | Compare local vs CodeDD and show changes |
+
+### Audit execution
+
+| Command | Description |
+|--------|-------------|
+| `codedd audit start` | Sync scope (if needed), pre-flight, pay/budget, then run full local audit and submit to CodeDD. Use `--skip-sync` to skip scope sync; `--yes` to auto-confirm; `--show` for one-shot transparency summary; `--show-interactive` for per-request confirmations (debug); `--show-force-interactive` to override large-audit guardrails; `--debug-llm` for LLM debug output. |
+
+### Configuration
+
+| Command | Description |
+|--------|-------------|
+| `codedd config show` | Show current config (API URL, active audit, scope, etc.) |
+| `codedd config set <key> <value>` | Set a config value |
+| `codedd config set-key [anthropic\|openai]` | Store an LLM API key in the OS keychain |
+| `codedd config show-keys` | List which providers have keys configured (not the keys themselves) |
+| `codedd config remove-key <anthropic\|openai>` | Remove a stored LLM API key from keychain |
+| `codedd config provider [anthropic\|openai\|both]` | Set preferred LLM provider |
+| `codedd config concurrency <n>` | Set max concurrent LLM requests (default 6) |
+
+---
+
+## Configuration
+
+- **Config file:** `~/.codedd/config.toml` (TOML). Stores API URL, active audit, scope directories, LLM provider, concurrency. Permissions are restricted to the owner (Unix).
+- **Secrets:** The CLI token and LLM API keys are stored in the system keychain (Windows Credential Locker, macOS Keychain, Linux Secret Service), not in the config file.
+
+### Environment variables
+
+| Variable | Purpose |
+|---------|---------|
+| `CODEDD_API_TOKEN` | Override the stored CLI token (e.g. for CI) |
+
+
+---
+
+## Security
+
+- CLI tokens and LLM keys are stored in the OS credential store, not in plaintext on disk.
+- TLS certificate verification is always enabled for API requests.
+- Config file and `~/.codedd` directory use owner-only permissions where supported.
+- Tokens expire after 90 days (server-configurable); re-generate from the CodeDD dashboard when needed.
+
+---
+
+## Development
+
+```bash
+pip install -e .
+pip install pytest pytest-httpx pytest-mock ruff
+pytest
+ruff check .
+```
+
+---
+
+## License
+
+MIT License — see [LICENSE](LICENSE).
+
+---
+
+## Support
+
+- **Issues:** [GitLab Issues](https://gitlab.com/codedd1/codedd-cli/-/work_items)
+- **Product:** [CodeDD](https://codedd.ai)
+

codedd_cli-0.1.1.dist-info/RECORD

@@ -0,0 +1,49 @@
+codedd_cli/__init__.py,sha256=yGE-JcnSNf1kbwhPw3KKCHq1gLmQXq3HqsiJk8Keyfg,80
+codedd_cli/__main__.py,sha256=BWSn1viJie1Zifia46IxQOb4bk2ARR5KyRlWQcG6PbQ,375
+codedd_cli/api/__init__.py,sha256=7J_sCMfEON4n4fpwMtlSPf1fCH7Pct2LpwFqeXp8-iY,135
+codedd_cli/api/client.py,sha256=ZVRtpefsGK7zHTzL5zYryL0hxSGjXVmPR0l_xQp0dFs,3693
+codedd_cli/api/endpoints.py,sha256=ekTZ5uk_3wSc81tcwMLbHVyosK0EKpy1OgCE4jVYzvo,1422
+codedd_cli/api/exceptions.py,sha256=smXcW7psy1HI9itLkHIye39PiCTj-HXDkzIi1_gZGQI,819
+codedd_cli/auditor/__init__.py,sha256=MV74TU9Vr913qkgNG_LNGg9OKgsZclP4f4JQQKoKPco,175
+codedd_cli/auditor/architecture_analyzer.py,sha256=hmOCE9UCaYb0ZxQ_q5dud5jekbtUViEWg1JRUqcyDy0,51684
+codedd_cli/auditor/architecture_prompts.py,sha256=9QrW2DYGLusX9OgJg_C9U__DuCtFUSaUghBhZgO9H6c,6606
+codedd_cli/auditor/complexity_analyzer.py,sha256=F07D9mnLQklcnjqjwfzB4_jgnzXw5Gf1iMFBg5IaNlM,39526
+codedd_cli/auditor/dependency_scanner.py,sha256=JK64LdG95vGfwWhOKQ6rtwJWTFw78zsW0FOaKjbru0A,100460
+codedd_cli/auditor/file_auditor.py,sha256=tY8lh7bWvlRjeKcJbvVtGc4QVvgdj8cBWZ1VS5OFDEw,21696
+codedd_cli/auditor/git_stats_collector.py,sha256=VqjPuiAu7yiNOEr_ehlav-0fF_fQxBNlFTTG0jfemv4,15685
+codedd_cli/auditor/response_parser.py,sha256=Uhzpov4nT9Duyd9_c_gLW2XPYrGmJsGlSPfraKcRCPc,17789
+codedd_cli/auditor/vulnerability_validator.py,sha256=fPZIpRaclJi5I3HIsmgj7DCIbs7JFUTiTddgrDOLGeQ,11083
+codedd_cli/auth/__init__.py,sha256=0d1ciyJi8eBrhJgX2DPvhcYzW0VGnpPEFcQbMUFNNZA,148
+codedd_cli/auth/session.py,sha256=3l3dJkiCBN7J2I5pHKOiImPGXoAvhitnUrExaj5wiFc,1091
+codedd_cli/auth/token_manager.py,sha256=3EbcCSh5lVc71jI8_R2pga-HYO-6VWhG8LE4ZOGW_kI,2390
+codedd_cli/cli.py,sha256=o6g_-xG2xzbsKTrGDOU_MAZ6jWYnfynwAFU0qJJ7tZo,2100
+codedd_cli/commands/__init__.py,sha256=AbpHGcgLb-kRsJGnwFEktk7uzpZOCcBY74-YBdrKVGs,1
+codedd_cli/commands/audit_cmd.py,sha256=9qEg1jZY9rOd_F30ZLIxkkMbTG9_aHkIR31wk4v7YTo,77355
+codedd_cli/commands/audits_cmd.py,sha256=8HfSmjMxnkD91rwtr3VioAQ5FgKlOr5nMBfvWPnRVdk,9019
+codedd_cli/commands/auth_cmd.py,sha256=_NExy1jR62H9qiQzttMkibDA6s6tXHvZDDyxglEQGI8,8309
+codedd_cli/commands/config_cmd.py,sha256=rFnEdBAUlQ-LKCt2gNKI-pEzk8rgeAgkHN_-3556bv8,15368
+codedd_cli/commands/scope_cmd.py,sha256=d1882Da8mQCz0ItgIeO-G_7dysjh1zO9VMEoGahFyc0,36865
+codedd_cli/config/__init__.py,sha256=YTpZazCKmwwgX_z70F-npmYA8liiNKAAe8RhY_SttY4,215
+codedd_cli/config/constants.py,sha256=IvN5ZwzS-sCO77VKBXfTNziS6Nq0m5VE6g-_xzsvgP4,544
+codedd_cli/config/settings.py,sha256=6lsOQyD-ayXAuUDqrnGLtzsyZR_z18HGuYqdbKOXScQ,13981
+codedd_cli/llm/__init__.py,sha256=8awhyNZ6w4ORd12OHBSUBl9JhbiswCq-FeJymnZOH84,49
+codedd_cli/llm/key_manager.py,sha256=e5mD2UHvxUpdG5LF5GNDaQbdNn4T3meIbGtq_4Lb9kI,9275
+codedd_cli/models/__init__.py,sha256=BfNWadSuCGnfc5PufGxnpUyscXKmMUsL71ormBLaPD4,233
+codedd_cli/models/account.py,sha256=GupiUt-T9dxFVUAhL-6OjmICAEnobjugNwqwOxyg-ms,348
+codedd_cli/models/audit.py,sha256=TfZzlWvICT4vTbLO_XliRvhTmXw-_uHWkVGdXVDUEiY,689
+codedd_cli/models/local_directory.py,sha256=eMmefiLo6BJE25Nwg5NjSskgLg2_y50Xo-rYhtSTZ30,741
+codedd_cli/scanner/__init__.py,sha256=AwGbcT60-Kwwc-rgOOgXpO67GDgSg3kICfA9wxlMfL4,599
+codedd_cli/scanner/file_classifier.py,sha256=ucH9_7sIF6gs6WCtb49--JOMKaJOQ9DpjA5t8evKxUI,12408
+codedd_cli/scanner/file_walker.py,sha256=U2c3cbAqpTx0MkU1ep5k6FHwjnHp-bT73_jHv1LOvS4,7168
+codedd_cli/scanner/line_counter.py,sha256=JeyZbR8X_J8nAhbMV8PEjHTn6TU-Iv4_n9Im1gxX08M,2067
+codedd_cli/utils/__init__.py,sha256=AbpHGcgLb-kRsJGnwFEktk7uzpZOCcBY74-YBdrKVGs,1
+codedd_cli/utils/directory_validator.py,sha256=K46PPnsAZheo_kZgfcYR197wNLaTP0w7L3ilgkOHH1Q,6099
+codedd_cli/utils/display.py,sha256=w4iYC3mAoGh9pOBOCC6CYytmuo632OXKrAJI0K28Bxo,18420
+codedd_cli/utils/payload_inspector.py,sha256=-CAu9qSGY09CKAsxS6x4AQ3aYuseGmQ5rqObwR_Gc98,5816
+codedd_cli/utils/security.py,sha256=i5hwU8tbEDZG3cpfRRxsIYLnkeZUhNaAuiMNEsztBts,301
+codedd_cli/utils/validators.py,sha256=F-lSRNjJdcm6kXBsK0ThFX2PNYcBqZGa6HODPyHmJTA,1101
+codedd_cli-0.1.1.dist-info/METADATA,sha256=qJ4ltRlQhi0AlM9RfzNabPQ1tBeYD2ySN0QZ4e6XfpQ,10621
+codedd_cli-0.1.1.dist-info/WHEEL,sha256=kJCRJT_g0adfAJzTx2GUMmS80rTJIVHRCfG0DQgLq3o,88
+codedd_cli-0.1.1.dist-info/entry_points.txt,sha256=VVvyUcb_fHHFpxPg6BGvYA3S1KC-VLX8HyaJJel9VOI,51
+codedd_cli-0.1.1.dist-info/licenses/LICENSE,sha256=1aejRb4am68aKd1IL3kCBN6krYpP4sEYYpu1u5ysPEw,1071
+codedd_cli-0.1.1.dist-info/RECORD,,

codedd_cli-0.1.1.dist-info/WHEEL

@@ -0,0 +1,4 @@
+Wheel-Version: 1.0
+Generator: poetry-core 2.3.1
+Root-Is-Purelib: true
+Tag: py3-none-any

codedd_cli-0.1.1.dist-info/entry_points.txt

@@ -0,0 +1,3 @@
+[console_scripts]
+codedd=codedd_cli.__main__:main
+

codedd_cli-0.1.1.dist-info/licenses/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 CodeDD Limited
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.