codedd-cli 0.1.1__tar.gz → 0.1.4__tar.gz

{codedd_cli-0.1.1 → codedd_cli-0.1.4}/PKG-INFO

@@ -1,12 +1,12 @@
 Metadata-Version: 2.4
 Name: codedd-cli
-Version: 0.1.1
+Version: 0.1.4
 Summary: CLI tool for CodeDD — run code audits from your terminal
 License: MIT
 License-File: LICENSE
 Keywords: code-audit,security,cli,codedd
 Author: CodeDD
-Author-email: support@codedd.ai
+Author-email: info@codedd.ai
 Requires-Python: >=3.10,<4.0
 Classifier: Development Status :: 3 - Alpha
 Classifier: Environment :: Console
@@ -20,7 +20,9 @@ Classifier: Programming Language :: Python :: 3.13
 Classifier: Programming Language :: Python :: 3.14
 Classifier: Topic :: Security
 Classifier: Topic :: Software Development :: Quality Assurance
+Provides-Extra: esprima
 Requires-Dist: defusedxml (>=0.7.1)
+Requires-Dist: esprima (>=4.0.0) ; extra == "esprima"
 Requires-Dist: httpx (>=0.27.0)
 Requires-Dist: keyring (>=25.0.0)
 Requires-Dist: lizard (>=1.17.0)
@@ -53,11 +55,11 @@ Ideal for teams who want to keep source code local while still using CodeDD’s
 
 ## Features
 
-- **Scope management** — Add/remove local directories, sync with CodeDD, detect changes and re-confirm scope (delta updates).
+- **Scope management** — Add/remove local directories, sync with CodeDD, detect changes and re-confirm scope (delta updates). Removing a repo from local scope also attempts a best-effort removal of the matching repository from CodeDD when the server still has it registered (with safe fallbacks if the API is unreachable or ambiguous).
 - **Local file auditing** — LLM-based file analysis using your Anthropic or OpenAI API keys; supports batching and progress feedback.
 - **Complexity analysis** — Cyclomatic complexity and Halstead metrics (Radon/Lizard) run locally and are submitted to CodeDD.
 - **Dependency scanning** — Local lockfile/manifest and import parsing; dependency data is sent to CodeDD for vulnerability and license analysis.
-- **Architecture analysis** — Local component/relationship extraction with optional LLM enhancement; Phase 3 synthesis and storage on CodeDD.
+- **Architecture analysis** — Local component/relationship extraction with optional LLM enhancement; additional local heuristics infer technologies, coupling, and communication-style signals (aligned with CodeDD payloads). Phase 3 synthesis and storage run on CodeDD.
 - **Payment and budget** — Pre-flight checks, LoC budget deduction, or Stripe checkout when additional payment is required.
 - **Secure auth** — CLI tokens stored in the OS credential store (Windows Credential Locker, macOS Keychain, Linux Secret Service).
 
@@ -67,7 +69,7 @@ Ideal for teams who want to keep source code local while still using CodeDD’s
 
 ### Requirements
 
-- **Python 3.11+**
+- **Python 3.10+** (3.10–3.13 supported; see `pyproject.toml` classifiers)
 - A [CodeDD](https://codedd.ai) account and a CLI token (Account → CLI Access → Generate Token)
 
 ### From source (development)
@@ -78,7 +80,7 @@ cd codedd-cli
 pip install -e .
 ```
 
-### From PyPI (when available)
+### From PyPI
 
 ```bash
 pip install codedd-cli
@@ -184,7 +186,7 @@ A. Auto-sync scope -> if changed, asks to re-confirm
 B. Pre-flight on CodeDD -> checks status/payment/budget
 C. Payment path -> budget deduction OR checkout flow
 D. Local execution -> file audit (LLM), complexity, dependencies, git stats, architecture
-E. Submission -> sends structured outputs to CodeDD
+E. Submission -> sends structured outputs to CodeDD (with retries on transient API errors)
 F. Completion -> triggers server-side consolidation/recommendations
 ```
 
@@ -204,7 +206,7 @@ Run: codedd audit start
 | File audit        | Local         | LLM (Anthropic/OpenAI) analyses each file; results sent to CodeDD. |
 | Complexity        | Local         | Radon/Lizard; metrics sent to CodeDD. |
 | Dependencies      | Local + CodeDD| Lockfiles/imports scanned locally; package/vuln data stored and enriched on CodeDD. |
-| Git statistics    | Local + CodeDD| Commit/churn/collaboration metrics collected locally, then submitted. |
+| Git statistics    | Local + CodeDD| Commit history and core repo stats collected locally and submitted; CodeDD can derive further timeline/churn views from that history. |
 | Architecture      | Local + CodeDD| Components/relations extracted locally; persisted and processed on CodeDD. |
 | Recommendations   | CodeDD        | Consolidation, technical debt, security, licenses, etc. |
 
@@ -243,7 +245,7 @@ Run: codedd audit start
 
 | Command | Description |
 |--------|-------------|
-| `codedd audit start` | Sync scope (if needed), pre-flight, pay/budget, then run full local audit and submit to CodeDD. Use `--skip-sync` to skip scope sync; `--yes` to auto-confirm; `--show` for one-shot transparency summary; `--show-interactive` for per-request confirmations (debug); `--show-force-interactive` to override large-audit guardrails; `--debug-llm` for LLM debug output. |
+| `codedd audit start` | Sync scope (if needed), pre-flight, pay/budget, then run full local audit and submit to CodeDD. Use `--skip-sync` to skip scope sync; `--yes` to auto-confirm; `--show` for one-shot transparency summary; `--show-interactive` for per-request confirmations (debug); `--show-force-interactive` to override large-audit guardrails; `--debug-llm` for LLM debug output; `--debug-llm-full-prompt` to include the full proprietary system prompt in that output (sensitive). |
 
 ### Configuration
 
@@ -264,6 +266,11 @@ Run: codedd audit start
 - **Config file:** `~/.codedd/config.toml` (TOML). Stores API URL, active audit, scope directories, LLM provider, concurrency. Permissions are restricted to the owner (Unix).
 - **Secrets:** The CLI token and LLM API keys are stored in the system keychain (Windows Credential Locker, macOS Keychain, Linux Secret Service), not in the config file.
 
+Optional `[audit]` keys (defaults shown) tune how long the CLI waits after opening a payment browser flow:
+
+- `payment_poll_interval_seconds` (default `5`)
+- `payment_poll_max_wait_seconds` (default `600`)
+
 ### Environment variables
 
 | Variable | Purpose |

{codedd_cli-0.1.1 → codedd_cli-0.1.4}/README.md

@@ -18,11 +18,11 @@ Ideal for teams who want to keep source code local while still using CodeDD’s
 
 ## Features
 
-- **Scope management** — Add/remove local directories, sync with CodeDD, detect changes and re-confirm scope (delta updates).
+- **Scope management** — Add/remove local directories, sync with CodeDD, detect changes and re-confirm scope (delta updates). Removing a repo from local scope also attempts a best-effort removal of the matching repository from CodeDD when the server still has it registered (with safe fallbacks if the API is unreachable or ambiguous).
 - **Local file auditing** — LLM-based file analysis using your Anthropic or OpenAI API keys; supports batching and progress feedback.
 - **Complexity analysis** — Cyclomatic complexity and Halstead metrics (Radon/Lizard) run locally and are submitted to CodeDD.
 - **Dependency scanning** — Local lockfile/manifest and import parsing; dependency data is sent to CodeDD for vulnerability and license analysis.
-- **Architecture analysis** — Local component/relationship extraction with optional LLM enhancement; Phase 3 synthesis and storage on CodeDD.
+- **Architecture analysis** — Local component/relationship extraction with optional LLM enhancement; additional local heuristics infer technologies, coupling, and communication-style signals (aligned with CodeDD payloads). Phase 3 synthesis and storage run on CodeDD.
 - **Payment and budget** — Pre-flight checks, LoC budget deduction, or Stripe checkout when additional payment is required.
 - **Secure auth** — CLI tokens stored in the OS credential store (Windows Credential Locker, macOS Keychain, Linux Secret Service).
 
@@ -32,7 +32,7 @@ Ideal for teams who want to keep source code local while still using CodeDD’s
 
 ### Requirements
 
-- **Python 3.11+**
+- **Python 3.10+** (3.10–3.13 supported; see `pyproject.toml` classifiers)
 - A [CodeDD](https://codedd.ai) account and a CLI token (Account → CLI Access → Generate Token)
 
 ### From source (development)
@@ -43,7 +43,7 @@ cd codedd-cli
 pip install -e .
 ```
 
-### From PyPI (when available)
+### From PyPI
 
 ```bash
 pip install codedd-cli
@@ -149,7 +149,7 @@ A. Auto-sync scope -> if changed, asks to re-confirm
 B. Pre-flight on CodeDD -> checks status/payment/budget
 C. Payment path -> budget deduction OR checkout flow
 D. Local execution -> file audit (LLM), complexity, dependencies, git stats, architecture
-E. Submission -> sends structured outputs to CodeDD
+E. Submission -> sends structured outputs to CodeDD (with retries on transient API errors)
 F. Completion -> triggers server-side consolidation/recommendations
 ```
 
@@ -169,7 +169,7 @@ Run: codedd audit start
 | File audit        | Local         | LLM (Anthropic/OpenAI) analyses each file; results sent to CodeDD. |
 | Complexity        | Local         | Radon/Lizard; metrics sent to CodeDD. |
 | Dependencies      | Local + CodeDD| Lockfiles/imports scanned locally; package/vuln data stored and enriched on CodeDD. |
-| Git statistics    | Local + CodeDD| Commit/churn/collaboration metrics collected locally, then submitted. |
+| Git statistics    | Local + CodeDD| Commit history and core repo stats collected locally and submitted; CodeDD can derive further timeline/churn views from that history. |
 | Architecture      | Local + CodeDD| Components/relations extracted locally; persisted and processed on CodeDD. |
 | Recommendations   | CodeDD        | Consolidation, technical debt, security, licenses, etc. |
 
@@ -208,7 +208,7 @@ Run: codedd audit start
 
 | Command | Description |
 |--------|-------------|
-| `codedd audit start` | Sync scope (if needed), pre-flight, pay/budget, then run full local audit and submit to CodeDD. Use `--skip-sync` to skip scope sync; `--yes` to auto-confirm; `--show` for one-shot transparency summary; `--show-interactive` for per-request confirmations (debug); `--show-force-interactive` to override large-audit guardrails; `--debug-llm` for LLM debug output. |
+| `codedd audit start` | Sync scope (if needed), pre-flight, pay/budget, then run full local audit and submit to CodeDD. Use `--skip-sync` to skip scope sync; `--yes` to auto-confirm; `--show` for one-shot transparency summary; `--show-interactive` for per-request confirmations (debug); `--show-force-interactive` to override large-audit guardrails; `--debug-llm` for LLM debug output; `--debug-llm-full-prompt` to include the full proprietary system prompt in that output (sensitive). |
 
 ### Configuration
 
@@ -229,6 +229,11 @@ Run: codedd audit start
 - **Config file:** `~/.codedd/config.toml` (TOML). Stores API URL, active audit, scope directories, LLM provider, concurrency. Permissions are restricted to the owner (Unix).
 - **Secrets:** The CLI token and LLM API keys are stored in the system keychain (Windows Credential Locker, macOS Keychain, Linux Secret Service), not in the config file.
 
+Optional `[audit]` keys (defaults shown) tune how long the CLI waits after opening a payment browser flow:
+
+- `payment_poll_interval_seconds` (default `5`)
+- `payment_poll_max_wait_seconds` (default `600`)
+
 ### Environment variables
 
 | Variable | Purpose |

{codedd_cli-0.1.1 → codedd_cli-0.1.4}/codedd_cli/__init__.py

@@ -1,3 +1,3 @@
-"""CodeDD CLI — run code audits from your terminal."""
-
-__version__ = "0.1.1"
+"""CodeDD CLI — run code audits from your terminal."""
+
+__version__ = "0.1.4"

codedd_cli-0.1.4/codedd_cli/__main__.py

@@ -0,0 +1,60 @@
+"""Allow running via ``python -m codedd_cli``."""
+
+import os
+import sys
+
+
+def _ensure_utf8_io() -> None:
+    """
+    Reconfigure stdout/stderr to use UTF-8 on Windows.
+
+    PowerShell and cmd.exe default to the system code page (e.g. cp1252),
+    which causes ``UnicodeEncodeError: 'charmap' codec can't encode …``
+    whenever Rich prints Unicode symbols.  Setting the streams to UTF-8
+    early — before any import triggers output — eliminates the need for
+    callers to set ``PYTHONIOENCODING=utf-8`` externally.
+    """
+    if sys.platform != "win32":
+        return
+
+    # Env-var approach: respected by any subprocess we may spawn as well
+    os.environ.setdefault("PYTHONIOENCODING", "utf-8")
+
+    # Reconfigure the existing streams in-place (Python 3.7+)
+    for stream_name in ("stdout", "stderr"):
+        stream = getattr(sys, stream_name, None)
+        if stream is not None and hasattr(stream, "reconfigure"):
+            try:
+                stream.reconfigure(encoding="utf-8", errors="replace")
+            except Exception:
+                pass  # non-standard stream (e.g. piped / pytest capture)
+
+    # Enable UTF-8 mode for the Windows console (Python 3.15+ flag;
+    # also ensures ctypes-level console code page is set).
+    try:
+        import ctypes
+        kernel32 = ctypes.windll.kernel32  # type: ignore[attr-defined]
+        kernel32.SetConsoleOutputCP(65001)
+        kernel32.SetConsoleCP(65001)
+    except Exception:
+        pass
+
+
+# Apply before importing anything that may write to the console
+_ensure_utf8_io()
+
+from codedd_cli.api.exceptions import CodeDDConnectionError  # noqa: E402
+from codedd_cli.cli import app  # noqa: E402
+from codedd_cli.utils.display import print_error  # noqa: E402
+
+
+def main() -> None:
+    try:
+        app()
+    except CodeDDConnectionError as e:
+        print_error(str(e))
+        sys.exit(1)
+
+
+if __name__ == "__main__":
+    main()

{codedd_cli-0.1.1 → codedd_cli-0.1.4}/codedd_cli/api/client.py

@@ -9,6 +9,7 @@ Wraps ``httpx`` with:
     - Descriptive User-Agent header
 """
 
+import threading
 import time
 from typing import Any
 
@@ -54,6 +55,7 @@ class CodeDDClient:
             verify=verify_tls,
             follow_redirects=True,
         )
+        self._lock = threading.Lock()
 
     def _build_headers(self) -> dict[str, str]:
         headers: dict[str, str] = {
@@ -85,7 +87,8 @@ class CodeDDClient:
 
         for attempt in range(1, MAX_RETRIES + 1):
             try:
-                resp = self._client.request(method, path, **kwargs)
+                with self._lock:
+                    resp = self._client.request(method, path, **kwargs)
 
                 # Don't retry client errors (4xx)
                 if resp.status_code < 500:

{codedd_cli-0.1.1 → codedd_cli-0.1.4}/codedd_cli/api/endpoints.py

@@ -17,6 +17,7 @@ class Endpoints:
     # Scope
     REGISTER_SCOPE = "/api/cli/scope/register/"
     SCOPE_FILES = "/api/cli/scope/files/"
+    DELETE_REPO_FROM_SCOPE = "/delete_repo_from_scope/"
 
     # Audit lifecycle
     AUDIT_CAN_START = "/api/cli/audit/can-start/"
@@ -38,7 +39,25 @@ class Endpoints:
 
     # Local git statistics (for CLI-driven audits; enables dashboards)
     AUDIT_GIT_STATISTICS = "/api/cli/audit/git-statistics/"
+    AUDIT_GIT_DEVELOPMENT_ANALYSIS = "/api/cli/audit/git-development-analysis/"
     AUDIT_VULNERABILITY_VALIDATION = "/api/cli/audit/vulnerability-validation/"
 
     # Architecture analysis (Phase 1+2 run locally; server runs Phase 3 + storage)
     AUDIT_ARCHITECTURE = "/api/cli/audit/architecture/"
+
+    # LLM model tracking (records which model(s) were used during local file auditing)
+    AUDIT_LLM_MODEL = "/api/cli/audit/llm-model/"
+
+    # Fix workflow
+    FIX_OVERVIEW = "/api/cli/fix/overview/"
+    FIX_FLAGS_NEXT = "/api/cli/fix/flags/next/"
+    FIX_VULNS_NEXT = "/api/cli/fix/vulns/next/"
+    FIX_VULNS_AFFECTED_FILES = "/api/cli/fix/vulns/affected-files/"
+    FIX_STATUS = "/api/cli/fix/status/"
+    FIX_COMMENT = "/api/cli/fix/comment/"
+    FIX_RESOLVE = "/api/cli/fix/resolve/"
+    FIX_INVALIDATE = "/api/cli/fix/invalidate/"
+
+    # Fix access control (remediation module)
+    FIX_ACCESS_STATUS = "/api/cli/fix/access/status/"
+    FIX_ACCESS_TOGGLE = "/api/cli/fix/access/toggle/"

{codedd_cli-0.1.1 → codedd_cli-0.1.4}/codedd_cli/api/exceptions.py

@@ -1,24 +1,24 @@
-"""
-API-layer exceptions with user-facing messages.
-
-Raised when the CLI cannot reach the CodeDD server (connection refused,
-timeout, server disconnected, etc.). Handled at the CLI entry point to
-display a single, clear message instead of a full traceback.
-"""
-
-# Pre-defined message shown when the remote is not responding.
-CONNECTION_ERROR_MESSAGE = (
-    "Unable to reach CodeDD. "
-    "Check that the server is running and your network connection is available, "
-    "or try again later."
-)
-
-
-class CodeDDConnectionError(Exception):
-    """
-    Raised when a request to the CodeDD API fails due to connection
-    or transport errors (e.g. server not responding, timeout, disconnect).
-    """
-
-    def __init__(self, message: str | None = None) -> None:
-        super().__init__(message or CONNECTION_ERROR_MESSAGE)
+"""
+API-layer exceptions with user-facing messages.
+
+Raised when the CLI cannot reach the CodeDD server (connection refused,
+timeout, server disconnected, etc.). Handled at the CLI entry point to
+display a single, clear message instead of a full traceback.
+"""
+
+# Pre-defined message shown when the remote is not responding.
+CONNECTION_ERROR_MESSAGE = (
+    "Unable to reach CodeDD. "
+    "Check that the server is running and your network connection is available, "
+    "or try again later."
+)
+
+
+class CodeDDConnectionError(Exception):
+    """
+    Raised when a request to the CodeDD API fails due to connection
+    or transport errors (e.g. server not responding, timeout, disconnect).
+    """
+
+    def __init__(self, message: str | None = None) -> None:
+        super().__init__(message or CONNECTION_ERROR_MESSAGE)