codedd-cli 0.1.2__tar.gz → 0.1.4__tar.gz

{codedd_cli-0.1.2 → codedd_cli-0.1.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: codedd-cli
-Version: 0.1.2
+Version: 0.1.4
 Summary: CLI tool for CodeDD — run code audits from your terminal
 License: MIT
 License-File: LICENSE
@@ -55,11 +55,11 @@ Ideal for teams who want to keep source code local while still using CodeDD’s
 
 ## Features
 
-- **Scope management** — Add/remove local directories, sync with CodeDD, detect changes and re-confirm scope (delta updates).
+- **Scope management** — Add/remove local directories, sync with CodeDD, detect changes and re-confirm scope (delta updates). Removing a repo from local scope also attempts a best-effort removal of the matching repository from CodeDD when the server still has it registered (with safe fallbacks if the API is unreachable or ambiguous).
 - **Local file auditing** — LLM-based file analysis using your Anthropic or OpenAI API keys; supports batching and progress feedback.
 - **Complexity analysis** — Cyclomatic complexity and Halstead metrics (Radon/Lizard) run locally and are submitted to CodeDD.
 - **Dependency scanning** — Local lockfile/manifest and import parsing; dependency data is sent to CodeDD for vulnerability and license analysis.
-- **Architecture analysis** — Local component/relationship extraction with optional LLM enhancement; Phase 3 synthesis and storage on CodeDD.
+- **Architecture analysis** — Local component/relationship extraction with optional LLM enhancement; additional local heuristics infer technologies, coupling, and communication-style signals (aligned with CodeDD payloads). Phase 3 synthesis and storage run on CodeDD.
 - **Payment and budget** — Pre-flight checks, LoC budget deduction, or Stripe checkout when additional payment is required.
 - **Secure auth** — CLI tokens stored in the OS credential store (Windows Credential Locker, macOS Keychain, Linux Secret Service).
 
@@ -69,7 +69,7 @@ Ideal for teams who want to keep source code local while still using CodeDD’s
 
 ### Requirements
 
-- **Python 3.11+**
+- **Python 3.10+** (3.10–3.13 supported; see `pyproject.toml` classifiers)
 - A [CodeDD](https://codedd.ai) account and a CLI token (Account → CLI Access → Generate Token)
 
 ### From source (development)
@@ -186,7 +186,7 @@ A. Auto-sync scope -> if changed, asks to re-confirm
 B. Pre-flight on CodeDD -> checks status/payment/budget
 C. Payment path -> budget deduction OR checkout flow
 D. Local execution -> file audit (LLM), complexity, dependencies, git stats, architecture
-E. Submission -> sends structured outputs to CodeDD
+E. Submission -> sends structured outputs to CodeDD (with retries on transient API errors)
 F. Completion -> triggers server-side consolidation/recommendations
 ```
 
@@ -206,7 +206,7 @@ Run: codedd audit start
 | File audit        | Local         | LLM (Anthropic/OpenAI) analyses each file; results sent to CodeDD. |
 | Complexity        | Local         | Radon/Lizard; metrics sent to CodeDD. |
 | Dependencies      | Local + CodeDD| Lockfiles/imports scanned locally; package/vuln data stored and enriched on CodeDD. |
-| Git statistics    | Local + CodeDD| Commit/churn/collaboration metrics collected locally, then submitted. |
+| Git statistics    | Local + CodeDD| Commit history and core repo stats collected locally and submitted; CodeDD can derive further timeline/churn views from that history. |
 | Architecture      | Local + CodeDD| Components/relations extracted locally; persisted and processed on CodeDD. |
 | Recommendations   | CodeDD        | Consolidation, technical debt, security, licenses, etc. |
 
@@ -245,7 +245,7 @@ Run: codedd audit start
 
 | Command | Description |
 |--------|-------------|
-| `codedd audit start` | Sync scope (if needed), pre-flight, pay/budget, then run full local audit and submit to CodeDD. Use `--skip-sync` to skip scope sync; `--yes` to auto-confirm; `--show` for one-shot transparency summary; `--show-interactive` for per-request confirmations (debug); `--show-force-interactive` to override large-audit guardrails; `--debug-llm` for LLM debug output. |
+| `codedd audit start` | Sync scope (if needed), pre-flight, pay/budget, then run full local audit and submit to CodeDD. Use `--skip-sync` to skip scope sync; `--yes` to auto-confirm; `--show` for one-shot transparency summary; `--show-interactive` for per-request confirmations (debug); `--show-force-interactive` to override large-audit guardrails; `--debug-llm` for LLM debug output; `--debug-llm-full-prompt` to include the full proprietary system prompt in that output (sensitive). |
 
 ### Configuration
 
@@ -266,6 +266,11 @@ Run: codedd audit start
 - **Config file:** `~/.codedd/config.toml` (TOML). Stores API URL, active audit, scope directories, LLM provider, concurrency. Permissions are restricted to the owner (Unix).
 - **Secrets:** The CLI token and LLM API keys are stored in the system keychain (Windows Credential Locker, macOS Keychain, Linux Secret Service), not in the config file.
 
+Optional `[audit]` keys (defaults shown) tune how long the CLI waits after opening a payment browser flow:
+
+- `payment_poll_interval_seconds` (default `5`)
+- `payment_poll_max_wait_seconds` (default `600`)
+
 ### Environment variables
 
 | Variable | Purpose |

{codedd_cli-0.1.2 → codedd_cli-0.1.4}/README.md

@@ -18,11 +18,11 @@ Ideal for teams who want to keep source code local while still using CodeDD’s
 
 ## Features
 
-- **Scope management** — Add/remove local directories, sync with CodeDD, detect changes and re-confirm scope (delta updates).
+- **Scope management** — Add/remove local directories, sync with CodeDD, detect changes and re-confirm scope (delta updates). Removing a repo from local scope also attempts a best-effort removal of the matching repository from CodeDD when the server still has it registered (with safe fallbacks if the API is unreachable or ambiguous).
 - **Local file auditing** — LLM-based file analysis using your Anthropic or OpenAI API keys; supports batching and progress feedback.
 - **Complexity analysis** — Cyclomatic complexity and Halstead metrics (Radon/Lizard) run locally and are submitted to CodeDD.
 - **Dependency scanning** — Local lockfile/manifest and import parsing; dependency data is sent to CodeDD for vulnerability and license analysis.
-- **Architecture analysis** — Local component/relationship extraction with optional LLM enhancement; Phase 3 synthesis and storage on CodeDD.
+- **Architecture analysis** — Local component/relationship extraction with optional LLM enhancement; additional local heuristics infer technologies, coupling, and communication-style signals (aligned with CodeDD payloads). Phase 3 synthesis and storage run on CodeDD.
 - **Payment and budget** — Pre-flight checks, LoC budget deduction, or Stripe checkout when additional payment is required.
 - **Secure auth** — CLI tokens stored in the OS credential store (Windows Credential Locker, macOS Keychain, Linux Secret Service).
 
@@ -32,7 +32,7 @@ Ideal for teams who want to keep source code local while still using CodeDD’s
 
 ### Requirements
 
-- **Python 3.11+**
+- **Python 3.10+** (3.10–3.13 supported; see `pyproject.toml` classifiers)
 - A [CodeDD](https://codedd.ai) account and a CLI token (Account → CLI Access → Generate Token)
 
 ### From source (development)
@@ -149,7 +149,7 @@ A. Auto-sync scope -> if changed, asks to re-confirm
 B. Pre-flight on CodeDD -> checks status/payment/budget
 C. Payment path -> budget deduction OR checkout flow
 D. Local execution -> file audit (LLM), complexity, dependencies, git stats, architecture
-E. Submission -> sends structured outputs to CodeDD
+E. Submission -> sends structured outputs to CodeDD (with retries on transient API errors)
 F. Completion -> triggers server-side consolidation/recommendations
 ```
 
@@ -169,7 +169,7 @@ Run: codedd audit start
 | File audit        | Local         | LLM (Anthropic/OpenAI) analyses each file; results sent to CodeDD. |
 | Complexity        | Local         | Radon/Lizard; metrics sent to CodeDD. |
 | Dependencies      | Local + CodeDD| Lockfiles/imports scanned locally; package/vuln data stored and enriched on CodeDD. |
-| Git statistics    | Local + CodeDD| Commit/churn/collaboration metrics collected locally, then submitted. |
+| Git statistics    | Local + CodeDD| Commit history and core repo stats collected locally and submitted; CodeDD can derive further timeline/churn views from that history. |
 | Architecture      | Local + CodeDD| Components/relations extracted locally; persisted and processed on CodeDD. |
 | Recommendations   | CodeDD        | Consolidation, technical debt, security, licenses, etc. |
 
@@ -208,7 +208,7 @@ Run: codedd audit start
 
 | Command | Description |
 |--------|-------------|
-| `codedd audit start` | Sync scope (if needed), pre-flight, pay/budget, then run full local audit and submit to CodeDD. Use `--skip-sync` to skip scope sync; `--yes` to auto-confirm; `--show` for one-shot transparency summary; `--show-interactive` for per-request confirmations (debug); `--show-force-interactive` to override large-audit guardrails; `--debug-llm` for LLM debug output. |
+| `codedd audit start` | Sync scope (if needed), pre-flight, pay/budget, then run full local audit and submit to CodeDD. Use `--skip-sync` to skip scope sync; `--yes` to auto-confirm; `--show` for one-shot transparency summary; `--show-interactive` for per-request confirmations (debug); `--show-force-interactive` to override large-audit guardrails; `--debug-llm` for LLM debug output; `--debug-llm-full-prompt` to include the full proprietary system prompt in that output (sensitive). |
 
 ### Configuration
 
@@ -229,6 +229,11 @@ Run: codedd audit start
 - **Config file:** `~/.codedd/config.toml` (TOML). Stores API URL, active audit, scope directories, LLM provider, concurrency. Permissions are restricted to the owner (Unix).
 - **Secrets:** The CLI token and LLM API keys are stored in the system keychain (Windows Credential Locker, macOS Keychain, Linux Secret Service), not in the config file.
 
+Optional `[audit]` keys (defaults shown) tune how long the CLI waits after opening a payment browser flow:
+
+- `payment_poll_interval_seconds` (default `5`)
+- `payment_poll_max_wait_seconds` (default `600`)
+
 ### Environment variables
 
 | Variable | Purpose |

{codedd_cli-0.1.2 → codedd_cli-0.1.4}/codedd_cli/__init__.py

@@ -1,3 +1,3 @@
-"""CodeDD CLI — run code audits from your terminal."""
-
-__version__ = "0.1.2"
+"""CodeDD CLI — run code audits from your terminal."""
+
+__version__ = "0.1.4"

codedd_cli-0.1.4/codedd_cli/__main__.py

@@ -0,0 +1,60 @@
+"""Allow running via ``python -m codedd_cli``."""
+
+import os
+import sys
+
+
+def _ensure_utf8_io() -> None:
+    """
+    Reconfigure stdout/stderr to use UTF-8 on Windows.
+
+    PowerShell and cmd.exe default to the system code page (e.g. cp1252),
+    which causes ``UnicodeEncodeError: 'charmap' codec can't encode …``
+    whenever Rich prints Unicode symbols.  Setting the streams to UTF-8
+    early — before any import triggers output — eliminates the need for
+    callers to set ``PYTHONIOENCODING=utf-8`` externally.
+    """
+    if sys.platform != "win32":
+        return
+
+    # Env-var approach: respected by any subprocess we may spawn as well
+    os.environ.setdefault("PYTHONIOENCODING", "utf-8")
+
+    # Reconfigure the existing streams in-place (Python 3.7+)
+    for stream_name in ("stdout", "stderr"):
+        stream = getattr(sys, stream_name, None)
+        if stream is not None and hasattr(stream, "reconfigure"):
+            try:
+                stream.reconfigure(encoding="utf-8", errors="replace")
+            except Exception:
+                pass  # non-standard stream (e.g. piped / pytest capture)
+
+    # Enable UTF-8 mode for the Windows console (Python 3.15+ flag;
+    # also ensures ctypes-level console code page is set).
+    try:
+        import ctypes
+        kernel32 = ctypes.windll.kernel32  # type: ignore[attr-defined]
+        kernel32.SetConsoleOutputCP(65001)
+        kernel32.SetConsoleCP(65001)
+    except Exception:
+        pass
+
+
+# Apply before importing anything that may write to the console
+_ensure_utf8_io()
+
+from codedd_cli.api.exceptions import CodeDDConnectionError  # noqa: E402
+from codedd_cli.cli import app  # noqa: E402
+from codedd_cli.utils.display import print_error  # noqa: E402
+
+
+def main() -> None:
+    try:
+        app()
+    except CodeDDConnectionError as e:
+        print_error(str(e))
+        sys.exit(1)
+
+
+if __name__ == "__main__":
+    main()

{codedd_cli-0.1.2 → codedd_cli-0.1.4}/codedd_cli/api/client.py

@@ -9,6 +9,7 @@ Wraps ``httpx`` with:
     - Descriptive User-Agent header
 """
 
+import threading
 import time
 from typing import Any
 
@@ -54,6 +55,7 @@ class CodeDDClient:
             verify=verify_tls,
             follow_redirects=True,
         )
+        self._lock = threading.Lock()
 
     def _build_headers(self) -> dict[str, str]:
         headers: dict[str, str] = {
@@ -85,7 +87,8 @@ class CodeDDClient:
 
         for attempt in range(1, MAX_RETRIES + 1):
             try:
-                resp = self._client.request(method, path, **kwargs)
+                with self._lock:
+                    resp = self._client.request(method, path, **kwargs)
 
                 # Don't retry client errors (4xx)
                 if resp.status_code < 500:

{codedd_cli-0.1.2 → codedd_cli-0.1.4}/codedd_cli/api/endpoints.py

@@ -44,3 +44,20 @@ class Endpoints:
 
     # Architecture analysis (Phase 1+2 run locally; server runs Phase 3 + storage)
     AUDIT_ARCHITECTURE = "/api/cli/audit/architecture/"
+
+    # LLM model tracking (records which model(s) were used during local file auditing)
+    AUDIT_LLM_MODEL = "/api/cli/audit/llm-model/"
+
+    # Fix workflow
+    FIX_OVERVIEW = "/api/cli/fix/overview/"
+    FIX_FLAGS_NEXT = "/api/cli/fix/flags/next/"
+    FIX_VULNS_NEXT = "/api/cli/fix/vulns/next/"
+    FIX_VULNS_AFFECTED_FILES = "/api/cli/fix/vulns/affected-files/"
+    FIX_STATUS = "/api/cli/fix/status/"
+    FIX_COMMENT = "/api/cli/fix/comment/"
+    FIX_RESOLVE = "/api/cli/fix/resolve/"
+    FIX_INVALIDATE = "/api/cli/fix/invalidate/"
+
+    # Fix access control (remediation module)
+    FIX_ACCESS_STATUS = "/api/cli/fix/access/status/"
+    FIX_ACCESS_TOGGLE = "/api/cli/fix/access/toggle/"