codedd-cli 0.1.5__tar.gz → 0.1.7__tar.gz

{codedd_cli-0.1.5 → codedd_cli-0.1.7}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: codedd-cli
-Version: 0.1.5
+Version: 0.1.7
 Summary: CLI tool for CodeDD — run code audits from your terminal
 License: MIT
 License-File: LICENSE
@@ -25,6 +25,7 @@ Requires-Dist: defusedxml (>=0.7.1)
 Requires-Dist: esprima (>=4.0.0) ; extra == "esprima"
 Requires-Dist: httpx (>=0.27.0)
 Requires-Dist: keyring (>=25.0.0)
+Requires-Dist: langgraph (>=0.2.0)
 Requires-Dist: lizard (>=1.17.0)
 Requires-Dist: radon (>=6.0.0)
 Requires-Dist: rich (>=13.0.0)
@@ -257,7 +258,7 @@ Run: codedd audit start
 | `codedd config show-keys` | List which providers have keys configured (not the keys themselves) |
 | `codedd config remove-key <anthropic\|openai>` | Remove a stored LLM API key from keychain |
 | `codedd config provider [anthropic\|openai\|both]` | Set preferred LLM provider |
-| `codedd config concurrency <n>` | Set max concurrent LLM requests (default 6) |
+| `codedd config concurrency <n>` | Set max concurrent LLM requests (1–75, default 4) |
 
 ---
 

{codedd_cli-0.1.5 → codedd_cli-0.1.7}/README.md

@@ -220,7 +220,7 @@ Run: codedd audit start
 | `codedd config show-keys` | List which providers have keys configured (not the keys themselves) |
 | `codedd config remove-key <anthropic\|openai>` | Remove a stored LLM API key from keychain |
 | `codedd config provider [anthropic\|openai\|both]` | Set preferred LLM provider |
-| `codedd config concurrency <n>` | Set max concurrent LLM requests (default 6) |
+| `codedd config concurrency <n>` | Set max concurrent LLM requests (1–75, default 4) |
 
 ---
 

{codedd_cli-0.1.5 → codedd_cli-0.1.7}/codedd_cli/__init__.py

@@ -1,3 +1,3 @@
-"""CodeDD CLI — run code audits from your terminal."""
-
-__version__ = "0.1.5"
+"""CodeDD CLI — run code audits from your terminal."""
+
+__version__ = "0.1.7"

{codedd_cli-0.1.5 → codedd_cli-0.1.7}/codedd_cli/api/client.py

@@ -24,6 +24,7 @@ from codedd_cli.config.constants import (
     USER_AGENT_PREFIX,
 )
 from codedd_cli.config.settings import ConfigManager
+from codedd_cli.config.url_validation import should_verify_tls_for_api_url
 
 
 class CodeDDClient:
@@ -42,11 +43,7 @@ class CodeDDClient:
         self._base_url = self._config.api_url.rstrip("/")
         self._token = token if token is not None else TokenManager.retrieve()
 
-        # For localhost HTTP, disable TLS verification (not applicable anyway)
-        # For HTTPS, always verify certificates
-        verify_tls = not self._base_url.startswith("http://localhost") and not self._base_url.startswith(
-            "http://127.0.0.1"
-        )
+        verify_tls = should_verify_tls_for_api_url(self._base_url)
 
         self._client = httpx.Client(
             base_url=self._base_url,

{codedd_cli-0.1.5 → codedd_cli-0.1.7}/codedd_cli/api/endpoints.py

@@ -1,7 +1,9 @@
 """
 Server endpoint path constants.
 
-All paths are relative to the ``api_url`` stored in the CLI config
+All paths are absolute from the server host root (they include the ``/api/``
+prefix). The ``api_url`` in CLI config is the host only, e.g.
+``https://api.codedd.ai`` or ``http://localhost:8000``.
 """
 
 
@@ -17,7 +19,7 @@ class Endpoints:
     # Scope
     REGISTER_SCOPE = "/api/cli/scope/register/"
     SCOPE_FILES = "/api/cli/scope/files/"
-    DELETE_REPO_FROM_SCOPE = "/delete_repo_from_scope/"
+    DELETE_REPO_FROM_SCOPE = "/api/delete_repo_from_scope/"
 
     # Audit lifecycle
     AUDIT_CAN_START = "/api/cli/audit/can-start/"
@@ -27,6 +29,7 @@ class Endpoints:
 
     # Local audit execution (CLI-side file auditing)
     AUDIT_PLAN = "/api/cli/audit/plan/"
+    AUDIT_PROGRESS = "/api/cli/audit/progress/"
     AUDIT_RESULTS = "/api/cli/audit/results/"
     AUDIT_COMPLETE = "/api/cli/audit/complete/"
 
@@ -61,3 +64,7 @@ class Endpoints:
     # Fix access control (remediation module)
     FIX_ACCESS_STATUS = "/api/cli/fix/access/status/"
     FIX_ACCESS_TOGGLE = "/api/cli/fix/access/toggle/"
+
+    # Issue Compass saved selections (flag-issue slices from the web explorer)
+    FIX_ISSUE_COMPASS_SELECTIONS = "/api/cli/fix/issue-compass-selections/"
+    FIX_ISSUE_COMPASS_SELECTIONS_CATALOG = "/api/cli/fix/issue-compass-selections/catalog/"

{codedd_cli-0.1.5 → codedd_cli-0.1.7}/codedd_cli/api/exceptions.py

@@ -1,24 +1,24 @@
-"""
-API-layer exceptions with user-facing messages.
-
-Raised when the CLI cannot reach the CodeDD server (connection refused,
-timeout, server disconnected, etc.). Handled at the CLI entry point to
-display a single, clear message instead of a full traceback.
-"""
-
-# Pre-defined message shown when the remote is not responding.
-CONNECTION_ERROR_MESSAGE = (
-    "Unable to reach CodeDD. "
-    "Check that the server is running and your network connection is available, "
-    "or try again later."
-)
-
-
-class CodeDDConnectionError(Exception):
-    """
-    Raised when a request to the CodeDD API fails due to connection
-    or transport errors (e.g. server not responding, timeout, disconnect).
-    """
-
-    def __init__(self, message: str | None = None) -> None:
-        super().__init__(message or CONNECTION_ERROR_MESSAGE)
+"""
+API-layer exceptions with user-facing messages.
+
+Raised when the CLI cannot reach the CodeDD server (connection refused,
+timeout, server disconnected, etc.). Handled at the CLI entry point to
+display a single, clear message instead of a full traceback.
+"""
+
+# Pre-defined message shown when the remote is not responding.
+CONNECTION_ERROR_MESSAGE = (
+    "Unable to reach CodeDD. "
+    "Check that the server is running and your network connection is available, "
+    "or try again later."
+)
+
+
+class CodeDDConnectionError(Exception):
+    """
+    Raised when a request to the CodeDD API fails due to connection
+    or transport errors (e.g. server not responding, timeout, disconnect).
+    """
+
+    def __init__(self, message: str | None = None) -> None:
+        super().__init__(message or CONNECTION_ERROR_MESSAGE)

{codedd_cli-0.1.5 → codedd_cli-0.1.7}/codedd_cli/auditor/archetype_classifier.py

@@ -16,12 +16,10 @@ identical tier definitions.  The only difference is that it does NOT persist
 results to PostgreSQL and operates without Phase 3 graph nodes/edges — the
 _count_deployable_units method falls back to component-level heuristics when
 graph data is unavailable.
-
-Parity reference: E:/CodeDD/django/auditor/auditing_functions/functions/step_5/
-                  architecture_analysis/archetype_classifier.py
 """
 
 import logging
+import re
 import time
 from typing import Any
 
@@ -133,9 +131,38 @@ class DimensionScorer:
                 patterns.append(val)
         return patterns
 
+    @staticmethod
+    def _normalize_token(value: str) -> str:
+        """Lowercase and collapse separators (``_ - . /`` + whitespace) to spaces.
+
+        This lets a single keyword match canonical tech ids regardless of the
+        separator style used upstream — e.g. ``spring`` matches ``spring_boot``,
+        ``spring-boot`` and ``spring boot`` alike — while still respecting word
+        boundaries so ``spring`` does NOT match ``mainspring``.
+        """
+        return re.sub(r"[\s_\-./]+", " ", value.lower()).strip()
+
+    def _matches(self, item: str, needle: str) -> bool:
+        """Left-boundary match of *needle* within *item* after normalization.
+
+        Replaces the previous raw substring test, which produced mid-word false
+        positives (e.g. ``spring`` in ``offspring``/``mainspring``).  We require
+        the needle to begin at a token boundary but deliberately do NOT require a
+        right boundary, so canonical tech ids that concatenate suffixes still
+        match (``express`` → ``expressjs``, ``next`` → ``nextjs``, ``postgres``
+        → ``postgresql``).  Multi-word needles (``api gateway``, ``kafka
+        streams``) work because both sides are separator-normalized first.
+        """
+        item_norm = self._normalize_token(item)
+        needle_norm = self._normalize_token(needle)
+        if not needle_norm:
+            return False
+        pattern = rf"(?<![a-z0-9]){re.escape(needle_norm)}"
+        return re.search(pattern, item_norm) is not None
+
     def _has_any(self, haystack: list[str], *needles: str) -> bool:
         return any(
-            needle in item
+            self._matches(item, needle)
             for item in haystack
             for needle in needles
         )
@@ -143,7 +170,7 @@ class DimensionScorer:
     def _count_matches(self, haystack: list[str], *needles: str) -> int:
         return sum(
             1 for item in haystack
-            if any(needle in item for needle in needles)
+            if any(self._matches(item, needle) for needle in needles)
         )
 
     def _evidence(
@@ -159,7 +186,7 @@ class DimensionScorer:
         has already been credited in another dimension."""
         credited_dims = self._tech_credit_ledger.get(tech_keyword, set())
         if dimension in credited_dims:
-            return base_points
+            return base_points * ATTENUATION_FACTOR
         if credited_dims:
             self._tech_credit_ledger.setdefault(tech_keyword, set()).add(dimension)
             return base_points * ATTENUATION_FACTOR