scc-cli 1.4.0__py3-none-any.whl

scc_cli/marketplace/sync.py

@@ -0,0 +1,257 @@
+"""
+Marketplace sync orchestration for Claude Code integration.
+
+This module provides the high-level sync_marketplace_settings() function that
+orchestrates the full pipeline:
+1. Parse org config
+2. Compute effective plugins for team
+3. Materialize required marketplaces
+4. Render settings to Claude format
+5. Merge with existing user settings (non-destructive)
+6. Save managed state tracking
+7. Write settings.local.json
+
+This is the main entry point for integrating marketplace functionality
+into the start command.
+"""
+
+from __future__ import annotations
+
+import json
+from datetime import datetime, timezone
+from pathlib import Path
+from typing import Any
+
+from scc_cli.marketplace.managed import ManagedState, save_managed_state
+from scc_cli.marketplace.materialize import MaterializationError, materialize_marketplace
+from scc_cli.marketplace.normalize import matches_pattern
+from scc_cli.marketplace.render import check_conflicts, merge_settings, render_settings
+from scc_cli.marketplace.resolve import resolve_effective_config
+from scc_cli.marketplace.schema import (
+    MarketplaceSource,
+    OrganizationConfig,
+)
+
+
+class SyncError(Exception):
+    """Error during marketplace sync operation."""
+
+    def __init__(self, message: str, details: dict[str, Any] | None = None) -> None:
+        self.details = details or {}
+        super().__init__(message)
+
+
+class SyncResult:
+    """Result of a marketplace sync operation."""
+
+    def __init__(
+        self,
+        success: bool,
+        plugins_enabled: list[str] | None = None,
+        marketplaces_materialized: list[str] | None = None,
+        warnings: list[str] | None = None,
+        settings_path: Path | None = None,
+    ) -> None:
+        self.success = success
+        self.plugins_enabled = plugins_enabled or []
+        self.marketplaces_materialized = marketplaces_materialized or []
+        self.warnings = warnings or []
+        self.settings_path = settings_path
+
+
+def sync_marketplace_settings(
+    project_dir: Path,
+    org_config_data: dict[str, Any],
+    team_id: str | None = None,
+    org_config_url: str | None = None,
+    force_refresh: bool = False,
+    dry_run: bool = False,
+) -> SyncResult:
+    """Sync marketplace settings for a project.
+
+    Orchestrates the full pipeline:
+    1. Parse and validate org config
+    2. Compute effective plugins for team
+    3. Materialize required marketplaces
+    4. Render settings to Claude format
+    5. Merge with existing user settings (non-destructive)
+    6. Save managed state tracking
+    7. Write settings.local.json (unless dry_run)
+
+    Args:
+        project_dir: Project root directory
+        org_config_data: Parsed org config dictionary
+        team_id: Team profile ID (uses defaults if None)
+        org_config_url: URL where org config was fetched (for tracking)
+        force_refresh: Force re-materialization of marketplaces
+        dry_run: If True, compute but don't write files
+
+    Returns:
+        SyncResult with success status and details
+
+    Raises:
+        SyncError: On validation or processing errors
+        TeamNotFoundError: If team_id not found in config
+    """
+    warnings: list[str] = []
+
+    # ── Step 1: Parse org config ─────────────────────────────────────────────
+    try:
+        org_config = OrganizationConfig.model_validate(org_config_data)
+    except Exception as e:
+        raise SyncError(f"Invalid org config: {e}") from e
+
+    # ── Step 2: Resolve effective config (federation-aware) ────────────────────
+    if team_id is None:
+        raise SyncError("team_id is required for marketplace sync")
+
+    # Use resolve_effective_config for federation support (T2a-24)
+    # This handles both inline and federated teams uniformly
+    effective_config = resolve_effective_config(org_config, team_id=team_id)
+
+    # Convert to Phase 1 format for backward compatibility
+    effective, effective_marketplaces = effective_config.to_phase1_format()
+
+    # Check for blocked plugins that user has installed
+    # First, check if org-enabled plugins were blocked
+    if effective.blocked:
+        existing = _load_existing_plugins(project_dir)
+        conflict_warnings = check_conflicts(
+            existing_plugins=existing,
+            blocked_plugins=[
+                {"plugin_id": b.plugin_id, "reason": b.reason, "pattern": b.pattern}
+                for b in effective.blocked
+            ],
+        )
+        warnings.extend(conflict_warnings)
+
+    # Also check user's existing plugins against security.blocked_plugins patterns
+    security = org_config.security
+    if security and security.blocked_plugins:
+        existing = _load_existing_plugins(project_dir)
+        blocked_reason = security.blocked_reason or "Blocked by organization policy"
+        for plugin in existing:
+            for pattern in security.blocked_plugins:
+                if matches_pattern(plugin, pattern):
+                    warnings.append(
+                        f"⚠️ Plugin '{plugin}' is blocked by team policy: {blocked_reason} "
+                        f"(matched pattern: {pattern})"
+                    )
+                    break  # Only one warning per plugin
+
+    # ── Step 3: Materialize required marketplaces ────────────────────────────
+    materialized: dict[str, Any] = {}
+    marketplaces_used = set()
+
+    # Determine which marketplaces are needed
+    for plugin_ref in effective.enabled:
+        if "@" in plugin_ref:
+            marketplace_name = plugin_ref.split("@")[1]
+            marketplaces_used.add(marketplace_name)
+
+    # Also include any extra marketplaces from the effective result
+    for marketplace_name in effective.extra_marketplaces:
+        marketplaces_used.add(marketplace_name)
+
+    # Materialize each marketplace
+    for marketplace_name in marketplaces_used:
+        # Skip implicit marketplaces (claude-plugins-official)
+        from scc_cli.marketplace.constants import IMPLICIT_MARKETPLACES
+
+        if marketplace_name in IMPLICIT_MARKETPLACES:
+            continue
+
+        # Find source configuration from effective marketplaces (includes team sources for federated)
+        # This is the key change for T2a-24: effective_marketplaces comes from resolve_effective_config
+        source = effective_marketplaces.get(marketplace_name)
+        if source is None:
+            # Fallback to org config lookup for backwards compatibility
+            source = _find_marketplace_source(org_config, marketplace_name)
+        if source is None:
+            warnings.append(f"Marketplace '{marketplace_name}' not found in org config")
+            continue
+
+        try:
+            result = materialize_marketplace(
+                name=marketplace_name,
+                source=source,
+                project_dir=project_dir,
+                force_refresh=force_refresh,
+            )
+            materialized[marketplace_name] = {
+                "relative_path": result.relative_path,
+                "source_type": result.source_type,
+            }
+        except MaterializationError as e:
+            warnings.append(f"Failed to materialize '{marketplace_name}': {e}")
+
+    # ── Step 4: Render settings ──────────────────────────────────────────────
+    effective_dict = {
+        "enabled": effective.enabled,
+        "extra_marketplaces": effective.extra_marketplaces,
+    }
+    rendered = render_settings(effective_dict, materialized)
+
+    # ── Step 5: Merge with existing settings ─────────────────────────────────
+    merged = merge_settings(project_dir, rendered)
+
+    # ── Step 6: Prepare managed state ────────────────────────────────────────
+    managed_state = ManagedState(
+        managed_plugins=list(effective.enabled),
+        managed_marketplaces=[m.get("relative_path", "") for m in materialized.values()],
+        last_sync=datetime.now(timezone.utc),
+        org_config_url=org_config_url,
+        team_id=team_id,
+    )
+
+    # ── Step 7: Write files (unless dry_run) ─────────────────────────────────
+    settings_path = project_dir / ".claude" / "settings.local.json"
+
+    if not dry_run:
+        # Ensure .claude directory exists
+        claude_dir = project_dir / ".claude"
+        claude_dir.mkdir(parents=True, exist_ok=True)
+
+        # Write settings
+        settings_path.write_text(json.dumps(merged, indent=2))
+
+        # Save managed state
+        save_managed_state(project_dir, managed_state)
+
+    return SyncResult(
+        success=True,
+        plugins_enabled=list(effective.enabled),
+        marketplaces_materialized=list(materialized.keys()),
+        warnings=warnings,
+        settings_path=settings_path if not dry_run else None,
+    )
+
+
+def _load_existing_plugins(project_dir: Path) -> list[str]:
+    """Load existing plugins from settings.local.json."""
+    settings_path = project_dir / ".claude" / "settings.local.json"
+    if not settings_path.exists():
+        return []
+
+    try:
+        data: dict[str, Any] = json.loads(settings_path.read_text())
+        plugins = data.get("enabledPlugins", [])
+        if isinstance(plugins, list):
+            return [str(p) for p in plugins]
+        return []
+    except (json.JSONDecodeError, OSError):
+        return []
+
+
+def _find_marketplace_source(
+    org_config: OrganizationConfig, marketplace_name: str
+) -> MarketplaceSource | None:
+    """Find marketplace source configuration by name."""
+    if org_config.marketplaces is None:
+        return None
+
+    for name, source in org_config.marketplaces.items():
+        if name == marketplace_name:
+            return source
+
+    return None

scc_cli/marketplace/team_cache.py

@@ -0,0 +1,195 @@
+"""Team config caching for federated configurations (Phase 2).
+
+This module provides:
+- TeamCacheMeta: Metadata about cached team configurations
+- DEFAULT_TTL: How long cached configs are considered fresh (24h)
+- MAX_STALE_AGE: Maximum age for fallback to stale cache (7d)
+- Cache path utilities for team config storage
+
+Cache Design:
+    Team configs are cached under ~/.cache/scc/team_configs/
+    Each team has two files:
+    - {team_name}.json: The actual team config
+    - {team_name}.meta.json: Metadata (source, timestamps, SHA)
+
+Freshness Model:
+    - Fresh (age < DEFAULT_TTL): Use cached config directly
+    - Stale (TTL < age < MAX_STALE_AGE): Try refresh, fallback to cache
+    - Expired (age > MAX_STALE_AGE): Must fetch, no fallback allowed
+"""
+
+from __future__ import annotations
+
+from dataclasses import dataclass
+from datetime import datetime, timedelta, timezone
+from pathlib import Path
+from typing import Any
+
+# ─────────────────────────────────────────────────────────────────────────────
+# Constants
+# ─────────────────────────────────────────────────────────────────────────────
+
+# How long cached team configs are considered fresh
+DEFAULT_TTL: timedelta = timedelta(hours=24)
+
+# Maximum age for fallback to stale cache when fetch fails
+MAX_STALE_AGE: timedelta = timedelta(days=7)
+
+
+# ─────────────────────────────────────────────────────────────────────────────
+# Cache Metadata
+# ─────────────────────────────────────────────────────────────────────────────
+
+
+@dataclass
+class TeamCacheMeta:
+    """Metadata about a cached team configuration.
+
+    Tracks when and how a team config was fetched, enabling:
+    - Cache freshness decisions (is_fresh)
+    - Fallback policy (is_within_max_stale_age)
+    - Conditional fetching with ETags/commit SHAs
+
+    Attributes:
+        team_name: Team identifier
+        source_type: How config was fetched (github, git, url)
+        source_url: Where config was fetched from
+        fetched_at: When config was last fetched
+        commit_sha: Git commit SHA (for git/github sources)
+        etag: HTTP ETag (for URL sources)
+        branch: Git branch (for git/github sources)
+    """
+
+    team_name: str
+    source_type: str
+    source_url: str
+    fetched_at: datetime
+    commit_sha: str | None = None
+    etag: str | None = None
+    branch: str | None = None
+
+    @property
+    def age(self) -> timedelta:
+        """Calculate how old this cached config is.
+
+        Returns:
+            Time elapsed since fetched_at
+        """
+        now = datetime.now(timezone.utc)
+        # Handle timezone-naive datetimes
+        fetched = self.fetched_at
+        if fetched.tzinfo is None:
+            fetched = fetched.replace(tzinfo=timezone.utc)
+        return now - fetched
+
+    def is_fresh(self, ttl: timedelta = DEFAULT_TTL) -> bool:
+        """Check if cached config is still fresh.
+
+        Args:
+            ttl: Time-to-live threshold
+
+        Returns:
+            True if age < ttl, meaning cache can be used without refresh
+        """
+        return self.age < ttl
+
+    def is_within_max_stale_age(self, max_age: timedelta = MAX_STALE_AGE) -> bool:
+        """Check if stale cache can be used as fallback.
+
+        Args:
+            max_age: Maximum acceptable age for fallback
+
+        Returns:
+            True if age < max_age, meaning cache can be used when fetch fails
+        """
+        return self.age < max_age
+
+    def to_dict(self) -> dict[str, Any]:
+        """Serialize to dictionary for JSON storage.
+
+        Returns:
+            Dict with all fields, datetime as ISO format string
+        """
+        return {
+            "team_name": self.team_name,
+            "source_type": self.source_type,
+            "source_url": self.source_url,
+            "fetched_at": self.fetched_at.isoformat(),
+            "commit_sha": self.commit_sha,
+            "etag": self.etag,
+            "branch": self.branch,
+        }
+
+    @classmethod
+    def from_dict(cls, data: dict[str, Any]) -> TeamCacheMeta:
+        """Deserialize from dictionary loaded from JSON.
+
+        Args:
+            data: Dict with serialized cache metadata
+
+        Returns:
+            Restored TeamCacheMeta instance
+        """
+        fetched_at = data.get("fetched_at")
+        if isinstance(fetched_at, str):
+            fetched_at = datetime.fromisoformat(fetched_at)
+        else:
+            fetched_at = datetime.now(timezone.utc)
+
+        return cls(
+            team_name=data["team_name"],
+            source_type=data["source_type"],
+            source_url=data["source_url"],
+            fetched_at=fetched_at,
+            commit_sha=data.get("commit_sha"),
+            etag=data.get("etag"),
+            branch=data.get("branch"),
+        )
+
+
+# ─────────────────────────────────────────────────────────────────────────────
+# Cache Paths
+# ─────────────────────────────────────────────────────────────────────────────
+
+
+def get_team_cache_dir(cache_root: Path | None = None) -> Path:
+    """Get the directory for team config caches.
+
+    Args:
+        cache_root: Base cache directory (defaults to XDG cache path)
+
+    Returns:
+        Path to team_configs subdirectory
+    """
+    if cache_root is None:
+        from scc_cli.config import get_cache_dir
+
+        cache_root = get_cache_dir()
+
+    return cache_root / "team_configs"
+
+
+def get_team_config_cache_path(team_name: str, cache_root: Path | None = None) -> Path:
+    """Get the cache file path for a team's config.
+
+    Args:
+        team_name: Team identifier
+        cache_root: Base cache directory
+
+    Returns:
+        Path to {team_name}.json file
+    """
+    return get_team_cache_dir(cache_root) / f"{team_name}.json"
+
+
+def get_team_meta_cache_path(team_name: str, cache_root: Path | None = None) -> Path:
+    """Get the cache metadata file path for a team.
+
+    Args:
+        team_name: Team identifier
+        cache_root: Base cache directory
+
+    Returns:
+        Path to {team_name}.meta.json file
+    """
+    return get_team_cache_dir(cache_root) / f"{team_name}.meta.json"