@cometchat/skills-cli - npm Package Compare versions

Comparing version 2.3.0 to 2.4.0

dist/registry/v6/features/catalog.json

@@ -12,3 +12,5 @@ {
     "package-install": "Requires installing an additional npm package. The UI Kit's initiateAfterLogin() auto-calls enableCalling() which detects the calls SDK and wires up call buttons. Currently calls only.",
-    "component-swap": "Requires replacing one UI Kit component with a drop-in variant. One-line change. The SDK currently ships exactly one such variant (CometChatCompactMessageComposer for rich text formatting); more variants will become catalog entries here as the SDK adds them."
+    "component-swap": "Requires replacing one UI Kit component with a drop-in variant. One-line change. The SDK currently ships exactly one such variant (CometChatCompactMessageComposer for rich text formatting); more variants will become catalog entries here as the SDK adds them.",
+    "moderation": "Backend moderation feature with configuration. Like 'extension' but takes a `config` payload (keyword lists, sensitivity levels, severity thresholds, quarantine action). The CLI's `apply-feature` walks an interactive config-collection step, then POSTs to /apps/{appId}/extensions/{id}/config plus the standard enable POST. `config_schema` describes the fields the user must supply.",
+    "calls-feature": "Calls SDK feature configured via CallSettingsBuilder (no backend toggle, no extension). The CLI's `apply-feature` command verifies the calls SDK is installed and points the agent at the matching per-family reference doc (e.g. `cometchat-react-calls/references/raise-hand.md`). The `reference_topic` field maps to the file slug; the `settings_flag` field is the CallSettingsBuilder method involved. Idempotency: persisted in state.applied_features."
   },
@@ -122,10 +124,114 @@ "features": [
       "id": "moderation",
-      "name": "Moderation",
+      "name": "Moderation (overview)",
       "type": "default",
-      "description": "Automatic content filtering. Requires moderation rule configuration in the dashboard.",
+      "description": "Umbrella entry — moderation is the family of seven configurable backend features below (profanity-filter, image-moderation, data-masking, sentiment-analysis, xss-filter, slow-mode, virus-malware-scanner). Each has its own catalog entry of type 'moderation' that the CLI can configure interactively.",
       "components": ["CometChatMessageList"],
-      "docs_topic": "core-features#moderation",
-      "requires_dashboard_setup": true
+      "docs_topic": "core-features#moderation"
     },
     {
+      "id": "profanity-filter",
+      "name": "Profanity Filter",
+      "type": "moderation",
+      "extension_id": "profanity-filter",
+      "description": "Detects and filters profane language from messages. Replaces matched words with asterisks or rejects the message outright.",
+      "components": ["CometChatMessageList", "CometChatMessageComposer"],
+      "config_schema": {
+        "case_sensitivity": { "type": "enum", "values": ["case-sensitive", "case-insensitive"], "default": "case-insensitive", "prompt": "Case sensitivity for keyword matching?" },
+        "filter_profanities_for": { "type": "enum", "values": ["all", "specific-roles"], "default": "all", "prompt": "Apply filter to all users or specific roles?" },
+        "specific_roles": { "type": "array<string>", "when": { "filter_profanities_for": "specific-roles" }, "prompt": "Comma-separated role names" },
+        "profane_words": { "type": "array<string>", "default": [], "prompt": "Custom words to add to the profanity list (comma-separated; empty for default list only)" },
+        "white_listed_words": { "type": "array<string>", "default": [], "prompt": "Words to whitelist that would otherwise match (comma-separated)" },
+        "rule": { "type": "enum", "values": ["mask", "drop", "tag"], "default": "mask", "prompt": "What to do with matched messages? (mask: replace with ****, drop: reject, tag: deliver but flag)" }
+      },
+      "docs_topic": "extensions#profanity-filter"
+    },
+    {
+      "id": "image-moderation",
+      "name": "Image Moderation",
+      "type": "moderation",
+      "extension_id": "image-moderation",
+      "description": "Detects unsafe content in images (NSFW, violence, etc.) using ML-based classification. Configurable confidence thresholds.",
+      "components": ["CometChatMessageList"],
+      "config_schema": {
+        "explicit_threshold": { "type": "number", "min": 0, "max": 100, "default": 70, "prompt": "Threshold for explicit content (0-100; lower = stricter)" },
+        "suggestive_threshold": { "type": "number", "min": 0, "max": 100, "default": 70, "prompt": "Threshold for suggestive content" },
+        "violence_threshold": { "type": "number", "min": 0, "max": 100, "default": 70, "prompt": "Threshold for violent content" },
+        "drugs_threshold": { "type": "number", "min": 0, "max": 100, "default": 70, "prompt": "Threshold for drug-related content" },
+        "rule": { "type": "enum", "values": ["block", "blur", "tag"], "default": "blur", "prompt": "Action for flagged images?" }
+      },
+      "docs_topic": "extensions#image-moderation"
+    },
+    {
+      "id": "data-masking",
+      "name": "Data Masking",
+      "type": "moderation",
+      "extension_id": "data-masking",
+      "description": "Masks PII (phone numbers, email addresses, credit cards, SSNs) in messages. Critical for healthcare, fintech, marketplace apps.",
+      "components": ["CometChatMessageList"],
+      "config_schema": {
+        "mask_phone": { "type": "boolean", "default": true, "prompt": "Mask phone numbers?" },
+        "mask_email": { "type": "boolean", "default": true, "prompt": "Mask email addresses?" },
+        "mask_ssn": { "type": "boolean", "default": false, "prompt": "Mask US Social Security Numbers?" },
+        "mask_credit_card": { "type": "boolean", "default": true, "prompt": "Mask credit card numbers?" },
+        "custom_patterns": { "type": "array<{name:string,regex:string}>", "default": [], "prompt": "Custom regex patterns to mask (e.g. internal IDs)" },
+        "rule": { "type": "enum", "values": ["mask", "drop", "tag"], "default": "mask", "prompt": "Action for messages containing matched data?" }
+      },
+      "docs_topic": "extensions#data-masking"
+    },
+    {
+      "id": "sentiment-analysis",
+      "name": "Sentiment Analysis",
+      "type": "moderation",
+      "extension_id": "sentiment-analysis",
+      "description": "Detects negative sentiment / toxicity in messages. Optionally surfaces a 'View confidently' confirm dialog before showing flagged messages.",
+      "components": ["CometChatMessageList"],
+      "config_schema": {
+        "threshold": { "type": "number", "min": 0, "max": 100, "default": 50, "prompt": "Sentiment threshold (0-100; lower = more aggressive)" },
+        "rule": { "type": "enum", "values": ["confirm-view", "tag", "drop"], "default": "confirm-view", "prompt": "Action for flagged messages?" }
+      },
+      "docs_topic": "extensions#sentiment-analysis"
+    },
+    {
+      "id": "xss-filter",
+      "name": "XSS Filter",
+      "type": "moderation",
+      "extension_id": "xss-filter",
+      "description": "Strips HTML/script injection from messages before delivery. Critical for chat surfaces that render rich text.",
+      "components": ["CometChatMessageList"],
+      "config_schema": {
+        "strict_mode": { "type": "boolean", "default": true, "prompt": "Strict mode (blocks all HTML; safer)?" },
+        "allowed_tags": { "type": "array<string>", "default": ["b", "i", "u", "strong", "em"], "when": { "strict_mode": false }, "prompt": "Allowed HTML tags (when strict mode off)" }
+      },
+      "docs_topic": "extensions#xss-filter"
+    },
+    {
+      "id": "slow-mode",
+      "name": "Slow Mode",
+      "type": "moderation",
+      "extension_id": "slow-mode",
+      "description": "Rate-limits how often a user can post in a conversation/group. Reduces spam in busy channels.",
+      "components": ["CometChatMessageComposer"],
+      "config_schema": {
+        "interval_seconds": { "type": "number", "min": 1, "max": 3600, "default": 5, "prompt": "Minimum seconds between messages from the same user" },
+        "applies_to": { "type": "enum", "values": ["all", "groups-only", "specific-groups"], "default": "groups-only", "prompt": "Apply slow mode where?" },
+        "specific_group_ids": { "type": "array<string>", "when": { "applies_to": "specific-groups" }, "prompt": "Group IDs (comma-separated)" }
+      },
+      "docs_topic": "extensions#slow-mode"
+    },
+    {
+      "id": "virus-malware-scanner",
+      "name": "Virus / Malware Scanner",
+      "type": "moderation",
+      "extension_id": "virus-malware-scanner",
+      "description": "Scans uploaded files (images, documents, archives) for malware before delivery. Required for healthcare, legal, finance apps.",
+      "components": ["CometChatMessageList", "CometChatMessageComposer"],
+      "config_schema": {
+        "scan_images": { "type": "boolean", "default": true, "prompt": "Scan image uploads?" },
+        "scan_documents": { "type": "boolean", "default": true, "prompt": "Scan document uploads (.pdf, .docx, etc.)?" },
+        "scan_archives": { "type": "boolean", "default": true, "prompt": "Scan archive uploads (.zip, .tar.gz)?" },
+        "rule": { "type": "enum", "values": ["block", "quarantine", "tag"], "default": "block", "prompt": "Action when malware detected?" }
+      },
+      "docs_topic": "extensions#virus-malware-scanner"
+    },
+    {
       "id": "bitly",
@@ -360,4 +466,64 @@ "name": "Bitly URL Shortening",
       "docs_topic": "core-features#rich-text-formatting"
+    },
+    {
+      "id": "call-recording",
+      "name": "Call Recording",
+      "type": "calls-feature",
+      "description": "Record calls to cloud storage. Built into Calls SDK; configured via CallSettingsBuilder. Server-side recording requires the Recording add-on enabled on your CometChat plan.",
+      "settings_flag": "startRecordingOnCallStart",
+      "reference_topic": "recording",
+      "platforms_supported": ["web", "react-native", "angular", "ios", "android-v5", "android-v6", "flutter-v5", "flutter-v6"],
+      "docs_topic": "calls/recording"
+    },
+    {
+      "id": "screen-share",
+      "name": "Screen Sharing",
+      "type": "calls-feature",
+      "description": "Share screen during a call. Built into Calls SDK; configured via CallSettingsBuilder hideScreenShareButton flag. Mobile platforms have OS-level gating (iOS broadcast extension, Android MediaProjection).",
+      "settings_flag": "hideScreenShareButton",
+      "reference_topic": "screen-sharing",
+      "platforms_supported": ["web", "react-native", "angular", "ios", "android-v5", "android-v6", "flutter-v5", "flutter-v6"],
+      "docs_topic": "calls/screen-sharing"
+    },
+    {
+      "id": "virtual-background",
+      "name": "Virtual Background",
+      "type": "calls-feature",
+      "description": "Blur or replace the user's background during a call. JavaScript-only feature — not available on iOS/Android/RN browsers (mobile webviews don't ship the ML Kit needed).",
+      "settings_flag": "hideVirtualBackgroundButton",
+      "reference_topic": "virtual-background",
+      "platforms_supported": ["web", "angular"],
+      "docs_topic": "calls/virtual-background"
+    },
+    {
+      "id": "raise-hand",
+      "name": "Raise Hand",
+      "type": "calls-feature",
+      "description": "Participants can raise a hand to signal they want to speak. Built into Calls SDK.",
+      "settings_flag": "hideRaiseHandButton",
+      "reference_topic": "raise-hand",
+      "platforms_supported": ["web", "react-native", "angular", "ios", "android-v5", "android-v6", "flutter-v5", "flutter-v6"],
+      "docs_topic": "calls/raise-hand"
+    },
+    {
+      "id": "picture-in-picture",
+      "name": "Picture-in-Picture",
+      "type": "calls-feature",
+      "description": "Minimize an in-progress call into a floating window so the user can keep using the rest of your app (or other apps on mobile). Per-platform constraints — iOS PIP requires a multitasking-capable iPad or iOS 15+ iPhone, Android requires API 26+.",
+      "settings_flag": "hidePIPButton",
+      "reference_topic": "picture-in-picture",
+      "platforms_supported": ["web", "react-native", "angular", "ios", "android-v5", "android-v6", "flutter-v5", "flutter-v6"],
+      "docs_topic": "calls/picture-in-picture"
+    },
+    {
+      "id": "idle-timeout",
+      "name": "Idle Timeout",
+      "type": "calls-feature",
+      "description": "Auto-end a call after a configurable period of no activity. Prevents zombie calls + unbounded billing. Built into Calls SDK; configured via CallSettingsBuilder callIdleTime.",
+      "settings_flag": "callIdleTime",
+      "reference_topic": "idle-timeout",
+      "platforms_supported": ["web", "react-native", "angular", "ios", "android-v5", "android-v6", "flutter-v5", "flutter-v6"],
+      "docs_topic": "calls/idle-timeout"
     }
   ]
 }

package.json

 {
   "name": "@cometchat/skills-cli",
-  "version": "2.3.0",
+  "version": "2.4.0",
   "description": "CLI for the CometChat skills v3 architecture — auth, provision, detect, apply, verify CometChat integrations in React/Next.js/React-Router/Astro/Expo/React-Native/Angular/Android/iOS/Flutter projects.",
@@ -5,0 +5,0 @@ "type": "module",

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

751744

21.41%

Lines of code

15930

22.23%

Worsened metrics

Number of low supply chain risk alerts

41

7.89%

Number of medium supply chain risk alerts

6

50%

No dependency changes