@ayurak/aribot-cli 1.2.0 → 1.3.0

package/dist/cli.js

@@ -693,71 +693,370 @@ program
     .option('--findings', 'List security findings')
     .option('--dashboard', 'Show cloud security dashboard')
     .option('-s, --severity <level>', 'Filter findings by severity (critical, high, medium, low)')
+    .option('--dynamic-scan <account-id>', 'Run dynamic cloud scan')
+    .option('--unified-scan', 'Run unified scan with scope')
+    .option('--scope <type>', 'Scan scope: account, standard, control, policy, diagram, component', 'account')
+    .option('--scope-id <id>', 'ID for the scan scope')
+    .option('--rules', 'List scanner rules')
+    .option('--create-rule', 'Create a new scanner rule (interactive)')
+    .option('--sync-rules', 'Sync rules from cloud providers')
+    .option('--scanner-stats', 'Show scanner statistics')
+    .option('--remediate <policy-id>', 'Execute remediation for a policy')
+    .option('--remediate-preview <policy-id>', 'Preview remediation without applying')
+    .option('--account-id <id>', 'Cloud account ID for operations')
     .action(async (options) => {
     const spinner = ora('Scanning cloud security...').start();
     try {
         if (options.scan) {
             const provider = typeof options.scan === 'string' ? options.scan : undefined;
-            // Use security posture endpoint
-            const data = await apiRequest('/v2/compliances/dashboard/cloud-stats/' + (provider ? `?provider=${provider}` : ''));
+            // Get violations from unified-violations endpoint
+            let violationsUrl = '/v2/compliances/unified-violations/?limit=100';
+            if (provider) {
+                violationsUrl += `&platform=${provider}`;
+            }
+            const violationsData = await apiRequest(violationsUrl);
+            const violationsList = Array.isArray(violationsData) ? violationsData : (violationsData.results || violationsData.violations || []);
+            const totalViolations = violationsData.count || violationsList.length;
+            // Get cloud accounts count
+            let totalAccounts = 0;
+            try {
+                const customersData = await apiRequest('/v1/customers/');
+                const customers = customersData.results || [];
+                totalAccounts = customers.reduce((sum, c) => sum + (c.ac_count || 0), 0);
+            }
+            catch { /* ignore */ }
+            // Count by severity and platform
+            const severityCounts = { critical: 0, high: 0, medium: 0, low: 0 };
+            const platformCounts = {};
+            violationsList.forEach((v) => {
+                const sev = (v.severity || 'medium').toLowerCase();
+                if (sev in severityCounts)
+                    severityCounts[sev]++;
+                const platform = (v.platform || 'unknown').toLowerCase();
+                platformCounts[platform] = (platformCounts[platform] || 0) + 1;
+            });
             spinner.succeed('Cloud security scan complete!');
             console.log(chalk.bold('\nCloud Security Posture:\n'));
-            const stats = data.stats || data;
-            console.log(`  Security Score:   ${stats.security_score >= 80 ? chalk.green(stats.security_score + '%') : chalk.yellow(stats.security_score + '%' || 'N/A')}`);
-            console.log(`  Total Resources:  ${chalk.cyan(stats.total_resources || stats.resource_count || 0)}`);
-            console.log(`  Compliant:        ${chalk.green(stats.compliant_resources || stats.compliant || 0)}`);
-            console.log(`  Non-Compliant:    ${chalk.red(stats.non_compliant_resources || stats.non_compliant || 0)}`);
-            console.log(`  Critical Issues:  ${chalk.red(stats.critical_findings || stats.critical || 0)}`);
+            console.log(`  Connected Accounts: ${chalk.cyan(totalAccounts)}`);
+            console.log(`  Total Violations:   ${chalk.yellow(totalViolations)}`);
+            console.log(`  Critical Issues:    ${chalk.red(severityCounts.critical)}`);
+            console.log(`  High Issues:        ${chalk.yellow(severityCounts.high)}`);
+            console.log(`  Medium Issues:      ${chalk.blue(severityCounts.medium)}`);
             if (provider) {
-                console.log(`\n  Provider:         ${chalk.cyan(provider.toUpperCase())}`);
+                console.log(`\n  Provider:           ${chalk.cyan(provider.toUpperCase())}`);
             }
-            // Show provider breakdown if available
-            if (data.by_provider && !provider) {
-                console.log(chalk.bold('\nBy Provider:\n'));
-                Object.entries(data.by_provider).forEach(([p, s]) => {
-                    console.log(`  ${chalk.cyan(p.toUpperCase().padEnd(8))} Resources: ${s.count || 0} | Score: ${s.score || 'N/A'}%`);
+            // Show platform breakdown if scanning all
+            if (Object.keys(platformCounts).length > 0 && !provider) {
+                console.log(chalk.bold('\nBy Platform:\n'));
+                Object.entries(platformCounts)
+                    .sort((a, b) => b[1] - a[1])
+                    .forEach(([p, count]) => {
+                    console.log(`  ${chalk.cyan(p.toUpperCase().padEnd(10))} ${count} violations`);
                 });
             }
         }
         else if (options.findings) {
-            // Use top non-compliant assets endpoint
-            let url = '/v2/compliances/dashboard/top-assets/?limit=20';
+            // Use unified violations endpoint
+            let url = '/v2/compliances/unified-violations/?limit=20';
             if (options.severity) {
                 url += `&severity=${options.severity}`;
             }
             const data = await apiRequest(url);
             spinner.stop();
             console.log(chalk.bold('\nCloud Security Findings:\n'));
-            const findings = data.results || data.findings || [];
+            const findings = Array.isArray(data) ? data : (data.results || data.violations || data.findings || []);
             if (findings.length === 0) {
                 console.log(chalk.green('  No open findings! Your cloud is secure.'));
             }
             else {
                 const severityColors = {
                     critical: chalk.red,
+                    crit: chalk.red,
                     high: chalk.yellow,
                     medium: chalk.blue,
                     low: chalk.dim
                 };
                 findings.slice(0, 10).forEach((f) => {
-                    const color = severityColors[f.severity] || chalk.white;
-                    console.log(`  ${color(`[${f.severity?.toUpperCase()}]`)} ${f.title}`);
-                    console.log(chalk.dim(`    Resource: ${f.resource_type || 'N/A'} | Policy: ${f.policy || 'N/A'}`));
+                    const sev = (f.severity || 'medium').toLowerCase();
+                    const color = severityColors[sev] || chalk.white;
+                    const ruleName = f.rule_name || f.title || 'Unknown';
+                    const resource = f.resource_name || f.resource_type || 'N/A';
+                    const platform = (f.platform || 'N/A').toUpperCase();
+                    console.log(`  ${color(`[${sev.toUpperCase()}]`)} ${ruleName}`);
+                    console.log(chalk.dim(`    Resource: ${resource} | Platform: ${platform}`));
                 });
-                console.log(chalk.dim(`\nShowing ${Math.min(10, findings.length)} of ${findings.length} findings`));
+                const totalCount = data.count || findings.length;
+                console.log(chalk.dim(`\nShowing ${Math.min(10, findings.length)} of ${totalCount} findings`));
             }
         }
         else if (options.dashboard) {
-            const data = await apiRequest('/v2/compliances/dashboard/cloud-stats/');
+            // Get dashboard trends and violations count
+            const dashboardData = await apiRequest('/v2/compliances/dashboard/trends/');
+            const violationsData = await apiRequest('/v2/compliances/unified-violations/?limit=1');
+            const violationsCount = violationsData.count || (Array.isArray(violationsData) ? violationsData.length : 0);
             spinner.succeed('Dashboard loaded!');
             console.log(chalk.bold('\nCloud Security Dashboard:\n'));
-            console.log(`  Security Score:   ${data.security_score >= 80 ? chalk.green(data.security_score) : chalk.yellow(data.security_score || 'N/A')}`);
-            console.log(`  Total Resources:  ${chalk.cyan(data.total_resources || 0)}`);
-            console.log(`  Open Findings:    ${chalk.yellow(data.open_findings || 0)}`);
+            console.log(`  Fix Velocity:     ${chalk.green(dashboardData.fix_velocity || 'N/A')}`);
+            console.log(`  Time Range:       ${chalk.cyan(dashboardData.time_range || '7d')}`);
+            console.log(`  Resolved Issues:  ${chalk.green(dashboardData.total_resolved || 0)}`);
+            console.log(`  Avg Resolution:   ${dashboardData.avg_resolution_time_hours || 'N/A'}h`);
+            console.log(`  Open Violations:  ${chalk.yellow(violationsCount)}`);
+            // Show severity breakdown if available
+            if (dashboardData.by_severity) {
+                console.log(chalk.bold('\nResolved by Severity:\n'));
+                const sevColors = { critical: chalk.red, high: chalk.yellow, medium: chalk.blue, low: chalk.dim };
+                Object.entries(dashboardData.by_severity).forEach(([sev, count]) => {
+                    const color = sevColors[sev.toLowerCase()] || chalk.white;
+                    console.log(`  ${color(sev.toUpperCase().padEnd(10))} ${count}`);
+                });
+            }
+        }
+        else if (options.dynamicScan) {
+            // Dynamic cloud scan
+            spinner.text = 'Running dynamic cloud scan...';
+            const data = await apiRequest('/v2/compliances/dynamic-scan/execute/', {
+                method: 'POST',
+                body: JSON.stringify({ account_id: parseInt(options.dynamicScan) })
+            });
+            spinner.succeed('Dynamic scan initiated!');
+            console.log(chalk.bold('\nDynamic Scan Results:\n'));
+            console.log(`  Scan ID:      ${chalk.cyan(data.scan_id || 'N/A')}`);
+            console.log(`  Account ID:   ${options.dynamicScan}`);
+            console.log(`  Status:       ${chalk.green(data.status || 'initiated')}`);
+            console.log(`  Started At:   ${chalk.dim(data.started_at || 'now')}`);
+            if (data.findings_count) {
+                console.log(`  Findings:     ${chalk.yellow(data.findings_count)}`);
+            }
+            if (data.async) {
+                console.log(chalk.dim('\nScan running asynchronously. Check status with --dashboard'));
+            }
+        }
+        else if (options.unifiedScan) {
+            // Unified scan with scope
+            if (!options.scopeId && options.scope !== 'account') {
+                spinner.fail('--scope-id required for non-account scopes');
+                return;
+            }
+            spinner.text = `Running unified scan (${options.scope})...`;
+            const scanData = { scope: options.scope };
+            if (options.scope === 'account') {
+                scanData.account_id = options.accountId || (options.scopeId ? parseInt(options.scopeId) : undefined);
+            }
+            else if (options.scope === 'standard') {
+                scanData.standard_id = options.scopeId;
+            }
+            else if (options.scope === 'control') {
+                scanData.control_id = options.scopeId;
+            }
+            else if (options.scope === 'policy') {
+                scanData.policy_id = options.scopeId;
+            }
+            else if (options.scope === 'diagram') {
+                scanData.diagram_id = options.scopeId;
+            }
+            else if (options.scope === 'component') {
+                scanData.component_id = options.scopeId;
+            }
+            if (options.accountId) {
+                scanData.account_id = parseInt(options.accountId);
+            }
+            const data = await apiRequest('/v2/compliances/scan/execute/', {
+                method: 'POST',
+                body: JSON.stringify(scanData)
+            });
+            spinner.succeed('Unified scan complete!');
+            console.log(chalk.bold(`\nUnified Scan Results (${options.scope}):\n`));
+            console.log(`  Scan ID:        ${chalk.cyan(data.scan_id || 'N/A')}`);
+            console.log(`  Scope:          ${options.scope}`);
+            console.log(`  Status:         ${chalk.green(data.status || 'completed')}`);
+            const results = data.results || data;
+            console.log(`  Total Checked:  ${results.total_checks || results.total || 0}`);
+            console.log(`  Passed:         ${chalk.green(results.passed || 0)}`);
+            console.log(`  Failed:         ${chalk.red(results.failed || 0)}`);
+            if (results.compliance_score !== undefined) {
+                const score = results.compliance_score;
+                const scoreColor = score >= 80 ? chalk.green : score >= 60 ? chalk.yellow : chalk.red;
+                console.log(`  Score:          ${scoreColor(score + '%')}`);
+            }
+        }
+        else if (options.rules) {
+            // List scanner rules
+            spinner.text = 'Fetching scanner rules...';
+            let url = '/v2/compliances/scanner-rules/';
+            if (options.severity) {
+                url += `?severity=${options.severity}`;
+            }
+            const data = await apiRequest(url);
+            spinner.stop();
+            const rulesList = data.results || data.rules || [];
+            console.log(chalk.bold(`\nScanner Rules (${rulesList.length} total):\n`));
+            if (rulesList.length === 0) {
+                console.log(chalk.dim('  No scanner rules found.'));
+            }
+            else {
+                const severityColors = {
+                    critical: chalk.red,
+                    high: chalk.yellow,
+                    medium: chalk.blue,
+                    low: chalk.dim
+                };
+                rulesList.slice(0, 20).forEach((r) => {
+                    const color = severityColors[r.severity] || chalk.white;
+                    const enabled = r.enabled !== false ? chalk.green('✓') : chalk.red('✗');
+                    console.log(`  ${enabled} ${chalk.cyan((r.id + '').slice(0, 8).padEnd(8))} ${color(`[${(r.severity || 'medium').toUpperCase()}]`)} ${(r.name || 'N/A').slice(0, 40)}`);
+                    console.log(chalk.dim(`    Provider: ${r.provider || 'N/A'}`));
+                });
+            }
+        }
+        else if (options.createRule) {
+            // Interactive rule creation
+            spinner.stop();
+            console.log(chalk.bold('\nCreate Scanner Rule\n'));
+            const answers = await inquirer.prompt([
+                { type: 'input', name: 'name', message: 'Rule name:' },
+                { type: 'input', name: 'description', message: 'Description:' },
+                { type: 'list', name: 'severity', message: 'Severity:', choices: ['critical', 'high', 'medium', 'low'], default: 'medium' },
+                { type: 'list', name: 'provider', message: 'Provider:', choices: ['aws', 'azure', 'gcp', 'custom'], default: 'custom' }
+            ]);
+            const createSpinner = ora('Creating rule...').start();
+            const data = await apiRequest('/v2/compliances/scanner-rules/', {
+                method: 'POST',
+                body: JSON.stringify({
+                    name: answers.name,
+                    description: answers.description,
+                    severity: answers.severity,
+                    provider: answers.provider,
+                    enabled: true
+                })
+            });
+            createSpinner.succeed('Rule created successfully!');
+            console.log(`  ID:       ${chalk.cyan(data.id || 'N/A')}`);
+            console.log(`  Name:     ${data.name || answers.name}`);
+            console.log(`  Severity: ${data.severity || answers.severity}`);
+        }
+        else if (options.syncRules) {
+            // Sync rules from cloud providers
+            spinner.text = 'Syncing rules from cloud providers...';
+            const data = await apiRequest('/v2/compliances/scanner-rules/sync_from_providers/', {
+                method: 'POST',
+                body: JSON.stringify({})
+            });
+            spinner.succeed('Rules synced successfully!');
+            console.log(chalk.bold('\nSync Results:\n'));
+            console.log(`  AWS Rules:   ${chalk.cyan(data.aws_rules || data.aws || 0)}`);
+            console.log(`  Azure Rules: ${chalk.cyan(data.azure_rules || data.azure || 0)}`);
+            console.log(`  GCP Rules:   ${chalk.cyan(data.gcp_rules || data.gcp || 0)}`);
+            console.log(`  Total:       ${chalk.green(data.total || data.total_synced || 0)}`);
+        }
+        else if (options.scannerStats) {
+            // Scanner statistics
+            spinner.text = 'Fetching scanner statistics...';
+            const data = await apiRequest('/v2/compliances/scanner-rules/statistics/');
+            spinner.stop();
+            console.log(chalk.bold('\nScanner Statistics:\n'));
+            const stats = data.statistics || data;
+            console.log(`  Total Rules:     ${chalk.cyan(stats.total_rules || 0)}`);
+            console.log(`  Active Rules:    ${chalk.green(stats.active_rules || stats.enabled || 0)}`);
+            console.log(`  Total Scans:     ${stats.total_scans || 0}`);
+            console.log(`  Findings Today:  ${chalk.yellow(stats.findings_today || 0)}`);
+            if (stats.by_severity) {
+                console.log(chalk.bold('\nRules by Severity:\n'));
+                const severityColors = {
+                    critical: chalk.red,
+                    high: chalk.yellow,
+                    medium: chalk.blue,
+                    low: chalk.dim
+                };
+                Object.entries(stats.by_severity).forEach(([sev, count]) => {
+                    const color = severityColors[sev] || chalk.white;
+                    console.log(`  ${color(sev.toUpperCase().padEnd(10))} ${count}`);
+                });
+            }
+            if (stats.by_provider) {
+                console.log(chalk.bold('\nRules by Provider:\n'));
+                Object.entries(stats.by_provider).forEach(([prov, count]) => {
+                    console.log(`  ${chalk.cyan(prov.toUpperCase().padEnd(10))} ${count}`);
+                });
+            }
+        }
+        else if (options.remediate) {
+            // Execute remediation
+            if (!options.accountId) {
+                spinner.fail('--account-id required for remediation');
+                return;
+            }
+            spinner.text = 'Executing remediation...';
+            const data = await apiRequest('/v2/compliances/remediation-execution/execute/', {
+                method: 'POST',
+                body: JSON.stringify({
+                    policy_id: options.remediate,
+                    account_id: parseInt(options.accountId)
+                })
+            });
+            spinner.succeed('Remediation executed!');
+            console.log(chalk.bold('\nRemediation Results:\n'));
+            console.log(`  Policy ID:    ${chalk.cyan(options.remediate)}`);
+            console.log(`  Account ID:   ${options.accountId}`);
+            console.log(`  Status:       ${chalk.green(data.status || 'completed')}`);
+            console.log(`  Resources:    ${data.resources_affected || 0}`);
+            if (data.changes && data.changes.length > 0) {
+                console.log(chalk.bold('\nChanges Applied:\n'));
+                data.changes.slice(0, 5).forEach((change) => {
+                    console.log(`  ${chalk.green('✓')} ${change.description || change}`);
+                });
+            }
+        }
+        else if (options.remediatePreview) {
+            // Preview remediation
+            if (!options.accountId) {
+                spinner.fail('--account-id required for remediation preview');
+                return;
+            }
+            spinner.text = 'Generating remediation preview...';
+            const data = await apiRequest('/v2/compliances/remediation-execution/preview/', {
+                method: 'POST',
+                body: JSON.stringify({
+                    policy_id: options.remediatePreview,
+                    account_id: parseInt(options.accountId)
+                })
+            });
+            spinner.stop();
+            console.log(chalk.bold('\nRemediation Preview:\n'));
+            console.log(`  Policy ID:       ${chalk.cyan(options.remediatePreview)}`);
+            console.log(`  Account ID:      ${options.accountId}`);
+            console.log(`  Resources:       ${chalk.yellow(data.resources_affected || 0)}`);
+            console.log(`  Estimated Time:  ${chalk.dim(data.estimated_time || 'N/A')}`);
+            const changes = data.planned_changes || data.changes || [];
+            if (changes.length > 0) {
+                console.log(chalk.bold('\nPlanned Changes:\n'));
+                changes.slice(0, 10).forEach((change) => {
+                    console.log(`  ${chalk.yellow('→')} ${change.description || change.action || change}`);
+                    if (change.resource) {
+                        console.log(chalk.dim(`    Resource: ${change.resource}`));
+                    }
+                });
+            }
+            console.log(chalk.dim('\nRun with --remediate to apply these changes'));
         }
         else {
             spinner.stop();
-            console.log(chalk.yellow('Usage: aribot cloud-security [--scan [provider]] [--findings] [--dashboard]'));
+            console.log(chalk.bold('Cloud Security Posture Management (CSPM/CNAPP)\n'));
+            console.log(chalk.bold('Basic Commands'));
+            console.log(`  ${chalk.cyan('aribot cloud-security --scan')}                      Scan all cloud accounts`);
+            console.log(`  ${chalk.cyan('aribot cloud-security --scan aws')}                  Scan AWS only`);
+            console.log(`  ${chalk.cyan('aribot cloud-security --findings')}                  List security findings`);
+            console.log(`  ${chalk.cyan('aribot cloud-security --dashboard')}                 Show security dashboard`);
+            console.log(chalk.bold('\nScanner Commands'));
+            console.log(`  ${chalk.green('aribot cloud-security --dynamic-scan <account-id>')}   Run dynamic scan`);
+            console.log(`  ${chalk.green('aribot cloud-security --unified-scan --scope account --account-id 123')}`);
+            console.log(`  ${chalk.green('aribot cloud-security --unified-scan --scope standard --scope-id CIS-AWS')}`);
+            console.log(`  ${chalk.green('aribot cloud-security --rules')}                       List scanner rules`);
+            console.log(`  ${chalk.green('aribot cloud-security --create-rule')}                 Create custom rule`);
+            console.log(`  ${chalk.green('aribot cloud-security --sync-rules')}                  Sync from providers`);
+            console.log(`  ${chalk.green('aribot cloud-security --scanner-stats')}               Show statistics`);
+            console.log(chalk.bold('\nRemediation Commands'));
+            console.log(`  ${chalk.yellow('aribot cloud-security --remediate-preview <policy-id> --account-id 123')}`);
+            console.log(`  ${chalk.yellow('aribot cloud-security --remediate <policy-id> --account-id 123')}`);
         }
     }
     catch (error) {
@@ -787,8 +1086,44 @@ program
     .action(async (options) => {
     if (options.methodologies) {
         const spinner = ora('Fetching methodologies...').start();
+        // Static fallback data for when backend engine is unavailable
+        const fallbackData = {
+            available_methodologies: [
+                { name: 'STRIDE', description: 'Spoofing, Tampering, Repudiation, Info Disclosure, DoS, Elevation' },
+                { name: 'PASTA', description: 'Process for Attack Simulation and Threat Analysis' },
+                { name: 'NIST', description: 'NIST Cybersecurity Framework threat modeling' },
+                { name: 'MITRE ATT&CK', description: 'Adversarial tactics, techniques, and common knowledge' },
+                { name: 'OWASP', description: 'Open Web Application Security Project methodology' },
+                { name: 'AI_ENHANCED', description: 'AI-powered predictive threat analysis' },
+            ],
+            risk_levels: [
+                { name: 'Critical', description: 'Immediate action required - system compromise likely' },
+                { name: 'High', description: 'Significant risk - address within 24-48 hours' },
+                { name: 'Medium', description: 'Moderate risk - address within 1-2 weeks' },
+                { name: 'Low', description: 'Minor risk - address in regular maintenance' },
+                { name: 'Info', description: 'Informational finding - no immediate action needed' },
+            ],
+            compliance_frameworks: [
+                { name: 'SOC2', description: 'Service Organization Control 2' },
+                { name: 'ISO27001', description: 'Information Security Management' },
+                { name: 'PCI-DSS', description: 'Payment Card Industry Data Security Standard' },
+                { name: 'GDPR', description: 'General Data Protection Regulation' },
+                { name: 'HIPAA', description: 'Health Insurance Portability and Accountability' },
+                { name: 'NIST-CSF', description: 'NIST Cybersecurity Framework' },
+                { name: 'CIS', description: 'Center for Internet Security Controls' },
+                { name: 'FedRAMP', description: 'Federal Risk and Authorization Management' },
+            ],
+            engine_capabilities: {
+                multi_framework_analysis: true,
+                ai_threat_prediction: true,
+                real_time_scanning: true,
+                attack_path_analysis: true,
+                compliance_mapping: true,
+                automated_remediation: true,
+            }
+        };
         try {
-            const data = await apiRequest('/v2/threat-engine/threat-models/');
+            const data = await apiRequest('/v2/threat-modeling/threat-engine/threat-models/');
             spinner.stop();
             console.log(chalk.bold('\nThreat Modeling Methodologies:\n'));
             (data.available_methodologies || []).forEach((m) => {
@@ -809,15 +1144,38 @@ program
             });
         }
         catch (error) {
-            spinner.fail('Failed to fetch methodologies');
-            console.error(error);
+            // Use fallback data for 404/503 errors (endpoint not deployed or engine unavailable)
+            if (error.message?.includes('404') || error.message?.includes('503') || error.message?.includes('unavailable') || error.message?.includes('Not Found')) {
+                spinner.stop();
+                console.log(chalk.dim('(Using cached methodology data)\n'));
+                console.log(chalk.bold('\nThreat Modeling Methodologies:\n'));
+                fallbackData.available_methodologies.forEach((m) => {
+                    console.log(`  ${chalk.cyan(m.name.toUpperCase().padEnd(14))} ${chalk.dim(m.description)}`);
+                });
+                console.log(chalk.bold('\nRisk Levels:\n'));
+                fallbackData.risk_levels.forEach((r) => {
+                    console.log(`  ${chalk.yellow(r.name.padEnd(12))} ${chalk.dim(r.description)}`);
+                });
+                console.log(chalk.bold('\nCompliance Frameworks:\n'));
+                fallbackData.compliance_frameworks.forEach((f) => {
+                    console.log(`  ${chalk.green(f.name.padEnd(12))} ${chalk.dim(f.description)}`);
+                });
+                console.log(chalk.bold('\nEngine Capabilities:\n'));
+                Object.entries(fallbackData.engine_capabilities).forEach(([key, value]) => {
+                    console.log(`  ${value ? chalk.green('✓') : chalk.red('✗')} ${key.replace(/_/g, ' ')}`);
+                });
+            }
+            else {
+                spinner.fail('Failed to fetch methodologies');
+                console.error(error);
+            }
         }
         return;
     }
     if (options.intelligence) {
         const spinner = ora('Fetching threat intelligence...').start();
         try {
-            const data = await apiRequest('/v2/threat-engine/threat-intelligence/');
+            const data = await apiRequest('/v2/threat-modeling/threat-engine/threat-intelligence/');
             spinner.stop();
             console.log(chalk.bold('\nThreat Intelligence Summary:\n'));
             const intel = data.threat_intelligence || {};
@@ -867,34 +1225,36 @@ program
                 console.log(chalk.dim('Upload a diagram with at least 2 connected components.'));
                 return;
             }
-            // Generate attack paths
-            const data = await apiRequest('/v2/threat-engine/attack-paths/', {
+            // Generate attack paths using the correct v2 endpoint (same as frontend)
+            const data = await apiRequest(`/v2/threat-modeling/diagrams/${fullId}/generate-attack-paths/`, {
                 method: 'POST',
                 body: JSON.stringify({
-                    components,
-                    connections,
-                    source_node: components[0]?.id || '',
-                    target_node: components[components.length - 1]?.id || ''
+                    scope: 'single',
+                    include_compliance: true,
+                    save: true
                 })
             });
             spinner.succeed('Attack path analysis complete!');
+            // Response matches frontend: { status: 'success', paths: [...] }
+            const paths = data.paths || data.attack_paths || [];
             console.log(chalk.bold('\nAttack Path Analysis:\n'));
-            console.log(`  Source:        ${chalk.cyan(data.analysis_summary?.source_node || 'N/A')}`);
-            console.log(`  Target:        ${chalk.cyan(data.analysis_summary?.target_node || 'N/A')}`);
-            console.log(`  Paths Found:   ${chalk.yellow(data.analysis_summary?.total_paths_found || 0)}`);
-            const paths = data.attack_paths || [];
+            console.log(`  Paths Found:   ${chalk.yellow(paths.length)}`);
+            console.log(`  Status:        ${chalk.cyan(data.status || 'completed')}`);
             if (paths.length > 0) {
                 console.log(chalk.bold('\nIdentified Attack Paths:\n'));
                 paths.slice(0, 5).forEach((p, i) => {
-                    const riskColor = p.risk_score > 0.5 ? chalk.red : p.risk_score > 0.2 ? chalk.yellow : chalk.green;
-                    console.log(`  ${chalk.bold(`Path ${i + 1}:`)} ${p.source_node} → ${p.target_node}`);
-                    console.log(`    Risk Score:  ${riskColor((p.risk_score * 100).toFixed(1) + '%')}`);
-                    console.log(`    Likelihood:  ${chalk.cyan((p.likelihood * 100).toFixed(1) + '%')}`);
-                    console.log(`    Impact:      ${chalk.yellow((p.impact * 100).toFixed(1) + '%')}`);
-                    console.log(`    Steps:       ${chalk.dim(p.steps?.length || 0)}`);
+                    const riskScore = p.risk_score || 0;
+                    const riskColor = riskScore >= 80 ? chalk.red : riskScore >= 60 ? chalk.yellow : chalk.green;
+                    const riskLabel = riskScore >= 80 ? 'CRITICAL' : riskScore >= 60 ? 'HIGH' : riskScore >= 40 ? 'MEDIUM' : 'LOW';
+                    console.log(`  ${chalk.bold(`Path ${i + 1}:`)} ${p.title || 'Attack Path'}`);
+                    console.log(`    Risk:        ${riskColor(riskLabel)} (${riskScore}%)`);
+                    console.log(`    Description: ${chalk.dim(p.description || 'N/A')}`);
+                    console.log(`    Steps:       ${chalk.cyan(p.steps?.length || 0)}`);
+                    console.log(`    Mitigations: ${chalk.green(p.mitigations?.length || 0)}`);
                     if (p.steps?.length > 0) {
+                        console.log(chalk.dim('    Attack Chain:'));
                         p.steps.forEach((s, j) => {
-                            console.log(chalk.dim(`      ${j + 1}. ${s.from_node} → ${s.to_node}`));
+                            console.log(chalk.dim(`      ${j + 1}. ${s.action || s.from_node} → ${s.target_component_name || s.to_node}`));
                         });
                     }
                     console.log();
@@ -966,7 +1326,7 @@ program
                 severity: t.severity,
                 category: t.category
             }));
-            const data = await apiRequest('/v2/threat-engine/security-requirements/', {
+            const data = await apiRequest('/v2/threat-modeling/threat-engine/security-requirements/', {
                 method: 'POST',
                 body: JSON.stringify({
                     threats,
@@ -1627,17 +1987,17 @@ program
     const spinner = ora('Processing...').start();
     try {
         if (options.providers) {
-            const data = await apiRequest('/v2/digital-twin/providers/');
+            const data = await apiRequest('/v2/threat-modeling/digital-twin/providers/');
             spinner.stop();
             console.log(chalk.bold('\nCloud Providers:\n'));
             (data.results || data || []).forEach((p) => {
                 const status = p.connected ? chalk.green('✓') : chalk.red('✗');
-                console.log(`  ${status} ${chalk.cyan(p.name)}  ${chalk.dim(p.provider_type || p.type)}`);
+                console.log(`  ${status} ${chalk.cyan(p.name)}  ${chalk.dim(p.display_name || p.provider_type || p.type || '')}`);
             });
         }
         else if (options.resources) {
             const provider = typeof options.resources === 'string' ? `?provider=${options.resources}` : '';
-            const data = await apiRequest(`/v2/digital-twin/resources/${provider}`);
+            const data = await apiRequest(`/v2/threat-modeling/digital-twin/resources/${provider}`);
             spinner.stop();
             console.log(chalk.bold('\nCloud Resources:\n'));
             (data.results || data || []).slice(0, 20).forEach((r) => {
@@ -1645,7 +2005,7 @@ program
             });
         }
         else if (options.sync) {
-            const data = await apiRequest('/v2/digital-twin/sync/', {
+            const data = await apiRequest('/v2/threat-modeling/digital-twin/sync/', {
                 method: 'POST',
                 body: JSON.stringify({ provider_id: options.sync })
             });
@@ -1653,7 +2013,7 @@ program
             console.log(`  Resources discovered: ${chalk.cyan(data.resources_found || 0)}`);
         }
         else if (options.discover) {
-            const data = await apiRequest('/v2/digital-twin/discover/', {
+            const data = await apiRequest('/v2/threat-modeling/digital-twin/discover/', {
                 method: 'POST',
                 body: JSON.stringify({ provider_id: options.discover })
             });
@@ -1661,7 +2021,7 @@ program
             console.log(`  Resources found: ${chalk.cyan(data.resources_count || 0)}`);
         }
         else if (options.health) {
-            const data = await apiRequest('/v2/digital-twin/health/');
+            const data = await apiRequest('/v2/threat-modeling/digital-twin/health/');
             spinner.stop();
             console.log(chalk.bold('\nDigital Twin Health:\n'));
             console.log(`  Status:       ${data.healthy ? chalk.green('Healthy') : chalk.red('Unhealthy')}`);
@@ -1881,29 +2241,38 @@ program
     const spinner = ora('Loading dashboard...').start();
     try {
         if (options.overview || (!options.recent && !options.risk && !options.billing)) {
-            const data = await apiRequest('/v2/threat-modeling/dashboard/');
+            // Use v1 dashboard endpoint which exists
+            const data = await apiRequest('/v1/tm/dashboard/status-progress-compliance/');
             spinner.stop();
             console.log(chalk.bold('\nDashboard Overview:\n'));
-            console.log(`  Total Diagrams:     ${chalk.cyan(data.total_diagrams || 0)}`);
-            console.log(`  Total Threats:      ${chalk.yellow(data.total_threats || 0)}`);
-            console.log(`  Critical Threats:   ${chalk.red(data.critical_threats || 0)}`);
-            console.log(`  Compliance Score:   ${chalk.green((data.compliance_score || 0) + '%')}`);
+            const overall = data.overall_compliance || {};
+            const status = overall.status || {};
+            console.log(`  Unresolved:         ${chalk.yellow(status.unresolved || 0)}`);
+            console.log(`  In Progress:        ${chalk.cyan(status.in_progress || 0)}`);
+            console.log(`  Resolved:           ${chalk.green(status.resolved || 0)}`);
+            console.log(`  With Resource:      ${chalk.blue((overall.with_resource || 0) + '%')}`);
         }
         else if (options.recent) {
-            const data = await apiRequest('/v2/threat-modeling/dashboard/recent-activity/');
+            // Use v1 dashboard activity endpoint
+            const data = await apiRequest('/v1/tm/dashboard/status-progress-compliance/');
             spinner.stop();
             console.log(chalk.bold('\nRecent Activity:\n'));
-            (data.activities || data || []).slice(0, 10).forEach((a) => {
-                console.log(`  ${chalk.dim(a.timestamp?.slice(0, 16) || '')}  ${a.action}  ${chalk.cyan(a.resource || '')}`);
+            const progress = data.status_progress || [];
+            progress.slice(0, 7).forEach((p) => {
+                console.log(`  ${chalk.dim(p.date)} (${p.day})  Unresolved: ${chalk.yellow(p.statuses?.unresolved || 0)}  Resolved: ${chalk.green(p.statuses?.resolved || 0)}`);
             });
         }
         else if (options.risk) {
-            const data = await apiRequest('/v2/threat-modeling/dashboard/risk-summary/');
+            // Use v1 dashboard for risk summary
+            const data = await apiRequest('/v1/tm/dashboard/status-progress-compliance/');
             spinner.stop();
             console.log(chalk.bold('\nRisk Summary:\n'));
-            console.log(`  Overall Risk:   ${data.overall_risk === 'high' ? chalk.red(data.overall_risk) : chalk.yellow(data.overall_risk || 'N/A')}`);
-            console.log(`  Open Threats:   ${chalk.yellow(data.open_threats || 0)}`);
-            console.log(`  Mitigated:      ${chalk.green(data.mitigated_threats || 0)}`);
+            const status = data.overall_compliance?.status || {};
+            const total = (status.unresolved || 0) + (status.in_progress || 0) + (status.resolved || 0);
+            const riskLevel = status.unresolved > total * 0.5 ? 'high' : status.unresolved > total * 0.2 ? 'medium' : 'low';
+            console.log(`  Overall Risk:   ${riskLevel === 'high' ? chalk.red(riskLevel) : chalk.yellow(riskLevel)}`);
+            console.log(`  Open Threats:   ${chalk.yellow(status.unresolved || 0)}`);
+            console.log(`  Mitigated:      ${chalk.green(status.resolved || 0)}`);
         }
         else if (options.billing) {
             const data = await apiRequest('/v1/developer/billing/');