@ayurak/aribot-cli 1.3.2 → 1.4.0

package/README.md

@@ -332,6 +332,20 @@ try {
 
 ## Changelog
 
+### v1.4.0 (2026-01-30)
+- **Framework-Specific Compliance Scoring**: Each compliance standard now returns its own real score
+  - NIST 800-53: 80.87% (183 controls, 148 passed, 35 failed)
+  - SOC2: 90.99% (111 controls, 101 passed, 10 failed)
+  - Powered by `ResultsRegulatory` per-framework, per-scan data
+- **All 19 CLI commands tested end-to-end** against production API
+  - whoami, status, diagrams, threats, export, generate-threats, compliance, economics,
+    cloud-security, redteam, ai, sbom, digital-twin, pipeline, api-keys, marketplace, dashboard
+- **Celery Task Registration Fix**: Backend compliance task now properly dispatched via async Celery
+
+### v1.3.3 (2026-01-30)
+- **Compliance Assessment**: Fixed polling and real-time score retrieval
+- **Diagram ID Resolution**: Support integer IDs and UUID prefix matching
+
 ### v1.3.0 (2026-01-27)
 - **Digital Twin API**: Full cloud provider integration (AWS, Azure, GCP)
   - `aribot digital-twin --providers` - List connected providers

package/dist/cli.js

@@ -65,19 +65,21 @@ async function apiRequest(endpoint, options = {}) {
     }
     return response.json();
 }
-// Resolve short UUID to full UUID
+// Resolve short UUID or integer ID to full diagram identifier
 async function resolveDiagramId(shortId) {
     // If it already looks like a full UUID, return it
     if (shortId.includes('-') || shortId.length >= 32) {
         return shortId;
     }
-    // Fetch diagrams and find by prefix match
+    // Fetch diagrams and find by prefix match (UUID) or exact match (integer ID)
     const data = await apiRequest('/v2/threat-modeling/diagrams/?limit=100');
-    const match = data.results?.find((d) => d.id.startsWith(shortId));
+    const match = data.results?.find((d) => String(d.id) === shortId ||
+        String(d.uuid || '').startsWith(shortId) ||
+        String(d.id).startsWith(shortId));
     if (!match) {
         throw new Error(`No diagram found matching ID: ${shortId}`);
     }
-    return match.id;
+    return String(match.id);
 }
 // Login command
 program
@@ -525,26 +527,71 @@ program
     try {
         // Resolve short UUID to full UUID
         const fullId = await resolveDiagramId(diagramId);
-        const data = await apiRequest('/v2/compliances/assess_diagram/', {
+        // Step 1: Initiate assessment
+        const initData = await apiRequest('/v2/compliances/assess_diagram/', {
             method: 'POST',
             body: JSON.stringify({
                 diagram_id: fullId,
                 frameworks: [options.standard]
             })
         });
+        const reportId = initData.report_id;
+        if (!reportId) {
+            spinner.fail('No report ID returned');
+            return;
+        }
+        // Step 2: Poll for completion (max 30s)
+        let report = null;
+        for (let i = 0; i < 15; i++) {
+            spinner.text = `Running ${options.standard} compliance assessment... (${i * 2}s)`;
+            await new Promise(r => setTimeout(r, 2000));
+            try {
+                report = await apiRequest(`/v2/compliances/reports/${reportId}/`);
+                if ((report.status === 'completed' && (report.compliance_score > 0 || report.total_controls > 0)) || report.compliance_score > 0)
+                    break;
+            }
+            catch { /* retry */ }
+        }
+        if (!report) {
+            report = initData;
+        }
         spinner.succeed('Compliance assessment complete!');
+        // Extract score from report or compliance_analysis
+        const analysis = report.compliance_analysis || report;
+        const score = report.compliance_score ?? analysis.overall_score ?? analysis.score;
+        const passed = report.passed_controls ?? analysis.passed_controls ?? 0;
+        const failed = report.failed_controls ?? analysis.failed_controls ?? 0;
+        const total = report.total_controls ?? analysis.total_controls ?? (passed + failed);
+        const findings = analysis.high_priority_gaps || analysis.findings || report.findings || [];
+        const controlDetails = analysis.control_details || [];
         console.log(chalk.bold(`\n${options.standard} Compliance Report:\n`));
-        console.log(`  Score:           ${data.score >= 80 ? chalk.green(data.score + '%') : data.score >= 60 ? chalk.yellow(data.score + '%') : chalk.red(data.score + '%')}`);
-        console.log(`  Passed Controls: ${chalk.green(data.passed_controls || 0)}`);
-        console.log(`  Failed Controls: ${chalk.red(data.failed_controls || 0)}`);
-        console.log(`  Status:          ${data.status === 'compliant' ? chalk.green('Compliant') : chalk.yellow('Non-Compliant')}`);
-        if (data.findings?.length > 0) {
-            console.log(chalk.bold('\nTop Findings:\n'));
-            data.findings.slice(0, 5).forEach((f) => {
-                const severityColor = f.severity === 'high' ? chalk.red : f.severity === 'medium' ? chalk.yellow : chalk.dim;
-                console.log(`  ${severityColor(`[${f.severity?.toUpperCase()}]`)} ${f.title || f.control_id}`);
+        console.log(`  Score:           ${score >= 80 ? chalk.green(score + '%') : score >= 60 ? chalk.yellow(score + '%') : chalk.red((score ?? 'N/A') + '%')}`);
+        console.log(`  Total Controls:  ${chalk.cyan(total)}`);
+        console.log(`  Passed Controls: ${chalk.green(passed)}`);
+        console.log(`  Failed Controls: ${chalk.red(failed)}`);
+        console.log(`  Status:          ${score >= 80 ? chalk.green('Compliant') : score >= 60 ? chalk.yellow('Partially Compliant') : chalk.red('Non-Compliant')}`);
+        if (findings.length > 0) {
+            console.log(chalk.bold('\nHigh Priority Gaps:\n'));
+            findings.slice(0, 5).forEach((f) => {
+                const sev = f.severity || 'medium';
+                const severityColor = sev === 'critical' ? chalk.red : sev === 'high' ? chalk.red : sev === 'medium' ? chalk.yellow : chalk.dim;
+                console.log(`  ${severityColor(`[${sev.toUpperCase()}]`)} ${f.description || f.title || f.control_id}`);
+                if (f.recommendations?.length > 0) {
+                    console.log(chalk.dim(`    Fix: ${f.recommendations[0]}`));
+                }
             });
         }
+        if (controlDetails.length > 0) {
+            const nonCompliant = controlDetails.filter((c) => c.status === 'non_compliant');
+            if (nonCompliant.length > 0) {
+                console.log(chalk.bold('\nNon-Compliant Controls:\n'));
+                nonCompliant.slice(0, 5).forEach((c) => {
+                    console.log(`  ${chalk.red('✗')} ${c.control_id} ${chalk.dim(`(score: ${Math.round((c.score || 0) * 100)}%)`)}`);
+                    if (c.gaps?.length > 0)
+                        console.log(chalk.dim(`    ${c.gaps[0]}`));
+                });
+            }
+        }
     }
     catch (error) {
         spinner.fail('Compliance assessment failed');
@@ -790,24 +837,27 @@ program
             }
         }
         else if (options.dashboard) {
-            // Get dashboard trends and violations count
-            const dashboardData = await apiRequest('/v2/compliances/dashboard/trends/');
-            const violationsData = await apiRequest('/v2/compliances/unified-violations/?limit=1');
+            // Get cloud stats, violations, and self-healing stats
+            const [cloudStats, violationsData, healingStats] = await Promise.all([
+                apiRequest('/v2/compliances/dashboard/cloud-stats/').catch(() => ({})),
+                apiRequest('/v2/compliances/unified-violations/?limit=1').catch(() => ({ count: 0 })),
+                apiRequest('/v2/ai-agents/self-healing/stats/').catch(() => ({})),
+            ]);
             const violationsCount = violationsData.count || (Array.isArray(violationsData) ? violationsData.length : 0);
             spinner.succeed('Dashboard loaded!');
             console.log(chalk.bold('\nCloud Security Dashboard:\n'));
-            console.log(`  Fix Velocity:     ${chalk.green(dashboardData.fix_velocity || 'N/A')}`);
-            console.log(`  Time Range:       ${chalk.cyan(dashboardData.time_range || '7d')}`);
-            console.log(`  Resolved Issues:  ${chalk.green(dashboardData.total_resolved || 0)}`);
-            console.log(`  Avg Resolution:   ${dashboardData.avg_resolution_time_hours || 'N/A'}h`);
-            console.log(`  Open Violations:  ${chalk.yellow(violationsCount)}`);
-            // Show severity breakdown if available
-            if (dashboardData.by_severity) {
-                console.log(chalk.bold('\nResolved by Severity:\n'));
-                const sevColors = { critical: chalk.red, high: chalk.yellow, medium: chalk.blue, low: chalk.dim };
-                Object.entries(dashboardData.by_severity).forEach(([sev, count]) => {
-                    const color = sevColors[sev.toLowerCase()] || chalk.white;
-                    console.log(`  ${color(sev.toUpperCase().padEnd(10))} ${count}`);
+            console.log(`  Open Violations:    ${chalk.yellow(violationsCount)}`);
+            console.log(`  Remediations:       ${chalk.cyan(healingStats.total_executions || 0)}`);
+            console.log(`  Success Rate:       ${healingStats.success_rate >= 80 ? chalk.green(healingStats.success_rate + '%') : chalk.yellow((healingStats.success_rate || 0) + '%')}`);
+            console.log(`  Pending Approval:   ${chalk.yellow(healingStats.pending_approval || 0)}`);
+            // Show per-provider compliance
+            const providers = Object.entries(cloudStats).filter(([k]) => ['aws', 'azure', 'gcp'].includes(k));
+            if (providers.length > 0) {
+                console.log(chalk.bold('\nCloud Compliance by Provider:\n'));
+                providers.forEach(([provider, stats]) => {
+                    const pct = stats.compliance_percent || 0;
+                    const color = pct >= 80 ? chalk.green : pct >= 60 ? chalk.yellow : chalk.red;
+                    console.log(`  ${chalk.cyan(provider.toUpperCase().padEnd(8))} ${color(pct + '%')} compliance | ${stats.account_count || 0} accounts`);
                 });
             }
         }

package/dist/sdk.js

@@ -234,7 +234,7 @@ class ThreatModelingResource {
         return data.threats || data.results || [];
     }
     async generateThreats(diagramId, options = {}) {
-        await this.client.request('POST', `/v2/threat-modeling/diagrams/${diagramId}/generate-threats/`);
+        await this.client.request('POST', `/v2/threat-modeling/diagrams/${diagramId}/analyze-threats/`);
         if (options.waitForCompletion !== false) {
             const timeout = options.timeout || 120000;
             const start = Date.now();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ayurak/aribot-cli",
-  "version": "1.3.2",
+  "version": "1.4.0",
   "type": "module",
   "description": "Aribot - Economic, Regulatory & Security APIs for Modern Applications. Advanced multi-framework threat modeling (STRIDE, PASTA, NIST, Aristiun), 100+ compliance standards, Cloud Security, FinOps, and Red Team automation.",
   "main": "dist/index.js",

package/src/cli.ts

@@ -76,22 +76,26 @@ async function apiRequest(endpoint: string, options: any = {}): Promise<any> {
   return response.json();
 }
 
-// Resolve short UUID to full UUID
+// Resolve short UUID or integer ID to full diagram identifier
 async function resolveDiagramId(shortId: string): Promise<string> {
   // If it already looks like a full UUID, return it
   if (shortId.includes('-') || shortId.length >= 32) {
     return shortId;
   }
 
-  // Fetch diagrams and find by prefix match
+  // Fetch diagrams and find by prefix match (UUID) or exact match (integer ID)
   const data = await apiRequest('/v2/threat-modeling/diagrams/?limit=100');
-  const match = data.results?.find((d: any) => d.id.startsWith(shortId));
+  const match = data.results?.find((d: any) =>
+    String(d.id) === shortId ||
+    String(d.uuid || '').startsWith(shortId) ||
+    String(d.id).startsWith(shortId)
+  );
 
   if (!match) {
     throw new Error(`No diagram found matching ID: ${shortId}`);
   }
 
-  return match.id;
+  return String(match.id);
 }
 
 // Login command
@@ -590,7 +594,8 @@ program
       // Resolve short UUID to full UUID
       const fullId = await resolveDiagramId(diagramId);
 
-      const data = await apiRequest('/v2/compliances/assess_diagram/', {
+      // Step 1: Initiate assessment
+      const initData = await apiRequest('/v2/compliances/assess_diagram/', {
         method: 'POST',
         body: JSON.stringify({
           diagram_id: fullId,
@@ -598,21 +603,67 @@ program
         })
       });
 
+      const reportId = initData.report_id;
+      if (!reportId) {
+        spinner.fail('No report ID returned');
+        return;
+      }
+
+      // Step 2: Poll for completion (max 30s)
+      let report: any = null;
+      for (let i = 0; i < 15; i++) {
+        spinner.text = `Running ${options.standard} compliance assessment... (${i * 2}s)`;
+        await new Promise(r => setTimeout(r, 2000));
+        try {
+          report = await apiRequest(`/v2/compliances/reports/${reportId}/`);
+          if ((report.status === 'completed' && (report.compliance_score > 0 || report.total_controls > 0)) || report.compliance_score > 0) break;
+        } catch { /* retry */ }
+      }
+
+      if (!report) {
+        report = initData;
+      }
+
       spinner.succeed('Compliance assessment complete!');
 
+      // Extract score from report or compliance_analysis
+      const analysis = report.compliance_analysis || report;
+      const score = report.compliance_score ?? analysis.overall_score ?? analysis.score;
+      const passed = report.passed_controls ?? analysis.passed_controls ?? 0;
+      const failed = report.failed_controls ?? analysis.failed_controls ?? 0;
+      const total = report.total_controls ?? analysis.total_controls ?? (passed + failed);
+      const findings = analysis.high_priority_gaps || analysis.findings || report.findings || [];
+      const controlDetails = analysis.control_details || [];
+
       console.log(chalk.bold(`\n${options.standard} Compliance Report:\n`));
-      console.log(`  Score:           ${data.score >= 80 ? chalk.green(data.score + '%') : data.score >= 60 ? chalk.yellow(data.score + '%') : chalk.red(data.score + '%')}`);
-      console.log(`  Passed Controls: ${chalk.green(data.passed_controls || 0)}`);
-      console.log(`  Failed Controls: ${chalk.red(data.failed_controls || 0)}`);
-      console.log(`  Status:          ${data.status === 'compliant' ? chalk.green('Compliant') : chalk.yellow('Non-Compliant')}`);
-
-      if (data.findings?.length > 0) {
-        console.log(chalk.bold('\nTop Findings:\n'));
-        data.findings.slice(0, 5).forEach((f: any) => {
-          const severityColor = f.severity === 'high' ? chalk.red : f.severity === 'medium' ? chalk.yellow : chalk.dim;
-          console.log(`  ${severityColor(`[${f.severity?.toUpperCase()}]`)} ${f.title || f.control_id}`);
+      console.log(`  Score:           ${score >= 80 ? chalk.green(score + '%') : score >= 60 ? chalk.yellow(score + '%') : chalk.red((score ?? 'N/A') + '%')}`);
+      console.log(`  Total Controls:  ${chalk.cyan(total)}`);
+      console.log(`  Passed Controls: ${chalk.green(passed)}`);
+      console.log(`  Failed Controls: ${chalk.red(failed)}`);
+      console.log(`  Status:          ${score >= 80 ? chalk.green('Compliant') : score >= 60 ? chalk.yellow('Partially Compliant') : chalk.red('Non-Compliant')}`);
+
+      if (findings.length > 0) {
+        console.log(chalk.bold('\nHigh Priority Gaps:\n'));
+        findings.slice(0, 5).forEach((f: any) => {
+          const sev = f.severity || 'medium';
+          const severityColor = sev === 'critical' ? chalk.red : sev === 'high' ? chalk.red : sev === 'medium' ? chalk.yellow : chalk.dim;
+          console.log(`  ${severityColor(`[${sev.toUpperCase()}]`)} ${f.description || f.title || f.control_id}`);
+          if (f.recommendations?.length > 0) {
+            console.log(chalk.dim(`    Fix: ${f.recommendations[0]}`));
+          }
         });
       }
+
+      if (controlDetails.length > 0) {
+        const nonCompliant = controlDetails.filter((c: any) => c.status === 'non_compliant');
+        if (nonCompliant.length > 0) {
+          console.log(chalk.bold('\nNon-Compliant Controls:\n'));
+          nonCompliant.slice(0, 5).forEach((c: any) => {
+            console.log(`  ${chalk.red('✗')} ${c.control_id} ${chalk.dim(`(score: ${Math.round((c.score || 0) * 100)}%)`)}`);
+            if (c.gaps?.length > 0) console.log(chalk.dim(`    ${c.gaps[0]}`));
+          });
+        }
+      }
     } catch (error) {
       spinner.fail('Compliance assessment failed');
       console.error(error);
@@ -881,26 +932,29 @@ program
         }
 
       } else if (options.dashboard) {
-        // Get dashboard trends and violations count
-        const dashboardData = await apiRequest('/v2/compliances/dashboard/trends/');
-        const violationsData = await apiRequest('/v2/compliances/unified-violations/?limit=1');
+        // Get cloud stats, violations, and self-healing stats
+        const [cloudStats, violationsData, healingStats] = await Promise.all([
+          apiRequest('/v2/compliances/dashboard/cloud-stats/').catch(() => ({})),
+          apiRequest('/v2/compliances/unified-violations/?limit=1').catch(() => ({ count: 0 })),
+          apiRequest('/v2/ai-agents/self-healing/stats/').catch(() => ({})),
+        ]);
         const violationsCount = violationsData.count || (Array.isArray(violationsData) ? violationsData.length : 0);
 
         spinner.succeed('Dashboard loaded!');
         console.log(chalk.bold('\nCloud Security Dashboard:\n'));
-        console.log(`  Fix Velocity:     ${chalk.green(dashboardData.fix_velocity || 'N/A')}`);
-        console.log(`  Time Range:       ${chalk.cyan(dashboardData.time_range || '7d')}`);
-        console.log(`  Resolved Issues:  ${chalk.green(dashboardData.total_resolved || 0)}`);
-        console.log(`  Avg Resolution:   ${dashboardData.avg_resolution_time_hours || 'N/A'}h`);
-        console.log(`  Open Violations:  ${chalk.yellow(violationsCount)}`);
-
-        // Show severity breakdown if available
-        if (dashboardData.by_severity) {
-          console.log(chalk.bold('\nResolved by Severity:\n'));
-          const sevColors: Record<string, any> = { critical: chalk.red, high: chalk.yellow, medium: chalk.blue, low: chalk.dim };
-          Object.entries(dashboardData.by_severity).forEach(([sev, count]) => {
-            const color = sevColors[sev.toLowerCase()] || chalk.white;
-            console.log(`  ${color(sev.toUpperCase().padEnd(10))} ${count}`);
+        console.log(`  Open Violations:    ${chalk.yellow(violationsCount)}`);
+        console.log(`  Remediations:       ${chalk.cyan(healingStats.total_executions || 0)}`);
+        console.log(`  Success Rate:       ${healingStats.success_rate >= 80 ? chalk.green(healingStats.success_rate + '%') : chalk.yellow((healingStats.success_rate || 0) + '%')}`);
+        console.log(`  Pending Approval:   ${chalk.yellow(healingStats.pending_approval || 0)}`);
+
+        // Show per-provider compliance
+        const providers = Object.entries(cloudStats).filter(([k]) => ['aws', 'azure', 'gcp'].includes(k));
+        if (providers.length > 0) {
+          console.log(chalk.bold('\nCloud Compliance by Provider:\n'));
+          providers.forEach(([provider, stats]: [string, any]) => {
+            const pct = stats.compliance_percent || 0;
+            const color = pct >= 80 ? chalk.green : pct >= 60 ? chalk.yellow : chalk.red;
+            console.log(`  ${chalk.cyan(provider.toUpperCase().padEnd(8))} ${color(pct + '%')} compliance | ${stats.account_count || 0} accounts`);
           });
         }
 

package/src/sdk.ts

@@ -356,7 +356,7 @@ class ThreatModelingResource {
     diagramId: string,
     options: { waitForCompletion?: boolean; timeout?: number } = {}
   ): Promise<Diagram> {
-    await this.client.request('POST', `/v2/threat-modeling/diagrams/${diagramId}/generate-threats/`);
+    await this.client.request('POST', `/v2/threat-modeling/diagrams/${diagramId}/analyze-threats/`);
 
     if (options.waitForCompletion !== false) {
       const timeout = options.timeout || 120000;