@celilo/cli 0.3.23 → 0.3.24

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@celilo/cli",
-  "version": "0.3.23",
+  "version": "0.3.24",
   "description": "Celilo — home lab orchestration CLI",
   "type": "module",
   "bin": {

package/src/cli/commands/system-update.ts

@@ -248,15 +248,45 @@ function formatResult(result: SystemUpdateResult): string {
     `  self-update: ${result.selfUpdate.performed ? `${result.selfUpdate.from} → ${result.selfUpdate.to}` : `(${result.selfUpdate.reason})`}`,
   );
   lines.push(`  backups: ${result.backupsCreated ? 'created' : 'skipped'}`);
-  lines.push('');
-  for (const m of result.modules) {
-    const tag =
-      m.step === 'done' ? '✓' : m.step === 'failed' ? '✗' : m.step === 'skipped' ? '↳' : '?';
-    const change =
-      m.fromVersion === m.toVersion ? m.fromVersion : `${m.fromVersion} → ${m.toVersion}`;
-    lines.push(`  ${tag} ${m.moduleId} (${change}) — ${m.step}`);
-    if (m.error) lines.push(`      ${m.error}`);
-    if (m.skipReason) lines.push(`      ${m.skipReason}`);
+
+  // Surface audit findings inline. DRIFT means "something is drifting
+  // but it didn't block the update" — without listing the findings the
+  // operator has no idea what; they'd have to run `celilo system audit`
+  // as a follow-up. Show them here so it's a single round-trip.
+  // BLOCKED also gets the listing (the orchestrator already short-
+  // circuited to skip the run, but the operator still needs to know
+  // why — formatResult is the friendly path for that too).
+  if (result.audit.findings.length > 0) {
+    lines.push('');
+    const drift = result.audit.findings.filter((f) => f.severity === 'drift');
+    const blocked = result.audit.findings.filter((f) => f.severity === 'blocked');
+    if (blocked.length > 0) {
+      lines.push(`  BLOCKED (${blocked.length}):`);
+      for (const f of blocked) {
+        lines.push(`    ✗ [${f.category}] ${f.subject}: ${f.message}`);
+        if (f.remediation) lines.push(`        → ${f.remediation}`);
+      }
+    }
+    if (drift.length > 0) {
+      lines.push(`  Drift findings (${drift.length}, informational):`);
+      for (const f of drift) {
+        lines.push(`    ▸ [${f.category}] ${f.subject}: ${f.message}`);
+        if (f.remediation) lines.push(`        → ${f.remediation}`);
+      }
+    }
+  }
+
+  if (result.modules.length > 0) {
+    lines.push('');
+    for (const m of result.modules) {
+      const tag =
+        m.step === 'done' ? '✓' : m.step === 'failed' ? '✗' : m.step === 'skipped' ? '↳' : '?';
+      const change =
+        m.fromVersion === m.toVersion ? m.fromVersion : `${m.fromVersion} → ${m.toVersion}`;
+      lines.push(`  ${tag} ${m.moduleId} (${change}) — ${m.step}`);
+      if (m.error) lines.push(`      ${m.error}`);
+      if (m.skipReason) lines.push(`      ${m.skipReason}`);
+    }
   }
   return lines.join('\n');
 }