@chainpatrol/cli 0.1.0 → 0.2.0

package/dist/{breakdown-JVN66HY3.js → breakdown-PBH5NX6P.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-H7UKKLCV.js";
+} from "./chunk-KMILLX3U.js";
 import "./chunk-EEG7T6WT.js";
 import "./chunk-U73SABXK.js";
 

package/dist/{chunk-D2QGXYXZ.js → chunk-6FIJ4NU4.js}

@@ -9,7 +9,7 @@ import {
 import {
   DateTime,
   createApiClient
-} from "./chunk-H7UKKLCV.js";
+} from "./chunk-KMILLX3U.js";
 
 // src/presets/index.ts
 var PRESETS = [

package/dist/{chunk-H7UKKLCV.js → chunk-KMILLX3U.js}

@@ -6560,7 +6560,8 @@ function createApiClient(options) {
         limit: input.limit ?? 10,
         cursor: input.cursor,
         status: input.status,
-        searchQuery: input.searchQuery
+        searchQuery: input.searchQuery,
+        reportedByCustomer: input.reportedByCustomer
       });
     }
   };

package/dist/cli.js

@@ -241,11 +241,13 @@ var HELP = {
     description: "List recent reports for an organization.",
     usage: "chainpatrol reports list --org <slug> [options]",
     options: [
-      "--org <slug>          Organization slug",
-      "--limit <n>           Page size (1-20)",
-      "--cursor <id>         Pagination cursor",
-      "--status <s>          Filter by report status",
-      "--search <q>          Search query"
+      "--org <slug>             Organization slug",
+      "--limit <n>              Page size (1-20)",
+      "--cursor <id>            Pagination cursor",
+      "--status <s>             Filter by report status",
+      "--search <q>             Search query",
+      "--reported-by-customer   Show only customer-submitted reports",
+      "--no-reported-by-customer Show only non-customer reports"
     ]
   },
   queues: {
@@ -388,6 +390,11 @@ ${getTopLevelHelp()}
 `, {
   importMeta: import.meta,
   version: "0.1.0",
+  // Boolean flags without an explicit `default` should resolve to `undefined`
+  // when not passed (rather than meow's default of `false`), so handlers can
+  // distinguish "flag omitted" from "flag explicitly set to false". Flags that
+  // declare their own `default` below take precedence over this.
+  booleanDefault: void 0,
   flags: {
     json: { type: "boolean", default: false },
     output: { type: "string" },
@@ -418,6 +425,7 @@ ${getTopLevelHelp()}
     cursor: { type: "number" },
     status: { type: "string" },
     search: { type: "string" },
+    reportedByCustomer: { type: "boolean" },
     attachmentUrl: { type: "string" },
     contactInfo: { type: "string" },
     externalSubmissionLink: { type: "string" },
@@ -525,12 +533,12 @@ function parseAttachmentUrls() {
 }
 async function handleConfigsList(org) {
   if (jsonMode) {
-    const { listConfigsJson } = await import("./list-json-TPBLJBD3.js");
+    const { listConfigsJson } = await import("./list-json-GTST5CRN.js");
     await listConfigsJson({ org });
     return;
   }
   const { render } = await import("ink");
-  const { default: ConfigsList } = await import("./list-IBMM562A.js");
+  const { default: ConfigsList } = await import("./list-IZT5P7II.js");
   const { default: React } = await import("react");
   render(React.createElement(ConfigsList, { org }));
 }
@@ -617,7 +625,7 @@ async function main() {
     case "detections": {
       const org = await resolveOrg();
       if (subcommand === "healthcheck") {
-        const { runDetectionsHealthcheck } = await import("./healthcheck-7DR5MGEQ.js");
+        const { runDetectionsHealthcheck } = await import("./healthcheck-URZRXICK.js");
         await runDetectionsHealthcheck({
           org,
           source: cli.flags.source,
@@ -632,7 +640,7 @@ async function main() {
         break;
       }
       if (subcommand === "validate") {
-        const { runDetectionsValidate } = await import("./validate-PI7GPT5I.js");
+        const { runDetectionsValidate } = await import("./validate-VQKKFNBO.js");
         await runDetectionsValidate({
           org,
           source: cli.flags.source,
@@ -647,7 +655,7 @@ async function main() {
         break;
       }
       if (subcommand === "drift") {
-        const { runDetectionsDrift } = await import("./drift-VRZKQC4P.js");
+        const { runDetectionsDrift } = await import("./drift-UDNSOP2S.js");
         await runDetectionsDrift({
           org,
           source: cli.flags.source,
@@ -661,7 +669,7 @@ async function main() {
         break;
       }
       if (subcommand === "run") {
-        const { runDetectionsRun } = await import("./run-PABQKATZ.js");
+        const { runDetectionsRun } = await import("./run-V66OGZ3W.js");
         await runDetectionsRun({
           org,
           configId: cli.flags.configId,
@@ -680,7 +688,7 @@ async function main() {
           break;
         }
         if (action === "run") {
-          const { runDetectionsRun } = await import("./run-PABQKATZ.js");
+          const { runDetectionsRun } = await import("./run-V66OGZ3W.js");
           await runDetectionsRun({
             org,
             configId: cli.flags.configId,
@@ -698,7 +706,7 @@ async function main() {
             throw new Error("detections configs update requires --config-id");
           }
           const configPatch = getConfigPatchFromSetFlags();
-          const { runDetectionsConfigsUpdate } = await import("./configs-update-BK2S6AZ6.js");
+          const { runDetectionsConfigsUpdate } = await import("./configs-update-OVEREFCP.js");
           await runDetectionsConfigsUpdate({
             org,
             configId: cli.flags.configId,
@@ -725,7 +733,7 @@ async function main() {
     case "metrics": {
       const org = await resolveOrg();
       if (subcommand === "summary") {
-        const { runMetricsSummary } = await import("./summary-YG5NYIOA.js");
+        const { runMetricsSummary } = await import("./summary-SUWVXO7Y.js");
         await runMetricsSummary({
           org,
           from: cli.flags.from,
@@ -737,7 +745,7 @@ async function main() {
         break;
       }
       if (subcommand === "found") {
-        const { runMetricsFound } = await import("./found-4O3AISNI.js");
+        const { runMetricsFound } = await import("./found-SJVDAINM.js");
         await runMetricsFound({
           org,
           from: cli.flags.from,
@@ -754,7 +762,7 @@ async function main() {
         if (!by || !["day", "type", "brand"].includes(by)) {
           throw new Error("metrics breakdown requires --by <day|type|brand>");
         }
-        const { runMetricsBreakdown } = await import("./breakdown-JVN66HY3.js");
+        const { runMetricsBreakdown } = await import("./breakdown-PBH5NX6P.js");
         await runMetricsBreakdown({
           org,
           by,
@@ -774,13 +782,14 @@ async function main() {
     case "reports": {
       if (subcommand === "list") {
         const org = await resolveOrg();
-        const { runReportsList } = await import("./list-6L7XR4SZ.js");
+        const { runReportsList } = await import("./list-V5OVJ5NG.js");
         await runReportsList({
           org,
           limit: cli.flags.limit,
           cursor: cli.flags.cursor,
           status: cli.flags.status,
           searchQuery: cli.flags.search,
+          reportedByCustomer: cli.flags.reportedByCustomer,
           json: jsonMode,
           outputFormat: cliContext.outputFormat,
           explain: cliContext.explain
@@ -789,7 +798,7 @@ async function main() {
       }
       if (subcommand === "create") {
         const org = await tryResolveOrg();
-        const { runReportsCreate } = await import("./create-4SQUBQI7.js");
+        const { runReportsCreate } = await import("./create-C7H3L7TU.js");
         await runReportsCreate({
           org,
           title: cli.flags.title,
@@ -813,7 +822,7 @@ async function main() {
     }
     case "queues": {
       if (subcommand === "snapshot") {
-        const { runQueuesSnapshot } = await import("./snapshot-JEVDTE74.js");
+        const { runQueuesSnapshot } = await import("./snapshot-TZHS7XQX.js");
         await runQueuesSnapshot({
           org: cli.flags.org,
           all: cli.flags.all,
@@ -831,7 +840,7 @@ async function main() {
     }
     case "presets": {
       if (subcommand === "list") {
-        const { runPresetsList } = await import("./list-HZAHEHDM.js");
+        const { runPresetsList } = await import("./list-3JBC4637.js");
         await runPresetsList({ outputFormat: cliContext.outputFormat });
         break;
       }
@@ -842,7 +851,7 @@ async function main() {
           );
         }
         const org = await resolveOrg();
-        const { runPresetsRun } = await import("./run-U62KVNTH.js");
+        const { runPresetsRun } = await import("./run-MUMSMG4V.js");
         await runPresetsRun({
           presetId: action,
           org,
@@ -859,12 +868,12 @@ async function main() {
     case "setup":
     case "install":
     case "i": {
-      const { setupSkill } = await import("./setup-skill-U24CJZ6T.js");
+      const { setupSkill } = await import("./setup-skill-SIWP3KFS.js");
       setupSkill({ json: jsonMode });
       break;
     }
     case "uninstall": {
-      const { uninstallSkill } = await import("./setup-skill-U24CJZ6T.js");
+      const { uninstallSkill } = await import("./setup-skill-SIWP3KFS.js");
       uninstallSkill({ json: jsonMode });
       break;
     }

package/dist/{configs-update-BK2S6AZ6.js → configs-update-OVEREFCP.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-H7UKKLCV.js";
+} from "./chunk-KMILLX3U.js";
 import "./chunk-EEG7T6WT.js";
 import "./chunk-U73SABXK.js";
 

package/dist/{create-4SQUBQI7.js → create-C7H3L7TU.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-H7UKKLCV.js";
+} from "./chunk-KMILLX3U.js";
 import "./chunk-EEG7T6WT.js";
 import "./chunk-U73SABXK.js";
 

package/dist/{drift-VRZKQC4P.js → drift-UDNSOP2S.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-H7UKKLCV.js";
+} from "./chunk-KMILLX3U.js";
 import "./chunk-EEG7T6WT.js";
 import "./chunk-U73SABXK.js";
 

package/dist/{found-4O3AISNI.js → found-SJVDAINM.js}

@@ -5,7 +5,7 @@ import {
 import {
   DateTime,
   createApiClient
-} from "./chunk-H7UKKLCV.js";
+} from "./chunk-KMILLX3U.js";
 import "./chunk-EEG7T6WT.js";
 import "./chunk-U73SABXK.js";
 

package/dist/{healthcheck-7DR5MGEQ.js → healthcheck-URZRXICK.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-H7UKKLCV.js";
+} from "./chunk-KMILLX3U.js";
 import "./chunk-EEG7T6WT.js";
 import "./chunk-U73SABXK.js";
 

package/dist/{list-HZAHEHDM.js → list-3JBC4637.js}

@@ -1,12 +1,12 @@
 import {
   PRESETS
-} from "./chunk-D2QGXYXZ.js";
+} from "./chunk-6FIJ4NU4.js";
 import "./chunk-E2LAMILJ.js";
 import {
   printOutput,
   toCsvRows
 } from "./chunk-VFT3TD3E.js";
-import "./chunk-H7UKKLCV.js";
+import "./chunk-KMILLX3U.js";
 import "./chunk-EEG7T6WT.js";
 import "./chunk-U73SABXK.js";
 

package/dist/{list-IBMM562A.js → list-IZT5P7II.js}

@@ -1,6 +1,6 @@
 import {
   createApiClient
-} from "./chunk-H7UKKLCV.js";
+} from "./chunk-KMILLX3U.js";
 import {
   ErrorDisplay,
   Spinner

package/dist/{list-6L7XR4SZ.js → list-V5OVJ5NG.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-H7UKKLCV.js";
+} from "./chunk-KMILLX3U.js";
 import "./chunk-EEG7T6WT.js";
 import "./chunk-U73SABXK.js";
 
@@ -18,6 +18,7 @@ function toReportRow(report) {
     id: report.id,
     title: report.title,
     status: report.status ?? "TODO",
+    reportedByCustomer: report.reportedByCustomer,
     createdAt: report.createdAt,
     updatedAt: report.updatedAt,
     assets: report.proposals.length,
@@ -39,7 +40,8 @@ async function runReportsList(options) {
     limit,
     cursor: options.cursor,
     status: options.status,
-    searchQuery: options.searchQuery
+    searchQuery: options.searchQuery,
+    reportedByCustomer: options.reportedByCustomer
   });
   const rows = result.reports.map(toReportRow);
   printOutput({
@@ -52,7 +54,8 @@ async function runReportsList(options) {
           limit,
           cursor: options.cursor,
           status: options.status,
-          searchQuery: options.searchQuery
+          searchQuery: options.searchQuery,
+          reportedByCustomer: options.reportedByCustomer
         }
       } : void 0
     },
@@ -63,7 +66,7 @@ async function runReportsList(options) {
       `- Next cursor: ${result.nextCursor ?? "none"}`,
       "",
       ...rows.map(
-        (row) => `- #${row.id} ${row.status} | ${row.title} | assets=${row.assets} | created=${row.createdAt}`
+        (row) => `- #${row.id} ${row.status}${row.reportedByCustomer ? " (customer)" : ""} | ${row.title} | assets=${row.assets} | created=${row.createdAt}`
       )
     ].join("\n"),
     csv: toCsvRows(rows),
@@ -74,8 +77,9 @@ async function runReportsList(options) {
       }
       console.log(`Reports for ${options.org} (returned ${result.reports.length})`);
       for (const row of rows) {
+        const customerTag = row.reportedByCustomer ? " (customer)" : "";
         console.log(
-          `#${row.id} [${row.status}] ${row.title} assets=${row.assets} created=${row.createdAt}`
+          `#${row.id} [${row.status}]${customerTag} ${row.title} assets=${row.assets} created=${row.createdAt}`
         );
       }
       if (result.nextCursor !== null) {

package/dist/{list-json-TPBLJBD3.js → list-json-GTST5CRN.js}

@@ -1,6 +1,6 @@
 import {
   createApiClient
-} from "./chunk-H7UKKLCV.js";
+} from "./chunk-KMILLX3U.js";
 import "./chunk-EEG7T6WT.js";
 import "./chunk-U73SABXK.js";
 

package/dist/{run-U62KVNTH.js → run-MUMSMG4V.js}

@@ -1,13 +1,13 @@
 import {
   getPresetDefinition,
   runPreset
-} from "./chunk-D2QGXYXZ.js";
+} from "./chunk-6FIJ4NU4.js";
 import {
   CliExitError,
   ExitCode
 } from "./chunk-E2LAMILJ.js";
 import "./chunk-VFT3TD3E.js";
-import "./chunk-H7UKKLCV.js";
+import "./chunk-KMILLX3U.js";
 import "./chunk-EEG7T6WT.js";
 import "./chunk-U73SABXK.js";
 

package/dist/{run-PABQKATZ.js → run-V66OGZ3W.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-H7UKKLCV.js";
+} from "./chunk-KMILLX3U.js";
 import "./chunk-EEG7T6WT.js";
 import "./chunk-U73SABXK.js";
 

package/dist/{setup-skill-U24CJZ6T.js → setup-skill-SIWP3KFS.js}

@@ -13,9 +13,11 @@ var SKILL_CONTENT = `---
 name: chainpatrol
 description: |
   ChainPatrol CLI assistant. Helps use the chainpatrol CLI tool: login via device
-  code flow, check auth status, list detection configs, and run CLI commands.
+  code flow, check auth status, list detection configs, list reports (including
+  customer-reported ones), and run CLI commands.
   Use when: "chainpatrol cli", "login to chainpatrol", "check detection configs",
-  "am I logged in", "list configs", "use the cli".
+  "am I logged in", "list configs", "use the cli", "list reports",
+  "customer reports", "reports reported by customer", "find detection gaps".
 allowed-tools:
   - Bash
   - Read
@@ -83,6 +85,56 @@ The \`--org\` flag is saved for future commands. Once set, you can omit it:
 chainpatrol configs list
 \`\`\`
 
+### \`reports list\` \u2014 List recent reports for an organization
+
+Returns the most recent reports submitted for an organization. Each report
+includes a \`reportedByCustomer\` boolean indicating whether the report was
+submitted by a customer of ChainPatrol (e.g. via API key, Slack/Telegram bot,
+or another external integration) rather than by ChainPatrol's automated
+detections or staff reviewers.
+
+\`\`\`bash
+chainpatrol reports list --org <slug>
+\`\`\`
+
+Common flags:
+- \`--limit <n>\` page size (1-20)
+- \`--cursor <id>\` pagination cursor (use \`nextCursor\` from a previous response)
+- \`--status <s>\` filter by report status (e.g. \`TODO\`, \`IN_PROGRESS\`, \`DONE\`)
+- \`--search <q>\` search query across title/description/asset content
+- \`--reported-by-customer\` only show reports submitted by a customer
+- \`--no-reported-by-customer\` only show reports NOT submitted by a customer
+  (i.e. found by ChainPatrol's automation or staff)
+
+JSON mode is recommended when you want to analyze the data programmatically:
+\`\`\`bash
+chainpatrol --json reports list --org <slug> --reported-by-customer
+\`\`\`
+
+#### Use case: finding gaps in ChainPatrol detection
+
+Customer-reported reports (\`reportedByCustomer=true\`) are a valuable signal
+for finding gaps in ChainPatrol's automated detections and staff triage: each
+one is a threat the customer found before ChainPatrol's own systems did. When
+the user asks something like:
+
+- "show me the threats our customers are reporting"
+- "what is X's customer reporting?"
+- "where are we missing detections for org Y?"
+- "summarize recent reports submitted by customers"
+
+\u2026use \`chainpatrol --json reports list --org <slug> --reported-by-customer\`
+to fetch them, then highlight patterns (asset types, domains, common
+keywords, recurring brands) so the user can:
+1. Spot detection coverage gaps to fix in the org's detection configs.
+2. Improve staff triage runbooks for recurring scams.
+3. Work directly with the customer to close the loop and prevent future
+   misses.
+
+You can also compare with the non-customer set using
+\`--no-reported-by-customer\` to gauge detection coverage on the same time
+window.
+
 ## Checking Auth Status
 
 To check if the user is logged in, read the credentials file:

package/dist/{snapshot-JEVDTE74.js → snapshot-TZHS7XQX.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-H7UKKLCV.js";
+} from "./chunk-KMILLX3U.js";
 import "./chunk-EEG7T6WT.js";
 import "./chunk-U73SABXK.js";
 

package/dist/{summary-YG5NYIOA.js → summary-SUWVXO7Y.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-H7UKKLCV.js";
+} from "./chunk-KMILLX3U.js";
 import "./chunk-EEG7T6WT.js";
 import "./chunk-U73SABXK.js";
 

package/dist/{validate-PI7GPT5I.js → validate-VQKKFNBO.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-H7UKKLCV.js";
+} from "./chunk-KMILLX3U.js";
 import "./chunk-EEG7T6WT.js";
 import "./chunk-U73SABXK.js";
 

package/package.json

@@ -2,7 +2,7 @@
   "name": "@chainpatrol/cli",
   "description": "The official ChainPatrol CLI — terminal interface for threat detection",
   "author": "Umar Ahmed <umar@chainpatrol.io>",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "license": "UNLICENSED",
   "homepage": "https://chainpatrol.com/docs/cli",
   "keywords": [
@@ -12,7 +12,7 @@
   ],
   "type": "module",
   "bin": {
-    "chainpatrol": "./dist/cli.js"
+    "chainpatrol": "dist/cli.js"
   },
   "files": [
     "./dist/**"
@@ -35,16 +35,16 @@
     "ink": "^7.0.0",
     "meow": "^14.1.0",
     "open": "^11.0.0",
-    "react": "^19.2.4",
-    "zod": "^3.25.76"
+    "react": "catalog:",
+    "zod": "catalog:"
   },
   "devDependencies": {
-    "@types/react": "^19.2.7",
+    "@types/react": "catalog:",
     "ink-testing-library": "^4.0.0",
     "msw": "^2.0.0",
     "tsup": "^8.5.0",
-    "tsx": "^4.19.4",
-    "typescript": "6.0.2",
-    "vitest": "^3.2.4"
+    "tsx": "catalog:",
+    "typescript": "catalog:",
+    "vitest": "catalog:"
   }
-}
+}