@chainpatrol/cli 0.13.0 → 0.14.0

package/CHANGELOG.md

@@ -1,5 +1,34 @@
 # @chainpatrol/cli
 
+## 0.14.0
+
+### Minor Changes
+
+- 339729c: Add an `--include` filter to `chainpatrol metrics organization` (backed
+  by a new optional `include` field on `GET /organization/metrics`) so
+  callers can ask for just the metrics they care about instead of paying
+  for the full ~11-aggregate fan-out.
+
+  `--include` (or `include: [...]` in the JSON body) accepts a comma list
+  of any of: `reports`, `newThreats`, `threatsWatchlisted`,
+  `takedownsFiled`, `takedownsCompleted`, `domainThreats`,
+  `twitterThreats`, `telegramThreats`, `otherThreats`, `blockedByType`,
+  `blockedByDay`. The server runs only those Prisma aggregates;
+  unrequested fields come back as `null`. Omitting `--include` (or
+  passing an empty list) preserves the existing "compute everything"
+  behavior.
+
+  This is the targeted follow-up to the 3-month-default change for the
+  same 503 issue: agents that only need takedown counts can now skip the
+  nine other counts entirely, keeping each call well inside the platform
+  function cap and cheap enough to run repeatedly per org.
+
+  The response schema's metric fields and `blockedByType`/`blockedByDay`
+  arrays are now nullable to express "not included" — TypeScript callers
+  of the CLI's `OrganizationMetricsResult` that previously read
+  `result.metrics.reports` as `number` will need `?? 0` (or to opt in to
+  `--include` and check for `null` explicitly).
+
 ## 0.13.0
 
 ### Minor Changes

package/dist/{breakdown-B6QUGYI6.js → breakdown-K5Q6TDKE.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OSRFCVBT.js";
+} from "./chunk-YZEMTNCX.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-TFCNKBRC.js";
 import "./chunk-U73SABXK.js";

package/dist/{check-P5JJJNEX.js → check-NJH7BUIM.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OSRFCVBT.js";
+} from "./chunk-YZEMTNCX.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-TFCNKBRC.js";
 import "./chunk-U73SABXK.js";

package/dist/{chunk-BQDMAEQU.js → chunk-6X5BFFXA.js}

@@ -700,6 +700,33 @@ the full customer-facing dashboard slice (reports, new threats,
 watchlisted, takedowns filed/completed, plus per-type and per-day
 breakdowns).
 
+#### \`--include\` \u2014 only compute the metrics you actually need
+
+\`metrics organization\` runs one Prisma aggregate per requested field.
+By default all 11 are computed in parallel. Pass \`--include\` (or
+\`include: [\u2026]\` in the JSON body) with the comma-separated subset you
+care about to skip the rest \u2014 the unrequested fields come back as
+\`null\` instead of a number, and the server never runs those queries:
+
+\`\`\`bash
+# Only takedowns \u2014 one of the cheap shapes
+chainpatrol --json metrics organization --org <slug> \\
+  --include takedownsFiled,takedownsCompleted
+
+# Time series only, no scalar counts
+chainpatrol --json metrics organization --org <slug> --include blockedByDay
+\`\`\`
+
+Allowed values: \`reports\`, \`newThreats\`, \`threatsWatchlisted\`,
+\`takedownsFiled\`, \`takedownsCompleted\`, \`domainThreats\`,
+\`twitterThreats\`, \`telegramThreats\`, \`otherThreats\`,
+\`blockedByType\`, \`blockedByDay\`.
+
+Use this whenever the user's question is specific ("how many takedowns
+did we file last month?"). It is the lowest-effort way to make a
+metrics call cheap enough to run repeatedly. Pair it with an explicit
+date window for the best behavior.
+
 #### "Across all orgs" via an API key \u2014 what's actually possible
 
 A ChainPatrol API key is scoped to a single organization. The

package/dist/{chunk-DJVB73FL.js → chunk-BIKTBRER.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OSRFCVBT.js";
+} from "./chunk-YZEMTNCX.js";
 import {
   DateTime
 } from "./chunk-TFCNKBRC.js";

package/dist/{chunk-OSRFCVBT.js → chunk-YZEMTNCX.js}

@@ -45,6 +45,19 @@ var TAKEDOWN_SORT_KEYS = [
   "assigneeId",
   "brandId"
 ];
+var ORGANIZATION_METRICS_INCLUDE_FIELDS = [
+  "reports",
+  "newThreats",
+  "threatsWatchlisted",
+  "takedownsFiled",
+  "takedownsCompleted",
+  "domainThreats",
+  "twitterThreats",
+  "telegramThreats",
+  "otherThreats",
+  "blockedByType",
+  "blockedByDay"
+];
 var REQUEST_TIMEOUT_MS = 3e4;
 function defaultGetCredential() {
   const envKey = process.env.CHAINPATROL_API_KEY;
@@ -71,7 +84,16 @@ function createApiClient(options) {
     const headers = buildAuthHeaders();
     const search = new URLSearchParams();
     for (const [key, value] of Object.entries(query)) {
-      if (value !== void 0 && value !== "") {
+      if (value === void 0) continue;
+      if (Array.isArray(value)) {
+        for (const item of value) {
+          if (item !== void 0 && item !== "") {
+            search.append(key, item);
+          }
+        }
+        continue;
+      }
+      if (value !== "") {
         search.set(key, value);
       }
     }
@@ -258,7 +280,8 @@ function createApiClient(options) {
         organizationSlug: input.organizationSlug,
         brandSlug: input.brandSlug,
         startDate: parseIsoDateString(input.startDate),
-        endDate: parseIsoDateString(input.endDate)
+        endDate: parseIsoDateString(input.endDate),
+        include: input.include
       });
     },
     listHealthchecks() {
@@ -378,5 +401,6 @@ export {
   TAKEDOWN_STATUSES,
   LIVENESS_STATUSES,
   TAKEDOWN_SORT_KEYS,
+  ORGANIZATION_METRICS_INCLUDE_FIELDS,
   createApiClient
 };

package/dist/cli.js

@@ -13,7 +13,7 @@ import {
   getCliVersion,
   isSkillInstalled,
   readInstalledSkillVersion
-} from "./chunk-BQDMAEQU.js";
+} from "./chunk-6X5BFFXA.js";
 import "./chunk-NQT77IB7.js";
 import {
   DateTime
@@ -263,19 +263,21 @@ var HELP = {
     ]
   },
   "metrics organization": {
-    description: "Get organization metrics via the documented GET /organization/metrics endpoint. Works with both API key auth (org derived from key) and session auth (pass --org). Defaults to the trailing 3 months if no date range is given.",
-    usage: "chainpatrol metrics organization [--org <slug>] [--from ISO --to ISO|--this-week]",
+    description: "Get organization metrics via the documented GET /organization/metrics endpoint. Works with both API key auth (org derived from key) and session auth (pass --org). Defaults to the trailing 3 months if no date range is given. Use --include to skip aggregates the caller doesn't need \u2014 fields not included come back as null.",
+    usage: "chainpatrol metrics organization [--org <slug>] [--from ISO --to ISO|--this-week] [--include <list>]",
     options: [
       "--org <slug>          Organization slug (omit when using an API key)",
       "--brand-slug <slug>   Filter by brand slug (requires brands-metrics flag)",
       "--from <iso>          Start date (ISO 8601, e.g. 2026-01-01)",
       "--to <iso>            End date (ISO 8601)",
-      "--this-week           Use the current ISO week (overrides default)"
+      "--this-week           Use the current ISO week (overrides default)",
+      "--include <list>      Comma list of fields to compute: reports,newThreats,threatsWatchlisted,takedownsFiled,takedownsCompleted,domainThreats,twitterThreats,telegramThreats,otherThreats,blockedByType,blockedByDay (omit for all)"
     ],
     examples: [
-      "chainpatrol metrics organization --org acme                       # defaults to last 3 months",
+      "chainpatrol metrics organization --org acme                                           # defaults to last 3 months, all metrics",
+      "chainpatrol metrics organization --org acme --include takedownsFiled,takedownsCompleted",
       "chainpatrol metrics organization --org acme --from 2026-01-01 --to 2026-02-01",
-      "CHAINPATROL_API_KEY=... chainpatrol metrics organization --json"
+      "CHAINPATROL_API_KEY=... chainpatrol metrics organization --json --include reports"
     ]
   },
   "metrics summary": {
@@ -858,6 +860,7 @@ ${getTopLevelHelp()}
     to: { type: "string" },
     thisWeek: { type: "boolean", default: false },
     by: { type: "string" },
+    include: { type: "string" },
     brand: { type: "string" },
     enable: { type: "boolean", default: false },
     disable: { type: "boolean", default: false },
@@ -1031,12 +1034,12 @@ function parseAttachmentUrls() {
 }
 async function handleConfigsList(org) {
   if (jsonMode) {
-    const { listConfigsJson } = await import("./list-json-T2Z7NV7G.js");
+    const { listConfigsJson } = await import("./list-json-QC6X25LI.js");
     await listConfigsJson({ org });
     return;
   }
   const { render } = await import("ink");
-  const { default: ConfigsList } = await import("./list-IYJBKE2F.js");
+  const { default: ConfigsList } = await import("./list-B5KLEFHA.js");
   const { default: React } = await import("react");
   render(React.createElement(ConfigsList, { org }));
 }
@@ -1136,7 +1139,7 @@ async function main() {
         const positionals = cli.input.slice(2);
         const flagAssets = parseAssetInputs();
         const contents = [...positionals, ...flagAssets];
-        const { runAssetCheck } = await import("./check-P5JJJNEX.js");
+        const { runAssetCheck } = await import("./check-NJH7BUIM.js");
         await runAssetCheck({
           contents,
           json: jsonMode,
@@ -1146,7 +1149,7 @@ async function main() {
         break;
       }
       if (subcommand === "list") {
-        const { runAssetList } = await import("./list-PBAXQSL5.js");
+        const { runAssetList } = await import("./list-5TMGSHFC.js");
         await runAssetList({
           type: cli.flags.type ?? cli.flags.assetType,
           status: cli.flags.assetStatus ?? cli.flags.status,
@@ -1167,7 +1170,7 @@ async function main() {
     case "detections": {
       const org = await resolveOrg();
       if (subcommand === "healthcheck") {
-        const { runDetectionsHealthcheck } = await import("./healthcheck-HZYEIIOR.js");
+        const { runDetectionsHealthcheck } = await import("./healthcheck-PFYP6PNW.js");
         await runDetectionsHealthcheck({
           org,
           source: cli.flags.source,
@@ -1182,7 +1185,7 @@ async function main() {
         break;
       }
       if (subcommand === "validate") {
-        const { runDetectionsValidate } = await import("./validate-SM5DD7I2.js");
+        const { runDetectionsValidate } = await import("./validate-TPG47SYS.js");
         await runDetectionsValidate({
           org,
           source: cli.flags.source,
@@ -1197,7 +1200,7 @@ async function main() {
         break;
       }
       if (subcommand === "drift") {
-        const { runDetectionsDrift } = await import("./drift-T74V2C3J.js");
+        const { runDetectionsDrift } = await import("./drift-ZOLDE24A.js");
         await runDetectionsDrift({
           org,
           source: cli.flags.source,
@@ -1211,7 +1214,7 @@ async function main() {
         break;
       }
       if (subcommand === "run") {
-        const { runDetectionsRun } = await import("./run-MSO6IXEV.js");
+        const { runDetectionsRun } = await import("./run-VHFXOCGS.js");
         await runDetectionsRun({
           org,
           configId: cli.flags.configId,
@@ -1225,7 +1228,7 @@ async function main() {
         break;
       }
       if (subcommand === "list") {
-        const { runDetectionsList } = await import("./list-QUFY4IP7.js");
+        const { runDetectionsList } = await import("./list-AHWEE3YZ.js");
         await runDetectionsList({
           org,
           cursor: cli.flags.cursor,
@@ -1254,7 +1257,7 @@ async function main() {
           break;
         }
         if (action === "run") {
-          const { runDetectionsRun } = await import("./run-MSO6IXEV.js");
+          const { runDetectionsRun } = await import("./run-VHFXOCGS.js");
           await runDetectionsRun({
             org,
             configId: cli.flags.configId,
@@ -1272,7 +1275,7 @@ async function main() {
             throw new Error("detections configs update requires --config-id");
           }
           const configPatch = getConfigPatchFromSetFlags();
-          const { runDetectionsConfigsUpdate } = await import("./configs-update-3ZVXGADV.js");
+          const { runDetectionsConfigsUpdate } = await import("./configs-update-ON67NMXA.js");
           await runDetectionsConfigsUpdate({
             org,
             configId: cli.flags.configId,
@@ -1306,13 +1309,14 @@ async function main() {
     case "metrics": {
       if (subcommand === "organization" || subcommand === "org") {
         const org2 = await tryResolveOrg();
-        const { runMetricsOrganization } = await import("./organization-GS5LFIWO.js");
+        const { runMetricsOrganization } = await import("./organization-VSQQAGBS.js");
         await runMetricsOrganization({
           org: org2,
           brandSlug: cli.flags.brandSlug,
           from: cli.flags.from,
           to: cli.flags.to,
           thisWeek: cli.flags.thisWeek,
+          include: parseCsvList(cli.flags.include),
           json: jsonMode,
           outputFormat: cliContext.outputFormat
         });
@@ -1320,7 +1324,7 @@ async function main() {
       }
       const org = await resolveOrg();
       if (subcommand === "summary") {
-        const { runMetricsSummary } = await import("./summary-CV657J5V.js");
+        const { runMetricsSummary } = await import("./summary-QUCLZYX6.js");
         await runMetricsSummary({
           org,
           from: cli.flags.from,
@@ -1333,7 +1337,7 @@ async function main() {
         break;
       }
       if (subcommand === "found") {
-        const { runMetricsFound } = await import("./found-NXAWEIEK.js");
+        const { runMetricsFound } = await import("./found-M5MX4VXK.js");
         await runMetricsFound({
           org,
           from: cli.flags.from,
@@ -1350,7 +1354,7 @@ async function main() {
         if (!by || !["day", "type", "brand"].includes(by)) {
           throw new Error("metrics breakdown requires --by <day|type|brand>");
         }
-        const { runMetricsBreakdown } = await import("./breakdown-B6QUGYI6.js");
+        const { runMetricsBreakdown } = await import("./breakdown-K5Q6TDKE.js");
         await runMetricsBreakdown({
           org,
           by,
@@ -1371,7 +1375,7 @@ async function main() {
     case "reports": {
       if (subcommand === "list") {
         const org = await resolveOrg();
-        const { runReportsList } = await import("./list-ZFPML3ZR.js");
+        const { runReportsList } = await import("./list-FV5IYCG4.js");
         await runReportsList({
           org,
           limit: cli.flags.limit,
@@ -1399,7 +1403,7 @@ async function main() {
       }
       if (subcommand === "create") {
         const org = await tryResolveOrg();
-        const { runReportsCreate } = await import("./create-DFH2G7RH.js");
+        const { runReportsCreate } = await import("./create-W5S2ZPVC.js");
         await runReportsCreate({
           org,
           title: cli.flags.title,
@@ -1420,7 +1424,7 @@ async function main() {
         const positionals = cli.input.slice(2);
         const flagAssets = parseAssetInputs();
         const assetContents = [...positionals, ...flagAssets];
-        const { runReportsSearch } = await import("./search-WPSKQGUS.js");
+        const { runReportsSearch } = await import("./search-NOSQW75S.js");
         await runReportsSearch({
           assetContents,
           reportedByCustomer: cli.flags.reportedByCustomer,
@@ -1436,7 +1440,7 @@ async function main() {
     }
     case "threats": {
       if (subcommand === "list") {
-        const { runThreatsList } = await import("./list-YCT6DYDI.js");
+        const { runThreatsList } = await import("./list-HGYBEYOV.js");
         await runThreatsList({
           query: cli.flags.query,
           from: cli.flags.from,
@@ -1459,7 +1463,7 @@ async function main() {
     case "takedowns": {
       if (subcommand === "list") {
         const org = await tryResolveOrg();
-        const { runTakedownsList } = await import("./list-WJQT2XLE.js");
+        const { runTakedownsList } = await import("./list-TUMVDWIZ.js");
         await runTakedownsList({
           org,
           query: cli.flags.query,
@@ -1490,7 +1494,7 @@ async function main() {
     }
     case "queues": {
       if (subcommand === "snapshot") {
-        const { runQueuesSnapshot } = await import("./snapshot-ZWAHEG64.js");
+        const { runQueuesSnapshot } = await import("./snapshot-55UV26NQ.js");
         await runQueuesSnapshot({
           org: cli.flags.org,
           all: cli.flags.all,
@@ -1508,7 +1512,7 @@ async function main() {
     }
     case "orgs": {
       if (subcommand === "list") {
-        const { runOrgsList } = await import("./list-YRJPN4PI.js");
+        const { runOrgsList } = await import("./list-ISP5JL4M.js");
         await runOrgsList({
           query: cli.flags.query,
           subscriptionStatus: cli.flags.subscriptionStatus,
@@ -1523,7 +1527,7 @@ async function main() {
       }
       if (subcommand === "assets") {
         if (action === "list") {
-          const { runOrgsAssetsList } = await import("./list-EIVPGMWJ.js");
+          const { runOrgsAssetsList } = await import("./list-Z7RJWZH5.js");
           await runOrgsAssetsList({
             type: cli.flags.type ?? cli.flags.assetType,
             groupId: cli.flags.groupId,
@@ -1539,7 +1543,7 @@ async function main() {
       }
       if (subcommand === "asset-groups") {
         if (action === "list") {
-          const { runOrgsAssetGroupsList } = await import("./list-I7SBGA52.js");
+          const { runOrgsAssetGroupsList } = await import("./list-VP5IY2SZ.js");
           await runOrgsAssetGroupsList({
             json: jsonMode,
             outputFormat: cliContext.outputFormat
@@ -1554,7 +1558,7 @@ async function main() {
       );
     }
     case "whoami": {
-      const { runWhoami } = await import("./whoami-DH5HVLFN.js");
+      const { runWhoami } = await import("./whoami-Y3ZJGN4O.js");
       await runWhoami({
         json: jsonMode,
         outputFormat: cliContext.outputFormat
@@ -1563,7 +1567,7 @@ async function main() {
     }
     case "healthchecks": {
       if (subcommand === "list") {
-        const { runHealthchecksList } = await import("./list-23QQYAV5.js");
+        const { runHealthchecksList } = await import("./list-GKC7PEU5.js");
         await runHealthchecksList({
           json: jsonMode,
           outputFormat: cliContext.outputFormat
@@ -1577,7 +1581,7 @@ async function main() {
           thresholds.minResults = cli.flags.minResults;
         if (cli.flags.lookbackHours !== void 0)
           thresholds.lookbackHours = cli.flags.lookbackHours;
-        const { runHealthchecksRun } = await import("./run-CJGN6TX4.js");
+        const { runHealthchecksRun } = await import("./run-HRFJORDS.js");
         await runHealthchecksRun({
           org,
           id: action,
@@ -1595,7 +1599,7 @@ async function main() {
     }
     case "presets": {
       if (subcommand === "list") {
-        const { runPresetsList } = await import("./list-WX5G3IOF.js");
+        const { runPresetsList } = await import("./list-LNNIEVB4.js");
         await runPresetsList({ outputFormat: cliContext.outputFormat });
         break;
       }
@@ -1606,7 +1610,7 @@ async function main() {
           );
         }
         const org = await resolveOrg();
-        const { runPresetsRun } = await import("./run-BHEXWBAS.js");
+        const { runPresetsRun } = await import("./run-KDNQIR5E.js");
         await runPresetsRun({
           presetId: action,
           org,
@@ -1623,12 +1627,12 @@ async function main() {
     case "setup":
     case "install":
     case "i": {
-      const { setupSkill } = await import("./setup-skill-TPMTULHJ.js");
+      const { setupSkill } = await import("./setup-skill-Q6PCFIDE.js");
       setupSkill({ json: jsonMode, cloud: cli.flags.cloud });
       break;
     }
     case "uninstall": {
-      const { uninstallSkill } = await import("./setup-skill-TPMTULHJ.js");
+      const { uninstallSkill } = await import("./setup-skill-Q6PCFIDE.js");
       uninstallSkill({ json: jsonMode });
       break;
     }

package/dist/{configs-update-3ZVXGADV.js → configs-update-ON67NMXA.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OSRFCVBT.js";
+} from "./chunk-YZEMTNCX.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-TFCNKBRC.js";
 import "./chunk-U73SABXK.js";

package/dist/{create-DFH2G7RH.js → create-W5S2ZPVC.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OSRFCVBT.js";
+} from "./chunk-YZEMTNCX.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-TFCNKBRC.js";
 import "./chunk-U73SABXK.js";

package/dist/{drift-T74V2C3J.js → drift-ZOLDE24A.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OSRFCVBT.js";
+} from "./chunk-YZEMTNCX.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-TFCNKBRC.js";
 import "./chunk-U73SABXK.js";

package/dist/{found-NXAWEIEK.js → found-M5MX4VXK.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OSRFCVBT.js";
+} from "./chunk-YZEMTNCX.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-TFCNKBRC.js";
 import "./chunk-U73SABXK.js";

package/dist/{healthcheck-HZYEIIOR.js → healthcheck-PFYP6PNW.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OSRFCVBT.js";
+} from "./chunk-YZEMTNCX.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-TFCNKBRC.js";
 import "./chunk-U73SABXK.js";

package/dist/{list-PBAXQSL5.js → list-5TMGSHFC.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OSRFCVBT.js";
+} from "./chunk-YZEMTNCX.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-TFCNKBRC.js";
 import "./chunk-U73SABXK.js";

package/dist/{list-QUFY4IP7.js → list-AHWEE3YZ.js}

@@ -12,7 +12,7 @@ import {
   LIVENESS_FILTER_VALUES,
   WATCHLIST_FILTER_VALUES,
   createApiClient
-} from "./chunk-OSRFCVBT.js";
+} from "./chunk-YZEMTNCX.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-TFCNKBRC.js";
 import "./chunk-U73SABXK.js";

package/dist/{list-IYJBKE2F.js → list-B5KLEFHA.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-JCMWDZYY.js";
 import {
   createApiClient
-} from "./chunk-OSRFCVBT.js";
+} from "./chunk-YZEMTNCX.js";
 import {
   AuthCorruptedError,
   AuthExpiredError,

package/dist/{list-ZFPML3ZR.js → list-FV5IYCG4.js}

@@ -10,7 +10,7 @@ import {
   REPORT_REVIEW_DECISIONS,
   REPORT_STATUSES,
   createApiClient
-} from "./chunk-OSRFCVBT.js";
+} from "./chunk-YZEMTNCX.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-TFCNKBRC.js";
 import "./chunk-U73SABXK.js";

package/dist/{list-23QQYAV5.js → list-GKC7PEU5.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OSRFCVBT.js";
+} from "./chunk-YZEMTNCX.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-TFCNKBRC.js";
 import "./chunk-U73SABXK.js";

package/dist/{list-YCT6DYDI.js → list-HGYBEYOV.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OSRFCVBT.js";
+} from "./chunk-YZEMTNCX.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-TFCNKBRC.js";
 import "./chunk-U73SABXK.js";

package/dist/{list-YRJPN4PI.js → list-ISP5JL4M.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OSRFCVBT.js";
+} from "./chunk-YZEMTNCX.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-TFCNKBRC.js";
 import "./chunk-U73SABXK.js";

package/dist/{list-WX5G3IOF.js → list-LNNIEVB4.js}

@@ -1,12 +1,12 @@
 import {
   PRESETS
-} from "./chunk-DJVB73FL.js";
+} from "./chunk-BIKTBRER.js";
 import "./chunk-E2LAMILJ.js";
 import {
   printOutput,
   toCsvRows
 } from "./chunk-VFT3TD3E.js";
-import "./chunk-OSRFCVBT.js";
+import "./chunk-YZEMTNCX.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-TFCNKBRC.js";
 import "./chunk-U73SABXK.js";

package/dist/{list-WJQT2XLE.js → list-TUMVDWIZ.js}

@@ -11,7 +11,7 @@ import {
   TAKEDOWN_SORT_KEYS,
   TAKEDOWN_STATUSES,
   createApiClient
-} from "./chunk-OSRFCVBT.js";
+} from "./chunk-YZEMTNCX.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-TFCNKBRC.js";
 import "./chunk-U73SABXK.js";

package/dist/{list-I7SBGA52.js → list-VP5IY2SZ.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OSRFCVBT.js";
+} from "./chunk-YZEMTNCX.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-TFCNKBRC.js";
 import "./chunk-U73SABXK.js";

package/dist/{list-EIVPGMWJ.js → list-Z7RJWZH5.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OSRFCVBT.js";
+} from "./chunk-YZEMTNCX.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-TFCNKBRC.js";
 import "./chunk-U73SABXK.js";

package/dist/{list-json-T2Z7NV7G.js → list-json-QC6X25LI.js}

@@ -1,6 +1,6 @@
 import {
   createApiClient
-} from "./chunk-OSRFCVBT.js";
+} from "./chunk-YZEMTNCX.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-TFCNKBRC.js";
 import "./chunk-U73SABXK.js";

package/dist/{organization-GS5LFIWO.js → organization-VSQQAGBS.js}

@@ -6,13 +6,28 @@ import {
   toCsvRows
 } from "./chunk-VFT3TD3E.js";
 import {
+  ORGANIZATION_METRICS_INCLUDE_FIELDS,
   createApiClient
-} from "./chunk-OSRFCVBT.js";
+} from "./chunk-YZEMTNCX.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-TFCNKBRC.js";
 import "./chunk-U73SABXK.js";
 
 // src/commands/metrics/organization.ts
+var INCLUDE_VALUES = new Set(ORGANIZATION_METRICS_INCLUDE_FIELDS);
+function parseIncludeList(raw) {
+  if (!raw || raw.length === 0) return void 0;
+  const fields = [];
+  for (const value of raw) {
+    if (!INCLUDE_VALUES.has(value)) {
+      throw new Error(
+        `Unknown --include value: '${value}'. Allowed: ${ORGANIZATION_METRICS_INCLUDE_FIELDS.join(", ")}`
+      );
+    }
+    fields.push(value);
+  }
+  return fields;
+}
 async function runMetricsOrganization(options) {
   const outputFormat = options.outputFormat ?? (options.json ? "json" : "human");
   const client = options.apiClient ?? createApiClient();
@@ -21,30 +36,37 @@ async function runMetricsOrganization(options) {
     to: options.to,
     thisWeek: options.thisWeek
   });
+  const include = parseIncludeList(options.include);
   const input = {
     organizationSlug: options.org,
     brandSlug: options.brandSlug,
     startDate: range.startDate,
-    endDate: range.endDate
+    endDate: range.endDate,
+    include
   };
   const result = await client.getOrganizationMetrics(input);
   const label = options.org ?? "your organization";
+  const includeLabel = include ? ` (include: ${include.join(", ")})` : "";
+  const metricLines = [
+    ["Reports", result.metrics.reports],
+    ["New threats", result.metrics.newThreats],
+    ["Watchlisted threats", result.metrics.threatsWatchlisted],
+    ["Takedowns filed", result.metrics.takedownsFiled],
+    ["Takedowns completed", result.metrics.takedownsCompleted],
+    ["Domain threats", result.metrics.domainThreats],
+    ["Twitter threats", result.metrics.twitterThreats],
+    ["Telegram threats", result.metrics.telegramThreats],
+    ["Other threats", result.metrics.otherThreats]
+  ];
+  const populatedMetricLines = metricLines.filter(([, value]) => value !== null);
   printOutput({
     outputFormat,
-    json: { ...result, range },
+    json: { ...result, range, include: include ?? null },
     markdown: [
-      `# Organization Metrics (${label}) \u2014 ${range.label}`,
+      `# Organization Metrics (${label}) \u2014 ${range.label}${includeLabel}`,
       "",
       `- Range: ${range.startDate} \u2192 ${range.endDate}`,
-      `- Reports: ${result.metrics.reports}`,
-      `- New threats: ${result.metrics.newThreats}`,
-      `- Watchlisted threats: ${result.metrics.threatsWatchlisted}`,
-      `- Takedowns filed: ${result.metrics.takedownsFiled}`,
-      `- Takedowns completed: ${result.metrics.takedownsCompleted}`,
-      `- Domain threats: ${result.metrics.domainThreats}`,
-      `- Twitter threats: ${result.metrics.twitterThreats}`,
-      `- Telegram threats: ${result.metrics.telegramThreats}`,
-      `- Other threats: ${result.metrics.otherThreats}`
+      ...populatedMetricLines.map(([name, value]) => `- ${name}: ${value}`)
     ].join("\n"),
     csv: toCsvRows([
       {
@@ -63,17 +85,12 @@ async function runMetricsOrganization(options) {
       }
     ]),
     human: () => {
-      console.log(`Organization metrics for ${label} \u2014 ${range.label}`);
+      console.log(`Organization metrics for ${label} \u2014 ${range.label}${includeLabel}`);
       console.log(`Range: ${range.startDate} \u2192 ${range.endDate}`);
-      console.log(`Reports: ${result.metrics.reports}`);
-      console.log(`New threats: ${result.metrics.newThreats}`);
-      console.log(`Watchlisted threats: ${result.metrics.threatsWatchlisted}`);
-      console.log(`Takedowns filed: ${result.metrics.takedownsFiled}`);
-      console.log(`Takedowns completed: ${result.metrics.takedownsCompleted}`);
-      console.log(
-        `Threat breakdown: domains=${result.metrics.domainThreats}, twitter=${result.metrics.twitterThreats}, telegram=${result.metrics.telegramThreats}, other=${result.metrics.otherThreats}`
-      );
-      if (result.blockedByDay.length > 0) {
+      for (const [name, value] of populatedMetricLines) {
+        console.log(`${name}: ${value}`);
+      }
+      if (result.blockedByDay && result.blockedByDay.length > 0) {
         console.log("");
         console.log(`Blocked by day (${result.blockedByDay.length} entries):`);
         for (const entry of result.blockedByDay) {

package/dist/{run-CJGN6TX4.js → run-HRFJORDS.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OSRFCVBT.js";
+} from "./chunk-YZEMTNCX.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-TFCNKBRC.js";
 import "./chunk-U73SABXK.js";

package/dist/{run-BHEXWBAS.js → run-KDNQIR5E.js}

@@ -1,13 +1,13 @@
 import {
   getPresetDefinition,
   runPreset
-} from "./chunk-DJVB73FL.js";
+} from "./chunk-BIKTBRER.js";
 import {
   CliExitError,
   ExitCode
 } from "./chunk-E2LAMILJ.js";
 import "./chunk-VFT3TD3E.js";
-import "./chunk-OSRFCVBT.js";
+import "./chunk-YZEMTNCX.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-TFCNKBRC.js";
 import "./chunk-U73SABXK.js";

package/dist/{run-MSO6IXEV.js → run-VHFXOCGS.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OSRFCVBT.js";
+} from "./chunk-YZEMTNCX.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-TFCNKBRC.js";
 import "./chunk-U73SABXK.js";

package/dist/{search-WPSKQGUS.js → search-NOSQW75S.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OSRFCVBT.js";
+} from "./chunk-YZEMTNCX.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-TFCNKBRC.js";
 import "./chunk-U73SABXK.js";

package/dist/{setup-skill-TPMTULHJ.js → setup-skill-Q6PCFIDE.js}

@@ -6,7 +6,7 @@ import {
   readInstalledSkillVersion,
   setupSkill,
   uninstallSkill
-} from "./chunk-BQDMAEQU.js";
+} from "./chunk-6X5BFFXA.js";
 import "./chunk-NQT77IB7.js";
 export {
   getBundledSkillContent,

package/dist/{snapshot-ZWAHEG64.js → snapshot-55UV26NQ.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OSRFCVBT.js";
+} from "./chunk-YZEMTNCX.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-TFCNKBRC.js";
 import "./chunk-U73SABXK.js";

package/dist/{summary-CV657J5V.js → summary-QUCLZYX6.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OSRFCVBT.js";
+} from "./chunk-YZEMTNCX.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-TFCNKBRC.js";
 import "./chunk-U73SABXK.js";

package/dist/{validate-SM5DD7I2.js → validate-TPG47SYS.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OSRFCVBT.js";
+} from "./chunk-YZEMTNCX.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-TFCNKBRC.js";
 import "./chunk-U73SABXK.js";

package/dist/{whoami-DH5HVLFN.js → whoami-Y3ZJGN4O.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OSRFCVBT.js";
+} from "./chunk-YZEMTNCX.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-TFCNKBRC.js";
 import "./chunk-U73SABXK.js";

package/package.json

@@ -2,7 +2,7 @@
   "name": "@chainpatrol/cli",
   "description": "The official ChainPatrol CLI — terminal interface for threat detection",
   "author": "Umar Ahmed <umar@chainpatrol.io>",
-  "version": "0.13.0",
+  "version": "0.14.0",
   "license": "UNLICENSED",
   "homepage": "https://chainpatrol.com/docs/cli",
   "keywords": [