@chainpatrol/cli 0.21.0 → 0.23.0

package/CHANGELOG.md

@@ -1,5 +1,18 @@
 # @chainpatrol/cli
 
+## 0.23.0
+
+### Minor Changes
+
+- 689e094: Adds `chainpatrol asset search` command for looking up assets by content or by numeric ID. Supports bulk ID lookup via repeated `--id` flags in a single API call. Server-side work in @chainpatrol/external-trpc adds `assetIds` array support to the `/asset/search` endpoint.
+
+## 0.22.0
+
+### Minor Changes
+
+- e2b28a5: Expose `contactUrl` (main communication channel) on `orgs list` and `orgs get` output. Add `organization.missing-contact-url` healthcheck. Server-side work in @chainpatrol/external-trpc and @chainpatrol/validation supports the new field and healthcheck; both are private packages and don't need version bumps.
+- b1e35f0: Surface pending Wallet Blocking / Takedown approvals on `orgs list` and `orgs get`. Each org now reports `pendingServiceApprovals` — open requests by lower-level members to enable an approval-gated service (Wallet Blocking / Takedowns) that a higher-up at the org has not yet approved. Adds `--pending-approval-active`, `--pending-approval-inactive`, and `--pending-approval-service <protection|takedowns>` filters to `orgs list` so you can track which organizations are awaiting sign-off, distinct from which have the service turned off. Server-side work in @chainpatrol/external-trpc and @chainpatrol/validation backs the new field and filters; both are private packages and don't need version bumps.
+
 ## 0.21.0
 
 ### Minor Changes

package/dist/{breakdown-3LJBT3JQ.js → breakdown-XA6UUD3T.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-O7TMOF4W.js";
+} from "./chunk-GOQL7UCG.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-TFCNKBRC.js";
 import "./chunk-U73SABXK.js";

package/dist/{check-G64UQCEL.js → check-NQZPNAUF.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-O7TMOF4W.js";
+} from "./chunk-GOQL7UCG.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-TFCNKBRC.js";
 import "./chunk-U73SABXK.js";

package/dist/{chunk-2JZAPTY6.js → chunk-DVNTYW7L.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-O7TMOF4W.js";
+} from "./chunk-GOQL7UCG.js";
 import {
   DateTime
 } from "./chunk-TFCNKBRC.js";

package/dist/{chunk-O7TMOF4W.js → chunk-GOQL7UCG.js}

@@ -184,6 +184,9 @@ function createApiClient(options) {
     assetCheck(input) {
       return request("/asset/check", input);
     },
+    assetSearch(input) {
+      return request("/asset/search", input);
+    },
     listDetectionConfigs(slug) {
       return request("/detection/configs/list", { slug });
     },

package/dist/{chunk-4N2YKTJ5.js → chunk-LKITFBIG.js}

@@ -205,6 +205,12 @@ description: |
   "orgs that require admin approval", "orgs requiring approval",
   "which orgs require approval for twitter", "approval scope",
   "admin approval asset types", "approval per asset type",
+  "pending approval", "pending approvals", "pending service approval",
+  "orgs with pending approval", "pending wallet blocking approval",
+  "pending takedown approval", "awaiting approval", "waiting for approval",
+  "is protection active approval", "wallet blocking approval",
+  "who needs to approve wallet blocking", "service change request",
+  "track orgs with pending approval", "orgs awaiting sign-off",
   "is this URL blocked", "is this domain blocked", "is this address blocked",
   "check this asset", "asset check", "lookup asset status",
   "what is ARCHIVE_ORG", "what does PAGE mean", "list asset types",
@@ -735,10 +741,48 @@ So per-org JSON looks like:
     "detection":         { "active": true },
     "darkWebMonitoring": { "active": false }
   },
-  "obligatoryAdminApproval": { "active": true, "assetTypes": ["TWITTER"] }
+  "obligatoryAdminApproval": { "active": true, "assetTypes": ["TWITTER"] },
+  "pendingServiceApprovals": [
+    {
+      "service": "protection",
+      "automated": false,
+      "serviceType": "isProtectionActive",
+      "serviceName": "Wallet Blocking",
+      "requestedAt": "2026-05-30T18:04:11.000Z"
+    }
+  ]
 }
 \`\`\`
 
+#### Pending service approvals (Wallet Blocking / Takedowns)
+
+Turning on **Wallet Blocking** (\`protection\`, the "is protection active"
+toggle) or **Takedowns** is approval-gated: when a lower-level org member
+tries to enable one, ChainPatrol records a pending request that a higher-up
+at the org \u2014 an org OWNER, or ChainPatrol staff acting as owner \u2014 must
+approve before the service actually turns on. \`pendingServiceApprovals\`
+lists those open, awaiting-sign-off requests per org.
+
+This is the answer to "which organizations have a pending approval for
+Wallet blocking or Takedown services?" \u2014 it is NOT the same as "which orgs
+have Wallet Blocking turned off". An org can have \`protection.active=false\`
+with **no** pending approval (nobody has asked) OR **with** a pending
+approval (someone asked and it's waiting on an owner). Only
+\`pendingServiceApprovals\` distinguishes the two.
+
+Each entry:
+
+- \`service\` \u2014 \`protection\` (Wallet Blocking) or \`takedowns\`, matching the
+  \`services\` keys.
+- \`automated\` \u2014 \`true\` when the request is for the automated variant
+  (e.g. "Automated Wallet Blocking").
+- \`serviceType\` \u2014 raw enum, e.g. \`isProtectionActive\`.
+- \`serviceName\` \u2014 human label, e.g. \`Wallet Blocking\`.
+- \`requestedAt\` \u2014 when the enable request was submitted (ISO 8601, UTC).
+
+An **empty array means nothing is awaiting approval** \u2014 read \`services\` for
+the current on/off state, never infer it from this field.
+
 When a user asks about "automated reporting / reviewing / protection",
 explain that the flag exists in the DB but has no operational effect and
 isn't exposed by the public API \u2014 only \`takedowns.automated\` carries a
@@ -767,6 +811,15 @@ Filter flags (all optional, all comma-separated lists where noted):
   \`--obligatory-approval-inactive\`. Use the canonical asset-type enum
   names (\`TWITTER\`, \`URL\`, \`PAGE\`, \u2026); run \`chainpatrol asset types\`
   to see them all.
+- \`--pending-approval-active\` \u2014 only orgs with at least one open
+  service-enable approval awaiting a higher-up's sign-off.
+- \`--pending-approval-inactive\` \u2014 only orgs with no pending approvals.
+- \`--pending-approval-service <list>\` \u2014 only orgs with a pending approval
+  for one of the listed services. Accepts \`protection\` (Wallet Blocking)
+  and/or \`takedowns\` \u2014 those are the only approval-gated services.
+  Matches both the manual and automated variant. Passing this flag implies
+  a pending approval exists, so it can't be combined with
+  \`--pending-approval-inactive\`.
 
 Service names: \`reporting\`, \`reviewing\`, \`protection\`, \`takedowns\`,
 \`detection\`, \`darkWebMonitoring\`.
@@ -794,17 +847,39 @@ chainpatrol --json orgs list --obligatory-approval-active \\
   | jq '.organizations[] | select(.obligatoryAdminApproval.assetTypes | length == 0) | .slug'
 \`\`\`
 
+#### Use case: tracking orgs with a pending Wallet Blocking / Takedown approval
+
+When a user asks "which organizations have a pending approval for Wallet
+blocking or Takedown services?", do NOT reach for \`--service-inactive
+protection\` \u2014 that lists orgs with the service turned OFF, which is a
+different question. Use the pending-approval filter, which surfaces
+staff-initiated enable requests still waiting on a higher-up:
+
+\`\`\`bash
+# Every org with a pending Wallet Blocking OR Takedown approval:
+chainpatrol --json orgs list --pending-approval-service protection,takedowns
+
+# Just Wallet Blocking:
+chainpatrol --json orgs list --pending-approval-service protection
+
+# Any pending approval at all, then read each org's pendingServiceApprovals:
+chainpatrol --json orgs list --pending-approval-active \\
+  | jq '.organizations[] | {slug, pending: [.pendingServiceApprovals[].serviceName]}'
+\`\`\`
+
 ### \`orgs get\` \u2014 Get a single organization by slug
 
 Look up one organization the caller has access to. Returns the same per-org
 shape as a single row from \`orgs list\` \u2014 \`active\` for every service,
 plus \`automated\` on \`takedowns\` only (see the note above on why other
 services don't expose an automation flag), plus \`obligatoryAdminApproval\`
-(\`active\` + \`assetTypes\`). Anything you could read from \`orgs list\` you
-can also read here without paging or filtering. Use it when the user
-names a specific customer ("show me acme's setup", "is takedowns
-automation on for morpho?", "does this org require admin approval for
-Twitter?") and you don't need the rest of the catalogue.
+(\`active\` + \`assetTypes\`) and \`pendingServiceApprovals\` (open Wallet
+Blocking / Takedown enable requests awaiting a higher-up's sign-off).
+Anything you could read from \`orgs list\` you can also read here without
+paging or filtering. Use it when the user names a specific customer ("show
+me acme's setup", "is takedowns automation on for morpho?", "does this org
+require admin approval for Twitter?", "is morpho waiting on a Wallet
+Blocking approval?") and you don't need the rest of the catalogue.
 
 \`\`\`bash
 chainpatrol orgs get <slug>

package/dist/cli.js

@@ -13,7 +13,7 @@ import {
   getCliVersion,
   isSkillInstalled,
   readInstalledSkillVersion
-} from "./chunk-4N2YKTJ5.js";
+} from "./chunk-LKITFBIG.js";
 import "./chunk-6VTWWGNV.js";
 import {
   DateTime
@@ -92,10 +92,11 @@ var HELP = {
     usage: "chainpatrol logout"
   },
   asset: {
-    description: "Check asset status, list blocked/allowed assets across the global ChainPatrol blocklist, or list every supported asset type.",
-    usage: "chainpatrol asset <check|list|types>",
+    description: "Check asset status, search assets by content or ID, list blocked/allowed assets across the global ChainPatrol blocklist, or list every supported asset type.",
+    usage: "chainpatrol asset <check|list|search|types>",
     examples: [
       "chainpatrol asset check https://phish.example",
+      "chainpatrol asset search --id 12345",
       "chainpatrol asset list --asset-type URL --from 2026-05-01",
       "chainpatrol asset types",
       "chainpatrol --json asset check 0xabc123\u2026"
@@ -142,6 +143,21 @@ var HELP = {
       "chainpatrol --json asset check 0xabc123\u2026"
     ]
   },
+  "asset search": {
+    description: "Search for assets by content or by numeric ID. Returns detailed asset information including status, associated reports, takedown details, and which platforms have consumed (blocked) the asset. Supports bulk lookup by passing multiple --id flags. Unlike `asset check` (which queries the public blocklist aggregation), `asset search` queries the internal asset database directly and returns richer context.",
+    usage: "chainpatrol asset search [<content> ...] [--id <id> ...]",
+    options: [
+      "--id <number>         Asset ID (repeatable for bulk lookup)",
+      "--asset <content>     Asset content (repeatable; alternative to positional args)"
+    ],
+    examples: [
+      "chainpatrol asset search https://phish.example",
+      "chainpatrol asset search --id 4175269",
+      "chainpatrol asset search --id 4175269 --id 4144496 --id 4642520",
+      "chainpatrol --json asset search --id 4175269 --id 4144496 --id 4642520",
+      "chainpatrol asset search --id 12345 --output markdown"
+    ]
+  },
   configs: {
     description: "Manage detection configs for an organization.",
     usage: "chainpatrol configs <list>",
@@ -532,12 +548,16 @@ var HELP = {
       "--service-active <l>       Comma-separated services that must be active",
       "--service-inactive <l>     Comma-separated services that must be inactive",
       "--service-automated <l>    Services whose automation must be ON (only `takedowns` is accepted \u2014 the other services have no meaningful automation toggle)",
-      "--service-manual <l>       Services whose automation must be OFF (only `takedowns` is accepted)"
+      "--service-manual <l>       Services whose automation must be OFF (only `takedowns` is accepted)",
+      "--pending-approval-active     Only orgs with an open service-enable approval awaiting a higher-up's sign-off",
+      "--pending-approval-inactive   Only orgs with no pending service-enable approvals",
+      "--pending-approval-service <l> Only orgs with a pending approval for the listed service(s) \u2014 `protection` (Wallet Blocking) and/or `takedowns`"
     ],
     examples: [
       "chainpatrol orgs list --subscription-status ACTIVE",
       "chainpatrol orgs list --service-active takedowns --service-manual takedowns",
-      "chainpatrol --json orgs list --subscription-status ACTIVE,TRIAL --service-active detection"
+      "chainpatrol --json orgs list --subscription-status ACTIVE,TRIAL --service-active detection",
+      "chainpatrol --json orgs list --pending-approval-service protection,takedowns"
     ]
   },
   "orgs get": {
@@ -647,7 +667,7 @@ function getTopLevelHelp() {
     "    login         Authenticate with ChainPatrol",
     "    logout        Clear stored credentials",
     "    whoami        Show the current authenticated identity",
-    "    asset         Check or list assets, or list supported asset types",
+    "    asset         Check, search, or list assets, or list supported asset types",
     "    configs       Manage detection configs",
     "    detections    Validate, run, list, update detection configs and results",
     "    healthchecks  List and run organization healthchecks",
@@ -919,6 +939,9 @@ ${getTopLevelHelp()}
     obligatoryApprovalActive: { type: "boolean" },
     obligatoryApprovalInactive: { type: "boolean" },
     obligatoryApprovalAssetType: { type: "string" },
+    pendingApprovalActive: { type: "boolean" },
+    pendingApprovalInactive: { type: "boolean" },
+    pendingApprovalService: { type: "string" },
     query: { type: "string" },
     assetType: { type: "string" },
     takedownStatus: { type: "string" },
@@ -954,7 +977,8 @@ ${getTopLevelHelp()}
     quiet: { type: "boolean", default: false, shortFlag: "q" },
     noInput: { type: "boolean", default: false },
     noColor: { type: "boolean", default: false },
-    cloud: { type: "boolean", default: false }
+    cloud: { type: "boolean", default: false },
+    id: { type: "string" }
   }
 });
 var [command, subcommand, action] = cli.input;
@@ -1069,12 +1093,12 @@ function parseAttachmentUrls() {
 }
 async function handleConfigsList(org) {
   if (jsonMode) {
-    const { listConfigsJson } = await import("./list-json-B5L5PXKH.js");
+    const { listConfigsJson } = await import("./list-json-7FDHNRYP.js");
     await listConfigsJson({ org });
     return;
   }
   const { render } = await import("ink");
-  const { default: ConfigsList } = await import("./list-X4Z3CPO7.js");
+  const { default: ConfigsList } = await import("./list-4HX2R7HU.js");
   const { default: React } = await import("react");
   render(React.createElement(ConfigsList, { org }));
 }
@@ -1174,7 +1198,7 @@ async function main() {
         const positionals = cli.input.slice(2);
         const flagAssets = parseAssetInputs();
         const contents = [...positionals, ...flagAssets];
-        const { runAssetCheck } = await import("./check-G64UQCEL.js");
+        const { runAssetCheck } = await import("./check-NQZPNAUF.js");
         await runAssetCheck({
           contents,
           json: jsonMode,
@@ -1184,7 +1208,7 @@ async function main() {
         break;
       }
       if (subcommand === "list") {
-        const { runAssetList } = await import("./list-XSIXAHOG.js");
+        const { runAssetList } = await import("./list-4KIZLIVN.js");
         await runAssetList({
           type: cli.flags.type ?? cli.flags.assetType,
           status: cli.flags.assetStatus ?? cli.flags.status,
@@ -1197,23 +1221,44 @@ async function main() {
         });
         break;
       }
+      if (subcommand === "search") {
+        const positionals = cli.input.slice(2);
+        const flagAssets = parseAssetInputs();
+        const contents = [...positionals, ...flagAssets];
+        const rawIds = getRepeatedFlag("id");
+        const ids = rawIds.map((v) => {
+          const n = Number(v);
+          if (!Number.isInteger(n) || n <= 0) {
+            throw new Error(`Invalid asset ID: ${v}. IDs must be positive integers.`);
+          }
+          return n;
+        });
+        const { runAssetSearch } = await import("./search-ZXTJPVM6.js");
+        await runAssetSearch({
+          contents: contents.length > 0 ? contents : void 0,
+          ids: ids.length > 0 ? ids : void 0,
+          json: jsonMode,
+          outputFormat: cliContext.outputFormat
+        });
+        break;
+      }
       if (subcommand === "types") {
-        const { runAssetTypes } = await import("./types-PTMFLYUV.js");
+        const { runAssetTypes } = await import("./types-M6QMFNUS.js");
         runAssetTypes({
           json: jsonMode,
           outputFormat: cliContext.outputFormat
         });
         break;
       }
-      const hint = subcommand ? suggest(subcommand, ["check", "list", "types"]) : null;
+      const hint = subcommand ? suggest(subcommand, ["check", "list", "search", "types"]) : null;
       throw new Error(
-        subcommand ? `Unknown subcommand: asset ${subcommand}${hint ? `. Did you mean "asset ${hint}"?` : ""}` : "Usage: chainpatrol asset <check|list|types>"
+        subcommand ? `Unknown subcommand: asset ${subcommand}${hint ? `. Did you mean "asset ${hint}"?` : ""}` : "Usage: chainpatrol asset <check|list|search|types>"
       );
     }
     case "detections": {
       const org = await resolveOrg();
       if (subcommand === "healthcheck") {
-        const { runDetectionsHealthcheck } = await import("./healthcheck-QNLFKAXM.js");
+        const { runDetectionsHealthcheck } = await import("./healthcheck-7YWSOY6Y.js");
         await runDetectionsHealthcheck({
           org,
           source: cli.flags.source,
@@ -1228,7 +1273,7 @@ async function main() {
         break;
       }
       if (subcommand === "validate") {
-        const { runDetectionsValidate } = await import("./validate-UYKOMUEI.js");
+        const { runDetectionsValidate } = await import("./validate-RPQEEQ36.js");
         await runDetectionsValidate({
           org,
           source: cli.flags.source,
@@ -1243,7 +1288,7 @@ async function main() {
         break;
       }
       if (subcommand === "drift") {
-        const { runDetectionsDrift } = await import("./drift-SHPMEJDU.js");
+        const { runDetectionsDrift } = await import("./drift-YZHCIQ5O.js");
         await runDetectionsDrift({
           org,
           source: cli.flags.source,
@@ -1257,7 +1302,7 @@ async function main() {
         break;
       }
       if (subcommand === "run") {
-        const { runDetectionsRun } = await import("./run-RV6P2OCD.js");
+        const { runDetectionsRun } = await import("./run-CCVJIK7L.js");
         await runDetectionsRun({
           org,
           configId: cli.flags.configId,
@@ -1271,7 +1316,7 @@ async function main() {
         break;
       }
       if (subcommand === "list") {
-        const { runDetectionsList } = await import("./list-SWHKM5R6.js");
+        const { runDetectionsList } = await import("./list-Q3MMBL4Y.js");
         await runDetectionsList({
           org,
           cursor: cli.flags.cursor,
@@ -1300,7 +1345,7 @@ async function main() {
           break;
         }
         if (action === "run") {
-          const { runDetectionsRun } = await import("./run-RV6P2OCD.js");
+          const { runDetectionsRun } = await import("./run-CCVJIK7L.js");
           await runDetectionsRun({
             org,
             configId: cli.flags.configId,
@@ -1318,7 +1363,7 @@ async function main() {
             throw new Error("detections configs update requires --config-id");
           }
           const configPatch = getConfigPatchFromSetFlags();
-          const { runDetectionsConfigsUpdate } = await import("./configs-update-MVX7Q5NW.js");
+          const { runDetectionsConfigsUpdate } = await import("./configs-update-VDZVBTIF.js");
           await runDetectionsConfigsUpdate({
             org,
             configId: cli.flags.configId,
@@ -1354,7 +1399,7 @@ async function main() {
         const slugs = parseCsvList(cli.flags.slugs);
         const allMyOrgs = cli.flags.allMyOrgs;
         const org2 = slugs && slugs.length > 0 || allMyOrgs ? void 0 : await tryResolveOrg();
-        const { runMetricsOrganization } = await import("./organization-SOMHMGTM.js");
+        const { runMetricsOrganization } = await import("./organization-NEZA6JX2.js");
         await runMetricsOrganization({
           org: org2,
           slugs,
@@ -1373,7 +1418,7 @@ async function main() {
       }
       const org = await resolveOrg();
       if (subcommand === "summary") {
-        const { runMetricsSummary } = await import("./summary-LF53KXRR.js");
+        const { runMetricsSummary } = await import("./summary-FE6ROSOO.js");
         await runMetricsSummary({
           org,
           from: cli.flags.from,
@@ -1386,7 +1431,7 @@ async function main() {
         break;
       }
       if (subcommand === "found") {
-        const { runMetricsFound } = await import("./found-OPL4HWOW.js");
+        const { runMetricsFound } = await import("./found-6JAOLM6M.js");
         await runMetricsFound({
           org,
           from: cli.flags.from,
@@ -1403,7 +1448,7 @@ async function main() {
         if (!by || !["day", "type", "brand"].includes(by)) {
           throw new Error("metrics breakdown requires --by <day|type|brand>");
         }
-        const { runMetricsBreakdown } = await import("./breakdown-3LJBT3JQ.js");
+        const { runMetricsBreakdown } = await import("./breakdown-XA6UUD3T.js");
         await runMetricsBreakdown({
           org,
           by,
@@ -1424,7 +1469,7 @@ async function main() {
     case "reports": {
       if (subcommand === "list") {
         const org = await resolveOrg();
-        const { runReportsList } = await import("./list-WPPNX7G3.js");
+        const { runReportsList } = await import("./list-H7NVUX42.js");
         await runReportsList({
           org,
           limit: cli.flags.limit,
@@ -1452,7 +1497,7 @@ async function main() {
       }
       if (subcommand === "create") {
         const org = await tryResolveOrg();
-        const { runReportsCreate } = await import("./create-ANCO4FXB.js");
+        const { runReportsCreate } = await import("./create-DGCWT2YJ.js");
         await runReportsCreate({
           org,
           title: cli.flags.title,
@@ -1473,7 +1518,7 @@ async function main() {
         const positionals = cli.input.slice(2);
         const flagAssets = parseAssetInputs();
         const assetContents = [...positionals, ...flagAssets];
-        const { runReportsSearch } = await import("./search-FQUR75WR.js");
+        const { runReportsSearch } = await import("./search-JXJLBV43.js");
         await runReportsSearch({
           assetContents,
           reportedByCustomer: cli.flags.reportedByCustomer,
@@ -1489,7 +1534,7 @@ async function main() {
     }
     case "threats": {
       if (subcommand === "list") {
-        const { runThreatsList } = await import("./list-Q5PRMAN5.js");
+        const { runThreatsList } = await import("./list-YNQ6VSYV.js");
         await runThreatsList({
           query: cli.flags.query,
           from: cli.flags.from,
@@ -1512,7 +1557,7 @@ async function main() {
     case "takedowns": {
       if (subcommand === "list") {
         const org = await tryResolveOrg();
-        const { runTakedownsList } = await import("./list-FWXQUOCP.js");
+        const { runTakedownsList } = await import("./list-ZBC53OYA.js");
         await runTakedownsList({
           org,
           query: cli.flags.query,
@@ -1543,7 +1588,7 @@ async function main() {
     }
     case "queues": {
       if (subcommand === "snapshot") {
-        const { runQueuesSnapshot } = await import("./snapshot-2GDJMN3L.js");
+        const { runQueuesSnapshot } = await import("./snapshot-NYOLPGRW.js");
         await runQueuesSnapshot({
           org: cli.flags.org,
           all: cli.flags.all,
@@ -1561,7 +1606,7 @@ async function main() {
     }
     case "orgs": {
       if (subcommand === "list") {
-        const { runOrgsList } = await import("./list-MHICJ2TK.js");
+        const { runOrgsList } = await import("./list-SRVNEUHC.js");
         await runOrgsList({
           query: cli.flags.query,
           subscriptionStatus: cli.flags.subscriptionStatus,
@@ -1572,6 +1617,9 @@ async function main() {
           obligatoryApprovalActive: cli.flags.obligatoryApprovalActive,
           obligatoryApprovalInactive: cli.flags.obligatoryApprovalInactive,
           obligatoryApprovalAssetType: cli.flags.obligatoryApprovalAssetType,
+          pendingApprovalActive: cli.flags.pendingApprovalActive,
+          pendingApprovalInactive: cli.flags.pendingApprovalInactive,
+          pendingApprovalService: cli.flags.pendingApprovalService,
           json: jsonMode,
           outputFormat: cliContext.outputFormat
         });
@@ -1580,7 +1628,7 @@ async function main() {
       if (subcommand === "get") {
         const positionalSlug = action;
         const slug = positionalSlug ?? await tryResolveOrg();
-        const { runOrgsGet } = await import("./get-XN752KSL.js");
+        const { runOrgsGet } = await import("./get-RC75EJFC.js");
         await runOrgsGet({
           slug,
           json: jsonMode,
@@ -1590,7 +1638,7 @@ async function main() {
       }
       if (subcommand === "assets") {
         if (action === "list") {
-          const { runOrgsAssetsList } = await import("./list-QHEFB4KE.js");
+          const { runOrgsAssetsList } = await import("./list-WQFDRXHD.js");
           await runOrgsAssetsList({
             type: cli.flags.type ?? cli.flags.assetType,
             groupId: cli.flags.groupId,
@@ -1606,7 +1654,7 @@ async function main() {
       }
       if (subcommand === "asset-groups") {
         if (action === "list") {
-          const { runOrgsAssetGroupsList } = await import("./list-FVFF4VW3.js");
+          const { runOrgsAssetGroupsList } = await import("./list-UDT5MDQZ.js");
           await runOrgsAssetGroupsList({
             json: jsonMode,
             outputFormat: cliContext.outputFormat
@@ -1628,7 +1676,7 @@ async function main() {
             "brands list --type must be ORGANIZATION or INDIVIDUAL (case-insensitive)."
           );
         }
-        const { runBrandsList } = await import("./list-4VKMEKZS.js");
+        const { runBrandsList } = await import("./list-ZARZ72DG.js");
         await runBrandsList({
           type: rawType,
           json: jsonMode,
@@ -1642,7 +1690,7 @@ async function main() {
       );
     }
     case "whoami": {
-      const { runWhoami } = await import("./whoami-OYOG63BX.js");
+      const { runWhoami } = await import("./whoami-ZIWZCBGI.js");
       await runWhoami({
         json: jsonMode,
         outputFormat: cliContext.outputFormat
@@ -1651,7 +1699,7 @@ async function main() {
     }
     case "healthchecks": {
       if (subcommand === "list") {
-        const { runHealthchecksList } = await import("./list-AQ7E23T3.js");
+        const { runHealthchecksList } = await import("./list-EJDWUF6W.js");
         await runHealthchecksList({
           json: jsonMode,
           outputFormat: cliContext.outputFormat
@@ -1665,7 +1713,7 @@ async function main() {
           thresholds.minResults = cli.flags.minResults;
         if (cli.flags.lookbackHours !== void 0)
           thresholds.lookbackHours = cli.flags.lookbackHours;
-        const { runHealthchecksRun } = await import("./run-J5TQ2YC2.js");
+        const { runHealthchecksRun } = await import("./run-5QV3YD7V.js");
         await runHealthchecksRun({
           org,
           id: action,
@@ -1683,7 +1731,7 @@ async function main() {
     }
     case "presets": {
       if (subcommand === "list") {
-        const { runPresetsList } = await import("./list-FJBWSGTD.js");
+        const { runPresetsList } = await import("./list-IDR7WH5J.js");
         await runPresetsList({ outputFormat: cliContext.outputFormat });
         break;
       }
@@ -1694,7 +1742,7 @@ async function main() {
           );
         }
         const org = await resolveOrg();
-        const { runPresetsRun } = await import("./run-YAAMSWKK.js");
+        const { runPresetsRun } = await import("./run-JLTNFOJK.js");
         await runPresetsRun({
           presetId: action,
           org,
@@ -1711,12 +1759,12 @@ async function main() {
     case "setup":
     case "install":
     case "i": {
-      const { setupSkill } = await import("./setup-skill-UEOROLCF.js");
+      const { setupSkill } = await import("./setup-skill-V3HDWN7T.js");
       setupSkill({ json: jsonMode, cloud: cli.flags.cloud });
       break;
     }
     case "uninstall": {
-      const { uninstallSkill } = await import("./setup-skill-UEOROLCF.js");
+      const { uninstallSkill } = await import("./setup-skill-V3HDWN7T.js");
       uninstallSkill({ json: jsonMode });
       break;
     }

package/dist/{configs-update-MVX7Q5NW.js → configs-update-VDZVBTIF.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-O7TMOF4W.js";
+} from "./chunk-GOQL7UCG.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-TFCNKBRC.js";
 import "./chunk-U73SABXK.js";

package/dist/{create-ANCO4FXB.js → create-DGCWT2YJ.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-O7TMOF4W.js";
+} from "./chunk-GOQL7UCG.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-TFCNKBRC.js";
 import "./chunk-U73SABXK.js";

package/dist/{drift-SHPMEJDU.js → drift-YZHCIQ5O.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-O7TMOF4W.js";
+} from "./chunk-GOQL7UCG.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-TFCNKBRC.js";
 import "./chunk-U73SABXK.js";

package/dist/{found-OPL4HWOW.js → found-6JAOLM6M.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-O7TMOF4W.js";
+} from "./chunk-GOQL7UCG.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-TFCNKBRC.js";
 import "./chunk-U73SABXK.js";