@chainpatrol/cli 0.23.1 → 0.25.0

package/CHANGELOG.md

@@ -1,5 +1,28 @@
 # @chainpatrol/cli
 
+## 0.25.0
+
+### Minor Changes
+
+- ea72356: Restructure SDK as the canonical API client layer. The SDK now exports a full ~30-method `ChainPatrolApiClient` class at `@chainpatrol/sdk/api` with pluggable auth via `CredentialProvider`, and the Claude Code skill content at `@chainpatrol/sdk/skill` with a standalone `chainpatrol-skill` binary. The CLI is refactored to wrap the SDK instead of maintaining its own HTTP client.
+
+### Patch Changes
+
+- Updated dependencies [ea72356]
+  - @chainpatrol/sdk@0.9.0
+
+## 0.24.0
+
+### Minor Changes
+
+- 2824e5c: Add filter-aware `totalCount` to `reports list`. The reports list response (and
+  `chainpatrol --json reports list`) now returns `totalCount`: the number of
+  reports matching the same filters as the query, independent of `--limit` /
+  `--cursor`. Consumers can use it as a denominator when sampling (e.g. "sampled
+  200 of ~4,235"), to decide whether to page through or narrow filters up front,
+  and to drive a progress indicator. Server-side work lives in `@chainpatrol/core`
+  and `@chainpatrol/external-trpc` (both private packages, no version bump needed).
+
 ## 0.23.1
 
 ### Patch Changes

package/README.md

@@ -125,6 +125,11 @@ chainpatrol reports list --org my-org --limit 5
 chainpatrol reports list --org my-org --status TODO --search "Phishing report"
 ```
 
+`reports list` responses include `totalCount` — the number of reports matching
+the current filters, independent of `--limit`/`--cursor`. Use it as a
+denominator when sampling (e.g. "sampled 200 of ~4,235") or to decide whether to
+paginate vs. narrow filters before fetching.
+
 ### Operations commands
 
 ```bash

package/dist/{breakdown-XA6UUD3T.js → breakdown-5DJMXRK4.js}

@@ -7,9 +7,9 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-GOQL7UCG.js";
-import "./chunk-EGWK6SRQ.js";
+} from "./chunk-OFUIYMPD.js";
 import "./chunk-TFCNKBRC.js";
+import "./chunk-EGWK6SRQ.js";
 import "./chunk-U73SABXK.js";
 
 // src/commands/metrics/breakdown.ts

package/dist/{check-NQZPNAUF.js → check-5P3EXVSN.js}

@@ -8,9 +8,8 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-GOQL7UCG.js";
+} from "./chunk-OFUIYMPD.js";
 import "./chunk-EGWK6SRQ.js";
-import "./chunk-TFCNKBRC.js";
 import "./chunk-U73SABXK.js";
 
 // src/commands/asset/check.ts

package/dist/chunk-MM5OAY2U.js

@@ -0,0 +1,317 @@
+import {
+  installCompletions,
+  uninstallCompletions
+} from "./chunk-6VTWWGNV.js";
+
+// src/commands/setup-skill.ts
+import { mkdirSync as mkdirSync2, writeFileSync as writeFileSync2, existsSync as existsSync2, readFileSync as readFileSync3, rmSync } from "fs";
+import { join as join2 } from "path";
+import { homedir as homedir2 } from "os";
+import { buildSkillContent, parseSkillVersion } from "@chainpatrol/sdk/skill";
+import { parseSkillVersion as parseSkillVersion2 } from "@chainpatrol/sdk/skill";
+
+// src/commands/login-hook.ts
+import { mkdirSync, writeFileSync, readFileSync, existsSync, unlinkSync } from "fs";
+import { homedir } from "os";
+import { join, dirname } from "path";
+var CLAUDE_DIR = join(homedir(), ".claude");
+var HOOK_DIR = join(CLAUDE_DIR, "hooks");
+var HOOK_FILE = join(HOOK_DIR, "chainpatrol-login.sh");
+var SETTINGS_FILE = join(CLAUDE_DIR, "settings.json");
+var HOOK_SCRIPT = `#!/bin/bash
+# chainpatrol auto-login hook \u2014 installed by \`chainpatrol setup\`.
+# On Claude Code session start, if the user has no chainpatrol credentials,
+# emit additionalContext so Claude surfaces the device-code login URL on
+# the first user turn. Safe to run repeatedly: no-ops once authenticated.
+set -uo pipefail
+
+CONFIG_DIR="\${CHAINPATROL_CONFIG_DIR:-$HOME/.chainpatrol}"
+if [ -s "$CONFIG_DIR/credentials.json" ]; then
+  exit 0
+fi
+
+# Only nudge when the CLI is reachable \u2014 otherwise we'd ask Claude to run
+# a command that isn't installed.
+if ! command -v chainpatrol >/dev/null 2>&1 \\
+   && [ ! -x /usr/local/bin/chainpatrol ] \\
+   && ! ls /opt/node*/bin/chainpatrol >/dev/null 2>&1; then
+  exit 0
+fi
+
+cat <<'JSON'
+{"hookSpecificOutput":{"hookEventName":"SessionStart","additionalContext":"chainpatrol auto-login: the user is not authenticated with ChainPatrol (no credentials.json found). If the user's task involves ChainPatrol or the chainpatrol CLI, start \`chainpatrol login\` in the background per the /chainpatrol skill's headless runbook (background + tail /tmp/cp-login.out) and surface the verification URL before doing anything else. If the user's task is unrelated, ignore this notice."}}
+JSON
+exit 0
+`;
+function installLoginHook() {
+  mkdirSync(HOOK_DIR, { recursive: true });
+  const hookWritten = !existsSync(HOOK_FILE) || readFileSync(HOOK_FILE, "utf-8") !== HOOK_SCRIPT;
+  if (hookWritten) {
+    writeFileSync(HOOK_FILE, HOOK_SCRIPT, { mode: 493 });
+  }
+  const settingsUpdated = registerHookInSettings();
+  return {
+    hookPath: HOOK_FILE,
+    hookWritten,
+    settingsPath: SETTINGS_FILE,
+    settingsUpdated
+  };
+}
+function uninstallLoginHook() {
+  let hookRemoved = false;
+  if (existsSync(HOOK_FILE)) {
+    unlinkSync(HOOK_FILE);
+    hookRemoved = true;
+  }
+  const settingsUpdated = unregisterHookFromSettings();
+  return { hookRemoved, settingsUpdated };
+}
+function readSettings() {
+  if (!existsSync(SETTINGS_FILE)) return {};
+  const raw = readFileSync(SETTINGS_FILE, "utf-8");
+  if (raw.trim() === "") return {};
+  return JSON.parse(raw);
+}
+function writeSettings(settings) {
+  mkdirSync(dirname(SETTINGS_FILE), { recursive: true });
+  writeFileSync(SETTINGS_FILE, JSON.stringify(settings, null, 2) + "\n", {
+    mode: 420
+  });
+}
+function hasHookEntry(settings) {
+  const matchers = settings.hooks?.SessionStart;
+  if (!Array.isArray(matchers)) return false;
+  return matchers.some(
+    (matcher) => Array.isArray(matcher?.hooks) && matcher.hooks.some((h) => h?.command === HOOK_FILE)
+  );
+}
+function registerHookInSettings() {
+  const settings = readSettings();
+  if (hasHookEntry(settings)) return false;
+  const hooks = settings.hooks ??= {};
+  const sessionStart = hooks.SessionStart ??= [];
+  sessionStart.push({
+    hooks: [{ type: "command", command: HOOK_FILE }]
+  });
+  writeSettings(settings);
+  return true;
+}
+function unregisterHookFromSettings() {
+  if (!existsSync(SETTINGS_FILE)) return false;
+  const settings = readSettings();
+  const sessionStart = settings.hooks?.SessionStart;
+  if (!Array.isArray(sessionStart)) return false;
+  let changed = false;
+  const filtered = sessionStart.map((matcher) => {
+    if (!Array.isArray(matcher?.hooks)) return matcher;
+    const remaining = matcher.hooks.filter((h) => h?.command !== HOOK_FILE);
+    if (remaining.length === matcher.hooks.length) return matcher;
+    changed = true;
+    return remaining.length > 0 ? { ...matcher, hooks: remaining } : null;
+  }).filter((m) => m !== null);
+  if (!changed) return false;
+  if (filtered.length === 0) {
+    delete settings.hooks.SessionStart;
+    if (Object.keys(settings.hooks).length === 0) {
+      delete settings.hooks;
+    }
+  } else {
+    settings.hooks.SessionStart = filtered;
+  }
+  writeSettings(settings);
+  return true;
+}
+
+// src/lib/version.ts
+import { readFileSync as readFileSync2 } from "fs";
+import { dirname as dirname2, resolve } from "path";
+import { fileURLToPath } from "url";
+var PACKAGE_NAME = "@chainpatrol/cli";
+var cached;
+function getCliVersion() {
+  if (cached !== void 0) return cached;
+  cached = resolveCliVersion();
+  return cached;
+}
+function resolveCliVersion() {
+  try {
+    const here = dirname2(fileURLToPath(import.meta.url));
+    const candidates = [
+      resolve(here, "..", "package.json"),
+      resolve(here, "..", "..", "package.json")
+    ];
+    for (const candidate of candidates) {
+      const version = tryReadVersion(candidate);
+      if (version) return version;
+    }
+  } catch {
+  }
+  return "0.0.0";
+}
+function tryReadVersion(path) {
+  try {
+    const raw = readFileSync2(path, "utf-8");
+    const pkg = JSON.parse(raw);
+    if (pkg.name === PACKAGE_NAME && typeof pkg.version === "string") {
+      return pkg.version;
+    }
+  } catch {
+  }
+  return void 0;
+}
+function compareVersions(a, b) {
+  const parsed = (value) => {
+    const hyphenIndex = value.indexOf("-");
+    const main = hyphenIndex >= 0 ? value.slice(0, hyphenIndex) : value;
+    const pre = hyphenIndex >= 0 ? value.slice(hyphenIndex + 1) : "";
+    const parts = main.split(".").map((n) => Number.parseInt(n, 10) || 0);
+    while (parts.length < 3) parts.push(0);
+    return { parts, pre };
+  };
+  const va = parsed(a);
+  const vb = parsed(b);
+  for (let i = 0; i < 3; i += 1) {
+    if (va.parts[i] !== vb.parts[i]) return va.parts[i] - vb.parts[i];
+  }
+  if (va.pre === vb.pre) return 0;
+  if (va.pre === "") return 1;
+  if (vb.pre === "") return -1;
+  return va.pre < vb.pre ? -1 : 1;
+}
+
+// src/commands/setup-skill.ts
+var SKILL_DIR = join2(homedir2(), ".claude", "skills", "chainpatrol");
+var SKILL_FILE = join2(SKILL_DIR, "SKILL.md");
+function getBundledSkillVersion() {
+  return getCliVersion();
+}
+function getBundledSkillContent() {
+  return buildSkillContent(getCliVersion());
+}
+function readInstalledSkillVersion() {
+  if (!existsSync2(SKILL_FILE)) return void 0;
+  try {
+    const raw = readFileSync3(SKILL_FILE, "utf-8");
+    return parseSkillVersion(raw);
+  } catch {
+    return void 0;
+  }
+}
+function isSkillInstalled() {
+  return existsSync2(SKILL_FILE);
+}
+var LOGO = `
+   \u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2588\u2557
+  \u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255D\u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2557
+  \u2588\u2588\u2551     \u2588\u2588\u2588\u2588\u2588\u2588\u2554\u255D
+  \u2588\u2588\u2551     \u2588\u2588\u2554\u2550\u2550\u2550\u255D
+  \u255A\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2588\u2588\u2551
+   \u255A\u2550\u2550\u2550\u2550\u2550\u255D\u255A\u2550\u255D
+  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+  C H A I N P A T R O L
+  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+`;
+function setupSkill(options) {
+  const skillContent = buildSkillContent(getCliVersion());
+  const skillAlreadyExists = existsSync2(SKILL_FILE);
+  const skillUpToDate = skillAlreadyExists && readFileSync3(SKILL_FILE, "utf-8") === skillContent;
+  let skillStatus;
+  if (!skillAlreadyExists) {
+    mkdirSync2(SKILL_DIR, { recursive: true });
+    writeFileSync2(SKILL_FILE, skillContent, { mode: 420 });
+    skillStatus = "installed";
+  } else if (!skillUpToDate) {
+    writeFileSync2(SKILL_FILE, skillContent, { mode: 420 });
+    skillStatus = "updated";
+  } else {
+    skillStatus = "up-to-date";
+  }
+  const completionResult = installCompletions();
+  const loginHookResult = options.cloud ? installLoginHook() : null;
+  const completionsChanged = completionResult.installed || completionResult.configuredShellRc;
+  const loginHookChanged = loginHookResult != null && (loginHookResult.hookWritten || loginHookResult.settingsUpdated);
+  const overallStatus = skillStatus !== "up-to-date" ? skillStatus : completionsChanged || loginHookChanged ? "updated" : "up-to-date";
+  if (options.json) {
+    console.log(
+      JSON.stringify({
+        status: overallStatus,
+        path: SKILL_FILE,
+        skill: { status: skillStatus, path: SKILL_FILE },
+        completions: completionResult,
+        loginHook: loginHookResult
+      })
+    );
+    return;
+  }
+  if (overallStatus === "up-to-date") {
+    console.log("Claude Code skill, completions, and login hook are already up to date.");
+    return;
+  }
+  console.log(LOGO);
+  if (skillStatus === "installed") {
+    console.log(`Installed Claude Code skill at ${SKILL_FILE}`);
+  } else if (skillStatus === "updated") {
+    console.log(`Updated Claude Code skill at ${SKILL_FILE}`);
+  }
+  console.log("You can now use /chainpatrol in Claude Code from any project.");
+  if (loginHookChanged && loginHookResult) {
+    console.log(`Installed auto-login hook at ${loginHookResult.hookPath}`);
+    if (loginHookResult.settingsUpdated) {
+      console.log(`Registered SessionStart hook in ${loginHookResult.settingsPath}`);
+    }
+  }
+  if (completionResult.installed) {
+    console.log(
+      `Installed ${completionResult.shell} completions at ${completionResult.path}`
+    );
+    if (completionResult.configuredShellRc) {
+      console.log("Added completion config to ~/.zshrc");
+    }
+    console.log('Run "exec zsh" or open a new terminal to enable tab completion.');
+  }
+}
+function uninstallSkill(options) {
+  const skillInstalled = existsSync2(SKILL_FILE);
+  if (skillInstalled) {
+    rmSync(SKILL_DIR, { recursive: true });
+  }
+  const removedCompletions = uninstallCompletions();
+  const loginHookResult = uninstallLoginHook();
+  const removedAnything = skillInstalled || removedCompletions || loginHookResult.hookRemoved || loginHookResult.settingsUpdated;
+  if (options.json) {
+    console.log(
+      JSON.stringify({
+        status: removedAnything ? "uninstalled" : "not-installed",
+        path: SKILL_FILE,
+        removedCompletions,
+        loginHook: loginHookResult
+      })
+    );
+    return;
+  }
+  if (!removedAnything) {
+    console.log("Claude Code skill is not installed.");
+    return;
+  }
+  if (skillInstalled) {
+    console.log("Removed Claude Code skill from " + SKILL_DIR);
+  }
+  if (loginHookResult.hookRemoved || loginHookResult.settingsUpdated) {
+    console.log("Removed chainpatrol auto-login hook.");
+  }
+  if (removedCompletions) {
+    console.log("Removed shell completions.");
+  }
+}
+
+export {
+  getCliVersion,
+  compareVersions,
+  getBundledSkillVersion,
+  getBundledSkillContent,
+  readInstalledSkillVersion,
+  isSkillInstalled,
+  setupSkill,
+  uninstallSkill,
+  parseSkillVersion2 as parseSkillVersion
+};

package/dist/chunk-OFUIYMPD.js

@@ -0,0 +1,64 @@
+import {
+  getValidCredentials
+} from "./chunk-EGWK6SRQ.js";
+import {
+  getConfig
+} from "./chunk-U73SABXK.js";
+
+// src/lib/api-client.ts
+import { ChainPatrolApiClient } from "@chainpatrol/sdk/api";
+
+// src/lib/credential-provider.ts
+function createCliCredentialProvider() {
+  return () => {
+    const envKey = process.env.CHAINPATROL_API_KEY;
+    if (envKey && envKey.trim().length > 0) {
+      return { kind: "api-key", value: envKey.trim() };
+    }
+    return { kind: "bearer", value: getValidCredentials().accessToken };
+  };
+}
+
+// src/lib/api-client.ts
+import {
+  DETECTION_CONFIDENCE_LEVELS,
+  DETECTION_REPORTED_FILTERS,
+  LIVENESS_FILTER_VALUES,
+  LIVENESS_STATUSES,
+  ORGANIZATION_METRICS_INCLUDE_FIELDS,
+  REPORT_REVIEW_DECISIONS,
+  REPORT_STATUSES,
+  TAKEDOWN_SORT_KEYS,
+  TAKEDOWN_STATUSES,
+  WATCHLIST_FILTER_VALUES
+} from "@chainpatrol/sdk/api";
+function createApiClient(options) {
+  const config = getConfig();
+  let credential;
+  if (options?.getCredential) {
+    credential = options.getCredential;
+  } else if (options?.getToken) {
+    const getToken = options.getToken;
+    credential = () => ({ kind: "bearer", value: getToken() });
+  } else {
+    credential = createCliCredentialProvider();
+  }
+  return new ChainPatrolApiClient({
+    baseUrl: options?.apiUrl ?? config.apiUrl,
+    credential
+  });
+}
+
+export {
+  createApiClient,
+  DETECTION_CONFIDENCE_LEVELS,
+  DETECTION_REPORTED_FILTERS,
+  LIVENESS_FILTER_VALUES,
+  LIVENESS_STATUSES,
+  ORGANIZATION_METRICS_INCLUDE_FIELDS,
+  REPORT_REVIEW_DECISIONS,
+  REPORT_STATUSES,
+  TAKEDOWN_SORT_KEYS,
+  TAKEDOWN_STATUSES,
+  WATCHLIST_FILTER_VALUES
+};

package/dist/{chunk-DVNTYW7L.js → chunk-PEX2A3IL.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-GOQL7UCG.js";
+} from "./chunk-OFUIYMPD.js";
 import {
   DateTime
 } from "./chunk-TFCNKBRC.js";