@chainpatrol/cli 1.5.0 → 1.6.0

package/CHANGELOG.md

@@ -1,5 +1,37 @@
 # @chainpatrol/cli
 
+## 1.6.0
+
+### Minor Changes
+
+- 9b15056: Adds `chainpatrol proposals review` for actioning proposals from the terminal.
+
+  ```
+  chainpatrol proposals review 4321 --asset-id 987 --decision approve --label "General Phishing"
+  chainpatrol proposals review 4321 --asset-id 987 --decision reject --reject-reason irrelevant
+  chainpatrol proposals review 4321 --asset-id 987 --decision watchlist --watchlist-reason DEAD
+  ```
+
+  Take both IDs from `proposals[].id` and `proposals[].asset.id` in
+  `reports list --needs-customer-review --json`. `--asset-id` is required and must
+  match the proposal's current asset.
+
+  A review cannot be undone, so the command prints the decision it is about to
+  submit and waits for `yes`. `--yes` skips the prompt and is required with
+  `--json`, `--no-input`, or a non-TTY stdin. `--dry-run` prints the payload and
+  submits nothing.
+
+  `--label` is required when approving, plus `--brand-id` for the labels that name
+  an impersonation target; `--reject-reason` when rejecting; `--watchlist-reason`
+  when watchlisting; and `--note` when that reason is `OTHER`. Decisions and
+  reasons are case-insensitive.
+
+### Patch Changes
+
+- Updated dependencies [a253313]
+- Updated dependencies [108f9f8]
+  - @chainpatrol/sdk@1.6.0
+
 ## 1.5.0
 
 ### Minor Changes

package/dist/{breakdown-5DJMXRK4.js → breakdown-2HAZ2MX5.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OFUIYMPD.js";
+} from "./chunk-322AVMUH.js";
 import "./chunk-TFCNKBRC.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-U73SABXK.js";

package/dist/{check-5P3EXVSN.js → check-5LJI7N5I.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OFUIYMPD.js";
+} from "./chunk-322AVMUH.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-U73SABXK.js";
 

package/dist/{chunk-OFUIYMPD.js → chunk-322AVMUH.js}

@@ -26,6 +26,8 @@ import {
   LIVENESS_FILTER_VALUES,
   LIVENESS_STATUSES,
   ORGANIZATION_METRICS_INCLUDE_FIELDS,
+  PROPOSAL_REJECT_REASONS,
+  PROPOSAL_WATCHLIST_REASONS,
   REPORT_REVIEW_DECISIONS,
   REPORT_STATUSES,
   TAKEDOWN_SORT_KEYS,
@@ -56,6 +58,8 @@ export {
   LIVENESS_FILTER_VALUES,
   LIVENESS_STATUSES,
   ORGANIZATION_METRICS_INCLUDE_FIELDS,
+  PROPOSAL_REJECT_REASONS,
+  PROPOSAL_WATCHLIST_REASONS,
   REPORT_REVIEW_DECISIONS,
   REPORT_STATUSES,
   TAKEDOWN_SORT_KEYS,

package/dist/{chunk-MM5OAY2U.js → chunk-55B34HJK.js}

@@ -1,7 +1,7 @@
 import {
   installCompletions,
   uninstallCompletions
-} from "./chunk-6VTWWGNV.js";
+} from "./chunk-P5DJRDMV.js";
 
 // src/commands/setup-skill.ts
 import { mkdirSync as mkdirSync2, writeFileSync as writeFileSync2, existsSync as existsSync2, readFileSync as readFileSync3, rmSync } from "fs";

package/dist/{chunk-PEX2A3IL.js → chunk-FPCN4SNK.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OFUIYMPD.js";
+} from "./chunk-322AVMUH.js";
 import {
   DateTime
 } from "./chunk-TFCNKBRC.js";

package/dist/{chunk-6VTWWGNV.js → chunk-P5DJRDMV.js}

@@ -22,6 +22,7 @@ _chainpatrol() {
     'detections:Validate, run, list, update detection configs and results'
     'metrics:Query organization metrics'
     'reports:Create, list, search reports from terminal'
+    'proposals:Review proposals waiting on your organization'
     'queues:Snapshot operations queues'
     'takedowns:List individual takedown records'
     'threats:List confirmed threats blocked by ChainPatrol'
@@ -106,6 +107,11 @@ _chainpatrol() {
         )
         _describe 'subcommand' reports_subcommands
         ;;
+      proposals)
+        local -a proposals_subcommands
+        proposals_subcommands=('review:Approve, reject, or watchlist a proposal')
+        _describe 'subcommand' proposals_subcommands
+        ;;
       queues)
         local -a queues_subcommands
         queues_subcommands=('snapshot:Show queue snapshot')
@@ -154,7 +160,7 @@ var BASH_COMPLETION = `_chainpatrol() {
   COMPREPLY=()
   cur="\${COMP_WORDS[COMP_CWORD]}"
   prev="\${COMP_WORDS[COMP_CWORD-1]}"
-  commands="login logout whoami asset configs detections metrics reports queues takedowns threats orgs presets setup uninstall completions help"
+  commands="login logout whoami asset configs detections metrics reports proposals queues takedowns threats orgs presets setup uninstall completions help"
 
   case "\${prev}" in
     chainpatrol)
@@ -181,6 +187,10 @@ var BASH_COMPLETION = `_chainpatrol() {
       COMPREPLY=( $(compgen -W "create list search" -- "\${cur}") )
       return 0
       ;;
+    proposals)
+      COMPREPLY=( $(compgen -W "review" -- "\${cur}") )
+      return 0
+      ;;
     queues)
       COMPREPLY=( $(compgen -W "snapshot" -- "\${cur}") )
       return 0

package/dist/cli.js

@@ -13,8 +13,8 @@ import {
   getCliVersion,
   isSkillInstalled,
   readInstalledSkillVersion
-} from "./chunk-MM5OAY2U.js";
-import "./chunk-6VTWWGNV.js";
+} from "./chunk-55B34HJK.js";
+import "./chunk-P5DJRDMV.js";
 import {
   DateTime
 } from "./chunk-TFCNKBRC.js";
@@ -426,6 +426,39 @@ var HELP = {
       "chainpatrol reports list --org acme --needs-customer-review"
     ]
   },
+  proposals: {
+    description: "Review the proposals waiting on your organization.",
+    usage: "chainpatrol proposals review <proposalId> [options]",
+    examples: [
+      "chainpatrol reports list --org acme --needs-customer-review",
+      'chainpatrol proposals review 4321 --asset-id 987 --decision approve --label "General Phishing"',
+      "chainpatrol proposals review 4321 --asset-id 987 --decision reject --reject-reason irrelevant"
+    ]
+  },
+  "proposals review": {
+    description: "Approve, reject, or watchlist a proposal that is waiting on your organization's review \u2014 the same queue the Review page shows and `reports list --needs-customer-review` returns. Find the proposal and asset IDs in that listing's `proposals[].id` and `proposals[].asset.id`. A review cannot be undone over the API, so the command asks for confirmation unless you pass --yes, and it is capped at 10 reviews per organization per day across all of the org's API credentials.",
+    usage: "chainpatrol proposals review <proposalId> --asset-id <id> --decision <approve|reject|watchlist> [options]",
+    options: [
+      "--proposal-id <id>         Proposal to review (alternative to the positional arg)",
+      "--asset-id <id>            Asset the proposal targets; must match, or the API returns 409",
+      "--decision <d>             approve|reject|watchlist (watchlist rejects and parks the asset)",
+      '--label <text>             Block label, required when approving. Quote it: e.g. "General Phishing", "Brand Impersonation", "Employee Impersonation", "Fake Employee", "Targeting Org Users", "C2 Server", "False Positive"',
+      "--brand-id <id>            Brand the asset impersonates; required for Brand/Employee Impersonation",
+      "--reject-reason <r>        Required when rejecting: irrelevant|no_malicious_activity|insufficient_evidence|not_targeting_org|decayed",
+      "--watchlist-reason <r>     Required when watchlisting: DEAD|PARKING|NOT_ENOUGH_EVIDENCE|OTHER",
+      "--note <text>              Free-text detail; required when --watchlist-reason OTHER",
+      "--org <slug>               Organization slug (optional for org-scoped API keys)",
+      "--yes                      Skip the confirmation prompt (required when not on a TTY)",
+      "--dry-run                  Preview the payload without submitting"
+    ],
+    examples: [
+      'chainpatrol proposals review 4321 --asset-id 987 --decision approve --label "General Phishing" --yes',
+      'chainpatrol proposals review 4321 --asset-id 987 --decision approve --label "Brand Impersonation" --brand-id 12 --yes',
+      "chainpatrol proposals review 4321 --asset-id 987 --decision reject --reject-reason no_malicious_activity --yes",
+      'chainpatrol proposals review 4321 --asset-id 987 --decision watchlist --watchlist-reason OTHER --note "Registrar suspended it" --yes',
+      "chainpatrol proposals review 4321 --asset-id 987 --decision reject --reject-reason decayed --dry-run"
+    ]
+  },
   queues: {
     description: "Snapshot operations review/takedown queues.",
     usage: "chainpatrol queues snapshot [--org <slug>|--all]",
@@ -681,6 +714,7 @@ function getTopLevelHelp() {
     "    healthchecks  List and run organization healthchecks",
     "    metrics       Query organization metrics and breakdowns",
     "    reports       Create, list, and search reports from terminal",
+    "    proposals     Review proposals waiting on your organization",
     "    queues        Snapshot operations review/takedown queues",
     "    takedowns     List individual takedown records",
     "    threats       List confirmed threats blocked by ChainPatrol",
@@ -854,6 +888,7 @@ var COMMANDS = [
   "healthchecks",
   "metrics",
   "reports",
+  "proposals",
   "queues",
   "takedowns",
   "threats",
@@ -936,6 +971,15 @@ ${getTopLevelHelp()}
     search: { type: "string" },
     reportedByCustomer: { type: "boolean" },
     needsCustomerReview: { type: "boolean" },
+    proposalId: { type: "number" },
+    assetId: { type: "number" },
+    decision: { type: "string" },
+    label: { type: "string" },
+    brandId: { type: "number" },
+    rejectReason: { type: "string" },
+    watchlistReason: { type: "string" },
+    note: { type: "string" },
+    yes: { type: "boolean", default: false },
     attachmentUrl: { type: "string" },
     contactInfo: { type: "string" },
     externalSubmissionLink: { type: "string" },
@@ -1115,12 +1159,12 @@ function parseAttachmentUrls() {
 }
 async function handleConfigsList(org) {
   if (jsonMode) {
-    const { listConfigsJson } = await import("./list-json-NJ5IFRDE.js");
+    const { listConfigsJson } = await import("./list-json-ZR3XOQPJ.js");
     await listConfigsJson({ org });
     return;
   }
   const { render } = await import("ink");
-  const { default: ConfigsList } = await import("./list-2RHEVI2T.js");
+  const { default: ConfigsList } = await import("./list-6CAKS43I.js");
   const { default: React } = await import("react");
   render(React.createElement(ConfigsList, { org }));
 }
@@ -1159,7 +1203,7 @@ async function main() {
     return;
   }
   if (cliContext.dryRun) {
-    const dryRunSupported = command === "reports" && subcommand === "create" || command === "detections" && subcommand === "run" || command === "detections" && subcommand === "configs" && action === "run" || command === "detections" && subcommand === "configs" && action === "update";
+    const dryRunSupported = command === "reports" && subcommand === "create" || command === "proposals" && subcommand === "review" || command === "detections" && subcommand === "run" || command === "detections" && subcommand === "configs" && action === "run" || command === "detections" && subcommand === "configs" && action === "update";
     if (!dryRunSupported) {
       throw new CliExitError(
         "--dry-run is only supported for mutation commands.",
@@ -1220,7 +1264,7 @@ async function main() {
         const positionals = cli.input.slice(2);
         const flagAssets = parseAssetInputs();
         const contents = [...positionals, ...flagAssets];
-        const { runAssetCheck } = await import("./check-5P3EXVSN.js");
+        const { runAssetCheck } = await import("./check-5LJI7N5I.js");
         await runAssetCheck({
           contents,
           json: jsonMode,
@@ -1230,7 +1274,7 @@ async function main() {
         break;
       }
       if (subcommand === "list") {
-        const { runAssetList } = await import("./list-GEJQ6N2Y.js");
+        const { runAssetList } = await import("./list-UXYGISAK.js");
         await runAssetList({
           type: cli.flags.type ?? cli.flags.assetType,
           status: cli.flags.assetStatus ?? cli.flags.status,
@@ -1255,7 +1299,7 @@ async function main() {
           }
           return n;
         });
-        const { runAssetSearch } = await import("./search-Y37B2JVP.js");
+        const { runAssetSearch } = await import("./search-W5QM2IOC.js");
         await runAssetSearch({
           contents: contents.length > 0 ? contents : void 0,
           ids: ids.length > 0 ? ids : void 0,
@@ -1280,7 +1324,7 @@ async function main() {
     case "detections": {
       const org = await resolveOrg();
       if (subcommand === "healthcheck") {
-        const { runDetectionsHealthcheck } = await import("./healthcheck-5YEZCTXC.js");
+        const { runDetectionsHealthcheck } = await import("./healthcheck-34LQTSVZ.js");
         await runDetectionsHealthcheck({
           org,
           source: cli.flags.source,
@@ -1295,7 +1339,7 @@ async function main() {
         break;
       }
       if (subcommand === "validate") {
-        const { runDetectionsValidate } = await import("./validate-OYTNB2ZM.js");
+        const { runDetectionsValidate } = await import("./validate-WB5367QN.js");
         await runDetectionsValidate({
           org,
           source: cli.flags.source,
@@ -1310,7 +1354,7 @@ async function main() {
         break;
       }
       if (subcommand === "drift") {
-        const { runDetectionsDrift } = await import("./drift-TCZELVHO.js");
+        const { runDetectionsDrift } = await import("./drift-BGWNH6QE.js");
         await runDetectionsDrift({
           org,
           source: cli.flags.source,
@@ -1324,7 +1368,7 @@ async function main() {
         break;
       }
       if (subcommand === "run") {
-        const { runDetectionsRun } = await import("./run-KOZXEYTL.js");
+        const { runDetectionsRun } = await import("./run-LZZOV4HG.js");
         await runDetectionsRun({
           org,
           configId: cli.flags.configId,
@@ -1338,7 +1382,7 @@ async function main() {
         break;
       }
       if (subcommand === "list") {
-        const { runDetectionsList } = await import("./list-W6JZUNS2.js");
+        const { runDetectionsList } = await import("./list-DJFIKDY6.js");
         await runDetectionsList({
           org,
           cursor: cli.flags.cursor,
@@ -1367,7 +1411,7 @@ async function main() {
           break;
         }
         if (action === "run") {
-          const { runDetectionsRun } = await import("./run-KOZXEYTL.js");
+          const { runDetectionsRun } = await import("./run-LZZOV4HG.js");
           await runDetectionsRun({
             org,
             configId: cli.flags.configId,
@@ -1385,7 +1429,7 @@ async function main() {
             throw new Error("detections configs update requires --config-id");
           }
           const configPatch = getConfigPatchFromSetFlags();
-          const { runDetectionsConfigsUpdate } = await import("./configs-update-TAYT4JTU.js");
+          const { runDetectionsConfigsUpdate } = await import("./configs-update-N7ZIWWKQ.js");
           await runDetectionsConfigsUpdate({
             org,
             configId: cli.flags.configId,
@@ -1421,7 +1465,7 @@ async function main() {
         const slugs = parseCsvList(cli.flags.slugs);
         const allMyOrgs = cli.flags.allMyOrgs;
         const org2 = slugs && slugs.length > 0 || allMyOrgs ? void 0 : await tryResolveOrg();
-        const { runMetricsOrganization } = await import("./organization-N6RMWKJM.js");
+        const { runMetricsOrganization } = await import("./organization-YAID36GZ.js");
         await runMetricsOrganization({
           org: org2,
           slugs,
@@ -1440,7 +1484,7 @@ async function main() {
       }
       const org = await resolveOrg();
       if (subcommand === "summary") {
-        const { runMetricsSummary } = await import("./summary-XCN3DRYP.js");
+        const { runMetricsSummary } = await import("./summary-XA3PVJIW.js");
         await runMetricsSummary({
           org,
           from: cli.flags.from,
@@ -1453,7 +1497,7 @@ async function main() {
         break;
       }
       if (subcommand === "found") {
-        const { runMetricsFound } = await import("./found-NCP6H2SD.js");
+        const { runMetricsFound } = await import("./found-QOARB5G2.js");
         await runMetricsFound({
           org,
           from: cli.flags.from,
@@ -1470,7 +1514,7 @@ async function main() {
         if (!by || !["day", "type", "brand"].includes(by)) {
           throw new Error("metrics breakdown requires --by <day|type|brand>");
         }
-        const { runMetricsBreakdown } = await import("./breakdown-5DJMXRK4.js");
+        const { runMetricsBreakdown } = await import("./breakdown-2HAZ2MX5.js");
         await runMetricsBreakdown({
           org,
           by,
@@ -1491,7 +1535,7 @@ async function main() {
     case "reports": {
       if (subcommand === "list") {
         const org = await resolveOrg();
-        const { runReportsList } = await import("./list-WQBXC3QS.js");
+        const { runReportsList } = await import("./list-AG6LWNMN.js");
         await runReportsList({
           org,
           limit: cli.flags.limit,
@@ -1522,7 +1566,7 @@ async function main() {
       }
       if (subcommand === "create") {
         const org = await tryResolveOrg();
-        const { runReportsCreate } = await import("./create-UXRULUR7.js");
+        const { runReportsCreate } = await import("./create-4ZJ7DXHX.js");
         await runReportsCreate({
           org,
           title: cli.flags.title,
@@ -1544,7 +1588,7 @@ async function main() {
         const positionals = cli.input.slice(2);
         const flagAssets = parseAssetInputs();
         const assetContents = [...positionals, ...flagAssets];
-        const { runReportsSearch } = await import("./search-M6EKPO4D.js");
+        const { runReportsSearch } = await import("./search-OGGKNPUJ.js");
         await runReportsSearch({
           assetContents,
           org,
@@ -1560,9 +1604,38 @@ async function main() {
         subcommand ? `Unknown subcommand: reports ${subcommand}${hint ? `. Did you mean "reports ${hint}"?` : ""}` : "Usage: chainpatrol reports <create|list|search>"
       );
     }
+    case "proposals": {
+      if (subcommand === "review") {
+        const org = await tryResolveOrg();
+        const positionalProposalId = cli.input[2];
+        const { runProposalsReview } = await import("./review-7A7WV73T.js");
+        await runProposalsReview({
+          org,
+          proposalId: cli.flags.proposalId ?? (positionalProposalId ? Number(positionalProposalId) : void 0),
+          assetId: cli.flags.assetId,
+          decision: cli.flags.decision,
+          label: cli.flags.label,
+          brandId: cli.flags.brandId,
+          rejectReason: cli.flags.rejectReason,
+          watchlistReason: cli.flags.watchlistReason,
+          note: cli.flags.note,
+          yes: cli.flags.yes,
+          noInput: cli.flags.noInput,
+          json: jsonMode,
+          outputFormat: cliContext.outputFormat,
+          explain: cliContext.explain,
+          dryRun: cliContext.dryRun
+        });
+        break;
+      }
+      const hint = subcommand ? suggest(subcommand, ["review"]) : null;
+      throw new Error(
+        subcommand ? `Unknown subcommand: proposals ${subcommand}${hint ? `. Did you mean "proposals ${hint}"?` : ""}` : "Usage: chainpatrol proposals review <proposalId> --asset-id <id> --decision <approve|reject|watchlist>"
+      );
+    }
     case "threats": {
       if (subcommand === "list") {
-        const { runThreatsList } = await import("./list-SCA73PLA.js");
+        const { runThreatsList } = await import("./list-UPY6PHY4.js");
         await runThreatsList({
           query: cli.flags.query,
           from: cli.flags.from,
@@ -1585,7 +1658,7 @@ async function main() {
     case "takedowns": {
       if (subcommand === "list") {
         const org = await tryResolveOrg();
-        const { runTakedownsList } = await import("./list-TA4HYD66.js");
+        const { runTakedownsList } = await import("./list-PAJBOVN2.js");
         await runTakedownsList({
           org,
           query: cli.flags.query,
@@ -1616,7 +1689,7 @@ async function main() {
     }
     case "queues": {
       if (subcommand === "snapshot") {
-        const { runQueuesSnapshot } = await import("./snapshot-RFGSAHO7.js");
+        const { runQueuesSnapshot } = await import("./snapshot-TLSOPK7C.js");
         await runQueuesSnapshot({
           org: cli.flags.org,
           all: cli.flags.all,
@@ -1634,7 +1707,7 @@ async function main() {
     }
     case "orgs": {
       if (subcommand === "list") {
-        const { runOrgsList } = await import("./list-BAPTZNTM.js");
+        const { runOrgsList } = await import("./list-MHOHKFXT.js");
         await runOrgsList({
           query: cli.flags.query,
           subscriptionStatus: cli.flags.subscriptionStatus,
@@ -1656,7 +1729,7 @@ async function main() {
       if (subcommand === "get") {
         const positionalSlug = action;
         const slug = positionalSlug ?? await tryResolveOrg();
-        const { runOrgsGet } = await import("./get-SM5KGJVA.js");
+        const { runOrgsGet } = await import("./get-ON5JOCV7.js");
         await runOrgsGet({
           slug,
           json: jsonMode,
@@ -1666,7 +1739,7 @@ async function main() {
       }
       if (subcommand === "assets") {
         if (action === "list") {
-          const { runOrgsAssetsList } = await import("./list-MPSB2DYU.js");
+          const { runOrgsAssetsList } = await import("./list-H6QWWXOU.js");
           await runOrgsAssetsList({
             type: cli.flags.type ?? cli.flags.assetType,
             groupId: cli.flags.groupId,
@@ -1682,7 +1755,7 @@ async function main() {
       }
       if (subcommand === "asset-groups") {
         if (action === "list") {
-          const { runOrgsAssetGroupsList } = await import("./list-QLMFMYU6.js");
+          const { runOrgsAssetGroupsList } = await import("./list-SJFJT4V3.js");
           await runOrgsAssetGroupsList({
             json: jsonMode,
             outputFormat: cliContext.outputFormat
@@ -1699,12 +1772,12 @@ async function main() {
     case "brands": {
       if (subcommand === "list") {
         const rawType = cli.flags.type?.toUpperCase();
-        if (rawType && rawType !== "ORGANIZATION" && rawType !== "INDIVIDUAL") {
+        if (rawType && rawType !== "ORGANIZATION" && rawType !== "INDIVIDUAL" && rawType !== "PRODUCT") {
           throw new Error(
-            "brands list --type must be ORGANIZATION or INDIVIDUAL (case-insensitive)."
+            "brands list --type must be ORGANIZATION, INDIVIDUAL, or PRODUCT (case-insensitive)."
           );
         }
-        const { runBrandsList } = await import("./list-4YBWU2JZ.js");
+        const { runBrandsList } = await import("./list-IVFZGLKN.js");
         await runBrandsList({
           type: rawType,
           json: jsonMode,
@@ -1714,11 +1787,11 @@ async function main() {
       }
       const hint = subcommand ? suggest(subcommand, ["list"]) : null;
       throw new Error(
-        subcommand ? `Unknown subcommand: brands ${subcommand}${hint ? `. Did you mean "brands ${hint}"?` : ""}` : "Usage: chainpatrol brands list [--type ORGANIZATION|INDIVIDUAL]"
+        subcommand ? `Unknown subcommand: brands ${subcommand}${hint ? `. Did you mean "brands ${hint}"?` : ""}` : "Usage: chainpatrol brands list [--type ORGANIZATION|INDIVIDUAL|PRODUCT]"
       );
     }
     case "whoami": {
-      const { runWhoami } = await import("./whoami-5WCW3FOZ.js");
+      const { runWhoami } = await import("./whoami-YE3V6I65.js");
       await runWhoami({
         json: jsonMode,
         outputFormat: cliContext.outputFormat
@@ -1727,7 +1800,7 @@ async function main() {
     }
     case "healthchecks": {
       if (subcommand === "list") {
-        const { runHealthchecksList } = await import("./list-QJYRXPXM.js");
+        const { runHealthchecksList } = await import("./list-W6CF25ZS.js");
         await runHealthchecksList({
           json: jsonMode,
           outputFormat: cliContext.outputFormat
@@ -1741,7 +1814,7 @@ async function main() {
           thresholds.minResults = cli.flags.minResults;
         if (cli.flags.lookbackHours !== void 0)
           thresholds.lookbackHours = cli.flags.lookbackHours;
-        const { runHealthchecksRun } = await import("./run-RRG7D4SN.js");
+        const { runHealthchecksRun } = await import("./run-AIYPHWFJ.js");
         await runHealthchecksRun({
           org,
           id: action,
@@ -1759,7 +1832,7 @@ async function main() {
     }
     case "presets": {
       if (subcommand === "list") {
-        const { runPresetsList } = await import("./list-23C72EH4.js");
+        const { runPresetsList } = await import("./list-JG5ARDTR.js");
         await runPresetsList({ outputFormat: cliContext.outputFormat });
         break;
       }
@@ -1770,7 +1843,7 @@ async function main() {
           );
         }
         const org = await resolveOrg();
-        const { runPresetsRun } = await import("./run-TUADYLU7.js");
+        const { runPresetsRun } = await import("./run-YP4O5VXZ.js");
         await runPresetsRun({
           presetId: action,
           org,
@@ -1787,17 +1860,17 @@ async function main() {
     case "setup":
     case "install":
     case "i": {
-      const { setupSkill } = await import("./setup-skill-RRTDEOR4.js");
+      const { setupSkill } = await import("./setup-skill-2KCAXU2U.js");
       setupSkill({ json: jsonMode, cloud: cli.flags.cloud });
       break;
     }
     case "uninstall": {
-      const { uninstallSkill } = await import("./setup-skill-RRTDEOR4.js");
+      const { uninstallSkill } = await import("./setup-skill-2KCAXU2U.js");
       uninstallSkill({ json: jsonMode });
       break;
     }
     case "completions": {
-      const { printCompletions } = await import("./completions-ILC76OX5.js");
+      const { printCompletions } = await import("./completions-FEUVEC5N.js");
       printCompletions(subcommand);
       break;
     }

package/dist/{completions-ILC76OX5.js → completions-FEUVEC5N.js}

@@ -3,7 +3,7 @@ import {
   installCompletions,
   printCompletions,
   uninstallCompletions
-} from "./chunk-6VTWWGNV.js";
+} from "./chunk-P5DJRDMV.js";
 export {
   getCompletionScript,
   installCompletions,

package/dist/{configs-update-TAYT4JTU.js → configs-update-N7ZIWWKQ.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OFUIYMPD.js";
+} from "./chunk-322AVMUH.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-U73SABXK.js";
 

package/dist/{create-UXRULUR7.js → create-4ZJ7DXHX.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OFUIYMPD.js";
+} from "./chunk-322AVMUH.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-U73SABXK.js";
 

package/dist/{drift-TCZELVHO.js → drift-BGWNH6QE.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OFUIYMPD.js";
+} from "./chunk-322AVMUH.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-U73SABXK.js";
 

package/dist/{found-NCP6H2SD.js → found-QOARB5G2.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OFUIYMPD.js";
+} from "./chunk-322AVMUH.js";
 import "./chunk-TFCNKBRC.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-U73SABXK.js";

package/dist/{get-SM5KGJVA.js → get-ON5JOCV7.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OFUIYMPD.js";
+} from "./chunk-322AVMUH.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-U73SABXK.js";
 

package/dist/{healthcheck-5YEZCTXC.js → healthcheck-34LQTSVZ.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OFUIYMPD.js";
+} from "./chunk-322AVMUH.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-U73SABXK.js";
 

package/dist/{list-2RHEVI2T.js → list-6CAKS43I.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-JCMWDZYY.js";
 import {
   createApiClient
-} from "./chunk-OFUIYMPD.js";
+} from "./chunk-322AVMUH.js";
 import {
   AuthCorruptedError,
   AuthExpiredError,

package/dist/{list-WQBXC3QS.js → list-AG6LWNMN.js}

@@ -10,7 +10,7 @@ import {
   REPORT_REVIEW_DECISIONS,
   REPORT_STATUSES,
   createApiClient
-} from "./chunk-OFUIYMPD.js";
+} from "./chunk-322AVMUH.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-U73SABXK.js";
 

package/dist/{list-W6JZUNS2.js → list-DJFIKDY6.js}

@@ -12,7 +12,7 @@ import {
   LIVENESS_FILTER_VALUES,
   WATCHLIST_FILTER_VALUES,
   createApiClient
-} from "./chunk-OFUIYMPD.js";
+} from "./chunk-322AVMUH.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-U73SABXK.js";
 

package/dist/{list-MPSB2DYU.js → list-H6QWWXOU.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OFUIYMPD.js";
+} from "./chunk-322AVMUH.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-U73SABXK.js";
 

package/dist/{list-4YBWU2JZ.js → list-IVFZGLKN.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OFUIYMPD.js";
+} from "./chunk-322AVMUH.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-U73SABXK.js";
 

package/dist/{list-23C72EH4.js → list-JG5ARDTR.js}

@@ -1,12 +1,12 @@
 import {
   PRESETS
-} from "./chunk-PEX2A3IL.js";
+} from "./chunk-FPCN4SNK.js";
 import "./chunk-E2LAMILJ.js";
 import {
   printOutput,
   toCsvRows
 } from "./chunk-VFT3TD3E.js";
-import "./chunk-OFUIYMPD.js";
+import "./chunk-322AVMUH.js";
 import "./chunk-TFCNKBRC.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-U73SABXK.js";

package/dist/{list-BAPTZNTM.js → list-MHOHKFXT.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OFUIYMPD.js";
+} from "./chunk-322AVMUH.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-U73SABXK.js";
 

package/dist/{list-TA4HYD66.js → list-PAJBOVN2.js}

@@ -11,7 +11,7 @@ import {
   TAKEDOWN_SORT_KEYS,
   TAKEDOWN_STATUSES,
   createApiClient
-} from "./chunk-OFUIYMPD.js";
+} from "./chunk-322AVMUH.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-U73SABXK.js";
 

package/dist/{list-QLMFMYU6.js → list-SJFJT4V3.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OFUIYMPD.js";
+} from "./chunk-322AVMUH.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-U73SABXK.js";
 

package/dist/{list-SCA73PLA.js → list-UPY6PHY4.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OFUIYMPD.js";
+} from "./chunk-322AVMUH.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-U73SABXK.js";
 

package/dist/{list-GEJQ6N2Y.js → list-UXYGISAK.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OFUIYMPD.js";
+} from "./chunk-322AVMUH.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-U73SABXK.js";
 

package/dist/{list-QJYRXPXM.js → list-W6CF25ZS.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OFUIYMPD.js";
+} from "./chunk-322AVMUH.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-U73SABXK.js";
 

package/dist/{list-json-NJ5IFRDE.js → list-json-ZR3XOQPJ.js}

@@ -1,6 +1,6 @@
 import {
   createApiClient
-} from "./chunk-OFUIYMPD.js";
+} from "./chunk-322AVMUH.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-U73SABXK.js";
 

package/dist/{organization-N6RMWKJM.js → organization-YAID36GZ.js}

@@ -8,7 +8,7 @@ import {
 import {
   ORGANIZATION_METRICS_INCLUDE_FIELDS,
   createApiClient
-} from "./chunk-OFUIYMPD.js";
+} from "./chunk-322AVMUH.js";
 import "./chunk-TFCNKBRC.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-U73SABXK.js";

package/dist/review-7A7WV73T.js

@@ -0,0 +1,270 @@
+import {
+  CliExitError,
+  ExitCode
+} from "./chunk-E2LAMILJ.js";
+import {
+  printOutput,
+  toCsvRows
+} from "./chunk-VFT3TD3E.js";
+import {
+  PROPOSAL_REJECT_REASONS,
+  PROPOSAL_WATCHLIST_REASONS,
+  createApiClient
+} from "./chunk-322AVMUH.js";
+import "./chunk-EGWK6SRQ.js";
+import "./chunk-U73SABXK.js";
+
+// src/commands/proposals/review.ts
+var BRAND_REQUIRED_LABELS = ["brand impersonation", "employee impersonation"];
+var DECISIONS = ["APPROVE", "REJECT", "WATCHLIST"];
+function parsePositiveId(value, flag) {
+  if (value === void 0) {
+    throw new CliExitError(`proposals review requires ${flag} <id>.`, ExitCode.USAGE);
+  }
+  if (!Number.isInteger(value) || value < 1) {
+    throw new CliExitError(`${flag} must be a positive integer.`, ExitCode.USAGE);
+  }
+  return value;
+}
+function parseDecision(value) {
+  if (!value) {
+    throw new CliExitError(
+      "proposals review requires --decision <approve|reject|watchlist>.",
+      ExitCode.USAGE
+    );
+  }
+  const normalized = value.trim().toUpperCase();
+  if (!DECISIONS.includes(normalized)) {
+    throw new CliExitError(
+      `Invalid --decision '${value}'. Valid: approve, reject, watchlist.`,
+      ExitCode.USAGE
+    );
+  }
+  return normalized;
+}
+function parseRejectReason(value) {
+  if (!value) {
+    throw new CliExitError(
+      `--reject-reason is required when --decision reject. Valid: ${PROPOSAL_REJECT_REASONS.join(
+        ", "
+      )}`,
+      ExitCode.USAGE
+    );
+  }
+  const normalized = value.trim().toLowerCase();
+  if (!PROPOSAL_REJECT_REASONS.includes(normalized)) {
+    throw new CliExitError(
+      `Invalid --reject-reason '${value}'. Valid: ${PROPOSAL_REJECT_REASONS.join(", ")}`,
+      ExitCode.USAGE
+    );
+  }
+  return normalized;
+}
+function parseWatchlistReason(value) {
+  if (!value) {
+    throw new CliExitError(
+      `--watchlist-reason is required when --decision watchlist. Valid: ${PROPOSAL_WATCHLIST_REASONS.join(
+        ", "
+      )}`,
+      ExitCode.USAGE
+    );
+  }
+  const normalized = value.trim().toUpperCase();
+  if (!PROPOSAL_WATCHLIST_REASONS.includes(normalized)) {
+    throw new CliExitError(
+      `Invalid --watchlist-reason '${value}'. Valid: ${PROPOSAL_WATCHLIST_REASONS.join(
+        ", "
+      )}`,
+      ExitCode.USAGE
+    );
+  }
+  return normalized;
+}
+function buildReviewInput(options) {
+  const proposalId = parsePositiveId(options.proposalId, "--proposal-id");
+  const assetId = parsePositiveId(options.assetId, "--asset-id");
+  const decision = parseDecision(options.decision);
+  const input = {
+    proposalId,
+    assetId,
+    slug: options.org,
+    decision
+  };
+  if (decision === "APPROVE") {
+    const label = options.label?.trim();
+    if (!label) {
+      throw new CliExitError(
+        "--label is required when --decision approve.",
+        ExitCode.USAGE
+      );
+    }
+    if (BRAND_REQUIRED_LABELS.includes(label.toLowerCase()) && options.brandId === void 0) {
+      throw new CliExitError(
+        `--brand-id is required when --label is '${label}'. List your brands with \`chainpatrol brands list\`.`,
+        ExitCode.USAGE
+      );
+    }
+    input.label = label;
+    if (options.brandId !== void 0) {
+      input.brandId = parsePositiveId(options.brandId, "--brand-id");
+    }
+  }
+  if (decision === "REJECT") {
+    input.rejectReason = parseRejectReason(options.rejectReason);
+  }
+  if (decision === "WATCHLIST") {
+    const watchlistReason = parseWatchlistReason(options.watchlistReason);
+    if (watchlistReason === "OTHER" && !options.note?.trim()) {
+      throw new CliExitError(
+        "--note is required when --watchlist-reason OTHER, since the note becomes the reason.",
+        ExitCode.USAGE
+      );
+    }
+    input.watchlistReason = watchlistReason;
+  }
+  const note = options.note?.trim();
+  if (note) {
+    input.note = note;
+  }
+  return input;
+}
+function describeReview(input) {
+  const lines = [
+    `Decision: ${input.decision}`,
+    `Proposal: #${input.proposalId}`,
+    `Asset: #${input.assetId}`,
+    `Organization: ${input.slug ?? "from credential context"}`
+  ];
+  if (input.label) {
+    lines.push(`Label: ${input.label}`);
+  }
+  if (input.brandId !== void 0) {
+    lines.push(`Brand ID: ${input.brandId}`);
+  }
+  if (input.rejectReason) {
+    lines.push(`Reject reason: ${input.rejectReason}`);
+  }
+  if (input.watchlistReason) {
+    lines.push(`Watchlist reason: ${input.watchlistReason}`);
+  }
+  if (input.note) {
+    lines.push(`Note: ${input.note}`);
+  }
+  return lines;
+}
+async function promptForConfirmation(summary) {
+  const { createInterface } = await import("readline/promises");
+  const rl = createInterface({ input: process.stdin, output: process.stdout });
+  try {
+    const answer = await rl.question(`${summary}
+Type "yes" to continue: `);
+    const normalized = answer.trim().toLowerCase();
+    return normalized === "y" || normalized === "yes";
+  } finally {
+    rl.close();
+  }
+}
+async function runProposalsReview(options) {
+  const input = buildReviewInput(options);
+  const outputFormat = options.outputFormat ?? (options.json ? "json" : "human");
+  const details = describeReview(input);
+  if (options.dryRun) {
+    printOutput({
+      outputFormat,
+      json: {
+        dryRun: true,
+        mutation: "organization.proposals.review",
+        payload: input,
+        explanation: options.explain ? "This command records a customer review on the proposal and, for APPROVE, blocks the asset." : void 0
+      },
+      markdown: ["# Dry Run: Proposal Review", "", ...details.map((d) => `- ${d}`)].join(
+        "\n"
+      ),
+      csv: toCsvRows([
+        {
+          proposalId: input.proposalId,
+          assetId: input.assetId,
+          decision: input.decision,
+          label: input.label ?? "",
+          rejectReason: input.rejectReason ?? "",
+          watchlistReason: input.watchlistReason ?? ""
+        }
+      ]),
+      human: () => {
+        console.log("Dry run only. No review was submitted.");
+        for (const line of details) {
+          console.log(line);
+        }
+      }
+    });
+    return;
+  }
+  if (!options.yes) {
+    const summary = [
+      "About to submit a review that cannot be undone over the API:",
+      ...details.map((line) => `  ${line}`)
+    ].join("\n");
+    if (options.confirm) {
+      if (!await options.confirm(summary)) {
+        console.log("Aborted. No review was submitted.");
+        return;
+      }
+    } else if (options.noInput || outputFormat !== "human" || !process.stdin.isTTY) {
+      throw new CliExitError(
+        "proposals review cannot be undone and needs confirmation. Re-run with --yes, or run it in an interactive terminal.",
+        ExitCode.USAGE
+      );
+    } else if (!await promptForConfirmation(summary)) {
+      console.log("Aborted. No review was submitted.");
+      return;
+    }
+  }
+  const client = options.apiClient ?? createApiClient();
+  const result = await client.reviewOrganizationProposal(input);
+  const row = {
+    proposalId: result.proposal.id,
+    reviewStatus: result.proposal.reviewStatus,
+    assetId: result.proposal.asset.id,
+    assetType: result.proposal.asset.type,
+    assetContent: result.proposal.asset.content,
+    assetStatus: result.proposal.asset.status,
+    reviewId: result.review.id,
+    decision: result.review.decision,
+    label: result.review.label,
+    watchlisted: result.watchlisted
+  };
+  printOutput({
+    outputFormat,
+    json: {
+      ...result,
+      explanation: options.explain ? "A WATCHLIST request is recorded as a REJECT review with the asset parked for re-evaluation." : void 0
+    },
+    markdown: [
+      "# Proposal Reviewed",
+      "",
+      `- Proposal: #${row.proposalId} (${row.reviewStatus})`,
+      `- Asset: #${row.assetId} ${row.assetType} ${row.assetContent} \u2192 ${row.assetStatus}`,
+      `- Review: #${row.reviewId} ${row.decision}${row.label ? ` (${row.label})` : ""}`,
+      `- Watchlisted: ${row.watchlisted ? "yes" : "no"}`
+    ].join("\n"),
+    csv: toCsvRows([row]),
+    human: () => {
+      console.log(`Reviewed proposal #${row.proposalId} as ${row.decision}`);
+      console.log(`Asset: ${row.assetType} ${row.assetContent} \u2192 ${row.assetStatus}`);
+      console.log(`Review: #${row.reviewId}${row.label ? ` label=${row.label}` : ""}`);
+      if (row.watchlisted) {
+        console.log("Asset parked on the watchlist for re-evaluation.");
+      }
+      if (options.explain) {
+        console.log(
+          "Reviews over the API are limited to 10 per organization per day and are shared across all of the org's API credentials."
+        );
+      }
+    }
+  });
+}
+export {
+  buildReviewInput,
+  describeReview,
+  runProposalsReview
+};

package/dist/{run-RRG7D4SN.js → run-AIYPHWFJ.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OFUIYMPD.js";
+} from "./chunk-322AVMUH.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-U73SABXK.js";
 

package/dist/{run-KOZXEYTL.js → run-LZZOV4HG.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OFUIYMPD.js";
+} from "./chunk-322AVMUH.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-U73SABXK.js";
 

package/dist/{run-TUADYLU7.js → run-YP4O5VXZ.js}

@@ -1,13 +1,13 @@
 import {
   getPresetDefinition,
   runPreset
-} from "./chunk-PEX2A3IL.js";
+} from "./chunk-FPCN4SNK.js";
 import {
   CliExitError,
   ExitCode
 } from "./chunk-E2LAMILJ.js";
 import "./chunk-VFT3TD3E.js";
-import "./chunk-OFUIYMPD.js";
+import "./chunk-322AVMUH.js";
 import "./chunk-TFCNKBRC.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-U73SABXK.js";

package/dist/{search-M6EKPO4D.js → search-OGGKNPUJ.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OFUIYMPD.js";
+} from "./chunk-322AVMUH.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-U73SABXK.js";
 

package/dist/{search-Y37B2JVP.js → search-W5QM2IOC.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OFUIYMPD.js";
+} from "./chunk-322AVMUH.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-U73SABXK.js";
 

package/dist/{setup-skill-RRTDEOR4.js → setup-skill-2KCAXU2U.js}

@@ -6,8 +6,8 @@ import {
   readInstalledSkillVersion,
   setupSkill,
   uninstallSkill
-} from "./chunk-MM5OAY2U.js";
-import "./chunk-6VTWWGNV.js";
+} from "./chunk-55B34HJK.js";
+import "./chunk-P5DJRDMV.js";
 export {
   getBundledSkillContent,
   getBundledSkillVersion,

package/dist/{snapshot-RFGSAHO7.js → snapshot-TLSOPK7C.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OFUIYMPD.js";
+} from "./chunk-322AVMUH.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-U73SABXK.js";
 

package/dist/{summary-XCN3DRYP.js → summary-XA3PVJIW.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OFUIYMPD.js";
+} from "./chunk-322AVMUH.js";
 import "./chunk-TFCNKBRC.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-U73SABXK.js";

package/dist/{validate-OYTNB2ZM.js → validate-WB5367QN.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OFUIYMPD.js";
+} from "./chunk-322AVMUH.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-U73SABXK.js";
 

package/dist/{whoami-5WCW3FOZ.js → whoami-YE3V6I65.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OFUIYMPD.js";
+} from "./chunk-322AVMUH.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-U73SABXK.js";
 

package/package.json

@@ -2,7 +2,7 @@
   "name": "@chainpatrol/cli",
   "description": "The official ChainPatrol CLI — terminal interface for threat detection",
   "author": "Umar Ahmed <umar@chainpatrol.io>",
-  "version": "1.5.0",
+  "version": "1.6.0",
   "license": "UNLICENSED",
   "homepage": "https://chainpatrol.com/docs/cli",
   "keywords": [
@@ -33,7 +33,7 @@
     "lint": "npx oxlint ."
   },
   "dependencies": {
-    "@chainpatrol/sdk": "1.5.0",
+    "@chainpatrol/sdk": "1.6.0",
     "ink": "^7.0.1",
     "meow": "^14.1.0",
     "open": "^11.0.0",