@chainpatrol/cli 1.5.0 → 1.7.0

package/dist/{list-BAPTZNTM.js → list-MHOHKFXT.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OFUIYMPD.js";
+} from "./chunk-322AVMUH.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-U73SABXK.js";
 

package/dist/{list-TA4HYD66.js → list-PAJBOVN2.js}

@@ -11,7 +11,7 @@ import {
   TAKEDOWN_SORT_KEYS,
   TAKEDOWN_STATUSES,
   createApiClient
-} from "./chunk-OFUIYMPD.js";
+} from "./chunk-322AVMUH.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-U73SABXK.js";
 

package/dist/{list-QLMFMYU6.js → list-SJFJT4V3.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OFUIYMPD.js";
+} from "./chunk-322AVMUH.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-U73SABXK.js";
 

package/dist/{list-SCA73PLA.js → list-UPY6PHY4.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OFUIYMPD.js";
+} from "./chunk-322AVMUH.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-U73SABXK.js";
 

package/dist/{list-GEJQ6N2Y.js → list-UXYGISAK.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OFUIYMPD.js";
+} from "./chunk-322AVMUH.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-U73SABXK.js";
 

package/dist/{list-QJYRXPXM.js → list-W6CF25ZS.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OFUIYMPD.js";
+} from "./chunk-322AVMUH.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-U73SABXK.js";
 

package/dist/{list-json-NJ5IFRDE.js → list-json-ZR3XOQPJ.js}

@@ -1,6 +1,6 @@
 import {
   createApiClient
-} from "./chunk-OFUIYMPD.js";
+} from "./chunk-322AVMUH.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-U73SABXK.js";
 

package/dist/{organization-N6RMWKJM.js → organization-YAID36GZ.js}

@@ -8,7 +8,7 @@ import {
 import {
   ORGANIZATION_METRICS_INCLUDE_FIELDS,
   createApiClient
-} from "./chunk-OFUIYMPD.js";
+} from "./chunk-322AVMUH.js";
 import "./chunk-TFCNKBRC.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-U73SABXK.js";

package/dist/review-7A7WV73T.js

@@ -0,0 +1,270 @@
+import {
+  CliExitError,
+  ExitCode
+} from "./chunk-E2LAMILJ.js";
+import {
+  printOutput,
+  toCsvRows
+} from "./chunk-VFT3TD3E.js";
+import {
+  PROPOSAL_REJECT_REASONS,
+  PROPOSAL_WATCHLIST_REASONS,
+  createApiClient
+} from "./chunk-322AVMUH.js";
+import "./chunk-EGWK6SRQ.js";
+import "./chunk-U73SABXK.js";
+
+// src/commands/proposals/review.ts
+var BRAND_REQUIRED_LABELS = ["brand impersonation", "employee impersonation"];
+var DECISIONS = ["APPROVE", "REJECT", "WATCHLIST"];
+function parsePositiveId(value, flag) {
+  if (value === void 0) {
+    throw new CliExitError(`proposals review requires ${flag} <id>.`, ExitCode.USAGE);
+  }
+  if (!Number.isInteger(value) || value < 1) {
+    throw new CliExitError(`${flag} must be a positive integer.`, ExitCode.USAGE);
+  }
+  return value;
+}
+function parseDecision(value) {
+  if (!value) {
+    throw new CliExitError(
+      "proposals review requires --decision <approve|reject|watchlist>.",
+      ExitCode.USAGE
+    );
+  }
+  const normalized = value.trim().toUpperCase();
+  if (!DECISIONS.includes(normalized)) {
+    throw new CliExitError(
+      `Invalid --decision '${value}'. Valid: approve, reject, watchlist.`,
+      ExitCode.USAGE
+    );
+  }
+  return normalized;
+}
+function parseRejectReason(value) {
+  if (!value) {
+    throw new CliExitError(
+      `--reject-reason is required when --decision reject. Valid: ${PROPOSAL_REJECT_REASONS.join(
+        ", "
+      )}`,
+      ExitCode.USAGE
+    );
+  }
+  const normalized = value.trim().toLowerCase();
+  if (!PROPOSAL_REJECT_REASONS.includes(normalized)) {
+    throw new CliExitError(
+      `Invalid --reject-reason '${value}'. Valid: ${PROPOSAL_REJECT_REASONS.join(", ")}`,
+      ExitCode.USAGE
+    );
+  }
+  return normalized;
+}
+function parseWatchlistReason(value) {
+  if (!value) {
+    throw new CliExitError(
+      `--watchlist-reason is required when --decision watchlist. Valid: ${PROPOSAL_WATCHLIST_REASONS.join(
+        ", "
+      )}`,
+      ExitCode.USAGE
+    );
+  }
+  const normalized = value.trim().toUpperCase();
+  if (!PROPOSAL_WATCHLIST_REASONS.includes(normalized)) {
+    throw new CliExitError(
+      `Invalid --watchlist-reason '${value}'. Valid: ${PROPOSAL_WATCHLIST_REASONS.join(
+        ", "
+      )}`,
+      ExitCode.USAGE
+    );
+  }
+  return normalized;
+}
+function buildReviewInput(options) {
+  const proposalId = parsePositiveId(options.proposalId, "--proposal-id");
+  const assetId = parsePositiveId(options.assetId, "--asset-id");
+  const decision = parseDecision(options.decision);
+  const input = {
+    proposalId,
+    assetId,
+    slug: options.org,
+    decision
+  };
+  if (decision === "APPROVE") {
+    const label = options.label?.trim();
+    if (!label) {
+      throw new CliExitError(
+        "--label is required when --decision approve.",
+        ExitCode.USAGE
+      );
+    }
+    if (BRAND_REQUIRED_LABELS.includes(label.toLowerCase()) && options.brandId === void 0) {
+      throw new CliExitError(
+        `--brand-id is required when --label is '${label}'. List your brands with \`chainpatrol brands list\`.`,
+        ExitCode.USAGE
+      );
+    }
+    input.label = label;
+    if (options.brandId !== void 0) {
+      input.brandId = parsePositiveId(options.brandId, "--brand-id");
+    }
+  }
+  if (decision === "REJECT") {
+    input.rejectReason = parseRejectReason(options.rejectReason);
+  }
+  if (decision === "WATCHLIST") {
+    const watchlistReason = parseWatchlistReason(options.watchlistReason);
+    if (watchlistReason === "OTHER" && !options.note?.trim()) {
+      throw new CliExitError(
+        "--note is required when --watchlist-reason OTHER, since the note becomes the reason.",
+        ExitCode.USAGE
+      );
+    }
+    input.watchlistReason = watchlistReason;
+  }
+  const note = options.note?.trim();
+  if (note) {
+    input.note = note;
+  }
+  return input;
+}
+function describeReview(input) {
+  const lines = [
+    `Decision: ${input.decision}`,
+    `Proposal: #${input.proposalId}`,
+    `Asset: #${input.assetId}`,
+    `Organization: ${input.slug ?? "from credential context"}`
+  ];
+  if (input.label) {
+    lines.push(`Label: ${input.label}`);
+  }
+  if (input.brandId !== void 0) {
+    lines.push(`Brand ID: ${input.brandId}`);
+  }
+  if (input.rejectReason) {
+    lines.push(`Reject reason: ${input.rejectReason}`);
+  }
+  if (input.watchlistReason) {
+    lines.push(`Watchlist reason: ${input.watchlistReason}`);
+  }
+  if (input.note) {
+    lines.push(`Note: ${input.note}`);
+  }
+  return lines;
+}
+async function promptForConfirmation(summary) {
+  const { createInterface } = await import("readline/promises");
+  const rl = createInterface({ input: process.stdin, output: process.stdout });
+  try {
+    const answer = await rl.question(`${summary}
+Type "yes" to continue: `);
+    const normalized = answer.trim().toLowerCase();
+    return normalized === "y" || normalized === "yes";
+  } finally {
+    rl.close();
+  }
+}
+async function runProposalsReview(options) {
+  const input = buildReviewInput(options);
+  const outputFormat = options.outputFormat ?? (options.json ? "json" : "human");
+  const details = describeReview(input);
+  if (options.dryRun) {
+    printOutput({
+      outputFormat,
+      json: {
+        dryRun: true,
+        mutation: "organization.proposals.review",
+        payload: input,
+        explanation: options.explain ? "This command records a customer review on the proposal and, for APPROVE, blocks the asset." : void 0
+      },
+      markdown: ["# Dry Run: Proposal Review", "", ...details.map((d) => `- ${d}`)].join(
+        "\n"
+      ),
+      csv: toCsvRows([
+        {
+          proposalId: input.proposalId,
+          assetId: input.assetId,
+          decision: input.decision,
+          label: input.label ?? "",
+          rejectReason: input.rejectReason ?? "",
+          watchlistReason: input.watchlistReason ?? ""
+        }
+      ]),
+      human: () => {
+        console.log("Dry run only. No review was submitted.");
+        for (const line of details) {
+          console.log(line);
+        }
+      }
+    });
+    return;
+  }
+  if (!options.yes) {
+    const summary = [
+      "About to submit a review that cannot be undone over the API:",
+      ...details.map((line) => `  ${line}`)
+    ].join("\n");
+    if (options.confirm) {
+      if (!await options.confirm(summary)) {
+        console.log("Aborted. No review was submitted.");
+        return;
+      }
+    } else if (options.noInput || outputFormat !== "human" || !process.stdin.isTTY) {
+      throw new CliExitError(
+        "proposals review cannot be undone and needs confirmation. Re-run with --yes, or run it in an interactive terminal.",
+        ExitCode.USAGE
+      );
+    } else if (!await promptForConfirmation(summary)) {
+      console.log("Aborted. No review was submitted.");
+      return;
+    }
+  }
+  const client = options.apiClient ?? createApiClient();
+  const result = await client.reviewOrganizationProposal(input);
+  const row = {
+    proposalId: result.proposal.id,
+    reviewStatus: result.proposal.reviewStatus,
+    assetId: result.proposal.asset.id,
+    assetType: result.proposal.asset.type,
+    assetContent: result.proposal.asset.content,
+    assetStatus: result.proposal.asset.status,
+    reviewId: result.review.id,
+    decision: result.review.decision,
+    label: result.review.label,
+    watchlisted: result.watchlisted
+  };
+  printOutput({
+    outputFormat,
+    json: {
+      ...result,
+      explanation: options.explain ? "A WATCHLIST request is recorded as a REJECT review with the asset parked for re-evaluation." : void 0
+    },
+    markdown: [
+      "# Proposal Reviewed",
+      "",
+      `- Proposal: #${row.proposalId} (${row.reviewStatus})`,
+      `- Asset: #${row.assetId} ${row.assetType} ${row.assetContent} \u2192 ${row.assetStatus}`,
+      `- Review: #${row.reviewId} ${row.decision}${row.label ? ` (${row.label})` : ""}`,
+      `- Watchlisted: ${row.watchlisted ? "yes" : "no"}`
+    ].join("\n"),
+    csv: toCsvRows([row]),
+    human: () => {
+      console.log(`Reviewed proposal #${row.proposalId} as ${row.decision}`);
+      console.log(`Asset: ${row.assetType} ${row.assetContent} \u2192 ${row.assetStatus}`);
+      console.log(`Review: #${row.reviewId}${row.label ? ` label=${row.label}` : ""}`);
+      if (row.watchlisted) {
+        console.log("Asset parked on the watchlist for re-evaluation.");
+      }
+      if (options.explain) {
+        console.log(
+          "Reviews over the API are limited to 10 per organization per day and are shared across all of the org's API credentials."
+        );
+      }
+    }
+  });
+}
+export {
+  buildReviewInput,
+  describeReview,
+  runProposalsReview
+};

package/dist/{run-RRG7D4SN.js → run-AIYPHWFJ.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OFUIYMPD.js";
+} from "./chunk-322AVMUH.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-U73SABXK.js";
 

package/dist/{run-KOZXEYTL.js → run-LZZOV4HG.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OFUIYMPD.js";
+} from "./chunk-322AVMUH.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-U73SABXK.js";
 

package/dist/{run-TUADYLU7.js → run-YP4O5VXZ.js}

@@ -1,13 +1,13 @@
 import {
   getPresetDefinition,
   runPreset
-} from "./chunk-PEX2A3IL.js";
+} from "./chunk-FPCN4SNK.js";
 import {
   CliExitError,
   ExitCode
 } from "./chunk-E2LAMILJ.js";
 import "./chunk-VFT3TD3E.js";
-import "./chunk-OFUIYMPD.js";
+import "./chunk-322AVMUH.js";
 import "./chunk-TFCNKBRC.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-U73SABXK.js";

package/dist/{search-Y37B2JVP.js → search-IWS42COG.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OFUIYMPD.js";
+} from "./chunk-322AVMUH.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-U73SABXK.js";
 
@@ -105,7 +105,7 @@ async function runAssetSearch(options) {
       console.error(
         `Error searching ${contents[i]}: ${r.reason instanceof Error ? r.reason.message : String(r.reason)}`
       );
-      return { asset: null, reports: [], takedown: null, blockedBy: [] };
+      return { asset: null, reports: [], scans: [], takedown: null, blockedBy: [] };
     });
     if (errored === contents.length) {
       throw new CliExitError(

package/dist/{search-M6EKPO4D.js → search-OGGKNPUJ.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OFUIYMPD.js";
+} from "./chunk-322AVMUH.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-U73SABXK.js";
 

package/dist/{setup-skill-RRTDEOR4.js → setup-skill-LP5Z3Z5T.js}

@@ -6,8 +6,8 @@ import {
   readInstalledSkillVersion,
   setupSkill,
   uninstallSkill
-} from "./chunk-MM5OAY2U.js";
-import "./chunk-6VTWWGNV.js";
+} from "./chunk-YMO4QK6Q.js";
+import "./chunk-7BZUQSRO.js";
 export {
   getBundledSkillContent,
   getBundledSkillVersion,

package/dist/{snapshot-RFGSAHO7.js → snapshot-TLSOPK7C.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OFUIYMPD.js";
+} from "./chunk-322AVMUH.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-U73SABXK.js";
 

package/dist/{summary-XCN3DRYP.js → summary-XA3PVJIW.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OFUIYMPD.js";
+} from "./chunk-322AVMUH.js";
 import "./chunk-TFCNKBRC.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-U73SABXK.js";

package/dist/takedown-time-ARGVSPL6.js

@@ -0,0 +1,87 @@
+import {
+  resolveDateRange
+} from "./chunk-S37VFIZY.js";
+import {
+  printOutput,
+  toCsvRows
+} from "./chunk-VFT3TD3E.js";
+import {
+  createApiClient
+} from "./chunk-322AVMUH.js";
+import "./chunk-TFCNKBRC.js";
+import "./chunk-EGWK6SRQ.js";
+import "./chunk-U73SABXK.js";
+
+// src/commands/metrics/takedown-time.ts
+function formatDuration(hours) {
+  if (hours < 1 / 60) {
+    return `${Math.round(hours * 3600)}s`;
+  }
+  if (hours < 1) {
+    return `${Math.round(hours * 60)}m`;
+  }
+  if (hours < 24) {
+    return `${hours.toFixed(1)}h`;
+  }
+  return `${(hours / 24).toFixed(1)}d`;
+}
+async function runMetricsTakedownTime(options) {
+  const range = resolveDateRange({
+    from: options.from,
+    to: options.to,
+    thisWeek: options.thisWeek
+  });
+  const client = options.apiClient ?? createApiClient();
+  const result = await client.getMetricsTakedownTime({
+    slug: options.org,
+    // The caller's own --from/--to go through untouched when given: the API
+    // reads a date-only value as the whole day, while `resolveDateRange` has
+    // already expanded it to a midnight timestamp, which would cut the final
+    // day off.
+    startDate: options.from ?? range.startDate,
+    endDate: options.to ?? range.endDate,
+    brandIds: options.brandIds
+  });
+  const outputFormat = options.outputFormat ?? (options.json ? "json" : "human");
+  printOutput({
+    outputFormat,
+    json: { ...result, range },
+    markdown: [
+      `# Median Time to Takedown (${options.org}) \u2014 ${range.label}`,
+      "",
+      `- Range: ${range.startDate} \u2192 ${range.endDate}`,
+      "",
+      ...result.byAssetType.map(
+        (row) => `- ${row.assetType}: ${formatDuration(row.medianTakedownHours)} (${row.count} takedowns)`
+      )
+    ].join("\n"),
+    csv: toCsvRows(
+      result.byAssetType.map((row) => ({
+        rangeLabel: range.label,
+        startDate: range.startDate,
+        endDate: range.endDate,
+        assetType: row.assetType,
+        medianTakedownMinutes: row.medianTakedownMinutes,
+        medianTakedownHours: row.medianTakedownHours,
+        medianTakedownDays: row.medianTakedownDays,
+        count: row.count
+      }))
+    ),
+    human: () => {
+      console.log(`Median time to takedown for ${options.org} \u2014 ${range.label}`);
+      console.log(`Range: ${range.startDate} \u2192 ${range.endDate}`);
+      if (result.byAssetType.length === 0) {
+        console.log("No completed takedowns in this range.");
+        return;
+      }
+      for (const row of result.byAssetType) {
+        console.log(
+          `${row.assetType}: ${formatDuration(row.medianTakedownHours)} (${row.count} takedowns)`
+        );
+      }
+    }
+  });
+}
+export {
+  runMetricsTakedownTime
+};

package/dist/{validate-OYTNB2ZM.js → validate-WB5367QN.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OFUIYMPD.js";
+} from "./chunk-322AVMUH.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-U73SABXK.js";
 

package/dist/{whoami-5WCW3FOZ.js → whoami-YE3V6I65.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-VFT3TD3E.js";
 import {
   createApiClient
-} from "./chunk-OFUIYMPD.js";
+} from "./chunk-322AVMUH.js";
 import "./chunk-EGWK6SRQ.js";
 import "./chunk-U73SABXK.js";
 

package/package.json

@@ -2,7 +2,7 @@
   "name": "@chainpatrol/cli",
   "description": "The official ChainPatrol CLI — terminal interface for threat detection",
   "author": "Umar Ahmed <umar@chainpatrol.io>",
-  "version": "1.5.0",
+  "version": "1.7.0",
   "license": "UNLICENSED",
   "homepage": "https://chainpatrol.com/docs/cli",
   "keywords": [
@@ -33,7 +33,7 @@
     "lint": "npx oxlint ."
   },
   "dependencies": {
-    "@chainpatrol/sdk": "1.5.0",
+    "@chainpatrol/sdk": "1.7.0",
     "ink": "^7.0.1",
     "meow": "^14.1.0",
     "open": "^11.0.0",