@epilot/cli 0.1.58 → 0.1.59

package/README.md

@@ -29,7 +29,7 @@ npm install -g @epilot/cli
 
 <!-- usage-help -->
 ```
-epilot v0.1.58 — CLI for epilot APIs
+epilot v0.1.59 — CLI for epilot APIs
 
 USAGE
   epilot <api> <operationId> [params...] [flags]

package/definitions/integration-toolkit.json

@@ -2,7 +2,7 @@
   "openapi": "3.0.3",
   "info": {
     "title": "Integration Toolkit API",
-    "version": "1.5.1",
+    "version": "1.5.3",
     "description": "API for integrating with external systems in a standardised way."
   },
   "tags": [
@@ -1997,6 +1997,72 @@
         }
       }
     },
+    "/v2/integrations/{integrationId}/notifications/status": {
+      "get": {
+        "operationId": "getNotificationStatus",
+        "summary": "getNotificationStatus",
+        "description": "Returns the live per-rule alert state and (for 'auto' rules) the current\nhour-of-week baseline band for an integration's notification monitoring.\nReflects the latest 5-minute sweep — near-real-time, not live.\nRequires the `integration:view` permission on the integration's organization.\n",
+        "tags": [
+          "integrations"
+        ],
+        "security": [
+          {
+            "EpilotAuth": []
+          }
+        ],
+        "parameters": [
+          {
+            "name": "integrationId",
+            "in": "path",
+            "required": true,
+            "description": "The integration ID",
+            "schema": {
+              "type": "string",
+              "format": "uuid"
+            }
+          },
+          {
+            "name": "include",
+            "in": "query",
+            "required": false,
+            "description": "Add `baseline_series` to also return all 168 hour-of-week buckets per\n'auto' rule (heavier; omit for just the current-bucket markers).\n",
+            "schema": {
+              "type": "string",
+              "enum": [
+                "baseline_series"
+              ]
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "Live notification status",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/NotificationStatusResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          },
+          "500": {
+            "$ref": "#/components/responses/InternalServerError"
+          }
+        }
+      }
+    },
     "/v2/integrations/{integrationId}/use-cases/{useCaseId}/secure-proxy-whitelist": {
       "get": {
         "operationId": "getSecureProxyWhitelist",
@@ -3720,6 +3786,150 @@
           }
         }
       },
+      "NotificationStatusResponse": {
+        "type": "object",
+        "required": [
+          "health",
+          "rules"
+        ],
+        "properties": {
+          "health": {
+            "type": "string",
+            "enum": [
+              "healthy",
+              "alerting",
+              "muted"
+            ],
+            "description": "Rolled-up live status: `muted` when muteUntil is in the future; else `alerting` if any rule is currently ALERTING; else `healthy`.\n"
+          },
+          "evaluated_at": {
+            "type": "string",
+            "format": "date-time",
+            "nullable": true,
+            "description": "Most recent per-rule evaluation instant (max lastEvaluatedAt), or null when no rule has been evaluated. Updates on the 5-minute sweep tick.\n"
+          },
+          "rules": {
+            "type": "array",
+            "description": "Per-rule status, one entry per configured rule.",
+            "items": {
+              "$ref": "#/components/schemas/NotificationRuleStatus"
+            }
+          }
+        }
+      },
+      "NotificationRuleStatus": {
+        "type": "object",
+        "required": [
+          "rule_id",
+          "state"
+        ],
+        "properties": {
+          "rule_id": {
+            "type": "string",
+            "description": "The rule's stable id (matches the configured rule id)."
+          },
+          "state": {
+            "type": "string",
+            "enum": [
+              "ok",
+              "alerting",
+              "recovered"
+            ],
+            "description": "The rule's live AlertState (defaults to `ok` when never evaluated)."
+          },
+          "last_fired_at": {
+            "type": "string",
+            "format": "date-time",
+            "nullable": true,
+            "description": "ISO instant the rule last entered ALERTING."
+          },
+          "last_cleared_at": {
+            "type": "string",
+            "format": "date-time",
+            "nullable": true,
+            "description": "ISO instant the rule last cleared back to OK."
+          },
+          "baseline": {
+            "nullable": true,
+            "description": "Present only for enabled 'auto'-threshold rules; null otherwise.",
+            "allOf": [
+              {
+                "$ref": "#/components/schemas/RuleBaselineStatus"
+              }
+            ]
+          }
+        }
+      },
+      "RuleBaselineStatus": {
+        "type": "object",
+        "required": [
+          "is_mature"
+        ],
+        "properties": {
+          "is_mature": {
+            "type": "boolean",
+            "description": "False during cold start; the sweeper uses the static fallbackThreshold until the baseline's history span is mature.\n"
+          },
+          "computed_at": {
+            "type": "string",
+            "format": "date-time",
+            "nullable": true,
+            "description": "ISO instant the baseline was last computed."
+          },
+          "median": {
+            "type": "number",
+            "nullable": true,
+            "description": "Typical in-scope event volume for the current hour-of-week bucket."
+          },
+          "mad": {
+            "type": "number",
+            "nullable": true,
+            "description": "Median absolute deviation for the current hour-of-week bucket."
+          },
+          "upper": {
+            "type": "number",
+            "nullable": true,
+            "description": "Dynamic alert threshold (median + k·MAD, k by sensitivity) for the current hour-of-week, or null when the bucket is uncovered.\n"
+          },
+          "buckets": {
+            "type": "array",
+            "nullable": true,
+            "description": "Full 168-bucket series; only present when ?include=baseline_series.",
+            "items": {
+              "$ref": "#/components/schemas/RuleBaselineBucket"
+            }
+          }
+        }
+      },
+      "RuleBaselineBucket": {
+        "type": "object",
+        "required": [
+          "dow",
+          "hour",
+          "median",
+          "mad"
+        ],
+        "properties": {
+          "dow": {
+            "type": "integer",
+            "minimum": 1,
+            "maximum": 7,
+            "description": "Day of week, 1=Monday … 7=Sunday."
+          },
+          "hour": {
+            "type": "integer",
+            "minimum": 0,
+            "maximum": 23,
+            "description": "Hour of day, 0 … 23 (UTC)."
+          },
+          "median": {
+            "type": "number"
+          },
+          "mad": {
+            "type": "number"
+          }
+        }
+      },
       "ErrorResponseBase": {
         "type": "object",
         "properties": {
@@ -4399,7 +4609,8 @@
           "muteUntil": {
             "type": "string",
             "format": "date-time",
-            "description": "ISO instant; snooze all non-digest alerts until this time."
+            "nullable": true,
+            "description": "ISO instant; snooze all non-digest alerts until this time. `null` means not muted."
           }
         }
       },

package/dist/{auth-CN5EFFDE.js → auth-4HG7B2GC.js}

@@ -21,7 +21,7 @@ var auth_default = defineCommand({
     description: "Manage authentication"
   },
   subCommands: {
-    login: () => import("./auth-login-NHWG3STD.js").then((m) => m.default),
+    login: () => import("./auth-login-7EWYCAZ7.js").then((m) => m.default),
     token: () => import("./auth-token-APXLIQAO.js").then((m) => m.default),
     logout: defineCommand({
       meta: { name: "logout", description: "Remove stored credentials" },
@@ -60,6 +60,7 @@ var auth_default = defineCommand({
         const adminEmail = claims?.admin_email;
         const tokenUse = claims?.token_use;
         const roles = claims?.assume_roles;
+        const readOnly = claims?.read_only === true;
         if (name) process.stdout.write(`  Name:    ${name}
 `);
         if (adminEmail && adminEmail !== name) process.stdout.write(`  Email:   ${adminEmail}
@@ -73,6 +74,8 @@ var auth_default = defineCommand({
         if (tokenUse) process.stdout.write(`  Use:     ${tokenUse}
 `);
         if (roles?.length) process.stdout.write(`  Roles:   ${roles.join(", ")}
+`);
+        process.stdout.write(`  Access:  ${readOnly ? `${YELLOW}read-only${RESET}` : `${GREEN}read-write${RESET}`}
 `);
         if (creds.expires_at) {
           const expiry = new Date(creds.expires_at);

package/dist/{auth-login-NHWG3STD.js → auth-login-7EWYCAZ7.js}

@@ -39,12 +39,14 @@ var auth_login_default = defineCommand({
   args: {
     token: { type: "string", description: "Manually provide a token instead of browser login" },
     profile: { type: "string", description: "Save credentials to this profile" },
+    readonly: { type: "boolean", description: "Generate a read-only token (cannot perform write actions)" },
     "use-dev": { type: "boolean", description: "Use dev environment (portal.dev.epilot.cloud)" },
     "use-staging": { type: "boolean", description: "Use staging environment (portal.staging.epilot.cloud)" }
   },
   run: async ({ args }) => {
     const profileName = args.profile || process.env.EPILOT_PROFILE;
     const env = resolveEnvironment(args["use-dev"], args["use-staging"]);
+    const readonly = Boolean(args.readonly);
     if (args.token) {
       saveCredentials({ token: args.token }, profileName);
       const suffix = profileName ? ` to profile "${profileName}"` : "";
@@ -61,7 +63,7 @@ var auth_login_default = defineCommand({
       );
       process.exit(1);
     }
-    const token = await browserLogin(profileName, env);
+    const token = await browserLogin(profileName, env, readonly);
     if (token) {
       process.stdout.write(`${GREEN}${BOLD}Login successful!${RESET}
 `);
@@ -72,7 +74,7 @@ var auth_login_default = defineCommand({
     }
   }
 });
-var browserLogin = async (profileName, env = "production") => {
+var browserLogin = async (profileName, env = "production", readonly = false) => {
   const state = randomBytes(32).toString("hex");
   const verificationCode = randomBytes(3).toString("hex").toUpperCase();
   const suffix = profileName ? ` ${DIM}(profile: ${profileName})${RESET}` : "";
@@ -81,6 +83,12 @@ ${BOLD}epilot CLI Login${RESET}${suffix}
 
 `);
   process.stdout.write("This will open your browser to authenticate with epilot.\n");
+  if (readonly) {
+    process.stdout.write(
+      `${YELLOW}Read-only mode: the CLI session will not be able to perform write actions.${RESET}
+`
+    );
+  }
   process.stdout.write("\n");
   process.stdout.write(`  ${YELLOW}Verification code: ${BOLD}${verificationCode}${RESET}
 `);
@@ -117,7 +125,7 @@ ${BOLD}epilot CLI Login${RESET}${suffix}
       const port = address.port;
       const callbackUrl = `http://localhost:${port}/callback`;
       const portalUrl = getPortalUrl(env);
-      const loginUrl = `${portalUrl}/login?cli_callback=${encodeURIComponent(callbackUrl)}&state=${state}&code=${verificationCode}`;
+      const loginUrl = `${portalUrl}/login?cli_callback=${encodeURIComponent(callbackUrl)}&state=${state}&code=${verificationCode}` + (readonly ? `&readonly=true` : "");
       process.stdout.write(`
 ${DIM}Login URL: ${loginUrl}${RESET}
 

package/dist/bin/epilot.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   API_LIST
-} from "../chunk-XSH56QUG.js";
+} from "../chunk-TDSY46F2.js";
 
 // bin/epilot.ts
 import { runMain } from "citty";
@@ -11,7 +11,7 @@ import { defineCommand } from "citty";
 var main = defineCommand({
   meta: {
     name: "epilot",
-    version: "0.1.58",
+    version: "0.1.59",
     description: "CLI for epilot APIs"
   },
   args: {
@@ -27,11 +27,11 @@ var main = defineCommand({
     jsonata: { type: "string", description: "JSONata expression" }
   },
   subCommands: {
-    auth: () => import("../auth-CN5EFFDE.js").then((m) => m.default),
+    auth: () => import("../auth-4HG7B2GC.js").then((m) => m.default),
     profile: () => import("../profile-OZJL5ZPT.js").then((m) => m.default),
     config: () => import("../config-DGZIMLZK.js").then((m) => m.default),
-    completion: () => import("../completion-WEFTQNAT.js").then((m) => m.default),
-    upgrade: () => import("../upgrade-TKHFV6J7.js").then((m) => m.default),
+    completion: () => import("../completion-DHCNR5MW.js").then((m) => m.default),
+    upgrade: () => import("../upgrade-ROKJNTFP.js").then((m) => m.default),
     "access-token": () => import("../access-token-WWE6BDJH.js").then((m) => m.default),
     address: () => import("../address-EH3C4CVB.js").then((m) => m.default),
     "address-suggestions": () => import("../address-suggestions-RRSLOBFW.js").then((m) => m.default),
@@ -134,13 +134,13 @@ process.stderr.on("error", (err) => {
   if (err.code === "EPIPE") process.exit(0);
   throw err;
 });
-var VERSION = true ? "0.1.58" : (await null).default.version;
+var VERSION = true ? "0.1.59" : (await null).default.version;
 var reorderedArgv = hoistFlagsAfterSubcommand(process.argv.slice(2));
 process.argv = [process.argv[0], process.argv[1], ...reorderedArgv];
 var args = process.argv.slice(2);
 var completionsIdx = args.indexOf("--_completions");
 if (completionsIdx >= 0) {
-  const { handleCompletions } = await import("../completion-WEFTQNAT.js");
+  const { handleCompletions } = await import("../completion-DHCNR5MW.js");
   handleCompletions(args[completionsIdx + 1], args[completionsIdx + 2]);
   process.exit(0);
 }

package/dist/{chunk-XSH56QUG.js → chunk-TDSY46F2.js}

@@ -760,7 +760,7 @@ var API_LIST = [
     kebabName: "integration-toolkit",
     title: "Integration Toolkit API",
     serverUrl: "https://integration-toolkit.sls.epilot.io",
-    operationCount: 53,
+    operationCount: 54,
     operationIds: [
       "acknowledgeTracking",
       "triggerErp",
@@ -789,6 +789,7 @@ var API_LIST = [
       "deleteIntegrationV2",
       "listNotificationHistory",
       "testSendNotification",
+      "getNotificationStatus",
       "getSecureProxyWhitelist",
       "updateSecureProxyWhitelist",
       "listSecureProxyWhitelistHistory",

package/dist/{completion-WEFTQNAT.js → completion-DHCNR5MW.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   API_LIST
-} from "./chunk-XSH56QUG.js";
+} from "./chunk-TDSY46F2.js";
 import {
   DIM,
   GREEN,

package/dist/{upgrade-TKHFV6J7.js → upgrade-ROKJNTFP.js}

@@ -72,7 +72,7 @@ ${GREEN}${BOLD}Upgraded to @epilot/cli@${latest}${RESET}
   }
 });
 var getCurrentVersion = () => {
-  if (true) return "0.1.58";
+  if (true) return "0.1.59";
   try {
     const output = execSync("npm ls -g @epilot/cli --depth=0 --json 2>/dev/null", {
       encoding: "utf-8",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@epilot/cli",
-  "version": "0.1.58",
+  "version": "0.1.59",
   "description": "CLI for epilot APIs",
   "type": "module",
   "bin": {