@ganakailabs/cloudeval-cli 0.21.2 → 0.23.0

package/dist/cli.js

@@ -33,10 +33,10 @@ import {
   normalizeApiBase,
   redactSensitiveSecrets,
   redactSensitiveText
-} from "./chunk-LDDHLUZH.js";
+} from "./chunk-DLACXFC6.js";
 import {
   CLI_VERSION
-} from "./chunk-32EP3DJT.js";
+} from "./chunk-Y6LNVH7K.js";
 
 // src/runtime/prepareInk.ts
 import fs from "fs";
@@ -507,6 +507,16 @@ var cliCommands = [
       "--template-file",
       "--parameters-file",
       "--parameters-url",
+      "--workspace-dir",
+      "--workspace-entry",
+      "--workspace-parameters",
+      "--cloud-sync",
+      "--azure-tenant-id",
+      "--azure-client-id",
+      "--azure-client-secret",
+      "--azure-subscription-id",
+      "--resource-group",
+      "--resource-groups",
       "--name",
       "--description",
       "--provider",
@@ -1604,7 +1614,7 @@ var resolveReportProjectId = async ({
   if (!token) {
     throw new Error("No project specified. Use --project <id> for report access.");
   }
-  const resolvedWorkspace = workspace ?? await import("./dist-AGQQPJUD.js").then((core) => ({
+  const resolvedWorkspace = workspace ?? await import("./dist-AS6Z6RQQ.js").then((core) => ({
     checkUserStatus: core.checkUserStatus,
     getProjects: core.getProjects
   }));
@@ -1633,7 +1643,7 @@ var warnIfAccessKeyFromCliOption = (options, command) => {
 };
 var resolveAuthContext = async (options, command, deps) => {
   const baseUrl = await deps.resolveBaseUrl(options, command);
-  const core = await import("./dist-AGQQPJUD.js");
+  const core = await import("./dist-AS6Z6RQQ.js");
   core.assertSecureBaseUrl(baseUrl);
   warnIfAccessKeyFromCliOption(options, command);
   let accessKey = options.accessKey;
@@ -1719,7 +1729,7 @@ var resolveToken = async (options, baseUrl, deps, command) => {
   if (options.accessKey) {
     return options.accessKey;
   }
-  const { getAuthToken } = await import("./dist-AGQQPJUD.js");
+  const { getAuthToken } = await import("./dist-AS6Z6RQQ.js");
   try {
     return await getAuthToken({
       accessKey: options.accessKey,
@@ -1730,7 +1740,7 @@ var resolveToken = async (options, baseUrl, deps, command) => {
     if (!canLogin) {
       throw error;
     }
-    const { login } = await import("./dist-AGQQPJUD.js");
+    const { login } = await import("./dist-AS6Z6RQQ.js");
     process.stderr.write("Authentication required. Starting login flow...\n");
     const token = await login(baseUrl, {
       headless: Boolean(process.env.SSH_TTY || process.env.CLOUDEVAL_HEADLESS_LOGIN)
@@ -1896,7 +1906,7 @@ var registerReportsCommand = (program2, deps) => {
         token,
         requestedProjectId: options.project
       });
-      const core = await import("./dist-AGQQPJUD.js");
+      const core = await import("./dist-AS6Z6RQQ.js");
       const status = token ? await core.checkUserStatus(baseUrl, token) : void 0;
       const reports2 = await core.listReports({
         baseUrl,
@@ -1918,7 +1928,7 @@ var registerReportsCommand = (program2, deps) => {
     try {
       const baseUrl = await deps.resolveBaseUrl(options, command);
       const token = await resolveToken(options, baseUrl, deps, command);
-      const core = await import("./dist-AGQQPJUD.js");
+      const core = await import("./dist-AS6Z6RQQ.js");
       const status = token ? await core.checkUserStatus(baseUrl, token) : void 0;
       const projectId = await resolveReportProjectId({
         baseUrl,
@@ -2021,7 +2031,7 @@ var registerReportsCommand = (program2, deps) => {
       try {
         const baseUrl = await deps.resolveBaseUrl(options, command);
         const token = await resolveToken(options, baseUrl, deps, command);
-        const core = await import("./dist-AGQQPJUD.js");
+        const core = await import("./dist-AS6Z6RQQ.js");
         const status = token ? await core.checkUserStatus(baseUrl, token) : void 0;
         const projectId = await resolveReportProjectId({
           baseUrl,
@@ -2091,7 +2101,7 @@ var registerReportsCommand = (program2, deps) => {
         token,
         requestedProjectId: options.project
       });
-      const core = await import("./dist-AGQQPJUD.js");
+      const core = await import("./dist-AS6Z6RQQ.js");
       const status = token ? await core.checkUserStatus(baseUrl, token) : void 0;
       const report = await core.getWafReport({
         baseUrl,
@@ -2130,7 +2140,7 @@ var registerReportsCommand = (program2, deps) => {
         token,
         requestedProjectId: options.project
       });
-      const core = await import("./dist-AGQQPJUD.js");
+      const core = await import("./dist-AS6Z6RQQ.js");
       const status = token ? await core.checkUserStatus(baseUrl, token) : void 0;
       const report = await core.getReport({
         baseUrl,
@@ -2158,7 +2168,7 @@ var registerReportsCommand = (program2, deps) => {
         token,
         requestedProjectId: options.project
       });
-      const core = await import("./dist-AGQQPJUD.js");
+      const core = await import("./dist-AS6Z6RQQ.js");
       const status = token ? await core.checkUserStatus(baseUrl, token) : void 0;
       const report = await core.getCostReport({
         baseUrl,
@@ -2187,7 +2197,7 @@ var registerReportsCommand = (program2, deps) => {
           token,
           requestedProjectId: options.project
         });
-        const core = await import("./dist-AGQQPJUD.js");
+        const core = await import("./dist-AS6Z6RQQ.js");
         const status = token ? await core.checkUserStatus(baseUrl, token) : void 0;
         const report = await core.getWafReport({
           baseUrl,
@@ -3529,7 +3539,7 @@ var runChatRecipe = async (recipe, prompt2, options, command, deps) => {
   });
   progressWriter.write({ type: "auth", step: "auth", message: "Resolving authentication" });
   const context = await resolveAuthContext(options, command, deps);
-  const core = await import("./dist-AGQQPJUD.js");
+  const core = await import("./dist-AS6Z6RQQ.js");
   progressWriter.write({
     type: "request",
     step: "project",
@@ -4640,6 +4650,198 @@ var fileBlob = async (filePath) => {
     name: path3.basename(filePath)
   };
 };
+var normalizeWorkspacePath = (value) => value.replace(/\\/g, "/").replace(/^\/+/, "").replace(/^\.\//, "").split("/").filter((part) => part && part !== ".").join("/");
+var isIgnoredWorkspacePath = (relativePath) => {
+  const normalized = normalizeWorkspacePath(relativePath);
+  return normalized === ".DS_Store" || normalized.endsWith("/.DS_Store") || normalized.startsWith(".git/") || normalized.startsWith("node_modules/") || normalized.startsWith(".cloudeval/bundles/") || normalized.startsWith(".cloudeval/connections/") || normalized.startsWith(".cloudeval/reports/") || normalized.startsWith(".cloudeval/share/") || normalized.startsWith(".cloudeval/shares/") || normalized.startsWith(".cloudeval/snapshots/") || normalized.startsWith(".cloudeval/template-cache/") || normalized === ".cloudeval/ps-rule.yaml";
+};
+var readWorkspaceConfig = (content) => {
+  const entryMatch = content.match(/^\s*entry:\s*["']?([^"'\n#]+)["']?\s*(?:#.*)?$/m);
+  const parametersMatch = content.match(
+    /^\s*parameters:\s*["']?([^"'\n#]+)["']?\s*(?:#.*)?$/m
+  );
+  return {
+    entry: entryMatch ? normalizeWorkspacePath(entryMatch[1].trim()) : void 0,
+    parameters: parametersMatch ? normalizeWorkspacePath(parametersMatch[1].trim()) : void 0
+  };
+};
+var generateWorkspaceConfig = (entry, parameters) => {
+  const parameterLine = parameters ? `    parameters: ${parameters}
+` : "";
+  return [
+    "version: 1",
+    "stacks:",
+    "  - id: main",
+    `    entry: ${entry}`,
+    parameterLine.trimEnd(),
+    "resolve:",
+    "  linked_templates: true",
+    "analysis:",
+    "  auto_resolve_on_import: true",
+    "  auto_refresh_on_resolve: true",
+    ""
+  ].filter((line) => line.length > 0).join("\n");
+};
+var collectWorkspacePaths = async (root) => {
+  const paths = [];
+  const visit = async (directory) => {
+    const entries = await fs5.readdir(directory, { withFileTypes: true });
+    for (const entry of entries) {
+      const absolute = path3.join(directory, entry.name);
+      const relative = normalizeWorkspacePath(path3.relative(root, absolute));
+      if (!relative || isIgnoredWorkspacePath(relative)) {
+        continue;
+      }
+      if (entry.isDirectory()) {
+        await visit(absolute);
+      } else if (entry.isFile()) {
+        paths.push(relative);
+      }
+    }
+  };
+  await visit(root);
+  return paths.sort((left, right) => left.localeCompare(right));
+};
+var findFirstPath = (paths, candidates) => {
+  const lowerToPath = new Map(paths.map((filePath) => [filePath.toLowerCase(), filePath]));
+  for (const candidate of candidates) {
+    const found = lowerToPath.get(candidate.toLowerCase());
+    if (found) {
+      return found;
+    }
+  }
+  return void 0;
+};
+var detectWorkspaceEntry = (paths, explicitEntry, config) => {
+  if (explicitEntry) {
+    const normalized = normalizeWorkspacePath(explicitEntry);
+    if (!paths.includes(normalized)) {
+      throw new Error(`--workspace-entry '${explicitEntry}' was not found in --workspace-dir.`);
+    }
+    return normalized;
+  }
+  if (config?.entry && paths.includes(config.entry)) {
+    return config.entry;
+  }
+  const rootCandidate = findFirstPath(paths, ["azuredeploy.json", "main.json", "deploy.json"]);
+  if (rootCandidate) {
+    return rootCandidate;
+  }
+  const recursiveAzureDeploy = paths.find(
+    (filePath) => /(^|\/)azuredeploy\.json$/i.test(filePath)
+  );
+  if (recursiveAzureDeploy) {
+    return recursiveAzureDeploy;
+  }
+  const armCandidate = paths.find((filePath) => /\.json$/i.test(filePath));
+  if (armCandidate) {
+    return armCandidate;
+  }
+  throw new Error(
+    "Could not detect a workspace entry file. Pass --workspace-entry or add .cloudeval/config.yaml."
+  );
+};
+var resolveWorkspaceParameters = (paths, explicitParameters, config) => {
+  if (explicitParameters) {
+    const normalized = normalizeWorkspacePath(explicitParameters);
+    if (!paths.includes(normalized)) {
+      throw new Error(`--workspace-parameters '${explicitParameters}' was not found in --workspace-dir.`);
+    }
+    return normalized;
+  }
+  if (config?.parameters && paths.includes(config.parameters)) {
+    return config.parameters;
+  }
+  return findFirstPath(paths, ["azuredeploy.parameters.json", "parameters.json"]);
+};
+var collectWorkspaceFiles = async (workspaceDir, options) => {
+  const root = path3.resolve(workspaceDir);
+  const stat = await fs5.stat(root).catch(() => void 0);
+  if (!stat?.isDirectory()) {
+    throw new Error(`--workspace-dir '${workspaceDir}' is not a directory.`);
+  }
+  const paths = await collectWorkspacePaths(root);
+  const existingConfigPath = paths.find(
+    (filePath) => filePath.toLowerCase() === ".cloudeval/config.yaml"
+  );
+  const config = existingConfigPath ? readWorkspaceConfig(await fs5.readFile(path3.join(root, existingConfigPath), "utf8")) : void 0;
+  const entry = detectWorkspaceEntry(paths, options.workspaceEntry, config);
+  const parameters = resolveWorkspaceParameters(paths, options.workspaceParameters, config);
+  const finalPaths = [...paths];
+  const generatedConfig = existingConfigPath ? void 0 : generateWorkspaceConfig(entry, parameters);
+  if (generatedConfig) {
+    finalPaths.push(".cloudeval/config.yaml");
+  }
+  const files = [];
+  for (const relativePath of finalPaths.sort((left, right) => left.localeCompare(right))) {
+    if (relativePath === ".cloudeval/config.yaml" && generatedConfig) {
+      files.push({
+        path: relativePath,
+        blob: new Blob([generatedConfig], { type: "text/yaml" })
+      });
+      continue;
+    }
+    const bytes = await fs5.readFile(path3.join(root, relativePath));
+    files.push({
+      path: relativePath,
+      blob: new Blob([bytes], {
+        type: /\.ya?ml$/i.test(relativePath) ? "text/yaml" : "application/octet-stream"
+      })
+    });
+  }
+  return { files, entry };
+};
+var collectResourceGroups = (options) => {
+  const repeated = Array.isArray(options.resourceGroup) ? options.resourceGroup : [];
+  const commaSeparated = options.resourceGroups ? options.resourceGroups.split(",").map((value) => value.trim()) : [];
+  return [...repeated, ...commaSeparated].map((value) => value.trim()).filter(Boolean);
+};
+var resolveAzureCloudSyncInput = (options) => {
+  if (!options.cloudSync) {
+    return void 0;
+  }
+  const tenantId = options.azureTenantId || process.env.AZURE_TENANT_ID;
+  const clientId = options.azureClientId || process.env.AZURE_CLIENT_ID;
+  const clientSecret = options.azureClientSecret || process.env.AZURE_CLIENT_SECRET;
+  const subscriptionId = options.azureSubscriptionId || process.env.AZURE_SUBSCRIPTION_ID;
+  const missing = [
+    ["--azure-tenant-id or AZURE_TENANT_ID", tenantId],
+    ["--azure-client-id or AZURE_CLIENT_ID", clientId],
+    ["--azure-client-secret or AZURE_CLIENT_SECRET", clientSecret],
+    ["--azure-subscription-id or AZURE_SUBSCRIPTION_ID", subscriptionId]
+  ].filter(([, value]) => !value).map(([label]) => label);
+  if (missing.length) {
+    throw new Error(`Missing Cloud sync credential value(s): ${missing.join(", ")}.`);
+  }
+  return {
+    tenantId,
+    clientId,
+    clientSecret,
+    subscriptionId,
+    resourceGroups: collectResourceGroups(options)
+  };
+};
+var assertSingleProjectSource = (options) => {
+  const sources = [
+    options.templateUrl ? "--template-url" : void 0,
+    options.templateFile ? "--template-file" : void 0,
+    options.workspaceDir ? "--workspace-dir" : void 0,
+    options.cloudSync ? "--cloud-sync" : void 0
+  ].filter(Boolean);
+  if (sources.length > 1) {
+    throw new Error(`Choose one project source: ${sources.join(", ")} cannot be combined.`);
+  }
+  if ((options.parametersFile || options.parametersUrl) && !options.templateFile && !options.templateUrl) {
+    throw new Error("--parameters-file and --parameters-url require --template-file or --template-url.");
+  }
+  if (options.cloudSync && options.provider && options.provider !== "azure") {
+    throw new Error("--cloud-sync currently supports --provider azure.");
+  }
+};
+var appendOptionValue = (value, previous = []) => [
+  ...previous,
+  value
+];
 var writeDiagramImageHeaders = async (outputPath, headers) => {
   await fs5.mkdir(path3.dirname(outputPath), { recursive: true });
   const text = Object.entries(headers).sort(([left], [right]) => left.localeCompare(right)).map(([key, value]) => `${key}: ${value}`).join("\n");
@@ -4778,7 +4980,7 @@ var configureDiagramExportCommand = (command, deps) => addAuthOptions(command, d
       const context = requireAuthUser(
         await resolveAuthContext(options, actionCommand, deps)
       );
-      const core = await import("./dist-AGQQPJUD.js");
+      const core = await import("./dist-AS6Z6RQQ.js");
       const projects = await core.getProjects(
         context.baseUrl,
         context.token,
@@ -4855,7 +5057,7 @@ var registerProjectsCommand = (program2, deps) => {
   addCommon(addAuthOptions(projects.command("list").description("List projects"), deps.defaultBaseUrl)).action(async (options, command) => {
     try {
       const context = await resolveAuthContext(options, command, deps);
-      const core = await import("./dist-AGQQPJUD.js");
+      const core = await import("./dist-AS6Z6RQQ.js");
       const data = await listProjectsForContext(core, context);
       const url = buildFrontendUrl({ baseUrl: frontendBase(context, options), target: "projects" });
       await writeProjectListOutput({ data, options, frontendUrl: url });
@@ -4873,7 +5075,7 @@ var registerProjectsCommand = (program2, deps) => {
   ).action(async (id, options, command) => {
     try {
       const context = await resolveAuthContext(options, command, deps);
-      const core = await import("./dist-AGQQPJUD.js");
+      const core = await import("./dist-AS6Z6RQQ.js");
       const list = await listProjectsForContext(core, context);
       const data = list.find((project) => project.id === id);
       if (!data) {
@@ -4934,13 +5136,16 @@ var registerProjectsCommand = (program2, deps) => {
     deps
   );
   configureGraphCommands(projects, deps);
-  addCommon(addAuthOptions(projects.command("create").description("Create a quick template project"), deps.defaultBaseUrl)).option("--template-url <url>", "Template URL").option("--template-file <path>", "Local JSON template file").option("--parameters-file <path>", "Local JSON parameters file").option("--parameters-url <url>", "Parameters file URL").option("--name <name>", "Project name").option("--description <text>", "Project description").option("--provider <provider>", "Cloud provider: azure, aws, gcp").action(async (options, command) => {
+  addCommon(addAuthOptions(projects.command("create").description("Create a CloudEval project"), deps.defaultBaseUrl)).option("--template-url <url>", "Template URL").option("--template-file <path>", "Local JSON template file").option("--parameters-file <path>", "Local JSON parameters file").option("--parameters-url <url>", "Parameters file URL").option("--workspace-dir <path>", "Upload an Infrastructure as code folder").option("--workspace-entry <path>", "Workspace visualization entry file").option("--workspace-parameters <path>", "Workspace parameters file").option("--cloud-sync", "Create a Cloud sync project from Azure credentials", false).option("--azure-tenant-id <id>", "Azure tenant id for Cloud sync").option("--azure-client-id <id>", "Azure service principal client id for Cloud sync").option("--azure-client-secret <secret>", "Azure service principal client secret for Cloud sync").option("--azure-subscription-id <id>", "Azure subscription id for Cloud sync").option("--resource-group <name>", "Azure resource group scope for Cloud sync", appendOptionValue, []).option("--resource-groups <list>", "Comma-separated Azure resource group scopes for Cloud sync").option("--name <name>", "Project name").option("--description <text>", "Project description").option("--provider <provider>", "Cloud provider: azure, aws, gcp").action(async (options, command) => {
     try {
+      assertSingleProjectSource(options);
       const context = requireAuthUser(await resolveAuthContext(options, command, deps));
-      const core = await import("./dist-AGQQPJUD.js");
+      const core = await import("./dist-AS6Z6RQQ.js");
       const template = await fileBlob(options.templateFile);
       const parameters = await fileBlob(options.parametersFile);
-      const inferredName = options.name || (options.templateFile ? path3.basename(options.templateFile, path3.extname(options.templateFile)) : void 0);
+      const workspace = options.workspaceDir ? await collectWorkspaceFiles(options.workspaceDir, options) : void 0;
+      const cloudSync = resolveAzureCloudSyncInput(options);
+      const inferredName = options.name || (options.workspaceDir ? path3.basename(path3.resolve(options.workspaceDir)) : void 0) || (cloudSync ? "Cloud sync" : void 0) || (options.templateFile ? path3.basename(options.templateFile, path3.extname(options.templateFile)) : void 0);
       const result = await core.createQuickProject({
         baseUrl: context.baseUrl,
         authToken: context.token,
@@ -4951,9 +5156,12 @@ var registerProjectsCommand = (program2, deps) => {
         parametersFile: parameters?.blob,
         parametersFileName: parameters?.name,
         parametersUrl: options.parametersUrl,
+        workspaceFiles: workspace?.files,
+        workspaceEntry: workspace?.entry,
+        cloudSync,
         name: inferredName,
         description: options.description,
-        provider: options.provider
+        provider: options.provider ?? "azure"
       });
       const projectId = String(result.project.id);
       const url = buildFrontendUrl({
@@ -4968,7 +5176,8 @@ var registerProjectsCommand = (program2, deps) => {
           connection: result.connection,
           syncStatus: result.syncStatus,
           normalizedTemplateUrl: result.normalizedTemplateUrl,
-          inferred: result.inferred
+          inferred: result.inferred,
+          iacPipeline: result.iacPipeline
         },
         format: options.format,
         output: options.output,
@@ -5060,7 +5269,7 @@ var registerConnectionsCommand = (program2, deps) => {
   addCommon2(addAuthOptions(connections.command("list").description("List connections"), deps.defaultBaseUrl)).action(async (options, command) => {
     try {
       const context = requireAuthUser(await resolveAuthContext(options, command, deps));
-      const core = await import("./dist-AGQQPJUD.js");
+      const core = await import("./dist-AS6Z6RQQ.js");
       const data = await core.listConnections({
         baseUrl: context.baseUrl,
         authToken: context.token,
@@ -5085,7 +5294,7 @@ var registerConnectionsCommand = (program2, deps) => {
   ).action(async (id, options, command) => {
     try {
       const context = requireAuthUser(await resolveAuthContext(options, command, deps));
-      const core = await import("./dist-AGQQPJUD.js");
+      const core = await import("./dist-AS6Z6RQQ.js");
       const data = await core.getConnection({
         baseUrl: context.baseUrl,
         authToken: context.token,
@@ -5423,7 +5632,7 @@ var checkoutReturnUrl = (context, options) => options.returnTo || billingUrl(con
 var runTopUpCheckout = async (commandName, packId, options, command, deps) => {
   try {
     const context = requireAuthUser(await resolveAuthContext(options, command, deps));
-    const core = await import("./dist-AGQQPJUD.js");
+    const core = await import("./dist-AS6Z6RQQ.js");
     const returnTo = checkoutReturnUrl(context, options);
     const session = await core.createTopUpCheckoutSession({
       baseUrl: context.baseUrl,
@@ -5463,7 +5672,7 @@ var registerBillingCommands = (program2, deps) => {
   ).action(async (options, command) => {
     try {
       const context = requireAuthUser(await resolveAuthContext(options, command, deps));
-      const core = await import("./dist-AGQQPJUD.js");
+      const core = await import("./dist-AS6Z6RQQ.js");
       const range = rangeToDates("30d");
       const [entitlement, usageSummary] = await Promise.all([
         core.getBillingEntitlement({
@@ -5493,7 +5702,7 @@ var registerBillingCommands = (program2, deps) => {
   addCommon3(addAuthOptions(billing.command("summary").description("Show billing summary"), deps.defaultBaseUrl)).action(async (options, command) => {
     try {
       const context = requireAuthUser(await resolveAuthContext(options, command, deps));
-      const core = await import("./dist-AGQQPJUD.js");
+      const core = await import("./dist-AS6Z6RQQ.js");
       const range = rangeToDates("30d");
       const [entitlement, subscriptionStatus, usageSummary] = await Promise.all([
         core.getBillingEntitlement({ baseUrl: context.baseUrl, authToken: context.token }),
@@ -5529,7 +5738,7 @@ var registerBillingCommands = (program2, deps) => {
   addCommon3(addAuthOptions(billing.command("plans").description("Show billing plans"), deps.defaultBaseUrl)).action(async (options, command) => {
     try {
       const context = await resolveAuthContext(options, command, deps);
-      const core = await import("./dist-AGQQPJUD.js");
+      const core = await import("./dist-AS6Z6RQQ.js");
       const data = await core.getBillingConfig({ baseUrl: context.baseUrl, authToken: context.token });
       const url = billingUrl(context, { ...options, tab: "plans" });
       await write("billing plans", data, options, url);
@@ -5541,7 +5750,7 @@ var registerBillingCommands = (program2, deps) => {
   addCommon3(addAuthOptions(billing.command("usage").description("Show billing usage summary"), deps.defaultBaseUrl)).option("--range <range>", "Usage range: 7d, 30d, 90d, all", "30d").option("--start-at <iso>", "Start timestamp").option("--end-at <iso>", "End timestamp").option("--granularity <value>", "Granularity: hour, day, month", "day").option("--action-type <type>", "Action type filter").option("--model <name>", "Model filter").option("--outcome <outcome>", "Outcome filter").option("--charge-status <status>", "Charge status filter").action(async (options, command) => {
     try {
       const context = requireAuthUser(await resolveAuthContext(options, command, deps));
-      const core = await import("./dist-AGQQPJUD.js");
+      const core = await import("./dist-AS6Z6RQQ.js");
       const range = rangeToDates(options.range);
       const data = await core.getBillingUsageSummary({
         baseUrl: context.baseUrl,
@@ -5564,7 +5773,7 @@ var registerBillingCommands = (program2, deps) => {
   addCommon3(addAuthOptions(billing.command("ledger").description("Show billing ledger"), deps.defaultBaseUrl)).option("--range <range>", "Usage range: 7d, 30d, 90d, all", "30d").option("--start-at <iso>", "Start timestamp").option("--end-at <iso>", "End timestamp").option("--action-type <type>", "Action type filter").option("--model <name>", "Model filter").option("--outcome <outcome>", "Outcome filter").option("--charge-status <status>", "Charge status filter").option("--limit <n>", "Page size", "25").option("--cursor <cursor>", "Pagination cursor").action(async (options, command) => {
     try {
       const context = requireAuthUser(await resolveAuthContext(options, command, deps));
-      const core = await import("./dist-AGQQPJUD.js");
+      const core = await import("./dist-AS6Z6RQQ.js");
       const range = rangeToDates(options.range);
       const data = await core.getBillingUsageLedger({
         baseUrl: context.baseUrl,
@@ -5592,7 +5801,7 @@ var registerBillingCommands = (program2, deps) => {
     addCommon3(addAuthOptions(billing.command(name).description(`Show billing ${name}`), deps.defaultBaseUrl)).option("--limit <n>", "Result limit", "25").action(async (options, command) => {
       try {
         const context = requireAuthUser(await resolveAuthContext(options, command, deps));
-        const core = await import("./dist-AGQQPJUD.js");
+        const core = await import("./dist-AS6Z6RQQ.js");
         const data = await core[getter]({
           baseUrl: context.baseUrl,
           authToken: context.token,
@@ -5610,7 +5819,7 @@ var registerBillingCommands = (program2, deps) => {
   addCommon3(addAuthOptions(topups, deps.defaultBaseUrl)).option("--limit <n>", "Result limit", "25").action(async (options, command) => {
     try {
       const context = requireAuthUser(await resolveAuthContext(options, command, deps));
-      const core = await import("./dist-AGQQPJUD.js");
+      const core = await import("./dist-AS6Z6RQQ.js");
       const data = await core.getTopUpPacks({
         baseUrl: context.baseUrl,
         authToken: context.token
@@ -8008,7 +8217,7 @@ var reportsFrontendUrl = (config, input) => buildFrontendUrl({
   reportVerbosity: input.reportVerbosity
 });
 var resolveAuth = async (config, options = {}) => {
-  const core = await import("./dist-AGQQPJUD.js");
+  const core = await import("./dist-AS6Z6RQQ.js");
   core.assertSecureBaseUrl(config.baseUrl);
   let token;
   try {
@@ -8108,7 +8317,7 @@ var assertModelAvailable = async (config, token) => {
   if (!config.model) {
     return;
   }
-  const core = await import("./dist-AGQQPJUD.js");
+  const core = await import("./dist-AS6Z6RQQ.js");
   try {
     const response = await fetch(
       `${core.normalizeApiBase(config.baseUrl)}/models`,
@@ -8365,7 +8574,7 @@ var buildToolHandlers = (serverOptions) => {
   });
   handlers.set("agent_profiles_list", async (args) => {
     const config = await resolveInvocationConfig(serverOptions, args);
-    const core = await import("./dist-AGQQPJUD.js");
+    const core = await import("./dist-AS6Z6RQQ.js");
     const data = await listProfilesForDiscovery(core, config.baseUrl);
     return withEnvelope({
       command: "agents list",
@@ -8378,7 +8587,7 @@ var buildToolHandlers = (serverOptions) => {
       throw new Error("profileId is required.");
     }
     const config = await resolveInvocationConfig(serverOptions, args);
-    const core = await import("./dist-AGQQPJUD.js");
+    const core = await import("./dist-AS6Z6RQQ.js");
     const data = await getProfileForDiscovery(core, config.baseUrl, profileId);
     return withEnvelope({
       command: "agents show",
@@ -9015,7 +9224,7 @@ var buildToolHandlers = (serverOptions) => {
   });
   handlers.set("auth_status", async (args) => {
     const config = await resolveInvocationConfig(serverOptions, args);
-    const core = await import("./dist-AGQQPJUD.js");
+    const core = await import("./dist-AS6Z6RQQ.js");
     const data = await core.getAuthStatus(config.baseUrl, { validate: true });
     return withEnvelope({
       command: "auth status",
@@ -9024,7 +9233,7 @@ var buildToolHandlers = (serverOptions) => {
   });
   handlers.set("status", async (args) => {
     const config = await resolveInvocationConfig(serverOptions, args);
-    const core = await import("./dist-AGQQPJUD.js");
+    const core = await import("./dist-AS6Z6RQQ.js");
     const auth = await core.getAuthStatus(config.baseUrl, { validate: true });
     return withEnvelope({
       command: "status",
@@ -9055,7 +9264,7 @@ var buildToolHandlers = (serverOptions) => {
       }
     ];
     try {
-      const core = await import("./dist-AGQQPJUD.js");
+      const core = await import("./dist-AS6Z6RQQ.js");
       core.assertSecureBaseUrl(config.baseUrl);
       checks.push({
         id: "base-url-secure",
@@ -9575,7 +9784,7 @@ var buildToolHandlers = (serverOptions) => {
     } catch {
       token = config.accessKey;
     }
-    const core = await import("./dist-AGQQPJUD.js");
+    const core = await import("./dist-AS6Z6RQQ.js");
     const data = await core.getBillingConfig({
       baseUrl: config.baseUrl,
       authToken: token
@@ -10409,7 +10618,7 @@ var registerCapabilitiesCommand = (program2, deps) => {
     warnIfAccessKeyFromCliOption(options, command);
     let data = capabilities;
     if (options.live) {
-      const core = await import("./dist-AGQQPJUD.js");
+      const core = await import("./dist-AS6Z6RQQ.js");
       const baseUrl = await deps.resolveBaseUrl(options, command);
       const accessKey = options.accessKeyStdin ? await deps.readStdinValue() : options.accessKey;
       const token = await core.getAuthToken({ accessKey, baseUrl });
@@ -10547,7 +10756,7 @@ var writeCredentialOutput = async (input) => {
 };
 var resolveCoreAuth = async (options, command, deps) => {
   const context = await resolveAuthContext(options, command, deps);
-  const core = await import("./dist-AGQQPJUD.js");
+  const core = await import("./dist-AS6Z6RQQ.js");
   return { ...context, core };
 };
 var parseCapabilities = (value) => value?.split(",").map((item) => item.trim()).filter(Boolean);
@@ -10864,7 +11073,7 @@ var registerAgentsCommand = (program2, deps) => {
   const agents = program2.command("agents").description("CloudEval Agent Profile utilities");
   addAgentOutputOptions(agents.command("list").description("List Agent Profiles"), deps).action(async (options, command) => {
     const baseUrl = await deps.resolveBaseUrl(options, command);
-    const core = await import("./dist-AGQQPJUD.js");
+    const core = await import("./dist-AS6Z6RQQ.js");
     core.assertSecureBaseUrl(baseUrl);
     const data = await listProfilesForDiscovery2(core, baseUrl);
     await writeProfiles({
@@ -10880,7 +11089,7 @@ var registerAgentsCommand = (program2, deps) => {
     deps
   ).action(async (profileId, options, command) => {
     const baseUrl = await deps.resolveBaseUrl(options, command);
-    const core = await import("./dist-AGQQPJUD.js");
+    const core = await import("./dist-AS6Z6RQQ.js");
     core.assertSecureBaseUrl(baseUrl);
     const data = await getProfileForDiscovery2(core, baseUrl, profileId);
     await writeProfiles({
@@ -10899,7 +11108,7 @@ var registerAgentsCommand = (program2, deps) => {
       const cliProfile = getActiveConfigProfile(command);
       const cliConfig = await loadCliConfig(cliProfile);
       const auth = await resolveAuthContext(options, command, deps);
-      const core = await import("./dist-AGQQPJUD.js");
+      const core = await import("./dist-AS6Z6RQQ.js");
       const profileResponse = await core.getAgentProfile({
         baseUrl: auth.baseUrl,
         authToken: auth.token,
@@ -11397,7 +11606,7 @@ var registerDiagnosticsCommands = (program2, deps) => {
     const baseUrl = await deps.resolveBaseUrl(options, command);
     const profile = getActiveConfigProfile(command);
     const config = await loadCliConfig(profile);
-    const core = await import("./dist-AGQQPJUD.js");
+    const core = await import("./dist-AS6Z6RQQ.js");
     const auth = await core.getAuthStatus(baseUrl, { validate: true });
     if (options.format === "text" || !options.format) {
       process.stdout.write(
@@ -11447,7 +11656,7 @@ var registerDiagnosticsCommands = (program2, deps) => {
       detail: getCliConfigPath(profile)
     });
     try {
-      const core = await import("./dist-AGQQPJUD.js");
+      const core = await import("./dist-AS6Z6RQQ.js");
       core.assertSecureBaseUrl(baseUrl);
       checks.push({
         id: "base-url-secure",
@@ -11547,7 +11756,7 @@ var resolveToken2 = async (options, deps, baseUrl, command) => {
     return options.accessKey;
   }
   try {
-    const core = await import("./dist-AGQQPJUD.js");
+    const core = await import("./dist-AS6Z6RQQ.js");
     return await core.getAuthToken({
       baseUrl
     });
@@ -11631,7 +11840,7 @@ var registerModelsCommand = (program2, deps) => {
     let source = "fallback";
     let modelList = fallbackModels;
     try {
-      const core = await import("./dist-AGQQPJUD.js");
+      const core = await import("./dist-AS6Z6RQQ.js");
       const response = await fetch(`${core.normalizeApiBase(baseUrl)}/models`, {
         headers: {
           Accept: "application/json",
@@ -12803,7 +13012,7 @@ var uninstallCompletionScript = async (shell) => {
 var runInteractiveLoginOnboarding = async (baseUrl, token) => {
   const [{ render }, { Onboarding }] = await Promise.all([
     import("ink"),
-    import("./Onboarding-4N4WIORR.js")
+    import("./Onboarding-QUB2SCWP.js")
   ]);
   await new Promise((resolve) => {
     let app;
@@ -13037,7 +13246,7 @@ var resolveBaseUrl = async (options, command) => {
     });
   }
   try {
-    const { getAuthStatus } = await import("./dist-AGQQPJUD.js");
+    const { getAuthStatus } = await import("./dist-AS6Z6RQQ.js");
     const status = await getAuthStatus();
     const storedBaseUrl = status.baseUrl;
     if (storedBaseUrl && shouldUseStoredBaseUrl(storedBaseUrl)) {
@@ -13108,7 +13317,7 @@ program.command("login").description("Authenticate with Cloudeval").option(
       checkUserStatus,
       ensurePlaygroundProject,
       login
-    } = await import("./dist-AGQQPJUD.js");
+    } = await import("./dist-AS6Z6RQQ.js");
     assertSecureBaseUrl(options.baseUrl);
     const headlessEnvironment = isHeadlessEnvironment();
     const headlessLogin = options.headless || headlessEnvironment;
@@ -13172,7 +13381,7 @@ program.command("logout").description("Log out and clear stored authentication s
   DEFAULT_BASE_URL
 ).option("--all-devices", "Revoke sessions on all devices", false).action(async (options) => {
   try {
-    const { assertSecureBaseUrl, logout } = await import("./dist-AGQQPJUD.js");
+    const { assertSecureBaseUrl, logout } = await import("./dist-AS6Z6RQQ.js");
     assertSecureBaseUrl(options.baseUrl);
     const result = await logout({
       baseUrl: options.baseUrl,
@@ -13196,7 +13405,7 @@ authCommand.command("status").description("Show current authentication status").
   DEFAULT_BASE_URL
 ).option("--format <format>", "Output format: text, json, ndjson, markdown", "text").option("--show-sensitive-ids", "Show full account/session identifiers in command output", false).option("-v, --verbose", "Enable verbose logging and show full non-token identifiers", false).action(async (options, command) => {
   try {
-    const { assertSecureBaseUrl, getAuthStatus } = await import("./dist-AGQQPJUD.js");
+    const { assertSecureBaseUrl, getAuthStatus } = await import("./dist-AS6Z6RQQ.js");
     const effectiveBaseUrl = await resolveBaseUrl(options, command);
     assertSecureBaseUrl(effectiveBaseUrl);
     const status = await getAuthStatus(effectiveBaseUrl, { validate: true });
@@ -13379,10 +13588,10 @@ program.command("tui").description("Open the CloudEval Terminal UI").option(
   "Access key for automation",
   process.env.CLOUDEVAL_ACCESS_KEY
 ).option("--access-key-stdin", "Read access key from stdin (recommended for automation)", false).option("--model <name>", "Model name").option("--debug", "Log raw chunks", false).option("--health-check", "Enable health check (disabled by default)").option("--no-banner", "Disable ASCII banner").option("--animate", "Enable TUI animations (default)").option("--no-anim", "Disable TUI animations").option("-v, --verbose", "Enable verbose logging", false).action(async (options, command) => {
-  const { assertSecureBaseUrl } = await import("./dist-AGQQPJUD.js");
+  const { assertSecureBaseUrl } = await import("./dist-AS6Z6RQQ.js");
   const [{ render }, { App }] = await Promise.all([
     import("ink"),
-    import("./App-5ITWBHXF.js")
+    import("./App-G6ACKT3M.js")
   ]);
   const baseUrl = await resolveBaseUrl(options, command);
   assertSecureBaseUrl(baseUrl);
@@ -13431,10 +13640,10 @@ program.command("chat").description("Start an interactive chat session").option(
   "Access key for automation",
   process.env.CLOUDEVAL_ACCESS_KEY
 ).option("--access-key-stdin", "Read access key from stdin (recommended for automation)", false).option("--conversation <id>", "Conversation/thread id to resume").option("--continue", "Resume the most recent local chat session", false).option("--resume <id-or-title>", "Resume a local chat session by thread id or title").option("--model <name>", "Model name").option("--mode <mode>", "Initial chat mode: ask, agent").option("--debug", "Log raw chunks", false).option("--health-check", "Enable health check (disabled by default)").option("--no-banner", "Disable ASCII banner").option("--animate", "Enable TUI animations (default)").option("--no-anim", "Disable TUI animations").option("-v, --verbose", "Enable verbose logging", false).action(async (options, command) => {
-  const { assertSecureBaseUrl } = await import("./dist-AGQQPJUD.js");
+  const { assertSecureBaseUrl } = await import("./dist-AS6Z6RQQ.js");
   const [{ render }, { App }] = await Promise.all([
     import("ink"),
-    import("./App-5ITWBHXF.js")
+    import("./App-G6ACKT3M.js")
   ]);
   const baseUrl = await resolveBaseUrl(options, command);
   assertSecureBaseUrl(baseUrl);
@@ -13503,7 +13712,7 @@ program.command("ask").alias("agent").description("Ask a single question or run
   const question = Array.isArray(questionParts) ? questionParts.join(" ") : String(questionParts);
   const commandName = command.parent?.args?.[0] === "agent" ? "agent" : "ask";
   const selectedMode = commandName === "agent" ? "agent" : "ask";
-  const { assertSecureBaseUrl } = await import("./dist-AGQQPJUD.js");
+  const { assertSecureBaseUrl } = await import("./dist-AS6Z6RQQ.js");
   const baseUrl = await resolveBaseUrl(options, command);
   assertSecureBaseUrl(baseUrl);
   const selectedProfile = getActiveConfigProfile(command);
@@ -13544,7 +13753,7 @@ program.command("ask").alias("agent").description("Ask a single question or run
     const fs13 = await import("fs");
     const fsPromises = await import("fs/promises");
     const { randomUUID: randomUUID5 } = await import("crypto");
-    const core = await import("./dist-AGQQPJUD.js");
+    const core = await import("./dist-AS6Z6RQQ.js");
     const {
       streamChat,
       reduceChunk,
@@ -13602,7 +13811,7 @@ program.command("ask").alias("agent").description("Ask a single question or run
             console.error("Authentication required. Starting login process...\n");
           }
           try {
-            const { login } = await import("./dist-AGQQPJUD.js");
+            const { login } = await import("./dist-AS6Z6RQQ.js");
             verboseLog("Calling interactive login", { baseUrl });
             token = await login(baseUrl, {
               headless: isHeadlessEnvironment()
@@ -14191,7 +14400,7 @@ Error: ${errorMsg}
 program.command("banner").description("Preview the startup banner and terminal capabilities").action(async () => {
   const { render } = await import("ink");
   const BannerPreview = React.lazy(async () => ({
-    default: (await import("./Banner-4PWWKMRZ.js")).Banner
+    default: (await import("./Banner-UIKOHSAV.js")).Banner
   }));
   render(
     /* @__PURE__ */ jsx(React.Suspense, { fallback: null, children: /* @__PURE__ */ jsx(BannerPreview, { disable: false }) })