@ganakailabs/cloudeval-cli 0.24.4 → 0.26.0

package/dist/cli.js

@@ -36,7 +36,7 @@ import {
 } from "./chunk-KBHRBGSX.js";
 import {
   CLI_VERSION
-} from "./chunk-YEKKVQCN.js";
+} from "./chunk-IAXSLM2G.js";
 
 // src/runtime/prepareInk.ts
 import fs from "fs";
@@ -135,9 +135,9 @@ ensureInkRuntimeEnvironment();
 // src/cli.tsx
 import React from "react";
 import { Command } from "commander";
-import { promises as fs12 } from "fs";
+import { promises as fs13 } from "fs";
 import os6 from "os";
-import path9 from "path";
+import path10 from "path";
 
 // src/shellCompletion.ts
 var normalizeCompletionShell = (shell) => {
@@ -437,6 +437,35 @@ var cliCommands = [
       "reports rules"
     ]
   },
+  {
+    name: "review",
+    description: "Sync a GitHub-backed CloudEval project from the pushed commit and evaluate report gates",
+    domain: "reports",
+    options: [
+      ...authOptions,
+      "--project",
+      "--repo",
+      "--ref",
+      "--commit-sha",
+      "--source-root",
+      "--config",
+      "--no-wait",
+      "--wait-timeout",
+      "--poll-interval",
+      "--no-ai-summary",
+      "--ai-summary-mode",
+      "--ai-summary-profile",
+      "--ignore-dirty",
+      "--output",
+      "--format",
+      "--quiet",
+      "--progress",
+      "--model",
+      "--profile",
+      "--help"
+    ],
+    workflows: ["github review", "pr gate", "shift-left review"]
+  },
   {
     name: "recipes",
     description: "CloudEval reusable recipes and agent skills",
@@ -1436,10 +1465,10 @@ var writeFormattedOutput = async (input) => {
   process.stdout.write(text);
 };
 var writePrivateOutputFile = async (output, text) => {
-  const fs13 = await import("fs/promises");
-  await fs13.writeFile(output, text, { encoding: "utf8", mode: 384 });
+  const fs14 = await import("fs/promises");
+  await fs14.writeFile(output, text, { encoding: "utf8", mode: 384 });
   if (process.platform !== "win32") {
-    await fs13.chmod(output, 384);
+    await fs14.chmod(output, 384);
   }
 };
 
@@ -1787,8 +1816,8 @@ var writeReport = async (report, options, tuiDefault) => {
   const textFormat = format === "text" || format === "table" ? "summary" : format;
   const text = serializeReportOutput(report, { format: textFormat, mode });
   if (options.output) {
-    const fs13 = await import("fs/promises");
-    await fs13.writeFile(options.output, text, "utf8");
+    const fs14 = await import("fs/promises");
+    await fs14.writeFile(options.output, text, "utf8");
     return;
   }
   process.stdout.write(text);
@@ -1823,16 +1852,16 @@ var writeDownloadPayload = async (input) => {
     );
     return [];
   }
-  const fs13 = await import("fs/promises");
-  const path10 = await import("path");
-  await fs13.mkdir(path10.dirname(input.output), { recursive: true });
+  const fs14 = await import("fs/promises");
+  const path11 = await import("path");
+  await fs14.mkdir(path11.dirname(input.output), { recursive: true });
   const text = formatOutput({
     command: input.command,
     data: input.payload,
     format: input.format,
     frontendUrl: input.frontendUrl
   });
-  await fs13.writeFile(input.output, text, "utf8");
+  await fs14.writeFile(input.output, text, "utf8");
   return [input.output];
 };
 var resolveMachineFormat = (requested) => {
@@ -1981,14 +2010,14 @@ var registerReportsCommand = (program2, deps) => {
       );
       const data = reportTypes.length === 1 ? payload[reportTypes[0] === "architecture" ? "waf" : reportTypes[0]] : payload;
       if (options.output && reportTypes.length > 1) {
-        const fs13 = await import("fs/promises");
-        const path10 = await import("path");
-        const stat = await fs13.stat(options.output).catch(() => void 0);
-        if (stat?.isDirectory() || !path10.extname(options.output)) {
-          await fs13.mkdir(options.output, { recursive: true });
+        const fs14 = await import("fs/promises");
+        const path11 = await import("path");
+        const stat = await fs14.stat(options.output).catch(() => void 0);
+        if (stat?.isDirectory() || !path11.extname(options.output)) {
+          await fs14.mkdir(options.output, { recursive: true });
           const files = [];
           for (const [key, value] of Object.entries(payload)) {
-            const file = path10.join(options.output, `${projectId}-${key}-report.json`);
+            const file = path11.join(options.output, `${projectId}-${key}-report.json`);
             files.push(
               ...await writeDownloadPayload({
                 command: "reports download",
@@ -2217,9 +2246,762 @@ var registerReportsCommand = (program2, deps) => {
   );
 };
 
+// src/reviewCommand.ts
+import fs2 from "fs/promises";
+import path2 from "path";
+import { spawn } from "child_process";
+
+// src/apiClient.ts
+var responseErrorMessage = async (response) => {
+  const text = await response.text();
+  if (!text) {
+    return `request failed with status ${response.status}`;
+  }
+  try {
+    const payload = JSON.parse(text);
+    const detail = payload?.detail ?? payload?.message ?? payload?.error;
+    if (typeof detail === "string") {
+      return detail;
+    }
+    if (detail) {
+      return JSON.stringify(detail);
+    }
+  } catch {
+  }
+  return text;
+};
+var fetchCloudEvalJson = async ({
+  baseUrl,
+  authToken,
+  path: path11,
+  method = "GET",
+  query = {},
+  body,
+  idempotencyKey
+}) => {
+  const url = new URL(`${normalizeApiBase(baseUrl)}${path11}`);
+  for (const [key, value] of Object.entries(query)) {
+    if (value !== void 0 && value !== null && value !== "") {
+      url.searchParams.set(key, String(value));
+    }
+  }
+  const response = await fetch(url, {
+    method,
+    headers: {
+      ...getCLIHeaders(authToken),
+      ...idempotencyKey ? { "Idempotency-Key": idempotencyKey } : {}
+    },
+    ...body === void 0 ? {} : { body: JSON.stringify(body) }
+  });
+  if (!response.ok) {
+    throw new Error(await responseErrorMessage(response));
+  }
+  return await response.json();
+};
+
+// src/reviewCommand.ts
+var DIRTY_REVIEW_MESSAGE = "Reviews pushed commits only. Add --ignore-dirty to review HEAD anyway.";
+var runGit = async (cwd, args) => {
+  const child = spawn("git", args, {
+    cwd,
+    stdio: ["ignore", "pipe", "pipe"]
+  });
+  const stdout = [];
+  child.stdout.on("data", (chunk) => stdout.push(Buffer.from(chunk)));
+  const exitCode = await new Promise(
+    (resolve) => child.on("exit", resolve)
+  );
+  return {
+    ok: exitCode === 0,
+    stdout: Buffer.concat(stdout).toString("utf8").trim()
+  };
+};
+var normalizeGithubRepo = (value) => {
+  const text = String(value ?? "").trim();
+  if (!text) return void 0;
+  const withoutGit = text.replace(/\.git$/i, "");
+  const httpsMatch = withoutGit.match(/github\.com[:/]([^/\s]+)\/([^/\s]+)$/i);
+  if (httpsMatch) {
+    return `${httpsMatch[1]}/${httpsMatch[2]}`;
+  }
+  if (/^[^/\s]+\/[^/\s]+$/.test(withoutGit)) {
+    return withoutGit;
+  }
+  return void 0;
+};
+var resolveGitMetadata = async (cwd, options) => {
+  const status = await runGit(cwd, ["status", "--porcelain"]);
+  const dirty = status.ok && status.stdout.length > 0;
+  const remote = options.repo ? { ok: true, stdout: options.repo } : await runGit(cwd, ["remote", "get-url", "origin"]);
+  const ref = options.ref ? options.ref : (await runGit(cwd, ["rev-parse", "--abbrev-ref", "HEAD"])).stdout;
+  const sha = options.commitSha ? options.commitSha : (await runGit(cwd, ["rev-parse", "HEAD"])).stdout;
+  return {
+    repo: normalizeGithubRepo(remote.stdout),
+    ref: ref && ref !== "HEAD" ? ref : void 0,
+    commitSha: sha || void 0,
+    dirty
+  };
+};
+var asRecord = (value) => value && typeof value === "object" ? value : {};
+var sourceOf = (project) => asRecord(project.iac_source ?? project.iacSource);
+var resolveProjectId = async ({
+  baseUrl,
+  token,
+  requestedProjectId,
+  repo,
+  ref,
+  sourceRoot
+}) => {
+  if (requestedProjectId) {
+    return requestedProjectId;
+  }
+  if (!repo) {
+    throw new Error("Provide --repo or run inside a GitHub-backed Git repository.");
+  }
+  const projects = await fetchCloudEvalJson({
+    baseUrl,
+    authToken: token,
+    path: "/projects"
+  });
+  const matches = projects.filter((project) => {
+    const record = asRecord(project);
+    const source = sourceOf(record);
+    if (source.type !== "github") return false;
+    if (source.repo_full_name !== repo) return false;
+    if (sourceRoot !== void 0 && String(source.source_root ?? "") !== sourceRoot) {
+      return false;
+    }
+    if (ref && source.ref && source.ref !== ref) {
+      return false;
+    }
+    return true;
+  });
+  if (matches.length === 1) {
+    return String(asRecord(matches[0]).id);
+  }
+  if (matches.length > 1) {
+    throw new Error(
+      `Multiple CloudEval projects match ${repo}. Pass --project to choose one.`
+    );
+  }
+  throw new Error(
+    `No CloudEval GitHub project matched ${repo}. Create one in CloudEval or pass --project.`
+  );
+};
+var readConfigText = async (cwd, options) => {
+  const configPath = options.config ?? path2.join(cwd, ".cloudeval", "config.yaml");
+  try {
+    return await fs2.readFile(path2.resolve(cwd, configPath), "utf8");
+  } catch {
+    return void 0;
+  }
+};
+var parseGateConfig = (configText) => {
+  if (!configText || !/^\s*ci\s*:/m.test(configText) || !/^\s*gates\s*:/m.test(configText)) {
+    return void 0;
+  }
+  const stringValue2 = (key) => {
+    const match = configText.match(new RegExp(`^\\s*${key}\\s*:\\s*([^\\s#]+)`, "m"));
+    return match ? match[1].trim() : void 0;
+  };
+  const numberValue2 = (key) => {
+    const match = configText.match(new RegExp(`^\\s*${key}\\s*:\\s*([0-9]+(?:\\.[0-9]+)?)`, "m"));
+    return match ? Number(match[1]) : void 0;
+  };
+  const booleanValue2 = (key) => {
+    const match = configText.match(new RegExp(`^\\s*${key}\\s*:\\s*(true|false)`, "im"));
+    return match ? match[1].toLowerCase() === "true" : void 0;
+  };
+  const pillarScoreMins = {};
+  const pillarBlock = configText.match(/^(\s*)pillars\s*:\s*$(?<body>(?:\n\s+[-\w]+\s*:\s*[0-9]+(?:\.[0-9]+)?\s*)+)/m);
+  const pillarBody = pillarBlock?.groups?.body ?? "";
+  for (const line of pillarBody.split("\n")) {
+    const match = line.match(/^\s+([-\w]+)\s*:\s*([0-9]+(?:\.[0-9]+)?)/);
+    if (match) {
+      pillarScoreMins[match[1].replace(/-/g, "_").toLowerCase()] = Number(match[2]);
+    }
+  }
+  for (const key of [
+    "security",
+    "reliability",
+    "operational_excellence",
+    "performance_efficiency",
+    "cost_optimization"
+  ]) {
+    const value = numberValue2(`${key}_score_min`);
+    if (value !== void 0) {
+      pillarScoreMins[key] = value;
+    }
+  }
+  const enforcement = stringValue2("enforcement")?.toLowerCase();
+  return {
+    enforcement: enforcement === "warn" ? "warn" : "required",
+    overallScoreMin: numberValue2("overall_score_min") ?? 80,
+    pillarScoreMin: numberValue2("pillar_score_min"),
+    pillarScoreMins,
+    failOnHighRisk: booleanValue2("fail_on_high_risk") ?? true,
+    failOnValidationErrors: booleanValue2("fail_on_validation_errors") ?? true,
+    maxMonthlyCost: numberValue2("max_monthly_cost")
+  };
+};
+var numberFrom = (...values) => {
+  for (const value of values) {
+    if (typeof value === "number" && Number.isFinite(value)) {
+      return value;
+    }
+    if (typeof value === "string" && value.trim() && Number.isFinite(Number(value))) {
+      return Number(value);
+    }
+  }
+  return void 0;
+};
+var normalizeKey = (value) => String(value ?? "").trim().replace(/[\s-]+/g, "_").toLowerCase();
+var firstRecord = (...values) => {
+  for (const value of values) {
+    if (value && typeof value === "object" && !Array.isArray(value)) {
+      return value;
+    }
+  }
+  return void 0;
+};
+var extractPillars = (waf) => {
+  const fromArray = waf?.parsed?.score?.pillars;
+  if (Array.isArray(fromArray)) {
+    return fromArray.map((pillar) => {
+      const record = asRecord(pillar);
+      const id = normalizeKey(record.id ?? record.name ?? record.label);
+      const score = numberFrom(record.score, record.value);
+      if (!id || score === void 0) return void 0;
+      return {
+        id,
+        label: String(record.label ?? record.name ?? id),
+        score,
+        passed: numberFrom(record.passed, record.passed_rules),
+        warned: numberFrom(record.warned, record.warning_rules),
+        failed: numberFrom(record.failed, record.failed_rules)
+      };
+    }).filter((pillar) => pillar !== void 0);
+  }
+  const scores = firstRecord(
+    waf?.parsed?.pillar_scores,
+    waf?.parsed?.score?.pillar_scores,
+    waf?.raw?.pillar_scores
+  );
+  if (!scores) return [];
+  return Object.entries(scores).map(([id, score]) => ({
+    id: normalizeKey(id),
+    label: id,
+    score: numberFrom(score)
+  })).filter((pillar) => pillar.score !== void 0);
+};
+var extractValidation = ({
+  waf,
+  preload,
+  project
+}) => {
+  const psRuleSummary = firstRecord(
+    waf?.parsed?.validation_summary,
+    waf?.raw?.validation_summary,
+    waf?.validation_summary
+  );
+  const rules = Array.isArray(waf?.parsed?.rules) ? waf?.parsed?.rules : [];
+  const failedRules = rules.filter(
+    (rule) => ["fail", "failed", "error"].includes(String(rule?.status ?? rule?.outcome ?? "").toLowerCase())
+  );
+  const unitSummary = firstRecord(
+    preload?.latest_payloads?.unit_tests?.summary,
+    preload?.reports?.unit_tests?.metrics,
+    project?.status?.unit_tests
+  );
+  return {
+    psRule: {
+      total: numberFrom(psRuleSummary?.total_rules, psRuleSummary?.totalRules, rules.length),
+      passed: numberFrom(psRuleSummary?.passed_rules, psRuleSummary?.passedRules),
+      failed: numberFrom(psRuleSummary?.failed_rules, psRuleSummary?.failedRules, failedRules.length),
+      errors: numberFrom(psRuleSummary?.error_rules, psRuleSummary?.errorRules)
+    },
+    unitTests: {
+      status: unitSummary?.status,
+      total: numberFrom(unitSummary?.total_tests, unitSummary?.totalTests),
+      passed: numberFrom(unitSummary?.passed_tests, unitSummary?.passedTests),
+      failed: numberFrom(unitSummary?.failed_tests, unitSummary?.failedTests),
+      skipped: numberFrom(unitSummary?.skipped_tests, unitSummary?.skippedTests)
+    }
+  };
+};
+var evaluateGate = ({
+  configText,
+  waf,
+  cost,
+  preload,
+  project
+}) => {
+  const gateConfig = parseGateConfig(configText);
+  const overallScore = numberFrom(
+    waf?.parsed?.score?.overall,
+    waf?.parsed?.overall_score,
+    waf?.raw?.score
+  );
+  const highRisk = numberFrom(
+    waf?.parsed?.counts?.highRisk,
+    waf?.parsed?.counts?.high_count,
+    waf?.parsed?.highRisk
+  );
+  const monthlyCost = numberFrom(
+    cost?.parsed?.totalSpend?.amount,
+    cost?.parsed?.total_spend?.amount,
+    cost?.raw?.total
+  );
+  const currency = String(
+    cost?.parsed?.totalSpend?.currency ?? cost?.parsed?.total_spend?.currency ?? cost?.raw?.currency ?? ""
+  ) || void 0;
+  const savings = numberFrom(
+    cost?.parsed?.estimatedSavings?.amount,
+    cost?.parsed?.estimated_savings?.amount
+  );
+  const pillars = extractPillars(waf).map((pillar) => {
+    const threshold = gateConfig?.pillarScoreMins[pillar.id] ?? gateConfig?.pillarScoreMin;
+    return {
+      ...pillar,
+      threshold,
+      status: threshold !== void 0 && pillar.score < threshold ? "fail" : "pass"
+    };
+  });
+  const validation = extractValidation({ waf, preload, project });
+  const wellArchitected = {
+    overall: {
+      score: overallScore,
+      threshold: gateConfig?.overallScoreMin,
+      status: gateConfig && overallScore !== void 0 && overallScore < gateConfig.overallScoreMin ? "fail" : "pass"
+    },
+    pillars,
+    risks: {
+      high: highRisk,
+      medium: numberFrom(waf?.parsed?.counts?.mediumRisk, waf?.parsed?.counts?.medium_count),
+      critical: numberFrom(waf?.parsed?.counts?.criticalRisk, waf?.parsed?.counts?.critical_count)
+    },
+    topFindings: Array.isArray(waf?.parsed?.rules) ? waf.parsed.rules.slice(0, 5) : []
+  };
+  const costSummary = {
+    monthly: {
+      amount: monthlyCost,
+      currency,
+      threshold: gateConfig?.maxMonthlyCost,
+      status: gateConfig?.maxMonthlyCost !== void 0 && monthlyCost !== void 0 && monthlyCost > gateConfig.maxMonthlyCost ? "fail" : "pass"
+    },
+    estimatedSavings: {
+      amount: savings,
+      currency
+    },
+    topServices: Array.isArray(cost?.parsed?.serviceGroups) ? cost.parsed.serviceGroups.slice(0, 5) : [],
+    recommendations: Array.isArray(cost?.parsed?.recommendations) ? cost.parsed.recommendations.slice(0, 5) : []
+  };
+  if (!gateConfig) {
+    return {
+      status: "warn",
+      reason: "ci.gates is not configured in .cloudeval/config.yaml.",
+      enforcement: "warn",
+      overallScore,
+      highRisk,
+      monthlyCost,
+      wellArchitected,
+      cost: costSummary,
+      validation
+    };
+  }
+  const failures = [];
+  if (overallScore !== void 0 && overallScore < gateConfig.overallScoreMin) {
+    failures.push(
+      `overall score ${overallScore} is below ${gateConfig.overallScoreMin}`
+    );
+  }
+  if (gateConfig.failOnHighRisk && highRisk !== void 0 && highRisk > 0) {
+    failures.push(`${highRisk} high-risk architecture findings`);
+  }
+  for (const pillar of pillars) {
+    if (pillar.status === "fail") {
+      failures.push(`${pillar.label} score ${pillar.score} is below ${pillar.threshold}`);
+    }
+  }
+  const failedPsRules = validation.psRule.failed ?? 0;
+  const failedUnitTests = validation.unitTests.failed ?? 0;
+  if (gateConfig.failOnValidationErrors && (failedPsRules > 0 || failedUnitTests > 0)) {
+    failures.push(
+      `validation has ${failedPsRules} failed PSRule checks and ${failedUnitTests} failed unit tests`
+    );
+  }
+  if (gateConfig.maxMonthlyCost !== void 0 && monthlyCost !== void 0 && monthlyCost > gateConfig.maxMonthlyCost) {
+    failures.push(`monthly cost ${monthlyCost} exceeds ${gateConfig.maxMonthlyCost}`);
+  }
+  const wouldFail = failures.length > 0;
+  return {
+    status: wouldFail && gateConfig.enforcement === "required" ? "fail" : wouldFail ? "warn" : "pass",
+    enforcement: gateConfig.enforcement,
+    wouldFail,
+    failures,
+    thresholds: gateConfig,
+    overallScore,
+    highRisk,
+    monthlyCost,
+    wellArchitected,
+    cost: costSummary,
+    validation
+  };
+};
+var safeFetch = async (input) => {
+  try {
+    return await fetchCloudEvalJson(input);
+  } catch {
+    return void 0;
+  }
+};
+var parsePositiveInteger = (value, flagName, fallback) => {
+  if (value === void 0 || value === "") {
+    return fallback;
+  }
+  const parsed = Number(value);
+  if (!Number.isFinite(parsed) || parsed <= 0) {
+    throw new Error(`${flagName} must be a positive number of milliseconds.`);
+  }
+  return Math.floor(parsed);
+};
+var extractJobId2 = (value) => {
+  const record = asRecord(value);
+  const job = asRecord(record.job);
+  const candidates = [
+    record.job_id,
+    record.jobId,
+    record.id,
+    job.job_id,
+    job.jobId,
+    job.id
+  ];
+  return candidates.find(
+    (candidate) => typeof candidate === "string" && candidate.trim().length > 0
+  );
+};
+var isTerminalJobStatus2 = (value) => {
+  const status = String(asRecord(value).status ?? "").toUpperCase();
+  return [
+    "COMPLETED",
+    "SUCCEEDED",
+    "SUCCESS",
+    "FAILED",
+    "CANCELLED",
+    "CANCELED",
+    "ERROR"
+  ].includes(status);
+};
+var isFailedJobStatus = (value) => {
+  const status = String(asRecord(value).status ?? "").toUpperCase();
+  return ["FAILED", "CANCELLED", "CANCELED", "ERROR"].includes(status);
+};
+var waitForJob = async ({
+  baseUrl,
+  token,
+  userId,
+  jobId,
+  pollIntervalMs,
+  waitTimeoutMs
+}) => {
+  const startedAt = Date.now();
+  let lastStatus;
+  for (; ; ) {
+    const query = userId ? `?user_id=${encodeURIComponent(userId)}` : "";
+    lastStatus = await fetchCloudEvalJson({
+      baseUrl,
+      authToken: token,
+      path: `/jobs/${encodeURIComponent(jobId)}${query}`
+    });
+    const status = String(lastStatus.status ?? "unknown");
+    process.stderr.write(`github sync job ${jobId}: ${status}
+`);
+    if (isTerminalJobStatus2(lastStatus)) {
+      if (isFailedJobStatus(lastStatus)) {
+        throw new Error(`GitHub sync job ${jobId} finished with status ${status}.`);
+      }
+      return lastStatus;
+    }
+    if (Date.now() - startedAt > waitTimeoutMs) {
+      throw new Error(`Timed out waiting for GitHub sync job ${jobId}.`);
+    }
+    await new Promise((resolve) => setTimeout(resolve, pollIntervalMs));
+  }
+};
+var fetchProjectById = async ({
+  baseUrl,
+  token,
+  projectId
+}) => {
+  const projects = await safeFetch({
+    baseUrl,
+    authToken: token,
+    path: "/projects"
+  });
+  return projects?.map(asRecord).find((project) => project.id === projectId);
+};
+var buildAiSummaryPrompt = (data) => [
+  "Write a concise CloudEval pull request review summary in Markdown.",
+  "Focus on gate status, Well-Architected posture, cost posture, and security/operational risks.",
+  "Keep it under 160 words. Do not invent facts not present below.",
+  "",
+  `Project: ${data.projectId}`,
+  `Repository: ${data.repo ?? "unknown"}`,
+  `Ref: ${data.ref ?? "unknown"}`,
+  `Commit: ${data.commitSha ?? "unknown"}`,
+  `Gate: ${String(data.gate?.status ?? "unknown").toUpperCase()}`,
+  `Well-Architected score: ${data.gate?.overallScore ?? "unknown"}`,
+  `High-risk findings: ${data.gate?.highRisk ?? "unknown"}`,
+  `Monthly cost: ${data.gate?.monthlyCost ?? "unknown"}`,
+  `Validation: PSRule failed ${data.gate?.validation?.psRule?.failed ?? "unknown"}, unit tests failed ${data.gate?.validation?.unitTests?.failed ?? "unknown"}`,
+  Array.isArray(data.gate?.failures) && data.gate.failures.length ? `Gate failures: ${data.gate.failures.join("; ")}` : "Gate failures: none reported"
+].join("\n");
+var generateAiSummary = async ({
+  baseUrl,
+  token,
+  user,
+  project,
+  model,
+  mode,
+  agentProfileId,
+  data
+}) => {
+  const core = await import("./dist-CFLR5FML.js");
+  const threadId = `review-${data.projectId}-${Date.now()}`;
+  let markdown = "";
+  for await (const chunk of core.streamChat({
+    baseUrl,
+    authToken: token,
+    message: buildAiSummaryPrompt(data),
+    threadId,
+    user: {
+      id: String(project?.user_id ?? user?.id ?? "cli-user"),
+      name: String(user?.full_name ?? user?.name ?? user?.email ?? "CloudEval CI")
+    },
+    project: project ? {
+      id: String(project.id ?? data.projectId),
+      name: String(project.name ?? data.projectId),
+      user_id: typeof project.user_id === "string" ? project.user_id : void 0,
+      cloud_provider: typeof project.cloud_provider === "string" ? project.cloud_provider : void 0,
+      type: typeof project.type === "string" ? project.type : void 0,
+      connection_ids: Array.isArray(project.connection_ids) ? project.connection_ids : void 0
+    } : {
+      id: String(data.projectId),
+      name: String(data.projectId)
+    },
+    settings: {
+      mode,
+      ...model ? { model } : {}
+    },
+    ...mode === "agent" ? { agentProfileId: agentProfileId ?? "architecture" } : {},
+    completeAfterResponse: true,
+    responseCompletionGraceMs: 250,
+    streamIdleTimeoutMs: 3e4
+  })) {
+    const content = chunk?.content;
+    if (chunk.type === "responding" && typeof content === "string") {
+      markdown += content;
+    }
+  }
+  return {
+    enabled: true,
+    mode,
+    ...mode === "agent" ? { agentProfileId: agentProfileId ?? "architecture" } : {},
+    ...model ? { model } : {},
+    markdown: markdown.trim(),
+    threadId
+  };
+};
+var buildMarkdownSummary = (data) => {
+  const gateStatus = String(data.gate?.status ?? "unknown").toUpperCase();
+  const score = data.gate?.overallScore ?? "unknown";
+  const cost = data.gate?.cost?.monthly;
+  const validation = data.gate?.validation;
+  const pillarLines = Array.isArray(data.gate?.wellArchitected?.pillars) ? data.gate.wellArchitected.pillars.map(
+    (pillar) => `  - ${pillar.label}: ${pillar.score}${pillar.threshold !== void 0 ? ` (min ${pillar.threshold})` : ""} - ${String(pillar.status ?? "unknown").toUpperCase()}`
+  ) : [];
+  const lines = [
+    "### CloudEval review",
+    "",
+    `- **Project:** \`${data.projectId}\``,
+    `- **Repository:** \`${data.repo ?? "unknown"}\``,
+    `- **Ref:** \`${data.ref ?? "unknown"}\``,
+    `- **Commit:** \`${String(data.commitSha ?? "unknown").slice(0, 12)}\``,
+    `- **Gate:** ${gateStatus}`,
+    `- **Well-Architected score:** ${score}`,
+    `- **Cost:** ${cost?.amount ?? "unknown"} ${cost?.currency ?? ""}`.trim(),
+    `- **Validation:** PSRule ${validation?.psRule?.failed ?? "unknown"} failed, unit tests ${validation?.unitTests?.failed ?? "unknown"} failed`
+  ];
+  if (Array.isArray(data.gate?.failures) && data.gate.failures.length) {
+    lines.push("", "#### Gate failures", "", ...data.gate.failures.map((failure) => `- ${failure}`));
+  }
+  if (pillarLines.length) {
+    lines.push("", "#### Well-Architected drilldown", "", ...pillarLines);
+  }
+  if (cost?.amount !== void 0 || cost?.threshold !== void 0) {
+    lines.push(
+      "",
+      "#### Cost drilldown",
+      "",
+      `- Cost: ${cost?.amount ?? "unknown"} ${cost?.currency ?? ""}${cost?.threshold !== void 0 ? ` (max ${cost.threshold})` : ""}`.trim()
+    );
+  }
+  if (validation) {
+    lines.push(
+      "",
+      "#### Validation drilldown",
+      "",
+      `- Validation: PSRule ${validation.psRule?.failed ?? "unknown"} failed, unit tests ${validation.unitTests?.failed ?? "unknown"} failed`
+    );
+  }
+  if (data.aiSummary?.markdown) {
+    lines.push("", "## AI summary", "", data.aiSummary.markdown);
+  }
+  return lines.join("\n");
+};
+var registerReviewCommand = (program2, deps) => {
+  const command = addAuthOptions(
+    program2.command("review").description("Review the current GitHub-backed project from a pushed commit"),
+    deps.defaultBaseUrl
+  ).option("--project <id>", "CloudEval project id. If omitted, resolve by GitHub repo metadata.").option("--repo <owner/repo>", "GitHub repository. Defaults to git origin.").option("--ref <name>", "Git branch/ref. Defaults to current branch.").option("--commit-sha <sha>", "Commit SHA to sync/review. Defaults to local HEAD.").option("--source-root <path>", "GitHub source root used by the CloudEval project.").option("--config <path>", "Path to .cloudeval/config.yaml for gate thresholds.").option("--no-wait", "Submit GitHub sync and return without waiting for analysis.").option("--wait-timeout <ms>", "Maximum time to wait for GitHub sync.", "900000").option("--poll-interval <ms>", "Polling interval while waiting for GitHub sync.", "5000").option("--no-ai-summary", "Skip the AI-written review summary.").option("--ai-summary-mode <mode>", "AI summary mode: ask or agent.", "ask").option("--ai-summary-profile <profile-id>", "Agent Profile id when --ai-summary-mode agent is used.", "architecture").option("--ignore-dirty", "Review HEAD even if the local working tree has uncommitted changes.", false).option("--output <dir>", "Write review.json and review.md into a directory.").option("--quiet", "Accepted for CI parity; review output stays machine-readable.", false).option("--progress <mode>", "Accepted for CI parity; review does not stream progress.", "none").option("--model <model>", "Accepted for CI parity with ask/agent modes.").option("--format <format>", "Output format: text, json, ndjson, markdown", "text");
+  command.action(async (options, actionCommand) => {
+    try {
+      const cwd = process.cwd();
+      const git = await resolveGitMetadata(cwd, options);
+      if (git.dirty && !options.ignoreDirty) {
+        throw new Error(DIRTY_REVIEW_MESSAGE);
+      }
+      const context = await resolveAuthContext(options, actionCommand, deps);
+      const repo = normalizeGithubRepo(options.repo) ?? git.repo;
+      const ref = options.ref ?? git.ref;
+      const commitSha = options.commitSha ?? git.commitSha;
+      const sourceRoot = options.sourceRoot;
+      const projectId = await resolveProjectId({
+        baseUrl: context.baseUrl,
+        token: context.token,
+        requestedProjectId: options.project,
+        repo,
+        ref,
+        sourceRoot
+      });
+      const sync = await fetchCloudEvalJson({
+        baseUrl: context.baseUrl,
+        authToken: context.token,
+        path: `/projects/${projectId}/github/sync`,
+        method: "POST",
+        body: commitSha ? { commit_sha: commitSha } : {},
+        idempotencyKey: `cloudeval-review-${projectId}-${commitSha ?? "head"}`
+      });
+      const finalStatus = options.wait === false ? void 0 : extractJobId2(sync) ? await waitForJob({
+        baseUrl: context.baseUrl,
+        token: context.token,
+        userId: context.user?.id,
+        jobId: extractJobId2(sync),
+        pollIntervalMs: parsePositiveInteger(
+          options.pollInterval,
+          "--poll-interval",
+          5e3
+        ),
+        waitTimeoutMs: parsePositiveInteger(
+          options.waitTimeout,
+          "--wait-timeout",
+          9e5
+        )
+      }) : void 0;
+      const [cost, waf, configText] = await Promise.all([
+        safeFetch({
+          baseUrl: context.baseUrl,
+          authToken: context.token,
+          path: `/cost-reports/${projectId}/full`
+        }),
+        safeFetch({
+          baseUrl: context.baseUrl,
+          authToken: context.token,
+          path: `/well-architected-reports/${projectId}/full`
+        }),
+        readConfigText(cwd, options)
+      ]);
+      const project = await fetchProjectById({
+        baseUrl: context.baseUrl,
+        token: context.token,
+        projectId
+      });
+      const preload = context.user?.id ? await safeFetch({
+        baseUrl: context.baseUrl,
+        authToken: context.token,
+        path: `/reports/preload/${encodeURIComponent(projectId)}?user_id=${encodeURIComponent(context.user.id)}&include_payload=true`
+      }) : void 0;
+      const data = {
+        projectId,
+        repo,
+        ref,
+        commitSha,
+        sourceRoot,
+        sync: finalStatus ? { ...asRecord(sync), finalStatus } : sync,
+        reports: {
+          cost,
+          waf,
+          preload
+        },
+        gate: evaluateGate({ configText, waf, cost, preload, project })
+      };
+      if (options.aiSummary !== false) {
+        try {
+          const aiSummaryMode = String(options.aiSummaryMode ?? "ask").toLowerCase();
+          if (!["ask", "agent"].includes(aiSummaryMode)) {
+            throw new Error("--ai-summary-mode must be ask or agent.");
+          }
+          data.aiSummary = await generateAiSummary({
+            baseUrl: context.baseUrl,
+            token: context.token,
+            user: context.user,
+            project,
+            model: options.model,
+            mode: aiSummaryMode,
+            agentProfileId: options.aiSummaryProfile,
+            data
+          });
+        } catch (error) {
+          data.aiSummary = {
+            enabled: true,
+            status: "failed",
+            error: error?.message ?? "AI summary failed"
+          };
+        }
+      } else {
+        data.aiSummary = { enabled: false };
+      }
+      const summaryMarkdown = buildMarkdownSummary(data);
+      const filesWritten = [];
+      if (options.output) {
+        const outputDir = path2.resolve(options.output);
+        await fs2.mkdir(outputDir, { recursive: true });
+        const jsonPath = path2.join(outputDir, "review.json");
+        const markdownPath = path2.join(outputDir, "review.md");
+        await fs2.writeFile(jsonPath, JSON.stringify(data, null, 2), "utf8");
+        await fs2.writeFile(markdownPath, summaryMarkdown, "utf8");
+        filesWritten.push(jsonPath, markdownPath);
+      }
+      await writeFormattedOutput({
+        command: "review",
+        data: { ...data, summaryMarkdown },
+        format: options.format,
+        filesWritten
+      });
+      if (data.gate.status === "fail") {
+        process.exit(1);
+      }
+      process.exit(0);
+    } catch (error) {
+      console.error(error?.message ?? "Review failed");
+      process.exit(1);
+    }
+  });
+};
+
 // src/recipesCommand.ts
 import { randomUUID } from "crypto";
-import fs2 from "fs/promises";
+import fs3 from "fs/promises";
 
 // src/askProgress.ts
 var ASK_PROGRESS_MODES = /* @__PURE__ */ new Set(["auto", "stderr", "ndjson", "none"]);
@@ -3455,7 +4237,7 @@ var writeRecipeList = async (options) => {
   if (format === "table" || format === "text") {
     const text = renderRecipesTable();
     if (options.output) {
-      await fs2.writeFile(options.output, text, "utf8");
+      await fs3.writeFile(options.output, text, "utf8");
       return;
     }
     process.stdout.write(text);
@@ -3464,7 +4246,7 @@ var writeRecipeList = async (options) => {
   if (format === "markdown") {
     const text = renderRecipesMarkdown();
     if (options.output) {
-      await fs2.writeFile(options.output, text, "utf8");
+      await fs3.writeFile(options.output, text, "utf8");
       return;
     }
     process.stdout.write(text);
@@ -3482,7 +4264,7 @@ var writeRecipeShow = async (recipe, options) => {
   if (format === "markdown" || format === "text") {
     const text = renderRecipeMarkdown(recipe);
     if (options.output) {
-      await fs2.writeFile(options.output, text, "utf8");
+      await fs3.writeFile(options.output, text, "utf8");
       return;
     }
     process.stdout.write(text);
@@ -3677,15 +4459,15 @@ var registerRecipesCommand = (program2, deps) => {
 };
 
 // src/skillsCommand.ts
-import fs4 from "fs/promises";
+import fs5 from "fs/promises";
 
 // src/skills/catalog.ts
-import fs3 from "fs/promises";
+import fs4 from "fs/promises";
 import fsSync from "fs";
-import path2 from "path";
+import path3 from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
-var repoRoot = path2.resolve(fileURLToPath2(new URL("../../../../", import.meta.url)));
-var defaultSkillsPath = path2.join(repoRoot, "skills");
+var repoRoot = path3.resolve(fileURLToPath2(new URL("../../../../", import.meta.url)));
+var defaultSkillsPath = path3.join(repoRoot, "skills");
 var requiredSkillSections = [
   "## WHEN",
   "## DO NOT USE FOR",
@@ -3773,7 +4555,7 @@ var normalizeSkillId = (id) => {
   return metadataById.has(prefixed) ? prefixed : normalized;
 };
 var getSkillsPath = () => process.env.CLOUDEVAL_SKILLS_PATH ?? defaultSkillsPath;
-var skillFilePath = (id) => path2.join(getSkillsPath(), id, "SKILL.md");
+var skillFilePath = (id) => path3.join(getSkillsPath(), id, "SKILL.md");
 var fileExists = (filePath) => {
   try {
     return fsSync.statSync(filePath).isFile();
@@ -3785,7 +4567,7 @@ var readSkillFile = async (id) => {
   const filePath = skillFilePath(id);
   if (fileExists(filePath)) {
     return {
-      content: await fs3.readFile(filePath, "utf8"),
+      content: await fs4.readFile(filePath, "utf8"),
       path: filePath,
       source: "filesystem"
     };
@@ -3982,7 +4764,7 @@ var writeSkillList = async (options) => {
   if (format === "table" || format === "text") {
     const text = renderSkillsTable(skills);
     if (options.output) {
-      await fs4.writeFile(options.output, text, "utf8");
+      await fs5.writeFile(options.output, text, "utf8");
       return;
     }
     process.stdout.write(text);
@@ -3991,7 +4773,7 @@ var writeSkillList = async (options) => {
   if (format === "markdown") {
     const text = renderSkillsMarkdown(skills);
     if (options.output) {
-      await fs4.writeFile(options.output, text, "utf8");
+      await fs5.writeFile(options.output, text, "utf8");
       return;
     }
     process.stdout.write(text);
@@ -4014,7 +4796,7 @@ var writeSkillShow = async (id, options) => {
   const format = options.format ?? "markdown";
   if (format === "markdown" || format === "text") {
     if (options.output) {
-      await fs4.writeFile(options.output, skill.content, "utf8");
+      await fs5.writeFile(options.output, skill.content, "utf8");
       return;
     }
     process.stdout.write(skill.content);
@@ -4069,7 +4851,7 @@ var writeSkillDoctor = async (options) => {
       ""
     ].filter(Boolean).join("\n");
     if (options.output) {
-      await fs4.writeFile(options.output, `${text}
+      await fs5.writeFile(options.output, `${text}
 `, "utf8");
       return;
     }
@@ -4101,7 +4883,7 @@ var registerSkillsCommand = (program2) => {
       const text = `${skillsPath}
 `;
       if (options.output) {
-        await fs4.writeFile(options.output, text, "utf8");
+        await fs5.writeFile(options.output, text, "utf8");
         return;
       }
       process.stdout.write(text);
@@ -4274,10 +5056,10 @@ var registerOpenCommand = (program2, deps) => {
 };
 
 // src/projectsCommand.ts
-import path3 from "path";
-import fs5 from "fs/promises";
+import path4 from "path";
+import fs6 from "fs/promises";
 import os from "os";
-import { spawn } from "child_process";
+import { spawn as spawn2 } from "child_process";
 
 // src/projectDiagramImage.ts
 var trimTrailingSlash = (value) => value.replace(/\/+$/, "");
@@ -4434,50 +5216,6 @@ var downloadProjectDiagramImage = async (input) => {
   };
 };
 
-// src/apiClient.ts
-var responseErrorMessage = async (response) => {
-  const text = await response.text();
-  if (!text) {
-    return `request failed with status ${response.status}`;
-  }
-  try {
-    const payload = JSON.parse(text);
-    const detail = payload?.detail ?? payload?.message ?? payload?.error;
-    if (typeof detail === "string") {
-      return detail;
-    }
-    if (detail) {
-      return JSON.stringify(detail);
-    }
-  } catch {
-  }
-  return text;
-};
-var fetchCloudEvalJson = async ({
-  baseUrl,
-  authToken,
-  path: path10,
-  method = "GET",
-  query = {},
-  body
-}) => {
-  const url = new URL(`${normalizeApiBase(baseUrl)}${path10}`);
-  for (const [key, value] of Object.entries(query)) {
-    if (value !== void 0 && value !== null && value !== "") {
-      url.searchParams.set(key, String(value));
-    }
-  }
-  const response = await fetch(url, {
-    method,
-    headers: getCLIHeaders(authToken),
-    ...body === void 0 ? {} : { body: JSON.stringify(body) }
-  });
-  if (!response.ok) {
-    throw new Error(await responseErrorMessage(response));
-  }
-  return await response.json();
-};
-
 // src/graphClient.ts
 var normalizeGraphInsightFocus = (focus) => {
   const normalized = String(focus ?? "overview").trim().toLowerCase();
@@ -4637,7 +5375,7 @@ var writeProjectListOutput = async ({
     });
   }
   if (options.output) {
-    await fs5.writeFile(options.output, text, "utf8");
+    await fs6.writeFile(options.output, text, "utf8");
     return;
   }
   process.stdout.write(text);
@@ -4646,10 +5384,10 @@ var fileBlob = async (filePath) => {
   if (!filePath) {
     return void 0;
   }
-  const bytes = await fs5.readFile(filePath);
+  const bytes = await fs6.readFile(filePath);
   return {
     blob: new Blob([bytes], { type: "application/json" }),
-    name: path3.basename(filePath)
+    name: path4.basename(filePath)
   };
 };
 var normalizeWorkspacePath = (value) => value.replace(/\\/g, "/").replace(/^\/+/, "").replace(/^\.\//, "").split("/").filter((part) => part && part !== ".").join("/");
@@ -4687,7 +5425,7 @@ var generateWorkspaceConfig = (entry, parameters, sourceEntry) => {
   ].filter((line) => line.length > 0).join("\n");
 };
 var runCommand = (command, args) => new Promise((resolve, reject) => {
-  const child = spawn(command, args, { stdio: ["ignore", "pipe", "pipe"] });
+  const child = spawn2(command, args, { stdio: ["ignore", "pipe", "pipe"] });
   const stdout = [];
   const stderr = [];
   child.stdout.on("data", (chunk) => stdout.push(Buffer.from(chunk)));
@@ -4711,9 +5449,9 @@ var runCommand = (command, args) => new Promise((resolve, reject) => {
 });
 var isBicepPath = (filePath) => /\.bicep$/i.test(filePath);
 var compiledBicepPathFor = (entry) => {
-  const parsed = path3.posix.parse(entry);
+  const parsed = path4.posix.parse(entry);
   return normalizeWorkspacePath(
-    path3.posix.join(
+    path4.posix.join(
       ".cloudeval/template-cache/compiled",
       parsed.dir,
       `${parsed.name}.json`
@@ -4721,18 +5459,18 @@ var compiledBicepPathFor = (entry) => {
   );
 };
 var compileBicepEntry = async (root, entry) => {
-  const tempDir = await fs5.mkdtemp(path3.join(os.tmpdir(), "cloudeval-bicep-"));
-  const outputPath = path3.join(tempDir, "compiled.json");
+  const tempDir = await fs6.mkdtemp(path4.join(os.tmpdir(), "cloudeval-bicep-"));
+  const outputPath = path4.join(tempDir, "compiled.json");
   try {
     await runCommand("az", [
       "bicep",
       "build",
       "--file",
-      path3.join(root, entry),
+      path4.join(root, entry),
       "--outfile",
       outputPath
     ]);
-    const bytes = await fs5.readFile(outputPath);
+    const bytes = await fs6.readFile(outputPath);
     return {
       path: compiledBicepPathFor(entry),
       blob: new Blob([bytes], { type: "application/json" })
@@ -4746,16 +5484,16 @@ var compileBicepEntry = async (root, entry) => {
     }
     throw new Error(`Failed to compile Bicep workspace entry '${entry}': ${message}`);
   } finally {
-    await fs5.rm(tempDir, { recursive: true, force: true });
+    await fs6.rm(tempDir, { recursive: true, force: true });
   }
 };
 var collectWorkspacePaths = async (root) => {
   const paths = [];
   const visit = async (directory) => {
-    const entries = await fs5.readdir(directory, { withFileTypes: true });
+    const entries = await fs6.readdir(directory, { withFileTypes: true });
     for (const entry of entries) {
-      const absolute = path3.join(directory, entry.name);
-      const relative = normalizeWorkspacePath(path3.relative(root, absolute));
+      const absolute = path4.join(directory, entry.name);
+      const relative = normalizeWorkspacePath(path4.relative(root, absolute));
       if (!relative || isIgnoredWorkspacePath(relative)) {
         continue;
       }
@@ -4822,8 +5560,8 @@ var resolveWorkspaceParameters = (paths, explicitParameters, config) => {
   return findFirstPath(paths, ["azuredeploy.parameters.json", "parameters.json"]);
 };
 var collectWorkspaceFiles = async (workspaceDir, options) => {
-  const root = path3.resolve(workspaceDir);
-  const stat = await fs5.stat(root).catch(() => void 0);
+  const root = path4.resolve(workspaceDir);
+  const stat = await fs6.stat(root).catch(() => void 0);
   if (!stat?.isDirectory()) {
     throw new Error(`--workspace-dir '${workspaceDir}' is not a directory.`);
   }
@@ -4831,7 +5569,7 @@ var collectWorkspaceFiles = async (workspaceDir, options) => {
   const existingConfigPath = paths.find(
     (filePath) => filePath.toLowerCase() === ".cloudeval/config.yaml"
   );
-  const config = existingConfigPath ? readWorkspaceConfig(await fs5.readFile(path3.join(root, existingConfigPath), "utf8")) : void 0;
+  const config = existingConfigPath ? readWorkspaceConfig(await fs6.readFile(path4.join(root, existingConfigPath), "utf8")) : void 0;
   const entry = detectWorkspaceEntry(paths, options.workspaceEntry, config);
   const parameters = resolveWorkspaceParameters(paths, options.workspaceParameters, config);
   const compiledEntry = isBicepPath(entry) ? await compileBicepEntry(root, entry) : void 0;
@@ -4853,7 +5591,7 @@ var collectWorkspaceFiles = async (workspaceDir, options) => {
       });
       continue;
     }
-    const bytes = await fs5.readFile(path3.join(root, relativePath));
+    const bytes = await fs6.readFile(path4.join(root, relativePath));
     files.push({
       path: relativePath,
       blob: new Blob([bytes], {
@@ -4915,9 +5653,9 @@ var appendOptionValue = (value, previous = []) => [
   value
 ];
 var writeDiagramImageHeaders = async (outputPath, headers) => {
-  await fs5.mkdir(path3.dirname(outputPath), { recursive: true });
+  await fs6.mkdir(path4.dirname(outputPath), { recursive: true });
   const text = Object.entries(headers).sort(([left], [right]) => left.localeCompare(right)).map(([key, value]) => `${key}: ${value}`).join("\n");
-  await fs5.writeFile(outputPath, `${text}
+  await fs6.writeFile(outputPath, `${text}
 `, "utf8");
 };
 var listProjectsForContext = async (core, context) => {
@@ -5080,10 +5818,10 @@ var configureDiagramExportCommand = (command, deps) => addAuthOptions(command, d
       publicGraph,
       syncVersion: options.syncVersion
     });
-    const outputPath = path3.resolve(options.output);
-    const headersOutputPath = options.headersOutput ? path3.resolve(options.headersOutput) : void 0;
-    await fs5.mkdir(path3.dirname(outputPath), { recursive: true });
-    await fs5.writeFile(outputPath, result.bytes);
+    const outputPath = path4.resolve(options.output);
+    const headersOutputPath = options.headersOutput ? path4.resolve(options.headersOutput) : void 0;
+    await fs6.mkdir(path4.dirname(outputPath), { recursive: true });
+    await fs6.writeFile(outputPath, result.bytes);
     const filesWritten = [outputPath];
     if (headersOutputPath) {
       await writeDiagramImageHeaders(headersOutputPath, result.headers);
@@ -5217,7 +5955,7 @@ var registerProjectsCommand = (program2, deps) => {
       const parameters = await fileBlob(options.parametersFile);
       const workspace = options.workspaceDir ? await collectWorkspaceFiles(options.workspaceDir, options) : void 0;
       const cloudSync = resolveAzureCloudSyncInput(options);
-      const inferredName = options.name || (options.workspaceDir ? path3.basename(path3.resolve(options.workspaceDir)) : void 0) || (cloudSync ? "Cloud sync" : void 0) || (options.templateFile ? path3.basename(options.templateFile, path3.extname(options.templateFile)) : void 0);
+      const inferredName = options.name || (options.workspaceDir ? path4.basename(path4.resolve(options.workspaceDir)) : void 0) || (cloudSync ? "Cloud sync" : void 0) || (options.templateFile ? path4.basename(options.templateFile, path4.extname(options.templateFile)) : void 0);
       const result = await core.createQuickProject({
         baseUrl: context.baseUrl,
         authToken: context.token,
@@ -5321,8 +6059,8 @@ var writeConnectionsListOutput = async ({
   if (format === "text") {
     const text = renderConnectionsListText(data);
     if (options.output) {
-      const fs13 = await import("fs/promises");
-      await fs13.writeFile(options.output, text, "utf8");
+      const fs14 = await import("fs/promises");
+      await fs14.writeFile(options.output, text, "utf8");
       return;
     }
     process.stdout.write(text);
@@ -5656,8 +6394,8 @@ var write = async (command, data, options, frontendUrl) => {
     const text = renderBillingText(command, data);
     if (text) {
       if (options.output) {
-        const fs13 = await import("fs/promises");
-        await fs13.writeFile(options.output, text, "utf8");
+        const fs14 = await import("fs/promises");
+        await fs14.writeFile(options.output, text, "utf8");
         return;
       }
       process.stdout.write(text);
@@ -5926,14 +6664,14 @@ var registerBillingCommands = (program2, deps) => {
 };
 
 // src/mcpCommand.ts
-import fs8 from "fs/promises";
-import path5 from "path";
+import fs9 from "fs/promises";
+import path6 from "path";
 import { randomUUID as randomUUID2 } from "crypto";
 
 // src/mcpSetupCommand.ts
-import fs6 from "fs/promises";
+import fs7 from "fs/promises";
 import os2 from "os";
-import path4 from "path";
+import path5 from "path";
 var MCP_SETUP_CLIENTS = ["codex", "claude", "cursor", "vscode", "generic"];
 var CLIENTS = new Set(MCP_SETUP_CLIENTS);
 var TOOLSETS = /* @__PURE__ */ new Set([
@@ -5959,7 +6697,7 @@ var normalizeMcpSetupToolset = (value) => {
 };
 var defaultConfigPath = (client) => {
   if (client === "claude") {
-    return path4.join(
+    return path5.join(
       os2.homedir(),
       "Library",
       "Application Support",
@@ -5968,10 +6706,10 @@ var defaultConfigPath = (client) => {
     );
   }
   if (client === "cursor") {
-    return path4.join(os2.homedir(), ".cursor", "mcp.json");
+    return path5.join(os2.homedir(), ".cursor", "mcp.json");
   }
   if (client === "vscode") {
-    return path4.join(process.cwd(), ".vscode", "mcp.json");
+    return path5.join(process.cwd(), ".vscode", "mcp.json");
   }
   return void 0;
 };
@@ -6081,7 +6819,7 @@ var formatMcpClientSetupText = (setup, options = {}) => {
 };
 var readJsonObject = async (filePath) => {
   try {
-    const raw = await fs6.readFile(filePath, "utf8");
+    const raw = await fs7.readFile(filePath, "utf8");
     const parsed = JSON.parse(raw);
     return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : {};
   } catch (error) {
@@ -6106,8 +6844,8 @@ var writeMcpClientConfig = async (setup) => {
       cloudeval: nextServer
     }
   };
-  await fs6.mkdir(path4.dirname(setup.configPath), { recursive: true });
-  await fs6.writeFile(setup.configPath, `${JSON.stringify(next, null, 2)}
+  await fs7.mkdir(path5.dirname(setup.configPath), { recursive: true });
+  await fs7.writeFile(setup.configPath, `${JSON.stringify(next, null, 2)}
 `, {
     encoding: "utf8",
     mode: 384
@@ -6116,9 +6854,9 @@ var writeMcpClientConfig = async (setup) => {
 };
 
 // src/templateValidationClient.ts
-import fs7 from "fs/promises";
+import fs8 from "fs/promises";
 var readJsonFile = async (filePath) => {
-  const text = await fs7.readFile(filePath, "utf8");
+  const text = await fs8.readFile(filePath, "utf8");
   try {
     return JSON.parse(text);
   } catch (error) {
@@ -6169,7 +6907,7 @@ var stringField = (value, field) => {
   const raw = value?.[field];
   return typeof raw === "string" && raw.trim() ? raw : void 0;
 };
-var extractJobId2 = (value) => {
+var extractJobId3 = (value) => {
   const record = recordValue(value);
   const job = recordValue(record?.job);
   const data = recordValue(record?.data);
@@ -6177,7 +6915,7 @@ var extractJobId2 = (value) => {
   return stringField(job, "job_id") ?? stringField(job, "jobId") ?? stringField(record, "job_id") ?? stringField(record, "jobId") ?? stringField(dataJob, "job_id") ?? stringField(dataJob, "jobId");
 };
 var normalizedStatus = (value) => String(recordValue(value)?.status ?? "").trim().toLowerCase();
-var isTerminalJobStatus2 = (value) => [
+var isTerminalJobStatus3 = (value) => [
   "completed",
   "succeeded",
   "failed",
@@ -6326,7 +7064,7 @@ var getTemplateValidationJobResult = async (input) => fetchCloudEvalJson({
   query: { user_id: input.userId }
 });
 var waitForTemplateValidationResult = async (input) => {
-  const jobId = extractJobId2(input.submitted);
+  const jobId = extractJobId3(input.submitted);
   if (!jobId) {
     return input.submitted;
   }
@@ -6336,7 +7074,7 @@ var waitForTemplateValidationResult = async (input) => {
   let status;
   for (; ; ) {
     status = await getTemplateValidationJobStatus({ ...input, jobId });
-    if (isTerminalJobStatus2(status)) {
+    if (isTerminalJobStatus3(status)) {
       break;
     }
     if (Date.now() >= deadline) {
@@ -8507,12 +9245,12 @@ var pickReportDownloadPayload2 = (value, view) => {
   }
   return value;
 };
-var extractJobId3 = (value) => {
+var extractJobId4 = (value) => {
   if (!value || typeof value !== "object") return void 0;
   const record = value;
   return record.job_id ?? record.id ?? record.job?.job_id ?? record.job?.id ?? record.data?.job_id ?? record.data?.job?.job_id;
 };
-var isTerminalJobStatus3 = (value) => {
+var isTerminalJobStatus4 = (value) => {
   if (!value || typeof value !== "object") return true;
   const status = String(
     value.status ?? ""
@@ -8528,9 +9266,9 @@ var isTerminalJobStatus3 = (value) => {
 };
 var sleep3 = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
 var writeHeaderFile = async (outputPath, headers) => {
-  await fs8.mkdir(path5.dirname(outputPath), { recursive: true });
+  await fs9.mkdir(path6.dirname(outputPath), { recursive: true });
   const text = Object.entries(headers).sort(([left], [right]) => left.localeCompare(right)).map(([key, value]) => `${key}: ${value}`).join("\n");
-  await fs8.writeFile(outputPath, `${text}
+  await fs9.writeFile(outputPath, `${text}
 `, "utf8");
 };
 var resolveInvocationConfig = async (serverOptions, args) => {
@@ -8587,15 +9325,8 @@ var resolveProject2 = async (config, args, auth) => {
   const requestedProjectId = stringValue(args.projectId) ?? config.defaultProjectId;
   const userId = auth.user?.id;
   if (!userId) {
-    if (requestedProjectId) {
-      return {
-        id: requestedProjectId,
-        name: "Selected Project",
-        cloud_provider: "azure"
-      };
-    }
     throw new Error(
-      "Could not determine the authenticated user. Provide projectId."
+      "Could not determine the authenticated user. Run `cloudeval login` and retry."
     );
   }
   const projects = await auth.core.getProjects(
@@ -8604,12 +9335,15 @@ var resolveProject2 = async (config, args, auth) => {
     userId
   );
   if (requestedProjectId) {
-    return projects.find((project) => project.id === requestedProjectId) ?? {
-      id: requestedProjectId,
-      name: "Selected Project",
-      user_id: userId,
-      cloud_provider: "azure"
-    };
+    const match = projects.find(
+      (project) => project.id === requestedProjectId
+    );
+    if (!match) {
+      throw new Error(
+        `Project ${requestedProjectId} was not found for authenticated user ${userId}. Run \`cloudeval projects list\` to choose a visible project.`
+      );
+    }
+    return match;
   }
   const selected = projects.find((project) => project.name === "Playground") ?? projects[0];
   if (selected) {
@@ -8693,7 +9427,7 @@ var assertModelAvailable = async (config, token) => {
   }
 };
 var waitForReportJobs2 = async (input) => {
-  const jobIds = input.submitted.map(extractJobId3).filter(Boolean);
+  const jobIds = input.submitted.map(extractJobId4).filter(Boolean);
   if (!jobIds.length) {
     return input.submitted;
   }
@@ -8707,7 +9441,7 @@ var waitForReportJobs2 = async (input) => {
         userId: input.userId,
         jobId
       });
-      if (isTerminalJobStatus3(lastStatus)) {
+      if (isTerminalJobStatus4(lastStatus)) {
         break;
       }
       await sleep3(input.pollIntervalMs);
@@ -8776,13 +9510,13 @@ var downloadReports = async (config, args, auth) => {
   const filesWritten = [];
   if (outputPath) {
     if (reportTypes.length > 1) {
-      const stat = await fs8.stat(outputPath).catch(() => void 0);
-      const outputIsDirectory = stat?.isDirectory() || !path5.extname(outputPath);
+      const stat = await fs9.stat(outputPath).catch(() => void 0);
+      const outputIsDirectory = stat?.isDirectory() || !path6.extname(outputPath);
       if (outputIsDirectory) {
-        await fs8.mkdir(outputPath, { recursive: true });
+        await fs9.mkdir(outputPath, { recursive: true });
         for (const [key, value] of Object.entries(payload)) {
-          const file = path5.join(outputPath, `${projectId}-${key}-report.json`);
-          await fs8.writeFile(
+          const file = path6.join(outputPath, `${projectId}-${key}-report.json`);
+          await fs9.writeFile(
             file,
             `${JSON.stringify(value, null, 2)}
 `,
@@ -8791,8 +9525,8 @@ var downloadReports = async (config, args, auth) => {
           filesWritten.push(file);
         }
       } else {
-        await fs8.mkdir(path5.dirname(outputPath), { recursive: true });
-        await fs8.writeFile(
+        await fs9.mkdir(path6.dirname(outputPath), { recursive: true });
+        await fs9.writeFile(
           outputPath,
           `${JSON.stringify(data, null, 2)}
 `,
@@ -8801,8 +9535,8 @@ var downloadReports = async (config, args, auth) => {
         filesWritten.push(outputPath);
       }
     } else {
-      await fs8.mkdir(path5.dirname(outputPath), { recursive: true });
-      await fs8.writeFile(
+      await fs9.mkdir(path6.dirname(outputPath), { recursive: true });
+      await fs9.writeFile(
         outputPath,
         `${JSON.stringify(data, null, 2)}
 `,
@@ -9112,7 +9846,7 @@ var buildToolHandlers = (serverOptions) => {
     if (!rawOutputPath) {
       throw new Error("outputPath is required.");
     }
-    const outputPath = path5.resolve(rawOutputPath);
+    const outputPath = path6.resolve(rawOutputPath);
     const publicGraph = booleanValue(args.public) ?? false;
     const auth = publicGraph ? void 0 : await resolveAuth(config, { requireUser: true });
     const layout = normalizeProjectDiagramImageLayout(stringValue(args.layout));
@@ -9133,11 +9867,11 @@ var buildToolHandlers = (serverOptions) => {
       publicGraph,
       syncVersion: stringValue(args.syncVersion)
     });
-    await fs8.mkdir(path5.dirname(outputPath), { recursive: true });
-    await fs8.writeFile(outputPath, result.bytes);
+    await fs9.mkdir(path6.dirname(outputPath), { recursive: true });
+    await fs9.writeFile(outputPath, result.bytes);
     const filesWritten = [outputPath];
     const rawHeadersOutputPath = stringValue(args.headersOutputPath);
-    const headersOutputPath = rawHeadersOutputPath ? path5.resolve(rawHeadersOutputPath) : void 0;
+    const headersOutputPath = rawHeadersOutputPath ? path6.resolve(rawHeadersOutputPath) : void 0;
     if (headersOutputPath) {
       await writeHeaderFile(headersOutputPath, result.headers);
       filesWritten.push(headersOutputPath);
@@ -10009,7 +10743,7 @@ var buildToolHandlers = (serverOptions) => {
         projectId,
         type,
         submitted,
-        jobs: submitted.map(extractJobId3).filter(Boolean),
+        jobs: submitted.map(extractJobId4).filter(Boolean),
         finalStatuses
       },
       frontendUrl: reportsFrontendUrl(config, { projectId, type })
@@ -10862,7 +11596,7 @@ var registerMcpCommand = (program2, deps) => {
           note
         });
         if (options.output) {
-          await fs8.writeFile(options.output, text, "utf8");
+          await fs9.writeFile(options.output, text, "utf8");
         } else {
           process.stdout.write(text);
         }
@@ -11054,23 +11788,23 @@ Discovery:
 };
 
 // src/credentialsCommand.ts
-var asRecord = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : {};
+var asRecord2 = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : {};
 var arrayFromPayload = (payload, key) => {
-  const record = asRecord(payload);
+  const record = asRecord2(payload);
   const value = record[key] ?? record.data;
   return Array.isArray(value) ? value.filter((item) => item && typeof item === "object") : [];
 };
 var credentialFromPayload = (payload) => {
-  const record = asRecord(payload);
-  return asRecord(record.credential ?? record.data ?? record);
+  const record = asRecord2(payload);
+  return asRecord2(record.credential ?? record.data ?? record);
 };
 var secretFromPayload = (payload) => {
-  const record = asRecord(payload);
+  const record = asRecord2(payload);
   const value = record.access_key ?? record.accessKey ?? record.secret;
   return typeof value === "string" ? value : void 0;
 };
 var projectIdFromPayload = (payload, fallback) => {
-  const record = asRecord(payload);
+  const record = asRecord2(payload);
   const credential = credentialFromPayload(payload);
   const value = record.project_id ?? record.projectId ?? credential.project_id ?? credential.projectId ?? (Array.isArray(credential.project_ids) ? credential.project_ids[0] : void 0) ?? fallback;
   return typeof value === "string" ? value : void 0;
@@ -11104,7 +11838,7 @@ var writeCredentialOutput = async (input) => {
     return;
   }
   if (input.format === "text" || !input.format) {
-    const record = asRecord(input.data);
+    const record = asRecord2(input.data);
     const credentials = arrayFromPayload(input.data, "credentials").length > 0 ? arrayFromPayload(input.data, "credentials") : record.credential ? [credentialFromPayload(input.data)] : arrayFromPayload(input.data, "templates");
     if (credentials.length) {
       process.stdout.write(formatTextTable(formatCredentialTextRows(credentials)));
@@ -11228,9 +11962,9 @@ import { randomUUID as randomUUID4 } from "crypto";
 // src/localHooks.ts
 import { exec } from "child_process";
 import { randomUUID as randomUUID3 } from "crypto";
-import fs9 from "fs/promises";
+import fs10 from "fs/promises";
 import os4 from "os";
-import path6 from "path";
+import path7 from "path";
 var normalizeHooks = (config, event) => {
   if (config.hooks?.enabled !== true) {
     return [];
@@ -11241,11 +11975,11 @@ var normalizeHooks = (config, event) => {
   ) : [];
 };
 var writeHookPayload = async (input, hook) => {
-  const filePath = path6.join(
+  const filePath = path7.join(
     os4.tmpdir(),
     `cloudeval-hook-${process.pid}-${randomUUID3()}.json`
   );
-  await fs9.writeFile(
+  await fs10.writeFile(
     filePath,
     JSON.stringify(
       {
@@ -11321,7 +12055,7 @@ var runLocalHooks = async (input) => {
         throw error;
       }
     } finally {
-      await fs9.rm(payloadPath, { force: true }).catch(() => void 0);
+      await fs10.rm(payloadPath, { force: true }).catch(() => void 0);
     }
   }
   return warnings;
@@ -11633,7 +12367,7 @@ var registerAgentsCommand = (program2, deps) => {
 
 // src/validateCommand.ts
 var addCommon5 = (command, deps) => addAuthOptions(command, deps.defaultBaseUrl).requiredOption("--template-file <path>", "Cloud template JSON file").option("--parameters-file <path>", "Optional parameters JSON file").option("--format <format>", "Output format: text, json, ndjson, markdown", "text").option("--output <file>", "Output file");
-var parsePositiveInteger = (value, optionName = "--max-results") => {
+var parsePositiveInteger2 = (value, optionName = "--max-results") => {
   if (!value) {
     return void 0;
   }
@@ -11667,7 +12401,7 @@ var registerValidateCommand = (program2, deps) => {
         category: options.category,
         pillar: options.pillar,
         minSeverity: options.minSeverity,
-        maxResults: parsePositiveInteger(options.maxResults),
+        maxResults: parsePositiveInteger2(options.maxResults),
         projectId: options.project,
         saveReport: options.saveReport
       });
@@ -11676,11 +12410,11 @@ var registerValidateCommand = (program2, deps) => {
         authToken: context.token,
         userId: context.user.id,
         submitted,
-        pollIntervalMs: parsePositiveInteger(
+        pollIntervalMs: parsePositiveInteger2(
           options.pollInterval,
           "--poll-interval"
         ),
-        waitTimeoutMs: parsePositiveInteger(
+        waitTimeoutMs: parsePositiveInteger2(
           options.waitTimeout,
           "--wait-timeout"
         )
@@ -11740,11 +12474,11 @@ var registerValidateCommand = (program2, deps) => {
         authToken: context.token,
         userId: context.user.id,
         submitted,
-        pollIntervalMs: parsePositiveInteger(
+        pollIntervalMs: parsePositiveInteger2(
           options.pollInterval,
           "--poll-interval"
         ),
-        waitTimeoutMs: parsePositiveInteger(
+        waitTimeoutMs: parsePositiveInteger2(
           options.waitTimeout,
           "--wait-timeout"
         )
@@ -11865,10 +12599,10 @@ var registerConfigCommand = (program2) => {
     const profile = resolveProfile(options, command);
     const current = await loadCliConfig(profile);
     const next = writeCliConfigValue(current, key, value);
-    const path10 = await saveCliConfig(next, profile);
+    const path11 = await saveCliConfig(next, profile);
     await writeFormattedOutput({
       command: "config set",
-      data: { profile, path: path10, config: next },
+      data: { profile, path: path11, config: next },
       format: options.format,
       output: options.output
     });
@@ -11879,10 +12613,10 @@ var registerConfigCommand = (program2) => {
     const profile = resolveProfile(options, command);
     const current = await loadCliConfig(profile);
     const next = unsetCliConfigValue(current, key);
-    const path10 = await saveCliConfig(next, profile);
+    const path11 = await saveCliConfig(next, profile);
     await writeFormattedOutput({
       command: "config unset",
-      data: { profile, path: path10, config: next },
+      data: { profile, path: path11, config: next },
       format: options.format,
       output: options.output
     });
@@ -12179,8 +12913,8 @@ var writeModelsListOutput = async (input) => {
       defaultModel: input.defaultModel
     });
     if (input.options.output) {
-      const fs13 = await import("fs/promises");
-      await fs13.writeFile(input.options.output, text, "utf8");
+      const fs14 = await import("fs/promises");
+      await fs14.writeFile(input.options.output, text, "utf8");
       return;
     }
     process.stdout.write(text);
@@ -12246,10 +12980,10 @@ var registerModelsCommand = (program2, deps) => {
     const profile = options.profile || getActiveConfigProfile(command);
     const config = await loadCliConfig(profile);
     const next = { ...config, model };
-    const path10 = await saveCliConfig(next, profile);
+    const path11 = await saveCliConfig(next, profile);
     await writeFormattedOutput({
       command: "models default set",
-      data: { profile, path: path10, model },
+      data: { profile, path: path11, model },
       format: options.format,
       output: options.output
     });
@@ -12292,8 +13026,8 @@ var writeSessionTableOutput = async (command, data, options) => {
   if (format === "text") {
     const text = renderSessionsTable(data);
     if (options.output) {
-      const fs13 = await import("fs/promises");
-      await fs13.writeFile(options.output, text, "utf8");
+      const fs14 = await import("fs/promises");
+      await fs14.writeFile(options.output, text, "utf8");
       return;
     }
     process.stdout.write(text);
@@ -12465,12 +13199,12 @@ var registerSetupCommand = (program2, defaultBaseUrl = CLOUD_BASE_URL) => {
         rl.close();
       }
     }
-    const path10 = await saveCliConfig(next, profile);
+    const path11 = await saveCliConfig(next, profile);
     await writeFormattedOutput({
       command: "setup",
       data: {
         profile,
-        path: path10,
+        path: path11,
         config: next,
         nextSteps: [
           "Run `cloudeval auth status` to inspect authentication.",
@@ -12485,9 +13219,9 @@ var registerSetupCommand = (program2, defaultBaseUrl = CLOUD_BASE_URL) => {
 };
 
 // src/updateCommand.ts
-import { spawn as spawn2 } from "child_process";
-import fs10 from "fs/promises";
-import path7 from "path";
+import { spawn as spawn3 } from "child_process";
+import fs11 from "fs/promises";
+import path8 from "path";
 import { createInterface as createInterface2 } from "readline/promises";
 var DEFAULT_LATEST_RELEASE_URL = "https://api.github.com/repos/ganakailabs/cloudeval-cli/releases/latest";
 var DEFAULT_INSTALLER_URL = "https://cli.cloudeval.ai/install.sh";
@@ -12604,7 +13338,7 @@ var runInstaller = async ({
   installerUrl,
   targetTag,
   fetchImpl = fetch,
-  spawnImpl = spawn2,
+  spawnImpl = spawn3,
   output = process.stderr,
   platform = process.platform,
   env = process.env,
@@ -12626,12 +13360,12 @@ var runInstaller = async ({
   const installerScript = await response.text();
   if (usePowerShellInstaller) {
     const configDir = getCloudevalConfigDir();
-    await fs10.mkdir(configDir, { recursive: true, mode: 448 });
-    const scriptPath = path7.join(
-      await fs10.mkdtemp(path7.join(configDir, "installer-")),
+    await fs11.mkdir(configDir, { recursive: true, mode: 448 });
+    const scriptPath = path8.join(
+      await fs11.mkdtemp(path8.join(configDir, "installer-")),
       "install.ps1"
     );
-    await fs10.writeFile(scriptPath, installerScript, "utf8");
+    await fs11.writeFile(scriptPath, installerScript, "utf8");
     const child2 = spawnImpl(
       "pwsh",
       [
@@ -12659,7 +13393,7 @@ var runInstaller = async ({
         );
       });
       child2.once("close", (code) => {
-        void fs10.rm(path7.dirname(scriptPath), { recursive: true, force: true });
+        void fs11.rm(path8.dirname(scriptPath), { recursive: true, force: true });
         if (code === 0) {
           resolve();
           return;
@@ -12699,10 +13433,10 @@ var runInstaller = async ({
     child.stdin.end(installerScript);
   });
 };
-var getUpdateCachePath = () => path7.join(getCloudevalConfigDir(), UPDATE_CACHE_FILE);
+var getUpdateCachePath = () => path8.join(getCloudevalConfigDir(), UPDATE_CACHE_FILE);
 var readCache = async (cachePath) => {
   try {
-    const parsed = JSON.parse(await fs10.readFile(cachePath, "utf8"));
+    const parsed = JSON.parse(await fs11.readFile(cachePath, "utf8"));
     if (parsed && typeof parsed === "object" && typeof parsed.checkedAt === "string" && typeof parsed.latestVersion === "string" && typeof parsed.latestTag === "string") {
       return parsed;
     }
@@ -12714,8 +13448,8 @@ var readCache = async (cachePath) => {
   return void 0;
 };
 var writeCache = async (cachePath, status) => {
-  await fs10.mkdir(path7.dirname(cachePath), { recursive: true, mode: 448 });
-  await fs10.writeFile(
+  await fs11.mkdir(path8.dirname(cachePath), { recursive: true, mode: 448 });
+  await fs11.writeFile(
     cachePath,
     `${JSON.stringify(
       {
@@ -12927,7 +13661,7 @@ var registerUpdateCommand = (program2, registerOptions = {}) => {
     if (options.format === "text" || !options.format) {
       const text = formatUpdateStatusText(result);
       if (options.output) {
-        await fs10.writeFile(options.output, text, "utf8");
+        await fs11.writeFile(options.output, text, "utf8");
         return;
       }
       process.stdout.write(text);
@@ -12943,13 +13677,13 @@ var registerUpdateCommand = (program2, registerOptions = {}) => {
 };
 
 // src/uninstallCommand.ts
-import fs11 from "fs/promises";
+import fs12 from "fs/promises";
 import os5 from "os";
-import path8 from "path";
+import path9 from "path";
 import { createInterface as createInterface3 } from "readline/promises";
 var pathExists = async (candidate) => {
   try {
-    await fs11.lstat(candidate);
+    await fs12.lstat(candidate);
     return true;
   } catch (error) {
     if (error?.code === "ENOENT") {
@@ -12958,12 +13692,12 @@ var pathExists = async (candidate) => {
     throw error;
   }
 };
-var installerBinDir = (home) => path8.join(home, ".local", "bin");
+var installerBinDir = (home) => path9.join(home, ".local", "bin");
 var completionPaths = (home) => [
-  path8.join(home, ".local", "share", "bash-completion", "completions", "cloudeval"),
-  path8.join(home, ".zsh", "completions", "_cloudeval"),
-  path8.join(home, ".config", "fish", "completions", "cloudeval.fish"),
-  path8.join(home, ".config", "powershell", "cloudeval-completion.ps1")
+  path9.join(home, ".local", "share", "bash-completion", "completions", "cloudeval"),
+  path9.join(home, ".zsh", "completions", "_cloudeval"),
+  path9.join(home, ".config", "fish", "completions", "cloudeval.fish"),
+  path9.join(home, ".config", "powershell", "cloudeval-completion.ps1")
 ];
 var installerArtifactTargets = (home, platform) => {
   const binDir = installerBinDir(home);
@@ -12971,37 +13705,37 @@ var installerArtifactTargets = (home, platform) => {
   const targets = [
     {
       label: "cloudeval binary",
-      path: path8.join(binDir, executableName),
+      path: path9.join(binDir, executableName),
       kind: "file",
       status: "missing"
     },
     {
       label: "cloudeval binary",
-      path: path8.join(binDir, "cloudeval"),
+      path: path9.join(binDir, "cloudeval"),
       kind: "file",
       status: "missing"
     },
     {
       label: "eva alias",
-      path: path8.join(binDir, "eva"),
+      path: path9.join(binDir, "eva"),
       kind: "file",
       status: "missing"
     },
     {
       label: "cloud alias",
-      path: path8.join(binDir, "cloud"),
+      path: path9.join(binDir, "cloud"),
       kind: "file",
       status: "missing"
     },
     {
       label: "Ink runtime asset",
-      path: path8.join(binDir, "yoga.wasm"),
+      path: path9.join(binDir, "yoga.wasm"),
       kind: "file",
       status: "missing"
     },
     {
       label: "license notices",
-      path: path8.join(home, ".local", "share", "cloudeval", "licenses"),
+      path: path9.join(home, ".local", "share", "cloudeval", "licenses"),
       kind: "directory",
       status: "missing"
     },
@@ -13017,11 +13751,11 @@ var installerArtifactTargets = (home, platform) => {
   );
 };
 var shellProfilePaths = (home) => [
-  path8.join(home, ".bashrc"),
-  path8.join(home, ".bash_profile"),
-  path8.join(home, ".zshrc"),
-  path8.join(home, ".profile"),
-  path8.join(home, ".config", "fish", "config.fish")
+  path9.join(home, ".bashrc"),
+  path9.join(home, ".bash_profile"),
+  path9.join(home, ".zshrc"),
+  path9.join(home, ".profile"),
+  path9.join(home, ".config", "fish", "config.fish")
 ];
 var removeInstallerPathSnippet = (content, binDir) => {
   const exportLine = `export PATH="${binDir}:$PATH"`;
@@ -13048,7 +13782,7 @@ var removeTarget = async (target, dryRun) => {
   if (dryRun) {
     return { ...target, status: "would_remove" };
   }
-  await fs11.rm(target.path, { recursive: target.kind === "directory", force: true });
+  await fs12.rm(target.path, { recursive: target.kind === "directory", force: true });
   return { ...target, status: "removed" };
 };
 var updateShellProfile = async (profilePath, home, dryRun) => {
@@ -13060,7 +13794,7 @@ var updateShellProfile = async (profilePath, home, dryRun) => {
       status: "missing"
     };
   }
-  const content = await fs11.readFile(profilePath, "utf8");
+  const content = await fs12.readFile(profilePath, "utf8");
   const updated = removeInstallerPathSnippet(content, installerBinDir(home));
   if (updated === void 0) {
     return {
@@ -13078,7 +13812,7 @@ var updateShellProfile = async (profilePath, home, dryRun) => {
       status: "would_update"
     };
   }
-  await fs11.writeFile(profilePath, updated, "utf8");
+  await fs12.writeFile(profilePath, updated, "utf8");
   return {
     label: "shell profile PATH entry",
     path: profilePath,
@@ -13131,7 +13865,7 @@ var handleUninstallCommand = async (options, deps = {}) => {
   }
   const configTarget = {
     label: "config",
-    path: path8.join(home, ".config", "cloudeval"),
+    path: path9.join(home, ".config", "cloudeval"),
     kind: "directory",
     status: "kept"
   };
@@ -13193,7 +13927,7 @@ var registerUninstallCommand = (program2) => {
     if (options.format === "text" || !options.format) {
       const text = formatUninstallResultText(result);
       if (options.output) {
-        await fs11.writeFile(options.output, text, "utf8");
+        await fs12.writeFile(options.output, text, "utf8");
         return;
       }
       process.stdout.write(text);
@@ -13314,6 +14048,7 @@ var resolveLoginOnboardingMode = (options) => {
 import { jsx } from "react/jsx-runtime";
 var DEFAULT_BASE_URL = getDefaultBaseUrl();
 var ASK_STREAM_IDLE_TIMEOUT_MS2 = 9e4;
+var AGENT_STREAM_IDLE_TIMEOUT_MS = 18e4;
 var LEGACY_API_KEY_MESSAGE = "API key auth was renamed in beta. Use --access-key or CLOUDEVAL_ACCESS_KEY.";
 var STREAM_OUTPUT_NODES3 = /* @__PURE__ */ new Set([
   "generate_response",
@@ -13339,21 +14074,21 @@ var completionScriptPath = (shell) => {
   const home = os6.homedir();
   switch (shell) {
     case "bash":
-      return path9.join(home, ".local", "share", "bash-completion", "completions", "cloudeval");
+      return path10.join(home, ".local", "share", "bash-completion", "completions", "cloudeval");
     case "zsh":
-      return path9.join(home, ".zsh", "completions", "_cloudeval");
+      return path10.join(home, ".zsh", "completions", "_cloudeval");
     case "fish":
-      return path9.join(home, ".config", "fish", "completions", "cloudeval.fish");
+      return path10.join(home, ".config", "fish", "completions", "cloudeval.fish");
     case "powershell":
-      return path9.join(home, ".config", "powershell", "cloudeval-completion.ps1");
+      return path10.join(home, ".config", "powershell", "cloudeval-completion.ps1");
   }
 };
 var ZSH_FPATH_MARKER = "CloudEval CLI completions";
 var ensureZshCompletionFpath = async () => {
-  const zshrc = path9.join(os6.homedir(), ".zshrc");
+  const zshrc = path10.join(os6.homedir(), ".zshrc");
   let existing = "";
   try {
-    existing = await fs12.readFile(zshrc, "utf8");
+    existing = await fs13.readFile(zshrc, "utf8");
   } catch {
     existing = "";
   }
@@ -13364,12 +14099,12 @@ var ensureZshCompletionFpath = async () => {
 # ${ZSH_FPATH_MARKER}
 fpath=("$HOME/.zsh/completions" $fpath)
 `;
-  await fs12.appendFile(zshrc, snippet, "utf8");
+  await fs13.appendFile(zshrc, snippet, "utf8");
 };
 var installCompletionScript = async (shell, binaryName) => {
   const scriptPath = completionScriptPath(shell);
-  await fs12.mkdir(path9.dirname(scriptPath), { recursive: true });
-  await fs12.writeFile(scriptPath, buildCompletionScript(shell, binaryName), "utf8");
+  await fs13.mkdir(path10.dirname(scriptPath), { recursive: true });
+  await fs13.writeFile(scriptPath, buildCompletionScript(shell, binaryName), "utf8");
   if (shell === "zsh") {
     await ensureZshCompletionFpath();
   }
@@ -13377,7 +14112,7 @@ var installCompletionScript = async (shell, binaryName) => {
 };
 var uninstallCompletionScript = async (shell) => {
   const scriptPath = completionScriptPath(shell);
-  await fs12.rm(scriptPath, { force: true });
+  await fs13.rm(scriptPath, { force: true });
   return scriptPath;
 };
 var runInteractiveLoginOnboarding = async (baseUrl, token) => {
@@ -13946,6 +14681,12 @@ registerReportsCommand(program, {
   resolveBaseUrl,
   readStdinValue
 });
+registerReviewCommand(program, {
+  defaultBaseUrl: DEFAULT_BASE_URL,
+  resolveBaseUrl,
+  readStdinValue,
+  isHeadlessEnvironment
+});
 registerRecipesCommand(program, {
   defaultBaseUrl: DEFAULT_BASE_URL,
   resolveBaseUrl,
@@ -14102,7 +14843,7 @@ program.command("tui").description("Open the CloudEval Terminal UI").option(
   const { assertSecureBaseUrl } = await import("./dist-CFLR5FML.js");
   const [{ render }, { App }] = await Promise.all([
     import("ink"),
-    import("./App-NGGAERHH.js")
+    import("./App-XNVJF2ON.js")
   ]);
   const baseUrl = await resolveBaseUrl(options, command);
   assertSecureBaseUrl(baseUrl);
@@ -14160,7 +14901,7 @@ program.command("chat").description("Start an interactive chat session").option(
   const { assertSecureBaseUrl } = await import("./dist-CFLR5FML.js");
   const [{ render }, { App }] = await Promise.all([
     import("ink"),
-    import("./App-NGGAERHH.js")
+    import("./App-XNVJF2ON.js")
   ]);
   const baseUrl = await resolveBaseUrl(options, command);
   assertSecureBaseUrl(baseUrl);
@@ -14273,7 +15014,7 @@ program.command("ask").alias("agent").description("Ask a single question or run
     });
   }
   try {
-    const fs13 = await import("fs");
+    const fs14 = await import("fs");
     const fsPromises = await import("fs/promises");
     const { randomUUID: randomUUID5 } = await import("crypto");
     const core = await import("./dist-CFLR5FML.js");
@@ -14281,8 +15022,6 @@ program.command("ask").alias("agent").description("Ask a single question or run
       streamChat,
       reduceChunk,
       getAuthToken,
-      getProjects,
-      ensurePlaygroundProject,
       checkUserStatus,
       extractEmailFromToken,
       initialChatState,
@@ -14381,68 +15120,39 @@ program.command("ask").alias("agent").description("Ask a single question or run
       step: "project",
       message: selectedProjectId ? `Using project ${selectedProjectId}` : "Resolving project"
     });
-    let project;
     let authenticatedUserId;
-    if (selectedProjectId) {
-      verboseLog("Using provided project ID:", selectedProjectId);
-      try {
-        const userStatus = await checkUserStatus(baseUrl, token);
-        getActiveCliTelemetry()?.setUserProperties(userStatus.user || {});
-        authenticatedUserId = userStatus.user?.id;
-      } catch {
-      }
-      project = {
-        id: selectedProjectId,
-        name: "Selected Project",
-        user_id: authenticatedUserId,
-        cloud_provider: "azure"
-      };
-    } else {
-      verboseLog("No project ID provided, attempting to fetch user projects");
-      try {
-        verboseLog("Checking user status", { baseUrl });
-        const userStatus = await checkUserStatus(baseUrl, token);
-        getActiveCliTelemetry()?.setUserProperties(userStatus.user || {});
-        authenticatedUserId = userStatus.user?.id;
-        verboseLog("User status:", {
-          hasUser: !!userStatus.user,
-          userId: userStatus.user?.id,
-          onboardingCompleted: userStatus.onboardingCompleted
-        });
-        if (authenticatedUserId) {
-          verboseLog("Fetching projects for user", { userId: authenticatedUserId });
-          const projects = await getProjects(baseUrl, token, authenticatedUserId);
-          verboseLog("Projects fetched:", { count: projects.length, names: projects.map((p) => p.name) });
-          const playgroundProject = projects.find((p) => p.name === "Playground");
-          if (playgroundProject) {
-            project = playgroundProject;
-          } else if (userStatus.user?.email) {
-            verboseLog("Playground project missing; running shared onboarding repair");
-            project = await ensurePlaygroundProject(baseUrl, token, {
-              id: authenticatedUserId,
-              email: userStatus.user.email,
-              full_name: userStatus.user.full_name,
-              name: userStatus.user.name
-            });
-          } else {
-            project = projects[0] || void 0;
-          }
-          verboseLog("Selected project:", project ? { id: project.id, name: project.name } : "none");
-        }
-      } catch (error) {
-        verboseLog("Failed to fetch projects, using default:", {
-          message: error.message,
-          stack: error.stack
-        });
-      }
-      if (!project) {
-        process.stderr.write(
-          "No project is available for this account. Run `cloudeval chat` to complete onboarding, then retry."
-        );
-        process.stderr.write("\n");
-        await exitCli(1, new Error("no_project_available"));
-      }
+    let authenticatedUser;
+    try {
+      const userStatus = await checkUserStatus(baseUrl, token);
+      getActiveCliTelemetry()?.setUserProperties(userStatus.user || {});
+      authenticatedUserId = userStatus.user?.id;
+      authenticatedUser = userStatus.user;
+      verboseLog("User status:", {
+        hasUser: !!userStatus.user,
+        userId: userStatus.user?.id,
+        onboardingCompleted: userStatus.onboardingCompleted
+      });
+    } catch (error) {
+      verboseLog("Failed to check user status before project resolve:", {
+        message: error.message
+      });
+    }
+    const { resolveAskProject } = await import("./resolveAskProject-NK435I56.js");
+    let project;
+    try {
+      project = await resolveAskProject({
+        baseUrl,
+        token,
+        selectedProjectId,
+        authenticatedUserId,
+        authenticatedUser
+      });
+    } catch (error) {
+      progressWriter.clear();
+      console.error(error?.message ?? "Failed to resolve project");
+      await exitCli(1, error);
     }
+    verboseLog("Selected project:", { id: project.id, name: project.name });
     let userName = "You";
     try {
       const email = extractEmailFromToken(token);
@@ -14469,11 +15179,11 @@ program.command("ask").alias("agent").description("Ask a single question or run
       console.error(`[${commandName}] Thread ID: ${threadId}`);
     }
     if (streamTextOutput && options.output) {
-      fileOutputStream = fs13.createWriteStream(options.output, { encoding: "utf-8" });
+      fileOutputStream = fs14.createWriteStream(options.output, { encoding: "utf-8" });
       outputStream = fileOutputStream;
     }
     if (ndjsonOutput && options.output) {
-      ndjsonOutputStream = fs13.createWriteStream(options.output, { encoding: "utf-8" });
+      ndjsonOutputStream = fs14.createWriteStream(options.output, { encoding: "utf-8" });
     }
     const writeAskDataEvent = (event) => {
       const line = `${JSON.stringify(event)}
@@ -14575,7 +15285,7 @@ program.command("ask").alias("agent").description("Ask a single question or run
               debug: options.debug,
               completeAfterResponse: true,
               responseCompletionGraceMs: 5e3,
-              streamIdleTimeoutMs: ASK_STREAM_IDLE_TIMEOUT_MS2,
+              streamIdleTimeoutMs: selectedMode === "agent" ? AGENT_STREAM_IDLE_TIMEOUT_MS : ASK_STREAM_IDLE_TIMEOUT_MS2,
               hitlResume
             })) {
               totalChunkCount++;
@@ -14754,7 +15464,24 @@ Error: ${errorMsg}
       throw error;
     }
     const finalMessage = [...chatState.messages].reverse().find((m) => m.role === "assistant");
-    const finalResponse = collapseRepeatedAssistantText3(finalMessage?.content || responseText || "");
+    let finalResponse = collapseRepeatedAssistantText3(
+      finalMessage?.content || responseText || ""
+    );
+    if (!finalResponse.trim() && chatState.threadId) {
+      const { fetchLastAssistantContent } = await import("./fetchLastAssistantContent-RH6RMSQO.js");
+      const persisted = await fetchLastAssistantContent({
+        baseUrl,
+        authToken: token,
+        threadId: chatState.threadId,
+        normalizeApiBase: normalizeApiBase2
+      });
+      if (persisted) {
+        finalResponse = collapseRepeatedAssistantText3(persisted);
+        verboseLog("Recovered final response from thread history", {
+          length: finalResponse.length
+        });
+      }
+    }
     if (!finalResponse.trim()) {
       const noResponseMessage = `No final response returned by CloudEval (last stream status: ${chatState.status ?? "unknown"}). Retry with --verbose or --format ndjson to inspect stream progress.`;
       progressWriter.clear();
@@ -14928,7 +15655,7 @@ Error: ${errorMsg}
 program.command("banner").description("Preview the startup banner and terminal capabilities").action(async () => {
   const { render } = await import("ink");
   const BannerPreview = React.lazy(async () => ({
-    default: (await import("./Banner-6POGUWTT.js")).Banner
+    default: (await import("./Banner-2FNO54OA.js")).Banner
   }));
   render(
     /* @__PURE__ */ jsx(React.Suspense, { fallback: null, children: /* @__PURE__ */ jsx(BannerPreview, { disable: false }) })