npm - @ganakailabs/cloudeval-cli - Versions diffs - 0.25.0 → 0.26.0 - Mend

@ganakailabs/cloudeval-cli 0.25.0 → 0.26.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (7) hide show

package/dist/{App-H46FRLWK.js → App-XNVJF2ON.js} +2 -2
package/dist/{Banner-7X2VHUVH.js → Banner-2FNO54OA.js} +2 -2
package/dist/{chunk-LKVKOGVL.js → chunk-IAXSLM2G.js} +1 -1
package/dist/{chunk-TISPT6EB.js → chunk-U5TI24XX.js} +1 -1
package/dist/cli.js +233 -15
package/package.json +1 -1
package/sbom.spdx.json +1 -1

package/dist/{App-H46FRLWK.js → App-XNVJF2ON.js} RENAMED Viewed

@@ -38,10 +38,10 @@ import {
 } from "./chunk-KBHRBGSX.js";
 import {
   Banner
-} from "./chunk-TISPT6EB.js";
+} from "./chunk-U5TI24XX.js";
 import {
   CLI_VERSION
-} from "./chunk-LKVKOGVL.js";
+} from "./chunk-IAXSLM2G.js";
 import {
   raisedButtonStyle,
   terminalTheme

package/dist/{Banner-7X2VHUVH.js → Banner-2FNO54OA.js} RENAMED Viewed

@@ -3,8 +3,8 @@ import {
   bannerMetaColor,
   bannerSegmentColor,
   splitBannerLineSegments
-} from "./chunk-TISPT6EB.js";
-import "./chunk-LKVKOGVL.js";
+} from "./chunk-U5TI24XX.js";
+import "./chunk-IAXSLM2G.js";
 import "./chunk-ZDKRIOMB.js";
 export {
   Banner,

package/dist/{chunk-LKVKOGVL.js → chunk-IAXSLM2G.js} RENAMED Viewed

@@ -1,5 +1,5 @@
 // src/version.ts
-var CLI_VERSION = "0.25.0";
+var CLI_VERSION = "0.26.0";
 export {
   CLI_VERSION

package/dist/{chunk-TISPT6EB.js → chunk-U5TI24XX.js} RENAMED Viewed

@@ -1,6 +1,6 @@
 import {
   CLI_VERSION
-} from "./chunk-LKVKOGVL.js";
+} from "./chunk-IAXSLM2G.js";
 import {
   shouldUseColor,
   terminalTheme

package/dist/cli.js CHANGED Viewed

@@ -36,7 +36,7 @@ import {
 } from "./chunk-KBHRBGSX.js";
 import {
   CLI_VERSION
-} from "./chunk-LKVKOGVL.js";
+} from "./chunk-IAXSLM2G.js";
 // src/runtime/prepareInk.ts
 import fs from "fs";
@@ -453,6 +453,8 @@ var cliCommands = [
       "--wait-timeout",
       "--poll-interval",
       "--no-ai-summary",
+      "--ai-summary-mode",
+      "--ai-summary-profile",
       "--ignore-dirty",
       "--output",
       "--format",
@@ -2398,6 +2400,10 @@ var parseGateConfig = (configText) => {
   if (!configText || !/^\s*ci\s*:/m.test(configText) || !/^\s*gates\s*:/m.test(configText)) {
     return void 0;
   }
+  const stringValue2 = (key) => {
+    const match = configText.match(new RegExp(`^\\s*${key}\\s*:\\s*([^\\s#]+)`, "m"));
+    return match ? match[1].trim() : void 0;
+  };
   const numberValue2 = (key) => {
     const match = configText.match(new RegExp(`^\\s*${key}\\s*:\\s*([0-9]+(?:\\.[0-9]+)?)`, "m"));
     return match ? Number(match[1]) : void 0;
@@ -2406,9 +2412,35 @@ var parseGateConfig = (configText) => {
     const match = configText.match(new RegExp(`^\\s*${key}\\s*:\\s*(true|false)`, "im"));
     return match ? match[1].toLowerCase() === "true" : void 0;
   };
+  const pillarScoreMins = {};
+  const pillarBlock = configText.match(/^(\s*)pillars\s*:\s*$(?<body>(?:\n\s+[-\w]+\s*:\s*[0-9]+(?:\.[0-9]+)?\s*)+)/m);
+  const pillarBody = pillarBlock?.groups?.body ?? "";
+  for (const line of pillarBody.split("\n")) {
+    const match = line.match(/^\s+([-\w]+)\s*:\s*([0-9]+(?:\.[0-9]+)?)/);
+    if (match) {
+      pillarScoreMins[match[1].replace(/-/g, "_").toLowerCase()] = Number(match[2]);
+    }
+  }
+  for (const key of [
+    "security",
+    "reliability",
+    "operational_excellence",
+    "performance_efficiency",
+    "cost_optimization"
+  ]) {
+    const value = numberValue2(`${key}_score_min`);
+    if (value !== void 0) {
+      pillarScoreMins[key] = value;
+    }
+  }
+  const enforcement = stringValue2("enforcement")?.toLowerCase();
   return {
+    enforcement: enforcement === "warn" ? "warn" : "required",
     overallScoreMin: numberValue2("overall_score_min") ?? 80,
+    pillarScoreMin: numberValue2("pillar_score_min"),
+    pillarScoreMins,
     failOnHighRisk: booleanValue2("fail_on_high_risk") ?? true,
+    failOnValidationErrors: booleanValue2("fail_on_validation_errors") ?? true,
     maxMonthlyCost: numberValue2("max_monthly_cost")
   };
 };
@@ -2423,10 +2455,86 @@ var numberFrom = (...values) => {
   }
   return void 0;
 };
+var normalizeKey = (value) => String(value ?? "").trim().replace(/[\s-]+/g, "_").toLowerCase();
+var firstRecord = (...values) => {
+  for (const value of values) {
+    if (value && typeof value === "object" && !Array.isArray(value)) {
+      return value;
+    }
+  }
+  return void 0;
+};
+var extractPillars = (waf) => {
+  const fromArray = waf?.parsed?.score?.pillars;
+  if (Array.isArray(fromArray)) {
+    return fromArray.map((pillar) => {
+      const record = asRecord(pillar);
+      const id = normalizeKey(record.id ?? record.name ?? record.label);
+      const score = numberFrom(record.score, record.value);
+      if (!id || score === void 0) return void 0;
+      return {
+        id,
+        label: String(record.label ?? record.name ?? id),
+        score,
+        passed: numberFrom(record.passed, record.passed_rules),
+        warned: numberFrom(record.warned, record.warning_rules),
+        failed: numberFrom(record.failed, record.failed_rules)
+      };
+    }).filter((pillar) => pillar !== void 0);
+  }
+  const scores = firstRecord(
+    waf?.parsed?.pillar_scores,
+    waf?.parsed?.score?.pillar_scores,
+    waf?.raw?.pillar_scores
+  );
+  if (!scores) return [];
+  return Object.entries(scores).map(([id, score]) => ({
+    id: normalizeKey(id),
+    label: id,
+    score: numberFrom(score)
+  })).filter((pillar) => pillar.score !== void 0);
+};
+var extractValidation = ({
+  waf,
+  preload,
+  project
+}) => {
+  const psRuleSummary = firstRecord(
+    waf?.parsed?.validation_summary,
+    waf?.raw?.validation_summary,
+    waf?.validation_summary
+  );
+  const rules = Array.isArray(waf?.parsed?.rules) ? waf?.parsed?.rules : [];
+  const failedRules = rules.filter(
+    (rule) => ["fail", "failed", "error"].includes(String(rule?.status ?? rule?.outcome ?? "").toLowerCase())
+  );
+  const unitSummary = firstRecord(
+    preload?.latest_payloads?.unit_tests?.summary,
+    preload?.reports?.unit_tests?.metrics,
+    project?.status?.unit_tests
+  );
+  return {
+    psRule: {
+      total: numberFrom(psRuleSummary?.total_rules, psRuleSummary?.totalRules, rules.length),
+      passed: numberFrom(psRuleSummary?.passed_rules, psRuleSummary?.passedRules),
+      failed: numberFrom(psRuleSummary?.failed_rules, psRuleSummary?.failedRules, failedRules.length),
+      errors: numberFrom(psRuleSummary?.error_rules, psRuleSummary?.errorRules)
+    },
+    unitTests: {
+      status: unitSummary?.status,
+      total: numberFrom(unitSummary?.total_tests, unitSummary?.totalTests),
+      passed: numberFrom(unitSummary?.passed_tests, unitSummary?.passedTests),
+      failed: numberFrom(unitSummary?.failed_tests, unitSummary?.failedTests),
+      skipped: numberFrom(unitSummary?.skipped_tests, unitSummary?.skippedTests)
+    }
+  };
+};
 var evaluateGate = ({
   configText,
   waf,
-  cost
+  cost,
+  preload,
+  project
 }) => {
   const gateConfig = parseGateConfig(configText);
   const overallScore = numberFrom(
@@ -2444,13 +2552,61 @@ var evaluateGate = ({
     cost?.parsed?.total_spend?.amount,
     cost?.raw?.total
   );
+  const currency = String(
+    cost?.parsed?.totalSpend?.currency ?? cost?.parsed?.total_spend?.currency ?? cost?.raw?.currency ?? ""
+  ) || void 0;
+  const savings = numberFrom(
+    cost?.parsed?.estimatedSavings?.amount,
+    cost?.parsed?.estimated_savings?.amount
+  );
+  const pillars = extractPillars(waf).map((pillar) => {
+    const threshold = gateConfig?.pillarScoreMins[pillar.id] ?? gateConfig?.pillarScoreMin;
+    return {
+      ...pillar,
+      threshold,
+      status: threshold !== void 0 && pillar.score < threshold ? "fail" : "pass"
+    };
+  });
+  const validation = extractValidation({ waf, preload, project });
+  const wellArchitected = {
+    overall: {
+      score: overallScore,
+      threshold: gateConfig?.overallScoreMin,
+      status: gateConfig && overallScore !== void 0 && overallScore < gateConfig.overallScoreMin ? "fail" : "pass"
+    },
+    pillars,
+    risks: {
+      high: highRisk,
+      medium: numberFrom(waf?.parsed?.counts?.mediumRisk, waf?.parsed?.counts?.medium_count),
+      critical: numberFrom(waf?.parsed?.counts?.criticalRisk, waf?.parsed?.counts?.critical_count)
+    },
+    topFindings: Array.isArray(waf?.parsed?.rules) ? waf.parsed.rules.slice(0, 5) : []
+  };
+  const costSummary = {
+    monthly: {
+      amount: monthlyCost,
+      currency,
+      threshold: gateConfig?.maxMonthlyCost,
+      status: gateConfig?.maxMonthlyCost !== void 0 && monthlyCost !== void 0 && monthlyCost > gateConfig.maxMonthlyCost ? "fail" : "pass"
+    },
+    estimatedSavings: {
+      amount: savings,
+      currency
+    },
+    topServices: Array.isArray(cost?.parsed?.serviceGroups) ? cost.parsed.serviceGroups.slice(0, 5) : [],
+    recommendations: Array.isArray(cost?.parsed?.recommendations) ? cost.parsed.recommendations.slice(0, 5) : []
+  };
   if (!gateConfig) {
     return {
       status: "warn",
       reason: "ci.gates is not configured in .cloudeval/config.yaml.",
+      enforcement: "warn",
       overallScore,
       highRisk,
-      monthlyCost
+      monthlyCost,
+      wellArchitected,
+      cost: costSummary,
+      validation
     };
   }
   const failures = [];
@@ -2462,16 +2618,34 @@ var evaluateGate = ({
   if (gateConfig.failOnHighRisk && highRisk !== void 0 && highRisk > 0) {
     failures.push(`${highRisk} high-risk architecture findings`);
   }
+  for (const pillar of pillars) {
+    if (pillar.status === "fail") {
+      failures.push(`${pillar.label} score ${pillar.score} is below ${pillar.threshold}`);
+    }
+  }
+  const failedPsRules = validation.psRule.failed ?? 0;
+  const failedUnitTests = validation.unitTests.failed ?? 0;
+  if (gateConfig.failOnValidationErrors && (failedPsRules > 0 || failedUnitTests > 0)) {
+    failures.push(
+      `validation has ${failedPsRules} failed PSRule checks and ${failedUnitTests} failed unit tests`
+    );
+  }
   if (gateConfig.maxMonthlyCost !== void 0 && monthlyCost !== void 0 && monthlyCost > gateConfig.maxMonthlyCost) {
     failures.push(`monthly cost ${monthlyCost} exceeds ${gateConfig.maxMonthlyCost}`);
   }
+  const wouldFail = failures.length > 0;
   return {
-    status: failures.length ? "fail" : "pass",
+    status: wouldFail && gateConfig.enforcement === "required" ? "fail" : wouldFail ? "warn" : "pass",
+    enforcement: gateConfig.enforcement,
+    wouldFail,
     failures,
     thresholds: gateConfig,
     overallScore,
     highRisk,
-    monthlyCost
+    monthlyCost,
+    wellArchitected,
+    cost: costSummary,
+    validation
   };
 };
 var safeFetch = async (input) => {
@@ -2579,6 +2753,7 @@ var buildAiSummaryPrompt = (data) => [
   `Well-Architected score: ${data.gate?.overallScore ?? "unknown"}`,
   `High-risk findings: ${data.gate?.highRisk ?? "unknown"}`,
   `Monthly cost: ${data.gate?.monthlyCost ?? "unknown"}`,
+  `Validation: PSRule failed ${data.gate?.validation?.psRule?.failed ?? "unknown"}, unit tests failed ${data.gate?.validation?.unitTests?.failed ?? "unknown"}`,
   Array.isArray(data.gate?.failures) && data.gate.failures.length ? `Gate failures: ${data.gate.failures.join("; ")}` : "Gate failures: none reported"
 ].join("\n");
 var generateAiSummary = async ({
@@ -2587,6 +2762,8 @@ var generateAiSummary = async ({
   user,
   project,
   model,
+  mode,
+  agentProfileId,
   data
 }) => {
   const core = await import("./dist-CFLR5FML.js");
@@ -2613,9 +2790,10 @@ var generateAiSummary = async ({
       name: String(data.projectId)
     },
     settings: {
-      mode: "ask",
+      mode,
       ...model ? { model } : {}
     },
+    ...mode === "agent" ? { agentProfileId: agentProfileId ?? "architecture" } : {},
     completeAfterResponse: true,
     responseCompletionGraceMs: 250,
     streamIdleTimeoutMs: 3e4
@@ -2627,7 +2805,8 @@ var generateAiSummary = async ({
   }
   return {
     enabled: true,
-    mode: "ask",
+    mode,
+    ...mode === "agent" ? { agentProfileId: agentProfileId ?? "architecture" } : {},
     ...model ? { model } : {},
     markdown: markdown.trim(),
     threadId
@@ -2636,7 +2815,11 @@ var generateAiSummary = async ({
 var buildMarkdownSummary = (data) => {
   const gateStatus = String(data.gate?.status ?? "unknown").toUpperCase();
   const score = data.gate?.overallScore ?? "unknown";
-  const cost = data.gate?.monthlyCost ?? "unknown";
+  const cost = data.gate?.cost?.monthly;
+  const validation = data.gate?.validation;
+  const pillarLines = Array.isArray(data.gate?.wellArchitected?.pillars) ? data.gate.wellArchitected.pillars.map(
+    (pillar) => `  - ${pillar.label}: ${pillar.score}${pillar.threshold !== void 0 ? ` (min ${pillar.threshold})` : ""} - ${String(pillar.status ?? "unknown").toUpperCase()}`
+  ) : [];
   const lines = [
     "### CloudEval review",
     "",
@@ -2646,8 +2829,31 @@ var buildMarkdownSummary = (data) => {
     `- **Commit:** \`${String(data.commitSha ?? "unknown").slice(0, 12)}\``,
     `- **Gate:** ${gateStatus}`,
     `- **Well-Architected score:** ${score}`,
-    `- **Monthly cost:** ${cost}`
+    `- **Cost:** ${cost?.amount ?? "unknown"} ${cost?.currency ?? ""}`.trim(),
+    `- **Validation:** PSRule ${validation?.psRule?.failed ?? "unknown"} failed, unit tests ${validation?.unitTests?.failed ?? "unknown"} failed`
   ];
+  if (Array.isArray(data.gate?.failures) && data.gate.failures.length) {
+    lines.push("", "#### Gate failures", "", ...data.gate.failures.map((failure) => `- ${failure}`));
+  }
+  if (pillarLines.length) {
+    lines.push("", "#### Well-Architected drilldown", "", ...pillarLines);
+  }
+  if (cost?.amount !== void 0 || cost?.threshold !== void 0) {
+    lines.push(
+      "",
+      "#### Cost drilldown",
+      "",
+      `- Cost: ${cost?.amount ?? "unknown"} ${cost?.currency ?? ""}${cost?.threshold !== void 0 ? ` (max ${cost.threshold})` : ""}`.trim()
+    );
+  }
+  if (validation) {
+    lines.push(
+      "",
+      "#### Validation drilldown",
+      "",
+      `- Validation: PSRule ${validation.psRule?.failed ?? "unknown"} failed, unit tests ${validation.unitTests?.failed ?? "unknown"} failed`
+    );
+  }
   if (data.aiSummary?.markdown) {
     lines.push("", "## AI summary", "", data.aiSummary.markdown);
   }
@@ -2657,7 +2863,7 @@ var registerReviewCommand = (program2, deps) => {
   const command = addAuthOptions(
     program2.command("review").description("Review the current GitHub-backed project from a pushed commit"),
     deps.defaultBaseUrl
-  ).option("--project <id>", "CloudEval project id. If omitted, resolve by GitHub repo metadata.").option("--repo <owner/repo>", "GitHub repository. Defaults to git origin.").option("--ref <name>", "Git branch/ref. Defaults to current branch.").option("--commit-sha <sha>", "Commit SHA to sync/review. Defaults to local HEAD.").option("--source-root <path>", "GitHub source root used by the CloudEval project.").option("--config <path>", "Path to .cloudeval/config.yaml for gate thresholds.").option("--no-wait", "Submit GitHub sync and return without waiting for analysis.").option("--wait-timeout <ms>", "Maximum time to wait for GitHub sync.", "900000").option("--poll-interval <ms>", "Polling interval while waiting for GitHub sync.", "5000").option("--no-ai-summary", "Skip the AI-written review summary.").option("--ignore-dirty", "Review HEAD even if the local working tree has uncommitted changes.", false).option("--output <dir>", "Write review.json and review.md into a directory.").option("--quiet", "Accepted for CI parity; review output stays machine-readable.", false).option("--progress <mode>", "Accepted for CI parity; review does not stream progress.", "none").option("--model <model>", "Accepted for CI parity with ask/agent modes.").option("--format <format>", "Output format: text, json, ndjson, markdown", "text");
+  ).option("--project <id>", "CloudEval project id. If omitted, resolve by GitHub repo metadata.").option("--repo <owner/repo>", "GitHub repository. Defaults to git origin.").option("--ref <name>", "Git branch/ref. Defaults to current branch.").option("--commit-sha <sha>", "Commit SHA to sync/review. Defaults to local HEAD.").option("--source-root <path>", "GitHub source root used by the CloudEval project.").option("--config <path>", "Path to .cloudeval/config.yaml for gate thresholds.").option("--no-wait", "Submit GitHub sync and return without waiting for analysis.").option("--wait-timeout <ms>", "Maximum time to wait for GitHub sync.", "900000").option("--poll-interval <ms>", "Polling interval while waiting for GitHub sync.", "5000").option("--no-ai-summary", "Skip the AI-written review summary.").option("--ai-summary-mode <mode>", "AI summary mode: ask or agent.", "ask").option("--ai-summary-profile <profile-id>", "Agent Profile id when --ai-summary-mode agent is used.", "architecture").option("--ignore-dirty", "Review HEAD even if the local working tree has uncommitted changes.", false).option("--output <dir>", "Write review.json and review.md into a directory.").option("--quiet", "Accepted for CI parity; review output stays machine-readable.", false).option("--progress <mode>", "Accepted for CI parity; review does not stream progress.", "none").option("--model <model>", "Accepted for CI parity with ask/agent modes.").option("--format <format>", "Output format: text, json, ndjson, markdown", "text");
   command.action(async (options, actionCommand) => {
     try {
       const cwd = process.cwd();
@@ -2720,6 +2926,11 @@ var registerReviewCommand = (program2, deps) => {
         token: context.token,
         projectId
       });
+      const preload = context.user?.id ? await safeFetch({
+        baseUrl: context.baseUrl,
+        authToken: context.token,
+        path: `/reports/preload/${encodeURIComponent(projectId)}?user_id=${encodeURIComponent(context.user.id)}&include_payload=true`
+      }) : void 0;
       const data = {
         projectId,
         repo,
@@ -2729,18 +2940,25 @@ var registerReviewCommand = (program2, deps) => {
         sync: finalStatus ? { ...asRecord(sync), finalStatus } : sync,
         reports: {
           cost,
-          waf
+          waf,
+          preload
         },
-        gate: evaluateGate({ configText, waf, cost })
+        gate: evaluateGate({ configText, waf, cost, preload, project })
       };
       if (options.aiSummary !== false) {
         try {
+          const aiSummaryMode = String(options.aiSummaryMode ?? "ask").toLowerCase();
+          if (!["ask", "agent"].includes(aiSummaryMode)) {
+            throw new Error("--ai-summary-mode must be ask or agent.");
+          }
           data.aiSummary = await generateAiSummary({
             baseUrl: context.baseUrl,
             token: context.token,
             user: context.user,
             project,
             model: options.model,
+            mode: aiSummaryMode,
+            agentProfileId: options.aiSummaryProfile,
             data
           });
         } catch (error) {
@@ -14625,7 +14843,7 @@ program.command("tui").description("Open the CloudEval Terminal UI").option(
   const { assertSecureBaseUrl } = await import("./dist-CFLR5FML.js");
   const [{ render }, { App }] = await Promise.all([
     import("ink"),
-    import("./App-H46FRLWK.js")
+    import("./App-XNVJF2ON.js")
   ]);
   const baseUrl = await resolveBaseUrl(options, command);
   assertSecureBaseUrl(baseUrl);
@@ -14683,7 +14901,7 @@ program.command("chat").description("Start an interactive chat session").option(
   const { assertSecureBaseUrl } = await import("./dist-CFLR5FML.js");
   const [{ render }, { App }] = await Promise.all([
     import("ink"),
-    import("./App-H46FRLWK.js")
+    import("./App-XNVJF2ON.js")
   ]);
   const baseUrl = await resolveBaseUrl(options, command);
   assertSecureBaseUrl(baseUrl);
@@ -15437,7 +15655,7 @@ Error: ${errorMsg}
 program.command("banner").description("Preview the startup banner and terminal capabilities").action(async () => {
   const { render } = await import("ink");
   const BannerPreview = React.lazy(async () => ({
-    default: (await import("./Banner-7X2VHUVH.js")).Banner
+    default: (await import("./Banner-2FNO54OA.js")).Banner
   }));
   render(
     /* @__PURE__ */ jsx(React.Suspense, { fallback: null, children: /* @__PURE__ */ jsx(BannerPreview, { disable: false }) })

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@ganakailabs/cloudeval-cli",
-  "version": "0.25.0",
+  "version": "0.26.0",
   "license": "LicenseRef-CloudEval-CLI",
   "type": "module",
   "description": "CloudEval CLI for cloud architecture, cost, report, automation, and MCP workflows.",

package/sbom.spdx.json CHANGED Viewed

@@ -14,7 +14,7 @@
     {
       "SPDXID": "SPDXRef-Package-CloudEval-CLI",
       "name": "CloudEval CLI",
-      "versionInfo": "0.25.0",
+      "versionInfo": "0.26.0",
       "downloadLocation": "https://github.com/ganakailabs/cloudeval-cli",
       "filesAnalyzed": false,
       "licenseConcluded": "LicenseRef-CloudEval-CLI",