@ganakailabs/cloudeval-cli 0.27.3 → 0.28.1

package/THIRD_PARTY_NOTICES.md

@@ -235,7 +235,7 @@ This notice is not a substitute for legal review before public or enterprise dis
 | safer-buffer | 2.1.2 | MIT | Nikita Skovoroda | https://github.com/ChALkeR/safer-buffer#readme |
 | scheduler | 0.23.2 | MIT | NOASSERTION | https://reactjs.org/ |
 | semver | 7.7.3 | ISC | GitHub Inc. | https://github.com/npm/node-semver#readme |
-| shell-quote | 1.8.3 | MIT | James Halliday | https://github.com/ljharb/shell-quote |
+| shell-quote | 1.8.4 | MIT | James Halliday | https://github.com/ljharb/shell-quote |
 | signal-exit | 3.0.7 | ISC | Ben Coe | https://github.com/tapjs/signal-exit |
 | skin-tone | 2.0.0 | MIT | Sindre Sorhus | https://github.com/sindresorhus/skin-tone#readme |
 | slice-ansi | 5.0.0 | MIT | NOASSERTION | https://github.com/chalk/slice-ansi#readme |

package/dist/{App-7QUH5EKH.js → App-FRLV34U4.js}

@@ -38,10 +38,10 @@ import {
 } from "./chunk-USSCB2ZU.js";
 import {
   Banner
-} from "./chunk-QUKE5J4T.js";
+} from "./chunk-L5ICTZHW.js";
 import {
   CLI_VERSION
-} from "./chunk-O4KUS7UM.js";
+} from "./chunk-XDMPAWK2.js";
 import {
   raisedButtonStyle,
   terminalTheme

package/dist/{Banner-AWNB7NZK.js → Banner-IFLO2NC6.js}

@@ -3,8 +3,8 @@ import {
   bannerMetaColor,
   bannerSegmentColor,
   splitBannerLineSegments
-} from "./chunk-QUKE5J4T.js";
-import "./chunk-O4KUS7UM.js";
+} from "./chunk-L5ICTZHW.js";
+import "./chunk-XDMPAWK2.js";
 import "./chunk-ZDKRIOMB.js";
 export {
   Banner,

package/dist/{chunk-QUKE5J4T.js → chunk-L5ICTZHW.js}

@@ -1,6 +1,6 @@
 import {
   CLI_VERSION
-} from "./chunk-O4KUS7UM.js";
+} from "./chunk-XDMPAWK2.js";
 import {
   shouldUseColor,
   terminalTheme

package/dist/{chunk-O4KUS7UM.js → chunk-XDMPAWK2.js}

@@ -1,5 +1,5 @@
 // src/version.ts
-var CLI_VERSION = "0.27.3";
+var CLI_VERSION = "0.28.1";
 
 export {
   CLI_VERSION

package/dist/cli.js

@@ -39,7 +39,7 @@ import {
 } from "./chunk-USSCB2ZU.js";
 import {
   CLI_VERSION
-} from "./chunk-O4KUS7UM.js";
+} from "./chunk-XDMPAWK2.js";
 
 // src/runtime/prepareInk.ts
 import fs from "fs";
@@ -609,6 +609,7 @@ var cliCommands = [
       "--wait",
       "--poll-interval",
       "--wait-timeout",
+      "--progress",
       "--location",
       ...outputOptions,
       ...authOptions,
@@ -2842,10 +2843,14 @@ var namedAmount = (record) => numberFrom(
   record.amount,
   record.monthly_cost,
   record.monthlyCost,
+  record.monthly_cost_estimate,
+  record.monthlyCostEstimate,
   record.cost,
   record.value
 );
-var namedLabel = (record, fallback) => String(record.name ?? record.service ?? record.label ?? record.category ?? fallback);
+var namedLabel = (record, fallback) => String(
+  record.name ?? record.resource_name ?? record.resourceName ?? record.service ?? record.label ?? record.category ?? fallback
+);
 var mermaidLabel = (value) => value.replace(/"/g, "'");
 var joinReadableList = (values) => {
   if (values.length <= 1) {
@@ -2869,6 +2874,7 @@ var costServiceRows = (services, currency) => (Array.isArray(services) ? service
     ...rowCurrency ? { currency: rowCurrency } : {}
   };
 }).filter((service) => service !== void 0);
+var sortedPositiveCostRows = (rows) => rows.filter((row) => row.amount > 0).sort((left, right) => right.amount - left.amount);
 var reconcileCostServiceRows = (services, totalAmount, currency) => {
   const total = numberFrom(totalAmount);
   if (total === void 0 || services.length === 0) {
@@ -2897,7 +2903,80 @@ var reconcileCostServiceRows = (services, totalAmount, currency) => {
   }
   return services;
 };
+var compactCostRowsForChart = (rows, totalAmount, currency, options = {}) => {
+  const maxRows = options.maxRows ?? 5;
+  const remainderLabel = options.remainderLabel ?? "Unallocated";
+  const total = numberFrom(totalAmount);
+  const positiveRows = sortedPositiveCostRows(rows);
+  const selected = positiveRows.slice(0, maxRows);
+  const collapsed = positiveRows.slice(maxRows);
+  const collapsedSum = Number(
+    collapsed.reduce((sum, row) => sum + row.amount, 0).toFixed(3)
+  );
+  const result = [...selected];
+  if (collapsedSum > 1e-3) {
+    result.push({
+      name: "Other",
+      amount: collapsedSum,
+      ...currency ? { currency } : {}
+    });
+  }
+  const represented = result.reduce((sum, row) => sum + row.amount, 0);
+  if (total !== void 0) {
+    const delta = Number((total - represented).toFixed(3));
+    if (delta > 1e-3) {
+      result.push({
+        name: remainderLabel,
+        amount: delta,
+        ...currency ? { currency } : {}
+      });
+    }
+  }
+  return result;
+};
 var markdownLink = (label, url) => url ? `[${label}](${url})` : label;
+var openInCloudEvalLines = (links) => {
+  if (!links) {
+    return [];
+  }
+  const reports = asRecord(links.reports);
+  const downloads = asRecord(links.downloads);
+  const entries = [
+    ["Project preview", links.project],
+    ["Architecture report", reports.architecture],
+    ["Cost report", reports.cost],
+    ["Validation details", reports.validation],
+    ["Download PDF", downloads.pdf],
+    ["Workflow run", links.workflowRun],
+    ["Download review artifacts", downloads.reviewArtifacts]
+  ].filter((entry) => typeof entry[1] === "string" && entry[1].length > 0);
+  return entries.map(([label, url]) => `- ${markdownLink(label, url)}`);
+};
+var monthlyCostImpactLines = (currentAmount, savingsAmount, currency) => {
+  const current = numberFrom(currentAmount);
+  const savings = numberFrom(savingsAmount);
+  if (current === void 0 || current <= 0 || savings === void 0 || savings <= 0) {
+    return [];
+  }
+  const optimized = Math.max(current - savings, 0);
+  const savingsPercent = current > 0 ? savings / current * 100 : void 0;
+  const yMax = Math.max(current, optimized, savings);
+  return [
+    "| Metric | Amount |",
+    "| --- | ---: |",
+    `| Current monthly cost | **${formatMonthlyMoney(current, currency)}** |`,
+    `| Potential savings | **${formatMonthlyMoney(savings, currency)}${savingsPercent !== void 0 ? ` (${trimNumber(savingsPercent, 1)}%)` : ""}** |`,
+    `| Optimized monthly cost | **${formatMonthlyMoney(optimized, currency)}** |`,
+    "",
+    "```mermaid",
+    "xychart-beta",
+    '  title "Monthly cost impact"',
+    '  x-axis ["Current", "Optimized"]',
+    `  y-axis "${currency ? `${currency}/mo` : "monthly cost"}" 0 --> ${trimNumber(yMax, 3)}`,
+    `  bar [${trimNumber(current, 3)}, ${trimNumber(optimized, 3)}]`,
+    "```"
+  ];
+};
 var extractPillars = (waf) => {
   const fromArray = waf?.parsed?.score?.pillars;
   if (Array.isArray(fromArray)) {
@@ -3125,6 +3204,16 @@ var evaluateGate = ({
       currency
     },
     topServices: (Array.isArray(cost?.parsed?.serviceGroups) ? cost.parsed.serviceGroups : entriesAsNamedRecords(cost?.report?.processed?.cost_by_service_family)).slice(0, 5),
+    topResources: (firstArray(
+      cost?.report?.raw?.resource_estimates,
+      cost?.report?.raw?.resourceEstimates,
+      cost?.raw?.resource_estimates,
+      cost?.raw?.resourceEstimates,
+      cost?.parsed?.resourceEstimates,
+      cost?.parsed?.resource_estimates,
+      preload?.latest_payloads?.cost?.raw?.resource_estimates,
+      preload?.latest_payloads?.cost?.raw?.resourceEstimates
+    ) ?? []).slice(0, 20),
     recommendations: (Array.isArray(cost?.parsed?.recommendations) ? cost.parsed.recommendations : Array.isArray(cost?.report?.processed?.optimization_recommendations) ? cost.report.processed.optimization_recommendations : []).slice(0, 5)
   };
   if (!gateConfig) {
@@ -3481,7 +3570,14 @@ var buildMarkdownSummary = (data) => {
     cost?.amount,
     cost?.currency
   );
-  const positiveCostServices = costServices.filter((service) => service.amount > 0);
+  const resourceCostRows = compactCostRowsForChart(
+    costServiceRows(data.gate?.cost?.topResources, cost?.currency),
+    cost?.amount,
+    cost?.currency,
+    { maxRows: 5, remainderLabel: "Unallocated" }
+  );
+  const positiveResourceCosts = resourceCostRows.filter((resource) => resource.amount > 0);
+  const openLinks = openInCloudEvalLines(data.links);
   const architectureLines = architectureSignalLines({
     architecture,
     costServices,
@@ -3505,6 +3601,9 @@ var buildMarkdownSummary = (data) => {
     `- **Ref**: \`${ref}\``,
     `- **Commit**: \`${commit}\``
   ];
+  if (openLinks.length) {
+    lines.push("", "#### Open in CloudEval", "", ...openLinks);
+  }
   if (data.aiSummary?.markdown) {
     lines.push("", "#### AI summary", "", data.aiSummary.markdown);
   }
@@ -3528,11 +3627,29 @@ var buildMarkdownSummary = (data) => {
   }
   if (cost?.amount !== void 0 || cost?.threshold !== void 0) {
     const costLines = [];
-    if (data.gate?.cost?.estimatedSavings?.amount !== void 0) {
+    const impactLines = monthlyCostImpactLines(
+      cost?.amount,
+      data.gate?.cost?.estimatedSavings?.amount,
+      cost?.currency ?? data.gate?.cost?.estimatedSavings?.currency
+    );
+    if (impactLines.length) {
+      costLines.push(...impactLines);
+    } else if (data.gate?.cost?.estimatedSavings?.amount !== void 0) {
       costLines.push(
         `- Estimated savings: **${formatMonthlyMoney(data.gate.cost.estimatedSavings.amount, data.gate.cost.estimatedSavings.currency)}**`
       );
     }
+    if (positiveResourceCosts.length) {
+      costLines.push(
+        "",
+        "```mermaid",
+        "pie title Monthly cost by resource",
+        ...positiveResourceCosts.map(
+          (resource) => `  "${mermaidLabel(resource.name)}" : ${trimNumber(resource.amount, 3)}`
+        ),
+        "```"
+      );
+    }
     if (costServices.length) {
       costLines.push(
         "",
@@ -3543,17 +3660,6 @@ var buildMarkdownSummary = (data) => {
         )
       );
     }
-    if (positiveCostServices.length) {
-      costLines.push(
-        "",
-        "```mermaid",
-        "pie title Monthly cost by service",
-        ...positiveCostServices.map(
-          (service) => `  "${mermaidLabel(service.name)}" : ${trimNumber(service.amount, 3)}`
-        ),
-        "```"
-      );
-    }
     if (costLines.length) {
       lines.push(
         "",
@@ -3673,18 +3779,58 @@ var registerReviewCommand = (program2, deps) => {
         }),
         readConfigText(cwd, options)
       ]);
+      const frontendBaseUrl = resolveFrontendBaseUrl({ apiBaseUrl: context.baseUrl });
+      const projectUrl = buildFrontendUrl({
+        baseUrl: frontendBaseUrl,
+        target: "project",
+        projectId,
+        view: "preview",
+        layout: "architecture"
+      });
+      const workflowRunUrl = githubWorkflowRunUrl();
       const data = {
         projectId,
         project: {
           id: projectId,
           name: String(project?.name ?? projectId),
-          url: buildFrontendUrl({
-            baseUrl: resolveFrontendBaseUrl({ apiBaseUrl: context.baseUrl }),
-            target: "project",
-            projectId,
-            view: "preview",
-            layout: "architecture"
-          })
+          url: projectUrl
+        },
+        links: {
+          project: projectUrl,
+          reports: {
+            architecture: buildFrontendUrl({
+              baseUrl: frontendBaseUrl,
+              target: "reports",
+              projectId,
+              tab: "architecture",
+              reportType: "architecture"
+            }),
+            cost: buildFrontendUrl({
+              baseUrl: frontendBaseUrl,
+              target: "reports",
+              projectId,
+              tab: "cost",
+              reportType: "cost"
+            }),
+            validation: buildFrontendUrl({
+              baseUrl: frontendBaseUrl,
+              target: "reports",
+              projectId,
+              tab: "validation",
+              reportType: "unit_tests"
+            })
+          },
+          downloads: {
+            pdf: buildFrontendUrl({
+              baseUrl: frontendBaseUrl,
+              target: "reports",
+              projectId,
+              downloadPdf: true,
+              pdfVerbosity: "full"
+            }),
+            ...workflowRunUrl ? { reviewArtifacts: workflowRunUrl } : {}
+          },
+          ...workflowRunUrl ? { workflowRun: workflowRunUrl } : {}
         },
         repo,
         ref,
@@ -3738,12 +3884,13 @@ var registerReviewCommand = (program2, deps) => {
         filesWritten
       });
       if (data.gate.status === "fail") {
-        process.exit(1);
+        process.exitCode = 1;
+        return;
       }
-      process.exit(0);
+      process.exitCode = 0;
     } catch (error) {
       console.error(error?.message ?? "Review failed");
-      process.exit(1);
+      process.exitCode = 1;
     }
   });
 };
@@ -7692,6 +7839,51 @@ var isSuccessfulJobStatus = (value) => ["completed", "succeeded"].includes(norma
 var compactRecord = (value) => Object.fromEntries(
   Object.entries(value).filter(([, item]) => item !== void 0)
 );
+var basenameFromPath = (value) => {
+  const trimmed = value?.trim();
+  if (!trimmed) {
+    return void 0;
+  }
+  const normalized = trimmed.replace(/\\/g, "/");
+  return normalized.split("/").filter(Boolean).pop() ?? trimmed;
+};
+var isBackendTempLocation = (value) => {
+  const trimmed = value?.trim();
+  if (!trimmed) {
+    return false;
+  }
+  const normalized = trimmed.replace(/\\/g, "/").toLowerCase();
+  const basename = basenameFromPath(trimmed) ?? "";
+  return normalized.startsWith("/tmp/") || normalized.startsWith("/private/tmp/") || normalized.includes("/var/folders/") || normalized.includes("/appdata/local/temp/") || normalized.includes("/windows/temp/") || /^tmp[\w.-]*\.json$/i.test(basename);
+};
+var displayTemplateLocation = (rawLocation, context) => {
+  const trimmed = rawLocation?.trim();
+  if (!trimmed) {
+    return void 0;
+  }
+  if (isBackendTempLocation(trimmed)) {
+    return basenameFromPath(context?.templatePath);
+  }
+  return trimmed;
+};
+var sanitizeTemplateLocationFields = (value, context) => {
+  if (Array.isArray(value)) {
+    return value.map((item) => sanitizeTemplateLocationFields(item, context));
+  }
+  const record = recordValue(value);
+  if (!record) {
+    return value;
+  }
+  return Object.fromEntries(
+    Object.entries(record).flatMap(([key, item]) => {
+      if (["file_path", "filePath", "location"].includes(key) && typeof item === "string") {
+        const publicLocation = displayTemplateLocation(item, context);
+        return publicLocation === void 0 ? [] : [[key, publicLocation]];
+      }
+      return [[key, sanitizeTemplateLocationFields(item, context)]];
+    })
+  );
+};
 var arrayValue = (value) => Array.isArray(value) ? value : [];
 var firstString = (record, fields) => {
   for (const field of fields) {
@@ -7702,6 +7894,283 @@ var firstString = (record, fields) => {
   }
   return void 0;
 };
+var publicValidationText = (value) => value?.replace(/\bPSRule(?:\s+for\s+Azure)?\b/gi, "validation rules").replace(/\bARM\s+TTK\b/gi, "template validation");
+var sanitizeTemplateOperationText = (value) => {
+  if (typeof value === "string") {
+    return publicValidationText(value) ?? value;
+  }
+  if (Array.isArray(value)) {
+    return value.map(sanitizeTemplateOperationText);
+  }
+  const record = recordValue(value);
+  if (record) {
+    return Object.fromEntries(
+      Object.entries(record).map(([key, item]) => [
+        key,
+        sanitizeTemplateOperationText(item)
+      ])
+    );
+  }
+  return value;
+};
+var firstNumber = (record, fields) => {
+  for (const field of fields) {
+    const value = record?.[field];
+    if (typeof value === "number" && Number.isFinite(value)) {
+      return value;
+    }
+    if (typeof value === "string" && value.trim()) {
+      const parsed = Number(value);
+      if (Number.isFinite(parsed)) {
+        return parsed;
+      }
+    }
+  }
+  return void 0;
+};
+var firstArray2 = (record, fields) => {
+  for (const field of fields) {
+    const value = record?.[field];
+    if (Array.isArray(value)) {
+      return value;
+    }
+  }
+  return [];
+};
+var normalizeProgressItem = (value, context) => {
+  const record = recordValue(value) ?? {};
+  const passed = typeof record.passed === "boolean" ? record.passed : void 0;
+  return compactRecord({
+    name: firstString(record, [
+      "name",
+      "test_name",
+      "testName",
+      "rule_name",
+      "ruleName",
+      "item",
+      "current_item",
+      "display_name",
+      "displayName"
+    ]),
+    status: firstString(record, ["status", "outcome", "result"]) ?? (passed === void 0 ? void 0 : passed ? "Pass" : "Fail"),
+    passed,
+    category: firstString(record, ["category", "test_category", "testCategory"]),
+    severity: firstString(record, ["severity", "level"]),
+    message: publicValidationText(firstString(record, ["message", "description"])),
+    recommendation: publicValidationText(
+      firstString(record, ["recommendation", "remediation"])
+    ),
+    location: displayTemplateLocation(
+      firstString(record, ["file_path", "filePath", "location"]),
+      context
+    ),
+    durationMs: firstNumber(record, ["duration_ms", "durationMs"]),
+    documentationUrl: firstString(record, [
+      "documentation_url",
+      "documentationUrl",
+      "help_url",
+      "helpUrl"
+    ])
+  });
+};
+var operationFromResult = (result) => {
+  const record = recordValue(result);
+  if (!record) {
+    return void 0;
+  }
+  if ("test_results" in record || "total_tests" in record) {
+    return "template_test";
+  }
+  if ("filtered_results" in record || "results" in record || "summary" in record) {
+    return "template_validate";
+  }
+  return void 0;
+};
+var progressEventFromStatus = (input) => {
+  const statusRecord = recordValue(input.status);
+  return compactRecord({
+    phase: input.phase,
+    jobId: input.jobId,
+    operation: firstString(statusRecord, ["operation", "operation_type", "operationType"]),
+    status: firstString(statusRecord, ["status", "state"]),
+    progress: firstNumber(statusRecord, [
+      "progress",
+      "progress_percent",
+      "progressPercent",
+      "percentage",
+      "percent"
+    ]),
+    completed: firstNumber(statusRecord, [
+      "completed_items",
+      "completedItems",
+      "completed_tests",
+      "completedTests",
+      "completed_rules",
+      "completedRules"
+    ]),
+    total: firstNumber(statusRecord, [
+      "total_items",
+      "totalItems",
+      "total_tests",
+      "totalTests",
+      "total_rules",
+      "totalRules"
+    ]),
+    currentItem: firstString(statusRecord, [
+      "current_item",
+      "currentItem",
+      "current_test",
+      "currentTest",
+      "current_rule",
+      "currentRule"
+    ]),
+    message: publicValidationText(
+      firstString(statusRecord, ["message", "detail", "description"])
+    ),
+    items: firstArray2(statusRecord, [
+      "recent_events",
+      "recentEvents",
+      "events",
+      "progress_events",
+      "progressEvents"
+    ]).map((item) => normalizeProgressItem(item, input.context)).filter((item) => item.name || item.message),
+    elapsedMs: input.elapsedMs
+  });
+};
+var failedStatus = (status) => ["fail", "failed", "error"].includes(String(status ?? "").trim().toLowerCase());
+var passedStatus = (status) => ["pass", "passed", "success", "succeeded"].includes(
+  String(status ?? "").trim().toLowerCase()
+);
+var progressItemsFromDetails = (details, nameFields, context) => {
+  const targetLocation = (target) => {
+    const name = firstString(target, ["name", "id"]);
+    const type = firstString(target, ["type"]);
+    if (name && type) {
+      return `${name} (${type})`;
+    }
+    return name ?? type;
+  };
+  return details.filter((detail) => failedStatus(firstString(detail, ["status", "outcome", "result"]))).map((detail) => {
+    const evidence = recordValue(detail.evidence);
+    return compactRecord({
+      name: firstString(detail, nameFields),
+      status: firstString(detail, ["status", "outcome", "result"]),
+      category: firstString(detail, ["category", "test_category", "testCategory"]),
+      severity: firstString(detail, ["severity", "level"]),
+      message: publicValidationText(
+        firstString(detail, ["message", "description"]) ?? firstString(evidence, ["description", "synopsis"])
+      ),
+      recommendation: publicValidationText(
+        firstString(detail, ["recommendation", "remediation"]) ?? firstString(evidence, ["recommendation", "remediation"])
+      ),
+      location: displayTemplateLocation(
+        firstString(detail, ["file_path", "filePath", "location"]),
+        context
+      ) ?? targetLocation(recordValue(detail.target)),
+      durationMs: firstNumber(detail, ["duration_ms", "durationMs"]),
+      documentationUrl: firstString(detail, [
+        "documentation_url",
+        "documentationUrl",
+        "help_url",
+        "helpUrl"
+      ]) ?? firstString(evidence, [
+        "documentation_url",
+        "documentationUrl",
+        "help_url",
+        "helpUrl"
+      ])
+    });
+  }).filter((item) => item.name || item.message);
+};
+var resultProgressSummary = (result, operation, context) => {
+  const resultRecord = recordValue(result) ?? {};
+  const summary = recordValue(resultRecord.summary) ?? {};
+  const detectedOperation = operationFromResult(result);
+  const resolvedOperation = detectedOperation ?? operation;
+  const operationText = String(resolvedOperation ?? "").toLowerCase();
+  if (detectedOperation === "template_test" || operationText.includes("test")) {
+    const details2 = normalizeTemplateTestDetails(result, context);
+    const passed2 = firstNumber(resultRecord, ["passed_tests", "passedTests"]) ?? details2.filter((detail) => detail.passed === true || passedStatus(firstString(detail, ["status"]))).length;
+    const failed2 = firstNumber(resultRecord, ["failed_tests", "failedTests"]) ?? details2.filter((detail) => detail.passed === false || failedStatus(firstString(detail, ["status"]))).length;
+    const skipped = firstNumber(resultRecord, ["skipped_tests", "skippedTests"]) ?? 0;
+    return {
+      operation: resolvedOperation,
+      progress: 100,
+      message: `Template tests complete: ${passed2} passed, ${failed2} failed, ${skipped} skipped`,
+      items: progressItemsFromDetails(details2, ["test_name", "testName", "name"], context)
+    };
+  }
+  const details = normalizeTemplateValidationDetails(result);
+  const passed = firstNumber(summary, ["passed_rules", "passedRules"]) ?? details.filter((detail) => passedStatus(firstString(detail, ["status"]))).length;
+  const failed = firstNumber(summary, ["failed_rules", "failedRules"]) ?? details.filter((detail) => failedStatus(firstString(detail, ["status"]))).length;
+  const total = firstNumber(summary, ["total_rules", "totalRules"]) ?? details.length;
+  return {
+    operation: resolvedOperation ?? "template_validate",
+    progress: 100,
+    message: `Validation complete: ${passed} passed, ${failed} failed across ${total} checks`,
+    items: progressItemsFromDetails(details, ["rule_id", "rule_name", "ruleName", "name"], context)
+  };
+};
+var formatTemplateProgressEvent = (event, command) => {
+  const appendItemDetails = (lines2, item) => {
+    const metadata = [
+      item.category ? `category: ${item.category}` : void 0,
+      item.severity ? `severity: ${item.severity}` : void 0,
+      item.location ? `location: ${item.location}` : void 0,
+      typeof item.durationMs === "number" ? `duration: ${item.durationMs}ms` : void 0
+    ].filter(Boolean);
+    if (metadata.length) {
+      lines2.push(`    ${metadata.join(" | ")}`);
+    }
+    if (item.name && item.message) {
+      lines2.push(`    message: ${item.message}`);
+    }
+    if (item.recommendation) {
+      lines2.push(`    recommendation: ${item.recommendation}`);
+    }
+    if (item.documentationUrl) {
+      lines2.push(`    docs: ${item.documentationUrl}`);
+    }
+  };
+  if (event.phase === "submitted") {
+    return [`${command} job ${event.jobId} submitted`];
+  }
+  if (event.phase === "result") {
+    const lines2 = event.message ? [event.message] : [`${command} job ${event.jobId} complete`];
+    for (const item of event.items ?? []) {
+      const status2 = item.status ? `${item.status} ` : "";
+      lines2.push(`  - ${status2}${item.name ?? item.message ?? "item"}`);
+      appendItemDetails(lines2, item);
+    }
+    return lines2;
+  }
+  const status = event.status ? event.status.toUpperCase() : "RUNNING";
+  const progress = typeof event.progress === "number" ? ` ${Math.round(event.progress)}%` : "";
+  const completed = typeof event.completed === "number" && typeof event.total === "number" ? ` (${event.completed}/${event.total})` : "";
+  const current = event.currentItem ? ` current: ${event.currentItem}` : "";
+  const message = event.message ? ` ${event.message}` : "";
+  const lines = [
+    `${command} job ${event.jobId}: ${status}${progress}${completed}${current}${message}`
+  ];
+  for (const item of event.items ?? []) {
+    const statusText = item.status ? `${item.status} ` : "";
+    const passedText = item.status || item.passed === void 0 ? "" : item.passed ? "Pass " : "Fail ";
+    lines.push(`  - ${statusText}${passedText}${item.name ?? item.message ?? "item"}`);
+    appendItemDetails(lines, item);
+  }
+  return lines;
+};
+var templateProgressEventKey = (event) => JSON.stringify({
+  phase: event.phase,
+  operation: event.operation,
+  status: event.status,
+  progress: event.progress,
+  completed: event.completed,
+  total: event.total,
+  currentItem: event.currentItem,
+  message: event.message,
+  items: event.items
+});
 var unwrapTemplateOperationResult = (value) => {
   const record = recordValue(value);
   if (!record) {
@@ -7713,9 +8182,9 @@ var unwrapTemplateOperationResult = (value) => {
   }
   const nestedResult = recordValue(result.result);
   if (nestedResult) {
-    return nestedResult;
+    return sanitizeTemplateOperationText(nestedResult);
   }
-  return result;
+  return sanitizeTemplateOperationText(result);
 };
 var resolvedOperationResult = (value) => recordValue(unwrapTemplateOperationResult(value));
 var validationResults = (result) => {
@@ -7747,9 +8216,15 @@ var normalizeTemplateValidationDetails = (result) => validationResults(recordVal
     pillar: firstString(row, ["pillar"]),
     ...Object.keys(target).length ? { target } : {},
     evidence: compactRecord({
-      description: firstString(row, ["description", "message"]) ?? firstString(info, ["description"]),
-      synopsis: firstString(row, ["synopsis"]) ?? firstString(info, ["synopsis"]),
-      recommendation: firstString(row, ["recommendation", "remediation"]),
+      description: publicValidationText(
+        firstString(row, ["description", "message"]) ?? firstString(info, ["description"])
+      ),
+      synopsis: publicValidationText(
+        firstString(row, ["synopsis"]) ?? firstString(info, ["synopsis"])
+      ),
+      recommendation: publicValidationText(
+        firstString(row, ["recommendation", "remediation"])
+      ),
       documentation_url: firstString(row, [
         "documentation_url",
         "documentationUrl",
@@ -7776,7 +8251,7 @@ var withTemplateValidationDetails = (value) => {
     details: normalizeTemplateValidationDetails(result)
   });
 };
-var normalizeTemplateTestDetails = (result) => arrayValue(recordValue(result)?.test_results).map((item) => {
+var normalizeTemplateTestDetails = (result, context) => arrayValue(recordValue(result)?.test_results).map((item) => {
   const row = recordValue(item) ?? {};
   const passed = typeof row.passed === "boolean" ? row.passed : void 0;
   return compactRecord({
@@ -7786,17 +8261,23 @@ var normalizeTemplateTestDetails = (result) => arrayValue(recordValue(result)?.t
     status: passed === void 0 ? firstString(row, ["status"]) : passed ? "Pass" : "Fail",
     passed,
     severity: firstString(row, ["severity", "level"]),
-    message: firstString(row, ["message", "description"]),
-    recommendation: firstString(row, ["recommendation", "remediation"]),
+    message: publicValidationText(firstString(row, ["message", "description"])),
+    recommendation: publicValidationText(
+      firstString(row, ["recommendation", "remediation"])
+    ),
     duration_ms: typeof row.duration_ms === "number" ? row.duration_ms : typeof row.durationMs === "number" ? row.durationMs : void 0,
-    file_path: firstString(row, ["file_path", "filePath"])
+    file_path: displayTemplateLocation(
+      firstString(row, ["file_path", "filePath"]),
+      context
+    )
   });
 });
-var withTemplateTestDetails = (value) => {
-  const result = resolvedOperationResult(value);
-  if (!result) {
+var withTemplateTestDetails = (value, context) => {
+  const rawResult = resolvedOperationResult(value);
+  if (!rawResult) {
     return value;
   }
+  const result = recordValue(sanitizeTemplateLocationFields(rawResult, context)) ?? rawResult;
   const original = recordValue(value);
   const jobFields = original && ("jobId" in original || "status" in original) ? compactRecord({
     submitted: original.submitted,
@@ -7812,7 +8293,7 @@ var withTemplateTestDetails = (value) => {
       failed_tests: result.failed_tests,
       skipped_tests: result.skipped_tests
     }),
-    details: normalizeTemplateTestDetails(result)
+    details: normalizeTemplateTestDetails(result, context)
   });
 };
 var getTemplateValidationJobStatus = async (input) => fetchCloudEvalJson({
@@ -7834,10 +8315,34 @@ var waitForTemplateValidationResult = async (input) => {
   }
   const waitTimeoutMs = Math.max(1, input.waitTimeoutMs ?? 6e5);
   const pollIntervalMs = Math.max(500, input.pollIntervalMs ?? 2500);
+  const progressContext = {
+    templatePath: input.templatePath,
+    parametersPath: input.parametersPath
+  };
   const deadline = Date.now() + waitTimeoutMs;
+  const startedAt = Date.now();
+  const elapsedMs = () => Date.now() - startedAt;
+  await input.onProgress?.(
+    progressEventFromStatus({
+      phase: "submitted",
+      jobId,
+      status: input.submitted,
+      elapsedMs: elapsedMs(),
+      context: progressContext
+    })
+  );
   let status;
   for (; ; ) {
     status = await getTemplateValidationJobStatus({ ...input, jobId });
+    await input.onProgress?.(
+      progressEventFromStatus({
+        phase: "status",
+        jobId,
+        status,
+        elapsedMs: elapsedMs(),
+        context: progressContext
+      })
+    );
     if (isTerminalJobStatus3(status)) {
       break;
     }
@@ -7853,13 +8358,32 @@ var waitForTemplateValidationResult = async (input) => {
       `Template validation job ${jobId} ended with status ${normalizedStatus(status) || "unknown"}.`
     );
   }
+  const result = sanitizeTemplateLocationFields(
+    unwrapTemplateOperationResult(
+      await getTemplateValidationJobResult({ ...input, jobId })
+    ),
+    progressContext
+  );
+  const statusEvent = progressEventFromStatus({
+    phase: "status",
+    jobId,
+    status,
+    elapsedMs: elapsedMs(),
+    context: progressContext
+  });
+  await input.onProgress?.(
+    compactRecord({
+      ...statusEvent,
+      phase: "result",
+      ...resultProgressSummary(result, statusEvent.operation, progressContext),
+      elapsedMs: elapsedMs()
+    })
+  );
   return {
     submitted: input.submitted,
     jobId,
     status,
-    result: unwrapTemplateOperationResult(
-      await getTemplateValidationJobResult({ ...input, jobId })
-    )
+    result
   };
 };
 var templateTestRequestBody = async (files, options) => {
@@ -9234,7 +9758,7 @@ var mcpToolDefinitions = [
         },
         wait: {
           type: "boolean",
-          description: "Poll an async validation job until results are ready.",
+          description: "Poll an async validation job until results are ready. When the MCP call includes _meta.progressToken, wait progress is emitted as notifications/progress.",
           default: false
         },
         pollIntervalMs: {
@@ -9291,7 +9815,7 @@ var mcpToolDefinitions = [
         verbose: { type: "boolean", default: false },
         wait: {
           type: "boolean",
-          description: "Poll an async template test job until results are ready.",
+          description: "Poll an async template test job until results are ready. When the MCP call includes _meta.progressToken, wait progress is emitted as notifications/progress.",
           default: false
         },
         pollIntervalMs: {
@@ -10753,7 +11277,7 @@ var buildToolHandlers = (serverOptions) => {
     });
     return withEnvelope({ command: "projects graph sync-runs", data });
   });
-  handlers.set("template_validate", async (args) => {
+  handlers.set("template_validate", async (args, context) => {
     const config = await resolveInvocationConfig(serverOptions, args);
     const auth = await resolveAuth(config, { requireUser: true });
     const templatePath = stringValue(args.templatePath);
@@ -10786,14 +11310,17 @@ var buildToolHandlers = (serverOptions) => {
       userId: auth.user.id,
       submitted,
       pollIntervalMs: numberValue(args.pollIntervalMs),
-      waitTimeoutMs: numberValue(args.waitTimeoutMs)
+      waitTimeoutMs: numberValue(args.waitTimeoutMs),
+      templatePath,
+      parametersPath: stringValue(args.parametersPath),
+      onProgress: context?.sendProgress ? (event) => context.sendProgress(event, "validate template") : void 0
     }) : submitted;
     return withEnvelope({
       command: "validate template",
       data: booleanValue(args.details) ? withTemplateValidationDetails(data) : data
     });
   });
-  handlers.set("template_test", async (args) => {
+  handlers.set("template_test", async (args, context) => {
     const config = await resolveInvocationConfig(serverOptions, args);
     const auth = await resolveAuth(config, { requireUser: true });
     const templatePath = stringValue(args.templatePath);
@@ -10818,11 +11345,17 @@ var buildToolHandlers = (serverOptions) => {
       userId: auth.user.id,
       submitted,
       pollIntervalMs: numberValue(args.pollIntervalMs),
-      waitTimeoutMs: numberValue(args.waitTimeoutMs)
+      waitTimeoutMs: numberValue(args.waitTimeoutMs),
+      templatePath,
+      parametersPath: stringValue(args.parametersPath),
+      onProgress: context?.sendProgress ? (event) => context.sendProgress(event, "validate tests") : void 0
     }) : submitted;
     return withEnvelope({
       command: "validate tests",
-      data: withTemplateTestDetails(data)
+      data: withTemplateTestDetails(data, {
+        templatePath,
+        parametersPath: stringValue(args.parametersPath)
+      })
     });
   });
   handlers.set("template_parse", async (args) => {
@@ -12013,6 +12546,34 @@ var serveMcpServer = async (options) => {
       transport: outputTransport
     });
   };
+  const progressTokenFromParams = (params) => {
+    const meta = isObject(params?._meta) ? params?._meta : void 0;
+    const token = meta?.progressToken;
+    if (typeof token === "string") {
+      return token;
+    }
+    if (typeof token === "number" && Number.isFinite(token)) {
+      return token;
+    }
+    return void 0;
+  };
+  const sendTemplateProgress = (progressToken, event, command) => {
+    if (progressToken === void 0) {
+      return;
+    }
+    const progress = typeof event.progress === "number" ? event.progress : typeof event.completed === "number" ? event.completed : event.phase === "result" ? 100 : 0;
+    const total = typeof event.progress === "number" ? 100 : typeof event.total === "number" ? event.total : event.phase === "result" ? 100 : void 0;
+    send({
+      jsonrpc: "2.0",
+      method: "notifications/progress",
+      params: {
+        progressToken,
+        progress,
+        ...total === void 0 ? {} : { total },
+        message: formatTemplateProgressEvent(event, command).join("\n")
+      }
+    });
+  };
   const handleRequest = async (request) => {
     debug("request received", {
       id: request.id,
@@ -12096,9 +12657,23 @@ var serveMcpServer = async (options) => {
             `Tool has no handler: ${name}`
           );
         }
+        const progressToken = progressTokenFromParams(request.params);
+        let lastProgressKey;
         const startedAt = Date.now();
         try {
-          const envelope = await handler(args);
+          const envelope = await handler(args, {
+            progressToken,
+            sendProgress: (event, command) => {
+              if (event.phase === "status") {
+                const key = templateProgressEventKey(event);
+                if (key === lastProgressKey) {
+                  return;
+                }
+                lastProgressKey = key;
+              }
+              sendTemplateProgress(progressToken, event, command);
+            }
+          });
           debug("tool call completed", { tool: name, ok: envelope.ok });
           await options.telemetry?.track("cli.mcp.tool", {
             command: "mcp",
@@ -13137,6 +13712,47 @@ var registerAgentsCommand = (program2, deps) => {
 };
 
 // src/validateCommand.ts
+var normalizeTemplateProgressMode = (value) => {
+  if (value === true) {
+    return "stderr";
+  }
+  if (value === void 0 || value === false || value === null) {
+    return "none";
+  }
+  const mode = String(value).trim().toLowerCase();
+  if (mode === "auto" || mode === "stderr" || mode === "ndjson" || mode === "none") {
+    return mode;
+  }
+  throw new Error("--progress must be one of: auto, stderr, ndjson, none");
+};
+var createTemplateProgressReporter = (command, progress) => {
+  const requestedMode = normalizeTemplateProgressMode(progress);
+  const mode = requestedMode === "auto" ? process.stderr.isTTY ? "stderr" : "none" : requestedMode;
+  if (mode === "none") {
+    return void 0;
+  }
+  let lastStatusKey;
+  return (event) => {
+    if (event.phase === "status") {
+      const key = templateProgressEventKey(event);
+      if (key === lastStatusKey) {
+        return;
+      }
+      lastStatusKey = key;
+    }
+    if (mode === "ndjson") {
+      process.stderr.write(
+        `${JSON.stringify({ type: "template_progress", command, ...event })}
+`
+      );
+      return;
+    }
+    for (const line of formatTemplateProgressEvent(event, command)) {
+      process.stderr.write(`${line}
+`);
+    }
+  };
+};
 var addCommon5 = (command, deps) => addAuthOptions(command, deps.defaultBaseUrl).requiredOption("--template-file <path>", "Cloud template JSON file").option("--parameters-file <path>", "Optional parameters JSON file").option("--format <format>", "Output format: text, json, ndjson, markdown", "text").option("--output <file>", "Output file");
 var parsePositiveInteger2 = (value, optionName = "--max-results") => {
   if (!value) {
@@ -13158,7 +13774,11 @@ var registerValidateCommand = (program2, deps) => {
     "--rule <id>",
     "Run a specific validation check id; repeat for multiple checks",
     collectRule
-  ).option("--category <name>", "Validation category filter").option("--pillar <name>", "Architecture pillar filter").option("--min-severity <level>", "Minimum severity level").option("--max-results <count>", "Maximum validation results").option("--project <id>", "Project id for saved validation results").option("--save-report", "Persist validation results when a project is provided", false).option("--details", "Include frontend-style per-check evidence details", false).option("--wait", "Poll an async validation job until results are ready", false).option("--poll-interval <ms>", "Polling interval when --wait is set", "2500").option("--wait-timeout <ms>", "Maximum time to wait when --wait is set", "600000").action(async (options, command) => {
+  ).option("--category <name>", "Validation category filter").option("--pillar <name>", "Architecture pillar filter").option("--min-severity <level>", "Minimum severity level").option("--max-results <count>", "Maximum validation results").option("--project <id>", "Project id for saved validation results").option("--save-report", "Persist validation results when a project is provided", false).option("--details", "Include frontend-style per-check evidence details", false).option("--wait", "Poll an async validation job until results are ready", false).option("--poll-interval <ms>", "Polling interval when --wait is set", "2500").option("--wait-timeout <ms>", "Maximum time to wait when --wait is set", "600000").option(
+    "--progress [mode]",
+    "Progress events while waiting: auto, stderr, ndjson, none",
+    "none"
+  ).action(async (options, command) => {
     try {
       const context = requireAuthUser(await resolveAuthContext(options, command, deps));
       const submitted = await validateTemplate({
@@ -13188,6 +13808,12 @@ var registerValidateCommand = (program2, deps) => {
         waitTimeoutMs: parsePositiveInteger2(
           options.waitTimeout,
           "--wait-timeout"
+        ),
+        templatePath: options.templateFile,
+        parametersPath: options.parametersFile,
+        onProgress: createTemplateProgressReporter(
+          "validate template",
+          options.progress
         )
       }) : submitted;
       const outputData = options.details ? withTemplateValidationDetails(data) : data;
@@ -13225,7 +13851,11 @@ var registerValidateCommand = (program2, deps) => {
       process.exit(1);
     }
   });
-  addCommon5(validate.command("tests").description("Run cloud template test checks"), deps).option("--test <name>", "Run a specific template test; repeat for multiple tests", collectRule).option("--skip-test <name>", "Skip a specific template test; repeat for multiple tests", collectRule).option("--category <name>", "Template test category").option("--group <name>", "Template test group; repeat for multiple groups", collectRule).option("--verbose", "Request verbose template test output", false).option("--wait", "Poll an async template test job until results are ready", false).option("--poll-interval <ms>", "Polling interval when --wait is set", "2500").option("--wait-timeout <ms>", "Maximum time to wait when --wait is set", "600000").action(async (options, command) => {
+  addCommon5(validate.command("tests").description("Run cloud template test checks"), deps).option("--test <name>", "Run a specific template test; repeat for multiple tests", collectRule).option("--skip-test <name>", "Skip a specific template test; repeat for multiple tests", collectRule).option("--category <name>", "Template test category").option("--group <name>", "Template test group; repeat for multiple groups", collectRule).option("--verbose", "Request verbose template test output", false).option("--wait", "Poll an async template test job until results are ready", false).option("--poll-interval <ms>", "Polling interval when --wait is set", "2500").option("--wait-timeout <ms>", "Maximum time to wait when --wait is set", "600000").option(
+    "--progress [mode]",
+    "Progress events while waiting: auto, stderr, ndjson, none",
+    "none"
+  ).action(async (options, command) => {
     try {
       const context = requireAuthUser(await resolveAuthContext(options, command, deps));
       const submitted = await testTemplate({
@@ -13252,11 +13882,20 @@ var registerValidateCommand = (program2, deps) => {
         waitTimeoutMs: parsePositiveInteger2(
           options.waitTimeout,
           "--wait-timeout"
+        ),
+        templatePath: options.templateFile,
+        parametersPath: options.parametersFile,
+        onProgress: createTemplateProgressReporter(
+          "validate tests",
+          options.progress
         )
       }) : submitted;
       await writeFormattedOutput({
         command: "validate tests",
-        data: withTemplateTestDetails(data),
+        data: withTemplateTestDetails(data, {
+          templatePath: options.templateFile,
+          parametersPath: options.parametersFile
+        }),
         format: options.format,
         output: options.output
       });
@@ -15626,7 +16265,7 @@ program.command("tui").description("Open the CloudEval Terminal UI").option(
   const { assertSecureBaseUrl } = await import("./dist-PEYJDO7A.js");
   const [{ render }, { App }] = await Promise.all([
     import("ink"),
-    import("./App-7QUH5EKH.js")
+    import("./App-FRLV34U4.js")
   ]);
   const baseUrl = await resolveBaseUrl(options, command);
   assertSecureBaseUrl(baseUrl);
@@ -15684,7 +16323,7 @@ program.command("chat").description("Start an interactive chat session").option(
   const { assertSecureBaseUrl } = await import("./dist-PEYJDO7A.js");
   const [{ render }, { App }] = await Promise.all([
     import("ink"),
-    import("./App-7QUH5EKH.js")
+    import("./App-FRLV34U4.js")
   ]);
   const baseUrl = await resolveBaseUrl(options, command);
   assertSecureBaseUrl(baseUrl);
@@ -16438,7 +17077,7 @@ Error: ${errorMsg}
 program.command("banner").description("Preview the startup banner and terminal capabilities").action(async () => {
   const { render } = await import("ink");
   const BannerPreview = React.lazy(async () => ({
-    default: (await import("./Banner-AWNB7NZK.js")).Banner
+    default: (await import("./Banner-IFLO2NC6.js")).Banner
   }));
   render(
     /* @__PURE__ */ jsx(React.Suspense, { fallback: null, children: /* @__PURE__ */ jsx(BannerPreview, { disable: false }) })

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ganakailabs/cloudeval-cli",
-  "version": "0.27.3",
+  "version": "0.28.1",
   "license": "LicenseRef-CloudEval-CLI",
   "type": "module",
   "description": "CloudEval CLI for cloud architecture, cost, report, automation, and MCP workflows.",

package/sbom.spdx.json

@@ -14,7 +14,7 @@
     {
       "SPDXID": "SPDXRef-Package-CloudEval-CLI",
       "name": "CloudEval CLI",
-      "versionInfo": "0.27.3",
+      "versionInfo": "0.28.1",
       "downloadLocation": "https://github.com/ganakailabs/cloudeval-cli",
       "filesAnalyzed": false,
       "licenseConcluded": "LicenseRef-CloudEval-CLI",
@@ -2354,9 +2354,9 @@
       "summary": "The semantic version parser used by npm."
     },
     {
-      "SPDXID": "SPDXRef-Package-shell-quote-1.8.3",
+      "SPDXID": "SPDXRef-Package-shell-quote-1.8.4",
       "name": "shell-quote",
-      "versionInfo": "1.8.3",
+      "versionInfo": "1.8.4",
       "downloadLocation": "https://github.com/ljharb/shell-quote",
       "filesAnalyzed": false,
       "licenseConcluded": "MIT",
@@ -3847,7 +3847,7 @@
     {
       "spdxElementId": "SPDXRef-Package-CloudEval-CLI",
       "relationshipType": "DEPENDS_ON",
-      "relatedSpdxElement": "SPDXRef-Package-shell-quote-1.8.3"
+      "relatedSpdxElement": "SPDXRef-Package-shell-quote-1.8.4"
     },
     {
       "spdxElementId": "SPDXRef-Package-CloudEval-CLI",