@ganakailabs/cloudeval-cli 0.28.1 → 0.29.1

package/THIRD_PARTY_NOTICES.md

@@ -15,7 +15,7 @@ This notice is not a substitute for legal review before public or enterprise dis
 | (MIT OR CC0-1.0) | 2 |
 | 0BSD | 1 |
 | Apache-2.0 | 50 |
-| BSD-3-Clause | 14 |
+| BSD-3-Clause | 3 |
 | ISC | 12 |
 | MIT | 172 |
 
@@ -89,16 +89,6 @@ This notice is not a substitute for legal review before public or enterprise dis
 | @opentelemetry/semantic-conventions | 1.41.1 | Apache-2.0 | OpenTelemetry Authors | https://github.com/open-telemetry/opentelemetry-js/tree/main/semantic-conventions |
 | @opentelemetry/sql-common | 0.41.2 | Apache-2.0 | OpenTelemetry Authors | https://github.com/open-telemetry/opentelemetry-js-contrib/tree/main/packages/sql-common#readme |
 | @opentelemetry/winston-transport | 0.27.0 | Apache-2.0 | OpenTelemetry Authors | https://github.com/open-telemetry/opentelemetry-js-contrib/tree/main/packages/winston-transport#readme |
-| @protobufjs/aspromise | 1.1.2 | BSD-3-Clause | Daniel Wirtz | https://github.com/dcodeIO/protobuf.js#readme |
-| @protobufjs/base64 | 1.1.2 | BSD-3-Clause | Daniel Wirtz | https://github.com/dcodeIO/protobuf.js#readme |
-| @protobufjs/codegen | 2.0.5 | BSD-3-Clause | Daniel Wirtz | https://github.com/dcodeIO/protobuf.js#readme |
-| @protobufjs/eventemitter | 1.1.1 | BSD-3-Clause | Daniel Wirtz | https://github.com/dcodeIO/protobuf.js#readme |
-| @protobufjs/fetch | 1.1.1 | BSD-3-Clause | Daniel Wirtz | https://github.com/dcodeIO/protobuf.js#readme |
-| @protobufjs/float | 1.0.2 | BSD-3-Clause | Daniel Wirtz | https://github.com/dcodeIO/protobuf.js#readme |
-| @protobufjs/inquire | 1.1.2 | BSD-3-Clause | Daniel Wirtz | https://github.com/dcodeIO/protobuf.js#readme |
-| @protobufjs/path | 1.1.2 | BSD-3-Clause | Daniel Wirtz | https://github.com/dcodeIO/protobuf.js#readme |
-| @protobufjs/pool | 1.1.0 | BSD-3-Clause | Daniel Wirtz | https://github.com/dcodeIO/protobuf.js#readme |
-| @protobufjs/utf8 | 1.1.1 | BSD-3-Clause | Daniel Wirtz | https://github.com/dcodeIO/protobuf.js#readme |
 | @sindresorhus/is | 4.6.0 | MIT | Sindre Sorhus | https://github.com/sindresorhus/is#readme |
 | @types/bunyan | 1.8.11 | MIT | NOASSERTION | https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/bunyan |
 | @types/mysql | 2.15.27 | MIT | NOASSERTION | https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/mysql |
@@ -220,8 +210,7 @@ This notice is not a substitute for legal review before public or enterprise dis
 | postgres-bytea | 1.0.1 | MIT | Ben Drucker | https://github.com/bendrucker/postgres-bytea#readme |
 | postgres-date | 1.0.7 | MIT | Ben Drucker | https://github.com/bendrucker/postgres-date#readme |
 | postgres-interval | 1.2.0 | MIT | Ben Drucker | https://github.com/bendrucker/postgres-interval#readme |
-| protobufjs | 7.6.1 | BSD-3-Clause | Daniel Wirtz | https://protobufjs.github.io/protobuf.js/ |
-| protobufjs | 8.0.2 | BSD-3-Clause | Daniel Wirtz | https://protobufjs.github.io/protobuf.js/ |
+| protobufjs | 8.4.1 | BSD-3-Clause | Daniel Wirtz | https://github.com/protobufjs/protobuf.js#readme |
 | react-devtools-core | 4.28.5 | MIT | NOASSERTION | https://github.com/facebook/react#readme |
 | react-reconciler | 0.29.2 | MIT | NOASSERTION | https://reactjs.org/ |
 | react | 18.3.1 | MIT | NOASSERTION | https://reactjs.org/ |
@@ -263,8 +252,8 @@ This notice is not a substitute for legal review before public or enterprise dis
 | winston-transport | 4.9.0 | MIT | Charlie Robbins | https://github.com/winstonjs/winston-transport#readme |
 | wrap-ansi | 7.0.0 | MIT | Sindre Sorhus | https://github.com/chalk/wrap-ansi#readme |
 | wrap-ansi | 8.1.0 | MIT | Sindre Sorhus | https://github.com/chalk/wrap-ansi#readme |
-| ws | 7.5.10 | MIT | Einar Otto Stangvik | https://github.com/websockets/ws |
-| ws | 8.18.3 | MIT | Einar Otto Stangvik | https://github.com/websockets/ws |
+| ws | 7.5.11 | MIT | Einar Otto Stangvik | https://github.com/websockets/ws |
+| ws | 8.21.0 | MIT | Einar Otto Stangvik | https://github.com/websockets/ws |
 | wsl-utils | 0.1.0 | MIT | Sindre Sorhus | https://github.com/sindresorhus/wsl-utils#readme |
 | xtend | 4.0.2 | MIT | Raynos | https://github.com/Raynos/xtend |
 | y18n | 5.0.8 | ISC | Ben Coe | https://github.com/yargs/y18n |

package/dist/{App-FRLV34U4.js → App-OLD5LMTA.js}

@@ -5,10 +5,10 @@ import {
   listSessions,
   recordSessionTurn,
   resolveFrontendBaseUrl
-} from "./chunk-QSBGUI25.js";
+} from "./chunk-CS4NE336.js";
 import {
   Onboarding
-} from "./chunk-LRQBWG3N.js";
+} from "./chunk-4OE4CRKD.js";
 import {
   checkUserStatus,
   completeActiveAssistantMessage,
@@ -35,13 +35,13 @@ import {
   reduceChunk,
   runReports,
   streamChat
-} from "./chunk-USSCB2ZU.js";
+} from "./chunk-ERGQHMNT.js";
 import {
   Banner
-} from "./chunk-L5ICTZHW.js";
+} from "./chunk-VRLH2WYY.js";
 import {
   CLI_VERSION
-} from "./chunk-XDMPAWK2.js";
+} from "./chunk-AO4LJZTG.js";
 import {
   raisedButtonStyle,
   terminalTheme
@@ -5914,7 +5914,7 @@ var getUserIdentityFromToken = async (token) => {
     return { name: "You" };
   }
   try {
-    const { extractEmailFromToken } = await import("./dist-PEYJDO7A.js");
+    const { extractEmailFromToken } = await import("./dist-QYIPN7MD.js");
     const email = extractEmailFromToken(token) ?? void 0;
     return {
       name: getFirstNameForDisplay({ email }),
@@ -7350,7 +7350,7 @@ var App = ({
             setIsLoggingIn(true);
             setLoaderStep(1);
             try {
-              const { login } = await import("./dist-PEYJDO7A.js");
+              const { login } = await import("./dist-QYIPN7MD.js");
               const newToken = await login(baseUrl, {
                 headless: Boolean(process.env.SSH_TTY || process.env.CI)
               });

package/dist/{Banner-IFLO2NC6.js → Banner-6W7U2C44.js}

@@ -3,8 +3,8 @@ import {
   bannerMetaColor,
   bannerSegmentColor,
   splitBannerLineSegments
-} from "./chunk-L5ICTZHW.js";
-import "./chunk-XDMPAWK2.js";
+} from "./chunk-VRLH2WYY.js";
+import "./chunk-AO4LJZTG.js";
 import "./chunk-ZDKRIOMB.js";
 export {
   Banner,

package/dist/{Onboarding-GAN3Q5TS.js → Onboarding-HCORVZMZ.js}

@@ -1,7 +1,7 @@
 import {
   Onboarding
-} from "./chunk-LRQBWG3N.js";
-import "./chunk-USSCB2ZU.js";
+} from "./chunk-4OE4CRKD.js";
+import "./chunk-ERGQHMNT.js";
 import "./chunk-ZDKRIOMB.js";
 export {
   Onboarding

package/dist/{chunk-LRQBWG3N.js → chunk-4OE4CRKD.js}

@@ -1,6 +1,6 @@
 import {
   completeOnboarding
-} from "./chunk-USSCB2ZU.js";
+} from "./chunk-ERGQHMNT.js";
 import {
   terminalTheme
 } from "./chunk-ZDKRIOMB.js";

package/dist/{chunk-XDMPAWK2.js → chunk-AO4LJZTG.js}

@@ -1,5 +1,5 @@
 // src/version.ts
-var CLI_VERSION = "0.28.1";
+var CLI_VERSION = "0.29.1";
 
 export {
   CLI_VERSION

package/dist/{chunk-QSBGUI25.js → chunk-CS4NE336.js}

@@ -115,6 +115,15 @@ var buildFrontendUrl = (options) => {
       setParam(url, "downloadReport", options.downloadReport);
       setParam(url, "reportVerbosity", options.reportVerbosity);
       break;
+    case "issues":
+    case "action-center":
+      url = appUrl(options.baseUrl, "/issues");
+      setParam(url, "project", options.projectId);
+      setParam(url, "type", options.type);
+      setParam(url, "severity", options.severity);
+      setParam(url, "q", options.q);
+      setParam(url, "sort", options.sort);
+      break;
     case "billing":
       url = appUrl(options.baseUrl, "/subscription");
       setParam(url, "tab", options.tab);

package/dist/{chunk-USSCB2ZU.js → chunk-ERGQHMNT.js}

@@ -65,6 +65,9 @@ var SENSITIVE_KEY_PATTERN = /token|authorization|cookie|secret|password|api[_-]?
 var SENSITIVE_QUERY_PARAM_PATTERN = /token|authorization|cookie|secret|password|api[_-]?key|access[_-]?key|client[_-]?secret|refresh|device[_-]?code|user[_-]?code|code/i;
 var CLOUDEVAL_ACCESS_KEY_VALUE_PATTERN = /\bcev_[a-z0-9]+_ak_[A-Za-z0-9]+_[A-Za-z0-9._~+-]+(?:_[A-Za-z0-9._~+-]+)*\b/gi;
 var AUTHORIZATION_BEARER_PATTERN = /\b(authorization\s*:\s*bearer\s+)([^\s'",}]+)/gi;
+var INLINE_SECRET_ASSIGNMENT_PATTERN = /\b((?:token|authorization|cookie|secret|password|api[_-]?key|access[_-]?key|client[_-]?secret|refresh|device[_-]?code|user[_-]?code)=)([^&\s'",}]+)/gi;
+var JSONISH_SECRET_FIELD_PATTERN = /(["'](?:token|authorization|cookie|secret|password|api[_-]?key|access[_-]?key|client[_-]?secret|refresh|device[_-]?code|user[_-]?code)["']\s*:\s*["'])([^"']+)(["'])/gi;
+var ENCODED_SECRET_REDACTION = encodeURIComponent(SECRET_REDACTION);
 var isSensitiveSecretKey = (key) => SENSITIVE_KEY_PATTERN.test(key);
 var redactSensitiveText = (value) => {
   let text = value;
@@ -89,7 +92,12 @@ var redactSensitiveText = (value) => {
     }
   } catch {
   }
-  return text.replace(AUTHORIZATION_BEARER_PATTERN, (_match, prefix) => `${prefix}${SECRET_REDACTION}`).replace(CLOUDEVAL_ACCESS_KEY_VALUE_PATTERN, SECRET_REDACTION);
+  return text.replace(AUTHORIZATION_BEARER_PATTERN, (_match, prefix) => `${prefix}${SECRET_REDACTION}`).replace(JSONISH_SECRET_FIELD_PATTERN, (_match, prefix, _secret, suffix) => `${prefix}${SECRET_REDACTION}${suffix}`).replace(INLINE_SECRET_ASSIGNMENT_PATTERN, (_match, prefix, secret) => {
+    if (secret === SECRET_REDACTION || secret.toLowerCase() === ENCODED_SECRET_REDACTION.toLowerCase()) {
+      return `${prefix}${secret}`;
+    }
+    return `${prefix}${SECRET_REDACTION}`;
+  }).replace(CLOUDEVAL_ACCESS_KEY_VALUE_PATTERN, SECRET_REDACTION);
 };
 var redactSensitiveSecrets = (value) => {
   if (Array.isArray(value)) {
@@ -1503,6 +1511,15 @@ var extractEmailFromToken = (token) => {
   }
 };
 var AUTH_LOOKUP_ERROR = "CloudEvalAuthLookupError";
+var USER_PROFILE_MISSING_PATTERN = /USER_NOT_FOUND|CloudEval user profile not found|onboarding required/i;
+var isMissingUserProfileDetail = (detail) => USER_PROFILE_MISSING_PATTERN.test(detail ?? "");
+var authLookupErrorFromDetail = (response, context, detail) => {
+  const status = [response.status, response.statusText].filter(Boolean).join(" ");
+  const suffix = detail ? ` - ${detail.slice(0, 300)}` : "";
+  const error = new Error(`${context} failed: ${status}${suffix}`);
+  error.name = AUTH_LOOKUP_ERROR;
+  return error;
+};
 var authLookupError = async (response, context) => {
   let detail = "";
   try {
@@ -1545,6 +1562,13 @@ var fetchCurrentUserFromServer = async (apiBase, token) => {
     if (response.status === 401 || response.status === 403) {
       throw await authLookupError(response, "Current user lookup");
     }
+    if (response.status === 404) {
+      const detail = await readResponseDetail(response);
+      if (isMissingUserProfileDetail(detail)) {
+        throw authLookupErrorFromDetail(response, "Current user lookup", detail);
+      }
+      return null;
+    }
     if (!response.ok) {
       return null;
     }
@@ -3033,6 +3057,68 @@ var runReports = async (options) => {
 var getReportJobStatus = async (options) => fetchJson(options, `/jobs/${encodeURIComponent(options.jobId)}`, {
   user_id: requireUserId(options.userId)
 });
+var appendQuery2 = (url, values) => {
+  for (const [key, value] of Object.entries(values)) {
+    if (value === void 0) {
+      continue;
+    }
+    if (Array.isArray(value)) {
+      for (const entry of value) {
+        if (entry) {
+          url.searchParams.append(key, entry);
+        }
+      }
+      continue;
+    }
+    if (value) {
+      url.searchParams.set(key, value);
+    }
+  }
+  return url;
+};
+var compactErrorBody3 = async (response) => {
+  const body = await response.text().catch(() => "");
+  const trimmed = body.trim();
+  if (!trimmed) {
+    return void 0;
+  }
+  return trimmed.length > 1e3 ? `${trimmed.slice(0, 1e3)}...` : trimmed;
+};
+var fetchJson2 = async (options, path2, query = {}) => {
+  const url = appendQuery2(new URL(`${normalizeApiBase(options.baseUrl)}${path2}`), {
+    user_id: options.userId,
+    ...query
+  });
+  const response = await fetch(url, {
+    headers: getCLIHeaders(options.authToken)
+  });
+  if (!response.ok) {
+    const detail = await compactErrorBody3(response);
+    throw new Error(
+      detail ? `Issues request failed (${response.status}): ${detail}` : `Issues request failed (${response.status}).`
+    );
+  }
+  return response.json();
+};
+var listIssuesItems = async (options) => fetchJson2(options, "/issues/items", {
+  project_ids: options.projectIds,
+  exclude_project_ids: options.excludeProjectIds,
+  type: options.types,
+  severity: options.severities,
+  pillar: options.pillars,
+  category: options.categories,
+  resource_type: options.resourceTypes,
+  q: options.q,
+  min_monthly_savings: options.minMonthlySavings !== void 0 ? String(options.minMonthlySavings) : void 0,
+  sort: options.sort || "priority",
+  limit: String(options.limit ?? 50),
+  offset: String(options.offset ?? 0),
+  allow_full_scan: options.allowFullScan === false ? "false" : "true"
+});
+var getIssuesItem = async (options) => fetchJson2(options, `/issues/items/${encodeURIComponent(options.itemId)}`, {
+  project_ids: options.projectIds,
+  allow_full_scan: options.allowFullScan === false ? "false" : "true"
+});
 var CREDIT_LOW_RATIO = 0.1;
 var CREDIT_WARNING_RATIO = 0.25;
 var DEFAULT_FREE_TRIAL_CREDITS_TOTAL = 1e3;
@@ -3547,7 +3633,7 @@ var getConnection = async (options) => {
   const connections = await listConnections(options);
   return connections.find((connection) => String(connection.id) === options.connectionId) ?? null;
 };
-var compactErrorBody3 = async (response) => {
+var compactErrorBody4 = async (response) => {
   const body = await response.text().catch(() => "");
   const trimmed = body.trim();
   return trimmed ? redactSensitiveText(trimmed).slice(0, 1e3) : void 0;
@@ -3566,7 +3652,7 @@ var fetchCredentialJson = async (options, path2, request = {}) => {
     ...request.body ? { body: JSON.stringify(request.body) } : {}
   });
   if (!response.ok) {
-    const body = await compactErrorBody3(response);
+    const body = await compactErrorBody4(response);
     throw new Error(
       `Credential request failed with status ${response.status} ${response.statusText}${body ? `: ${body}` : ""}`
     );
@@ -3718,6 +3804,8 @@ export {
   getWafReportHistory,
   runReports,
   getReportJobStatus,
+  listIssuesItems,
+  getIssuesItem,
   getBillingConfig,
   getBillingEntitlement,
   getSubscriptionStatus,

package/dist/{chunk-L5ICTZHW.js → chunk-VRLH2WYY.js}

@@ -1,6 +1,6 @@
 import {
   CLI_VERSION
-} from "./chunk-XDMPAWK2.js";
+} from "./chunk-AO4LJZTG.js";
 import {
   shouldUseColor,
   terminalTheme