@ganakailabs/cloudeval-cli 0.29.3 → 0.30.0

package/dist/cli.js

@@ -36,10 +36,10 @@ import {
   redactSensitiveSecrets,
   redactSensitiveText,
   setActiveCLITraceContext
-} from "./chunk-ERGQHMNT.js";
+} from "./chunk-NXM4JEOB.js";
 import {
   CLI_VERSION
-} from "./chunk-PN4AUAH6.js";
+} from "./chunk-C5GOTWYL.js";
 
 // src/runtime/prepareInk.ts
 import fs from "fs";
@@ -416,6 +416,7 @@ var cliCommands = [
       "--severity",
       "--type",
       "--timestamp",
+      "--report-verbosity",
       "--region",
       "--currency",
       "--no-time-series",
@@ -851,7 +852,14 @@ var cliCommands = [
     name: "login",
     description: "Authenticate with CloudEval",
     domain: "config",
-    options: ["--base-url", "--headless", "--verbose", "--profile", "--show-sensitive-ids", "--help"],
+    options: [
+      "--base-url",
+      "--headless",
+      "--verbose",
+      "--profile",
+      "--show-sensitive-ids",
+      "--help"
+    ],
     workflows: ["login"]
   },
   {
@@ -865,7 +873,15 @@ var cliCommands = [
     name: "auth",
     description: "Authentication utilities",
     domain: "config",
-    options: ["status", "--base-url", "--format", "--profile", "--show-sensitive-ids", "--verbose", "--help"],
+    options: [
+      "status",
+      "--base-url",
+      "--format",
+      "--profile",
+      "--show-sensitive-ids",
+      "--verbose",
+      "--help"
+    ],
     workflows: ["auth status"]
   },
   {
@@ -984,14 +1000,29 @@ var cliCommands = [
     name: "doctor",
     description: "Diagnose local CLI configuration and environment",
     domain: "diagnostics",
-    options: ["--base-url", "--format", "--deep", "--profile", "--show-sensitive-ids", "--verbose", "--help"],
+    options: [
+      "--base-url",
+      "--format",
+      "--deep",
+      "--profile",
+      "--show-sensitive-ids",
+      "--verbose",
+      "--help"
+    ],
     workflows: ["doctor"]
   },
   {
     name: "status",
     description: "Show CloudEval CLI status",
     domain: "diagnostics",
-    options: ["--base-url", "--format", "--profile", "--show-sensitive-ids", "--verbose", "--help"],
+    options: [
+      "--base-url",
+      "--format",
+      "--profile",
+      "--show-sensitive-ids",
+      "--verbose",
+      "--help"
+    ],
     workflows: ["status"]
   },
   {
@@ -1680,7 +1711,7 @@ var resolveReportProjectId = async ({
   if (!token) {
     throw new Error("No project specified. Use --project <id> for report access.");
   }
-  const resolvedWorkspace = workspace ?? await import("./dist-QYIPN7MD.js").then((core) => ({
+  const resolvedWorkspace = workspace ?? await import("./dist-6LEMVXIY.js").then((core) => ({
     checkUserStatus: core.checkUserStatus,
     getProjects: core.getProjects
   }));
@@ -1709,7 +1740,7 @@ var warnIfAccessKeyFromCliOption = (options, command) => {
 };
 var resolveAuthContext = async (options, command, deps) => {
   const baseUrl = await deps.resolveBaseUrl(options, command);
-  const core = await import("./dist-QYIPN7MD.js");
+  const core = await import("./dist-6LEMVXIY.js");
   core.assertSecureBaseUrl(baseUrl);
   warnIfAccessKeyFromCliOption(options, command);
   let accessKey = options.accessKey;
@@ -1767,12 +1798,28 @@ var addAuthOptions = (command, defaultBaseUrl) => command.option("--base-url <ur
 ).option("--access-key-stdin", "Read access key from stdin (recommended for automation)", false).option("--non-interactive", "Disable prompts and browser login", false);
 
 // src/reports/reportCommand.tsx
-var outputFormats = ["tui", "summary", "text", "json", "ndjson", "markdown", "table"];
+var outputFormats = [
+  "tui",
+  "summary",
+  "text",
+  "json",
+  "ndjson",
+  "markdown",
+  "table"
+];
 var addCommonOptions = (command, defaultBaseUrl) => command.option("--base-url <url>", "Backend base URL", defaultBaseUrl).option(
   "--access-key <key>",
   "Access key for automation",
   process.env.CLOUDEVAL_ACCESS_KEY
-).option("--access-key-stdin", "Read access key from stdin (recommended for automation)", false).option("--project <id>", "Project ID to use").option("--format <format>", `Output format: ${outputFormats.join(", ")}`).option("--raw", "Show raw provider/backend payload", false).option("--parsed", "Show normalized parsed report payload", false).option("--formatted", "Show formatted human report payload", false).option("--output <file>", "Output file").option("--open", "Open the matching frontend report page", false).option("--print-url", "Print the matching frontend URL", false).option("--no-open", "Do not launch the browser when a URL is printed").option("--frontend-url <url>", "Frontend base URL").option("--non-interactive", "Disable prompts and browser login", false);
+).option(
+  "--access-key-stdin",
+  "Read access key from stdin (recommended for automation)",
+  false
+).option("--project <id>", "Project ID to use").option("--format <format>", `Output format: ${outputFormats.join(", ")}`).option("--raw", "Show raw provider/backend payload", false).option("--parsed", "Show normalized parsed report payload", false).option("--formatted", "Show formatted human report payload", false).option("--output <file>", "Output file").option("--open", "Open the matching frontend report page", false).option("--print-url", "Print the matching frontend URL", false).option("--no-open", "Do not launch the browser when a URL is printed").option("--frontend-url <url>", "Frontend base URL").option(
+  "--non-interactive",
+  "Disable prompts and browser login",
+  false
+);
 var resolveMode = (options) => {
   if (options.raw) return "raw";
   if (options.parsed) return "parsed";
@@ -1783,7 +1830,9 @@ var resolveFormat = (requested, tuiDefault) => {
     return requested;
   }
   if (requested) {
-    throw new Error(`Unsupported format '${requested}'. Use ${outputFormats.join(", ")}.`);
+    throw new Error(
+      `Unsupported format '${requested}'. Use ${outputFormats.join(", ")}.`
+    );
   }
   return tuiDefault && process.stdout.isTTY && !process.env.CI ? "tui" : "summary";
 };
@@ -1795,7 +1844,7 @@ var resolveToken = async (options, baseUrl, deps, command) => {
   if (options.accessKey) {
     return options.accessKey;
   }
-  const { getAuthToken } = await import("./dist-QYIPN7MD.js");
+  const { getAuthToken } = await import("./dist-6LEMVXIY.js");
   try {
     return await getAuthToken({
       accessKey: options.accessKey,
@@ -1806,10 +1855,12 @@ var resolveToken = async (options, baseUrl, deps, command) => {
     if (!canLogin) {
       throw error;
     }
-    const { login } = await import("./dist-QYIPN7MD.js");
+    const { login } = await import("./dist-6LEMVXIY.js");
     process.stderr.write("Authentication required. Starting login flow...\n");
     const token = await login(baseUrl, {
-      headless: Boolean(process.env.SSH_TTY || process.env.CLOUDEVAL_HEADLESS_LOGIN)
+      headless: Boolean(
+        process.env.SSH_TTY || process.env.CLOUDEVAL_HEADLESS_LOGIN
+      )
     });
     process.stderr.write("Authentication successful.\n");
     return token;
@@ -1844,14 +1895,19 @@ var writeReport = async (report, options, tuiDefault) => {
       import("ink"),
       import("./ReportDashboard-DOAUB727.js")
     ]);
-    render(React2.createElement(ReportDashboard, {
-      report,
-      initialMode: mode === "formatted" ? "overview" : mode
-    }));
+    render(
+      React2.createElement(ReportDashboard, {
+        report,
+        initialMode: mode === "formatted" ? "overview" : mode
+      })
+    );
     return;
   }
   const textFormat = format === "text" || format === "table" ? "summary" : format;
-  const text = serializeReportOutput(report, { format: textFormat, mode });
+  const text = serializeReportOutput(report, {
+    format: textFormat,
+    mode
+  });
   if (options.output) {
     const fs14 = await import("fs/promises");
     await fs14.writeFile(options.output, text, "utf8");
@@ -1877,6 +1933,34 @@ var pickReportDownloadPayload = (value, view) => {
   }
   return value;
 };
+var normalizeReportPdfVerbosity = (value) => {
+  if (value === "brief" || value === "detailed" || value === "evidence") {
+    return value;
+  }
+  if (value === "short") return "brief";
+  if (value === "full" || value === "extended") return "evidence";
+  return "detailed";
+};
+var mapReportTypeForPdf = (value) => {
+  if (value === "cost") return "cost";
+  if (value === "waf" || value === "architecture") return "architecture";
+  if (value === "unit-tests" || value === "unit_tests") return "unit_tests";
+  return "all";
+};
+var resolvePdfOutputPath = async (requestedOutput, filename) => {
+  const path11 = await import("path");
+  if (!requestedOutput) {
+    return path11.resolve(filename);
+  }
+  const fs14 = await import("fs/promises");
+  const stat = await fs14.stat(requestedOutput).catch(() => void 0);
+  if (stat?.isDirectory() || !path11.extname(requestedOutput)) {
+    await fs14.mkdir(requestedOutput, { recursive: true });
+    return path11.join(requestedOutput, filename);
+  }
+  await fs14.mkdir(path11.dirname(requestedOutput), { recursive: true });
+  return requestedOutput;
+};
 var writeDownloadPayload = async (input) => {
   if (!input.output) {
     process.stdout.write(
@@ -1908,7 +1992,9 @@ var resolveMachineFormat = (requested) => {
   if (requested === "text" || requested === "json" || requested === "ndjson" || requested === "markdown") {
     return requested;
   }
-  throw new Error("Unsupported format for reports run. Use text, json, ndjson, or markdown.");
+  throw new Error(
+    "Unsupported format for reports run. Use text, json, ndjson, or markdown."
+  );
 };
 var extractJobId = (value) => {
   if (!value || typeof value !== "object") return void 0;
@@ -1917,8 +2003,17 @@ var extractJobId = (value) => {
 };
 var isTerminalJobStatus = (value) => {
   if (!value || typeof value !== "object") return true;
-  const status = String(value.status ?? "").toLowerCase();
-  return ["completed", "succeeded", "failed", "error", "cancelled", "canceled"].includes(status);
+  const status = String(
+    value.status ?? ""
+  ).toLowerCase();
+  return [
+    "completed",
+    "succeeded",
+    "failed",
+    "error",
+    "cancelled",
+    "canceled"
+  ].includes(status);
 };
 var sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
 var waitForReportJobs = async ({
@@ -1963,141 +2058,218 @@ var registerReportsCommand = (program2, deps) => {
   addCommonOptions(
     reports.command("list").description("List available reports"),
     deps.defaultBaseUrl
-  ).option("--kind <kind>", "Filter by kind: cost, waf, all", "all").action(async (options, command) => {
-    try {
-      const baseUrl = await deps.resolveBaseUrl(options, command);
-      const token = await resolveToken(options, baseUrl, deps, command);
-      const projectId = await resolveReportProjectId({
-        baseUrl,
-        token,
-        requestedProjectId: options.project
-      });
-      const core = await import("./dist-QYIPN7MD.js");
-      const status = token ? await core.checkUserStatus(baseUrl, token) : void 0;
-      const reports2 = await core.listReports({
-        baseUrl,
-        authToken: token,
-        projectId,
-        kind: options.kind,
-        userId: status?.user?.id
-      });
-      writeReportList(reports2, options.format);
-    } catch (error) {
-      console.error(`\u274C Failed to list reports: ${error?.message ?? "Unknown error"}`);
-      process.exit(1);
+  ).option("--kind <kind>", "Filter by kind: cost, waf, all", "all").action(
+    async (options, command) => {
+      try {
+        const baseUrl = await deps.resolveBaseUrl(options, command);
+        const token = await resolveToken(options, baseUrl, deps, command);
+        const projectId = await resolveReportProjectId({
+          baseUrl,
+          token,
+          requestedProjectId: options.project
+        });
+        const core = await import("./dist-6LEMVXIY.js");
+        const status = token ? await core.checkUserStatus(baseUrl, token) : void 0;
+        const reports2 = await core.listReports({
+          baseUrl,
+          authToken: token,
+          projectId,
+          kind: options.kind,
+          userId: status?.user?.id
+        });
+        writeReportList(reports2, options.format);
+      } catch (error) {
+        console.error(
+          `\u274C Failed to list reports: ${error?.message ?? "Unknown error"}`
+        );
+        process.exit(1);
+      }
     }
-  });
+  );
   addCommonOptions(
     reports.command("download").description("Download report JSON or markdown locally"),
     deps.defaultBaseUrl
-  ).option("--type <type>", "Report type: cost, waf, architecture, all", "all").option("--view <view>", "Payload view: raw, parsed, formatted", "raw").option("--timestamp <timestamp>", "Historical timestamp").action(async (options, command) => {
-    try {
-      const baseUrl = await deps.resolveBaseUrl(options, command);
-      const token = await resolveToken(options, baseUrl, deps, command);
-      const core = await import("./dist-QYIPN7MD.js");
-      const status = token ? await core.checkUserStatus(baseUrl, token) : void 0;
-      const projectId = await resolveReportProjectId({
-        baseUrl,
-        token,
-        requestedProjectId: options.project
-      });
-      const reportTypes = options.type === "all" ? ["cost", "waf"] : [options.type || "cost"];
-      const payload = {};
-      for (const type of reportTypes) {
-        if (type === "cost") {
-          const data2 = options.timestamp ? await core.getCostReportHistory({
-            baseUrl,
-            authToken: token,
-            projectId,
-            userId: status?.user?.id,
-            timestamp: options.timestamp
-          }) : await core.getCostReportFull({
-            baseUrl,
-            authToken: token,
-            projectId,
-            userId: status?.user?.id
-          });
-          payload.cost = pickReportDownloadPayload(data2, options.view ?? "raw");
-        } else if (type === "waf" || type === "architecture") {
-          const data2 = options.timestamp ? await core.getWafReportHistory({
+  ).option(
+    "--type <type>",
+    "Report type: cost, waf, architecture, unit-tests, all",
+    "all"
+  ).option("--view <view>", "Payload view: raw, parsed, formatted", "raw").option("--timestamp <timestamp>", "Historical timestamp").option(
+    "--report-verbosity <verbosity>",
+    "PDF report depth: brief, detailed, evidence",
+    "detailed"
+  ).action(
+    async (options, command) => {
+      try {
+        const baseUrl = await deps.resolveBaseUrl(options, command);
+        const token = await resolveToken(options, baseUrl, deps, command);
+        const core = await import("./dist-6LEMVXIY.js");
+        const status = token ? await core.checkUserStatus(baseUrl, token) : void 0;
+        const projectId = await resolveReportProjectId({
+          baseUrl,
+          token,
+          requestedProjectId: options.project
+        });
+        if (options.format === "pdf") {
+          if (options.timestamp) {
+            throw new Error(
+              "PDF download currently supports the latest report only."
+            );
+          }
+          const verbosity = normalizeReportPdfVerbosity(
+            options.reportVerbosity
+          );
+          const pdf = await core.downloadReportPdf({
             baseUrl,
             authToken: token,
             projectId,
             userId: status?.user?.id,
-            timestamp: options.timestamp
-          }) : await core.getWafReportFull({
-            baseUrl,
-            authToken: token,
-            projectId,
-            userId: status?.user?.id
+            verbosity,
+            reportType: mapReportTypeForPdf(options.type),
+            includeVisuals: true
           });
-          payload.waf = pickReportDownloadPayload(data2, options.view ?? "raw");
-        } else {
-          throw new Error(`Unsupported report type '${type}'.`);
-        }
-      }
-      const frontendUrl = frontendUrlForReports(
-        baseUrl,
-        {
-          ...options,
-          tab: options.type === "cost" ? "cost" : options.type === "waf" ? "architecture" : "overview",
-          reportType: options.type === "all" ? "all" : options.type
-        },
-        projectId
-      );
-      const data = reportTypes.length === 1 ? payload[reportTypes[0] === "architecture" ? "waf" : reportTypes[0]] : payload;
-      if (options.output && reportTypes.length > 1) {
-        const fs14 = await import("fs/promises");
-        const path11 = await import("path");
-        const stat = await fs14.stat(options.output).catch(() => void 0);
-        if (stat?.isDirectory() || !path11.extname(options.output)) {
-          await fs14.mkdir(options.output, { recursive: true });
-          const files = [];
-          for (const [key, value] of Object.entries(payload)) {
-            const file = path11.join(options.output, `${projectId}-${key}-report.json`);
-            files.push(
-              ...await writeDownloadPayload({
-                command: "reports download",
-                payload: value,
-                format: "json",
-                output: file,
-                frontendUrl
-              })
-            );
+          if (!pdf.bytes.length) {
+            throw new Error("Backend returned an empty PDF.");
           }
+          const fs14 = await import("fs/promises");
+          const outputPath = await resolvePdfOutputPath(
+            options.output,
+            pdf.filename
+          );
+          await fs14.writeFile(outputPath, pdf.bytes);
           await writeFormattedOutput({
             command: "reports download",
-            data: { projectId, filesWritten: files },
-            format: options.format === "json" ? "json" : "text",
-            frontendUrl,
-            filesWritten: files
+            data: {
+              projectId,
+              file: outputPath,
+              format: "pdf",
+              reportVerbosity: verbosity,
+              status: pdf.status ?? "unknown",
+              warningsCount: pdf.warningsCount ?? 0,
+              bytes: pdf.bytes.length
+            },
+            format: "json",
+            frontendUrl: frontendUrlForReports(baseUrl, options, projectId),
+            filesWritten: [outputPath]
           });
-          await maybeOpenReportUrl(frontendUrl, options);
           return;
         }
+        const reportTypes = options.type === "all" ? ["cost", "waf"] : [options.type || "cost"];
+        const payload = {};
+        for (const type of reportTypes) {
+          if (type === "cost") {
+            const data2 = options.timestamp ? await core.getCostReportHistory({
+              baseUrl,
+              authToken: token,
+              projectId,
+              userId: status?.user?.id,
+              timestamp: options.timestamp
+            }) : await core.getCostReportFull({
+              baseUrl,
+              authToken: token,
+              projectId,
+              userId: status?.user?.id
+            });
+            payload.cost = pickReportDownloadPayload(
+              data2,
+              options.view ?? "raw"
+            );
+          } else if (type === "waf" || type === "architecture") {
+            const data2 = options.timestamp ? await core.getWafReportHistory({
+              baseUrl,
+              authToken: token,
+              projectId,
+              userId: status?.user?.id,
+              timestamp: options.timestamp
+            }) : await core.getWafReportFull({
+              baseUrl,
+              authToken: token,
+              projectId,
+              userId: status?.user?.id
+            });
+            payload.waf = pickReportDownloadPayload(
+              data2,
+              options.view ?? "raw"
+            );
+          } else {
+            throw new Error(`Unsupported report type '${type}'.`);
+          }
+        }
+        const frontendUrl = frontendUrlForReports(
+          baseUrl,
+          {
+            ...options,
+            tab: options.type === "cost" ? "cost" : options.type === "waf" ? "architecture" : "overview",
+            reportType: options.type === "all" ? "all" : options.type
+          },
+          projectId
+        );
+        const data = reportTypes.length === 1 ? payload[reportTypes[0] === "architecture" ? "waf" : reportTypes[0]] : payload;
+        if (options.output && reportTypes.length > 1) {
+          const fs14 = await import("fs/promises");
+          const path11 = await import("path");
+          const stat = await fs14.stat(options.output).catch(() => void 0);
+          if (stat?.isDirectory() || !path11.extname(options.output)) {
+            await fs14.mkdir(options.output, { recursive: true });
+            const files = [];
+            for (const [key, value] of Object.entries(payload)) {
+              const file = path11.join(
+                options.output,
+                `${projectId}-${key}-report.json`
+              );
+              files.push(
+                ...await writeDownloadPayload({
+                  command: "reports download",
+                  payload: value,
+                  format: "json",
+                  output: file,
+                  frontendUrl
+                })
+              );
+            }
+            await writeFormattedOutput({
+              command: "reports download",
+              data: { projectId, filesWritten: files },
+              format: options.format === "json" ? "json" : "text",
+              frontendUrl,
+              filesWritten: files
+            });
+            await maybeOpenReportUrl(frontendUrl, options);
+            return;
+          }
+        }
+        await writeDownloadPayload({
+          command: "reports download",
+          payload: data,
+          format: options.format === "markdown" ? "markdown" : "json",
+          output: options.output,
+          frontendUrl
+        });
+        await maybeOpenReportUrl(frontendUrl, options);
+      } catch (error) {
+        console.error(
+          `Failed to download reports: ${error?.message ?? "Unknown error"}`
+        );
+        process.exit(1);
       }
-      await writeDownloadPayload({
-        command: "reports download",
-        payload: data,
-        format: options.format === "markdown" ? "markdown" : "json",
-        output: options.output,
-        frontendUrl
-      });
-      await maybeOpenReportUrl(frontendUrl, options);
-    } catch (error) {
-      console.error(`Failed to download reports: ${error?.message ?? "Unknown error"}`);
-      process.exit(1);
     }
-  });
+  );
   addCommonOptions(
     reports.command("run").description("Run report generation for a project"),
     deps.defaultBaseUrl
-  ).option("--type <type>", "Report type: cost, waf, architecture, unit-tests, all", "all").option("--region <region>", "Cost report region", "eastus").option("--currency <currency>", "Cost report currency", "USD").option("--no-time-series", "Disable cost report time series generation").option("--no-save-report", "Do not persist generated report artifacts").option("--wait", "Poll submitted report jobs until terminal state", false).option("--poll-interval <ms>", "Polling interval when --wait is set", "2500").action(
+  ).option(
+    "--type <type>",
+    "Report type: cost, waf, architecture, unit-tests, all",
+    "all"
+  ).option("--region <region>", "Cost report region", "eastus").option("--currency <currency>", "Cost report currency", "USD").option("--no-time-series", "Disable cost report time series generation").option("--no-save-report", "Do not persist generated report artifacts").option("--wait", "Poll submitted report jobs until terminal state", false).option(
+    "--poll-interval <ms>",
+    "Polling interval when --wait is set",
+    "2500"
+  ).action(
     async (options, command) => {
       try {
         const baseUrl = await deps.resolveBaseUrl(options, command);
         const token = await resolveToken(options, baseUrl, deps, command);
-        const core = await import("./dist-QYIPN7MD.js");
+        const core = await import("./dist-6LEMVXIY.js");
         const status = token ? await core.checkUserStatus(baseUrl, token) : void 0;
         const projectId = await resolveReportProjectId({
           baseUrl,
@@ -2114,8 +2286,10 @@ var registerReportsCommand = (program2, deps) => {
           },
           projectId
         );
-        process.stderr.write(`Submitting ${requestedType} report run for project ${projectId}...
-`);
+        process.stderr.write(
+          `Submitting ${requestedType} report run for project ${projectId}...
+`
+        );
         const submitted = await core.runReports({
           baseUrl,
           authToken: token,
@@ -2133,7 +2307,10 @@ var registerReportsCommand = (program2, deps) => {
           token,
           userId: status?.user?.id,
           submitted,
-          pollInterval: Math.max(500, Number(options.pollInterval) || 2500)
+          pollInterval: Math.max(
+            500,
+            Number(options.pollInterval) || 2500
+          )
         }) : void 0;
         await writeFormattedOutput({
           command: "reports run",
@@ -2150,7 +2327,9 @@ var registerReportsCommand = (program2, deps) => {
         });
         await maybeOpenReportUrl(frontendUrl, options);
       } catch (error) {
-        console.error(`Failed to run reports: ${error?.message ?? "Unknown error"}`);
+        console.error(
+          `Failed to run reports: ${error?.message ?? "Unknown error"}`
+        );
         process.exit(1);
       }
     }
@@ -2158,42 +2337,46 @@ var registerReportsCommand = (program2, deps) => {
   addCommonOptions(
     reports.command("rules").description("Show Well-Architected Framework rules"),
     deps.defaultBaseUrl
-  ).option("--type <type>", "Rule report type: waf", "waf").action(async (options, command) => {
-    try {
-      const baseUrl = await deps.resolveBaseUrl(options, command);
-      const token = await resolveToken(options, baseUrl, deps, command);
-      const projectId = await resolveReportProjectId({
-        baseUrl,
-        token,
-        requestedProjectId: options.project
-      });
-      const core = await import("./dist-QYIPN7MD.js");
-      const status = token ? await core.checkUserStatus(baseUrl, token) : void 0;
-      const report = await core.getWafReport({
-        baseUrl,
-        authToken: token,
-        projectId,
-        view: "rules",
-        userId: status?.user?.id
-      });
-      const payload = selectReportModePayload(report, resolveMode(options));
-      const rules = payload?.rules ?? report.parsed?.rules ?? report.raw?.rules ?? report.raw?.ruleResults ?? [];
-      await writeFormattedOutput({
-        command: "reports rules",
-        data: rules,
-        format: options.format === "json" || options.format === "ndjson" || options.format === "markdown" ? options.format : "text",
-        output: options.output,
-        frontendUrl: frontendUrlForReports(
+  ).option("--type <type>", "Rule report type: waf", "waf").action(
+    async (options, command) => {
+      try {
+        const baseUrl = await deps.resolveBaseUrl(options, command);
+        const token = await resolveToken(options, baseUrl, deps, command);
+        const projectId = await resolveReportProjectId({
           baseUrl,
-          { ...options, tab: "architecture", reportType: "waf" },
-          projectId
-        )
-      });
-    } catch (error) {
-      console.error(`Failed to show report rules: ${error?.message ?? "Unknown error"}`);
-      process.exit(1);
+          token,
+          requestedProjectId: options.project
+        });
+        const core = await import("./dist-6LEMVXIY.js");
+        const status = token ? await core.checkUserStatus(baseUrl, token) : void 0;
+        const report = await core.getWafReport({
+          baseUrl,
+          authToken: token,
+          projectId,
+          view: "rules",
+          userId: status?.user?.id
+        });
+        const payload = selectReportModePayload(report, resolveMode(options));
+        const rules = payload?.rules ?? report.parsed?.rules ?? report.raw?.rules ?? report.raw?.ruleResults ?? [];
+        await writeFormattedOutput({
+          command: "reports rules",
+          data: rules,
+          format: options.format === "json" || options.format === "ndjson" || options.format === "markdown" ? options.format : "text",
+          output: options.output,
+          frontendUrl: frontendUrlForReports(
+            baseUrl,
+            { ...options, tab: "architecture", reportType: "waf" },
+            projectId
+          )
+        });
+      } catch (error) {
+        console.error(
+          `Failed to show report rules: ${error?.message ?? "Unknown error"}`
+        );
+        process.exit(1);
+      }
     }
-  });
+  );
   addCommonOptions(
     reports.command("show").description("Show a report by id").argument("<report-id>", "Report ID"),
     deps.defaultBaseUrl
@@ -2206,7 +2389,7 @@ var registerReportsCommand = (program2, deps) => {
         token,
         requestedProjectId: options.project
       });
-      const core = await import("./dist-QYIPN7MD.js");
+      const core = await import("./dist-6LEMVXIY.js");
       const status = token ? await core.checkUserStatus(baseUrl, token) : void 0;
       const report = await core.getReport({
         baseUrl,
@@ -2218,42 +2401,58 @@ var registerReportsCommand = (program2, deps) => {
       });
       await writeReport(report, options, false);
     } catch (error) {
-      console.error(`\u274C Failed to show report: ${error?.message ?? "Unknown error"}`);
+      console.error(
+        `\u274C Failed to show report: ${error?.message ?? "Unknown error"}`
+      );
       process.exit(1);
     }
   });
   addCommonOptions(
     reports.command("cost").description("Show the latest cost report"),
     deps.defaultBaseUrl
-  ).option("--period <period>", "Report period, for example 7d, 30d, 90d", "30d").option("--view <view>", "Cost view: overview, services, recommendations, anomalies, raw").action(async (options, command) => {
-    try {
-      const baseUrl = await deps.resolveBaseUrl(options, command);
-      const token = await resolveToken(options, baseUrl, deps, command);
-      const projectId = await resolveReportProjectId({
-        baseUrl,
-        token,
-        requestedProjectId: options.project
-      });
-      const core = await import("./dist-QYIPN7MD.js");
-      const status = token ? await core.checkUserStatus(baseUrl, token) : void 0;
-      const report = await core.getCostReport({
-        baseUrl,
-        authToken: token,
-        projectId,
-        period: options.period,
-        view: options.view,
-        userId: status?.user?.id
-      });
-      await writeReport(report, options, true);
-    } catch (error) {
-      console.error(`\u274C Failed to show cost report: ${error?.message ?? "Unknown error"}`);
-      process.exit(1);
+  ).option(
+    "--period <period>",
+    "Report period, for example 7d, 30d, 90d",
+    "30d"
+  ).option(
+    "--view <view>",
+    "Cost view: overview, services, recommendations, anomalies, raw"
+  ).action(
+    async (options, command) => {
+      try {
+        const baseUrl = await deps.resolveBaseUrl(options, command);
+        const token = await resolveToken(options, baseUrl, deps, command);
+        const projectId = await resolveReportProjectId({
+          baseUrl,
+          token,
+          requestedProjectId: options.project
+        });
+        const core = await import("./dist-6LEMVXIY.js");
+        const status = token ? await core.checkUserStatus(baseUrl, token) : void 0;
+        const report = await core.getCostReport({
+          baseUrl,
+          authToken: token,
+          projectId,
+          period: options.period,
+          view: options.view,
+          userId: status?.user?.id
+        });
+        await writeReport(report, options, true);
+      } catch (error) {
+        console.error(
+          `\u274C Failed to show cost report: ${error?.message ?? "Unknown error"}`
+        );
+        process.exit(1);
+      }
     }
-  });
+  );
   addCommonOptions(
     reports.command("waf").description("Show the latest Well-Architected Framework report"),
     deps.defaultBaseUrl
-  ).option("--report <id>", "Specific report id").option("--severity <severity>", "Filter by severity").option("--view <view>", "WAF view: overview, pillars, rules, resources, raw").action(
+  ).option("--report <id>", "Specific report id").option("--severity <severity>", "Filter by severity").option(
+    "--view <view>",
+    "WAF view: overview, pillars, rules, resources, raw"
+  ).action(
     async (options, command) => {
       try {
         const baseUrl = await deps.resolveBaseUrl(options, command);
@@ -2263,7 +2462,7 @@ var registerReportsCommand = (program2, deps) => {
           token,
           requestedProjectId: options.project
         });
-        const core = await import("./dist-QYIPN7MD.js");
+        const core = await import("./dist-6LEMVXIY.js");
         const status = token ? await core.checkUserStatus(baseUrl, token) : void 0;
         const report = await core.getWafReport({
           baseUrl,
@@ -2276,7 +2475,9 @@ var registerReportsCommand = (program2, deps) => {
         });
         await writeReport(report, options, true);
       } catch (error) {
-        console.error(`\u274C Failed to show WAF report: ${error?.message ?? "Unknown error"}`);
+        console.error(
+          `\u274C Failed to show WAF report: ${error?.message ?? "Unknown error"}`
+        );
         process.exit(1);
       }
     }
@@ -3469,6 +3670,16 @@ var renderAiSummarySections = (shortSummary, detailsMarkdown) => {
   }
   return lines.join("\n");
 };
+var isInstructionLikeAiDetails = (detailsMarkdown) => {
+  const normalized = detailsMarkdown.toLowerCase();
+  return [
+    "markdown for a collapsible ai details section",
+    "use short paragraphs or bullets",
+    "bold important evidence keywords",
+    "prefer concrete failed test names",
+    "headings: **main risk**"
+  ].some((marker) => normalized.includes(marker));
+};
 var githubWorkflowRunUrl = () => {
   const server = process.env.GITHUB_SERVER_URL;
   const repo = process.env.GITHUB_REPOSITORY;
@@ -3553,15 +3764,24 @@ var generateAiSummary = async (input) => {
       idempotencyKey: `cloudeval-review-summary-${input.data.projectId}-${input.data.commitSha ?? "head"}`
     });
     const shortSummary = String(response.summary ?? "").trim();
-    const detailsMarkdown = String(response.details ?? "").trim();
+    let detailsMarkdown = String(response.details ?? "").trim();
     if (!shortSummary) {
       return deterministicAiSummary(input.data, "Review summary endpoint returned no summary.");
     }
+    const warnings = Array.isArray(response.warnings) ? response.warnings : [];
+    if (isInstructionLikeAiDetails(detailsMarkdown)) {
+      const fallback = deterministicAiSummary(
+        input.data,
+        "Review summary endpoint returned instruction-like details."
+      );
+      detailsMarkdown = String(fallback.detailsMarkdown ?? "").trim();
+      warnings.push("Review summary endpoint returned instruction-like details; using deterministic details.");
+    }
     return {
       enabled: true,
-      status: response.fallback_used ? "fallback" : "ok",
-      fallbackUsed: Boolean(response.fallback_used),
-      warnings: Array.isArray(response.warnings) ? response.warnings : [],
+      status: response.fallback_used || warnings.length > 0 ? "fallback" : "ok",
+      fallbackUsed: Boolean(response.fallback_used) || warnings.length > 0,
+      warnings,
       riskHighlights: Array.isArray(response.risk_highlights) ? response.risk_highlights : [],
       recommendedActions: Array.isArray(response.recommended_actions) ? response.recommended_actions : [],
       evidenceUsed: Array.isArray(response.evidence_used) ? response.evidence_used : [],
@@ -5250,7 +5470,7 @@ var runChatRecipe = async (recipe, prompt2, options, command, deps) => {
   });
   progressWriter.write({ type: "auth", step: "auth", message: "Resolving authentication" });
   const context = await resolveAuthContext(options, command, deps);
-  const core = await import("./dist-QYIPN7MD.js");
+  const core = await import("./dist-6LEMVXIY.js");
   progressWriter.write({
     type: "request",
     step: "project",
@@ -6814,7 +7034,7 @@ var configureDiagramExportCommand = (command, deps) => addAuthOptions(command, d
       const context = requireAuthUser(
         await resolveAuthContext(options, actionCommand, deps)
       );
-      const core = await import("./dist-QYIPN7MD.js");
+      const core = await import("./dist-6LEMVXIY.js");
       const projects = await core.getProjects(
         context.baseUrl,
         context.token,
@@ -6891,7 +7111,7 @@ var registerProjectsCommand = (program2, deps) => {
   addCommon(addAuthOptions(projects.command("list").description("List projects"), deps.defaultBaseUrl)).action(async (options, command) => {
     try {
       const context = await resolveAuthContext(options, command, deps);
-      const core = await import("./dist-QYIPN7MD.js");
+      const core = await import("./dist-6LEMVXIY.js");
       const data = await listProjectsForContext(core, context);
       const url = buildFrontendUrl({ baseUrl: frontendBase(context, options), target: "projects" });
       await writeProjectListOutput({ data, options, frontendUrl: url });
@@ -6909,7 +7129,7 @@ var registerProjectsCommand = (program2, deps) => {
   ).action(async (id, options, command) => {
     try {
       const context = await resolveAuthContext(options, command, deps);
-      const core = await import("./dist-QYIPN7MD.js");
+      const core = await import("./dist-6LEMVXIY.js");
       const list = await listProjectsForContext(core, context);
       const data = list.find((project) => project.id === id);
       if (!data) {
@@ -6978,7 +7198,7 @@ var registerProjectsCommand = (program2, deps) => {
     try {
       assertSingleProjectSource(options);
       const context = requireAuthUser(await resolveAuthContext(options, command, deps));
-      const core = await import("./dist-QYIPN7MD.js");
+      const core = await import("./dist-6LEMVXIY.js");
       const template = await fileBlob(options.templateFile);
       const parameters = await fileBlob(options.parametersFile);
       const workspace = options.workspaceDir ? await collectWorkspaceFiles(options.workspaceDir, options) : void 0;
@@ -7103,7 +7323,7 @@ var registerIssuesInventoryCommand = (program2, deps) => {
   addCommon2(addAuthOptions(inventory.command("list").description("List issues inventory items"), deps.defaultBaseUrl)).option("--project <id>", "Filter by project id").option("--type <types>", "Filter by type: architecture,cost,unit-tests").option("--severity <levels>", "Filter by severity: critical,high,medium,low").option("--pillar <pillars>", "Filter by pillar").option("--category <categories>", "Filter by category").option("--resource-type <types>", "Filter by resource type").option("--q <query>", "Search query").option("--min-monthly-savings <amount>", "Minimum monthly savings for cost items").option("--sort <sort>", "Sort: priority, severity, savings, project", "priority").option("--limit <n>", "Page size (1-500)", "50").option("--offset <n>", "Page offset", "0").option("--allow-full-scan", "Allow scanning large portfolios without project filter", true).option("--no-allow-full-scan", "Require project scoping for large portfolios").action(async (options, command) => {
     try {
       const context = requireAuthUser(await resolveAuthContext(options, command, deps));
-      const core = await import("./dist-QYIPN7MD.js");
+      const core = await import("./dist-6LEMVXIY.js");
       const data = await core.listIssuesItems({
         baseUrl: context.baseUrl,
         authToken: context.token,
@@ -7151,7 +7371,7 @@ var registerIssuesInventoryCommand = (program2, deps) => {
   addCommon2(addAuthOptions(inventory.command("get <item-id>").description("Get one issues inventory item"), deps.defaultBaseUrl)).option("--project <id>", "Optional project scope").option("--allow-full-scan", "Allow scanning large portfolios", true).option("--no-allow-full-scan", "Require project scoping for large portfolios").action(async (itemId, options, command) => {
     try {
       const context = requireAuthUser(await resolveAuthContext(options, command, deps));
-      const core = await import("./dist-QYIPN7MD.js");
+      const core = await import("./dist-6LEMVXIY.js");
       const data = await core.getIssuesItem({
         baseUrl: context.baseUrl,
         authToken: context.token,
@@ -7272,7 +7492,7 @@ var registerConnectionsCommand = (program2, deps) => {
   addCommon3(addAuthOptions(connections.command("list").description("List connections"), deps.defaultBaseUrl)).action(async (options, command) => {
     try {
       const context = requireAuthUser(await resolveAuthContext(options, command, deps));
-      const core = await import("./dist-QYIPN7MD.js");
+      const core = await import("./dist-6LEMVXIY.js");
       const data = await core.listConnections({
         baseUrl: context.baseUrl,
         authToken: context.token,
@@ -7297,7 +7517,7 @@ var registerConnectionsCommand = (program2, deps) => {
   ).action(async (id, options, command) => {
     try {
       const context = requireAuthUser(await resolveAuthContext(options, command, deps));
-      const core = await import("./dist-QYIPN7MD.js");
+      const core = await import("./dist-6LEMVXIY.js");
       const data = await core.getConnection({
         baseUrl: context.baseUrl,
         authToken: context.token,
@@ -7634,7 +7854,7 @@ var checkoutReturnUrl = (context, options) => options.returnTo || billingUrl(con
 var runTopUpCheckout = async (commandName, packId, options, command, deps) => {
   try {
     const context = requireAuthUser(await resolveAuthContext(options, command, deps));
-    const core = await import("./dist-QYIPN7MD.js");
+    const core = await import("./dist-6LEMVXIY.js");
     const returnTo = checkoutReturnUrl(context, options);
     const session = await core.createTopUpCheckoutSession({
       baseUrl: context.baseUrl,
@@ -7674,7 +7894,7 @@ var registerBillingCommands = (program2, deps) => {
   ).action(async (options, command) => {
     try {
       const context = requireAuthUser(await resolveAuthContext(options, command, deps));
-      const core = await import("./dist-QYIPN7MD.js");
+      const core = await import("./dist-6LEMVXIY.js");
       const range = rangeToDates("30d");
       const [entitlement, usageSummary] = await Promise.all([
         core.getBillingEntitlement({
@@ -7704,7 +7924,7 @@ var registerBillingCommands = (program2, deps) => {
   addCommon4(addAuthOptions(billing.command("summary").description("Show billing summary"), deps.defaultBaseUrl)).action(async (options, command) => {
     try {
       const context = requireAuthUser(await resolveAuthContext(options, command, deps));
-      const core = await import("./dist-QYIPN7MD.js");
+      const core = await import("./dist-6LEMVXIY.js");
       const range = rangeToDates("30d");
       const [entitlement, subscriptionStatus, usageSummary] = await Promise.all([
         core.getBillingEntitlement({ baseUrl: context.baseUrl, authToken: context.token }),
@@ -7740,7 +7960,7 @@ var registerBillingCommands = (program2, deps) => {
   addCommon4(addAuthOptions(billing.command("plans").description("Show billing plans"), deps.defaultBaseUrl)).action(async (options, command) => {
     try {
       const context = await resolveAuthContext(options, command, deps);
-      const core = await import("./dist-QYIPN7MD.js");
+      const core = await import("./dist-6LEMVXIY.js");
       const data = await core.getBillingConfig({ baseUrl: context.baseUrl, authToken: context.token });
       const url = billingUrl(context, { ...options, tab: "plans" });
       await write("billing plans", data, options, url);
@@ -7752,7 +7972,7 @@ var registerBillingCommands = (program2, deps) => {
   addCommon4(addAuthOptions(billing.command("usage").description("Show billing usage summary"), deps.defaultBaseUrl)).option("--range <range>", "Usage range: 7d, 30d, 90d, all", "30d").option("--start-at <iso>", "Start timestamp").option("--end-at <iso>", "End timestamp").option("--granularity <value>", "Granularity: hour, day, month", "day").option("--action-type <type>", "Action type filter").option("--model <name>", "Model filter").option("--outcome <outcome>", "Outcome filter").option("--charge-status <status>", "Charge status filter").action(async (options, command) => {
     try {
       const context = requireAuthUser(await resolveAuthContext(options, command, deps));
-      const core = await import("./dist-QYIPN7MD.js");
+      const core = await import("./dist-6LEMVXIY.js");
       const range = rangeToDates(options.range);
       const data = await core.getBillingUsageSummary({
         baseUrl: context.baseUrl,
@@ -7775,7 +7995,7 @@ var registerBillingCommands = (program2, deps) => {
   addCommon4(addAuthOptions(billing.command("ledger").description("Show billing ledger"), deps.defaultBaseUrl)).option("--range <range>", "Usage range: 7d, 30d, 90d, all", "30d").option("--start-at <iso>", "Start timestamp").option("--end-at <iso>", "End timestamp").option("--action-type <type>", "Action type filter").option("--model <name>", "Model filter").option("--outcome <outcome>", "Outcome filter").option("--charge-status <status>", "Charge status filter").option("--limit <n>", "Page size", "25").option("--cursor <cursor>", "Pagination cursor").action(async (options, command) => {
     try {
       const context = requireAuthUser(await resolveAuthContext(options, command, deps));
-      const core = await import("./dist-QYIPN7MD.js");
+      const core = await import("./dist-6LEMVXIY.js");
       const range = rangeToDates(options.range);
       const data = await core.getBillingUsageLedger({
         baseUrl: context.baseUrl,
@@ -7803,7 +8023,7 @@ var registerBillingCommands = (program2, deps) => {
     addCommon4(addAuthOptions(billing.command(name).description(`Show billing ${name}`), deps.defaultBaseUrl)).option("--limit <n>", "Result limit", "25").action(async (options, command) => {
       try {
         const context = requireAuthUser(await resolveAuthContext(options, command, deps));
-        const core = await import("./dist-QYIPN7MD.js");
+        const core = await import("./dist-6LEMVXIY.js");
         const data = await core[getter]({
           baseUrl: context.baseUrl,
           authToken: context.token,
@@ -7821,7 +8041,7 @@ var registerBillingCommands = (program2, deps) => {
   addCommon4(addAuthOptions(topups, deps.defaultBaseUrl)).option("--limit <n>", "Result limit", "25").action(async (options, command) => {
     try {
       const context = requireAuthUser(await resolveAuthContext(options, command, deps));
-      const core = await import("./dist-QYIPN7MD.js");
+      const core = await import("./dist-6LEMVXIY.js");
       const data = await core.getTopUpPacks({
         baseUrl: context.baseUrl,
         authToken: context.token
@@ -10876,7 +11096,7 @@ var reportsFrontendUrl = (config, input) => buildFrontendUrl({
   reportVerbosity: input.reportVerbosity
 });
 var resolveAuth = async (config, options = {}) => {
-  const core = await import("./dist-QYIPN7MD.js");
+  const core = await import("./dist-6LEMVXIY.js");
   core.assertSecureBaseUrl(config.baseUrl);
   let token;
   try {
@@ -10972,7 +11192,7 @@ var assertModelAvailable = async (config, token) => {
   if (!config.model) {
     return;
   }
-  const core = await import("./dist-QYIPN7MD.js");
+  const core = await import("./dist-6LEMVXIY.js");
   try {
     const response = await fetch(
       `${core.normalizeApiBase(config.baseUrl)}/models`,
@@ -11229,7 +11449,7 @@ var buildToolHandlers = (serverOptions) => {
   });
   handlers.set("agent_profiles_list", async (args) => {
     const config = await resolveInvocationConfig(serverOptions, args);
-    const core = await import("./dist-QYIPN7MD.js");
+    const core = await import("./dist-6LEMVXIY.js");
     const data = await listProfilesForDiscovery(core, config.baseUrl);
     return withEnvelope({
       command: "agents list",
@@ -11242,7 +11462,7 @@ var buildToolHandlers = (serverOptions) => {
       throw new Error("profileId is required.");
     }
     const config = await resolveInvocationConfig(serverOptions, args);
-    const core = await import("./dist-QYIPN7MD.js");
+    const core = await import("./dist-6LEMVXIY.js");
     const data = await getProfileForDiscovery(core, config.baseUrl, profileId);
     return withEnvelope({
       command: "agents show",
@@ -11888,7 +12108,7 @@ var buildToolHandlers = (serverOptions) => {
   });
   handlers.set("auth_status", async (args) => {
     const config = await resolveInvocationConfig(serverOptions, args);
-    const core = await import("./dist-QYIPN7MD.js");
+    const core = await import("./dist-6LEMVXIY.js");
     const data = await core.getAuthStatus(config.baseUrl, { validate: true });
     return withEnvelope({
       command: "auth status",
@@ -11897,7 +12117,7 @@ var buildToolHandlers = (serverOptions) => {
   });
   handlers.set("status", async (args) => {
     const config = await resolveInvocationConfig(serverOptions, args);
-    const core = await import("./dist-QYIPN7MD.js");
+    const core = await import("./dist-6LEMVXIY.js");
     const auth = await core.getAuthStatus(config.baseUrl, { validate: true });
     return withEnvelope({
       command: "status",
@@ -11928,7 +12148,7 @@ var buildToolHandlers = (serverOptions) => {
       }
     ];
     try {
-      const core = await import("./dist-QYIPN7MD.js");
+      const core = await import("./dist-6LEMVXIY.js");
       core.assertSecureBaseUrl(config.baseUrl);
       checks.push({
         id: "base-url-secure",
@@ -12448,7 +12668,7 @@ var buildToolHandlers = (serverOptions) => {
     } catch {
       token = config.accessKey;
     }
-    const core = await import("./dist-QYIPN7MD.js");
+    const core = await import("./dist-6LEMVXIY.js");
     const data = await core.getBillingConfig({
       baseUrl: config.baseUrl,
       authToken: token
@@ -13344,7 +13564,7 @@ var registerCapabilitiesCommand = (program2, deps) => {
     warnIfAccessKeyFromCliOption(options, command);
     let data = capabilities;
     if (options.live) {
-      const core = await import("./dist-QYIPN7MD.js");
+      const core = await import("./dist-6LEMVXIY.js");
       const baseUrl = await deps.resolveBaseUrl(options, command);
       const accessKey = options.accessKeyStdin ? await deps.readStdinValue() : options.accessKey;
       const token = await core.getAuthToken({ accessKey, baseUrl });
@@ -13482,7 +13702,7 @@ var writeCredentialOutput = async (input) => {
 };
 var resolveCoreAuth = async (options, command, deps) => {
   const context = await resolveAuthContext(options, command, deps);
-  const core = await import("./dist-QYIPN7MD.js");
+  const core = await import("./dist-6LEMVXIY.js");
   return { ...context, core };
 };
 var parseCapabilities = (value) => value?.split(",").map((item) => item.trim()).filter(Boolean);
@@ -13815,7 +14035,7 @@ var registerAgentsCommand = (program2, deps) => {
   const agents = program2.command("agents").description("CloudEval Agent Profile utilities");
   addAgentOutputOptions(agents.command("list").description("List Agent Profiles"), deps).action(async (options, command) => {
     const baseUrl = await deps.resolveBaseUrl(options, command);
-    const core = await import("./dist-QYIPN7MD.js");
+    const core = await import("./dist-6LEMVXIY.js");
     core.assertSecureBaseUrl(baseUrl);
     const data = await listProfilesForDiscovery2(core, baseUrl);
     await writeProfiles({
@@ -13831,7 +14051,7 @@ var registerAgentsCommand = (program2, deps) => {
     deps
   ).action(async (profileId, options, command) => {
     const baseUrl = await deps.resolveBaseUrl(options, command);
-    const core = await import("./dist-QYIPN7MD.js");
+    const core = await import("./dist-6LEMVXIY.js");
     core.assertSecureBaseUrl(baseUrl);
     const data = await getProfileForDiscovery2(core, baseUrl, profileId);
     await writeProfiles({
@@ -13850,7 +14070,7 @@ var registerAgentsCommand = (program2, deps) => {
       const cliProfile = getActiveConfigProfile(command);
       const cliConfig = await loadCliConfig(cliProfile);
       const auth = await resolveAuthContext(options, command, deps);
-      const core = await import("./dist-QYIPN7MD.js");
+      const core = await import("./dist-6LEMVXIY.js");
       const profileResponse = await core.getAgentProfile({
         baseUrl: auth.baseUrl,
         authToken: auth.token,
@@ -14412,7 +14632,7 @@ var registerDiagnosticsCommands = (program2, deps) => {
     const baseUrl = await deps.resolveBaseUrl(options, command);
     const profile = getActiveConfigProfile(command);
     const config = await loadCliConfig(profile);
-    const core = await import("./dist-QYIPN7MD.js");
+    const core = await import("./dist-6LEMVXIY.js");
     const auth = await core.getAuthStatus(baseUrl, { validate: true });
     if (options.format === "text" || !options.format) {
       process.stdout.write(
@@ -14462,7 +14682,7 @@ var registerDiagnosticsCommands = (program2, deps) => {
       detail: getCliConfigPath(profile)
     });
     try {
-      const core = await import("./dist-QYIPN7MD.js");
+      const core = await import("./dist-6LEMVXIY.js");
       core.assertSecureBaseUrl(baseUrl);
       checks.push({
         id: "base-url-secure",
@@ -14562,7 +14782,7 @@ var resolveToken2 = async (options, deps, baseUrl, command) => {
     return options.accessKey;
   }
   try {
-    const core = await import("./dist-QYIPN7MD.js");
+    const core = await import("./dist-6LEMVXIY.js");
     return await core.getAuthToken({
       baseUrl
     });
@@ -14646,7 +14866,7 @@ var registerModelsCommand = (program2, deps) => {
     let source = "fallback";
     let modelList = fallbackModels;
     try {
-      const core = await import("./dist-QYIPN7MD.js");
+      const core = await import("./dist-6LEMVXIY.js");
       const response = await fetch(`${core.normalizeApiBase(baseUrl)}/models`, {
         headers: {
           Accept: "application/json",
@@ -15767,9 +15987,13 @@ var enableCliDebugLogging = () => {
   process.env.CLOUDEVAL_CLI_DEBUG = "1";
 };
 var redactSensitive = (value) => redactSensitiveSecrets(value);
-var isHeadlessEnvironment = () => Boolean(process.env.SSH_TTY || process.env.CI || process.env.CLOUDEVAL_HEADLESS_LOGIN);
+var isHeadlessEnvironment = () => Boolean(
+  process.env.SSH_TTY || process.env.CI || process.env.CLOUDEVAL_HEADLESS_LOGIN
+);
 var assertNoLegacyApiKeyUsage = () => {
-  const legacyArg = process.argv.slice(2).some((arg) => arg === "--api-key" || arg === "--api-key-stdin" || arg.startsWith("--api-key="));
+  const legacyArg = process.argv.slice(2).some(
+    (arg) => arg === "--api-key" || arg === "--api-key-stdin" || arg.startsWith("--api-key=")
+  );
   if (legacyArg || process.env.CLOUDEVAL_API_KEY) {
     process.stderr.write(`${LEGACY_API_KEY_MESSAGE}
 `);
@@ -15781,13 +16005,31 @@ var completionScriptPath = (shell) => {
   const home = os6.homedir();
   switch (shell) {
     case "bash":
-      return path10.join(home, ".local", "share", "bash-completion", "completions", "cloudeval");
+      return path10.join(
+        home,
+        ".local",
+        "share",
+        "bash-completion",
+        "completions",
+        "cloudeval"
+      );
     case "zsh":
       return path10.join(home, ".zsh", "completions", "_cloudeval");
     case "fish":
-      return path10.join(home, ".config", "fish", "completions", "cloudeval.fish");
+      return path10.join(
+        home,
+        ".config",
+        "fish",
+        "completions",
+        "cloudeval.fish"
+      );
     case "powershell":
-      return path10.join(home, ".config", "powershell", "cloudeval-completion.ps1");
+      return path10.join(
+        home,
+        ".config",
+        "powershell",
+        "cloudeval-completion.ps1"
+      );
   }
 };
 var ZSH_FPATH_MARKER = "CloudEval CLI completions";
@@ -15811,7 +16053,11 @@ fpath=("$HOME/.zsh/completions" $fpath)
 var installCompletionScript = async (shell, binaryName) => {
   const scriptPath = completionScriptPath(shell);
   await fs13.mkdir(path10.dirname(scriptPath), { recursive: true });
-  await fs13.writeFile(scriptPath, buildCompletionScript(shell, binaryName), "utf8");
+  await fs13.writeFile(
+    scriptPath,
+    buildCompletionScript(shell, binaryName),
+    "utf8"
+  );
   if (shell === "zsh") {
     await ensureZshCompletionFpath();
   }
@@ -15825,7 +16071,7 @@ var uninstallCompletionScript = async (shell) => {
 var runInteractiveLoginOnboarding = async (baseUrl, token) => {
   const [{ render }, { Onboarding }] = await Promise.all([
     import("ink"),
-    import("./Onboarding-HCORVZMZ.js")
+    import("./Onboarding-ZHKPXN5Z.js")
   ]);
   await new Promise((resolve) => {
     let app;
@@ -15846,7 +16092,9 @@ var runInteractiveLoginOnboarding = async (baseUrl, token) => {
 };
 var readStdinValue = async () => {
   if (process.stdin.isTTY) {
-    throw new Error("No stdin available. Pipe a value into --access-key-stdin.");
+    throw new Error(
+      "No stdin available. Pipe a value into --access-key-stdin."
+    );
   }
   const chunks = [];
   for await (const chunk of process.stdin) {
@@ -15899,7 +16147,9 @@ var progressEventFromChunk = (chunk, options) => {
     return {
       type: "action",
       step: "hitl",
-      message: truncateProgressText(firstQuestion?.text || "Human input required")
+      message: truncateProgressText(
+        firstQuestion?.text || "Human input required"
+      )
     };
   }
   if (chunk.type === "hitl_resume") {
@@ -15907,7 +16157,9 @@ var progressEventFromChunk = (chunk, options) => {
       type: "action",
       step: "hitl_resume",
       status: chunk.status,
-      message: truncateProgressText(chunk.message || "Resuming with supplied input")
+      message: truncateProgressText(
+        chunk.message || "Resuming with supplied input"
+      )
     };
   }
   return null;
@@ -15934,7 +16186,11 @@ var normalizeModelEntry = (raw) => {
   if (typeof id !== "string" || !id.trim()) {
     return null;
   }
-  return { ...value, id, name: typeof value.name === "string" ? value.name : id };
+  return {
+    ...value,
+    id,
+    name: typeof value.name === "string" ? value.name : id
+  };
 };
 var normalizeModelsPayload2 = (payload) => {
   const list = Array.isArray(payload) ? payload : Array.isArray(payload?.models) ? payload.models : Array.isArray(payload?.data) ? payload.data : Array.isArray(payload?.all) ? payload.all : [];
@@ -15955,12 +16211,15 @@ var assertModelAvailable2 = async (input) => {
     return;
   }
   try {
-    const response = await fetch(`${input.normalizeApiBase(input.baseUrl)}/models`, {
-      headers: {
-        Accept: "application/json",
-        ...input.authToken ? { Authorization: `Bearer ${input.authToken}` } : {}
+    const response = await fetch(
+      `${input.normalizeApiBase(input.baseUrl)}/models`,
+      {
+        headers: {
+          Accept: "application/json",
+          ...input.authToken ? { Authorization: `Bearer ${input.authToken}` } : {}
+        }
       }
-    });
+    );
     if (!response.ok) {
       return;
     }
@@ -16159,17 +16418,20 @@ var resolveBaseUrl = async (options, command) => {
     });
   }
   try {
-    const { getAuthStatus } = await import("./dist-QYIPN7MD.js");
+    const { getAuthStatus } = await import("./dist-6LEMVXIY.js");
     const status = await getAuthStatus();
     const storedBaseUrl = status.baseUrl;
     if (storedBaseUrl && shouldUseStoredBaseUrl(storedBaseUrl)) {
       return storedBaseUrl;
     }
     if (storedBaseUrl) {
-      verboseLog("Ignoring stored local auth base URL. Use --base-url or CLOUDEVAL_BASE_URL for local backend testing.", {
-        storedBaseUrl,
-        selectedBaseUrl: configuredBaseUrl
-      });
+      verboseLog(
+        "Ignoring stored local auth base URL. Use --base-url or CLOUDEVAL_BASE_URL for local backend testing.",
+        {
+          storedBaseUrl,
+          selectedBaseUrl: configuredBaseUrl
+        }
+      );
     }
   } catch {
   }
@@ -16182,7 +16444,9 @@ var resolveCliConfig = async (command) => {
     return {};
   }
 };
-program.name("cloudeval").description("CloudEval CLI. Run without arguments to open the Terminal UI; use subcommands for pipeable CLI workflows.").version(CLI_VERSION).addHelpText(
+program.name("cloudeval").description(
+  "CloudEval CLI. Run without arguments to open the Terminal UI; use subcommands for pipeable CLI workflows."
+).version(CLI_VERSION).addHelpText(
   "after",
   `
 
@@ -16195,11 +16459,20 @@ Examples:
   cloudeval projects create --template-url https://example.com/template.json --format json
   cloudeval projects export-diagram <id> --layout architecture --format png --labels all --output architecture.png
   cloudeval reports download --project <id> --type all --output ./reports
+  cloudeval reports download --project <id> --type all --format pdf --report-verbosity evidence --output ./report.pdf
   cloudeval open project <id> --view both --layout dependency --print-url --no-open
   cloudeval capabilities --format json
   cloudeval update --check
 `
-).option("--profile <name>", "Configuration profile", process.env.CLOUDEVAL_PROFILE).option("-v, --verbose", "Enable verbose logging", false).option("--show-sensitive-ids", "Show full account/session identifiers in command output", false).hook("preAction", async (thisCommand, actionCommand) => {
+).option(
+  "--profile <name>",
+  "Configuration profile",
+  process.env.CLOUDEVAL_PROFILE
+).option("-v, --verbose", "Enable verbose logging", false).option(
+  "--show-sensitive-ids",
+  "Show full account/session identifiers in command output",
+  false
+).hook("preAction", async (thisCommand, actionCommand) => {
   const opts = typeof actionCommand.optsWithGlobals === "function" ? actionCommand.optsWithGlobals() : thisCommand.opts();
   await initializeCommandTelemetry(actionCommand, opts);
   setShowSensitiveIds(Boolean(opts.showSensitiveIds || opts.verbose));
@@ -16216,16 +16489,19 @@ Examples:
   await finishCommandTelemetry(0);
 });
 program.addHelpCommand(false);
-program.command("login").description("Authenticate with Cloudeval").option(
-  "--base-url <url>",
-  "Backend base URL",
-  DEFAULT_BASE_URL
-).option("--headless", "Use device-code login flow (for SSH/headless terminals)", false).option("-v, --verbose", "Enable verbose logging", false).action(async (options) => {
+program.command("login").description("Authenticate with Cloudeval").option("--base-url <url>", "Backend base URL", DEFAULT_BASE_URL).option(
+  "--headless",
+  "Use device-code login flow (for SSH/headless terminals)",
+  false
+).option("-v, --verbose", "Enable verbose logging", false).action(async (options) => {
   if (options.verbose) {
     setVerbose(true);
     verboseLog("Login command started");
     verboseLog("Base URL:", options.baseUrl);
-    verboseLog("Environment CLOUDEVAL_BASE_URL:", process.env.CLOUDEVAL_BASE_URL);
+    verboseLog(
+      "Environment CLOUDEVAL_BASE_URL:",
+      process.env.CLOUDEVAL_BASE_URL
+    );
   }
   try {
     const {
@@ -16233,7 +16509,7 @@ program.command("login").description("Authenticate with Cloudeval").option(
       checkUserStatus,
       ensurePlaygroundProject,
       login
-    } = await import("./dist-QYIPN7MD.js");
+    } = await import("./dist-6LEMVXIY.js");
     assertSecureBaseUrl(options.baseUrl);
     const headlessEnvironment = isHeadlessEnvironment();
     const headlessLogin = options.headless || headlessEnvironment;
@@ -16252,7 +16528,9 @@ program.command("login").description("Authenticate with Cloudeval").option(
           stdoutIsTTY: process.stdout.isTTY
         });
         if (onboardingMode === "interactive_steps") {
-          console.log("Complete CLI onboarding to set up your Playground project.");
+          console.log(
+            "Complete CLI onboarding to set up your Playground project."
+          );
           await runInteractiveLoginOnboarding(options.baseUrl, token);
           console.log("\u2705 Onboarding complete. Playground project ready.");
         } else {
@@ -16271,19 +16549,17 @@ program.command("login").description("Authenticate with Cloudeval").option(
           console.log("\u2705 Playground project ready.");
         }
       } else {
-        await ensurePlaygroundProject(
-          options.baseUrl,
-          token,
-          {
-            id: userStatus.user.id,
-            email: userStatus.user.email,
-            full_name: userStatus.user.full_name,
-            name: userStatus.user.name
-          }
-        );
+        await ensurePlaygroundProject(options.baseUrl, token, {
+          id: userStatus.user.id,
+          email: userStatus.user.email,
+          full_name: userStatus.user.full_name,
+          name: userStatus.user.name
+        });
       }
     } else {
-      verboseLog("Skipping Playground setup because authenticated user details were unavailable");
+      verboseLog(
+        "Skipping Playground setup because authenticated user details were unavailable"
+      );
     }
     await getActiveCliTelemetry()?.track("cli.auth", {
       command: "login",
@@ -16302,13 +16578,9 @@ program.command("login").description("Authenticate with Cloudeval").option(
     await exitCli(1, error);
   }
 });
-program.command("logout").description("Log out and clear stored authentication state").option(
-  "--base-url <url>",
-  "Backend base URL",
-  DEFAULT_BASE_URL
-).option("--all-devices", "Revoke sessions on all devices", false).action(async (options) => {
+program.command("logout").description("Log out and clear stored authentication state").option("--base-url <url>", "Backend base URL", DEFAULT_BASE_URL).option("--all-devices", "Revoke sessions on all devices", false).action(async (options) => {
   try {
-    const { assertSecureBaseUrl, logout } = await import("./dist-QYIPN7MD.js");
+    const { assertSecureBaseUrl, logout } = await import("./dist-6LEMVXIY.js");
     assertSecureBaseUrl(options.baseUrl);
     const result = await logout({
       baseUrl: options.baseUrl,
@@ -16336,13 +16608,21 @@ program.command("logout").description("Log out and clear stored authentication s
   }
 });
 var authCommand = program.command("auth").description("Authentication utilities");
-authCommand.command("status").description("Show current authentication status").option(
-  "--base-url <url>",
-  "Backend base URL",
-  DEFAULT_BASE_URL
-).option("--format <format>", "Output format: text, json, ndjson, markdown", "text").option("--show-sensitive-ids", "Show full account/session identifiers in command output", false).option("-v, --verbose", "Enable verbose logging and show full non-token identifiers", false).action(async (options, command) => {
+authCommand.command("status").description("Show current authentication status").option("--base-url <url>", "Backend base URL", DEFAULT_BASE_URL).option(
+  "--format <format>",
+  "Output format: text, json, ndjson, markdown",
+  "text"
+).option(
+  "--show-sensitive-ids",
+  "Show full account/session identifiers in command output",
+  false
+).option(
+  "-v, --verbose",
+  "Enable verbose logging and show full non-token identifiers",
+  false
+).action(async (options, command) => {
   try {
-    const { assertSecureBaseUrl, getAuthStatus } = await import("./dist-QYIPN7MD.js");
+    const { assertSecureBaseUrl, getAuthStatus } = await import("./dist-6LEMVXIY.js");
     const effectiveBaseUrl = await resolveBaseUrl(options, command);
     assertSecureBaseUrl(effectiveBaseUrl);
     const status = await getAuthStatus(effectiveBaseUrl, { validate: true });
@@ -16391,7 +16671,9 @@ authCommand.command("status").description("Show current authentication status").
       success: false,
       errorCategory: classifyTelemetryError(error)
     });
-    console.error(`\u274C Failed to fetch auth status: ${error?.message || "Unknown error"}`);
+    console.error(
+      `\u274C Failed to fetch auth status: ${error?.message || "Unknown error"}`
+    );
     await exitCli(1, error);
   }
 });
@@ -16503,19 +16785,21 @@ registerMcpCommand(program, {
 registerUpdateCommand(program, { getTelemetry: getActiveCliTelemetry });
 registerUninstallCommand(program);
 var telemetryCommand = program.command("__telemetry", { hidden: true }).description("Internal telemetry utilities");
-telemetryCommand.command("install").description("Track a completed installer run").option("--installer-type <type>", "Installer type").option("--requested-version <version>", "Requested version").option("--resolved-version <version>", "Resolved version").option("--platform <platform>", "Target platform").option("--aliases <state>", "Alias setup state").option("--completions <state>", "Completion setup state").option("--mcp-setup <state>", "MCP setup state").option("--result <result>", "Installer result", "success").action(async (options) => {
-  await getActiveCliTelemetry()?.track("cli.install", {
-    installerType: enumLikeValue(options.installerType),
-    requestedVersion: versionLikeValue(options.requestedVersion),
-    resolvedVersion: versionLikeValue(options.resolvedVersion),
-    platform: enumLikeValue(options.platform),
-    aliases: enumLikeValue(options.aliases),
-    completions: enumLikeValue(options.completions),
-    mcpSetup: enumLikeValue(options.mcpSetup),
-    installerResult: enumLikeValue(options.result) ?? "success",
-    success: options.result !== "failure"
-  });
-});
+telemetryCommand.command("install").description("Track a completed installer run").option("--installer-type <type>", "Installer type").option("--requested-version <version>", "Requested version").option("--resolved-version <version>", "Resolved version").option("--platform <platform>", "Target platform").option("--aliases <state>", "Alias setup state").option("--completions <state>", "Completion setup state").option("--mcp-setup <state>", "MCP setup state").option("--result <result>", "Installer result", "success").action(
+  async (options) => {
+    await getActiveCliTelemetry()?.track("cli.install", {
+      installerType: enumLikeValue(options.installerType),
+      requestedVersion: versionLikeValue(options.requestedVersion),
+      resolvedVersion: versionLikeValue(options.resolvedVersion),
+      platform: enumLikeValue(options.platform),
+      aliases: enumLikeValue(options.aliases),
+      completions: enumLikeValue(options.completions),
+      mcpSetup: enumLikeValue(options.mcpSetup),
+      installerResult: enumLikeValue(options.result) ?? "success",
+      success: options.result !== "failure"
+    });
+  }
+);
 program.command("__complete").description("Internal completion endpoint").argument("[words...]", "Completion words").action((words = []) => {
   const candidates = completeCliWords(words);
   for (const candidate of candidates) {
@@ -16525,7 +16809,10 @@ program.command("__complete").description("Internal completion endpoint").argume
     );
   }
 });
-var completionCommand = program.command("completion").description("Print or install shell completion scripts").argument("[shell]", "Shell to generate completions for: bash, zsh, fish, powershell").option("--bin <name>", "Primary binary name", "cloudeval").action(async (shellName, options) => {
+var completionCommand = program.command("completion").description("Print or install shell completion scripts").argument(
+  "[shell]",
+  "Shell to generate completions for: bash, zsh, fish, powershell"
+).option("--bin <name>", "Primary binary name", "cloudeval").action(async (shellName, options) => {
   const detectedShell = process.env.SHELL?.split("/").pop();
   const shell = normalizeCompletionShell(shellName || detectedShell);
   if (!shell) {
@@ -16562,19 +16849,23 @@ completionCommand.command("uninstall").description("Remove installed shell compl
   process.stdout.write(`Removed ${shell} completion at ${scriptPath}
 `);
 });
-program.command("tui").description("Open the CloudEval Terminal UI").option(
-  "--base-url <url>",
-  "Backend base URL",
-  DEFAULT_BASE_URL
-).option("--tab <tab>", "Initial tab: chat, overview, reports, projects, connections, billing, options, help", "chat").option("--project <id>", "Initial project id").option("--frontend-url <url>", "Frontend base URL").option("--mode <mode>", "Initial chat mode: ask, agent").option(
+program.command("tui").description("Open the CloudEval Terminal UI").option("--base-url <url>", "Backend base URL", DEFAULT_BASE_URL).option(
+  "--tab <tab>",
+  "Initial tab: chat, overview, reports, projects, connections, billing, options, help",
+  "chat"
+).option("--project <id>", "Initial project id").option("--frontend-url <url>", "Frontend base URL").option("--mode <mode>", "Initial chat mode: ask, agent").option(
   "--access-key <key>",
   "Access key for automation",
   process.env.CLOUDEVAL_ACCESS_KEY
-).option("--access-key-stdin", "Read access key from stdin (recommended for automation)", false).option("--model <name>", "Model name").option("--debug", "Log raw chunks", false).option("--health-check", "Enable health check (disabled by default)").option("--no-banner", "Disable ASCII banner").option("--animate", "Enable TUI animations (default)").option("--no-anim", "Disable TUI animations").option("-v, --verbose", "Enable verbose logging", false).action(async (options, command) => {
-  const { assertSecureBaseUrl } = await import("./dist-QYIPN7MD.js");
+).option(
+  "--access-key-stdin",
+  "Read access key from stdin (recommended for automation)",
+  false
+).option("--model <name>", "Model name").option("--debug", "Log raw chunks", false).option("--health-check", "Enable health check (disabled by default)").option("--no-banner", "Disable ASCII banner").option("--animate", "Enable TUI animations (default)").option("--no-anim", "Disable TUI animations").option("-v, --verbose", "Enable verbose logging", false).action(async (options, command) => {
+  const { assertSecureBaseUrl } = await import("./dist-6LEMVXIY.js");
   const [{ render }, { App }] = await Promise.all([
     import("ink"),
-    import("./App-7FR4HVBO.js")
+    import("./App-FK5FKLOM.js")
   ]);
   const baseUrl = await resolveBaseUrl(options, command);
   assertSecureBaseUrl(baseUrl);
@@ -16620,19 +16911,22 @@ program.command("tui").description("Open the CloudEval Terminal UI").option(
   );
   await app.waitUntilExit();
 });
-program.command("chat").description("Start an interactive chat session").option(
-  "--base-url <url>",
-  "Backend base URL",
-  DEFAULT_BASE_URL
-).option(
+program.command("chat").description("Start an interactive chat session").option("--base-url <url>", "Backend base URL", DEFAULT_BASE_URL).option(
   "--access-key <key>",
   "Access key for automation",
   process.env.CLOUDEVAL_ACCESS_KEY
-).option("--access-key-stdin", "Read access key from stdin (recommended for automation)", false).option("--conversation <id>", "Conversation/thread id to resume").option("--continue", "Resume the most recent local chat session", false).option("--resume <id-or-title>", "Resume a local chat session by thread id or title").option("--model <name>", "Model name").option("--mode <mode>", "Initial chat mode: ask, agent").option("--debug", "Log raw chunks", false).option("--health-check", "Enable health check (disabled by default)").option("--no-banner", "Disable ASCII banner").option("--animate", "Enable TUI animations (default)").option("--no-anim", "Disable TUI animations").option("-v, --verbose", "Enable verbose logging", false).action(async (options, command) => {
-  const { assertSecureBaseUrl } = await import("./dist-QYIPN7MD.js");
+).option(
+  "--access-key-stdin",
+  "Read access key from stdin (recommended for automation)",
+  false
+).option("--conversation <id>", "Conversation/thread id to resume").option("--continue", "Resume the most recent local chat session", false).option(
+  "--resume <id-or-title>",
+  "Resume a local chat session by thread id or title"
+).option("--model <name>", "Model name").option("--mode <mode>", "Initial chat mode: ask, agent").option("--debug", "Log raw chunks", false).option("--health-check", "Enable health check (disabled by default)").option("--no-banner", "Disable ASCII banner").option("--animate", "Enable TUI animations (default)").option("--no-anim", "Disable TUI animations").option("-v, --verbose", "Enable verbose logging", false).action(async (options, command) => {
+  const { assertSecureBaseUrl } = await import("./dist-6LEMVXIY.js");
   const [{ render }, { App }] = await Promise.all([
     import("ink"),
-    import("./App-7FR4HVBO.js")
+    import("./App-FK5FKLOM.js")
   ]);
   const baseUrl = await resolveBaseUrl(options, command);
   assertSecureBaseUrl(baseUrl);
@@ -16695,19 +16989,27 @@ program.command("chat").description("Start an interactive chat session").option(
   );
   await app.waitUntilExit();
 });
-program.command("ask").alias("agent").description("Ask a single question or run an agent task (non-interactive)").argument("<question...>", "The question to ask").option(
-  "--base-url <url>",
-  "Backend base URL",
-  DEFAULT_BASE_URL
-).option(
+program.command("ask").alias("agent").description("Ask a single question or run an agent task (non-interactive)").argument("<question...>", "The question to ask").option("--base-url <url>", "Backend base URL", DEFAULT_BASE_URL).option(
   "--access-key <key>",
   "Access key for automation",
   process.env.CLOUDEVAL_ACCESS_KEY
-).option("--access-key-stdin", "Read access key from stdin (recommended for automation)", false).option("--project <id>", "Project ID to use").option("--model <name>", "Model name").option("--thread <id>", "Thread id to reuse").option("--output <file>", "Output file (default: stdout)").option("--format <format>", "Output format: text, json, ndjson, markdown", "text").option("--json", "Output as JSON").option("--progress <mode>", "Progress events: auto, stderr, ndjson, none", "auto").option("--quiet", "Suppress progress and warning messages", false).option("--no-color", "Disable colorized progress output").option("--open", "Open the frontend chat thread after completion", false).option("--print-url", "Print the frontend chat thread URL", false).option("--no-open", "Do not launch the browser when a URL is printed").option("--frontend-url <url>", "Frontend base URL").option("--non-interactive", "Disable prompts and browser login", false).option("--debug", "Log raw chunks", false).option("-v, --verbose", "Enable verbose logging", false).option("--no-hooks", "Disable local CLI hooks for this command").action(async (questionParts, options, command) => {
+).option(
+  "--access-key-stdin",
+  "Read access key from stdin (recommended for automation)",
+  false
+).option("--project <id>", "Project ID to use").option("--model <name>", "Model name").option("--thread <id>", "Thread id to reuse").option("--output <file>", "Output file (default: stdout)").option(
+  "--format <format>",
+  "Output format: text, json, ndjson, markdown",
+  "text"
+).option("--json", "Output as JSON").option(
+  "--progress <mode>",
+  "Progress events: auto, stderr, ndjson, none",
+  "auto"
+).option("--quiet", "Suppress progress and warning messages", false).option("--no-color", "Disable colorized progress output").option("--open", "Open the frontend chat thread after completion", false).option("--print-url", "Print the frontend chat thread URL", false).option("--no-open", "Do not launch the browser when a URL is printed").option("--frontend-url <url>", "Frontend base URL").option("--non-interactive", "Disable prompts and browser login", false).option("--debug", "Log raw chunks", false).option("-v, --verbose", "Enable verbose logging", false).option("--no-hooks", "Disable local CLI hooks for this command").action(async (questionParts, options, command) => {
   const question = Array.isArray(questionParts) ? questionParts.join(" ") : String(questionParts);
   const commandName = command.parent?.args?.[0] === "agent" ? "agent" : "ask";
   const selectedMode = commandName === "agent" ? "agent" : "ask";
-  const { assertSecureBaseUrl } = await import("./dist-QYIPN7MD.js");
+  const { assertSecureBaseUrl } = await import("./dist-6LEMVXIY.js");
   const baseUrl = await resolveBaseUrl(options, command);
   assertSecureBaseUrl(baseUrl);
   const selectedProfile = getActiveConfigProfile(command);
@@ -16748,7 +17050,7 @@ program.command("ask").alias("agent").description("Ask a single question or run
     const fs14 = await import("fs");
     const fsPromises = await import("fs/promises");
     const { randomUUID: randomUUID5 } = await import("crypto");
-    const core = await import("./dist-QYIPN7MD.js");
+    const core = await import("./dist-6LEMVXIY.js");
     const {
       streamChat,
       reduceChunk,
@@ -16801,10 +17103,12 @@ program.command("ask").alias("agent").description("Ask a single question or run
           verboseLog("No authentication available, initiating login flow");
           if (!options.quiet) {
             progressWriter.clear();
-            console.error("Authentication required. Starting login process...\n");
+            console.error(
+              "Authentication required. Starting login process...\n"
+            );
           }
           try {
-            const { login } = await import("./dist-QYIPN7MD.js");
+            const { login } = await import("./dist-6LEMVXIY.js");
             verboseLog("Calling interactive login", { baseUrl });
             token = await login(baseUrl, {
               headless: isHeadlessEnvironment()
@@ -16812,7 +17116,9 @@ program.command("ask").alias("agent").description("Ask a single question or run
             verboseLog("Login successful, proceeding with question");
             if (!options.quiet) {
               progressWriter.clear();
-              console.error("\nAuthentication successful. Proceeding with your question...\n");
+              console.error(
+                "\nAuthentication successful. Proceeding with your question...\n"
+              );
             }
           } catch (loginError) {
             verboseLog("Login failed:", {
@@ -16868,7 +17174,7 @@ program.command("ask").alias("agent").description("Ask a single question or run
         message: error.message
       });
     }
-    const { resolveAskProject } = await import("./resolveAskProject-CL25APSQ.js");
+    const { resolveAskProject } = await import("./resolveAskProject-XM4W4DON.js");
     let project;
     try {
       project = await resolveAskProject({
@@ -16906,15 +17212,21 @@ program.command("ask").alias("agent").description("Ask a single question or run
     const emittedProgressKeys = /* @__PURE__ */ new Set();
     if (options.debug) {
       console.error(`[${commandName}] Question: ${question}`);
-      console.error(`[${commandName}] Project: ${project.id} (${project.name})`);
+      console.error(
+        `[${commandName}] Project: ${project.id} (${project.name})`
+      );
       console.error(`[${commandName}] Thread ID: ${threadId}`);
     }
     if (streamTextOutput && options.output) {
-      fileOutputStream = fs14.createWriteStream(options.output, { encoding: "utf-8" });
+      fileOutputStream = fs14.createWriteStream(options.output, {
+        encoding: "utf-8"
+      });
       outputStream = fileOutputStream;
     }
     if (ndjsonOutput && options.output) {
-      ndjsonOutputStream = fs14.createWriteStream(options.output, { encoding: "utf-8" });
+      ndjsonOutputStream = fs14.createWriteStream(options.output, {
+        encoding: "utf-8"
+      });
     }
     const writeAskDataEvent = (event) => {
       const line = `${JSON.stringify(event)}
@@ -16942,12 +17254,9 @@ program.command("ask").alias("agent").description("Ask a single question or run
       if (!event) {
         return;
       }
-      const key = [
-        event.type,
-        event.step,
-        event.status,
-        event.message
-      ].join(":");
+      const key = [event.type, event.step, event.status, event.message].join(
+        ":"
+      );
       if (emittedProgressKeys.has(key)) {
         return;
       }
@@ -16972,7 +17281,7 @@ program.command("ask").alias("agent").description("Ask a single question or run
     });
     const logHeaders = {
       "Content-Type": "application/json",
-      "Accept": "text/event-stream"
+      Accept: "text/event-stream"
     };
     if (token) {
       logHeaders["Authorization"] = `Bearer [REDACTED]`;
@@ -17010,7 +17319,10 @@ program.command("ask").alias("agent").description("Ask a single question or run
               authToken: token,
               message: hitlResume ? "" : question,
               threadId,
-              user: { id: project.user_id ?? authenticatedUserId ?? "cli-user", name: userName },
+              user: {
+                id: project.user_id ?? authenticatedUserId ?? "cli-user",
+                name: userName
+              },
               project,
               settings: streamSettings,
               debug: options.debug,
@@ -17032,7 +17344,9 @@ program.command("ask").alias("agent").description("Ask a single question or run
                 });
               }
               chatState = reduceChunk(chatState, chunk);
-              writeChunkProgressEvent(progressEventFromChunk(chunk, { verbose: options.verbose }));
+              writeChunkProgressEvent(
+                progressEventFromChunk(chunk, { verbose: options.verbose })
+              );
               if (chunk.type === "hitl_request") {
                 pendingHitlRequest = chunk;
                 if (ndjsonOutput) {
@@ -17081,7 +17395,11 @@ program.command("ask").alias("agent").description("Ask a single question or run
                 if (jsonOutput) {
                   responseText = `Error: ${errorMsg}`;
                 } else if (ndjsonOutput) {
-                  writeAskDataEvent({ type: "error", error: { message: errorMsg }, threadId });
+                  writeAskDataEvent({
+                    type: "error",
+                    error: { message: errorMsg },
+                    threadId
+                  });
                 } else {
                   outputStream.write(`
 Error: ${errorMsg}
@@ -17094,7 +17412,9 @@ Error: ${errorMsg}
           } catch (error) {
             if (!providedAccessKey && !retriedAfterAuthRefresh && isExpiredDeviceTokenStreamError(error)) {
               retriedAfterAuthRefresh = true;
-              verboseLog("Stored device token expired during stream; refreshing and retrying once");
+              verboseLog(
+                "Stored device token expired during stream; refreshing and retrying once"
+              );
               progressWriter.write({
                 type: "auth",
                 step: "auth",
@@ -17124,7 +17444,11 @@ Error: ${errorMsg}
             questions
           };
           const message = "Human input required by CloudEval.";
-          const summary = summarizeHitlRequest({ questions, checkpointId, frontendUrl });
+          const summary = summarizeHitlRequest({
+            questions,
+            checkpointId,
+            frontendUrl
+          });
           if (jsonOutput) {
             const output = {
               ok: false,
@@ -17153,7 +17477,11 @@ Error: ${errorMsg}
               ok: false,
               command: commandName,
               error: { code: "HITL_REQUIRED", message },
-              data: { threadId: chatState.threadId, project: { id: project.id, name: project.name }, hitl },
+              data: {
+                threadId: chatState.threadId,
+                project: { id: project.id, name: project.name },
+                hitl
+              },
               frontendUrl
             });
             await closeOutputStream();
@@ -17185,7 +17513,11 @@ Error: ${errorMsg}
       if (jsonOutput) {
         responseText = `Error: ${errorMsg}`;
       } else if (ndjsonOutput) {
-        writeAskDataEvent({ type: "error", error: { message: errorMsg }, threadId });
+        writeAskDataEvent({
+          type: "error",
+          error: { message: errorMsg },
+          threadId
+        });
       } else {
         outputStream.write(`
 Error: ${errorMsg}
@@ -17386,7 +17718,7 @@ Error: ${errorMsg}
 program.command("banner").description("Preview the startup banner and terminal capabilities").action(async () => {
   const { render } = await import("ink");
   const BannerPreview = React.lazy(async () => ({
-    default: (await import("./Banner-WWNHRGQD.js")).Banner
+    default: (await import("./Banner-XDSXKCKM.js")).Banner
   }));
   render(
     /* @__PURE__ */ jsx(React.Suspense, { fallback: null, children: /* @__PURE__ */ jsx(BannerPreview, { disable: false }) })