@ganakailabs/cloudeval-cli 0.30.3 → 0.31.0

package/README.md

@@ -117,7 +117,31 @@ jobs:
             --non-interactive
 ```
 
-Public example: [passing baseline PR #6](https://github.com/ganakailabs/cloudeval-azure-arm-review-example/pull/6) in [`ganakailabs/cloudeval-azure-arm-review-example`](https://github.com/ganakailabs/cloudeval-azure-arm-review-example). Review comments show a merge-gate table, CloudEval report badges, a visible AI summary, a folded detailed AI reviewer note, a Well-Architected radar/table drilldown, and cost Mermaid charts.
+Public example: [passing baseline PR #6](https://github.com/ganakailabs/cloudeval-azure-arm-review-example/pull/6) in [`ganakailabs/cloudeval-azure-arm-review-example`](https://github.com/ganakailabs/cloudeval-azure-arm-review-example). Review comments show a merge-gate table, CloudEval report badges, a visible AI summary, a folded detailed AI reviewer note, a compact Well-Architected radar/table drilldown, and cost Mermaid charts grouped for quick scanning.
+
+To include a PDF in each review artifact bundle, opt in from `.cloudeval/config.yaml`:
+
+```yaml
+ci:
+  review:
+    outputs:
+      pdf:
+        enabled: true
+        report_type: all
+        verbosity: evidence
+        fail_on_error: false
+```
+
+When `cloudeval review --output <dir>` runs, the CLI writes `<dir>/review.pdf` alongside `review.json` and `review.md`. In GitHub Actions, `ganakailabs/cloudeval-action` uploads that file when `upload_artifacts: true`; PR comments keep both the CloudEval-hosted `PDF` badge and the GitHub `Artifacts` badge.
+
+Supported PDF output keys:
+
+| Key | Supported values | Default |
+| --- | --- | --- |
+| `enabled` | `true`, `false` | `false` |
+| `report_type` | `all`, `architecture`, `cost`, `unit_tests` | `all` |
+| `verbosity` | `brief`, `detailed`, `evidence` | `evidence` |
+| `fail_on_error` | `true`, `false` | `false` |
 
 ### MCP For Codex, Cursor, Claude, VS Code
 

package/dist/{App-SKVX7NAF.js → App-OHSI5XYX.js}

@@ -38,10 +38,10 @@ import {
 } from "./chunk-NXM4JEOB.js";
 import {
   Banner
-} from "./chunk-QB3BBKVH.js";
+} from "./chunk-PNA74AA5.js";
 import {
   CLI_VERSION
-} from "./chunk-FPZWMNAI.js";
+} from "./chunk-YZ4GRXIK.js";
 import {
   raisedButtonStyle,
   terminalTheme

package/dist/{Banner-CRBHEOTC.js → Banner-NKBFXQJ2.js}

@@ -3,8 +3,8 @@ import {
   bannerMetaColor,
   bannerSegmentColor,
   splitBannerLineSegments
-} from "./chunk-QB3BBKVH.js";
-import "./chunk-FPZWMNAI.js";
+} from "./chunk-PNA74AA5.js";
+import "./chunk-YZ4GRXIK.js";
 import "./chunk-ZDKRIOMB.js";
 export {
   Banner,

package/dist/{chunk-QB3BBKVH.js → chunk-PNA74AA5.js}

@@ -1,6 +1,6 @@
 import {
   CLI_VERSION
-} from "./chunk-FPZWMNAI.js";
+} from "./chunk-YZ4GRXIK.js";
 import {
   shouldUseColor,
   terminalTheme

package/dist/{chunk-FPZWMNAI.js → chunk-YZ4GRXIK.js}

@@ -1,5 +1,5 @@
 // src/version.ts
-var CLI_VERSION = "0.30.3";
+var CLI_VERSION = "0.31.0";
 
 export {
   CLI_VERSION

package/dist/cli.js

@@ -39,7 +39,7 @@ import {
 } from "./chunk-NXM4JEOB.js";
 import {
   CLI_VERSION
-} from "./chunk-FPZWMNAI.js";
+} from "./chunk-YZ4GRXIK.js";
 
 // src/runtime/prepareInk.ts
 import fs from "fs";
@@ -2717,6 +2717,94 @@ var readConfigText = async (cwd, options) => {
     return void 0;
   }
 };
+var findYamlBlock = (configText, pathKeys) => {
+  if (!configText) return void 0;
+  const lines = configText.split(/\r?\n/).map((raw) => ({
+    raw,
+    indent: raw.match(/^\s*/)?.[0].length ?? 0,
+    trimmed: raw.trim()
+  }));
+  let searchStart = 0;
+  let searchEnd = lines.length;
+  let parentIndent = -1;
+  for (const key of pathKeys) {
+    let found = -1;
+    for (let index = searchStart; index < searchEnd; index += 1) {
+      const line = lines[index];
+      if (line.trimmed === `${key}:` && line.indent > parentIndent) {
+        found = index;
+        break;
+      }
+    }
+    if (found === -1) {
+      return void 0;
+    }
+    const blockIndent = lines[found].indent;
+    let blockEnd = searchEnd;
+    for (let index = found + 1; index < searchEnd; index += 1) {
+      const line = lines[index];
+      if (line.trimmed && line.indent <= blockIndent) {
+        blockEnd = index;
+        break;
+      }
+    }
+    searchStart = found + 1;
+    searchEnd = blockEnd;
+    parentIndent = blockIndent;
+  }
+  return lines.slice(searchStart, searchEnd).map((line) => line.raw).join("\n");
+};
+var yamlScalarValue = (block, ...keys) => {
+  if (!block) return void 0;
+  for (const key of keys) {
+    const match = block.match(
+      new RegExp(`^\\s*${key}\\s*:\\s*["']?([^"'\\n#]+)["']?\\s*(?:#.*)?$`, "m")
+    );
+    if (match?.[1]?.trim()) {
+      return match[1].trim();
+    }
+  }
+  return void 0;
+};
+var yamlBooleanValue = (block, ...keys) => {
+  const value = yamlScalarValue(block, ...keys);
+  if (value === void 0) return void 0;
+  if (/^(true|yes|on|1)$/i.test(value)) return true;
+  if (/^(false|no|off|0)$/i.test(value)) return false;
+  return void 0;
+};
+var normalizeReviewPdfReportType = (value) => {
+  const normalized = String(value ?? "all").trim().toLowerCase().replace(/-/g, "_");
+  if (normalized === "cost") return "cost";
+  if (normalized === "waf" || normalized === "architecture") return "architecture";
+  if (normalized === "unit_tests" || normalized === "validation") return "unit_tests";
+  return "all";
+};
+var normalizeReviewPdfVerbosity = (value) => {
+  const normalized = String(value ?? "evidence").trim().toLowerCase();
+  if (normalized === "brief" || normalized === "short") return "brief";
+  if (normalized === "detailed") return "detailed";
+  if (normalized === "evidence" || normalized === "full" || normalized === "extended") {
+    return "evidence";
+  }
+  return "evidence";
+};
+var parseReviewPdfOutputConfig = (configText) => {
+  const block = findYamlBlock(configText, ["ci", "review", "outputs", "pdf"]);
+  if (!block) {
+    return void 0;
+  }
+  return {
+    enabled: yamlBooleanValue(block, "enabled") ?? false,
+    reportType: normalizeReviewPdfReportType(
+      yamlScalarValue(block, "report_type", "reportType", "type")
+    ),
+    verbosity: normalizeReviewPdfVerbosity(
+      yamlScalarValue(block, "verbosity", "pdf_verbosity", "pdfVerbosity")
+    ),
+    failOnError: yamlBooleanValue(block, "fail_on_error", "failOnError") ?? false
+  };
+};
 var parseGateConfig = (configText) => {
   if (!configText || !/^\s*ci\s*:/m.test(configText) || !/^\s*gates\s*:/m.test(configText)) {
     return void 0;
@@ -3397,6 +3485,28 @@ var mermaidAxisId = (label) => {
   const normalized = normalizeKey(label).replace(/[^a-z0-9_]/g, "_");
   return normalized || "pillar";
 };
+var compactMermaidAxisLabel = (label) => {
+  const compactLabels = {
+    security: "Security",
+    reliability: "Reliability",
+    cost_optimization: "Cost",
+    operational_excellence: "Ops",
+    performance_efficiency: "Performance"
+  };
+  const normalized = normalizeKey(label);
+  if (compactLabels[normalized]) {
+    return compactLabels[normalized];
+  }
+  const cleaned = label.trim().replace(/\s+/g, " ");
+  if (cleaned.length <= 16) {
+    return cleaned;
+  }
+  const words = cleaned.split(" ");
+  if (words.length > 1) {
+    return words.slice(0, 2).map((word) => word.length > 8 ? word.slice(0, 8) : word).join(" ");
+  }
+  return cleaned.slice(0, 16);
+};
 var wellArchitectedRadarLines = (pillars) => {
   const scored = pillars.map((pillar) => {
     const label = String(pillar.label ?? pillar.id ?? "Pillar");
@@ -3416,10 +3526,15 @@ var wellArchitectedRadarLines = (pillars) => {
     "```mermaid",
     "radar-beta",
     "  title Well-Architected posture",
-    `  axis ${scored.map((pillar) => `${pillar.id}["${mermaidLabel(pillar.label)}"]`).join(", ")}`,
+    `  axis ${scored.map(
+      (pillar) => `${pillar.id}["${mermaidLabel(compactMermaidAxisLabel(pillar.label))}"]`
+    ).join(", ")}`,
     `  curve current["Current"]{${scored.map((pillar) => trimNumber(pillar.score, 3)).join(", ")}}`,
+    "  showLegend false",
     "  max 100",
     "  min 0",
+    "  graticule polygon",
+    "  ticks 4",
     "```",
     "",
     "_If GitHub does not render Mermaid radar charts yet, use the table below as the fallback._"
@@ -3750,6 +3865,68 @@ var safeFetch = async (input) => {
     return void 0;
   }
 };
+var writeReviewPdfOutput = async ({
+  config,
+  outputDir,
+  baseUrl,
+  token,
+  projectId,
+  userId
+}) => {
+  if (!config) {
+    return void 0;
+  }
+  const base2 = {
+    enabled: config.enabled,
+    reportType: config.reportType,
+    verbosity: config.verbosity,
+    failOnError: config.failOnError
+  };
+  if (!config.enabled) {
+    return { ...base2, status: "skipped" };
+  }
+  if (!outputDir) {
+    return {
+      ...base2,
+      status: "skipped",
+      reason: "PDF output requires --output so the file can be attached as an artifact."
+    };
+  }
+  try {
+    const core = await import("./dist-6LEMVXIY.js");
+    const pdf = await core.downloadReportPdf({
+      baseUrl,
+      authToken: token,
+      projectId,
+      userId,
+      verbosity: config.verbosity,
+      reportType: config.reportType,
+      includeVisuals: true
+    });
+    if (!pdf.bytes.length) {
+      throw new Error("Backend returned an empty PDF.");
+    }
+    await fs2.mkdir(outputDir, { recursive: true });
+    const file = path2.join(outputDir, "review.pdf");
+    await fs2.writeFile(file, pdf.bytes);
+    return {
+      ...base2,
+      status: "written",
+      file,
+      bytes: pdf.bytes.length,
+      contentType: pdf.contentType,
+      backendFilename: pdf.filename,
+      reportStatus: pdf.status,
+      warningsCount: pdf.warningsCount ?? 0
+    };
+  } catch (error) {
+    return {
+      ...base2,
+      status: "failed",
+      error: error?.message ?? "PDF download failed."
+    };
+  }
+};
 var parsePositiveInteger = (value, flagName, fallback) => {
   if (value === void 0 || value === "") {
     return fallback;
@@ -4186,7 +4363,9 @@ var buildMarkdownSummary = (data) => {
       "",
       ...riskLines,
       "",
-      ...radarLines.length ? [...radarLines, ""] : [],
+      ...radarLines.length ? ["**Radar (compact labels)**", "", ...radarLines, ""] : [],
+      "**Scores**",
+      "",
       "| Pillar | Score | Rating |",
       "| --- | ---: | --- |",
       ...pillarLines,
@@ -4202,14 +4381,18 @@ var buildMarkdownSummary = (data) => {
       cost?.currency ?? data.gate?.cost?.estimatedSavings?.currency
     );
     if (impactLines.length) {
-      costLines.push(...impactLines);
+      costLines.push("**Cost impact**", "", ...impactLines);
     } else if (data.gate?.cost?.estimatedSavings?.amount !== void 0) {
       costLines.push(
+        "**Cost impact**",
+        "",
         `- Estimated savings: **${formatMonthlyMoney(data.gate.cost.estimatedSavings.amount, data.gate.cost.estimatedSavings.currency)}**`
       );
     }
     if (costPieRows.length) {
       costLines.push(
+        "",
+        "**Cost split**",
         "",
         "```mermaid",
         `pie title ${costPieTitle}`,
@@ -4435,10 +4618,27 @@ var registerReviewCommand = (program2, deps) => {
       } else {
         data.aiSummary = { enabled: false };
       }
-      const summaryMarkdown = buildMarkdownSummary(data);
       const filesWritten = [];
-      if (options.output) {
-        const outputDir = path2.resolve(options.output);
+      const outputDir = options.output ? path2.resolve(options.output) : void 0;
+      const pdfOutput = await writeReviewPdfOutput({
+        config: parseReviewPdfOutputConfig(configText),
+        outputDir,
+        baseUrl: context.baseUrl,
+        token: context.token,
+        projectId,
+        userId: scopedUserId
+      });
+      if (pdfOutput) {
+        data.outputs = {
+          ...asRecord(data.outputs),
+          pdf: pdfOutput
+        };
+        if (pdfOutput.status === "written" && typeof pdfOutput.file === "string") {
+          filesWritten.push(pdfOutput.file);
+        }
+      }
+      const summaryMarkdown = buildMarkdownSummary(data);
+      if (outputDir) {
         await fs2.mkdir(outputDir, { recursive: true });
         const jsonPath = path2.join(outputDir, "review.json");
         const markdownPath = path2.join(outputDir, "review.md");
@@ -4452,6 +4652,10 @@ var registerReviewCommand = (program2, deps) => {
         format: options.format,
         filesWritten
       });
+      if (pdfOutput?.status === "failed" && pdfOutput.failOnError === true) {
+        process.exitCode = 1;
+        return;
+      }
       if (data.gate.status === "fail") {
         process.exitCode = 1;
         return;
@@ -6953,6 +7157,13 @@ var generateWorkspaceConfig = (entry, parameters, sourceEntry) => {
     "#     fail_when_high_risk_findings_exist: true",
     "#     fail_when_validation_fails: true",
     "#     max_monthly_cost_usd: 500",
+    "#   review:",
+    "#     outputs:",
+    "#       pdf:",
+    "#         enabled: true",
+    "#         report_type: all",
+    "#         verbosity: evidence",
+    "#         fail_on_error: false",
     ""
   ].filter((line) => line.length > 0).join("\n");
 };
@@ -17181,7 +17392,7 @@ program.command("tui").description("Open the CloudEval Terminal UI").option("--b
   const { assertSecureBaseUrl } = await import("./dist-6LEMVXIY.js");
   const [{ render }, { App }] = await Promise.all([
     import("ink"),
-    import("./App-SKVX7NAF.js")
+    import("./App-OHSI5XYX.js")
   ]);
   const baseUrl = await resolveBaseUrl(options, command);
   assertSecureBaseUrl(baseUrl);
@@ -17242,7 +17453,7 @@ program.command("chat").description("Start an interactive chat session").option(
   const { assertSecureBaseUrl } = await import("./dist-6LEMVXIY.js");
   const [{ render }, { App }] = await Promise.all([
     import("ink"),
-    import("./App-SKVX7NAF.js")
+    import("./App-OHSI5XYX.js")
   ]);
   const baseUrl = await resolveBaseUrl(options, command);
   assertSecureBaseUrl(baseUrl);
@@ -18034,7 +18245,7 @@ Error: ${errorMsg}
 program.command("banner").description("Preview the startup banner and terminal capabilities").action(async () => {
   const { render } = await import("ink");
   const BannerPreview = React.lazy(async () => ({
-    default: (await import("./Banner-CRBHEOTC.js")).Banner
+    default: (await import("./Banner-NKBFXQJ2.js")).Banner
   }));
   render(
     /* @__PURE__ */ jsx(React.Suspense, { fallback: null, children: /* @__PURE__ */ jsx(BannerPreview, { disable: false }) })

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ganakailabs/cloudeval-cli",
-  "version": "0.30.3",
+  "version": "0.31.0",
   "license": "LicenseRef-CloudEval-CLI",
   "type": "module",
   "description": "Review Cloud infra-as-code and live environments from CLI, CI, and MCP agents.",

package/sbom.spdx.json

@@ -14,7 +14,7 @@
     {
       "SPDXID": "SPDXRef-Package-CloudEval-CLI",
       "name": "CloudEval CLI",
-      "versionInfo": "0.30.3",
+      "versionInfo": "0.31.0",
       "downloadLocation": "https://github.com/ganakailabs/cloudeval-cli",
       "filesAnalyzed": false,
       "licenseConcluded": "LicenseRef-CloudEval-CLI",