@neurcode-ai/cli 0.9.35 → 0.9.37

package/dist/commands/contract.js

@@ -0,0 +1,235 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.contractCommand = contractCommand;
+const fs_1 = require("fs");
+const path_1 = require("path");
+const api_client_1 = require("../api-client");
+const config_1 = require("../config");
+const project_root_1 = require("../utils/project-root");
+const state_1 = require("../utils/state");
+const policy_packs_1 = require("../utils/policy-packs");
+const policy_compiler_1 = require("../utils/policy-compiler");
+const change_contract_1 = require("../utils/change-contract");
+const artifact_signature_1 = require("../utils/artifact-signature");
+let chalk;
+try {
+    chalk = require('chalk');
+}
+catch {
+    chalk = {
+        green: (value) => value,
+        yellow: (value) => value,
+        red: (value) => value,
+        bold: (value) => value,
+        dim: (value) => value,
+        cyan: (value) => value,
+    };
+}
+function emitJson(payload) {
+    console.log(JSON.stringify(payload, null, 2));
+}
+function hasPersistedPlanId(planId) {
+    return typeof planId === 'string' && planId.trim().length > 0 && planId !== 'unknown';
+}
+async function readStdinText() {
+    return new Promise((resolvePromise, reject) => {
+        const chunks = [];
+        process.stdin.setEncoding('utf-8');
+        process.stdin.on('data', (chunk) => {
+            chunks.push(String(chunk));
+        });
+        process.stdin.on('error', reject);
+        process.stdin.on('end', () => {
+            resolvePromise(chunks.join(''));
+        });
+        process.stdin.resume();
+    });
+}
+function parseAsJsonIfPossible(raw) {
+    const trimmed = raw.trim();
+    if (!trimmed)
+        return null;
+    try {
+        return JSON.parse(trimmed);
+    }
+    catch {
+        return null;
+    }
+}
+async function resolveImportPayload(projectRoot, options) {
+    if (options.text && options.text.trim()) {
+        return {
+            source: 'inline',
+            planText: options.text.trim(),
+        };
+    }
+    if (options.input && options.input.trim()) {
+        const inputPath = (0, path_1.resolve)(projectRoot, options.input.trim());
+        if (!(0, fs_1.existsSync)(inputPath)) {
+            throw new Error(`Input file not found: ${inputPath}`);
+        }
+        const raw = (0, fs_1.readFileSync)(inputPath, 'utf-8');
+        const parsed = parseAsJsonIfPossible(raw);
+        if (parsed !== null) {
+            return {
+                source: 'file',
+                planJson: parsed,
+            };
+        }
+        return {
+            source: 'file',
+            planText: raw,
+        };
+    }
+    const shouldReadStdin = options.stdin === true || !process.stdin.isTTY;
+    if (shouldReadStdin) {
+        const raw = await readStdinText();
+        if (!raw.trim()) {
+            throw new Error('Stdin was empty. Provide plan text or JSON via stdin.');
+        }
+        const parsed = parseAsJsonIfPossible(raw);
+        if (parsed !== null) {
+            return {
+                source: 'stdin',
+                planJson: parsed,
+            };
+        }
+        return {
+            source: 'stdin',
+            planText: raw,
+        };
+    }
+    throw new Error('Provide one of --text, --input <path>, or --stdin to import an external plan.');
+}
+function contractCommand(program) {
+    const contract = program
+        .command('contract')
+        .description('Manage imported intent/change contracts from external AI planners');
+    contract
+        .command('import')
+        .description('Import an external AI-generated implementation plan and bind it to Neurcode verify flow')
+        .option('--provider <provider>', 'Plan source provider (claude | cursor | codex | chatgpt | generic)', 'generic')
+        .option('--project-id <id>', 'Project ID override')
+        .option('--intent <text>', 'Intent override for imported plan')
+        .option('--title <text>', 'Title override for imported plan')
+        .option('--input <path>', 'Read plan payload from file (JSON or markdown/text)')
+        .option('--text <payload>', 'Inline plan payload (JSON or plain text)')
+        .option('--stdin', 'Read plan payload from stdin')
+        .option('--no-write-change-contract', 'Skip writing .neurcode/change-contract.json')
+        .option('--json', 'Output machine-readable JSON')
+        .action(async (options) => {
+        const projectRoot = (0, project_root_1.resolveNeurcodeProjectRoot)(process.cwd());
+        const startedAt = Date.now();
+        try {
+            const config = (0, config_1.loadConfig)();
+            if (!config.apiKey) {
+                config.apiKey = (0, config_1.requireApiKey)();
+            }
+            const client = new api_client_1.ApiClient(config);
+            const payload = await resolveImportPayload(projectRoot, options);
+            const response = await client.importExternalPlan({
+                provider: options.provider,
+                projectId: options.projectId,
+                intent: options.intent,
+                title: options.title,
+                planText: payload.planText,
+                planJson: payload.planJson,
+            });
+            let changeContractPayload = null;
+            if (options.writeChangeContract !== false && hasPersistedPlanId(response.planId)) {
+                const expectedFiles = response.plan.files
+                    .filter((file) => file.action !== 'BLOCK')
+                    .map((file) => file.path);
+                const policyLock = (0, policy_packs_1.readPolicyLockFile)(projectRoot);
+                const compiledPolicy = (0, policy_compiler_1.readCompiledPolicyArtifact)(projectRoot);
+                const unsignedContract = (0, change_contract_1.createChangeContract)({
+                    planId: response.planId,
+                    sessionId: response.sessionId || null,
+                    projectId: options.projectId || null,
+                    intent: options.intent || response.plan.summary || 'imported-plan',
+                    expectedFiles,
+                    policyLockFingerprint: policyLock.lock?.effective.fingerprint || null,
+                    compiledPolicyFingerprint: compiledPolicy.artifact?.fingerprint || null,
+                });
+                const signedContract = (0, artifact_signature_1.signGovernanceArtifact)(unsignedContract, (0, artifact_signature_1.resolveGovernanceArtifactSigningConfigFromEnv)());
+                const contractPath = (0, change_contract_1.writeChangeContract)(projectRoot, signedContract);
+                changeContractPayload = {
+                    id: signedContract.contractId,
+                    path: contractPath,
+                };
+            }
+            if (hasPersistedPlanId(response.planId)) {
+                (0, state_1.setActivePlanId)(response.planId);
+                (0, state_1.setLastPlanGeneratedAt)(new Date().toISOString());
+            }
+            if (response.sessionId && typeof response.sessionId === 'string') {
+                (0, state_1.setSessionId)(response.sessionId);
+            }
+            if (options.json) {
+                emitJson({
+                    success: true,
+                    provider: response.provider,
+                    planId: response.planId,
+                    sessionId: response.sessionId || null,
+                    projectId: options.projectId || null,
+                    parseMode: response.parseMode,
+                    importedFiles: response.importedFiles,
+                    warnings: response.warnings || [],
+                    changeContract: changeContractPayload,
+                    message: response.message,
+                    timestamp: response.timestamp,
+                    plan: response.plan,
+                });
+                return;
+            }
+            console.log(chalk.bold.cyan('\n📥 Neurcode Contract Import\n'));
+            console.log(chalk.dim(`Provider: ${response.provider}`));
+            console.log(chalk.dim(`Parse mode: ${response.parseMode}`));
+            console.log(chalk.dim(`Imported files: ${response.importedFiles}`));
+            if (response.planId) {
+                console.log(chalk.green(`Plan ID: ${response.planId}`));
+            }
+            if (response.sessionId) {
+                console.log(chalk.dim(`Session ID: ${response.sessionId}`));
+            }
+            if (changeContractPayload) {
+                console.log(chalk.dim(`Change contract: ${changeContractPayload.path}`));
+            }
+            if ((response.warnings || []).length > 0) {
+                console.log(chalk.yellow('\nWarnings:'));
+                for (const warning of response.warnings) {
+                    console.log(chalk.yellow(`  • ${warning}`));
+                }
+            }
+            console.log(chalk.green(`\n✅ ${response.message}`));
+            console.log(chalk.dim(`Completed in ${Date.now() - startedAt}ms\n`));
+            console.log(chalk.dim('Next: run `neurcode verify --record --enforce-change-contract`'));
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : 'Unknown error';
+            if (options.json) {
+                emitJson({
+                    success: false,
+                    provider: options.provider || null,
+                    planId: null,
+                    sessionId: null,
+                    projectId: options.projectId || null,
+                    parseMode: null,
+                    importedFiles: 0,
+                    warnings: [],
+                    changeContract: null,
+                    message,
+                    timestamp: new Date().toISOString(),
+                });
+                process.exit(1);
+            }
+            console.error(chalk.red(`\n❌ Contract import failed: ${message}\n`));
+            console.log(chalk.dim('Provide one of: --text, --input <path>, or --stdin'));
+            console.log(chalk.dim('Examples:'));
+            console.log(chalk.dim('  neurcode contract import --provider claude --input ./plan.md'));
+            console.log(chalk.dim('  cat plan.json | neurcode contract import --provider cursor --stdin\n'));
+            process.exit(1);
+        }
+    });
+}
+//# sourceMappingURL=contract.js.map

package/dist/commands/contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.js","sourceRoot":"","sources":["../../src/commands/contract.ts"],"names":[],"mappings":";;AAmJA,0CA2IC;AA7RD,2BAA8C;AAC9C,+BAA+B;AAC/B,8CAA2E;AAC3E,sCAAsD;AACtD,wDAAmE;AACnE,0CAAuF;AACvF,wDAA2D;AAC3D,8DAAsE;AACtE,8DAAqF;AACrF,oEAGqC;AAErC,IAAI,KAAU,CAAC;AACf,IAAI,CAAC;IACH,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;AAC3B,CAAC;AAAC,MAAM,CAAC;IACP,KAAK,GAAG;QACN,KAAK,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK;QAC/B,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK;QAChC,GAAG,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK;QAC7B,IAAI,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK;QAC9B,GAAG,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK;QAC7B,IAAI,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK;KAC/B,CAAC;AACJ,CAAC;AAmCD,SAAS,QAAQ,CAAC,OAAiC;IACjD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAiC;IAC3D,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,KAAK,SAAS,CAAC;AACxF,CAAC;AAED,KAAK,UAAU,aAAa;IAC1B,OAAO,IAAI,OAAO,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,EAAE;QAC5C,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACnC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YACjC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAClC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YAC3B,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAW;IACxC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,WAAmB,EACnB,OAA8B;IAE9B,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QACxC,OAAO;YACL,MAAM,EAAE,QAAQ;YAChB,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE;SAC9B,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAC1C,MAAM,SAAS,GAAG,IAAA,cAAO,EAAC,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,IAAA,eAAU,EAAC,SAAS,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,yBAAyB,SAAS,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,GAAG,GAAG,IAAA,iBAAY,EAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO;gBACL,MAAM,EAAE,MAAM;gBACd,QAAQ,EAAE,MAAM;aACjB,CAAC;QACJ,CAAC;QACD,OAAO;YACL,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,GAAG;SACd,CAAC;IACJ,CAAC;IAED,MAAM,eAAe,GAAG,OAAO,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;IACvE,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,GAAG,GAAG,MAAM,aAAa,EAAE,CAAC;QAClC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO;gBACL,MAAM,EAAE,OAAO;gBACf,QAAQ,EAAE,MAAM;aACjB,CAAC;QACJ,CAAC;QACD,OAAO;YACL,MAAM,EAAE,OAAO;YACf,QAAQ,EAAE,GAAG;SACd,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,+EAA+E,CAAC,CAAC;AACnG,CAAC;AAED,SAAgB,eAAe,CAAC,OAAgB;IAC9C,MAAM,QAAQ,GAAG,OAAO;SACrB,OAAO,CAAC,UAAU,CAAC;SACnB,WAAW,CAAC,mEAAmE,CAAC,CAAC;IAEpF,QAAQ;SACL,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,yFAAyF,CAAC;SACtG,MAAM,CAAC,uBAAuB,EAAE,oEAAoE,EAAE,SAAS,CAAC;SAChH,MAAM,CAAC,mBAAmB,EAAE,qBAAqB,CAAC;SAClD,MAAM,CAAC,iBAAiB,EAAE,mCAAmC,CAAC;SAC9D,MAAM,CAAC,gBAAgB,EAAE,kCAAkC,CAAC;SAC5D,MAAM,CAAC,gBAAgB,EAAE,qDAAqD,CAAC;SAC/E,MAAM,CAAC,kBAAkB,EAAE,0CAA0C,CAAC;SACtE,MAAM,CAAC,SAAS,EAAE,8BAA8B,CAAC;SACjD,MAAM,CAAC,4BAA4B,EAAE,6CAA6C,CAAC;SACnF,MAAM,CAAC,QAAQ,EAAE,8BAA8B,CAAC;SAChD,MAAM,CAAC,KAAK,EAAE,OAA8B,EAAE,EAAE;QAC/C,MAAM,WAAW,GAAG,IAAA,yCAA0B,EAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAC9D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAA,mBAAU,GAAE,CAAC;YAC5B,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gBACnB,MAAM,CAAC,MAAM,GAAG,IAAA,sBAAa,GAAE,CAAC;YAClC,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,sBAAS,CAAC,MAAM,CAAC,CAAC;YAErC,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YACjE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC;gBAC/C,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;aAC3B,CAAC,CAAC;YAEH,IAAI,qBAAqB,GAAwC,IAAI,CAAC;YACtE,IAAI,OAAO,CAAC,mBAAmB,KAAK,KAAK,IAAI,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjF,MAAM,aAAa,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK;qBACtC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC;qBACzC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC5B,MAAM,UAAU,GAAG,IAAA,iCAAkB,EAAC,WAAW,CAAC,CAAC;gBACnD,MAAM,cAAc,GAAG,IAAA,4CAA0B,EAAC,WAAW,CAAC,CAAC;gBAC/D,MAAM,gBAAgB,GAAG,IAAA,sCAAoB,EAAC;oBAC5C,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,SAAS,EAAE,QAAQ,CAAC,SAAS,IAAI,IAAI;oBACrC,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;oBACpC,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,IAAI,eAAe;oBAClE,aAAa;oBACb,qBAAqB,EAAE,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,WAAW,IAAI,IAAI;oBACrE,yBAAyB,EAAE,cAAc,CAAC,QAAQ,EAAE,WAAW,IAAI,IAAI;iBACxE,CAAC,CAAC;gBACH,MAAM,cAAc,GAAG,IAAA,2CAAsB,EAC3C,gBAAgB,EAChB,IAAA,kEAA6C,GAAE,CAChD,CAAC;gBACF,MAAM,YAAY,GAAG,IAAA,qCAAmB,EAAC,WAAW,EAAE,cAAc,CAAC,CAAC;gBACtE,qBAAqB,GAAG;oBACtB,EAAE,EAAE,cAAc,CAAC,UAAU;oBAC7B,IAAI,EAAE,YAAY;iBACnB,CAAC;YACJ,CAAC;YAED,IAAI,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACxC,IAAA,uBAAe,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACjC,IAAA,8BAAsB,EAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;YACnD,CAAC;YACD,IAAI,QAAQ,CAAC,SAAS,IAAI,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;gBACjE,IAAA,oBAAY,EAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YACnC,CAAC;YAED,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,QAAQ,CAAC;oBACP,OAAO,EAAE,IAAI;oBACb,QAAQ,EAAE,QAAQ,CAAC,QAAQ;oBAC3B,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,SAAS,EAAE,QAAQ,CAAC,SAAS,IAAI,IAAI;oBACrC,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;oBACpC,SAAS,EAAE,QAAQ,CAAC,SAAS;oBAC7B,aAAa,EAAE,QAAQ,CAAC,aAAa;oBACrC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,EAAE;oBACjC,cAAc,EAAE,qBAAqB;oBACrC,OAAO,EAAE,QAAQ,CAAC,OAAO;oBACzB,SAAS,EAAE,QAAQ,CAAC,SAAS;oBAC7B,IAAI,EAAE,QAAQ,CAAC,IAAI;iBACpB,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC,CAAC;YAChE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;YACzD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;YAC5D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,mBAAmB,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;YACpE,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACpB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAC1D,CAAC;YACD,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;gBACvB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;YAC9D,CAAC;YACD,IAAI,qBAAqB,EAAE,CAAC;gBAC1B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,qBAAqB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAC3E,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC;gBACzC,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;oBACxC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,OAAO,EAAE,CAAC,CAAC,CAAC;gBAC9C,CAAC;YACH,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACpD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,MAAM,CAAC,CAAC,CAAC;YACrE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,gEAAgE,CAAC,CAAC,CAAC;QAC3F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACzE,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,QAAQ,CAAC;oBACP,OAAO,EAAE,KAAK;oBACd,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,IAAI;oBAClC,MAAM,EAAE,IAAI;oBACZ,SAAS,EAAE,IAAI;oBACf,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;oBACpC,SAAS,EAAE,IAAI;oBACf,aAAa,EAAE,CAAC;oBAChB,QAAQ,EAAE,EAAE;oBACZ,cAAc,EAAE,IAAI;oBACpB,OAAO;oBACP,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACpC,CAAC,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YAED,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,+BAA+B,OAAO,IAAI,CAAC,CAAC,CAAC;YACrE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC,CAAC;YAC7E,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,gEAAgE,CAAC,CAAC,CAAC;YACzF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,wEAAwE,CAAC,CAAC,CAAC;YACjG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/feedback.d.ts

@@ -0,0 +1,3 @@
+import { Command } from 'commander';
+export declare function feedbackCommand(program: Command): void;
+//# sourceMappingURL=feedback.d.ts.map

package/dist/commands/feedback.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"feedback.d.ts","sourceRoot":"","sources":["../../src/commands/feedback.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA8DpC,wBAAgB,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA8JtD"}

package/dist/commands/feedback.js

@@ -0,0 +1,208 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.feedbackCommand = feedbackCommand;
+const api_client_1 = require("../api-client");
+const config_1 = require("../config");
+let chalk;
+try {
+    chalk = require('chalk');
+}
+catch {
+    chalk = {
+        green: (value) => value,
+        yellow: (value) => value,
+        red: (value) => value,
+        bold: (value) => value,
+        dim: (value) => value,
+        cyan: (value) => value,
+    };
+}
+function normalizeFeedbackType(value) {
+    if (!value)
+        return null;
+    const normalized = value.trim().toLowerCase();
+    if (normalized === 'false_positive'
+        || normalized === 'false_negative'
+        || normalized === 'true_positive'
+        || normalized === 'accepted_risk') {
+        return normalized;
+    }
+    return null;
+}
+function normalizeReviewDecision(value) {
+    if (!value)
+        return null;
+    const normalized = value.trim().toLowerCase();
+    if (normalized === 'approved' || normalized === 'rejected') {
+        return normalized;
+    }
+    return null;
+}
+function normalizeReviewStatus(value) {
+    if (!value)
+        return null;
+    const normalized = value.trim().toLowerCase();
+    if (normalized === 'pending' || normalized === 'approved' || normalized === 'rejected') {
+        return normalized;
+    }
+    return null;
+}
+function createClient() {
+    const config = (0, config_1.loadConfig)();
+    if (!config.apiKey) {
+        config.apiKey = (0, config_1.requireApiKey)();
+    }
+    return new api_client_1.ApiClient(config);
+}
+function feedbackCommand(program) {
+    const feedback = program
+        .command('feedback')
+        .description('Submit and review verification finding feedback (FP/FN governance loop)');
+    feedback
+        .command('submit')
+        .description('Submit feedback for a verification finding')
+        .argument('<verification-id>', 'Verification ID from action verifications')
+        .requiredOption('--type <feedback-type>', 'false_positive | false_negative | true_positive | accepted_risk')
+        .requiredOption('--reason <text>', 'Reason for feedback (what was wrong/right)')
+        .option('--finding-key <key>', 'Optional deterministic finding key')
+        .option('--rule <rule>', 'Rule identifier')
+        .option('--file <path>', 'File path for this finding')
+        .option('--severity <level>', 'Severity label')
+        .option('--suggested-adjustment <text>', 'Suggested policy/rule adjustment')
+        .option('--json', 'Output machine-readable JSON')
+        .action(async (verificationId, options) => {
+        try {
+            const feedbackType = normalizeFeedbackType(options.type);
+            const reason = typeof options.reason === 'string' ? options.reason.trim() : '';
+            if (!feedbackType) {
+                throw new Error('Invalid --type. Use: false_positive, false_negative, true_positive, accepted_risk');
+            }
+            if (!reason || reason.length < 8) {
+                throw new Error('reason must be at least 8 characters');
+            }
+            const client = createClient();
+            const created = await client.submitVerificationFeedback(verificationId, {
+                feedbackType,
+                reason,
+                findingKey: typeof options.findingKey === 'string' ? options.findingKey : undefined,
+                rule: typeof options.rule === 'string' ? options.rule : undefined,
+                filePath: typeof options.file === 'string' ? options.file : undefined,
+                severity: typeof options.severity === 'string' ? options.severity : undefined,
+                suggestedAdjustment: typeof options.suggestedAdjustment === 'string' ? options.suggestedAdjustment : undefined,
+            });
+            if (options.json === true) {
+                console.log(JSON.stringify({ success: true, feedback: created }, null, 2));
+                return;
+            }
+            console.log(chalk.bold.cyan('\n🧾 Feedback Submitted\n'));
+            console.log(chalk.green(`ID: ${created.id}`));
+            console.log(chalk.dim(`Type: ${created.feedbackType}`));
+            console.log(chalk.dim(`Review status: ${created.reviewStatus}`));
+            console.log(chalk.dim(`Created at: ${new Date(created.createdAt).toLocaleString()}\n`));
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : 'Unknown error';
+            if (options.json === true) {
+                console.log(JSON.stringify({ success: false, message }, null, 2));
+            }
+            else {
+                console.error(chalk.red(`\n❌ Feedback submit failed: ${message}\n`));
+            }
+            process.exit(1);
+        }
+    });
+    feedback
+        .command('list')
+        .description('List submitted feedback for a verification')
+        .argument('<verification-id>', 'Verification ID from action verifications')
+        .option('--status <status>', 'pending | approved | rejected')
+        .option('--limit <n>', 'Maximum feedback rows (default: 100)', (value) => parseInt(value, 10))
+        .option('--json', 'Output machine-readable JSON')
+        .action(async (verificationId, options) => {
+        try {
+            const reviewStatus = normalizeReviewStatus(options.status);
+            if (options.status && !reviewStatus) {
+                throw new Error('Invalid --status. Use: pending, approved, rejected');
+            }
+            const client = createClient();
+            const rows = await client.listVerificationFeedback(verificationId, {
+                reviewStatus: reviewStatus || undefined,
+                limit: Number.isFinite(options.limit) ? options.limit : undefined,
+            });
+            if (options.json === true) {
+                console.log(JSON.stringify({ success: true, count: rows.length, feedback: rows }, null, 2));
+                return;
+            }
+            console.log(chalk.bold.cyan('\n🧾 Verification Feedback\n'));
+            if (rows.length === 0) {
+                console.log(chalk.yellow('No feedback entries found for this verification.\n'));
+                return;
+            }
+            for (const row of rows) {
+                console.log(chalk.white(`• ${row.id}`));
+                console.log(chalk.dim(`  Type: ${row.feedbackType} | Status: ${row.reviewStatus}`));
+                if (row.rule)
+                    console.log(chalk.dim(`  Rule: ${row.rule}`));
+                if (row.filePath)
+                    console.log(chalk.dim(`  File: ${row.filePath}`));
+                console.log(chalk.dim(`  Reason: ${row.reason}`));
+                console.log(chalk.dim(`  Submitted: ${new Date(row.createdAt).toLocaleString()}`));
+                if (row.reviewedAt) {
+                    console.log(chalk.dim(`  Reviewed: ${new Date(row.reviewedAt).toLocaleString()}`));
+                }
+                console.log('');
+            }
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : 'Unknown error';
+            if (options.json === true) {
+                console.log(JSON.stringify({ success: false, message }, null, 2));
+            }
+            else {
+                console.error(chalk.red(`\n❌ Feedback list failed: ${message}\n`));
+            }
+            process.exit(1);
+        }
+    });
+    feedback
+        .command('review')
+        .description('Admin/owner review decision on submitted feedback')
+        .argument('<verification-id>', 'Verification ID from action verifications')
+        .argument('<feedback-id>', 'Feedback entry ID')
+        .requiredOption('--decision <decision>', 'approved | rejected')
+        .option('--note <text>', 'Optional review note')
+        .option('--json', 'Output machine-readable JSON')
+        .action(async (verificationId, feedbackId, options) => {
+        try {
+            const decision = normalizeReviewDecision(options.decision);
+            if (!decision) {
+                throw new Error('Invalid --decision. Use: approved or rejected');
+            }
+            const client = createClient();
+            const reviewed = await client.reviewVerificationFeedback(verificationId, feedbackId, {
+                decision,
+                reviewNote: typeof options.note === 'string' ? options.note : undefined,
+            });
+            if (options.json === true) {
+                console.log(JSON.stringify({ success: true, feedback: reviewed }, null, 2));
+                return;
+            }
+            console.log(chalk.bold.cyan('\n✅ Feedback Reviewed\n'));
+            console.log(chalk.green(`ID: ${reviewed.id}`));
+            console.log(chalk.dim(`Decision: ${reviewed.reviewStatus}`));
+            console.log(chalk.dim(`Reviewer: ${reviewed.reviewerUserId || 'n/a'}`));
+            console.log(chalk.dim(`Reviewed at: ${reviewed.reviewedAt ? new Date(reviewed.reviewedAt).toLocaleString() : 'n/a'}\n`));
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : 'Unknown error';
+            if (options.json === true) {
+                console.log(JSON.stringify({ success: false, message }, null, 2));
+            }
+            else {
+                console.error(chalk.red(`\n❌ Feedback review failed: ${message}\n`));
+            }
+            process.exit(1);
+        }
+    });
+}
+//# sourceMappingURL=feedback.js.map

package/dist/commands/feedback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feedback.js","sourceRoot":"","sources":["../../src/commands/feedback.ts"],"names":[],"mappings":";;AA8DA,0CA8JC;AA3ND,8CAA0C;AAC1C,sCAAsD;AAEtD,IAAI,KAAU,CAAC;AACf,IAAI,CAAC;IACH,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;AAC3B,CAAC;AAAC,MAAM,CAAC;IACP,KAAK,GAAG;QACN,KAAK,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK;QAC/B,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK;QAChC,GAAG,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK;QAC7B,IAAI,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK;QAC9B,GAAG,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK;QAC7B,IAAI,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK;KAC/B,CAAC;AACJ,CAAC;AAMD,SAAS,qBAAqB,CAAC,KAAyB;IACtD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,IACE,UAAU,KAAK,gBAAgB;WAC5B,UAAU,KAAK,gBAAgB;WAC/B,UAAU,KAAK,eAAe;WAC9B,UAAU,KAAK,eAAe,EACjC,CAAC;QACD,OAAO,UAA0B,CAAC;IACpC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAyB;IACxD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,IAAI,UAAU,KAAK,UAAU,IAAI,UAAU,KAAK,UAAU,EAAE,CAAC;QAC3D,OAAO,UAA4B,CAAC;IACtC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAyB;IACtD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,UAAU,IAAI,UAAU,KAAK,UAAU,EAAE,CAAC;QACvF,OAAO,UAA0B,CAAC;IACpC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY;IACnB,MAAM,MAAM,GAAG,IAAA,mBAAU,GAAE,CAAC;IAC5B,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,CAAC,MAAM,GAAG,IAAA,sBAAa,GAAE,CAAC;IAClC,CAAC;IACD,OAAO,IAAI,sBAAS,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,SAAgB,eAAe,CAAC,OAAgB;IAC9C,MAAM,QAAQ,GAAG,OAAO;SACrB,OAAO,CAAC,UAAU,CAAC;SACnB,WAAW,CAAC,yEAAyE,CAAC,CAAC;IAE1F,QAAQ;SACL,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,4CAA4C,CAAC;SACzD,QAAQ,CAAC,mBAAmB,EAAE,2CAA2C,CAAC;SAC1E,cAAc,CACb,wBAAwB,EACxB,iEAAiE,CAClE;SACA,cAAc,CAAC,iBAAiB,EAAE,4CAA4C,CAAC;SAC/E,MAAM,CAAC,qBAAqB,EAAE,oCAAoC,CAAC;SACnE,MAAM,CAAC,eAAe,EAAE,iBAAiB,CAAC;SAC1C,MAAM,CAAC,eAAe,EAAE,4BAA4B,CAAC;SACrD,MAAM,CAAC,oBAAoB,EAAE,gBAAgB,CAAC;SAC9C,MAAM,CAAC,+BAA+B,EAAE,kCAAkC,CAAC;SAC3E,MAAM,CAAC,QAAQ,EAAE,8BAA8B,CAAC;SAChD,MAAM,CAAC,KAAK,EAAE,cAAsB,EAAE,OAAgC,EAAE,EAAE;QACzE,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,qBAAqB,CAAC,OAAO,CAAC,IAA0B,CAAC,CAAC;YAC/E,MAAM,MAAM,GAAG,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/E,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,MAAM,IAAI,KAAK,CAAC,mFAAmF,CAAC,CAAC;YACvG,CAAC;YACD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAC1D,CAAC;YAED,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,cAAc,EAAE;gBACtE,YAAY;gBACZ,MAAM;gBACN,UAAU,EAAE,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;gBACnF,IAAI,EAAE,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;gBACjE,QAAQ,EAAE,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;gBACrE,QAAQ,EAAE,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;gBAC7E,mBAAmB,EACjB,OAAO,OAAO,CAAC,mBAAmB,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS;aAC5F,CAAC,CAAC;YAEH,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;gBAC1B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC3E,OAAO;YACT,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,CAAC;YAC1D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAC9C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;YACxD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,kBAAkB,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;YACjE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC;QAC1F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACzE,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;gBAC1B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACpE,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,+BAA+B,OAAO,IAAI,CAAC,CAAC,CAAC;YACvE,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,QAAQ;SACL,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,4CAA4C,CAAC;SACzD,QAAQ,CAAC,mBAAmB,EAAE,2CAA2C,CAAC;SAC1E,MAAM,CAAC,mBAAmB,EAAE,+BAA+B,CAAC;SAC5D,MAAM,CAAC,aAAa,EAAE,sCAAsC,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;SAC7F,MAAM,CAAC,QAAQ,EAAE,8BAA8B,CAAC;SAChD,MAAM,CAAC,KAAK,EAAE,cAAsB,EAAE,OAAgC,EAAE,EAAE;QACzE,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,qBAAqB,CAAC,OAAO,CAAC,MAA4B,CAAC,CAAC;YACjF,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;gBACpC,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;YACxE,CAAC;YAED,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,cAAc,EAAE;gBACjE,YAAY,EAAE,YAAY,IAAI,SAAS;gBACvC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAe,CAAC,CAAC,CAAC,CAAE,OAAO,CAAC,KAAgB,CAAC,CAAC,CAAC,SAAS;aACxF,CAAC,CAAC;YAEH,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;gBAC1B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC5F,OAAO;YACT,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC,CAAC;YAC7D,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,oDAAoD,CAAC,CAAC,CAAC;gBAChF,OAAO;YACT,CAAC;YACD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;gBACxC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,GAAG,CAAC,YAAY,cAAc,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;gBACpF,IAAI,GAAG,CAAC,IAAI;oBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;gBAC5D,IAAI,GAAG,CAAC,QAAQ;oBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;gBACpE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;gBAClD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC;gBACnF,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;oBACnB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC;gBACrF,CAAC;gBACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACzE,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;gBAC1B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACpE,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,6BAA6B,OAAO,IAAI,CAAC,CAAC,CAAC;YACrE,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,QAAQ;SACL,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,mDAAmD,CAAC;SAChE,QAAQ,CAAC,mBAAmB,EAAE,2CAA2C,CAAC;SAC1E,QAAQ,CAAC,eAAe,EAAE,mBAAmB,CAAC;SAC9C,cAAc,CAAC,uBAAuB,EAAE,qBAAqB,CAAC;SAC9D,MAAM,CAAC,eAAe,EAAE,sBAAsB,CAAC;SAC/C,MAAM,CAAC,QAAQ,EAAE,8BAA8B,CAAC;SAChD,MAAM,CAAC,KAAK,EAAE,cAAsB,EAAE,UAAkB,EAAE,OAAgC,EAAE,EAAE;QAC7F,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,uBAAuB,CAAC,OAAO,CAAC,QAA8B,CAAC,CAAC;YACjF,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;YACnE,CAAC;YAED,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;YAC9B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,cAAc,EAAE,UAAU,EAAE;gBACnF,QAAQ;gBACR,UAAU,EAAE,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;aACxE,CAAC,CAAC;YAEH,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;gBAC1B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC5E,OAAO;YACT,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC;YACxD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;YAC7D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,QAAQ,CAAC,cAAc,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC;YACxE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;QAC3H,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACzE,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;gBAC1B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACpE,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,+BAA+B,OAAO,IAAI,CAAC,CAAC,CAAC;YACvE,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/plan.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plan.d.ts","sourceRoot":"","sources":["../../src/commands/plan.ts"],"names":[],"mappings":"AAoEA,UAAU,WAAW;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,KAAK,CAAC;IACvC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AA6kBD,MAAM,MAAM,UAAU,GAAG,gBAAgB,GAAG,UAAU,CAAC;AAEvD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAwB3D;AA0cD,wBAAsB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,iBAglDrE"}
+{"version":3,"file":"plan.d.ts","sourceRoot":"","sources":["../../src/commands/plan.ts"],"names":[],"mappings":"AAwEA,UAAU,WAAW;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,KAAK,CAAC;IACvC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AA6kBD,MAAM,MAAM,UAAU,GAAG,gBAAgB,GAAG,UAAU,CAAC;AAEvD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAwB3D;AA8cD,wBAAsB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,iBAimDrE"}

package/dist/commands/plan.js

@@ -54,6 +54,7 @@ const plan_slo_1 = require("../utils/plan-slo");
 const change_contract_1 = require("../utils/change-contract");
 const policy_packs_1 = require("../utils/policy-packs");
 const policy_compiler_1 = require("../utils/policy-compiler");
+const artifact_signature_1 = require("../utils/artifact-signature");
 // Import chalk with fallback for plain strings if not available
 let chalk;
 try {
@@ -820,7 +821,7 @@ function emitPlanJson(payload) {
     const merged = activePlanScopeTelemetry
         ? { ...payload, scope: activePlanScopeTelemetry }
         : payload;
-    console.log(JSON.stringify(merged, null, 2));
+    process.stdout.write(`${JSON.stringify(merged, null, 2)}\n`);
 }
 function emitCachedPlanHit(input) {
     if (input.touchKey) {
@@ -847,7 +848,7 @@ function emitCachedPlanHit(input) {
                 .map((file) => file.path);
             const lockRead = (0, policy_packs_1.readPolicyLockFile)(input.cwd);
             const compiledPolicyRead = (0, policy_compiler_1.readCompiledPolicyArtifact)(input.cwd);
-            const changeContract = (0, change_contract_1.createChangeContract)({
+            const unsignedChangeContract = (0, change_contract_1.createChangeContract)({
                 planId: input.response.planId,
                 sessionId: input.response.sessionId || null,
                 projectId: input.projectId || null,
@@ -856,6 +857,7 @@ function emitCachedPlanHit(input) {
                 policyLockFingerprint: lockRead.lock?.effective.fingerprint || null,
                 compiledPolicyFingerprint: compiledPolicyRead.artifact?.fingerprint || null,
             });
+            const changeContract = (0, artifact_signature_1.signGovernanceArtifact)(unsignedChangeContract, (0, artifact_signature_1.resolveGovernanceArtifactSigningConfigFromEnv)());
             const contractPath = (0, change_contract_1.writeChangeContract)(input.cwd, changeContract);
             changeContractPayload = {
                 id: changeContract.contractId,
@@ -919,6 +921,13 @@ function emitCachedPlanHit(input) {
     return persistedPlan;
 }
 async function planCommand(intent, options) {
+    const suppressHumanLogs = options.json === true;
+    const originalConsoleLog = console.log;
+    const originalConsoleWarn = console.warn;
+    if (suppressHumanLogs) {
+        console.log = (() => undefined);
+        console.warn = (() => undefined);
+    }
     const planStartedAtMs = Date.now();
     let planRootForSlo = (0, path_1.resolve)(process.cwd());
     try {
@@ -2269,7 +2278,7 @@ async function planCommand(intent, options) {
                     .map((file) => file.path);
                 const lockRead = (0, policy_packs_1.readPolicyLockFile)(cwd);
                 const compiledPolicyRead = (0, policy_compiler_1.readCompiledPolicyArtifact)(cwd);
-                const changeContract = (0, change_contract_1.createChangeContract)({
+                const unsignedChangeContract = (0, change_contract_1.createChangeContract)({
                     planId: response.planId,
                     sessionId: response.sessionId || null,
                     projectId: finalProjectId || null,
@@ -2278,6 +2287,7 @@ async function planCommand(intent, options) {
                     policyLockFingerprint: lockRead.lock?.effective.fingerprint || null,
                     compiledPolicyFingerprint: compiledPolicyRead.artifact?.fingerprint || null,
                 });
+                const changeContract = (0, artifact_signature_1.signGovernanceArtifact)(unsignedChangeContract, (0, artifact_signature_1.resolveGovernanceArtifactSigningConfigFromEnv)());
                 const path = (0, change_contract_1.writeChangeContract)(cwd, changeContract);
                 generatedChangeContract = {
                     id: changeContract.contractId,
@@ -2343,5 +2353,11 @@ async function planCommand(intent, options) {
         }
         process.exit(1);
     }
+    finally {
+        if (suppressHumanLogs) {
+            console.log = originalConsoleLog;
+            console.warn = originalConsoleWarn;
+        }
+    }
 }
 //# sourceMappingURL=plan.js.map