@oxagen/cli 2.1.4-463 → 2.1.4-474

package/oxagen.mjs

@@ -23363,7 +23363,7 @@ import { readFileSync as readFileSync11 } from "node:fs";
 import { dirname as dirname8, resolve as resolve2 } from "node:path";
 import { fileURLToPath } from "node:url";
 function readVersion() {
-  if (true) return "2.1.4-463";
+  if (true) return "2.1.4-474";
   try {
     const here = dirname8(fileURLToPath(import.meta.url));
     const pkg = JSON.parse(
@@ -52035,7 +52035,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@oxagen/cli",
-      version: "2.1.4-463",
+      version: "2.1.4-474",
       description: "Oxagen governance CLI \u2014 spend, lineage, grounding, credentials, and audit (agentic coding lives in the stella CLI)",
       type: "module",
       main: "./dist/index.js",
@@ -54406,6 +54406,9 @@ __export(findings_exports, {
 function isStatus(value) {
   return STATUSES.includes(value);
 }
+function isLevel(value) {
+  return LEVELS.includes(value);
+}
 function isRunId(value) {
   return /^(arun|tse)_[0-9a-z]+$/.test(value);
 }
@@ -54440,11 +54443,47 @@ async function findingsList(opts, writer = stdoutWriter) {
     );
     return;
   }
+  if (opts.level !== void 0 && !isLevel(opts.level)) {
+    process.exitCode = 2;
+    out.error(
+      `Invalid --level "${opts.level}". Use tool, agent, operator or workspace.`,
+      "usage"
+    );
+    return;
+  }
+  if (opts.subject !== void 0 && (opts.subject.length === 0 || opts.subject.length > SUBJECT_MAX)) {
+    process.exitCode = 2;
+    out.error(
+      `Invalid --subject. Provide an agent key, an operator id, a tool name or the workspace id, at most ${SUBJECT_MAX} characters.`,
+      "usage"
+    );
+    return;
+  }
+  if (opts.kind !== void 0 && !/^[a-z_]+$/.test(opts.kind)) {
+    process.exitCode = 2;
+    out.error(
+      `Invalid --kind "${opts.kind}". Provide a finding kind, such as retry_loops.`,
+      "usage"
+    );
+    return;
+  }
+  if (opts.cursor !== void 0 && (opts.cursor.length === 0 || opts.cursor.length > CURSOR_MAX)) {
+    process.exitCode = 2;
+    out.error(
+      "Invalid --cursor. Copy the cursor the previous page printed.",
+      "usage"
+    );
+    return;
+  }
   let result2;
   try {
     result2 = await apiPostOrThrow("spend/findings", {
       status: status2,
-      ...opts.run === void 0 ? {} : { runId: opts.run }
+      ...opts.run === void 0 ? {} : { runId: opts.run },
+      ...opts.level === void 0 ? {} : { level: opts.level },
+      ...opts.subject === void 0 ? {} : { subject: opts.subject },
+      ...opts.kind === void 0 ? {} : { kind: opts.kind },
+      ...opts.cursor === void 0 ? {} : { cursor: opts.cursor }
     });
   } catch (err2) {
     out.error(err2, "api");
@@ -54454,9 +54493,15 @@ async function findingsList(opts, writer = stdoutWriter) {
     out.data(result2);
     return;
   }
-  const scope = opts.run === void 0 ? "" : ` citing ${opts.run}`;
+  const scope = [
+    opts.kind === void 0 ? "" : ` of kind ${opts.kind}`,
+    opts.run === void 0 ? "" : ` citing ${opts.run}`,
+    opts.subject === void 0 ? "" : ` about ${opts.subject}`
+  ].join("");
   if (result2.findings.length === 0) {
-    writer.write(`No ${status2} findings${scope}.`);
+    writer.write(
+      opts.cursor === void 0 ? `No ${status2} findings${scope}.` : `No more ${status2} findings${scope}.`
+    );
     return;
   }
   writer.write(
@@ -54484,13 +54529,19 @@ async function findingsList(opts, writer = stdoutWriter) {
     writer
   );
   if (result2.truncated === true) {
+    const first = (result2.offset ?? 0) + 1;
+    const last = first + result2.findings.length - 1;
     writer.write("");
     writer.write(
-      `The list shows the first ${result2.findings.length} of ${result2.counts.findings} ${status2} findings.`
+      `The list shows findings ${first} to ${last} of ${result2.counts.findings} ${status2} findings.`
     );
+    if (typeof result2.nextCursor === "string")
+      writer.write(
+        `Run the command again with --cursor ${result2.nextCursor} to list the next page.`
+      );
   }
 }
-var STATUSES, FRAMES_SHOWN;
+var STATUSES, LEVELS, CURSOR_MAX, SUBJECT_MAX, FRAMES_SHOWN;
 var init_findings = __esm({
   "src/commands/findings.ts"() {
     init_rate_card();
@@ -54498,6 +54549,9 @@ var init_findings = __esm({
     init_capture_writer();
     init_output();
     STATUSES = ["open", "applied", "dismissed"];
+    LEVELS = ["tool", "agent", "operator", "workspace"];
+    CURSOR_MAX = 256;
+    SUBJECT_MAX = 256;
     FRAMES_SHOWN = 5;
   }
 });
@@ -116286,11 +116340,16 @@ function buildProgram() {
   });
   const findingsCmd = program2.command("findings").description("The workspace's costed findings and what each would save");
   findingsCmd.command("list").description(
-    "List the findings by the money at stake; with --run, only those citing the run, with the frames each cites"
-  ).option("--run <id>", "A run id (arun_\u2026 or tse_\u2026)").option("--status <status>", "open (default) | applied | dismissed").option("--json", "Output JSON").action(async (opts) => {
-    const { findingsList: findingsList2 } = await Promise.resolve().then(() => (init_findings(), findings_exports));
-    await findingsList2(opts);
-  });
+    "List the findings by the money at stake, 50 a page; with --run, only those citing the run, with the frames each cites"
+  ).option("--run <id>", "A run id (arun_\u2026 or tse_\u2026)").option("--status <status>", "open (default) | applied | dismissed").option("--level <level>", "tool | agent | operator | workspace").option(
+    "--subject <key>",
+    "An agent key, an operator id (prn_\u2026), a tool name or the workspace id"
+  ).option("--kind <kind>", "A finding kind, such as retry_loops").option("--cursor <cursor>", "The cursor the previous page printed").option("--json", "Output JSON").action(
+    async (opts) => {
+      const { findingsList: findingsList2 } = await Promise.resolve().then(() => (init_findings(), findings_exports));
+      await findingsList2(opts);
+    }
+  );
   const contextCmd = program2.command("context").description(
     "Steering: record a proposal on a lineage, or revert a merged one"
   );

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxagen/cli",
-  "version": "2.1.4-463",
+  "version": "2.1.4-474",
   "description": "Oxagen governance CLI — spend, lineage, grounding, credentials, and audit (agentic coding lives in the stella CLI)",
   "type": "module",
   "bin": {