@oxagen/cli 2.1.4-463 → 2.1.4-481

package/oxagen.mjs

@@ -23363,7 +23363,7 @@ import { readFileSync as readFileSync11 } from "node:fs";
 import { dirname as dirname8, resolve as resolve2 } from "node:path";
 import { fileURLToPath } from "node:url";
 function readVersion() {
-  if (true) return "2.1.4-463";
+  if (true) return "2.1.4-481";
   try {
     const here = dirname8(fileURLToPath(import.meta.url));
     const pkg = JSON.parse(
@@ -52035,7 +52035,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@oxagen/cli",
-      version: "2.1.4-463",
+      version: "2.1.4-481",
       description: "Oxagen governance CLI \u2014 spend, lineage, grounding, credentials, and audit (agentic coding lives in the stella CLI)",
       type: "module",
       main: "./dist/index.js",
@@ -54406,6 +54406,9 @@ __export(findings_exports, {
 function isStatus(value) {
   return STATUSES.includes(value);
 }
+function isLevel(value) {
+  return LEVELS.includes(value);
+}
 function isRunId(value) {
   return /^(arun|tse)_[0-9a-z]+$/.test(value);
 }
@@ -54440,11 +54443,47 @@ async function findingsList(opts, writer = stdoutWriter) {
     );
     return;
   }
+  if (opts.level !== void 0 && !isLevel(opts.level)) {
+    process.exitCode = 2;
+    out.error(
+      `Invalid --level "${opts.level}". Use tool, agent, operator or workspace.`,
+      "usage"
+    );
+    return;
+  }
+  if (opts.subject !== void 0 && (opts.subject.length === 0 || opts.subject.length > SUBJECT_MAX)) {
+    process.exitCode = 2;
+    out.error(
+      `Invalid --subject. Provide an agent key, an operator id, a tool name or the workspace id, at most ${SUBJECT_MAX} characters.`,
+      "usage"
+    );
+    return;
+  }
+  if (opts.kind !== void 0 && !/^[a-z_]+$/.test(opts.kind)) {
+    process.exitCode = 2;
+    out.error(
+      `Invalid --kind "${opts.kind}". Provide a finding kind, such as retry_loops.`,
+      "usage"
+    );
+    return;
+  }
+  if (opts.cursor !== void 0 && (opts.cursor.length === 0 || opts.cursor.length > CURSOR_MAX)) {
+    process.exitCode = 2;
+    out.error(
+      "Invalid --cursor. Copy the cursor the previous page printed.",
+      "usage"
+    );
+    return;
+  }
   let result2;
   try {
     result2 = await apiPostOrThrow("spend/findings", {
       status: status2,
-      ...opts.run === void 0 ? {} : { runId: opts.run }
+      ...opts.run === void 0 ? {} : { runId: opts.run },
+      ...opts.level === void 0 ? {} : { level: opts.level },
+      ...opts.subject === void 0 ? {} : { subject: opts.subject },
+      ...opts.kind === void 0 ? {} : { kind: opts.kind },
+      ...opts.cursor === void 0 ? {} : { cursor: opts.cursor }
     });
   } catch (err2) {
     out.error(err2, "api");
@@ -54454,9 +54493,15 @@ async function findingsList(opts, writer = stdoutWriter) {
     out.data(result2);
     return;
   }
-  const scope = opts.run === void 0 ? "" : ` citing ${opts.run}`;
+  const scope = [
+    opts.kind === void 0 ? "" : ` of kind ${opts.kind}`,
+    opts.run === void 0 ? "" : ` citing ${opts.run}`,
+    opts.subject === void 0 ? "" : ` about ${opts.subject}`
+  ].join("");
   if (result2.findings.length === 0) {
-    writer.write(`No ${status2} findings${scope}.`);
+    writer.write(
+      opts.cursor === void 0 ? `No ${status2} findings${scope}.` : `No more ${status2} findings${scope}.`
+    );
     return;
   }
   writer.write(
@@ -54484,13 +54529,19 @@ async function findingsList(opts, writer = stdoutWriter) {
     writer
   );
   if (result2.truncated === true) {
+    const first = (result2.offset ?? 0) + 1;
+    const last = first + result2.findings.length - 1;
     writer.write("");
     writer.write(
-      `The list shows the first ${result2.findings.length} of ${result2.counts.findings} ${status2} findings.`
+      `The list shows findings ${first} to ${last} of ${result2.counts.findings} ${status2} findings.`
     );
+    if (typeof result2.nextCursor === "string")
+      writer.write(
+        `Run the command again with --cursor ${result2.nextCursor} to list the next page.`
+      );
   }
 }
-var STATUSES, FRAMES_SHOWN;
+var STATUSES, LEVELS, CURSOR_MAX, SUBJECT_MAX, FRAMES_SHOWN;
 var init_findings = __esm({
   "src/commands/findings.ts"() {
     init_rate_card();
@@ -54498,6 +54549,9 @@ var init_findings = __esm({
     init_capture_writer();
     init_output();
     STATUSES = ["open", "applied", "dismissed"];
+    LEVELS = ["tool", "agent", "operator", "workspace"];
+    CURSOR_MAX = 256;
+    SUBJECT_MAX = 256;
     FRAMES_SHOWN = 5;
   }
 });
@@ -69318,10 +69372,24 @@ var init_evidence = __esm({
 });
 
 // ../../packages/tacho/src/session-subject.ts
-var GITHUB_REF_SOURCE;
+var ENRICHMENT_BUDGET_NOTE, ENRICHMENT_LIMIT_NOTE, PARTIAL_NOTE_HEAD, PARTIAL_NOTE_TAIL, escapeRegExp2, NOTE_SOURCE, TRAILING_NOTES, GITHUB_REF_SOURCE;
 var init_session_subject = __esm({
   "../../packages/tacho/src/session-subject.ts"() {
     "use strict";
+    ENRICHMENT_BUDGET_NOTE = " The account covers only the start of the run: its enrichment budget ran out before the rest was read.";
+    ENRICHMENT_LIMIT_NOTE = " The account covers only the start of the run because its transcript reached a read limit.";
+    PARTIAL_NOTE_HEAD = "Evidence is partial: ";
+    PARTIAL_NOTE_TAIL = " recorded bodies were unavailable.";
+    escapeRegExp2 = (text4) => text4.replace(/[.*+?^${}()|[\]\\]/gu, "\\$&");
+    NOTE_SOURCE = [
+      `${escapeRegExp2(PARTIAL_NOTE_HEAD)}\\d+${escapeRegExp2(PARTIAL_NOTE_TAIL)}`,
+      escapeRegExp2(ENRICHMENT_BUDGET_NOTE.trim()),
+      escapeRegExp2(ENRICHMENT_LIMIT_NOTE.trim())
+    ].join("|");
+    TRAILING_NOTES = new RegExp(
+      `(?:^|\\s)((?:${NOTE_SOURCE})(?:\\s(?:${NOTE_SOURCE}))*)$`,
+      "u"
+    );
     GITHUB_REF_SOURCE = String.raw`\bhttps?:\/\/(?:www\.)?github\.com\/[\w.-]+\/[\w.-]+\/(pull|issues)\/(\d+)\S*`;
   }
 });
@@ -70880,11 +70948,11 @@ var init_budget3 = __esm({
 });
 
 // ../../packages/steering-check/src/checks/compile.ts
-function escapeRegExp2(text4) {
+function escapeRegExp3(text4) {
   return text4.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
 function hasOperation(document, operation) {
-  const name = escapeRegExp2(operation);
+  const name = escapeRegExp3(operation);
   const yaml = new RegExp(`^\\s*operationId:\\s*["']?${name}["']?\\s*$`, "m");
   const json2 = new RegExp(`"operationId"\\s*:\\s*"${name}"`);
   return yaml.test(document) || json2.test(document);
@@ -116286,11 +116354,16 @@ function buildProgram() {
   });
   const findingsCmd = program2.command("findings").description("The workspace's costed findings and what each would save");
   findingsCmd.command("list").description(
-    "List the findings by the money at stake; with --run, only those citing the run, with the frames each cites"
-  ).option("--run <id>", "A run id (arun_\u2026 or tse_\u2026)").option("--status <status>", "open (default) | applied | dismissed").option("--json", "Output JSON").action(async (opts) => {
-    const { findingsList: findingsList2 } = await Promise.resolve().then(() => (init_findings(), findings_exports));
-    await findingsList2(opts);
-  });
+    "List the findings by the money at stake, 50 a page; with --run, only those citing the run, with the frames each cites"
+  ).option("--run <id>", "A run id (arun_\u2026 or tse_\u2026)").option("--status <status>", "open (default) | applied | dismissed").option("--level <level>", "tool | agent | operator | workspace").option(
+    "--subject <key>",
+    "An agent key, an operator id (prn_\u2026), a tool name or the workspace id"
+  ).option("--kind <kind>", "A finding kind, such as retry_loops").option("--cursor <cursor>", "The cursor the previous page printed").option("--json", "Output JSON").action(
+    async (opts) => {
+      const { findingsList: findingsList2 } = await Promise.resolve().then(() => (init_findings(), findings_exports));
+      await findingsList2(opts);
+    }
+  );
   const contextCmd = program2.command("context").description(
     "Steering: record a proposal on a lineage, or revert a merged one"
   );

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxagen/cli",
-  "version": "2.1.4-463",
+  "version": "2.1.4-481",
   "description": "Oxagen governance CLI — spend, lineage, grounding, credentials, and audit (agentic coding lives in the stella CLI)",
   "type": "module",
   "bin": {