@zksecurity/zkao-cli 0.31.0-next.20 → 0.33.0-next.22

package/dist/index.js

@@ -866,6 +866,16 @@ continuous.command("off <repoId>").description("Pause it. The schedule and its s
     })
   )
 );
+continuous.command("prepare <repoId>").description(
+  'Plan the next analysis without running it, as "Prepare next analysis" does. Spends no credits'
+).option("--branch <branch>", "the branch (default: the scheduled branch)").action(
+  (repoId, opts) => run(
+    async (c) => c.prepareContinuousTesting(
+      repoId,
+      opts.branch ?? (await c.getContinuousTesting(repoId)).branch
+    )
+  )
+);
 continuous.command("rm <repoId>").description("Remove the schedule. Scans it already ran are kept").option("--branch <branch>", "the scheduled branch").action(
   (repoId, opts) => run(
     (c) => c.removeContinuousTesting(repoId, {
@@ -1007,9 +1017,31 @@ findings.command("resolution <findingId> <status>").description("Set resolution
     })
   )
 );
+findings.command("triage <findingId> <verdict>").description(
+  "Override the AI triage verdict (confirmed|false-positive). Setting the AI's own verdict clears the override"
+).option("--note <text>", "add the why as a comment in the same call").action((findingId, verdict, opts) => {
+  const status = verdict.toUpperCase().replace(/-/g, "_");
+  if (status !== "CONFIRMED" && status !== "FALSE_POSITIVE") {
+    fail("The verdict must be confirmed or false-positive.");
+  }
+  return run((c) => c.overrideFindingTriage(findingId, status, { note: opts.note }));
+});
 findings.command("publish <findingId>").description("Publish a finding as a public artifact").option("--note <noteId>", "note to pin as the published note").option("--password", "generate an access password").action(
   (findingId, opts) => run((c) => c.publishFinding(findingId, { noteId: opts.note, withPassword: opts.password }))
 );
+var questions = program.command("questions").description("Read and answer the questions Continuous Security analyses ask");
+questions.command("list").description("List the open questions").action(() => run((c) => c.listAgentQuestions()));
+questions.command("answer <questionId>").description("Answer with one of the question's options, a note, or both").option("--option <label>", "the label of one of the question's options").option("--note <text>", "your answer in your own words, or what qualifies the option").action((questionId, opts) => {
+  if (opts.option === void 0 && opts.note === void 0) {
+    fail("Pass --option, --note, or both.");
+  }
+  return run(
+    (c) => c.answerAgentQuestion(questionId, {
+      ...opts.option === void 0 ? {} : { selectedOption: opts.option },
+      ...opts.note === void 0 ? {} : { note: opts.note }
+    })
+  );
+});
 var billing = program.command("billing").description("Read the credit balance available to the project and its usage");
 billing.command("balance").description("The organization's shared credit balance, what active scans hold, and what is available").action(() => run((c) => c.getBillingBalance()));
 billing.command("usage").description("Credit ledger movements (defaults to the last 30 days)").option("--from <date>", "ISO date or timestamp to start from").option("--to <date>", "ISO date or timestamp to stop at").option("--limit <n>", "max events to return", toInt).action(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zksecurity/zkao-cli",
-  "version": "0.31.0-next.20",
+  "version": "0.33.0-next.22",
   "description": "Command-line interface for the zkao Project API",
   "license": "MIT",
   "author": "zkSecurity",
@@ -39,7 +39,7 @@
     "prepublishOnly": "node -e \"if (!(process.env.npm_config_user_agent || '').includes('bun/')) { console.error('Publish with bun publish: npm ships the literal workspace:* dependency and breaks installs.'); process.exit(1); }\""
   },
   "dependencies": {
-    "@zksecurity/zkao-sdk": "0.31.0-next.20",
+    "@zksecurity/zkao-sdk": "0.33.0-next.22",
     "commander": "^12.1.0"
   },
   "devDependencies": {