codeant-cli 0.4.10 → 0.4.12

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeant-cli",
-  "version": "0.4.10",
+  "version": "0.4.12",
   "description": "Code review CLI tool",
   "type": "module",
   "bin": {

package/src/commands/settings/analysis-feature-flags.js

@@ -0,0 +1,32 @@
+import { fetchApi } from '../../utils/fetchApi.js';
+
+export async function runAnalysisFeatureFlagsGet({ repo } = {}) {
+  if (!repo) {
+    const err = new Error('--repo is required');
+    err.exitCode = 1;
+    throw err;
+  }
+  return fetchApi('/extension/analysis/config/feature-flags/get', 'POST', { repo });
+}
+
+export async function runAnalysisFeatureFlagsUpdate({ repo, flags } = {}) {
+  if (!repo) {
+    const err = new Error('--repo is required');
+    err.exitCode = 1;
+    throw err;
+  }
+  if (!flags) {
+    const err = new Error('--flags is required');
+    err.exitCode = 1;
+    throw err;
+  }
+  let feature_flags;
+  try {
+    feature_flags = JSON.parse(flags);
+  } catch {
+    const err = new Error('--flags must be valid JSON (e.g. \'{"sast_analysis":"enabled"}\')');
+    err.exitCode = 1;
+    throw err;
+  }
+  return fetchApi('/extension/analysis/config/feature-flags/update', 'POST', { repo, feature_flags });
+}

package/src/commands/settings/audit-logs.js

@@ -0,0 +1,9 @@
+import { fetchApi } from '../../utils/fetchApi.js';
+
+export async function runAuditLogsSettings({ days, page, limit } = {}) {
+  return fetchApi('/extension/account/audit/settings', 'POST', {
+    days: days !== undefined ? Number(days) : 30,
+    page: page !== undefined ? Number(page) : 1,
+    limit: limit !== undefined ? Number(limit) : 50,
+  });
+}

package/src/commands/settings/branches.js

@@ -0,0 +1,33 @@
+import { fetchApi } from '../../utils/fetchApi.js';
+
+export async function runBranchesAll({ repo } = {}) {
+  if (!repo) {
+    const err = new Error('--repo is required');
+    err.exitCode = 1;
+    throw err;
+  }
+  return fetchApi('/extension/branches/all', 'POST', { repo });
+}
+
+export async function runBranchesDefault({ repo } = {}) {
+  if (!repo) {
+    const err = new Error('--repo is required');
+    err.exitCode = 1;
+    throw err;
+  }
+  return fetchApi('/extension/branches/default', 'POST', { repo });
+}
+
+export async function runBranchesUpdateDefault({ repo, branch } = {}) {
+  if (!repo) {
+    const err = new Error('--repo is required');
+    err.exitCode = 1;
+    throw err;
+  }
+  if (!branch) {
+    const err = new Error('--branch is required');
+    err.exitCode = 1;
+    throw err;
+  }
+  return fetchApi('/extension/branches/update-default', 'POST', { repo, branch });
+}

package/src/commands/settings/cve-reporting.js

@@ -0,0 +1,40 @@
+import { fetchApi } from '../../utils/fetchApi.js';
+
+export async function runCveReportingList({ repo, status, reportId } = {}) {
+  return fetchApi('/extension/analysis/cve-reporting/list', 'POST', { repo, status, report_id: reportId });
+}
+
+export async function runCveReportingCreate({ name, repo, scheduleConfig, reportConfig, description, notificationConfig, createdBy } = {}) {
+  if (!name) {
+    const err = new Error('--name is required');
+    err.exitCode = 1;
+    throw err;
+  }
+  return fetchApi('/extension/analysis/cve-reporting/create', 'POST', {
+    name,
+    repo,
+    schedule_config: scheduleConfig ? JSON.parse(scheduleConfig) : undefined,
+    report_config: reportConfig ? JSON.parse(reportConfig) : undefined,
+    description,
+    notification_config: notificationConfig ? JSON.parse(notificationConfig) : undefined,
+    created_by: createdBy,
+  });
+}
+
+export async function runCveReportingUpdate({ reportId, repo, status, name, description, scheduleConfig, reportConfig, notificationConfig } = {}) {
+  if (!reportId) {
+    const err = new Error('--report-id is required');
+    err.exitCode = 1;
+    throw err;
+  }
+  return fetchApi('/extension/analysis/cve-reporting/update', 'POST', {
+    report_id: reportId,
+    repo,
+    status,
+    name,
+    description,
+    schedule_config: scheduleConfig ? JSON.parse(scheduleConfig) : undefined,
+    report_config: reportConfig ? JSON.parse(reportConfig) : undefined,
+    notification_config: notificationConfig ? JSON.parse(notificationConfig) : undefined,
+  });
+}

package/src/commands/settings/feature-flags.js

@@ -0,0 +1,34 @@
+import { fetchApi } from '../../utils/fetchApi.js';
+
+export async function runFeatureFlagsGet({ repo, v2 = false } = {}) {
+  if (!repo) {
+    const err = new Error('--repo is required');
+    err.exitCode = 1;
+    throw err;
+  }
+  const version = v2 ? 'v2' : 'v1';
+  return fetchApi(`/extension/config/feature-flags/${version}/get`, 'POST', { repo });
+}
+
+export async function runFeatureFlagsUpdate({ repo, flags, v2 = false } = {}) {
+  if (!repo) {
+    const err = new Error('--repo is required');
+    err.exitCode = 1;
+    throw err;
+  }
+  if (!flags) {
+    const err = new Error('--flags is required');
+    err.exitCode = 1;
+    throw err;
+  }
+  let feature_flags;
+  try {
+    feature_flags = JSON.parse(flags);
+  } catch {
+    const err = new Error('--flags must be valid JSON (e.g. \'{"pr_review":"enable"}\')');
+    err.exitCode = 1;
+    throw err;
+  }
+  const version = v2 ? 'v2' : 'v1';
+  return fetchApi(`/extension/config/feature-flags/${version}/update`, 'POST', { repo, feature_flags });
+}

package/src/commands/settings/index.js

@@ -0,0 +1,413 @@
+import { runAuditLogsSettings } from './audit-logs.js';
+import { runRepos } from './repos.js';
+import { runBranchesAll, runBranchesDefault, runBranchesUpdateDefault } from './branches.js';
+import { runFeatureFlagsGet, runFeatureFlagsUpdate } from './feature-flags.js';
+import { runAnalysisFeatureFlagsGet, runAnalysisFeatureFlagsUpdate } from './analysis-feature-flags.js';
+import { runPrInstructionsGet, runPrInstructionsSave, runPrInstructionsEdit, runPrInstructionsDelete } from './pr-instructions.js';
+import { runRecurringScanslist, runRecurringScansCreate, runRecurringScansUpdate } from './recurring-scans.js';
+import { runSprintReportsList, runSprintReportsCreate, runSprintReportsUpdate } from './sprint-reports.js';
+import { runCveReportingList, runCveReportingCreate, runCveReportingUpdate } from './cve-reporting.js';
+import {
+  runTeamSubscriptionsList,
+  runTeamUsersList,
+  runTeamUserGet,
+  runTeamUserCreate,
+  runTeamUserDelete,
+  runTeamUserUpdate,
+  runTeamRbacGet,
+  runTeamRbacSave,
+  runTeamPlanEnd,
+} from './team-management.js';
+
+/**
+ * Register all `codeant settings <verb>` subcommands.
+ *
+ * Each subcommand implementation lives in its own file alongside this index
+ * and exports a single async function named run<Command>(opts).
+ *
+ * To add a new subcommand:
+ *   1. Create src/commands/settings/<name>.js exporting run<Name>(opts).
+ *   2. Import it here.
+ *   3. Add a settings.command(...).action(...) block below following the
+ *      existing pattern.
+ *
+ * @param {import('commander').Command} program
+ * @param {{ runCmd: Function }} helpers
+ */
+export default function registerSettingsCommands(program, { runCmd }) {
+  const settings = program
+    .command('settings')
+    .description('Manage CodeAnt AI settings');
+
+  // ── repos ──────────────────────────────────────────────────────────────────
+  settings
+    .command('repos')
+    .description('List repositories')
+    .option('--org <org>', 'Organization name (auto-picked when only one is authenticated)')
+    .action((opts) => runCmd(() => runRepos({ org: opts.org })));
+
+  // ── audit-logs settings ────────────────────────────────────────────────────
+  settings
+    .command('audit-logs')
+    .description('List settings change audit logs for the org')
+    .option('--days <n>', 'Number of days to look back', '30')
+    .option('--page <n>', 'Page number', '1')
+    .option('--limit <n>', 'Results per page (max 200)', '50')
+    .action((opts) => runCmd(() => runAuditLogsSettings({ days: opts.days, page: opts.page, limit: opts.limit })));
+
+  // ── branches all ───────────────────────────────────────────────────────────
+  settings
+    .command('branches-all')
+    .description('List all branches for a repository')
+    .requiredOption('--repo <repo>', 'Repository (owner/repo)')
+    .action((opts) => runCmd(() => runBranchesAll({ repo: opts.repo })));
+
+  // ── branches default ───────────────────────────────────────────────────────
+  settings
+    .command('branches-default')
+    .description('Get the default branch for a repository')
+    .requiredOption('--repo <repo>', 'Repository (owner/repo)')
+    .action((opts) => runCmd(() => runBranchesDefault({ repo: opts.repo })));
+
+  // ── branches update-default ────────────────────────────────────────────────
+  settings
+    .command('branches-update-default')
+    .description('Set the default branch for a repository')
+    .requiredOption('--repo <repo>', 'Repository (owner/repo)')
+    .requiredOption('--branch <name>', 'Branch name to set as default')
+    .action((opts) => runCmd(() => runBranchesUpdateDefault({ repo: opts.repo, branch: opts.branch })));
+
+  // ── feature-flags get ──────────────────────────────────────────────────────
+  settings
+    .command('feature-flags-get')
+    .description('Get feature flags for a repository')
+    .requiredOption('--repo <repo>', 'Repository (owner/repo)')
+    .option('--v2', 'Use v2 feature flags', false)
+    .action((opts) => runCmd(() => runFeatureFlagsGet({ repo: opts.repo, v2: opts.v2 })));
+
+  // ── feature-flags update ───────────────────────────────────────────────────
+  settings
+    .command('feature-flags-update')
+    .description('Update feature flags for a repository')
+    .requiredOption('--repo <repo>', 'Repository (owner/repo)')
+    .requiredOption('--flags <json>', 'Feature flags as a JSON string (e.g. \'{"pr_review":"enable"}\')')
+    .option('--v2', 'Use v2 feature flags', false)
+    .action((opts) => runCmd(() => runFeatureFlagsUpdate({ repo: opts.repo, flags: opts.flags, v2: opts.v2 })));
+
+  // ── analysis feature-flags get ─────────────────────────────────────────────
+  settings
+    .command('analysis-feature-flags-get')
+    .description('Get analysis feature flags for a repository')
+    .requiredOption('--repo <repo>', 'Repository (owner/repo)')
+    .action((opts) => runCmd(() => runAnalysisFeatureFlagsGet({ repo: opts.repo })));
+
+  // ── analysis feature-flags update ─────────────────────────────────────────
+  settings
+    .command('analysis-feature-flags-update')
+    .description('Update analysis feature flags for a repository')
+    .requiredOption('--repo <repo>', 'Repository (owner/repo)')
+    .requiredOption('--flags <json>', 'Feature flags as a JSON string (e.g. \'{"sast_analysis":"enabled"}\')')
+    .action((opts) => runCmd(() => runAnalysisFeatureFlagsUpdate({ repo: opts.repo, flags: opts.flags })));
+
+  // ── pr-instructions get ────────────────────────────────────────────────────
+  settings
+    .command('pr-instructions-get')
+    .description('Get PR review instructions')
+    .requiredOption('--type <type>', 'Instruction type (e.g. custom)')
+    .action((opts) => runCmd(() => runPrInstructionsGet({ instructionsType: opts.type })));
+
+  // ── pr-instructions save ───────────────────────────────────────────────────
+  settings
+    .command('pr-instructions-save')
+    .description('Save a new PR review instruction')
+    .option('--type <type>', 'Instruction type (e.g. custom)')
+    .option('--file-pattern <pattern>', 'File pattern (e.g. *.py)')
+    .option('--description <text>', 'Instruction description')
+    .option('--description-file <path>', 'Path to a file containing the description')
+    .option('--instruction-id <id>', 'Instruction ID (for upsert)')
+    .action((opts) => runCmd(() => runPrInstructionsSave({
+      instructionType: opts.type,
+      filePattern: opts.filePattern,
+      description: opts.description,
+      descriptionFile: opts.descriptionFile,
+      instructionId: opts.instructionId,
+    })));
+
+  // ── pr-instructions edit ───────────────────────────────────────────────────
+  settings
+    .command('pr-instructions-edit')
+    .description('Edit an existing PR review instruction')
+    .requiredOption('--instruction-id <id>', 'Instruction ID to edit')
+    .option('--type <type>', 'Instruction type (e.g. custom)')
+    .option('--description <text>', 'Updated description')
+    .option('--description-file <path>', 'Path to a file containing the description')
+    .option('--file-pattern <pattern>', 'Updated file pattern')
+    .action((opts) => runCmd(() => runPrInstructionsEdit({
+      instructionType: opts.type,
+      instructionId: opts.instructionId,
+      description: opts.description,
+      descriptionFile: opts.descriptionFile,
+      filePattern: opts.filePattern,
+    })));
+
+  // ── pr-instructions delete ─────────────────────────────────────────────────
+  settings
+    .command('pr-instructions-delete')
+    .description('Delete a PR review instruction')
+    .requiredOption('--instruction-id <id>', 'Instruction ID to delete')
+    .option('--type <type>', 'Instruction type (e.g. custom)')
+    .action((opts) => runCmd(() => runPrInstructionsDelete({
+      instructionType: opts.type,
+      instructionId: opts.instructionId,
+    })));
+
+  // ── recurring-scans list ───────────────────────────────────────────────────
+  settings
+    .command('recurring-scans-list')
+    .description('List recurring scan schedules')
+    .option('--repo <repo>', 'Filter by repository (owner/repo)')
+    .option('--status <status>', 'Filter by status (e.g. ACTIVE)')
+    .option('--schedule-id <id>', 'Filter by schedule ID')
+    .action((opts) => runCmd(() => runRecurringScanslist({ repo: opts.repo, status: opts.status, scheduleId: opts.scheduleId })));
+
+  // ── recurring-scans create ─────────────────────────────────────────────────
+  settings
+    .command('recurring-scans-create')
+    .description('Create a recurring scan schedule')
+    .requiredOption('--name <name>', 'Schedule name')
+    .option('--repo <repo>', 'Repository (owner/repo)')
+    .option('--schedule-config <json>', 'Schedule config as JSON (e.g. \'{"frequency":"weekly"}\')')
+    .option('--scan-config <json>', 'Scan config as JSON')
+    .option('--description <text>', 'Description')
+    .option('--notification-config <json>', 'Notification config as JSON')
+    .option('--created-by <user>', 'Creator identifier')
+    .action((opts) => runCmd(() => runRecurringScansCreate({
+      name: opts.name,
+      repo: opts.repo,
+      scheduleConfig: opts.scheduleConfig,
+      scanConfig: opts.scanConfig,
+      description: opts.description,
+      notificationConfig: opts.notificationConfig,
+      createdBy: opts.createdBy,
+    })));
+
+  // ── recurring-scans update ─────────────────────────────────────────────────
+  settings
+    .command('recurring-scans-update')
+    .description('Update a recurring scan schedule')
+    .requiredOption('--schedule-id <id>', 'Schedule ID to update')
+    .requiredOption('--repo <repo>', 'Repository (owner/repo)')
+    .option('--status <status>', 'New status (e.g. ACTIVE, INACTIVE)')
+    .option('--name <name>', 'New name')
+    .option('--description <text>', 'New description')
+    .option('--schedule-config <json>', 'Schedule config as JSON')
+    .option('--scan-config <json>', 'Scan config as JSON')
+    .option('--notification-config <json>', 'Notification config as JSON')
+    .action((opts) => runCmd(() => runRecurringScansUpdate({
+      scheduleId: opts.scheduleId,
+      repo: opts.repo,
+      status: opts.status,
+      name: opts.name,
+      description: opts.description,
+      scheduleConfig: opts.scheduleConfig,
+      scanConfig: opts.scanConfig,
+      notificationConfig: opts.notificationConfig,
+    })));
+
+  // ── sprint-reports list ────────────────────────────────────────────────────
+  settings
+    .command('sprint-reports-list')
+    .description('List sprint report configurations')
+    .option('--repo <repo>', 'Filter by repository (owner/repo)')
+    .option('--status <status>', 'Filter by status (e.g. ACTIVE)')
+    .option('--config-id <id>', 'Filter by config ID')
+    .action((opts) => runCmd(() => runSprintReportsList({ repo: opts.repo, status: opts.status, configId: opts.configId })));
+
+  // ── sprint-reports create ──────────────────────────────────────────────────
+  settings
+    .command('sprint-reports-create')
+    .description('Create a sprint report configuration')
+    .requiredOption('--name <name>', 'Report name')
+    .option('--repo <repo>', 'Repository (owner/repo)')
+    .option('--schedule-config <json>', 'Schedule config as JSON (e.g. \'{"frequency":"weekly"}\')')
+    .option('--report-config <json>', 'Report config as JSON')
+    .option('--description <text>', 'Description')
+    .option('--notification-config <json>', 'Notification config as JSON')
+    .option('--created-by <user>', 'Creator identifier')
+    .action((opts) => runCmd(() => runSprintReportsCreate({
+      name: opts.name,
+      repo: opts.repo,
+      scheduleConfig: opts.scheduleConfig,
+      reportConfig: opts.reportConfig,
+      description: opts.description,
+      notificationConfig: opts.notificationConfig,
+      createdBy: opts.createdBy,
+    })));
+
+  // ── sprint-reports update ──────────────────────────────────────────────────
+  settings
+    .command('sprint-reports-update')
+    .description('Update a sprint report configuration')
+    .requiredOption('--config-id <id>', 'Config ID to update')
+    .requiredOption('--repo <repo>', 'Repository (owner/repo)')
+    .option('--status <status>', 'New status (e.g. ACTIVE, INACTIVE)')
+    .option('--name <name>', 'New name')
+    .option('--description <text>', 'New description')
+    .option('--schedule-config <json>', 'Schedule config as JSON')
+    .option('--report-config <json>', 'Report config as JSON')
+    .option('--notification-config <json>', 'Notification config as JSON')
+    .action((opts) => runCmd(() => runSprintReportsUpdate({
+      configId: opts.configId,
+      repo: opts.repo,
+      status: opts.status,
+      name: opts.name,
+      description: opts.description,
+      scheduleConfig: opts.scheduleConfig,
+      reportConfig: opts.reportConfig,
+      notificationConfig: opts.notificationConfig,
+    })));
+
+  // ── cve-reporting list ─────────────────────────────────────────────────────
+  settings
+    .command('cve-reporting-list')
+    .description('List CVE report configurations')
+    .option('--repo <repo>', 'Filter by repository (owner/repo)')
+    .option('--status <status>', 'Filter by status (e.g. ACTIVE)')
+    .option('--report-id <id>', 'Filter by report ID')
+    .action((opts) => runCmd(() => runCveReportingList({ repo: opts.repo, status: opts.status, reportId: opts.reportId })));
+
+  // ── cve-reporting create ───────────────────────────────────────────────────
+  settings
+    .command('cve-reporting-create')
+    .description('Create a CVE report configuration')
+    .requiredOption('--name <name>', 'Report name')
+    .option('--repo <repo>', 'Repository (owner/repo)')
+    .option('--schedule-config <json>', 'Schedule config as JSON (e.g. \'{"frequency":"weekly"}\')')
+    .option('--report-config <json>', 'Report config as JSON')
+    .option('--description <text>', 'Description')
+    .option('--notification-config <json>', 'Notification config as JSON')
+    .option('--created-by <user>', 'Creator identifier')
+    .action((opts) => runCmd(() => runCveReportingCreate({
+      name: opts.name,
+      repo: opts.repo,
+      scheduleConfig: opts.scheduleConfig,
+      reportConfig: opts.reportConfig,
+      description: opts.description,
+      notificationConfig: opts.notificationConfig,
+      createdBy: opts.createdBy,
+    })));
+
+  // ── cve-reporting update ───────────────────────────────────────────────────
+  settings
+    .command('cve-reporting-update')
+    .description('Update a CVE report configuration')
+    .requiredOption('--report-id <id>', 'Report ID to update')
+    .requiredOption('--repo <repo>', 'Repository (owner/repo)')
+    .option('--status <status>', 'New status (e.g. ACTIVE, INACTIVE)')
+    .option('--name <name>', 'New name')
+    .option('--description <text>', 'New description')
+    .option('--schedule-config <json>', 'Schedule config as JSON')
+    .option('--report-config <json>', 'Report config as JSON')
+    .option('--notification-config <json>', 'Notification config as JSON')
+    .action((opts) => runCmd(() => runCveReportingUpdate({
+      reportId: opts.reportId,
+      repo: opts.repo,
+      status: opts.status,
+      name: opts.name,
+      description: opts.description,
+      scheduleConfig: opts.scheduleConfig,
+      reportConfig: opts.reportConfig,
+      notificationConfig: opts.notificationConfig,
+    })));
+
+  // ── team-subscriptions-list ────────────────────────────────────────────────
+  settings
+    .command('team-subscriptions-list')
+    .description('List all subscriptions for the account')
+    .action(() => runCmd(() => runTeamSubscriptionsList()));
+
+  // ── team-users-list ────────────────────────────────────────────────────────
+  settings
+    .command('team-users-list')
+    .description('List users for a subscription')
+    .requiredOption('--subscription-id <id>', 'Subscription ID')
+    .action((opts) => runCmd(() => runTeamUsersList({ subscriptionId: opts.subscriptionId })));
+
+  // ── team-user-get ──────────────────────────────────────────────────────────
+  settings
+    .command('team-user-get')
+    .description('Get a user by ID')
+    .requiredOption('--user-id <id>', 'User ID')
+    .action((opts) => runCmd(() => runTeamUserGet({ userId: opts.userId })));
+
+  // ── team-user-create ───────────────────────────────────────────────────────
+  settings
+    .command('team-user-create')
+    .description('Create a new team user')
+    .requiredOption('--user-id <id>', 'User ID')
+    .requiredOption('--email <email>', 'User email')
+    .requiredOption('--name <name>', 'User display name')
+    .requiredOption('--role <role>', 'User role (e.g. developer, admin)')
+    .option('--plan-ids <json>', 'Plan IDs as JSON array (e.g. \'["plan_1"]\')', '[]')
+    .option('--subscription-ids <json>', 'Subscription IDs as JSON array', '[]')
+    .option('--invited', 'Send invitation email', false)
+    .action((opts) => runCmd(() => runTeamUserCreate({
+      userId: opts.userId,
+      email: opts.email,
+      name: opts.name,
+      role: opts.role,
+      planIds: opts.planIds,
+      subscriptionIds: opts.subscriptionIds,
+      invited: opts.invited,
+    })));
+
+  // ── team-user-delete ───────────────────────────────────────────────────────
+  settings
+    .command('team-user-delete')
+    .description('Delete a team user')
+    .requiredOption('--user-id <id>', 'User ID to delete')
+    .action((opts) => runCmd(() => runTeamUserDelete({ userId: opts.userId })));
+
+  // ── team-user-update ───────────────────────────────────────────────────────
+  settings
+    .command('team-user-update')
+    .description('Update a team user')
+    .requiredOption('--user-id <id>', 'User ID to update')
+    .requiredOption('--email <email>', 'User email')
+    .requiredOption('--name <name>', 'User display name')
+    .requiredOption('--role <role>', 'User role (e.g. developer, admin)')
+    .requiredOption('--status <status>', 'User status (e.g. active, inactive)')
+    .option('--plan-ids <json>', 'Plan IDs as JSON array', '[]')
+    .option('--subscription-ids <json>', 'Subscription IDs as JSON array', '[]')
+    .action((opts) => runCmd(() => runTeamUserUpdate({
+      userId: opts.userId,
+      email: opts.email,
+      name: opts.name,
+      role: opts.role,
+      status: opts.status,
+      planIds: opts.planIds,
+      subscriptionIds: opts.subscriptionIds,
+    })));
+
+  // ── team-rbac-get ──────────────────────────────────────────────────────────
+  settings
+    .command('team-rbac-get')
+    .description('Get RBAC settings for a repository')
+    .requiredOption('--repo <repo>', 'Repository (owner/repo)')
+    .action((opts) => runCmd(() => runTeamRbacGet({ repo: opts.repo })));
+
+  // ── team-rbac-save ─────────────────────────────────────────────────────────
+  settings
+    .command('team-rbac-save')
+    .description('Save RBAC settings for a repository')
+    .requiredOption('--repo <repo>', 'Repository (owner/repo)')
+    .requiredOption('--data <json>', 'RBAC settings as JSON (e.g. \'{"enabled":true}\')')
+    .action((opts) => runCmd(() => runTeamRbacSave({ repo: opts.repo, data: opts.data })));
+
+  // ── team-plan-end ──────────────────────────────────────────────────────────
+  settings
+    .command('team-plan-end')
+    .description('End/expire the active subscription plan')
+    .option('--include-users', 'Also remove all users from the plan', false)
+    .action((opts) => runCmd(() => runTeamPlanEnd({ includeUsers: opts.includeUsers })));
+}

package/src/commands/settings/pr-instructions.js

@@ -0,0 +1,44 @@
+import { fetchApi } from '../../utils/fetchApi.js';
+
+export async function runPrInstructionsGet({ instructionsType } = {}) {
+  return fetchApi('/extension/config/pullrequest/instructions/get', 'POST', {
+    instructions_type: instructionsType,
+  });
+}
+
+export async function runPrInstructionsSave({ instructionType, filePattern, description, descriptionFile, instructionId } = {}) {
+  return fetchApi('/extension/config/pullrequest/instructions/save', 'POST', {
+    instruction_type: instructionType,
+    file_pattern: filePattern,
+    description,
+    description_file: descriptionFile,
+    instruction_id: instructionId,
+  });
+}
+
+export async function runPrInstructionsEdit({ instructionType, instructionId, description, descriptionFile, filePattern } = {}) {
+  if (!instructionId) {
+    const err = new Error('--instruction-id is required');
+    err.exitCode = 1;
+    throw err;
+  }
+  return fetchApi('/extension/config/pullrequest/instructions/edit', 'POST', {
+    instruction_type: instructionType,
+    instruction_id: instructionId,
+    description,
+    description_file: descriptionFile,
+    file_pattern: filePattern,
+  });
+}
+
+export async function runPrInstructionsDelete({ instructionType, instructionId } = {}) {
+  if (!instructionId) {
+    const err = new Error('--instruction-id is required');
+    err.exitCode = 1;
+    throw err;
+  }
+  return fetchApi('/extension/config/pullrequest/instructions/delete', 'POST', {
+    instruction_type: instructionType,
+    instruction_id: instructionId,
+  });
+}

package/src/commands/settings/recurring-scans.js

@@ -0,0 +1,40 @@
+import { fetchApi } from '../../utils/fetchApi.js';
+
+export async function runRecurringScanslist({ repo, status, scheduleId } = {}) {
+  return fetchApi('/extension/analysis/recurring-scans/list', 'POST', { repo, status, schedule_id: scheduleId });
+}
+
+export async function runRecurringScansCreate({ name, repo, scheduleConfig, scanConfig, description, notificationConfig, createdBy } = {}) {
+  if (!name) {
+    const err = new Error('--name is required');
+    err.exitCode = 1;
+    throw err;
+  }
+  return fetchApi('/extension/analysis/recurring-scans/create', 'POST', {
+    name,
+    repo,
+    schedule_config: scheduleConfig ? JSON.parse(scheduleConfig) : undefined,
+    scan_config: scanConfig ? JSON.parse(scanConfig) : undefined,
+    description,
+    notification_config: notificationConfig ? JSON.parse(notificationConfig) : undefined,
+    created_by: createdBy,
+  });
+}
+
+export async function runRecurringScansUpdate({ scheduleId, repo, status, name, description, scheduleConfig, scanConfig, notificationConfig } = {}) {
+  if (!scheduleId) {
+    const err = new Error('--schedule-id is required');
+    err.exitCode = 1;
+    throw err;
+  }
+  return fetchApi('/extension/analysis/recurring-scans/update', 'POST', {
+    schedule_id: scheduleId,
+    repo,
+    status,
+    name,
+    description,
+    schedule_config: scheduleConfig ? JSON.parse(scheduleConfig) : undefined,
+    scan_config: scanConfig ? JSON.parse(scanConfig) : undefined,
+    notification_config: notificationConfig ? JSON.parse(notificationConfig) : undefined,
+  });
+}

package/src/commands/settings/repos.js

@@ -0,0 +1,2 @@
+// Delegates to the scans implementation — same endpoint, no duplication needed.
+export { runRepos } from '../scans/repos.js';

package/src/commands/settings/sprint-reports.js

@@ -0,0 +1,40 @@
+import { fetchApi } from '../../utils/fetchApi.js';
+
+export async function runSprintReportsList({ repo, status, configId } = {}) {
+  return fetchApi('/extension/metrics/sprint-reports/list', 'POST', { repo, status, config_id: configId });
+}
+
+export async function runSprintReportsCreate({ name, repo, scheduleConfig, reportConfig, description, notificationConfig, createdBy } = {}) {
+  if (!name) {
+    const err = new Error('--name is required');
+    err.exitCode = 1;
+    throw err;
+  }
+  return fetchApi('/extension/metrics/sprint-reports/create', 'POST', {
+    name,
+    repo,
+    schedule_config: scheduleConfig ? JSON.parse(scheduleConfig) : undefined,
+    report_config: reportConfig ? JSON.parse(reportConfig) : undefined,
+    description,
+    notification_config: notificationConfig ? JSON.parse(notificationConfig) : undefined,
+    created_by: createdBy,
+  });
+}
+
+export async function runSprintReportsUpdate({ configId, repo, status, name, description, scheduleConfig, reportConfig, notificationConfig } = {}) {
+  if (!configId) {
+    const err = new Error('--config-id is required');
+    err.exitCode = 1;
+    throw err;
+  }
+  return fetchApi('/extension/metrics/sprint-reports/update', 'POST', {
+    config_id: configId,
+    repo,
+    status,
+    name,
+    description,
+    schedule_config: scheduleConfig ? JSON.parse(scheduleConfig) : undefined,
+    report_config: reportConfig ? JSON.parse(reportConfig) : undefined,
+    notification_config: notificationConfig ? JSON.parse(notificationConfig) : undefined,
+  });
+}

package/src/commands/settings/team-management.js

@@ -0,0 +1,55 @@
+import { fetchApi } from '../../utils/fetchApi.js';
+
+export async function runTeamSubscriptionsList() {
+  return fetchApi('/extension/account/subscriptions/list', 'POST', {});
+}
+
+export async function runTeamUsersList({ subscriptionId } = {}) {
+  return fetchApi('/extension/account/subscription/users/list', 'POST', { subscription_id: subscriptionId });
+}
+
+export async function runTeamUserGet({ userId } = {}) {
+  return fetchApi('/extension/account/users/user/get', 'POST', { user_id: userId });
+}
+
+export async function runTeamUserCreate({ userId, email, name, role, planIds, subscriptionIds, invited } = {}) {
+  return fetchApi('/extension/account/users/user/create', 'POST', {
+    users: [{
+      user_id: userId,
+      email,
+      name,
+      role,
+      plan_ids: planIds ? JSON.parse(planIds) : [],
+      subscription_ids: subscriptionIds ? JSON.parse(subscriptionIds) : [],
+    }],
+    invited: invited ?? false,
+  });
+}
+
+export async function runTeamUserDelete({ userId } = {}) {
+  return fetchApi('/extension/account/users/user/delete', 'POST', { user_id: userId });
+}
+
+export async function runTeamUserUpdate({ userId, email, name, role, status, planIds, subscriptionIds } = {}) {
+  return fetchApi('/extension/account/users/user/update', 'POST', {
+    user_id: userId,
+    email,
+    name,
+    role,
+    status,
+    plan_ids: planIds ? JSON.parse(planIds) : [],
+    subscription_ids: subscriptionIds ? JSON.parse(subscriptionIds) : [],
+  });
+}
+
+export async function runTeamRbacGet({ repo } = {}) {
+  return fetchApi('/extension/account/rbac/settings/get', 'POST', { repo });
+}
+
+export async function runTeamRbacSave({ repo, data } = {}) {
+  return fetchApi('/extension/account/rbac/settings/save', 'POST', { repo, data: JSON.parse(data) });
+}
+
+export async function runTeamPlanEnd({ includeUsers } = {}) {
+  return fetchApi('/extension/account/plan/subscriptions/end', 'POST', { include_users: includeUsers ?? false });
+}

package/src/index.js

@@ -19,6 +19,7 @@ import * as scm from './scm/index.js';
 import { setConfigValue } from './utils/config.js';
 import { track, shutdown as analyticsShutdown, isTelemetryDisabled } from './utils/analytics.js';
 import registerScansCommands from './commands/scans/index.js';
+import registerSettingsCommands from './commands/settings/index.js';
 
 // Read version from package.json
 const require = createRequire(import.meta.url);
@@ -393,6 +394,9 @@ program
   // ─── Scans commands ───
   registerScansCommands(program, { runCmd });
 
+  // ─── Settings commands ───
+  registerSettingsCommands(program, { runCmd });
+
   // ─── Telemetry control ───
   program
     .command('set-telemetry <enabled>')

package/src/scm/gitlab/client.js

@@ -10,7 +10,7 @@ export function getClient() {
   return new Gitlab(opts);
 }
 
-// GitLab uses project ID or "owner/repo" encoded as "owner%2Frepo"
+// GitLab uses project ID or the full path — gitbeaker's endpoint tag encodes it
 export function projectId(name) {
-  return encodeURIComponent(name);
+  return name;
 }

package/src/scm/index.js

@@ -67,7 +67,7 @@ export function detectRepoName() {
   if (!origin) return null;
   // Handle SSH: git@github.com:owner/repo.git
   // Handle HTTPS: https://github.com/owner/repo.git
-  const match = origin.match(/[/:]([\w.-]+\/[\w.-]+?)(?:\.git)?$/);
+  const match = origin.match(/[/:]([\w.-]+(?:\/[\w.-]+)+?)(?:\.git)?$/);
   return match ? match[1] : null;
 }
 

package/src/utils/fetchApi.js

@@ -23,6 +23,7 @@ const fetchApi = async (endpoint, method = 'GET', body = null) => {
 
   try {
     const response = await fetch(url, options);
+    console.error('API Response Status:', response.status);
 
     if (response.status === 403) {
       throw new Error('Access denied (403). Please run `codeant logout` and then `codeant login` to re-authenticate.');

package/src/utils/reviewApiHelper.js

@@ -3,7 +3,7 @@ import path from 'path';
 import fs from 'fs';
 import { minimatch } from 'minimatch';
 
-const MAX_REVIEW_FILES = 10;
+const MAX_REVIEW_FILES = 15;
 const MAX_FILE_LINES = 5000;
 const MAX_FILE_SIZE_BYTES = 200 * 1024; // 200 KB
 
@@ -184,41 +184,20 @@ class ReviewApiHelper extends CommonApiHelper {
       return true;
     });
 
-    // Dedupe by filename, keeping all hunks, but limit unique files to MAX_REVIEW_FILES
+    // Dedupe by filename, keeping all hunks (no cap yet — applied after size filtering)
     const fileOrder = [];
     const fileHunks = new Map();
-    let capped = false;
     for (const d of reviewable) {
       const f = d.filename_str;
       if (!fileHunks.has(f)) {
-        if (fileOrder.length >= MAX_REVIEW_FILES) {
-          capped = true;
-          if (!seenSkipped.has(f)) {
-            dedupedSkipped.push({ file: f, reason: `exceeded ${MAX_REVIEW_FILES}-file limit` });
-            seenSkipped.add(f);
-          }
-          continue;
-        }
         fileOrder.push(f);
         fileHunks.set(f, []);
       }
       fileHunks.get(f).push(d);
     }
 
-    // Reconstruct a combined diff string from the filtered hunks
-    const parts = [];
-    for (const f of fileOrder) {
-      const hunks = fileHunks.get(f);
-      // Build a file-level diff header + all hunk patches
-      const header = `diff --git a/${f} b/${f}\n--- a/${f}\n+++ b/${f}`;
-      const hunkPatches = hunks.map(h => h.patch_str).filter(Boolean);
-      if (hunkPatches.length > 0) {
-        parts.push(header + '\n' + hunkPatches.join('\n'));
-      }
-    }
-
     // Use head_file_str from diffs so file content matches the diff version (avoids working tree mismatch for --last-commit etc.)
-    const fileContents = {};
+    // Filter out files that exceed size or line limits before applying the cap
     const skippedLargeFiles = new Set();
     for (const f of fileOrder) {
       const hunks = fileHunks.get(f);
@@ -234,21 +213,49 @@ class ReviewApiHelper extends CommonApiHelper {
         if (lineCount > MAX_FILE_LINES) {
           skippedLargeFiles.add(f);
           dedupedSkipped.push({ file: f, reason: `too large (${lineCount} lines, max ${MAX_FILE_LINES})` });
-          continue;
         }
-        fileContents[f] = content;
       }
     }
 
-    // Remove diff sections for skipped files
-    const filteredParts = parts.filter((_, i) => !skippedLargeFiles.has(fileOrder[i]));
+    // Apply MAX_REVIEW_FILES cap after all filtering (binary, deleted, pattern, size)
+    let capped = false;
+    const cappedFileOrder = [];
+    for (const f of fileOrder) {
+      if (skippedLargeFiles.has(f)) continue;
+      if (cappedFileOrder.length >= MAX_REVIEW_FILES) {
+        capped = true;
+        if (!seenSkipped.has(f)) {
+          dedupedSkipped.push({ file: f, reason: `exceeded ${MAX_REVIEW_FILES}-file limit` });
+          seenSkipped.add(f);
+        }
+        continue;
+      }
+      cappedFileOrder.push(f);
+    }
+
+    // Build file contents for the capped set
+    const fileContents = {};
+    for (const f of cappedFileOrder) {
+      const content = fileHunks.get(f)[0]?.head_file_str || '';
+      if (content) fileContents[f] = content;
+    }
+
+    // Reconstruct a combined diff string from the capped set
+    const parts = [];
+    for (const f of cappedFileOrder) {
+      const hunks = fileHunks.get(f);
+      const header = `diff --git a/${f} b/${f}\n--- a/${f}\n+++ b/${f}`;
+      const hunkPatches = hunks.map(h => h.patch_str).filter(Boolean);
+      if (hunkPatches.length > 0) {
+        parts.push(header + '\n' + hunkPatches.join('\n'));
+      }
+    }
 
-    const reviewedFiles = fileOrder.filter(f => !skippedLargeFiles.has(f));
     return {
-      diff_content: filteredParts.join('\n'),
+      diff_content: parts.join('\n'),
       file_contents: fileContents,
       _meta: {
-        reviewed_files: reviewedFiles,
+        reviewed_files: cappedFileOrder,
         total_changed: allUniqueFiles.size,
         skipped: dedupedSkipped,
         capped,