prismalens 0.0.2 → 0.1.1

package/dist/src/cli/listen.js

@@ -0,0 +1,298 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright 2026 Sumit Patel
+/**
+ * `pl listen` (issue #58, Phase 1 R1) — the walking skeleton of unattended
+ * investigation: a token-authed local HTTP receiver for Alertmanager webhooks.
+ * Each firing alert runs the SAME seam chain as `investigate`/`serve`
+ * (loadConfig → resolveRunSandbox → resolveInvestigation → conductRun with the
+ * file session store), resolved PER PAYLOAD — config edits apply to the next
+ * webhook without a restart. Alert grouping via a debounce window is implemented;
+ * global caps (#62) and Slack notification are still future slices.
+ */
+import { existsSync } from "node:fs";
+import { resolve } from "node:path";
+import { conductRun as engineConductRun } from "@prismalens/engine";
+import { defineCommand } from "citty";
+import { consola } from "consola";
+import { loadConfig } from "../config/loader.js";
+import { createCapsGate, } from "../core/caps.js";
+import { resolveRepoSlug } from "../core/detect-repo.js";
+import { createFileSessionStore } from "../core/file-session-store.js";
+import { isSynthConfigured, pickServiceLabel, resolveInvestigation, } from "../core/run-investigation.js";
+import { createSessionManager } from "../core/session.js";
+import { startListenServer, WEBHOOK_PATH, } from "../http/server.js";
+import { assertKnownFlags } from "./flags.js";
+import { createGroupingLayer } from "./grouping.js";
+import { liveTimelineEntry, resolveRunSandbox as realResolveRunSandbox, } from "./investigate.js";
+/**
+ * The two external boundaries of the chain, injectable for tests: `conductRun`
+ * spawns a harness, `resolveRunSandbox` probes/arms a sandbox. Everything else
+ * (config loader, resolver, file store) runs real.
+ */
+import { notifyRun } from "../core/slack-notify.js";
+/**
+ * Build the per-alert investigation executor the intake server drives — the
+ * `handleInvestigate` chain (jsonrpc/server.ts) minus the RPC framing. Rejects
+ * on a failed run (the server logs it and keeps serving); the sandbox is
+ * CALLER-OWNED and destroyed in `finally` (ADR-0020), matching investigate/serve.
+ */
+/**
+ * Per-payload repo/cwd resolution (issue #58 AC5): the alert's service label
+ * (`service`/`namespace`/`job`) → `services[name].repo` → a `repos` entry's
+ * `local_path`, else the value itself when it is an existing local checkout.
+ * No label / no catalog match / no checkout ⇒ the listen cwd, exactly like a
+ * manual `pl investigate` run from that directory (single-player default).
+ */
+export function resolveRepoPath(alert, config) {
+    const name = pickServiceLabel(alert);
+    if (!name) {
+        throw new Error(`Listen dispatch refused: alert is missing a service label (cannot resolve an investigation workspace).`);
+    }
+    const repoRef = config.services[name]?.repo;
+    if (!repoRef) {
+        throw new Error(`Listen dispatch refused: service "${name}" has no mapped repo in config (cannot resolve an investigation workspace).`);
+    }
+    const localPath = config.repos[repoRef]?.local_path;
+    if (localPath)
+        return resolve(localPath);
+    if (existsSync(repoRef))
+        return resolve(repoRef);
+    throw new Error(`Listen dispatch refused: repo "${repoRef}" (mapped from service "${name}") does not exist locally (cannot resolve an investigation workspace).`);
+}
+export function createInvestigationRunner(options, deps = {}) {
+    const conductRun = deps.conductRun ?? engineConductRun;
+    const resolveRunSandbox = deps.resolveRunSandbox ?? realResolveRunSandbox;
+    const notify = deps.notify ?? notifyRun;
+    const cwd = options.cwd ? resolve(options.cwd) : process.cwd();
+    // One gate for the server's lifetime; state (active count + hourly window)
+    // persists across payloads even though config is re-resolved per payload.
+    const caps = deps.capsGate ?? createCapsGate();
+    return async (runId, alerts) => {
+        // Per payload, not once at startup: config (and thus repo/workspace/harness)
+        // is re-resolved for every alert, exactly like a fresh `pl investigate`.
+        const config = await loadConfig({
+            cwd,
+            ...(options.configPath ? { configPath: options.configPath } : {}),
+        });
+        const alertname = (alerts[0]?.labels?.alertname ?? undefined);
+        // AC5: the checkout under investigation follows the ALERT (service label →
+        // catalog), not the directory the server happened to start in.
+        // MUST be resolved before consuming caps so unmapped alerts do not exhaust budget.
+        let repoPath;
+        try {
+            repoPath = resolveRepoPath(alerts[0], config);
+        }
+        catch (err) {
+            const reason = err instanceof Error ? err.message : String(err);
+            console.error(JSON.stringify({
+                event: "dispatch_refused",
+                runId,
+                reason,
+                ...(alertname ? { alertname } : {}),
+            }));
+            options.log(`Refused run ${runId} (${reason})`);
+            const refusedSessions = createSessionManager(config.workspace.base_dir);
+            try {
+                await refusedSessions.recordSuppressed({
+                    runId,
+                    reason,
+                    ...(alertname ? { alertname } : {}),
+                });
+            }
+            finally {
+                refusedSessions.close?.();
+            }
+            return; // refused, never consume caps
+        }
+        const dispatchCaps = {
+            maxConcurrent: config.listen.caps.max_concurrent,
+            maxPerHour: config.listen.caps.max_per_hour,
+        };
+        const decision = caps.tryDispatch(dispatchCaps, Date.now());
+        if (!decision.allow) {
+            // Structured suppression log — match the repo convention
+            // (slack-notify.ts: console.error(JSON.stringify({ event, ... }))).
+            console.error(JSON.stringify({
+                event: "dispatch_suppressed",
+                runId,
+                reason: decision.reason,
+                ...(alertname ? { alertname } : {}),
+                maxConcurrent: dispatchCaps.maxConcurrent,
+                maxPerHour: dispatchCaps.maxPerHour,
+            }));
+            options.log(`Suppressed run ${runId} (${decision.reason} cap)`);
+            const suppressedSessions = createSessionManager(config.workspace.base_dir);
+            try {
+                await suppressedSessions.recordSuppressed({
+                    runId,
+                    reason: decision.reason,
+                    ...(alertname ? { alertname } : {}),
+                });
+            }
+            finally {
+                suppressedSessions.close?.();
+            }
+            return; // never arm a sandbox / call conductRun for a suppressed run
+        }
+        const harnessName = config.agent.default;
+        const { selection } = await resolveRunSandbox(harnessName, config.agent.sandbox, config);
+        let sessions;
+        try {
+            const resolved = resolveInvestigation({
+                alerts,
+                repo: repoPath,
+                ...(selection
+                    ? {
+                        sandbox: selection.sandbox,
+                        requestedSandbox: selection.requested,
+                    }
+                    : {}),
+                ...(config.listen.caps.max_turns !== undefined
+                    ? { maxTurns: config.listen.caps.max_turns }
+                    : {}),
+                isolateSettings: true,
+            }, config);
+            const { context, harness, synth, fidelity, maxBranches } = resolved;
+            const primaryAlert = context.alerts[0];
+            const repoSlug = await resolveRepoSlug(config.repo, repoPath);
+            sessions = createSessionManager(config.workspace.base_dir);
+            const fileSession = createFileSessionStore(sessions, {
+                runId,
+                alertname: primaryAlert.alertname,
+                agent: resolved.harnessName,
+                ...(repoSlug ? { repo: repoSlug } : {}),
+            });
+            options.log(`Investigating "${primaryAlert.alertname}" with ${resolved.harnessName} in ${repoPath} (run ${runId})`);
+            const outcome = await conductRun({
+                context,
+                harness,
+                synth,
+                fidelity,
+                runId,
+                ...(maxBranches !== undefined ? { maxBranches } : {}),
+            }, {
+                sink: (event) => {
+                    const entry = liveTimelineEntry(event);
+                    if (entry)
+                        options.log(entry);
+                },
+                store: fileSession.store,
+            });
+            if (config.listen.slack_webhook_url) {
+                try {
+                    await notify(config.listen.slack_webhook_url, primaryAlert.alertname, outcome);
+                }
+                catch (err) {
+                    // Fallback for an injected notify that violates the contract.
+                    // The real notifyRun never rejects.
+                    options.log(`Slack notification failed with error: ${err}`);
+                }
+            }
+            if (!outcome.report) {
+                throw new Error(outcome.error ?? "investigation produced no evidence");
+            }
+            options.log(`Report saved for run ${runId}`);
+        }
+        finally {
+            caps.release();
+            // Close this run's sqlite connection — the runner opens one PER alert,
+            // so leaving it open would leak a handle on every webhook.
+            sessions?.close?.();
+            // The listen path owns the boundary's lifecycle (ADR-0020) — torn down
+            // whichever way the run exited (report, no-evidence, error, or throw).
+            if (selection)
+                await selection.sandbox.destroy();
+        }
+    };
+}
+/**
+ * The command body behind `pl listen`, separated from citty so it's testable:
+ * load config, demand a token, start the intake server wired to the real (or
+ * injected) investigation chain. Returns the running server (the caller owns
+ * `close()`; the CLI just lets it hold the event loop open).
+ */
+export async function startListenFromConfig(options, deps = {}) {
+    const cwd = options.cwd ? resolve(options.cwd) : process.cwd();
+    const config = await loadConfig({
+        cwd,
+        ...(options.configPath ? { configPath: options.configPath } : {}),
+    });
+    if (!isSynthConfigured(config)) {
+        options.log("No Tier-1 provider configured (checked env + _FILE for: ANTHROPIC_API_KEY, OPENAI_API_KEY, GOOGLE_API_KEY, GROQ_API_KEY, OLLAMA_API_KEY) — reports will be RAW harness pass-through (un-synthesized). This is supported.");
+    }
+    if (!config.listen.token) {
+        // An open intake is not a mode — refuse to start rather than serve unauthenticated.
+        throw new Error("config is missing listen.token (required — intake auth). Add listen.token to prismalens.config.yaml.");
+    }
+    const sessions = createSessionManager(config.workspace.base_dir);
+    // Startup reaper (#136): mark any orphaned "running" runs from a previous
+    // dead listener as errored, so pl status reflects reality.
+    const staleRuns = await sessions.list({ status: ["running"] });
+    // Liveness guard: only reap runs whose updatedAt is older than the max possible
+    // run duration (wall-clock cap if configured, else 1 hour) plus 5 minutes slack.
+    const runWallClockMs = config.agent.limits.wall_clock_ms || 60 * 60 * 1000;
+    const staleThresholdMs = runWallClockMs + 5 * 60 * 1000;
+    const now = Date.now();
+    for (const run of staleRuns) {
+        const updatedTime = new Date(run.updatedAt).getTime();
+        if (now - updatedTime > staleThresholdMs) {
+            await sessions.update(run.runId, {
+                status: "errored",
+                error: "listener process died mid-investigation (interrupted)",
+            });
+            options.log(`Reaped stale run ${run.runId} from a previous listener`);
+        }
+    }
+    const grouping = createGroupingLayer({
+        windowMs: config.listen.grouping_window_ms,
+        sessions,
+        runInvestigation: createInvestigationRunner(options, deps),
+        log: options.log,
+    });
+    const server = await startListenServer({
+        port: config.listen.port,
+        token: config.listen.token,
+        maxPending: config.listen.max_pending,
+        grouping,
+    });
+    // grouping holds a connection for the server's lifetime; release it on close
+    // (server.close already drains grouping via shutdown()).
+    return {
+        ...server,
+        async close() {
+            await server.close();
+            sessions.close?.();
+        },
+    };
+}
+export default defineCommand({
+    meta: {
+        name: "listen",
+        description: "Start a token-authed local HTTP listener for Alertmanager webhooks; each firing alert triggers an investigation (Phase 1 R1).\n\nExamples:\n  $ PRISMALENS_LISTEN_TOKEN=xyz pl listen --config my-stack.yaml",
+    },
+    args: {
+        config: {
+            type: "string",
+            description: "Path to prismalens.config.yaml (else global→project hierarchy).",
+        },
+    },
+    /* v8 ignore start — process-global glue (cwd + consola binding); the body it
+       delegates to is fully covered via startListenFromConfig tests */
+    async run({ args, cmd }) {
+        try {
+            assertKnownFlags(args, cmd);
+            const server = await startListenFromConfig({
+                cwd: process.cwd(),
+                ...(args.config ? { configPath: args.config } : {}),
+                log: (line) => consola.log(line),
+            });
+            consola.success(`Listening for Alertmanager webhooks on http://127.0.0.1:${server.port}${WEBHOOK_PATH}`);
+        }
+        catch (err) {
+            consola.error(err instanceof Error ? err.message : String(err));
+            process.exit(1);
+        }
+    },
+    /* v8 ignore stop */
+});
+//# sourceMappingURL=listen.js.map

package/dist/src/cli/listen.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"listen.js","sourceRoot":"","sources":["../../../src/cli/listen.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,6BAA6B;AAE7B;;;;;;;;GAQG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,UAAU,IAAI,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AACtC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEjD,OAAO,EAEN,cAAc,GAEd,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EACN,iBAAiB,EACjB,gBAAgB,EAChB,oBAAoB,GACpB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,oBAAoB,EAAuB,MAAM,oBAAoB,CAAC;AAC/E,OAAO,EAEN,iBAAiB,EACjB,YAAY,GACZ,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EACN,iBAAiB,EACjB,iBAAiB,IAAI,qBAAqB,GAC1C,MAAM,kBAAkB,CAAC;AAY1B;;;;GAIG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAapD;;;;;GAKG;AACH;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAC9B,KAA8B,EAC9B,MAAgB;IAEhB,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACd,wGAAwG,CACxG,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC;IAC5C,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACd,qCAAqC,IAAI,6EAA6E,CACtH,CAAC;IACH,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC;IACpD,IAAI,SAAS;QAAE,OAAO,OAAO,CAAC,SAAS,CAAC,CAAC;IACzC,IAAI,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,IAAI,KAAK,CACd,kCAAkC,OAAO,2BAA2B,IAAI,wEAAwE,CAChJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,yBAAyB,CACxC,OAAmC,EACnC,OAAgC,EAAE;IAElC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,gBAAgB,CAAC;IACvD,MAAM,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,IAAI,qBAAqB,CAAC;IAC1E,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC;IACxC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;IAE/D,2EAA2E;IAC3E,0EAA0E;IAC1E,MAAM,IAAI,GAAa,IAAI,CAAC,QAAQ,IAAI,cAAc,EAAE,CAAC;IAEzD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QAC9B,6EAA6E;QAC7E,yEAAyE;QACzE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC;YAC/B,GAAG;YACH,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,CACjB,MAAM,CAAC,CAAC,CAAC,EAAE,MACX,EAAE,SAAS,IAAI,SAAS,CAAuB,CAAC;QAEjD,2EAA2E;QAC3E,+DAA+D;QAC/D,mFAAmF;QACnF,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACJ,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChE,OAAO,CAAC,KAAK,CACZ,IAAI,CAAC,SAAS,CAAC;gBACd,KAAK,EAAE,kBAAkB;gBACzB,KAAK;gBACL,MAAM;gBACN,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACnC,CAAC,CACF,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,KAAK,MAAM,GAAG,CAAC,CAAC;YAChD,MAAM,eAAe,GAAG,oBAAoB,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YACxE,IAAI,CAAC;gBACJ,MAAM,eAAe,CAAC,gBAAgB,CAAC;oBACtC,KAAK;oBACL,MAAM;oBACN,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACnC,CAAC,CAAC;YACJ,CAAC;oBAAS,CAAC;gBACV,eAAe,CAAC,KAAK,EAAE,EAAE,CAAC;YAC3B,CAAC;YACD,OAAO,CAAC,8BAA8B;QACvC,CAAC;QAED,MAAM,YAAY,GAAiB;YAClC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc;YAChD,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY;SAC3C,CAAC;QACF,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;YACrB,yDAAyD;YACzD,oEAAoE;YACpE,OAAO,CAAC,KAAK,CACZ,IAAI,CAAC,SAAS,CAAC;gBACd,KAAK,EAAE,qBAAqB;gBAC5B,KAAK;gBACL,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnC,aAAa,EAAE,YAAY,CAAC,aAAa;gBACzC,UAAU,EAAE,YAAY,CAAC,UAAU;aACnC,CAAC,CACF,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,KAAK,QAAQ,CAAC,MAAM,OAAO,CAAC,CAAC;YAChE,MAAM,kBAAkB,GAAG,oBAAoB,CAC9C,MAAM,CAAC,SAAS,CAAC,QAAQ,CACzB,CAAC;YACF,IAAI,CAAC;gBACJ,MAAM,kBAAkB,CAAC,gBAAgB,CAAC;oBACzC,KAAK;oBACL,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACnC,CAAC,CAAC;YACJ,CAAC;oBAAS,CAAC;gBACV,kBAAkB,CAAC,KAAK,EAAE,EAAE,CAAC;YAC9B,CAAC;YACD,OAAO,CAAC,6DAA6D;QACtE,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;QACzC,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,iBAAiB,CAC5C,WAAW,EACX,MAAM,CAAC,KAAK,CAAC,OAAO,EACpB,MAAM,CACN,CAAC;QACF,IAAI,QAAoC,CAAC;QACzC,IAAI,CAAC;YACJ,MAAM,QAAQ,GAAG,oBAAoB,CACpC;gBACC,MAAM;gBACN,IAAI,EAAE,QAAQ;gBACd,GAAG,CAAC,SAAS;oBACZ,CAAC,CAAC;wBACA,OAAO,EAAE,SAAS,CAAC,OAAO;wBAC1B,gBAAgB,EAAE,SAAS,CAAC,SAAS;qBACrC;oBACF,CAAC,CAAC,EAAE,CAAC;gBACN,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS;oBAC7C,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE;oBAC5C,CAAC,CAAC,EAAE,CAAC;gBACN,eAAe,EAAE,IAAI;aACrB,EACD,MAAM,CACN,CAAC;YACF,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,QAAQ,CAAC;YACpE,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAEvC,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC9D,QAAQ,GAAG,oBAAoB,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YAC3D,MAAM,WAAW,GAAG,sBAAsB,CAAC,QAAQ,EAAE;gBACpD,KAAK;gBACL,SAAS,EAAE,YAAY,CAAC,SAAS;gBACjC,KAAK,EAAE,QAAQ,CAAC,WAAW;gBAC3B,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACvC,CAAC,CAAC;YAEH,OAAO,CAAC,GAAG,CACV,kBAAkB,YAAY,CAAC,SAAS,UAAU,QAAQ,CAAC,WAAW,OAAO,QAAQ,SAAS,KAAK,GAAG,CACtG,CAAC;YACF,MAAM,OAAO,GAAG,MAAM,UAAU,CAC/B;gBACC,OAAO;gBACP,OAAO;gBACP,KAAK;gBACL,QAAQ;gBACR,KAAK;gBACL,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACrD,EACD;gBACC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE;oBACf,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;oBACvC,IAAI,KAAK;wBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAC/B,CAAC;gBACD,KAAK,EAAE,WAAW,CAAC,KAAK;aACxB,CACD,CAAC;YAEF,IAAI,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;gBACrC,IAAI,CAAC;oBACJ,MAAM,MAAM,CACX,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAC/B,YAAY,CAAC,SAAmB,EAChC,OAAO,CACP,CAAC;gBACH,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACd,8DAA8D;oBAC9D,oCAAoC;oBACpC,OAAO,CAAC,GAAG,CAAC,yCAAyC,GAAG,EAAE,CAAC,CAAC;gBAC7D,CAAC;YACF,CAAC;YAED,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,oCAAoC,CAAC,CAAC;YACxE,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,wBAAwB,KAAK,EAAE,CAAC,CAAC;QAC9C,CAAC;gBAAS,CAAC;YACV,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,uEAAuE;YACvE,2DAA2D;YAC3D,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC;YACpB,uEAAuE;YACvE,uEAAuE;YACvE,IAAI,SAAS;gBAAE,MAAM,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAClD,CAAC;IACF,CAAC,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAC1C,OAAmC,EACnC,OAAgC,EAAE;IAElC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;IAC/D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC;QAC/B,GAAG;QACH,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjE,CAAC,CAAC;IAEH,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;QAChC,OAAO,CAAC,GAAG,CACV,0NAA0N,CAC1N,CAAC;IACH,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAC1B,oFAAoF;QACpF,MAAM,IAAI,KAAK,CACd,sGAAsG,CACtG,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAEjE,0EAA0E;IAC1E,2DAA2D;IAC3D,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAC/D,gFAAgF;IAChF,iFAAiF;IACjF,MAAM,cAAc,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAC3E,MAAM,gBAAgB,GAAG,cAAc,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IACxD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEvB,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC7B,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;QACtD,IAAI,GAAG,GAAG,WAAW,GAAG,gBAAgB,EAAE,CAAC;YAC1C,MAAM,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE;gBAChC,MAAM,EAAE,SAAS;gBACjB,KAAK,EAAE,uDAAuD;aAC9D,CAAC,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,CAAC,KAAK,2BAA2B,CAAC,CAAC;QACvE,CAAC;IACF,CAAC;IAED,MAAM,QAAQ,GAAG,mBAAmB,CAAC;QACpC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,kBAAkB;QAC1C,QAAQ;QACR,gBAAgB,EAAE,yBAAyB,CAAC,OAAO,EAAE,IAAI,CAAC;QAC1D,GAAG,EAAE,OAAO,CAAC,GAAG;KAChB,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;QACtC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;QACxB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK;QAC1B,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW;QACrC,QAAQ;KACR,CAAC,CAAC;IAEH,6EAA6E;IAC7E,yDAAyD;IACzD,OAAO;QACN,GAAG,MAAM;QACT,KAAK,CAAC,KAAK;YACV,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACrB,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC;QACpB,CAAC;KACD,CAAC;AACH,CAAC;AAED,eAAe,aAAa,CAAC;IAC5B,IAAI,EAAE;QACL,IAAI,EAAE,QAAQ;QACd,WAAW,EACV,8MAA8M;KAC/M;IACD,IAAI,EAAE;QACL,MAAM,EAAE;YACP,IAAI,EAAE,QAAQ;YACd,WAAW,EACV,iEAAiE;SAClE;KACD;IACD;uEACmE;IACnE,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE;QACtB,IAAI,CAAC;YACJ,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAE5B,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC;gBAC1C,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;gBAClB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnD,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;aAChC,CAAC,CAAC;YACH,OAAO,CAAC,OAAO,CACd,2DAA2D,MAAM,CAAC,IAAI,GAAG,YAAY,EAAE,CACvF,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;IACF,CAAC;IACD,oBAAoB;CACpB,CAAC,CAAC"}

package/dist/src/cli/report.d.ts

@@ -0,0 +1,19 @@
+declare const _default: import("citty").CommandDef<{
+    readonly id: {
+        readonly type: "positional";
+        readonly description: "The run ID";
+        readonly required: true;
+    };
+    readonly events: {
+        readonly type: "boolean";
+        readonly description: "Include timeline events";
+        readonly required: false;
+    };
+    readonly "base-dir": {
+        readonly type: "string";
+        readonly description: "Workspace base directory (default: ~/.prismalens)";
+        readonly required: false;
+    };
+}>;
+export default _default;
+//# sourceMappingURL=report.d.ts.map

package/dist/src/cli/report.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.d.ts","sourceRoot":"","sources":["../../../src/cli/report.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAQA,wBAqDG"}

package/dist/src/cli/report.js

@@ -0,0 +1,60 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright 2026 Sumit Patel
+import { defineCommand } from "citty";
+import consola from "consola";
+import { createSessionManager } from "../core/session.js";
+import { assertKnownFlags } from "./flags.js";
+export default defineCommand({
+    meta: {
+        name: "report",
+        description: "Print a stored report for a given run ID",
+    },
+    args: {
+        id: {
+            type: "positional",
+            description: "The run ID",
+            required: true,
+        },
+        events: {
+            type: "boolean",
+            description: "Include timeline events",
+            required: false,
+        },
+        "base-dir": {
+            type: "string",
+            description: "Workspace base directory (default: ~/.prismalens)",
+            required: false,
+        },
+    },
+    async run({ args, cmd }) {
+        let sessions;
+        try {
+            assertKnownFlags(args, cmd);
+            sessions = createSessionManager(args["base-dir"]);
+            const report = await sessions.readReport(args.id);
+            if (!report) {
+                consola.error(`No report for run ${args.id}`);
+                // exitCode (not process.exit) so the finally block still closes the
+                // session manager before the process tears down.
+                process.exitCode = 1;
+                return;
+            }
+            consola.log(JSON.stringify(report, null, 2));
+            if (args.events) {
+                const events = await sessions.readEvents(args.id);
+                consola.log("\n--- Timeline Events ---");
+                for (const ev of events) {
+                    consola.log(JSON.stringify(ev));
+                }
+            }
+        }
+        catch (err) {
+            consola.error("Failed to read report:", err);
+            process.exitCode = 1;
+        }
+        finally {
+            sessions?.close?.();
+        }
+    },
+});
+//# sourceMappingURL=report.js.map

package/dist/src/cli/report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.js","sourceRoot":"","sources":["../../../src/cli/report.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,6BAA6B;AAE7B,OAAO,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AACtC,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C,eAAe,aAAa,CAAC;IAC5B,IAAI,EAAE;QACL,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,0CAA0C;KACvD;IACD,IAAI,EAAE;QACL,EAAE,EAAE;YACH,IAAI,EAAE,YAAY;YAClB,WAAW,EAAE,YAAY;YACzB,QAAQ,EAAE,IAAI;SACd;QACD,MAAM,EAAE;YACP,IAAI,EAAE,SAAS;YACf,WAAW,EAAE,yBAAyB;YACtC,QAAQ,EAAE,KAAK;SACf;QACD,UAAU,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,mDAAmD;YAChE,QAAQ,EAAE,KAAK;SACf;KACD;IACD,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE;QACtB,IAAI,QAA6D,CAAC;QAClE,IAAI,CAAC;YACJ,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC5B,QAAQ,GAAG,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;YAElD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAClD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CAAC,qBAAqB,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC9C,oEAAoE;gBACpE,iDAAiD;gBACjD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBACrB,OAAO;YACR,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAE7C,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBACjB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAClD,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;gBACzC,KAAK,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;oBACzB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;gBACjC,CAAC;YACF,CAAC;QACF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;YAC7C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACtB,CAAC;gBAAS,CAAC;YACV,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC;QACrB,CAAC;IACF,CAAC;CACD,CAAC,CAAC"}

package/dist/src/cli/serve.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"serve.d.ts","sourceRoot":"","sources":["../../../src/cli/serve.ts"],"names":[],"mappings":";AAmBA,wBASG"}
+{"version":3,"file":"serve.d.ts","sourceRoot":"","sources":["../../../src/cli/serve.ts"],"names":[],"mappings":";AAqBA,wBAeG"}

package/dist/src/cli/serve.js

@@ -10,8 +10,10 @@
  * written exactly as the `investigate` command writes it.
  */
 import { defineCommand } from "citty";
+import { consola } from "consola";
 import { runJsonRpcServer } from "../jsonrpc/server.js";
 import { cliVersion } from "../version.js";
+import { assertKnownFlags } from "./flags.js";
 /** Reported as serverInfo.version by `initialize` (matches the CLI's meta.version). */
 const SERVER_VERSION = cliVersion();
 export default defineCommand({
@@ -19,8 +21,15 @@ export default defineCommand({
         name: "serve",
         description: "Run the JSON-RPC 2.0 server over stdio (the LIVE channel for the desktop app / API).",
     },
-    async run() {
-        await runJsonRpcServer({ version: SERVER_VERSION });
+    async run({ args, cmd }) {
+        try {
+            assertKnownFlags(args, cmd);
+            await runJsonRpcServer({ version: SERVER_VERSION });
+        }
+        catch (err) {
+            consola.error(err instanceof Error ? err.message : String(err));
+            process.exit(1);
+        }
     },
 });
 //# sourceMappingURL=serve.js.map

package/dist/src/cli/serve.js.map

@@ -1 +1 @@
-{"version":3,"file":"serve.js","sourceRoot":"","sources":["../../../src/cli/serve.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,6BAA6B;AAE7B;;;;;;;;GAQG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AACtC,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAE3C,uFAAuF;AACvF,MAAM,cAAc,GAAG,UAAU,EAAE,CAAC;AAEpC,eAAe,aAAa,CAAC;IAC5B,IAAI,EAAE;QACL,IAAI,EAAE,OAAO;QACb,WAAW,EACV,sFAAsF;KACvF;IACD,KAAK,CAAC,GAAG;QACR,MAAM,gBAAgB,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;IACrD,CAAC;CACD,CAAC,CAAC"}
+{"version":3,"file":"serve.js","sourceRoot":"","sources":["../../../src/cli/serve.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,6BAA6B;AAE7B;;;;;;;;GAQG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AACtC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C,uFAAuF;AACvF,MAAM,cAAc,GAAG,UAAU,EAAE,CAAC;AAEpC,eAAe,aAAa,CAAC;IAC5B,IAAI,EAAE;QACL,IAAI,EAAE,OAAO;QACb,WAAW,EACV,sFAAsF;KACvF;IACD,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE;QACtB,IAAI,CAAC;YACJ,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC5B,MAAM,gBAAgB,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;IACF,CAAC;CACD,CAAC,CAAC"}

package/dist/src/cli/status.d.ts

@@ -0,0 +1,14 @@
+declare const _default: import("citty").CommandDef<{
+    readonly status: {
+        readonly type: "string";
+        readonly description: "Filter by status (running, done, errored, suppressed)";
+        readonly required: false;
+    };
+    readonly "base-dir": {
+        readonly type: "string";
+        readonly description: "Workspace base directory (default: ~/.prismalens)";
+        readonly required: false;
+    };
+}>;
+export default _default;
+//# sourceMappingURL=status.d.ts.map

package/dist/src/cli/status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../../src/cli/status.ts"],"names":[],"mappings":";;;;;;;;;;;;AAQA,wBA6EG"}

package/dist/src/cli/status.js

@@ -0,0 +1,83 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright 2026 Sumit Patel
+import { defineCommand } from "citty";
+import consola from "consola";
+import { createSessionManager } from "../core/session.js";
+import { assertKnownFlags } from "./flags.js";
+export default defineCommand({
+    meta: {
+        name: "status",
+        description: "List incident groups and runs with their state (running, done, errored, suppressed)",
+    },
+    args: {
+        status: {
+            type: "string",
+            description: "Filter by status (running, done, errored, suppressed)",
+            required: false,
+        },
+        "base-dir": {
+            type: "string",
+            description: "Workspace base directory (default: ~/.prismalens)",
+            required: false,
+        },
+    },
+    async run({ args, cmd }) {
+        let sessions;
+        try {
+            assertKnownFlags(args, cmd);
+            sessions = createSessionManager(args["base-dir"]);
+            const valid = [
+                "running",
+                "done",
+                "errored",
+                "suppressed",
+            ];
+            let filter;
+            if (args.status) {
+                const parts = args.status
+                    .split(",")
+                    .map((s) => s.trim())
+                    .filter((s) => s.length > 0);
+                const bad = parts.filter((s) => !valid.includes(s));
+                if (bad.length > 0) {
+                    consola.error(`Invalid status: ${bad.join(", ")}. Valid: ${valid.join(", ")}`);
+                    // exitCode (not process.exit) so the finally block still closes the
+                    // session manager before the process tears down.
+                    process.exitCode = 1;
+                    return;
+                }
+                filter = { status: parts };
+            }
+            const runs = await sessions.list(filter);
+            if (runs.length === 0) {
+                consola.info("No runs found.");
+                return;
+            }
+            for (const run of runs) {
+                const info = [
+                    `run_id: ${run.runId}`,
+                    `status: ${run.status}`,
+                    `created_at: ${run.createdAt}`,
+                ];
+                if (run.alertname)
+                    info.push(`alertname: ${run.alertname}`);
+                if (run.agent)
+                    info.push(`agent: ${run.agent}`);
+                if (run.repo)
+                    info.push(`repo: ${run.repo}`);
+                if (run.status === "suppressed" && run.suppressionReason) {
+                    info.push(`suppressed_by: ${run.suppressionReason}`);
+                }
+                consola.log(info.join(" | "));
+            }
+        }
+        catch (err) {
+            consola.error("Failed to read status:", err);
+            process.exitCode = 1;
+        }
+        finally {
+            sessions?.close?.();
+        }
+    },
+});
+//# sourceMappingURL=status.js.map

package/dist/src/cli/status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../../../src/cli/status.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,6BAA6B;AAE7B,OAAO,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AACtC,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,oBAAoB,EAAsB,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C,eAAe,aAAa,CAAC;IAC5B,IAAI,EAAE;QACL,IAAI,EAAE,QAAQ;QACd,WAAW,EACV,qFAAqF;KACtF;IACD,IAAI,EAAE;QACL,MAAM,EAAE;YACP,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,uDAAuD;YACpE,QAAQ,EAAE,KAAK;SACf;QACD,UAAU,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,mDAAmD;YAChE,QAAQ,EAAE,KAAK;SACf;KACD;IACD,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE;QACtB,IAAI,QAA6D,CAAC;QAClE,IAAI,CAAC;YACJ,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC5B,QAAQ,GAAG,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;YAElD,MAAM,KAAK,GAAoB;gBAC9B,SAAS;gBACT,MAAM;gBACN,SAAS;gBACT,YAAY;aACZ,CAAC;YACF,IAAI,MAAgD,CAAC;YACrD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBACjB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM;qBACvB,KAAK,CAAC,GAAG,CAAC;qBACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;qBACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;gBAC9B,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAkB,CAAC,CAAC,CAAC;gBACrE,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACpB,OAAO,CAAC,KAAK,CACZ,mBAAmB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC/D,CAAC;oBACF,oEAAoE;oBACpE,iDAAiD;oBACjD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;oBACrB,OAAO;gBACR,CAAC;gBACD,MAAM,GAAG,EAAE,MAAM,EAAE,KAAwB,EAAE,CAAC;YAC/C,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACzC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;gBAC/B,OAAO;YACR,CAAC;YAED,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACxB,MAAM,IAAI,GAAG;oBACZ,WAAW,GAAG,CAAC,KAAK,EAAE;oBACtB,WAAW,GAAG,CAAC,MAAM,EAAE;oBACvB,eAAe,GAAG,CAAC,SAAS,EAAE;iBAC9B,CAAC;gBACF,IAAI,GAAG,CAAC,SAAS;oBAAE,IAAI,CAAC,IAAI,CAAC,cAAc,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC;gBAC5D,IAAI,GAAG,CAAC,KAAK;oBAAE,IAAI,CAAC,IAAI,CAAC,UAAU,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;gBAChD,IAAI,GAAG,CAAC,IAAI;oBAAE,IAAI,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC7C,IAAI,GAAG,CAAC,MAAM,KAAK,YAAY,IAAI,GAAG,CAAC,iBAAiB,EAAE,CAAC;oBAC1D,IAAI,CAAC,IAAI,CAAC,kBAAkB,GAAG,CAAC,iBAAiB,EAAE,CAAC,CAAC;gBACtD,CAAC;gBAED,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAC/B,CAAC;QACF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;YAC7C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACtB,CAAC;gBAAS,CAAC;YACV,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC;QACrB,CAAC;IACF,CAAC;CACD,CAAC,CAAC"}

package/dist/src/config/loader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../../src/config/loader.ts"],"names":[],"mappings":"AAgCA,OAAO,EAAE,KAAK,QAAQ,EAAkB,MAAM,aAAa,CAAC;AAM5D,MAAM,WAAW,YAAY;IAC5B,uCAAuC;IACvC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mBAAmB;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IACjC,kEAAkE;IAClE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0EAA0E;IAC1E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,YAAY,CAAC;CAC5B;AAED,uFAAuF;AACvF,wBAAgB,cAAc,CAC7B,GAAG,GAAE,MAAsB,GACzB,MAAM,GAAG,SAAS,CASpB;AA+FD,2EAA2E;AAC3E,wBAAsB,UAAU,CAC/B,OAAO,GAAE,iBAAsB,GAC7B,OAAO,CAAC,QAAQ,CAAC,CA8BnB"}
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../../src/config/loader.ts"],"names":[],"mappings":"AAiCA,OAAO,EAAE,KAAK,QAAQ,EAAkB,MAAM,aAAa,CAAC;AAM5D,MAAM,WAAW,YAAY;IAC5B,uCAAuC;IACvC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mBAAmB;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IACjC,kEAAkE;IAClE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0EAA0E;IAC1E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,YAAY,CAAC;CAC5B;AAED,uFAAuF;AACvF,wBAAgB,cAAc,CAC7B,GAAG,GAAE,MAAsB,GACzB,MAAM,GAAG,SAAS,CASpB;AA+FD,2EAA2E;AAC3E,wBAAsB,UAAU,CAC/B,OAAO,GAAE,iBAAsB,GAC7B,OAAO,CAAC,QAAQ,CAAC,CA6DnB"}

package/dist/src/config/loader.js

@@ -29,6 +29,7 @@ import { readFile } from "node:fs/promises";
 import { dirname, join, parse as parsePath, resolve } from "node:path";
 import envPaths from "env-paths";
 import { parse as parseYaml } from "yaml";
+import { ZodError } from "zod";
 import { PlConfigSchema } from "./schema.js";
 const PROJECT_CONFIG_FILENAME = "prismalens.config.yaml";
 const PROJECT_LOCAL_CONFIG_FILENAME = "prismalens.config.local.yaml";
@@ -125,18 +126,30 @@ function applyCliOverrides(config, o) {
 /** Load, merge, interpolate, and validate the config. Result is frozen. */
 export async function loadConfig(options = {}) {
     const cwd = options.cwd ?? process.cwd();
+    if (options.configPath) {
+        const resolvedPath = resolve(options.configPath);
+        if (!existsSync(resolvedPath)) {
+            throw new Error(`Configuration file not found: ${resolvedPath}`);
+        }
+    }
     const userFile = userConfigFile();
     const projectFile = options.configPath
         ? resolve(options.configPath)
         : findConfigFile(cwd);
     const projectLocalFile = projectLocalConfigFile(projectFile, cwd);
     let merged = {};
-    if (userFile)
+    const readFiles = [];
+    if (userFile) {
         merged = deepMerge(merged, await readYamlFile(userFile));
-    if (projectFile)
+        readFiles.push(userFile);
+    }
+    if (projectFile) {
         merged = deepMerge(merged, await readYamlFile(projectFile));
+        readFiles.push(projectFile);
+    }
     if (projectLocalFile && projectLocalFile !== projectFile) {
         merged = deepMerge(merged, await readYamlFile(projectLocalFile));
+        readFiles.push(projectLocalFile);
     }
     if (options.cliOverrides) {
         merged = applyCliOverrides(merged, options.cliOverrides);
@@ -147,6 +160,19 @@ export async function loadConfig(options = {}) {
         config = PlConfigSchema.parse(interpolated);
     }
     catch (err) {
+        let attribution = "in config";
+        if (readFiles.length === 1) {
+            attribution = `in ${readFiles[0]}`;
+        }
+        else if (readFiles.length > 1) {
+            attribution = `(merged from: ${readFiles.join(", ")})`;
+        }
+        if (err instanceof ZodError) {
+            const issues = err.issues
+                .map((i) => `${i.path.length > 0 ? i.path.join(".") : "<root>"}: ${i.message}`)
+                .join("\n");
+            throw new Error(`Invalid configuration ${attribution}:\n${issues}`);
+        }
         const detail = err instanceof Error ? err.message : String(err);
         throw new Error(`Invalid PrismaLens configuration: ${detail}`);
     }