systemlink-cli 1.29.1__tar.gz → 1.29.4__tar.gz

{systemlink_cli-1.29.1 → systemlink_cli-1.29.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: systemlink-cli
-Version: 1.29.1
+Version: 1.29.4
 Summary: SystemLink Integrator CLI - cross-platform CLI for SystemLink workflows and templates.
 License-File: LICENSE
 Author: Fred Visser

{systemlink_cli-1.29.1 → systemlink_cli-1.29.4}/pyproject.toml

@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "systemlink-cli"
-version = "1.29.1"
+version = "1.29.4"
 description = "SystemLink Integrator CLI - cross-platform CLI for SystemLink workflows and templates."
 authors = ["Fred Visser <fred.visser@emerson.com>"]
 packages = [{ include = "slcli" }]

{systemlink_cli-1.29.1 → systemlink_cli-1.29.4}/slcli/_version.py

@@ -1,4 +1,4 @@
 """Version information for slcli."""
 
 # This file is auto-generated. Do not edit manually.
-__version__ = "1.29.1"
+__version__ = "1.29.4"

{systemlink_cli-1.29.1 → systemlink_cli-1.29.4}/slcli/config_click.py

@@ -109,6 +109,11 @@ def _all_service_probes_unauthorized(services: dict[str, str]) -> bool:
     return bool(services) and all(status == "unauthorized" for status in services.values())
 
 
+def _any_service_probes_unauthorized(services: dict[str, str]) -> bool:
+    """Return True if any recorded service probe failed with authorization."""
+    return bool(services) and any(status == "unauthorized" for status in services.values())
+
+
 def _normalize_fingerprint(fingerprint: str) -> str:
     """Normalize a SHA-256 certificate fingerprint supplied by a user."""
     normalized = fingerprint.replace(":", "").replace(" ", "").strip().upper()
@@ -179,7 +184,10 @@ def _trust_certificate_if_requested(
 
     try:
         save_managed_certificate(certificate)
-        retry_status = check_service_status(url, credential, auth_scheme=auth_scheme)
+        if auth_scheme == "bearer":
+            retry_status = check_web_server_auth(url, credential, auth_scheme=auth_scheme)
+        else:
+            retry_status = check_service_status(url, credential, auth_scheme=auth_scheme)
     except (OSError, ValueError) as exc:
         _exit_with_validation_error(
             f"Could not save the trusted certificate: {exc}. Profile was not saved.",
@@ -303,10 +311,10 @@ def _add_profile_impl(
 
     assert isinstance(api_key, str)
 
-    # PKCE uses the Web URL for bearer service probes; API-key login uses the API URL.
+    # Validate PKCE against the Web Server identity route; API-key login retains API probes.
     click.echo("Checking server connectivity and services...")
     if auth_mode == "pkce":
-        status = check_service_status(web_url, api_key, auth_scheme="bearer")
+        status = check_web_server_auth(web_url, api_key, auth_scheme="bearer")
     else:
         status = check_service_status(url, api_key)
 
@@ -321,6 +329,11 @@ def _add_profile_impl(
         )
 
     platform = status["platform"]
+    if auth_mode == "pkce":
+        platform_status = check_service_status(web_url, api_key, auth_scheme="bearer")
+        detected_platform = platform_status.get("platform")
+        if detected_platform in (PLATFORM_SLE, PLATFORM_SLS):
+            platform = detected_platform
     services = status.get("services", {})
 
     if not status["server_reachable"]:
@@ -330,7 +343,10 @@ def _add_profile_impl(
             ExitCodes.NETWORK_ERROR,
         )
 
-    if status["auth_valid"] is False and _all_service_probes_unauthorized(services):
+    if status["auth_valid"] is False and (
+        _all_service_probes_unauthorized(services)
+        or (_any_service_probes_unauthorized(services) and platform == PLATFORM_SLS)
+    ):
         auth_failure_message = (
             "PKCE bearer token validation failed. The server responded, but the token was not authorized. "
             if auth_mode == "pkce"

{systemlink_cli-1.29.1 → systemlink_cli-1.29.4}/slcli/platform.py

@@ -88,6 +88,7 @@ FILE_QUERY_LINQ_PATH = "/nifile/v1/service-groups/Default/query-files-linq"
 SYSTEM_SEARCH_PATH = "/nisysmgmt/v1/materialized/search-systems"
 SYSTEM_QUERY_PATH = "/nisysmgmt/v1/query-systems"
 WEB_SERVER_AUTH_PATH = "/niauth/v1/auth"
+SLS_PLATFORM_PROBE_PATH = "/nitagrule/"
 
 SLE_ONLY_SERVICE_NAMES = (
     "Dynamic Form Fields",
@@ -97,17 +98,22 @@ SLE_ONLY_SERVICE_NAMES = (
 )
 
 
-def _detect_platform_from_services(services: Dict[str, str]) -> str:
-    """Infer the platform from SLE-only service probes.
+def _detect_platform_from_services(
+    services: Dict[str, str], sls_platform_status: Optional[str] = None
+) -> str:
+    """Infer the platform from positive platform capability probes.
 
     Args:
         services: Mapping of service display name to probe status.
 
     Returns:
         PLATFORM_SLE when any SLE-only service is reachable or explicitly
-        unauthorized, PLATFORM_SLS when all SLE-only services are missing,
+        unauthorized, PLATFORM_SLS when the SLS-only platform probe succeeds,
         otherwise PLATFORM_UNKNOWN.
     """
+    if sls_platform_status == "ok":
+        return PLATFORM_SLS
+
     sle_statuses = [services.get(name) for name in SLE_ONLY_SERVICE_NAMES if name in services]
     if not sle_statuses:
         return PLATFORM_UNKNOWN
@@ -115,12 +121,47 @@ def _detect_platform_from_services(services: Dict[str, str]) -> str:
     if any(status in ("ok", "unauthorized") for status in sle_statuses):
         return PLATFORM_SLE
 
-    if all(status == "not_found" for status in sle_statuses):
-        return PLATFORM_SLS
-
     return PLATFORM_UNKNOWN
 
 
+def _is_valid_sls_platform_probe(response: requests.Response) -> bool:
+    """Return whether a Tag Rule Engine response identifies an SLS instance."""
+    try:
+        payload = response.json()
+    except ValueError:
+        return False
+
+    return isinstance(payload, dict) and (
+        isinstance(payload.get("v1"), dict) and "version" in payload
+    )
+
+
+def _probe_sls_platform(api_url: str, credential: str, auth_scheme: str = "api-key") -> str:
+    """Probe the unauthenticated Tag Rule Engine versioning endpoint."""
+    headers = get_auth_headers(credential, auth_scheme, "application/json")
+    ssl_verify = get_ssl_verify(api_url)
+
+    try:
+        response = requests.get(
+            f"{api_url}{SLS_PLATFORM_PROBE_PATH}",
+            headers=headers,
+            verify=ssl_verify,
+            timeout=10,
+        )
+    except requests.exceptions.SSLError:
+        return "certificate_error"
+    except requests.RequestException:
+        return "unreachable"
+
+    if response.status_code == 200:
+        return "ok" if _is_valid_sls_platform_probe(response) else "error"
+    if response.status_code in (401, 403):
+        return "unauthorized"
+    if response.status_code in (404, 501):
+        return "not_found"
+    return "error"
+
+
 def _get_keyring_config() -> Dict[str, Any]:
     """Attempt to read a single JSON config entry from keyring.
 
@@ -200,6 +241,7 @@ def get_platform() -> str:
         ):
             pass
 
+    # Priority 3: Stored platform from keyring config (legacy fallback)
     cfg = _get_keyring_config()
     if cfg:
         platform = str(cfg.get("platform", "")).upper()
@@ -438,7 +480,7 @@ def _get_service_status_snapshot(force_refresh: bool = False) -> Optional[Dict[s
 
     _, api_url, credential, auth_scheme = api_context
     if auth_scheme == "bearer":
-        status = check_service_status(api_url, credential, auth_scheme)
+        status = check_web_server_auth(api_url, credential, auth_scheme)
     else:
         status = check_service_status(api_url, credential)
     _save_service_status_snapshot(api_context, status)
@@ -783,8 +825,6 @@ def _check_service_status(
 
     services: Dict[str, str] = {}
     any_responded = False
-    any_authorized = False
-    all_unauthorized = True
     certificate_error = False
 
     for display_name, method, url_path in SERVICE_CHECKS:
@@ -809,26 +849,39 @@ def _check_service_status(
 
             if resp.status_code in (200, 400):
                 services[display_name] = "ok"
-                any_authorized = True
-                all_unauthorized = False
             elif resp.status_code == 401:
                 services[display_name] = "unauthorized"
             elif resp.status_code == 403:
                 services[display_name] = "unauthorized"
             elif resp.status_code == 404:
                 services[display_name] = "not_found"
-                all_unauthorized = False
             else:
                 services[display_name] = "error"
-                all_unauthorized = False
         except requests.exceptions.SSLError:
             services[display_name] = "certificate_error"
             certificate_error = True
         except requests.RequestException:
             services[display_name] = "unreachable"
 
+    sls_platform_status = _probe_sls_platform(api_url, credential, auth_scheme)
+    certificate_error = certificate_error or sls_platform_status == "certificate_error"
+
     # Determine overall status
     if not any_responded:
+        if sls_platform_status not in ("unreachable", "certificate_error"):
+            return {
+                "server_reachable": True,
+                "auth_valid": None,
+                "services": services,
+                "certificate_error": certificate_error,
+                "certificate": None,
+                "file_query_endpoint": None,
+                "elasticsearch_available": None,
+                "system_query_endpoint": None,
+                "materialized_search_available": None,
+                "platform": _detect_platform_from_services(services, sls_platform_status),
+            }
+
         certificate_details: Optional[Dict[str, Any]] = None
         if certificate_error:
             try:
@@ -850,20 +903,20 @@ def _check_service_status(
             "platform": PLATFORM_UNREACHABLE,
         }
 
-    # Determine auth status: valid if any service accepted the key
-    # If all responding services returned 401/403, the key is invalid
-    auth_valid = any_authorized if any_responded else None
-    if all_unauthorized and any_responded:
-        auth_valid = False
-
-    # Determine platform from multiple SLE-only service responses.
-    platform = _detect_platform_from_services(services)
+    # Determine platform from positive capability probes.
+    platform = _detect_platform_from_services(services, sls_platform_status)
+    initial_auth_valid = any(status == "ok" for status in services.values())
 
     file_capability = get_file_query_capability(api_url, credential, auth_scheme)
     services["File"] = file_capability["status"]
     system_capability = get_system_query_capability(api_url, credential, auth_scheme)
     services["Systems"] = system_capability["status"]
 
+    # Recompute auth after capability probes add their final service statuses.
+    auth_valid = initial_auth_valid or any(
+        status in ("ok", "fallback") for status in services.values()
+    )
+
     return {
         "server_reachable": True,
         "auth_valid": auth_valid,
@@ -945,7 +998,9 @@ def get_platform_info(skip_health: bool = False) -> Dict[str, Any]:
             server_reachable = status["server_reachable"]
             auth_valid = status["auth_valid"]
             services = status["services"]
-            platform = status["platform"]
+            detected_platform = status.get("platform", PLATFORM_UNKNOWN)
+            if detected_platform != PLATFORM_UNKNOWN:
+                platform = detected_platform
             file_query_endpoint = status.get("file_query_endpoint")
             elasticsearch_available = status.get("elasticsearch_available")
             system_query_endpoint = status.get("system_query_endpoint")

{systemlink_cli-1.29.1 → systemlink_cli-1.29.4}/slcli/skills/slcli/SKILL.md

@@ -36,6 +36,7 @@ Load only what the current task needs.
 | Datasheet-to-spec workflow | [datasheet-workflow.md](./references/datasheet-workflow.md) | Importing specifications from PDF, CSV, or structured text |
 | Minimal spec import payload | [import-specs.min.json](./references/import-specs.min.json) | Need a bundled create-compatible starter payload or conditions |
 | Spec import helper | [spec_import_helper.py](./scripts/spec_import_helper.py) | Scaffold or validate a datasheet spec import payload |
+| Domain concepts | [domain-concepts.md](./references/domain-concepts.md) | Interpreting resource terminology, relationships, identifiers, status intent, or availability |
 | Filtering guide | [filtering.md](./references/filtering.md) | Advanced filters, LINQ syntax, and query composition |
 | Analysis recipes | [analysis-recipes.md](./references/analysis-recipes.md) | Multi-step analysis workflows and reporting patterns |
 | Troubleshooting | [troubleshooting.md](./references/troubleshooting.md) | SSL, workspace IDs, encoding, or scripting pitfalls |

{systemlink_cli-1.29.1 → systemlink_cli-1.29.4}/slcli/skills/slcli/evals/evals.json

@@ -3,7 +3,7 @@
   "skill_name": "slcli",
   "recommended_suites": {
     "gating": [1, 4, 5, 7, 10],
-    "regression": [1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11]
+    "regression": [1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16]
   },
   "evals": [
     {
@@ -637,6 +637,280 @@
           ]
         }
       ]
+    },
+    {
+      "id": 12,
+      "tags": ["regression", "testmonitor", "status-intent"],
+      "prompt": "Show me failed SystemLink tests from the last seven days. Treat every terminal failure outcome as a failure.",
+      "expected_output": "Uses one parameterized testmonitor query covering FAILED, ERRORED, and TERMINATED, constrained to results started during the last seven days without matching unrelated statuses.",
+      "files": [],
+      "expectations": [
+        "Uses the testmonitor result list command",
+        "Expands broad failure intent to FAILED, ERRORED, and TERMINATED",
+        "Uses substitutions rather than interpolating status values",
+        "Adds a parameterized startedAt lower bound for the last seven days",
+        "Does not implement failure as everything other than PASSED"
+      ],
+      "grading_rules": [
+        {
+          "text": "Queries test results",
+          "critical": true,
+          "positive_control": "slcli testmonitor result list --format json",
+          "negative_control": "slcli testmonitor product list --format json",
+          "scope": "command",
+          "mode": "any_of",
+          "patterns": [
+            "slcli\\s+testmonitor\\s+result\\s+list"
+          ]
+        },
+        {
+          "text": "Includes all terminal failure statuses",
+          "critical": true,
+          "positive_control": "slcli testmonitor result list --filter 'status.statusType == @0 or status.statusType == @1 or status.statusType == @2' --substitution FAILED --substitution ERRORED --substitution TERMINATED",
+          "negative_control": "slcli testmonitor result list --status FAILED",
+          "scope": "command",
+          "mode": "all_of",
+          "patterns": [
+            "--substitution\\s+FAILED",
+            "--substitution\\s+ERRORED",
+            "--substitution\\s+TERMINATED",
+            "--filter\\s+[^\\n]*status\\.statusType\\s*==\\s*@0",
+            "--filter\\s+[^\\n]*status\\.statusType\\s*==\\s*@1",
+            "--filter\\s+[^\\n]*status\\.statusType\\s*==\\s*@2"
+          ]
+        },
+        {
+          "text": "Avoids not-passed filtering",
+          "critical": true,
+          "positive_control": "slcli testmonitor result list --filter 'status.statusType == @0' --substitution FAILED",
+          "negative_control": "slcli testmonitor result list --filter 'status.statusType != @0' --substitution PASSED",
+          "scope": "command",
+          "mode": "none_of",
+          "patterns": [
+            "status\\.statusType\\s*!=",
+            "NOT\\s+PASSED"
+          ]
+        },
+        {
+          "text": "Constrains results to the last seven days",
+          "critical": true,
+          "positive_control": "slcli testmonitor result list --filter '(status.statusType == @0 or status.statusType == @1 or status.statusType == @2) and startedAt >= @3' --substitution FAILED --substitution ERRORED --substitution TERMINATED --substitution 2026-09-10T00:00:00Z",
+          "negative_control": "slcli testmonitor result list --filter 'status.statusType == @0 or status.statusType == @1 or status.statusType == @2' --substitution FAILED --substitution ERRORED --substitution TERMINATED",
+          "scope": "command",
+          "mode": "all_of",
+          "validator": "last_n_days",
+          "days": 7,
+          "control_reference_date": "2026-09-17",
+          "patterns": [
+            "startedAt\\s*>=\\s*@\\d+",
+            "--substitution\\s+\\d{4}-\\d{2}-\\d{2}T00:00:00Z"
+          ]
+        }
+      ]
+    },
+    {
+      "id": 13,
+      "tags": ["regression", "packages", "routing"],
+      "prompt": "Show the commands to check packages available in feed FEED-1, packages installed on system SYS-1, and packages declared by desired state STATE-1.",
+      "expected_output": "Routes repository availability, observed installation, and desired-state membership to three distinct slcli command surfaces.",
+      "files": [],
+      "expectations": [
+        "Uses feed package list for available packages",
+        "Uses system details with installed packages for observed installation",
+        "Uses state details for desired packages",
+        "Does not imply that any one package view proves another"
+      ],
+      "grading_rules": [
+        {
+          "text": "Queries available feed packages",
+          "critical": true,
+          "positive_control": "slcli feed package list --feed-id FEED-1 --format json",
+          "negative_control": "slcli feed list --format json",
+          "scope": "command",
+          "mode": "all_of",
+          "patterns": [
+            "slcli\\s+feed\\s+package\\s+list",
+            "--feed-id\\s+FEED-1"
+          ]
+        },
+        {
+          "text": "Queries installed system packages",
+          "critical": true,
+          "positive_control": "slcli system get SYS-1 --include-packages --format json",
+          "negative_control": "slcli system get SYS-1 --format json",
+          "scope": "command",
+          "mode": "all_of",
+          "patterns": [
+            "slcli\\s+system\\s+get\\s+SYS-1",
+            "--include-packages"
+          ]
+        },
+        {
+          "text": "Queries desired-state packages",
+          "critical": true,
+          "positive_control": "slcli state get STATE-1 --format json",
+          "negative_control": "slcli state list --format json",
+          "scope": "command",
+          "mode": "any_of",
+          "patterns": [
+            "slcli\\s+state\\s+get\\s+STATE-1"
+          ]
+        },
+        {
+          "text": "Keeps package views independent",
+          "critical": true,
+          "positive_control": "slcli feed package list --feed-id FEED-1 --format json\nslcli system get SYS-1 --include-packages --format json\nslcli state get STATE-1 --format json\nThese are independent facts; do not infer one from another.",
+          "negative_control": "slcli feed package list --feed-id FEED-1 --format json\nslcli system get SYS-1 --include-packages --format json\nslcli state get STATE-1 --format json",
+          "scope": "response",
+          "mode": "all_of",
+          "patterns": [
+            "independent facts",
+            "do not infer"
+          ]
+        }
+      ]
+    },
+    {
+      "id": 14,
+      "tags": ["regression", "systems", "health"],
+      "prompt": "Check the current health of SystemLink system SYS-1, including current health signals and active alarm instances.",
+      "expected_output": "Combines system state, active alarm instances, and current CPU, memory, and disk health-tag values without inventing thresholds or claiming that an empty instance query means no alarm rule is configured.",
+      "files": [],
+      "expectations": [
+        "Retrieves system details and active alarm instances",
+        "Reads the three standard current health tags",
+        "Treats missing or stale evidence as an incomplete health conclusion",
+        "Does not invent utilization thresholds"
+      ],
+      "grading_rules": [
+        {
+          "text": "Includes system and alarm state",
+          "critical": true,
+          "positive_control": "slcli system get SYS-1 --include-alarms --format json",
+          "negative_control": "slcli system get SYS-1 --format json",
+          "scope": "command",
+          "mode": "all_of",
+          "patterns": [
+            "slcli\\s+system\\s+get\\s+SYS-1",
+            "--include-(?:alarms|all)"
+          ]
+        },
+        {
+          "text": "Reads CPU, memory, and disk health tags",
+          "critical": true,
+          "positive_control": "slcli tag get-value SYS-1.Health.CPU.MeanUsePercentage\nslcli tag get-value SYS-1.Health.Memory.UsePercentage\nslcli tag get-value SYS-1.Health.Disk.UsePercentage",
+          "negative_control": "slcli tag get-value SYS-1.Health.CPU.MeanUsePercentage",
+          "scope": "commands",
+          "mode": "all_of",
+          "patterns": [
+            "SYS-1\\.Health\\.CPU\\.MeanUsePercentage",
+            "SYS-1\\.Health\\.Memory\\.UsePercentage",
+            "SYS-1\\.Health\\.Disk\\.UsePercentage"
+          ]
+        },
+        {
+          "text": "Treats incomplete evidence as inconclusive",
+          "critical": true,
+          "positive_control": "slcli system get SYS-1 --include-alarms --format json\nslcli tag get-value SYS-1.Health.CPU.MeanUsePercentage\nMissing or stale evidence makes the health conclusion incomplete.",
+          "negative_control": "slcli system get SYS-1 --include-alarms --format json\nslcli tag get-value SYS-1.Health.CPU.MeanUsePercentage",
+          "scope": "response",
+          "mode": "any_of",
+          "patterns": [
+            "(?:missing|stale).{0,80}(?:incomplete|insufficient|cannot|can't|not definitive)"
+          ]
+        },
+        {
+          "text": "Does not invent utilization thresholds",
+          "critical": true,
+          "positive_control": "slcli system get SYS-1 --include-alarms --format json\nslcli tag get-value SYS-1.Health.CPU.MeanUsePercentage",
+          "negative_control": "slcli system get SYS-1 --include-alarms --format json\nCPU above 80% means the system is unhealthy.",
+          "scope": "response",
+          "mode": "none_of",
+          "patterns": [
+            "(?:cpu|memory|disk|utilization|usage).{0,50}(?:above|below|greater than|less than|[<>]\\s*\\d+%?)"
+          ]
+        }
+      ]
+    },
+    {
+      "id": 15,
+      "tags": ["regression", "files", "relationships"],
+      "prompt": "Find files attached to SystemLink system SYS-1 in workspace WORKSPACE-1. SYS-1 is the exact system ID.",
+      "expected_output": "Lists files in the resolved workspace and filters the system-reference property locally rather than treating the system ID as a file ID.",
+      "files": [],
+      "expectations": [
+        "Uses the file list command with the resolved workspace",
+        "Filters properties.minionId with the supplied system ID",
+        "Does not use SYS-1 as a file ID"
+      ],
+      "grading_rules": [
+        {
+          "text": "Queries the system file-reference property",
+          "critical": true,
+          "positive_control": "slcli file list --workspace WORKSPACE-1 --take 1000 --format json | jq --arg system_id SYS-1 '[.[] | select(.properties.minionId == $system_id)]'",
+          "negative_control": "slcli file list --workspace WORKSPACE-1 --id-filter SYS-1 --format json",
+          "scope": "response",
+          "mode": "all_of",
+          "patterns": [
+            "slcli\\s+file\\s+list",
+            "--workspace\\s+WORKSPACE-1",
+            "properties\\.minionId[^\\n]*system_id"
+          ]
+        },
+        {
+          "text": "Does not treat the system ID as a file ID",
+          "critical": true,
+          "positive_control": "select(.properties.minionId == $system_id)",
+          "negative_control": "select(.id == $system_id)",
+          "scope": "response",
+          "mode": "none_of",
+          "patterns": [
+            "select\\(\\.id\\s*=="
+          ]
+        }
+      ]
+    },
+    {
+      "id": 16,
+      "tags": ["regression", "assets", "instrument-intent"],
+      "prompt": "Show me all connected DMM instruments in SystemLink.",
+      "expected_output": "Uses the connected asset inventory query as a 40xx candidate search, then verifies that returned model names contain a standalone 40xx family before presenting them as DMMs.",
+      "files": [],
+      "expectations": [
+        "Uses the asset list command",
+        "Maps DMM to the 40xx model family",
+        "Limits results to connected assets",
+        "Verifies the returned model names match the standalone 40xx family"
+      ],
+      "grading_rules": [
+        {
+          "text": "Queries connected assets",
+          "critical": true,
+          "positive_control": "slcli asset list --model 40 --connected --format json",
+          "negative_control": "slcli system list --has-package DAQmx --format json",
+          "scope": "command",
+          "mode": "all_of",
+          "patterns": [
+            "slcli\\s+asset\\s+list",
+            "--connected"
+          ]
+        },
+        {
+          "text": "Maps DMM to the 40xx model family",
+          "critical": true,
+          "positive_control": "slcli asset list --model 40 --connected --format json | jq '[.[] | select(.modelName | test(\"(^|[^0-9])40[0-9]{2}([^0-9]|$)\"))]'",
+          "negative_control": "slcli asset list --model DMM --connected",
+          "scope": "response",
+          "mode": "all_of",
+          "patterns": [
+            "--model\\s+40",
+            "jq\\s+",
+            "test\\(\\\"",
+            "40\\[0-9\\]\\{2\\}",
+            "\\[\\^0-9\\]"
+          ]
+        }
+      ]
     }
   ]
 }

{systemlink_cli-1.29.1 → systemlink_cli-1.29.4}/slcli/skills/slcli/evals/evals.schema.json

@@ -37,8 +37,9 @@
                 "critical": {"type": "boolean"},
                 "positive_control": {"type": "string", "minLength": 1},
                 "negative_control": {"type": "string", "minLength": 1},
-                "scope": {"enum": ["response", "command"]},
-                "validator": {"enum": ["previous_calendar_month"]},
+                "scope": {"enum": ["response", "command", "commands"]},
+                "validator": {"enum": ["previous_calendar_month", "last_n_days"]},
+                "days": {"type": "integer", "minimum": 1},
                 "control_reference_date": {"type": "string", "format": "date"},
                 "mode": {"enum": ["all_of", "any_of", "none_of"]},
                 "patterns": {"type": "array", "minItems": 1, "items": {"type": "string"}}