[ToreMerkely]

Unhides kosli evaluate policy, publish/list/get rego-policy and --server-side on evaluate trail/trails as beta, now that the server gates them on the controls flag. Keeps the deprecated --policy alias.

See kosli-dev/server#7658

🤖 Generated with Claude Code

[claude]

Claude finished @ToreMerkely's task in 33s —— View job

---

Follow-up review complete

• Fetch previous review comments and new commit diff
• Check status of each previous finding
• Review new commits for bugs/regressions introduced by the fix
• Post summary

Diff reviewed: e6768088..524a6b11 (2 files changed: cmd/kosli/root.go, cmd/kosli/publishRegoPolicy_test.go)

Previous findings:

1. root.go — serverSideFlag help text should explain what --server-side can't be combined with → Resolved. The constant now reads "[optional] Evaluate the policy on the Kosli server rather than on this machine. Cannot be combined with --attestations, --show-input or --output-rule.", matching the suggested wording exactly.
2. publishRegoPolicy_test.go — TestItIsListedInHelp assertion on combined, "publish" is too weak → Resolved. The test now asserts require.Contains(suite.T(), combined, publishDesc), which matches the precise listing text (publishDesc is defined in publish.go and used for both Short/Long).

No new issues found — both changes are minimal, non-functional (string/test-assertion only) edits with no regression risk.