@gurulu/cli 0.4.2 → 0.4.4

package/README.md

@@ -101,3 +101,27 @@ gurulu events list --json
 gurulu status --json
 gurulu doctor --json
 ```
+
+## Telemetry
+
+`gurulu install` records anonymous install telemetry — framework, CLI version,
+install status, and a SHA-256 hash of the absolute repo path — to help us
+improve framework detection and patch reliability. **No source code, file
+contents, or environment variables are ever sent.**
+
+On the first interactive install you'll be asked to opt in. Your choice is
+persisted to `~/.gurulu/config.json` (`telemetry: true|false`) and never
+re-asked.
+
+To opt out:
+
+```bash
+gurulu install --no-telemetry              # one-off
+export GURULU_TELEMETRY=off                # session / shell
+export DO_NOT_TRACK=1                      # honored across most CLI tools
+echo '{"telemetry": false}' > ~/.gurulu/config.json   # permanent
+```
+
+Any of `GURULU_TELEMETRY=off|0|false|no`, `DO_NOT_TRACK=1`, `--no-telemetry`,
+or `telemetry: false` in `~/.gurulu/config.json` disables telemetry — the repo
+hash is never computed and no network request is made.

package/dist/commands/attribution.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Sprint E SE-B — `gurulu attribution report|compare|channels`.
+ *
+ * Mirror of MCP tools `gurulu.attribution.report` / `.compare` / `.channels`.
+ * Hits new `/api/cli/attribution/*` proxy endpoints (CLI-auth, not session-auth)
+ * so the same surface is reachable from agents and humans.
+ */
+export interface AttributionArgs {
+    action?: string;
+    site?: string;
+    from?: string;
+    to?: string;
+    range?: string;
+    model?: string;
+    baselineModel?: string;
+    variantModel?: string;
+    conversionEvent?: string;
+    format?: string;
+    json?: boolean;
+    profile?: string;
+}
+export declare function attributionCommand(args: AttributionArgs): Promise<void>;

package/dist/commands/attribution.js

@@ -0,0 +1,111 @@
+"use strict";
+/**
+ * Sprint E SE-B — `gurulu attribution report|compare|channels`.
+ *
+ * Mirror of MCP tools `gurulu.attribution.report` / `.compare` / `.channels`.
+ * Hits new `/api/cli/attribution/*` proxy endpoints (CLI-auth, not session-auth)
+ * so the same surface is reachable from agents and humans.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.attributionCommand = attributionCommand;
+const api_client_1 = require("../api-client");
+const ui_1 = require("../utils/ui");
+async function attributionCommand(args) {
+    const action = args.action || '';
+    switch (action) {
+        case 'report':
+            return reportCmd(args);
+        case 'compare':
+            return compareCmd(args);
+        case 'channels':
+            return channelsCmd(args);
+        default:
+            (0, ui_1.error)(`Unknown attribution action: ${action}`);
+            (0, ui_1.info)('Usage: gurulu attribution [report|compare|channels] --site=<id> [...]');
+            process.exit(1);
+    }
+}
+function buildQuery(params) {
+    const usp = new URLSearchParams();
+    for (const [k, v] of Object.entries(params)) {
+        if (v === undefined || v === '' || v === null)
+            continue;
+        usp.set(k, String(v));
+    }
+    const s = usp.toString();
+    return s ? `?${s}` : '';
+}
+function emit(args, body, table) {
+    const format = args.format || (args.json ? 'json' : 'json');
+    if (format === 'table') {
+        process.stdout.write(table());
+        return;
+    }
+    process.stdout.write(JSON.stringify(body, null, 2) + '\n');
+}
+async function reportCmd(args) {
+    if (!args.site) {
+        (0, ui_1.error)('Usage: gurulu attribution report --site=<id> [--from=ISO --to=ISO | --range=7d|30d|90d] [--model=...]');
+        process.exit(1);
+    }
+    const path = `/api/cli/attribution/report${buildQuery({
+        site: args.site,
+        from: args.from,
+        to: args.to,
+        range: args.range,
+        model: args.model,
+        conversionEvent: args.conversionEvent,
+    })}`;
+    const body = await (0, api_client_1.cliApiJson)(path, { profile: args.profile });
+    emit(args, body, () => {
+        const rows = body.results || [];
+        const out = [['CHANNEL', 'CREDIT', 'CONVERSIONS', 'REVENUE'].join('\t')];
+        for (const r of rows) {
+            out.push([r.channel ?? '-', r.credit ?? 0, r.conversions ?? 0, r.revenue ?? 0].join('\t'));
+        }
+        return out.join('\n') + '\n';
+    });
+}
+async function compareCmd(args) {
+    if (!args.site || !args.baselineModel || !args.variantModel) {
+        (0, ui_1.error)('Usage: gurulu attribution compare --site=<id> --baseline-model=<m> --variant-model=<m>');
+        process.exit(1);
+    }
+    const path = `/api/cli/attribution/compare${buildQuery({
+        site: args.site,
+        baselineModel: args.baselineModel,
+        variantModel: args.variantModel,
+        from: args.from,
+        to: args.to,
+        range: args.range,
+        conversionEvent: args.conversionEvent,
+    })}`;
+    const body = await (0, api_client_1.cliApiJson)(path, { profile: args.profile });
+    emit(args, body, () => {
+        const rows = body.comparison || body.results || [];
+        const out = [['CHANNEL', 'BASELINE', 'VARIANT', 'DELTA'].join('\t')];
+        for (const r of rows) {
+            out.push([r.channel ?? '-', r.baseline ?? 0, r.variant ?? 0, r.delta ?? 0].join('\t'));
+        }
+        return out.join('\n') + '\n';
+    });
+}
+async function channelsCmd(args) {
+    if (!args.site) {
+        (0, ui_1.error)('Usage: gurulu attribution channels --site=<id>');
+        process.exit(1);
+    }
+    const path = `/api/cli/attribution/channels${buildQuery({
+        site: args.site,
+        range: args.range,
+    })}`;
+    const body = await (0, api_client_1.cliApiJson)(path, { profile: args.profile });
+    emit(args, body, () => {
+        const rows = body.channels || [];
+        const out = [['CHANNEL', 'SESSIONS', 'CONVERSIONS'].join('\t')];
+        for (const r of rows) {
+            out.push([r.channel ?? '-', r.sessions ?? 0, r.conversions ?? 0].join('\t'));
+        }
+        return out.join('\n') + '\n';
+    });
+}

package/dist/commands/consent.d.ts

@@ -0,0 +1,27 @@
+/**
+ * CLI@0.4.4 — `gurulu consent` — manage per-user consent scopes (GDPR).
+ *
+ * Subcommands:
+ *   gurulu consent set --user-id X --scope marketing_external --state granted|denied
+ *   gurulu consent get --user-id X
+ *   gurulu consent revoke --user-id X
+ *   gurulu consent check --user-id X --destination capi
+ *
+ * TODO(Sprint K): backend endpoints below are not yet live. The CLI command
+ * surface is implemented now so customers can wire automation; once the API
+ * routes ship, the cliApi calls will succeed without any further CLI changes.
+ *   - POST   /api/cli/consent/set       { userId, scope, state }
+ *   - GET    /api/cli/consent/get?userId=...                       (returns scopes[])
+ *   - POST   /api/cli/consent/revoke    { userId }                 (denies all scopes)
+ *   - GET    /api/cli/consent/check?userId=...&destination=...     (returns { allowed: boolean })
+ */
+export interface ConsentArgs {
+    action?: string;
+    userId?: string;
+    scope?: string;
+    state?: string;
+    destination?: string;
+    json?: boolean;
+    profile?: string;
+}
+export declare function consentCommand(args: ConsentArgs): Promise<void>;

package/dist/commands/consent.js

@@ -0,0 +1,233 @@
+"use strict";
+/**
+ * CLI@0.4.4 — `gurulu consent` — manage per-user consent scopes (GDPR).
+ *
+ * Subcommands:
+ *   gurulu consent set --user-id X --scope marketing_external --state granted|denied
+ *   gurulu consent get --user-id X
+ *   gurulu consent revoke --user-id X
+ *   gurulu consent check --user-id X --destination capi
+ *
+ * TODO(Sprint K): backend endpoints below are not yet live. The CLI command
+ * surface is implemented now so customers can wire automation; once the API
+ * routes ship, the cliApi calls will succeed without any further CLI changes.
+ *   - POST   /api/cli/consent/set       { userId, scope, state }
+ *   - GET    /api/cli/consent/get?userId=...                       (returns scopes[])
+ *   - POST   /api/cli/consent/revoke    { userId }                 (denies all scopes)
+ *   - GET    /api/cli/consent/check?userId=...&destination=...     (returns { allowed: boolean })
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.consentCommand = consentCommand;
+const config_1 = require("../config");
+const api_client_1 = require("../api-client");
+const ui_1 = require("../utils/ui");
+async function consentCommand(args) {
+    switch (args.action) {
+        case 'set':
+            return consentSet(args);
+        case 'get':
+            return consentGet(args);
+        case 'revoke':
+            return consentRevoke(args);
+        case 'check':
+            return consentCheck(args);
+        default:
+            (0, ui_1.error)(`Unknown action: ${args.action}. Use: set, get, revoke, check`);
+            process.exit(1);
+    }
+}
+async function loadProfileOrExit(args) {
+    try {
+        return await (0, config_1.loadActiveProfile)({ profile: args.profile });
+    }
+    catch {
+        (0, ui_1.error)('Not authenticated. Run "gurulu login" first.');
+        process.exit(1);
+    }
+}
+function emitFallbackNotice(json) {
+    if (json)
+        return;
+    (0, ui_1.info)((0, ui_1.dim)('Note: backend endpoint not yet live (Sprint K candidate). Command-shape is stable.'));
+}
+// ── set ────────────────────────────────────────────────────────────────────
+async function consentSet(args) {
+    if (!args.userId || !args.scope || !args.state) {
+        (0, ui_1.error)('Usage: gurulu consent set --user-id <id> --scope <scope> --state <granted|denied>');
+        process.exit(1);
+    }
+    if (args.state !== 'granted' && args.state !== 'denied') {
+        (0, ui_1.error)('--state must be one of: granted, denied');
+        process.exit(1);
+    }
+    const profile = await loadProfileOrExit(args);
+    try {
+        const res = await (0, api_client_1.cliApi)('/api/cli/consent/set', {
+            method: 'POST',
+            body: JSON.stringify({ userId: args.userId, scope: args.scope, state: args.state }),
+            preloadedProfile: profile,
+        });
+        const data = await res.json().catch(() => ({}));
+        if (res.status === 404) {
+            emitFallbackNotice(args.json);
+            if (args.json) {
+                console.log(JSON.stringify({ ok: false, pending: true, userId: args.userId, scope: args.scope, state: args.state }));
+            }
+            else {
+                (0, ui_1.info)(`Pending: would set consent[${args.scope}] = ${args.state} for ${args.userId}`);
+            }
+            return;
+        }
+        if (!res.ok) {
+            const msg = data.message || data.error || `HTTP ${res.status}`;
+            if (args.json)
+                console.log(JSON.stringify({ ok: false, error: msg }));
+            else
+                (0, ui_1.error)(msg);
+            process.exit(1);
+        }
+        if (args.json)
+            console.log(JSON.stringify(data, null, 2));
+        else
+            (0, ui_1.success)(`Consent[${args.scope}] = ${args.state} for ${args.userId}`);
+    }
+    catch (err) {
+        if (args.json)
+            console.log(JSON.stringify({ ok: false, error: err.message }));
+        else
+            (0, ui_1.error)(`Failed: ${err.message}`);
+        process.exit(1);
+    }
+}
+// ── get ────────────────────────────────────────────────────────────────────
+async function consentGet(args) {
+    if (!args.userId) {
+        (0, ui_1.error)('Usage: gurulu consent get --user-id <id>');
+        process.exit(1);
+    }
+    const profile = await loadProfileOrExit(args);
+    try {
+        const res = await (0, api_client_1.cliApi)(`/api/cli/consent/get?userId=${encodeURIComponent(args.userId)}`, { preloadedProfile: profile });
+        const data = await res.json().catch(() => ({}));
+        if (res.status === 404) {
+            emitFallbackNotice(args.json);
+            if (args.json)
+                console.log(JSON.stringify({ ok: false, pending: true, userId: args.userId, scopes: [] }));
+            else
+                (0, ui_1.info)(`Pending: would fetch consent scopes for ${args.userId}`);
+            return;
+        }
+        if (!res.ok) {
+            const msg = data.message || data.error || `HTTP ${res.status}`;
+            if (args.json)
+                console.log(JSON.stringify({ ok: false, error: msg }));
+            else
+                (0, ui_1.error)(msg);
+            process.exit(1);
+        }
+        if (args.json) {
+            console.log(JSON.stringify(data, null, 2));
+            return;
+        }
+        const scopes = data.scopes || [];
+        if (scopes.length === 0) {
+            (0, ui_1.info)(`No consent records for ${args.userId}`);
+            return;
+        }
+        console.log((0, ui_1.bold)(`Consent scopes for ${args.userId}:`));
+        for (const s of scopes) {
+            const ts = s.updatedAt ? (0, ui_1.dim)(`  (${s.updatedAt})`) : '';
+            (0, ui_1.step)(`${s.scope}: ${s.state}${ts}`);
+        }
+    }
+    catch (err) {
+        if (args.json)
+            console.log(JSON.stringify({ ok: false, error: err.message }));
+        else
+            (0, ui_1.error)(`Failed: ${err.message}`);
+        process.exit(1);
+    }
+}
+// ── revoke ─────────────────────────────────────────────────────────────────
+async function consentRevoke(args) {
+    if (!args.userId) {
+        (0, ui_1.error)('Usage: gurulu consent revoke --user-id <id>');
+        process.exit(1);
+    }
+    const profile = await loadProfileOrExit(args);
+    try {
+        const res = await (0, api_client_1.cliApi)('/api/cli/consent/revoke', {
+            method: 'POST',
+            body: JSON.stringify({ userId: args.userId }),
+            preloadedProfile: profile,
+        });
+        const data = await res.json().catch(() => ({}));
+        if (res.status === 404) {
+            emitFallbackNotice(args.json);
+            if (args.json)
+                console.log(JSON.stringify({ ok: false, pending: true, userId: args.userId }));
+            else
+                (0, ui_1.info)(`Pending: would deny all consent scopes for ${args.userId}`);
+            return;
+        }
+        if (!res.ok) {
+            const msg = data.message || data.error || `HTTP ${res.status}`;
+            if (args.json)
+                console.log(JSON.stringify({ ok: false, error: msg }));
+            else
+                (0, ui_1.error)(msg);
+            process.exit(1);
+        }
+        if (args.json)
+            console.log(JSON.stringify(data, null, 2));
+        else
+            (0, ui_1.success)(`All consent scopes revoked for ${args.userId}`);
+    }
+    catch (err) {
+        if (args.json)
+            console.log(JSON.stringify({ ok: false, error: err.message }));
+        else
+            (0, ui_1.error)(`Failed: ${err.message}`);
+        process.exit(1);
+    }
+}
+// ── check ─────────────────────────────────────────────────────────────────
+async function consentCheck(args) {
+    if (!args.userId || !args.destination) {
+        (0, ui_1.error)('Usage: gurulu consent check --user-id <id> --destination <capi|ga4|...>');
+        process.exit(1);
+    }
+    const profile = await loadProfileOrExit(args);
+    try {
+        const data = await (0, api_client_1.cliApiJson)(`/api/cli/consent/check?userId=${encodeURIComponent(args.userId)}&destination=${encodeURIComponent(args.destination)}`, { preloadedProfile: profile });
+        if (args.json) {
+            console.log(JSON.stringify(data, null, 2));
+            return;
+        }
+        if (data.allowed) {
+            (0, ui_1.success)(`Dispatch ALLOWED to ${args.destination} for ${args.userId}`);
+        }
+        else {
+            (0, ui_1.info)(`Dispatch DENIED to ${args.destination} for ${args.userId}${data.reason ? ` (${data.reason})` : ''}`);
+        }
+        // Exit code mirrors the boolean for shell scripting.
+        process.exit(data.allowed ? 0 : 2);
+    }
+    catch (err) {
+        const msg = err.message || '';
+        // 404 from the API client means the endpoint isn't live yet.
+        if (/HTTP 404|Not Found/i.test(msg)) {
+            emitFallbackNotice(args.json);
+            if (args.json)
+                console.log(JSON.stringify({ ok: false, pending: true, allowed: null, userId: args.userId, destination: args.destination }));
+            else
+                (0, ui_1.info)(`Pending: would check consent for ${args.userId} → ${args.destination}`);
+            return;
+        }
+        if (args.json)
+            console.log(JSON.stringify({ ok: false, error: msg }));
+        else
+            (0, ui_1.error)(`Failed: ${msg}`);
+        process.exit(1);
+    }
+}

package/dist/commands/conversion-paths.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Sprint E SE-B — `gurulu conversion-paths list`.
+ *
+ * Mirror of MCP `gurulu.conversion_paths.list`. Hits new
+ * `/api/cli/conversion-paths` proxy endpoint (CLI-auth).
+ */
+export interface ConversionPathsArgs {
+    action?: string;
+    site?: string;
+    from?: string;
+    to?: string;
+    range?: string;
+    conversionEvent?: string;
+    limit?: number;
+    format?: string;
+    json?: boolean;
+    profile?: string;
+}
+export declare function conversionPathsCommand(args: ConversionPathsArgs): Promise<void>;

package/dist/commands/conversion-paths.js

@@ -0,0 +1,55 @@
+"use strict";
+/**
+ * Sprint E SE-B — `gurulu conversion-paths list`.
+ *
+ * Mirror of MCP `gurulu.conversion_paths.list`. Hits new
+ * `/api/cli/conversion-paths` proxy endpoint (CLI-auth).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.conversionPathsCommand = conversionPathsCommand;
+const api_client_1 = require("../api-client");
+const ui_1 = require("../utils/ui");
+async function conversionPathsCommand(args) {
+    const action = args.action || 'list';
+    switch (action) {
+        case 'list':
+            return listCmd(args);
+        default:
+            (0, ui_1.error)(`Unknown conversion-paths action: ${action}`);
+            (0, ui_1.info)('Usage: gurulu conversion-paths list --site=<id> [--range=30d] [--limit=20]');
+            process.exit(1);
+    }
+}
+async function listCmd(args) {
+    if (!args.site) {
+        (0, ui_1.error)('Usage: gurulu conversion-paths list --site=<id> [--range=30d] [--limit=20]');
+        process.exit(1);
+    }
+    const usp = new URLSearchParams();
+    usp.set('site', args.site);
+    if (args.from)
+        usp.set('from', args.from);
+    if (args.to)
+        usp.set('to', args.to);
+    if (args.range)
+        usp.set('range', args.range);
+    if (args.conversionEvent)
+        usp.set('conversionEvent', args.conversionEvent);
+    if (args.limit)
+        usp.set('limit', String(args.limit));
+    const body = await (0, api_client_1.cliApiJson)(`/api/cli/conversion-paths?${usp.toString()}`, {
+        profile: args.profile,
+    });
+    if (args.format === 'table') {
+        const rows = body.paths || [];
+        process.stdout.write(['PATH', 'CONVERSIONS', 'REVENUE'].join('\t') + '\n');
+        for (const p of rows) {
+            const path = Array.isArray(p.path)
+                ? p.path.join(' → ')
+                : String(p.path ?? '-');
+            process.stdout.write([path.slice(0, 80), p.conversions ?? 0, p.revenue ?? 0].join('\t') + '\n');
+        }
+        return;
+    }
+    process.stdout.write(JSON.stringify(body, null, 2) + '\n');
+}

package/dist/commands/db.js

@@ -13,6 +13,7 @@ exports.dbCommand = dbCommand;
 const config_1 = require("../config");
 const api_client_1 = require("../api-client");
 const ui_1 = require("../utils/ui");
+const redact_1 = require("../utils/redact");
 async function dbCommand(args) {
     switch (args.action) {
         case 'connect':
@@ -79,6 +80,13 @@ async function dbConnect(args) {
     }
     const effectivePort = port || (dbType === 'mysql' ? 3306 : 5432);
     (0, ui_1.info)('Testing connection...');
+    // CLI@0.4.4 P0 security — never echo password to stdout/telemetry.
+    // The verbose/debug path used to dump the raw args object; route it through
+    // the redaction helper so password/token/secret keys are masked.
+    if (process.env.GURULU_DEBUG === '1') {
+        const safeArgs = (0, redact_1.redactSensitiveArgs)({ ...args });
+        console.log(`[debug] db connect args: ${(0, redact_1.safeStringifyArgs)(safeArgs)}`);
+    }
     try {
         // First call: test + potentially list tables
         const body = {

package/dist/commands/errors.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Sprint E SE-B — `gurulu errors list|detail|resolve|mute`.
+ *
+ * Mirror of MCP `gurulu.errors.list` / `.detail` plus two new write tools
+ * (`.resolve`, `.mute`). Hits new `/api/cli/errors/*` proxy endpoints which
+ * use CLI-auth instead of the session-auth used by `/api/analytics/error-groups`.
+ *
+ * Note: `gurulu errors upload-sourcemap` and `upload-native-symbols` are
+ * documented aliases of `gurulu sourcemap upload [--platform=...]` — see
+ * `commands/sourcemap.ts`.
+ */
+export interface ErrorsArgs {
+    action?: string;
+    site?: string;
+    fingerprint?: string;
+    level?: string;
+    resolved?: string;
+    environment?: string;
+    releaseId?: string;
+    limit?: number;
+    duration?: string;
+    format?: string;
+    json?: boolean;
+    yes?: boolean;
+    profile?: string;
+}
+export declare function errorsCommand(args: ErrorsArgs): Promise<void>;

package/dist/commands/errors.js

@@ -0,0 +1,121 @@
+"use strict";
+/**
+ * Sprint E SE-B — `gurulu errors list|detail|resolve|mute`.
+ *
+ * Mirror of MCP `gurulu.errors.list` / `.detail` plus two new write tools
+ * (`.resolve`, `.mute`). Hits new `/api/cli/errors/*` proxy endpoints which
+ * use CLI-auth instead of the session-auth used by `/api/analytics/error-groups`.
+ *
+ * Note: `gurulu errors upload-sourcemap` and `upload-native-symbols` are
+ * documented aliases of `gurulu sourcemap upload [--platform=...]` — see
+ * `commands/sourcemap.ts`.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.errorsCommand = errorsCommand;
+const api_client_1 = require("../api-client");
+const ui_1 = require("../utils/ui");
+const confirm_1 = require("../utils/confirm");
+async function errorsCommand(args) {
+    const action = args.action || '';
+    switch (action) {
+        case 'list':
+            return listCmd(args);
+        case 'detail':
+            return detailCmd(args);
+        case 'resolve':
+            return resolveCmd(args);
+        case 'mute':
+            return muteCmd(args);
+        case 'upload-sourcemap':
+        case 'upload-native-symbols':
+            (0, ui_1.info)('Use `gurulu sourcemap upload [--platform=ios|android|web|server] ...` — these names are aliases.');
+            return;
+        default:
+            (0, ui_1.error)(`Unknown errors action: ${action}`);
+            (0, ui_1.info)('Usage: gurulu errors [list|detail|resolve|mute] --site=<id> [--fingerprint=<hash>] ...');
+            process.exit(1);
+    }
+}
+async function listCmd(args) {
+    if (!args.site) {
+        (0, ui_1.error)('Usage: gurulu errors list --site=<id> [--level=error|warning] [--resolved=false] [--limit=20]');
+        process.exit(1);
+    }
+    const usp = new URLSearchParams();
+    usp.set('site', args.site);
+    if (args.level)
+        usp.set('level', args.level);
+    if (args.resolved !== undefined)
+        usp.set('resolved', args.resolved);
+    if (args.environment)
+        usp.set('environment', args.environment);
+    if (args.releaseId)
+        usp.set('releaseId', args.releaseId);
+    if (args.limit)
+        usp.set('limit', String(args.limit));
+    const body = await (0, api_client_1.cliApiJson)(`/api/cli/errors?${usp.toString()}`, {
+        profile: args.profile,
+    });
+    if (args.format === 'table') {
+        const rows = body.groups || [];
+        process.stdout.write(['FINGERPRINT', 'COUNT', 'LEVEL', 'STATUS', 'TITLE'].join('\t') + '\n');
+        for (const g of rows) {
+            process.stdout.write([
+                (g.fingerprint || '').slice(0, 16),
+                g.count ?? 0,
+                g.level ?? '-',
+                g.status ?? 'unresolved',
+                String(g.title || '-').slice(0, 80),
+            ].join('\t') + '\n');
+        }
+        return;
+    }
+    process.stdout.write(JSON.stringify(body, null, 2) + '\n');
+}
+async function detailCmd(args) {
+    if (!args.site || !args.fingerprint) {
+        (0, ui_1.error)('Usage: gurulu errors detail --site=<id> --fingerprint=<hash>');
+        process.exit(1);
+    }
+    const path = `/api/cli/errors/${encodeURIComponent(args.fingerprint)}?site=${encodeURIComponent(args.site)}`;
+    const body = await (0, api_client_1.cliApiJson)(path, { profile: args.profile });
+    process.stdout.write(JSON.stringify(body, null, 2) + '\n');
+}
+async function resolveCmd(args) {
+    if (!args.site || !args.fingerprint) {
+        (0, ui_1.error)('Usage: gurulu errors resolve --site=<id> --fingerprint=<hash>');
+        process.exit(1);
+    }
+    const ok = await (0, confirm_1.promptConfirm)(`Mark error ${args.fingerprint.slice(0, 12)} as resolved?`, { yes: args.yes, defaultYes: true });
+    if (!ok) {
+        (0, ui_1.info)('Aborted.');
+        return;
+    }
+    const body = await (0, api_client_1.cliApiJson)(`/api/cli/errors/${encodeURIComponent(args.fingerprint)}/resolve`, {
+        profile: args.profile,
+        method: 'POST',
+        json: { siteId: args.site },
+    });
+    if (args.json) {
+        process.stdout.write(JSON.stringify(body, null, 2) + '\n');
+        return;
+    }
+    (0, ui_1.success)(`Resolved ${args.fingerprint.slice(0, 12)}.`);
+}
+async function muteCmd(args) {
+    if (!args.site || !args.fingerprint) {
+        (0, ui_1.error)('Usage: gurulu errors mute --site=<id> --fingerprint=<hash> [--duration=24h]');
+        process.exit(1);
+    }
+    const duration = args.duration || '24h';
+    const body = await (0, api_client_1.cliApiJson)(`/api/cli/errors/${encodeURIComponent(args.fingerprint)}/mute`, {
+        profile: args.profile,
+        method: 'POST',
+        json: { siteId: args.site, duration },
+    });
+    if (args.json) {
+        process.stdout.write(JSON.stringify(body, null, 2) + '\n');
+        return;
+    }
+    (0, ui_1.success)(`Muted ${args.fingerprint.slice(0, 12)} for ${duration}.`);
+}