@gurulu/cli 0.4.3 → 0.4.4

package/README.md

@@ -101,3 +101,27 @@ gurulu events list --json
 gurulu status --json
 gurulu doctor --json
 ```
+
+## Telemetry
+
+`gurulu install` records anonymous install telemetry — framework, CLI version,
+install status, and a SHA-256 hash of the absolute repo path — to help us
+improve framework detection and patch reliability. **No source code, file
+contents, or environment variables are ever sent.**
+
+On the first interactive install you'll be asked to opt in. Your choice is
+persisted to `~/.gurulu/config.json` (`telemetry: true|false`) and never
+re-asked.
+
+To opt out:
+
+```bash
+gurulu install --no-telemetry              # one-off
+export GURULU_TELEMETRY=off                # session / shell
+export DO_NOT_TRACK=1                      # honored across most CLI tools
+echo '{"telemetry": false}' > ~/.gurulu/config.json   # permanent
+```
+
+Any of `GURULU_TELEMETRY=off|0|false|no`, `DO_NOT_TRACK=1`, `--no-telemetry`,
+or `telemetry: false` in `~/.gurulu/config.json` disables telemetry — the repo
+hash is never computed and no network request is made.

package/dist/commands/consent.d.ts

@@ -0,0 +1,27 @@
+/**
+ * CLI@0.4.4 — `gurulu consent` — manage per-user consent scopes (GDPR).
+ *
+ * Subcommands:
+ *   gurulu consent set --user-id X --scope marketing_external --state granted|denied
+ *   gurulu consent get --user-id X
+ *   gurulu consent revoke --user-id X
+ *   gurulu consent check --user-id X --destination capi
+ *
+ * TODO(Sprint K): backend endpoints below are not yet live. The CLI command
+ * surface is implemented now so customers can wire automation; once the API
+ * routes ship, the cliApi calls will succeed without any further CLI changes.
+ *   - POST   /api/cli/consent/set       { userId, scope, state }
+ *   - GET    /api/cli/consent/get?userId=...                       (returns scopes[])
+ *   - POST   /api/cli/consent/revoke    { userId }                 (denies all scopes)
+ *   - GET    /api/cli/consent/check?userId=...&destination=...     (returns { allowed: boolean })
+ */
+export interface ConsentArgs {
+    action?: string;
+    userId?: string;
+    scope?: string;
+    state?: string;
+    destination?: string;
+    json?: boolean;
+    profile?: string;
+}
+export declare function consentCommand(args: ConsentArgs): Promise<void>;

package/dist/commands/consent.js

@@ -0,0 +1,233 @@
+"use strict";
+/**
+ * CLI@0.4.4 — `gurulu consent` — manage per-user consent scopes (GDPR).
+ *
+ * Subcommands:
+ *   gurulu consent set --user-id X --scope marketing_external --state granted|denied
+ *   gurulu consent get --user-id X
+ *   gurulu consent revoke --user-id X
+ *   gurulu consent check --user-id X --destination capi
+ *
+ * TODO(Sprint K): backend endpoints below are not yet live. The CLI command
+ * surface is implemented now so customers can wire automation; once the API
+ * routes ship, the cliApi calls will succeed without any further CLI changes.
+ *   - POST   /api/cli/consent/set       { userId, scope, state }
+ *   - GET    /api/cli/consent/get?userId=...                       (returns scopes[])
+ *   - POST   /api/cli/consent/revoke    { userId }                 (denies all scopes)
+ *   - GET    /api/cli/consent/check?userId=...&destination=...     (returns { allowed: boolean })
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.consentCommand = consentCommand;
+const config_1 = require("../config");
+const api_client_1 = require("../api-client");
+const ui_1 = require("../utils/ui");
+async function consentCommand(args) {
+    switch (args.action) {
+        case 'set':
+            return consentSet(args);
+        case 'get':
+            return consentGet(args);
+        case 'revoke':
+            return consentRevoke(args);
+        case 'check':
+            return consentCheck(args);
+        default:
+            (0, ui_1.error)(`Unknown action: ${args.action}. Use: set, get, revoke, check`);
+            process.exit(1);
+    }
+}
+async function loadProfileOrExit(args) {
+    try {
+        return await (0, config_1.loadActiveProfile)({ profile: args.profile });
+    }
+    catch {
+        (0, ui_1.error)('Not authenticated. Run "gurulu login" first.');
+        process.exit(1);
+    }
+}
+function emitFallbackNotice(json) {
+    if (json)
+        return;
+    (0, ui_1.info)((0, ui_1.dim)('Note: backend endpoint not yet live (Sprint K candidate). Command-shape is stable.'));
+}
+// ── set ────────────────────────────────────────────────────────────────────
+async function consentSet(args) {
+    if (!args.userId || !args.scope || !args.state) {
+        (0, ui_1.error)('Usage: gurulu consent set --user-id <id> --scope <scope> --state <granted|denied>');
+        process.exit(1);
+    }
+    if (args.state !== 'granted' && args.state !== 'denied') {
+        (0, ui_1.error)('--state must be one of: granted, denied');
+        process.exit(1);
+    }
+    const profile = await loadProfileOrExit(args);
+    try {
+        const res = await (0, api_client_1.cliApi)('/api/cli/consent/set', {
+            method: 'POST',
+            body: JSON.stringify({ userId: args.userId, scope: args.scope, state: args.state }),
+            preloadedProfile: profile,
+        });
+        const data = await res.json().catch(() => ({}));
+        if (res.status === 404) {
+            emitFallbackNotice(args.json);
+            if (args.json) {
+                console.log(JSON.stringify({ ok: false, pending: true, userId: args.userId, scope: args.scope, state: args.state }));
+            }
+            else {
+                (0, ui_1.info)(`Pending: would set consent[${args.scope}] = ${args.state} for ${args.userId}`);
+            }
+            return;
+        }
+        if (!res.ok) {
+            const msg = data.message || data.error || `HTTP ${res.status}`;
+            if (args.json)
+                console.log(JSON.stringify({ ok: false, error: msg }));
+            else
+                (0, ui_1.error)(msg);
+            process.exit(1);
+        }
+        if (args.json)
+            console.log(JSON.stringify(data, null, 2));
+        else
+            (0, ui_1.success)(`Consent[${args.scope}] = ${args.state} for ${args.userId}`);
+    }
+    catch (err) {
+        if (args.json)
+            console.log(JSON.stringify({ ok: false, error: err.message }));
+        else
+            (0, ui_1.error)(`Failed: ${err.message}`);
+        process.exit(1);
+    }
+}
+// ── get ────────────────────────────────────────────────────────────────────
+async function consentGet(args) {
+    if (!args.userId) {
+        (0, ui_1.error)('Usage: gurulu consent get --user-id <id>');
+        process.exit(1);
+    }
+    const profile = await loadProfileOrExit(args);
+    try {
+        const res = await (0, api_client_1.cliApi)(`/api/cli/consent/get?userId=${encodeURIComponent(args.userId)}`, { preloadedProfile: profile });
+        const data = await res.json().catch(() => ({}));
+        if (res.status === 404) {
+            emitFallbackNotice(args.json);
+            if (args.json)
+                console.log(JSON.stringify({ ok: false, pending: true, userId: args.userId, scopes: [] }));
+            else
+                (0, ui_1.info)(`Pending: would fetch consent scopes for ${args.userId}`);
+            return;
+        }
+        if (!res.ok) {
+            const msg = data.message || data.error || `HTTP ${res.status}`;
+            if (args.json)
+                console.log(JSON.stringify({ ok: false, error: msg }));
+            else
+                (0, ui_1.error)(msg);
+            process.exit(1);
+        }
+        if (args.json) {
+            console.log(JSON.stringify(data, null, 2));
+            return;
+        }
+        const scopes = data.scopes || [];
+        if (scopes.length === 0) {
+            (0, ui_1.info)(`No consent records for ${args.userId}`);
+            return;
+        }
+        console.log((0, ui_1.bold)(`Consent scopes for ${args.userId}:`));
+        for (const s of scopes) {
+            const ts = s.updatedAt ? (0, ui_1.dim)(`  (${s.updatedAt})`) : '';
+            (0, ui_1.step)(`${s.scope}: ${s.state}${ts}`);
+        }
+    }
+    catch (err) {
+        if (args.json)
+            console.log(JSON.stringify({ ok: false, error: err.message }));
+        else
+            (0, ui_1.error)(`Failed: ${err.message}`);
+        process.exit(1);
+    }
+}
+// ── revoke ─────────────────────────────────────────────────────────────────
+async function consentRevoke(args) {
+    if (!args.userId) {
+        (0, ui_1.error)('Usage: gurulu consent revoke --user-id <id>');
+        process.exit(1);
+    }
+    const profile = await loadProfileOrExit(args);
+    try {
+        const res = await (0, api_client_1.cliApi)('/api/cli/consent/revoke', {
+            method: 'POST',
+            body: JSON.stringify({ userId: args.userId }),
+            preloadedProfile: profile,
+        });
+        const data = await res.json().catch(() => ({}));
+        if (res.status === 404) {
+            emitFallbackNotice(args.json);
+            if (args.json)
+                console.log(JSON.stringify({ ok: false, pending: true, userId: args.userId }));
+            else
+                (0, ui_1.info)(`Pending: would deny all consent scopes for ${args.userId}`);
+            return;
+        }
+        if (!res.ok) {
+            const msg = data.message || data.error || `HTTP ${res.status}`;
+            if (args.json)
+                console.log(JSON.stringify({ ok: false, error: msg }));
+            else
+                (0, ui_1.error)(msg);
+            process.exit(1);
+        }
+        if (args.json)
+            console.log(JSON.stringify(data, null, 2));
+        else
+            (0, ui_1.success)(`All consent scopes revoked for ${args.userId}`);
+    }
+    catch (err) {
+        if (args.json)
+            console.log(JSON.stringify({ ok: false, error: err.message }));
+        else
+            (0, ui_1.error)(`Failed: ${err.message}`);
+        process.exit(1);
+    }
+}
+// ── check ─────────────────────────────────────────────────────────────────
+async function consentCheck(args) {
+    if (!args.userId || !args.destination) {
+        (0, ui_1.error)('Usage: gurulu consent check --user-id <id> --destination <capi|ga4|...>');
+        process.exit(1);
+    }
+    const profile = await loadProfileOrExit(args);
+    try {
+        const data = await (0, api_client_1.cliApiJson)(`/api/cli/consent/check?userId=${encodeURIComponent(args.userId)}&destination=${encodeURIComponent(args.destination)}`, { preloadedProfile: profile });
+        if (args.json) {
+            console.log(JSON.stringify(data, null, 2));
+            return;
+        }
+        if (data.allowed) {
+            (0, ui_1.success)(`Dispatch ALLOWED to ${args.destination} for ${args.userId}`);
+        }
+        else {
+            (0, ui_1.info)(`Dispatch DENIED to ${args.destination} for ${args.userId}${data.reason ? ` (${data.reason})` : ''}`);
+        }
+        // Exit code mirrors the boolean for shell scripting.
+        process.exit(data.allowed ? 0 : 2);
+    }
+    catch (err) {
+        const msg = err.message || '';
+        // 404 from the API client means the endpoint isn't live yet.
+        if (/HTTP 404|Not Found/i.test(msg)) {
+            emitFallbackNotice(args.json);
+            if (args.json)
+                console.log(JSON.stringify({ ok: false, pending: true, allowed: null, userId: args.userId, destination: args.destination }));
+            else
+                (0, ui_1.info)(`Pending: would check consent for ${args.userId} → ${args.destination}`);
+            return;
+        }
+        if (args.json)
+            console.log(JSON.stringify({ ok: false, error: msg }));
+        else
+            (0, ui_1.error)(`Failed: ${msg}`);
+        process.exit(1);
+    }
+}

package/dist/commands/db.js

@@ -13,6 +13,7 @@ exports.dbCommand = dbCommand;
 const config_1 = require("../config");
 const api_client_1 = require("../api-client");
 const ui_1 = require("../utils/ui");
+const redact_1 = require("../utils/redact");
 async function dbCommand(args) {
     switch (args.action) {
         case 'connect':
@@ -79,6 +80,13 @@ async function dbConnect(args) {
     }
     const effectivePort = port || (dbType === 'mysql' ? 3306 : 5432);
     (0, ui_1.info)('Testing connection...');
+    // CLI@0.4.4 P0 security — never echo password to stdout/telemetry.
+    // The verbose/debug path used to dump the raw args object; route it through
+    // the redaction helper so password/token/secret keys are masked.
+    if (process.env.GURULU_DEBUG === '1') {
+        const safeArgs = (0, redact_1.redactSensitiveArgs)({ ...args });
+        console.log(`[debug] db connect args: ${(0, redact_1.safeStringifyArgs)(safeArgs)}`);
+    }
     try {
         // First call: test + potentially list tables
         const body = {

package/dist/commands/identity.d.ts

@@ -22,5 +22,8 @@ export interface IdentityArgs {
     yes?: boolean;
     json?: boolean;
     profile?: string;
+    file?: string;
+    format?: string;
+    resumeFrom?: number;
 }
 export declare function identityCommand(args: IdentityArgs): Promise<void>;

package/dist/commands/identity.js

@@ -5,10 +5,45 @@
  * Sprint E SE-D — `gurulu identity identify|alias|merge` write surface
  * (mirrors MCP `gurulu.identity.identify` / `.alias` / `.merge`).
  */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.identityCommand = identityCommand;
 const api_client_1 = require("../api-client");
 const ui_1 = require("../utils/ui");
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
 async function identityCommand(args) {
     const action = args.action || '';
     switch (action) {
@@ -24,9 +59,11 @@ async function identityCommand(args) {
             return aliasCmd(args);
         case 'merge':
             return mergeCmd(args);
+        case 'bulk':
+            return bulkCmd(args);
         default:
             (0, ui_1.error)(`Unknown identity action: ${action}`);
-            (0, ui_1.info)('Usage: gurulu identity [decay stats|transfers list|cdc-sources list|identify|alias|merge]');
+            (0, ui_1.info)('Usage: gurulu identity [decay stats|transfers list|cdc-sources list|identify|alias|merge|bulk]');
             process.exit(1);
     }
 }
@@ -140,6 +177,106 @@ async function aliasCmd(args) {
     }
     (0, ui_1.success)(`Aliased ${args.previousUserId} → ${args.newUserId}.`);
 }
+/**
+ * `gurulu identity bulk --site=<id> --file=<path> [--format=csv|json]
+ *  [--resume-from=<offset>]`.
+ *
+ * Streams a CSV or JSON file to `/api/ingest/v1/identify/bulk` for
+ * server-side fan-out. The endpoint chunks records server-side (500 per
+ * tx); we only enforce a 10 000-record max here as a friendly preflight.
+ *
+ * `--resume-from` is forwarded as the `x-resume-from` header so a partial
+ * import can pick up where it left off without reuploading the whole
+ * file.
+ */
+async function bulkCmd(args) {
+    if (!args.site || !args.file) {
+        (0, ui_1.error)('Usage: gurulu identity bulk --site=<id> --file=<path> [--format=csv|json] [--resume-from=<offset>]');
+        process.exit(1);
+    }
+    const filePath = path.resolve(args.file);
+    if (!fs.existsSync(filePath)) {
+        (0, ui_1.error)(`File not found: ${filePath}`);
+        process.exit(1);
+    }
+    // Auto-detect format from extension when --format is not supplied.
+    let format = (args.format || '').toLowerCase();
+    if (!format) {
+        const ext = path.extname(filePath).slice(1).toLowerCase();
+        format = ext === 'csv' ? 'csv' : 'json';
+    }
+    if (format !== 'csv' && format !== 'json') {
+        (0, ui_1.error)('--format must be csv or json');
+        process.exit(1);
+    }
+    const raw = fs.readFileSync(filePath, 'utf8');
+    let body;
+    let contentType;
+    if (format === 'csv') {
+        contentType = 'text/csv';
+        body = raw;
+    }
+    else {
+        contentType = 'application/json';
+        // Allow files that are either { records: [...] } or a bare array.
+        let parsed;
+        try {
+            parsed = JSON.parse(raw);
+        }
+        catch (err) {
+            (0, ui_1.error)(`JSON file is invalid: ${err.message}`);
+            process.exit(1);
+        }
+        const records = Array.isArray(parsed)
+            ? parsed
+            : Array.isArray(parsed?.records)
+                ? parsed.records
+                : null;
+        if (!records) {
+            (0, ui_1.error)('JSON file must be an array or { records: [...] }');
+            process.exit(1);
+        }
+        body = JSON.stringify({ siteId: args.site, records });
+    }
+    const headers = { 'content-type': contentType };
+    if (args.resumeFrom && args.resumeFrom > 0) {
+        headers['x-resume-from'] = String(args.resumeFrom);
+    }
+    const url = `/api/ingest/v1/identify/bulk?site=${encodeURIComponent(args.site)}`;
+    let parsedBody;
+    try {
+        const res = await (0, api_client_1.cliApi)(url, {
+            profile: args.profile,
+            method: 'POST',
+            headers,
+            body,
+        });
+        const text = await res.text();
+        parsedBody = text ? JSON.parse(text) : {};
+        if (!res.ok) {
+            throw new api_client_1.CliApiError(res.status, parsedBody?.error || 'http_error', parsedBody?.message || `HTTP ${res.status}`, parsedBody);
+        }
+    }
+    catch (err) {
+        if (err instanceof api_client_1.CliApiError) {
+            (0, ui_1.error)(`Bulk import failed: ${err.code} (${err.message})`);
+            process.exit(1);
+        }
+        throw err;
+    }
+    if (args.json) {
+        process.stdout.write(JSON.stringify(parsedBody, null, 2) + '\n');
+        return;
+    }
+    (0, ui_1.success)(`Bulk identify done. processed=${parsedBody.processed ?? 0} succeeded=${parsedBody.succeeded ?? 0} failed=${parsedBody.failed ?? 0}`);
+    if (parsedBody.errors && parsedBody.errors.length > 0) {
+        const sample = parsedBody.errors.slice(0, 5);
+        (0, ui_1.info)(`First ${sample.length} error(s):`);
+        for (const e of sample) {
+            process.stdout.write(`  [${e.index}] ${e.message}\n`);
+        }
+    }
+}
 async function mergeCmd(args) {
     if (!args.site || !args.canonicalId || !args.duplicateId) {
         (0, ui_1.error)('Usage: gurulu identity merge --site=<id> --canonical-id=<winner> --duplicate-id=<loser>');

package/dist/commands/install.d.ts

@@ -48,6 +48,8 @@ export interface InstallArgs {
     authToken?: string;
     /** Sprint E1.5 — explicit workspace path inside an npm/pnpm/yarn workspace repo. */
     workspace?: string;
+    /** FA-1 P0-2 — override the tracker tag asset URL (self-hosted ingest). */
+    scriptSrc?: string;
 }
 export declare function resolveWorkspaceRoot(repoRoot: string, args: InstallArgs, deps: InstallDeps): Promise<string>;
 export interface IntentPreSeedResult {
@@ -146,7 +148,7 @@ export interface InstallSummary {
     framework: string | null;
     planDiff: string;
     filesChanged: number;
-    packageManager: 'pnpm' | 'yarn' | 'npm' | null;
+    packageManager: 'pnpm' | 'yarn' | 'npm' | 'bun' | null;
     packageInstalled: boolean;
     envKeysWritten: string[];
     ingestOk: boolean | null;
@@ -189,13 +191,14 @@ export interface InstallSummary {
  * or as a bundled package; falls back to GURULU_SCRIPTS_DIR env override).
  */
 export declare function resolveScriptsDir(startDir?: string): string;
-export declare function detectPackageManager(repoRoot: string): 'pnpm' | 'yarn' | 'npm';
-export declare function packageInstallArgs(pm: 'pnpm' | 'yarn' | 'npm'): string[];
+export declare function detectPackageManager(repoRoot: string): 'pnpm' | 'yarn' | 'npm' | 'bun';
+export declare function packageInstallArgs(pm: 'pnpm' | 'yarn' | 'npm' | 'bun'): string[];
 export interface EnvMergeResult {
     file: string;
     added: string[];
     skipped: string[];
 }
+export declare function parseEnvFile(text: string): Set<string>;
 export declare function mergeEnvFile(repoRoot: string, framework: string, vars: Record<string, string>): EnvMergeResult;
 export declare function createDefaultDeps(scriptsDir: string): InstallDeps;
 export declare function runInstallFlow(args: InstallArgs, deps: InstallDeps, scriptsDir: string): Promise<InstallSummary>;
@@ -217,6 +220,15 @@ export interface AuthenticatedInstallDeps {
     /** Phase 18.6 — intent analyze + pre-seed integrations. */
     intent?: IntentProposalDeps;
 }
+export declare function isTelemetryDisabled(): boolean;
+/**
+ * First-run consent prompt. Persists the decision so we never re-ask.
+ * No-op when telemetry is already disabled, when a decision is already
+ * recorded, or in non-interactive (`--yes` / `--no-interactive`) mode.
+ */
+export declare function maybePromptTelemetryConsent(ask: (q: string) => Promise<string>, args?: {
+    yes?: boolean;
+}): Promise<void>;
 export declare function repoHashOf(repoRoot: string, remoteUrl?: string | null): string;
 export declare function pickSite(sites: AuthenticatedInstallDeps['sites'], target?: string): {
     id: string;
@@ -242,5 +254,6 @@ export declare function emitInstallTelemetry(deps: AuthenticatedInstallDeps, pay
     ok: boolean;
     quotaExceeded: boolean;
 }>;
+export declare function detectCiEnv(env?: NodeJS.ProcessEnv): boolean;
 export declare function runAuthenticatedInstallFlow(args: InstallArgs, authDeps: AuthenticatedInstallDeps, installDeps: InstallDeps, scriptsDir: string): Promise<InstallSummary>;
 export declare function installCommand(args: InstallArgs): Promise<void>;