@siteoshq/cli 1.6.0 → 1.8.0

package/dist/cli.js

@@ -17,7 +17,7 @@ __export(cookie_verification_exports, {
   verificationTarget: () => verificationTarget,
   verifyCookieWebsite: () => verifyCookieWebsite
 });
-import { z as z14 } from "zod";
+import { z as z15 } from "zod";
 function verificationTarget(websiteUrl, candidate) {
   const website = new URL(websiteUrl);
   const target = new URL(candidate ?? websiteUrl, website);
@@ -362,73 +362,73 @@ var Names, Service, Envelope, State, VerificationInstallation;
 var init_cookie_verification = __esm({
   "src/services/cookie-verification.ts"() {
     "use strict";
-    Names = z14.object({
-      exact: z14.array(z14.string()),
-      prefixes: z14.array(z14.string())
-    });
-    Service = z14.object({
-      key: z14.string(),
-      purposeKey: z14.string(),
-      lifecycle: z14.object({
-        scriptOrigins: z14.array(z14.string()),
-        iframeOrigins: z14.array(z14.string()),
-        pixelOrigins: z14.array(z14.string()),
+    Names = z15.object({
+      exact: z15.array(z15.string()),
+      prefixes: z15.array(z15.string())
+    });
+    Service = z15.object({
+      key: z15.string(),
+      purposeKey: z15.string(),
+      lifecycle: z15.object({
+        scriptOrigins: z15.array(z15.string()),
+        iframeOrigins: z15.array(z15.string()),
+        pixelOrigins: z15.array(z15.string()),
         firstPartyCookies: Names,
         localStorage: Names
       }).optional()
     });
-    Envelope = z14.object({
-      publicKey: z14.string(),
-      revision: z14.number(),
-      ruleKey: z14.string(),
-      profileKey: z14.string(),
-      trustedSignals: z14.object({
-        region: z14.object({
-          countryCode: z14.string().nullable(),
-          subdivisionCode: z14.string().nullable()
+    Envelope = z15.object({
+      publicKey: z15.string(),
+      revision: z15.number(),
+      ruleKey: z15.string(),
+      profileKey: z15.string(),
+      trustedSignals: z15.object({
+        region: z15.object({
+          countryCode: z15.string().nullable(),
+          subdivisionCode: z15.string().nullable()
         }).optional()
       }).optional(),
-      config: z14.object({
-        services: z14.array(Service),
-        categories: z14.array(z14.object({ key: z14.string(), required: z14.boolean() })),
-        integrations: z14.object({ googleConsentMode: z14.string() })
+      config: z15.object({
+        services: z15.array(Service),
+        categories: z15.array(z15.object({ key: z15.string(), required: z15.boolean() })),
+        integrations: z15.object({ googleConsentMode: z15.string() })
       })
     });
-    State = z14.object({
-      runtimeVersion: z14.string(),
-      preview: z14.boolean(),
-      resolved: z14.object({
-        publicKey: z14.string(),
-        revision: z14.number(),
-        ruleKey: z14.string(),
-        profileKey: z14.string()
+    State = z15.object({
+      runtimeVersion: z15.string(),
+      preview: z15.boolean(),
+      resolved: z15.object({
+        publicKey: z15.string(),
+        revision: z15.number(),
+        ruleKey: z15.string(),
+        profileKey: z15.string()
       }).nullable(),
-      consent: z14.object({
-        categories: z14.array(z14.string()),
-        decision: z14.string(),
-        globalPrivacyControl: z14.boolean(),
-        privacyChoices: z14.object({
-          saleOrShareOptOut: z14.boolean(),
-          targetedAdvertisingOptOut: z14.boolean()
+      consent: z15.object({
+        categories: z15.array(z15.string()),
+        decision: z15.string(),
+        globalPrivacyControl: z15.boolean(),
+        privacyChoices: z15.object({
+          saleOrShareOptOut: z15.boolean(),
+          targetedAdvertisingOptOut: z15.boolean()
         })
       }),
-      services: z14.array(
-        z14.object({
-          key: z14.string(),
-          allowed: z14.boolean(),
-          footprintPresent: z14.boolean()
+      services: z15.array(
+        z15.object({
+          key: z15.string(),
+          allowed: z15.boolean(),
+          footprintPresent: z15.boolean()
         })
       )
     });
-    VerificationInstallation = z14.object({
-      publicKey: z14.string(),
-      currentPublishedRevision: z14.number().int().positive(),
-      delivery: z14.object({
-        runtimeUrl: z14.string().url(),
-        configUrl: z14.string().url(),
-        analyticsUrl: z14.string().url().nullable(),
-        receiptsUrl: z14.string().url(),
-        handshakeUrl: z14.string().url()
+    VerificationInstallation = z15.object({
+      publicKey: z15.string(),
+      currentPublishedRevision: z15.number().int().positive(),
+      delivery: z15.object({
+        runtimeUrl: z15.string().url(),
+        configUrl: z15.string().url(),
+        analyticsUrl: z15.string().url().nullable(),
+        receiptsUrl: z15.string().url(),
+        handshakeUrl: z15.string().url()
       })
     });
   }
@@ -484,7 +484,8 @@ var siteOSServiceAudienceSchema = z.enum([
   "siteos-forms",
   "siteos-pulse",
   "siteos-search",
-  "siteos-seo"
+  "siteos-seo",
+  "siteos-analytics"
 ]);
 var siteOSServiceScopeSchema = z.string().min(1).max(160).regex(/^[a-z][a-z0-9-]*(?::[a-z][a-z0-9-]*){2,}$/);
 var scopeNamespaceByAudience = {
@@ -495,7 +496,8 @@ var scopeNamespaceByAudience = {
   "siteos-forms": "forms",
   "siteos-pulse": "pulse",
   "siteos-search": "search",
-  "siteos-seo": "seo"
+  "siteos-seo": "seo",
+  "siteos-analytics": "analytics"
 };
 function matchingServiceScopes(value, context) {
   const prefix = `${scopeNamespaceByAudience[value.audience]}:`;
@@ -1445,7 +1447,8 @@ var PROJECT_SERVICES = [
   "forms",
   "search",
   "trace",
-  "seo"
+  "seo",
+  "analytics"
 ];
 var ProjectSchema = z4.object({
   id: z4.string().min(1),
@@ -1499,7 +1502,7 @@ var OverviewSchema = z4.object({
 });
 function createProjectApi(input) {
   const origin = resolveSiteOSAuthBaseUrl(input.env);
-  async function request(path31, schema, body, method) {
+  async function request(path32, schema, body, method) {
     const scope = body === void 0 ? "projects:workspace:read" : "projects:workspace:write";
     const grant = await input.grants.acquire({
       audience: "siteos-projects",
@@ -1513,7 +1516,7 @@ function createProjectApi(input) {
         message: "SiteOS API access is unavailable."
       });
     const response = await input.fetchImpl(
-      `${origin}/api/projects/v1/projects${path31}`,
+      `${origin}/api/projects/v1/projects${path32}`,
       {
         method: method ?? (body === void 0 ? "GET" : "POST"),
         headers: {
@@ -1709,14 +1712,14 @@ async function commonServiceContext(options, service, environmentSlug) {
   const binding = attachment.environments.find(
     (item) => item.environmentId === context.environment.id
   );
-  if (["pulse", "cookie", "seo"].includes(service) && !binding)
+  if (["pulse", "cookie", "seo", "analytics"].includes(service) && !binding)
     throw new SiteOSAuthApiError({
       code: "PROJECT_ENVIRONMENT_NOT_CONFIGURED",
       message: `Set up ${service} in ${context.environment.name} with \`siteos project connect ${service}\`.`
     });
   return {
     ...context,
-    resourceId: ["pulse", "cookie", "seo"].includes(service) ? binding.resourceId : attachment.resourceId,
+    resourceId: ["pulse", "cookie", "seo", "analytics"].includes(service) ? binding.resourceId : attachment.resourceId,
     environmentBinding: binding
   };
 }
@@ -3813,10 +3816,10 @@ async function runSubmissionsCommand(options) {
     return usageError2(
       "Use new, read, archived or spam for --status and --expected-status."
     );
-  const filters = new URLSearchParams();
+  const filters2 = new URLSearchParams();
   for (const key of ["query", "status", "from", "to", "limit", "cursor"]) {
     const item = value(key);
-    if (item) filters.set(key, item);
+    if (item) filters2.set(key, item);
   }
   const limit = Number(value("limit") ?? 50);
   if (!Number.isInteger(limit) || limit < 1 || limit > 100)
@@ -3853,7 +3856,7 @@ async function runSubmissionsCommand(options) {
       environmentId: environment.id,
       formId
     };
-    const response = action === "list" ? await context.client.listSubmissions({ ...input, filters }) : action === "read" ? await context.client.readSubmission({
+    const response = action === "list" ? await context.client.listSubmissions({ ...input, filters: filters2 }) : action === "read" ? await context.client.readSubmission({
       ...input,
       submissionId
     }) : await context.client.updateSubmissionStatus({
@@ -9229,13 +9232,13 @@ Usage:
   siteos project use <id-or-slug> [--json]
   siteos project update [--name <name>] [--slug <slug>] [--url <production-url>] [--json]
   siteos project status [--json]
-  siteos project connect <pulse|cookie|forms|search|trace|seo> [--resource <id>] [--json]
+  siteos project connect <pulse|cookie|forms|search|trace|seo|analytics> [--resource <id>] [--json]
   siteos project environment list [--json]
   siteos project environment create --name <name> --slug <slug> [--url <url>] [--json]
   siteos project environment use <slug> [--json]
   siteos project environment update <slug> [--name <name>] [--url <url>] [--json]
-  siteos project environment resources <pulse|cookie|forms|search|trace|seo> [--json]
-  siteos project environment connect <pulse|cookie|forms|search|trace|seo> --environment <slug> [--resource <id>] [--json]
+  siteos project environment resources <pulse|cookie|forms|search|trace|seo|analytics> [--json]
+  siteos project environment connect <pulse|cookie|forms|search|trace|seo|analytics> --environment <slug> [--resource <id>] [--json]
 
 Select a Project once per repository. Service commands use its configured resources.
 Connect creates a draft workspace, or explicitly attaches an existing resource.
@@ -9333,7 +9336,7 @@ Run \`siteos project status\` to inspect its services.`;
         const service = parsed.positionals[0];
         if (!PROJECT_SERVICES.includes(service))
           throw new Error(
-            "Choose pulse, cookie, forms, search, trace or seo. Organization connections use `siteos integrations`. "
+            "Choose pulse, cookie, forms, search, trace, seo or analytics. Organization connections use `siteos integrations`. "
           );
         overview = await api.connect(
           overview.project.id,
@@ -9389,7 +9392,9 @@ async function runEnvironmentCommand3(options) {
     throw new Error("Environment create requires --name and --slug.");
   const service = positionals[0];
   if ((action === "connect" || action === "resources") && !PROJECT_SERVICES.includes(service))
-    throw new Error("Choose pulse, cookie, forms, search, trace or seo.");
+    throw new Error(
+      "Choose pulse, cookie, forms, search, trace, seo or analytics."
+    );
   if (action === "connect" && !values.environment)
     throw new Error("Choose a Project environment with --environment <slug>.");
   const context = await readCommonProject(
@@ -9474,7 +9479,111 @@ async function runEnvironmentCommand3(options) {
 import { readFile as readFile16, stat } from "fs/promises";
 import path28 from "path";
 import { parseArgs as parseArgs3 } from "util";
-import { z as z15 } from "zod";
+import { z as z16 } from "zod";
+
+// src/services/trace-explorer-command.ts
+import { z as z14 } from "zod";
+var filters = [
+  "environment",
+  "provider",
+  "event",
+  "property",
+  "page-view",
+  "search",
+  "state",
+  "rule",
+  "kind",
+  "period",
+  "cursor"
+];
+var TRACE_EXPLORER_FLAGS = {
+  destinations: filters,
+  events: filters,
+  properties: filters,
+  issues: filters,
+  observations: filters,
+  "issue show": ["environment", "id", "cursor"],
+  "observation show": ["environment", "batch-id", "event-id"]
+};
+var FilterValues = z14.object({
+  provider: z14.enum([
+    "siteos_analytics",
+    "ga4",
+    "google_ads",
+    "hubspot",
+    "meta",
+    "custom"
+  ]).optional(),
+  event: z14.string().min(1).max(160).optional(),
+  property: z14.string().min(1).max(160).optional(),
+  "page-view": z14.string().uuid().optional(),
+  search: z14.string().max(160).optional(),
+  state: z14.enum([
+    "all",
+    "active",
+    "snoozed",
+    "resolved",
+    "new",
+    "issues",
+    "tracked",
+    "ignored"
+  ]).optional(),
+  rule: z14.string().min(1).max(80).optional(),
+  kind: z14.enum([
+    "data_layer",
+    "fetch",
+    "xhr",
+    "beacon",
+    "resource",
+    "consent",
+    "heartbeat",
+    "runtime_diagnostic"
+  ]).optional(),
+  period: z14.enum(["24h", "7d"]).optional(),
+  cursor: z14.string().min(1).max(4096).optional()
+});
+function traceExplorerSuffix(route, values) {
+  if (!TRACE_EXPLORER_FLAGS[route]) return null;
+  const query = new URLSearchParams();
+  if (route === "issue show" || route === "observation show") {
+    const keys = route === "issue show" ? ["id"] : ["batch-id", "event-id"];
+    for (const key of keys) {
+      if (!z14.string().uuid().safeParse(values[key]).success)
+        throw new Error(`Use --${key} with the UUID returned by Trace.`);
+    }
+    if (values.cursor !== void 0) {
+      if (!z14.string().uuid().safeParse(values.cursor).success)
+        throw new Error(
+          "Use --cursor with the nextCursor returned by this issue."
+        );
+      query.set("cursor", values.cursor);
+    }
+    const suffix = route === "issue show" ? `/issues/${encodeURIComponent(values.id)}` : `/observations/${encodeURIComponent(values["batch-id"])}/${encodeURIComponent(values["event-id"])}`;
+    return `${suffix}${query.size ? `?${query}` : ""}`;
+  }
+  const parsed = FilterValues.safeParse(values);
+  if (!parsed.success) {
+    const flag = parsed.error.issues[0]?.path[0];
+    throw new Error(
+      `Invalid --${String(flag)} filter. Run \`siteos trace --help\`.`
+    );
+  }
+  for (const [key, value] of Object.entries(parsed.data)) {
+    if (value !== void 0)
+      query.set(key === "page-view" ? "pageView" : key, value);
+  }
+  return `/${route}${query.size ? `?${query}` : ""}`;
+}
+function tracePublicationVersion(value) {
+  if (value === void 0) return void 0;
+  if (!/^[1-9]\d*$/u.test(value) || !Number.isSafeInteger(Number(value)))
+    throw new Error(
+      "Use --expected-draft-version with a positive integer from the reviewed plan."
+    );
+  return Number(value);
+}
+
+// src/services/service-command.ts
 var SERVICE_HELP = {
   cookie: `Manage Cookie for the selected SiteOS Project.
 
@@ -9501,12 +9610,27 @@ Usage:
   siteos trace status [--json]
   siteos trace environments [--json]
   siteos trace report [--environment <slug>] [--json]
+  siteos trace destinations [--environment <slug>] [--period <24h|7d>] [--cursor <cursor>] [--json]
+  siteos trace events [--environment <slug>] [--provider <provider>] [--event <name>] [--search <text>] [--state <all|new|issues|tracked|ignored>] [--period <24h|7d>] [--cursor <cursor>] [--json]
+  siteos trace properties [--environment <slug>] [--provider <provider>] [--event <name>] [--property <name>] [--search <text>] [--period <24h|7d>] [--cursor <cursor>] [--json]
+  siteos trace issues [--environment <slug>] [--provider <provider>] [--event <name>] [--state <all|active|snoozed|resolved|new>] [--rule <rule>] [--search <text>] [--period <24h|7d>] [--cursor <cursor>] [--json]
+  siteos trace observations [--environment <slug>] [--provider <provider>] [--event <name>] [--kind <kind>] [--page-view <uuid>] [--search <text>] [--period <24h|7d>] [--cursor <cursor>] [--json]
+  siteos trace issue show --id <uuid> [--environment <slug>] [--cursor <finding-cursor>] [--json]
+  siteos trace observation show --batch-id <uuid> --event-id <uuid> [--environment <slug>] [--json]
   siteos trace installation <show|ensure|save|publish> [--environment <slug>] [--input <draft.json>] [--json]
   siteos trace tracking-plan <show|ensure|save|publish> [--environment <slug>] [--input <plan.json>] [--json]
+  siteos trace tracking-plan publish --expected-draft-version <number> [--environment <slug>] [--json]
 
 Start with siteos project use, then siteos project connect trace.
 Commands use the selected Project environment. Save requires --input with expectedDraftVersion.
-Ensure creates a draft; publish activates the reviewed configuration.`,
+Ensure creates a draft; publish activates the reviewed configuration.
+Use --expected-draft-version when publishing a reviewed tracking plan; a conflict needs a fresh review.
+Explorer commands require the matching Trace server. They read one page and return nextCursor.
+Reuse the same filters with that cursor; omit it to start a fresh time window.
+Providers: siteos_analytics, ga4, google_ads, hubspot, meta, custom (data layer source).
+Kinds: data_layer, fetch, xhr, beacon, resource, consent, heartbeat, runtime_diagnostic.
+Lists also accept --provider, --event, --property, --page-view, --search, --state, --rule and --kind.
+Destinations are observed analytics services; a data layer event alone does not prove delivery.`,
   integrations: `Manage shared Organization connections and notification destinations.
 
 Usage:
@@ -9539,7 +9663,20 @@ async function runServiceCommand(service, options) {
         subdivision: { type: "string" },
         source: { type: "string" },
         url: { type: "string" },
-        browser: { type: "string" }
+        browser: { type: "string" },
+        provider: { type: "string" },
+        event: { type: "string" },
+        property: { type: "string" },
+        "page-view": { type: "string" },
+        search: { type: "string" },
+        state: { type: "string" },
+        rule: { type: "string" },
+        kind: { type: "string" },
+        period: { type: "string" },
+        id: { type: "string" },
+        "batch-id": { type: "string" },
+        "event-id": { type: "string" },
+        "expected-draft-version": { type: "string" }
       }
     });
     const [action, subaction] = positionals;
@@ -9562,6 +9699,7 @@ async function runServiceCommand(service, options) {
         status: [],
         environments: [],
         report: ["environment"],
+        ...TRACE_EXPLORER_FLAGS,
         ...Object.fromEntries(
           ["installation", "tracking-plan"].flatMap(
             (section) => ["show", "ensure", "save", "publish"].map((operation) => [
@@ -9569,7 +9707,8 @@ async function runServiceCommand(service, options) {
               operation === "save" ? ["environment", "input"] : ["environment"]
             ])
           )
-        )
+        ),
+        "tracking-plan publish": ["environment", "expected-draft-version"]
       },
       integrations: {
         status: [],
@@ -9593,6 +9732,10 @@ async function runServiceCommand(service, options) {
       throw new Error(
         "Destination creation requires --channel <provider-channel-id>."
       );
+    const explorerSuffix = service === "trace" ? traceExplorerSuffix(route, values) : null;
+    const expectedDraftVersion = tracePublicationVersion(
+      values["expected-draft-version"]
+    );
     const runtime = commonProjectRuntime(options);
     const common = service === "integrations" ? null : await commonServiceContext(
       options,
@@ -9632,8 +9775,8 @@ async function runServiceCommand(service, options) {
       );
       const result2 = await response.json();
       if (!response.ok) {
-        const error = z15.object({
-          error: z15.object({ code: z15.string(), message: z15.string().max(500) })
+        const error = z16.object({
+          error: z16.object({ code: z16.string(), message: z16.string().max(500) })
         }).safeParse(result2);
         throw new SiteOSAuthApiError({
           code: error.success ? error.data.error.code : "SERVICE_REQUEST_FAILED",
@@ -9665,9 +9808,9 @@ async function runServiceCommand(service, options) {
           await inputFile(),
           "cookie:workspace:read"
         );
-        const validation = z15.object({
-          valid: z15.boolean(),
-          draftVersionMatches: z15.boolean().optional()
+        const validation = z16.object({
+          valid: z16.boolean(),
+          draftVersionMatches: z16.boolean().optional()
         }).parse(result);
         if (!validation.valid || validation.draftVersionMatches === false)
           return { exitCode: 2, stdout: JSON.stringify(result, null, 2) };
@@ -9706,11 +9849,11 @@ async function runServiceCommand(service, options) {
       } else if (action === "installation")
         result = await request(`${site}/installation`);
       else if (action === "draft" && subaction === "get" && positionals.length === 2) {
-        const response = z15.object({
-          name: z15.string(),
-          hostname: z15.string(),
-          draftVersion: z15.number(),
-          draft: z15.unknown()
+        const response = z16.object({
+          name: z16.string(),
+          hostname: z16.string(),
+          draftVersion: z16.number(),
+          draft: z16.unknown()
         }).parse(await request(site));
         result = {
           name: response.name,
@@ -9741,10 +9884,10 @@ async function runServiceCommand(service, options) {
         result = await request(site);
       else if (action === "environments" && positionals.length === 1)
         result = await request(`${site}/environments`);
-      else if (action === "report" || action === "installation" || action === "tracking-plan") {
-        const response = z15.object({
-          environments: z15.array(
-            z15.object({ id: z15.string(), slug: z15.string() })
+      else if (action === "report" || action === "installation" || action === "tracking-plan" || explorerSuffix !== null) {
+        const response = z16.object({
+          environments: z16.array(
+            z16.object({ id: z16.string(), slug: z16.string() })
           )
         }).parse(await request(`${site}/environments`));
         const environment = common.overview.project.environments.find(
@@ -9768,12 +9911,14 @@ async function runServiceCommand(service, options) {
             "Choose an environment from `siteos trace environments`."
           );
         const base = `/environments/${encodeURIComponent(matches[0].id)}`;
-        if (action === "report" && positionals.length === 1) {
-          const detail = z15.object({
-            site: z15.object({
-              id: z15.literal(common.resourceId),
-              environments: z15.array(
-                z15.object({ id: z15.string(), evidence: z15.unknown() })
+        if (explorerSuffix !== null) {
+          result = await request(`${base}${explorerSuffix}`);
+        } else if (action === "report" && positionals.length === 1) {
+          const detail = z16.object({
+            site: z16.object({
+              id: z16.literal(common.resourceId),
+              environments: z16.array(
+                z16.object({ id: z16.string(), evidence: z16.unknown() })
               )
             })
           }).parse(await request(site));
@@ -9795,7 +9940,7 @@ async function runServiceCommand(service, options) {
           result = await request(
             `${base}/${action}/${subaction}`,
             "POST",
-            {},
+            expectedDraftVersion === void 0 ? {} : { expectedDraftVersion },
             subaction === "publish" ? "trace:publication:write" : void 0
           );
         else
@@ -9831,24 +9976,381 @@ async function runServiceCommand(service, options) {
   } catch (cause) {
     return {
       exitCode: cause instanceof SiteOSAuthApiError ? 1 : 2,
-      stderr: cause instanceof SiteOSAuthApiError || !(cause instanceof z15.ZodError) && cause instanceof Error ? cause.message : "The service returned an invalid response."
+      stderr: cause instanceof SiteOSAuthApiError || !(cause instanceof z16.ZodError) && cause instanceof Error ? cause.message : "The service returned an invalid response."
+    };
+  }
+}
+
+// src/services/analytics-command.ts
+import { readFile as readFile17, stat as stat2 } from "fs/promises";
+import path29 from "path";
+import { parseArgs as parseArgs4 } from "util";
+import { z as z17 } from "zod";
+var ANALYTICS_HELP = `Set up website Analytics in the selected Project environment.
+
+Usage:
+  siteos analytics status [--environment <slug>] [--json]
+  siteos analytics installation [--environment <slug>] [--json]
+  siteos analytics report [--days <1|7|28>] [--event <name>] [--country <ISO|unknown>] [--campaign <id>] [--environment <slug>] [--json]
+  siteos analytics realtime [--country <ISO|unknown>] [--campaign <id>] [--environment <slug>] [--json]
+  siteos analytics settings show [--environment <slug>] [--json]
+  siteos analytics settings set --revision <number> [--enabled <true|false>] [--cookie-events <true|false>] [--minimal-realtime <true|false>] [--environment <slug>] [--json]
+  siteos analytics events list [--environment <slug>] [--json]
+  siteos analytics events create --file <event.json> [--environment <slug>] [--json]
+  siteos analytics events snippet <name> [--environment <slug>] [--json]
+  siteos analytics campaigns list [--environment <slug>] [--json]
+  siteos analytics campaigns create --file <campaign.json> [--environment <slug>] [--json]
+  siteos analytics goals list [--environment <slug>] [--json]
+  siteos analytics goals create --file <goal.json> [--environment <slug>] [--json]
+  siteos analytics goals archive <id> [--environment <slug>] [--json]
+  siteos analytics funnels list [--environment <slug>] [--json]
+  siteos analytics funnels create --file <funnel.json> [--environment <slug>] [--json]
+  siteos analytics funnels archive <id> [--environment <slug>] [--json]
+  siteos analytics monitoring prepare [--environment <slug>] [--json]
+
+Connect first: siteos project connect analytics. Cookie and Trace are optional.
+Use project environment use <slug> to select an environment; no resource fallback is allowed.
+Analytics starts independently. Consent control is configured and published in Cookie.
+An external CMP can gate its loader explicitly; privacy opt-outs still apply.
+Settings require an owner/admin, the current revision and at least one change.
+Catalog files are bounded JSON using the documented event/campaign/goal/funnel contracts.
+Monitoring preparation creates a Trace draft only; publication remains a separate operation.
+Analytics is Unlimited during early access. No synthetic events are sent by these commands.`;
+var EventInput = z17.object({
+  name: z17.string().regex(/^[a-z][a-z0-9_]{0,63}$/u).refine((v) => v !== "pageview" && !v.startsWith("cookie_")),
+  label: z17.string().trim().min(1).max(80),
+  properties: z17.record(
+    z17.string().regex(/^[a-z][a-z0-9_]{0,39}$/u),
+    z17.array(
+      z17.string().min(1).max(80).regex(/^[a-zA-Z0-9 _./:-]+$/u)
+    ).min(1).max(20)
+  ).refine((v) => Object.keys(v).length <= 8)
+}).strict();
+var Resource = z17.object({
+  id: z17.string(),
+  organizationId: z17.string(),
+  name: z17.string(),
+  slug: z17.string(),
+  origin: z17.string().url(),
+  publicKey: z17.string(),
+  revision: z17.number().int().positive(),
+  enabled: z17.boolean(),
+  cookieEvents: z17.boolean(),
+  minimalRealtime: z17.boolean()
+});
+var readKeys = [
+  "days",
+  "from",
+  "to",
+  "totals",
+  "trend",
+  "pages",
+  "sources",
+  "countries",
+  "countryDetectionConfigured",
+  "countryFilter",
+  "campaignFilter",
+  "eventCounts",
+  "recent",
+  "lastReceivedAt",
+  "campaigns",
+  "goals",
+  "funnels",
+  "convertedVisits"
+];
+var liveKeys = [
+  "at",
+  "from",
+  "activeSince",
+  "collectionEnabled",
+  "countryFilter",
+  "campaignFilter",
+  "activeVisitors",
+  "visitors",
+  "pageviews",
+  "events",
+  "trend",
+  "pages",
+  "sources",
+  "countries",
+  "eventCounts",
+  "minimal"
+];
+var pick = (value, keys) => Object.fromEntries(
+  keys.filter((key) => Object.hasOwn(value, key)).map((key) => [key, value[key]])
+);
+async function runAnalyticsCommand(options) {
+  if (!options.args.length || options.args.some((v) => ["--help", "-h"].includes(v)))
+    return { exitCode: 0, stdout: ANALYTICS_HELP };
+  const json = options.args.includes("--json");
+  try {
+    const { positionals, values } = parseArgs4({
+      args: options.args,
+      strict: true,
+      allowPositionals: true,
+      options: {
+        json: { type: "boolean" },
+        environment: { type: "string" },
+        days: { type: "string" },
+        event: { type: "string" },
+        country: { type: "string" },
+        campaign: { type: "string" },
+        revision: { type: "string" },
+        enabled: { type: "string" },
+        "cookie-events": { type: "string" },
+        "minimal-realtime": { type: "string" },
+        file: { type: "string" }
+      }
+    });
+    const route = positionals.slice(0, 2).join(" "), action = positionals[0];
+    const operations = {
+      status: { args: 1, flags: [] },
+      installation: { args: 1, flags: [] },
+      report: { args: 1, flags: ["days", "event", "country", "campaign"] },
+      realtime: { args: 1, flags: ["country", "campaign"] },
+      "settings show": { args: 2, flags: [] },
+      "settings set": {
+        args: 2,
+        flags: ["revision", "enabled", "cookie-events", "minimal-realtime"],
+        scope: "analytics:workspace:write"
+      },
+      "events list": { args: 2, flags: [] },
+      "events snippet": { args: 3, flags: [] },
+      "events create": {
+        args: 2,
+        flags: ["file"],
+        scope: "analytics:events:write"
+      },
+      "campaigns list": { args: 2, flags: [] },
+      "campaigns create": {
+        args: 2,
+        flags: ["file"],
+        scope: "analytics:reports:write"
+      },
+      "goals list": { args: 2, flags: [] },
+      "goals create": {
+        args: 2,
+        flags: ["file"],
+        scope: "analytics:reports:write"
+      },
+      "goals archive": { args: 3, flags: [], scope: "analytics:reports:write" },
+      "funnels list": { args: 2, flags: [] },
+      "funnels create": {
+        args: 2,
+        flags: ["file"],
+        scope: "analytics:reports:write"
+      },
+      "funnels archive": {
+        args: 3,
+        flags: [],
+        scope: "analytics:reports:write"
+      },
+      "monitoring prepare": {
+        args: 2,
+        flags: [],
+        scope: "analytics:monitoring:write"
+      }
+    };
+    const operation = operations[route];
+    if (!operation || positionals.length !== operation.args || Object.keys(values).some(
+      (key) => !["json", "environment", ...operation.flags].includes(key)
+    ))
+      throw new Error(
+        "Invalid Analytics operation or flags. Run `siteos analytics --help`."
+      );
+    if (values.days && !["1", "7", "28"].includes(values.days))
+      throw new Error("Use --days 1, 7 or 28.");
+    if (values.country && !/^(?:[A-Z]{2}|unknown)$/u.test(values.country))
+      throw new Error("Use an uppercase ISO country code or unknown.");
+    if (values.campaign) z17.string().uuid().parse(values.campaign);
+    const setting = route === "settings set", creating = positionals[1] === "create", archive = positionals[1] === "archive";
+    let body;
+    if (setting) {
+      if (!/^[1-9]\d{0,8}$/u.test(values.revision ?? ""))
+        throw new Error(
+          "Read settings first and supply the current positive --revision."
+        );
+      body = { revision: Number(values.revision) };
+      for (const [flag, key] of [
+        ["enabled", "enabled"],
+        ["cookie-events", "cookieEvents"],
+        ["minimal-realtime", "minimalRealtime"]
+      ]) {
+        if (values[flag] === void 0) continue;
+        if (!["true", "false"].includes(values[flag]))
+          throw new Error(`Use --${flag} true|false.`);
+        body[key] = values[flag] === "true";
+      }
+      if (Object.keys(body).length < 2)
+        throw new Error("Provide at least one setting to change.");
+    } else if (creating) {
+      if (!values.file)
+        throw new Error("Creation requires --file with a JSON definition.");
+      const filename = path29.resolve(options.cwd ?? process.cwd(), values.file);
+      if ((await stat2(filename)).size > 16384)
+        throw new Error("The definition must not exceed 16 KiB.");
+      const text = await readFile17(filename, "utf8");
+      if (Buffer.byteLength(text) > 16384)
+        throw new Error("The definition must not exceed 16 KiB.");
+      let definition;
+      try {
+        definition = JSON.parse(text);
+      } catch {
+        throw new Error("The definition must contain valid JSON.");
+      }
+      body = z17.record(z17.unknown()).parse(definition);
+      if (action === "events") body = EventInput.parse(body);
+    } else if (archive) body = { id: z17.string().uuid().parse(positionals[2]) };
+    const context = await commonServiceContext(
+      options,
+      "analytics",
+      values.environment
+    );
+    if (!context)
+      throw new Error(
+        "Select a SiteOS Project with `siteos project use` first."
+      );
+    const runtime = commonProjectRuntime(options), scope = operation.scope ?? "analytics:workspace:read";
+    const grant = await runtime.grants.acquire({
+      audience: "siteos-analytics",
+      scopes: [scope]
+    });
+    if (grant.grant.audience !== "siteos-analytics" || grant.grant.scopes.length !== 1 || grant.grant.scopes[0] !== scope || grant.grant.organizationId !== context.overview.project.organizationId)
+      throw new SiteOSAuthApiError({
+        code: "AUTH_INVALID_RESPONSE",
+        message: "The Analytics grant does not match this Project and operation."
+      });
+    const query = new URLSearchParams();
+    for (const key of ["days", "event", "country", "campaign"])
+      if (values[key]) query.set(key, values[key]);
+    const suffix = action === "realtime" ? `/realtime?${query}` : setting ? "/settings" : creating || archive ? `/${action}` : route === "monitoring prepare" ? "/monitoring" : `?${query}`;
+    if (!options.fetchImpl)
+      throw new Error("SiteOS API access is unavailable.");
+    const response = await options.fetchImpl(
+      `${runtime.api.origin}/api/analytics/v1/resources/${encodeURIComponent(context.resourceId)}${suffix}`,
+      {
+        method: setting ? "PATCH" : archive ? "DELETE" : operation.scope ? "POST" : "GET",
+        headers: {
+          Accept: "application/json",
+          Authorization: `Bearer ${grant.accessToken}`,
+          ...body ? { "Content-Type": "application/json" } : {}
+        },
+        ...body ? { body: JSON.stringify(body) } : {},
+        signal: AbortSignal.timeout(3e4)
+      }
+    );
+    const value = await response.json();
+    if (!response.ok) {
+      const error = z17.object({
+        error: z17.object({ code: z17.string(), message: z17.string().max(500) })
+      }).safeParse(value);
+      throw new SiteOSAuthApiError({
+        code: error.success ? error.data.error.code : "ANALYTICS_REQUEST_FAILED",
+        message: error.success ? error.data.error.message : "The Analytics request failed.",
+        status: response.status
+      });
+    }
+    const record = z17.object({
+      contractVersion: z17.literal(1),
+      resourceId: z17.literal(context.resourceId)
+    }).passthrough().parse(value);
+    let output;
+    if (setting) {
+      const saved = Resource.parse(record);
+      if (saved.id !== context.resourceId || saved.organizationId !== context.overview.project.organizationId || saved.revision !== Number(values.revision) + 1 || Object.entries(body).some(
+        ([key, val]) => key !== "revision" && saved[key] !== val
+      ))
+        throw new Error("The saved settings do not match this change.");
+      output = saved;
+    } else if (creating) {
+      if (action === "events") {
+        output = EventInput.parse(
+          pick(record, ["name", "label", "properties"])
+        );
+        if (JSON.stringify(output) !== JSON.stringify(body))
+          throw new Error("The saved event does not match this definition.");
+      } else
+        output = {
+          id: z17.string().uuid().parse(record.id),
+          ...pick(
+            record,
+            action === "campaigns" ? ["label", "source", "medium", "campaign"] : action === "goals" ? ["label", "match"] : ["label", "steps"]
+          )
+        };
+    } else if (archive)
+      output = { archived: z17.literal(true).parse(record.archived) };
+    else if (route === "monitoring prepare")
+      output = { state: z17.literal("prepared").parse(record.state) };
+    else if (action === "realtime") output = pick(record, liveKeys);
+    else {
+      const resource = Resource.parse(record.resource);
+      if (resource.id !== context.resourceId || resource.organizationId !== context.overview.project.organizationId)
+        throw new Error(
+          "The Analytics response belongs to a different resource."
+        );
+      if (action === "status")
+        output = {
+          resource,
+          lastReceivedAt: record.lastReceivedAt,
+          consentSource: z17.object({
+            consentSource: z17.enum([
+              "cookie",
+              "external",
+              "waiting_for_cookie",
+              "not_required"
+            ])
+          }).parse(record.configuration).consentSource
+        };
+      else if (route === "settings show") output = resource;
+      else if (action === "installation")
+        output = {
+          resource,
+          installation: z17.string().parse(record.installation),
+          configuration: record.configuration
+        };
+      else if (action === "events") {
+        const definitions = z17.array(EventInput).parse(record.definitions);
+        if (route === "events snippet") {
+          const definition = definitions.find((d) => d.name === positionals[2]);
+          if (!definition)
+            throw new Error(
+              "Create the event definition before requesting its snippet."
+            );
+          output = {
+            name: definition.name,
+            javascript: `window.SiteOSAnalytics?.track(${JSON.stringify(definition.name)}, ${JSON.stringify(Object.fromEntries(Object.entries(definition.properties).map(([key, values2]) => [key, values2[0]])))});`,
+            guidance: "Trigger only after the business action succeeds; substitute declared categorical values."
+          };
+        } else output = { definitions, eventCounts: record.eventCounts };
+      } else
+        output = action === "report" ? pick(record, readKeys) : { [action]: z17.array(z17.unknown()).parse(record[action]) };
+    }
+    return { exitCode: 0, stdout: JSON.stringify(output, null, 2) };
+  } catch (cause) {
+    const error = cause instanceof SiteOSAuthApiError ? { code: cause.code, message: cause.message } : {
+      code: "ANALYTICS_COMMAND_FAILED",
+      message: cause instanceof z17.ZodError ? "The Analytics input or response does not match the supported contract." : cause instanceof Error ? cause.message : "The Analytics command failed."
+    };
+    return {
+      exitCode: cause instanceof SiteOSAuthApiError ? 1 : 2,
+      ...json ? { stdout: JSON.stringify({ error }) } : { stderr: error.message }
     };
   }
 }
 
 // src/services/seo-command.ts
 import { writeFile as writeFile9 } from "fs/promises";
-import path30 from "path";
-import { parseArgs as parseArgs5 } from "util";
-import { z as z17 } from "zod";
+import path31 from "path";
+import { parseArgs as parseArgs6 } from "util";
+import { z as z19 } from "zod";
 
 // src/services/seo-performance-command.ts
 import { randomUUID as randomUUID6 } from "crypto";
 import { writeFile as writeFile8 } from "fs/promises";
-import path29 from "path";
+import path30 from "path";
 import { setTimeout as setTimeout2 } from "timers/promises";
-import { parseArgs as parseArgs4 } from "util";
-import { z as z16 } from "zod";
+import { parseArgs as parseArgs5 } from "util";
+import { z as z18 } from "zod";
 var PERFORMANCE_HELP = `
   siteos seo performance run --audit <id> --url <url> [--url <url>...] [--device <mobile|desktop>] [--idempotency-key <key>] [--environment <slug>] [--json]
   siteos seo performance list [--device <mobile|desktop>] [--environment <slug>] [--json]
@@ -9865,7 +10367,7 @@ Reuse the returned idempotency key after an uncertain run response. Wait default
 async function runSeoPerformanceCommand(options) {
   let idempotencyKey;
   try {
-    const { values, positionals } = parseArgs4({
+    const { values, positionals } = parseArgs5({
       args: options.args.slice(1),
       strict: true,
       allowPositionals: true,
@@ -9936,12 +10438,12 @@ async function runSeoPerformanceCommand(options) {
     const runtime = commonProjectRuntime(options);
     const writing = ["run", "cancel"].includes(action);
     const scope = writing ? "seo:audits:write" : "seo:workspace:read";
-    const batchSchema = z16.object({
-      id: z16.string(),
-      resourceId: z16.literal(context.resourceId),
-      organizationId: z16.literal(context.overview.project.organizationId),
-      sourceAuditId: z16.string(),
-      state: z16.enum([
+    const batchSchema = z18.object({
+      id: z18.string(),
+      resourceId: z18.literal(context.resourceId),
+      organizationId: z18.literal(context.overview.project.organizationId),
+      sourceAuditId: z18.string(),
+      state: z18.enum([
         "queued",
         "running",
         "completed",
@@ -9949,8 +10451,8 @@ async function runSeoPerformanceCommand(options) {
         "failed",
         "cancelled"
       ]),
-      device: z16.enum(["mobile", "desktop"]),
-      urls: z16.array(z16.string()).min(1).max(10)
+      device: z18.enum(["mobile", "desktop"]),
+      urls: z18.array(z18.string()).min(1).max(10)
     }).passthrough();
     const query = new URLSearchParams();
     if (values.device) query.set("device", values.device);
@@ -9998,17 +10500,17 @@ async function runSeoPerformanceCommand(options) {
           );
         const text = await response.text();
         if (values.format === "json") {
-          const parsed = z16.object({
-            contractVersion: z16.literal(1),
+          const parsed = z18.object({
+            contractVersion: z18.literal(1),
             batch: batchSchema,
-            pages: z16.array(z16.unknown())
+            pages: z18.array(z18.unknown())
           }).parse(JSON.parse(text));
           if (parsed.batch.id !== id)
             throw new Error(
               "The export response does not match the selected check."
             );
         }
-        const output = path29.resolve(
+        const output = path30.resolve(
           options.cwd ?? process.cwd(),
           values.output
         );
@@ -10024,8 +10526,8 @@ async function runSeoPerformanceCommand(options) {
       }
       const data = await response.json();
       if (!response.ok) {
-        const error = z16.object({
-          error: z16.object({ code: z16.string(), message: z16.string().max(500) })
+        const error = z18.object({
+          error: z18.object({ code: z18.string(), message: z18.string().max(500) })
         }).safeParse(data);
         throw new SiteOSAuthApiError({
           code: error.success ? error.data.error.code : "SEO_REQUEST_FAILED",
@@ -10033,8 +10535,8 @@ async function runSeoPerformanceCommand(options) {
           status: response.status
         });
       }
-      const record = z16.object({ contractVersion: z16.literal(1) }).passthrough().parse(data);
-      if (action === "cancel") z16.literal(true).parse(record.cancelled);
+      const record = z18.object({ contractVersion: z18.literal(1) }).passthrough().parse(data);
+      if (action === "cancel") z18.literal(true).parse(record.cancelled);
       else if (action === "run") {
         const accepted = batchSchema.parse(record.batch);
         const normalize = (url) => {
@@ -10047,8 +10549,8 @@ async function runSeoPerformanceCommand(options) {
             "The queued check does not match the requested source, device and URLs."
           );
       } else {
-        z16.literal(context.resourceId).parse(record.resourceId);
-        z16.array(batchSchema).parse(record.batches);
+        z18.literal(context.resourceId).parse(record.resourceId);
+        z18.array(batchSchema).parse(record.batches);
         const selected = batchSchema.nullable().parse(record.batch);
         if (id && selected?.id !== id)
           throw new Error(
@@ -10075,7 +10577,7 @@ async function runSeoPerformanceCommand(options) {
   } catch (cause) {
     const error = {
       code: cause instanceof SiteOSAuthApiError ? cause.code : "SEO_COMMAND_FAILED",
-      message: cause instanceof z16.ZodError ? "The SEO service returned an invalid response." : cause instanceof Error ? cause.message : "The performance command failed."
+      message: cause instanceof z18.ZodError ? "The SEO service returned an invalid response." : cause instanceof Error ? cause.message : "The performance command failed."
     };
     return {
       exitCode: cause instanceof SiteOSAuthApiError ? 1 : 2,
@@ -10128,7 +10630,7 @@ async function runSeoCommand(options) {
     return runSeoPerformanceCommand(options);
   const json = options.args.includes("--json");
   try {
-    const { positionals, values } = parseArgs5({
+    const { positionals, values } = parseArgs6({
       args: options.args,
       strict: true,
       allowPositionals: true,
@@ -10341,17 +10843,17 @@ async function runSeoCommand(options) {
         );
       const text = await response.text();
       if (values.format === "json")
-        z17.object({
-          contractVersion: z17.literal(1),
-          audit: z17.object({
-            id: z17.literal(values.audit),
-            resourceId: z17.literal(context.resourceId)
+        z19.object({
+          contractVersion: z19.literal(1),
+          audit: z19.object({
+            id: z19.literal(values.audit),
+            resourceId: z19.literal(context.resourceId)
           }),
-          kind: z17.literal(values.kind),
-          totalRows: z17.literal(rows),
-          rows: z17.array(z17.unknown()).length(rows)
+          kind: z19.literal(values.kind),
+          totalRows: z19.literal(rows),
+          rows: z19.array(z19.unknown()).length(rows)
         }).parse(JSON.parse(text));
-      const output = path30.resolve(options.cwd ?? process.cwd(), values.output);
+      const output = path31.resolve(options.cwd ?? process.cwd(), values.output);
       await writeFile9(output, text, { flag: "wx", mode: 384 });
       return {
         exitCode: 0,
@@ -10370,8 +10872,8 @@ async function runSeoCommand(options) {
     }
     const data = await response.json();
     if (!response.ok) {
-      const result = z17.object({
-        error: z17.object({ code: z17.string(), message: z17.string().max(500) })
+      const result = z19.object({
+        error: z19.object({ code: z19.string(), message: z19.string().max(500) })
       }).safeParse(data);
       throw new SiteOSAuthApiError({
         code: result.success ? result.data.error.code : "SEO_REQUEST_FAILED",
@@ -10379,34 +10881,34 @@ async function runSeoCommand(options) {
         status: response.status
       });
     }
-    const record = z17.object({ contractVersion: z17.literal(1) }).passthrough().parse(data);
+    const record = z19.object({ contractVersion: z19.literal(1) }).passthrough().parse(data);
     if (automation) {
-      z17.literal(context.resourceId).parse(record.resourceId);
-      const schedule = z17.object({
-        enabled: z17.boolean(),
-        weekday: z17.number().int().min(1).max(7),
-        time: z17.string(),
-        timeZone: z17.string(),
-        revision: z17.number().int().min(0),
-        nextRunAt: z17.string().nullable()
+      z19.literal(context.resourceId).parse(record.resourceId);
+      const schedule = z19.object({
+        enabled: z19.boolean(),
+        weekday: z19.number().int().min(1).max(7),
+        time: z19.string(),
+        timeZone: z19.string(),
+        revision: z19.number().int().min(0),
+        nextRunAt: z19.string().nullable()
       });
-      const notificationRoute = z17.object({
-        enabled: z17.boolean(),
-        minimumSeverity: z17.enum(["error", "warning"]),
-        includeFailures: z17.boolean(),
-        revision: z17.number().int().min(0),
-        destinationId: z17.string().nullable()
+      const notificationRoute = z19.object({
+        enabled: z19.boolean(),
+        minimumSeverity: z19.enum(["error", "warning"]),
+        includeFailures: z19.boolean(),
+        revision: z19.number().int().min(0),
+        destinationId: z19.string().nullable()
       });
       if (retryNotification) {
-        z17.literal(true).parse(record.retryQueued);
-        z17.literal(positionals[2]).parse(record.notificationId);
+        z19.literal(true).parse(record.retryQueued);
+        z19.literal(positionals[2]).parse(record.notificationId);
       } else if (route === "notifications destinations")
-        z17.object({
-          candidates: z17.array(
-            z17.object({
-              candidateId: z17.string(),
-              label: z17.string(),
-              availability: z17.literal("available")
+        z19.object({
+          candidates: z19.array(
+            z19.object({
+              candidateId: z19.string(),
+              label: z19.string(),
+              availability: z19.literal("available")
             })
           )
         }).parse(record);
@@ -10419,46 +10921,46 @@ async function runSeoCommand(options) {
         notificationRoute.parse(record.route);
       }
     } else if (!writing) {
-      const validated = z17.object({
-        resource: z17.object({
-          id: z17.literal(context.resourceId),
-          organizationId: z17.literal(context.overview.project.organizationId)
+      const validated = z19.object({
+        resource: z19.object({
+          id: z19.literal(context.resourceId),
+          organizationId: z19.literal(context.overview.project.organizationId)
         }),
-        audits: z17.array(z17.object({ id: z17.string() }).passthrough()),
-        audit: z17.object({
-          id: z17.string(),
-          resourceId: z17.literal(context.resourceId)
+        audits: z19.array(z19.object({ id: z19.string() }).passthrough()),
+        audit: z19.object({
+          id: z19.string(),
+          resourceId: z19.literal(context.resourceId)
         }).passthrough().nullable(),
-        pages: z17.array(z17.unknown()),
-        issues: z17.array(z17.unknown()),
-        changes: z17.array(z17.unknown()),
-        totalChanges: z17.number(),
-        dispositions: z17.array(z17.unknown())
+        pages: z19.array(z19.unknown()),
+        issues: z19.array(z19.unknown()),
+        changes: z19.array(z19.unknown()),
+        totalChanges: z19.number(),
+        dispositions: z19.array(z19.unknown())
       }).passthrough().parse(record);
       const selected = query.get("audit");
       if (selected && validated.audit?.id !== selected)
         throw new Error("The SEO response does not match the requested audit.");
     } else if (record.audit)
-      z17.object({
-        id: z17.string(),
-        resourceId: z17.literal(context.resourceId),
-        organizationId: z17.literal(context.overview.project.organizationId),
-        state: z17.literal("queued")
+      z19.object({
+        id: z19.string(),
+        resourceId: z19.literal(context.resourceId),
+        organizationId: z19.literal(context.overview.project.organizationId),
+        state: z19.literal("queued")
       }).parse(record.audit);
-    else if (route === "audit cancel") z17.literal(true).parse(record.cancelled);
+    else if (route === "audit cancel") z19.literal(true).parse(record.cancelled);
     else if (action === "issue")
-      z17.object({
-        url: z17.literal(values.url),
-        ruleId: z17.literal(values.rule),
-        ignored: z17.literal(positionals[1] === "ignore"),
-        revision: z17.literal(Number(values.revision) + 1)
+      z19.object({
+        url: z19.literal(values.url),
+        ruleId: z19.literal(values.rule),
+        ignored: z19.literal(positionals[1] === "ignore"),
+        revision: z19.literal(Number(values.revision) + 1)
       }).parse(record.disposition);
     else throw new Error("The SEO service returned an invalid response.");
     return { exitCode: 0, stdout: JSON.stringify(record, null, 2) };
   } catch (cause) {
     const error = {
       code: cause instanceof SiteOSAuthApiError ? cause.code : "SEO_COMMAND_FAILED",
-      message: cause instanceof z17.ZodError ? "The SEO service returned an invalid response." : cause instanceof Error ? cause.message : "The SEO command failed."
+      message: cause instanceof z19.ZodError ? "The SEO service returned an invalid response." : cause instanceof Error ? cause.message : "The SEO command failed."
     };
     return {
       exitCode: cause instanceof SiteOSAuthApiError ? 1 : 2,
@@ -10500,6 +11002,12 @@ if (!command || command === "--help" || command === "-h") {
 }
 function rootCommandRegistry() {
   return createCommandRegistry({
+    analytics: (args2) => runAnalyticsCommand({
+      args: args2,
+      cwd: process.cwd(),
+      env: process.env,
+      fetchImpl: globalThis.fetch
+    }),
     seo: (args2) => runSeoCommand({
       args: args2,
       cwd: process.cwd(),
@@ -10613,6 +11121,7 @@ Usage:
   siteos project --help
   siteos cookie --help
   siteos trace --help
+  siteos analytics --help
   siteos seo --help
   siteos integrations --help
   siteos pulse --help
@@ -10625,6 +11134,7 @@ Commands:
   project       Select one Project and configure its services and environments.
   cookie        Configure, publish, and inspect the Project\u2019s cookie banner.
   trace         Configure analytics observation and inspect evidence.
+  analytics     Configure website Analytics, events and realtime reports.
   seo           Audit HTML, inspect changes and verify fixes.
   integrations  Manage Organization connections and destinations.
   pulse         Manage monitoring checks, tests, and deployments.