coolhand-cli 0.7.0 → 0.9.0

package/README.md

@@ -22,7 +22,7 @@ Requires Node 20 or newer.
 ## Analyze Claude sessions
 
 ```bash
-coolhand analyze-claude-sessions [--dry-run] [--client-id ID] [--json]
+coolhand analyze-claude-sessions [--dry-run] [--client-id ID] [--json] [filter options]
 ```
 
 Upload your historical Claude Code session transcripts to your Coolhand account for analysis. Coolhand analyzes the uploaded conversations to surface:
@@ -31,7 +31,7 @@ Upload your historical Claude Code session transcripts to your Coolhand account
 - **Efficiency gaps** — workflows with unnecessary back-and-forth or redundant steps
 - **Cost insights** — sessions with high token usage relative to their outcome
 
-> **What gets uploaded**: The conversation transcripts stored in `~/.claude/projects/` — the messages exchanged between you and Claude, including any code or context you shared in those conversations. Use `--dry-run` to preview exactly what would be sent before submitting anything.
+> **What gets uploaded**: The conversation transcripts stored in `~/.claude/projects/` — the messages exchanged between you and Claude, including any code or context you shared in those conversations. Use `--dry-run` to preview exactly what would be sent before submitting anything. You control the scope: `--since`/`--until` bound the time period, and `--project`/`--exclude-project`/`--projects-dir` choose which folders are uploaded from — excluded sessions are never even read from disk.
 
 See [Session capture](./docs/session-capture.md) for capture logic, duplicate-avoidance details, and the full flag reference.
 
@@ -52,6 +52,23 @@ Set `COOLHAND_AGENT_NAME` to avoid passing `--agent-name` on every call. Optiona
 
 See [Your AI agent has notes](https://michael.carroll.io/talks/2026/your-ai-agent-has-notes) for a presentation on the research & best practices for using this pattern.
 
+## Optimizations
+
+Coolhand surfaces optimizations found for your production agents — a way to search, inspect, and act on suggested improvements without leaving the terminal:
+
+```bash
+# Find open, high-impact optimizations
+coolhand search-optimizations --status proposed --sort-by impact_desc
+
+# Inspect one in full (human-readable by default; add --json for scripting)
+coolhand get-optimization opt-123
+
+# Apply the fix, then close it out with a reason
+coolhand close-optimization opt-123 "Added the suggested index; verified query latency dropped from 800ms to 120ms in staging."
+```
+
+`get-optimization` prints a scannable summary by default — title, status, impact/complexity, analysis, and plan — not a raw JSON dump. Internal agent transcript data (`orchestrator_messages`) is only included with `--full`. See [docs/commands.md](./docs/commands.md) for the full flag reference, including `update-optimization` for editing an optimization's fields in place.
+
 ## Commands
 
 | Command | Description |
@@ -70,6 +87,10 @@ See [Your AI agent has notes](https://michael.carroll.io/talks/2026/your-ai-agen
 | `coolhand get-optimization` | Fetch a single optimization by ID |
 | `coolhand update-optimization` | Update an optimization's fields |
 | `coolhand close-optimization` | Close an optimization with a reason |
+| `coolhand search-feedback` | Search and filter feedback records |
+| `coolhand get-feedback` | Fetch a single feedback record by ID |
+| `coolhand fetch-log` | Fetch the input/output content of a single LLM request log |
+| `coolhand search-logs` | Search LLM request logs with flexible filters |
 | `coolhand analyze-claude-sessions` | Submit Claude sessions for pattern and cost analysis |
 | `coolhand wildcard` | Record an agent blocker and exit cleanly |
 

package/dist/api/feedback-client.d.ts

@@ -0,0 +1,17 @@
+import { Coolhand } from 'coolhand-node';
+import { CliError } from '../errors.js';
+/**
+ * Resolves the CLI's stored client and returns a `Coolhand` instance authenticated with its
+ * *private* key. `searchFeedback`/`getFeedback` (coolhand-node#89) require the private key — the
+ * public key used by `wildcard`/`createFeedback` will 401 here.
+ */
+export declare function getFeedbackClient(opts?: {
+    clientId?: string;
+}): Promise<Coolhand>;
+/**
+ * Maps an error thrown by `Coolhand#searchFeedback`/`getFeedback` to a `CliError` with a clear,
+ * actionable message — a 401 means the stored private key was rejected (mirrors `mcp-call.ts`'s
+ * hint), a 404 uses the caller-supplied message (e.g. "Feedback \"x\" not found").
+ */
+export declare function mapFeedbackHttpError(err: unknown, notFoundMessage: string): CliError;
+//# sourceMappingURL=feedback-client.d.ts.map

package/dist/api/feedback-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"feedback-client.d.ts","sourceRoot":"","sources":["../../src/api/feedback-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAa,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAGxC;;;;GAIG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAoB3F;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,GAAG,QAAQ,CAcpF"}

package/dist/api/feedback-client.js

@@ -0,0 +1,40 @@
+import { Coolhand, HttpError } from 'coolhand-node';
+import { CliError } from '../errors.js';
+import { loadConfig, resolveClient } from '../config.js';
+/**
+ * Resolves the CLI's stored client and returns a `Coolhand` instance authenticated with its
+ * *private* key. `searchFeedback`/`getFeedback` (coolhand-node#89) require the private key — the
+ * public key used by `wildcard`/`createFeedback` will 401 here.
+ */
+export async function getFeedbackClient(opts = {}) {
+    const cfg = await loadConfig();
+    const client = await resolveClient(cfg, opts.clientId);
+    if (!client.private_key) {
+        throw new CliError('NO_PRIVATE_KEY', "No private key configured. Run 'coolhand login --scope private' first.");
+    }
+    try {
+        // Coolhand validates baseUrl in its constructor (https required; http only for localhost).
+        return new Coolhand({ apiKey: client.private_key, baseUrl: client.base_url, silent: true });
+    }
+    catch (err) {
+        throw new CliError('INVALID_BASE_URL', `Invalid base_url for client: ${client.base_url} (${err.message})`);
+    }
+}
+/**
+ * Maps an error thrown by `Coolhand#searchFeedback`/`getFeedback` to a `CliError` with a clear,
+ * actionable message — a 401 means the stored private key was rejected (mirrors `mcp-call.ts`'s
+ * hint), a 404 uses the caller-supplied message (e.g. "Feedback \"x\" not found").
+ */
+export function mapFeedbackHttpError(err, notFoundMessage) {
+    if (err instanceof HttpError) {
+        if (err.status === 401) {
+            return new CliError('FEEDBACK_ERROR', "The stored private key was rejected. Run 'coolhand login --scope private' to re-authenticate.");
+        }
+        if (err.status === 404) {
+            return new CliError('FEEDBACK_ERROR', notFoundMessage);
+        }
+        return new CliError('FEEDBACK_ERROR', `Feedback request failed (${err.status}): ${err.message}`);
+    }
+    return new CliError('FEEDBACK_ERROR', `Feedback request failed: ${err.message}`);
+}
+//# sourceMappingURL=feedback-client.js.map

package/dist/api/feedback-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feedback-client.js","sourceRoot":"","sources":["../../src/api/feedback-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAEzD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAA8B,EAAE;IACtE,MAAM,GAAG,GAAG,MAAM,UAAU,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAEvD,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACxB,MAAM,IAAI,QAAQ,CAChB,gBAAgB,EAChB,wEAAwE,CACzE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,2FAA2F;QAC3F,OAAO,IAAI,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,QAAQ,CAChB,kBAAkB,EAClB,gCAAgC,MAAM,CAAC,QAAQ,KAAM,GAAa,CAAC,OAAO,GAAG,CAC9E,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAY,EAAE,eAAuB;IACxE,IAAI,GAAG,YAAY,SAAS,EAAE,CAAC;QAC7B,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,OAAO,IAAI,QAAQ,CACjB,gBAAgB,EAChB,+FAA+F,CAChG,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,OAAO,IAAI,QAAQ,CAAC,gBAAgB,EAAE,eAAe,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,IAAI,QAAQ,CAAC,gBAAgB,EAAE,4BAA4B,GAAG,CAAC,MAAM,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IACnG,CAAC;IACD,OAAO,IAAI,QAAQ,CAAC,gBAAgB,EAAE,4BAA6B,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;AAC9F,CAAC"}

package/dist/api/last-sync.d.ts

@@ -1,14 +1,16 @@
 /**
- * Ask the server for the timestamp of the most recent log it already holds from this collector, so
+ * Ask the server for the timestamp of the most recent Claude Code log it already holds, so
  * `capture-sessions` only re-scans files newer than that. This is a server-authoritative cutoff that
  * survives local state-file loss or a reinstall.
  *
- * It NEVER throws: any problem (no api key, bad base url, 404, network failure, non-JSON body, or a
- * missing/invalid `last_created_at`) returns `null` so the caller can fall back to local state. The
- * companion server endpoint may not exist yet; a 404 is therefore an expected, non-fatal outcome.
+ * Queries the `/api/v2/llm_request_logs` index for the single newest `claude_code` row. The server
+ * has no default sort, so newest-first is requested explicitly via `q[s]`. Index reads require the
+ * client's PRIVATE key (`private_key`, or the `COOLHAND_PRIVATE_KEY` env var); the public ingest
+ * key is write-only and the server answers it with a 401.
  *
- * Auth mirrors the ingest path (`log-request.ts`): the public `api_key` sent as `X-API-Key`, since
- * the endpoint lives on the same `/api/v2/llm_request_logs` path.
+ * It NEVER throws: any problem (no private key, bad base url, 401, network failure, non-JSON body,
+ * an empty result set, or an invalid `created_at`) returns `null` so the caller can fall back to
+ * local state.
  *
  * `opts.clientId` is expected to be an **already-resolved** `client_id` string (e.g. from
  * `resolveClient`), not a raw user input. `getClient` is used here deliberately: by the time this

package/dist/api/last-sync.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"last-sync.d.ts","sourceRoot":"","sources":["../../src/api/last-sync.ts"],"names":[],"mappings":"AAOA;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,aAAa,CAAC,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAuD1F"}
+{"version":3,"file":"last-sync.d.ts","sourceRoot":"","sources":["../../src/api/last-sync.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,aAAa,CAAC,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAmE1F"}

package/dist/api/last-sync.js

@@ -1,19 +1,18 @@
 import { loadConfig, getClient } from '../config.js';
 import { DEFAULT_BASE_URL } from '../types.js';
-import { PACKAGE_IDENTIFIER } from '../version.js';
-/** Identifies this tool's logs in the server's collector field (matches the ingest collector). */
-const COLLECTOR = `${PACKAGE_IDENTIFIER}/claude-code`;
 /**
- * Ask the server for the timestamp of the most recent log it already holds from this collector, so
+ * Ask the server for the timestamp of the most recent Claude Code log it already holds, so
  * `capture-sessions` only re-scans files newer than that. This is a server-authoritative cutoff that
  * survives local state-file loss or a reinstall.
  *
- * It NEVER throws: any problem (no api key, bad base url, 404, network failure, non-JSON body, or a
- * missing/invalid `last_created_at`) returns `null` so the caller can fall back to local state. The
- * companion server endpoint may not exist yet; a 404 is therefore an expected, non-fatal outcome.
+ * Queries the `/api/v2/llm_request_logs` index for the single newest `claude_code` row. The server
+ * has no default sort, so newest-first is requested explicitly via `q[s]`. Index reads require the
+ * client's PRIVATE key (`private_key`, or the `COOLHAND_PRIVATE_KEY` env var); the public ingest
+ * key is write-only and the server answers it with a 401.
  *
- * Auth mirrors the ingest path (`log-request.ts`): the public `api_key` sent as `X-API-Key`, since
- * the endpoint lives on the same `/api/v2/llm_request_logs` path.
+ * It NEVER throws: any problem (no private key, bad base url, 401, network failure, non-JSON body,
+ * an empty result set, or an invalid `created_at`) returns `null` so the caller can fall back to
+ * local state.
  *
  * `opts.clientId` is expected to be an **already-resolved** `client_id` string (e.g. from
  * `resolveClient`), not a raw user input. `getClient` is used here deliberately: by the time this
@@ -26,7 +25,7 @@ export async function fetchLastSync(opts = {}) {
     try {
         const cfg = await loadConfig();
         const client = getClient(cfg, opts.clientId);
-        apiKey = client?.api_key ?? process.env.COOLHAND_API_KEY;
+        apiKey = client?.private_key ?? process.env.COOLHAND_PRIVATE_KEY;
         baseUrl = client?.base_url ?? DEFAULT_BASE_URL;
     }
     catch {
@@ -41,8 +40,10 @@ export async function fetchLastSync(opts = {}) {
         if (parsedBaseUrl.protocol !== 'http:' && parsedBaseUrl.protocol !== 'https:') {
             return null;
         }
-        const endpoint = new URL('/api/v2/llm_request_logs/last_sync', parsedBaseUrl);
-        endpoint.searchParams.set('collector', COLLECTOR);
+        const endpoint = new URL('/api/v2/llm_request_logs', parsedBaseUrl);
+        endpoint.searchParams.set('q[source_api_in][]', 'claude_code');
+        endpoint.searchParams.set('q[s]', 'created_at desc');
+        endpoint.searchParams.set('per', '1');
         url = endpoint.toString();
     }
     catch {
@@ -60,20 +61,30 @@ export async function fetchLastSync(opts = {}) {
         return null;
     }
     if (!res.ok) {
-        // 404 (endpoint not built yet) or any other non-2xx — degrade to local state.
+        // 401 (key lacks read access) or any other non-2xx — degrade to local state.
         return null;
     }
     let body;
     try {
-        body = (await res.json());
+        body = await res.json();
     }
     catch {
         return null;
     }
-    if (typeof body.last_created_at !== 'string') {
+    // The index returns a bare JSON array; an empty one means the server holds no
+    // claude_code logs for this client yet.
+    if (!Array.isArray(body) || body.length === 0) {
         return null;
     }
-    const date = new Date(body.last_created_at);
+    const newest = body[0];
+    if (newest === null || typeof newest !== 'object') {
+        return null;
+    }
+    const createdAt = newest.created_at;
+    if (typeof createdAt !== 'string') {
+        return null;
+    }
+    const date = new Date(createdAt);
     return Number.isNaN(date.getTime()) ? null : date;
 }
 //# sourceMappingURL=last-sync.js.map

package/dist/api/last-sync.js.map

@@ -1 +1 @@
-{"version":3,"file":"last-sync.js","sourceRoot":"","sources":["../../src/api/last-sync.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAEnD,kGAAkG;AAClG,MAAM,SAAS,GAAG,GAAG,kBAAkB,cAAc,CAAC;AAEtD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAA8B,EAAE;IAClE,IAAI,MAA0B,CAAC;IAC/B,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,UAAU,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7C,MAAM,GAAG,MAAM,EAAE,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;QACzD,OAAO,GAAG,MAAM,EAAE,QAAQ,IAAI,gBAAgB,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,aAAa,CAAC,QAAQ,KAAK,OAAO,IAAI,aAAa,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC9E,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,oCAAoC,EAAE,aAAa,CAAC,CAAC;QAC9E,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QAClD,GAAG,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YACrB,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,EAAE;SAC7D,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,4CAA4C;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,8EAA8E;QAC9E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,IAAyC,CAAC;IAC9C,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAwC,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,OAAO,IAAI,CAAC,eAAe,KAAK,QAAQ,EAAE,CAAC;QAC7C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC5C,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACpD,CAAC"}
+{"version":3,"file":"last-sync.js","sourceRoot":"","sources":["../../src/api/last-sync.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/C;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAA8B,EAAE;IAClE,IAAI,MAA0B,CAAC;IAC/B,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,UAAU,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7C,MAAM,GAAG,MAAM,EAAE,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;QACjE,OAAO,GAAG,MAAM,EAAE,QAAQ,IAAI,gBAAgB,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,aAAa,CAAC,QAAQ,KAAK,OAAO,IAAI,aAAa,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC9E,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,0BAA0B,EAAE,aAAa,CAAC,CAAC;QACpE,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,oBAAoB,EAAE,aAAa,CAAC,CAAC;QAC/D,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;QACrD,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACtC,GAAG,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YACrB,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,EAAE;SAC7D,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,4CAA4C;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,6EAA6E;QAC7E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,8EAA8E;IAC9E,wCAAwC;IACxC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACvB,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,SAAS,GAAI,MAAmC,CAAC,UAAU,CAAC;IAClE,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC;IACjC,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACpD,CAAC"}

package/dist/api/log-client.d.ts

@@ -0,0 +1,17 @@
+import { Coolhand } from 'coolhand-node';
+import { CliError } from '../errors.js';
+/**
+ * Resolves the CLI's stored client and returns a `Coolhand` instance authenticated with its
+ * *private* key. `getLogContent`/`searchLogs` require the private key — the public key used by
+ * `monitor`/`logRequest` will 401 here.
+ */
+export declare function getLogClient(opts?: {
+    clientId?: string;
+}): Promise<Coolhand>;
+/**
+ * Maps an error thrown by `Coolhand#getLogContent`/`searchLogs` to a `CliError` with a clear,
+ * actionable message — a 401 means the stored private key was rejected (mirrors `feedback-client.ts`'s
+ * hint), a 404 uses the caller-supplied message (e.g. `Log "x" not found`).
+ */
+export declare function mapLogHttpError(err: unknown, notFoundMessage: string): CliError;
+//# sourceMappingURL=log-client.d.ts.map

package/dist/api/log-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"log-client.d.ts","sourceRoot":"","sources":["../../src/api/log-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAa,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAGxC;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAoBtF;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,GAAG,QAAQ,CAc/E"}

package/dist/api/log-client.js

@@ -0,0 +1,40 @@
+import { Coolhand, HttpError } from 'coolhand-node';
+import { CliError } from '../errors.js';
+import { loadConfig, resolveClient } from '../config.js';
+/**
+ * Resolves the CLI's stored client and returns a `Coolhand` instance authenticated with its
+ * *private* key. `getLogContent`/`searchLogs` require the private key — the public key used by
+ * `monitor`/`logRequest` will 401 here.
+ */
+export async function getLogClient(opts = {}) {
+    const cfg = await loadConfig();
+    const client = await resolveClient(cfg, opts.clientId);
+    if (!client.private_key) {
+        throw new CliError('NO_PRIVATE_KEY', "No private key configured. Run 'coolhand login --scope private' first.");
+    }
+    try {
+        // Coolhand validates baseUrl in its constructor (https required; http only for localhost).
+        return new Coolhand({ apiKey: client.private_key, baseUrl: client.base_url, silent: true });
+    }
+    catch (err) {
+        throw new CliError('INVALID_BASE_URL', `Invalid base_url for client: ${client.base_url} (${err.message})`);
+    }
+}
+/**
+ * Maps an error thrown by `Coolhand#getLogContent`/`searchLogs` to a `CliError` with a clear,
+ * actionable message — a 401 means the stored private key was rejected (mirrors `feedback-client.ts`'s
+ * hint), a 404 uses the caller-supplied message (e.g. `Log "x" not found`).
+ */
+export function mapLogHttpError(err, notFoundMessage) {
+    if (err instanceof HttpError) {
+        if (err.status === 401) {
+            return new CliError('LOG_ERROR', "The stored private key was rejected. Run 'coolhand login --scope private' to re-authenticate.");
+        }
+        if (err.status === 404) {
+            return new CliError('LOG_ERROR', notFoundMessage);
+        }
+        return new CliError('LOG_ERROR', `Log request failed (${err.status}): ${err.message}`);
+    }
+    return new CliError('LOG_ERROR', `Log request failed: ${err.message}`);
+}
+//# sourceMappingURL=log-client.js.map

package/dist/api/log-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"log-client.js","sourceRoot":"","sources":["../../src/api/log-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAEzD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAA8B,EAAE;IACjE,MAAM,GAAG,GAAG,MAAM,UAAU,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAEvD,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACxB,MAAM,IAAI,QAAQ,CAChB,gBAAgB,EAChB,wEAAwE,CACzE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,2FAA2F;QAC3F,OAAO,IAAI,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,QAAQ,CAChB,kBAAkB,EAClB,gCAAgC,MAAM,CAAC,QAAQ,KAAM,GAAa,CAAC,OAAO,GAAG,CAC9E,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,GAAY,EAAE,eAAuB;IACnE,IAAI,GAAG,YAAY,SAAS,EAAE,CAAC;QAC7B,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,OAAO,IAAI,QAAQ,CACjB,WAAW,EACX,+FAA+F,CAChG,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,OAAO,IAAI,QAAQ,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,IAAI,QAAQ,CAAC,WAAW,EAAE,uBAAuB,GAAG,CAAC,MAAM,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,IAAI,QAAQ,CAAC,WAAW,EAAE,uBAAwB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;AACpF,CAAC"}

package/dist/cli.d.ts

@@ -1,7 +1,7 @@
 interface ParsedArgs {
     command: string;
     positional: string[];
-    flags: Record<string, string | boolean>;
+    flags: Record<string, string | boolean | string[]>;
 }
 /**
  * Strips a leading `--client-id VALUE` or `--client-id=VALUE` from argv,

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAuCA,UAAU,UAAU;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC;CACzC;AA4OD;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG;IAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAgE7F;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,CAqCpD;AA+VD,wBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAkIzD"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AA+CA,UAAU,UAAU;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,EAAE,CAAC,CAAC;CACpD;AAuTD;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG;IAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAgE7F;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,CAiDpD;AAokBD,wBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CA0IzD"}