coolhand-cli 0.8.0 → 0.10.0

package/README.md

@@ -37,7 +37,7 @@ See [Session capture](./docs/session-capture.md) for capture logic, duplicate-av
 
 ## Wildcard (agent complaint box)
 
-When an agent is blocked because a capability does not exist in its environment, it can record the blocker and get back an unambiguous "stop and move on" response:
+When an agent is blocked — because a capability does not exist in its environment, or because a task would take too long to complete — it can record the blocker and get back an unambiguous "stop and move on" response:
 
 ```bash
 coolhand wildcard \
@@ -46,7 +46,7 @@ coolhand wildcard \
   --thinking "I attempted to connect to localhost:5432 but got connection refused. I checked for a running postgres process and found none. Without a live database I cannot apply or validate the migration."
 ```
 
-The command records the complaint as feedback tagged `creator_type: agent`, prints a terminal de-loop message, and exits `0` so the agent stops and moves on. The de-loop always fires — even if the feedback could not be recorded (not logged in or a server error) — because the missing capability is real regardless of whether the server was reachable, and a logged-out agent in a sandbox is exactly who this command is for. When recording fails the message says so plainly and a warning is logged, so the failure still surfaces without trapping the agent in the retry loop the command exists to break. When no API key is available, the feedback is saved locally to `~/.coolhand/pending/` and will be uploaded automatically the next time you run `coolhand login`.
+The command records the complaint as feedback tagged `creator_type: agent`, prints a terminal de-loop message, and exits `0` so the agent stops and moves on. The de-loop always fires — even if the feedback could not be recorded (not logged in or a server error) — because the blocker (a missing capability, or a task that would take too long) is real regardless of whether the server was reachable, and a logged-out agent in a sandbox is exactly who this command is for. When recording fails the message says so plainly and a warning is logged, so the failure still surfaces without trapping the agent in the retry loop the command exists to break. When no API key is available, the feedback is saved locally to `~/.coolhand/pending/` and will be uploaded automatically the next time you run `coolhand login`.
 
 Set `COOLHAND_AGENT_NAME` to avoid passing `--agent-name` on every call. Optional `--thinking` attaches the reasoning that led to the blocker; `--log-id` ties it to a specific LLM request log.
 
@@ -89,7 +89,11 @@ coolhand close-optimization opt-123 "Added the suggested index; verified query l
 | `coolhand close-optimization` | Close an optimization with a reason |
 | `coolhand search-feedback` | Search and filter feedback records |
 | `coolhand get-feedback` | Fetch a single feedback record by ID |
+| `coolhand fetch-log` | Fetch the input/output content of a single LLM request log |
+| `coolhand search-logs` | Search LLM request logs with flexible filters |
 | `coolhand analyze-claude-sessions` | Submit Claude sessions for pattern and cost analysis |
+| `coolhand map-claude-projects` | Upload a file-tree map (names + metadata only) of every folder named "claude" |
+| `coolhand upload-client-file` | Upload a local file to Coolhand as a client file |
 | `coolhand wildcard` | Record an agent blocker and exit cleanly |
 
 See [docs/commands.md](./docs/commands.md) for full flag reference and usage notes.

package/dist/api/last-sync.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"last-sync.d.ts","sourceRoot":"","sources":["../../src/api/last-sync.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,aAAa,CAAC,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAmE1F"}
+{"version":3,"file":"last-sync.d.ts","sourceRoot":"","sources":["../../src/api/last-sync.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,aAAa,CAAC,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAmE1F"}

package/dist/api/last-sync.js

@@ -1,4 +1,5 @@
 import { loadConfig, getClient } from '../config.js';
+import { isAllowedBaseUrlScheme } from '../base-url.js';
 import { DEFAULT_BASE_URL } from '../types.js';
 /**
  * Ask the server for the timestamp of the most recent Claude Code log it already holds, so
@@ -37,7 +38,7 @@ export async function fetchLastSync(opts = {}) {
     let url;
     try {
         const parsedBaseUrl = new URL(baseUrl);
-        if (parsedBaseUrl.protocol !== 'http:' && parsedBaseUrl.protocol !== 'https:') {
+        if (!isAllowedBaseUrlScheme(parsedBaseUrl)) {
             return null;
         }
         const endpoint = new URL('/api/v2/llm_request_logs', parsedBaseUrl);

package/dist/api/last-sync.js.map

@@ -1 +1 @@
-{"version":3,"file":"last-sync.js","sourceRoot":"","sources":["../../src/api/last-sync.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/C;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAA8B,EAAE;IAClE,IAAI,MAA0B,CAAC;IAC/B,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,UAAU,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7C,MAAM,GAAG,MAAM,EAAE,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;QACjE,OAAO,GAAG,MAAM,EAAE,QAAQ,IAAI,gBAAgB,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,aAAa,CAAC,QAAQ,KAAK,OAAO,IAAI,aAAa,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC9E,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,0BAA0B,EAAE,aAAa,CAAC,CAAC;QACpE,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,oBAAoB,EAAE,aAAa,CAAC,CAAC;QAC/D,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;QACrD,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACtC,GAAG,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YACrB,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,EAAE;SAC7D,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,4CAA4C;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,6EAA6E;QAC7E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,8EAA8E;IAC9E,wCAAwC;IACxC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACvB,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,SAAS,GAAI,MAAmC,CAAC,UAAU,CAAC;IAClE,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC;IACjC,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACpD,CAAC"}
+{"version":3,"file":"last-sync.js","sourceRoot":"","sources":["../../src/api/last-sync.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/C;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAA8B,EAAE;IAClE,IAAI,MAA0B,CAAC;IAC/B,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,UAAU,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7C,MAAM,GAAG,MAAM,EAAE,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;QACjE,OAAO,GAAG,MAAM,EAAE,QAAQ,IAAI,gBAAgB,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,CAAC,sBAAsB,CAAC,aAAa,CAAC,EAAE,CAAC;YAC3C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,0BAA0B,EAAE,aAAa,CAAC,CAAC;QACpE,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,oBAAoB,EAAE,aAAa,CAAC,CAAC;QAC/D,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;QACrD,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACtC,GAAG,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YACrB,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,EAAE;SAC7D,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,4CAA4C;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,6EAA6E;QAC7E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,8EAA8E;IAC9E,wCAAwC;IACxC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACvB,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,SAAS,GAAI,MAAmC,CAAC,UAAU,CAAC;IAClE,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC;IACjC,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACpD,CAAC"}

package/dist/api/log-client.d.ts

@@ -0,0 +1,17 @@
+import { Coolhand } from 'coolhand-node';
+import { CliError } from '../errors.js';
+/**
+ * Resolves the CLI's stored client and returns a `Coolhand` instance authenticated with its
+ * *private* key. `getLogContent`/`searchLogs` require the private key — the public key used by
+ * `monitor`/`logRequest` will 401 here.
+ */
+export declare function getLogClient(opts?: {
+    clientId?: string;
+}): Promise<Coolhand>;
+/**
+ * Maps an error thrown by `Coolhand#getLogContent`/`searchLogs` to a `CliError` with a clear,
+ * actionable message — a 401 means the stored private key was rejected (mirrors `feedback-client.ts`'s
+ * hint), a 404 uses the caller-supplied message (e.g. `Log "x" not found`).
+ */
+export declare function mapLogHttpError(err: unknown, notFoundMessage: string): CliError;
+//# sourceMappingURL=log-client.d.ts.map

package/dist/api/log-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"log-client.d.ts","sourceRoot":"","sources":["../../src/api/log-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAa,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAGxC;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAoBtF;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,GAAG,QAAQ,CAc/E"}

package/dist/api/log-client.js

@@ -0,0 +1,40 @@
+import { Coolhand, HttpError } from 'coolhand-node';
+import { CliError } from '../errors.js';
+import { loadConfig, resolveClient } from '../config.js';
+/**
+ * Resolves the CLI's stored client and returns a `Coolhand` instance authenticated with its
+ * *private* key. `getLogContent`/`searchLogs` require the private key — the public key used by
+ * `monitor`/`logRequest` will 401 here.
+ */
+export async function getLogClient(opts = {}) {
+    const cfg = await loadConfig();
+    const client = await resolveClient(cfg, opts.clientId);
+    if (!client.private_key) {
+        throw new CliError('NO_PRIVATE_KEY', "No private key configured. Run 'coolhand login --scope private' first.");
+    }
+    try {
+        // Coolhand validates baseUrl in its constructor (https required; http only for localhost).
+        return new Coolhand({ apiKey: client.private_key, baseUrl: client.base_url, silent: true });
+    }
+    catch (err) {
+        throw new CliError('INVALID_BASE_URL', `Invalid base_url for client: ${client.base_url} (${err.message})`);
+    }
+}
+/**
+ * Maps an error thrown by `Coolhand#getLogContent`/`searchLogs` to a `CliError` with a clear,
+ * actionable message — a 401 means the stored private key was rejected (mirrors `feedback-client.ts`'s
+ * hint), a 404 uses the caller-supplied message (e.g. `Log "x" not found`).
+ */
+export function mapLogHttpError(err, notFoundMessage) {
+    if (err instanceof HttpError) {
+        if (err.status === 401) {
+            return new CliError('LOG_ERROR', "The stored private key was rejected. Run 'coolhand login --scope private' to re-authenticate.");
+        }
+        if (err.status === 404) {
+            return new CliError('LOG_ERROR', notFoundMessage);
+        }
+        return new CliError('LOG_ERROR', `Log request failed (${err.status}): ${err.message}`);
+    }
+    return new CliError('LOG_ERROR', `Log request failed: ${err.message}`);
+}
+//# sourceMappingURL=log-client.js.map

package/dist/api/log-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"log-client.js","sourceRoot":"","sources":["../../src/api/log-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAEzD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAA8B,EAAE;IACjE,MAAM,GAAG,GAAG,MAAM,UAAU,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAEvD,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACxB,MAAM,IAAI,QAAQ,CAChB,gBAAgB,EAChB,wEAAwE,CACzE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,2FAA2F;QAC3F,OAAO,IAAI,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,QAAQ,CAChB,kBAAkB,EAClB,gCAAgC,MAAM,CAAC,QAAQ,KAAM,GAAa,CAAC,OAAO,GAAG,CAC9E,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,GAAY,EAAE,eAAuB;IACnE,IAAI,GAAG,YAAY,SAAS,EAAE,CAAC;QAC7B,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,OAAO,IAAI,QAAQ,CACjB,WAAW,EACX,+FAA+F,CAChG,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,OAAO,IAAI,QAAQ,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,IAAI,QAAQ,CAAC,WAAW,EAAE,uBAAuB,GAAG,CAAC,MAAM,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,IAAI,QAAQ,CAAC,WAAW,EAAE,uBAAwB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;AACpF,CAAC"}

package/dist/base-url.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Mirrors the scheme rule coolhand-node's `BaseService` enforces on `baseUrl`:
+ * https:// is always allowed; http:// only for localhost/127.0.0.1/[::1].
+ */
+export declare function isLoopbackHostname(hostname: string): boolean;
+export declare function isAllowedBaseUrlScheme(url: URL): boolean;
+//# sourceMappingURL=base-url.d.ts.map

package/dist/base-url.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base-url.d.ts","sourceRoot":"","sources":["../src/base-url.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAE5D;AAED,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAKxD"}

package/dist/base-url.js

@@ -0,0 +1,14 @@
+/**
+ * Mirrors the scheme rule coolhand-node's `BaseService` enforces on `baseUrl`:
+ * https:// is always allowed; http:// only for localhost/127.0.0.1/[::1].
+ */
+export function isLoopbackHostname(hostname) {
+    return hostname === 'localhost' || hostname === '127.0.0.1' || hostname === '[::1]';
+}
+export function isAllowedBaseUrlScheme(url) {
+    if (url.protocol === 'https:') {
+        return true;
+    }
+    return url.protocol === 'http:' && isLoopbackHostname(url.hostname);
+}
+//# sourceMappingURL=base-url.js.map

package/dist/base-url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base-url.js","sourceRoot":"","sources":["../src/base-url.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAgB;IACjD,OAAO,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,OAAO,CAAC;AACtF,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,GAAQ;IAC7C,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AACtE,CAAC"}

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AA2CA,UAAU,UAAU;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,EAAE,CAAC,CAAC;CACpD;AAkRD;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG;IAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAgE7F;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,CAiDpD;AAkdD,wBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAsIzD"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAmDA,UAAU,UAAU;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,EAAE,CAAC,CAAC;CACpD;AAmVD;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG;IAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAgE7F;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,CAiDpD;AAwnBD,wBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CA8IzD"}

package/dist/cli.js

@@ -14,15 +14,19 @@ import { run as runWildcard } from './commands/wildcard.js';
 import { run as runClaude } from './commands/claude.js';
 import { run as runMonitor } from './commands/monitor.js';
 import { run as runAnalyzeClaudeSessions } from './commands/analyze-claude-sessions.js';
+import { run as runMapClaudeProjects } from './commands/map-claude-projects.js';
+import { run as runUploadClientFile } from './commands/upload-client-file.js';
 import { run as runListWorkloads } from './commands/list-workloads.js';
 import { run as runGetWorkload } from './commands/get-workload.js';
 import { run as runUpdateWorkload } from './commands/update-workload.js';
+import { run as runFetchLog } from './commands/fetch-log.js';
+import { run as runSearchLogs } from './commands/search-logs.js';
 import { run as runFlushPending, spawnBackgroundFlush } from './commands/flush-pending.js';
 import { run as runSearchFeedback } from './commands/search-feedback.js';
 import { run as runGetFeedback } from './commands/get-feedback.js';
 import { countPending, flushFailed } from './pending-store.js';
 import { confirm } from './prompt.js';
-const BOOLEAN_FLAGS = new Set(['all', 'help', 'h', 'json', 'version', 'v', 'dry-run', 'include-archived', 'include-system', 'include-templates', 'full', 'matched', 'unmatched']);
+const BOOLEAN_FLAGS = new Set(['all', 'help', 'h', 'json', 'version', 'v', 'dry-run', 'include-archived', 'include-system', 'include-templates', 'full', 'matched', 'unmatched', 'include-thinking', 'unmatched-only', 'include-prompts']);
 /** Flags whose repeated occurrences accumulate into an array instead of overwriting. */
 const REPEATABLE_FLAGS = new Set(['project', 'exclude-project']);
 const COMMANDS = [
@@ -35,6 +39,7 @@ const COMMANDS = [
             { flag: '--scope private', description: 'Request a private key alongside the public key' },
             { flag: '--write-env PATH', description: 'Idempotently set COOLHAND_API_KEY (and COOLHAND_PRIVATE_KEY if --scope private) in PATH' },
             { flag: '--client-id ID', description: 'Hint to the server about which client to select' },
+            { flag: '--timeout-ms MS', description: 'How long to wait for the browser callback (default: 300000, i.e. 5 minutes)' },
             { flag: '--json', description: 'Emit JSON output instead of human-readable text' },
         ],
     },
@@ -45,6 +50,7 @@ const COMMANDS = [
         options: [
             { flag: '--client-id ID', description: 'Remove a specific client' },
             { flag: '--all', description: 'Remove every stored client' },
+            { flag: '--json', description: 'Emit JSON output instead of human-readable text' },
         ],
     },
     {
@@ -127,10 +133,13 @@ const COMMANDS = [
     {
         name: 'wildcard',
         aliases: ['complaint-box', 'report-blocker'],
-        oneLiner: 'Agent complaint box: report an unavailable capability and stop',
+        oneLiner: 'Agent complaint box: report a missing capability or a task that would take too long, and stop',
         usage: 'coolhand wildcard --complaint "<what is blocking you>" --agent-name <name> [options]',
         options: [
-            { flag: '--complaint TEXT', description: 'What capability is missing or blocking you (required)' },
+            {
+                flag: '--complaint TEXT',
+                description: 'What capability is missing, or why the task would take too long (required)',
+            },
             { flag: '--agent-name NAME', description: 'Identifier for the calling agent (or set COOLHAND_AGENT_NAME)' },
             { flag: '--thinking TEXT', description: 'Optional reasoning/context that led to the blocker' },
             { flag: '--log-id N', description: 'Optional LLM request log id this blocker relates to' },
@@ -182,6 +191,31 @@ const COMMANDS = [
             { flag: '--exclude-project NAME', description: 'Skip sessions from matching project folders (repeatable, comma-separable)' },
         ],
     },
+    {
+        name: 'map-claude-projects',
+        oneLiner: 'Upload a file-tree map (names + metadata, no file contents) of every folder named "claude" found under the home directory',
+        usage: 'coolhand map-claude-projects [options]',
+        options: [
+            { flag: '--root PATH', description: 'Search PATH instead of the home directory' },
+            { flag: '--output PATH', description: 'Also write the generated markdown report to PATH, for local inspection' },
+            { flag: '--dry-run', description: 'Build the map and report its size without uploading' },
+            { flag: '--client-id ID', description: 'Use a specific stored client' },
+            { flag: '--json', description: 'Emit JSON output instead of human-readable text' },
+        ],
+    },
+    {
+        name: 'upload-client-file',
+        oneLiner: 'Upload a local file to Coolhand as a client file',
+        usage: 'coolhand upload-client-file <file-path> [options]',
+        options: [
+            { flag: '--name NAME', description: 'Display name for the client file (defaults to the filename)' },
+            { flag: '--file-type TYPE', description: 'One of: slide_deck, report, document (defaults to document)' },
+            { flag: '--description TEXT', description: 'Optional description' },
+            { flag: '--dry-run', description: 'Validate and size the file without uploading' },
+            { flag: '--client-id ID', description: 'Use a specific stored client' },
+            { flag: '--json', description: 'Emit JSON output instead of human-readable text' },
+        ],
+    },
     {
         name: 'claude',
         oneLiner: 'Run the Claude CLI through the Coolhand proxy (captures LLM calls)',
@@ -237,6 +271,41 @@ const COMMANDS = [
             { flag: '--json', description: 'Emit JSON output instead of human-readable text' },
         ],
     },
+    {
+        name: 'fetch-log',
+        oneLiner: 'Fetch the input/output content of a single LLM request log',
+        usage: 'coolhand fetch-log <log-id> [options]',
+        options: [
+            { flag: '--section VALUE', description: 'Which part of each content field to return: full (default), beginning, or end' },
+            { flag: '--max-chars N', description: 'Maximum characters to return per content field' },
+            { flag: '--search-query TEXT', description: 'Search within the log content instead of returning raw content (cannot combine with --section/--max-chars)' },
+            { flag: '--include-thinking', description: 'Include thinking/reasoning response content' },
+            { flag: '--client-id ID', description: 'Use a specific stored client' },
+            { flag: '--json', description: 'Emit JSON output instead of human-readable text' },
+        ],
+    },
+    {
+        name: 'search-logs',
+        oneLiner: 'Search LLM request logs with flexible filters',
+        usage: 'coolhand search-logs [options]',
+        options: [
+            { flag: '--template-id ID', description: 'Filter by template hashid' },
+            { flag: '--workload-id ID', description: 'Filter by workload hashid (matches all templates in that workload)' },
+            { flag: '--system-prompt-contains TEXT', description: 'Case-insensitive substring to match in the system prompt' },
+            { flag: '--user-prompt-contains TEXT', description: 'Case-insensitive substring to match in the user prompt' },
+            { flag: '--model VALUE', description: "Filter by model name (e.g. 'gpt-4o', 'claude-3-5-sonnet')" },
+            { flag: '--source-api VALUE', description: "Filter by source API (e.g. 'openai', 'anthropic', 'vertex')" },
+            { flag: '--source-api-result VALUE', description: 'Filter by result status: success, failed, operational, unmatched' },
+            { flag: '--unmatched-only', description: 'Only return logs with no assigned template' },
+            { flag: '--days-back N', description: 'Limit to logs created in the last N days (unrestricted if omitted)' },
+            { flag: '--include-prompts', description: 'Include system_prompt and user_prompt in results (may be large)' },
+            { flag: '--sort VALUE', description: "Sort expression, e.g. 'created_at desc' (default: newest first)" },
+            { flag: '--page N', description: 'Page number (default: 1)' },
+            { flag: '--per-page N', description: 'Results per page (default: 25, max: 100)' },
+            { flag: '--client-id ID', description: 'Use a specific stored client' },
+            { flag: '--json', description: 'Emit JSON output instead of human-readable text' },
+        ],
+    },
     {
         name: 'help',
         oneLiner: 'Show this message or per-command help',
@@ -494,16 +563,20 @@ function searchOptimizationsOptions(parsed) {
         opts.to = parsed.flags.to;
     }
     if (typeof parsed.flags['page'] === 'string') {
-        const n = parseInt(parsed.flags['page'], 10);
-        if (!isNaN(n)) {
-            opts.page = n;
+        const raw = parsed.flags['page'];
+        const n = parseInt(raw, 10);
+        if (!/^\d+$/.test(raw) || isNaN(n) || n < 1) {
+            throw new CliError('INVALID_ARGS', '--page must be a positive integer');
         }
+        opts.page = n;
     }
     if (typeof parsed.flags['per-page'] === 'string') {
-        const n = parseInt(parsed.flags['per-page'], 10);
-        if (!isNaN(n)) {
-            opts.perPage = n;
+        const raw = parsed.flags['per-page'];
+        const n = parseInt(raw, 10);
+        if (!/^\d+$/.test(raw) || isNaN(n) || n < 1 || n > 50) {
+            throw new CliError('INVALID_ARGS', '--per-page must be an integer between 1 and 50');
         }
+        opts.perPage = n;
     }
     if (typeof parsed.flags['template-id'] === 'string') {
         opts.templateId = parsed.flags['template-id'];
@@ -622,6 +695,55 @@ function analyzeClaudeSessionsOptions(parsed) {
     }
     return opts;
 }
+function mapClaudeProjectsOptions(parsed) {
+    const opts = {};
+    if (typeof parsed.flags.root === 'string') {
+        opts.root = parsed.flags.root;
+    }
+    if (typeof parsed.flags.output === 'string') {
+        opts.output = parsed.flags.output;
+    }
+    if (parsed.flags['dry-run'] === true) {
+        opts.dryRun = true;
+    }
+    if (typeof parsed.flags['client-id'] === 'string') {
+        opts.clientId = parsed.flags['client-id'];
+    }
+    if (parsed.flags.json === true) {
+        opts.json = true;
+    }
+    return opts;
+}
+const CLIENT_FILE_TYPES = new Set(['slide_deck', 'report', 'document']);
+function uploadClientFileOptions(parsed) {
+    const filePath = parsed.positional[0];
+    if (!filePath) {
+        throw new CliError('INVALID_ARGS', 'upload-client-file requires a <file-path> argument');
+    }
+    const opts = { filePath };
+    if (typeof parsed.flags.name === 'string') {
+        opts.name = parsed.flags.name;
+    }
+    if (typeof parsed.flags['file-type'] === 'string') {
+        if (!CLIENT_FILE_TYPES.has(parsed.flags['file-type'])) {
+            throw new CliError('INVALID_ARGS', '--file-type must be one of: slide_deck, report, document');
+        }
+        opts.fileType = parsed.flags['file-type'];
+    }
+    if (typeof parsed.flags.description === 'string') {
+        opts.description = parsed.flags.description;
+    }
+    if (parsed.flags['dry-run'] === true) {
+        opts.dryRun = true;
+    }
+    if (typeof parsed.flags['client-id'] === 'string') {
+        opts.clientId = parsed.flags['client-id'];
+    }
+    if (parsed.flags.json === true) {
+        opts.json = true;
+    }
+    return opts;
+}
 function getWorkloadOptions(parsed) {
     const id = parsed.flags['id'];
     if (typeof id !== 'string' || id.length === 0) {
@@ -670,6 +792,109 @@ function updateWorkloadOptions(parsed) {
     }
     return opts;
 }
+const LOG_SECTIONS = new Set(['full', 'beginning', 'end']);
+function fetchLogOptions(parsed) {
+    const logId = parsed.positional[0];
+    if (!logId) {
+        throw new CliError('INVALID_ARGS', 'fetch-log requires a <log-id> argument');
+    }
+    const opts = { logId };
+    if (typeof parsed.flags['section'] === 'string') {
+        const section = parsed.flags['section'];
+        if (!LOG_SECTIONS.has(section)) {
+            throw new CliError('INVALID_ARGS', '--section must be one of: full, beginning, end');
+        }
+        opts.section = section;
+    }
+    if (typeof parsed.flags['max-chars'] === 'string') {
+        const raw = parsed.flags['max-chars'];
+        const n = parseInt(raw, 10);
+        if (!/^\d+$/.test(raw) || isNaN(n) || n < 1) {
+            throw new CliError('INVALID_ARGS', '--max-chars must be a positive integer');
+        }
+        opts.maxChars = n;
+    }
+    if (typeof parsed.flags['search-query'] === 'string') {
+        opts.searchQuery = parsed.flags['search-query'];
+    }
+    if (opts.searchQuery !== undefined && (opts.section !== undefined || opts.maxChars !== undefined)) {
+        throw new CliError('INVALID_ARGS', '--search-query cannot be combined with --section or --max-chars');
+    }
+    if (parsed.flags['include-thinking'] === true) {
+        opts.includeThinking = true;
+    }
+    if (typeof parsed.flags['client-id'] === 'string') {
+        opts.clientId = parsed.flags['client-id'];
+    }
+    if (parsed.flags.json === true) {
+        opts.json = true;
+    }
+    return opts;
+}
+function searchLogsOptions(parsed) {
+    const opts = {};
+    if (typeof parsed.flags['template-id'] === 'string') {
+        opts.templateId = parsed.flags['template-id'];
+    }
+    if (typeof parsed.flags['workload-id'] === 'string') {
+        opts.workloadId = parsed.flags['workload-id'];
+    }
+    if (typeof parsed.flags['system-prompt-contains'] === 'string') {
+        opts.systemPromptContains = parsed.flags['system-prompt-contains'];
+    }
+    if (typeof parsed.flags['user-prompt-contains'] === 'string') {
+        opts.userPromptContains = parsed.flags['user-prompt-contains'];
+    }
+    if (typeof parsed.flags['model'] === 'string') {
+        opts.model = parsed.flags['model'];
+    }
+    if (typeof parsed.flags['source-api'] === 'string') {
+        opts.sourceApi = parsed.flags['source-api'];
+    }
+    if (typeof parsed.flags['source-api-result'] === 'string') {
+        opts.sourceApiResult = parsed.flags['source-api-result'];
+    }
+    if (parsed.flags['unmatched-only'] === true) {
+        opts.unmatchedOnly = true;
+    }
+    if (typeof parsed.flags['days-back'] === 'string') {
+        const raw = parsed.flags['days-back'];
+        const n = parseInt(raw, 10);
+        if (!/^\d+$/.test(raw) || isNaN(n) || n < 1) {
+            throw new CliError('INVALID_ARGS', '--days-back must be a positive integer');
+        }
+        opts.daysBack = n;
+    }
+    if (parsed.flags['include-prompts'] === true) {
+        opts.includePrompts = true;
+    }
+    if (typeof parsed.flags['sort'] === 'string') {
+        opts.sort = parsed.flags['sort'];
+    }
+    if (typeof parsed.flags['page'] === 'string') {
+        const raw = parsed.flags['page'];
+        const n = parseInt(raw, 10);
+        if (!/^\d+$/.test(raw) || isNaN(n) || n < 1) {
+            throw new CliError('INVALID_ARGS', '--page must be a positive integer');
+        }
+        opts.page = n;
+    }
+    if (typeof parsed.flags['per-page'] === 'string') {
+        const raw = parsed.flags['per-page'];
+        const n = parseInt(raw, 10);
+        if (!/^\d+$/.test(raw) || isNaN(n) || n < 1 || n > 100) {
+            throw new CliError('INVALID_ARGS', '--per-page must be an integer between 1 and 100');
+        }
+        opts.perPage = n;
+    }
+    if (typeof parsed.flags['client-id'] === 'string') {
+        opts.clientId = parsed.flags['client-id'];
+    }
+    if (parsed.flags.json === true) {
+        opts.json = true;
+    }
+    return opts;
+}
 function listWorkloadsOptions(parsed) {
     const opts = {};
     if (typeof parsed.flags.search === 'string') {
@@ -951,12 +1176,20 @@ export async function run(argv) {
                 return await runGetFeedback(getFeedbackOptions(parsed));
             case 'analyze-claude-sessions':
                 return await runAnalyzeClaudeSessions(analyzeClaudeSessionsOptions(parsed));
+            case 'map-claude-projects':
+                return await runMapClaudeProjects(mapClaudeProjectsOptions(parsed));
+            case 'upload-client-file':
+                return await runUploadClientFile(uploadClientFileOptions(parsed));
             case 'list-workloads':
                 return await runListWorkloads(listWorkloadsOptions(parsed));
             case 'get-workload':
                 return await runGetWorkload(getWorkloadOptions(parsed));
             case 'update-workload':
                 return await runUpdateWorkload(updateWorkloadOptions(parsed));
+            case 'fetch-log':
+                return await runFetchLog(fetchLogOptions(parsed));
+            case 'search-logs':
+                return await runSearchLogs(searchLogsOptions(parsed));
             default:
                 logger.info(`Unknown command: ${parsed.command}`);
                 logger.info(buildSummaryHelp());