tracksiy 0.5.0 → 0.7.0

package/README.md

@@ -125,14 +125,20 @@ Labels: `bug`, `feature`, `question`, `blocker`. `npx tracksiy support` prints t
 | `monitors list` | Every monitor of the organization with its state, including monitors no project owns. | read | `monitors_list` |
 | `monitors declare` | Declare monitors for a project up front, idempotently: heartbeats for jobs, HTTP checks, TLS, ingest silence. | write | `monitors_declare` |
 | `monitors delete <slug>` | Remove one of a project's monitors by the slug it was declared with. | **destructive** | `monitors_delete` |
+| `monitors deleted` | Monitors deleted from this project: what each was, its last check, when and by whom. | read | `monitors_deleted` |
 | `performance` | Is this project slow, and did it get slower? Transactions compared with the previous window, plus uptime. | read | `performance` |
 | `queries` | Which database queries and outbound HTTP calls make this project slow, with N+1 detection and the routes that run them. | read | `queries` |
+| `not-found` | Which pages answer 404, and who links to them: broken internal links first. | read | `not_found` |
+| `settings` | The project's reading rules: environments, grouping rules, privacy rules, source roots. | read | `settings` |
+| `settings set` | Change the project's reading rules. Only the flags given change; the rest are kept. | write | `settings_set` |
+| `privacy-preview` | Try privacy rules on the project's last 50 stored events: what each would change and what PII shapes would remain. Writes nothing. | read | `privacy_preview` |
 | `issues list` | Recent issues of a project, newest activity first, with the frames that matter inlined. | read | `issues_list` |
 | `issues view <id>` | One issue in enough depth to act on: latest event, stack frames, tags, recent volume. | read | `issues_view` |
 | `issues resolve <ids...>` | Mark issues resolved, optionally fixed in a release so old clients do not reopen them. Records why. | write | `issues_resolve` |
 | `issues ignore <ids...>` | Mark issues ignored: they stop alerting until unignored. Records why. | write | `issues_ignore` |
 | `issues unresolve <ids...>` | Reopen issues. | write | `issues_unresolve` |
 | `issues bulk-status` | Change the status of every issue matching a filter. Dry run unless --apply. | write | `issues_bulk_status` |
+| `issues merge <ids...>` | Fold issues that are one root cause into one. Dry run unless --apply; later events of any of them land on the target. | write | `issues_merge` |
 | `issues comment <id>` | Leave a comment on an issue for the next agent or human: what you found, what you tried. | write | `issues_comment` |
 | `issues activity <id>` | Who did what to an issue and why: resolutions (and in which release), regressions, comments, claims. | read | `issues_activity` |
 | `issues verify-fixed <id>` | Did the fix hold? Judged by the fix release's own traffic: fixed, regressed or undetermined. Exit 10 unless fixed. | read | `issues_verify_fixed` |

package/dist/tracksiy.mjs

@@ -4,7 +4,7 @@
 import { readFileSync as readFileSync2 } from "node:fs";
 
 // src/version.ts
-var VERSION = true ? "0.5.0" : "0.0.0-dev";
+var VERSION = true ? "0.7.0" : "0.0.0-dev";
 var USER_AGENT = `tracksiy-cli/${VERSION} (node ${process.versions.node}; ${process.platform})`;
 
 // src/core/errors.ts
@@ -116,6 +116,7 @@ var Api = class {
     const useAuth = opts.auth !== false;
     if (useAuth && this.opts.token) headers.Authorization = `Bearer ${this.opts.token}`;
     if (this.opts.agent) headers["X-Tracksiy-Agent"] = this.opts.agent;
+    if (method !== "GET" && method !== "HEAD") headers["Idempotency-Key"] = opts.idempotencyKey ?? crypto.randomUUID();
     let body;
     if (opts.form) body = opts.form;
     else if (opts.body !== void 0) {
@@ -845,7 +846,7 @@ var monitorsDeclare = {
   idempotent: true,
   endpoint: { method: "POST", path: "/api/agent/v1/projects/{org}/{project}/monitors" },
   flags: {
-    heartbeat: { type: "list", value: "<slug>[:<interval-seconds>]", description: "A job that must check in at least this often (default 86400 s)." },
+    heartbeat: { type: "list", value: "<slug>[:<interval-seconds>]", description: "A job that must check in at least this often (default 86400 s). `slug=seconds` works too." },
     get: { type: "list", value: "<slug>=<url>", description: "HTTP GET check expecting 200." },
     ping: { type: "list", value: "<slug>=<url>", description: "Reachability check." },
     ssl: { type: "list", value: "<slug>=<url>", description: "TLS certificate check (expiry is reported on every check)." },
@@ -855,6 +856,7 @@ var monitorsDeclare = {
     "expect-no-text": { type: "string", value: "<text>", description: "--get: down if the body contains this, e.g. Whoops or Exception." },
     "user-agent": { type: "string", value: "<ua>", description: "--get/--ping: ask as this User-Agent, e.g. GPTBot/1.0, to see what crawlers get." },
     "dry-run": { type: "boolean", description: "Show what would be created, adopted or changed; write nothing." },
+    prune: { type: "boolean", description: "The declaration is the whole list: delete this project's monitors of the declared types it does not name (listed in `pruned`)." },
     body: { type: "json", value: "<json|@file|->", description: "Raw request body; overrides the shorthand flags." }
   },
   examples: [
@@ -869,8 +871,9 @@ var monitorsDeclare = {
     if (!body) {
       const monitors = [];
       for (const h of i.heartbeat ?? []) {
-        const [slug, interval] = String(h).split(":");
-        monitors.push(compact({ slug, type: "heartbeat", intervalSeconds: interval ? Number(interval) : void 0 }));
+        const m = /^([^:=\s]+)(?:[:=](\d+))?$/.exec(String(h).trim());
+        if (!m) throw usageError("bad_value", `--heartbeat expects <slug>[:<interval-seconds>], got ${JSON.stringify(h)}`, "For example --heartbeat nightly-backup:93600 (or nightly-backup=93600).");
+        monitors.push(compact({ slug: m[1], type: "heartbeat", intervalSeconds: m[2] ? Number(m[2]) : void 0 }));
       }
       for (const type of ["get", "ping", "ssl"]) {
         for (const item of i[type] ?? []) {
@@ -897,6 +900,7 @@ var monitorsDeclare = {
       body = { monitors };
     }
     if (i.dryRun) body = { ...body, dryRun: true };
+    if (i.prune) body = { ...body, prune: true };
     return ctx.api.send("POST", await projectPath(ctx, "monitors"), body);
   }
 };
@@ -912,6 +916,24 @@ var monitorsDelete = {
   async run(ctx) {
     requireYes(ctx, `This deletes monitor ${ctx.input.slug} and its history.`);
     return ctx.api.send("DELETE", await projectPath(ctx, `monitors/${seg(ctx.input.slug)}${ctx.input.type ? `?type=${seg(ctx.input.type)}` : ""}`));
+  },
+  output: "{id, slug, type, url, intervalSeconds, lastCheck, lastIsUp, deleted, via, actor}: what was deleted; kept in `monitors deleted`."
+};
+var monitorsDeleted = {
+  path: ["monitors", "deleted"],
+  summary: "Monitors deleted from this project: what each was, its last check, when and by whom.",
+  context: "project",
+  effect: "read",
+  endpoint: { method: "GET", path: "/api/agent/v1/projects/{org}/{project}/monitor-deletions" },
+  flags: {
+    since: { type: "string", value: TIME, description: "Only deletions after this." },
+    limit: { type: "integer", value: "<n>", description: "How many (default 50)." }
+  },
+  examples: [{ command: "tracksiy monitors deleted --since 7d", description: "What `--prune`, `monitors delete` or the dashboard removed this week." }],
+  output: "{deleted:[{id, slug, type, url, intervalSeconds, lastCheck, lastIsUp, deleted, via, actor}]}",
+  text: (d) => table(d.deleted ?? [], ["slug", "type", "deleted", ["by", (r) => r.actor ?? r.via ?? ""], ["last check", (r) => r.lastCheck ? `${r.lastCheck}${r.lastIsUp === false ? " (down)" : ""}` : "never"]]),
+  async run(ctx) {
+    return ctx.api.get(await projectPath(ctx, "monitor-deletions"), { since: since(ctx.input.since), limit: ctx.input.limit });
   }
 };
 var performance = {
@@ -998,7 +1020,103 @@ var queries = {
     });
   }
 };
-var fleet_default = [orgs, projects, overview, changes, health, monitorsList, monitorsDeclare, monitorsDelete, performance, queries];
+var notFound = {
+  path: ["not-found"],
+  aliases: [["404"]],
+  summary: "Which pages answer 404, and who links to them: broken internal links first.",
+  context: "project",
+  effect: "read",
+  endpoint: { method: "GET", path: "/api/agent/v1/projects/{org}/{project}/not-found" },
+  flags: {
+    since: { type: "string", value: TIME, description: "Window start (default 24h)." },
+    internal: { type: "boolean", description: "Only 404s reached from the site's own pages." },
+    limit: { type: "integer", value: "<n>", description: "How many paths (max 200)." }
+  },
+  examples: [{ command: "tracksiy not-found --internal --since 7d", description: "Broken links the site itself serves." }],
+  output: "{since, until, scanned, pages:[{path, count, lastSeen, internal, bots, referrers[{referrer, count}]}], note}",
+  text: (d) => table(d.pages ?? [], ["path", "count", ["internal", (r) => r.internal ? "yes" : ""], "bots", ["top referrer", (r) => r.referrers?.[0]?.referrer ?? "-"]]),
+  async run(ctx) {
+    return ctx.api.get(await projectPath(ctx, "not-found"), { since: since(ctx.input.since), internal: ctx.input.internal || void 0, limit: ctx.input.limit });
+  }
+};
+var settingsGet = {
+  path: ["settings"],
+  summary: "The project's reading rules: environments, grouping rules, privacy rules, source roots.",
+  context: "project",
+  effect: "read",
+  endpoint: { method: "GET", path: "/api/agent/v1/projects/{org}/{project}/settings" },
+  output: "{sourceRoots[], environments[], environmentPolicy, fingerprintRules[], privacyRules[]}",
+  async run(ctx) {
+    return ctx.api.get(await projectPath(ctx, "settings"));
+  }
+};
+function pairs(items, flag) {
+  if (!items) return void 0;
+  return items.map((item) => {
+    const out = {};
+    for (const part of String(item).split(/,(?=\s*\w+=)/)) {
+      const eq = part.indexOf("=");
+      if (eq < 1) throw usageError("bad_value", `--${flag} expects key=value,key=value, got ${JSON.stringify(item)}`);
+      out[part.slice(0, eq).trim()] = part.slice(eq + 1).trim();
+    }
+    return out;
+  });
+}
+var settingsSet = {
+  path: ["settings", "set"],
+  summary: "Change the project's reading rules. Only the flags given change; the rest are kept.",
+  description: "Applied to events ingested from then on. --environments + --environment-policy drop discards (and counts) events from any other environment; flag stores them tagged environment_unlisted. --fingerprint-rule groups matching events into one issue. --privacy-rule drops a header or masks a PII shape before storage -- try it first with `tracksiy privacy-preview`. --source-root makes frames carry repoPath.",
+  context: "project",
+  effect: "write",
+  idempotent: true,
+  endpoint: { method: "PUT", path: "/api/agent/v1/projects/{org}/{project}/settings" },
+  flags: {
+    environments: { type: "list", value: "<env,...>", description: "The environments this project reports from (empty string: any)." },
+    "environment-policy": { type: "string", enum: ["flag", "drop"], description: "What happens to an event from another environment." },
+    "source-root": { type: "list", split: false, value: "<path> | strip=<path>,prepend=<dir/>[,surface=<surface>]", description: "How frame paths become repo paths: a prefix to strip, or strip + prepend (for an SDK that already sends /app/... of a repo's backend/), optionally for one surface. Repeatable; replaces the list." },
+    "fingerprint-rule": { type: "list", split: false, value: "type=<glob>,message=<glob>,fingerprint=<name>", description: "Group matching events into one issue. Repeatable; replaces the list." },
+    "privacy-rule": { type: "list", split: false, value: "dropHeader=<name> | mask=<email|iban|card_number|tckn|jwt>,field=<path|*>", description: "Scrub before storage. Repeatable; replaces the list." },
+    body: { type: "json", value: "<json|@file|->", description: "The whole declaration; overrides the flags." }
+  },
+  examples: [
+    { command: "tracksiy settings set --environments production,staging --environment-policy drop", description: "local and local1 stop reaching Tracksiy." },
+    { command: "tracksiy settings set --fingerprint-rule 'type=ViewException,message=syntax error*,fingerprint=blade-syntax'", description: "Every half-written template is one issue." },
+    { command: "tracksiy settings set --source-root /home/admin/web/shop/", description: "Frames carry repoPath." },
+    { command: "tracksiy settings set --source-root 'strip=/,prepend=backend/,surface=backend'", description: "Laravel sends /app/Http/...; the repo has it under backend/." }
+  ],
+  output: "{sourceRoots[], environments[], environmentPolicy, fingerprintRules[], privacyRules[]}",
+  async run(ctx) {
+    const path = await projectPath(ctx, "settings");
+    const i = ctx.input;
+    if (i.body) return ctx.api.send("PUT", path, i.body);
+    const current = await ctx.api.get(path);
+    const next = {
+      sourceRoots: i.sourceRoot ? i.sourceRoot.map((r) => /^\s*strip=/.test(r) ? pairs([r], "source-root")[0] : r) : current.sourceRoots ?? [],
+      environments: i.environments ? i.environments.filter((e) => e) : current.environments ?? [],
+      environmentPolicy: i.environmentPolicy ?? current.environmentPolicy ?? "flag",
+      fingerprintRules: pairs(i.fingerprintRule, "fingerprint-rule") ?? current.fingerprintRules ?? [],
+      privacyRules: pairs(i.privacyRule, "privacy-rule") ?? current.privacyRules ?? []
+    };
+    return ctx.api.send("PUT", path, next);
+  }
+};
+var privacyPreview = {
+  path: ["privacy-preview"],
+  summary: "Try privacy rules on the project's last 50 stored events: what each would change and what PII shapes would remain. Writes nothing.",
+  context: "project",
+  effect: "read",
+  endpoint: { method: "POST", path: "/api/agent/v1/projects/{org}/{project}/settings/privacy-preview" },
+  flags: {
+    "privacy-rule": { type: "list", split: false, value: "dropHeader=<name> | mask=<shape>,field=<path|*>", description: "Rules to try (default: the saved ones)." }
+  },
+  examples: [{ command: "tracksiy privacy-preview --privacy-rule 'mask=email,field=request.headers.User-Agent'", description: "Would this clear the PII check?" }],
+  output: "{sampled, rules[{rule, events, values}], remaining[{pattern, field, events}]}",
+  async run(ctx) {
+    const rules = pairs(ctx.input.privacyRule, "privacy-rule");
+    return ctx.api.send("POST", await projectPath(ctx, "settings/privacy-preview"), rules ? { privacyRules: rules } : {});
+  }
+};
+var fleet_default = [orgs, projects, overview, changes, health, monitorsList, monitorsDeclare, monitorsDelete, monitorsDeleted, performance, queries, notFound, settingsGet, settingsSet, privacyPreview];
 
 // src/commands/issues.ts
 import { writeFileSync } from "node:fs";
@@ -1070,15 +1188,18 @@ var list = {
     limit: { type: "integer", value: "<n>", description: "How many issues (server default 25)." },
     frames: { type: "integer", value: "<n>", description: "In-app stack frames inlined per issue (default 3, 0 for none)." },
     unclaimed: { type: "boolean", description: "Only issues nobody holds a live claim on: what you can pick up." },
-    "claimed-by": { type: "string", value: "<handle>", description: "Only issues claimed by this handle." }
+    cursor: { type: "string", value: "<nextCursor>", description: "Continue from the previous page's nextCursor (same filters and sort)." },
+    "claimed-by": { type: "string", value: "<handle>", description: "Only issues claimed by this handle." },
+    tags: { type: "string", value: "<key,...>", description: "Not a filter: each issue carries these tag keys' most frequent values in topTags (at most 10 keys)." }
   },
   examples: [
     { command: "tracksiy issues list --since 24h", description: "Unresolved issues seen in the last day." },
+    { command: "tracksiy issues list --tags endpoint,client_error_kind --select issues.id,issues.title,issues.topTags", description: "What each mobile issue hit, without opening every one." },
     { command: "tracksiy issues list --unclaimed --limit 5", description: "Five issues no other agent is working on." },
     { command: "tracksiy issues list --status regressed --select issues.id,issues.title", description: "Only regressions, only ids and titles." },
     { command: "tracksiy issues list --first-seen-since 2h --environment production", description: "What is new in production." }
   ],
-  output: "{project, issueCount, total, hasMore, issues:[{id, shortId, title, culprit, level, status, count, firstSeen, lastSeen, regressedAt, timesRegressed, resolution?, staleEvents, claimedBy?, claimedUntil?, permalink, frames?}]}",
+  output: "{project, issueCount, total, hasMore, nextCursor, issues:[{id, shortId, title, culprit, level, status, count, firstSeen, lastSeen, regressedAt, timesRegressed, resolution?, staleEvents, claimedBy?, claimedUntil?, permalink, latestEvent{release, environment, platform, exceptionType}, frames?, topTags?}]}",
   text: (d) => `${d.issueCount ?? d.issues?.length ?? 0} of ${d.total ?? "?"} issues${d.hasMore ? " (more: raise --limit)" : ""}
 ${issueRows(d.issues)}`,
   async run(ctx) {
@@ -1088,7 +1209,9 @@ ${issueRows(d.issues)}`,
       limit: ctx.input.limit,
       frames: ctx.input.frames,
       unclaimed: ctx.input.unclaimed || void 0,
-      claimedBy: ctx.input.claimedBy
+      claimedBy: ctx.input.claimedBy,
+      cursor: ctx.input.cursor,
+      tags: ctx.input.tags
     });
   }
 };
@@ -1099,9 +1222,15 @@ var view = {
   effect: "read",
   endpoint: { method: "GET", path: "/api/agent/v1/projects/{org}/{project}/issues/{issue_id}" },
   args: [{ name: "id", required: true, description: "Issue id (numeric, from `issues list`)." }],
-  flags: { frames: { type: "integer", value: "<n>", description: "How many frames to include." } },
-  examples: [{ command: "tracksiy issues view 4812", description: "Everything needed to start fixing issue 4812." }],
-  output: "{id, title, culprit, level, status, count, firstSeen, lastSeen, resolution?, staleEvents, claimedBy?, latestEvent{release, environment, exceptionType, exceptionValue, contexts}, frames[{filename, function, lineno, contextLine, inApp}], tags[], eventsLast24h, eventsLast7d, activity[], recentComments[], permalink}",
+  flags: {
+    frames: { type: "integer", value: "<n>", description: "How many frames to include." },
+    breadcrumbs: { type: "integer", value: "<n>", description: "Breadcrumbs of the latest event (default 20, at most 50, 0 for none): what happened just before it." }
+  },
+  examples: [
+    { command: "tracksiy issues view 4812", description: "Everything needed to start fixing issue 4812." },
+    { command: "tracksiy issues view 4812 --select latestEvent.breadcrumbs", description: "The requests and navigations that led up to it." }
+  ],
+  output: "{id, title, culprit, level, status, count, firstSeen, lastSeen, resolution?, staleEvents, claimedBy?, latestEvent{release, environment, platform, exceptionType, exceptionValue, commit, contexts, breadcrumbs[{timestamp, type, category, level, message, data}]}, frames[{filename, function, lineno, contextLine, inApp}], tags[], eventsLast24h, eventsLast7d, activity[], recentComments[], permalink}",
   text: (d) => {
     const head = kv(d, ["id", "shortId", "title", "culprit", "level", "status", "count", "eventsLast24h", "eventsLast7d", "firstSeen", "lastSeen", "regressedAt", "permalink"]);
     const ev = d.latestEvent ? `
@@ -1114,14 +1243,17 @@ resolved ${d.resolution.type.replace(/_/g, " ")}: ${d.resolution.release ?? d.re
     const claim2 = d.claimedBy ? `
 claimed by ${d.claimedBy} until ${d.claimedUntil}` : "";
     const act = (d.activity ?? []).slice(0, 5).map((a) => `  ${ago(a.at)} ${a.action}${a.reason ? ` (${a.reason})` : ""} by ${a.actor ?? a.user ?? a.via}${a.note ? `: ${String(a.note).split("\n")[0].slice(0, 100)}` : ""}`).join("\n");
+    const crumbs = (d.latestEvent?.breadcrumbs ?? []).slice(-8).map((b) => `  ${b.category ?? b.type ?? "-"}${b.data?.status_code ? ` ${b.data.status_code}` : ""} ${b.message ?? [b.data?.method, b.data?.url ?? b.data?.to].filter(Boolean).join(" ")}`).join("\n");
     return `${head}${res}${claim2}${ev}${frames ? `
 frames (* = in app):
-${frames}` : ""}${act ? `
+${frames}` : ""}${crumbs ? `
+breadcrumbs (last 8, oldest first):
+${crumbs}` : ""}${act ? `
 activity:
 ${act}` : ""}`;
   },
   async run(ctx) {
-    return ctx.api.get(await projectPath(ctx, `issues/${encodeURIComponent(ctx.input.id)}`), { frames: ctx.input.frames });
+    return ctx.api.get(await projectPath(ctx, `issues/${encodeURIComponent(ctx.input.id)}`), { frames: ctx.input.frames, breadcrumbs: ctx.input.breadcrumbs });
   }
 };
 function statusCommand(name, status2, summary, examples) {
@@ -1194,6 +1326,29 @@ var activity = {
     return ctx.api.get(await projectPath(ctx, `issues/${encodeURIComponent(ctx.input.id)}/activity`), { limit: ctx.input.limit });
   }
 };
+var merge = {
+  path: ["issues", "merge"],
+  summary: "Fold issues that are one root cause into one. Dry run unless --apply; later events of any of them land on the target.",
+  context: "project",
+  effect: "write",
+  endpoint: { method: "POST", path: "/api/agent/v1/projects/{org}/{project}/issues/merge" },
+  args: [{ name: "ids", required: true, variadic: true, description: "The issues to fold in." }],
+  flags: {
+    into: { type: "string", required: true, value: "<id>", description: "The issue they become." },
+    note: WHY.note,
+    apply: { type: "boolean", description: "Actually merge. Default is a dry run." }
+  },
+  examples: [{ command: "tracksiy issues merge 5519 5526 --into 5515 --note 'same Blade template, same deploy' --apply", description: "Three issues, one cause." }],
+  output: "{dryRun, into{...issue}, merged[], events}",
+  async run(ctx) {
+    return ctx.api.send("POST", await projectPath(ctx, "issues/merge"), {
+      into: String(ctx.input.into),
+      ids: ctx.input.ids.map(String),
+      note: textArg(ctx.input.note, "note"),
+      dryRun: !ctx.input.apply
+    });
+  }
+};
 var verifyFixed = {
   path: ["issues", "verify-fixed"],
   summary: "Did the fix hold? Judged by the fix release's own traffic: fixed, regressed or undetermined. Exit 10 unless fixed.",
@@ -1320,7 +1475,7 @@ var bulk = {
     return result;
   }
 };
-var issues_default = [list, view, resolve2, ignore, unresolve, bulk, comment, activity, verifyFixed, claim, unclaim];
+var issues_default = [list, view, resolve2, ignore, unresolve, bulk, merge, comment, activity, verifyFixed, claim, unclaim];
 
 // src/commands/projects.ts
 var create = {
@@ -1424,7 +1579,7 @@ var DECLARE = {
   recipient: {
     type: "list",
     value: "email|<type>:<url>",
-    description: `Who is told. Repeatable. \`email\` alone reaches the members of the project's teams; webhook, discord, googlechat and telegram take a URL: \`<type>:<url>\` (telegram: the Bot API sendMessage URL with chat_id; peerpacket: https://peerpacket.com/channels/<channel>?to=<handle>&as=<author>&key=<pp_live_\u2026> -- each alert becomes a ticket for that agent, closed when its issues are resolved).`
+    description: `Who is told. Repeatable. \`email\` alone reaches the members of the project's teams; webhook, discord, googlechat and telegram take a URL: \`<type>:<url>\` (telegram: the Bot API sendMessage URL with chat_id; peerpacket: \`peerpacket:<channel>?to=<handle>\` has Tracksiy open the ticket with its own key, for a channel opened to your organization; or https://peerpacket.com/channels/<channel>?to=<handle>&as=<author>&key=<pp_live_\u2026> with your own key -- each alert becomes a ticket for that agent, closed when its issues are resolved).`
   },
   delivery: { type: "string", enum: ["immediate", "digest"], description: "For --recipient: send each alert now, or batch into the digest hours. Default immediate." },
   "new-issue": { type: "boolean", description: "Alert on every new issue (default true). --no-new-issue to turn off." },
@@ -1446,6 +1601,9 @@ function recipients(list5, delivery) {
       return compact({ type, delivery });
     }
     if (!target) throw usageError("bad_value", `--recipient ${raw} has no target`, `Format: ${type}:<url>`);
+    if (type === "peerpacket" && !target.includes("://") && !target.startsWith("peerpacket:")) {
+      return compact({ type, url: `peerpacket:${target}`, delivery });
+    }
     return compact({ type, url: target, delivery });
   });
 }
@@ -1502,7 +1660,8 @@ var set = {
   examples: [
     { command: "tracksiy alerts set --recipient email --threshold 50/10", description: "Email the project's team on new issues, on bursts, and on downtime." },
     { command: "tracksiy alerts set --recipient 'telegram:https://api.telegram.org/bot<token>/sendMessage?chat_id=<id>' --delivery digest", description: "Telegram, batched into the digest hours." },
-    { command: "tracksiy alerts set --recipient 'peerpacket:https://peerpacket.com/channels/shop-ops?to=shop-agent&as=tracksiy-alerts&key=pp_live_\u2026'", description: "Alerts land as PeerPacket tickets for the shop's agent." }
+    { command: "tracksiy alerts set --recipient 'peerpacket:shop-ops?to=shop-agent'", description: "Alerts land as PeerPacket tickets for the shop's agent, opened by Tracksiy's own key (no workspace key in the config)." },
+    { command: "tracksiy alerts set --recipient 'peerpacket:https://peerpacket.com/channels/shop-ops?to=shop-agent&as=tracksiy-alerts&key=pp_live_\u2026'", description: "The same with your own PeerPacket key." }
   ],
   output: "The stored alerting state, same shape as `alerts get`.",
   text: rulesText,
@@ -1567,7 +1726,7 @@ var defaults = {
     return ctx.api.send("PUT", await orgPath(ctx, "alerts/defaults"), body);
   }
 };
-var settingsGet = {
+var settingsGet2 = {
   path: ["alerts", "settings"],
   summary: "When digest-mode recipients are told, and whether the last digests went out.",
   context: "org",
@@ -1582,7 +1741,7 @@ ${table(d.recentDigests ?? [], [["sent", (r) => ago(r.sentAt)], "type", "ok", "i
     return ctx.api.get(await orgPath(ctx, "alerts/settings"));
   }
 };
-var settingsSet = {
+var settingsSet2 = {
   path: ["alerts", "settings", "set"],
   summary: "Declare the digest hours and timezone.",
   context: "org",
@@ -1604,7 +1763,7 @@ var settingsSet = {
     return ctx.api.send("PUT", await orgPath(ctx, "alerts/settings"), { digest: compact({ hours, timezone: ctx.input.timezone }) });
   }
 };
-var alerts_default = [get, set, test, coverage, defaults, settingsGet, settingsSet];
+var alerts_default = [get, set, test, coverage, defaults, settingsGet2, settingsSet2];
 
 // src/commands/keys.ts
 var list2 = {
@@ -1804,7 +1963,7 @@ function injectMap(json, id) {
   return JSON.stringify(map);
 }
 async function findPairs(paths) {
-  const pairs = [];
+  const pairs2 = [];
   const seen = /* @__PURE__ */ new Set();
   for (const p of paths) {
     const abs = resolve3(p);
@@ -1823,10 +1982,10 @@ async function findPairs(paths) {
         if (existsSync2(candidate)) map = candidate;
       }
       if (!map && existsSync2(`${js}.map`)) map = `${js}.map`;
-      pairs.push({ js, map, root });
+      pairs2.push({ js, map, root });
     }
   }
-  return pairs;
+  return pairs2;
 }
 function artifactName(file, root, prefix) {
   const rel = relative(root, file).split(sep).join("/");
@@ -1997,9 +2156,9 @@ async function scan(paths) {
     throw usageError("bad_path", err.message);
   }
 }
-async function inject(pairs, dryRun) {
+async function inject(pairs2, dryRun) {
   const out = [];
-  for (const pair of pairs) {
+  for (const pair of pairs2) {
     if (!pair.map) {
       out.push({ file: pair.js, map: null, debugId: "", action: "skipped-no-map" });
       continue;
@@ -2076,13 +2235,13 @@ ${table(d.files, ["kind", "state", "name", "detail"])}${d.skipped?.length ? `
 skipped, no source map: ${d.skipped.join(", ")}` : ""}`,
   async run(ctx) {
     const i = ctx.input;
-    const pairs = await scan(i.paths);
-    if (!pairs.length) throw usageError("nothing_to_upload", "No JavaScript files found.", "Point at the build output directory (dist, build, public/build).");
-    if (i.inject && !i.dryRun) await inject(pairs, false);
-    const skipped = pairs.filter((p) => !p.map).map((p) => artifactName(p.js, p.root, i.urlPrefix));
-    const withMaps = pairs.filter((p) => p.map);
+    const pairs2 = await scan(i.paths);
+    if (!pairs2.length) throw usageError("nothing_to_upload", "No JavaScript files found.", "Point at the build output directory (dist, build, public/build).");
+    if (i.inject && !i.dryRun) await inject(pairs2, false);
+    const skipped = pairs2.filter((p) => !p.map).map((p) => artifactName(p.js, p.root, i.urlPrefix));
+    const withMaps = pairs2.filter((p) => p.map);
     if (!withMaps.length) {
-      throw usageError("nothing_to_upload", `None of the ${pairs.length} JavaScript file(s) has a source map.`, "Build with source maps on (e.g. Vite build.sourcemap: true, webpack devtool: 'source-map').");
+      throw usageError("nothing_to_upload", `None of the ${pairs2.length} JavaScript file(s) has a source map.`, "Build with source maps on (e.g. Vite build.sourcemap: true, webpack devtool: 'source-map').");
     }
     const files = [];
     let withoutId = 0;
@@ -2611,7 +2770,7 @@ function coerce(name, spec, value, previous) {
       return n;
     }
     case "list": {
-      const items = Array.isArray(value) ? value.map(String) : String(value).split(",").map((s) => s.trim()).filter(Boolean);
+      const items = Array.isArray(value) ? value.map(String) : spec.split === false ? [String(value).trim()].filter(Boolean) : String(value).split(",").map((s) => s.trim()).filter(Boolean);
       if (spec.enum) for (const item of items) checkEnum(name, spec, item);
       return [...previous ?? [], ...items];
     }
@@ -2903,6 +3062,17 @@ var describe = {
       summary: "Agent-first CLI and MCP server for Tracksiy: errors, uptime, alerts, releases and source maps from one token.",
       docs: `${DEFAULT_URL}/cli.md`,
       contract: contract(),
+      limits: {
+        issuesPerPage: 100,
+        bulkStatusCap: 5e3,
+        mergeIds: 100,
+        filesPerAssembly: 1e3,
+        monitorIntervalSeconds: [60, 3456e4],
+        claimSeconds: [60, 604800],
+        noteCharacters: 1e4,
+        idempotencyKeyHours: 24,
+        note: "The CLI splits uploads past filesPerAssembly itself and sends an Idempotency-Key with every write."
+      },
       globalFlags: Object.entries(GLOBAL_FLAGS).map(([n, f]) => flagSchema(n, f)),
       commands: COMMANDS.map(describeCommand)
     };
@@ -3192,7 +3362,7 @@ var COMMANDS = [
 ];
 var GROUPS = [
   ["Start", "init auth onboarding describe"],
-  ["Look", "overview changes health orgs projects issues monitors performance queries releases alerts keys artifacts"],
+  ["Look", "overview changes health orgs projects issues monitors performance queries not-found releases alerts keys artifacts settings privacy-preview"],
   ["Ship", "sourcemaps proguard"],
   ["Manage", "tokens"],
   ["Talk to us", "support"],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tracksiy",
-  "version": "0.5.0",
+  "version": "0.7.0",
   "description": "Agent-first CLI and MCP server for Tracksiy: errors, uptime, alerts, releases and source maps, from one token.",
   "type": "module",
   "bin": {