@caik.dev/cli 0.1.6 → 0.1.8

package/dist/index.js

@@ -2,9 +2,9 @@
 
 // src/index.ts
 import { Command } from "commander";
-import { readFileSync as readFileSync9 } from "fs";
+import { readFileSync as readFileSync10 } from "fs";
 import { fileURLToPath } from "url";
-import { dirname as dirname5, join as join9 } from "path";
+import { dirname as dirname5, join as join10 } from "path";
 import chalk3 from "chalk";
 
 // src/errors.ts
@@ -2585,12 +2585,57 @@ function registerKarmaCommand(program2) {
 }
 
 // src/commands/hook.ts
-import { readFileSync as readFileSync7, writeFileSync as writeFileSync8, mkdirSync as mkdirSync8, existsSync as existsSync11 } from "fs";
+import { readFileSync as readFileSync7, writeFileSync as writeFileSync8, mkdirSync as mkdirSync8, existsSync as existsSync11, appendFileSync } from "fs";
 import { join as join7 } from "path";
 import { homedir as homedir6 } from "os";
-var PENDING_EVENTS_PATH = join7(homedir6(), ".caik", "pending-events.json");
+var CAIK_DIR = join7(homedir6(), ".caik");
+var PENDING_EVENTS_PATH = join7(CAIK_DIR, "pending-events.json");
+var AUDIT_LOG_PATH = join7(CAIK_DIR, "audit.log");
 var FLUSH_THRESHOLD = 50;
 var API_TIMEOUT_MS = 2e3;
+function readStdin() {
+  return new Promise((resolve3) => {
+    if (process.stdin.isTTY) {
+      resolve3("");
+      return;
+    }
+    let data = "";
+    process.stdin.setEncoding("utf-8");
+    process.stdin.on("data", (chunk) => {
+      data += chunk;
+    });
+    process.stdin.on("end", () => resolve3(data));
+    setTimeout(() => resolve3(data), 500);
+  });
+}
+function parseStdin(raw) {
+  if (!raw.trim()) return null;
+  try {
+    return JSON.parse(raw);
+  } catch {
+    return null;
+  }
+}
+function shouldSendTelemetry() {
+  const config = readConfig();
+  const level = config.contributionLevel ?? "contributor";
+  return level !== "none";
+}
+function shouldSendToolUse() {
+  const config = readConfig();
+  const level = config.contributionLevel ?? "contributor";
+  return level === "contributor" || level === "collective";
+}
+function auditLog(event) {
+  try {
+    if (!existsSync11(CAIK_DIR)) {
+      mkdirSync8(CAIK_DIR, { recursive: true, mode: 448 });
+    }
+    const line = JSON.stringify(event) + "\n";
+    appendFileSync(AUDIT_LOG_PATH, line, "utf-8");
+  } catch {
+  }
+}
 function readPendingEvents() {
   try {
     if (!existsSync11(PENDING_EVENTS_PATH)) return [];
@@ -2602,9 +2647,8 @@ function readPendingEvents() {
   }
 }
 function writePendingEvents(events) {
-  const dir = join7(homedir6(), ".caik");
-  if (!existsSync11(dir)) {
-    mkdirSync8(dir, { recursive: true, mode: 448 });
+  if (!existsSync11(CAIK_DIR)) {
+    mkdirSync8(CAIK_DIR, { recursive: true, mode: 448 });
   }
   writeFileSync8(PENDING_EVENTS_PATH, JSON.stringify(events, null, 2) + "\n", "utf-8");
 }
@@ -2654,12 +2698,20 @@ function registerHookCommand(program2) {
   const hook = program2.command("hook").description("Platform hook callbacks (observation only, never gates agent actions)");
   hook.command("session-start").description("Log session start event").option("--platform <name>", "Platform name", "claude-code").action(async (opts) => {
     try {
-      const client = createClient(program2);
+      if (!shouldSendTelemetry()) {
+        process.exit(0);
+        return;
+      }
+      const raw = await readStdin();
+      const input = parseStdin(raw);
       const event = {
         type: "session_start",
         platform: opts.platform ?? "claude-code",
+        sessionId: input?.session_id,
         timestamp: (/* @__PURE__ */ new Date()).toISOString()
       };
+      auditLog(event);
+      const client = createClient(program2);
       await postSingleEventWithTimeout(client, event);
     } catch {
     }
@@ -2667,28 +2719,47 @@ function registerHookCommand(program2) {
   });
   hook.command("session-end").description("Flush pending events and log session end").option("--platform <name>", "Platform name", "claude-code").action(async (opts) => {
     try {
-      const client = createClient(program2);
+      if (!shouldSendTelemetry()) {
+        clearPendingEvents();
+        process.exit(0);
+        return;
+      }
+      const raw = await readStdin();
+      const input = parseStdin(raw);
       const pending = readPendingEvents();
       const endEvent = {
         type: "session_end",
         platform: opts.platform ?? "claude-code",
+        sessionId: input?.session_id,
         timestamp: (/* @__PURE__ */ new Date()).toISOString()
       };
       pending.push(endEvent);
+      auditLog(endEvent);
+      const client = createClient(program2);
       await postEventsWithTimeout(client, pending);
     } catch {
     }
     process.exit(0);
   });
-  hook.command("post-tool-use").description("Buffer a tool-use event").option("--platform <name>", "Platform name", "claude-code").option("--tool <name>", "Tool name").option("--success <bool>", "Whether the tool call succeeded").action(async (opts) => {
+  hook.command("post-tool-use").description("Buffer a tool-use event").option("--platform <name>", "Platform name", "claude-code").option("--tool <name>", "Tool name (fallback if stdin unavailable)").option("--success <bool>", "Success flag (fallback if stdin unavailable)").action(async (opts) => {
     try {
+      if (!shouldSendToolUse()) {
+        process.exit(0);
+        return;
+      }
+      const raw = await readStdin();
+      const input = parseStdin(raw);
+      const toolName = input?.tool_name ?? opts.tool;
+      const success2 = input?.tool_response?.success ?? opts.success === "true" ?? false;
       const event = {
         type: "tool_use",
         platform: opts.platform ?? "claude-code",
-        tool: opts.tool,
-        success: opts.success === "true" || opts.success === true,
+        sessionId: input?.session_id,
+        tool: toolName,
+        success: Boolean(success2),
         timestamp: (/* @__PURE__ */ new Date()).toISOString()
       };
+      auditLog(event);
       const events = bufferEvent(event);
       if (events.length >= FLUSH_THRESHOLD) {
         const client = createClient(program2);
@@ -2700,12 +2771,17 @@ function registerHookCommand(program2) {
   });
   hook.command("cursor-session-start").description("Log Cursor session start event").action(async () => {
     try {
-      const client = createClient(program2);
+      if (!shouldSendTelemetry()) {
+        process.exit(0);
+        return;
+      }
       const event = {
         type: "session_start",
         platform: "cursor",
         timestamp: (/* @__PURE__ */ new Date()).toISOString()
       };
+      auditLog(event);
+      const client = createClient(program2);
       await postSingleEventWithTimeout(client, event);
     } catch {
     }
@@ -2713,6 +2789,10 @@ function registerHookCommand(program2) {
   });
   hook.command("cursor-mcp-exec").description("Buffer a Cursor MCP tool execution event").option("--server <name>", "MCP server name").option("--tool <name>", "Tool name").action(async (opts) => {
     try {
+      if (!shouldSendToolUse()) {
+        process.exit(0);
+        return;
+      }
       const event = {
         type: "mcp_exec",
         platform: "cursor",
@@ -2720,6 +2800,7 @@ function registerHookCommand(program2) {
         tool: opts.tool,
         timestamp: (/* @__PURE__ */ new Date()).toISOString()
       };
+      auditLog(event);
       const events = bufferEvent(event);
       if (events.length >= FLUSH_THRESHOLD) {
         const client = createClient(program2);
@@ -2731,7 +2812,11 @@ function registerHookCommand(program2) {
   });
   hook.command("cursor-session-end").description("Flush pending events and log Cursor session end").action(async () => {
     try {
-      const client = createClient(program2);
+      if (!shouldSendTelemetry()) {
+        clearPendingEvents();
+        process.exit(0);
+        return;
+      }
       const pending = readPendingEvents();
       const endEvent = {
         type: "session_end",
@@ -2739,6 +2824,8 @@ function registerHookCommand(program2) {
         timestamp: (/* @__PURE__ */ new Date()).toISOString()
       };
       pending.push(endEvent);
+      auditLog(endEvent);
+      const client = createClient(program2);
       await postEventsWithTimeout(client, pending);
     } catch {
     }
@@ -3343,7 +3430,7 @@ function registerUpgradeCommand(program2) {
       });
       spinner.stop();
       console.log(success(`Upgraded to ${update.latest}`));
-    } catch (err) {
+    } catch {
       spinner.stop();
       console.log(error("Upgrade failed. Try manually:"));
       console.log(info("npm install -g @caik.dev/cli@latest"));
@@ -3351,13 +3438,164 @@ function registerUpgradeCommand(program2) {
   });
 }
 
+// src/commands/audit.ts
+import { readFileSync as readFileSync9, existsSync as existsSync14, writeFileSync as writeFileSync10 } from "fs";
+import { join as join9 } from "path";
+import { homedir as homedir8 } from "os";
+var CAIK_DIR2 = join9(homedir8(), ".caik");
+var AUDIT_LOG_PATH2 = join9(CAIK_DIR2, "audit.log");
+var PENDING_EVENTS_PATH2 = join9(CAIK_DIR2, "pending-events.json");
+function registerAuditCommand(program2) {
+  const cmd = program2.command("audit").description("See exactly what telemetry CAIK collects \u2014 full transparency");
+  cmd.command("log").description("Show recent telemetry events (from local audit log)").option("-n, --lines <count>", "Number of recent events to show", "20").option("--all", "Show all events").action((opts) => {
+    console.log(heading("\nCAIK Telemetry Audit Log"));
+    console.log("\u2550".repeat(50));
+    const config = readConfig();
+    const level = config.contributionLevel ?? "contributor";
+    console.log(info(`Contribution level: ${level}`));
+    console.log(dim(`Log path: ${AUDIT_LOG_PATH2}`));
+    console.log();
+    if (!existsSync14(AUDIT_LOG_PATH2)) {
+      console.log(dim("No events logged yet. Events appear here after your next Claude Code session."));
+      return;
+    }
+    const raw = readFileSync9(AUDIT_LOG_PATH2, "utf-8").trim();
+    if (!raw) {
+      console.log(dim("Audit log is empty."));
+      return;
+    }
+    const lines = raw.split("\n");
+    const limit = opts.all ? lines.length : Math.min(parseInt(opts.lines, 10) || 20, lines.length);
+    const recent = lines.slice(-limit);
+    if (!opts.all && lines.length > limit) {
+      console.log(dim(`Showing last ${limit} of ${lines.length} events. Use --all to see everything.
+`));
+    }
+    for (const line of recent) {
+      try {
+        const event = JSON.parse(line);
+        const time = new Date(event.timestamp).toLocaleTimeString();
+        const type = event.type.padEnd(14);
+        const platform2 = (event.platform ?? "").padEnd(12);
+        const tool = event.tool ? ` tool=${event.tool}` : "";
+        const ok = event.success !== void 0 ? ` success=${event.success}` : "";
+        const sid = event.sessionId ? ` sid=${event.sessionId.slice(0, 8)}\u2026` : "";
+        console.log(`  ${dim(time)} ${type} ${dim(platform2)}${tool}${ok}${sid}`);
+      } catch {
+        console.log(`  ${dim(line)}`);
+      }
+    }
+    console.log();
+    console.log(dim("This is everything CAIK sends. No prompts, files, or personal data \u2014 ever."));
+    console.log(dim("Change your level: caik config contribution"));
+  });
+  cmd.command("pending").description("Show events buffered locally (not yet sent to API)").action(() => {
+    console.log(heading("\nPending Events (buffered locally)"));
+    console.log("\u2500".repeat(50));
+    console.log(dim(`Path: ${PENDING_EVENTS_PATH2}
+`));
+    if (!existsSync14(PENDING_EVENTS_PATH2)) {
+      console.log(dim("No pending events."));
+      return;
+    }
+    try {
+      const raw = readFileSync9(PENDING_EVENTS_PATH2, "utf-8");
+      const events = JSON.parse(raw);
+      if (events.length === 0) {
+        console.log(dim("No pending events."));
+        return;
+      }
+      console.log(info(`${events.length} event(s) buffered, waiting for session end to flush:
+`));
+      const counts = /* @__PURE__ */ new Map();
+      const tools = /* @__PURE__ */ new Map();
+      let successCount = 0;
+      let failCount = 0;
+      for (const e of events) {
+        counts.set(e.type, (counts.get(e.type) ?? 0) + 1);
+        if (e.tool) tools.set(e.tool, (tools.get(e.tool) ?? 0) + 1);
+        if (e.success === true) successCount++;
+        if (e.success === false) failCount++;
+      }
+      for (const [type, count] of counts) {
+        console.log(`  ${type}: ${count}`);
+      }
+      if (tools.size > 0) {
+        console.log();
+        console.log(info("Tools used:"));
+        const sorted = [...tools.entries()].sort((a, b) => b[1] - a[1]);
+        for (const [tool, count] of sorted.slice(0, 10)) {
+          console.log(`  ${tool}: ${count}`);
+        }
+        if (sorted.length > 10) {
+          console.log(dim(`  \u2026 and ${sorted.length - 10} more`));
+        }
+      }
+      if (successCount + failCount > 0) {
+        console.log();
+        console.log(`  ${success(`${successCount} succeeded`)} / ${warn(`${failCount} failed`)}`);
+      }
+    } catch {
+      console.log(warn("Could not parse pending events file."));
+    }
+  });
+  cmd.command("clear").description("Clear the local audit log and pending events").action(() => {
+    if (existsSync14(AUDIT_LOG_PATH2)) {
+      writeFileSync10(AUDIT_LOG_PATH2, "", "utf-8");
+    }
+    if (existsSync14(PENDING_EVENTS_PATH2)) {
+      writeFileSync10(PENDING_EVENTS_PATH2, "[]", "utf-8");
+    }
+    console.log(success("Audit log and pending events cleared."));
+  });
+  cmd.action(() => {
+    const config = readConfig();
+    const level = config.contributionLevel ?? "contributor";
+    console.log(heading("\nCAIK Telemetry Transparency"));
+    console.log("\u2550".repeat(50));
+    console.log();
+    console.log(`  Contribution Level:  ${level}`);
+    let logCount = 0;
+    if (existsSync14(AUDIT_LOG_PATH2)) {
+      const raw = readFileSync9(AUDIT_LOG_PATH2, "utf-8").trim();
+      if (raw) logCount = raw.split("\n").length;
+    }
+    console.log(`  Events Logged:       ${logCount}`);
+    let pendingCount = 0;
+    if (existsSync14(PENDING_EVENTS_PATH2)) {
+      try {
+        const parsed = JSON.parse(readFileSync9(PENDING_EVENTS_PATH2, "utf-8"));
+        if (Array.isArray(parsed)) pendingCount = parsed.length;
+      } catch {
+      }
+    }
+    console.log(`  Pending (unsent):    ${pendingCount}`);
+    console.log(`  Audit Log:           ${dim(AUDIT_LOG_PATH2)}`);
+    console.log();
+    console.log(heading("What each level sends:"));
+    console.log(`  ${dim("none")}          Nothing. Directory access only.`);
+    console.log(`  ${dim("minimal")}       Install/uninstall events (artifact ID + timestamp).`);
+    console.log(`  ${dim("contributor")}    + Tool-use signals (tool name, success/fail). No content.`);
+    console.log(`  ${dim("collective")}     + Workflow patterns, stack signals. Anonymized.`);
+    console.log();
+    console.log(dim("NEVER sent: prompts, file contents, conversation text, file paths, personal data."));
+    console.log();
+    console.log(info("Commands:"));
+    console.log(`  ${dim("caik audit log")}           Show recent events`);
+    console.log(`  ${dim("caik audit pending")}       Show buffered events`);
+    console.log(`  ${dim("caik audit clear")}         Clear all local telemetry data`);
+    console.log(`  ${dim("caik config contribution")} Change your contribution level`);
+    console.log();
+  });
+}
+
 // src/index.ts
 var __filename = fileURLToPath(import.meta.url);
 var __dirname = dirname5(__filename);
 var version = "0.0.1";
 try {
-  const pkgPath = join9(__dirname, "..", "package.json");
-  const pkg = JSON.parse(readFileSync9(pkgPath, "utf-8"));
+  const pkgPath = join10(__dirname, "..", "package.json");
+  const pkg = JSON.parse(readFileSync10(pkgPath, "utf-8"));
   version = pkg.version;
 } catch {
 }
@@ -3378,6 +3616,7 @@ registerKarmaCommand(program);
 registerHookCommand(program);
 registerSetupCommand(program);
 registerUpgradeCommand(program);
+registerAuditCommand(program);
 program.exitOverride();
 async function main() {
   const updateHint = printUpdateHint();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@caik.dev/cli",
-  "version": "0.1.6",
+  "version": "0.1.8",
   "type": "module",
   "description": "CAIK CLI — Search, install, and publish AI artifacts from your terminal",
   "keywords": [