@fml-inc/fml 0.8.6 → 0.8.7

package/dist/cli.js

@@ -4,30 +4,32 @@ import {
   getAuthenticatedClient
 } from "./chunk-LOJPIJZW.js";
 import {
-  OBSERVER_HEARTBEAT_STALE_MS,
   execBinSync,
-  getProcessIdentity,
   handleUpdate,
-  inspectObserverLease,
-  isPidAlive,
-  readObserverStateStatus,
-  removeObserverStateIfOwned,
   resolveBin
-} from "./chunk-E2MATWOU.js";
+} from "./chunk-XFALHTDL.js";
 import {
+  openObserverLog,
   readJsonFile,
   setHookCaptureDisabled,
   writeJsonFile,
   writeTextFileAtomic
-} from "./chunk-2DQQXBWM.js";
+} from "./chunk-LPSZCTTJ.js";
 import {
   CODEX_HOOK_EVENTS,
   GEMINI_HOOK_EVENTS,
   GROK_HOOK_EVENTS,
+  OBSERVER_HEARTBEAT_STALE_MS,
+  getProcessIdentity,
+  inspectObserverLease,
   isObserverHealth,
+  isPidAlive,
+  readHookInboxCapacityCounters,
   readHookInboxStatus,
-  readObserverAuthToken
-} from "./chunk-5TOOBX7I.js";
+  readObserverAuthToken,
+  readObserverStateStatus,
+  removeObserverStateIfOwned
+} from "./chunk-4YLSKFDU.js";
 import "./chunk-7V7G7NVF.js";
 import {
   claudeConfigDirectory,
@@ -35,14 +37,17 @@ import {
   createRawArtifactSync,
   geminiConfigDirectory,
   initializeSyncSettings,
-  resolvePackageRoot,
   runRawSyncOnce
-} from "./chunk-V2XC7JTB.js";
+} from "./chunk-5JJQWV4G.js";
+import {
+  resolvePackageRoot
+} from "./chunk-F57IFY3K.js";
 import {
   DEFAULT_PROD_URL,
   DEFAULT_TARGET_NAME,
   FML_DATA_DIR,
   FML_HOOK_CAPTURE_DISABLED_FILE,
+  FML_HOOK_INBOX_DIR,
   FML_LEGACY_OBSERVER_DB_FILE,
   FML_LOG_DIR,
   FML_OBSERVER_AUTH_TOKEN_FILE,
@@ -126,10 +131,8 @@ var START_TIMEOUT_MS = process.platform === "win32" ? 15e3 : 8e3;
 var STOP_TIMEOUT_MS = 5e3;
 var FORCE_STOP_TIMEOUT_MS = 2e3;
 var POLL_INTERVAL_MS = 50;
-var LOG_ROTATE_BYTES = 10 * 1024 * 1024;
-var LOG_ROTATE_FILES = 3;
 function expectedObserverVersion() {
-  return true ? "0.8.6+f7c7191d" : "dev";
+  return true ? "0.8.7+af45d2af" : "dev";
 }
 function delay(ms) {
   return new Promise((resolve) => setTimeout(resolve, ms));
@@ -255,34 +258,6 @@ async function wakeObserverSync() {
     return false;
   }
 }
-function rotateObserverLog() {
-  let size = 0;
-  try {
-    size = fs.statSync(FML_OBSERVER_LOG_FILE).size;
-  } catch {
-    return;
-  }
-  if (size < LOG_ROTATE_BYTES) return;
-  try {
-    fs.rmSync(`${FML_OBSERVER_LOG_FILE}.${LOG_ROTATE_FILES}`, { force: true });
-    for (let index = LOG_ROTATE_FILES - 1; index >= 1; index -= 1) {
-      const source = `${FML_OBSERVER_LOG_FILE}.${index}`;
-      if (fs.existsSync(source)) {
-        fs.renameSync(source, `${FML_OBSERVER_LOG_FILE}.${index + 1}`);
-      }
-    }
-    fs.renameSync(FML_OBSERVER_LOG_FILE, `${FML_OBSERVER_LOG_FILE}.1`);
-  } catch {
-  }
-}
-function openObserverLog() {
-  fs.mkdirSync(path.dirname(FML_OBSERVER_LOG_FILE), {
-    recursive: true,
-    mode: 448
-  });
-  rotateObserverLog();
-  return fs.openSync(FML_OBSERVER_LOG_FILE, "a", 384);
-}
 async function waitForReady(timeoutMs = START_TIMEOUT_MS, abortError) {
   const startedAtMs = Date.now();
   while (Date.now() - startedAtMs < timeoutMs) {
@@ -1797,7 +1772,7 @@ function asRecord2(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? value : null;
 }
 function singlePath(value) {
-  const path29 = [];
+  const path30 = [];
   let current = value;
   while (true) {
     if (Array.isArray(current) && current.length === 1) {
@@ -1805,13 +1780,13 @@ function singlePath(value) {
       continue;
     }
     const record = asRecord2(current);
-    if (!record) return path29;
+    if (!record) return path30;
     const keys = Object.keys(record);
-    if (keys.length === 0) return path29;
+    if (keys.length === 0) return path30;
     if (keys.length !== 1) throw new Error("ambiguous TOML statement path");
     const key = keys[0];
     if (key === void 0) throw new Error("missing TOML statement key");
-    path29.push(key);
+    path30.push(key);
     current = record[key];
   }
 }
@@ -1893,8 +1868,8 @@ function scanStatements(source) {
   }
   return statements;
 }
-function startsWithPath(path29, prefix) {
-  return prefix.every((part, index) => path29[index] === part);
+function startsWithPath(path30, prefix) {
+  return prefix.every((part, index) => path30[index] === part);
 }
 function pathsEqual(left, right) {
   return left.length === right.length && left.every((part, index) => part === right[index]);
@@ -1920,9 +1895,9 @@ function appendToml(source, addition) {
 function hasOwn(record, key) {
   return Object.prototype.hasOwnProperty.call(record, key);
 }
-function updatedValueAtPath(updated, path29) {
+function updatedValueAtPath(updated, path30) {
   let current = updated;
-  for (const part of path29) {
+  for (const part of path30) {
     const record = asRecord2(current);
     if (!record || !hasOwn(record, part)) return { exists: false };
     current = record[part];
@@ -1936,22 +1911,22 @@ function normalizedPaths(updates) {
       throw new Error("TOML update path cannot be empty");
     }
     if (paths.some(
-      (path29) => pathsEqual(path29, update.path) || startsWithPath(update.path, path29)
+      (path30) => pathsEqual(path30, update.path) || startsWithPath(update.path, path30)
     )) {
       continue;
     }
     for (let index = paths.length - 1; index >= 0; index -= 1) {
-      const path29 = paths[index];
-      if (path29 && startsWithPath(path29, update.path)) paths.splice(index, 1);
+      const path30 = paths[index];
+      if (path30 && startsWithPath(path30, update.path)) paths.splice(index, 1);
     }
     paths.push([...update.path]);
   }
   return paths;
 }
-function valueDocument(path29, value) {
+function valueDocument(path30, value) {
   let nested = value;
-  for (let index = path29.length - 1; index >= 0; index -= 1) {
-    const part = path29[index];
+  for (let index = path30.length - 1; index >= 0; index -= 1) {
+    const part = path30[index];
     if (part === void 0) throw new Error("TOML update path is invalid");
     nested = { [part]: nested };
   }
@@ -1970,12 +1945,12 @@ function insertAfterStatement(source, statement, addition) {
   const separator = before.endsWith(eol) ? "" : eol;
   return `${before}${separator}${normalized}${eol}${source.slice(statement.end)}`;
 }
-function insertUpdatedValue(source, path29, value) {
-  const key = path29.at(-1);
+function insertUpdatedValue(source, path30, value) {
+  const key = path30.at(-1);
   if (key === void 0) throw new Error("TOML update path cannot be empty");
   const assignment = localAssignment(key, value);
   if (assignment !== null) {
-    const parent = path29.slice(0, -1);
+    const parent = path30.slice(0, -1);
     const parentTables = scanStatements(source).filter(
       (statement) => statement.isTable && pathsEqual(statement.path, parent)
     );
@@ -1989,17 +1964,17 @@ function insertUpdatedValue(source, path29, value) {
       return insertAfterStatement(source, parentTable, assignment);
     }
   }
-  return appendToml(source, stringify(valueDocument(path29, value)));
+  return appendToml(source, stringify(valueDocument(path30, value)));
 }
 function updateTomlPaths(source, updated, updates) {
   const paths = normalizedPaths(updates);
   if (paths.length === 0) return source;
   const stripped = removeStatements(source, scanStatements(source), paths);
   let result = stripped;
-  for (const path29 of paths) {
-    const next = updatedValueAtPath(updated, path29);
+  for (const path30 of paths) {
+    const next = updatedValueAtPath(updated, path30);
     if (!next.exists) continue;
-    result = insertUpdatedValue(result, path29, next.value);
+    result = insertUpdatedValue(result, path30, next.value);
   }
   let reparsed;
   try {
@@ -2627,7 +2602,7 @@ function codexConfigUpdatePaths(original, updated) {
       }
     }
   }
-  return paths.map((path29) => ({ path: path29 }));
+  return paths.map((path30) => ({ path: path30 }));
 }
 function updateCodexConfigToml(source, original, updated) {
   return updateTomlPaths(
@@ -3133,7 +3108,7 @@ function longestCommonArraySubsequence(original, updated) {
   }
   return matches;
 }
-function arrayDiff(original, updated, path29) {
+function arrayDiff(original, updated, path30) {
   const updates = [];
   const matches = longestCommonArraySubsequence(original, updated);
   let originalStart = 0;
@@ -3151,19 +3126,19 @@ function arrayDiff(original, updated, path29) {
         ...jsoncUpdatesForObjectDiff(
           original[originalStart + offset],
           updated[updatedStart + offset],
-          [...path29, currentIndex + offset]
+          [...path30, currentIndex + offset]
         )
       );
     }
     for (let offset = pairedCount; offset < originalCount; offset += 1) {
       updates.push({
-        path: [...path29, currentIndex + pairedCount],
+        path: [...path30, currentIndex + pairedCount],
         value: void 0
       });
     }
     for (let offset = pairedCount; offset < updatedCount; offset += 1) {
       updates.push({
-        path: [...path29, currentIndex + offset],
+        path: [...path30, currentIndex + offset],
         value: updated[updatedStart + offset],
         isArrayInsertion: true
       });
@@ -3176,21 +3151,21 @@ function arrayDiff(original, updated, path29) {
   }
   return updates;
 }
-function jsoncUpdatesForObjectDiff(original, updated, path29 = []) {
+function jsoncUpdatesForObjectDiff(original, updated, path30 = []) {
   if (isDeepStrictEqual3(original, updated)) return [];
   if (Array.isArray(original) && Array.isArray(updated)) {
-    return arrayDiff(original, updated, path29);
+    return arrayDiff(original, updated, path30);
   }
   const originalObject = asObject(original);
   const updatedObject = asObject(updated);
-  if (!originalObject || !updatedObject) return [{ path: path29, value: updated }];
+  if (!originalObject || !updatedObject) return [{ path: path30, value: updated }];
   const keys = /* @__PURE__ */ new Set([
     ...Object.keys(originalObject),
     ...Object.keys(updatedObject)
   ]);
   return [...keys].flatMap(
     (key) => jsoncUpdatesForObjectDiff(originalObject[key], updatedObject[key], [
-      ...path29,
+      ...path30,
       key
     ])
   );
@@ -5188,13 +5163,67 @@ async function handleInstall(opts = {}) {
 // src/commands/sync.ts
 import { statSync } from "fs";
 
+// src/hooks/inbox-refusals.ts
+import fs10 from "fs";
+import path22 from "path";
+var FML_HOOK_INBOX_LOSS_LEDGER_FILE = path22.join(
+  FML_OBSERVER_DIR,
+  "hook-inbox-loss.reported.json"
+);
+function readLedger(ledgerFile) {
+  try {
+    const parsed = JSON.parse(fs10.readFileSync(ledgerFile, "utf8"));
+    if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
+      const record = parsed;
+      const entries = record.reportedEntries;
+      const bytes = record.reportedBytes;
+      if (typeof entries === "number" && Number.isSafeInteger(entries) && entries >= 0 && typeof bytes === "number" && Number.isSafeInteger(bytes) && bytes >= 0) {
+        return { reportedEntries: entries, reportedBytes: bytes };
+      }
+    }
+  } catch {
+  }
+  return { reportedEntries: 0, reportedBytes: 0 };
+}
+function takeUnreportedInboxLoss(options = {}) {
+  const inboxDir = options.inboxDir ?? FML_HOOK_INBOX_DIR;
+  const ledgerFile = options.ledgerFile ?? FML_HOOK_INBOX_LOSS_LEDGER_FILE;
+  try {
+    const counters = readHookInboxCapacityCounters(inboxDir);
+    if (!counters) return null;
+    const ledger = readLedger(ledgerFile);
+    if (counters.lostEntries === ledger.reportedEntries && counters.lostBytes === ledger.reportedBytes) {
+      return null;
+    }
+    const entries = Math.max(0, counters.lostEntries - ledger.reportedEntries);
+    const bytes = Math.max(0, counters.lostBytes - ledger.reportedBytes);
+    fs10.mkdirSync(path22.dirname(ledgerFile), { recursive: true, mode: 448 });
+    writeTextFileAtomic(
+      ledgerFile,
+      `${JSON.stringify({
+        reportedEntries: counters.lostEntries,
+        reportedBytes: counters.lostBytes
+      })}
+`
+    );
+    if (entries === 0) return null;
+    return {
+      entries,
+      bytes,
+      ...counters.lastLostAtMs === void 0 ? {} : { lastAtMs: counters.lastLostAtMs }
+    };
+  } catch {
+    return null;
+  }
+}
+
 // src/commands/otel-config.ts
-import fs11 from "fs";
+import fs12 from "fs";
 import os6 from "os";
-import path26 from "path";
+import path27 from "path";
 
 // ../../packages/agent-targets/src/install/otel/claude.ts
-import path22 from "path";
+import path23 from "path";
 
 // ../../packages/agent-targets/src/install/otel/shared.ts
 import { isDeepStrictEqual as isDeepStrictEqual7 } from "util";
@@ -5331,9 +5360,9 @@ var MANAGED_MARKER = "FML_OTEL_MANAGED";
 var CLAUDE_OTEL_SOURCE_LIMITATION = "Claude Code may truncate inline raw API bodies and tool content at 60 KiB and redact extended-thinking content before export";
 function configPath(context) {
   if (context.configPathOverride) {
-    return path22.resolve(context.configPathOverride);
+    return path23.resolve(context.configPathOverride);
   }
-  return path22.join(
+  return path23.join(
     claudeConfigDirectory({ env: context.env, homeDir: context.homeDir }),
     "settings.json"
   );
@@ -5504,7 +5533,7 @@ var CLAUDE_OTEL_INSTALLER = Object.freeze({
 
 // ../../packages/agent-targets/src/install/otel/codex.ts
 import { isDeepStrictEqual as isDeepStrictEqual8 } from "util";
-import path23 from "path";
+import path24 from "path";
 import { parse as parse5 } from "smol-toml";
 var TARGET14 = agentTarget("codex");
 var TARGET_ID6 = TARGET14.id;
@@ -5513,13 +5542,13 @@ var AUTHENTICATION2 = "bearer-header";
 var CODEX_OTEL_SOURCE_LIMITATION = "Codex OTel has no documented raw API body or full tool-content export switch; tool-result content is an output snippet";
 function configPath2(context) {
   if (context.configPathOverride) {
-    return path23.resolve(context.configPathOverride);
+    return path24.resolve(context.configPathOverride);
   }
   const configuredHome = context.env.CODEX_HOME;
-  const codexHome = path23.resolve(
-    typeof configuredHome === "string" && configuredHome.trim().length > 0 ? configuredHome : path23.join(context.homeDir, ".codex")
+  const codexHome = path24.resolve(
+    typeof configuredHome === "string" && configuredHome.trim().length > 0 ? configuredHome : path24.join(context.homeDir, ".codex")
   );
-  return path23.join(codexHome, "config.toml");
+  return path24.join(codexHome, "config.toml");
 }
 function readToml(snapshot) {
   const failure = snapshotError2(snapshot);
@@ -5739,7 +5768,7 @@ var CODEX_OTEL_INSTALLER = Object.freeze({
 });
 
 // ../../packages/agent-targets/src/install/otel/gemini.ts
-import path24 from "path";
+import path25 from "path";
 var TARGET15 = agentTarget("gemini");
 var TARGET_ID7 = TARGET15.id;
 var DISPLAY_NAME7 = TARGET15.displayName;
@@ -5747,9 +5776,9 @@ var AUTHENTICATION3 = "path-token";
 var GEMINI_OTEL_SOURCE_LIMITATION = "Gemini CLI has no documented OTLP header setting; FML uses an observer-local tokenized loopback path";
 function configPath3(context) {
   if (context.configPathOverride) {
-    return path24.resolve(context.configPathOverride);
+    return path25.resolve(context.configPathOverride);
   }
-  return path24.join(geminiConfigDirectory(context), "settings.json");
+  return path25.join(geminiConfigDirectory(context), "settings.json");
 }
 function managedTelemetry(context) {
   const destination = resolveDestination(context.observer);
@@ -5903,8 +5932,8 @@ var OTEL_INSTALLER_CAPABILITIES = Object.freeze([
 ]);
 
 // src/commands/otel-config-state.ts
-import fs10 from "fs";
-import path25 from "path";
+import fs11 from "fs";
+import path26 from "path";
 var OTEL_CONFIG_STATE_SCHEMA_VERSION = 1;
 function emptyState2() {
   return Object.freeze({
@@ -5918,12 +5947,12 @@ function invalidState2(statePath, reason) {
   );
 }
 function enforceOwnerOnlyMode(statePath) {
-  if (process.platform !== "win32") fs10.chmodSync(statePath, 384);
+  if (process.platform !== "win32") fs11.chmodSync(statePath, 384);
 }
 function readStateFile(statePath) {
   let stat;
   try {
-    stat = fs10.lstatSync(statePath);
+    stat = fs11.lstatSync(statePath);
   } catch (error) {
     if (error.code === "ENOENT") {
       return { kind: "missing" };
@@ -5941,7 +5970,7 @@ function readStateFile(statePath) {
   }
   try {
     enforceOwnerOnlyMode(statePath);
-    return { kind: "file", contents: fs10.readFileSync(statePath, "utf8") };
+    return { kind: "file", contents: fs11.readFileSync(statePath, "utf8") };
   } catch (error) {
     return {
       kind: "invalid",
@@ -5950,7 +5979,7 @@ function readStateFile(statePath) {
   }
 }
 function otelConfigStateEntryKey(targetId, configPath4) {
-  const resolved = path25.resolve(configPath4);
+  const resolved = path26.resolve(configPath4);
   const pathKey = process.platform === "win32" ? resolved.toLowerCase() : resolved;
   return `${targetId}\0${pathKey}`;
 }
@@ -5986,7 +6015,7 @@ function parseState2(source, statePath) {
     if (typeof observerRecord.baseUrl !== "string" || observerRecord.baseUrl.length === 0 || typeof observerRecord.authToken !== "string" || observerRecord.authToken.length === 0) {
       throw invalidState2(statePath, "contains an invalid observer destination");
     }
-    const resolvedPath = path25.resolve(entry.path);
+    const resolvedPath = path26.resolve(entry.path);
     const key = otelConfigStateEntryKey(entry.targetId, resolvedPath);
     if (keys.has(key)) {
       throw invalidState2(statePath, "contains duplicate entries");
@@ -6024,7 +6053,7 @@ function loadFmlOtelConfigState(statePath) {
 function serializeState2(entries) {
   const sorted = [...entries].map((entry) => ({
     targetId: entry.targetId,
-    path: path25.resolve(entry.path),
+    path: path26.resolve(entry.path),
     observer: {
       baseUrl: entry.observer.baseUrl,
       authToken: entry.observer.authToken
@@ -6061,7 +6090,7 @@ function isKnownOtelTargetId(targetId) {
 }
 
 // src/commands/otel-config.ts
-var DEFAULT_OTEL_CONFIG_STATE_PATH = path26.join(
+var DEFAULT_OTEL_CONFIG_STATE_PATH = path27.join(
   FML_DATA_DIR,
   "otel-config.json"
 );
@@ -6070,7 +6099,7 @@ function readLocalObserverOtelDestination(options) {
   if (!authToken) return null;
   try {
     const parsed = JSON.parse(
-      fs11.readFileSync(options.endpointFile, "utf8")
+      fs12.readFileSync(options.endpointFile, "utf8")
     );
     const endpoint = parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : null;
     const host = endpoint?.host;
@@ -6087,7 +6116,7 @@ function readLocalObserverOtelDestination(options) {
 function readOtelFile(filePath) {
   let stat;
   try {
-    stat = fs11.lstatSync(filePath);
+    stat = fs12.lstatSync(filePath);
   } catch (error) {
     if (error.code === "ENOENT") {
       return { path: filePath, kind: "missing" };
@@ -6116,7 +6145,7 @@ function readOtelFile(filePath) {
     return {
       path: filePath,
       kind: "file",
-      contents: fs11.readFileSync(filePath, "utf8")
+      contents: fs12.readFileSync(filePath, "utf8")
     };
   } catch (error) {
     return {
@@ -6138,7 +6167,7 @@ function assertMutationPrecondition2(mutation) {
   throw new Error(`configuration changed while planning ${mutation.path}`);
 }
 function applyMutation2(mutation) {
-  if (mutation.after === null) fs11.rmSync(mutation.path);
+  if (mutation.after === null) fs12.rmSync(mutation.path);
   else writeTextFileAtomic(mutation.path, mutation.after);
 }
 function enforceOwnerOnlyConfigPermissions(filePath) {
@@ -6151,7 +6180,7 @@ function enforceOwnerOnlyConfigPermissions(filePath) {
     );
   }
   try {
-    fs11.chmodSync(filePath, 384);
+    fs12.chmodSync(filePath, 384);
   } catch (error) {
     const detail = error instanceof Error ? error.message : String(error);
     throw new Error(
@@ -6246,7 +6275,7 @@ function plannerContext3(observer, options, configPathOverride, configOwnershipR
     observer,
     homeDir: options.homeDir ?? os6.homedir(),
     env: options.env ?? process.env,
-    ...configPathOverride ? { configPathOverride: path26.resolve(configPathOverride) } : {},
+    ...configPathOverride ? { configPathOverride: path27.resolve(configPathOverride) } : {},
     ...configOwnershipRecorded ? { configOwnershipRecorded: true } : {},
     readFile: readOtelFile
   };
@@ -6289,7 +6318,7 @@ function commitStateEntry(state, key, next) {
 function stateEntry(plan, observer) {
   return Object.freeze({
     targetId: plan.targetId,
-    path: path26.resolve(plan.configPath),
+    path: path27.resolve(plan.configPath),
     observer: Object.freeze({
       baseUrl: observer.baseUrl,
       authToken: observer.authToken
@@ -6633,6 +6662,13 @@ async function handleSyncEnable(opts = {}) {
     if (observer.status === "already_running") {
       await wakeObserverSync();
     }
+    const loss = takeUnreportedInboxLoss();
+    if (loss && !opts.json) {
+      const lastAt = loss.lastAtMs ? ` (last at ${new Date(loss.lastAtMs).toISOString()})` : "";
+      console.warn(
+        `Warning: ${loss.entries} hook event(s) (${formatBytes(loss.bytes)}) were lost: the hook inbox was full and no FML observer was running to take them${lastAt}. Keep the observer running, or raise FML_HOOK_INBOX_MAX_BYTES, to avoid further loss.`
+      );
+    }
     const port = observer.runtime.health?.port;
     const authToken = port ? readObserverAuthToken(FML_OBSERVER_AUTH_TOKEN_FILE) : null;
     if (port && authToken) {
@@ -6650,7 +6686,8 @@ async function handleSyncEnable(opts = {}) {
         ok: true,
         sync: settings,
         observer,
-        ...observer.retainedLegacyDatabase ? { retainedLegacyDatabase: observer.retainedLegacyDatabase } : {}
+        ...observer.retainedLegacyDatabase ? { retainedLegacyDatabase: observer.retainedLegacyDatabase } : {},
+        ...loss ? { hookInboxLoss: loss } : {}
       });
     } else {
       const pid = observer.runtime.health?.pid;
@@ -6859,8 +6896,8 @@ async function canOpenBrowser() {
   if (process.env.CODESPACES) return false;
   if (process.env.REMOTE_CONTAINERS) return false;
   try {
-    const fs13 = await import("fs");
-    if (fs13.existsSync("/.dockerenv")) return false;
+    const fs14 = await import("fs");
+    if (fs14.existsSync("/.dockerenv")) return false;
   } catch {
   }
   return true;
@@ -7523,9 +7560,9 @@ async function handleSetup(dependencies = defaultDependencies, options = {}) {
 }
 
 // src/commands/uninstall.ts
-import fs12 from "fs";
+import fs13 from "fs";
 import os7 from "os";
-import path27 from "path";
+import path28 from "path";
 import readline from "readline/promises";
 var PURGE_WARNING = "This deletes FML credentials for ALL environments, logs, sync state, and every pending best-effort OTLP envelope.";
 function tryDisableHookCapture() {
@@ -7541,19 +7578,19 @@ function tryDisableHookCapture() {
   }
 }
 function resolvePreservedPaths(preservedFile) {
-  const logicalPath = path27.resolve(preservedFile);
+  const logicalPath = path28.resolve(preservedFile);
   try {
-    const canonicalPath = fs12.realpathSync(preservedFile);
+    const canonicalPath = fs13.realpathSync(preservedFile);
     return pathsAreSame(canonicalPath, logicalPath) ? [logicalPath] : [logicalPath, canonicalPath];
   } catch {
     return [logicalPath];
   }
 }
 function purgeDirectoryPreservingPaths(directory, preservedPaths, configuredRoot = false) {
-  const resolvedDirectory = path27.resolve(directory);
+  const resolvedDirectory = path28.resolve(directory);
   let directoryStats;
   try {
-    directoryStats = fs12.lstatSync(directory);
+    directoryStats = fs13.lstatSync(directory);
   } catch (error) {
     if (error.code === "ENOENT") return true;
     throw error;
@@ -7564,14 +7601,14 @@ function purgeDirectoryPreservingPaths(directory, preservedPaths, configuredRoot
       (preservedPath) => pathContains(resolvedDirectory, preservedPath)
     );
     if (!containsLogicalMarker) {
-      fs12.rmSync(directory, { force: true });
+      fs13.rmSync(directory, { force: true });
       return true;
     }
     return false;
   }
   const directoryPaths = [resolvedDirectory];
   try {
-    const canonicalDirectory = fs12.realpathSync(directory);
+    const canonicalDirectory = fs13.realpathSync(directory);
     if (!pathsAreSame(canonicalDirectory, resolvedDirectory)) {
       directoryPaths.push(canonicalDirectory);
     }
@@ -7583,26 +7620,26 @@ function purgeDirectoryPreservingPaths(directory, preservedPaths, configuredRoot
     )
   );
   if (!containsPreservedPath) {
-    fs12.rmSync(directory, { recursive: true, force: true });
+    fs13.rmSync(directory, { recursive: true, force: true });
     return true;
   }
   const isPreservedPath = directoryPaths.some(
     (directoryPath) => preservedPaths.some(
-      (preservedPath) => pathsAreSame(directoryPath, path27.resolve(preservedPath))
+      (preservedPath) => pathsAreSame(directoryPath, path28.resolve(preservedPath))
     )
   );
   if (isPreservedPath) return true;
   if (!directoryStats.isDirectory()) return false;
   let entries;
   try {
-    entries = fs12.readdirSync(directory);
+    entries = fs13.readdirSync(directory);
   } catch (error) {
     if (error.code === "ENOENT") return true;
     throw error;
   }
   let complete = true;
   for (const entry of entries) {
-    const entryPath = path27.join(directory, entry);
+    const entryPath = path28.join(directory, entry);
     if (!purgeDirectoryPreservingPaths(entryPath, preservedPaths, false)) {
       complete = false;
     }
@@ -7621,13 +7658,13 @@ function purgeDirectoryPreservingFiles(directory, preservedFiles) {
 }
 function finishCustomRootPurge(directory) {
   const marker = managedDirectoryMarker(directory);
-  fs12.rmSync(marker, { force: true });
+  fs13.rmSync(marker, { force: true });
   try {
-    fs12.rmdirSync(directory);
+    fs13.rmdirSync(directory);
   } catch (error) {
     if (error.code === "ENOENT") return;
     try {
-      fs12.writeFileSync(marker, FML_MANAGED_DIRECTORY_MARKER_CONTENT, {
+      fs13.writeFileSync(marker, FML_MANAGED_DIRECTORY_MARKER_CONTENT, {
         encoding: "utf8",
         flag: "wx",
         mode: 384
@@ -7725,7 +7762,7 @@ async function handleUninstall(opts) {
       return;
     }
     for (const root of purgeRoots) {
-      if (!fs12.existsSync(root.directory) && pathContains(root.directory, FML_OBSERVER_DIR)) {
+      if (!fs13.existsSync(root.directory) && pathContains(root.directory, FML_OBSERVER_DIR)) {
         prepareManagedDirectory(root);
       }
     }
@@ -7849,7 +7886,7 @@ async function handleUninstall(opts) {
       )
     );
   }
-  fs12.rmSync(paths.pluginCacheDir, { recursive: true, force: true });
+  fs13.rmSync(paths.pluginCacheDir, { recursive: true, force: true });
   const reportIntegrationWarning = (message) => {
     integrationsRemoved = false;
     console.warn(message.replace(/^warn:/u, "Warning:"));
@@ -8300,6 +8337,11 @@ async function handleStatus() {
         );
       }
     }
+    if (hookInbox.lostEntries > 0) {
+      console.log(
+        `  Inbox loss: ${hookInbox.lostEntries} record(s), ${formatBytes2(hookInbox.lostBytes)} refused with no observer to take them${hookInbox.lastLostAtMs !== void 0 ? ` (last at ${new Date(hookInbox.lastLostAtMs).toISOString()})` : ""}`
+      );
+    }
     if (hookInbox.retiredEntries > 0) {
       console.log(
         `  Inbox retired: ${hookInbox.retiredEntries} record(s), ${formatBytes2(hookInbox.retiredBytes)}`
@@ -8954,8 +8996,8 @@ async function handleConfigDetail(opts) {
 
 // src/commands/tools.ts
 import { readFileSync } from "fs";
-import path28 from "path";
-var pluginVersion = true ? "0.8.6+f7c7191d" : void 0;
+import path29 from "path";
+var pluginVersion = true ? "0.8.7+af45d2af" : void 0;
 async function getApi() {
   const api = await getAuthenticatedClient();
   if (!api) {
@@ -9062,7 +9104,7 @@ async function handleToolsCall(name, opts) {
   }
   const raw = opts.file ? (() => {
     try {
-      return readFileSync(path28.resolve(opts.file), "utf8");
+      return readFileSync(path29.resolve(opts.file), "utf8");
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
       console.error(`Could not read args file: ${msg}`);
@@ -9112,7 +9154,7 @@ if (process.argv.length <= 2 || process.argv.includes("--help") || process.argv.
   printBanner();
 }
 var program = new Command().name("fml").description("FML CLI and agent tools").version(
-  true ? "0.8.6+f7c7191d" : "dev"
+  true ? "0.8.7+af45d2af" : "dev"
 );
 function formatCommandInventory(cmd, prefix = "") {
   const name = prefix ? `${prefix} ${cmd.name()}` : cmd.name();