@lexq/cli 0.1.49 → 0.1.50

package/dist/index.js

@@ -315,6 +315,19 @@ function registerStatusCommand(program) {
   });
 }
 
+// src/types/constants.ts
+var MAX_ROUNDING_SCALE = 34;
+var MIN_TRAFFIC_RATE = 1;
+var MAX_TRAFFIC_RATE = 99;
+var REPLAY_WINDOW_MAX_RECORDS = 5e4;
+var PROFILE_SAMPLE_PERMILLE = 10;
+var LATENCY_WINDOW_MILLIS = 6e4;
+var TAIL_MIN_OBS = 3;
+var SLOW_MULTIPLIER = 10;
+var MIN_SAMPLES = 100;
+var MIN_COHORT_SIZE = 3;
+var PROFILE_DEFAULT_WINDOW_HOURS = 24;
+
 // src/commands/groups.ts
 import "commander";
 import dedent3 from "dedent";
@@ -528,11 +541,14 @@ ${data.length} total`);
           stop      Stop the test and revert to 100% live version
           adjust    Change the traffic percentage
 
-        The traffic rate (1-99) determines what percentage goes to the challenger.
+        The traffic rate (${MIN_TRAFFIC_RATE}-${MAX_TRAFFIC_RATE}) determines what percentage goes to the challenger.
         The remaining traffic continues to the current live version.
       `
   );
-  abTest.command("start").description("Start an A/B test").requiredOption("--group-id <groupId>", "Policy group ID").requiredOption("--version-id <versionId>", "Challenger version ID").requiredOption("--traffic-rate <rate>", "Traffic rate for challenger (1-99)").addHelpText(
+  abTest.command("start").description("Start an A/B test").requiredOption("--group-id <groupId>", "Policy group ID").requiredOption("--version-id <versionId>", "Challenger version ID").requiredOption(
+    "--traffic-rate <rate>",
+    `Traffic rate for challenger (${MIN_TRAFFIC_RATE}-${MAX_TRAFFIC_RATE})`
+  ).addHelpText(
     "after",
     dedent3`
 
@@ -590,7 +606,10 @@ ${data.length} total`);
       process.exit(1);
     }
   });
-  abTest.command("adjust").description("Adjust A/B test traffic rate").requiredOption("--group-id <groupId>", "Policy group ID").requiredOption("--traffic-rate <rate>", "New traffic rate (1-99)").addHelpText(
+  abTest.command("adjust").description("Adjust A/B test traffic rate").requiredOption("--group-id <groupId>", "Policy group ID").requiredOption(
+    "--traffic-rate <rate>",
+    `New traffic rate (${MIN_TRAFFIC_RATE}-${MAX_TRAFFIC_RATE})`
+  ).addHelpText(
     "after",
     dedent3`
 
@@ -2359,11 +2378,17 @@ var WebhookPayloadFormat = ["GENERIC", "SLACK"];
 var ms = (nanos) => nanos == null ? "\u2013" : (nanos / 1e6).toFixed(2);
 var msWithUnit = (nanos) => nanos == null ? "\u2013" : `${(nanos / 1e6).toFixed(2)}ms`;
 function registerProfileCommands(program) {
-  program.command("profile <groupId>").description("Per-rule latency profile with relative slow-rule flags").option("--rule <ruleId>", "Single-rule detail (distributions + 60s window series)").option("--version <versionId>", "Version to inspect (default: live version)").option("--from <instant>", "Window start, ISO-8601 instant (default: 24h ago)").option("--to <instant>", "Window end, ISO-8601 instant (default: now)").option("--cache <state>", "Cache dimension for the rule table: HIT | MISS (default: HIT)").addHelpText(
+  program.command("profile <groupId>").description("Per-rule latency profile with relative slow-rule flags").option(
+    "--rule <ruleId>",
+    `Single-rule detail (distributions + ${LATENCY_WINDOW_MILLIS / 1e3}s window series)`
+  ).option("--version <versionId>", "Version to inspect (default: live version)").option(
+    "--from <instant>",
+    `Window start, ISO-8601 instant (default: ${PROFILE_DEFAULT_WINDOW_HOURS}h ago)`
+  ).option("--to <instant>", "Window end, ISO-8601 instant (default: now)").option("--cache <state>", "Cache dimension for the rule table: HIT | MISS (default: HIT)").addHelpText(
     "after",
     dedent9`
 
-        Slow-rule judgment is relative only: flagged = p50 ≥ 10× the median of
+        Slow-rule judgment is relative only: flagged = p50 ≥ ${SLOW_MULTIPLIER}× the median of
         per-rule p50s within the group. Absolute ms thresholds are intentionally
         not supported. Each percentile is withheld (–) unless n×(1−q) ≥ 3 —
         p50 from n ≥ 6, p95 from n ≥ 60, p99 from n ≥ 300. TOTAL is recorded
@@ -2643,7 +2668,7 @@ function registerReplayCommands(program) {
       process.exit(1);
     }
   });
-  replay.command("start").description("Submit a window replay job (blast radius)").requiredOption("--version-id <versionId>", "Candidate version to re-evaluate against").requiredOption("--from <date>", "Window start date (yyyy-MM-dd)").requiredOption("--to <date>", "Window end date (yyyy-MM-dd)").option("--max-records <number>", "Sample cap (hard cap 50k)").addHelpText(
+  replay.command("start").description("Submit a window replay job (blast radius)").requiredOption("--version-id <versionId>", "Candidate version to re-evaluate against").requiredOption("--from <date>", "Window start date (yyyy-MM-dd)").requiredOption("--to <date>", "Window end date (yyyy-MM-dd)").option("--max-records <number>", `Sample cap (hard cap ${REPLAY_WINDOW_MAX_RECORDS / 1e3}k)`).addHelpText(
     "after",
     dedent11`
 
@@ -3594,7 +3619,7 @@ function registerRuleTools(server, callApi) {
           subsequent actions and subsequent winning rules still run. Enforcement is the caller's
           responsibility; the decision surfaces as the is_blocked fact.
 
-        RoundingOption (optional, MUTATE_FACT only): { scale: integer (0..34), mode?: "HALF_UP"|"HALF_DOWN"|"HALF_EVEN"|"FLOOR"|"CEILING"|"DOWN"|"UP" } mode defaults to HALF_UP. When omitted, calculator output is preserved at full precision (lossless).
+        RoundingOption (optional, MUTATE_FACT only): { scale: integer (0..${MAX_ROUNDING_SCALE}), mode?: "HALF_UP"|"HALF_DOWN"|"HALF_EVEN"|"FLOOR"|"CEILING"|"DOWN"|"UP" } mode defaults to HALF_UP. When omitted, calculator output is preserved at full precision (lossless).
       `,
       inputSchema: {
         groupId: z3.string().uuid().describe("Policy group ID"),
@@ -4172,7 +4197,7 @@ function registerAnalyticsTools(server, callApi) {
 
 // src/mcp/tools/profile.ts
 import { z as z7 } from "zod";
-var RELATIVE_THRESHOLD = "flagged = p50 \u2265 10\xD7 median of per-rule p50s within the group; absolute thresholds are intentionally not supported.";
+var RELATIVE_THRESHOLD = `flagged = p50 \u2265 ${SLOW_MULTIPLIER}\xD7 median of per-rule p50s within the group; absolute thresholds are intentionally not supported.`;
 function profileParams(opts) {
   const params = {};
   if (opts.versionId) params.versionId = opts.versionId;
@@ -4186,11 +4211,13 @@ function registerProfileTools(server, callApi) {
     "lexq_profile_overview",
     {
       title: "Group Latency Profile",
-      description: "Per-rule latency profile of a policy group over a time window: group TOTAL distribution split by cache state (HIT = compiled ruleset cache hit, MISS = deep-load + compile), a per-rule CONDITION/ACTION percentile table, and slow-rule flags. " + RELATIVE_THRESHOLD + " Every percentile is accompanied by its sample count n; a percentile is withheld (null) unless n\xD7(1\u2212q) \u2265 3 (p50 needs n \u2265 6, p95 n \u2265 60, p99 n \u2265 300 \u2014 display gate, separate from the n \u2265 100 judgment gate). Baselines report INSUFFICIENT_COHORT when fewer than 3 rules qualify. Rule detail comes from a deterministic 1% sample of calls; TOTAL is recorded for every call. Defaults: last 24h, live version, cacheState HIT.",
+      description: "Per-rule latency profile of a policy group over a time window: group TOTAL distribution split by cache state (HIT = compiled ruleset cache hit, MISS = deep-load + compile), a per-rule CONDITION/ACTION percentile table, and slow-rule flags. " + RELATIVE_THRESHOLD + ` Every percentile is accompanied by its sample count n; a percentile is withheld (null) unless n\xD7(1\u2212q) \u2265 ${TAIL_MIN_OBS} (p50 needs n \u2265 6, p95 n \u2265 60, p99 n \u2265 300 \u2014 display gate, separate from the n \u2265 ${MIN_SAMPLES} judgment gate). Baselines report INSUFFICIENT_COHORT when fewer than ${MIN_COHORT_SIZE} rules qualify. Rule detail comes from a deterministic ${PROFILE_SAMPLE_PERMILLE / 10}% sample of calls; TOTAL is recorded for every call. Defaults: last ${PROFILE_DEFAULT_WINDOW_HOURS}h, live version, cacheState HIT.`,
       inputSchema: {
         groupId: z7.string().uuid().describe("Policy group ID"),
         versionId: z7.string().uuid().optional().describe("Version to inspect (default: live version)"),
-        from: z7.string().optional().describe("Window start, ISO-8601 instant (e.g. 2026-07-01T00:00:00Z). Default: 24h ago"),
+        from: z7.string().optional().describe(
+          `Window start, ISO-8601 instant (e.g. 2026-07-01T00:00:00Z). Default: ${PROFILE_DEFAULT_WINDOW_HOURS}h ago`
+        ),
         to: z7.string().optional().describe("Window end, ISO-8601 instant. Default: now"),
         cacheState: z7.enum(["HIT", "MISS"]).optional().describe("Cache dimension for the rule table and judgment (default: HIT)")
       }
@@ -4203,12 +4230,14 @@ function registerProfileTools(server, callApi) {
     "lexq_profile_rule",
     {
       title: "Rule Latency Detail",
-      description: "Single-rule latency detail: merged phase \xD7 cacheState distributions plus a per-window time series (60s windows). Missing windows are genuine gaps \u2014 never interpolated. Series points carry each window's own values; percentiles in merged distributions are withheld (null) unless n\xD7(1\u2212q) \u2265 3 (p50 n \u2265 6, p95 n \u2265 60, p99 n \u2265 300). " + RELATIVE_THRESHOLD,
+      description: `Single-rule latency detail: merged phase \xD7 cacheState distributions plus a per-window time series (${LATENCY_WINDOW_MILLIS / 1e3}s windows). Missing windows are genuine gaps \u2014 never interpolated. Series points carry each window's own values; percentiles in merged distributions are withheld (null) unless n\xD7(1\u2212q) \u2265 ${TAIL_MIN_OBS} (p50 n \u2265 6, p95 n \u2265 60, p99 n \u2265 300). ` + RELATIVE_THRESHOLD,
       inputSchema: {
         groupId: z7.string().uuid().describe("Policy group ID"),
         ruleId: z7.string().uuid().describe("Rule ID (from lexq_profile_overview)"),
         versionId: z7.string().uuid().optional().describe("Version to inspect (default: live version)"),
-        from: z7.string().optional().describe("Window start, ISO-8601 instant. Default: 24h ago"),
+        from: z7.string().optional().describe(
+          `Window start, ISO-8601 instant. Default: ${PROFILE_DEFAULT_WINDOW_HOURS}h ago`
+        ),
         to: z7.string().optional().describe("Window end, ISO-8601 instant. Default: now")
       }
     },
@@ -4242,7 +4271,9 @@ function registerReplayTools(server, callApi) {
         candidateVersionId: z8.string().uuid().describe("Version to re-evaluate against"),
         from: z8.string().describe("Window start date (yyyy-MM-dd)"),
         to: z8.string().describe("Window end date (yyyy-MM-dd)"),
-        maxRecords: z8.number().int().min(1).optional().describe("Sample cap (server default applies; hard cap 50k)")
+        maxRecords: z8.number().int().min(1).optional().describe(
+          `Sample cap (server default applies; hard cap ${REPLAY_WINDOW_MAX_RECORDS / 1e3}k)`
+        )
       }
     },
     async ({ candidateVersionId, from, to, maxRecords }) => callApi("POST", "replay/jobs", { body: { candidateVersionId, from, to, maxRecords } })

package/dist/mcp/register.js

@@ -309,6 +309,17 @@ function registerVersionTools(server, callApi) {
   );
 }
 
+// src/types/constants.ts
+var MAX_ROUNDING_SCALE = 34;
+var REPLAY_WINDOW_MAX_RECORDS = 5e4;
+var PROFILE_SAMPLE_PERMILLE = 10;
+var LATENCY_WINDOW_MILLIS = 6e4;
+var TAIL_MIN_OBS = 3;
+var SLOW_MULTIPLIER = 10;
+var MIN_SAMPLES = 100;
+var MIN_COHORT_SIZE = 3;
+var PROFILE_DEFAULT_WINDOW_HOURS = 24;
+
 // src/mcp/tools/rules.ts
 import { z as z3 } from "zod";
 import dedent from "dedent";
@@ -401,7 +412,7 @@ function registerRuleTools(server, callApi) {
           subsequent actions and subsequent winning rules still run. Enforcement is the caller's
           responsibility; the decision surfaces as the is_blocked fact.
 
-        RoundingOption (optional, MUTATE_FACT only): { scale: integer (0..34), mode?: "HALF_UP"|"HALF_DOWN"|"HALF_EVEN"|"FLOOR"|"CEILING"|"DOWN"|"UP" } mode defaults to HALF_UP. When omitted, calculator output is preserved at full precision (lossless).
+        RoundingOption (optional, MUTATE_FACT only): { scale: integer (0..${MAX_ROUNDING_SCALE}), mode?: "HALF_UP"|"HALF_DOWN"|"HALF_EVEN"|"FLOOR"|"CEILING"|"DOWN"|"UP" } mode defaults to HALF_UP. When omitted, calculator output is preserved at full precision (lossless).
       `,
       inputSchema: {
         groupId: z3.string().uuid().describe("Policy group ID"),
@@ -979,7 +990,7 @@ function registerAnalyticsTools(server, callApi) {
 
 // src/mcp/tools/profile.ts
 import { z as z7 } from "zod";
-var RELATIVE_THRESHOLD = "flagged = p50 \u2265 10\xD7 median of per-rule p50s within the group; absolute thresholds are intentionally not supported.";
+var RELATIVE_THRESHOLD = `flagged = p50 \u2265 ${SLOW_MULTIPLIER}\xD7 median of per-rule p50s within the group; absolute thresholds are intentionally not supported.`;
 function profileParams(opts) {
   const params = {};
   if (opts.versionId) params.versionId = opts.versionId;
@@ -993,11 +1004,13 @@ function registerProfileTools(server, callApi) {
     "lexq_profile_overview",
     {
       title: "Group Latency Profile",
-      description: "Per-rule latency profile of a policy group over a time window: group TOTAL distribution split by cache state (HIT = compiled ruleset cache hit, MISS = deep-load + compile), a per-rule CONDITION/ACTION percentile table, and slow-rule flags. " + RELATIVE_THRESHOLD + " Every percentile is accompanied by its sample count n; a percentile is withheld (null) unless n\xD7(1\u2212q) \u2265 3 (p50 needs n \u2265 6, p95 n \u2265 60, p99 n \u2265 300 \u2014 display gate, separate from the n \u2265 100 judgment gate). Baselines report INSUFFICIENT_COHORT when fewer than 3 rules qualify. Rule detail comes from a deterministic 1% sample of calls; TOTAL is recorded for every call. Defaults: last 24h, live version, cacheState HIT.",
+      description: "Per-rule latency profile of a policy group over a time window: group TOTAL distribution split by cache state (HIT = compiled ruleset cache hit, MISS = deep-load + compile), a per-rule CONDITION/ACTION percentile table, and slow-rule flags. " + RELATIVE_THRESHOLD + ` Every percentile is accompanied by its sample count n; a percentile is withheld (null) unless n\xD7(1\u2212q) \u2265 ${TAIL_MIN_OBS} (p50 needs n \u2265 6, p95 n \u2265 60, p99 n \u2265 300 \u2014 display gate, separate from the n \u2265 ${MIN_SAMPLES} judgment gate). Baselines report INSUFFICIENT_COHORT when fewer than ${MIN_COHORT_SIZE} rules qualify. Rule detail comes from a deterministic ${PROFILE_SAMPLE_PERMILLE / 10}% sample of calls; TOTAL is recorded for every call. Defaults: last ${PROFILE_DEFAULT_WINDOW_HOURS}h, live version, cacheState HIT.`,
       inputSchema: {
         groupId: z7.string().uuid().describe("Policy group ID"),
         versionId: z7.string().uuid().optional().describe("Version to inspect (default: live version)"),
-        from: z7.string().optional().describe("Window start, ISO-8601 instant (e.g. 2026-07-01T00:00:00Z). Default: 24h ago"),
+        from: z7.string().optional().describe(
+          `Window start, ISO-8601 instant (e.g. 2026-07-01T00:00:00Z). Default: ${PROFILE_DEFAULT_WINDOW_HOURS}h ago`
+        ),
         to: z7.string().optional().describe("Window end, ISO-8601 instant. Default: now"),
         cacheState: z7.enum(["HIT", "MISS"]).optional().describe("Cache dimension for the rule table and judgment (default: HIT)")
       }
@@ -1010,12 +1023,14 @@ function registerProfileTools(server, callApi) {
     "lexq_profile_rule",
     {
       title: "Rule Latency Detail",
-      description: "Single-rule latency detail: merged phase \xD7 cacheState distributions plus a per-window time series (60s windows). Missing windows are genuine gaps \u2014 never interpolated. Series points carry each window's own values; percentiles in merged distributions are withheld (null) unless n\xD7(1\u2212q) \u2265 3 (p50 n \u2265 6, p95 n \u2265 60, p99 n \u2265 300). " + RELATIVE_THRESHOLD,
+      description: `Single-rule latency detail: merged phase \xD7 cacheState distributions plus a per-window time series (${LATENCY_WINDOW_MILLIS / 1e3}s windows). Missing windows are genuine gaps \u2014 never interpolated. Series points carry each window's own values; percentiles in merged distributions are withheld (null) unless n\xD7(1\u2212q) \u2265 ${TAIL_MIN_OBS} (p50 n \u2265 6, p95 n \u2265 60, p99 n \u2265 300). ` + RELATIVE_THRESHOLD,
       inputSchema: {
         groupId: z7.string().uuid().describe("Policy group ID"),
         ruleId: z7.string().uuid().describe("Rule ID (from lexq_profile_overview)"),
         versionId: z7.string().uuid().optional().describe("Version to inspect (default: live version)"),
-        from: z7.string().optional().describe("Window start, ISO-8601 instant. Default: 24h ago"),
+        from: z7.string().optional().describe(
+          `Window start, ISO-8601 instant. Default: ${PROFILE_DEFAULT_WINDOW_HOURS}h ago`
+        ),
         to: z7.string().optional().describe("Window end, ISO-8601 instant. Default: now")
       }
     },
@@ -1049,7 +1064,9 @@ function registerReplayTools(server, callApi) {
         candidateVersionId: z8.string().uuid().describe("Version to re-evaluate against"),
         from: z8.string().describe("Window start date (yyyy-MM-dd)"),
         to: z8.string().describe("Window end date (yyyy-MM-dd)"),
-        maxRecords: z8.number().int().min(1).optional().describe("Sample cap (server default applies; hard cap 50k)")
+        maxRecords: z8.number().int().min(1).optional().describe(
+          `Sample cap (server default applies; hard cap ${REPLAY_WINDOW_MAX_RECORDS / 1e3}k)`
+        )
       }
     },
     async ({ candidateVersionId, from, to, maxRecords }) => callApi("POST", "replay/jobs", { body: { candidateVersionId, from, to, maxRecords } })

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lexq/cli",
-  "version": "0.1.49",
+  "version": "0.1.50",
   "description": "LexQ CLI — manage policies, simulate rules, and deploy from the terminal. Built for humans and AI agents.",
   "type": "module",
   "bin": {
@@ -29,6 +29,7 @@
     "typecheck": "tsc --noEmit",
     "enums": "node scripts/gen-enums.mjs",
     "enums:check": "node scripts/gen-enums.mjs --check",
+    "constants:check": "node scripts/check-constants.mjs",
     "start": "node dist/index.js",
     "test:decimals": "pnpm build && node tests/exact-decimals.mjs",
     "prepublishOnly": "pnpm build",