@merittdev/horus 0.1.16 → 0.1.18

package/dist/index.cjs

@@ -50314,7 +50314,7 @@ init_cjs_shims();
 
 // ../../packages/core/src/version.ts
 init_cjs_shims();
-var HORUS_VERSION = true ? "0.1.16" : "dev";
+var HORUS_VERSION = true ? "0.1.18" : "dev";
 var PINNED_AXON_VERSION = "1.0.7";
 var PINNED_SOURCE_VERSION = PINNED_AXON_VERSION;
 
@@ -59087,7 +59087,7 @@ function sql(strings, ...params) {
     return new SQL([new StringChunk(str)]);
   }
   sql2.raw = raw;
-  function join5(chunks, separator) {
+  function join7(chunks, separator) {
     const result = [];
     for (const [i, chunk] of chunks.entries()) {
       if (i > 0 && separator !== void 0) {
@@ -59097,7 +59097,7 @@ function sql(strings, ...params) {
     }
     return new SQL(result);
   }
-  sql2.join = join5;
+  sql2.join = join7;
   function identifier(value) {
     return new Name(value);
   }
@@ -62688,7 +62688,7 @@ var PgSelectQueryBuilderBase = class extends TypedQueryBuilder {
     return (table, on) => {
       const baseTableName = this.tableName;
       const tableName = getTableLikeName(table);
-      if (typeof tableName === "string" && this.config.joins?.some((join5) => join5.alias === tableName)) {
+      if (typeof tableName === "string" && this.config.joins?.some((join7) => join7.alias === tableName)) {
         throw new Error(`Alias "${tableName}" is already used in this query`);
       }
       if (!this.isPartialSelect) {
@@ -63700,7 +63700,7 @@ var PgUpdateBase = class extends QueryPromise {
   createJoin(joinType) {
     return (table, on) => {
       const tableName = getTableLikeName(table);
-      if (typeof tableName === "string" && this.config.joins.some((join5) => join5.alias === tableName)) {
+      if (typeof tableName === "string" && this.config.joins.some((join7) => join7.alias === tableName)) {
         throw new Error(`Alias "${tableName}" is already used in this query`);
       }
       if (typeof on === "function") {
@@ -63796,10 +63796,10 @@ var PgUpdateBase = class extends QueryPromise {
           const fromFields = this.getTableLikeFields(this.config.from);
           fields[tableName] = fromFields;
         }
-        for (const join5 of this.config.joins) {
-          const tableName2 = getTableLikeName(join5.table);
-          if (typeof tableName2 === "string" && !is(join5.table, SQL)) {
-            const fromFields = this.getTableLikeFields(join5.table);
+        for (const join7 of this.config.joins) {
+          const tableName2 = getTableLikeName(join7.table);
+          if (typeof tableName2 === "string" && !is(join7.table, SQL)) {
+            const fromFields = this.getTableLikeFields(join7.table);
             fields[tableName2] = fromFields;
           }
         }
@@ -72938,22 +72938,22 @@ function extractQueueGraph(input) {
     }
   }
   const producers = [];
-  for (const pc35 of input.producerClasses) {
-    for (const m of pc35.content.matchAll(INJECT_QUEUE_RE)) {
+  for (const pc37 of input.producerClasses) {
+    for (const m of pc37.content.matchAll(INJECT_QUEUE_RE)) {
       const queue = m[1] ?? "";
-      if (queue) producers.push({ queue, symbol: pc35.name, file: pc35.filePath });
+      if (queue) producers.push({ queue, symbol: pc37.name, file: pc37.filePath });
     }
-    for (const m of pc35.content.matchAll(NEW_BULL_RE)) {
+    for (const m of pc37.content.matchAll(NEW_BULL_RE)) {
       if (m[2] !== "Queue") continue;
       const queue = resolveArg(m[3] ?? "", constMap);
       if (queue) {
-        producers.push({ queue, symbol: (m[1] ?? pc35.name) || baseName(pc35.filePath), file: pc35.filePath });
+        producers.push({ queue, symbol: (m[1] ?? pc37.name) || baseName(pc37.filePath), file: pc37.filePath });
       }
     }
-    for (const m of pc35.content.matchAll(QUEUE_NAME_CONST_RE)) {
+    for (const m of pc37.content.matchAll(QUEUE_NAME_CONST_RE)) {
       const ident = m[1] ?? "";
       const queue = m[2] ?? "";
-      if (queue) producers.push({ queue, symbol: ident || baseName(pc35.filePath), file: pc35.filePath });
+      if (queue) producers.push({ queue, symbol: ident || baseName(pc37.filePath), file: pc37.filePath });
     }
   }
   const workers = [];
@@ -77899,6 +77899,325 @@ async function runReadiness(opts) {
   return blockingFails.length > 0 ? 1 : 0;
 }
 
+// ../../packages/cli/src/commands/skill.ts
+init_cjs_shims();
+var import_node_fs9 = require("fs");
+var import_node_path11 = require("path");
+var import_node_os2 = require("os");
+var import_picocolors35 = __toESM(require_picocolors(), 1);
+var SUPPORTED_TARGETS = ["claude", "codex", "gemini", "cursor", "generic"];
+function isValidTarget(target) {
+  return SUPPORTED_TARGETS.includes(target);
+}
+function getSkillInstallPath(target, opts) {
+  const base2 = opts.global ? (0, import_node_os2.homedir)() : opts.cwd ?? process.cwd();
+  if (target === "claude") {
+    return (0, import_node_path11.join)(base2, ".claude", "skills", "horus.md");
+  }
+  return (0, import_node_path11.join)(base2, ".horus", "skills", `horus-${target}.md`);
+}
+var BASE_SKILL = `# Horus Incident Investigation Skill
+
+When investigating a production issue in a repo with Horus configured, use Horus before guessing.
+
+## When to use Horus
+
+Use Horus when the user asks:
+- why something is broken, slow, or failing
+- about a production incident or outage
+- what changed recently
+- who owns a component or service
+- about blast radius or impact of a change
+- about queues, workers, Redis/BullMQ, logs, metrics, MongoDB state, or source paths
+- to verify a fix or check for regressions after a change
+
+## Getting started
+
+\`\`\`bash
+horus status
+horus explain <symbol-or-hint>
+horus investigate "<incident hint>"
+\`\`\`
+
+## Runtime evidence
+
+\`\`\`bash
+horus logs [service]
+horus state
+horus metrics "<hint>"
+horus queues --live
+\`\`\`
+
+## Source reasoning
+
+\`\`\`bash
+horus blast-radius <symbol>
+horus owner <symbol>
+horus changes <base> [compare]
+horus timeline
+horus what-changed
+\`\`\`
+
+## Saved investigations
+
+\`\`\`bash
+horus replay <id>
+horus ask <id> "what evidence is missing?"
+horus ask <id> "what evidence contradicts <hypothesis>?"
+horus postmortem <id>
+horus score <id>
+\`\`\`
+
+## Rules
+
+- Treat Horus evidence as grounded but not infallible.
+- Mention when Horus evidence is missing, stale, ambient, or not structurally linked.
+- Do not invent runtime evidence Horus did not collect.
+- Prefer exact source locations from Horus over guesses.
+- If Horus output conflicts with filesystem or source inspection, report the discrepancy.
+- For write or fix tasks, use Horus to validate blast radius and rerun relevant checks after changes.
+- Horus is read-only evidence collection \u2014 never use Horus to mutate production systems.
+- Do not hallucinate evidence. If Horus returns nothing, say so explicitly.
+`;
+var CLAUDE_SUFFIX = `## Claude Code notes
+
+This skill is loaded automatically when present at \`.claude/skills/horus.md\`.
+
+Useful starting points:
+- \`horus investigations\` \u2014 list saved investigation IDs
+- \`horus doctor\` \u2014 check system health
+- \`horus onboard [area]\` \u2014 get oriented in a new codebase area
+`;
+function generateSkillContent(target) {
+  if (target === "claude") {
+    return BASE_SKILL + "\n" + CLAUDE_SUFFIX;
+  }
+  return BASE_SKILL;
+}
+async function runSkillInstall(target, opts) {
+  const log = opts.write ?? ((line2) => console.log(line2));
+  if (!isValidTarget(target)) {
+    log(`${import_picocolors35.default.red("\u2717")} Unknown target: ${import_picocolors35.default.bold(target)}`);
+    log(import_picocolors35.default.dim(`  Supported targets: ${SUPPORTED_TARGETS.join(", ")}`));
+    return 1;
+  }
+  const outPath = getSkillInstallPath(target, { global: opts.global, cwd: opts.cwd });
+  const content = generateSkillContent(target);
+  if ((0, import_node_fs9.existsSync)(outPath) && !opts.force) {
+    log(`${import_picocolors35.default.red("\u2717")} ${outPath} already exists`);
+    log(import_picocolors35.default.dim("  pass --force to overwrite"));
+    return 1;
+  }
+  try {
+    (0, import_node_fs9.mkdirSync)((0, import_node_path11.dirname)(outPath), { recursive: true });
+    (0, import_node_fs9.writeFileSync)(outPath, content, "utf8");
+  } catch (err) {
+    log(`${import_picocolors35.default.red("\u2717")} Could not write ${outPath}: ${err.message}`);
+    return 1;
+  }
+  log(`${import_picocolors35.default.green("\u2713")} Horus skill installed \u2192 ${outPath}`);
+  if (target === "claude") {
+    log(import_picocolors35.default.dim("  Claude Code will load this skill automatically."));
+    log(import_picocolors35.default.dim("  Invoke it with: /horus"));
+  } else {
+    log(import_picocolors35.default.dim(`  Copy or reference this file in your ${target} agent instructions.`));
+  }
+  return 0;
+}
+async function runSkillPrint(target, opts) {
+  const log = opts.write ?? ((line2) => console.log(line2));
+  if (!isValidTarget(target)) {
+    log(`${import_picocolors35.default.red("\u2717")} Unknown target: ${import_picocolors35.default.bold(target)}`);
+    log(import_picocolors35.default.dim(`  Supported targets: ${SUPPORTED_TARGETS.join(", ")}`));
+    return 1;
+  }
+  process.stdout.write(generateSkillContent(target));
+  return 0;
+}
+async function runSkillPath(target, opts) {
+  const log = opts.write ?? ((line2) => console.log(line2));
+  if (!isValidTarget(target)) {
+    log(`${import_picocolors35.default.red("\u2717")} Unknown target: ${import_picocolors35.default.bold(target)}`);
+    log(import_picocolors35.default.dim(`  Supported targets: ${SUPPORTED_TARGETS.join(", ")}`));
+    return 1;
+  }
+  const outPath = getSkillInstallPath(target, { global: opts.global, cwd: opts.cwd });
+  log(outPath);
+  return 0;
+}
+
+// ../../packages/cli/src/commands/update.ts
+init_cjs_shims();
+var import_node_fs10 = require("fs");
+var import_node_path12 = require("path");
+var import_node_os3 = require("os");
+var import_node_crypto2 = require("crypto");
+var import_picocolors36 = __toESM(require_picocolors(), 1);
+var RELEASES_API = "https://api.github.com/repos/meritt-dev/horus/releases/latest";
+function parseVersion(v) {
+  const m = v.replace(/^v/, "").match(/^(\d+)\.(\d+)\.(\d+)/);
+  if (!m) throw new Error(`Cannot parse version: ${v}`);
+  return [+m[1], +m[2], +m[3]];
+}
+function isNewer(candidate, current) {
+  const [cam, can, cap] = parseVersion(candidate);
+  const [cum, cun, cup] = parseVersion(current);
+  if (cam !== cum) return cam > cum;
+  if (can !== cun) return can > cun;
+  return cap > cup;
+}
+async function fetchLatestRelease(_fetch = fetch) {
+  const res = await _fetch(RELEASES_API, {
+    headers: {
+      "User-Agent": `horus/${HORUS_VERSION}`,
+      Accept: "application/vnd.github.v3+json"
+    }
+  });
+  if (!res.ok) throw new Error(`GitHub API responded ${res.status}`);
+  return res.json();
+}
+function sha256hex(buf) {
+  return (0, import_node_crypto2.createHash)("sha256").update(buf).digest("hex");
+}
+function resolveBinaryPath() {
+  const raw = process.argv[1];
+  if (!raw) throw new Error("Cannot determine binary path from process.argv[1]");
+  try {
+    return (0, import_node_fs10.realpathSync)(raw);
+  } catch {
+    return raw;
+  }
+}
+async function runUpdate(opts) {
+  const write = opts.write ?? ((l) => console.log(l));
+  const _fetch = opts._fetch ?? fetch;
+  const currentVersion = opts._currentVersion ?? HORUS_VERSION;
+  write(`
+${import_picocolors36.default.bold("Horus update")}
+`);
+  write(`  Current version: ${import_picocolors36.default.cyan(currentVersion)}`);
+  let release;
+  try {
+    release = await fetchLatestRelease(_fetch);
+  } catch (e) {
+    write(`  ${import_picocolors36.default.red("\u2717")} Could not reach GitHub: ${e.message}`);
+    return 1;
+  }
+  const latest = release.tag_name.replace(/^v/, "");
+  write(`  Latest version:  ${import_picocolors36.default.cyan(latest)}`);
+  const newer = isNewer(latest, currentVersion);
+  if (opts.check) {
+    if (newer) {
+      write(`
+  ${import_picocolors36.default.yellow("\u2192")} ${import_picocolors36.default.bold(latest)} is available.`);
+      write(`    Run ${import_picocolors36.default.bold("horus update")} to upgrade.`);
+    } else {
+      write(`
+  ${import_picocolors36.default.green("\u2713")} Already on the latest version.`);
+    }
+    return 0;
+  }
+  if (!newer && !opts.force) {
+    write(`
+  ${import_picocolors36.default.green("\u2713")} Already on the latest version.`);
+    return 0;
+  }
+  const tag = release.tag_name;
+  const assetName = `horus-${tag}`;
+  const checksumName = `${assetName}.sha256`;
+  const binaryAsset = release.assets.find((a) => a.name === assetName);
+  const checksumAsset = release.assets.find((a) => a.name === checksumName);
+  if (!binaryAsset) {
+    write(`  ${import_picocolors36.default.red("\u2717")} Release ${tag} has no binary asset named '${assetName}'.`);
+    write(`    Fallback: ${import_picocolors36.default.dim("curl -fsSL https://horus.sh/install.sh | bash")}`);
+    return 1;
+  }
+  write(`
+  Downloading ${assetName}...`);
+  const binRes = await _fetch(binaryAsset.browser_download_url, {
+    headers: { "User-Agent": `horus/${HORUS_VERSION}` },
+    redirect: "follow"
+  });
+  if (!binRes.ok || !binRes.body) {
+    write(`  ${import_picocolors36.default.red("\u2717")} Download failed: ${binRes.status}`);
+    return 1;
+  }
+  const binBuf = Buffer.from(await binRes.arrayBuffer());
+  if (checksumAsset) {
+    const csRes = await _fetch(checksumAsset.browser_download_url, {
+      headers: { "User-Agent": `horus/${HORUS_VERSION}` },
+      redirect: "follow"
+    });
+    if (csRes.ok) {
+      const csText = await csRes.text();
+      const expectedHash = csText.trim().split(/\s+/)[0];
+      const actualHash = sha256hex(binBuf);
+      if (expectedHash !== actualHash) {
+        write(`  ${import_picocolors36.default.red("\u2717")} Checksum mismatch \u2014 download may be corrupt.`);
+        write(`    Expected: ${expectedHash}`);
+        write(`    Got:      ${actualHash}`);
+        return 1;
+      }
+      write(`  ${import_picocolors36.default.green("\u2713")} Checksum verified.`);
+    }
+  }
+  let binaryPath;
+  try {
+    binaryPath = resolveBinaryPath();
+  } catch (e) {
+    write(`  ${import_picocolors36.default.red("\u2717")} ${e.message}`);
+    return 1;
+  }
+  if (!(0, import_node_fs10.existsSync)(binaryPath)) {
+    write(`  ${import_picocolors36.default.red("\u2717")} Binary not found at ${binaryPath}`);
+    return 1;
+  }
+  const tmpPath = (0, import_node_path12.join)((0, import_node_os3.tmpdir)(), `horus-update-${tag}-${process.pid}`);
+  const backupPath = `${binaryPath}.bak`;
+  try {
+    (0, import_node_fs10.writeFileSync)(tmpPath, binBuf, { mode: 493 });
+  } catch (e) {
+    write(`  ${import_picocolors36.default.red("\u2717")} Could not write to temp dir: ${e.message}`);
+    return 1;
+  }
+  try {
+    (0, import_node_fs10.renameSync)(binaryPath, backupPath);
+    try {
+      (0, import_node_fs10.renameSync)(tmpPath, binaryPath);
+      (0, import_node_fs10.chmodSync)(binaryPath, 493);
+    } catch (e) {
+      try {
+        (0, import_node_fs10.renameSync)(backupPath, binaryPath);
+      } catch {
+      }
+      throw e;
+    }
+    try {
+      (0, import_node_fs10.unlinkSync)(backupPath);
+    } catch {
+    }
+  } catch (e) {
+    try {
+      (0, import_node_fs10.unlinkSync)(tmpPath);
+    } catch {
+    }
+    const msg = e.message ?? String(e);
+    const needsSudo = e.code === "EACCES" || e.code === "EPERM";
+    write(`  ${import_picocolors36.default.red("\u2717")} Could not replace binary at ${binaryPath}: ${msg}`);
+    if (needsSudo) {
+      write(`
+  Try with sudo:`);
+      write(
+        `    ${import_picocolors36.default.dim(`sudo curl -fsSL https://github.com/meritt-dev/horus/releases/download/${tag}/${assetName} -o ${binaryPath} && sudo chmod +x ${binaryPath}`)}`
+      );
+    }
+    return 1;
+  }
+  write(`  ${import_picocolors36.default.green("\u2713")} Updated: ${import_picocolors36.default.bold(currentVersion)} \u2192 ${import_picocolors36.default.bold(latest)}`);
+  write(`  ${import_picocolors36.default.dim(binaryPath)}`);
+  return 0;
+}
+
 // ../../packages/cli/src/index.ts
 function buildProgram() {
   const program2 = new Command();
@@ -78211,6 +78530,44 @@ Examples:
       process.exitCode = await runMetrics(hint, opts);
     }
   );
+  const skill = program2.command("skill").description("Manage the Horus agent skill \u2014 install playbooks that teach agents to use Horus as their evidence layer");
+  skill.command("install <target>").description("Install the Horus skill for a coding agent (claude | codex | gemini | cursor | generic)").option("--force", "overwrite an existing skill file").option("--global", "install into the home directory instead of the current repo").action(async (target, opts) => {
+    process.exitCode = await runSkillInstall(target, { force: opts.force, global: opts.global });
+  }).addHelpText("after", `
+Targets:
+  claude   \u2192 .claude/skills/horus.md  (Claude Code \u2014 loaded automatically)
+  codex    \u2192 .horus/skills/horus-codex.md
+  gemini   \u2192 .horus/skills/horus-gemini.md
+  cursor   \u2192 .horus/skills/horus-cursor.md
+  generic  \u2192 .horus/skills/horus-generic.md
+
+Examples:
+  horus skill install claude
+  horus skill install generic --force
+  horus skill install claude --global
+`);
+  skill.command("print <target>").description("Print the Horus skill to stdout \u2014 copy it into any agent setup").action(async (target) => {
+    process.exitCode = await runSkillPrint(target, {});
+  }).addHelpText("after", `
+Examples:
+  horus skill print generic
+  horus skill print claude
+`);
+  skill.command("path <target>").description("Print the install path for the given target").option("--global", "show the global (home directory) path").action(async (target, opts) => {
+    process.exitCode = await runSkillPath(target, { global: opts.global });
+  }).addHelpText("after", `
+Examples:
+  horus skill path claude
+  horus skill path generic --global
+`);
+  program2.command("update").description("Update Horus to the latest release from GitHub").option("--check", "check for a newer version without downloading").option("--force", "re-download even if already on the latest version").action(async (opts) => {
+    process.exitCode = await runUpdate({ check: opts.check, force: opts.force });
+  }).addHelpText("after", `
+Examples:
+  horus update              # update to latest
+  horus update --check      # check without installing
+  horus update --force      # re-download current version
+`);
   return program2;
 }
 async function run(argv = process.argv) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@merittdev/horus",
-  "version": "0.1.16",
+  "version": "0.1.18",
   "description": "Local-first, source-aware production-incident investigation engine",
   "type": "module",
   "bin": {