@pretense/cli 0.6.26 → 0.6.27

package/dist/{chunk-ZSQPYJVT.js → chunk-6L7NU7KI.js}

@@ -17,7 +17,7 @@ function versionFromPackageJson() {
     return void 0;
   }
 }
-var PRETENSE_VERSION = (true ? "0.6.26" : void 0) ?? versionFromPackageJson() ?? "0.0.0-unknown";
+var PRETENSE_VERSION = (true ? "0.6.27" : void 0) ?? versionFromPackageJson() ?? "0.0.0-unknown";
 
 export {
   PRETENSE_VERSION

package/dist/index.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   PRETENSE_VERSION
-} from "./chunk-ZSQPYJVT.js";
+} from "./chunk-6L7NU7KI.js";
 import {
   __commonJS,
   __toESM,
@@ -7837,7 +7837,9 @@ import { execSync } from "child_process";
 
 // ../apps/proxy/dist/server.js
 init_esm_shims();
-import { resolve as resolvePath } from "path";
+import { resolve as resolvePath, join as joinPath } from "path";
+import { existsSync as existsSync24, readFileSync as readFileSync33 } from "fs";
+import { homedir as homedir3 } from "os";
 
 // ../node_modules/.pnpm/hono@4.12.9/node_modules/hono/dist/index.js
 init_esm_shims();
@@ -16657,11 +16659,11 @@ function versionFromCliPackageJson() {
   return void 0;
 }
 function productVersion() {
-  return override ?? (true ? "0.6.26" : void 0) ?? versionFromCliPackageJson() ?? "0.0.0-unknown";
+  return override ?? (true ? "0.6.27" : void 0) ?? versionFromCliPackageJson() ?? "0.0.0-unknown";
 }
 var UNKNOWN_COMMIT = "unknown";
 function bakedCommitSha() {
-  return "91077fab39006ac43c0256257c895b5534640e17".length > 0 ? "91077fab39006ac43c0256257c895b5534640e17" : UNKNOWN_COMMIT;
+  return "2899946100b26294eb8ef8dbde2d50e63a5247a9".length > 0 ? "2899946100b26294eb8ef8dbde2d50e63a5247a9" : UNKNOWN_COMMIT;
 }
 var FEATURE_TIERS = {
   compliance_export: "pro",
@@ -17104,7 +17106,13 @@ async function streamWithRollingBuffer(upstreamResp, map, provider, requestId) {
             if (provider === "anthropic" && line.includes("content_block_stop")) {
               const stopIndex = blockStopIndex(line);
               if (stopIndex !== null) {
-                outputLines.push(...flushBlock(stopIndex), line);
+                const flushed = flushBlock(stopIndex);
+                if (flushed.length > 0) {
+                  const header = outputLines.length > 0 && outputLines[outputLines.length - 1].startsWith("event:") ? outputLines.pop() : null;
+                  outputLines.push(...flushed);
+                  if (header !== null) outputLines.push(header);
+                }
+                outputLines.push(line);
                 continue;
               }
             }
@@ -17165,7 +17173,7 @@ async function streamWithRollingBuffer(upstreamResp, map, provider, requestId) {
 function buildFlushEvent(text, provider, kind, index) {
   if (provider === "anthropic") {
     const delta2 = kind === "input_json" ? { type: "input_json_delta", partial_json: text } : kind === "thinking" ? { type: "thinking_delta", thinking: text } : { type: "text_delta", text };
-    return "data: " + JSON.stringify({ type: "content_block_delta", index, delta: delta2 });
+    return "event: content_block_delta\ndata: " + JSON.stringify({ type: "content_block_delta", index, delta: delta2 });
   }
   if (provider === "google") {
     const part = kind === "google_thought" ? { text, thought: true } : { text };
@@ -17357,6 +17365,37 @@ var _tierCache = /* @__PURE__ */ new Map();
 var TIER_CACHE_OK_MS = 6e4;
 var TIER_CACHE_FAIL_MS = 1e4;
 var TIER_VALIDATE_TIMEOUT_MS = 3e3;
+var LOCAL_KEY_CACHE_MS = 3e4;
+var _localKeyCache = null;
+function underTestRunner() {
+  return Boolean(process.env["VITEST"]) || process.env["NODE_ENV"] === "test";
+}
+function readLocalPretenseApiKey() {
+  const now = Date.now();
+  if (_localKeyCache && _localKeyCache.expiresAt > now) return _localKeyCache.key;
+  let key = null;
+  const fromEnv = process.env["PRETENSE_API_KEY"]?.trim();
+  if (fromEnv) {
+    key = fromEnv;
+  } else if (!underTestRunner()) {
+    const path2 = joinPath(homedir3(), ".pretense", "credentials.json");
+    try {
+      if (existsSync24(path2)) {
+        const creds = JSON.parse(readFileSync33(path2, "utf-8"));
+        const raw2 = creds["apiKey"] ?? creds["api_key"];
+        if (typeof raw2 === "string" && raw2.trim().length > 0) key = raw2.trim();
+      }
+    } catch {
+    }
+  }
+  _localKeyCache = { key, expiresAt: now + LOCAL_KEY_CACHE_MS };
+  return key;
+}
+function resolvePretenseKeyForRequest(headerKey) {
+  const explicit = headerKey?.trim();
+  if (explicit) return explicit;
+  return readLocalPretenseApiKey() ?? void 0;
+}
 function tierApiRoot() {
   const raw2 = (process.env["PRETENSE_API_URL"] ?? "https://api.pretense.ai").trim();
   const normalized = /^https?:\/\//i.test(raw2) ? raw2 : `https://${raw2}`;
@@ -17832,7 +17871,7 @@ function createProxy(opts = {}) {
       return c.json({ error: { type: "invalid_request", message: "Empty request body" } }, 400);
     }
     {
-      const _apiKey = c.req.header("x-pretense-api-key") ?? c.req.header("authorization")?.replace(/^Bearer\s+/i, "");
+      const _apiKey = resolvePretenseKeyForRequest(c.req.header("x-pretense-api-key"));
       const _effectiveTier = await resolveKeyTier(_apiKey);
       const _requestEnforcer = new PlanEnforcer(_effectiveTier, planCfg.tenantId);
       const QUOTA_PERIOD_DAYS3 = 7;
@@ -18240,7 +18279,7 @@ ${_upgradeTier === "enterprise" ? "Enterprise offers unlimited mutations \u2014
       sourceIp: c.req.header("x-forwarded-for") ?? c.req.header("x-real-ip")
     }));
     if (anyTokenized) {
-      const usageKey = c.req.header("x-pretense-api-key") ?? c.req.header("authorization")?.replace(/^Bearer\s+/i, "");
+      const usageKey = resolvePretenseKeyForRequest(c.req.header("x-pretense-api-key"));
       uploadProxyUsage({
         apiKey: usageKey,
         identifiersMutated: mutationsApplied,
@@ -18369,8 +18408,8 @@ async function findFreePort(start, opts = {}) {
 init_esm_shims();
 import { existsSync as existsSync8, readFileSync as readFileSync6, unlinkSync } from "fs";
 import { join as join7 } from "path";
-import { homedir as homedir3 } from "os";
-function pidFilePath(home = homedir3()) {
+import { homedir as homedir4 } from "os";
+function pidFilePath(home = homedir4()) {
   return join7(process.env.PRETENSE_PID_DIR ?? join7(home, ".pretense"), "proxy.pid");
 }
 function isProcessAlive(pid) {
@@ -18585,9 +18624,9 @@ import chalk3 from "chalk";
 init_esm_shims();
 import { existsSync as existsSync9, readFileSync as readFileSync7 } from "fs";
 import { join as join8 } from "path";
-import { homedir as homedir4 } from "os";
+import { homedir as homedir5 } from "os";
 function credentialsPath() {
-  return join8(homedir4(), ".pretense", "credentials.json");
+  return join8(homedir5(), ".pretense", "credentials.json");
 }
 function readApiKey() {
   const fromEnv = process.env["PRETENSE_API_KEY"]?.trim();
@@ -20294,7 +20333,7 @@ function configCommand() {
 init_esm_shims();
 import { Command as Command8 } from "commander";
 import chalk8 from "chalk";
-import { homedir as homedir5 } from "os";
+import { homedir as homedir6 } from "os";
 import { join as join12 } from "path";
 function logsCommand() {
   return new Command8("logs").description("Show recent audit log entries").option("-l, --limit <n>", "Number of entries to show", "50").option("--json", "Output as JSON", false).action((opts) => {
@@ -20302,7 +20341,7 @@ function logsCommand() {
     let store;
     let entries;
     try {
-      store = new AuditStore(join12(homedir5(), ".pretense", "audit.db"));
+      store = new AuditStore(join12(homedir6(), ".pretense", "audit.db"));
       entries = store.getRecentEntries(limit);
       store.close();
     } catch {
@@ -20343,7 +20382,7 @@ init_esm_shims();
 import { Command as Command9 } from "commander";
 import chalk9 from "chalk";
 import { join as join13 } from "path";
-import { homedir as homedir6 } from "os";
+import { homedir as homedir7 } from "os";
 function renderBar(percent, width = 30) {
   const filled = Math.min(Math.round(percent / 100 * width), width);
   const empty = width - filled;
@@ -20398,7 +20437,7 @@ function emptyUsagePayload(resolution) {
   };
 }
 function usageCommand() {
-  return new Command9("usage").description("Show plan usage vs limits for the current billing period").option("--db <path>", "Path to audit database", join13(homedir6(), ".pretense", "audit.db")).option("--json", "Output as JSON", false).option("--offline", "Do not contact the plan service to resolve the tier", false).action(async (opts) => {
+  return new Command9("usage").description("Show plan usage vs limits for the current billing period").option("--db <path>", "Path to audit database", join13(homedir7(), ".pretense", "audit.db")).option("--json", "Output as JSON", false).option("--offline", "Do not contact the plan service to resolve the tier", false).action(async (opts) => {
     const resolution = await resolvePlanTier({ offline: opts.offline });
     const tier = resolution.tier;
     const collected = collectUsage(opts.db);
@@ -20587,9 +20626,9 @@ import { Command as Command10 } from "commander";
 import chalk10 from "chalk";
 import { existsSync as existsSync12, readFileSync as readFileSync11, unlinkSync as unlinkSync2 } from "fs";
 import { join as join14 } from "path";
-import { homedir as homedir7 } from "os";
+import { homedir as homedir8 } from "os";
 import { execSync as execSync4 } from "child_process";
-var CREDENTIALS_DIR = join14(homedir7(), ".pretense");
+var CREDENTIALS_DIR = join14(homedir8(), ".pretense");
 var CREDENTIALS_PATH = join14(CREDENTIALS_DIR, "credentials.json");
 async function verifyApiKey(apiKey) {
   const url = `${getConfiguredApiRoot()}/api/cli/auth/validate`;
@@ -21173,9 +21212,9 @@ import { Command as Command13 } from "commander";
 import chalk13 from "chalk";
 import { appendFileSync as appendFileSync3, readFileSync as readFileSync14, existsSync as existsSync14 } from "fs";
 import { join as join17 } from "path";
-import { homedir as homedir8 } from "os";
+import { homedir as homedir9 } from "os";
 var IGNORE_FILE = ".pretenseignore";
-var LAST_SCAN_PATH = join17(homedir8(), ".pretense", "last-scan.json");
+var LAST_SCAN_PATH = join17(homedir9(), ".pretense", "last-scan.json");
 function ignorePath() {
   return join17(process.cwd(), IGNORE_FILE);
 }
@@ -21573,9 +21612,9 @@ import { resolve as resolve6, extname as extname4 } from "path";
 // src/secret-crypto.ts
 init_esm_shims();
 import { createCipheriv, createDecipheriv, randomBytes as randomBytes3, hkdfSync as hkdfSync2 } from "crypto";
-import { homedir as homedir9 } from "os";
+import { homedir as homedir10 } from "os";
 import { join as join19 } from "path";
-var KEYS_DIR = join19(homedir9(), ".pretense", "keys");
+var KEYS_DIR = join19(homedir10(), ".pretense", "keys");
 var HKDF_SALT2 = Buffer.from("pretense-maps-v1", "utf-8");
 var HKDF_INFO2 = Buffer.from("secret-mapping-aes-256-gcm", "utf-8");
 var IV_LEN = 12;
@@ -21693,12 +21732,12 @@ function ensureDefaultMapPath(absFilePath, override2) {
 
 // src/local-audit.ts
 init_esm_shims();
-import { homedir as homedir10 } from "os";
+import { homedir as homedir11 } from "os";
 import { join as join24 } from "path";
 import { randomUUID } from "crypto";
 import chalk15 from "chalk";
 function localAuditDbPath() {
-  return join24(homedir10(), ".pretense", "audit.db");
+  return join24(homedir11(), ".pretense", "audit.db");
 }
 function recordLocalAudit(rec, dbPath = localAuditDbPath()) {
   let store = null;
@@ -22696,7 +22735,7 @@ function policyCommand() {
 init_esm_shims();
 import { Command as Command20 } from "commander";
 import chalk20 from "chalk";
-import { homedir as homedir11 } from "os";
+import { homedir as homedir12 } from "os";
 import { join as join25 } from "path";
 var VALID_FORMATS2 = ["table", "csv", "json", "jsonl"];
 function toSafeAuditRow(e) {
@@ -22821,7 +22860,7 @@ function auditCommand() {
 `));
       process.exit(1);
     }
-    const dbPath = opts.db ?? join25(homedir11(), ".pretense", "audit.db");
+    const dbPath = opts.db ?? join25(homedir12(), ".pretense", "audit.db");
     let rows;
     try {
       const store = new AuditStore(dbPath);
@@ -22882,7 +22921,7 @@ init_esm_shims();
 import { Command as Command21 } from "commander";
 import chalk21 from "chalk";
 import { join as join26 } from "path";
-import { homedir as homedir12 } from "os";
+import { homedir as homedir13 } from "os";
 function remaining(used, limit) {
   if (limit === null) return null;
   return Math.max(0, limit - used);
@@ -22900,7 +22939,7 @@ function bar(used, limit, width = 24) {
   return chalk21.green(s);
 }
 function creditsCommand() {
-  return new Command21("credits").alias("tokens").description("Show remaining mutation budget for the current period").option("--db <path>", "Path to audit database", join26(homedir12(), ".pretense", "audit.db")).option("--json", "Output as JSON", false).option("--offline", "Do not contact the plan service to resolve the tier", false).action(async (opts) => {
+  return new Command21("credits").alias("tokens").description("Show remaining mutation budget for the current period").option("--db <path>", "Path to audit database", join26(homedir13(), ".pretense", "audit.db")).option("--json", "Output as JSON", false).option("--offline", "Do not contact the plan service to resolve the tier", false).action(async (opts) => {
     const resolution = await resolvePlanTier({ offline: opts.offline });
     const tier = resolution.tier;
     const collected = collectUsage(opts.db);

package/dist/postinstall.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   PRETENSE_VERSION
-} from "./chunk-ZSQPYJVT.js";
+} from "./chunk-6L7NU7KI.js";
 import {
   init_esm_shims
 } from "./chunk-TWMRHZGM.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pretense/cli",
-  "version": "0.6.26",
+  "version": "0.6.27",
   "description": "Local-first AI firewall that mutates proprietary code before sending to LLM APIs",
   "type": "module",
   "bin": {
@@ -23,12 +23,12 @@
     "tsx": "^4.0.0",
     "typescript": "^5.4.0",
     "vitest": "^1.0.0",
+    "@pretense/billing": "0.1.0",
     "@pretense/compliance-engine": "0.1.0",
     "@pretense/protocol": "0.1.0",
     "@pretense/learner": "0.2.0",
-    "@pretense/billing": "0.1.0",
-    "@pretense/mutator": "0.2.0",
     "@pretense/proxy": "0.1.0",
+    "@pretense/mutator": "0.2.0",
     "@pretense/scanner": "0.2.0",
     "@pretense/scanner-rs": "0.2.0",
     "@pretense/store": "0.2.0"