@rankcli/cli 0.0.33 → 0.0.34

package/dist/index.js

@@ -3085,8 +3085,7 @@ async function trackAdd(options) {
       spinner.fail("Could not find or create project");
       return { success: false, error: "Project not found" };
     }
-    const { planName } = getUserInfo();
-    const tier = planName?.toLowerCase() || "free";
+    const tier = tierFromPlanId(getUserInfo().planId) ?? "free";
     const { maxKeywords } = getTierLimits(tier);
     const supabase = await getAuthenticatedClient();
     if (!supabase) {
@@ -3367,8 +3366,7 @@ async function trackCheck(options) {
     if (!project) {
       return { success: false, error: "Project not found" };
     }
-    const { planName } = getUserInfo();
-    const tier = planName?.toLowerCase() || "free";
+    const tier = tierFromPlanId(getUserInfo().planId) ?? "free";
     const { checksPerDay } = getTierLimits(tier);
     if (!options.force && project.lastRankCheckAt) {
       const hoursSinceCheck = (Date.now() - project.lastRankCheckAt.getTime()) / (1e3 * 60 * 60);
@@ -4239,7 +4237,7 @@ async function testWebhook(channel, webhookUrl) {
 }
 
 // src/version.ts
-var VERSION = "0.0.33";
+var VERSION = "0.0.34";
 
 // src/index.ts
 var program = new import_commander.Command();

package/dist/index.mjs

@@ -2916,8 +2916,7 @@ async function trackAdd(options) {
       spinner.fail("Could not find or create project");
       return { success: false, error: "Project not found" };
     }
-    const { planName } = getUserInfo();
-    const tier = planName?.toLowerCase() || "free";
+    const tier = tierFromPlanId(getUserInfo().planId) ?? "free";
     const { maxKeywords } = getTierLimits(tier);
     const supabase = await getAuthenticatedClient();
     if (!supabase) {
@@ -3198,8 +3197,7 @@ async function trackCheck(options) {
     if (!project) {
       return { success: false, error: "Project not found" };
     }
-    const { planName } = getUserInfo();
-    const tier = planName?.toLowerCase() || "free";
+    const tier = tierFromPlanId(getUserInfo().planId) ?? "free";
     const { checksPerDay } = getTierLimits(tier);
     if (!options.force && project.lastRankCheckAt) {
       const hoursSinceCheck = (Date.now() - project.lastRankCheckAt.getTime()) / (1e3 * 60 * 60);
@@ -4095,7 +4093,7 @@ async function testWebhook(channel, webhookUrl) {
 }
 
 // src/version.ts
-var VERSION = "0.0.33";
+var VERSION = "0.0.34";
 
 // src/index.ts
 var program = new Command();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rankcli/cli",
-  "version": "0.0.33",
+  "version": "0.0.34",
   "description": "RankCLI - Ship code, get ranked. SEO meets CI/CD.",
   "homepage": "https://rankcli.dev",
   "main": "dist/index.js",
@@ -33,7 +33,7 @@
     "build": "npm run build:checks && npm run build:wasm && npm run build:js",
     "build:js": "npm run update-version && tsup src/index.ts src/wasm-engine.ts --format cjs,esm --dts",
     "build:checks": "test -d ../agent-runtime && (cd ../agent-runtime && pnpm build:wasm) || echo 'agent-runtime not present as a monorepo sibling - build.rs will fall back to the node_modules-installed bundle'",
-    "build:wasm": "cd native && wasm-pack build --target nodejs --release && cp -r pkg ../wasm",
+    "build:wasm": "cd native && wasm-pack build --target nodejs --release && mkdir -p ../wasm && cp -r pkg/* ../wasm/ && node ../scripts/verify-wasm.js",
     "build:wasm:dev": "cd native && wasm-pack build --target nodejs --dev && mkdir -p ../wasm && cp -r pkg/* ../wasm/",
     "prebuild:wasm": "mkdir -p wasm",
     "inject-config": "node scripts/inject-config.js",

package/wasm/rankcli_audit_engine.d.ts

@@ -24,8 +24,21 @@ export function get_encrypted_size(): number;
 export function get_tier(): string;
 
 /**
- * Initialize the engine with a license key.
+ * Initialize the engine with the build-time decrypt passphrase.
  * Decrypts the embedded checks and stores them for execution.
+ *
+ * The `license_key` parameter is misleadingly named for what it does
+ * now: entitlement (is this user actually paid?) is decided in
+ * TypeScript, from the real Supabase-backed apiKey/plan the CLI already
+ * validates on login - not by anything checkable here. The caller only
+ * invokes this at all once it has confirmed a paid apiKey, always
+ * passing the single build-embedded passphrase (see
+ * scripts/inject-config.js), never a user-supplied string. This
+ * decryption step exists purely to keep the premium check source out of
+ * static analysis of the shipped binary; get_tier()/get_checks_limit()/
+ * validate_license() below are legacy from an earlier signed-license
+ * design that was never finished and should not be trusted as an
+ * entitlement source.
  */
 export function init_engine(license_key: string): boolean;
 

package/wasm/rankcli_audit_engine.js

@@ -1,7 +1,5 @@
 /* @ts-self-types="./rankcli_audit_engine.d.ts" */
 
-//#region exports
-
 /**
  * Get checks limit for current tier
  * @returns {number}
@@ -22,18 +20,24 @@ function get_decrypted_code() {
     let deferred2_0;
     let deferred2_1;
     try {
-        const ret = wasm.get_decrypted_code();
-        var ptr1 = ret[0];
-        var len1 = ret[1];
-        if (ret[3]) {
+        const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+        wasm.get_decrypted_code(retptr);
+        var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+        var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+        var r2 = getDataViewMemory0().getInt32(retptr + 4 * 2, true);
+        var r3 = getDataViewMemory0().getInt32(retptr + 4 * 3, true);
+        var ptr1 = r0;
+        var len1 = r1;
+        if (r3) {
             ptr1 = 0; len1 = 0;
-            throw takeFromExternrefTable0(ret[2]);
+            throw takeObject(r2);
         }
         deferred2_0 = ptr1;
         deferred2_1 = len1;
         return getStringFromWasm0(ptr1, len1);
     } finally {
-        wasm.__wbindgen_free(deferred2_0, deferred2_1, 1);
+        wasm.__wbindgen_add_to_stack_pointer(16);
+        wasm.__wbindgen_export(deferred2_0, deferred2_1, 1);
     }
 }
 exports.get_decrypted_code = get_decrypted_code;
@@ -56,30 +60,55 @@ function get_tier() {
     let deferred1_0;
     let deferred1_1;
     try {
-        const ret = wasm.get_tier();
-        deferred1_0 = ret[0];
-        deferred1_1 = ret[1];
-        return getStringFromWasm0(ret[0], ret[1]);
+        const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+        wasm.get_tier(retptr);
+        var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+        var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+        deferred1_0 = r0;
+        deferred1_1 = r1;
+        return getStringFromWasm0(r0, r1);
     } finally {
-        wasm.__wbindgen_free(deferred1_0, deferred1_1, 1);
+        wasm.__wbindgen_add_to_stack_pointer(16);
+        wasm.__wbindgen_export(deferred1_0, deferred1_1, 1);
     }
 }
 exports.get_tier = get_tier;
 
 /**
- * Initialize the engine with a license key.
+ * Initialize the engine with the build-time decrypt passphrase.
  * Decrypts the embedded checks and stores them for execution.
+ *
+ * The `license_key` parameter is misleadingly named for what it does
+ * now: entitlement (is this user actually paid?) is decided in
+ * TypeScript, from the real Supabase-backed apiKey/plan the CLI already
+ * validates on login - not by anything checkable here. The caller only
+ * invokes this at all once it has confirmed a paid apiKey, always
+ * passing the single build-embedded passphrase (see
+ * scripts/inject-config.js), never a user-supplied string. This
+ * decryption step exists purely to keep the premium check source out of
+ * static analysis of the shipped binary; get_tier()/get_checks_limit()/
+ * validate_license() below are legacy from an earlier signed-license
+ * design that was never finished and should not be trusted as an
+ * entitlement source.
  * @param {string} license_key
  * @returns {boolean}
  */
 function init_engine(license_key) {
-    const ptr0 = passStringToWasm0(license_key, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
-    const len0 = WASM_VECTOR_LEN;
-    const ret = wasm.init_engine(ptr0, len0);
-    if (ret[2]) {
-        throw takeFromExternrefTable0(ret[1]);
+    try {
+        const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+        const ptr0 = passStringToWasm0(license_key, wasm.__wbindgen_export2, wasm.__wbindgen_export3);
+        const len0 = WASM_VECTOR_LEN;
+        wasm.init_engine(retptr, ptr0, len0);
+        var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+        var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+        var r2 = getDataViewMemory0().getInt32(retptr + 4 * 2, true);
+        if (r2) {
+            throw takeObject(r1);
+        }
+        return r0 !== 0;
+    } finally {
+        wasm.__wbindgen_add_to_stack_pointer(16);
     }
-    return ret[0] !== 0;
 }
 exports.init_engine = init_engine;
 
@@ -102,14 +131,18 @@ function validate_license(license_key) {
     let deferred2_0;
     let deferred2_1;
     try {
-        const ptr0 = passStringToWasm0(license_key, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+        const ptr0 = passStringToWasm0(license_key, wasm.__wbindgen_export2, wasm.__wbindgen_export3);
         const len0 = WASM_VECTOR_LEN;
-        const ret = wasm.validate_license(ptr0, len0);
-        deferred2_0 = ret[0];
-        deferred2_1 = ret[1];
-        return getStringFromWasm0(ret[0], ret[1]);
+        wasm.validate_license(retptr, ptr0, len0);
+        var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+        var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+        deferred2_0 = r0;
+        deferred2_1 = r1;
+        return getStringFromWasm0(r0, r1);
     } finally {
-        wasm.__wbindgen_free(deferred2_0, deferred2_1, 1);
+        wasm.__wbindgen_add_to_stack_pointer(16);
+        wasm.__wbindgen_export(deferred2_0, deferred2_1, 1);
     }
 }
 exports.validate_license = validate_license;
@@ -122,39 +155,30 @@ function version() {
     let deferred1_0;
     let deferred1_1;
     try {
-        const ret = wasm.version();
-        deferred1_0 = ret[0];
-        deferred1_1 = ret[1];
-        return getStringFromWasm0(ret[0], ret[1]);
+        const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+        wasm.version(retptr);
+        var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+        var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+        deferred1_0 = r0;
+        deferred1_1 = r1;
+        return getStringFromWasm0(r0, r1);
     } finally {
-        wasm.__wbindgen_free(deferred1_0, deferred1_1, 1);
+        wasm.__wbindgen_add_to_stack_pointer(16);
+        wasm.__wbindgen_export(deferred1_0, deferred1_1, 1);
     }
 }
 exports.version = version;
 
-//#endregion
-
-//#region wasm imports
-
 function __wbg_get_imports() {
     const import0 = {
         __proto__: null,
-        __wbg_Error_8c4e43fe74559d73: function() { return logError(function (arg0, arg1) {
+        __wbg_Error_8c4e43fe74559d73: function(arg0, arg1) {
             const ret = Error(getStringFromWasm0(arg0, arg1));
-            return ret;
-        }, arguments); },
+            return addHeapObject(ret);
+        },
         __wbg___wbindgen_throw_be289d5034ed271b: function(arg0, arg1) {
             throw new Error(getStringFromWasm0(arg0, arg1));
         },
-        __wbindgen_init_externref_table: function() {
-            const table = wasm.__wbindgen_externrefs;
-            const offset = table.grow(4);
-            table.set(0, undefined);
-            table.set(offset + 0, undefined);
-            table.set(offset + 1, null);
-            table.set(offset + 2, true);
-            table.set(offset + 3, false);
-        },
     };
     return {
         __proto__: null,
@@ -162,10 +186,29 @@ function __wbg_get_imports() {
     };
 }
 
+function addHeapObject(obj) {
+    if (heap_next === heap.length) heap.push(heap.length + 1);
+    const idx = heap_next;
+    heap_next = heap[idx];
+
+    heap[idx] = obj;
+    return idx;
+}
+
+function dropObject(idx) {
+    if (idx < 132) return;
+    heap[idx] = heap_next;
+    heap_next = idx;
+}
 
-//#endregion
+let cachedDataViewMemory0 = null;
+function getDataViewMemory0() {
+    if (cachedDataViewMemory0 === null || cachedDataViewMemory0.buffer.detached === true || (cachedDataViewMemory0.buffer.detached === undefined && cachedDataViewMemory0.buffer !== wasm.memory.buffer)) {
+        cachedDataViewMemory0 = new DataView(wasm.memory.buffer);
+    }
+    return cachedDataViewMemory0;
+}
 
-//#region intrinsics
 function getStringFromWasm0(ptr, len) {
     ptr = ptr >>> 0;
     return decodeText(ptr, len);
@@ -179,24 +222,14 @@ function getUint8ArrayMemory0() {
     return cachedUint8ArrayMemory0;
 }
 
-function logError(f, args) {
-    try {
-        return f.apply(this, args);
-    } catch (e) {
-        let error = (function () {
-            try {
-                return e instanceof Error ? `${e.message}\n\nStack:\n${e.stack}` : e.toString();
-            } catch(_) {
-                return "<failed to stringify thrown value>";
-            }
-        }());
-        console.error("wasm-bindgen: imported JS function that was not marked as `catch` threw an error:", error);
-        throw e;
-    }
-}
+function getObject(idx) { return heap[idx]; }
+
+let heap = new Array(128).fill(undefined);
+heap.push(undefined, null, true, false);
+
+let heap_next = heap.length;
 
 function passStringToWasm0(arg, malloc, realloc) {
-    if (typeof(arg) !== 'string') throw new Error(`expected a string argument, found ${typeof(arg)}`);
     if (realloc === undefined) {
         const buf = cachedTextEncoder.encode(arg);
         const ptr = malloc(buf.length, 1) >>> 0;
@@ -224,7 +257,7 @@ function passStringToWasm0(arg, malloc, realloc) {
         ptr = realloc(ptr, len, len = offset + arg.length * 3, 1) >>> 0;
         const view = getUint8ArrayMemory0().subarray(ptr + offset, ptr + len);
         const ret = cachedTextEncoder.encodeInto(arg, view);
-        if (ret.read !== arg.length) throw new Error('failed to pass whole string');
+
         offset += ret.written;
         ptr = realloc(ptr, len, offset, 1) >>> 0;
     }
@@ -233,10 +266,10 @@ function passStringToWasm0(arg, malloc, realloc) {
     return ptr;
 }
 
-function takeFromExternrefTable0(idx) {
-    const value = wasm.__wbindgen_externrefs.get(idx);
-    wasm.__externref_table_dealloc(idx);
-    return value;
+function takeObject(idx) {
+    const ret = getObject(idx);
+    dropObject(idx);
+    return ret;
 }
 
 let cachedTextDecoder = new TextDecoder('utf-8', { ignoreBOM: true, fatal: true });
@@ -260,15 +293,7 @@ if (!('encodeInto' in cachedTextEncoder)) {
 
 let WASM_VECTOR_LEN = 0;
 
-
-//#endregion
-
-//#region wasm loading
 const wasmPath = `${__dirname}/rankcli_audit_engine_bg.wasm`;
 const wasmBytes = require('fs').readFileSync(wasmPath);
 const wasmModule = new WebAssembly.Module(wasmBytes);
 const wasm = new WebAssembly.Instance(wasmModule, __wbg_get_imports()).exports;
-wasm.__wbindgen_start();
-
-//#endregion
-exports.__wasm = wasm;

package/wasm/rankcli_audit_engine_bg.wasm.d.ts

@@ -2,16 +2,14 @@
 /* eslint-disable */
 export const memory: WebAssembly.Memory;
 export const get_checks_limit: () => number;
-export const get_decrypted_code: () => [number, number, number, number];
+export const get_decrypted_code: (a: number) => void;
 export const get_encrypted_size: () => number;
-export const get_tier: () => [number, number];
-export const init_engine: (a: number, b: number) => [number, number, number];
+export const get_tier: (a: number) => void;
+export const init_engine: (a: number, b: number, c: number) => void;
 export const is_initialized: () => number;
-export const validate_license: (a: number, b: number) => [number, number];
-export const version: () => [number, number];
-export const __wbindgen_externrefs: WebAssembly.Table;
-export const __externref_table_dealloc: (a: number) => void;
-export const __wbindgen_free: (a: number, b: number, c: number) => void;
-export const __wbindgen_malloc: (a: number, b: number) => number;
-export const __wbindgen_realloc: (a: number, b: number, c: number, d: number) => number;
-export const __wbindgen_start: () => void;
+export const validate_license: (a: number, b: number, c: number) => void;
+export const version: (a: number) => void;
+export const __wbindgen_add_to_stack_pointer: (a: number) => number;
+export const __wbindgen_export: (a: number, b: number, c: number) => void;
+export const __wbindgen_export2: (a: number, b: number) => number;
+export const __wbindgen_export3: (a: number, b: number, c: number, d: number) => number;