@rigstate/cli 0.7.24 → 0.7.26

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@rigstate/cli",
-    "version": "0.7.24",
+    "version": "0.7.26",
     "description": "Rigstate CLI - Code audit, sync and supervision tool",
     "type": "module",
     "main": "./dist/index.js",

package/src/commands/daemon.ts

@@ -14,9 +14,8 @@ import chalk from 'chalk';
 import ora from 'ora';
 import fs from 'fs/promises';
 import path from 'path';
-import { execSync } from 'child_process';
-import { fileURLToPath } from 'url';
 import { createDaemon } from '../daemon/factory.js';
+import { enableDaemon, disableDaemon } from '../utils/service-manager.js';
 
 const PID_FILE = '.rigstate/daemon.pid';
 const STATE_FILE = '.rigstate/daemon.state.json';
@@ -220,116 +219,3 @@ async function showStatus(): Promise<void> {
     console.log('');
 }
 
-async function enableDaemon() {
-    console.log(chalk.bold('\n⚙️  Enabling Rigstate Background Service (macOS)\n'));
-
-    if (process.platform !== 'darwin') {
-        console.error(chalk.red('❌ Currently only macOS is supported for auto-start.'));
-        console.error(chalk.yellow('PRs welcome for Linux/Windows support!'));
-        return;
-    }
-
-    const homeDir = process.env.HOME || '';
-    if (!homeDir) {
-        console.error(chalk.red('❌ Could not determine HOME directory.'));
-        return;
-    }
-
-    const agentsDir = path.join(homeDir, 'Library/LaunchAgents');
-    const logDir = path.join(homeDir, '.rigstate/logs');
-    const plistPath = path.join(agentsDir, 'com.rigstate.daemon.plist');
-
-    // Ensure directories exist
-    await fs.mkdir(agentsDir, { recursive: true });
-    await fs.mkdir(logDir, { recursive: true });
-
-    // Find the executable path
-    // We assume 'rigstate' is in the PATH, but for launchd we need absolute path
-    // Or we use the node executable and the script path
-
-    // Strategy: Use the currently executing script path
-    // This file is likely in dist/commands/daemon.js, we need dist/index.js
-    // Strategy: Use the currently executing script path
-    // In the bundle, this file is merged into index.js
-    const scriptPath = fileURLToPath(import.meta.url);
-    const nodePath = process.execPath; // Absolute path to node executable
-
-    const plistContent = `<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
-<plist version="1.0">
-<dict>
-    <key>Label</key>
-    <string>com.rigstate.daemon</string>
-    <key>ProgramArguments</key>
-    <array>
-        <string>${nodePath}</string>
-        <string>${scriptPath}</string>
-        <string>daemon</string>
-        <string>--no-bridge</string> 
-    </array>
-    <key>WorkingDirectory</key>
-    <string>${process.cwd()}</string>
-    <key>StandardOutPath</key>
-    <string>${path.join(logDir, 'daemon.out.log')}</string>
-    <key>StandardErrorPath</key>
-    <string>${path.join(logDir, 'daemon.err.log')}</string>
-    <key>RunAtLoad</key>
-    <true/>
-    <key>KeepAlive</key>
-    <true/>
-    <key>EnvironmentVariables</key>
-    <dict>
-        <key>PATH</key>
-        <string>/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin:${process.env.PATH}</string>
-    </dict>
-</dict>
-</plist>`;
-
-    try {
-        await fs.writeFile(plistPath, plistContent);
-        console.log(chalk.dim(`Created plist at: ${plistPath}`));
-
-        // Load the agent
-        try {
-            await execShellCommand(`launchctl unload ${plistPath}`); // Unload if exists
-        } catch (e) { } // Ignore error if not loaded
-
-        await execShellCommand(`launchctl load ${plistPath}`);
-
-        console.log(chalk.green('✅ Successfully enabled background daemon!'));
-        console.log(chalk.dim(`Logs: ${logDir}`));
-        console.log(chalk.dim('The daemon will now restart automatically if it crashes or on reboot.'));
-
-    } catch (error: any) {
-        console.error(chalk.red('❌ Failed to enable daemon:'), error.message);
-    }
-}
-
-async function disableDaemon() {
-    console.log(chalk.bold('\n⚙️  Disabling Rigstate Background Service\n'));
-
-    const homeDir = process.env.HOME || '';
-    const plistPath = path.join(homeDir, 'Library/LaunchAgents/com.rigstate.daemon.plist');
-
-    try {
-        await execShellCommand(`launchctl unload ${plistPath}`);
-        await fs.unlink(plistPath);
-        console.log(chalk.green('✅ Successfully disabled background daemon.'));
-    } catch (error: any) {
-        // If file doesn't exist, it's already disabled
-        if (error.code === 'ENOENT') {
-            console.log(chalk.green('✅ Daemon was not enabled.'));
-        } else {
-            console.error(chalk.red('❌ Failed to disable daemon:'), error.message);
-        }
-    }
-}
-
-async function execShellCommand(cmd: string) {
-    try {
-        const output = execSync(cmd, { stdio: 'pipe' }).toString();
-        return output;
-    } catch (error: any) {
-        return error.stderr?.toString() || error.stdout?.toString() || error.message;
-    }
-}

package/src/commands/link.ts

@@ -66,8 +66,14 @@ export function createLinkCommand() {
                     const { syncProjectRules } = await import('./sync-rules.js');
                     await syncProjectRules(projectId, apiKey, apiUrl);
 
-                    // 3. Git Hooks
-                    console.log(chalk.blue('🛡️  Checking immunity system...'));
+                    // 3. Git Hooks (Auto-Vaccine)
+                    console.log(chalk.blue('🛡️  Injecting Guardian hooks...'));
+                    const { createHooksCommand } = await import('./hooks.js');
+                    // We can't easily invoke the command action directly without refactoring, 
+                    // but we can reuse the logic. For now, let's replicate the simple install logic
+                    // or better yet, make a shared utility.
+                    // Actually, the simplest way for v0.7.25 is to call the install logic directly if possible.
+                    // Let's use the helper function at the bottom of this file which I see exists.
                     await installHooks(process.cwd());
 
                     console.log('');
@@ -110,16 +116,57 @@ async function installHooks(cwd: string) {
     // Actually, let's just use the `hooks` command logic if possible, or a lightweight version
 
     try {
-        // Simpler approach: Check if pre-commit exists
+        // Simpler approach: Check if pre-commit exists and install if missing
         const preCommitPath = path.join(cwd, '.git/hooks/pre-commit');
+        let shouldInstall = false;
+
         try {
             await fs.access(preCommitPath);
-            console.log(chalk.green('   ✔ Git hooks already active'));
+            const content = await fs.readFile(preCommitPath, 'utf-8');
+            if (content.includes('rigstate')) {
+                console.log(chalk.green('   ✔ Git hooks already active'));
+            } else {
+                shouldInstall = true;
+            }
         } catch {
-            console.log(chalk.yellow('   ⚠️  Git hooks missing. Run "rigstate hooks install" to secure repo.'));
+            shouldInstall = true;
+        }
+
+        if (shouldInstall) {
+            const PRE_COMMIT_SCRIPT = `#!/bin/sh
+# Rigstate Guardian Pre-commit Hook
+# Installed by: rigstate link (v0.7.25)
+
+# 1. Silent Sentinel Check
+if [ -f .rigstate/guardian.lock ]; then
+    echo "🛑 INTERVENTION ACTIVE: Commit blocked by Silent Sentinel."
+    exit 1
+fi
+
+echo "🛡️  Running Guardian checks..."
+rigstate check --staged --strict=critical
+exit $?
+`;
+            // Ensure hooks dir exists
+            await fs.mkdir(path.dirname(preCommitPath), { recursive: true });
+
+            // Write hook
+            if (await fileExists(preCommitPath)) {
+                const existing = await fs.readFile(preCommitPath, 'utf-8');
+                await fs.writeFile(preCommitPath, existing + '\n\n' + PRE_COMMIT_SCRIPT.replace('#!/bin/sh\n', ''), { mode: 0o755 });
+            } else {
+                await fs.writeFile(preCommitPath, PRE_COMMIT_SCRIPT, { mode: 0o755 });
+            }
+            console.log(chalk.green('   ✔ Applied Guardian protection (git-hooks)'));
         }
 
-    } catch (e) {
+    } catch (e: any) {
         // Ignore hook errors during link
+        console.log(chalk.dim('   (Skipped hooks: ' + e.message + ')'));
     }
 }
+
+async function fileExists(path: string) {
+    const fs = await import('fs/promises');
+    try { await fs.access(path); return true; } catch { return false; }
+}

package/src/daemon/core.ts

@@ -160,6 +160,8 @@ export class GuardianDaemon extends EventEmitter {
         }
     }
 
+    private violationsMap = new Map<string, any[]>();
+
     private async runIntegrityCheck(filePath: string) {
         if (!this.guardianMonitor) return;
 
@@ -170,25 +172,37 @@ export class GuardianDaemon extends EventEmitter {
         if (result.violations.length > 0) {
             this.handleViolations(filePath, result.violations);
         } else {
-            // Success - might need to clear previous violations for this file
-            await this.updateViolationReport([]);
+            // Success - clear violations for this file
+            if (this.violationsMap.has(filePath)) {
+                this.violationsMap.delete(filePath);
+                this.updateViolationReport(); // Update the aggregate report
+            }
         }
     }
 
-    private async updateViolationReport(violations: any[]) {
+    private async updateViolationReport(violations?: any[]) {
+        // If violations arg is passed (from handleViolations), update the map first
+        // But usually handleViolations calls this without args to just refresh
+
         const reportPath = path.join(process.cwd(), '.rigstate', 'ACTIVE_VIOLATIONS.md');
+        const allViolations = Array.from(this.violationsMap.entries());
+        const totalCount = allViolations.reduce((acc, [, v]) => acc + v.length, 0);
 
-        // This is a simplified version. In a real build, we'd aggregate across all files.
-        // For now, let's show the most recent or active ones.
-        let content = `# 🛡️ Guardian Status: ${violations.length > 0 ? '⚠️ ATTENTION' : '✅ PASS'}\n\n`;
-        content += `*Last check: ${new Date().toLocaleString()}*\n\n`;
+        let content = `# 🛡️ Guardian Status: ${totalCount > 0 ? '⚠️ ATTENTION' : '✅ PASS'}\n\n`;
+        content += `*Last check: ${new Date().toLocaleString()}*\n`;
+        content += `*Files with issues: ${allViolations.length}*\n\n`;
 
-        if (violations.length === 0) {
+        if (totalCount === 0) {
             content += "All systems within architectural limits. Frank is satisfied. 🤫\n";
         } else {
             content += "### 🚨 Active Violations\n\n";
-            for (const v of violations) {
-                content += `- **[${v.severity.toUpperCase()}]**: ${v.message}\n`;
+            for (const [file, fileViolations] of allViolations) {
+                const relPath = path.relative(process.cwd(), file);
+                content += `#### 📄 ${relPath}\n`;
+                for (const v of fileViolations) {
+                    content += `- **[${v.severity.toUpperCase()}]**: ${v.message}\n`;
+                }
+                content += '\n';
             }
             content += "\n---\n*Rigstate Daemon is watching. Fix violations to clear this report.*";
         }
@@ -202,7 +216,10 @@ export class GuardianDaemon extends EventEmitter {
         this.state.violationsFound += violations.length;
         this.emit('violation', { file: filePath, violations });
 
-        this.updateViolationReport(violations); // Push to IDE dashboard
+        // Update state map
+        this.violationsMap.set(filePath, violations);
+
+        this.updateViolationReport(); // Push to IDE dashboard
 
         for (const v of violations) {
             const level = v.severity === 'critical' ? 'error' : v.severity === 'warning' ? 'warn' : 'info';

package/src/utils/service-manager.ts

@@ -0,0 +1,109 @@
+import chalk from 'chalk';
+import fs from 'fs/promises';
+import path from 'path';
+import { execSync } from 'child_process';
+import { fileURLToPath } from 'url';
+
+async function execShellCommand(cmd: string) {
+    try {
+        const output = execSync(cmd, { stdio: 'pipe' }).toString();
+        return output;
+    } catch (error: any) {
+        return error.stderr?.toString() || error.stdout?.toString() || error.message;
+    }
+}
+
+export async function enableDaemon() {
+    console.log(chalk.bold('\n⚙️  Enabling Rigstate Background Service (macOS)\n'));
+
+    if (process.platform !== 'darwin') {
+        console.error(chalk.red('❌ Currently only macOS is supported for auto-start.'));
+        console.error(chalk.yellow('PRs welcome for Linux/Windows support!'));
+        return;
+    }
+
+    const homeDir = process.env.HOME || '';
+    if (!homeDir) {
+        console.error(chalk.red('❌ Could not determine HOME directory.'));
+        return;
+    }
+
+    const agentsDir = path.join(homeDir, 'Library/LaunchAgents');
+    const logDir = path.join(homeDir, '.rigstate/logs');
+    const plistPath = path.join(agentsDir, 'com.rigstate.daemon.plist');
+
+    // Ensure directories exist
+    await fs.mkdir(agentsDir, { recursive: true });
+    await fs.mkdir(logDir, { recursive: true });
+
+    const scriptPath = fileURLToPath(import.meta.url);
+    const nodePath = process.execPath;
+
+    const plistContent = `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+    <key>Label</key>
+    <string>com.rigstate.daemon</string>
+    <key>ProgramArguments</key>
+    <array>
+        <string>${nodePath}</string>
+        <string>${scriptPath}</string>
+        <string>daemon</string>
+        <string>--no-bridge</string> 
+    </array>
+    <key>WorkingDirectory</key>
+    <string>${process.cwd()}</string>
+    <key>StandardOutPath</key>
+    <string>${path.join(logDir, 'daemon.out.log')}</string>
+    <key>StandardErrorPath</key>
+    <string>${path.join(logDir, 'daemon.err.log')}</string>
+    <key>RunAtLoad</key>
+    <true/>
+    <key>KeepAlive</key>
+    <true/>
+    <key>EnvironmentVariables</key>
+    <dict>
+        <key>PATH</key>
+        <string>/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin:${process.env.PATH}</string>
+    </dict>
+</dict>
+</plist>`;
+
+    try {
+        await fs.writeFile(plistPath, plistContent);
+        console.log(chalk.dim(`Created plist at: ${plistPath}`));
+
+        try {
+            await execShellCommand(`launchctl unload ${plistPath}`);
+        } catch (e) { }
+
+        await execShellCommand(`launchctl load ${plistPath}`);
+
+        console.log(chalk.green('✅ Successfully enabled background daemon!'));
+        console.log(chalk.dim(`Logs: ${logDir}`));
+        console.log(chalk.dim('The daemon will now restart automatically if it crashes or on reboot.'));
+
+    } catch (error: any) {
+        console.error(chalk.red('❌ Failed to enable daemon:'), error.message);
+    }
+}
+
+export async function disableDaemon() {
+    console.log(chalk.bold('\n⚙️  Disabling Rigstate Background Service\n'));
+
+    const homeDir = process.env.HOME || '';
+    const plistPath = path.join(homeDir, 'Library/LaunchAgents/com.rigstate.daemon.plist');
+
+    try {
+        await execShellCommand(`launchctl unload ${plistPath}`);
+        await fs.unlink(plistPath);
+        console.log(chalk.green('✅ Successfully disabled background daemon.'));
+    } catch (error: any) {
+        if (error.code === 'ENOENT') {
+            console.log(chalk.green('✅ Daemon was not enabled.'));
+        } else {
+            console.error(chalk.red('❌ Failed to disable daemon:'), error.message);
+        }
+    }
+}

package/.rigstate/daemon.state.json

@@ -1,8 +0,0 @@
-{
-  "isRunning": true,
-  "startedAt": "2026-01-26T13:11:14.337Z",
-  "filesChecked": 4,
-  "violationsFound": 83,
-  "tasksProcessed": 0,
-  "lastActivity": "2026-01-26T15:24:35.672Z"
-}