@rulemetric/cli 0.2.0 → 0.2.2

package/dist/chunk-4WFE4PFP.js

@@ -0,0 +1,61 @@
+import {
+  ensureWorktree
+} from "./chunk-EOOP6WTC.js";
+import {
+  PermanentJobError
+} from "./chunk-DGHWRQXL.js";
+import {
+  apiPatch
+} from "./chunk-EJOI2ZGU.js";
+
+// src/lib/handlers/process-launch.ts
+async function resolveWorktreeForLaunch(config) {
+  if (!config.worktree?.create) {
+    return config;
+  }
+  const { branch, baseRef } = config.worktree;
+  const wt = await ensureWorktree({
+    repoRoot: config.projectPath,
+    branch,
+    baseRef
+  });
+  return {
+    ...config,
+    projectPath: wt.path,
+    gitBranch: wt.branch
+  };
+}
+async function processLaunch(payload, helpers) {
+  const { mirrorId, tool } = payload;
+  let { config } = payload;
+  const log = (msg) => helpers.logger.info(msg);
+  if (helpers.job.attempts > 1) {
+    throw new PermanentJobError(
+      `process_launch is not safe to retry (attempt ${helpers.job.attempts}). Re-launch manually.`
+    );
+  }
+  config = await resolveWorktreeForLaunch(config);
+  if (config.worktree?.create) {
+    log(`Worktree resolved: ${config.projectPath} (branch ${config.gitBranch})`);
+  }
+  log(`Launching ${tool}...`);
+  const { getLauncher } = await import("./dist-CSUYFYKI.js");
+  const launcher = getLauncher(tool);
+  const launcherResult = await launcher.launch(config);
+  log(`Launch completed: sessionId=${launcherResult.sessionId}`);
+  const result = {
+    ...launcherResult,
+    worktreePath: config.worktree?.create ? config.projectPath : void 0,
+    runId: config.runId
+  };
+  await apiPatch(`/api/launch-jobs/${mirrorId}/state`, { result }).catch((err) => {
+    log(`result persist failed: ${err instanceof Error ? err.message : String(err)}`);
+  });
+  return result;
+}
+
+export {
+  resolveWorktreeForLaunch,
+  processLaunch
+};
+//# sourceMappingURL=chunk-4WFE4PFP.js.map

package/dist/chunk-4WFE4PFP.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/lib/handlers/process-launch.ts"],
+  "sourcesContent": ["import type { JobHelpers } from '../job-helpers.js';\nimport type { LaunchConfig as LauncherConfig } from '@rulemetric/session';\nimport { apiPatch } from '../api-client.js';\nimport { PermanentJobError } from '../permanent-job-error.js';\nimport { ensureWorktree } from '../worktree.js';\n\n/**\n * Extends the canonical launcher config (`@rulemetric/session`) with the\n * worker-only fields the `POST /api/runs` fan-out stamps. Extending \u2014 rather\n * than re-declaring \u2014 keeps the shared launcher fields (`projectPath`,\n * `prompt`, `mode`, `resumeSessionId`, \u2026) in lock-step with the launcher so\n * the two can't drift.\n */\nexport interface LaunchConfig extends LauncherConfig {\n  gitBranch?: string;\n  /**\n   * Set by the `POST /api/runs` fan-out (Task 1.1). When `create` is true the\n   * worker provisions an isolated git worktree+branch before launching, so the\n   * session runs inside its own checkout of the repo.\n   */\n  worktree?: {\n    create: boolean;\n    branch: string;\n    baseRef: string;\n  };\n  /**\n   * The owning run's id, stamped by the fan-out. Carried through untouched and\n   * passed to the launcher, which injects it as RULEMETRIC_RUN_ID into the\n   * spawned session's env (Task 3.1). The session-start hook\n   * (packages/hooks/scripts/_ensure-session.sh) forwards it as `runId` to\n   * POST /api/sessions, which stamps sessions.run_id after validating ownership.\n   */\n  runId?: string;\n}\n\ninterface LaunchPayload {\n  mirrorId: string;\n  tool: string;\n  config: LaunchConfig;\n}\n\n/**\n * If the launch carries a worktree spec, provision the worktree and return a\n * NEW config pointed at it (`projectPath` = worktree path, `gitBranch` = the\n * branch). When `worktree.create` is falsy the config is returned unchanged.\n *\n * Extracted as a pure-ish helper so it's unit-testable against a real temp git\n * repo without mocking the `@rulemetric/session` launcher. `allowExistingBranch`\n * is left at its default (false): same-run idempotency is handled by\n * `ensureWorktree`'s pre-existence guard, and the `attempts > 1` guard in\n * `processLaunch` prevents a retry from re-running this at all.\n */\nexport async function resolveWorktreeForLaunch(config: LaunchConfig): Promise<LaunchConfig> {\n  if (!config.worktree?.create) {\n    return config;\n  }\n  const { branch, baseRef } = config.worktree;\n  const wt = await ensureWorktree({\n    repoRoot: config.projectPath,\n    branch,\n    baseRef,\n  });\n  // New object \u2014 never mutate the caller's config in place.\n  return {\n    ...config,\n    projectPath: wt.path,\n    gitBranch: wt.branch,\n  };\n}\n\n/**\n * Graphile-shaped handler for the `process_launch` task.\n *\n * Lifted from the legacy `eval-worker.ts:processLaunchJob`, with the queue\n * plumbing stripped out:\n *   - no claim \u2014 Graphile already claimed the job before invoking us\n *   - no /complete POST \u2014 we return the launcher result (or throw)\n *   - no surrounding try/catch \u2014 errors propagate to Graphile's retry path\n *\n * The dynamic import of `@rulemetric/session` is intentional: it avoids\n * loading the launcher (and its tool-specific subprocess wrappers) unless a\n * launch job actually fires.\n */\nexport async function processLaunch(\n  payload: LaunchPayload,\n  helpers: JobHelpers,\n): Promise<Record<string, unknown>> {\n  const { mirrorId, tool } = payload;\n  let { config } = payload;\n  const log = (msg: string) => helpers.logger.info(msg);\n\n  // Fail-fast on retry. The launcher spawns subprocesses and registers a\n  // session \u2014 re-running on Graphile retry would create a second session\n  // with no link back to the first. Until the launcher path is properly\n  // idempotent (resume from sessionId persisted to the mirror row),\n  // surface the failure to the user instead of silently double-launching.\n  // See docs/audits/2026-05-07-worker-audit.md \"Handlers not idempotent\".\n  if (helpers.job.attempts > 1) {\n    throw new PermanentJobError(\n      `process_launch is not safe to retry (attempt ${helpers.job.attempts}). Re-launch manually.`,\n    );\n  }\n\n  // Provision an isolated worktree (idempotent) BEFORE the launcher spawns \u2014\n  // the launcher uses config.projectPath as the session cwd, so swapping it to\n  // the worktree path is what makes the session run inside the worktree.\n  config = await resolveWorktreeForLaunch(config);\n  if (config.worktree?.create) {\n    log(`Worktree resolved: ${config.projectPath} (branch ${config.gitBranch})`);\n  }\n\n  log(`Launching ${tool}...`);\n  const { getLauncher } = await import('@rulemetric/session');\n  const launcher = getLauncher(tool);\n  // config.runId rides through here untouched; the launcher injects it as\n  // RULEMETRIC_RUN_ID into the spawned session's env (Task 3.1).\n  const launcherResult = await launcher.launch(config);\n  log(`Launch completed: sessionId=${launcherResult.sessionId}`);\n\n  // Persist the RESOLVED worktree path + runId onto the launch result so the\n  // API's reconcile fallback (POST /api/runs/:id/link-sessions, Task 3.2) can\n  // match a run's launch jobs to its captured sessions on `projectPath`. The\n  // env\u2192hook path (Task 3.1) is the primary attribution channel; this is the\n  // defense-in-depth join key for sessions that channel misses (non-Claude-Code\n  // tools whose launchers don't inject RULEMETRIC_RUN_ID, proxy-created\n  // sessions, tools without our hooks). `config.projectPath` here is already\n  // the worktree path \u2014 `resolveWorktreeForLaunch` swapped it above \u2014 so the\n  // captured `sessions.projectPath` (the session's cwd) equals it.\n  const result: Record<string, unknown> = {\n    ...launcherResult,\n    worktreePath: config.worktree?.create ? config.projectPath : undefined,\n    runId: config.runId,\n  };\n\n  // Graphile discards task return values, so persist the launcher result\n  // (sessionId, etc.) onto the mirror row. Best-effort.\n  await apiPatch(`/api/launch-jobs/${mirrorId}/state`, { result }).catch((err: unknown) => {\n    log(`result persist failed: ${err instanceof Error ? err.message : String(err)}`);\n  });\n\n  return result;\n}\n"],
+  "mappings": ";;;;;;;;;;;AAoDA,eAAsB,yBAAyB,QAA6C;AAC1F,MAAI,CAAC,OAAO,UAAU,QAAQ;AAC5B,WAAO;AAAA,EACT;AACA,QAAM,EAAE,QAAQ,QAAQ,IAAI,OAAO;AACnC,QAAM,KAAK,MAAM,eAAe;AAAA,IAC9B,UAAU,OAAO;AAAA,IACjB;AAAA,IACA;AAAA,EACF,CAAC;AAED,SAAO;AAAA,IACL,GAAG;AAAA,IACH,aAAa,GAAG;AAAA,IAChB,WAAW,GAAG;AAAA,EAChB;AACF;AAeA,eAAsB,cACpB,SACA,SACkC;AAClC,QAAM,EAAE,UAAU,KAAK,IAAI;AAC3B,MAAI,EAAE,OAAO,IAAI;AACjB,QAAM,MAAM,CAAC,QAAgB,QAAQ,OAAO,KAAK,GAAG;AAQpD,MAAI,QAAQ,IAAI,WAAW,GAAG;AAC5B,UAAM,IAAI;AAAA,MACR,gDAAgD,QAAQ,IAAI,QAAQ;AAAA,IACtE;AAAA,EACF;AAKA,WAAS,MAAM,yBAAyB,MAAM;AAC9C,MAAI,OAAO,UAAU,QAAQ;AAC3B,QAAI,sBAAsB,OAAO,WAAW,YAAY,OAAO,SAAS,GAAG;AAAA,EAC7E;AAEA,MAAI,aAAa,IAAI,KAAK;AAC1B,QAAM,EAAE,YAAY,IAAI,MAAM,OAAO,oBAAqB;AAC1D,QAAM,WAAW,YAAY,IAAI;AAGjC,QAAM,iBAAiB,MAAM,SAAS,OAAO,MAAM;AACnD,MAAI,+BAA+B,eAAe,SAAS,EAAE;AAW7D,QAAM,SAAkC;AAAA,IACtC,GAAG;AAAA,IACH,cAAc,OAAO,UAAU,SAAS,OAAO,cAAc;AAAA,IAC7D,OAAO,OAAO;AAAA,EAChB;AAIA,QAAM,SAAS,oBAAoB,QAAQ,UAAU,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,QAAiB;AACvF,QAAI,0BAA0B,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC,EAAE;AAAA,EAClF,CAAC;AAED,SAAO;AACT;",
+  "names": []
+}

package/dist/chunk-52WIYRZH.js

@@ -0,0 +1,73 @@
+// src/lib/eval-worktree.ts
+import { execSync } from "node:child_process";
+import { mkdtempSync, rmSync, existsSync } from "node:fs";
+import { join } from "node:path";
+import { tmpdir } from "node:os";
+function createEvalWorktree(baseDir) {
+  const cwd = baseDir ?? process.cwd();
+  const prefix = join(tmpdir(), "rulemetric-eval-");
+  try {
+    execSync("git rev-parse --git-dir", { cwd, stdio: "pipe" });
+  } catch {
+    const tempDir = mkdtempSync(prefix);
+    return {
+      workDir: tempDir,
+      cleanup: () => safeRm(tempDir),
+      isWorktree: false
+    };
+  }
+  let ref;
+  try {
+    ref = execSync("git rev-parse HEAD", { cwd, stdio: "pipe" }).toString().trim();
+  } catch {
+    const tempDir = mkdtempSync(prefix);
+    return {
+      workDir: tempDir,
+      cleanup: () => safeRm(tempDir),
+      isWorktree: false
+    };
+  }
+  const worktreePath = mkdtempSync(prefix);
+  rmSync(worktreePath, { recursive: true });
+  try {
+    execSync(`git worktree add --detach "${worktreePath}" ${ref}`, {
+      cwd,
+      stdio: "pipe"
+    });
+  } catch {
+    const tempDir = mkdtempSync(prefix);
+    return {
+      workDir: tempDir,
+      cleanup: () => safeRm(tempDir),
+      isWorktree: false
+    };
+  }
+  return {
+    workDir: worktreePath,
+    cleanup: () => {
+      try {
+        execSync(`git worktree remove --force "${worktreePath}"`, { cwd, stdio: "pipe" });
+      } catch {
+        safeRm(worktreePath);
+        try {
+          execSync("git worktree prune", { cwd, stdio: "pipe" });
+        } catch {
+        }
+      }
+    },
+    isWorktree: true
+  };
+}
+function safeRm(dir) {
+  try {
+    if (existsSync(dir)) {
+      rmSync(dir, { recursive: true, force: true });
+    }
+  } catch {
+  }
+}
+
+export {
+  createEvalWorktree
+};
+//# sourceMappingURL=chunk-52WIYRZH.js.map

package/dist/chunk-52WIYRZH.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/lib/eval-worktree.ts"],
+  "sourcesContent": ["import { execSync } from 'node:child_process';\nimport { mkdtempSync, rmSync, existsSync } from 'node:fs';\nimport { join } from 'node:path';\nimport { tmpdir } from 'node:os';\n\n/**\n * Create an isolated git worktree for eval execution.\n * Returns the worktree path and a cleanup function.\n * Falls back to a temp directory copy if not in a git repo.\n */\nexport function createEvalWorktree(baseDir?: string): {\n  workDir: string;\n  cleanup: () => void;\n  isWorktree: boolean;\n} {\n  const cwd = baseDir ?? process.cwd();\n  const prefix = join(tmpdir(), 'rulemetric-eval-');\n\n  // Check if we're in a git repo\n  try {\n    execSync('git rev-parse --git-dir', { cwd, stdio: 'pipe' });\n  } catch {\n    // Not a git repo \u2014 use a plain temp dir\n    const tempDir = mkdtempSync(prefix);\n    return {\n      workDir: tempDir,\n      cleanup: () => safeRm(tempDir),\n      isWorktree: false,\n    };\n  }\n\n  // Get current branch/commit\n  let ref: string;\n  try {\n    ref = execSync('git rev-parse HEAD', { cwd, stdio: 'pipe' }).toString().trim();\n  } catch {\n    const tempDir = mkdtempSync(prefix);\n    return {\n      workDir: tempDir,\n      cleanup: () => safeRm(tempDir),\n      isWorktree: false,\n    };\n  }\n\n  // Create worktree at a detached HEAD (no branch conflict)\n  const worktreePath = mkdtempSync(prefix);\n  // mkdtemp creates the dir \u2014 git worktree add needs it to not exist\n  rmSync(worktreePath, { recursive: true });\n\n  try {\n    execSync(`git worktree add --detach \"${worktreePath}\" ${ref}`, {\n      cwd,\n      stdio: 'pipe',\n    });\n  } catch {\n    // Worktree creation failed \u2014 fall back to temp dir\n    const tempDir = mkdtempSync(prefix);\n    return {\n      workDir: tempDir,\n      cleanup: () => safeRm(tempDir),\n      isWorktree: false,\n    };\n  }\n\n  return {\n    workDir: worktreePath,\n    cleanup: () => {\n      try {\n        execSync(`git worktree remove --force \"${worktreePath}\"`, { cwd, stdio: 'pipe' });\n      } catch {\n        // If git worktree remove fails, just delete the directory\n        safeRm(worktreePath);\n        // Prune stale worktree refs\n        try { execSync('git worktree prune', { cwd, stdio: 'pipe' }); } catch { /* ignore */ }\n      }\n    },\n    isWorktree: true,\n  };\n}\n\nfunction safeRm(dir: string): void {\n  try {\n    if (existsSync(dir)) {\n      rmSync(dir, { recursive: true, force: true });\n    }\n  } catch {\n    // Best-effort cleanup\n  }\n}\n"],
+  "mappings": ";AAAA,SAAS,gBAAgB;AACzB,SAAS,aAAa,QAAQ,kBAAkB;AAChD,SAAS,YAAY;AACrB,SAAS,cAAc;AAOhB,SAAS,mBAAmB,SAIjC;AACA,QAAM,MAAM,WAAW,QAAQ,IAAI;AACnC,QAAM,SAAS,KAAK,OAAO,GAAG,kBAAkB;AAGhD,MAAI;AACF,aAAS,2BAA2B,EAAE,KAAK,OAAO,OAAO,CAAC;AAAA,EAC5D,QAAQ;AAEN,UAAM,UAAU,YAAY,MAAM;AAClC,WAAO;AAAA,MACL,SAAS;AAAA,MACT,SAAS,MAAM,OAAO,OAAO;AAAA,MAC7B,YAAY;AAAA,IACd;AAAA,EACF;AAGA,MAAI;AACJ,MAAI;AACF,UAAM,SAAS,sBAAsB,EAAE,KAAK,OAAO,OAAO,CAAC,EAAE,SAAS,EAAE,KAAK;AAAA,EAC/E,QAAQ;AACN,UAAM,UAAU,YAAY,MAAM;AAClC,WAAO;AAAA,MACL,SAAS;AAAA,MACT,SAAS,MAAM,OAAO,OAAO;AAAA,MAC7B,YAAY;AAAA,IACd;AAAA,EACF;AAGA,QAAM,eAAe,YAAY,MAAM;AAEvC,SAAO,cAAc,EAAE,WAAW,KAAK,CAAC;AAExC,MAAI;AACF,aAAS,8BAA8B,YAAY,KAAK,GAAG,IAAI;AAAA,MAC7D;AAAA,MACA,OAAO;AAAA,IACT,CAAC;AAAA,EACH,QAAQ;AAEN,UAAM,UAAU,YAAY,MAAM;AAClC,WAAO;AAAA,MACL,SAAS;AAAA,MACT,SAAS,MAAM,OAAO,OAAO;AAAA,MAC7B,YAAY;AAAA,IACd;AAAA,EACF;AAEA,SAAO;AAAA,IACL,SAAS;AAAA,IACT,SAAS,MAAM;AACb,UAAI;AACF,iBAAS,gCAAgC,YAAY,KAAK,EAAE,KAAK,OAAO,OAAO,CAAC;AAAA,MAClF,QAAQ;AAEN,eAAO,YAAY;AAEnB,YAAI;AAAE,mBAAS,sBAAsB,EAAE,KAAK,OAAO,OAAO,CAAC;AAAA,QAAG,QAAQ;AAAA,QAAe;AAAA,MACvF;AAAA,IACF;AAAA,IACA,YAAY;AAAA,EACd;AACF;AAEA,SAAS,OAAO,KAAmB;AACjC,MAAI;AACF,QAAI,WAAW,GAAG,GAAG;AACnB,aAAO,KAAK,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,IAC9C;AAAA,EACF,QAAQ;AAAA,EAER;AACF;",
+  "names": []
+}