@rulemetric/cli 0.2.0 → 0.2.2

package/dist/commands/hooks/install.js

@@ -1,285 +1,345 @@
-import { Flags } from '@oclif/core';
-import { execSync, spawnSync } from 'node:child_process';
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
-import { homedir } from 'node:os';
-import { join } from 'node:path';
-import { BaseCommand } from '../../base-command.js';
-import { isGatewayRunning, spawnGateway, GATEWAY_PORT } from '../../lib/gateway-lifecycle.js';
-import { writeCursorProxyConfig, writeCursorUserProxyConfig, writeVSCodeProxyConfig, installMacOSProxyEnv, writeVSCodeUserProxyConfig, writeCursorHooks, writeCursorUserHooks, writeCopilotHooks, } from '../../lib/hooks-config.js';
-import { bootstrapActiveOrg } from '../../lib/active-org-refresh.js';
-const CERT_PATH = join(homedir(), '.mitmproxy', 'mitmproxy-ca-cert.pem');
-export default class HooksInstall extends BaseCommand {
-    static description = 'Install session tracking hooks and context capture proxy for Claude Code';
-    static examples = [
-        '<%= config.bin %> hooks install',
-        '<%= config.bin %> hooks install --global',
-        '<%= config.bin %> hooks install --no-proxy',
-    ];
-    static flags = {
-        'no-proxy': Flags.boolean({
-            default: false,
-            description: 'Skip proxy/gateway configuration (hooks only)',
-        }),
-        'project-dir': Flags.string({
-            description: 'Project directory to install hooks in (defaults to cwd)',
-        }),
-        global: Flags.boolean({
-            char: 'g',
-            default: false,
-            description: 'Install hooks globally (~/.claude/settings.json) so all projects are tracked',
-        }),
-    };
-    async run() {
-        const { flags } = await this.parse(HooksInstall);
-        const isGlobal = flags.global;
-        const projectPath = isGlobal ? homedir() : (flags['project-dir'] ?? process.cwd());
-        const configDir = join(projectPath, '.claude');
-        const configPath = join(configDir, 'settings.json');
-        const noProxy = flags['no-proxy'];
-        if (isGlobal) {
-            this.log(`Installing hooks globally → ${configPath}`);
-        }
-        // Read or create .claude/settings.json
-        let settings = {};
-        if (existsSync(configPath)) {
-            settings = JSON.parse(readFileSync(configPath, 'utf-8'));
-        }
-        // ── 1. Remove legacy hooks (session data now comes from local file providers) ──
-        if (settings.hooks) {
-            delete settings.hooks;
-            this.log('[OK] Removed legacy session hooks (no longer needed)');
-        }
-        // ── 2. Configure gateway + proxy ──────────────────────────────
-        if (!noProxy) {
-            // Ensure mitmproxy is available
-            const hasMitmproxy = this.findBinary('mitmdump');
-            if (!hasMitmproxy) {
-                this.log('');
-                this.log('[!!] mitmproxy not found — installing...');
-                const installed = this.installMitmproxy();
-                if (!installed) {
-                    this.log('[!!] Could not install mitmproxy. Skipping proxy config.');
-                    this.log('     Install manually: pipx install mitmproxy');
-                    this.log('     Then re-run: rulemetric hooks install');
-                }
-            }
-            // Generate CA cert if missing
-            if (!existsSync(CERT_PATH)) {
-                this.log('[..] Generating CA certificate...');
-                const mitmdump = this.findBinary('mitmdump');
-                if (mitmdump) {
-                    spawnSync(mitmdump, ['--set', 'listen_port=0', '-q'], {
-                        timeout: 5000,
-                        stdio: 'ignore',
-                    });
-                    if (existsSync(CERT_PATH)) {
-                        this.log(`[OK] CA certificate generated at ${CERT_PATH}`);
-                    }
-                    else {
-                        this.log('[!!] Could not generate CA cert');
-                    }
-                }
-            }
-            else {
-                this.log('[OK] CA certificate found');
-            }
-            // Trust CA cert in system store (if not already trusted)
-            if (existsSync(CERT_PATH) && !this.isCACertTrusted()) {
-                this.log('[..] Installing CA certificate into system trust store (requires admin)...');
-                const trusted = this.trustCACert();
-                if (trusted) {
-                    this.log('[OK] CA certificate trusted by system');
-                }
-                else {
-                    this.log('[!!] Could not install CA cert automatically.');
-                    if (process.platform === 'darwin') {
-                        this.log(`     Run manually: sudo security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain ${CERT_PATH}`);
-                    }
-                    else if (process.platform === 'linux') {
-                        this.log(`     Run manually: sudo cp ${CERT_PATH} /usr/local/share/ca-certificates/mitmproxy-ca.crt && sudo update-ca-certificates`);
-                    }
-                }
-            }
-            else if (existsSync(CERT_PATH)) {
-                this.log('[OK] CA certificate already trusted');
-            }
-            // Set permanent HTTPS_PROXY and NODE_EXTRA_CA_CERTS in settings.json
-            // These point to the gateway (always running), not mitmproxy directly
-            const env = (settings.env ?? {});
-            env.HTTPS_PROXY = `http://localhost:${GATEWAY_PORT}`;
-            // Bypass proxy for non-Anthropic traffic (Supabase auth, npm, etc.)
-            env.NO_PROXY = 'localhost,127.0.0.1,*.supabase.co,*.supabase.in';
-            if (existsSync(CERT_PATH)) {
-                env.NODE_EXTRA_CA_CERTS = CERT_PATH;
-            }
-            settings.env = env;
-            this.log(`[OK] HTTPS_PROXY set to gateway on :${GATEWAY_PORT} (permanent)`);
-            // Configure Cursor proxy (if .cursor/ exists)
-            const cursorProxy = writeCursorProxyConfig(projectPath, GATEWAY_PORT, CERT_PATH);
-            if (cursorProxy) {
-                this.log('[OK] Cursor proxy configured → .cursor/settings.json');
-            }
-            // Configure VS Code proxy for Copilot capture (workspace settings)
-            const vscodeProxy = writeVSCodeProxyConfig(projectPath, GATEWAY_PORT, CERT_PATH);
-            if (vscodeProxy) {
-                this.log('[OK] VS Code workspace proxy configured → .vscode/settings.json');
-            }
-            // Set http.proxy in VS Code user settings (workspace-level is silently ignored
-            // for http.proxy due to APPLICATION scope — microsoft/vscode#236932)
-            const vscodeUserProxy = writeVSCodeUserProxyConfig(GATEWAY_PORT);
-            if (vscodeUserProxy) {
-                this.log('[OK] VS Code user proxy configured → ~/Library/Application Support/Code/User/settings.json');
-            }
-            // Same for Cursor (VS Code fork inherits the APPLICATION-scope restriction).
-            const cursorUserProxy = writeCursorUserProxyConfig(GATEWAY_PORT);
-            if (cursorUserProxy) {
-                this.log('[OK] Cursor user proxy configured → ~/Library/Application Support/Cursor/User/settings.json');
-            }
-            // Set HTTPS_PROXY for all GUI apps via launchctl + LaunchAgent (macOS)
-            // Copilot reads process.env.HTTPS_PROXY directly — VS Code settings alone
-            // are insufficient because workspace http.proxy is ignored and extensions
-            // may bypass vscode-proxy-agent (microsoft/vscode#12588)
-            const macProxy = installMacOSProxyEnv(GATEWAY_PORT, CERT_PATH);
-            if (macProxy) {
-                this.log('[OK] HTTPS_PROXY set for GUI apps (launchctl + LaunchAgent)');
-            }
-            // Start gateway if not already running
-            if (isGatewayRunning()) {
-                this.log('[OK] Gateway already running');
-            }
-            else {
-                try {
-                    const pid = spawnGateway(this.config.version);
-                    this.log(`[OK] Gateway started (PID ${pid})`);
-                }
-                catch (err) {
-                    this.log(`[!!] Could not start gateway: ${err.message}`);
-                    this.log('     The session-start hook will auto-start it on next Claude Code session.');
-                }
-            }
-        }
-        // ── 3. Write Cursor + Copilot hook configs ─────────────────────
-        // These are independent of the proxy (they capture editor lifecycle
-        // events, not LLM traffic), so they run regardless of --no-proxy. Both
-        // helpers no-op when the target directory (.cursor/ or .github/)
-        // doesn't exist.
-        if (!isGlobal) {
-            const cursorHooks = writeCursorHooks(projectPath);
-            if (cursorHooks) {
-                this.log(`[OK] Cursor hooks configured → ${cursorHooks}`);
-            }
-            const copilotHooks = writeCopilotHooks(projectPath);
-            if (copilotHooks) {
-                this.log(`[OK] Copilot Agent hooks configured → ${copilotHooks}`);
-            }
-        }
-        // User-level Cursor hooks (~/.cursor/hooks.json) are required for global
-        // capture because Cursor's chat traffic bypasses HTTP proxies (HTTP/2
-        // multiplexed persistent connection — see cursor.com/docs/hooks). Without
-        // hooks, we get zero Cursor visibility for sessions outside this project.
-        // Runs in both --global and per-project modes since the user file is
-        // machine-wide either way.
-        const cursorUserHooks = writeCursorUserHooks();
-        if (cursorUserHooks) {
-            this.log(`[OK] Cursor user hooks configured → ${cursorUserHooks}`);
-        }
-        // ── 4. Write Claude Code settings ─────────────────────────────
-        mkdirSync(configDir, { recursive: true });
-        writeFileSync(configPath, JSON.stringify(settings, null, 2) + '\n');
-        this.log('');
-        this.log('Setup complete! Next steps:');
-        if (isGlobal) {
-            this.log('  1. Install always-on API:    rulemetric service install');
-            this.log('  2. Start Claude Code in any project — all sessions tracked automatically');
-            this.log('');
-            this.log('The API service starts on login and restarts on crash.');
+import {
+  STATUSLINE_SETTINGS_VALUE,
+  isStatuslineShimInstalled,
+  readCurrentStatusLine,
+  writeStatuslineShim
+} from "../../chunk-PHLMIZKM.js";
+import {
+  detectTmux
+} from "../../chunk-BO76WKJR.js";
+import {
+  installMacOSProxyEnv,
+  writeAntigravityHooks,
+  writeAntigravityUserHooks,
+  writeCopilotHooks,
+  writeCursorHooks,
+  writeCursorProxyConfig,
+  writeCursorUserHooks,
+  writeCursorUserProxyConfig,
+  writeVSCodeProxyConfig,
+  writeVSCodeUserProxyConfig
+} from "../../chunk-L674RNKQ.js";
+import {
+  GATEWAY_PORT,
+  isGatewayRunning,
+  spawnGateway
+} from "../../chunk-FTJRMUID.js";
+import "../../chunk-KRBQLMOP.js";
+import {
+  BaseCommand
+} from "../../chunk-S56LOTGQ.js";
+import "../../chunk-OGVORIFM.js";
+import {
+  bootstrapActiveOrg
+} from "../../chunk-2AM54TUK.js";
+import "../../chunk-EJOI2ZGU.js";
+import "../../chunk-KZRFUXGF.js";
+import "../../chunk-EKJ2CABV.js";
+import "../../chunk-NSBPE2FW.js";
+
+// src/commands/hooks/install.ts
+import { Flags } from "@oclif/core";
+import { execFileSync, execSync, spawnSync } from "node:child_process";
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+function isGatewayLaunchdManaged() {
+  try {
+    execFileSync("launchctl", ["list", "com.rulemetric.gateway"], {
+      stdio: ["ignore", "pipe", "pipe"]
+    });
+    return true;
+  } catch {
+    return false;
+  }
+}
+var CERT_PATH = join(homedir(), ".mitmproxy", "mitmproxy-ca-cert.pem");
+var HooksInstall = class _HooksInstall extends BaseCommand {
+  static description = "Install session tracking hooks and context capture proxy for Claude Code";
+  static examples = [
+    "<%= config.bin %> hooks install",
+    "<%= config.bin %> hooks install --global",
+    "<%= config.bin %> hooks install --no-proxy"
+  ];
+  static flags = {
+    "no-proxy": Flags.boolean({
+      default: false,
+      description: "Skip proxy/gateway configuration (hooks only)"
+    }),
+    "project-dir": Flags.string({
+      description: "Project directory to install hooks in (defaults to cwd)"
+    }),
+    global: Flags.boolean({
+      char: "g",
+      default: false,
+      description: "Install hooks globally (~/.claude/settings.json) so all projects are tracked"
+    }),
+    "statusline-usage": Flags.boolean({
+      default: false,
+      description: "Install the statusline shim so Claude Code pushes live rate_limits on every refresh (makes /usage rings update in real time without needing the proxy)"
+    })
+  };
+  async run() {
+    const { flags } = await this.parse(_HooksInstall);
+    const isGlobal = flags.global;
+    const projectPath = isGlobal ? homedir() : flags["project-dir"] ?? process.cwd();
+    const configDir = join(projectPath, ".claude");
+    const configPath = join(configDir, "settings.json");
+    const noProxy = flags["no-proxy"];
+    if (isGlobal) {
+      this.log(`Installing hooks globally \u2192 ${configPath}`);
+    }
+    let settings = {};
+    if (existsSync(configPath)) {
+      settings = JSON.parse(readFileSync(configPath, "utf-8"));
+    }
+    if (settings.hooks && typeof settings.hooks === "object") {
+      const hooks = settings.hooks;
+      let removed = 0;
+      for (const event of Object.keys(hooks)) {
+        const entries = hooks[event];
+        if (!Array.isArray(entries)) continue;
+        const kept = entries.filter((entry) => {
+          const isRulemetric = entry?.hooks?.some((h) => typeof h?.command === "string" && h.command.includes("rulemetric"));
+          if (isRulemetric) removed += 1;
+          return !isRulemetric;
+        });
+        if (kept.length === 0) delete hooks[event];
+        else hooks[event] = kept;
+      }
+      if (Object.keys(hooks).length === 0) delete settings.hooks;
+      if (removed > 0) this.log(`[OK] Removed ${removed} legacy rulemetric session hook(s) (no longer needed)`);
+    }
+    if (!noProxy) {
+      const hasMitmproxy = this.findBinary("mitmdump");
+      if (!hasMitmproxy) {
+        this.log("");
+        this.log("[!!] mitmproxy not found \u2014 installing...");
+        const installed = this.installMitmproxy();
+        if (!installed) {
+          this.log("[!!] Could not install mitmproxy. Skipping proxy config.");
+          this.log("     Install manually: pipx install mitmproxy");
+          this.log("     Then re-run: rulemetric hooks install");
         }
-        else if (!noProxy) {
-            this.log('  1. Start the capture proxy:  rulemetric proxy start');
-            this.log('  2. Start Claude Code — context will be captured automatically');
-            this.log('');
-            this.log('The gateway routes traffic direct when the proxy is off — Claude Code always works.');
-            this.log('');
-            this.log('To capture traffic from other clients (Python, curl, etc.):');
-            this.log('  eval "$(rulemetric proxy env --all)"');
+      }
+      if (!existsSync(CERT_PATH)) {
+        this.log("[..] Generating CA certificate...");
+        const mitmdump = this.findBinary("mitmdump");
+        if (mitmdump) {
+          spawnSync(mitmdump, ["--set", "listen_port=0", "-q"], {
+            timeout: 5e3,
+            stdio: "ignore"
+          });
+          if (existsSync(CERT_PATH)) {
+            this.log(`[OK] CA certificate generated at ${CERT_PATH}`);
+          } else {
+            this.log("[!!] Could not generate CA cert");
+          }
         }
-        else {
-            this.log('  1. Start Claude Code — session events will be tracked');
-            this.log('     (Run without --no-proxy to also capture system prompts)');
+      } else {
+        this.log("[OK] CA certificate found");
+      }
+      if (existsSync(CERT_PATH) && !this.isCACertTrusted()) {
+        this.log("[..] Installing CA certificate into system trust store (requires admin)...");
+        const trusted = this.trustCACert();
+        if (trusted) {
+          this.log("[OK] CA certificate trusted by system");
+        } else {
+          this.log("[!!] Could not install CA cert automatically.");
+          if (process.platform === "darwin") {
+            this.log(`     Run manually: sudo security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain ${CERT_PATH}`);
+          } else if (process.platform === "linux") {
+            this.log(`     Run manually: sudo cp ${CERT_PATH} /usr/local/share/ca-certificates/mitmproxy-ca.crt && sudo update-ca-certificates`);
+          }
         }
-        // Ensure the active-org cache is populated before the user starts a
-        // Claude Code session. BaseCommand fired the guarded refresh earlier
-        // but may have raced with auth init or hit a transient error; this
-        // explicit retry guarantees the cache reflects the user's current
-        // active_org_id at the end of `hooks install`.
-        await bootstrapActiveOrg();
-    }
-    findBinary(name) {
+      } else if (existsSync(CERT_PATH)) {
+        this.log("[OK] CA certificate already trusted");
+      }
+      const env = settings.env ?? {};
+      env.HTTPS_PROXY = `http://localhost:${GATEWAY_PORT}`;
+      env.NO_PROXY = "localhost,127.0.0.1,*.supabase.co,*.supabase.in";
+      if (existsSync(CERT_PATH)) {
+        env.NODE_EXTRA_CA_CERTS = CERT_PATH;
+      }
+      settings.env = env;
+      this.log(`[OK] HTTPS_PROXY set to gateway on :${GATEWAY_PORT} (permanent)`);
+      const cursorProxy = writeCursorProxyConfig(projectPath, GATEWAY_PORT, CERT_PATH);
+      if (cursorProxy) {
+        this.log("[OK] Cursor proxy configured \u2192 .cursor/settings.json");
+      }
+      const vscodeProxy = writeVSCodeProxyConfig(projectPath, GATEWAY_PORT, CERT_PATH);
+      if (vscodeProxy) {
+        this.log("[OK] VS Code workspace proxy configured \u2192 .vscode/settings.json");
+      }
+      const vscodeUserProxy = writeVSCodeUserProxyConfig(GATEWAY_PORT);
+      if (vscodeUserProxy) {
+        this.log("[OK] VS Code user proxy configured \u2192 ~/Library/Application Support/Code/User/settings.json");
+      }
+      const cursorUserProxy = writeCursorUserProxyConfig(GATEWAY_PORT);
+      if (cursorUserProxy) {
+        this.log("[OK] Cursor user proxy configured \u2192 ~/Library/Application Support/Cursor/User/settings.json");
+      }
+      const macProxy = installMacOSProxyEnv(GATEWAY_PORT, CERT_PATH);
+      if (macProxy) {
+        this.log("[OK] HTTPS_PROXY set for GUI apps (launchctl + LaunchAgent)");
+      }
+      if (isGatewayLaunchdManaged()) {
+        this.log("[OK] Gateway managed by launchd (com.rulemetric.gateway)");
+      } else if (isGatewayRunning()) {
+        this.log("[OK] Gateway already running");
+      } else {
         try {
-            return execSync(`which ${name} 2>/dev/null`, { encoding: 'utf-8' }).trim() || null;
-        }
-        catch {
-            return null;
+          const pid = spawnGateway(this.config.version);
+          this.log(`[OK] Gateway started (PID ${pid})`);
+        } catch (err) {
+          this.log(`[!!] Could not start gateway: ${err.message}`);
+          this.log("     The session-start hook will auto-start it on next Claude Code session.");
         }
+      }
     }
-    installMitmproxy() {
-        for (const [cmd, args] of [
-            ['pipx', ['install', 'mitmproxy']],
-            ['uv', ['tool', 'install', 'mitmproxy']],
-            ['brew', ['install', 'mitmproxy']],
-        ]) {
-            if (this.findBinary(cmd)) {
-                this.log(`     Installing via ${cmd}...`);
-                const result = spawnSync(cmd, [...args], { stdio: 'inherit' });
-                if (result.status === 0)
-                    return true;
-            }
-        }
-        return false;
+    if (!isGlobal) {
+      const cursorHooks = writeCursorHooks(projectPath);
+      if (cursorHooks) {
+        this.log(`[OK] Cursor hooks configured \u2192 ${cursorHooks}`);
+      }
+      const copilotHooks = writeCopilotHooks(projectPath);
+      if (copilotHooks) {
+        this.log(`[OK] Copilot Agent hooks configured \u2192 ${copilotHooks}`);
+      }
+      const antigravityHooks = writeAntigravityHooks(projectPath);
+      if (antigravityHooks) {
+        this.log(`[OK] Antigravity workspace hooks configured \u2192 ${antigravityHooks}`);
+      }
     }
-    isCACertTrusted() {
-        if (process.platform === 'darwin') {
-            const result = spawnSync('security', ['verify-cert', '-c', CERT_PATH], {
-                stdio: 'pipe',
-            });
-            return result.status === 0;
-        }
-        if (process.platform === 'linux') {
-            return existsSync('/usr/local/share/ca-certificates/mitmproxy-ca.crt');
-        }
-        if (process.platform === 'win32') {
-            // On Windows, check if cert is in the Root store
-            const result = spawnSync('certutil', ['-verify', CERT_PATH], {
-                stdio: 'pipe',
-            });
-            return result.status === 0;
-        }
-        return false;
+    const antigravityUserHooks = writeAntigravityUserHooks();
+    if (antigravityUserHooks) {
+      this.log(`[OK] Antigravity user hooks configured \u2192 ${antigravityUserHooks}`);
     }
-    trustCACert() {
-        if (process.platform === 'darwin') {
-            const result = spawnSync('sudo', [
-                'security', 'add-trusted-cert', '-d', '-r', 'trustRoot',
-                '-k', '/Library/Keychains/System.keychain', CERT_PATH,
-            ], { stdio: 'inherit' });
-            return result.status === 0;
-        }
-        if (process.platform === 'linux') {
-            const cp = spawnSync('sudo', [
-                'cp', CERT_PATH, '/usr/local/share/ca-certificates/mitmproxy-ca.crt',
-            ], { stdio: 'inherit' });
-            if (cp.status !== 0)
-                return false;
-            const update = spawnSync('sudo', ['update-ca-certificates'], { stdio: 'inherit' });
-            return update.status === 0;
-        }
-        if (process.platform === 'win32') {
-            const result = spawnSync('certutil', [
-                '-addstore', '-f', 'Root', CERT_PATH,
-            ], { stdio: 'inherit' });
-            return result.status === 0;
+    const cursorUserHooks = writeCursorUserHooks();
+    if (cursorUserHooks) {
+      this.log(`[OK] Cursor user hooks configured \u2192 ${cursorUserHooks}`);
+    }
+    if (flags["statusline-usage"]) {
+      if (isStatuslineShimInstalled(settings)) {
+        this.log("[OK] Statusline shim already installed");
+      } else {
+        const prevCmd = readCurrentStatusLine(settings);
+        writeStatuslineShim(prevCmd);
+        settings.statusLine = STATUSLINE_SETTINGS_VALUE;
+        if (prevCmd) {
+          this.log(`[OK] Statusline shim installed \u2192 ${STATUSLINE_SETTINGS_VALUE.command} (chains to: ${prevCmd})`);
+        } else {
+          this.log(`[OK] Statusline shim installed \u2192 ${STATUSLINE_SETTINGS_VALUE.command}`);
         }
-        return false;
+        this.log("     Rate-limit rings will now update on Claude Code's statusline refresh cadence");
+      }
     }
-}
-//# sourceMappingURL=install.js.map
+    mkdirSync(configDir, { recursive: true });
+    writeFileSync(configPath, JSON.stringify(settings, null, 2) + "\n");
+    this.log("");
+    this.log("Setup complete! Next steps:");
+    if (isGlobal) {
+      this.log("  1. Install always-on API:    rulemetric service install");
+      this.log("  2. Start Claude Code in any project \u2014 all sessions tracked automatically");
+      this.log("");
+      this.log("The API service starts on login and restarts on crash.");
+    } else if (!noProxy) {
+      this.log("  1. Start the capture proxy:  rulemetric proxy start");
+      this.log("  2. Start Claude Code \u2014 context will be captured automatically");
+      this.log("");
+      this.log("The gateway routes traffic direct when the proxy is off \u2014 Claude Code always works.");
+      this.log("");
+      this.log("To capture traffic from other clients (Python, curl, etc.):");
+      this.log('  eval "$(rulemetric proxy env --all)"');
+    } else {
+      this.log("  1. Start Claude Code \u2014 session events will be tracked");
+      this.log("     (Run without --no-proxy to also capture system prompts)");
+    }
+    await bootstrapActiveOrg();
+    const tmux = await detectTmux();
+    this.log("");
+    if (tmux.available) {
+      this.log(`[OK] tmux found${tmux.version ? ` (v${tmux.version})` : ""} \u2014 live send enabled`);
+    } else {
+      this.log("[!!] tmux not found \u2014 live send will fall back to opening Terminal. Install with: brew install tmux");
+    }
+  }
+  findBinary(name) {
+    try {
+      return execSync(`which ${name} 2>/dev/null`, { encoding: "utf-8" }).trim() || null;
+    } catch {
+      return null;
+    }
+  }
+  installMitmproxy() {
+    for (const [cmd, args] of [
+      ["pipx", ["install", "mitmproxy"]],
+      ["uv", ["tool", "install", "mitmproxy"]],
+      ["brew", ["install", "mitmproxy"]]
+    ]) {
+      if (this.findBinary(cmd)) {
+        this.log(`     Installing via ${cmd}...`);
+        const result = spawnSync(cmd, [...args], { stdio: "inherit" });
+        if (result.status === 0) return true;
+      }
+    }
+    return false;
+  }
+  isCACertTrusted() {
+    if (process.platform === "darwin") {
+      const result = spawnSync("security", ["verify-cert", "-c", CERT_PATH], {
+        stdio: "pipe"
+      });
+      return result.status === 0;
+    }
+    if (process.platform === "linux") {
+      return existsSync("/usr/local/share/ca-certificates/mitmproxy-ca.crt");
+    }
+    if (process.platform === "win32") {
+      const result = spawnSync("certutil", ["-verify", CERT_PATH], {
+        stdio: "pipe"
+      });
+      return result.status === 0;
+    }
+    return false;
+  }
+  trustCACert() {
+    if (process.platform === "darwin") {
+      const result = spawnSync("sudo", [
+        "security",
+        "add-trusted-cert",
+        "-d",
+        "-r",
+        "trustRoot",
+        "-k",
+        "/Library/Keychains/System.keychain",
+        CERT_PATH
+      ], { stdio: "inherit" });
+      return result.status === 0;
+    }
+    if (process.platform === "linux") {
+      const cp = spawnSync("sudo", [
+        "cp",
+        CERT_PATH,
+        "/usr/local/share/ca-certificates/mitmproxy-ca.crt"
+      ], { stdio: "inherit" });
+      if (cp.status !== 0) return false;
+      const update = spawnSync("sudo", ["update-ca-certificates"], { stdio: "inherit" });
+      return update.status === 0;
+    }
+    if (process.platform === "win32") {
+      const result = spawnSync("certutil", [
+        "-addstore",
+        "-f",
+        "Root",
+        CERT_PATH
+      ], { stdio: "inherit" });
+      return result.status === 0;
+    }
+    return false;
+  }
+};
+export {
+  HooksInstall as default
+};
+//# sourceMappingURL=install.js.map