@rulemetric/cli 0.4.0 → 0.5.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rulemetric/cli",
-  "version": "0.4.0",
+  "version": "0.5.1",
   "publishConfig": {
     "access": "public"
   },
@@ -70,9 +70,9 @@
     "postgres": "^3.4.0",
     "react": "^19.0.0",
     "zod": "^3.24.0",
-    "@rulemetric/proxy": "0.4.0",
-    "@rulemetric/skills-registry": "0.4.0",
-    "@rulemetric/hooks": "0.4.0"
+    "@rulemetric/hooks": "0.5.1",
+    "@rulemetric/proxy": "0.5.1",
+    "@rulemetric/skills-registry": "0.5.1"
   },
   "//deps": "Worker (`evals agent`) runtime deps: the @opentelemetry/* set, @sentry/node, and postgres are STATIC top-level imports loaded at worker startup (via bundled @rulemetric/{telemetry,db}) — they MUST be runtime deps or a clean `npm i -g` crashes with ModuleLoadError. `better-sqlite3` is optionalDependencies (below): it's a native module, lazy `require()`'d inside a try/catch (packages/session providers cursor/opencode) so a missing binary degrades gracefully — making it a hard dep would break `npm i -g` on platforms without prebuilt binaries. `resend` stays a devDep: lazy `await import('resend')` guarded by RESEND_API_KEY, which end-user workers never set (provider falls back to noop). Classification verified via import-graph scan of dist/commands/evals/agent.js + per-importer static/lazy check.",
   "optionalDependencies": {

package/dist/chunk-2WWGG2A5.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../src/lib/agent-loop.ts"],
-  "sourcesContent": ["// Phase 4b thin-agent migration: the parallel-run worker loop that replaces\n// graphile-worker's LISTEN/NOTIFY pickup with HTTP long-polling against the\n// Phase 4a /api/work endpoints. See docs/plans/2026-05-25-thin-agent-migration.md.\n//\n// This file is invoked exclusively by `rulemetric evals agent` \u2014 the only\n// worker mode since Phase 4c deleted the graphile path.\n//\n// Lifecycle for one cycle:\n//   1. Long-poll GET /api/work/next?capabilities=...&waitMs=...\n//   2. If 204 (returned as \"\" by api-client because no JSON body), increment\n//      a small backoff capped at 5s and re-poll.\n//   3. If 200, dispatch by `kind` to the matching handler from HANDLERS.\n//   4. Start a heartbeat timer that POSTs /api/work/:id/heartbeat at\n//      heartbeatIntervalMs while the handler runs.\n//   5. On success: POST /api/work/:id/complete with { result, leaseToken }.\n//      On PermanentJobError: POST /fail with terminal=true (server will not\n//      requeue regardless of attempts). On any other error: POST /fail with\n//      terminal=false (server requeues if attempts < max).\n//\n// Abort behavior: an AbortSignal short-circuits the next long-poll and any\n// backoff sleep. An in-flight handler can't be cancelled (it has already\n// spawned `claude` subprocesses), so we await it to natural completion and\n// then exit. This matches listen.ts's 10s shutdown grace pattern, except we\n// don't need an outer hard-kill timer here \u2014 the caller (the oclif command)\n// owns the process.exit.\n\nimport type { JobHelpers } from './job-helpers.js';\nimport { apiGet, apiPost, ApiError } from './api-client.js';\nimport { isPermanentJobError } from './permanent-job-error.js';\nimport { processEval } from './handlers/process-eval.js';\nimport { processInsights } from './handlers/process-insights.js';\nimport { processLaunch } from './handlers/process-launch.js';\nimport { processConversation } from './handlers/process-conversation.js';\nimport { processSendMessage } from './handlers/process-send-message.js';\nimport { processSessionGoal } from './handlers/process-session-goal.js';\nimport { processAnnouncement } from './handlers/process-announcement.js';\nimport { processRunCleanup } from './handlers/process-run-cleanup.js';\nimport { cronSuggestInstructions } from './handlers/cron-suggest-instructions.js';\nimport { cronRefreshSkills } from './handlers/cron-refresh-skills.js';\nimport { startTerminalTargetHeartbeat } from './terminal-target-heartbeat.js';\n\n// Handler dispatch table. Keys MUST match the API's CAPABILITY_TO_TABLE keys\n// in apps/api/src/routes/work.ts; mismatches would cause the API to silently\n// drop the capability and starve this kind of work.\ntype Handler = (\n  payload: Record<string, unknown>,\n  helpers: JobHelpers,\n) => Promise<Record<string, unknown> | undefined | void>;\n\nexport const HANDLERS: Record<string, Handler> = {\n  process_eval: processEval as unknown as Handler,\n  process_insights: processInsights as unknown as Handler,\n  process_launch: processLaunch as unknown as Handler,\n  process_send_message: processSendMessage as unknown as Handler,\n  process_conversation: processConversation as unknown as Handler,\n  // agent_jobs kinds (Phase 4c Stage 3b, migration 00083). processSessionGoal\n  // and processAnnouncement take an optional deps object in the helpers\n  // position \u2014 every key is optional, so JobHelpers passing through is\n  // harmless and they fall back to their defaults.\n  process_session_goal: processSessionGoal as unknown as Handler,\n  process_announcement: processAnnouncement as unknown as Handler,\n  // Multi-session orchestration (\"runs\") worktree cleanup (Task 5.2). agent_jobs\n  // kind \u2014 no mirror table. Enqueued by POST /api/runs/:id/cleanup; prunes the\n  // worktrees of a run's ended sessions, guarding against uncommitted work.\n  process_run_cleanup: processRunCleanup as unknown as Handler,\n  cron_suggest_instructions: cronSuggestInstructions as unknown as Handler,\n  // Dropped by accident in the Phase 4c graphile\u2192agent_jobs migration: the\n  // handler survived but lost its registration + schedule, so the skills\n  // registry froze (last refresh 2026-05-21) and the suggest cron marked\n  // every suggestion stale on each run. Re-scheduled by migration 00086.\n  cron_refresh_skills: cronRefreshSkills as unknown as Handler,\n};\n\nexport const CAPABILITIES: readonly string[] = Object.keys(HANDLERS);\n\ninterface NextWorkResponse {\n  id: string;\n  kind: string;\n  payload: Record<string, unknown>;\n  attempts: number;\n  leaseToken: string;\n  leaseDurationSeconds: number;\n  table: string;\n}\n\nexport interface RunAgentLoopOptions {\n  signal: AbortSignal;\n  log?: (msg: string) => void;\n  /** Long-poll wait passed to GET /api/work/next?waitMs= */\n  pollWaitMs?: number;\n  /** How often to POST /api/work/:id/heartbeat while a handler runs */\n  heartbeatIntervalMs?: number;\n  /** Capability list to advertise. Defaults to all known handlers. */\n  capabilities?: readonly string[];\n}\n\nconst DEFAULT_POLL_WAIT_MS = 30_000;\nconst DEFAULT_HEARTBEAT_MS = 30_000;\nconst PRESENCE_HEARTBEAT_MS = 30_000;\nconst BACKOFF_INITIAL_MS = 250;\nconst BACKOFF_MAX_MS = 5_000;\n\n// Stable per-process identifier so worker_connections groups the same agent\n// across heartbeats (the unique key is (userId, workerType, clientName)).\nconst PRESENCE_CLIENT_NAME = `thin-agent-${process.pid}`;\n\n/**\n * Background presence heartbeat. Posts to /api/workers/heartbeat every 30s so\n * worker_connections has a fresh row \u2014 that's what the dashboard's\n * useWorkerStatus reads to decide \"Worker online\" for live-send gating.\n * Distinct from the per-job heartbeat in runOne, which only extends a\n * specific job's lease. The graphile-worker runner had this since day one;\n * the thin agent was missing it, so the dashboard showed \"Worker offline\"\n * even when the agent was actively processing jobs.\n */\nfunction startPresenceHeartbeat(\n  capabilities: readonly string[],\n  signal: AbortSignal,\n  log: (msg: string) => void,\n): void {\n  const send = (status: 'alive' | 'shutting_down') => {\n    void apiPost('/api/workers/heartbeat', {\n      workerType: 'cli-worker',\n      clientName: PRESENCE_CLIENT_NAME,\n      workerVersion: '0.1.0',\n      currentJobId: null,\n      inFlightCount: 0,\n      lastError: null,\n      status,\n      metadata: { capabilities, mode: 'thin-agent' },\n    }).catch((err) => {\n      structuredLog(log, {\n        event: 'presence_heartbeat_error',\n        error: err instanceof Error ? err.message : String(err),\n      });\n    });\n  };\n  send('alive');\n  const timer = setInterval(() => send('alive'), PRESENCE_HEARTBEAT_MS);\n  signal.addEventListener('abort', () => {\n    clearInterval(timer);\n    send('shutting_down');\n  }, { once: true });\n}\n\nfunction structuredLog(\n  log: (msg: string) => void,\n  event: Record<string, unknown>,\n): void {\n  try {\n    log(JSON.stringify({ ts: new Date().toISOString(), ...event }));\n  } catch {\n    // JSON.stringify can throw on a circular structure; fall back to a\n    // best-effort string so a log failure never takes down the loop.\n    log(`[agent-loop] log_error event=${event['event']}`);\n  }\n}\n\n/** Sleep that resolves early when the abort signal fires. Returns true if\n * the full duration elapsed, false if aborted. */\nfunction abortableSleep(ms: number, signal: AbortSignal): Promise<boolean> {\n  if (signal.aborted) return Promise.resolve(false);\n  if (ms <= 0) return Promise.resolve(true);\n  return new Promise<boolean>((resolve) => {\n    const timer = setTimeout(() => {\n      signal.removeEventListener('abort', onAbort);\n      resolve(true);\n    }, ms);\n    const onAbort = () => {\n      clearTimeout(timer);\n      signal.removeEventListener('abort', onAbort);\n      resolve(false);\n    };\n    signal.addEventListener('abort', onAbort, { once: true });\n  });\n}\n\n/** Poll once for work. Returns the parsed response or null on 204. api-client\n * returns \"\" for an empty response body (Content-Type is not JSON on 204), so\n * we use that as the 204 sentinel. */\nexport async function pollForWork(\n  capabilities: readonly string[],\n  waitMs: number,\n): Promise<NextWorkResponse | null> {\n  const qs = `capabilities=${encodeURIComponent(capabilities.join(','))}&waitMs=${waitMs}`;\n  const result = await apiGet<NextWorkResponse | string>(`/api/work/next?${qs}`);\n  if (result == null || typeof result === 'string') return null;\n  return result;\n}\n\n/** Construct a minimal JobHelpers shim. Handlers only touch\n * helpers.logger.{info,warn,error}(msg) and helpers.job.attempts \u2014 verified\n * by grep against apps/cli/src/lib/handlers/. We cast through `unknown` so\n * TS accepts the structurally smaller object as the full JobHelpers type;\n * pulling graphile-worker into this hot path would defeat the Phase 4c\n * cleanup that removes the dep entirely. */\nfunction makeHelpers(attempts: number, log: (msg: string) => void): JobHelpers {\n  return {\n    logger: {\n      info: (msg: string) => log(msg),\n      warn: (msg: string) => log(msg),\n      error: (msg: string) => log(msg),\n    },\n    job: { attempts },\n  };\n}\n\nasync function runOne(\n  job: NextWorkResponse,\n  heartbeatIntervalMs: number,\n  log: (msg: string) => void,\n): Promise<void> {\n  const handler = HANDLERS[job.kind];\n  const startedAt = Date.now();\n  structuredLog(log, {\n    event: 'claim',\n    jobId: job.id,\n    kind: job.kind,\n    attempts: job.attempts,\n  });\n\n  // Defensive: if the API returned a kind the agent doesn't know about\n  // (capability filter mismatch, schema drift), fail terminally so the row\n  // doesn't bounce forever. The /api/work/next filter should already prevent\n  // this, but failing closed at the dispatcher means a single new kind on\n  // the API side can't wedge an older agent.\n  if (!handler) {\n    const msg = `unknown kind: ${job.kind}`;\n    structuredLog(log, {\n      event: 'fail',\n      jobId: job.id,\n      kind: job.kind,\n      terminal: true,\n      error: msg,\n    });\n    await apiPost(`/api/work/${job.id}/fail`, {\n      leaseToken: job.leaseToken,\n      error: msg,\n      terminal: true,\n    }).catch(() => {\n      // best-effort: the lease will expire and the reconciler reclaims it\n    });\n    return;\n  }\n\n  // Heartbeat timer. Starts after the first heartbeatIntervalMs elapses so\n  // we don't spam an extra request for sub-second jobs. Errors are swallowed\n  // \u2014 a single failed heartbeat doesn't abort the run; the server's\n  // 5-minute lease gives us up to ten chances at 30s intervals before we\n  // lose the claim.\n  const heartbeatTimer = setInterval(() => {\n    structuredLog(log, { event: 'heartbeat', jobId: job.id });\n    apiPost(`/api/work/${job.id}/heartbeat`, {\n      leaseToken: job.leaseToken,\n    }).catch((err) => {\n      structuredLog(log, {\n        event: 'heartbeat_error',\n        jobId: job.id,\n        error: err instanceof Error ? err.message : String(err),\n      });\n    });\n  }, heartbeatIntervalMs);\n\n  try {\n    const helpers = makeHelpers(job.attempts, log);\n    const result = (await handler(job.payload, helpers)) ?? {};\n    clearInterval(heartbeatTimer);\n    structuredLog(log, {\n      event: 'complete',\n      jobId: job.id,\n      kind: job.kind,\n      durationMs: Date.now() - startedAt,\n    });\n    await apiPost(`/api/work/${job.id}/complete`, {\n      leaseToken: job.leaseToken,\n      result,\n    });\n  } catch (err) {\n    clearInterval(heartbeatTimer);\n    const terminal = isPermanentJobError(err);\n    const message = err instanceof Error ? err.message : String(err);\n    structuredLog(log, {\n      event: 'fail',\n      jobId: job.id,\n      kind: job.kind,\n      durationMs: Date.now() - startedAt,\n      terminal,\n      error: message,\n    });\n    await apiPost(`/api/work/${job.id}/fail`, {\n      leaseToken: job.leaseToken,\n      error: message,\n      terminal,\n    }).catch((postErr) => {\n      structuredLog(log, {\n        event: 'fail_post_error',\n        jobId: job.id,\n        error: postErr instanceof Error ? postErr.message : String(postErr),\n      });\n    });\n  }\n}\n\nexport async function runAgentLoop(opts: RunAgentLoopOptions): Promise<void> {\n  const log = opts.log ?? (() => undefined);\n  const pollWaitMs = opts.pollWaitMs ?? DEFAULT_POLL_WAIT_MS;\n  const heartbeatIntervalMs = opts.heartbeatIntervalMs ?? DEFAULT_HEARTBEAT_MS;\n  const capabilities = opts.capabilities ?? CAPABILITIES;\n\n  let backoffMs = BACKOFF_INITIAL_MS;\n  structuredLog(log, {\n    event: 'agent_start',\n    capabilities,\n    pollWaitMs,\n    heartbeatIntervalMs,\n  });\n\n  // Background presence heartbeat \u2014 writes to worker_connections so the\n  // dashboard's \"Worker online\" indicator turns on. Fire-and-forget; failures\n  // are logged but don't block the work poll.\n  startPresenceHeartbeat(capabilities, opts.signal, log);\n\n  // Fire-and-forget the terminal-target liveness heartbeat. It runs on its\n  // own interval (default 60s) and shuts down on the same abort signal.\n  // Errors are caught internally \u2014 we don't await it so a slow tmux probe\n  // can't delay the work poll.\n  void startTerminalTargetHeartbeat({ signal: opts.signal, log }).catch((err) => {\n    structuredLog(log, {\n      event: 'tt_heartbeat_fatal',\n      error: err instanceof Error ? err.message : String(err),\n    });\n  });\n\n  while (!opts.signal.aborted) {\n    let job: NextWorkResponse | null = null;\n    try {\n      job = await pollForWork(capabilities, pollWaitMs);\n    } catch (err) {\n      // Network/API errors during poll: log + backoff. The API may be\n      // restarting, the laptop may have just woken, etc. Don't crash the\n      // loop \u2014 that's the whole point of this migration.\n      const status = err instanceof ApiError ? err.statusCode : undefined;\n      structuredLog(log, {\n        event: 'poll_error',\n        status,\n        error: err instanceof Error ? err.message : String(err),\n      });\n      const completed = await abortableSleep(backoffMs, opts.signal);\n      if (!completed) break;\n      backoffMs = Math.min(backoffMs * 2, BACKOFF_MAX_MS);\n      continue;\n    }\n\n    if (!job) {\n      structuredLog(log, { event: 'poll_204' });\n      const completed = await abortableSleep(backoffMs, opts.signal);\n      if (!completed) break;\n      backoffMs = Math.min(backoffMs * 2, BACKOFF_MAX_MS);\n      continue;\n    }\n\n    // Got work \u2014 reset the backoff and run it. An in-flight handler is\n    // intentionally not abort-cancellable; we await its natural completion\n    // even if the signal fires mid-run.\n    backoffMs = BACKOFF_INITIAL_MS;\n    await runOne(job, heartbeatIntervalMs, log);\n  }\n\n  structuredLog(log, { event: 'agent_stop' });\n}\n"],
-  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiDO,IAAM,WAAoC;AAAA,EAC/C,cAAc;AAAA,EACd,kBAAkB;AAAA,EAClB,gBAAgB;AAAA,EAChB,sBAAsB;AAAA,EACtB,sBAAsB;AAAA;AAAA;AAAA;AAAA;AAAA,EAKtB,sBAAsB;AAAA,EACtB,sBAAsB;AAAA;AAAA;AAAA;AAAA,EAItB,qBAAqB;AAAA,EACrB,2BAA2B;AAAA;AAAA;AAAA;AAAA;AAAA,EAK3B,qBAAqB;AACvB;AAEO,IAAM,eAAkC,OAAO,KAAK,QAAQ;AAuBnE,IAAM,uBAAuB;AAC7B,IAAM,uBAAuB;AAC7B,IAAM,wBAAwB;AAC9B,IAAM,qBAAqB;AAC3B,IAAM,iBAAiB;AAIvB,IAAM,uBAAuB,cAAc,QAAQ,GAAG;AAWtD,SAAS,uBACP,cACA,QACA,KACM;AACN,QAAM,OAAO,CAAC,WAAsC;AAClD,SAAK,QAAQ,0BAA0B;AAAA,MACrC,YAAY;AAAA,MACZ,YAAY;AAAA,MACZ,eAAe;AAAA,MACf,cAAc;AAAA,MACd,eAAe;AAAA,MACf,WAAW;AAAA,MACX;AAAA,MACA,UAAU,EAAE,cAAc,MAAM,aAAa;AAAA,IAC/C,CAAC,EAAE,MAAM,CAAC,QAAQ;AAChB,oBAAc,KAAK;AAAA,QACjB,OAAO;AAAA,QACP,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,MACxD,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AACA,OAAK,OAAO;AACZ,QAAM,QAAQ,YAAY,MAAM,KAAK,OAAO,GAAG,qBAAqB;AACpE,SAAO,iBAAiB,SAAS,MAAM;AACrC,kBAAc,KAAK;AACnB,SAAK,eAAe;AAAA,EACtB,GAAG,EAAE,MAAM,KAAK,CAAC;AACnB;AAEA,SAAS,cACP,KACA,OACM;AACN,MAAI;AACF,QAAI,KAAK,UAAU,EAAE,KAAI,oBAAI,KAAK,GAAE,YAAY,GAAG,GAAG,MAAM,CAAC,CAAC;AAAA,EAChE,QAAQ;AAGN,QAAI,gCAAgC,MAAM,OAAO,CAAC,EAAE;AAAA,EACtD;AACF;AAIA,SAAS,eAAe,IAAY,QAAuC;AACzE,MAAI,OAAO,QAAS,QAAO,QAAQ,QAAQ,KAAK;AAChD,MAAI,MAAM,EAAG,QAAO,QAAQ,QAAQ,IAAI;AACxC,SAAO,IAAI,QAAiB,CAAC,YAAY;AACvC,UAAM,QAAQ,WAAW,MAAM;AAC7B,aAAO,oBAAoB,SAAS,OAAO;AAC3C,cAAQ,IAAI;AAAA,IACd,GAAG,EAAE;AACL,UAAM,UAAU,MAAM;AACpB,mBAAa,KAAK;AAClB,aAAO,oBAAoB,SAAS,OAAO;AAC3C,cAAQ,KAAK;AAAA,IACf;AACA,WAAO,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;AAAA,EAC1D,CAAC;AACH;AAKA,eAAsB,YACpB,cACA,QACkC;AAClC,QAAM,KAAK,gBAAgB,mBAAmB,aAAa,KAAK,GAAG,CAAC,CAAC,WAAW,MAAM;AACtF,QAAM,SAAS,MAAM,OAAkC,kBAAkB,EAAE,EAAE;AAC7E,MAAI,UAAU,QAAQ,OAAO,WAAW,SAAU,QAAO;AACzD,SAAO;AACT;AAQA,SAAS,YAAY,UAAkB,KAAwC;AAC7E,SAAO;AAAA,IACL,QAAQ;AAAA,MACN,MAAM,CAAC,QAAgB,IAAI,GAAG;AAAA,MAC9B,MAAM,CAAC,QAAgB,IAAI,GAAG;AAAA,MAC9B,OAAO,CAAC,QAAgB,IAAI,GAAG;AAAA,IACjC;AAAA,IACA,KAAK,EAAE,SAAS;AAAA,EAClB;AACF;AAEA,eAAe,OACb,KACA,qBACA,KACe;AACf,QAAM,UAAU,SAAS,IAAI,IAAI;AACjC,QAAM,YAAY,KAAK,IAAI;AAC3B,gBAAc,KAAK;AAAA,IACjB,OAAO;AAAA,IACP,OAAO,IAAI;AAAA,IACX,MAAM,IAAI;AAAA,IACV,UAAU,IAAI;AAAA,EAChB,CAAC;AAOD,MAAI,CAAC,SAAS;AACZ,UAAM,MAAM,iBAAiB,IAAI,IAAI;AACrC,kBAAc,KAAK;AAAA,MACjB,OAAO;AAAA,MACP,OAAO,IAAI;AAAA,MACX,MAAM,IAAI;AAAA,MACV,UAAU;AAAA,MACV,OAAO;AAAA,IACT,CAAC;AACD,UAAM,QAAQ,aAAa,IAAI,EAAE,SAAS;AAAA,MACxC,YAAY,IAAI;AAAA,MAChB,OAAO;AAAA,MACP,UAAU;AAAA,IACZ,CAAC,EAAE,MAAM,MAAM;AAAA,IAEf,CAAC;AACD;AAAA,EACF;AAOA,QAAM,iBAAiB,YAAY,MAAM;AACvC,kBAAc,KAAK,EAAE,OAAO,aAAa,OAAO,IAAI,GAAG,CAAC;AACxD,YAAQ,aAAa,IAAI,EAAE,cAAc;AAAA,MACvC,YAAY,IAAI;AAAA,IAClB,CAAC,EAAE,MAAM,CAAC,QAAQ;AAChB,oBAAc,KAAK;AAAA,QACjB,OAAO;AAAA,QACP,OAAO,IAAI;AAAA,QACX,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,MACxD,CAAC;AAAA,IACH,CAAC;AAAA,EACH,GAAG,mBAAmB;AAEtB,MAAI;AACF,UAAM,UAAU,YAAY,IAAI,UAAU,GAAG;AAC7C,UAAM,SAAU,MAAM,QAAQ,IAAI,SAAS,OAAO,KAAM,CAAC;AACzD,kBAAc,cAAc;AAC5B,kBAAc,KAAK;AAAA,MACjB,OAAO;AAAA,MACP,OAAO,IAAI;AAAA,MACX,MAAM,IAAI;AAAA,MACV,YAAY,KAAK,IAAI,IAAI;AAAA,IAC3B,CAAC;AACD,UAAM,QAAQ,aAAa,IAAI,EAAE,aAAa;AAAA,MAC5C,YAAY,IAAI;AAAA,MAChB;AAAA,IACF,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,kBAAc,cAAc;AAC5B,UAAM,WAAW,oBAAoB,GAAG;AACxC,UAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,kBAAc,KAAK;AAAA,MACjB,OAAO;AAAA,MACP,OAAO,IAAI;AAAA,MACX,MAAM,IAAI;AAAA,MACV,YAAY,KAAK,IAAI,IAAI;AAAA,MACzB;AAAA,MACA,OAAO;AAAA,IACT,CAAC;AACD,UAAM,QAAQ,aAAa,IAAI,EAAE,SAAS;AAAA,MACxC,YAAY,IAAI;AAAA,MAChB,OAAO;AAAA,MACP;AAAA,IACF,CAAC,EAAE,MAAM,CAAC,YAAY;AACpB,oBAAc,KAAK;AAAA,QACjB,OAAO;AAAA,QACP,OAAO,IAAI;AAAA,QACX,OAAO,mBAAmB,QAAQ,QAAQ,UAAU,OAAO,OAAO;AAAA,MACpE,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AACF;AAEA,eAAsB,aAAa,MAA0C;AAC3E,QAAM,MAAM,KAAK,QAAQ,MAAM;AAC/B,QAAM,aAAa,KAAK,cAAc;AACtC,QAAM,sBAAsB,KAAK,uBAAuB;AACxD,QAAM,eAAe,KAAK,gBAAgB;AAE1C,MAAI,YAAY;AAChB,gBAAc,KAAK;AAAA,IACjB,OAAO;AAAA,IACP;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAKD,yBAAuB,cAAc,KAAK,QAAQ,GAAG;AAMrD,OAAK,6BAA6B,EAAE,QAAQ,KAAK,QAAQ,IAAI,CAAC,EAAE,MAAM,CAAC,QAAQ;AAC7E,kBAAc,KAAK;AAAA,MACjB,OAAO;AAAA,MACP,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,IACxD,CAAC;AAAA,EACH,CAAC;AAED,SAAO,CAAC,KAAK,OAAO,SAAS;AAC3B,QAAI,MAA+B;AACnC,QAAI;AACF,YAAM,MAAM,YAAY,cAAc,UAAU;AAAA,IAClD,SAAS,KAAK;AAIZ,YAAM,SAAS,eAAe,WAAW,IAAI,aAAa;AAC1D,oBAAc,KAAK;AAAA,QACjB,OAAO;AAAA,QACP;AAAA,QACA,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,MACxD,CAAC;AACD,YAAM,YAAY,MAAM,eAAe,WAAW,KAAK,MAAM;AAC7D,UAAI,CAAC,UAAW;AAChB,kBAAY,KAAK,IAAI,YAAY,GAAG,cAAc;AAClD;AAAA,IACF;AAEA,QAAI,CAAC,KAAK;AACR,oBAAc,KAAK,EAAE,OAAO,WAAW,CAAC;AACxC,YAAM,YAAY,MAAM,eAAe,WAAW,KAAK,MAAM;AAC7D,UAAI,CAAC,UAAW;AAChB,kBAAY,KAAK,IAAI,YAAY,GAAG,cAAc;AAClD;AAAA,IACF;AAKA,gBAAY;AACZ,UAAM,OAAO,KAAK,qBAAqB,GAAG;AAAA,EAC5C;AAEA,gBAAc,KAAK,EAAE,OAAO,aAAa,CAAC;AAC5C;",
-  "names": []
-}

package/dist/chunk-EJOI2ZGU.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../src/lib/api-client.ts"],
-  "sourcesContent": ["import { fileURLToPath } from 'node:url';\nimport { existsSync, readFileSync } from 'node:fs';\nimport { dirname, join } from 'node:path';\nimport { loadToken } from './auth.js';\n\n/**\n * Read the CLI's own version. Walks up from this module's location to find\n * `@rulemetric/cli`'s package.json \u2014 robust whether running unbundled from\n * `src/lib/` (dev) or from a bundled chunk at a different `dist/` depth (prod),\n * where a fixed relative `../../package.json` would resolve to the wrong file.\n */\nfunction readCliVersion(): string {\n  let dir = dirname(fileURLToPath(import.meta.url));\n  for (let i = 0; i < 8; i++) {\n    const pj = join(dir, 'package.json');\n    if (existsSync(pj)) {\n      try {\n        const parsed = JSON.parse(readFileSync(pj, 'utf8')) as { name?: string; version?: string };\n        if (parsed.name === '@rulemetric/cli' && parsed.version) return parsed.version;\n      } catch {\n        /* unreadable/parse error \u2014 keep walking up */\n      }\n    }\n    const parent = dirname(dir);\n    if (parent === dir) break;\n    dir = parent;\n  }\n  return '0.0.0';\n}\n\nconst version = readCliVersion();\n\nexport class ApiError extends Error {\n  constructor(\n    public statusCode: number,\n    message: string,\n  ) {\n    super(message);\n    this.name = 'ApiError';\n  }\n}\n\ninterface ApiOptions {\n  method?: string;\n  body?: unknown;\n  headers?: Record<string, string>;\n}\n\nfunction getBaseUrl(): string {\n  const url = process.env.RULEMETRIC_API_URL ?? 'http://localhost:3000';\n\n  // Enforce HTTPS for non-localhost URLs\n  const parsed = new URL(url);\n  if (parsed.protocol === 'http:' && parsed.hostname !== 'localhost' && parsed.hostname !== '127.0.0.1') {\n    throw new Error(`API URL must use HTTPS for non-localhost hosts: ${url}`);\n  }\n\n  return url;\n}\n\nexport async function api<T>(path: string, options: ApiOptions = {}): Promise<T> {\n  const baseUrl = getBaseUrl();\n  const url = `${baseUrl}${path}`;\n\n  const headers: Record<string, string> = {\n    'Content-Type': 'application/json',\n    'User-Agent': `rulemetric-cli/${version}`,\n    ...options.headers,\n  };\n\n  // API key (preferred for CLI/hooks/proxy \u2014 long-lived)\n  const apiKey = process.env.RULEMETRIC_API_KEY;\n  if (apiKey) {\n    headers['Authorization'] = `Bearer ${apiKey}`;\n  }\n\n  // Supabase JWT (fallback \u2014 used right after login before key is created)\n  if (!apiKey) {\n    const token = loadToken();\n    if (token) {\n      headers['Authorization'] = `Bearer ${token.accessToken}`;\n    }\n  }\n\n  // Bypass proxy for localhost API calls \u2014 HTTPS_PROXY is for Claude Code \u2192 Anthropic,\n  // not for CLI \u2192 local API. Node.js fetch doesn't respect NO_PROXY reliably, so we\n  // temporarily unset the proxy env vars for localhost calls.\n  const parsed = new URL(url);\n  const isLocalhost = parsed.hostname === 'localhost' || parsed.hostname === '127.0.0.1';\n  const savedProxy = process.env.HTTPS_PROXY;\n  const savedHttpProxy = process.env.HTTP_PROXY;\n  if (isLocalhost) {\n    delete process.env.HTTPS_PROXY;\n    delete process.env.HTTP_PROXY;\n  }\n\n  let response: Response;\n  try {\n    response = await fetch(url, {\n      method: options.method ?? 'GET',\n      headers,\n      body: options.body ? JSON.stringify(options.body) : undefined,\n    });\n  } finally {\n    // Restore proxy vars so claude -p calls still route through the proxy\n    if (isLocalhost) {\n      if (savedProxy !== undefined) process.env.HTTPS_PROXY = savedProxy;\n      if (savedHttpProxy !== undefined) process.env.HTTP_PROXY = savedHttpProxy;\n    }\n  }\n\n  let responseBody: unknown;\n  const contentType = response.headers.get('content-type');\n  if (contentType?.includes('application/json')) {\n    responseBody = await response.json();\n  } else {\n    responseBody = await response.text();\n  }\n\n  if (!response.ok) {\n    // Extract only the error message, not the full response body\n    const message =\n      responseBody && typeof responseBody === 'object' && 'error' in responseBody\n        ? String((responseBody as { error: string }).error)\n        : `HTTP ${response.status}`;\n    throw new ApiError(response.status, message);\n  }\n\n  return responseBody as T;\n}\n\nexport const apiGet = <T>(path: string): Promise<T> => api<T>(path);\nexport const apiPost = <T>(path: string, body: unknown): Promise<T> => api<T>(path, { method: 'POST', body });\nexport const apiPut = <T>(path: string, body: unknown): Promise<T> => api<T>(path, { method: 'PUT', body });\nexport const apiPatch = <T>(path: string, body: unknown): Promise<T> => api<T>(path, { method: 'PATCH', body });\nexport const apiDelete = <T>(path: string): Promise<T> => api<T>(path, { method: 'DELETE' });\n"],
-  "mappings": ";;;;;AAAA,SAAS,qBAAqB;AAC9B,SAAS,YAAY,oBAAoB;AACzC,SAAS,SAAS,YAAY;AAS9B,SAAS,iBAAyB;AAChC,MAAI,MAAM,QAAQ,cAAc,YAAY,GAAG,CAAC;AAChD,WAAS,IAAI,GAAG,IAAI,GAAG,KAAK;AAC1B,UAAM,KAAK,KAAK,KAAK,cAAc;AACnC,QAAI,WAAW,EAAE,GAAG;AAClB,UAAI;AACF,cAAM,SAAS,KAAK,MAAM,aAAa,IAAI,MAAM,CAAC;AAClD,YAAI,OAAO,SAAS,qBAAqB,OAAO,QAAS,QAAO,OAAO;AAAA,MACzE,QAAQ;AAAA,MAER;AAAA,IACF;AACA,UAAM,SAAS,QAAQ,GAAG;AAC1B,QAAI,WAAW,IAAK;AACpB,UAAM;AAAA,EACR;AACA,SAAO;AACT;AAEA,IAAM,UAAU,eAAe;AAExB,IAAM,WAAN,cAAuB,MAAM;AAAA,EAClC,YACS,YACP,SACA;AACA,UAAM,OAAO;AAHN;AAIP,SAAK,OAAO;AAAA,EACd;AACF;AAQA,SAAS,aAAqB;AAC5B,QAAM,MAAM,QAAQ,IAAI,sBAAsB;AAG9C,QAAM,SAAS,IAAI,IAAI,GAAG;AAC1B,MAAI,OAAO,aAAa,WAAW,OAAO,aAAa,eAAe,OAAO,aAAa,aAAa;AACrG,UAAM,IAAI,MAAM,mDAAmD,GAAG,EAAE;AAAA,EAC1E;AAEA,SAAO;AACT;AAEA,eAAsB,IAAO,MAAc,UAAsB,CAAC,GAAe;AAC/E,QAAM,UAAU,WAAW;AAC3B,QAAM,MAAM,GAAG,OAAO,GAAG,IAAI;AAE7B,QAAM,UAAkC;AAAA,IACtC,gBAAgB;AAAA,IAChB,cAAc,kBAAkB,OAAO;AAAA,IACvC,GAAG,QAAQ;AAAA,EACb;AAGA,QAAM,SAAS,QAAQ,IAAI;AAC3B,MAAI,QAAQ;AACV,YAAQ,eAAe,IAAI,UAAU,MAAM;AAAA,EAC7C;AAGA,MAAI,CAAC,QAAQ;AACX,UAAM,QAAQ,UAAU;AACxB,QAAI,OAAO;AACT,cAAQ,eAAe,IAAI,UAAU,MAAM,WAAW;AAAA,IACxD;AAAA,EACF;AAKA,QAAM,SAAS,IAAI,IAAI,GAAG;AAC1B,QAAM,cAAc,OAAO,aAAa,eAAe,OAAO,aAAa;AAC3E,QAAM,aAAa,QAAQ,IAAI;AAC/B,QAAM,iBAAiB,QAAQ,IAAI;AACnC,MAAI,aAAa;AACf,WAAO,QAAQ,IAAI;AACnB,WAAO,QAAQ,IAAI;AAAA,EACrB;AAEA,MAAI;AACJ,MAAI;AACF,eAAW,MAAM,MAAM,KAAK;AAAA,MAC1B,QAAQ,QAAQ,UAAU;AAAA,MAC1B;AAAA,MACA,MAAM,QAAQ,OAAO,KAAK,UAAU,QAAQ,IAAI,IAAI;AAAA,IACtD,CAAC;AAAA,EACH,UAAE;AAEA,QAAI,aAAa;AACf,UAAI,eAAe,OAAW,SAAQ,IAAI,cAAc;AACxD,UAAI,mBAAmB,OAAW,SAAQ,IAAI,aAAa;AAAA,IAC7D;AAAA,EACF;AAEA,MAAI;AACJ,QAAM,cAAc,SAAS,QAAQ,IAAI,cAAc;AACvD,MAAI,aAAa,SAAS,kBAAkB,GAAG;AAC7C,mBAAe,MAAM,SAAS,KAAK;AAAA,EACrC,OAAO;AACL,mBAAe,MAAM,SAAS,KAAK;AAAA,EACrC;AAEA,MAAI,CAAC,SAAS,IAAI;AAEhB,UAAM,UACJ,gBAAgB,OAAO,iBAAiB,YAAY,WAAW,eAC3D,OAAQ,aAAmC,KAAK,IAChD,QAAQ,SAAS,MAAM;AAC7B,UAAM,IAAI,SAAS,SAAS,QAAQ,OAAO;AAAA,EAC7C;AAEA,SAAO;AACT;AAEO,IAAM,SAAS,CAAI,SAA6B,IAAO,IAAI;AAC3D,IAAM,UAAU,CAAI,MAAc,SAA8B,IAAO,MAAM,EAAE,QAAQ,QAAQ,KAAK,CAAC;AACrG,IAAM,SAAS,CAAI,MAAc,SAA8B,IAAO,MAAM,EAAE,QAAQ,OAAO,KAAK,CAAC;AACnG,IAAM,WAAW,CAAI,MAAc,SAA8B,IAAO,MAAM,EAAE,QAAQ,SAAS,KAAK,CAAC;AACvG,IAAM,YAAY,CAAI,SAA6B,IAAO,MAAM,EAAE,QAAQ,SAAS,CAAC;",
-  "names": []
-}

package/dist/chunk-KZRFUXGF.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../src/lib/auth.ts"],
-  "sourcesContent": ["import * as fs from 'node:fs';\nimport * as path from 'node:path';\nimport * as os from 'node:os';\n\nexport interface AuthToken {\n  accessToken: string;\n  refreshToken: string;\n  expiresAt: string;\n  email: string;\n}\n\nfunction getConfigDir(): string {\n  return process.env.RULEMETRIC_CONFIG_DIR || path.join(os.homedir(), '.config', 'rulemetric');\n}\n\nexport function createAuthStore(configDir: string = getConfigDir()) {\n  const authFile = path.join(configDir, 'auth.json');\n\n  function saveToken(token: AuthToken): void {\n    fs.mkdirSync(configDir, { recursive: true, mode: 0o700 });\n    fs.writeFileSync(authFile, JSON.stringify(token, null, 2), {\n      encoding: 'utf-8',\n      mode: 0o600,\n    });\n  }\n\n  function loadToken(): AuthToken | null {\n    try {\n      const data = fs.readFileSync(authFile, 'utf-8');\n      const parsed: unknown = JSON.parse(data);\n      if (\n        parsed &&\n        typeof parsed === 'object' &&\n        'accessToken' in parsed &&\n        'expiresAt' in parsed &&\n        'email' in parsed &&\n        typeof (parsed as AuthToken).accessToken === 'string' &&\n        typeof (parsed as AuthToken).expiresAt === 'string'\n      ) {\n        return parsed as AuthToken;\n      }\n      return null;\n    } catch {\n      return null;\n    }\n  }\n\n  function clearToken(): void {\n    try {\n      fs.unlinkSync(authFile);\n    } catch {\n      // File doesn't exist, nothing to clear\n    }\n  }\n\n  function isAuthenticated(): boolean {\n    const token = loadToken();\n    if (!token) return false;\n    const expiresAt = new Date(token.expiresAt).getTime();\n    if (Number.isNaN(expiresAt)) return false;\n    return Date.now() < expiresAt;\n  }\n\n  function saveEnvFile(accessToken: string, apiUrl?: string): void {\n    fs.mkdirSync(configDir, { recursive: true, mode: 0o700 });\n    const envPath = path.join(configDir, 'env');\n\n    // Preserve existing RULEMETRIC_API_KEY if present\n    let existingApiKey = '';\n    try {\n      const existing = fs.readFileSync(envPath, 'utf-8');\n      const match = existing.match(/^RULEMETRIC_API_KEY=(.+)$/m);\n      if (match) existingApiKey = match[1];\n    } catch { /* file doesn't exist */ }\n\n    const lines = [\n      `RULEMETRIC_ACCESS_TOKEN=${accessToken}`,\n    ];\n    if (existingApiKey) {\n      lines.push(`RULEMETRIC_API_KEY=${existingApiKey}`);\n    }\n    if (apiUrl) {\n      lines.push(`RULEMETRIC_API_URL=${apiUrl}`);\n    }\n\n    fs.writeFileSync(envPath, lines.join('\\n') + '\\n', {\n      encoding: 'utf-8',\n      mode: 0o600,\n    });\n  }\n\n  function saveApiKeyToEnv(apiKey: string, apiUrl?: string): void {\n    fs.mkdirSync(configDir, { recursive: true, mode: 0o700 });\n    const envPath = path.join(configDir, 'env');\n\n    // Preserve existing ACCESS_TOKEN if present\n    let existingToken = '';\n    let existingUrl = '';\n    try {\n      const existing = fs.readFileSync(envPath, 'utf-8');\n      const tokenMatch = existing.match(/^RULEMETRIC_ACCESS_TOKEN=(.+)$/m);\n      if (tokenMatch) existingToken = tokenMatch[1];\n      const urlMatch = existing.match(/^RULEMETRIC_API_URL=(.+)$/m);\n      if (urlMatch) existingUrl = urlMatch[1];\n    } catch { /* file doesn't exist */ }\n\n    const lines = [\n      `RULEMETRIC_API_KEY=${apiKey}`,\n    ];\n    if (existingToken) {\n      lines.push(`RULEMETRIC_ACCESS_TOKEN=${existingToken}`);\n    }\n    const url = apiUrl ?? existingUrl;\n    if (url) {\n      lines.push(`RULEMETRIC_API_URL=${url}`);\n    }\n\n    fs.writeFileSync(envPath, lines.join('\\n') + '\\n', {\n      encoding: 'utf-8',\n      mode: 0o600,\n    });\n  }\n\n  function clearEnvFile(): void {\n    const envPath = path.join(configDir, 'env');\n    try { fs.unlinkSync(envPath); } catch { /* noop */ }\n  }\n\n  return { saveToken, loadToken, clearToken, isAuthenticated, saveEnvFile, saveApiKeyToEnv, clearEnvFile, configDir, authFile };\n}\n\n// Lazy accessors \u2014 re-evaluate config dir from env on each call\nfunction getStore() {\n  return createAuthStore();\n}\n\nexport function saveToken(token: AuthToken): void { getStore().saveToken(token); }\nexport function loadToken(): AuthToken | null { return getStore().loadToken(); }\nexport function clearToken(): void { getStore().clearToken(); }\nexport function isAuthenticated(): boolean {\n  // API key counts as authenticated\n  if (process.env.RULEMETRIC_API_KEY) return true;\n  return getStore().isAuthenticated();\n}\nexport function saveEnvFile(accessToken: string, apiUrl?: string): void { getStore().saveEnvFile(accessToken, apiUrl); }\nexport function saveApiKey(apiKey: string, apiUrl?: string): void { getStore().saveApiKeyToEnv(apiKey, apiUrl); }\nexport function clearEnvFile(): void { getStore().clearEnvFile(); }\nexport function getDefaultConfigDir(): string { return getConfigDir(); }\n// Re-exported for backward compat (evaluated at import time; prefer getDefaultConfigDir() for dynamic usage)\nexport const CONFIG_DIR = getConfigDir();\n"],
-  "mappings": ";AAAA,YAAY,QAAQ;AACpB,YAAY,UAAU;AACtB,YAAY,QAAQ;AASpB,SAAS,eAAuB;AAC9B,SAAO,QAAQ,IAAI,yBAA8B,UAAQ,WAAQ,GAAG,WAAW,YAAY;AAC7F;AAEO,SAAS,gBAAgB,YAAoB,aAAa,GAAG;AAClE,QAAM,WAAgB,UAAK,WAAW,WAAW;AAEjD,WAASA,WAAU,OAAwB;AACzC,IAAG,aAAU,WAAW,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACxD,IAAG,iBAAc,UAAU,KAAK,UAAU,OAAO,MAAM,CAAC,GAAG;AAAA,MACzD,UAAU;AAAA,MACV,MAAM;AAAA,IACR,CAAC;AAAA,EACH;AAEA,WAASC,aAA8B;AACrC,QAAI;AACF,YAAM,OAAU,gBAAa,UAAU,OAAO;AAC9C,YAAM,SAAkB,KAAK,MAAM,IAAI;AACvC,UACE,UACA,OAAO,WAAW,YAClB,iBAAiB,UACjB,eAAe,UACf,WAAW,UACX,OAAQ,OAAqB,gBAAgB,YAC7C,OAAQ,OAAqB,cAAc,UAC3C;AACA,eAAO;AAAA,MACT;AACA,aAAO;AAAA,IACT,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAEA,WAASC,cAAmB;AAC1B,QAAI;AACF,MAAG,cAAW,QAAQ;AAAA,IACxB,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,WAASC,mBAA2B;AAClC,UAAM,QAAQF,WAAU;AACxB,QAAI,CAAC,MAAO,QAAO;AACnB,UAAM,YAAY,IAAI,KAAK,MAAM,SAAS,EAAE,QAAQ;AACpD,QAAI,OAAO,MAAM,SAAS,EAAG,QAAO;AACpC,WAAO,KAAK,IAAI,IAAI;AAAA,EACtB;AAEA,WAASG,aAAY,aAAqB,QAAuB;AAC/D,IAAG,aAAU,WAAW,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACxD,UAAM,UAAe,UAAK,WAAW,KAAK;AAG1C,QAAI,iBAAiB;AACrB,QAAI;AACF,YAAM,WAAc,gBAAa,SAAS,OAAO;AACjD,YAAM,QAAQ,SAAS,MAAM,4BAA4B;AACzD,UAAI,MAAO,kBAAiB,MAAM,CAAC;AAAA,IACrC,QAAQ;AAAA,IAA2B;AAEnC,UAAM,QAAQ;AAAA,MACZ,2BAA2B,WAAW;AAAA,IACxC;AACA,QAAI,gBAAgB;AAClB,YAAM,KAAK,sBAAsB,cAAc,EAAE;AAAA,IACnD;AACA,QAAI,QAAQ;AACV,YAAM,KAAK,sBAAsB,MAAM,EAAE;AAAA,IAC3C;AAEA,IAAG,iBAAc,SAAS,MAAM,KAAK,IAAI,IAAI,MAAM;AAAA,MACjD,UAAU;AAAA,MACV,MAAM;AAAA,IACR,CAAC;AAAA,EACH;AAEA,WAAS,gBAAgB,QAAgB,QAAuB;AAC9D,IAAG,aAAU,WAAW,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACxD,UAAM,UAAe,UAAK,WAAW,KAAK;AAG1C,QAAI,gBAAgB;AACpB,QAAI,cAAc;AAClB,QAAI;AACF,YAAM,WAAc,gBAAa,SAAS,OAAO;AACjD,YAAM,aAAa,SAAS,MAAM,iCAAiC;AACnE,UAAI,WAAY,iBAAgB,WAAW,CAAC;AAC5C,YAAM,WAAW,SAAS,MAAM,4BAA4B;AAC5D,UAAI,SAAU,eAAc,SAAS,CAAC;AAAA,IACxC,QAAQ;AAAA,IAA2B;AAEnC,UAAM,QAAQ;AAAA,MACZ,sBAAsB,MAAM;AAAA,IAC9B;AACA,QAAI,eAAe;AACjB,YAAM,KAAK,2BAA2B,aAAa,EAAE;AAAA,IACvD;AACA,UAAM,MAAM,UAAU;AACtB,QAAI,KAAK;AACP,YAAM,KAAK,sBAAsB,GAAG,EAAE;AAAA,IACxC;AAEA,IAAG,iBAAc,SAAS,MAAM,KAAK,IAAI,IAAI,MAAM;AAAA,MACjD,UAAU;AAAA,MACV,MAAM;AAAA,IACR,CAAC;AAAA,EACH;AAEA,WAASC,gBAAqB;AAC5B,UAAM,UAAe,UAAK,WAAW,KAAK;AAC1C,QAAI;AAAE,MAAG,cAAW,OAAO;AAAA,IAAG,QAAQ;AAAA,IAAa;AAAA,EACrD;AAEA,SAAO,EAAE,WAAAL,YAAW,WAAAC,YAAW,YAAAC,aAAY,iBAAAC,kBAAiB,aAAAC,cAAa,iBAAiB,cAAAC,eAAc,WAAW,SAAS;AAC9H;AAGA,SAAS,WAAW;AAClB,SAAO,gBAAgB;AACzB;AAEO,SAAS,UAAU,OAAwB;AAAE,WAAS,EAAE,UAAU,KAAK;AAAG;AAC1E,SAAS,YAA8B;AAAE,SAAO,SAAS,EAAE,UAAU;AAAG;AACxE,SAAS,aAAmB;AAAE,WAAS,EAAE,WAAW;AAAG;AACvD,SAAS,kBAA2B;AAEzC,MAAI,QAAQ,IAAI,mBAAoB,QAAO;AAC3C,SAAO,SAAS,EAAE,gBAAgB;AACpC;AACO,SAAS,YAAY,aAAqB,QAAuB;AAAE,WAAS,EAAE,YAAY,aAAa,MAAM;AAAG;AAChH,SAAS,WAAW,QAAgB,QAAuB;AAAE,WAAS,EAAE,gBAAgB,QAAQ,MAAM;AAAG;AACzG,SAAS,eAAqB;AAAE,WAAS,EAAE,aAAa;AAAG;AAC3D,SAAS,sBAA8B;AAAE,SAAO,aAAa;AAAG;AAEhE,IAAM,aAAa,aAAa;",
-  "names": ["saveToken", "loadToken", "clearToken", "isAuthenticated", "saveEnvFile", "clearEnvFile"]
-}

package/dist/chunk-OGVORIFM.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../src/lib/version-check.ts"],
-  "sourcesContent": ["// CLI version-check banner. Every command kicks off an async fetch to\n// /api/cli/latest-version (cached for an hour) and prints a one-line\n// notice on the next invocation if the cached version is newer than the\n// currently-running CLI.\n//\n// Design notes:\n// - Fire-and-forget: we never block command execution on the network.\n// - Cache: ~/.config/rulemetric/version-check.json, TTL 1h. Stored on disk\n//   so the check survives between CLI invocations (each invocation is a\n//   fresh process \u2014 in-memory cache wouldn't help).\n// - \"Newer\" uses semver-naive numeric comparison split on dots \u2014 fine for\n//   our 0.x line; tightening this is a follow-up if/when we adopt semver\n//   pre-releases.\n// - We DO NOT have an `upgrade` command yet; the banner just says \"version\n//   X.Y.Z available\" and trusts the user to know how they installed.\nimport { mkdirSync, readFileSync, writeFileSync } from 'node:fs';\nimport { homedir } from 'node:os';\nimport { join } from 'node:path';\n\nconst CONFIG_DIR = join(homedir(), '.config', 'rulemetric');\nconst CACHE_FILE = join(CONFIG_DIR, 'version-check.json');\nconst TTL_MS = 60 * 60 * 1000; // 1h\n\ninterface CacheEntry {\n  latest: string;\n  fetchedAtMs: number;\n}\n\nfunction readCache(): CacheEntry | null {\n  try {\n    const data = JSON.parse(readFileSync(CACHE_FILE, 'utf-8')) as CacheEntry;\n    if (typeof data.latest === 'string' && typeof data.fetchedAtMs === 'number') {\n      return data;\n    }\n    return null;\n  } catch {\n    return null;\n  }\n}\n\nfunction writeCache(entry: CacheEntry): void {\n  try {\n    mkdirSync(CONFIG_DIR, { recursive: true });\n    writeFileSync(CACHE_FILE, JSON.stringify(entry));\n  } catch {\n    // Best-effort: a write failure just means we'll re-fetch next time.\n  }\n}\n\nfunction compareVersions(a: string, b: string): number {\n  const parse = (v: string) => v.split('.').map((n) => Number.parseInt(n, 10) || 0);\n  const pa = parse(a);\n  const pb = parse(b);\n  const len = Math.max(pa.length, pb.length);\n  for (let i = 0; i < len; i++) {\n    const ai = pa[i] ?? 0;\n    const bi = pb[i] ?? 0;\n    if (ai < bi) return -1;\n    if (ai > bi) return 1;\n  }\n  return 0;\n}\n\nfunction getApiUrl(): string {\n  const env = process.env.RULEMETRIC_API_URL;\n  if (env) return env.replace(/\\/$/, '');\n  return 'https://rulemetric.com';\n}\n\n/**\n * Fetches latest version from the API in the background and refreshes the\n * cache if the entry is missing or older than TTL_MS. Never throws.\n */\nexport function refreshVersionCacheInBackground(): void {\n  const cached = readCache();\n  if (cached && Date.now() - cached.fetchedAtMs < TTL_MS) return;\n\n  // Fire-and-forget \u2014 explicitly catch every failure mode so an unhandled\n  // rejection can never reach the user. AbortController guards against\n  // hanging connections (3s budget).\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), 3000);\n  globalThis\n    .fetch(`${getApiUrl()}/api/cli/latest-version`, { signal: controller.signal })\n    .then(async (res) => {\n      clearTimeout(timer);\n      if (!res.ok) return;\n      const data = (await res.json()) as { latest?: unknown };\n      if (typeof data.latest !== 'string') return;\n      writeCache({ latest: data.latest, fetchedAtMs: Date.now() });\n    })\n    .catch(() => {\n      clearTimeout(timer);\n      // Network error, timeout, malformed JSON \u2014 silently ignore. Banner\n      // is purely a nicety; we never want it to surface failures.\n    });\n}\n\n/**\n * Returns a one-line upgrade banner if a newer version is cached, else null.\n * Designed to be printed to stderr by the CLI's BaseCommand on launch.\n */\nexport function getUpgradeBanner(currentVersion: string): string | null {\n  const cached = readCache();\n  if (!cached) return null;\n  if (compareVersions(cached.latest, currentVersion) <= 0) return null;\n  return `RuleMetric ${cached.latest} available \u2014 you're on ${currentVersion}.`;\n}\n"],
-  "mappings": ";AAeA,SAAS,WAAW,cAAc,qBAAqB;AACvD,SAAS,eAAe;AACxB,SAAS,YAAY;AAErB,IAAM,aAAa,KAAK,QAAQ,GAAG,WAAW,YAAY;AAC1D,IAAM,aAAa,KAAK,YAAY,oBAAoB;AACxD,IAAM,SAAS,KAAK,KAAK;AAOzB,SAAS,YAA+B;AACtC,MAAI;AACF,UAAM,OAAO,KAAK,MAAM,aAAa,YAAY,OAAO,CAAC;AACzD,QAAI,OAAO,KAAK,WAAW,YAAY,OAAO,KAAK,gBAAgB,UAAU;AAC3E,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,WAAW,OAAyB;AAC3C,MAAI;AACF,cAAU,YAAY,EAAE,WAAW,KAAK,CAAC;AACzC,kBAAc,YAAY,KAAK,UAAU,KAAK,CAAC;AAAA,EACjD,QAAQ;AAAA,EAER;AACF;AAEA,SAAS,gBAAgB,GAAW,GAAmB;AACrD,QAAM,QAAQ,CAAC,MAAc,EAAE,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,OAAO,SAAS,GAAG,EAAE,KAAK,CAAC;AAChF,QAAM,KAAK,MAAM,CAAC;AAClB,QAAM,KAAK,MAAM,CAAC;AAClB,QAAM,MAAM,KAAK,IAAI,GAAG,QAAQ,GAAG,MAAM;AACzC,WAAS,IAAI,GAAG,IAAI,KAAK,KAAK;AAC5B,UAAM,KAAK,GAAG,CAAC,KAAK;AACpB,UAAM,KAAK,GAAG,CAAC,KAAK;AACpB,QAAI,KAAK,GAAI,QAAO;AACpB,QAAI,KAAK,GAAI,QAAO;AAAA,EACtB;AACA,SAAO;AACT;AAEA,SAAS,YAAoB;AAC3B,QAAM,MAAM,QAAQ,IAAI;AACxB,MAAI,IAAK,QAAO,IAAI,QAAQ,OAAO,EAAE;AACrC,SAAO;AACT;AAMO,SAAS,kCAAwC;AACtD,QAAM,SAAS,UAAU;AACzB,MAAI,UAAU,KAAK,IAAI,IAAI,OAAO,cAAc,OAAQ;AAKxD,QAAM,aAAa,IAAI,gBAAgB;AACvC,QAAM,QAAQ,WAAW,MAAM,WAAW,MAAM,GAAG,GAAI;AACvD,aACG,MAAM,GAAG,UAAU,CAAC,2BAA2B,EAAE,QAAQ,WAAW,OAAO,CAAC,EAC5E,KAAK,OAAO,QAAQ;AACnB,iBAAa,KAAK;AAClB,QAAI,CAAC,IAAI,GAAI;AACb,UAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,QAAI,OAAO,KAAK,WAAW,SAAU;AACrC,eAAW,EAAE,QAAQ,KAAK,QAAQ,aAAa,KAAK,IAAI,EAAE,CAAC;AAAA,EAC7D,CAAC,EACA,MAAM,MAAM;AACX,iBAAa,KAAK;AAAA,EAGpB,CAAC;AACL;AAMO,SAAS,iBAAiB,gBAAuC;AACtE,QAAM,SAAS,UAAU;AACzB,MAAI,CAAC,OAAQ,QAAO;AACpB,MAAI,gBAAgB,OAAO,QAAQ,cAAc,KAAK,EAAG,QAAO;AAChE,SAAO,cAAc,OAAO,MAAM,+BAA0B,cAAc;AAC5E;",
-  "names": []
-}