@rulemetric/cli 0.4.0 → 0.5.1

package/dist/{chunk-EJOI2ZGU.js → chunk-CWFVBGX2.js}

@@ -1,6 +1,7 @@
 import {
+  loadEnvFileAuth,
   loadToken
-} from "./chunk-KZRFUXGF.js";
+} from "./chunk-W2YERO7E.js";
 
 // src/lib/api-client.ts
 import { fileURLToPath } from "node:url";
@@ -32,7 +33,7 @@ var ApiError = class extends Error {
   }
 };
 function getBaseUrl() {
-  const url = process.env.RULEMETRIC_API_URL ?? "http://localhost:3000";
+  const url = process.env.RULEMETRIC_API_URL ?? loadEnvFileAuth().apiUrl ?? "http://localhost:3000";
   const parsed = new URL(url);
   if (parsed.protocol === "http:" && parsed.hostname !== "localhost" && parsed.hostname !== "127.0.0.1") {
     throw new Error(`API URL must use HTTPS for non-localhost hosts: ${url}`);
@@ -47,15 +48,10 @@ async function api(path, options = {}) {
     "User-Agent": `rulemetric-cli/${version}`,
     ...options.headers
   };
-  const apiKey = process.env.RULEMETRIC_API_KEY;
-  if (apiKey) {
-    headers["Authorization"] = `Bearer ${apiKey}`;
-  }
-  if (!apiKey) {
-    const token = loadToken();
-    if (token) {
-      headers["Authorization"] = `Bearer ${token.accessToken}`;
-    }
+  const envAuth = loadEnvFileAuth();
+  const bearer = process.env.RULEMETRIC_API_KEY || envAuth.apiKey || loadToken()?.accessToken || envAuth.accessToken;
+  if (bearer) {
+    headers["Authorization"] = `Bearer ${bearer}`;
   }
   const parsed = new URL(url);
   const isLocalhost = parsed.hostname === "localhost" || parsed.hostname === "127.0.0.1";
@@ -106,4 +102,4 @@ export {
   apiPatch,
   apiDelete
 };
-//# sourceMappingURL=chunk-EJOI2ZGU.js.map
+//# sourceMappingURL=chunk-CWFVBGX2.js.map

package/dist/chunk-CWFVBGX2.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/lib/api-client.ts"],
+  "sourcesContent": ["import { fileURLToPath } from 'node:url';\nimport { existsSync, readFileSync } from 'node:fs';\nimport { dirname, join } from 'node:path';\nimport { loadToken, loadEnvFileAuth } from './auth.js';\n\n/**\n * Read the CLI's own version. Walks up from this module's location to find\n * `@rulemetric/cli`'s package.json \u2014 robust whether running unbundled from\n * `src/lib/` (dev) or from a bundled chunk at a different `dist/` depth (prod),\n * where a fixed relative `../../package.json` would resolve to the wrong file.\n */\nfunction readCliVersion(): string {\n  let dir = dirname(fileURLToPath(import.meta.url));\n  for (let i = 0; i < 8; i++) {\n    const pj = join(dir, 'package.json');\n    if (existsSync(pj)) {\n      try {\n        const parsed = JSON.parse(readFileSync(pj, 'utf8')) as { name?: string; version?: string };\n        if (parsed.name === '@rulemetric/cli' && parsed.version) return parsed.version;\n      } catch {\n        /* unreadable/parse error \u2014 keep walking up */\n      }\n    }\n    const parent = dirname(dir);\n    if (parent === dir) break;\n    dir = parent;\n  }\n  return '0.0.0';\n}\n\nconst version = readCliVersion();\n\nexport class ApiError extends Error {\n  constructor(\n    public statusCode: number,\n    message: string,\n  ) {\n    super(message);\n    this.name = 'ApiError';\n  }\n}\n\ninterface ApiOptions {\n  method?: string;\n  body?: unknown;\n  headers?: Record<string, string>;\n}\n\nfunction getBaseUrl(): string {\n  // Additive fallback to the env file's URL so a key/token read from that same\n  // file (see the auth header below) is sent to the SERVER it belongs to,\n  // not the localhost default.\n  const url = process.env.RULEMETRIC_API_URL ?? loadEnvFileAuth().apiUrl ?? 'http://localhost:3000';\n\n  // Enforce HTTPS for non-localhost URLs\n  const parsed = new URL(url);\n  if (parsed.protocol === 'http:' && parsed.hostname !== 'localhost' && parsed.hostname !== '127.0.0.1') {\n    throw new Error(`API URL must use HTTPS for non-localhost hosts: ${url}`);\n  }\n\n  return url;\n}\n\nexport async function api<T>(path: string, options: ApiOptions = {}): Promise<T> {\n  const baseUrl = getBaseUrl();\n  const url = `${baseUrl}${path}`;\n\n  const headers: Record<string, string> = {\n    'Content-Type': 'application/json',\n    'User-Agent': `rulemetric-cli/${version}`,\n    ...options.headers,\n  };\n\n  // Auth header resolution, first match wins:\n  //   1. process.env.RULEMETRIC_API_KEY   \u2014 exported long-lived key\n  //   2. env-file RULEMETRIC_API_KEY      \u2014 long-lived key on disk (create-key)\n  //   3. auth.json OAuth accessToken      \u2014 fresh right after `auth login`\n  //   4. env-file RULEMETRIC_ACCESS_TOKEN \u2014 token persisted by login\n  // The long-lived API key is preferred over the OAuth token because the latter\n  // EXPIRES \u2014 auth.json can hold a stale token, so trying it first would 401\n  // (\"Session expired\") even when a valid key sits right there in the env file.\n  const envAuth = loadEnvFileAuth();\n  const bearer =\n    process.env.RULEMETRIC_API_KEY ||\n    envAuth.apiKey ||\n    loadToken()?.accessToken ||\n    envAuth.accessToken;\n  if (bearer) {\n    headers['Authorization'] = `Bearer ${bearer}`;\n  }\n\n  // Bypass proxy for localhost API calls \u2014 HTTPS_PROXY is for Claude Code \u2192 Anthropic,\n  // not for CLI \u2192 local API. Node.js fetch doesn't respect NO_PROXY reliably, so we\n  // temporarily unset the proxy env vars for localhost calls.\n  const parsed = new URL(url);\n  const isLocalhost = parsed.hostname === 'localhost' || parsed.hostname === '127.0.0.1';\n  const savedProxy = process.env.HTTPS_PROXY;\n  const savedHttpProxy = process.env.HTTP_PROXY;\n  if (isLocalhost) {\n    delete process.env.HTTPS_PROXY;\n    delete process.env.HTTP_PROXY;\n  }\n\n  let response: Response;\n  try {\n    response = await fetch(url, {\n      method: options.method ?? 'GET',\n      headers,\n      body: options.body ? JSON.stringify(options.body) : undefined,\n    });\n  } finally {\n    // Restore proxy vars so claude -p calls still route through the proxy\n    if (isLocalhost) {\n      if (savedProxy !== undefined) process.env.HTTPS_PROXY = savedProxy;\n      if (savedHttpProxy !== undefined) process.env.HTTP_PROXY = savedHttpProxy;\n    }\n  }\n\n  let responseBody: unknown;\n  const contentType = response.headers.get('content-type');\n  if (contentType?.includes('application/json')) {\n    responseBody = await response.json();\n  } else {\n    responseBody = await response.text();\n  }\n\n  if (!response.ok) {\n    // Extract only the error message, not the full response body\n    const message =\n      responseBody && typeof responseBody === 'object' && 'error' in responseBody\n        ? String((responseBody as { error: string }).error)\n        : `HTTP ${response.status}`;\n    throw new ApiError(response.status, message);\n  }\n\n  return responseBody as T;\n}\n\nexport const apiGet = <T>(path: string): Promise<T> => api<T>(path);\nexport const apiPost = <T>(path: string, body: unknown): Promise<T> => api<T>(path, { method: 'POST', body });\nexport const apiPut = <T>(path: string, body: unknown): Promise<T> => api<T>(path, { method: 'PUT', body });\nexport const apiPatch = <T>(path: string, body: unknown): Promise<T> => api<T>(path, { method: 'PATCH', body });\nexport const apiDelete = <T>(path: string): Promise<T> => api<T>(path, { method: 'DELETE' });\n"],
+  "mappings": ";;;;;;AAAA,SAAS,qBAAqB;AAC9B,SAAS,YAAY,oBAAoB;AACzC,SAAS,SAAS,YAAY;AAS9B,SAAS,iBAAyB;AAChC,MAAI,MAAM,QAAQ,cAAc,YAAY,GAAG,CAAC;AAChD,WAAS,IAAI,GAAG,IAAI,GAAG,KAAK;AAC1B,UAAM,KAAK,KAAK,KAAK,cAAc;AACnC,QAAI,WAAW,EAAE,GAAG;AAClB,UAAI;AACF,cAAM,SAAS,KAAK,MAAM,aAAa,IAAI,MAAM,CAAC;AAClD,YAAI,OAAO,SAAS,qBAAqB,OAAO,QAAS,QAAO,OAAO;AAAA,MACzE,QAAQ;AAAA,MAER;AAAA,IACF;AACA,UAAM,SAAS,QAAQ,GAAG;AAC1B,QAAI,WAAW,IAAK;AACpB,UAAM;AAAA,EACR;AACA,SAAO;AACT;AAEA,IAAM,UAAU,eAAe;AAExB,IAAM,WAAN,cAAuB,MAAM;AAAA,EAClC,YACS,YACP,SACA;AACA,UAAM,OAAO;AAHN;AAIP,SAAK,OAAO;AAAA,EACd;AACF;AAQA,SAAS,aAAqB;AAI5B,QAAM,MAAM,QAAQ,IAAI,sBAAsB,gBAAgB,EAAE,UAAU;AAG1E,QAAM,SAAS,IAAI,IAAI,GAAG;AAC1B,MAAI,OAAO,aAAa,WAAW,OAAO,aAAa,eAAe,OAAO,aAAa,aAAa;AACrG,UAAM,IAAI,MAAM,mDAAmD,GAAG,EAAE;AAAA,EAC1E;AAEA,SAAO;AACT;AAEA,eAAsB,IAAO,MAAc,UAAsB,CAAC,GAAe;AAC/E,QAAM,UAAU,WAAW;AAC3B,QAAM,MAAM,GAAG,OAAO,GAAG,IAAI;AAE7B,QAAM,UAAkC;AAAA,IACtC,gBAAgB;AAAA,IAChB,cAAc,kBAAkB,OAAO;AAAA,IACvC,GAAG,QAAQ;AAAA,EACb;AAUA,QAAM,UAAU,gBAAgB;AAChC,QAAM,SACJ,QAAQ,IAAI,sBACZ,QAAQ,UACR,UAAU,GAAG,eACb,QAAQ;AACV,MAAI,QAAQ;AACV,YAAQ,eAAe,IAAI,UAAU,MAAM;AAAA,EAC7C;AAKA,QAAM,SAAS,IAAI,IAAI,GAAG;AAC1B,QAAM,cAAc,OAAO,aAAa,eAAe,OAAO,aAAa;AAC3E,QAAM,aAAa,QAAQ,IAAI;AAC/B,QAAM,iBAAiB,QAAQ,IAAI;AACnC,MAAI,aAAa;AACf,WAAO,QAAQ,IAAI;AACnB,WAAO,QAAQ,IAAI;AAAA,EACrB;AAEA,MAAI;AACJ,MAAI;AACF,eAAW,MAAM,MAAM,KAAK;AAAA,MAC1B,QAAQ,QAAQ,UAAU;AAAA,MAC1B;AAAA,MACA,MAAM,QAAQ,OAAO,KAAK,UAAU,QAAQ,IAAI,IAAI;AAAA,IACtD,CAAC;AAAA,EACH,UAAE;AAEA,QAAI,aAAa;AACf,UAAI,eAAe,OAAW,SAAQ,IAAI,cAAc;AACxD,UAAI,mBAAmB,OAAW,SAAQ,IAAI,aAAa;AAAA,IAC7D;AAAA,EACF;AAEA,MAAI;AACJ,QAAM,cAAc,SAAS,QAAQ,IAAI,cAAc;AACvD,MAAI,aAAa,SAAS,kBAAkB,GAAG;AAC7C,mBAAe,MAAM,SAAS,KAAK;AAAA,EACrC,OAAO;AACL,mBAAe,MAAM,SAAS,KAAK;AAAA,EACrC;AAEA,MAAI,CAAC,SAAS,IAAI;AAEhB,UAAM,UACJ,gBAAgB,OAAO,iBAAiB,YAAY,WAAW,eAC3D,OAAQ,aAAmC,KAAK,IAChD,QAAQ,SAAS,MAAM;AAC7B,UAAM,IAAI,SAAS,SAAS,QAAQ,OAAO;AAAA,EAC7C;AAEA,SAAO;AACT;AAEO,IAAM,SAAS,CAAI,SAA6B,IAAO,IAAI;AAC3D,IAAM,UAAU,CAAI,MAAc,SAA8B,IAAO,MAAM,EAAE,QAAQ,QAAQ,KAAK,CAAC;AACrG,IAAM,SAAS,CAAI,MAAc,SAA8B,IAAO,MAAM,EAAE,QAAQ,OAAO,KAAK,CAAC;AACnG,IAAM,WAAW,CAAI,MAAc,SAA8B,IAAO,MAAM,EAAE,QAAQ,SAAS,KAAK,CAAC;AACvG,IAAM,YAAY,CAAI,SAA6B,IAAO,MAAM,EAAE,QAAQ,SAAS,CAAC;",
+  "names": []
+}

package/dist/{chunk-42A3HEEH.js → chunk-F5DPTXRC.js}

@@ -1371,6 +1371,19 @@ var contextSnapshotsRelations = relations(contextSnapshots, ({ one }) => ({
 var INSTRUCTION_SCOPES = ["org", "team", "project", "personal"];
 var ORG_ROLES = ["owner", "admin", "member"];
 
+// ../../packages/db/dist/db-load.js
+var _inFlight = 0;
+var _peak = 0;
+function trackDbOpStart() {
+  _inFlight++;
+  if (_inFlight > _peak)
+    _peak = _inFlight;
+}
+function trackDbOpEnd() {
+  if (_inFlight > 0)
+    _inFlight--;
+}
+
 // ../../packages/db/dist/client.js
 var _supabase;
 var _supabaseAdmin;
@@ -1539,7 +1552,10 @@ function wrapBuilder(value, readSafe = false) {
         const then = Reflect.get(target, prop, receiver);
         if (typeof then !== "function")
           return then;
-        return (onFulfilled, onRejected) => withDbRetry(() => new Promise((resolve, reject) => then.call(target, resolve, reject)), { retryResets: readSafe }).then(onFulfilled, onRejected);
+        return (onFulfilled, onRejected) => {
+          trackDbOpStart();
+          return withDbRetry(() => new Promise((resolve, reject) => then.call(target, resolve, reject)), { retryResets: readSafe }).finally(trackDbOpEnd).then(onFulfilled, onRejected);
+        };
       }
       const v = Reflect.get(target, prop, receiver);
       if (typeof v === "function") {
@@ -1549,6 +1565,15 @@ function wrapBuilder(value, readSafe = false) {
     }
   });
 }
+function gaugeTransaction(run) {
+  trackDbOpStart();
+  try {
+    return Promise.resolve(run()).finally(trackDbOpEnd);
+  } catch (err) {
+    trackDbOpEnd();
+    throw err;
+  }
+}
 var db = new Proxy({}, {
   get(_target, prop) {
     const real4 = getDb();
@@ -1557,6 +1582,9 @@ var db = new Proxy({}, {
       const readSafe = READ_ONLY_ENTRY_METHODS.has(prop);
       return (...args) => wrapBuilder(value.apply(real4, args), readSafe);
     }
+    if (prop === "transaction" && typeof value === "function") {
+      return (...args) => gaugeTransaction(() => value.apply(real4, args));
+    }
     return value;
   }
 });
@@ -1593,4 +1621,4 @@ export {
   getDb,
   closeDb
 };
-//# sourceMappingURL=chunk-42A3HEEH.js.map
+//# sourceMappingURL=chunk-F5DPTXRC.js.map