@rulemetric/cli 0.4.0 → 0.5.1

package/dist/{chunk-YEBBX4HQ.js → chunk-I4GHR6CY.js}

@@ -5,7 +5,7 @@ import {
   getDb,
   sessionEvents,
   sessions
-} from "./chunk-42A3HEEH.js";
+} from "./chunk-F5DPTXRC.js";
 
 // src/lib/handlers/process-session-goal.ts
 import { eq, asc, sql } from "drizzle-orm";
@@ -52,4 +52,4 @@ async function processSessionGoal(payload, deps = {}) {
 export {
   processSessionGoal
 };
-//# sourceMappingURL=chunk-YEBBX4HQ.js.map
+//# sourceMappingURL=chunk-I4GHR6CY.js.map

package/dist/{chunk-XMWHTOCC.js → chunk-IKEI4KNV.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-DGHWRQXL.js";
 import {
   apiPatch
-} from "./chunk-EJOI2ZGU.js";
+} from "./chunk-CWFVBGX2.js";
 
 // src/lib/handlers/process-launch.ts
 async function resolveWorktreeForLaunch(config) {
@@ -58,4 +58,4 @@ export {
   resolveWorktreeForLaunch,
   processLaunch
 };
-//# sourceMappingURL=chunk-XMWHTOCC.js.map
+//# sourceMappingURL=chunk-IKEI4KNV.js.map

package/dist/{chunk-CROYS75W.js → chunk-LJ5OT5XN.js}

@@ -1,3 +1,6 @@
+import {
+  ActiveJobsList
+} from "./chunk-QD6X4L4L.js";
 import {
   NewLaunchForm
 } from "./chunk-DTFXCHHI.js";
@@ -9,9 +12,6 @@ import {
   createLaunchJob,
   listLaunchers
 } from "./chunk-N52AHNBH.js";
-import {
-  ActiveJobsList
-} from "./chunk-QD6X4L4L.js";
 import {
   ORANGE
 } from "./chunk-QJQS6TUN.js";
@@ -158,4 +158,4 @@ function LauncherOverlay({
 export {
   LauncherOverlay
 };
-//# sourceMappingURL=chunk-CROYS75W.js.map
+//# sourceMappingURL=chunk-LJ5OT5XN.js.map

package/dist/{chunk-UF73WX2J.js → chunk-OAQG5WBV.js}

@@ -1,7 +1,7 @@
 import {
   ApiError,
   apiPost
-} from "./chunk-EJOI2ZGU.js";
+} from "./chunk-CWFVBGX2.js";
 
 // src/lib/research-client.ts
 function serializeDate(v) {
@@ -46,4 +46,4 @@ export {
   postObservation,
   postObservations
 };
-//# sourceMappingURL=chunk-UF73WX2J.js.map
+//# sourceMappingURL=chunk-OAQG5WBV.js.map

package/dist/{chunk-QJXAULRC.js → chunk-OKCFYPIQ.js}

@@ -17,7 +17,7 @@ import {
   apiGet,
   apiPatch,
   apiPost
-} from "./chunk-EJOI2ZGU.js";
+} from "./chunk-CWFVBGX2.js";
 
 // src/lib/handlers/process-eval.ts
 async function processEval(payload, helpers) {
@@ -188,4 +188,4 @@ function buildSummary(results) {
 export {
   processEval
 };
-//# sourceMappingURL=chunk-QJXAULRC.js.map
+//# sourceMappingURL=chunk-OKCFYPIQ.js.map

package/dist/{chunk-MTLAIJED.js → chunk-OWUS3HMA.js}

@@ -8,7 +8,7 @@ import {
 import {
   announcements,
   getDb
-} from "./chunk-42A3HEEH.js";
+} from "./chunk-F5DPTXRC.js";
 
 // src/lib/handlers/process-changelog.ts
 import * as fs from "node:fs/promises";
@@ -119,4 +119,4 @@ async function processChangelog(deps = {}) {
 export {
   processChangelog
 };
-//# sourceMappingURL=chunk-MTLAIJED.js.map
+//# sourceMappingURL=chunk-OWUS3HMA.js.map

package/dist/{chunk-YBNW7ARH.js → chunk-PHIAFGQ2.js}

@@ -14,7 +14,7 @@ import {
 import {
   apiGet,
   apiPost
-} from "./chunk-EJOI2ZGU.js";
+} from "./chunk-CWFVBGX2.js";
 
 // src/lib/handlers/cron-suggest-instructions.ts
 import { readFileSync } from "node:fs";
@@ -164,4 +164,4 @@ var cronSuggestInstructions = async (_payload, helpers) => {
 export {
   cronSuggestInstructions
 };
-//# sourceMappingURL=chunk-YBNW7ARH.js.map
+//# sourceMappingURL=chunk-PHIAFGQ2.js.map

package/dist/{chunk-OGVORIFM.js → chunk-R56PH7YE.js}

@@ -56,15 +56,23 @@ function refreshVersionCacheInBackground() {
     clearTimeout(timer);
   });
 }
+function formatUpgradeBanner(currentVersion, latest) {
+  if (compareVersions(latest, currentVersion) <= 0) return null;
+  return [
+    `RuleMetric ${latest} available (you're on ${currentVersion}).`,
+    `  Upgrade:  npm i -g @rulemetric/cli@latest`,
+    `  Then:     rulemetric hooks install   (re-applies capture hooks for the new version)`
+  ].join("\n");
+}
 function getUpgradeBanner(currentVersion) {
   const cached = readCache();
   if (!cached) return null;
-  if (compareVersions(cached.latest, currentVersion) <= 0) return null;
-  return `RuleMetric ${cached.latest} available \u2014 you're on ${currentVersion}.`;
+  return formatUpgradeBanner(currentVersion, cached.latest);
 }
 
 export {
   refreshVersionCacheInBackground,
+  formatUpgradeBanner,
   getUpgradeBanner
 };
-//# sourceMappingURL=chunk-OGVORIFM.js.map
+//# sourceMappingURL=chunk-R56PH7YE.js.map

package/dist/chunk-R56PH7YE.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/lib/version-check.ts"],
+  "sourcesContent": ["// CLI version-check banner. Every command kicks off an async fetch to\n// /api/cli/latest-version (cached for an hour) and prints a one-line\n// notice on the next invocation if the cached version is newer than the\n// currently-running CLI.\n//\n// Design notes:\n// - Fire-and-forget: we never block command execution on the network.\n// - Cache: ~/.config/rulemetric/version-check.json, TTL 1h. Stored on disk\n//   so the check survives between CLI invocations (each invocation is a\n//   fresh process \u2014 in-memory cache wouldn't help).\n// - \"Newer\" uses semver-naive numeric comparison split on dots \u2014 fine for\n//   our 0.x line; tightening this is a follow-up if/when we adopt semver\n//   pre-releases.\n// - The banner tells the user how to upgrade (`npm i -g @rulemetric/cli@latest`)\n//   and to re-run `rulemetric hooks install` \u2014 capture behavior lives in what\n//   install writes, so upgrading the package alone doesn't apply new hooks.\nimport { mkdirSync, readFileSync, writeFileSync } from 'node:fs';\nimport { homedir } from 'node:os';\nimport { join } from 'node:path';\n\nconst CONFIG_DIR = join(homedir(), '.config', 'rulemetric');\nconst CACHE_FILE = join(CONFIG_DIR, 'version-check.json');\nconst TTL_MS = 60 * 60 * 1000; // 1h\n\ninterface CacheEntry {\n  latest: string;\n  fetchedAtMs: number;\n}\n\nfunction readCache(): CacheEntry | null {\n  try {\n    const data = JSON.parse(readFileSync(CACHE_FILE, 'utf-8')) as CacheEntry;\n    if (typeof data.latest === 'string' && typeof data.fetchedAtMs === 'number') {\n      return data;\n    }\n    return null;\n  } catch {\n    return null;\n  }\n}\n\nfunction writeCache(entry: CacheEntry): void {\n  try {\n    mkdirSync(CONFIG_DIR, { recursive: true });\n    writeFileSync(CACHE_FILE, JSON.stringify(entry));\n  } catch {\n    // Best-effort: a write failure just means we'll re-fetch next time.\n  }\n}\n\nfunction compareVersions(a: string, b: string): number {\n  const parse = (v: string) => v.split('.').map((n) => Number.parseInt(n, 10) || 0);\n  const pa = parse(a);\n  const pb = parse(b);\n  const len = Math.max(pa.length, pb.length);\n  for (let i = 0; i < len; i++) {\n    const ai = pa[i] ?? 0;\n    const bi = pb[i] ?? 0;\n    if (ai < bi) return -1;\n    if (ai > bi) return 1;\n  }\n  return 0;\n}\n\nfunction getApiUrl(): string {\n  const env = process.env.RULEMETRIC_API_URL;\n  if (env) return env.replace(/\\/$/, '');\n  return 'https://rulemetric.com';\n}\n\n/**\n * Fetches latest version from the API in the background and refreshes the\n * cache if the entry is missing or older than TTL_MS. Never throws.\n */\nexport function refreshVersionCacheInBackground(): void {\n  const cached = readCache();\n  if (cached && Date.now() - cached.fetchedAtMs < TTL_MS) return;\n\n  // Fire-and-forget \u2014 explicitly catch every failure mode so an unhandled\n  // rejection can never reach the user. AbortController guards against\n  // hanging connections (3s budget).\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), 3000);\n  globalThis\n    .fetch(`${getApiUrl()}/api/cli/latest-version`, { signal: controller.signal })\n    .then(async (res) => {\n      clearTimeout(timer);\n      if (!res.ok) return;\n      const data = (await res.json()) as { latest?: unknown };\n      if (typeof data.latest !== 'string') return;\n      writeCache({ latest: data.latest, fetchedAtMs: Date.now() });\n    })\n    .catch(() => {\n      clearTimeout(timer);\n      // Network error, timeout, malformed JSON \u2014 silently ignore. Banner\n      // is purely a nicety; we never want it to surface failures.\n    });\n}\n\n/**\n * Build the multi-line upgrade banner, or null when `latest` is not newer than\n * `current`. Pure (no disk/network) so it's unit-testable. Includes the upgrade\n * command AND the re-run-hooks-install reminder \u2014 capture behavior lives in what\n * `hooks install` *writes*, so upgrading the package alone doesn't apply it.\n */\nexport function formatUpgradeBanner(currentVersion: string, latest: string): string | null {\n  if (compareVersions(latest, currentVersion) <= 0) return null;\n  return [\n    `RuleMetric ${latest} available (you're on ${currentVersion}).`,\n    `  Upgrade:  npm i -g @rulemetric/cli@latest`,\n    `  Then:     rulemetric hooks install   (re-applies capture hooks for the new version)`,\n  ].join('\\n');\n}\n\n/**\n * Returns the upgrade banner if a newer version is cached, else null.\n * Designed to be printed to stderr by the CLI's BaseCommand on launch.\n */\nexport function getUpgradeBanner(currentVersion: string): string | null {\n  const cached = readCache();\n  if (!cached) return null;\n  return formatUpgradeBanner(currentVersion, cached.latest);\n}\n"],
+  "mappings": ";AAgBA,SAAS,WAAW,cAAc,qBAAqB;AACvD,SAAS,eAAe;AACxB,SAAS,YAAY;AAErB,IAAM,aAAa,KAAK,QAAQ,GAAG,WAAW,YAAY;AAC1D,IAAM,aAAa,KAAK,YAAY,oBAAoB;AACxD,IAAM,SAAS,KAAK,KAAK;AAOzB,SAAS,YAA+B;AACtC,MAAI;AACF,UAAM,OAAO,KAAK,MAAM,aAAa,YAAY,OAAO,CAAC;AACzD,QAAI,OAAO,KAAK,WAAW,YAAY,OAAO,KAAK,gBAAgB,UAAU;AAC3E,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,WAAW,OAAyB;AAC3C,MAAI;AACF,cAAU,YAAY,EAAE,WAAW,KAAK,CAAC;AACzC,kBAAc,YAAY,KAAK,UAAU,KAAK,CAAC;AAAA,EACjD,QAAQ;AAAA,EAER;AACF;AAEA,SAAS,gBAAgB,GAAW,GAAmB;AACrD,QAAM,QAAQ,CAAC,MAAc,EAAE,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,OAAO,SAAS,GAAG,EAAE,KAAK,CAAC;AAChF,QAAM,KAAK,MAAM,CAAC;AAClB,QAAM,KAAK,MAAM,CAAC;AAClB,QAAM,MAAM,KAAK,IAAI,GAAG,QAAQ,GAAG,MAAM;AACzC,WAAS,IAAI,GAAG,IAAI,KAAK,KAAK;AAC5B,UAAM,KAAK,GAAG,CAAC,KAAK;AACpB,UAAM,KAAK,GAAG,CAAC,KAAK;AACpB,QAAI,KAAK,GAAI,QAAO;AACpB,QAAI,KAAK,GAAI,QAAO;AAAA,EACtB;AACA,SAAO;AACT;AAEA,SAAS,YAAoB;AAC3B,QAAM,MAAM,QAAQ,IAAI;AACxB,MAAI,IAAK,QAAO,IAAI,QAAQ,OAAO,EAAE;AACrC,SAAO;AACT;AAMO,SAAS,kCAAwC;AACtD,QAAM,SAAS,UAAU;AACzB,MAAI,UAAU,KAAK,IAAI,IAAI,OAAO,cAAc,OAAQ;AAKxD,QAAM,aAAa,IAAI,gBAAgB;AACvC,QAAM,QAAQ,WAAW,MAAM,WAAW,MAAM,GAAG,GAAI;AACvD,aACG,MAAM,GAAG,UAAU,CAAC,2BAA2B,EAAE,QAAQ,WAAW,OAAO,CAAC,EAC5E,KAAK,OAAO,QAAQ;AACnB,iBAAa,KAAK;AAClB,QAAI,CAAC,IAAI,GAAI;AACb,UAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,QAAI,OAAO,KAAK,WAAW,SAAU;AACrC,eAAW,EAAE,QAAQ,KAAK,QAAQ,aAAa,KAAK,IAAI,EAAE,CAAC;AAAA,EAC7D,CAAC,EACA,MAAM,MAAM;AACX,iBAAa,KAAK;AAAA,EAGpB,CAAC;AACL;AAQO,SAAS,oBAAoB,gBAAwB,QAA+B;AACzF,MAAI,gBAAgB,QAAQ,cAAc,KAAK,EAAG,QAAO;AACzD,SAAO;AAAA,IACL,cAAc,MAAM,yBAAyB,cAAc;AAAA,IAC3D;AAAA,IACA;AAAA,EACF,EAAE,KAAK,IAAI;AACb;AAMO,SAAS,iBAAiB,gBAAuC;AACtE,QAAM,SAAS,UAAU;AACzB,MAAI,CAAC,OAAQ,QAAO;AACpB,SAAO,oBAAoB,gBAAgB,OAAO,MAAM;AAC1D;",
+  "names": []
+}

package/dist/{chunk-CLC7ZFH2.js → chunk-RYMK7FQL.js}

@@ -10,7 +10,7 @@ import {
   getDb,
   notificationPreferences,
   profiles
-} from "./chunk-42A3HEEH.js";
+} from "./chunk-F5DPTXRC.js";
 
 // src/lib/handlers/process-announcement.ts
 import { and, asc, eq, gt, isNotNull } from "drizzle-orm";
@@ -154,4 +154,4 @@ async function sendOne(args) {
 export {
   processAnnouncement
 };
-//# sourceMappingURL=chunk-CLC7ZFH2.js.map
+//# sourceMappingURL=chunk-RYMK7FQL.js.map

package/dist/{chunk-IWYCRLEK.js → chunk-TDTHAOXO.js}

@@ -10,7 +10,7 @@ import {
 import {
   apiGet,
   apiPost
-} from "./chunk-EJOI2ZGU.js";
+} from "./chunk-CWFVBGX2.js";
 
 // src/lib/eval-conversation-handler.ts
 async function processConversationJob(jobConfig, evalTargetId, logger) {
@@ -217,4 +217,4 @@ async function handleAnalyzeAndPropose(target, evalCases, messages, userFeedback
 export {
   processConversationJob
 };
-//# sourceMappingURL=chunk-IWYCRLEK.js.map
+//# sourceMappingURL=chunk-TDTHAOXO.js.map

package/dist/{chunk-PQU7GZ7A.js → chunk-TJ2M5QVL.js}

@@ -1,7 +1,7 @@
 import {
   apiGet,
   apiPost
-} from "./chunk-EJOI2ZGU.js";
+} from "./chunk-CWFVBGX2.js";
 
 // src/lib/eval-benchmark.ts
 function computeStats(values) {
@@ -89,4 +89,4 @@ export {
   aggregateBenchmark,
   postBenchmark
 };
-//# sourceMappingURL=chunk-PQU7GZ7A.js.map
+//# sourceMappingURL=chunk-TJ2M5QVL.js.map

package/dist/{chunk-C7SRRSPA.js → chunk-VBOTWXJW.js}

@@ -8,7 +8,7 @@ import {
   agentRuns,
   getDb,
   sessions
-} from "./chunk-42A3HEEH.js";
+} from "./chunk-F5DPTXRC.js";
 
 // src/lib/handlers/process-run-cleanup.ts
 import { and, eq, isNotNull } from "drizzle-orm";
@@ -96,4 +96,4 @@ async function processRunCleanup(payload, deps = {}) {
 export {
   processRunCleanup
 };
-//# sourceMappingURL=chunk-C7SRRSPA.js.map
+//# sourceMappingURL=chunk-VBOTWXJW.js.map

package/dist/{chunk-KZRFUXGF.js → chunk-W2YERO7E.js}

@@ -5,6 +5,27 @@ import * as os from "node:os";
 function getConfigDir() {
   return process.env.RULEMETRIC_CONFIG_DIR || path.join(os.homedir(), ".config", "rulemetric");
 }
+var _envFileAuthCache;
+function loadEnvFileAuth() {
+  if (_envFileAuthCache !== void 0) return _envFileAuthCache;
+  try {
+    const envPath = path.join(getConfigDir(), "env");
+    if (!fs.existsSync(envPath)) return _envFileAuthCache = {};
+    const content = fs.readFileSync(envPath, "utf-8");
+    const read = (key) => content.match(new RegExp(`^${key}=(.+)$`, "m"))?.[1]?.trim();
+    _envFileAuthCache = {
+      apiKey: read("RULEMETRIC_API_KEY"),
+      accessToken: read("RULEMETRIC_ACCESS_TOKEN"),
+      apiUrl: read("RULEMETRIC_API_URL")
+    };
+    return _envFileAuthCache;
+  } catch {
+    return _envFileAuthCache = {};
+  }
+}
+function __resetEnvFileAuthCache() {
+  _envFileAuthCache = void 0;
+}
 function createAuthStore(configDir = getConfigDir()) {
   const authFile = path.join(configDir, "auth.json");
   function saveToken2(token) {
@@ -114,7 +135,9 @@ function clearToken() {
 }
 function isAuthenticated() {
   if (process.env.RULEMETRIC_API_KEY) return true;
-  return getStore().isAuthenticated();
+  if (getStore().isAuthenticated()) return true;
+  const envAuth = loadEnvFileAuth();
+  return Boolean(envAuth.apiKey || envAuth.accessToken);
 }
 function saveEnvFile(accessToken, apiUrl) {
   getStore().saveEnvFile(accessToken, apiUrl);
@@ -131,6 +154,8 @@ function getDefaultConfigDir() {
 var CONFIG_DIR = getConfigDir();
 
 export {
+  loadEnvFileAuth,
+  __resetEnvFileAuthCache,
   createAuthStore,
   saveToken,
   loadToken,
@@ -142,4 +167,4 @@ export {
   getDefaultConfigDir,
   CONFIG_DIR
 };
-//# sourceMappingURL=chunk-KZRFUXGF.js.map
+//# sourceMappingURL=chunk-W2YERO7E.js.map

package/dist/chunk-W2YERO7E.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/lib/auth.ts"],
+  "sourcesContent": ["import * as fs from 'node:fs';\nimport * as path from 'node:path';\nimport * as os from 'node:os';\n\nexport interface AuthToken {\n  accessToken: string;\n  refreshToken: string;\n  expiresAt: string;\n  email: string;\n}\n\nfunction getConfigDir(): string {\n  return process.env.RULEMETRIC_CONFIG_DIR || path.join(os.homedir(), '.config', 'rulemetric');\n}\n\nexport interface EnvFileAuth {\n  apiKey?: string;\n  accessToken?: string;\n  apiUrl?: string;\n}\n\n// Read credentials persisted in ~/.config/rulemetric/env (written by `auth login`\n// / `auth create-key`). The interactive Node CLI does NOT source this file into\n// process.env the way the bash hooks do, so WITHOUT this the CLI reports \"Not\n// logged in\" from any shell that hasn't exported the vars \u2014 even though valid\n// long-lived creds are on disk (this is the documented #2 credential source in\n// CLAUDE.md). Consulted ONLY as an additive fallback, after process.env +\n// auth.json, so it can never regress an already-working auth path. Cached per\n// process (config is read once; a login within the same process is rare and can\n// re-read via the explicit save paths).\nlet _envFileAuthCache: EnvFileAuth | undefined;\nexport function loadEnvFileAuth(): EnvFileAuth {\n  if (_envFileAuthCache !== undefined) return _envFileAuthCache;\n  try {\n    const envPath = path.join(getConfigDir(), 'env');\n    if (!fs.existsSync(envPath)) return (_envFileAuthCache = {});\n    const content = fs.readFileSync(envPath, 'utf-8');\n    const read = (key: string): string | undefined =>\n      content.match(new RegExp(`^${key}=(.+)$`, 'm'))?.[1]?.trim();\n    _envFileAuthCache = {\n      apiKey: read('RULEMETRIC_API_KEY'),\n      accessToken: read('RULEMETRIC_ACCESS_TOKEN'),\n      apiUrl: read('RULEMETRIC_API_URL'),\n    };\n    return _envFileAuthCache;\n  } catch {\n    return (_envFileAuthCache = {});\n  }\n}\n\n/** Test-only: drop the env-file auth cache so a test can change the file. */\nexport function __resetEnvFileAuthCache(): void {\n  _envFileAuthCache = undefined;\n}\n\nexport function createAuthStore(configDir: string = getConfigDir()) {\n  const authFile = path.join(configDir, 'auth.json');\n\n  function saveToken(token: AuthToken): void {\n    fs.mkdirSync(configDir, { recursive: true, mode: 0o700 });\n    fs.writeFileSync(authFile, JSON.stringify(token, null, 2), {\n      encoding: 'utf-8',\n      mode: 0o600,\n    });\n  }\n\n  function loadToken(): AuthToken | null {\n    try {\n      const data = fs.readFileSync(authFile, 'utf-8');\n      const parsed: unknown = JSON.parse(data);\n      if (\n        parsed &&\n        typeof parsed === 'object' &&\n        'accessToken' in parsed &&\n        'expiresAt' in parsed &&\n        'email' in parsed &&\n        typeof (parsed as AuthToken).accessToken === 'string' &&\n        typeof (parsed as AuthToken).expiresAt === 'string'\n      ) {\n        return parsed as AuthToken;\n      }\n      return null;\n    } catch {\n      return null;\n    }\n  }\n\n  function clearToken(): void {\n    try {\n      fs.unlinkSync(authFile);\n    } catch {\n      // File doesn't exist, nothing to clear\n    }\n  }\n\n  function isAuthenticated(): boolean {\n    const token = loadToken();\n    if (!token) return false;\n    const expiresAt = new Date(token.expiresAt).getTime();\n    if (Number.isNaN(expiresAt)) return false;\n    return Date.now() < expiresAt;\n  }\n\n  function saveEnvFile(accessToken: string, apiUrl?: string): void {\n    fs.mkdirSync(configDir, { recursive: true, mode: 0o700 });\n    const envPath = path.join(configDir, 'env');\n\n    // Preserve existing RULEMETRIC_API_KEY if present\n    let existingApiKey = '';\n    try {\n      const existing = fs.readFileSync(envPath, 'utf-8');\n      const match = existing.match(/^RULEMETRIC_API_KEY=(.+)$/m);\n      if (match) existingApiKey = match[1];\n    } catch { /* file doesn't exist */ }\n\n    const lines = [\n      `RULEMETRIC_ACCESS_TOKEN=${accessToken}`,\n    ];\n    if (existingApiKey) {\n      lines.push(`RULEMETRIC_API_KEY=${existingApiKey}`);\n    }\n    if (apiUrl) {\n      lines.push(`RULEMETRIC_API_URL=${apiUrl}`);\n    }\n\n    fs.writeFileSync(envPath, lines.join('\\n') + '\\n', {\n      encoding: 'utf-8',\n      mode: 0o600,\n    });\n  }\n\n  function saveApiKeyToEnv(apiKey: string, apiUrl?: string): void {\n    fs.mkdirSync(configDir, { recursive: true, mode: 0o700 });\n    const envPath = path.join(configDir, 'env');\n\n    // Preserve existing ACCESS_TOKEN if present\n    let existingToken = '';\n    let existingUrl = '';\n    try {\n      const existing = fs.readFileSync(envPath, 'utf-8');\n      const tokenMatch = existing.match(/^RULEMETRIC_ACCESS_TOKEN=(.+)$/m);\n      if (tokenMatch) existingToken = tokenMatch[1];\n      const urlMatch = existing.match(/^RULEMETRIC_API_URL=(.+)$/m);\n      if (urlMatch) existingUrl = urlMatch[1];\n    } catch { /* file doesn't exist */ }\n\n    const lines = [\n      `RULEMETRIC_API_KEY=${apiKey}`,\n    ];\n    if (existingToken) {\n      lines.push(`RULEMETRIC_ACCESS_TOKEN=${existingToken}`);\n    }\n    const url = apiUrl ?? existingUrl;\n    if (url) {\n      lines.push(`RULEMETRIC_API_URL=${url}`);\n    }\n\n    fs.writeFileSync(envPath, lines.join('\\n') + '\\n', {\n      encoding: 'utf-8',\n      mode: 0o600,\n    });\n  }\n\n  function clearEnvFile(): void {\n    const envPath = path.join(configDir, 'env');\n    try { fs.unlinkSync(envPath); } catch { /* noop */ }\n  }\n\n  return { saveToken, loadToken, clearToken, isAuthenticated, saveEnvFile, saveApiKeyToEnv, clearEnvFile, configDir, authFile };\n}\n\n// Lazy accessors \u2014 re-evaluate config dir from env on each call\nfunction getStore() {\n  return createAuthStore();\n}\n\nexport function saveToken(token: AuthToken): void { getStore().saveToken(token); }\nexport function loadToken(): AuthToken | null { return getStore().loadToken(); }\nexport function clearToken(): void { getStore().clearToken(); }\nexport function isAuthenticated(): boolean {\n  // API key counts as authenticated\n  if (process.env.RULEMETRIC_API_KEY) return true;\n  if (getStore().isAuthenticated()) return true;\n  // Additive fallback: creds persisted in the env file by `auth login` /\n  // `create-key` (not exported to process.env in a plain interactive shell,\n  // and the OAuth auth.json may be expired, but the API key is long-lived).\n  const envAuth = loadEnvFileAuth();\n  return Boolean(envAuth.apiKey || envAuth.accessToken);\n}\nexport function saveEnvFile(accessToken: string, apiUrl?: string): void { getStore().saveEnvFile(accessToken, apiUrl); }\nexport function saveApiKey(apiKey: string, apiUrl?: string): void { getStore().saveApiKeyToEnv(apiKey, apiUrl); }\nexport function clearEnvFile(): void { getStore().clearEnvFile(); }\nexport function getDefaultConfigDir(): string { return getConfigDir(); }\n// Re-exported for backward compat (evaluated at import time; prefer getDefaultConfigDir() for dynamic usage)\nexport const CONFIG_DIR = getConfigDir();\n"],
+  "mappings": ";AAAA,YAAY,QAAQ;AACpB,YAAY,UAAU;AACtB,YAAY,QAAQ;AASpB,SAAS,eAAuB;AAC9B,SAAO,QAAQ,IAAI,yBAA8B,UAAQ,WAAQ,GAAG,WAAW,YAAY;AAC7F;AAiBA,IAAI;AACG,SAAS,kBAA+B;AAC7C,MAAI,sBAAsB,OAAW,QAAO;AAC5C,MAAI;AACF,UAAM,UAAe,UAAK,aAAa,GAAG,KAAK;AAC/C,QAAI,CAAI,cAAW,OAAO,EAAG,QAAQ,oBAAoB,CAAC;AAC1D,UAAM,UAAa,gBAAa,SAAS,OAAO;AAChD,UAAM,OAAO,CAAC,QACZ,QAAQ,MAAM,IAAI,OAAO,IAAI,GAAG,UAAU,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK;AAC7D,wBAAoB;AAAA,MAClB,QAAQ,KAAK,oBAAoB;AAAA,MACjC,aAAa,KAAK,yBAAyB;AAAA,MAC3C,QAAQ,KAAK,oBAAoB;AAAA,IACnC;AACA,WAAO;AAAA,EACT,QAAQ;AACN,WAAQ,oBAAoB,CAAC;AAAA,EAC/B;AACF;AAGO,SAAS,0BAAgC;AAC9C,sBAAoB;AACtB;AAEO,SAAS,gBAAgB,YAAoB,aAAa,GAAG;AAClE,QAAM,WAAgB,UAAK,WAAW,WAAW;AAEjD,WAASA,WAAU,OAAwB;AACzC,IAAG,aAAU,WAAW,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACxD,IAAG,iBAAc,UAAU,KAAK,UAAU,OAAO,MAAM,CAAC,GAAG;AAAA,MACzD,UAAU;AAAA,MACV,MAAM;AAAA,IACR,CAAC;AAAA,EACH;AAEA,WAASC,aAA8B;AACrC,QAAI;AACF,YAAM,OAAU,gBAAa,UAAU,OAAO;AAC9C,YAAM,SAAkB,KAAK,MAAM,IAAI;AACvC,UACE,UACA,OAAO,WAAW,YAClB,iBAAiB,UACjB,eAAe,UACf,WAAW,UACX,OAAQ,OAAqB,gBAAgB,YAC7C,OAAQ,OAAqB,cAAc,UAC3C;AACA,eAAO;AAAA,MACT;AACA,aAAO;AAAA,IACT,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAEA,WAASC,cAAmB;AAC1B,QAAI;AACF,MAAG,cAAW,QAAQ;AAAA,IACxB,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,WAASC,mBAA2B;AAClC,UAAM,QAAQF,WAAU;AACxB,QAAI,CAAC,MAAO,QAAO;AACnB,UAAM,YAAY,IAAI,KAAK,MAAM,SAAS,EAAE,QAAQ;AACpD,QAAI,OAAO,MAAM,SAAS,EAAG,QAAO;AACpC,WAAO,KAAK,IAAI,IAAI;AAAA,EACtB;AAEA,WAASG,aAAY,aAAqB,QAAuB;AAC/D,IAAG,aAAU,WAAW,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACxD,UAAM,UAAe,UAAK,WAAW,KAAK;AAG1C,QAAI,iBAAiB;AACrB,QAAI;AACF,YAAM,WAAc,gBAAa,SAAS,OAAO;AACjD,YAAM,QAAQ,SAAS,MAAM,4BAA4B;AACzD,UAAI,MAAO,kBAAiB,MAAM,CAAC;AAAA,IACrC,QAAQ;AAAA,IAA2B;AAEnC,UAAM,QAAQ;AAAA,MACZ,2BAA2B,WAAW;AAAA,IACxC;AACA,QAAI,gBAAgB;AAClB,YAAM,KAAK,sBAAsB,cAAc,EAAE;AAAA,IACnD;AACA,QAAI,QAAQ;AACV,YAAM,KAAK,sBAAsB,MAAM,EAAE;AAAA,IAC3C;AAEA,IAAG,iBAAc,SAAS,MAAM,KAAK,IAAI,IAAI,MAAM;AAAA,MACjD,UAAU;AAAA,MACV,MAAM;AAAA,IACR,CAAC;AAAA,EACH;AAEA,WAAS,gBAAgB,QAAgB,QAAuB;AAC9D,IAAG,aAAU,WAAW,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACxD,UAAM,UAAe,UAAK,WAAW,KAAK;AAG1C,QAAI,gBAAgB;AACpB,QAAI,cAAc;AAClB,QAAI;AACF,YAAM,WAAc,gBAAa,SAAS,OAAO;AACjD,YAAM,aAAa,SAAS,MAAM,iCAAiC;AACnE,UAAI,WAAY,iBAAgB,WAAW,CAAC;AAC5C,YAAM,WAAW,SAAS,MAAM,4BAA4B;AAC5D,UAAI,SAAU,eAAc,SAAS,CAAC;AAAA,IACxC,QAAQ;AAAA,IAA2B;AAEnC,UAAM,QAAQ;AAAA,MACZ,sBAAsB,MAAM;AAAA,IAC9B;AACA,QAAI,eAAe;AACjB,YAAM,KAAK,2BAA2B,aAAa,EAAE;AAAA,IACvD;AACA,UAAM,MAAM,UAAU;AACtB,QAAI,KAAK;AACP,YAAM,KAAK,sBAAsB,GAAG,EAAE;AAAA,IACxC;AAEA,IAAG,iBAAc,SAAS,MAAM,KAAK,IAAI,IAAI,MAAM;AAAA,MACjD,UAAU;AAAA,MACV,MAAM;AAAA,IACR,CAAC;AAAA,EACH;AAEA,WAASC,gBAAqB;AAC5B,UAAM,UAAe,UAAK,WAAW,KAAK;AAC1C,QAAI;AAAE,MAAG,cAAW,OAAO;AAAA,IAAG,QAAQ;AAAA,IAAa;AAAA,EACrD;AAEA,SAAO,EAAE,WAAAL,YAAW,WAAAC,YAAW,YAAAC,aAAY,iBAAAC,kBAAiB,aAAAC,cAAa,iBAAiB,cAAAC,eAAc,WAAW,SAAS;AAC9H;AAGA,SAAS,WAAW;AAClB,SAAO,gBAAgB;AACzB;AAEO,SAAS,UAAU,OAAwB;AAAE,WAAS,EAAE,UAAU,KAAK;AAAG;AAC1E,SAAS,YAA8B;AAAE,SAAO,SAAS,EAAE,UAAU;AAAG;AACxE,SAAS,aAAmB;AAAE,WAAS,EAAE,WAAW;AAAG;AACvD,SAAS,kBAA2B;AAEzC,MAAI,QAAQ,IAAI,mBAAoB,QAAO;AAC3C,MAAI,SAAS,EAAE,gBAAgB,EAAG,QAAO;AAIzC,QAAM,UAAU,gBAAgB;AAChC,SAAO,QAAQ,QAAQ,UAAU,QAAQ,WAAW;AACtD;AACO,SAAS,YAAY,aAAqB,QAAuB;AAAE,WAAS,EAAE,YAAY,aAAa,MAAM;AAAG;AAChH,SAAS,WAAW,QAAgB,QAAuB;AAAE,WAAS,EAAE,gBAAgB,QAAQ,MAAM;AAAG;AACzG,SAAS,eAAqB;AAAE,WAAS,EAAE,aAAa;AAAG;AAC3D,SAAS,sBAA8B;AAAE,SAAO,aAAa;AAAG;AAEhE,IAAM,aAAa,aAAa;",
+  "names": ["saveToken", "loadToken", "clearToken", "isAuthenticated", "saveEnvFile", "clearEnvFile"]
+}

package/dist/commands/antigravity/backfill.js

@@ -3,14 +3,14 @@ import {
   findMaxStepIndex,
   readNewRecords,
   stateApi
-} from "../../chunk-EHZJ6OXD.js";
+} from "../../chunk-CGUV6TUA.js";
 import {
   BaseCommand
-} from "../../chunk-S56LOTGQ.js";
-import "../../chunk-OGVORIFM.js";
-import "../../chunk-2AM54TUK.js";
-import "../../chunk-EJOI2ZGU.js";
-import "../../chunk-KZRFUXGF.js";
+} from "../../chunk-CB43W53J.js";
+import "../../chunk-R56PH7YE.js";
+import "../../chunk-4UJATBTG.js";
+import "../../chunk-CWFVBGX2.js";
+import "../../chunk-W2YERO7E.js";
 import "../../chunk-EKJ2CABV.js";
 import "../../chunk-NSBPE2FW.js";
 

package/dist/commands/auth/create-key.js

@@ -1,14 +1,14 @@
 import {
   BaseCommand
-} from "../../chunk-S56LOTGQ.js";
-import "../../chunk-OGVORIFM.js";
-import "../../chunk-2AM54TUK.js";
+} from "../../chunk-CB43W53J.js";
+import "../../chunk-R56PH7YE.js";
+import "../../chunk-4UJATBTG.js";
 import {
   apiPost
-} from "../../chunk-EJOI2ZGU.js";
+} from "../../chunk-CWFVBGX2.js";
 import {
   saveApiKey
-} from "../../chunk-KZRFUXGF.js";
+} from "../../chunk-W2YERO7E.js";
 import "../../chunk-EKJ2CABV.js";
 import "../../chunk-NSBPE2FW.js";
 

package/dist/commands/auth/login.js

@@ -1,17 +1,17 @@
 import {
   BaseCommand
-} from "../../chunk-S56LOTGQ.js";
-import "../../chunk-OGVORIFM.js";
+} from "../../chunk-CB43W53J.js";
+import "../../chunk-R56PH7YE.js";
 import {
   bootstrapActiveOrg
-} from "../../chunk-2AM54TUK.js";
+} from "../../chunk-4UJATBTG.js";
 import {
   apiPost
-} from "../../chunk-EJOI2ZGU.js";
+} from "../../chunk-CWFVBGX2.js";
 import {
   saveEnvFile,
   saveToken
-} from "../../chunk-KZRFUXGF.js";
+} from "../../chunk-W2YERO7E.js";
 import "../../chunk-EKJ2CABV.js";
 import "../../chunk-NSBPE2FW.js";
 

package/dist/commands/auth/logout.js

@@ -1,13 +1,13 @@
 import {
   BaseCommand
-} from "../../chunk-S56LOTGQ.js";
-import "../../chunk-OGVORIFM.js";
-import "../../chunk-2AM54TUK.js";
-import "../../chunk-EJOI2ZGU.js";
+} from "../../chunk-CB43W53J.js";
+import "../../chunk-R56PH7YE.js";
+import "../../chunk-4UJATBTG.js";
+import "../../chunk-CWFVBGX2.js";
 import {
   clearEnvFile,
   clearToken
-} from "../../chunk-KZRFUXGF.js";
+} from "../../chunk-W2YERO7E.js";
 import "../../chunk-EKJ2CABV.js";
 import "../../chunk-NSBPE2FW.js";
 

package/dist/commands/auth/revoke-key.js

@@ -1,12 +1,12 @@
 import {
   BaseCommand
-} from "../../chunk-S56LOTGQ.js";
-import "../../chunk-OGVORIFM.js";
-import "../../chunk-2AM54TUK.js";
+} from "../../chunk-CB43W53J.js";
+import "../../chunk-R56PH7YE.js";
+import "../../chunk-4UJATBTG.js";
 import {
   apiDelete
-} from "../../chunk-EJOI2ZGU.js";
-import "../../chunk-KZRFUXGF.js";
+} from "../../chunk-CWFVBGX2.js";
+import "../../chunk-W2YERO7E.js";
 import "../../chunk-EKJ2CABV.js";
 import "../../chunk-NSBPE2FW.js";
 

package/dist/commands/auth/status.js

@@ -3,15 +3,15 @@ import {
 } from "../../chunk-BZDKEQKU.js";
 import {
   BaseCommand
-} from "../../chunk-S56LOTGQ.js";
-import "../../chunk-OGVORIFM.js";
-import "../../chunk-2AM54TUK.js";
-import "../../chunk-EJOI2ZGU.js";
+} from "../../chunk-CB43W53J.js";
+import "../../chunk-R56PH7YE.js";
+import "../../chunk-4UJATBTG.js";
+import "../../chunk-CWFVBGX2.js";
 import {
   getDefaultConfigDir,
   isAuthenticated,
   loadToken
-} from "../../chunk-KZRFUXGF.js";
+} from "../../chunk-W2YERO7E.js";
 import "../../chunk-EKJ2CABV.js";
 import "../../chunk-NSBPE2FW.js";
 

package/dist/commands/catalog/index.js

@@ -5,13 +5,13 @@ import {
 } from "../../chunk-BZDKEQKU.js";
 import {
   BaseCommand
-} from "../../chunk-S56LOTGQ.js";
-import "../../chunk-OGVORIFM.js";
-import "../../chunk-2AM54TUK.js";
+} from "../../chunk-CB43W53J.js";
+import "../../chunk-R56PH7YE.js";
+import "../../chunk-4UJATBTG.js";
 import {
   apiGet
-} from "../../chunk-EJOI2ZGU.js";
-import "../../chunk-KZRFUXGF.js";
+} from "../../chunk-CWFVBGX2.js";
+import "../../chunk-W2YERO7E.js";
 import "../../chunk-EKJ2CABV.js";
 import "../../chunk-NSBPE2FW.js";
 

package/dist/commands/catalog/recommend.js

@@ -1,12 +1,12 @@
 import {
   BaseCommand
-} from "../../chunk-S56LOTGQ.js";
-import "../../chunk-OGVORIFM.js";
-import "../../chunk-2AM54TUK.js";
+} from "../../chunk-CB43W53J.js";
+import "../../chunk-R56PH7YE.js";
+import "../../chunk-4UJATBTG.js";
 import {
   apiPost
-} from "../../chunk-EJOI2ZGU.js";
-import "../../chunk-KZRFUXGF.js";
+} from "../../chunk-CWFVBGX2.js";
+import "../../chunk-W2YERO7E.js";
 import "../../chunk-EKJ2CABV.js";
 import "../../chunk-NSBPE2FW.js";
 

package/dist/commands/convert.js

@@ -3,13 +3,13 @@ import {
 } from "../chunk-7NYKWN7U.js";
 import {
   BaseCommand
-} from "../chunk-S56LOTGQ.js";
-import "../chunk-OGVORIFM.js";
-import "../chunk-2AM54TUK.js";
+} from "../chunk-CB43W53J.js";
+import "../chunk-R56PH7YE.js";
+import "../chunk-4UJATBTG.js";
 import {
   apiPost
-} from "../chunk-EJOI2ZGU.js";
-import "../chunk-KZRFUXGF.js";
+} from "../chunk-CWFVBGX2.js";
+import "../chunk-W2YERO7E.js";
 import "../chunk-EKJ2CABV.js";
 import "../chunk-NSBPE2FW.js";
 

package/dist/commands/converters.js

@@ -1,12 +1,12 @@
 import {
   BaseCommand
-} from "../chunk-S56LOTGQ.js";
-import "../chunk-OGVORIFM.js";
-import "../chunk-2AM54TUK.js";
+} from "../chunk-CB43W53J.js";
+import "../chunk-R56PH7YE.js";
+import "../chunk-4UJATBTG.js";
 import {
   apiGet
-} from "../chunk-EJOI2ZGU.js";
-import "../chunk-KZRFUXGF.js";
+} from "../chunk-CWFVBGX2.js";
+import "../chunk-W2YERO7E.js";
 import "../chunk-EKJ2CABV.js";
 import "../chunk-NSBPE2FW.js";
 

package/dist/commands/crons/list.js

@@ -3,11 +3,11 @@ import {
 } from "../../chunk-JFDWKLQC.js";
 import {
   BaseCommand
-} from "../../chunk-S56LOTGQ.js";
-import "../../chunk-OGVORIFM.js";
-import "../../chunk-2AM54TUK.js";
-import "../../chunk-EJOI2ZGU.js";
-import "../../chunk-KZRFUXGF.js";
+} from "../../chunk-CB43W53J.js";
+import "../../chunk-R56PH7YE.js";
+import "../../chunk-4UJATBTG.js";
+import "../../chunk-CWFVBGX2.js";
+import "../../chunk-W2YERO7E.js";
 import "../../chunk-EKJ2CABV.js";
 import "../../chunk-NSBPE2FW.js";
 

package/dist/commands/crons/run.js

@@ -3,11 +3,11 @@ import {
 } from "../../chunk-JFDWKLQC.js";
 import {
   BaseCommand
-} from "../../chunk-S56LOTGQ.js";
-import "../../chunk-OGVORIFM.js";
-import "../../chunk-2AM54TUK.js";
-import "../../chunk-EJOI2ZGU.js";
-import "../../chunk-KZRFUXGF.js";
+} from "../../chunk-CB43W53J.js";
+import "../../chunk-R56PH7YE.js";
+import "../../chunk-4UJATBTG.js";
+import "../../chunk-CWFVBGX2.js";
+import "../../chunk-W2YERO7E.js";
 import "../../chunk-EKJ2CABV.js";
 import "../../chunk-NSBPE2FW.js";
 

package/dist/commands/dashboard.js

@@ -1,10 +1,10 @@
 import {
   BaseCommand
-} from "../chunk-S56LOTGQ.js";
-import "../chunk-OGVORIFM.js";
-import "../chunk-2AM54TUK.js";
-import "../chunk-EJOI2ZGU.js";
-import "../chunk-KZRFUXGF.js";
+} from "../chunk-CB43W53J.js";
+import "../chunk-R56PH7YE.js";
+import "../chunk-4UJATBTG.js";
+import "../chunk-CWFVBGX2.js";
+import "../chunk-W2YERO7E.js";
 import "../chunk-EKJ2CABV.js";
 import "../chunk-NSBPE2FW.js";
 

package/dist/commands/eval-targets/create.js

@@ -1,12 +1,12 @@
 import {
   BaseCommand
-} from "../../chunk-S56LOTGQ.js";
-import "../../chunk-OGVORIFM.js";
-import "../../chunk-2AM54TUK.js";
+} from "../../chunk-CB43W53J.js";
+import "../../chunk-R56PH7YE.js";
+import "../../chunk-4UJATBTG.js";
 import {
   apiPost
-} from "../../chunk-EJOI2ZGU.js";
-import "../../chunk-KZRFUXGF.js";
+} from "../../chunk-CWFVBGX2.js";
+import "../../chunk-W2YERO7E.js";
 import "../../chunk-EKJ2CABV.js";
 import "../../chunk-NSBPE2FW.js";
 

package/dist/commands/eval-targets/list.js

@@ -4,13 +4,13 @@ import {
 } from "../../chunk-BZDKEQKU.js";
 import {
   BaseCommand
-} from "../../chunk-S56LOTGQ.js";
-import "../../chunk-OGVORIFM.js";
-import "../../chunk-2AM54TUK.js";
+} from "../../chunk-CB43W53J.js";
+import "../../chunk-R56PH7YE.js";
+import "../../chunk-4UJATBTG.js";
 import {
   apiGet
-} from "../../chunk-EJOI2ZGU.js";
-import "../../chunk-KZRFUXGF.js";
+} from "../../chunk-CWFVBGX2.js";
+import "../../chunk-W2YERO7E.js";
 import "../../chunk-EKJ2CABV.js";
 import "../../chunk-NSBPE2FW.js";