@rulemetric/cli 0.6.2 → 0.6.3

package/dist/{chunk-OTPC2LXW.js → chunk-DAJNO4OI.js}

@@ -53,7 +53,12 @@ function getGatewayPid() {
 function findGatewayEntry() {
   const candidates = [
     resolve(MODULE_DIR, "./gateway-entry.js"),
-    resolve(MODULE_DIR, "../lib/gateway-entry.js")
+    // sibling (unbundled)
+    resolve(MODULE_DIR, "./lib/gateway-entry.js"),
+    // bundled chunk at dist root
+    resolve(MODULE_DIR, "../lib/gateway-entry.js"),
+    // nested command dir → dist/lib
+    resolve(MODULE_DIR, "../../lib/gateway-entry.js")
   ];
   for (const p of candidates) {
     if (existsSync(p)) return p;
@@ -119,4 +124,4 @@ export {
   spawnGateway,
   stopGateway
 };
-//# sourceMappingURL=chunk-OTPC2LXW.js.map
+//# sourceMappingURL=chunk-DAJNO4OI.js.map

package/dist/{chunk-OTPC2LXW.js.map → chunk-DAJNO4OI.js.map}

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/lib/gateway-lifecycle.ts"],
-  "sourcesContent": ["/**\n * Gateway process lifecycle helpers \u2014 spawn, stop, check status.\n * Used by hooks install/uninstall, session-start hook, and proxy status.\n */\nimport { spawn } from 'node:child_process';\nimport { createConnection } from 'node:net';\nimport { existsSync, mkdirSync, openSync, readFileSync, unlinkSync, writeFileSync } from 'node:fs';\nimport { homedir } from 'node:os';\nimport { dirname, join, resolve } from 'node:path';\nimport { fileURLToPath } from 'node:url';\n\n// `import.meta.dirname` only exists on Node >= 20.11 \u2014 on Node 18.x/\u226420.10 it is\n// `undefined`, and `resolve(undefined, \u2026)` throws, surfacing as a spurious\n// \"Could not find gateway-entry.js\" on fresh npm installs (the launchd gateway\n// masks it in dev). Derive the dir portably instead. See onboarding field report\n// 2026-07-07 F1.\nconst MODULE_DIR = dirname(fileURLToPath(import.meta.url));\n\nconst CONFIG_DIR = join(homedir(), '.config', 'rulemetric');\nexport const GATEWAY_PID_FILE = join(CONFIG_DIR, 'gateway.pid');\nexport const GATEWAY_LOG_FILE = join(CONFIG_DIR, 'gateway.log');\nexport const GATEWAY_PORT = 8787;\nexport const MITMPROXY_PORT = 8788;\n\n/**\n * TCP liveness probe: does something actually ACCEPT a connection on the port?\n * Distinct from isGatewayRunning() (which only checks the PID is alive) \u2014 a\n * process can be \"running\" per its pidfile while :8787 accepts nothing. This is\n * the check that must gate writing HTTPS_PROXY: never pin Claude Code's proxy\n * at a port with nothing behind it (the fresh-laptop ConnectionRefused footgun).\n */\nexport function isGatewayListening(port: number = GATEWAY_PORT, timeoutMs = 1500): Promise<boolean> {\n  return new Promise((resolveProbe) => {\n    const socket = createConnection({ host: '127.0.0.1', port });\n    const finish = (result: boolean) => {\n      socket.destroy();\n      resolveProbe(result);\n    };\n    socket.setTimeout(timeoutMs);\n    socket.once('connect', () => finish(true));\n    socket.once('timeout', () => finish(false));\n    socket.once('error', () => finish(false));\n  });\n}\n\n/**\n * Poll isGatewayListening() until it's true or the window elapses. spawnGateway()\n * returns as soon as it writes the PID file \u2014 the detached child hasn't bound\n * :8787 yet (Node bootstrap + module load). A one-shot probe microseconds later\n * fails-closed on every fresh install, so the proxy/deep-capture layer silently\n * never turns on. This tolerates a normal cold-start bind delay.\n */\nexport async function waitForGatewayListening(\n  port: number = GATEWAY_PORT,\n  { timeoutMs = 3000, intervalMs = 150 }: { timeoutMs?: number; intervalMs?: number } = {},\n): Promise<boolean> {\n  const deadline = Date.now() + timeoutMs;\n  for (;;) {\n    if (await isGatewayListening(port, Math.min(1500, timeoutMs))) return true;\n    if (Date.now() >= deadline) return false;\n    await new Promise((resolve) => setTimeout(resolve, intervalMs));\n  }\n}\n\nexport function isGatewayRunning(): boolean {\n  if (!existsSync(GATEWAY_PID_FILE)) return false;\n\n  const content = readFileSync(GATEWAY_PID_FILE, 'utf-8').trim();\n  const pid = parseInt(content, 10);\n  if (isNaN(pid)) return false;\n\n  try {\n    process.kill(pid, 0);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\nexport function getGatewayPid(): number | null {\n  if (!existsSync(GATEWAY_PID_FILE)) return null;\n  const content = readFileSync(GATEWAY_PID_FILE, 'utf-8').trim();\n  const pid = parseInt(content, 10);\n  return isNaN(pid) ? null : pid;\n}\n\nfunction findGatewayEntry(): string {\n  // Look for the compiled gateway-entry.js relative to this file's location\n  const candidates = [\n    resolve(MODULE_DIR, './gateway-entry.js'),\n    resolve(MODULE_DIR, '../lib/gateway-entry.js'),\n  ];\n  for (const p of candidates) {\n    if (existsSync(p)) return p;\n  }\n  throw new Error(\n    'Could not find gateway-entry.js. Is the CLI built?\\n' +\n    'Searched:\\n' + candidates.map(c => `  ${c}`).join('\\n'),\n  );\n}\n\nexport function spawnGateway(cliVersion?: string): number {\n  if (isGatewayRunning()) {\n    const pid = getGatewayPid();\n    if (pid) return pid;\n  }\n\n  mkdirSync(CONFIG_DIR, { recursive: true });\n\n  const entryPath = findGatewayEntry();\n  const logFd = openSync(GATEWAY_LOG_FILE, 'a');\n\n  const child = spawn(process.execPath, [entryPath], {\n    detached: true,\n    stdio: ['ignore', logFd, logFd],\n    // The gateway inherits the spawning CLI's env. RULEMETRIC_CLI_VERSION\n    // identifies the CLI version that started this gateway \u2014 used to\n    // detect drift when a newer CLI starts mitmproxy with a different\n    // version. RULEMETRIC_CLI_ENTRY is the path to the oclif entry point\n    // (process.argv[1]) so the gateway can re-invoke the CLI for\n    // `proxy restart` without needing the binary in PATH. Falls back to\n    // \"unknown\" if the caller didn't pass them.\n    env: {\n      ...process.env,\n      RULEMETRIC_CLI_VERSION: cliVersion ?? 'unknown',\n      RULEMETRIC_CLI_ENTRY: process.argv[1] ?? '',\n    },\n  });\n\n  child.unref();\n\n  if (!child.pid) {\n    throw new Error('Failed to spawn gateway process');\n  }\n\n  writeFileSync(GATEWAY_PID_FILE, String(child.pid));\n  return child.pid;\n}\n\nexport function stopGateway(): boolean {\n  const pid = getGatewayPid();\n  if (pid === null) return false;\n\n  try {\n    process.kill(pid, 'SIGTERM');\n  } catch {\n    // Process already gone\n  }\n\n  try { unlinkSync(GATEWAY_PID_FILE); } catch { /* already gone */ }\n  return true;\n}\n"],
-  "mappings": ";AAIA,SAAS,aAAa;AACtB,SAAS,wBAAwB;AACjC,SAAS,YAAY,WAAW,UAAU,cAAc,YAAY,qBAAqB;AACzF,SAAS,eAAe;AACxB,SAAS,SAAS,MAAM,eAAe;AACvC,SAAS,qBAAqB;AAO9B,IAAM,aAAa,QAAQ,cAAc,YAAY,GAAG,CAAC;AAEzD,IAAM,aAAa,KAAK,QAAQ,GAAG,WAAW,YAAY;AACnD,IAAM,mBAAmB,KAAK,YAAY,aAAa;AACvD,IAAM,mBAAmB,KAAK,YAAY,aAAa;AACvD,IAAM,eAAe;AACrB,IAAM,iBAAiB;AASvB,SAAS,mBAAmB,OAAe,cAAc,YAAY,MAAwB;AAClG,SAAO,IAAI,QAAQ,CAAC,iBAAiB;AACnC,UAAM,SAAS,iBAAiB,EAAE,MAAM,aAAa,KAAK,CAAC;AAC3D,UAAM,SAAS,CAAC,WAAoB;AAClC,aAAO,QAAQ;AACf,mBAAa,MAAM;AAAA,IACrB;AACA,WAAO,WAAW,SAAS;AAC3B,WAAO,KAAK,WAAW,MAAM,OAAO,IAAI,CAAC;AACzC,WAAO,KAAK,WAAW,MAAM,OAAO,KAAK,CAAC;AAC1C,WAAO,KAAK,SAAS,MAAM,OAAO,KAAK,CAAC;AAAA,EAC1C,CAAC;AACH;AASA,eAAsB,wBACpB,OAAe,cACf,EAAE,YAAY,KAAM,aAAa,IAAI,IAAiD,CAAC,GACrE;AAClB,QAAM,WAAW,KAAK,IAAI,IAAI;AAC9B,aAAS;AACP,QAAI,MAAM,mBAAmB,MAAM,KAAK,IAAI,MAAM,SAAS,CAAC,EAAG,QAAO;AACtE,QAAI,KAAK,IAAI,KAAK,SAAU,QAAO;AACnC,UAAM,IAAI,QAAQ,CAACA,aAAY,WAAWA,UAAS,UAAU,CAAC;AAAA,EAChE;AACF;AAEO,SAAS,mBAA4B;AAC1C,MAAI,CAAC,WAAW,gBAAgB,EAAG,QAAO;AAE1C,QAAM,UAAU,aAAa,kBAAkB,OAAO,EAAE,KAAK;AAC7D,QAAM,MAAM,SAAS,SAAS,EAAE;AAChC,MAAI,MAAM,GAAG,EAAG,QAAO;AAEvB,MAAI;AACF,YAAQ,KAAK,KAAK,CAAC;AACnB,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,gBAA+B;AAC7C,MAAI,CAAC,WAAW,gBAAgB,EAAG,QAAO;AAC1C,QAAM,UAAU,aAAa,kBAAkB,OAAO,EAAE,KAAK;AAC7D,QAAM,MAAM,SAAS,SAAS,EAAE;AAChC,SAAO,MAAM,GAAG,IAAI,OAAO;AAC7B;AAEA,SAAS,mBAA2B;AAElC,QAAM,aAAa;AAAA,IACjB,QAAQ,YAAY,oBAAoB;AAAA,IACxC,QAAQ,YAAY,yBAAyB;AAAA,EAC/C;AACA,aAAW,KAAK,YAAY;AAC1B,QAAI,WAAW,CAAC,EAAG,QAAO;AAAA,EAC5B;AACA,QAAM,IAAI;AAAA,IACR,oEACgB,WAAW,IAAI,OAAK,KAAK,CAAC,EAAE,EAAE,KAAK,IAAI;AAAA,EACzD;AACF;AAEO,SAAS,aAAa,YAA6B;AACxD,MAAI,iBAAiB,GAAG;AACtB,UAAM,MAAM,cAAc;AAC1B,QAAI,IAAK,QAAO;AAAA,EAClB;AAEA,YAAU,YAAY,EAAE,WAAW,KAAK,CAAC;AAEzC,QAAM,YAAY,iBAAiB;AACnC,QAAM,QAAQ,SAAS,kBAAkB,GAAG;AAE5C,QAAM,QAAQ,MAAM,QAAQ,UAAU,CAAC,SAAS,GAAG;AAAA,IACjD,UAAU;AAAA,IACV,OAAO,CAAC,UAAU,OAAO,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQ9B,KAAK;AAAA,MACH,GAAG,QAAQ;AAAA,MACX,wBAAwB,cAAc;AAAA,MACtC,sBAAsB,QAAQ,KAAK,CAAC,KAAK;AAAA,IAC3C;AAAA,EACF,CAAC;AAED,QAAM,MAAM;AAEZ,MAAI,CAAC,MAAM,KAAK;AACd,UAAM,IAAI,MAAM,iCAAiC;AAAA,EACnD;AAEA,gBAAc,kBAAkB,OAAO,MAAM,GAAG,CAAC;AACjD,SAAO,MAAM;AACf;AAEO,SAAS,cAAuB;AACrC,QAAM,MAAM,cAAc;AAC1B,MAAI,QAAQ,KAAM,QAAO;AAEzB,MAAI;AACF,YAAQ,KAAK,KAAK,SAAS;AAAA,EAC7B,QAAQ;AAAA,EAER;AAEA,MAAI;AAAE,eAAW,gBAAgB;AAAA,EAAG,QAAQ;AAAA,EAAqB;AACjE,SAAO;AACT;",
+  "sourcesContent": ["/**\n * Gateway process lifecycle helpers \u2014 spawn, stop, check status.\n * Used by hooks install/uninstall, session-start hook, and proxy status.\n */\nimport { spawn } from 'node:child_process';\nimport { createConnection } from 'node:net';\nimport { existsSync, mkdirSync, openSync, readFileSync, unlinkSync, writeFileSync } from 'node:fs';\nimport { homedir } from 'node:os';\nimport { dirname, join, resolve } from 'node:path';\nimport { fileURLToPath } from 'node:url';\n\n// `import.meta.dirname` only exists on Node >= 20.11 \u2014 on Node 18.x/\u226420.10 it is\n// `undefined`, and `resolve(undefined, \u2026)` throws, surfacing as a spurious\n// \"Could not find gateway-entry.js\" on fresh npm installs (the launchd gateway\n// masks it in dev). Derive the dir portably instead. See onboarding field report\n// 2026-07-07 F1.\nconst MODULE_DIR = dirname(fileURLToPath(import.meta.url));\n\nconst CONFIG_DIR = join(homedir(), '.config', 'rulemetric');\nexport const GATEWAY_PID_FILE = join(CONFIG_DIR, 'gateway.pid');\nexport const GATEWAY_LOG_FILE = join(CONFIG_DIR, 'gateway.log');\nexport const GATEWAY_PORT = 8787;\nexport const MITMPROXY_PORT = 8788;\n\n/**\n * TCP liveness probe: does something actually ACCEPT a connection on the port?\n * Distinct from isGatewayRunning() (which only checks the PID is alive) \u2014 a\n * process can be \"running\" per its pidfile while :8787 accepts nothing. This is\n * the check that must gate writing HTTPS_PROXY: never pin Claude Code's proxy\n * at a port with nothing behind it (the fresh-laptop ConnectionRefused footgun).\n */\nexport function isGatewayListening(port: number = GATEWAY_PORT, timeoutMs = 1500): Promise<boolean> {\n  return new Promise((resolveProbe) => {\n    const socket = createConnection({ host: '127.0.0.1', port });\n    const finish = (result: boolean) => {\n      socket.destroy();\n      resolveProbe(result);\n    };\n    socket.setTimeout(timeoutMs);\n    socket.once('connect', () => finish(true));\n    socket.once('timeout', () => finish(false));\n    socket.once('error', () => finish(false));\n  });\n}\n\n/**\n * Poll isGatewayListening() until it's true or the window elapses. spawnGateway()\n * returns as soon as it writes the PID file \u2014 the detached child hasn't bound\n * :8787 yet (Node bootstrap + module load). A one-shot probe microseconds later\n * fails-closed on every fresh install, so the proxy/deep-capture layer silently\n * never turns on. This tolerates a normal cold-start bind delay.\n */\nexport async function waitForGatewayListening(\n  port: number = GATEWAY_PORT,\n  { timeoutMs = 3000, intervalMs = 150 }: { timeoutMs?: number; intervalMs?: number } = {},\n): Promise<boolean> {\n  const deadline = Date.now() + timeoutMs;\n  for (;;) {\n    if (await isGatewayListening(port, Math.min(1500, timeoutMs))) return true;\n    if (Date.now() >= deadline) return false;\n    await new Promise((resolve) => setTimeout(resolve, intervalMs));\n  }\n}\n\nexport function isGatewayRunning(): boolean {\n  if (!existsSync(GATEWAY_PID_FILE)) return false;\n\n  const content = readFileSync(GATEWAY_PID_FILE, 'utf-8').trim();\n  const pid = parseInt(content, 10);\n  if (isNaN(pid)) return false;\n\n  try {\n    process.kill(pid, 0);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\nexport function getGatewayPid(): number | null {\n  if (!existsSync(GATEWAY_PID_FILE)) return null;\n  const content = readFileSync(GATEWAY_PID_FILE, 'utf-8').trim();\n  const pid = parseInt(content, 10);\n  return isNaN(pid) ? null : pid;\n}\n\nfunction findGatewayEntry(): string {\n  // Resolve the compiled gateway-entry.js across BOTH layouts:\n  //  - unbundled (dev/tsx, or tsc output): this module sits in dist/lib, so\n  //    gateway-entry.js is a sibling (`./gateway-entry.js`).\n  //  - BUNDLED (published build): esbuild flattens this module into\n  //    dist/chunk-*.js at the dist ROOT, so MODULE_DIR is dist/ and the entry\n  //    (kept as a separate build entry) is at dist/lib/gateway-entry.js\n  //    (`./lib/gateway-entry.js`). Without this candidate the gateway never\n  //    spawns on a clean npm install \u2014 masked in dev by the launchd gateway\n  //    short-circuiting before this runs. See onboarding field report F1.\n  const candidates = [\n    resolve(MODULE_DIR, './gateway-entry.js'),        // sibling (unbundled)\n    resolve(MODULE_DIR, './lib/gateway-entry.js'),    // bundled chunk at dist root\n    resolve(MODULE_DIR, '../lib/gateway-entry.js'),   // nested command dir \u2192 dist/lib\n    resolve(MODULE_DIR, '../../lib/gateway-entry.js'),\n  ];\n  for (const p of candidates) {\n    if (existsSync(p)) return p;\n  }\n  throw new Error(\n    'Could not find gateway-entry.js. Is the CLI built?\\n' +\n    'Searched:\\n' + candidates.map(c => `  ${c}`).join('\\n'),\n  );\n}\n\nexport function spawnGateway(cliVersion?: string): number {\n  if (isGatewayRunning()) {\n    const pid = getGatewayPid();\n    if (pid) return pid;\n  }\n\n  mkdirSync(CONFIG_DIR, { recursive: true });\n\n  const entryPath = findGatewayEntry();\n  const logFd = openSync(GATEWAY_LOG_FILE, 'a');\n\n  const child = spawn(process.execPath, [entryPath], {\n    detached: true,\n    stdio: ['ignore', logFd, logFd],\n    // The gateway inherits the spawning CLI's env. RULEMETRIC_CLI_VERSION\n    // identifies the CLI version that started this gateway \u2014 used to\n    // detect drift when a newer CLI starts mitmproxy with a different\n    // version. RULEMETRIC_CLI_ENTRY is the path to the oclif entry point\n    // (process.argv[1]) so the gateway can re-invoke the CLI for\n    // `proxy restart` without needing the binary in PATH. Falls back to\n    // \"unknown\" if the caller didn't pass them.\n    env: {\n      ...process.env,\n      RULEMETRIC_CLI_VERSION: cliVersion ?? 'unknown',\n      RULEMETRIC_CLI_ENTRY: process.argv[1] ?? '',\n    },\n  });\n\n  child.unref();\n\n  if (!child.pid) {\n    throw new Error('Failed to spawn gateway process');\n  }\n\n  writeFileSync(GATEWAY_PID_FILE, String(child.pid));\n  return child.pid;\n}\n\nexport function stopGateway(): boolean {\n  const pid = getGatewayPid();\n  if (pid === null) return false;\n\n  try {\n    process.kill(pid, 'SIGTERM');\n  } catch {\n    // Process already gone\n  }\n\n  try { unlinkSync(GATEWAY_PID_FILE); } catch { /* already gone */ }\n  return true;\n}\n"],
+  "mappings": ";AAIA,SAAS,aAAa;AACtB,SAAS,wBAAwB;AACjC,SAAS,YAAY,WAAW,UAAU,cAAc,YAAY,qBAAqB;AACzF,SAAS,eAAe;AACxB,SAAS,SAAS,MAAM,eAAe;AACvC,SAAS,qBAAqB;AAO9B,IAAM,aAAa,QAAQ,cAAc,YAAY,GAAG,CAAC;AAEzD,IAAM,aAAa,KAAK,QAAQ,GAAG,WAAW,YAAY;AACnD,IAAM,mBAAmB,KAAK,YAAY,aAAa;AACvD,IAAM,mBAAmB,KAAK,YAAY,aAAa;AACvD,IAAM,eAAe;AACrB,IAAM,iBAAiB;AASvB,SAAS,mBAAmB,OAAe,cAAc,YAAY,MAAwB;AAClG,SAAO,IAAI,QAAQ,CAAC,iBAAiB;AACnC,UAAM,SAAS,iBAAiB,EAAE,MAAM,aAAa,KAAK,CAAC;AAC3D,UAAM,SAAS,CAAC,WAAoB;AAClC,aAAO,QAAQ;AACf,mBAAa,MAAM;AAAA,IACrB;AACA,WAAO,WAAW,SAAS;AAC3B,WAAO,KAAK,WAAW,MAAM,OAAO,IAAI,CAAC;AACzC,WAAO,KAAK,WAAW,MAAM,OAAO,KAAK,CAAC;AAC1C,WAAO,KAAK,SAAS,MAAM,OAAO,KAAK,CAAC;AAAA,EAC1C,CAAC;AACH;AASA,eAAsB,wBACpB,OAAe,cACf,EAAE,YAAY,KAAM,aAAa,IAAI,IAAiD,CAAC,GACrE;AAClB,QAAM,WAAW,KAAK,IAAI,IAAI;AAC9B,aAAS;AACP,QAAI,MAAM,mBAAmB,MAAM,KAAK,IAAI,MAAM,SAAS,CAAC,EAAG,QAAO;AACtE,QAAI,KAAK,IAAI,KAAK,SAAU,QAAO;AACnC,UAAM,IAAI,QAAQ,CAACA,aAAY,WAAWA,UAAS,UAAU,CAAC;AAAA,EAChE;AACF;AAEO,SAAS,mBAA4B;AAC1C,MAAI,CAAC,WAAW,gBAAgB,EAAG,QAAO;AAE1C,QAAM,UAAU,aAAa,kBAAkB,OAAO,EAAE,KAAK;AAC7D,QAAM,MAAM,SAAS,SAAS,EAAE;AAChC,MAAI,MAAM,GAAG,EAAG,QAAO;AAEvB,MAAI;AACF,YAAQ,KAAK,KAAK,CAAC;AACnB,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,gBAA+B;AAC7C,MAAI,CAAC,WAAW,gBAAgB,EAAG,QAAO;AAC1C,QAAM,UAAU,aAAa,kBAAkB,OAAO,EAAE,KAAK;AAC7D,QAAM,MAAM,SAAS,SAAS,EAAE;AAChC,SAAO,MAAM,GAAG,IAAI,OAAO;AAC7B;AAEA,SAAS,mBAA2B;AAUlC,QAAM,aAAa;AAAA,IACjB,QAAQ,YAAY,oBAAoB;AAAA;AAAA,IACxC,QAAQ,YAAY,wBAAwB;AAAA;AAAA,IAC5C,QAAQ,YAAY,yBAAyB;AAAA;AAAA,IAC7C,QAAQ,YAAY,4BAA4B;AAAA,EAClD;AACA,aAAW,KAAK,YAAY;AAC1B,QAAI,WAAW,CAAC,EAAG,QAAO;AAAA,EAC5B;AACA,QAAM,IAAI;AAAA,IACR,oEACgB,WAAW,IAAI,OAAK,KAAK,CAAC,EAAE,EAAE,KAAK,IAAI;AAAA,EACzD;AACF;AAEO,SAAS,aAAa,YAA6B;AACxD,MAAI,iBAAiB,GAAG;AACtB,UAAM,MAAM,cAAc;AAC1B,QAAI,IAAK,QAAO;AAAA,EAClB;AAEA,YAAU,YAAY,EAAE,WAAW,KAAK,CAAC;AAEzC,QAAM,YAAY,iBAAiB;AACnC,QAAM,QAAQ,SAAS,kBAAkB,GAAG;AAE5C,QAAM,QAAQ,MAAM,QAAQ,UAAU,CAAC,SAAS,GAAG;AAAA,IACjD,UAAU;AAAA,IACV,OAAO,CAAC,UAAU,OAAO,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQ9B,KAAK;AAAA,MACH,GAAG,QAAQ;AAAA,MACX,wBAAwB,cAAc;AAAA,MACtC,sBAAsB,QAAQ,KAAK,CAAC,KAAK;AAAA,IAC3C;AAAA,EACF,CAAC;AAED,QAAM,MAAM;AAEZ,MAAI,CAAC,MAAM,KAAK;AACd,UAAM,IAAI,MAAM,iCAAiC;AAAA,EACnD;AAEA,gBAAc,kBAAkB,OAAO,MAAM,GAAG,CAAC;AACjD,SAAO,MAAM;AACf;AAEO,SAAS,cAAuB;AACrC,QAAM,MAAM,cAAc;AAC1B,MAAI,QAAQ,KAAM,QAAO;AAEzB,MAAI;AACF,YAAQ,KAAK,KAAK,SAAS;AAAA,EAC7B,QAAQ;AAAA,EAER;AAEA,MAAI;AAAE,eAAW,gBAAgB;AAAA,EAAG,QAAQ;AAAA,EAAqB;AACjE,SAAO;AACT;",
   "names": ["resolve"]
 }

package/dist/{chunk-TXHL3AUA.js → chunk-XNNOXGP6.js}

@@ -5,7 +5,7 @@ import {
 } from "./chunk-XN23W5HL.js";
 import {
   GATEWAY_PORT
-} from "./chunk-OTPC2LXW.js";
+} from "./chunk-DAJNO4OI.js";
 import {
   apiGet
 } from "./chunk-ZRLYHBPN.js";
@@ -392,4 +392,4 @@ export {
   isStepId,
   computeStatus
 };
-//# sourceMappingURL=chunk-TXHL3AUA.js.map
+//# sourceMappingURL=chunk-XNNOXGP6.js.map

package/dist/commands/gateway/ensure.js

@@ -1,7 +1,7 @@
 import {
   isGatewayRunning,
   spawnGateway
-} from "../../chunk-OTPC2LXW.js";
+} from "../../chunk-DAJNO4OI.js";
 import {
   BaseCommand
 } from "../../chunk-SZ7VDCD6.js";

package/dist/commands/hooks/install.js

@@ -28,7 +28,7 @@ import {
   isGatewayRunning,
   spawnGateway,
   waitForGatewayListening
-} from "../../chunk-OTPC2LXW.js";
+} from "../../chunk-DAJNO4OI.js";
 import "../../chunk-KRBQLMOP.js";
 import {
   BaseCommand

package/dist/commands/hooks/uninstall.js

@@ -17,7 +17,7 @@ import {
 } from "../../chunk-XN23W5HL.js";
 import {
   stopGateway
-} from "../../chunk-OTPC2LXW.js";
+} from "../../chunk-DAJNO4OI.js";
 import {
   BaseCommand
 } from "../../chunk-SZ7VDCD6.js";

package/dist/commands/proxy/env.js

@@ -1,6 +1,6 @@
 import {
   GATEWAY_PORT
-} from "../../chunk-OTPC2LXW.js";
+} from "../../chunk-DAJNO4OI.js";
 import {
   BaseCommand
 } from "../../chunk-SZ7VDCD6.js";

package/dist/commands/proxy/status.js

@@ -3,7 +3,7 @@ import {
   MITMPROXY_PORT,
   getGatewayPid,
   isGatewayRunning
-} from "../../chunk-OTPC2LXW.js";
+} from "../../chunk-DAJNO4OI.js";
 import {
   BaseCommand
 } from "../../chunk-SZ7VDCD6.js";

package/dist/commands/setup.js

@@ -6,9 +6,9 @@ import {
   getStep,
   isStepId,
   renderDiff
-} from "../chunk-TXHL3AUA.js";
+} from "../chunk-XNNOXGP6.js";
 import "../chunk-XN23W5HL.js";
-import "../chunk-OTPC2LXW.js";
+import "../chunk-DAJNO4OI.js";
 import {
   BaseCommand
 } from "../chunk-SZ7VDCD6.js";

package/dist/lib/gateway-lifecycle.js

@@ -9,7 +9,7 @@ import {
   spawnGateway,
   stopGateway,
   waitForGatewayListening
-} from "../chunk-OTPC2LXW.js";
+} from "../chunk-DAJNO4OI.js";
 import "../chunk-NSBPE2FW.js";
 export {
   GATEWAY_LOG_FILE,

package/dist/lib/setup-steps.js

@@ -9,9 +9,9 @@ import {
   isStepId,
   maskToken,
   renderDiff
-} from "../chunk-TXHL3AUA.js";
+} from "../chunk-XNNOXGP6.js";
 import "../chunk-XN23W5HL.js";
-import "../chunk-OTPC2LXW.js";
+import "../chunk-DAJNO4OI.js";
 import "../chunk-ZRLYHBPN.js";
 import "../chunk-W2YERO7E.js";
 import "../chunk-NSBPE2FW.js";

package/oclif.manifest.json

@@ -4066,5 +4066,5 @@
       ]
     }
   },
-  "version": "0.6.2"
+  "version": "0.6.3"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rulemetric/cli",
-  "version": "0.6.2",
+  "version": "0.6.3",
   "publishConfig": {
     "access": "public"
   },
@@ -73,9 +73,9 @@
     "postgres": "^3.4.0",
     "react": "^19.0.0",
     "zod": "^3.24.0",
-    "@rulemetric/hooks": "0.6.2",
-    "@rulemetric/proxy": "0.6.2",
-    "@rulemetric/skills-registry": "0.6.2"
+    "@rulemetric/proxy": "0.6.3",
+    "@rulemetric/skills-registry": "0.6.3",
+    "@rulemetric/hooks": "0.6.3"
   },
   "//deps": "Worker (`evals agent`) runtime deps: the @opentelemetry/* set, @sentry/node, and postgres are STATIC top-level imports loaded at worker startup (via bundled @rulemetric/{telemetry,db}) — they MUST be runtime deps or a clean `npm i -g` crashes with ModuleLoadError. `better-sqlite3` is optionalDependencies (below): it's a native module, lazy `require()`'d inside a try/catch (packages/session providers cursor/opencode) so a missing binary degrades gracefully — making it a hard dep would break `npm i -g` on platforms without prebuilt binaries. `resend` stays a devDep: lazy `await import('resend')` guarded by RESEND_API_KEY, which end-user workers never set (provider falls back to noop). Classification verified via import-graph scan of dist/commands/evals/agent.js + per-importer static/lazy check.",
   "optionalDependencies": {
@@ -97,9 +97,9 @@
     "@rulemetric/core": "0.0.1",
     "@rulemetric/db": "0.0.1",
     "@rulemetric/email": "0.0.1",
-    "@rulemetric/session": "0.2.1",
     "@rulemetric/telemetry": "0.0.1",
-    "@rulemetric/typescript-config": "0.0.0"
+    "@rulemetric/typescript-config": "0.0.0",
+    "@rulemetric/session": "0.2.1"
   },
   "scripts": {
     "build": "node scripts/build.mjs",