@rulemetric/cli 0.7.2 → 0.7.4

package/dist/chunk-GIUBARWS.js

@@ -1,99 +0,0 @@
-import {
-  buildTmuxHasSessionArgs,
-  runTmux
-} from "./chunk-KRBQLMOP.js";
-import {
-  apiGet,
-  apiPatch
-} from "./chunk-ZUJBM6HE.js";
-
-// src/lib/terminal-target-heartbeat.ts
-var DEFAULT_INTERVAL_MS = 6e4;
-function structuredLog(log, event) {
-  try {
-    log(JSON.stringify({ ts: (/* @__PURE__ */ new Date()).toISOString(), ...event }));
-  } catch {
-    log(`[tt-heartbeat] log_error event=${event["event"]}`);
-  }
-}
-function abortableSleep(ms, signal) {
-  if (signal.aborted) return Promise.resolve(false);
-  if (ms <= 0) return Promise.resolve(true);
-  return new Promise((resolve) => {
-    const timer = setTimeout(() => {
-      signal.removeEventListener("abort", onAbort);
-      resolve(true);
-    }, ms);
-    const onAbort = () => {
-      clearTimeout(timer);
-      signal.removeEventListener("abort", onAbort);
-      resolve(false);
-    };
-    signal.addEventListener("abort", onAbort, { once: true });
-  });
-}
-async function probeAndReport(target, log) {
-  if (target.kind !== "tmux") return;
-  const result = await runTmux(buildTmuxHasSessionArgs(target.target));
-  const status = result.code === 0 ? "active" : "missing";
-  try {
-    await apiPatch(`/api/terminal-targets/${target.id}/status`, {
-      status,
-      lastSeenAt: (/* @__PURE__ */ new Date()).toISOString()
-    });
-    structuredLog(log, {
-      event: "tt_heartbeat",
-      targetId: target.id,
-      target: target.target,
-      status
-    });
-  } catch (err) {
-    structuredLog(log, {
-      event: "tt_heartbeat_error",
-      targetId: target.id,
-      target: target.target,
-      error: err instanceof Error ? err.message : String(err)
-    });
-  }
-}
-async function runOneHeartbeatCycle(log) {
-  let resp;
-  try {
-    resp = await apiGet("/api/terminal-targets?status=active");
-  } catch (err) {
-    structuredLog(log, {
-      event: "tt_heartbeat_list_error",
-      error: err instanceof Error ? err.message : String(err)
-    });
-    return;
-  }
-  for (const target of resp.targets ?? []) {
-    try {
-      await probeAndReport(target, log);
-    } catch (err) {
-      structuredLog(log, {
-        event: "tt_heartbeat_probe_error",
-        targetId: target.id,
-        error: err instanceof Error ? err.message : String(err)
-      });
-    }
-  }
-}
-async function startTerminalTargetHeartbeat(opts) {
-  const log = opts.log ?? (() => void 0);
-  const intervalMs = opts.intervalMs ?? DEFAULT_INTERVAL_MS;
-  structuredLog(log, { event: "tt_heartbeat_start", intervalMs });
-  while (!opts.signal.aborted) {
-    await runOneHeartbeatCycle(log);
-    const completed = await abortableSleep(intervalMs, opts.signal);
-    if (!completed) break;
-  }
-  structuredLog(log, { event: "tt_heartbeat_stop" });
-}
-
-export {
-  probeAndReport,
-  runOneHeartbeatCycle,
-  startTerminalTargetHeartbeat
-};
-//# sourceMappingURL=chunk-GIUBARWS.js.map

package/dist/chunk-GIUBARWS.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../src/lib/terminal-target-heartbeat.ts"],
-  "sourcesContent": ["// Phase 5: periodic liveness probe for tmux targets.\n//\n// Every `intervalMs` (default 60s) the worker fetches its own active terminal\n// targets and runs `tmux has-session -t <target>` on each. Exit 0 \u2192 PATCH\n// status='active', non-zero \u2192 PATCH status='missing'. Non-tmux targets are\n// skipped (we have no way to probe them from here).\n//\n// Errors on individual targets are logged and swallowed \u2014 a transient API\n// failure or a single bad target must not stop the heartbeat for the rest of\n// the fleet. The whole loop stops cleanly when `signal` aborts.\n\nimport { apiGet, apiPatch } from './api-client.js';\nimport { runTmux, buildTmuxHasSessionArgs } from './tmux.js';\n\nexport interface TerminalTarget {\n  id: string;\n  kind: string;\n  target: string;\n  status: string;\n}\n\ninterface ListResponse {\n  targets: TerminalTarget[];\n}\n\nexport interface StartTerminalTargetHeartbeatOptions {\n  signal: AbortSignal;\n  log?: (msg: string) => void;\n  intervalMs?: number;\n}\n\nconst DEFAULT_INTERVAL_MS = 60_000;\n\nfunction structuredLog(\n  log: (msg: string) => void,\n  event: Record<string, unknown>,\n): void {\n  try {\n    log(JSON.stringify({ ts: new Date().toISOString(), ...event }));\n  } catch {\n    log(`[tt-heartbeat] log_error event=${event['event']}`);\n  }\n}\n\nfunction abortableSleep(ms: number, signal: AbortSignal): Promise<boolean> {\n  if (signal.aborted) return Promise.resolve(false);\n  if (ms <= 0) return Promise.resolve(true);\n  return new Promise<boolean>((resolve) => {\n    const timer = setTimeout(() => {\n      signal.removeEventListener('abort', onAbort);\n      resolve(true);\n    }, ms);\n    const onAbort = () => {\n      clearTimeout(timer);\n      signal.removeEventListener('abort', onAbort);\n      resolve(false);\n    };\n    signal.addEventListener('abort', onAbort, { once: true });\n  });\n}\n\nexport async function probeAndReport(\n  target: TerminalTarget,\n  log: (msg: string) => void,\n): Promise<void> {\n  if (target.kind !== 'tmux') return; // Skip non-tmux targets.\n\n  const result = await runTmux(buildTmuxHasSessionArgs(target.target));\n  const status = result.code === 0 ? 'active' : 'missing';\n\n  try {\n    await apiPatch(`/api/terminal-targets/${target.id}/status`, {\n      status,\n      lastSeenAt: new Date().toISOString(),\n    });\n    structuredLog(log, {\n      event: 'tt_heartbeat',\n      targetId: target.id,\n      target: target.target,\n      status,\n    });\n  } catch (err) {\n    structuredLog(log, {\n      event: 'tt_heartbeat_error',\n      targetId: target.id,\n      target: target.target,\n      error: err instanceof Error ? err.message : String(err),\n    });\n  }\n}\n\nexport async function runOneHeartbeatCycle(\n  log: (msg: string) => void,\n): Promise<void> {\n  let resp: ListResponse;\n  try {\n    resp = await apiGet<ListResponse>('/api/terminal-targets?status=active');\n  } catch (err) {\n    structuredLog(log, {\n      event: 'tt_heartbeat_list_error',\n      error: err instanceof Error ? err.message : String(err),\n    });\n    return;\n  }\n\n  for (const target of resp.targets ?? []) {\n    try {\n      await probeAndReport(target, log);\n    } catch (err) {\n      // Defensive: probeAndReport already catches its own errors, but a\n      // sync throw (e.g. in URL construction) shouldn't kill the cycle.\n      structuredLog(log, {\n        event: 'tt_heartbeat_probe_error',\n        targetId: target.id,\n        error: err instanceof Error ? err.message : String(err),\n      });\n    }\n  }\n}\n\nexport async function startTerminalTargetHeartbeat(\n  opts: StartTerminalTargetHeartbeatOptions,\n): Promise<void> {\n  const log = opts.log ?? (() => undefined);\n  const intervalMs = opts.intervalMs ?? DEFAULT_INTERVAL_MS;\n  structuredLog(log, { event: 'tt_heartbeat_start', intervalMs });\n\n  // Initial probe runs immediately so a freshly started worker doesn't wait\n  // a full interval before reporting its first set of statuses.\n  while (!opts.signal.aborted) {\n    await runOneHeartbeatCycle(log);\n    const completed = await abortableSleep(intervalMs, opts.signal);\n    if (!completed) break;\n  }\n\n  structuredLog(log, { event: 'tt_heartbeat_stop' });\n}\n"],
-  "mappings": ";;;;;;;;;;AA+BA,IAAM,sBAAsB;AAE5B,SAAS,cACP,KACA,OACM;AACN,MAAI;AACF,QAAI,KAAK,UAAU,EAAE,KAAI,oBAAI,KAAK,GAAE,YAAY,GAAG,GAAG,MAAM,CAAC,CAAC;AAAA,EAChE,QAAQ;AACN,QAAI,kCAAkC,MAAM,OAAO,CAAC,EAAE;AAAA,EACxD;AACF;AAEA,SAAS,eAAe,IAAY,QAAuC;AACzE,MAAI,OAAO,QAAS,QAAO,QAAQ,QAAQ,KAAK;AAChD,MAAI,MAAM,EAAG,QAAO,QAAQ,QAAQ,IAAI;AACxC,SAAO,IAAI,QAAiB,CAAC,YAAY;AACvC,UAAM,QAAQ,WAAW,MAAM;AAC7B,aAAO,oBAAoB,SAAS,OAAO;AAC3C,cAAQ,IAAI;AAAA,IACd,GAAG,EAAE;AACL,UAAM,UAAU,MAAM;AACpB,mBAAa,KAAK;AAClB,aAAO,oBAAoB,SAAS,OAAO;AAC3C,cAAQ,KAAK;AAAA,IACf;AACA,WAAO,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;AAAA,EAC1D,CAAC;AACH;AAEA,eAAsB,eACpB,QACA,KACe;AACf,MAAI,OAAO,SAAS,OAAQ;AAE5B,QAAM,SAAS,MAAM,QAAQ,wBAAwB,OAAO,MAAM,CAAC;AACnE,QAAM,SAAS,OAAO,SAAS,IAAI,WAAW;AAE9C,MAAI;AACF,UAAM,SAAS,yBAAyB,OAAO,EAAE,WAAW;AAAA,MAC1D;AAAA,MACA,aAAY,oBAAI,KAAK,GAAE,YAAY;AAAA,IACrC,CAAC;AACD,kBAAc,KAAK;AAAA,MACjB,OAAO;AAAA,MACP,UAAU,OAAO;AAAA,MACjB,QAAQ,OAAO;AAAA,MACf;AAAA,IACF,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,kBAAc,KAAK;AAAA,MACjB,OAAO;AAAA,MACP,UAAU,OAAO;AAAA,MACjB,QAAQ,OAAO;AAAA,MACf,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,IACxD,CAAC;AAAA,EACH;AACF;AAEA,eAAsB,qBACpB,KACe;AACf,MAAI;AACJ,MAAI;AACF,WAAO,MAAM,OAAqB,qCAAqC;AAAA,EACzE,SAAS,KAAK;AACZ,kBAAc,KAAK;AAAA,MACjB,OAAO;AAAA,MACP,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,IACxD,CAAC;AACD;AAAA,EACF;AAEA,aAAW,UAAU,KAAK,WAAW,CAAC,GAAG;AACvC,QAAI;AACF,YAAM,eAAe,QAAQ,GAAG;AAAA,IAClC,SAAS,KAAK;AAGZ,oBAAc,KAAK;AAAA,QACjB,OAAO;AAAA,QACP,UAAU,OAAO;AAAA,QACjB,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,MACxD,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAEA,eAAsB,6BACpB,MACe;AACf,QAAM,MAAM,KAAK,QAAQ,MAAM;AAC/B,QAAM,aAAa,KAAK,cAAc;AACtC,gBAAc,KAAK,EAAE,OAAO,sBAAsB,WAAW,CAAC;AAI9D,SAAO,CAAC,KAAK,OAAO,SAAS;AAC3B,UAAM,qBAAqB,GAAG;AAC9B,UAAM,YAAY,MAAM,eAAe,YAAY,KAAK,MAAM;AAC9D,QAAI,CAAC,UAAW;AAAA,EAClB;AAEA,gBAAc,KAAK,EAAE,OAAO,oBAAoB,CAAC;AACnD;",
-  "names": []
-}

package/dist/chunk-GQNJO2P2.js

@@ -1,102 +0,0 @@
-import {
-  DEFAULT_API_URL,
-  api
-} from "./chunk-ZUJBM6HE.js";
-import {
-  getDefaultConfigDir,
-  loadEnvFileAuth
-} from "./chunk-W2YERO7E.js";
-
-// src/lib/telemetry.ts
-import { createHash, randomUUID } from "node:crypto";
-import { hostname, platform } from "node:os";
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
-import { join } from "node:path";
-var DEVICE_ID_FILE = "device-id";
-function telemetryDisabled() {
-  const off = (v) => v === "1" || v === "true";
-  return off(process.env.RULEMETRIC_NO_TELEMETRY) || off(process.env.DO_NOT_TRACK);
-}
-function getDeviceId() {
-  const dir = getDefaultConfigDir();
-  const path = join(dir, DEVICE_ID_FILE);
-  try {
-    if (existsSync(path)) {
-      const cached = readFileSync(path, "utf-8").trim();
-      if (cached) return cached;
-    }
-  } catch {
-  }
-  const id = createHash("sha256").update(`${randomUUID()}:${hostname()}`).digest("hex").slice(0, 32);
-  try {
-    mkdirSync(dir, { recursive: true });
-    writeFileSync(path, id, { mode: 384 });
-  } catch {
-  }
-  return id;
-}
-async function emitSetupEvent(event, props = {}, cliVersion) {
-  if (telemetryDisabled()) return;
-  try {
-    await api("/api/telemetry/cli-events", {
-      method: "POST",
-      body: {
-        event,
-        deviceId: getDeviceId(),
-        cliVersion,
-        os: platform(),
-        props
-      },
-      timeoutMs: 5e3
-    });
-  } catch {
-  }
-}
-async function emitErrorBeacon(fields) {
-  if (telemetryDisabled()) return;
-  const base = process.env.RULEMETRIC_API_URL ?? loadEnvFileAuth().apiUrl ?? DEFAULT_API_URL;
-  const url = `${base}/api/telemetry/cli-error`;
-  const savedHttps = process.env.HTTPS_PROXY;
-  const savedHttp = process.env.HTTP_PROXY;
-  const proxied = savedHttps !== void 0 || savedHttp !== void 0;
-  delete process.env.HTTPS_PROXY;
-  delete process.env.HTTP_PROXY;
-  const controller = new AbortController();
-  const timer = setTimeout(() => controller.abort(), 4e3);
-  try {
-    await globalThis.fetch(url, {
-      method: "POST",
-      headers: {
-        "Content-Type": "application/json",
-        "User-Agent": `rulemetric-cli/${fields.cliVersion ?? "unknown"}`
-      },
-      // NO Authorization header — this endpoint is unauthenticated by design.
-      body: JSON.stringify({
-        event: fields.event ?? "onboarding_error",
-        deviceId: getDeviceId(),
-        command: fields.command,
-        statusCode: fields.statusCode,
-        message: fields.message ? fields.message.slice(0, 500) : void 0,
-        cliVersion: fields.cliVersion,
-        os: platform(),
-        nodeVersion: process.version,
-        proxied,
-        props: fields.props
-      }),
-      signal: controller.signal
-    });
-  } catch {
-  } finally {
-    clearTimeout(timer);
-    if (savedHttps !== void 0) process.env.HTTPS_PROXY = savedHttps;
-    if (savedHttp !== void 0) process.env.HTTP_PROXY = savedHttp;
-  }
-}
-
-export {
-  telemetryDisabled,
-  getDeviceId,
-  emitSetupEvent,
-  emitErrorBeacon
-};
-//# sourceMappingURL=chunk-GQNJO2P2.js.map

package/dist/chunk-GQNJO2P2.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../src/lib/telemetry.ts"],
-  "sourcesContent": ["import { createHash, randomUUID } from 'node:crypto';\nimport { hostname, platform } from 'node:os';\nimport { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';\nimport { join } from 'node:path';\nimport { api, DEFAULT_API_URL } from './api-client.js';\nimport { getDefaultConfigDir, loadEnvFileAuth } from './auth.js';\n\n/**\n * CLI onboarding telemetry \u2014 records setup lifecycle events (install \u2192 auth \u2192\n * hooks \u2192 worker \u2192 capture) so a remote machine coming online is VISIBLE\n * without a relayed text report. DISCLOSED (README \"Telemetry\") and OPT-OUTABLE:\n * set RULEMETRIC_NO_TELEMETRY=1 or the cross-tool standard DO_NOT_TRACK=1 and\n * nothing is sent. Best-effort: never throws, never blocks a command.\n *\n * What is sent: a per-machine device id (a random UUID minted once, NOT your\n * hostname), the event name, CLI version, os (`process.platform`), and small\n * non-sensitive flags (e.g. {proxy:true}). No prompts, no code, no file paths.\n */\n\nconst DEVICE_ID_FILE = 'device-id';\n\nexport function telemetryDisabled(): boolean {\n  const off = (v: string | undefined) => v === '1' || v === 'true';\n  return off(process.env.RULEMETRIC_NO_TELEMETRY) || off(process.env.DO_NOT_TRACK);\n}\n\n/**\n * Stable, non-identifying per-machine id. Minted once and cached in the config\n * dir. Salted-hashed so even the file contents don't reveal the hostname.\n */\nexport function getDeviceId(): string {\n  const dir = getDefaultConfigDir();\n  const path = join(dir, DEVICE_ID_FILE);\n  try {\n    if (existsSync(path)) {\n      const cached = readFileSync(path, 'utf-8').trim();\n      if (cached) return cached;\n    }\n  } catch {\n    /* fall through to mint */\n  }\n  // Seed from a random UUID (primary) + a hostname hash (stable fallback signal).\n  const id = createHash('sha256')\n    .update(`${randomUUID()}:${hostname()}`)\n    .digest('hex')\n    .slice(0, 32);\n  try {\n    mkdirSync(dir, { recursive: true });\n    writeFileSync(path, id, { mode: 0o600 });\n  } catch {\n    /* non-fatal \u2014 a non-persisted id still lets a single run correlate */\n  }\n  return id;\n}\n\n/**\n * Fire-and-forget a setup event. Swallows every error (offline, unauth, 4xx) \u2014\n * telemetry must never affect the command the user actually ran.\n */\nexport async function emitSetupEvent(\n  event: string,\n  props: Record<string, unknown> = {},\n  cliVersion?: string,\n): Promise<void> {\n  if (telemetryDisabled()) return;\n  try {\n    // Bounded: without a timeout, a held connection keeps the process alive\n    // (and the user waiting at what looks like a finished command) for up to\n    // undici's multi-minute default after success was already printed.\n    await api('/api/telemetry/cli-events', {\n      method: 'POST',\n      body: {\n        event,\n        deviceId: getDeviceId(),\n        cliVersion,\n        os: platform(),\n        props,\n      },\n      timeoutMs: 5_000,\n    });\n  } catch {\n    /* best-effort */\n  }\n}\n\n/**\n * Fire-and-forget an onboarding ERROR beacon (availability failure: 5xx / 502 /\n * client timeout / connection refused). Unlike `emitSetupEvent`, this:\n *   1. is UNAUTHENTICATED \u2014 it hits the public POST /api/telemetry/cli-error, so\n *      it works before the user has any credentials (the exact pre-auth failures\n *      that authenticated telemetry can never report), and\n *   2. is sent DIRECT, bypassing HTTPS_PROXY \u2014 a broken local gateway\n *      (HTTPS_PROXY \u2192 :8787) is itself a prime cause of the 502s this beacon\n *      exists to report, so routing the beacon through it would suppress the very\n *      signal we need. We record whether a proxy WAS configured (`proxied`).\n * Best-effort: swallows every error, bounded to 4s, never throws or blocks.\n */\nexport async function emitErrorBeacon(fields: {\n  command?: string;\n  statusCode?: number;\n  message?: string;\n  cliVersion?: string;\n  event?: string;\n  props?: Record<string, unknown>;\n}): Promise<void> {\n  if (telemetryDisabled()) return;\n\n  const base = process.env.RULEMETRIC_API_URL ?? loadEnvFileAuth().apiUrl ?? DEFAULT_API_URL;\n  const url = `${base}/api/telemetry/cli-error`;\n\n  // Send direct: unset the proxy env for the duration of the request, then\n  // restore it so subsequent `claude -p` calls still route through the gateway.\n  const savedHttps = process.env.HTTPS_PROXY;\n  const savedHttp = process.env.HTTP_PROXY;\n  const proxied = savedHttps !== undefined || savedHttp !== undefined;\n  delete process.env.HTTPS_PROXY;\n  delete process.env.HTTP_PROXY;\n\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), 4000);\n  try {\n    await globalThis.fetch(url, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/json',\n        'User-Agent': `rulemetric-cli/${fields.cliVersion ?? 'unknown'}`,\n      },\n      // NO Authorization header \u2014 this endpoint is unauthenticated by design.\n      body: JSON.stringify({\n        event: fields.event ?? 'onboarding_error',\n        deviceId: getDeviceId(),\n        command: fields.command,\n        statusCode: fields.statusCode,\n        message: fields.message ? fields.message.slice(0, 500) : undefined,\n        cliVersion: fields.cliVersion,\n        os: platform(),\n        nodeVersion: process.version,\n        proxied,\n        props: fields.props,\n      }),\n      signal: controller.signal,\n    });\n  } catch {\n    /* best-effort */\n  } finally {\n    clearTimeout(timer);\n    if (savedHttps !== undefined) process.env.HTTPS_PROXY = savedHttps;\n    if (savedHttp !== undefined) process.env.HTTP_PROXY = savedHttp;\n  }\n}\n"],
-  "mappings": ";;;;;;;;;;AAAA,SAAS,YAAY,kBAAkB;AACvC,SAAS,UAAU,gBAAgB;AACnC,SAAS,YAAY,WAAW,cAAc,qBAAqB;AACnE,SAAS,YAAY;AAgBrB,IAAM,iBAAiB;AAEhB,SAAS,oBAA6B;AAC3C,QAAM,MAAM,CAAC,MAA0B,MAAM,OAAO,MAAM;AAC1D,SAAO,IAAI,QAAQ,IAAI,uBAAuB,KAAK,IAAI,QAAQ,IAAI,YAAY;AACjF;AAMO,SAAS,cAAsB;AACpC,QAAM,MAAM,oBAAoB;AAChC,QAAM,OAAO,KAAK,KAAK,cAAc;AACrC,MAAI;AACF,QAAI,WAAW,IAAI,GAAG;AACpB,YAAM,SAAS,aAAa,MAAM,OAAO,EAAE,KAAK;AAChD,UAAI,OAAQ,QAAO;AAAA,IACrB;AAAA,EACF,QAAQ;AAAA,EAER;AAEA,QAAM,KAAK,WAAW,QAAQ,EAC3B,OAAO,GAAG,WAAW,CAAC,IAAI,SAAS,CAAC,EAAE,EACtC,OAAO,KAAK,EACZ,MAAM,GAAG,EAAE;AACd,MAAI;AACF,cAAU,KAAK,EAAE,WAAW,KAAK,CAAC;AAClC,kBAAc,MAAM,IAAI,EAAE,MAAM,IAAM,CAAC;AAAA,EACzC,QAAQ;AAAA,EAER;AACA,SAAO;AACT;AAMA,eAAsB,eACpB,OACA,QAAiC,CAAC,GAClC,YACe;AACf,MAAI,kBAAkB,EAAG;AACzB,MAAI;AAIF,UAAM,IAAI,6BAA6B;AAAA,MACrC,QAAQ;AAAA,MACR,MAAM;AAAA,QACJ;AAAA,QACA,UAAU,YAAY;AAAA,QACtB;AAAA,QACA,IAAI,SAAS;AAAA,QACb;AAAA,MACF;AAAA,MACA,WAAW;AAAA,IACb,CAAC;AAAA,EACH,QAAQ;AAAA,EAER;AACF;AAcA,eAAsB,gBAAgB,QAOpB;AAChB,MAAI,kBAAkB,EAAG;AAEzB,QAAM,OAAO,QAAQ,IAAI,sBAAsB,gBAAgB,EAAE,UAAU;AAC3E,QAAM,MAAM,GAAG,IAAI;AAInB,QAAM,aAAa,QAAQ,IAAI;AAC/B,QAAM,YAAY,QAAQ,IAAI;AAC9B,QAAM,UAAU,eAAe,UAAa,cAAc;AAC1D,SAAO,QAAQ,IAAI;AACnB,SAAO,QAAQ,IAAI;AAEnB,QAAM,aAAa,IAAI,gBAAgB;AACvC,QAAM,QAAQ,WAAW,MAAM,WAAW,MAAM,GAAG,GAAI;AACvD,MAAI;AACF,UAAM,WAAW,MAAM,KAAK;AAAA,MAC1B,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,cAAc,kBAAkB,OAAO,cAAc,SAAS;AAAA,MAChE;AAAA;AAAA,MAEA,MAAM,KAAK,UAAU;AAAA,QACnB,OAAO,OAAO,SAAS;AAAA,QACvB,UAAU,YAAY;AAAA,QACtB,SAAS,OAAO;AAAA,QAChB,YAAY,OAAO;AAAA,QACnB,SAAS,OAAO,UAAU,OAAO,QAAQ,MAAM,GAAG,GAAG,IAAI;AAAA,QACzD,YAAY,OAAO;AAAA,QACnB,IAAI,SAAS;AAAA,QACb,aAAa,QAAQ;AAAA,QACrB;AAAA,QACA,OAAO,OAAO;AAAA,MAChB,CAAC;AAAA,MACD,QAAQ,WAAW;AAAA,IACrB,CAAC;AAAA,EACH,QAAQ;AAAA,EAER,UAAE;AACA,iBAAa,KAAK;AAClB,QAAI,eAAe,OAAW,SAAQ,IAAI,cAAc;AACxD,QAAI,cAAc,OAAW,SAAQ,IAAI,aAAa;AAAA,EACxD;AACF;",
-  "names": []
-}

package/dist/chunk-IJGF2ETG.js

@@ -1,68 +0,0 @@
-import {
-  formatCost,
-  formatTokens
-} from "./chunk-DQ3KELXD.js";
-import {
-  GOLD,
-  ORANGE
-} from "./chunk-QJQS6TUN.js";
-
-// src/dashboard/panels/overview.tsx
-import { Box, Text } from "ink";
-import { Fragment, jsx, jsxs } from "react/jsx-runtime";
-function Overview({ local, api, label, width }) {
-  const sessions = api?.total_sessions ?? local.totalSessions;
-  const messages = api?.total_messages ?? 0;
-  const inputTokens = api?.total_input_tokens ?? local.totalInputTokens;
-  const outputTokens = api?.total_output_tokens ?? local.totalOutputTokens;
-  const cacheRead = api?.total_cache_read_tokens ?? local.totalCacheReadTokens;
-  const cacheWrite = api?.total_cache_write_tokens ?? local.totalCacheWriteTokens;
-  const cost = api?.estimated_cost_usd ?? local.totalCostUSD;
-  const daysActive = api?.days_active ?? 0;
-  const commits = api?.git_commits ?? 0;
-  const allInput = inputTokens + cacheRead + cacheWrite;
-  const cacheHit = allInput > 0 ? cacheRead / allInput * 100 : 0;
-  return /* @__PURE__ */ jsxs(Box, { flexDirection: "column", borderStyle: "round", borderColor: ORANGE, paddingX: 1, width, children: [
-    /* @__PURE__ */ jsxs(Text, { wrap: "truncate-end", children: [
-      /* @__PURE__ */ jsx(Text, { bold: true, color: ORANGE, children: "RuleMetric" }),
-      /* @__PURE__ */ jsxs(Text, { dimColor: true, children: [
-        "  ",
-        label
-      ] }),
-      api && /* @__PURE__ */ jsx(Text, { color: "#5BF58C", children: "  \u25CF API connected" }),
-      !api && /* @__PURE__ */ jsx(Text, { color: "#F55B5B", children: "  \u25CB API offline" })
-    ] }),
-    /* @__PURE__ */ jsxs(Text, { wrap: "truncate-end", children: [
-      /* @__PURE__ */ jsx(Text, { bold: true, color: GOLD, children: formatCost(cost) }),
-      /* @__PURE__ */ jsx(Text, { dimColor: true, children: " cost   " }),
-      /* @__PURE__ */ jsx(Text, { bold: true, children: String(sessions) }),
-      /* @__PURE__ */ jsx(Text, { dimColor: true, children: " sessions   " }),
-      messages > 0 && /* @__PURE__ */ jsxs(Fragment, { children: [
-        /* @__PURE__ */ jsx(Text, { bold: true, children: messages.toLocaleString() }),
-        /* @__PURE__ */ jsx(Text, { dimColor: true, children: " messages   " })
-      ] }),
-      /* @__PURE__ */ jsxs(Text, { bold: true, children: [
-        cacheHit.toFixed(1),
-        "%"
-      ] }),
-      /* @__PURE__ */ jsx(Text, { dimColor: true, children: " cache hit" })
-    ] }),
-    /* @__PURE__ */ jsxs(Text, { dimColor: true, wrap: "truncate-end", children: [
-      formatTokens(inputTokens),
-      " in   ",
-      formatTokens(outputTokens),
-      " out   ",
-      formatTokens(cacheRead),
-      " cached   ",
-      formatTokens(cacheWrite),
-      " written",
-      daysActive > 0 ? `   ${daysActive} days active` : "",
-      commits > 0 ? `   ${commits} commits` : ""
-    ] })
-  ] });
-}
-
-export {
-  Overview
-};
-//# sourceMappingURL=chunk-IJGF2ETG.js.map

package/dist/chunk-IJGF2ETG.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../src/dashboard/panels/overview.tsx"],
-  "sourcesContent": ["import React from 'react';\nimport { Box, Text } from 'ink';\nimport { ORANGE, GOLD } from '../types.js';\nimport type { LocalStats, ApiInsights } from '../types.js';\nimport { formatTokens, formatCost } from './shared.js';\n\nexport function Overview({ local, api, label, width }: {\n  local: LocalStats; api: ApiInsights | null; label: string; width: number;\n}) {\n  // Prefer API data when available (more complete), fall back to local\n  const sessions = api?.total_sessions ?? local.totalSessions;\n  const messages = api?.total_messages ?? 0;\n  const inputTokens = api?.total_input_tokens ?? local.totalInputTokens;\n  const outputTokens = api?.total_output_tokens ?? local.totalOutputTokens;\n  const cacheRead = api?.total_cache_read_tokens ?? local.totalCacheReadTokens;\n  const cacheWrite = api?.total_cache_write_tokens ?? local.totalCacheWriteTokens;\n  const cost = api?.estimated_cost_usd ?? local.totalCostUSD;\n  const daysActive = api?.days_active ?? 0;\n  const commits = api?.git_commits ?? 0;\n\n  const allInput = inputTokens + cacheRead + cacheWrite;\n  const cacheHit = allInput > 0 ? (cacheRead / allInput) * 100 : 0;\n\n  return (\n    <Box flexDirection=\"column\" borderStyle=\"round\" borderColor={ORANGE} paddingX={1} width={width}>\n      <Text wrap=\"truncate-end\">\n        <Text bold color={ORANGE}>RuleMetric</Text>\n        <Text dimColor>  {label}</Text>\n        {api && <Text color=\"#5BF58C\">  \u25CF API connected</Text>}\n        {!api && <Text color=\"#F55B5B\">  \u25CB API offline</Text>}\n      </Text>\n      <Text wrap=\"truncate-end\">\n        <Text bold color={GOLD}>{formatCost(cost)}</Text>\n        <Text dimColor> cost   </Text>\n        <Text bold>{String(sessions)}</Text>\n        <Text dimColor> sessions   </Text>\n        {messages > 0 && <><Text bold>{messages.toLocaleString()}</Text><Text dimColor> messages   </Text></>}\n        <Text bold>{cacheHit.toFixed(1)}%</Text>\n        <Text dimColor> cache hit</Text>\n      </Text>\n      <Text dimColor wrap=\"truncate-end\">\n        {formatTokens(inputTokens)} in   {formatTokens(outputTokens)} out   {formatTokens(cacheRead)} cached   {formatTokens(cacheWrite)} written\n        {daysActive > 0 ? `   ${daysActive} days active` : ''}\n        {commits > 0 ? `   ${commits} commits` : ''}\n      </Text>\n    </Box>\n  );\n}\n"],
-  "mappings": ";;;;;;;;;;AACA,SAAS,KAAK,YAAY;AAyBlB,SAUiB,UAVjB,KACA,YADA;AApBD,SAAS,SAAS,EAAE,OAAO,KAAK,OAAO,MAAM,GAEjD;AAED,QAAM,WAAW,KAAK,kBAAkB,MAAM;AAC9C,QAAM,WAAW,KAAK,kBAAkB;AACxC,QAAM,cAAc,KAAK,sBAAsB,MAAM;AACrD,QAAM,eAAe,KAAK,uBAAuB,MAAM;AACvD,QAAM,YAAY,KAAK,2BAA2B,MAAM;AACxD,QAAM,aAAa,KAAK,4BAA4B,MAAM;AAC1D,QAAM,OAAO,KAAK,sBAAsB,MAAM;AAC9C,QAAM,aAAa,KAAK,eAAe;AACvC,QAAM,UAAU,KAAK,eAAe;AAEpC,QAAM,WAAW,cAAc,YAAY;AAC3C,QAAM,WAAW,WAAW,IAAK,YAAY,WAAY,MAAM;AAE/D,SACE,qBAAC,OAAI,eAAc,UAAS,aAAY,SAAQ,aAAa,QAAQ,UAAU,GAAG,OAChF;AAAA,yBAAC,QAAK,MAAK,gBACT;AAAA,0BAAC,QAAK,MAAI,MAAC,OAAO,QAAQ,wBAAU;AAAA,MACpC,qBAAC,QAAK,UAAQ,MAAC;AAAA;AAAA,QAAG;AAAA,SAAM;AAAA,MACvB,OAAO,oBAAC,QAAK,OAAM,WAAU,oCAAiB;AAAA,MAC9C,CAAC,OAAO,oBAAC,QAAK,OAAM,WAAU,kCAAe;AAAA,OAChD;AAAA,IACA,qBAAC,QAAK,MAAK,gBACT;AAAA,0BAAC,QAAK,MAAI,MAAC,OAAO,MAAO,qBAAW,IAAI,GAAE;AAAA,MAC1C,oBAAC,QAAK,UAAQ,MAAC,sBAAQ;AAAA,MACvB,oBAAC,QAAK,MAAI,MAAE,iBAAO,QAAQ,GAAE;AAAA,MAC7B,oBAAC,QAAK,UAAQ,MAAC,0BAAY;AAAA,MAC1B,WAAW,KAAK,iCAAE;AAAA,4BAAC,QAAK,MAAI,MAAE,mBAAS,eAAe,GAAE;AAAA,QAAO,oBAAC,QAAK,UAAQ,MAAC,0BAAY;AAAA,SAAO;AAAA,MAClG,qBAAC,QAAK,MAAI,MAAE;AAAA,iBAAS,QAAQ,CAAC;AAAA,QAAE;AAAA,SAAC;AAAA,MACjC,oBAAC,QAAK,UAAQ,MAAC,wBAAU;AAAA,OAC3B;AAAA,IACA,qBAAC,QAAK,UAAQ,MAAC,MAAK,gBACjB;AAAA,mBAAa,WAAW;AAAA,MAAE;AAAA,MAAO,aAAa,YAAY;AAAA,MAAE;AAAA,MAAQ,aAAa,SAAS;AAAA,MAAE;AAAA,MAAW,aAAa,UAAU;AAAA,MAAE;AAAA,MAChI,aAAa,IAAI,MAAM,UAAU,iBAAiB;AAAA,MAClD,UAAU,IAAI,MAAM,OAAO,aAAa;AAAA,OAC3C;AAAA,KACF;AAEJ;",
-  "names": []
-}

package/dist/chunk-ILYDELUE.js

@@ -1,46 +0,0 @@
-// src/lib/proxy-respawn.ts
-var DEAD_CHECKS_BEFORE_RESPAWN = 5;
-var RESPAWN_COOLDOWN_MS = 10 * 6e4;
-var MitmproxyRespawnMonitor = class {
-  constructor(deps) {
-    this.deps = deps;
-  }
-  deadStreak = 0;
-  lastAttemptAt = Number.NEGATIVE_INFINITY;
-  skipLoggedThisStreak = false;
-  /** Feed one health-check result (true = mitmproxy answered). */
-  onHealthCheck(alive) {
-    if (alive) {
-      this.deadStreak = 0;
-      this.skipLoggedThisStreak = false;
-      return;
-    }
-    this.deadStreak++;
-    if (this.deadStreak < DEAD_CHECKS_BEFORE_RESPAWN) return;
-    const now = (this.deps.now ?? Date.now)();
-    if (now - this.lastAttemptAt < RESPAWN_COOLDOWN_MS) return;
-    if (!this.deps.hasCrashEvidence()) {
-      if (!this.skipLoggedThisStreak) {
-        this.skipLoggedThisStreak = true;
-        this.deps.log(
-          "mitmproxy is down with no crash evidence (no local proxy.pid) \u2014 not auto-restarting (deliberate `proxy stop` or Docker-managed)"
-        );
-      }
-      return;
-    }
-    this.lastAttemptAt = now;
-    this.deps.log(
-      `mitmproxy dead for ${this.deadStreak} consecutive checks \u2014 attempting auto-restart (at most once per ${Math.round(RESPAWN_COOLDOWN_MS / 6e4)}min)`
-    );
-    if (!this.deps.respawn()) {
-      this.deps.log("auto-restart unavailable \u2014 run `rulemetric proxy start` to restore deep capture");
-    }
-  }
-};
-
-export {
-  DEAD_CHECKS_BEFORE_RESPAWN,
-  RESPAWN_COOLDOWN_MS,
-  MitmproxyRespawnMonitor
-};
-//# sourceMappingURL=chunk-ILYDELUE.js.map

package/dist/chunk-ILYDELUE.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../src/lib/proxy-respawn.ts"],
-  "sourcesContent": ["/**\n * Conservative mitmproxy auto-restart, driven by the gateway's 3s health\n * checks. A mid-session mitmproxy crash otherwise stays silent \u2014 the gateway\n * routes direct by design, so deep capture is simply gone until the next\n * session's session-start hook runs.\n *\n * Guard rails (this must never become a restart loop, and must never fight a\n * deliberate `proxy stop`):\n *   - respawn fires only after DEAD_CHECKS_BEFORE_RESPAWN consecutive dead\n *     checks (a transient blip never triggers it);\n *   - at most one attempt per RESPAWN_COOLDOWN_MS window (in-memory \u2014 a\n *     gateway restart resets the window, which is fine: it also resets the\n *     dead-streak requirement);\n *   - only with crash evidence: a live proxy.pid file. `proxy stop` removes\n *     the PID file, so a deliberate stop is never overridden. Docker-managed\n *     proxies (pidfile `docker:<name>`) are Docker's to restart.\n *\n * Pure state machine \u2014 time, crash evidence, and the spawn are injected so\n * the transition logic is unit-testable without timers or processes.\n */\n\n/** ~15s of confirmed downtime at the gateway's 3s health cadence. */\nexport const DEAD_CHECKS_BEFORE_RESPAWN = 5;\nexport const RESPAWN_COOLDOWN_MS = 10 * 60_000;\n\nexport interface RespawnMonitorDeps {\n  /** Clock override. Used in tests. */\n  now?: () => number;\n  /** Whether the local proxy.pid file evidences a crash (vs a deliberate stop). */\n  hasCrashEvidence: () => boolean;\n  /** Fire one detached respawn attempt. Returns false if respawn is unavailable. */\n  respawn: () => boolean;\n  log: (msg: string) => void;\n}\n\nexport class MitmproxyRespawnMonitor {\n  private deadStreak = 0;\n  private lastAttemptAt = Number.NEGATIVE_INFINITY;\n  private skipLoggedThisStreak = false;\n\n  constructor(private readonly deps: RespawnMonitorDeps) {}\n\n  /** Feed one health-check result (true = mitmproxy answered). */\n  onHealthCheck(alive: boolean): void {\n    if (alive) {\n      this.deadStreak = 0;\n      this.skipLoggedThisStreak = false;\n      return;\n    }\n\n    this.deadStreak++;\n    if (this.deadStreak < DEAD_CHECKS_BEFORE_RESPAWN) return;\n\n    const now = (this.deps.now ?? Date.now)();\n    if (now - this.lastAttemptAt < RESPAWN_COOLDOWN_MS) return;\n\n    if (!this.deps.hasCrashEvidence()) {\n      if (!this.skipLoggedThisStreak) {\n        this.skipLoggedThisStreak = true;\n        this.deps.log(\n          'mitmproxy is down with no crash evidence (no local proxy.pid) \u2014 ' +\n            'not auto-restarting (deliberate `proxy stop` or Docker-managed)',\n        );\n      }\n      return;\n    }\n\n    this.lastAttemptAt = now;\n    this.deps.log(\n      `mitmproxy dead for ${this.deadStreak} consecutive checks \u2014 attempting auto-restart ` +\n        `(at most once per ${Math.round(RESPAWN_COOLDOWN_MS / 60_000)}min)`,\n    );\n    if (!this.deps.respawn()) {\n      this.deps.log('auto-restart unavailable \u2014 run `rulemetric proxy start` to restore deep capture');\n    }\n  }\n}\n"],
-  "mappings": ";AAsBO,IAAM,6BAA6B;AACnC,IAAM,sBAAsB,KAAK;AAYjC,IAAM,0BAAN,MAA8B;AAAA,EAKnC,YAA6B,MAA0B;AAA1B;AAAA,EAA2B;AAAA,EAJhD,aAAa;AAAA,EACb,gBAAgB,OAAO;AAAA,EACvB,uBAAuB;AAAA;AAAA,EAK/B,cAAc,OAAsB;AAClC,QAAI,OAAO;AACT,WAAK,aAAa;AAClB,WAAK,uBAAuB;AAC5B;AAAA,IACF;AAEA,SAAK;AACL,QAAI,KAAK,aAAa,2BAA4B;AAElD,UAAM,OAAO,KAAK,KAAK,OAAO,KAAK,KAAK;AACxC,QAAI,MAAM,KAAK,gBAAgB,oBAAqB;AAEpD,QAAI,CAAC,KAAK,KAAK,iBAAiB,GAAG;AACjC,UAAI,CAAC,KAAK,sBAAsB;AAC9B,aAAK,uBAAuB;AAC5B,aAAK,KAAK;AAAA,UACR;AAAA,QAEF;AAAA,MACF;AACA;AAAA,IACF;AAEA,SAAK,gBAAgB;AACrB,SAAK,KAAK;AAAA,MACR,sBAAsB,KAAK,UAAU,wEACd,KAAK,MAAM,sBAAsB,GAAM,CAAC;AAAA,IACjE;AACA,QAAI,CAAC,KAAK,KAAK,QAAQ,GAAG;AACxB,WAAK,KAAK,IAAI,sFAAiF;AAAA,IACjG;AAAA,EACF;AACF;",
-  "names": []
-}

package/dist/chunk-J6QFW4LD.js

@@ -1,55 +0,0 @@
-// src/lib/diagnostics.ts
-function parseNodeMajorMinor(v) {
-  const m = /^v?(\d+)\.(\d+)/.exec(v.trim());
-  if (!m) return { major: 0, minor: 0 };
-  return { major: Number(m[1]), minor: Number(m[2]) };
-}
-function isProxyBreakingNode(v) {
-  const { major, minor } = parseNodeMajorMinor(v);
-  if (major === 0) return false;
-  return major < 20 || major === 20 && minor < 11;
-}
-function diagnose(input) {
-  const oldNode = isProxyBreakingNode(input.nodeVersion);
-  if (!input.directApiOk) {
-    return {
-      severity: "fail",
-      headline: "Can't reach the API directly (proxy bypassed).",
-      hints: [
-        "Check your network/DNS/firewall and that you can reach https://rulemetric.com/health.",
-        "If a corporate proxy is required, it must allow rulemetric.com."
-      ]
-    };
-  }
-  if (input.httpsProxySet && input.proxyPathOk === false) {
-    const hints = [
-      "Direct reachability works but requests through your local proxy fail \u2014 your gateway/mitmproxy is the problem, NOT the API.",
-      input.gatewayAlive ? "Gateway (:8787) is up but not routing successfully." : "Gateway (:8787) is NOT listening \u2014 Claude Code/CLI traffic pointed at it will 502. Run `rulemetric hooks install` to restore it.",
-      input.mitmproxyAlive ? void 0 : "mitmproxy (:8788) is down \u2014 the gateway should route direct, so a 502 here points at the gateway itself.",
-      oldNode ? `Node ${input.nodeVersion} is < 20.11, which breaks the bundled proxy \u2014 upgrade Node to \u2265 20.11, or reinstall hooks with --no-proxy.` : void 0,
-      "Quick unblock: `rulemetric hooks install --no-proxy` (captures via hooks, no proxy), or `rulemetric proxy restart`."
-    ].filter((h) => Boolean(h));
-    return { severity: "fail", headline: "Your local proxy/gateway can't reach the API \u2014 this is the 502.", hints };
-  }
-  if (input.httpsProxySet && oldNode) {
-    return {
-      severity: "warn",
-      headline: `Node ${input.nodeVersion} is < 20.11 with a proxy configured \u2014 the proxy is likely dead.`,
-      hints: [
-        "Upgrade Node to \u2265 20.11 (older Node breaks the bundled proxy), or run `rulemetric hooks install --no-proxy`."
-      ]
-    };
-  }
-  return {
-    severity: "ok",
-    headline: "Healthy \u2014 the API is reachable" + (input.httpsProxySet ? " directly and through your proxy." : " (no proxy configured)."),
-    hints: []
-  };
-}
-
-export {
-  parseNodeMajorMinor,
-  isProxyBreakingNode,
-  diagnose
-};
-//# sourceMappingURL=chunk-J6QFW4LD.js.map

package/dist/chunk-J6QFW4LD.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../src/lib/diagnostics.ts"],
-  "sourcesContent": ["// Pure diagnosis logic for `rulemetric diagnostics` \u2014 kept out of the command so\n// the decision-making (which is the valuable, bug-prone part) is unit-testable\n// without spawning curl or opening sockets. The command does the probing and\n// feeds the raw booleans here.\n\nexport interface DiagnoseInput {\n  /** e.g. \"22.17.1\" or \"v22.17.1\" */\n  nodeVersion: string;\n  /** GET /health succeeded DIRECT (proxy bypassed). */\n  directApiOk: boolean;\n  /** HTTPS_PROXY is configured in the environment / settings. */\n  httpsProxySet: boolean;\n  /** The local gateway (:8787) is listening. */\n  gatewayAlive: boolean;\n  /** mitmproxy (:8788) is listening. */\n  mitmproxyAlive: boolean;\n  /** GET /health succeeded THROUGH the configured proxy. null when no proxy is set. */\n  proxyPathOk: boolean | null;\n}\n\nexport interface Diagnosis {\n  severity: 'ok' | 'warn' | 'fail';\n  headline: string;\n  hints: string[];\n}\n\n/** Parse major/minor from \"22.17.1\" or \"v22.17.1\". Unknown \u2192 {0,0}. */\nexport function parseNodeMajorMinor(v: string): { major: number; minor: number } {\n  const m = /^v?(\\d+)\\.(\\d+)/.exec(v.trim());\n  if (!m) return { major: 0, minor: 0 };\n  return { major: Number(m[1]), minor: Number(m[2]) };\n}\n\n/**\n * Node < 20.11 breaks the bundled proxy (it relies on a module-path API that is\n * undefined on older Node; see the 2026-07-07 field finding). Below 20.11 the\n * proxy is likely dead even\n * though HTTPS_PROXY is set \u2014 a prime cause of a client-side \"502 Bad Gateway\".\n */\nexport function isProxyBreakingNode(v: string): boolean {\n  const { major, minor } = parseNodeMajorMinor(v);\n  if (major === 0) return false; // couldn't parse \u2014 don't cry wolf\n  return major < 20 || (major === 20 && minor < 11);\n}\n\n/**\n * Turn the raw probe results into a single actionable diagnosis. The headline\n * case this exists for: DIRECT reachability works but the PROXY path fails \u2192\n * the user's own local gateway is eating requests and returning 502, even though\n * production is perfectly healthy.\n */\nexport function diagnose(input: DiagnoseInput): Diagnosis {\n  const oldNode = isProxyBreakingNode(input.nodeVersion);\n\n  // 1. Can't even reach the API directly \u2192 not a proxy problem; network/DNS/down.\n  if (!input.directApiOk) {\n    return {\n      severity: 'fail',\n      headline: \"Can't reach the API directly (proxy bypassed).\",\n      hints: [\n        'Check your network/DNS/firewall and that you can reach https://rulemetric.com/health.',\n        'If a corporate proxy is required, it must allow rulemetric.com.',\n      ],\n    };\n  }\n\n  // 2. Direct works but the PROXY path fails \u2192 the local gateway is the culprit.\n  //    This is the client-side \"502 Bad Gateway\" class.\n  if (input.httpsProxySet && input.proxyPathOk === false) {\n    const hints = [\n      'Direct reachability works but requests through your local proxy fail \u2014 your gateway/mitmproxy is the problem, NOT the API.',\n      input.gatewayAlive\n        ? 'Gateway (:8787) is up but not routing successfully.'\n        : 'Gateway (:8787) is NOT listening \u2014 Claude Code/CLI traffic pointed at it will 502. Run `rulemetric hooks install` to restore it.',\n      input.mitmproxyAlive ? undefined : 'mitmproxy (:8788) is down \u2014 the gateway should route direct, so a 502 here points at the gateway itself.',\n      oldNode\n        ? `Node ${input.nodeVersion} is < 20.11, which breaks the bundled proxy \u2014 upgrade Node to \u2265 20.11, or reinstall hooks with --no-proxy.`\n        : undefined,\n      'Quick unblock: `rulemetric hooks install --no-proxy` (captures via hooks, no proxy), or `rulemetric proxy restart`.',\n    ].filter((h): h is string => Boolean(h));\n    return { severity: 'fail', headline: 'Your local proxy/gateway can\\'t reach the API \u2014 this is the 502.', hints };\n  }\n\n  // 3. Old Node + proxy configured but we couldn't positively confirm the proxy\n  //    path (e.g. curl unavailable) \u2192 warn, since the proxy is likely dead.\n  if (input.httpsProxySet && oldNode) {\n    return {\n      severity: 'warn',\n      headline: `Node ${input.nodeVersion} is < 20.11 with a proxy configured \u2014 the proxy is likely dead.`,\n      hints: [\n        'Upgrade Node to \u2265 20.11 (older Node breaks the bundled proxy), or run `rulemetric hooks install --no-proxy`.',\n      ],\n    };\n  }\n\n  // 4. Everything reachable.\n  return {\n    severity: 'ok',\n    headline: 'Healthy \u2014 the API is reachable' + (input.httpsProxySet ? ' directly and through your proxy.' : ' (no proxy configured).'),\n    hints: [],\n  };\n}\n"],
-  "mappings": ";AA2BO,SAAS,oBAAoB,GAA6C;AAC/E,QAAM,IAAI,kBAAkB,KAAK,EAAE,KAAK,CAAC;AACzC,MAAI,CAAC,EAAG,QAAO,EAAE,OAAO,GAAG,OAAO,EAAE;AACpC,SAAO,EAAE,OAAO,OAAO,EAAE,CAAC,CAAC,GAAG,OAAO,OAAO,EAAE,CAAC,CAAC,EAAE;AACpD;AAQO,SAAS,oBAAoB,GAAoB;AACtD,QAAM,EAAE,OAAO,MAAM,IAAI,oBAAoB,CAAC;AAC9C,MAAI,UAAU,EAAG,QAAO;AACxB,SAAO,QAAQ,MAAO,UAAU,MAAM,QAAQ;AAChD;AAQO,SAAS,SAAS,OAAiC;AACxD,QAAM,UAAU,oBAAoB,MAAM,WAAW;AAGrD,MAAI,CAAC,MAAM,aAAa;AACtB,WAAO;AAAA,MACL,UAAU;AAAA,MACV,UAAU;AAAA,MACV,OAAO;AAAA,QACL;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAIA,MAAI,MAAM,iBAAiB,MAAM,gBAAgB,OAAO;AACtD,UAAM,QAAQ;AAAA,MACZ;AAAA,MACA,MAAM,eACF,wDACA;AAAA,MACJ,MAAM,iBAAiB,SAAY;AAAA,MACnC,UACI,QAAQ,MAAM,WAAW,yHACzB;AAAA,MACJ;AAAA,IACF,EAAE,OAAO,CAAC,MAAmB,QAAQ,CAAC,CAAC;AACvC,WAAO,EAAE,UAAU,QAAQ,UAAU,wEAAoE,MAAM;AAAA,EACjH;AAIA,MAAI,MAAM,iBAAiB,SAAS;AAClC,WAAO;AAAA,MACL,UAAU;AAAA,MACV,UAAU,QAAQ,MAAM,WAAW;AAAA,MACnC,OAAO;AAAA,QACL;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAGA,SAAO;AAAA,IACL,UAAU;AAAA,IACV,UAAU,yCAAoC,MAAM,gBAAgB,sCAAsC;AAAA,IAC1G,OAAO,CAAC;AAAA,EACV;AACF;",
-  "names": []
-}

package/dist/chunk-J7N3DLH6.js

@@ -1,117 +0,0 @@
-import {
-  executeEval
-} from "./chunk-QN34TGD3.js";
-
-// src/lib/eval-meta-judge.ts
-var META_JUDGE_SYSTEM_PROMPT = `You are a meta-judge evaluating the quality of an eval run \u2014 not the code output, but whether the test cases and grading themselves are rigorous and meaningful.
-
-You will receive a summary of eval cases, their expectations, and grading results.
-
-Analyze for these quality issues:
-
-1. **Weak expectations** \u2014 Expectations that are vague ("should follow conventions") or trivially satisfiable. Good expectations are specific and falsifiable.
-
-2. **Inconsistent grading** \u2014 Cases where similar expectations get different pass/fail results, or where evidence doesn't match the verdict.
-
-3. **Trivial tests** \u2014 Cases where the prompt doesn't actually challenge the rule. E.g., testing "NEVER use mocks" with a prompt that doesn't involve testing at all.
-
-4. **Untestable expectations** \u2014 Expectations that can't be verified from the output alone (e.g., "the developer should feel confident").
-
-5. **Suspicious 100% pass** \u2014 If every expectation passes, consider whether the tests were actually challenging enough.
-
-Respond in JSON:
-{
-  "quality_score": <1-5>,
-  "issues": [
-    {
-      "type": "weak_expectation | inconsistent_grading | trivial_test | untestable_expectation | all_pass_suspicious",
-      "severity": "low | medium | high",
-      "description": "<specific issue>",
-      "affected_eval": "<eval name if applicable>"
-    }
-  ],
-  "recommendations": ["<specific improvement suggestion>", ...],
-  "summary": "<1-2 sentence overall assessment>"
-}
-
-Be constructive but honest. A quality_score of 3 means acceptable, 4 means good, 5 means rigorous. Most real-world eval runs score 2-4.`;
-async function judgeEvalQuality(input) {
-  const evalSummary = input.evalResults.map((r) => {
-    const gradingInfo = r.grading ? {
-      pass_rate: r.grading.summary.pass_rate,
-      expectations: r.grading.expectations.map((e) => ({
-        text: e.text,
-        passed: e.passed,
-        evidence: e.evidence.slice(0, 200)
-      })),
-      feedback: r.grading.eval_feedback?.overall ?? ""
-    } : null;
-    return {
-      eval_name: r.evalName,
-      prompt: r.prompt.slice(0, 500),
-      expectations: r.expectations,
-      grading: gradingInfo,
-      output_preview: r.output?.slice(0, 300) ?? "(not available)"
-    };
-  });
-  const prompt = `Evaluate the quality of this eval run for target "${input.targetName}":
-
-${JSON.stringify(evalSummary, null, 2)}`;
-  const result = await executeEval({
-    prompt,
-    systemPrompt: META_JUDGE_SYSTEM_PROMPT,
-    timeout: input.timeout ?? 6e4,
-    model: input.model
-  });
-  if (result.error || !result.output) {
-    return {
-      quality_score: 0,
-      issues: [{
-        type: "inconsistent_grading",
-        severity: "high",
-        description: `Meta-judge failed: ${result.error ?? "no output"}`
-      }],
-      recommendations: ["Meta-judge could not complete \u2014 check model availability"],
-      summary: "Meta-judge execution failed."
-    };
-  }
-  try {
-    const parsed = parseJsonFromOutput(result.output);
-    const issues = Array.isArray(parsed.issues) ? parsed.issues : [];
-    const recs = Array.isArray(parsed.recommendations) ? parsed.recommendations : [];
-    return {
-      quality_score: Math.max(1, Math.min(5, Number(parsed.quality_score) || 3)),
-      issues: issues.map((i) => ({
-        type: i.type ?? "weak_expectation",
-        severity: i.severity ?? "medium",
-        description: String(i.description ?? ""),
-        affected_eval: i.affected_eval ? String(i.affected_eval) : void 0
-      })),
-      recommendations: recs,
-      summary: String(parsed.summary ?? "No summary provided.")
-    };
-  } catch {
-    return {
-      quality_score: 3,
-      issues: [],
-      recommendations: [],
-      summary: "Meta-judge returned unparseable output \u2014 defaulting to neutral score."
-    };
-  }
-}
-function parseJsonFromOutput(output) {
-  try {
-    return JSON.parse(output);
-  } catch {
-    const match = output.match(/```(?:json)?\s*\n?([\s\S]*?)\n?```/);
-    if (match) {
-      return JSON.parse(match[1]);
-    }
-    throw new Error("No JSON found in output");
-  }
-}
-
-export {
-  judgeEvalQuality
-};
-//# sourceMappingURL=chunk-J7N3DLH6.js.map

package/dist/chunk-J7N3DLH6.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../src/lib/eval-meta-judge.ts"],
-  "sourcesContent": ["import { executeEval } from './eval-executor.js';\nimport type { GradingResult } from './eval-grader.js';\n\nexport interface MetaJudgement {\n  quality_score: number;        // 1-5 overall quality of the eval run\n  issues: MetaIssue[];\n  recommendations: string[];\n  summary: string;\n}\n\nexport interface MetaIssue {\n  type: 'weak_expectation' | 'inconsistent_grading' | 'trivial_test' | 'untestable_expectation' | 'all_pass_suspicious';\n  severity: 'low' | 'medium' | 'high';\n  description: string;\n  affected_eval?: string;\n}\n\nconst META_JUDGE_SYSTEM_PROMPT = `You are a meta-judge evaluating the quality of an eval run \u2014 not the code output, but whether the test cases and grading themselves are rigorous and meaningful.\n\nYou will receive a summary of eval cases, their expectations, and grading results.\n\nAnalyze for these quality issues:\n\n1. **Weak expectations** \u2014 Expectations that are vague (\"should follow conventions\") or trivially satisfiable. Good expectations are specific and falsifiable.\n\n2. **Inconsistent grading** \u2014 Cases where similar expectations get different pass/fail results, or where evidence doesn't match the verdict.\n\n3. **Trivial tests** \u2014 Cases where the prompt doesn't actually challenge the rule. E.g., testing \"NEVER use mocks\" with a prompt that doesn't involve testing at all.\n\n4. **Untestable expectations** \u2014 Expectations that can't be verified from the output alone (e.g., \"the developer should feel confident\").\n\n5. **Suspicious 100% pass** \u2014 If every expectation passes, consider whether the tests were actually challenging enough.\n\nRespond in JSON:\n{\n  \"quality_score\": <1-5>,\n  \"issues\": [\n    {\n      \"type\": \"weak_expectation | inconsistent_grading | trivial_test | untestable_expectation | all_pass_suspicious\",\n      \"severity\": \"low | medium | high\",\n      \"description\": \"<specific issue>\",\n      \"affected_eval\": \"<eval name if applicable>\"\n    }\n  ],\n  \"recommendations\": [\"<specific improvement suggestion>\", ...],\n  \"summary\": \"<1-2 sentence overall assessment>\"\n}\n\nBe constructive but honest. A quality_score of 3 means acceptable, 4 means good, 5 means rigorous. Most real-world eval runs score 2-4.`;\n\ninterface MetaJudgeInput {\n  targetName: string;\n  evalResults: Array<{\n    evalName: string;\n    prompt: string;\n    expectations: string[];\n    grading: GradingResult | null;\n    output?: string;\n  }>;\n  model?: string;\n  timeout?: number;\n}\n\nexport async function judgeEvalQuality(input: MetaJudgeInput): Promise<MetaJudgement> {\n  // Build a summary of the eval run for the meta-judge\n  const evalSummary = input.evalResults.map((r) => {\n    const gradingInfo = r.grading\n      ? {\n          pass_rate: r.grading.summary.pass_rate,\n          expectations: r.grading.expectations.map((e) => ({\n            text: e.text,\n            passed: e.passed,\n            evidence: e.evidence.slice(0, 200),\n          })),\n          feedback: r.grading.eval_feedback?.overall ?? '',\n        }\n      : null;\n\n    return {\n      eval_name: r.evalName,\n      prompt: r.prompt.slice(0, 500),\n      expectations: r.expectations,\n      grading: gradingInfo,\n      output_preview: r.output?.slice(0, 300) ?? '(not available)',\n    };\n  });\n\n  const prompt = `Evaluate the quality of this eval run for target \"${input.targetName}\":\n\n${JSON.stringify(evalSummary, null, 2)}`;\n\n  const result = await executeEval({\n    prompt,\n    systemPrompt: META_JUDGE_SYSTEM_PROMPT,\n    timeout: input.timeout ?? 60000,\n    model: input.model,\n  });\n\n  if (result.error || !result.output) {\n    return {\n      quality_score: 0,\n      issues: [{\n        type: 'inconsistent_grading',\n        severity: 'high',\n        description: `Meta-judge failed: ${result.error ?? 'no output'}`,\n      }],\n      recommendations: ['Meta-judge could not complete \u2014 check model availability'],\n      summary: 'Meta-judge execution failed.',\n    };\n  }\n\n  try {\n    const parsed = parseJsonFromOutput(result.output);\n    const issues = Array.isArray(parsed.issues) ? parsed.issues : [];\n    const recs = Array.isArray(parsed.recommendations) ? parsed.recommendations as string[] : [];\n    return {\n      quality_score: Math.max(1, Math.min(5, Number(parsed.quality_score) || 3)),\n      issues: issues.map((i: Record<string, string>) => ({\n        type: (i.type ?? 'weak_expectation') as MetaIssue['type'],\n        severity: (i.severity ?? 'medium') as MetaIssue['severity'],\n        description: String(i.description ?? ''),\n        affected_eval: i.affected_eval ? String(i.affected_eval) : undefined,\n      })),\n      recommendations: recs,\n      summary: String(parsed.summary ?? 'No summary provided.'),\n    };\n  } catch {\n    return {\n      quality_score: 3,\n      issues: [],\n      recommendations: [],\n      summary: 'Meta-judge returned unparseable output \u2014 defaulting to neutral score.',\n    };\n  }\n}\n\nfunction parseJsonFromOutput(output: string): Record<string, unknown> {\n  // Try direct JSON parse\n  try {\n    return JSON.parse(output);\n  } catch {\n    // Try extracting from markdown code block\n    const match = output.match(/```(?:json)?\\s*\\n?([\\s\\S]*?)\\n?```/);\n    if (match) {\n      return JSON.parse(match[1]);\n    }\n    throw new Error('No JSON found in output');\n  }\n}\n"],
-  "mappings": ";;;;;AAiBA,IAAM,2BAA2B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AA8CjC,eAAsB,iBAAiB,OAA+C;AAEpF,QAAM,cAAc,MAAM,YAAY,IAAI,CAAC,MAAM;AAC/C,UAAM,cAAc,EAAE,UAClB;AAAA,MACE,WAAW,EAAE,QAAQ,QAAQ;AAAA,MAC7B,cAAc,EAAE,QAAQ,aAAa,IAAI,CAAC,OAAO;AAAA,QAC/C,MAAM,EAAE;AAAA,QACR,QAAQ,EAAE;AAAA,QACV,UAAU,EAAE,SAAS,MAAM,GAAG,GAAG;AAAA,MACnC,EAAE;AAAA,MACF,UAAU,EAAE,QAAQ,eAAe,WAAW;AAAA,IAChD,IACA;AAEJ,WAAO;AAAA,MACL,WAAW,EAAE;AAAA,MACb,QAAQ,EAAE,OAAO,MAAM,GAAG,GAAG;AAAA,MAC7B,cAAc,EAAE;AAAA,MAChB,SAAS;AAAA,MACT,gBAAgB,EAAE,QAAQ,MAAM,GAAG,GAAG,KAAK;AAAA,IAC7C;AAAA,EACF,CAAC;AAED,QAAM,SAAS,qDAAqD,MAAM,UAAU;AAAA;AAAA,EAEpF,KAAK,UAAU,aAAa,MAAM,CAAC,CAAC;AAEpC,QAAM,SAAS,MAAM,YAAY;AAAA,IAC/B;AAAA,IACA,cAAc;AAAA,IACd,SAAS,MAAM,WAAW;AAAA,IAC1B,OAAO,MAAM;AAAA,EACf,CAAC;AAED,MAAI,OAAO,SAAS,CAAC,OAAO,QAAQ;AAClC,WAAO;AAAA,MACL,eAAe;AAAA,MACf,QAAQ,CAAC;AAAA,QACP,MAAM;AAAA,QACN,UAAU;AAAA,QACV,aAAa,sBAAsB,OAAO,SAAS,WAAW;AAAA,MAChE,CAAC;AAAA,MACD,iBAAiB,CAAC,+DAA0D;AAAA,MAC5E,SAAS;AAAA,IACX;AAAA,EACF;AAEA,MAAI;AACF,UAAM,SAAS,oBAAoB,OAAO,MAAM;AAChD,UAAM,SAAS,MAAM,QAAQ,OAAO,MAAM,IAAI,OAAO,SAAS,CAAC;AAC/D,UAAM,OAAO,MAAM,QAAQ,OAAO,eAAe,IAAI,OAAO,kBAA8B,CAAC;AAC3F,WAAO;AAAA,MACL,eAAe,KAAK,IAAI,GAAG,KAAK,IAAI,GAAG,OAAO,OAAO,aAAa,KAAK,CAAC,CAAC;AAAA,MACzE,QAAQ,OAAO,IAAI,CAAC,OAA+B;AAAA,QACjD,MAAO,EAAE,QAAQ;AAAA,QACjB,UAAW,EAAE,YAAY;AAAA,QACzB,aAAa,OAAO,EAAE,eAAe,EAAE;AAAA,QACvC,eAAe,EAAE,gBAAgB,OAAO,EAAE,aAAa,IAAI;AAAA,MAC7D,EAAE;AAAA,MACF,iBAAiB;AAAA,MACjB,SAAS,OAAO,OAAO,WAAW,sBAAsB;AAAA,IAC1D;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,MACL,eAAe;AAAA,MACf,QAAQ,CAAC;AAAA,MACT,iBAAiB,CAAC;AAAA,MAClB,SAAS;AAAA,IACX;AAAA,EACF;AACF;AAEA,SAAS,oBAAoB,QAAyC;AAEpE,MAAI;AACF,WAAO,KAAK,MAAM,MAAM;AAAA,EAC1B,QAAQ;AAEN,UAAM,QAAQ,OAAO,MAAM,oCAAoC;AAC/D,QAAI,OAAO;AACT,aAAO,KAAK,MAAM,MAAM,CAAC,CAAC;AAAA,IAC5B;AACA,UAAM,IAAI,MAAM,yBAAyB;AAAA,EAC3C;AACF;",
-  "names": []
-}

package/dist/chunk-JFDWKLQC.js

@@ -1,23 +0,0 @@
-// src/lib/manual-tasks-meta.ts
-var MANUAL_TASK_META = [
-  {
-    name: "cron_check_changelog",
-    description: "Parse CHANGELOG.md and create draft announcement rows for new versions.",
-    scheduledBy: "manual only \u2014 announcement drafts are reminder-driven, never scheduled"
-  },
-  {
-    name: "cron_suggest_instructions",
-    description: "Precompute per-project instruction suggestions for the SessionStart hook.",
-    scheduledBy: "Supabase pg_cron daily 04:30 UTC \u2192 agent_jobs \u2192 agent loop (migration 00083)"
-  },
-  {
-    name: "cron_refresh_skills",
-    description: "Refresh the skills registry from GitHub sources (disk JSON + public instructions sync). Requires GITHUB_TOKEN.",
-    scheduledBy: "Supabase pg_cron daily 03:30 UTC \u2192 agent_jobs \u2192 agent loop (migration 00086)"
-  }
-];
-
-export {
-  MANUAL_TASK_META
-};
-//# sourceMappingURL=chunk-JFDWKLQC.js.map

package/dist/chunk-JFDWKLQC.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../src/lib/manual-tasks-meta.ts"],
-  "sourcesContent": ["// Pure, dependency-free metadata for the manual maintenance tasks.\n//\n// `crons list` imports ONLY this file, so listing tasks never pulls the heavy\n// worker handlers \u2014 and their `@rulemetric/db` -> `postgres` / OpenTelemetry /\n// Sentry dependencies \u2014 into the command's bundle chunk. With esbuild\n// `splitting: true`, a single shared chunk reachable from any statically-imported\n// module is loaded eagerly; keeping the handlers out of the static graph is what\n// stops a standalone `npm i -g @rulemetric/cli` install from crashing at\n// module-load with `Cannot find package 'postgres'`.\n//\n// The executable handlers + `runManualTask` live in `manual-tasks.ts`, which\n// `crons/run.ts` lazy-imports only when a task is actually executed.\n\nexport interface ManualTaskMeta {\n    /** Task name, kept identical to the old cron names so muscle memory works. */\n    name: string;\n    /** One-line human description shown by `rulemetric crons list`. */\n    description: string;\n    /** Where the scheduled firing lives now (shown by `crons list`). */\n    scheduledBy: string;\n}\n\nexport const MANUAL_TASK_META: readonly ManualTaskMeta[] = [\n    {\n        name: 'cron_check_changelog',\n        description: 'Parse CHANGELOG.md and create draft announcement rows for new versions.',\n        scheduledBy: 'manual only \u2014 announcement drafts are reminder-driven, never scheduled',\n    },\n    {\n        name: 'cron_suggest_instructions',\n        description: 'Precompute per-project instruction suggestions for the SessionStart hook.',\n        scheduledBy: 'Supabase pg_cron daily 04:30 UTC \u2192 agent_jobs \u2192 agent loop (migration 00083)',\n    },\n    {\n        name: 'cron_refresh_skills',\n        description:\n            'Refresh the skills registry from GitHub sources (disk JSON + public instructions sync). Requires GITHUB_TOKEN.',\n        scheduledBy: 'Supabase pg_cron daily 03:30 UTC \u2192 agent_jobs \u2192 agent loop (migration 00086)',\n    },\n];\n"],
-  "mappings": ";AAsBO,IAAM,mBAA8C;AAAA,EACvD;AAAA,IACI,MAAM;AAAA,IACN,aAAa;AAAA,IACb,aAAa;AAAA,EACjB;AAAA,EACA;AAAA,IACI,MAAM;AAAA,IACN,aAAa;AAAA,IACb,aAAa;AAAA,EACjB;AAAA,EACA;AAAA,IACI,MAAM;AAAA,IACN,aACI;AAAA,IACJ,aAAa;AAAA,EACjB;AACJ;",
-  "names": []
-}