@rulemetric/cli 0.7.3 → 0.7.4

package/dist/chunk-IJGF2ETG.js

@@ -1,68 +0,0 @@
-import {
-  formatCost,
-  formatTokens
-} from "./chunk-DQ3KELXD.js";
-import {
-  GOLD,
-  ORANGE
-} from "./chunk-QJQS6TUN.js";
-
-// src/dashboard/panels/overview.tsx
-import { Box, Text } from "ink";
-import { Fragment, jsx, jsxs } from "react/jsx-runtime";
-function Overview({ local, api, label, width }) {
-  const sessions = api?.total_sessions ?? local.totalSessions;
-  const messages = api?.total_messages ?? 0;
-  const inputTokens = api?.total_input_tokens ?? local.totalInputTokens;
-  const outputTokens = api?.total_output_tokens ?? local.totalOutputTokens;
-  const cacheRead = api?.total_cache_read_tokens ?? local.totalCacheReadTokens;
-  const cacheWrite = api?.total_cache_write_tokens ?? local.totalCacheWriteTokens;
-  const cost = api?.estimated_cost_usd ?? local.totalCostUSD;
-  const daysActive = api?.days_active ?? 0;
-  const commits = api?.git_commits ?? 0;
-  const allInput = inputTokens + cacheRead + cacheWrite;
-  const cacheHit = allInput > 0 ? cacheRead / allInput * 100 : 0;
-  return /* @__PURE__ */ jsxs(Box, { flexDirection: "column", borderStyle: "round", borderColor: ORANGE, paddingX: 1, width, children: [
-    /* @__PURE__ */ jsxs(Text, { wrap: "truncate-end", children: [
-      /* @__PURE__ */ jsx(Text, { bold: true, color: ORANGE, children: "RuleMetric" }),
-      /* @__PURE__ */ jsxs(Text, { dimColor: true, children: [
-        "  ",
-        label
-      ] }),
-      api && /* @__PURE__ */ jsx(Text, { color: "#5BF58C", children: "  \u25CF API connected" }),
-      !api && /* @__PURE__ */ jsx(Text, { color: "#F55B5B", children: "  \u25CB API offline" })
-    ] }),
-    /* @__PURE__ */ jsxs(Text, { wrap: "truncate-end", children: [
-      /* @__PURE__ */ jsx(Text, { bold: true, color: GOLD, children: formatCost(cost) }),
-      /* @__PURE__ */ jsx(Text, { dimColor: true, children: " cost   " }),
-      /* @__PURE__ */ jsx(Text, { bold: true, children: String(sessions) }),
-      /* @__PURE__ */ jsx(Text, { dimColor: true, children: " sessions   " }),
-      messages > 0 && /* @__PURE__ */ jsxs(Fragment, { children: [
-        /* @__PURE__ */ jsx(Text, { bold: true, children: messages.toLocaleString() }),
-        /* @__PURE__ */ jsx(Text, { dimColor: true, children: " messages   " })
-      ] }),
-      /* @__PURE__ */ jsxs(Text, { bold: true, children: [
-        cacheHit.toFixed(1),
-        "%"
-      ] }),
-      /* @__PURE__ */ jsx(Text, { dimColor: true, children: " cache hit" })
-    ] }),
-    /* @__PURE__ */ jsxs(Text, { dimColor: true, wrap: "truncate-end", children: [
-      formatTokens(inputTokens),
-      " in   ",
-      formatTokens(outputTokens),
-      " out   ",
-      formatTokens(cacheRead),
-      " cached   ",
-      formatTokens(cacheWrite),
-      " written",
-      daysActive > 0 ? `   ${daysActive} days active` : "",
-      commits > 0 ? `   ${commits} commits` : ""
-    ] })
-  ] });
-}
-
-export {
-  Overview
-};
-//# sourceMappingURL=chunk-IJGF2ETG.js.map

package/dist/chunk-IJGF2ETG.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../src/dashboard/panels/overview.tsx"],
-  "sourcesContent": ["import React from 'react';\nimport { Box, Text } from 'ink';\nimport { ORANGE, GOLD } from '../types.js';\nimport type { LocalStats, ApiInsights } from '../types.js';\nimport { formatTokens, formatCost } from './shared.js';\n\nexport function Overview({ local, api, label, width }: {\n  local: LocalStats; api: ApiInsights | null; label: string; width: number;\n}) {\n  // Prefer API data when available (more complete), fall back to local\n  const sessions = api?.total_sessions ?? local.totalSessions;\n  const messages = api?.total_messages ?? 0;\n  const inputTokens = api?.total_input_tokens ?? local.totalInputTokens;\n  const outputTokens = api?.total_output_tokens ?? local.totalOutputTokens;\n  const cacheRead = api?.total_cache_read_tokens ?? local.totalCacheReadTokens;\n  const cacheWrite = api?.total_cache_write_tokens ?? local.totalCacheWriteTokens;\n  const cost = api?.estimated_cost_usd ?? local.totalCostUSD;\n  const daysActive = api?.days_active ?? 0;\n  const commits = api?.git_commits ?? 0;\n\n  const allInput = inputTokens + cacheRead + cacheWrite;\n  const cacheHit = allInput > 0 ? (cacheRead / allInput) * 100 : 0;\n\n  return (\n    <Box flexDirection=\"column\" borderStyle=\"round\" borderColor={ORANGE} paddingX={1} width={width}>\n      <Text wrap=\"truncate-end\">\n        <Text bold color={ORANGE}>RuleMetric</Text>\n        <Text dimColor>  {label}</Text>\n        {api && <Text color=\"#5BF58C\">  \u25CF API connected</Text>}\n        {!api && <Text color=\"#F55B5B\">  \u25CB API offline</Text>}\n      </Text>\n      <Text wrap=\"truncate-end\">\n        <Text bold color={GOLD}>{formatCost(cost)}</Text>\n        <Text dimColor> cost   </Text>\n        <Text bold>{String(sessions)}</Text>\n        <Text dimColor> sessions   </Text>\n        {messages > 0 && <><Text bold>{messages.toLocaleString()}</Text><Text dimColor> messages   </Text></>}\n        <Text bold>{cacheHit.toFixed(1)}%</Text>\n        <Text dimColor> cache hit</Text>\n      </Text>\n      <Text dimColor wrap=\"truncate-end\">\n        {formatTokens(inputTokens)} in   {formatTokens(outputTokens)} out   {formatTokens(cacheRead)} cached   {formatTokens(cacheWrite)} written\n        {daysActive > 0 ? `   ${daysActive} days active` : ''}\n        {commits > 0 ? `   ${commits} commits` : ''}\n      </Text>\n    </Box>\n  );\n}\n"],
-  "mappings": ";;;;;;;;;;AACA,SAAS,KAAK,YAAY;AAyBlB,SAUiB,UAVjB,KACA,YADA;AApBD,SAAS,SAAS,EAAE,OAAO,KAAK,OAAO,MAAM,GAEjD;AAED,QAAM,WAAW,KAAK,kBAAkB,MAAM;AAC9C,QAAM,WAAW,KAAK,kBAAkB;AACxC,QAAM,cAAc,KAAK,sBAAsB,MAAM;AACrD,QAAM,eAAe,KAAK,uBAAuB,MAAM;AACvD,QAAM,YAAY,KAAK,2BAA2B,MAAM;AACxD,QAAM,aAAa,KAAK,4BAA4B,MAAM;AAC1D,QAAM,OAAO,KAAK,sBAAsB,MAAM;AAC9C,QAAM,aAAa,KAAK,eAAe;AACvC,QAAM,UAAU,KAAK,eAAe;AAEpC,QAAM,WAAW,cAAc,YAAY;AAC3C,QAAM,WAAW,WAAW,IAAK,YAAY,WAAY,MAAM;AAE/D,SACE,qBAAC,OAAI,eAAc,UAAS,aAAY,SAAQ,aAAa,QAAQ,UAAU,GAAG,OAChF;AAAA,yBAAC,QAAK,MAAK,gBACT;AAAA,0BAAC,QAAK,MAAI,MAAC,OAAO,QAAQ,wBAAU;AAAA,MACpC,qBAAC,QAAK,UAAQ,MAAC;AAAA;AAAA,QAAG;AAAA,SAAM;AAAA,MACvB,OAAO,oBAAC,QAAK,OAAM,WAAU,oCAAiB;AAAA,MAC9C,CAAC,OAAO,oBAAC,QAAK,OAAM,WAAU,kCAAe;AAAA,OAChD;AAAA,IACA,qBAAC,QAAK,MAAK,gBACT;AAAA,0BAAC,QAAK,MAAI,MAAC,OAAO,MAAO,qBAAW,IAAI,GAAE;AAAA,MAC1C,oBAAC,QAAK,UAAQ,MAAC,sBAAQ;AAAA,MACvB,oBAAC,QAAK,MAAI,MAAE,iBAAO,QAAQ,GAAE;AAAA,MAC7B,oBAAC,QAAK,UAAQ,MAAC,0BAAY;AAAA,MAC1B,WAAW,KAAK,iCAAE;AAAA,4BAAC,QAAK,MAAI,MAAE,mBAAS,eAAe,GAAE;AAAA,QAAO,oBAAC,QAAK,UAAQ,MAAC,0BAAY;AAAA,SAAO;AAAA,MAClG,qBAAC,QAAK,MAAI,MAAE;AAAA,iBAAS,QAAQ,CAAC;AAAA,QAAE;AAAA,SAAC;AAAA,MACjC,oBAAC,QAAK,UAAQ,MAAC,wBAAU;AAAA,OAC3B;AAAA,IACA,qBAAC,QAAK,UAAQ,MAAC,MAAK,gBACjB;AAAA,mBAAa,WAAW;AAAA,MAAE;AAAA,MAAO,aAAa,YAAY;AAAA,MAAE;AAAA,MAAQ,aAAa,SAAS;AAAA,MAAE;AAAA,MAAW,aAAa,UAAU;AAAA,MAAE;AAAA,MAChI,aAAa,IAAI,MAAM,UAAU,iBAAiB;AAAA,MAClD,UAAU,IAAI,MAAM,OAAO,aAAa;AAAA,OAC3C;AAAA,KACF;AAEJ;",
-  "names": []
-}

package/dist/chunk-ILYDELUE.js

@@ -1,46 +0,0 @@
-// src/lib/proxy-respawn.ts
-var DEAD_CHECKS_BEFORE_RESPAWN = 5;
-var RESPAWN_COOLDOWN_MS = 10 * 6e4;
-var MitmproxyRespawnMonitor = class {
-  constructor(deps) {
-    this.deps = deps;
-  }
-  deadStreak = 0;
-  lastAttemptAt = Number.NEGATIVE_INFINITY;
-  skipLoggedThisStreak = false;
-  /** Feed one health-check result (true = mitmproxy answered). */
-  onHealthCheck(alive) {
-    if (alive) {
-      this.deadStreak = 0;
-      this.skipLoggedThisStreak = false;
-      return;
-    }
-    this.deadStreak++;
-    if (this.deadStreak < DEAD_CHECKS_BEFORE_RESPAWN) return;
-    const now = (this.deps.now ?? Date.now)();
-    if (now - this.lastAttemptAt < RESPAWN_COOLDOWN_MS) return;
-    if (!this.deps.hasCrashEvidence()) {
-      if (!this.skipLoggedThisStreak) {
-        this.skipLoggedThisStreak = true;
-        this.deps.log(
-          "mitmproxy is down with no crash evidence (no local proxy.pid) \u2014 not auto-restarting (deliberate `proxy stop` or Docker-managed)"
-        );
-      }
-      return;
-    }
-    this.lastAttemptAt = now;
-    this.deps.log(
-      `mitmproxy dead for ${this.deadStreak} consecutive checks \u2014 attempting auto-restart (at most once per ${Math.round(RESPAWN_COOLDOWN_MS / 6e4)}min)`
-    );
-    if (!this.deps.respawn()) {
-      this.deps.log("auto-restart unavailable \u2014 run `rulemetric proxy start` to restore deep capture");
-    }
-  }
-};
-
-export {
-  DEAD_CHECKS_BEFORE_RESPAWN,
-  RESPAWN_COOLDOWN_MS,
-  MitmproxyRespawnMonitor
-};
-//# sourceMappingURL=chunk-ILYDELUE.js.map

package/dist/chunk-ILYDELUE.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../src/lib/proxy-respawn.ts"],
-  "sourcesContent": ["/**\n * Conservative mitmproxy auto-restart, driven by the gateway's 3s health\n * checks. A mid-session mitmproxy crash otherwise stays silent \u2014 the gateway\n * routes direct by design, so deep capture is simply gone until the next\n * session's session-start hook runs.\n *\n * Guard rails (this must never become a restart loop, and must never fight a\n * deliberate `proxy stop`):\n *   - respawn fires only after DEAD_CHECKS_BEFORE_RESPAWN consecutive dead\n *     checks (a transient blip never triggers it);\n *   - at most one attempt per RESPAWN_COOLDOWN_MS window (in-memory \u2014 a\n *     gateway restart resets the window, which is fine: it also resets the\n *     dead-streak requirement);\n *   - only with crash evidence: a live proxy.pid file. `proxy stop` removes\n *     the PID file, so a deliberate stop is never overridden. Docker-managed\n *     proxies (pidfile `docker:<name>`) are Docker's to restart.\n *\n * Pure state machine \u2014 time, crash evidence, and the spawn are injected so\n * the transition logic is unit-testable without timers or processes.\n */\n\n/** ~15s of confirmed downtime at the gateway's 3s health cadence. */\nexport const DEAD_CHECKS_BEFORE_RESPAWN = 5;\nexport const RESPAWN_COOLDOWN_MS = 10 * 60_000;\n\nexport interface RespawnMonitorDeps {\n  /** Clock override. Used in tests. */\n  now?: () => number;\n  /** Whether the local proxy.pid file evidences a crash (vs a deliberate stop). */\n  hasCrashEvidence: () => boolean;\n  /** Fire one detached respawn attempt. Returns false if respawn is unavailable. */\n  respawn: () => boolean;\n  log: (msg: string) => void;\n}\n\nexport class MitmproxyRespawnMonitor {\n  private deadStreak = 0;\n  private lastAttemptAt = Number.NEGATIVE_INFINITY;\n  private skipLoggedThisStreak = false;\n\n  constructor(private readonly deps: RespawnMonitorDeps) {}\n\n  /** Feed one health-check result (true = mitmproxy answered). */\n  onHealthCheck(alive: boolean): void {\n    if (alive) {\n      this.deadStreak = 0;\n      this.skipLoggedThisStreak = false;\n      return;\n    }\n\n    this.deadStreak++;\n    if (this.deadStreak < DEAD_CHECKS_BEFORE_RESPAWN) return;\n\n    const now = (this.deps.now ?? Date.now)();\n    if (now - this.lastAttemptAt < RESPAWN_COOLDOWN_MS) return;\n\n    if (!this.deps.hasCrashEvidence()) {\n      if (!this.skipLoggedThisStreak) {\n        this.skipLoggedThisStreak = true;\n        this.deps.log(\n          'mitmproxy is down with no crash evidence (no local proxy.pid) \u2014 ' +\n            'not auto-restarting (deliberate `proxy stop` or Docker-managed)',\n        );\n      }\n      return;\n    }\n\n    this.lastAttemptAt = now;\n    this.deps.log(\n      `mitmproxy dead for ${this.deadStreak} consecutive checks \u2014 attempting auto-restart ` +\n        `(at most once per ${Math.round(RESPAWN_COOLDOWN_MS / 60_000)}min)`,\n    );\n    if (!this.deps.respawn()) {\n      this.deps.log('auto-restart unavailable \u2014 run `rulemetric proxy start` to restore deep capture');\n    }\n  }\n}\n"],
-  "mappings": ";AAsBO,IAAM,6BAA6B;AACnC,IAAM,sBAAsB,KAAK;AAYjC,IAAM,0BAAN,MAA8B;AAAA,EAKnC,YAA6B,MAA0B;AAA1B;AAAA,EAA2B;AAAA,EAJhD,aAAa;AAAA,EACb,gBAAgB,OAAO;AAAA,EACvB,uBAAuB;AAAA;AAAA,EAK/B,cAAc,OAAsB;AAClC,QAAI,OAAO;AACT,WAAK,aAAa;AAClB,WAAK,uBAAuB;AAC5B;AAAA,IACF;AAEA,SAAK;AACL,QAAI,KAAK,aAAa,2BAA4B;AAElD,UAAM,OAAO,KAAK,KAAK,OAAO,KAAK,KAAK;AACxC,QAAI,MAAM,KAAK,gBAAgB,oBAAqB;AAEpD,QAAI,CAAC,KAAK,KAAK,iBAAiB,GAAG;AACjC,UAAI,CAAC,KAAK,sBAAsB;AAC9B,aAAK,uBAAuB;AAC5B,aAAK,KAAK;AAAA,UACR;AAAA,QAEF;AAAA,MACF;AACA;AAAA,IACF;AAEA,SAAK,gBAAgB;AACrB,SAAK,KAAK;AAAA,MACR,sBAAsB,KAAK,UAAU,wEACd,KAAK,MAAM,sBAAsB,GAAM,CAAC;AAAA,IACjE;AACA,QAAI,CAAC,KAAK,KAAK,QAAQ,GAAG;AACxB,WAAK,KAAK,IAAI,sFAAiF;AAAA,IACjG;AAAA,EACF;AACF;",
-  "names": []
-}

package/dist/chunk-J6QFW4LD.js

@@ -1,55 +0,0 @@
-// src/lib/diagnostics.ts
-function parseNodeMajorMinor(v) {
-  const m = /^v?(\d+)\.(\d+)/.exec(v.trim());
-  if (!m) return { major: 0, minor: 0 };
-  return { major: Number(m[1]), minor: Number(m[2]) };
-}
-function isProxyBreakingNode(v) {
-  const { major, minor } = parseNodeMajorMinor(v);
-  if (major === 0) return false;
-  return major < 20 || major === 20 && minor < 11;
-}
-function diagnose(input) {
-  const oldNode = isProxyBreakingNode(input.nodeVersion);
-  if (!input.directApiOk) {
-    return {
-      severity: "fail",
-      headline: "Can't reach the API directly (proxy bypassed).",
-      hints: [
-        "Check your network/DNS/firewall and that you can reach https://rulemetric.com/health.",
-        "If a corporate proxy is required, it must allow rulemetric.com."
-      ]
-    };
-  }
-  if (input.httpsProxySet && input.proxyPathOk === false) {
-    const hints = [
-      "Direct reachability works but requests through your local proxy fail \u2014 your gateway/mitmproxy is the problem, NOT the API.",
-      input.gatewayAlive ? "Gateway (:8787) is up but not routing successfully." : "Gateway (:8787) is NOT listening \u2014 Claude Code/CLI traffic pointed at it will 502. Run `rulemetric hooks install` to restore it.",
-      input.mitmproxyAlive ? void 0 : "mitmproxy (:8788) is down \u2014 the gateway should route direct, so a 502 here points at the gateway itself.",
-      oldNode ? `Node ${input.nodeVersion} is < 20.11, which breaks the bundled proxy \u2014 upgrade Node to \u2265 20.11, or reinstall hooks with --no-proxy.` : void 0,
-      "Quick unblock: `rulemetric hooks install --no-proxy` (captures via hooks, no proxy), or `rulemetric proxy restart`."
-    ].filter((h) => Boolean(h));
-    return { severity: "fail", headline: "Your local proxy/gateway can't reach the API \u2014 this is the 502.", hints };
-  }
-  if (input.httpsProxySet && oldNode) {
-    return {
-      severity: "warn",
-      headline: `Node ${input.nodeVersion} is < 20.11 with a proxy configured \u2014 the proxy is likely dead.`,
-      hints: [
-        "Upgrade Node to \u2265 20.11 (older Node breaks the bundled proxy), or run `rulemetric hooks install --no-proxy`."
-      ]
-    };
-  }
-  return {
-    severity: "ok",
-    headline: "Healthy \u2014 the API is reachable" + (input.httpsProxySet ? " directly and through your proxy." : " (no proxy configured)."),
-    hints: []
-  };
-}
-
-export {
-  parseNodeMajorMinor,
-  isProxyBreakingNode,
-  diagnose
-};
-//# sourceMappingURL=chunk-J6QFW4LD.js.map

package/dist/chunk-J6QFW4LD.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../src/lib/diagnostics.ts"],
-  "sourcesContent": ["// Pure diagnosis logic for `rulemetric diagnostics` \u2014 kept out of the command so\n// the decision-making (which is the valuable, bug-prone part) is unit-testable\n// without spawning curl or opening sockets. The command does the probing and\n// feeds the raw booleans here.\n\nexport interface DiagnoseInput {\n  /** e.g. \"22.17.1\" or \"v22.17.1\" */\n  nodeVersion: string;\n  /** GET /health succeeded DIRECT (proxy bypassed). */\n  directApiOk: boolean;\n  /** HTTPS_PROXY is configured in the environment / settings. */\n  httpsProxySet: boolean;\n  /** The local gateway (:8787) is listening. */\n  gatewayAlive: boolean;\n  /** mitmproxy (:8788) is listening. */\n  mitmproxyAlive: boolean;\n  /** GET /health succeeded THROUGH the configured proxy. null when no proxy is set. */\n  proxyPathOk: boolean | null;\n}\n\nexport interface Diagnosis {\n  severity: 'ok' | 'warn' | 'fail';\n  headline: string;\n  hints: string[];\n}\n\n/** Parse major/minor from \"22.17.1\" or \"v22.17.1\". Unknown \u2192 {0,0}. */\nexport function parseNodeMajorMinor(v: string): { major: number; minor: number } {\n  const m = /^v?(\\d+)\\.(\\d+)/.exec(v.trim());\n  if (!m) return { major: 0, minor: 0 };\n  return { major: Number(m[1]), minor: Number(m[2]) };\n}\n\n/**\n * Node < 20.11 breaks the bundled proxy (it relies on a module-path API that is\n * undefined on older Node; see the 2026-07-07 field finding). Below 20.11 the\n * proxy is likely dead even\n * though HTTPS_PROXY is set \u2014 a prime cause of a client-side \"502 Bad Gateway\".\n */\nexport function isProxyBreakingNode(v: string): boolean {\n  const { major, minor } = parseNodeMajorMinor(v);\n  if (major === 0) return false; // couldn't parse \u2014 don't cry wolf\n  return major < 20 || (major === 20 && minor < 11);\n}\n\n/**\n * Turn the raw probe results into a single actionable diagnosis. The headline\n * case this exists for: DIRECT reachability works but the PROXY path fails \u2192\n * the user's own local gateway is eating requests and returning 502, even though\n * production is perfectly healthy.\n */\nexport function diagnose(input: DiagnoseInput): Diagnosis {\n  const oldNode = isProxyBreakingNode(input.nodeVersion);\n\n  // 1. Can't even reach the API directly \u2192 not a proxy problem; network/DNS/down.\n  if (!input.directApiOk) {\n    return {\n      severity: 'fail',\n      headline: \"Can't reach the API directly (proxy bypassed).\",\n      hints: [\n        'Check your network/DNS/firewall and that you can reach https://rulemetric.com/health.',\n        'If a corporate proxy is required, it must allow rulemetric.com.',\n      ],\n    };\n  }\n\n  // 2. Direct works but the PROXY path fails \u2192 the local gateway is the culprit.\n  //    This is the client-side \"502 Bad Gateway\" class.\n  if (input.httpsProxySet && input.proxyPathOk === false) {\n    const hints = [\n      'Direct reachability works but requests through your local proxy fail \u2014 your gateway/mitmproxy is the problem, NOT the API.',\n      input.gatewayAlive\n        ? 'Gateway (:8787) is up but not routing successfully.'\n        : 'Gateway (:8787) is NOT listening \u2014 Claude Code/CLI traffic pointed at it will 502. Run `rulemetric hooks install` to restore it.',\n      input.mitmproxyAlive ? undefined : 'mitmproxy (:8788) is down \u2014 the gateway should route direct, so a 502 here points at the gateway itself.',\n      oldNode\n        ? `Node ${input.nodeVersion} is < 20.11, which breaks the bundled proxy \u2014 upgrade Node to \u2265 20.11, or reinstall hooks with --no-proxy.`\n        : undefined,\n      'Quick unblock: `rulemetric hooks install --no-proxy` (captures via hooks, no proxy), or `rulemetric proxy restart`.',\n    ].filter((h): h is string => Boolean(h));\n    return { severity: 'fail', headline: 'Your local proxy/gateway can\\'t reach the API \u2014 this is the 502.', hints };\n  }\n\n  // 3. Old Node + proxy configured but we couldn't positively confirm the proxy\n  //    path (e.g. curl unavailable) \u2192 warn, since the proxy is likely dead.\n  if (input.httpsProxySet && oldNode) {\n    return {\n      severity: 'warn',\n      headline: `Node ${input.nodeVersion} is < 20.11 with a proxy configured \u2014 the proxy is likely dead.`,\n      hints: [\n        'Upgrade Node to \u2265 20.11 (older Node breaks the bundled proxy), or run `rulemetric hooks install --no-proxy`.',\n      ],\n    };\n  }\n\n  // 4. Everything reachable.\n  return {\n    severity: 'ok',\n    headline: 'Healthy \u2014 the API is reachable' + (input.httpsProxySet ? ' directly and through your proxy.' : ' (no proxy configured).'),\n    hints: [],\n  };\n}\n"],
-  "mappings": ";AA2BO,SAAS,oBAAoB,GAA6C;AAC/E,QAAM,IAAI,kBAAkB,KAAK,EAAE,KAAK,CAAC;AACzC,MAAI,CAAC,EAAG,QAAO,EAAE,OAAO,GAAG,OAAO,EAAE;AACpC,SAAO,EAAE,OAAO,OAAO,EAAE,CAAC,CAAC,GAAG,OAAO,OAAO,EAAE,CAAC,CAAC,EAAE;AACpD;AAQO,SAAS,oBAAoB,GAAoB;AACtD,QAAM,EAAE,OAAO,MAAM,IAAI,oBAAoB,CAAC;AAC9C,MAAI,UAAU,EAAG,QAAO;AACxB,SAAO,QAAQ,MAAO,UAAU,MAAM,QAAQ;AAChD;AAQO,SAAS,SAAS,OAAiC;AACxD,QAAM,UAAU,oBAAoB,MAAM,WAAW;AAGrD,MAAI,CAAC,MAAM,aAAa;AACtB,WAAO;AAAA,MACL,UAAU;AAAA,MACV,UAAU;AAAA,MACV,OAAO;AAAA,QACL;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAIA,MAAI,MAAM,iBAAiB,MAAM,gBAAgB,OAAO;AACtD,UAAM,QAAQ;AAAA,MACZ;AAAA,MACA,MAAM,eACF,wDACA;AAAA,MACJ,MAAM,iBAAiB,SAAY;AAAA,MACnC,UACI,QAAQ,MAAM,WAAW,yHACzB;AAAA,MACJ;AAAA,IACF,EAAE,OAAO,CAAC,MAAmB,QAAQ,CAAC,CAAC;AACvC,WAAO,EAAE,UAAU,QAAQ,UAAU,wEAAoE,MAAM;AAAA,EACjH;AAIA,MAAI,MAAM,iBAAiB,SAAS;AAClC,WAAO;AAAA,MACL,UAAU;AAAA,MACV,UAAU,QAAQ,MAAM,WAAW;AAAA,MACnC,OAAO;AAAA,QACL;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAGA,SAAO;AAAA,IACL,UAAU;AAAA,IACV,UAAU,yCAAoC,MAAM,gBAAgB,sCAAsC;AAAA,IAC1G,OAAO,CAAC;AAAA,EACV;AACF;",
-  "names": []
-}

package/dist/chunk-J7N3DLH6.js

@@ -1,117 +0,0 @@
-import {
-  executeEval
-} from "./chunk-QN34TGD3.js";
-
-// src/lib/eval-meta-judge.ts
-var META_JUDGE_SYSTEM_PROMPT = `You are a meta-judge evaluating the quality of an eval run \u2014 not the code output, but whether the test cases and grading themselves are rigorous and meaningful.
-
-You will receive a summary of eval cases, their expectations, and grading results.
-
-Analyze for these quality issues:
-
-1. **Weak expectations** \u2014 Expectations that are vague ("should follow conventions") or trivially satisfiable. Good expectations are specific and falsifiable.
-
-2. **Inconsistent grading** \u2014 Cases where similar expectations get different pass/fail results, or where evidence doesn't match the verdict.
-
-3. **Trivial tests** \u2014 Cases where the prompt doesn't actually challenge the rule. E.g., testing "NEVER use mocks" with a prompt that doesn't involve testing at all.
-
-4. **Untestable expectations** \u2014 Expectations that can't be verified from the output alone (e.g., "the developer should feel confident").
-
-5. **Suspicious 100% pass** \u2014 If every expectation passes, consider whether the tests were actually challenging enough.
-
-Respond in JSON:
-{
-  "quality_score": <1-5>,
-  "issues": [
-    {
-      "type": "weak_expectation | inconsistent_grading | trivial_test | untestable_expectation | all_pass_suspicious",
-      "severity": "low | medium | high",
-      "description": "<specific issue>",
-      "affected_eval": "<eval name if applicable>"
-    }
-  ],
-  "recommendations": ["<specific improvement suggestion>", ...],
-  "summary": "<1-2 sentence overall assessment>"
-}
-
-Be constructive but honest. A quality_score of 3 means acceptable, 4 means good, 5 means rigorous. Most real-world eval runs score 2-4.`;
-async function judgeEvalQuality(input) {
-  const evalSummary = input.evalResults.map((r) => {
-    const gradingInfo = r.grading ? {
-      pass_rate: r.grading.summary.pass_rate,
-      expectations: r.grading.expectations.map((e) => ({
-        text: e.text,
-        passed: e.passed,
-        evidence: e.evidence.slice(0, 200)
-      })),
-      feedback: r.grading.eval_feedback?.overall ?? ""
-    } : null;
-    return {
-      eval_name: r.evalName,
-      prompt: r.prompt.slice(0, 500),
-      expectations: r.expectations,
-      grading: gradingInfo,
-      output_preview: r.output?.slice(0, 300) ?? "(not available)"
-    };
-  });
-  const prompt = `Evaluate the quality of this eval run for target "${input.targetName}":
-
-${JSON.stringify(evalSummary, null, 2)}`;
-  const result = await executeEval({
-    prompt,
-    systemPrompt: META_JUDGE_SYSTEM_PROMPT,
-    timeout: input.timeout ?? 6e4,
-    model: input.model
-  });
-  if (result.error || !result.output) {
-    return {
-      quality_score: 0,
-      issues: [{
-        type: "inconsistent_grading",
-        severity: "high",
-        description: `Meta-judge failed: ${result.error ?? "no output"}`
-      }],
-      recommendations: ["Meta-judge could not complete \u2014 check model availability"],
-      summary: "Meta-judge execution failed."
-    };
-  }
-  try {
-    const parsed = parseJsonFromOutput(result.output);
-    const issues = Array.isArray(parsed.issues) ? parsed.issues : [];
-    const recs = Array.isArray(parsed.recommendations) ? parsed.recommendations : [];
-    return {
-      quality_score: Math.max(1, Math.min(5, Number(parsed.quality_score) || 3)),
-      issues: issues.map((i) => ({
-        type: i.type ?? "weak_expectation",
-        severity: i.severity ?? "medium",
-        description: String(i.description ?? ""),
-        affected_eval: i.affected_eval ? String(i.affected_eval) : void 0
-      })),
-      recommendations: recs,
-      summary: String(parsed.summary ?? "No summary provided.")
-    };
-  } catch {
-    return {
-      quality_score: 3,
-      issues: [],
-      recommendations: [],
-      summary: "Meta-judge returned unparseable output \u2014 defaulting to neutral score."
-    };
-  }
-}
-function parseJsonFromOutput(output) {
-  try {
-    return JSON.parse(output);
-  } catch {
-    const match = output.match(/```(?:json)?\s*\n?([\s\S]*?)\n?```/);
-    if (match) {
-      return JSON.parse(match[1]);
-    }
-    throw new Error("No JSON found in output");
-  }
-}
-
-export {
-  judgeEvalQuality
-};
-//# sourceMappingURL=chunk-J7N3DLH6.js.map

package/dist/chunk-J7N3DLH6.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../src/lib/eval-meta-judge.ts"],
-  "sourcesContent": ["import { executeEval } from './eval-executor.js';\nimport type { GradingResult } from './eval-grader.js';\n\nexport interface MetaJudgement {\n  quality_score: number;        // 1-5 overall quality of the eval run\n  issues: MetaIssue[];\n  recommendations: string[];\n  summary: string;\n}\n\nexport interface MetaIssue {\n  type: 'weak_expectation' | 'inconsistent_grading' | 'trivial_test' | 'untestable_expectation' | 'all_pass_suspicious';\n  severity: 'low' | 'medium' | 'high';\n  description: string;\n  affected_eval?: string;\n}\n\nconst META_JUDGE_SYSTEM_PROMPT = `You are a meta-judge evaluating the quality of an eval run \u2014 not the code output, but whether the test cases and grading themselves are rigorous and meaningful.\n\nYou will receive a summary of eval cases, their expectations, and grading results.\n\nAnalyze for these quality issues:\n\n1. **Weak expectations** \u2014 Expectations that are vague (\"should follow conventions\") or trivially satisfiable. Good expectations are specific and falsifiable.\n\n2. **Inconsistent grading** \u2014 Cases where similar expectations get different pass/fail results, or where evidence doesn't match the verdict.\n\n3. **Trivial tests** \u2014 Cases where the prompt doesn't actually challenge the rule. E.g., testing \"NEVER use mocks\" with a prompt that doesn't involve testing at all.\n\n4. **Untestable expectations** \u2014 Expectations that can't be verified from the output alone (e.g., \"the developer should feel confident\").\n\n5. **Suspicious 100% pass** \u2014 If every expectation passes, consider whether the tests were actually challenging enough.\n\nRespond in JSON:\n{\n  \"quality_score\": <1-5>,\n  \"issues\": [\n    {\n      \"type\": \"weak_expectation | inconsistent_grading | trivial_test | untestable_expectation | all_pass_suspicious\",\n      \"severity\": \"low | medium | high\",\n      \"description\": \"<specific issue>\",\n      \"affected_eval\": \"<eval name if applicable>\"\n    }\n  ],\n  \"recommendations\": [\"<specific improvement suggestion>\", ...],\n  \"summary\": \"<1-2 sentence overall assessment>\"\n}\n\nBe constructive but honest. A quality_score of 3 means acceptable, 4 means good, 5 means rigorous. Most real-world eval runs score 2-4.`;\n\ninterface MetaJudgeInput {\n  targetName: string;\n  evalResults: Array<{\n    evalName: string;\n    prompt: string;\n    expectations: string[];\n    grading: GradingResult | null;\n    output?: string;\n  }>;\n  model?: string;\n  timeout?: number;\n}\n\nexport async function judgeEvalQuality(input: MetaJudgeInput): Promise<MetaJudgement> {\n  // Build a summary of the eval run for the meta-judge\n  const evalSummary = input.evalResults.map((r) => {\n    const gradingInfo = r.grading\n      ? {\n          pass_rate: r.grading.summary.pass_rate,\n          expectations: r.grading.expectations.map((e) => ({\n            text: e.text,\n            passed: e.passed,\n            evidence: e.evidence.slice(0, 200),\n          })),\n          feedback: r.grading.eval_feedback?.overall ?? '',\n        }\n      : null;\n\n    return {\n      eval_name: r.evalName,\n      prompt: r.prompt.slice(0, 500),\n      expectations: r.expectations,\n      grading: gradingInfo,\n      output_preview: r.output?.slice(0, 300) ?? '(not available)',\n    };\n  });\n\n  const prompt = `Evaluate the quality of this eval run for target \"${input.targetName}\":\n\n${JSON.stringify(evalSummary, null, 2)}`;\n\n  const result = await executeEval({\n    prompt,\n    systemPrompt: META_JUDGE_SYSTEM_PROMPT,\n    timeout: input.timeout ?? 60000,\n    model: input.model,\n  });\n\n  if (result.error || !result.output) {\n    return {\n      quality_score: 0,\n      issues: [{\n        type: 'inconsistent_grading',\n        severity: 'high',\n        description: `Meta-judge failed: ${result.error ?? 'no output'}`,\n      }],\n      recommendations: ['Meta-judge could not complete \u2014 check model availability'],\n      summary: 'Meta-judge execution failed.',\n    };\n  }\n\n  try {\n    const parsed = parseJsonFromOutput(result.output);\n    const issues = Array.isArray(parsed.issues) ? parsed.issues : [];\n    const recs = Array.isArray(parsed.recommendations) ? parsed.recommendations as string[] : [];\n    return {\n      quality_score: Math.max(1, Math.min(5, Number(parsed.quality_score) || 3)),\n      issues: issues.map((i: Record<string, string>) => ({\n        type: (i.type ?? 'weak_expectation') as MetaIssue['type'],\n        severity: (i.severity ?? 'medium') as MetaIssue['severity'],\n        description: String(i.description ?? ''),\n        affected_eval: i.affected_eval ? String(i.affected_eval) : undefined,\n      })),\n      recommendations: recs,\n      summary: String(parsed.summary ?? 'No summary provided.'),\n    };\n  } catch {\n    return {\n      quality_score: 3,\n      issues: [],\n      recommendations: [],\n      summary: 'Meta-judge returned unparseable output \u2014 defaulting to neutral score.',\n    };\n  }\n}\n\nfunction parseJsonFromOutput(output: string): Record<string, unknown> {\n  // Try direct JSON parse\n  try {\n    return JSON.parse(output);\n  } catch {\n    // Try extracting from markdown code block\n    const match = output.match(/```(?:json)?\\s*\\n?([\\s\\S]*?)\\n?```/);\n    if (match) {\n      return JSON.parse(match[1]);\n    }\n    throw new Error('No JSON found in output');\n  }\n}\n"],
-  "mappings": ";;;;;AAiBA,IAAM,2BAA2B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AA8CjC,eAAsB,iBAAiB,OAA+C;AAEpF,QAAM,cAAc,MAAM,YAAY,IAAI,CAAC,MAAM;AAC/C,UAAM,cAAc,EAAE,UAClB;AAAA,MACE,WAAW,EAAE,QAAQ,QAAQ;AAAA,MAC7B,cAAc,EAAE,QAAQ,aAAa,IAAI,CAAC,OAAO;AAAA,QAC/C,MAAM,EAAE;AAAA,QACR,QAAQ,EAAE;AAAA,QACV,UAAU,EAAE,SAAS,MAAM,GAAG,GAAG;AAAA,MACnC,EAAE;AAAA,MACF,UAAU,EAAE,QAAQ,eAAe,WAAW;AAAA,IAChD,IACA;AAEJ,WAAO;AAAA,MACL,WAAW,EAAE;AAAA,MACb,QAAQ,EAAE,OAAO,MAAM,GAAG,GAAG;AAAA,MAC7B,cAAc,EAAE;AAAA,MAChB,SAAS;AAAA,MACT,gBAAgB,EAAE,QAAQ,MAAM,GAAG,GAAG,KAAK;AAAA,IAC7C;AAAA,EACF,CAAC;AAED,QAAM,SAAS,qDAAqD,MAAM,UAAU;AAAA;AAAA,EAEpF,KAAK,UAAU,aAAa,MAAM,CAAC,CAAC;AAEpC,QAAM,SAAS,MAAM,YAAY;AAAA,IAC/B;AAAA,IACA,cAAc;AAAA,IACd,SAAS,MAAM,WAAW;AAAA,IAC1B,OAAO,MAAM;AAAA,EACf,CAAC;AAED,MAAI,OAAO,SAAS,CAAC,OAAO,QAAQ;AAClC,WAAO;AAAA,MACL,eAAe;AAAA,MACf,QAAQ,CAAC;AAAA,QACP,MAAM;AAAA,QACN,UAAU;AAAA,QACV,aAAa,sBAAsB,OAAO,SAAS,WAAW;AAAA,MAChE,CAAC;AAAA,MACD,iBAAiB,CAAC,+DAA0D;AAAA,MAC5E,SAAS;AAAA,IACX;AAAA,EACF;AAEA,MAAI;AACF,UAAM,SAAS,oBAAoB,OAAO,MAAM;AAChD,UAAM,SAAS,MAAM,QAAQ,OAAO,MAAM,IAAI,OAAO,SAAS,CAAC;AAC/D,UAAM,OAAO,MAAM,QAAQ,OAAO,eAAe,IAAI,OAAO,kBAA8B,CAAC;AAC3F,WAAO;AAAA,MACL,eAAe,KAAK,IAAI,GAAG,KAAK,IAAI,GAAG,OAAO,OAAO,aAAa,KAAK,CAAC,CAAC;AAAA,MACzE,QAAQ,OAAO,IAAI,CAAC,OAA+B;AAAA,QACjD,MAAO,EAAE,QAAQ;AAAA,QACjB,UAAW,EAAE,YAAY;AAAA,QACzB,aAAa,OAAO,EAAE,eAAe,EAAE;AAAA,QACvC,eAAe,EAAE,gBAAgB,OAAO,EAAE,aAAa,IAAI;AAAA,MAC7D,EAAE;AAAA,MACF,iBAAiB;AAAA,MACjB,SAAS,OAAO,OAAO,WAAW,sBAAsB;AAAA,IAC1D;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,MACL,eAAe;AAAA,MACf,QAAQ,CAAC;AAAA,MACT,iBAAiB,CAAC;AAAA,MAClB,SAAS;AAAA,IACX;AAAA,EACF;AACF;AAEA,SAAS,oBAAoB,QAAyC;AAEpE,MAAI;AACF,WAAO,KAAK,MAAM,MAAM;AAAA,EAC1B,QAAQ;AAEN,UAAM,QAAQ,OAAO,MAAM,oCAAoC;AAC/D,QAAI,OAAO;AACT,aAAO,KAAK,MAAM,MAAM,CAAC,CAAC;AAAA,IAC5B;AACA,UAAM,IAAI,MAAM,yBAAyB;AAAA,EAC3C;AACF;",
-  "names": []
-}

package/dist/chunk-JFDWKLQC.js

@@ -1,23 +0,0 @@
-// src/lib/manual-tasks-meta.ts
-var MANUAL_TASK_META = [
-  {
-    name: "cron_check_changelog",
-    description: "Parse CHANGELOG.md and create draft announcement rows for new versions.",
-    scheduledBy: "manual only \u2014 announcement drafts are reminder-driven, never scheduled"
-  },
-  {
-    name: "cron_suggest_instructions",
-    description: "Precompute per-project instruction suggestions for the SessionStart hook.",
-    scheduledBy: "Supabase pg_cron daily 04:30 UTC \u2192 agent_jobs \u2192 agent loop (migration 00083)"
-  },
-  {
-    name: "cron_refresh_skills",
-    description: "Refresh the skills registry from GitHub sources (disk JSON + public instructions sync). Requires GITHUB_TOKEN.",
-    scheduledBy: "Supabase pg_cron daily 03:30 UTC \u2192 agent_jobs \u2192 agent loop (migration 00086)"
-  }
-];
-
-export {
-  MANUAL_TASK_META
-};
-//# sourceMappingURL=chunk-JFDWKLQC.js.map

package/dist/chunk-JFDWKLQC.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../src/lib/manual-tasks-meta.ts"],
-  "sourcesContent": ["// Pure, dependency-free metadata for the manual maintenance tasks.\n//\n// `crons list` imports ONLY this file, so listing tasks never pulls the heavy\n// worker handlers \u2014 and their `@rulemetric/db` -> `postgres` / OpenTelemetry /\n// Sentry dependencies \u2014 into the command's bundle chunk. With esbuild\n// `splitting: true`, a single shared chunk reachable from any statically-imported\n// module is loaded eagerly; keeping the handlers out of the static graph is what\n// stops a standalone `npm i -g @rulemetric/cli` install from crashing at\n// module-load with `Cannot find package 'postgres'`.\n//\n// The executable handlers + `runManualTask` live in `manual-tasks.ts`, which\n// `crons/run.ts` lazy-imports only when a task is actually executed.\n\nexport interface ManualTaskMeta {\n    /** Task name, kept identical to the old cron names so muscle memory works. */\n    name: string;\n    /** One-line human description shown by `rulemetric crons list`. */\n    description: string;\n    /** Where the scheduled firing lives now (shown by `crons list`). */\n    scheduledBy: string;\n}\n\nexport const MANUAL_TASK_META: readonly ManualTaskMeta[] = [\n    {\n        name: 'cron_check_changelog',\n        description: 'Parse CHANGELOG.md and create draft announcement rows for new versions.',\n        scheduledBy: 'manual only \u2014 announcement drafts are reminder-driven, never scheduled',\n    },\n    {\n        name: 'cron_suggest_instructions',\n        description: 'Precompute per-project instruction suggestions for the SessionStart hook.',\n        scheduledBy: 'Supabase pg_cron daily 04:30 UTC \u2192 agent_jobs \u2192 agent loop (migration 00083)',\n    },\n    {\n        name: 'cron_refresh_skills',\n        description:\n            'Refresh the skills registry from GitHub sources (disk JSON + public instructions sync). Requires GITHUB_TOKEN.',\n        scheduledBy: 'Supabase pg_cron daily 03:30 UTC \u2192 agent_jobs \u2192 agent loop (migration 00086)',\n    },\n];\n"],
-  "mappings": ";AAsBO,IAAM,mBAA8C;AAAA,EACvD;AAAA,IACI,MAAM;AAAA,IACN,aAAa;AAAA,IACb,aAAa;AAAA,EACjB;AAAA,EACA;AAAA,IACI,MAAM;AAAA,IACN,aAAa;AAAA,IACb,aAAa;AAAA,EACjB;AAAA,EACA;AAAA,IACI,MAAM;AAAA,IACN,aACI;AAAA,IACJ,aAAa;AAAA,EACjB;AACJ;",
-  "names": []
-}

package/dist/chunk-JULOLTZS.js

@@ -1,61 +0,0 @@
-import {
-  ensureWorktree
-} from "./chunk-Y4BJXXYV.js";
-import {
-  PermanentJobError
-} from "./chunk-DGHWRQXL.js";
-import {
-  apiPatch
-} from "./chunk-ZUJBM6HE.js";
-
-// src/lib/handlers/process-launch.ts
-async function resolveWorktreeForLaunch(config) {
-  if (!config.worktree?.create) {
-    return config;
-  }
-  const { branch, baseRef } = config.worktree;
-  const wt = await ensureWorktree({
-    repoRoot: config.projectPath,
-    branch,
-    baseRef
-  });
-  return {
-    ...config,
-    projectPath: wt.path,
-    gitBranch: wt.branch
-  };
-}
-async function processLaunch(payload, helpers) {
-  const { mirrorId, tool } = payload;
-  let { config } = payload;
-  const log = (msg) => helpers.logger.info(msg);
-  if (helpers.job.attempts > 1) {
-    throw new PermanentJobError(
-      `process_launch is not safe to retry (attempt ${helpers.job.attempts}). Re-launch manually.`
-    );
-  }
-  config = await resolveWorktreeForLaunch(config);
-  if (config.worktree?.create) {
-    log(`Worktree resolved: ${config.projectPath} (branch ${config.gitBranch})`);
-  }
-  log(`Launching ${tool}...`);
-  const { getLauncher } = await import("./dist-UNYP5PJR.js");
-  const launcher = getLauncher(tool);
-  const launcherResult = await launcher.launch(config);
-  log(`Launch completed: sessionId=${launcherResult.sessionId}`);
-  const result = {
-    ...launcherResult,
-    worktreePath: config.worktree?.create ? config.projectPath : void 0,
-    runId: config.runId
-  };
-  await apiPatch(`/api/launch-jobs/${mirrorId}/state`, { result }).catch((err) => {
-    log(`result persist failed: ${err instanceof Error ? err.message : String(err)}`);
-  });
-  return result;
-}
-
-export {
-  resolveWorktreeForLaunch,
-  processLaunch
-};
-//# sourceMappingURL=chunk-JULOLTZS.js.map

package/dist/chunk-JULOLTZS.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../src/lib/handlers/process-launch.ts"],
-  "sourcesContent": ["import type { JobHelpers } from '../job-helpers.js';\nimport type { LaunchConfig as LauncherConfig } from '@rulemetric/session';\nimport { apiPatch } from '../api-client.js';\nimport { PermanentJobError } from '../permanent-job-error.js';\nimport { ensureWorktree } from '../worktree.js';\n\n/**\n * Extends the canonical launcher config (`@rulemetric/session`) with the\n * worker-only fields the `POST /api/runs` fan-out stamps. Extending \u2014 rather\n * than re-declaring \u2014 keeps the shared launcher fields (`projectPath`,\n * `prompt`, `mode`, `resumeSessionId`, \u2026) in lock-step with the launcher so\n * the two can't drift.\n */\nexport interface LaunchConfig extends LauncherConfig {\n  gitBranch?: string;\n  /**\n   * Set by the `POST /api/runs` fan-out (Task 1.1). When `create` is true the\n   * worker provisions an isolated git worktree+branch before launching, so the\n   * session runs inside its own checkout of the repo.\n   */\n  worktree?: {\n    create: boolean;\n    branch: string;\n    baseRef: string;\n  };\n  /**\n   * The owning run's id, stamped by the fan-out. Carried through untouched and\n   * passed to the launcher, which injects it as RULEMETRIC_RUN_ID into the\n   * spawned session's env (Task 3.1). The session-start hook\n   * (packages/hooks/scripts/_ensure-session.sh) forwards it as `runId` to\n   * POST /api/sessions, which stamps sessions.run_id after validating ownership.\n   */\n  runId?: string;\n}\n\ninterface LaunchPayload {\n  mirrorId: string;\n  tool: string;\n  config: LaunchConfig;\n}\n\n/**\n * If the launch carries a worktree spec, provision the worktree and return a\n * NEW config pointed at it (`projectPath` = worktree path, `gitBranch` = the\n * branch). When `worktree.create` is falsy the config is returned unchanged.\n *\n * Extracted as a pure-ish helper so it's unit-testable against a real temp git\n * repo without mocking the `@rulemetric/session` launcher. `allowExistingBranch`\n * is left at its default (false): same-run idempotency is handled by\n * `ensureWorktree`'s pre-existence guard, and the `attempts > 1` guard in\n * `processLaunch` prevents a retry from re-running this at all.\n */\nexport async function resolveWorktreeForLaunch(config: LaunchConfig): Promise<LaunchConfig> {\n  if (!config.worktree?.create) {\n    return config;\n  }\n  const { branch, baseRef } = config.worktree;\n  const wt = await ensureWorktree({\n    repoRoot: config.projectPath,\n    branch,\n    baseRef,\n  });\n  // New object \u2014 never mutate the caller's config in place.\n  return {\n    ...config,\n    projectPath: wt.path,\n    gitBranch: wt.branch,\n  };\n}\n\n/**\n * Graphile-shaped handler for the `process_launch` task.\n *\n * Lifted from the legacy `eval-worker.ts:processLaunchJob`, with the queue\n * plumbing stripped out:\n *   - no claim \u2014 Graphile already claimed the job before invoking us\n *   - no /complete POST \u2014 we return the launcher result (or throw)\n *   - no surrounding try/catch \u2014 errors propagate to Graphile's retry path\n *\n * The dynamic import of `@rulemetric/session` is intentional: it avoids\n * loading the launcher (and its tool-specific subprocess wrappers) unless a\n * launch job actually fires.\n */\nexport async function processLaunch(\n  payload: LaunchPayload,\n  helpers: JobHelpers,\n): Promise<Record<string, unknown>> {\n  const { mirrorId, tool } = payload;\n  let { config } = payload;\n  const log = (msg: string) => helpers.logger.info(msg);\n\n  // Fail-fast on retry. The launcher spawns subprocesses and registers a\n  // session \u2014 re-running on Graphile retry would create a second session\n  // with no link back to the first. Until the launcher path is properly\n  // idempotent (resume from sessionId persisted to the mirror row),\n  // surface the failure to the user instead of silently double-launching.\n  // See docs/audits/2026-05-07-worker-audit.md \"Handlers not idempotent\".\n  if (helpers.job.attempts > 1) {\n    throw new PermanentJobError(\n      `process_launch is not safe to retry (attempt ${helpers.job.attempts}). Re-launch manually.`,\n    );\n  }\n\n  // Provision an isolated worktree (idempotent) BEFORE the launcher spawns \u2014\n  // the launcher uses config.projectPath as the session cwd, so swapping it to\n  // the worktree path is what makes the session run inside the worktree.\n  config = await resolveWorktreeForLaunch(config);\n  if (config.worktree?.create) {\n    log(`Worktree resolved: ${config.projectPath} (branch ${config.gitBranch})`);\n  }\n\n  log(`Launching ${tool}...`);\n  const { getLauncher } = await import('@rulemetric/session');\n  const launcher = getLauncher(tool);\n  // config.runId rides through here untouched; the launcher injects it as\n  // RULEMETRIC_RUN_ID into the spawned session's env (Task 3.1).\n  const launcherResult = await launcher.launch(config);\n  log(`Launch completed: sessionId=${launcherResult.sessionId}`);\n\n  // Persist the RESOLVED worktree path + runId onto the launch result so the\n  // API's reconcile fallback (POST /api/runs/:id/link-sessions, Task 3.2) can\n  // match a run's launch jobs to its captured sessions on `projectPath`. The\n  // env\u2192hook path (Task 3.1) is the primary attribution channel; this is the\n  // defense-in-depth join key for sessions that channel misses (non-Claude-Code\n  // tools whose launchers don't inject RULEMETRIC_RUN_ID, proxy-created\n  // sessions, tools without our hooks). `config.projectPath` here is already\n  // the worktree path \u2014 `resolveWorktreeForLaunch` swapped it above \u2014 so the\n  // captured `sessions.projectPath` (the session's cwd) equals it.\n  const result: Record<string, unknown> = {\n    ...launcherResult,\n    worktreePath: config.worktree?.create ? config.projectPath : undefined,\n    runId: config.runId,\n  };\n\n  // Graphile discards task return values, so persist the launcher result\n  // (sessionId, etc.) onto the mirror row. Best-effort.\n  await apiPatch(`/api/launch-jobs/${mirrorId}/state`, { result }).catch((err: unknown) => {\n    log(`result persist failed: ${err instanceof Error ? err.message : String(err)}`);\n  });\n\n  return result;\n}\n"],
-  "mappings": ";;;;;;;;;;;AAoDA,eAAsB,yBAAyB,QAA6C;AAC1F,MAAI,CAAC,OAAO,UAAU,QAAQ;AAC5B,WAAO;AAAA,EACT;AACA,QAAM,EAAE,QAAQ,QAAQ,IAAI,OAAO;AACnC,QAAM,KAAK,MAAM,eAAe;AAAA,IAC9B,UAAU,OAAO;AAAA,IACjB;AAAA,IACA;AAAA,EACF,CAAC;AAED,SAAO;AAAA,IACL,GAAG;AAAA,IACH,aAAa,GAAG;AAAA,IAChB,WAAW,GAAG;AAAA,EAChB;AACF;AAeA,eAAsB,cACpB,SACA,SACkC;AAClC,QAAM,EAAE,UAAU,KAAK,IAAI;AAC3B,MAAI,EAAE,OAAO,IAAI;AACjB,QAAM,MAAM,CAAC,QAAgB,QAAQ,OAAO,KAAK,GAAG;AAQpD,MAAI,QAAQ,IAAI,WAAW,GAAG;AAC5B,UAAM,IAAI;AAAA,MACR,gDAAgD,QAAQ,IAAI,QAAQ;AAAA,IACtE;AAAA,EACF;AAKA,WAAS,MAAM,yBAAyB,MAAM;AAC9C,MAAI,OAAO,UAAU,QAAQ;AAC3B,QAAI,sBAAsB,OAAO,WAAW,YAAY,OAAO,SAAS,GAAG;AAAA,EAC7E;AAEA,MAAI,aAAa,IAAI,KAAK;AAC1B,QAAM,EAAE,YAAY,IAAI,MAAM,OAAO,oBAAqB;AAC1D,QAAM,WAAW,YAAY,IAAI;AAGjC,QAAM,iBAAiB,MAAM,SAAS,OAAO,MAAM;AACnD,MAAI,+BAA+B,eAAe,SAAS,EAAE;AAW7D,QAAM,SAAkC;AAAA,IACtC,GAAG;AAAA,IACH,cAAc,OAAO,UAAU,SAAS,OAAO,cAAc;AAAA,IAC7D,OAAO,OAAO;AAAA,EAChB;AAIA,QAAM,SAAS,oBAAoB,QAAQ,UAAU,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,QAAiB;AACvF,QAAI,0BAA0B,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC,EAAE;AAAA,EAClF,CAAC;AAED,SAAO;AACT;",
-  "names": []
-}