@rulemetric/cli 0.7.3 → 0.7.4

package/dist/commands/hooks/install.js

@@ -1,442 +1 @@
-import {
-  detectTmux
-} from "../../chunk-BO76WKJR.js";
-import {
-  RULEMETRIC_NO_PROXY,
-  claudeSettingsInstallPath,
-  installMacOSProxyEnv,
-  mergeClaudeCodeHooks,
-  migrateSharedClaudeSettings,
-  readClaudeSettings,
-  removeClaudeCodeHooks,
-  writeAntigravityHooks,
-  writeAntigravityUserHooks,
-  writeClaudeSettingsWithBackup,
-  writeCopilotHooks,
-  writeCursorHooks,
-  writeCursorProxyConfig,
-  writeCursorUserHooks,
-  writeCursorUserProxyConfig,
-  writeVSCodeProxyConfig,
-  writeVSCodeUserProxyConfig
-} from "../../chunk-LXKPNATC.js";
-import {
-  STATUSLINE_SETTINGS_VALUE,
-  STATUSLINE_SHIM_PATH,
-  isStatuslineShimInstalled,
-  readCurrentStatusLine,
-  writeStatuslineShim
-} from "../../chunk-OQBBVTDG.js";
-import "../../chunk-KRBQLMOP.js";
-import {
-  findBinary
-} from "../../chunk-42GFSAJP.js";
-import {
-  GATEWAY_PORT,
-  isGatewayRunning,
-  isRulemetricGatewayListening,
-  spawnGateway,
-  stopGateway,
-  waitForRulemetricGateway
-} from "../../chunk-4LYCDS2N.js";
-import {
-  describePortOwner
-} from "../../chunk-7LVVKQMZ.js";
-import "../../chunk-5EDMGK3W.js";
-import {
-  ensureDeviceApiKey
-} from "../../chunk-EJ3YAFDP.js";
-import {
-  BaseCommand
-} from "../../chunk-2HK7RGZB.js";
-import "../../chunk-R56PH7YE.js";
-import {
-  emitSetupEvent
-} from "../../chunk-GQNJO2P2.js";
-import {
-  bootstrapActiveOrg
-} from "../../chunk-37LN5O7M.js";
-import "../../chunk-EKJ2CABV.js";
-import "../../chunk-ZUJBM6HE.js";
-import {
-  loadEnvFileAuth
-} from "../../chunk-W2YERO7E.js";
-import "../../chunk-NSBPE2FW.js";
-
-// src/commands/hooks/install.ts
-import { Flags } from "@oclif/core";
-import { execFileSync, spawnSync } from "node:child_process";
-import { existsSync } from "node:fs";
-import { homedir } from "node:os";
-import { join, dirname } from "node:path";
-function resolveHookBinDir() {
-  try {
-    const out = execFileSync("/bin/sh", ["-c", "command -v rulemetric"], {
-      encoding: "utf-8"
-    }).trim();
-    if (out && existsSync(out)) return dirname(out);
-  } catch {
-  }
-  return void 0;
-}
-function isGatewayLaunchdManaged() {
-  try {
-    execFileSync("launchctl", ["list", "com.rulemetric.gateway"], {
-      stdio: ["ignore", "pipe", "pipe"]
-    });
-    return true;
-  } catch {
-    return false;
-  }
-}
-var CERT_PATH = join(homedir(), ".mitmproxy", "mitmproxy-ca-cert.pem");
-var HooksInstall = class _HooksInstall extends BaseCommand {
-  static description = "Install session tracking hooks and context capture proxy for Claude Code";
-  static examples = [
-    "<%= config.bin %> hooks install",
-    "<%= config.bin %> hooks install --global",
-    "<%= config.bin %> hooks install --no-proxy"
-  ];
-  static flags = {
-    "no-proxy": Flags.boolean({
-      default: false,
-      description: "Skip proxy/gateway configuration (hooks only)"
-    }),
-    "project-dir": Flags.string({
-      description: "Project directory to install hooks in (defaults to cwd)"
-    }),
-    global: Flags.boolean({
-      char: "g",
-      default: false,
-      description: "Install hooks globally (~/.claude/settings.json) so all projects are tracked"
-    }),
-    "statusline-usage": Flags.boolean({
-      default: false,
-      description: "Install the statusline shim so Claude Code pushes live rate_limits on every refresh (makes /usage rings update in real time without needing the proxy)"
-    })
-  };
-  async run() {
-    const { flags } = await this.parse(_HooksInstall);
-    const isGlobal = flags.global;
-    const projectPath = isGlobal ? homedir() : flags["project-dir"] ?? process.cwd();
-    const configDir = join(projectPath, ".claude");
-    const configPath = claudeSettingsInstallPath(configDir, isGlobal);
-    const settingsFileName = isGlobal ? "settings.json" : "settings.local.json";
-    const noProxy = flags["no-proxy"];
-    let proxyActive = false;
-    let proxyReason = noProxy ? "no_proxy_flag" : void 0;
-    let caTrusted = false;
-    let pkgManagers = [];
-    if (isGlobal) {
-      this.log(`Installing hooks globally \u2192 ${configPath}`);
-    }
-    const { settings, recoveredBackup } = readClaudeSettings(configPath);
-    if (recoveredBackup) {
-      this.log(`[!!] ${configPath} was not valid JSON \u2014 backed it up to ${recoveredBackup} and continued with a fresh file.`);
-    }
-    if (!isGlobal) {
-      const migration = migrateSharedClaudeSettings(join(configDir, "settings.json"), GATEWAY_PORT);
-      if (migration.migrated) {
-        this.log("[OK] Moved RuleMetric machine-local state out of the shared .claude/settings.json (it now lives in .claude/settings.local.json)");
-        if (migration.backupPath) {
-          this.log(`     Previous shared settings backed up \u2192 ${migration.backupPath}`);
-        }
-        if (migration.removedStatusline && existsSync(STATUSLINE_SHIM_PATH) && !isStatuslineShimInstalled(settings)) {
-          settings.statusLine = STATUSLINE_SETTINGS_VALUE;
-        }
-      }
-    }
-    const envAuth = loadEnvFileAuth();
-    if ((envAuth.accessToken || process.env.RULEMETRIC_ACCESS_TOKEN) && !envAuth.apiKey && !process.env.RULEMETRIC_API_KEY) {
-      await ensureDeviceApiKey(this.log.bind(this), this.warn.bind(this), this.config.version);
-    }
-    const refreshedHooks = removeClaudeCodeHooks(settings);
-    const hookBinDir = resolveHookBinDir();
-    mergeClaudeCodeHooks(settings, hookBinDir);
-    this.log(
-      refreshedHooks ? `[OK] Refreshed RuleMetric Claude Code session hooks \u2192 .claude/${settingsFileName}` : `[OK] Installed RuleMetric Claude Code session hooks \u2192 .claude/${settingsFileName}`
-    );
-    if (!noProxy) {
-      let mitmAvailable = Boolean(findBinary("mitmdump"));
-      if (!mitmAvailable) {
-        this.log("");
-        this.log("[!!] mitmproxy not found \u2014 installing...");
-        pkgManagers = ["brew", "pipx", "uv"].filter((m) => Boolean(findBinary(m)));
-        mitmAvailable = this.installMitmproxy();
-        if (!mitmAvailable) {
-          this.log("[!!] Could not install mitmproxy. Skipping proxy config.");
-          this.log("     Install manually: pipx install mitmproxy");
-          this.log("     Then re-run: rulemetric hooks install");
-        }
-      }
-      if (!existsSync(CERT_PATH)) {
-        this.log("[..] Generating CA certificate...");
-        const mitmdump = findBinary("mitmdump");
-        if (mitmdump) {
-          spawnSync(mitmdump, ["--set", "listen_port=0", "-q"], {
-            timeout: 5e3,
-            stdio: "ignore"
-          });
-          if (existsSync(CERT_PATH)) {
-            this.log(`[OK] CA certificate generated at ${CERT_PATH}`);
-          } else {
-            this.log("[!!] Could not generate CA cert");
-          }
-        }
-      } else {
-        this.log("[OK] CA certificate found");
-      }
-      const caGenerated = existsSync(CERT_PATH);
-      if (caGenerated && !this.isCACertTrusted()) {
-        this.log("[..] Installing CA certificate into system trust store (requires admin)...");
-        caTrusted = this.trustCACert();
-        if (caTrusted) {
-          this.log("[OK] CA certificate trusted by system");
-        } else {
-          this.log("[!!] Could not install CA cert automatically.");
-          if (process.platform === "darwin") {
-            this.log(`     Run manually: sudo security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain ${CERT_PATH}`);
-          } else if (process.platform === "linux") {
-            this.log(`     Run manually: sudo cp ${CERT_PATH} /usr/local/share/ca-certificates/mitmproxy-ca.crt && sudo update-ca-certificates`);
-          }
-        }
-      } else if (caGenerated) {
-        this.log("[OK] CA certificate already trusted");
-        caTrusted = true;
-      }
-      const launchdManaged = isGatewayLaunchdManaged();
-      const portIdentity = await isRulemetricGatewayListening(GATEWAY_PORT);
-      if (launchdManaged) {
-        this.log("[OK] Gateway managed by launchd (com.rulemetric.gateway)");
-      } else if (portIdentity.status === "ours-live") {
-        this.log("[OK] Gateway already running");
-      } else if (portIdentity.status === "foreign" && isGatewayRunning()) {
-        this.log("[..] Restarting gateway (running build predates the identity handshake)...");
-        stopGateway();
-        await new Promise((resolve) => setTimeout(resolve, 500));
-        try {
-          const pid = spawnGateway(this.config.version);
-          this.log(`[OK] Gateway restarted (PID ${pid})`);
-        } catch (err) {
-          this.log(`[!!] Could not restart gateway: ${err.message}`);
-        }
-      } else if (portIdentity.status === "foreign") {
-      } else {
-        try {
-          const pid = spawnGateway(this.config.version);
-          this.log(`[OK] Gateway started (PID ${pid})`);
-        } catch (err) {
-          this.log(`[!!] Could not start gateway: ${err.message}`);
-        }
-      }
-      const gatewayIdentity = await waitForRulemetricGateway(GATEWAY_PORT, { timeoutMs: 4e3 });
-      if (!caGenerated) {
-        proxyReason = mitmAvailable ? "ca_not_generated" : pkgManagers.length === 0 ? "no_package_manager" : "mitmproxy_install_failed";
-        this.log("[!!] No CA certificate \u2014 NOT setting HTTPS_PROXY (capture stays hooks-only).");
-        this.log("     Install mitmproxy, then re-run: rulemetric hooks install");
-      } else if (gatewayIdentity.status === "foreign" && !launchdManaged) {
-        proxyReason = "gateway_port_foreign";
-        const owner = describePortOwner(GATEWAY_PORT);
-        this.log(`[!!] Port :${GATEWAY_PORT} is held by a process that is NOT the RuleMetric gateway \u2014 NOT setting HTTPS_PROXY.`);
-        this.log(
-          owner ? `     Holding the port: ${owner}` : `     Could not identify the holder (try: lsof -nP -iTCP:${GATEWAY_PORT} -sTCP:LISTEN)`
-        );
-        this.log("     Capture still works via hooks. Free the port, then re-run: rulemetric hooks install");
-      } else if (gatewayIdentity.status === "dead") {
-        proxyReason = "gateway_not_live";
-        this.log(`[!!] Gateway is not answering on :${GATEWAY_PORT} \u2014 NOT setting HTTPS_PROXY.`);
-        this.log("     Capture still works via hooks. To enable deep (proxy) capture later:");
-        this.log("     rulemetric proxy start  &&  rulemetric hooks install");
-      } else {
-        const env = settings.env ?? {};
-        env.HTTPS_PROXY = `http://localhost:${GATEWAY_PORT}`;
-        env.NO_PROXY = RULEMETRIC_NO_PROXY;
-        if (existsSync(CERT_PATH)) {
-          env.NODE_EXTRA_CA_CERTS = CERT_PATH;
-        }
-        settings.env = env;
-        proxyActive = true;
-        this.log(`[OK] HTTPS_PROXY set to gateway on :${GATEWAY_PORT} (verified live)`);
-        const cursorProxy = writeCursorProxyConfig(projectPath, GATEWAY_PORT, CERT_PATH);
-        if (cursorProxy) {
-          this.log("[OK] Cursor proxy configured \u2192 .cursor/settings.json");
-        }
-        const vscodeProxy = writeVSCodeProxyConfig(projectPath, GATEWAY_PORT, CERT_PATH);
-        if (vscodeProxy) {
-          this.log("[OK] VS Code workspace proxy configured \u2192 .vscode/settings.json");
-        }
-        const vscodeUserProxy = writeVSCodeUserProxyConfig(GATEWAY_PORT);
-        if (vscodeUserProxy) {
-          this.log("[OK] VS Code user proxy configured \u2192 ~/Library/Application Support/Code/User/settings.json");
-        }
-        const cursorUserProxy = writeCursorUserProxyConfig(GATEWAY_PORT);
-        if (cursorUserProxy) {
-          this.log("[OK] Cursor user proxy configured \u2192 ~/Library/Application Support/Cursor/User/settings.json");
-        }
-        if (caTrusted) {
-          const macProxy = installMacOSProxyEnv(GATEWAY_PORT, CERT_PATH);
-          if (macProxy) {
-            this.log("[OK] HTTPS_PROXY set for GUI apps (launchctl + LaunchAgent)");
-          }
-        } else {
-          proxyReason = "ca_untrusted";
-          this.log("[!!] CA not trusted \u2014 skipping machine-wide GUI proxy (would break native-app TLS).");
-          this.log("     Claude Code capture is unaffected. Trust the CA + re-run to enable cross-app capture.");
-        }
-      }
-    }
-    if (!isGlobal) {
-      const cursorHooks = writeCursorHooks(projectPath, hookBinDir);
-      if (cursorHooks) {
-        this.log(`[OK] Cursor hooks configured \u2192 ${cursorHooks}`);
-      }
-      const copilotHooks = writeCopilotHooks(projectPath, hookBinDir);
-      if (copilotHooks) {
-        this.log(`[OK] Copilot Agent hooks configured \u2192 ${copilotHooks}`);
-      }
-      const antigravityHooks = writeAntigravityHooks(projectPath);
-      if (antigravityHooks) {
-        this.log(`[OK] Antigravity workspace hooks configured \u2192 ${antigravityHooks}`);
-      }
-    }
-    const antigravityUserHooks = writeAntigravityUserHooks();
-    if (antigravityUserHooks) {
-      this.log(`[OK] Antigravity user hooks configured \u2192 ${antigravityUserHooks}`);
-    }
-    const cursorUserHooks = writeCursorUserHooks(hookBinDir);
-    if (cursorUserHooks) {
-      this.log(`[OK] Cursor user hooks configured \u2192 ${cursorUserHooks}`);
-    }
-    if (flags["statusline-usage"]) {
-      if (isStatuslineShimInstalled(settings)) {
-        this.log("[OK] Statusline shim already installed");
-      } else {
-        const prevCmd = readCurrentStatusLine(settings);
-        writeStatuslineShim(prevCmd);
-        settings.statusLine = STATUSLINE_SETTINGS_VALUE;
-        if (prevCmd) {
-          this.log(`[OK] Statusline shim installed \u2192 ${STATUSLINE_SETTINGS_VALUE.command} (chains to: ${prevCmd})`);
-        } else {
-          this.log(`[OK] Statusline shim installed \u2192 ${STATUSLINE_SETTINGS_VALUE.command}`);
-        }
-        this.log("     Rate-limit rings will now update on Claude Code's statusline refresh cadence");
-      }
-    }
-    const { backupPath } = writeClaudeSettingsWithBackup(configPath, settings);
-    if (backupPath) {
-      this.log(`[OK] Backed up previous settings \u2192 ${backupPath}`);
-    }
-    this.log("");
-    this.log("Setup complete! Next steps:");
-    if (isGlobal) {
-      this.log("  1. Install always-on API:    rulemetric service install");
-      this.log("  2. Start Claude Code in any project \u2014 all sessions tracked automatically");
-      this.log("");
-      this.log("The API service starts on login and restarts on crash.");
-    } else if (!noProxy) {
-      this.log("  1. Start Claude Code \u2014 sessions are captured by hooks immediately");
-      if (proxyActive) {
-        this.log("  2. Full-depth capture is ON \u2014 the proxy is live on :" + GATEWAY_PORT + ".");
-      } else {
-        this.log("  2. Enable full depth (proxy not yet live):  rulemetric proxy start");
-      }
-      this.log("");
-      this.log("Hooks capture every session (lifecycle + transcript). The proxy adds the");
-      this.log("rendered system prompt (instruction-effectiveness linking) + cross-tool capture.");
-      this.log("");
-      this.log("To capture traffic from other clients (Python, curl, etc.):");
-      this.log('  eval "$(rulemetric proxy env --all)"');
-    } else {
-      this.log("  1. Start Claude Code \u2014 sessions are captured by the hooks just installed");
-      this.log("");
-      this.log("No proxy means no mitmproxy / CA cert needed. The hooks capture full");
-      this.log("sessions on their own; re-run without --no-proxy to also capture system");
-      this.log("prompts for instruction-effectiveness linking.");
-    }
-    await bootstrapActiveOrg();
-    void emitSetupEvent(
-      "hooks_installed",
-      { proxy: proxyActive, caTrusted, reason: proxyReason, installers: pkgManagers, global: isGlobal },
-      this.config.version
-    );
-    const tmux = await detectTmux();
-    this.log("");
-    if (tmux.available) {
-      this.log(`[OK] tmux found${tmux.version ? ` (v${tmux.version})` : ""} \u2014 live send enabled`);
-    } else {
-      this.log("[!!] tmux not found \u2014 live send will fall back to opening Terminal. Install with: brew install tmux");
-    }
-  }
-  installMitmproxy() {
-    for (const [cmd, args] of [
-      ["pipx", ["install", "mitmproxy"]],
-      ["uv", ["tool", "install", "mitmproxy"]],
-      ["brew", ["install", "mitmproxy"]]
-    ]) {
-      const bin = findBinary(cmd);
-      if (bin) {
-        this.log(`     Installing via ${cmd}...`);
-        const result = spawnSync(bin, [...args], { stdio: "inherit" });
-        if (result.status === 0) return true;
-      }
-    }
-    return false;
-  }
-  isCACertTrusted() {
-    if (process.platform === "darwin") {
-      const result = spawnSync("security", ["verify-cert", "-c", CERT_PATH], {
-        stdio: "pipe"
-      });
-      return result.status === 0;
-    }
-    if (process.platform === "linux") {
-      return existsSync("/usr/local/share/ca-certificates/mitmproxy-ca.crt");
-    }
-    if (process.platform === "win32") {
-      const result = spawnSync("certutil", ["-verify", CERT_PATH], {
-        stdio: "pipe"
-      });
-      return result.status === 0;
-    }
-    return false;
-  }
-  trustCACert() {
-    if (process.platform === "darwin") {
-      const result = spawnSync("sudo", [
-        "security",
-        "add-trusted-cert",
-        "-d",
-        "-r",
-        "trustRoot",
-        "-k",
-        "/Library/Keychains/System.keychain",
-        CERT_PATH
-      ], { stdio: "inherit" });
-      return result.status === 0;
-    }
-    if (process.platform === "linux") {
-      const cp = spawnSync("sudo", [
-        "cp",
-        CERT_PATH,
-        "/usr/local/share/ca-certificates/mitmproxy-ca.crt"
-      ], { stdio: "inherit" });
-      if (cp.status !== 0) return false;
-      const update = spawnSync("sudo", ["update-ca-certificates"], { stdio: "inherit" });
-      return update.status === 0;
-    }
-    if (process.platform === "win32") {
-      const result = spawnSync("certutil", [
-        "-addstore",
-        "-f",
-        "Root",
-        CERT_PATH
-      ], { stdio: "inherit" });
-      return result.status === 0;
-    }
-    return false;
-  }
-};
-export {
-  HooksInstall as default
-};
-//# sourceMappingURL=install.js.map
+import{a as pt}from"../../chunk-6XEC6474.js";import{B as ut,E as dt,H as gt,I as ht,e as z,f as Q,g as Z,i as tt,j as et,k as st,n as ot,p as it,q as rt,r as at,u as nt,v as lt,y as ct}from"../../chunk-O7ZMHCMG.js";import{a as q,b as W,c as m,d as J,g as A}from"../../chunk-I2DZGJRR.js";import"../../chunk-N7ODX6PO.js";import{a as f}from"../../chunk-67QCYUJU.js";import{c as s,g as X,h as D,i as F,k as O,l as V}from"../../chunk-MVM6OGAF.js";import{e as B}from"../../chunk-KKDHD4XA.js";import"../../chunk-SZ62CP55.js";import{a as Y}from"../../chunk-AHRHCERJ.js";import{a as M}from"../../chunk-LQRYQE6Q.js";import"../../chunk-IZTIYR5Q.js";import{c as N}from"../../chunk-CRAKDQ4H.js";import{b as L}from"../../chunk-WPJ2BND4.js";import"../../chunk-3AV3GTMP.js";import"../../chunk-TIQ7DQ3M.js";import{a as G}from"../../chunk-M6AJDVCL.js";import{a as v}from"../../chunk-ZLLER3HP.js";import{Flags as w}from"@oclif/core";import{execFileSync as ft,spawnSync as l}from"node:child_process";import{existsSync as c}from"node:fs";import{homedir as mt}from"node:os";import{join as _,dirname as Ct}from"node:path";function vt(){try{let d=ft("/bin/sh",["-c","command -v rulemetric"],{encoding:"utf-8"}).trim();if(d&&c(d))return Ct(d)}catch{}}v(vt,"resolveHookBinDir");function wt(){try{return ft("launchctl",["list","com.rulemetric.gateway"],{stdio:["ignore","pipe","pipe"]}),!0}catch{return!1}}v(wt,"isGatewayLaunchdManaged");var o=_(mt(),".mitmproxy","mitmproxy-ca-cert.pem"),R=class d extends M{static{v(this,"HooksInstall")}static description="Install session tracking hooks and context capture proxy for Claude Code";static examples=["<%= config.bin %> hooks install","<%= config.bin %> hooks install --global","<%= config.bin %> hooks install --no-proxy"];static flags={"no-proxy":w.boolean({default:!1,description:"Skip proxy/gateway configuration (hooks only)"}),"project-dir":w.string({description:"Project directory to install hooks in (defaults to cwd)"}),global:w.boolean({char:"g",default:!1,description:"Install hooks globally (~/.claude/settings.json) so all projects are tracked"}),"statusline-usage":w.boolean({default:!1,description:"Install the statusline shim so Claude Code pushes live rate_limits on every refresh (makes /usage rings update in real time without needing the proxy)"})};async run(){let{flags:i}=await this.parse(d),r=i.global,n=r?mt():i["project-dir"]??process.cwd(),x=_(n,".claude"),y=st(x,r),K=r?"settings.json":"settings.local.json",k=i["no-proxy"],P=!1,g=k?"no_proxy_flag":void 0,h=!1,S=[];r&&this.log(`Installing hooks globally \u2192 ${y}`);let{settings:a,recoveredBackup:$}=z(y);if($&&this.log(`[!!] ${y} was not valid JSON \u2014 backed it up to ${$} and continued with a fresh file.`),!r){let e=ot(_(x,"settings.json"),s);e.migrated&&(this.log("[OK] Moved RuleMetric machine-local state out of the shared .claude/settings.json (it now lives in .claude/settings.local.json)"),e.backupPath&&this.log(`     Previous shared settings backed up \u2192 ${e.backupPath}`),e.removedStatusline&&c(q)&&!A(a)&&(a.statusLine=m))}let I=G();(I.accessToken||process.env.RULEMETRIC_ACCESS_TOKEN)&&!I.apiKey&&!process.env.RULEMETRIC_API_KEY&&await Y(this.log.bind(this),this.warn.bind(this),this.config.version);let yt=tt(a),C=vt();if(Z(a,C),this.log(yt?`[OK] Refreshed RuleMetric Claude Code session hooks \u2192 .claude/${K}`:`[OK] Installed RuleMetric Claude Code session hooks \u2192 .claude/${K}`),!k){let e=!!f("mitmdump");if(e||(this.log(""),this.log("[!!] mitmproxy not found \u2014 installing..."),S=["brew","pipx","uv"].filter(t=>!!f(t)),e=this.installMitmproxy(),e||(this.log("[!!] Could not install mitmproxy. Skipping proxy config."),this.log("     Install manually: pipx install mitmproxy"),this.log("     Then re-run: rulemetric hooks install"))),c(o))this.log("[OK] CA certificate found");else{this.log("[..] Generating CA certificate...");let t=f("mitmdump");t&&(l(t,["--set","listen_port=0","-q"],{timeout:5e3,stdio:"ignore"}),c(o)?this.log(`[OK] CA certificate generated at ${o}`):this.log("[!!] Could not generate CA cert"))}let u=c(o);u&&!this.isCACertTrusted()?(this.log("[..] Installing CA certificate into system trust store (requires admin)..."),h=this.trustCACert(),h?this.log("[OK] CA certificate trusted by system"):(this.log("[!!] Could not install CA cert automatically."),process.platform==="darwin"?this.log(`     Run manually: sudo security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain ${o}`):process.platform==="linux"&&this.log(`     Run manually: sudo cp ${o} /usr/local/share/ca-certificates/mitmproxy-ca.crt && sudo update-ca-certificates`))):u&&(this.log("[OK] CA certificate already trusted"),h=!0);let p=wt(),b=await X(s);if(p)this.log("[OK] Gateway managed by launchd (com.rulemetric.gateway)");else if(b.status==="ours-live")this.log("[OK] Gateway already running");else if(b.status==="foreign"&&F()){this.log("[..] Restarting gateway (running build predates the identity handshake)..."),V(),await new Promise(t=>setTimeout(t,500));try{let t=O(this.config.version);this.log(`[OK] Gateway restarted (PID ${t})`)}catch(t){this.log(`[!!] Could not restart gateway: ${t.message}`)}}else if(b.status!=="foreign")try{let t=O(this.config.version);this.log(`[OK] Gateway started (PID ${t})`)}catch(t){this.log(`[!!] Could not start gateway: ${t.message}`)}let j=await D(s,{timeoutMs:4e3});if(!u)g=e?"ca_not_generated":S.length===0?"no_package_manager":"mitmproxy_install_failed",this.log("[!!] No CA certificate \u2014 NOT setting HTTPS_PROXY (capture stays hooks-only)."),this.log("     Install mitmproxy, then re-run: rulemetric hooks install");else if(j.status==="foreign"&&!p){g="gateway_port_foreign";let t=B(s);this.log(`[!!] Port :${s} is held by a process that is NOT the RuleMetric gateway \u2014 NOT setting HTTPS_PROXY.`),this.log(t?`     Holding the port: ${t}`:`     Could not identify the holder (try: lsof -nP -iTCP:${s} -sTCP:LISTEN)`),this.log("     Capture still works via hooks. Free the port, then re-run: rulemetric hooks install")}else if(j.status==="dead")g="gateway_not_live",this.log(`[!!] Gateway is not answering on :${s} \u2014 NOT setting HTTPS_PROXY.`),this.log("     Capture still works via hooks. To enable deep (proxy) capture later:"),this.log("     rulemetric proxy start  &&  rulemetric hooks install");else{let t=a.env??{};t.HTTPS_PROXY=`http://localhost:${s}`,t.NO_PROXY=et,c(o)&&(t.NODE_EXTRA_CA_CERTS=o),a.env=t,P=!0,this.log(`[OK] HTTPS_PROXY set to gateway on :${s} (verified live)`),nt(n,s,o)&&this.log("[OK] Cursor proxy configured \u2192 .cursor/settings.json"),lt(n,s,o)&&this.log("[OK] VS Code workspace proxy configured \u2192 .vscode/settings.json"),ut(s)&&this.log("[OK] VS Code user proxy configured \u2192 ~/Library/Application Support/Code/User/settings.json"),dt(s)&&this.log("[OK] Cursor user proxy configured \u2192 ~/Library/Application Support/Cursor/User/settings.json"),h?ct(s,o)&&this.log("[OK] HTTPS_PROXY set for GUI apps (launchctl + LaunchAgent)"):(g="ca_untrusted",this.log("[!!] CA not trusted \u2014 skipping machine-wide GUI proxy (would break native-app TLS)."),this.log("     Claude Code capture is unaffected. Trust the CA + re-run to enable cross-app capture."))}}if(!r){let e=it(n,C);e&&this.log(`[OK] Cursor hooks configured \u2192 ${e}`);let u=at(n,C);u&&this.log(`[OK] Copilot Agent hooks configured \u2192 ${u}`);let p=gt(n);p&&this.log(`[OK] Antigravity workspace hooks configured \u2192 ${p}`)}let E=ht();E&&this.log(`[OK] Antigravity user hooks configured \u2192 ${E}`);let H=rt(C);if(H&&this.log(`[OK] Cursor user hooks configured \u2192 ${H}`),i["statusline-usage"])if(A(a))this.log("[OK] Statusline shim already installed");else{let e=J(a);W(e),a.statusLine=m,e?this.log(`[OK] Statusline shim installed \u2192 ${m.command} (chains to: ${e})`):this.log(`[OK] Statusline shim installed \u2192 ${m.command}`),this.log("     Rate-limit rings will now update on Claude Code's statusline refresh cadence")}let{backupPath:U}=Q(y,a);U&&this.log(`[OK] Backed up previous settings \u2192 ${U}`),this.log(""),this.log("Setup complete! Next steps:"),r?(this.log("  1. Install always-on API:    rulemetric service install"),this.log("  2. Start Claude Code in any project \u2014 all sessions tracked automatically"),this.log(""),this.log("The API service starts on login and restarts on crash.")):k?(this.log("  1. Start Claude Code \u2014 sessions are captured by the hooks just installed"),this.log(""),this.log("No proxy means no mitmproxy / CA cert needed. The hooks capture full"),this.log("sessions on their own; re-run without --no-proxy to also capture system"),this.log("prompts for instruction-effectiveness linking.")):(this.log("  1. Start Claude Code \u2014 sessions are captured by hooks immediately"),P?this.log("  2. Full-depth capture is ON \u2014 the proxy is live on :"+s+"."):this.log("  2. Enable full depth (proxy not yet live):  rulemetric proxy start"),this.log(""),this.log("Hooks capture every session (lifecycle + transcript). The proxy adds the"),this.log("rendered system prompt (instruction-effectiveness linking) + cross-tool capture."),this.log(""),this.log("To capture traffic from other clients (Python, curl, etc.):"),this.log('  eval "$(rulemetric proxy env --all)"')),await L(),N("hooks_installed",{proxy:P,caTrusted:h,reason:g,installers:S,global:r},this.config.version);let T=await pt();this.log(""),T.available?this.log(`[OK] tmux found${T.version?` (v${T.version})`:""} \u2014 live send enabled`):this.log("[!!] tmux not found \u2014 live send will fall back to opening Terminal. Install with: brew install tmux")}installMitmproxy(){for(let[i,r]of[["pipx",["install","mitmproxy"]],["uv",["tool","install","mitmproxy"]],["brew",["install","mitmproxy"]]]){let n=f(i);if(n&&(this.log(`     Installing via ${i}...`),l(n,[...r],{stdio:"inherit"}).status===0))return!0}return!1}isCACertTrusted(){return process.platform==="darwin"?l("security",["verify-cert","-c",o],{stdio:"pipe"}).status===0:process.platform==="linux"?c("/usr/local/share/ca-certificates/mitmproxy-ca.crt"):process.platform==="win32"?l("certutil",["-verify",o],{stdio:"pipe"}).status===0:!1}trustCACert(){return process.platform==="darwin"?l("sudo",["security","add-trusted-cert","-d","-r","trustRoot","-k","/Library/Keychains/System.keychain",o],{stdio:"inherit"}).status===0:process.platform==="linux"?l("sudo",["cp",o,"/usr/local/share/ca-certificates/mitmproxy-ca.crt"],{stdio:"inherit"}).status!==0?!1:l("sudo",["update-ca-certificates"],{stdio:"inherit"}).status===0:process.platform==="win32"?l("certutil",["-addstore","-f","Root",o],{stdio:"inherit"}).status===0:!1}};export{R as default};

package/dist/commands/hooks/run.js

@@ -1,81 +1,3 @@
-import {
-  BaseCommand
-} from "../../chunk-2HK7RGZB.js";
-import "../../chunk-R56PH7YE.js";
-import "../../chunk-GQNJO2P2.js";
-import "../../chunk-37LN5O7M.js";
-import "../../chunk-EKJ2CABV.js";
-import "../../chunk-ZUJBM6HE.js";
-import "../../chunk-W2YERO7E.js";
-import "../../chunk-NSBPE2FW.js";
-
-// src/commands/hooks/run.ts
-import { Args } from "@oclif/core";
-import { execFileSync } from "node:child_process";
-import { existsSync } from "node:fs";
-import { join, delimiter } from "node:path";
-var VALID_HOOKS = ["session-start", "session-end", "user-prompt", "post-tool-use", "assistant-response"];
-var HooksRun = class _HooksRun extends BaseCommand {
-  static description = "Execute a hook script (called by AI tool hooks, not for direct use)";
-  static hidden = true;
-  static args = {
-    hook: Args.string({
-      description: "Hook name to run",
-      required: true,
-      options: [...VALID_HOOKS]
-    })
-  };
-  async run() {
-    const { args } = await this.parse(_HooksRun);
-    const hookName = args.hook;
-    const { scriptsDir } = await import("@rulemetric/hooks/scripts-dir");
-    const scriptPath = join(scriptsDir, `${hookName}.sh`);
-    if (!existsSync(scriptPath)) {
-      this.error(`Hook script not found: ${scriptPath}`);
-    }
-    try {
-      const stdin = await this.readStdin();
-      const augmentedPath = `${process.env.PATH ?? ""}${delimiter}${scriptsDir}`;
-      const timeout = hookName === "session-end" ? 3e4 : 1e4;
-      execFileSync("bash", [scriptPath], {
-        input: stdin,
-        stdio: ["pipe", "inherit", "inherit"],
-        timeout,
-        env: { ...process.env, PATH: augmentedPath }
-      });
-      if (process.env.RULEMETRIC_HOOK_TOOL === "antigravity" && hookName === "post-tool-use") {
-        try {
-          const { tailAntigravityTranscript } = await import("../../lib/antigravity-transcript.js");
-          await tailAntigravityTranscript(stdin);
-        } catch (err) {
-          process.stderr.write(
-            `[antigravity-tailer] ${err.message}
-`
-          );
-        }
-      }
-    } catch (error) {
-      const code = error.status;
-      if (process.env.RULEMETRIC_HOOK_DEBUG) {
-        process.stderr.write(
-          `[rulemetric hooks run ${hookName}] non-fatal exit ${code ?? "?"}: ${error.message ?? ""}
-`
-        );
-      }
-    }
-  }
-  readStdin() {
-    return new Promise((resolve) => {
-      const chunks = [];
-      process.stdin.on("data", (chunk) => chunks.push(chunk));
-      process.stdin.on("end", () => resolve(Buffer.concat(chunks).toString("utf-8")));
-      if (process.stdin.readableEnded) {
-        resolve(Buffer.concat(chunks).toString("utf-8"));
-      }
-    });
-  }
-};
-export {
-  HooksRun as default
-};
-//# sourceMappingURL=run.js.map
+import{a as d}from"../../chunk-LQRYQE6Q.js";import"../../chunk-IZTIYR5Q.js";import"../../chunk-CRAKDQ4H.js";import"../../chunk-WPJ2BND4.js";import"../../chunk-3AV3GTMP.js";import"../../chunk-TIQ7DQ3M.js";import"../../chunk-M6AJDVCL.js";import{a as c}from"../../chunk-ZLLER3HP.js";import{Args as m}from"@oclif/core";import{execFileSync as u}from"node:child_process";import{existsSync as f}from"node:fs";import{join as h,delimiter as g}from"node:path";var l=["session-start","session-end","user-prompt","post-tool-use","assistant-response"],a=class p extends d{static{c(this,"HooksRun")}static description="Execute a hook script (called by AI tool hooks, not for direct use)";static hidden=!0;static args={hook:m.string({description:"Hook name to run",required:!0,options:[...l]})};async run(){let{args:r}=await this.parse(p),t=r.hook,{scriptsDir:e}=await import("@rulemetric/hooks/scripts-dir"),o=h(e,`${t}.sh`);f(o)||this.error(`Hook script not found: ${o}`);try{let s=await this.readStdin(),i=`${process.env.PATH??""}${g}${e}`;if(u("bash",[o],{input:s,stdio:["pipe","inherit","inherit"],timeout:t==="session-end"?3e4:1e4,env:{...process.env,PATH:i}}),process.env.RULEMETRIC_HOOK_TOOL==="antigravity"&&t==="post-tool-use")try{let{tailAntigravityTranscript:n}=await import("../../lib/antigravity-transcript.js");await n(s)}catch(n){process.stderr.write(`[antigravity-tailer] ${n.message}
+`)}}catch(s){let i=s.status;process.env.RULEMETRIC_HOOK_DEBUG&&process.stderr.write(`[rulemetric hooks run ${t}] non-fatal exit ${i??"?"}: ${s.message??""}
+`)}}readStdin(){return new Promise(r=>{let t=[];process.stdin.on("data",e=>t.push(e)),process.stdin.on("end",()=>r(Buffer.concat(t).toString("utf-8"))),process.stdin.readableEnded&&r(Buffer.concat(t).toString("utf-8"))})}};export{a as default};