@rulemetric/cli 0.7.3 → 0.7.5

package/dist/commands/proxy/setup.js

@@ -1,454 +1,17 @@
-import {
-  findBinary
-} from "../../chunk-42GFSAJP.js";
-import {
-  BaseCommand
-} from "../../chunk-2HK7RGZB.js";
-import "../../chunk-R56PH7YE.js";
-import "../../chunk-GQNJO2P2.js";
-import "../../chunk-37LN5O7M.js";
-import "../../chunk-EKJ2CABV.js";
-import "../../chunk-ZUJBM6HE.js";
-import {
-  isAuthenticated
-} from "../../chunk-W2YERO7E.js";
-import "../../chunk-NSBPE2FW.js";
-
-// src/commands/proxy/setup.ts
-import { Flags } from "@oclif/core";
-import { execSync, spawnSync } from "node:child_process";
-import { existsSync, readFileSync, appendFileSync, writeFileSync, mkdirSync } from "node:fs";
-import { homedir } from "node:os";
-import { dirname, join } from "node:path";
-var CERT_PATH = join(homedir(), ".mitmproxy", "mitmproxy-ca-cert.pem");
-var CONFIG_DIR = join(homedir(), ".config", "rulemetric");
-var DEFAULT_PORT = 8787;
-var ProxySetup = class _ProxySetup extends BaseCommand {
-  static description = "Set up context capture proxy (installs mitmproxy, configures shell)";
-  static examples = [
-    "<%= config.bin %> proxy setup",
-    "<%= config.bin %> proxy setup --shell zsh",
-    "<%= config.bin %> proxy setup --check"
-  ];
-  static flags = {
-    shell: Flags.string({
-      description: "Shell to configure (auto-detected if omitted)",
-      options: ["zsh", "bash", "fish", "powershell"]
-    }),
-    port: Flags.integer({
-      char: "p",
-      default: DEFAULT_PORT,
-      description: "Proxy listen port"
-    }),
-    check: Flags.boolean({
-      description: "Only check prerequisites, do not install anything",
-      default: false
-    })
-  };
-  async run() {
-    const { flags } = await this.parse(_ProxySetup);
-    const checkOnly = flags.check;
-    const port = flags.port;
-    this.log("RuleMetric Proxy Setup");
-    this.log("=====================\n");
-    const checks = [
-      await this.checkAuth(),
-      await this.checkMitmproxy(),
-      await this.checkCACert(),
-      await this.checkHooks(),
-      this.checkShellEnv(port)
-    ];
-    let allPassed = true;
-    for (const check of checks) {
-      const icon = check.ok ? "[OK]" : "[!!]";
-      this.log(`${icon} ${check.name}: ${check.message}`);
-      if (!check.ok) allPassed = false;
-    }
-    if (allPassed) {
-      this.log("\nAll checks passed. Run `rulemetric proxy start` to begin capturing.");
-      return;
-    }
-    if (checkOnly) {
-      this.log("\nSome checks failed. Run `rulemetric proxy setup` (without --check) to fix.");
-      return;
-    }
-    this.log("\nFixing issues...\n");
-    for (const check of checks) {
-      if (check.ok || !check.fix) continue;
-      this.log(`Fixing: ${check.name}...`);
-      const fixed = await check.fix();
-      if (fixed) {
-        this.log(`  Fixed.
-`);
-      } else {
-        this.log(`  Could not auto-fix. See instructions above.
-`);
-      }
-    }
-    this.log("---\nVerifying...\n");
-    const reChecks = [
-      await this.checkAuth(),
-      await this.checkMitmproxy(),
-      await this.checkCACert(),
-      await this.checkHooks(),
-      this.checkShellEnv(port)
-    ];
-    let finalOk = true;
-    for (const check of reChecks) {
-      const icon = check.ok ? "[OK]" : "[!!]";
-      this.log(`${icon} ${check.name}: ${check.message}`);
-      if (!check.ok) finalOk = false;
-    }
-    if (finalOk) {
-      this.log("\nSetup complete! Next steps:");
-      this.log("  1. Restart your shell (or run `source ~/.zshrc`)");
-      this.log("  2. Run `rulemetric proxy start`");
-      this.log("  3. Start Claude Code \u2014 context will be captured automatically");
-    } else {
-      this.log("\nSome issues remain. Fix manually and re-run `rulemetric proxy setup --check`.");
-    }
-  }
-  async checkAuth() {
-    if (isAuthenticated()) {
-      return { name: "Authentication", ok: true, message: "Logged in (JWT)" };
-    }
-    const apiKey = process.env.RULEMETRIC_API_KEY;
-    if (apiKey) {
-      return { name: "Authentication", ok: true, message: `API key (RULEMETRIC_API_KEY=${apiKey.slice(0, 8)}...)` };
-    }
-    const envFile = join(homedir(), ".config", "rulemetric", "env");
-    if (existsSync(envFile)) {
-      const content = readFileSync(envFile, "utf-8");
-      if (content.includes("RULEMETRIC_API_KEY") || content.includes("RULEMETRIC_ACCESS_TOKEN")) {
-        return { name: "Authentication", ok: true, message: "Configured via ~/.config/rulemetric/env" };
-      }
-    }
-    return {
-      name: "Authentication",
-      ok: false,
-      message: "Not authenticated",
-      fix: async () => {
-        this.log("  Run `rulemetric auth login` to authenticate.");
-        this.log("  Or set RULEMETRIC_API_KEY in ~/.config/rulemetric/env.");
-        return false;
-      }
-    };
-  }
-  async checkMitmproxy() {
-    const binary = this.findBinary("mitmdump");
-    if (binary) {
-      try {
-        const output = execSync(`${binary} --version 2>&1`, { encoding: "utf-8" });
-        const version = output.match(/Mitmproxy:\s*([\d.]+)/)?.[1] ?? "unknown";
-        return { name: "mitmproxy", ok: true, message: `Installed (v${version})` };
-      } catch {
-        return { name: "mitmproxy", ok: true, message: `Found at ${binary}` };
-      }
-    }
-    return {
-      name: "mitmproxy",
-      ok: false,
-      message: "Not installed",
-      fix: async () => this.installMitmproxy()
-    };
-  }
-  async installMitmproxy() {
-    if (this.findBinary("pipx")) {
-      this.log("  Installing via pipx...");
-      const result = spawnSync("pipx", ["install", "mitmproxy"], { stdio: "inherit" });
-      if (result.status === 0) return true;
-    }
-    if (this.findBinary("uv")) {
-      this.log("  Installing via uv...");
-      const result = spawnSync("uv", ["tool", "install", "mitmproxy"], { stdio: "inherit" });
-      if (result.status === 0) return true;
-    }
-    if (this.findBinary("pip3") || this.findBinary("pip")) {
-      const pip = this.findBinary("pip3") || this.findBinary("pip");
-      this.log(`  Installing via ${pip} --user...`);
-      const result = spawnSync(pip, ["install", "--user", "mitmproxy"], { stdio: "inherit" });
-      if (result.status === 0) return true;
-    }
-    if (this.findBinary("brew")) {
-      this.log("  Installing via brew...");
-      const result = spawnSync("brew", ["install", "mitmproxy"], { stdio: "inherit" });
-      if (result.status === 0) return true;
-    }
-    this.log("  Could not auto-install mitmproxy. Install manually:");
-    this.log("    pipx install mitmproxy     # recommended");
-    this.log("    brew install mitmproxy     # macOS");
-    this.log("    pip install --user mitmproxy");
-    return false;
-  }
-  async checkCACert() {
-    if (existsSync(CERT_PATH)) {
-      return { name: "CA Certificate", ok: true, message: `Found at ${CERT_PATH}` };
-    }
-    return {
-      name: "CA Certificate",
-      ok: false,
-      message: "Not generated yet",
-      fix: async () => this.generateCACert()
-    };
-  }
-  async generateCACert() {
-    const mitmdump = this.findBinary("mitmdump");
-    if (!mitmdump) {
-      this.log("  Cannot generate cert \u2014 mitmproxy not installed.");
-      return false;
-    }
-    this.log("  Generating CA certificate...");
-    const result = spawnSync(mitmdump, ["--set", "listen_port=0", "-q"], {
-      timeout: 5e3,
-      stdio: "ignore"
-    });
-    if (existsSync(CERT_PATH)) {
-      this.log(`  Certificate generated at ${CERT_PATH}`);
-      if (process.platform === "darwin") {
-        this.log("  Adding CA cert to macOS keychain (may require sudo)...");
-        const trustResult = spawnSync("sudo", [
-          "security",
-          "add-trusted-cert",
-          "-d",
-          "-r",
-          "trustRoot",
-          "-k",
-          "/Library/Keychains/System.keychain",
-          CERT_PATH
-        ], { stdio: "inherit" });
-        if (trustResult.status === 0) {
-          this.log("  CA cert trusted system-wide.");
-        } else {
-          this.log("  Could not auto-trust cert. You may need NODE_EXTRA_CA_CERTS env var.");
-        }
-      }
-      return true;
-    }
-    this.log("  Failed to generate cert. Try running: mitmdump --help");
-    return false;
-  }
-  async checkHooks() {
-    let sawSettingsFile = false;
-    for (const fileName of ["settings.local.json", "settings.json"]) {
-      const settingsPath = join(process.cwd(), ".claude", fileName);
-      if (!existsSync(settingsPath)) continue;
-      sawSettingsFile = true;
-      try {
-        const settings = JSON.parse(readFileSync(settingsPath, "utf-8"));
-        const hasHooks = settings.hooks && Object.keys(settings.hooks).length > 0;
-        if (hasHooks) {
-          return { name: "Session Hooks", ok: true, message: "Installed in current project" };
-        }
-      } catch {
-      }
-    }
-    if (!sawSettingsFile) {
-      return {
-        name: "Session Hooks",
-        ok: false,
-        message: "Not installed in current project",
-        fix: async () => {
-          this.log("  Run `rulemetric hooks install` in your project directory.");
-          return false;
-        }
-      };
-    }
-    return {
-      name: "Session Hooks",
-      ok: false,
-      message: "settings file exists but hooks not configured",
-      fix: async () => {
-        this.log("  Run `rulemetric hooks install` to configure hooks.");
-        return false;
-      }
-    };
-  }
-  checkShellEnv(port) {
-    const proxySet = process.env.HTTPS_PROXY?.includes(String(port));
-    const certSet = !!process.env.NODE_EXTRA_CA_CERTS;
-    if (proxySet && certSet) {
-      return { name: "Shell Environment", ok: true, message: "HTTPS_PROXY and NODE_EXTRA_CA_CERTS set" };
-    }
-    const missing = [];
-    if (!proxySet) missing.push("HTTPS_PROXY");
-    if (!certSet) missing.push("NODE_EXTRA_CA_CERTS");
-    return {
-      name: "Shell Environment",
-      ok: false,
-      message: `Missing: ${missing.join(", ")}`,
-      fix: async () => this.writeShellEnv(port)
-    };
-  }
-  async writeShellEnv(port) {
-    const shell = this.detectShell();
-    const rcFile = this.getShellRcFile(shell);
-    if (!rcFile) {
-      this.log(`  Could not detect shell RC file. Add these to your shell profile:`);
-      this.log(`    export HTTPS_PROXY=http://localhost:${port}`);
-      this.log(`    export NODE_EXTRA_CA_CERTS=${CERT_PATH}`);
-      return false;
-    }
-    const oldMarker = "# RuleMetric proxy";
-    const marker = "# RuleMetric proxy (auto-detect)";
-    const envFile = join(CONFIG_DIR, "proxy.env");
-    const pidFile = join(CONFIG_DIR, "proxy.pid");
-    const sentinel = shell === "powershell" ? "_RuleMetricProxyCheck" : "_rulemetric_proxy_check";
-    const block = shell === "powershell" ? this.buildPowerShellBlock(marker, pidFile, port) : shell === "fish" ? [
-      "",
-      marker,
-      "function _rulemetric_proxy_check",
-      `  if test -f ${pidFile}; and kill -0 (cat ${pidFile}) 2>/dev/null`,
-      `    source ${envFile} 2>/dev/null`,
-      "  else",
-      "    set -e HTTPS_PROXY 2>/dev/null",
-      "    set -e NODE_EXTRA_CA_CERTS 2>/dev/null",
-      "  end",
-      "end",
-      ""
-    ].join("\n") : shell === "zsh" ? [
-      "",
-      marker,
-      "_rulemetric_proxy_check() {",
-      `  if [ -f "${pidFile}" ] && kill -0 "$(cat "${pidFile}" 2>/dev/null)" 2>/dev/null; then`,
-      `    [ -z "\${HTTPS_PROXY:-}" ] && source "${envFile}" 2>/dev/null`,
-      "  else",
-      `    [ -n "\${HTTPS_PROXY:-}" ] && unset HTTPS_PROXY NODE_EXTRA_CA_CERTS`,
-      "  fi",
-      "}",
-      "precmd_functions+=(_rulemetric_proxy_check)",
-      ""
-    ].join("\n") : [
-      "",
-      marker,
-      "_rulemetric_proxy_check() {",
-      `  if [ -f "${pidFile}" ] && kill -0 "$(cat "${pidFile}" 2>/dev/null)" 2>/dev/null; then`,
-      `    [ -z "\${HTTPS_PROXY:-}" ] && source "${envFile}" 2>/dev/null`,
-      "  else",
-      `    [ -n "\${HTTPS_PROXY:-}" ] && unset HTTPS_PROXY NODE_EXTRA_CA_CERTS`,
-      "  fi",
-      "}",
-      'PROMPT_COMMAND="_rulemetric_proxy_check${PROMPT_COMMAND:+;$PROMPT_COMMAND}"',
-      ""
-    ].join("\n");
-    mkdirSync(dirname(rcFile), { recursive: true });
-    if (existsSync(rcFile)) {
-      let content = readFileSync(rcFile, "utf-8");
-      if (content.includes(oldMarker) && !content.includes(marker)) {
-        content = content.replace(
-          /\n# RuleMetric proxy\nexport HTTPS_PROXY=[^\n]*\nexport NODE_EXTRA_CA_CERTS=[^\n]*\n/,
-          "\n"
-        );
-        writeFileSync(rcFile, content);
-        this.log(`  Removed old static env vars from ${rcFile}`);
-      }
-      if (content.includes("# RuleMetric proxy (auto-detect") && !content.includes("_rulemetric_proxy_check")) {
-        content = content.replace(
-          /\n# RuleMetric proxy \(auto-detect[^\n]*\)\nif \[.*?\nfi\n/s,
-          "\n"
-        );
-        writeFileSync(rcFile, content);
-        this.log(`  Upgraded old auto-detect block in ${rcFile}`);
-      }
-      if (content.includes(sentinel)) {
-        this.log(`  Shell env already configured in ${rcFile}`);
-        return true;
-      }
-    }
-    this.log(`  Appending proxy auto-detect hook to ${rcFile}`);
-    this.log(`  (HTTPS_PROXY is set/unset automatically when proxy starts/stops)`);
-    appendFileSync(rcFile, block);
-    return true;
-  }
-  detectShell() {
-    if (process.platform === "win32") return "powershell";
-    const shell = process.env.SHELL || "";
-    if (shell.includes("zsh")) return "zsh";
-    if (shell.includes("bash")) return "bash";
-    if (shell.includes("fish")) return "fish";
-    return "zsh";
-  }
-  getShellRcFile(shell) {
-    const home = homedir();
-    switch (shell) {
-      case "zsh":
-        return join(home, ".zshrc");
-      case "bash":
-        return join(home, ".bashrc");
-      case "fish":
-        return join(home, ".config", "fish", "config.fish");
-      case "powershell":
-        return this.getPowerShellProfilePath();
-      default:
-        return null;
-    }
-  }
-  /**
-   * Resolve the PowerShell profile that loads for every host (console, VS Code
-   * integrated terminal, etc.). We ask PowerShell itself for the canonical path
-   * — guessing `~/Documents/...` is wrong when Documents is OneDrive-redirected.
-   * Falls back to the PowerShell 7 default only if no PS binary is reachable.
-   */
-  getPowerShellProfilePath() {
-    const psBin = findBinary("pwsh") || findBinary("powershell");
-    if (psBin) {
-      try {
-        const out = execSync(`"${psBin}" -NoProfile -Command "$PROFILE.CurrentUserAllHosts"`, {
-          encoding: "utf-8"
-        }).trim();
-        if (out) return out;
-      } catch {
-      }
-    }
-    return join(homedir(), "Documents", "PowerShell", "profile.ps1");
-  }
-  /**
-   * Self-contained PowerShell prompt hook. Unlike the POSIX blocks it does NOT
-   * source `proxy.env` (that file is `export KEY=val` syntax PowerShell can't
-   * read) — it embeds the values directly. Each prompt it sets HTTPS_PROXY while
-   * the proxy PID is alive and removes the vars once it stops, so a dead proxy
-   * never leaves a dangling HTTPS_PROXY that would break Claude Code.
-   */
-  buildPowerShellBlock(marker, pidFile, port) {
-    const proxyUrl = `http://localhost:${port}`;
-    const psPid = pidFile.replace(/'/g, "''");
-    const psCert = CERT_PATH.replace(/'/g, "''");
-    return [
-      "",
-      marker,
-      "function _RuleMetricProxyCheck {",
-      `  $pidFile = '${psPid}'`,
-      "  $alive = $false",
-      "  if (Test-Path $pidFile) {",
-      "    $procId = (Get-Content $pidFile -ErrorAction SilentlyContinue | Select-Object -First 1)",
-      "    if ($procId -match '^\\d+$' -and (Get-Process -Id ([int]$procId) -ErrorAction SilentlyContinue)) {",
-      "      $alive = $true",
-      "    }",
-      "  }",
-      "  if ($alive) {",
-      `    $env:HTTPS_PROXY = '${proxyUrl}'`,
-      `    $env:HTTP_PROXY = '${proxyUrl}'`,
-      `    $env:NODE_EXTRA_CA_CERTS = '${psCert}'`,
-      "  } else {",
-      "    Remove-Item Env:HTTPS_PROXY, Env:HTTP_PROXY, Env:NODE_EXTRA_CA_CERTS -ErrorAction SilentlyContinue",
-      "  }",
-      "}",
-      "# Wrap the existing prompt once so the check runs every prompt.",
-      "if (-not (Test-Path Function:\\_RuleMetricOriginalPrompt)) {",
-      "  $existing = Get-Command prompt -ErrorAction SilentlyContinue",
-      "  if ($existing) { Set-Item Function:\\_RuleMetricOriginalPrompt $existing.ScriptBlock }",
-      "}",
-      "function prompt {",
-      "  _RuleMetricProxyCheck",
-      '  if (Test-Path Function:\\_RuleMetricOriginalPrompt) { & _RuleMetricOriginalPrompt } else { "PS $($PWD.Path)> " }',
-      "}",
-      ""
-    ].join("\n");
-  }
-  findBinary(name) {
-    return findBinary(name);
-  }
-};
-export {
-  ProxySetup as default
-};
-//# sourceMappingURL=setup.js.map
+import{a as g}from"../../chunk-67QCYUJU.js";import{a as S}from"../../chunk-PPKPCXJD.js";import"../../chunk-IZTIYR5Q.js";import"../../chunk-V44SRRYR.js";import"../../chunk-U6XEU573.js";import"../../chunk-VLOX6KOM.js";import"../../chunk-3AV3GTMP.js";import"../../chunk-H2ORWIEY.js";import{g as x}from"../../chunk-O6C2UGBY.js";import{a as h}from"../../chunk-ZLLER3HP.js";import{Flags as _}from"@oclif/core";import{execSync as P,spawnSync as m}from"node:child_process";import{existsSync as f,readFileSync as y,appendFileSync as T,writeFileSync as k,mkdirSync as v}from"node:fs";import{homedir as d}from"node:os";import{dirname as E,join as u}from"node:path";var c=u(d(),".mitmproxy","mitmproxy-ca-cert.pem"),$=u(d(),".config","rulemetric"),A=8787,R=class C extends S{static{h(this,"ProxySetup")}static description="Set up context capture proxy (installs mitmproxy, configures shell)";static examples=["<%= config.bin %> proxy setup","<%= config.bin %> proxy setup --shell zsh","<%= config.bin %> proxy setup --check"];static flags={shell:_.string({description:"Shell to configure (auto-detected if omitted)",options:["zsh","bash","fish","powershell"]}),port:_.integer({char:"p",default:A,description:"Proxy listen port"}),check:_.boolean({description:"Only check prerequisites, do not install anything",default:!1})};async run(){let{flags:e}=await this.parse(C),i=e.check,t=e.port;this.log("RuleMetric Proxy Setup"),this.log(`=====================
+`);let l=[await this.checkAuth(),await this.checkMitmproxy(),await this.checkCACert(),await this.checkHooks(),this.checkShellEnv(t)],r=!0;for(let n of l){let p=n.ok?"[OK]":"[!!]";this.log(`${p} ${n.name}: ${n.message}`),n.ok||(r=!1)}if(r){this.log("\nAll checks passed. Run `rulemetric proxy start` to begin capturing.");return}if(i){this.log("\nSome checks failed. Run `rulemetric proxy setup` (without --check) to fix.");return}this.log(`
+Fixing issues...
+`);for(let n of l){if(n.ok||!n.fix)continue;this.log(`Fixing: ${n.name}...`),await n.fix()?this.log(`  Fixed.
+`):this.log(`  Could not auto-fix. See instructions above.
+`)}this.log(`---
+Verifying...
+`);let o=[await this.checkAuth(),await this.checkMitmproxy(),await this.checkCACert(),await this.checkHooks(),this.checkShellEnv(t)],a=!0;for(let n of o){let p=n.ok?"[OK]":"[!!]";this.log(`${p} ${n.name}: ${n.message}`),n.ok||(a=!1)}a?(this.log(`
+Setup complete! Next steps:`),this.log("  1. Restart your shell (or run `source ~/.zshrc`)"),this.log("  2. Run `rulemetric proxy start`"),this.log("  3. Start Claude Code \u2014 context will be captured automatically")):this.log("\nSome issues remain. Fix manually and re-run `rulemetric proxy setup --check`.")}async checkAuth(){if(x())return{name:"Authentication",ok:!0,message:"Logged in (JWT)"};let e=process.env.RULEMETRIC_API_KEY;if(e)return{name:"Authentication",ok:!0,message:`API key (RULEMETRIC_API_KEY=${e.slice(0,8)}...)`};let i=u(d(),".config","rulemetric","env");if(f(i)){let t=y(i,"utf-8");if(t.includes("RULEMETRIC_API_KEY")||t.includes("RULEMETRIC_ACCESS_TOKEN"))return{name:"Authentication",ok:!0,message:"Configured via ~/.config/rulemetric/env"}}return{name:"Authentication",ok:!1,message:"Not authenticated",fix:h(async()=>(this.log("  Run `rulemetric auth login` to authenticate."),this.log("  Or set RULEMETRIC_API_KEY in ~/.config/rulemetric/env."),!1),"fix")}}async checkMitmproxy(){let e=this.findBinary("mitmdump");if(e)try{return{name:"mitmproxy",ok:!0,message:`Installed (v${P(`${e} --version 2>&1`,{encoding:"utf-8"}).match(/Mitmproxy:\s*([\d.]+)/)?.[1]??"unknown"})`}}catch{return{name:"mitmproxy",ok:!0,message:`Found at ${e}`}}return{name:"mitmproxy",ok:!1,message:"Not installed",fix:h(async()=>this.installMitmproxy(),"fix")}}async installMitmproxy(){if(this.findBinary("pipx")&&(this.log("  Installing via pipx..."),m("pipx",["install","mitmproxy"],{stdio:"inherit"}).status===0)||this.findBinary("uv")&&(this.log("  Installing via uv..."),m("uv",["tool","install","mitmproxy"],{stdio:"inherit"}).status===0))return!0;if(this.findBinary("pip3")||this.findBinary("pip")){let e=this.findBinary("pip3")||this.findBinary("pip");if(this.log(`  Installing via ${e} --user...`),m(e,["install","--user","mitmproxy"],{stdio:"inherit"}).status===0)return!0}return this.findBinary("brew")&&(this.log("  Installing via brew..."),m("brew",["install","mitmproxy"],{stdio:"inherit"}).status===0)?!0:(this.log("  Could not auto-install mitmproxy. Install manually:"),this.log("    pipx install mitmproxy     # recommended"),this.log("    brew install mitmproxy     # macOS"),this.log("    pip install --user mitmproxy"),!1)}async checkCACert(){return f(c)?{name:"CA Certificate",ok:!0,message:`Found at ${c}`}:{name:"CA Certificate",ok:!1,message:"Not generated yet",fix:h(async()=>this.generateCACert(),"fix")}}async generateCACert(){let e=this.findBinary("mitmdump");if(!e)return this.log("  Cannot generate cert \u2014 mitmproxy not installed."),!1;this.log("  Generating CA certificate...");let i=m(e,["--set","listen_port=0","-q"],{timeout:5e3,stdio:"ignore"});return f(c)?(this.log(`  Certificate generated at ${c}`),process.platform==="darwin"&&(this.log("  Adding CA cert to macOS keychain (may require sudo)..."),m("sudo",["security","add-trusted-cert","-d","-r","trustRoot","-k","/Library/Keychains/System.keychain",c],{stdio:"inherit"}).status===0?this.log("  CA cert trusted system-wide."):this.log("  Could not auto-trust cert. You may need NODE_EXTRA_CA_CERTS env var.")),!0):(this.log("  Failed to generate cert. Try running: mitmdump --help"),!1)}async checkHooks(){let e=!1;for(let i of["settings.local.json","settings.json"]){let t=u(process.cwd(),".claude",i);if(f(t)){e=!0;try{let l=JSON.parse(y(t,"utf-8"));if(l.hooks&&Object.keys(l.hooks).length>0)return{name:"Session Hooks",ok:!0,message:"Installed in current project"}}catch{}}}return e?{name:"Session Hooks",ok:!1,message:"settings file exists but hooks not configured",fix:h(async()=>(this.log("  Run `rulemetric hooks install` to configure hooks."),!1),"fix")}:{name:"Session Hooks",ok:!1,message:"Not installed in current project",fix:h(async()=>(this.log("  Run `rulemetric hooks install` in your project directory."),!1),"fix")}}checkShellEnv(e){let i=process.env.HTTPS_PROXY?.includes(String(e)),t=!!process.env.NODE_EXTRA_CA_CERTS;if(i&&t)return{name:"Shell Environment",ok:!0,message:"HTTPS_PROXY and NODE_EXTRA_CA_CERTS set"};let l=this.detectShell(),r=this.getShellRcFile(l);if(r&&f(r))try{let a=y(r,"utf-8");if(a.includes(this.shellEnvSentinel(l))&&!a.includes("proxy.env"))return{name:"Shell Environment",ok:!0,message:`Auto-detect hook installed in ${r} (sets HTTPS_PROXY while the proxy runs)`}}catch{}let o=[];return i||o.push("HTTPS_PROXY"),t||o.push("NODE_EXTRA_CA_CERTS"),{name:"Shell Environment",ok:!1,message:`Missing: ${o.join(", ")}`,fix:h(async()=>this.writeShellEnv(e),"fix")}}async writeShellEnv(e){let i=this.detectShell(),t=this.getShellRcFile(i);if(!t)return this.log("  Could not detect shell RC file. Add these to your shell profile:"),this.log(`    export HTTPS_PROXY=http://localhost:${e}`),this.log(`    export NODE_EXTRA_CA_CERTS=${c}`),!1;let l="# RuleMetric proxy",r="# RuleMetric proxy (auto-detect)",o=u($,"proxy.pid"),a=`http://localhost:${e}`,n=this.shellEnvSentinel(i),p=i==="powershell"?this.buildPowerShellBlock(r,o,e):i==="fish"?["",r,"function _rulemetric_proxy_check --on-event fish_prompt",`  if test -f "${o}"; and kill -0 (cat "${o}") 2>/dev/null`,`    set -gx HTTPS_PROXY ${a}`,`    set -gx NODE_EXTRA_CA_CERTS "${c}"`,"  else","    set -e HTTPS_PROXY 2>/dev/null","    set -e NODE_EXTRA_CA_CERTS 2>/dev/null","  end","end",""].join(`
+`):i==="zsh"?["",r,"_rulemetric_proxy_check() {",`  if [ -f "${o}" ] && kill -0 "$(cat "${o}" 2>/dev/null)" 2>/dev/null; then`,'    if [ -z "${HTTPS_PROXY:-}" ]; then',`      export HTTPS_PROXY="${a}"`,`      export NODE_EXTRA_CA_CERTS="${c}"`,"    fi","  else",'    [ -n "${HTTPS_PROXY:-}" ] && unset HTTPS_PROXY NODE_EXTRA_CA_CERTS',"  fi","}","precmd_functions+=(_rulemetric_proxy_check)",""].join(`
+`):["",r,"_rulemetric_proxy_check() {",`  if [ -f "${o}" ] && kill -0 "$(cat "${o}" 2>/dev/null)" 2>/dev/null; then`,'    if [ -z "${HTTPS_PROXY:-}" ]; then',`      export HTTPS_PROXY="${a}"`,`      export NODE_EXTRA_CA_CERTS="${c}"`,"    fi","  else",'    [ -n "${HTTPS_PROXY:-}" ] && unset HTTPS_PROXY NODE_EXTRA_CA_CERTS',"  fi","}",'PROMPT_COMMAND="_rulemetric_proxy_check${PROMPT_COMMAND:+;$PROMPT_COMMAND}"',""].join(`
+`);if(v(E(t),{recursive:!0}),f(t)){let s=y(t,"utf-8");if(s.includes(l)&&!s.includes(r)&&(s=s.replace(/\n# RuleMetric proxy\nexport HTTPS_PROXY=[^\n]*\nexport NODE_EXTRA_CA_CERTS=[^\n]*\n/,`
+`),k(t,s),this.log(`  Removed old static env vars from ${t}`)),s.includes("# RuleMetric proxy (auto-detect")&&!s.includes("_rulemetric_proxy_check")&&(s=s.replace(/\n# RuleMetric proxy \(auto-detect[^\n]*\)\nif \[.*?\nfi\n/s,`
+`),k(t,s),this.log(`  Upgraded old auto-detect block in ${t}`)),s.includes(n)&&s.includes("proxy.env")&&(s=s.replace(/\n# RuleMetric proxy \(auto-detect\)\n_rulemetric_proxy_check\(\) \{[\s\S]*?\n\}\n[^\n]*_rulemetric_proxy_check[^\n]*\n/,`
+`).replace(/\n# RuleMetric proxy \(auto-detect\)\nfunction _rulemetric_proxy_check\n[\s\S]*?\nend\n/,`
+`),k(t,s),this.log(`  Removed broken proxy.env block from ${t}`)),s.includes(n))return this.log(`  Shell env already configured in ${t}`),!0}return this.log(`  Appending proxy auto-detect hook to ${t}`),this.log("  (HTTPS_PROXY is set/unset automatically when proxy starts/stops)"),T(t,p),!0}shellEnvSentinel(e){return e==="powershell"?"_RuleMetricProxyCheck":"_rulemetric_proxy_check"}detectShell(){if(process.platform==="win32")return"powershell";let e=process.env.SHELL||"";return e.includes("zsh")?"zsh":e.includes("bash")?"bash":e.includes("fish")?"fish":"zsh"}getShellRcFile(e){let i=d();switch(e){case"zsh":return u(i,".zshrc");case"bash":return u(i,".bashrc");case"fish":return u(i,".config","fish","config.fish");case"powershell":return this.getPowerShellProfilePath();default:return null}}getPowerShellProfilePath(){let e=g("pwsh")||g("powershell");if(e)try{let i=P(`"${e}" -NoProfile -Command "$PROFILE.CurrentUserAllHosts"`,{encoding:"utf-8"}).trim();if(i)return i}catch{}return u(d(),"Documents","PowerShell","profile.ps1")}buildPowerShellBlock(e,i,t){let l=`http://localhost:${t}`,r=i.replace(/'/g,"''"),o=c.replace(/'/g,"''");return["",e,"function _RuleMetricProxyCheck {",`  $pidFile = '${r}'`,"  $alive = $false","  if (Test-Path $pidFile) {","    $procId = (Get-Content $pidFile -ErrorAction SilentlyContinue | Select-Object -First 1)","    if ($procId -match '^\\d+$' -and (Get-Process -Id ([int]$procId) -ErrorAction SilentlyContinue)) {","      $alive = $true","    }","  }","  if ($alive) {",`    $env:HTTPS_PROXY = '${l}'`,`    $env:HTTP_PROXY = '${l}'`,`    $env:NODE_EXTRA_CA_CERTS = '${o}'`,"  } else {","    Remove-Item Env:HTTPS_PROXY, Env:HTTP_PROXY, Env:NODE_EXTRA_CA_CERTS -ErrorAction SilentlyContinue","  }","}","# Wrap the existing prompt once so the check runs every prompt.","if (-not (Test-Path Function:\\_RuleMetricOriginalPrompt)) {","  $existing = Get-Command prompt -ErrorAction SilentlyContinue","  if ($existing) { Set-Item Function:\\_RuleMetricOriginalPrompt $existing.ScriptBlock }","}","function prompt {","  _RuleMetricProxyCheck",'  if (Test-Path Function:\\_RuleMetricOriginalPrompt) { & _RuleMetricOriginalPrompt } else { "PS $($PWD.Path)> " }',"}",""].join(`
+`)}findBinary(e){return g(e)}};export{R as default};