@rulemetric/hooks 0.7.39 → 0.7.40

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rulemetric/hooks",
-  "version": "0.7.39",
+  "version": "0.7.40",
   "publishConfig": {
     "access": "public"
   },

package/scripts/_config.sh

@@ -99,6 +99,16 @@ _rulemetric_load_config() {
       # below. `auth login` against prod doesn't persist RULEMETRIC_API_URL, so
       # requiring it here made every fresh npm install skip capture with
       # "no_config" unless auth.json happened to survive.
+      if [ "${RULEMETRIC_STRICT_LOCAL:-0}" = "1" ] && [ -z "${RULEMETRIC_API_URL:-}" ]; then
+        # L1.2: strict-local refuses the cloud default — leave the URL unset so
+        # every downstream no-URL skip path disables capture, loudly. return 0,
+        # not 1: hooks run under `set -e` and must never break the agent.
+        # The hooks source this file with 2>/dev/null, so the notice is
+        # handed back via a variable and printed by each hook itself.
+        export RULEMETRIC_CAPTURE_DISABLED_REASON="RULEMETRIC_STRICT_LOCAL: no RULEMETRIC_API_URL configured — capture disabled."
+        _rulemetric_load_active_org
+        return 0
+      fi
       export RULEMETRIC_API_URL="${RULEMETRIC_API_URL:-https://rulemetric.com}"
       _rulemetric_load_active_org
       return 0
@@ -112,6 +122,16 @@ _rulemetric_load_config() {
     if [ -n "$token" ]; then
       export RULEMETRIC_ACCESS_TOKEN="$token"
       # Default API URL if not set
+      if [ "${RULEMETRIC_STRICT_LOCAL:-0}" = "1" ] && [ -z "${RULEMETRIC_API_URL:-}" ]; then
+        # L1.2: strict-local refuses the cloud default — leave the URL unset so
+        # every downstream no-URL skip path disables capture, loudly. return 0,
+        # not 1: hooks run under `set -e` and must never break the agent.
+        # The hooks source this file with 2>/dev/null, so the notice is
+        # handed back via a variable and printed by each hook itself.
+        export RULEMETRIC_CAPTURE_DISABLED_REASON="RULEMETRIC_STRICT_LOCAL: no RULEMETRIC_API_URL configured — capture disabled."
+        _rulemetric_load_active_org
+        return 0
+      fi
       export RULEMETRIC_API_URL="${RULEMETRIC_API_URL:-https://rulemetric.com}"
       _rulemetric_load_active_org
       return 0

package/scripts/_post.sh

@@ -49,6 +49,11 @@ _rulemetric_beacon() {
   local code_int proxied
   code_int=$((10#$code)) 2>/dev/null || code_int=0
   proxied=$([ -n "${HTTPS_PROXY:-}" ] && echo true || echo false)
+  # L1.2: the beacon is UNAUTHENTICATED cloud telemetry by default — under
+  # strict-local with no configured URL it must not fire at all.
+  if [ "${RULEMETRIC_STRICT_LOCAL:-0}" = "1" ] && [ -z "${RULEMETRIC_API_URL:-}" ]; then
+    return 0
+  fi
   ( curl -s --noproxy '*' --max-time 2 -X POST \
       "${RULEMETRIC_API_URL:-https://rulemetric.com}/api/telemetry/cli-error" \
       -H 'Content-Type: application/json' \

package/scripts/assistant-response.sh

@@ -15,6 +15,9 @@ trap 'echo "rulemetric assistant-response failed at line $LINENO: $BASH_COMMAND"
 
 # Load config (env vars, ~/.config/rulemetric/env, or .env.local)
 source "$SCRIPT_DIR/_config.sh" 2>/dev/null || true
+if [ -n "${RULEMETRIC_CAPTURE_DISABLED_REASON:-}" ]; then
+  echo "[rulemetric] $RULEMETRIC_CAPTURE_DISABLED_REASON" >&2
+fi
 
 INPUT=$(cat)
 source "$SCRIPT_DIR/_normalize.sh"

package/scripts/post-tool-use.sh

@@ -8,6 +8,9 @@ trap 'echo "rulemetric post-tool-use failed at line $LINENO: $BASH_COMMAND" >&2;
 
 # Load config (env vars, ~/.config/rulemetric/env, or .env.local)
 source "$SCRIPT_DIR/_config.sh" 2>/dev/null || true
+if [ -n "${RULEMETRIC_CAPTURE_DISABLED_REASON:-}" ]; then
+  echo "[rulemetric] $RULEMETRIC_CAPTURE_DISABLED_REASON" >&2
+fi
 
 # Read hook input from stdin and normalize across tools
 INPUT=$(cat)

package/scripts/session-end.sh

@@ -13,6 +13,9 @@ trap 'echo "rulemetric session-end failed at line $LINENO: $BASH_COMMAND" >&2; _
 
 # Load config (env vars, ~/.config/rulemetric/env, or .env.local)
 source "$SCRIPT_DIR/_config.sh" 2>/dev/null || true
+if [ -n "${RULEMETRIC_CAPTURE_DISABLED_REASON:-}" ]; then
+  echo "[rulemetric] $RULEMETRIC_CAPTURE_DISABLED_REASON" >&2
+fi
 
 # Read hook input from stdin and normalize across tools. Bound the read so a
 # hook runner that leaves stdin open cannot wedge the agent.

package/scripts/session-start.sh

@@ -9,6 +9,9 @@ trap 'echo "rulemetric session-start failed at line $LINENO: $BASH_COMMAND" >&2;
 
 # Load config (env vars, ~/.config/rulemetric/env, or .env.local)
 source "$SCRIPT_DIR/_config.sh" 2>/dev/null || true
+if [ -n "${RULEMETRIC_CAPTURE_DISABLED_REASON:-}" ]; then
+  echo "[rulemetric] $RULEMETRIC_CAPTURE_DISABLED_REASON" >&2
+fi
 
 # Read hook input from stdin and normalize across tools. Bound the read so a
 # hook runner that leaves stdin open cannot wedge the agent.

package/scripts/user-prompt.sh

@@ -8,6 +8,9 @@ trap 'echo "rulemetric user-prompt failed at line $LINENO: $BASH_COMMAND" >&2; _
 
 # Load config (env vars, ~/.config/rulemetric/env, or .env.local)
 source "$SCRIPT_DIR/_config.sh" 2>/dev/null || true
+if [ -n "${RULEMETRIC_CAPTURE_DISABLED_REASON:-}" ]; then
+  echo "[rulemetric] $RULEMETRIC_CAPTURE_DISABLED_REASON" >&2
+fi
 
 # Read hook input from stdin and normalize across tools
 INPUT=$(cat)