claude-rpc 1.0.1 → 1.0.3

package/README.md

@@ -15,7 +15,7 @@
 
 **Discord Rich Presence for [Claude Code](https://claude.com/claude-code)** — your live model, project, tokens, and lifetime stats, driven by the hooks Claude Code already fires.
 
-**[claude-rpc.vercel.app →](https://claude-rpc.vercel.app)** — see it in one page.
+**[claude-rpc.com →](https://claude-rpc.com)** — see it in one page.
 
 [![community · sessions](https://claude-rpc-totals.claude-rpc.workers.dev/sessions.svg)](#community-totals)   [![community · tokens](https://claude-rpc-totals.claude-rpc.workers.dev/tokens.svg)](#community-totals)
 
@@ -53,7 +53,7 @@ That installs `claude-rpc` globally, wires the hooks into Claude Code, and start
 **Prefer a one-liner that figures it out for you?**
 
 ```sh
-curl -fsSL https://claude-rpc.vercel.app/install | sh
+curl -fsSL https://claude-rpc.com/install | sh
 ```
 
 Detects Node (installs the npm package) or falls back to the prebuilt Apple-Silicon binary, then runs `setup` for you.
@@ -149,9 +149,9 @@ claude-rpc readme --raw | pbcopy  # straight to your clipboard
 **Live card + badges, paste once.** With a public profile (`claude-rpc profile set --handle <you> && claude-rpc profile on`), your stats are served as an always-current card (and badges) from the community worker — no `gh`, no gist, nothing to re-run:
 
 ```md
-[![Claude Code stats](https://claude-rpc-totals.claude-rpc.workers.dev/card/<you>.svg)](https://claude-rpc.vercel.app/u/<you>)
+[![Claude Code stats](https://claude-rpc-totals.claude-rpc.workers.dev/card/<you>.svg)](https://claude-rpc.com/u/<you>)
 
-[![Claude Code hours](https://claude-rpc-totals.claude-rpc.workers.dev/badge/<you>.svg?metric=hours)](https://claude-rpc.vercel.app/?ref=badge)
+[![Claude Code hours](https://claude-rpc-totals.claude-rpc.workers.dev/badge/<you>.svg?metric=hours)](https://claude-rpc.com/?ref=badge)
 ```
 
 The card shows tokens, sessions, active hours and streak; badge `metric=` is one of `tokens · sessions · hours · streak` (optional `&label=` to retitle). Both refresh themselves as the daemon flushes your profile (~every 30 min). Your profile page at `/u/<you>` has a one-click "copy" for the whole block.

package/package.json

@@ -1,11 +1,11 @@
 {
   "name": "claude-rpc",
-  "version": "1.0.1",
+  "version": "1.0.3",
   "description": "Discord Rich Presence for Claude Code — live model, project, tokens, and lifetime stats driven by Claude Code's hook system.",
   "type": "module",
   "license": "MIT",
   "author": "Archer Simmons",
-  "homepage": "https://github.com/rar-file/claude-rpc#readme",
+  "homepage": "https://claude-rpc.com",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/rar-file/claude-rpc.git"

package/src/calendar.js

@@ -86,7 +86,7 @@ export function renderCalendar(aggregate, { weeks = 53, generatedAt = new Date()
   <text x="${W - 170}" y="${H - 10}" font-family="JetBrains Mono, ui-monospace, monospace" font-size="9" fill="${PALETTE.inkFaint}">less</text>
   ${legend}
   <text x="${W - 28}" y="${H - 10}" font-family="JetBrains Mono, ui-monospace, monospace" font-size="9" fill="${PALETTE.inkFaint}">more</text>
-  <text x="${padX}" y="${H - 8}" font-family="JetBrains Mono, ui-monospace, monospace" font-size="9" fill="${PALETTE.inkFaint}">claude-rpc.vercel.app · v${VERSION}</text>
+  <text x="${padX}" y="${H - 8}" font-family="JetBrains Mono, ui-monospace, monospace" font-size="9" fill="${PALETTE.inkFaint}">claude-rpc.com · v${VERSION}</text>
 </svg>`;
 }
 

package/src/card.js

@@ -322,7 +322,7 @@ export function renderCard(aggregate, { range = 'year', generatedAt = new Date()
   <!-- ── credits ── -->
   <g transform="translate(${W - 60} ${H - 24})" text-anchor="end">
     <text font-family="JetBrains Mono, ui-monospace, monospace" font-size="10"
-          fill="${PALETTE.inkFaint}">${escapeXml(allTimeHours)}h all-time · claude-rpc.vercel.app</text>
+          fill="${PALETTE.inkFaint}">${escapeXml(allTimeHours)}h all-time · claude-rpc.com</text>
   </g>
 </svg>`;
 }

package/src/cli.js

@@ -1066,7 +1066,7 @@ function doReadme(argv) {
   const raw = argv.includes('--raw') || argv.includes('--plain');
   const cfg = loadConfig();
   const endpoint = (cfg.community?.endpoint || 'https://claude-rpc-totals.claude-rpc.workers.dev').replace(/\/+$/, '');
-  const site = 'https://claude-rpc.vercel.app';
+  const site = 'https://claude-rpc.com';
   const profile = cfg.profile || {};
   const handle = profile.handle;
   const live = !!profile.enabled && lb.isValidHandle(handle);
@@ -1287,7 +1287,7 @@ async function doExport(argv) {
 // `claude-rpc squad join <code>`
 // `claude-rpc squad` / `squad status`  → standings for every squad you're in
 // `claude-rpc squad leave [id]`
-// The web flow (claude-rpc.vercel.app + GitHub login) drives the same worker
+// The web flow (claude-rpc.com + GitHub login) drives the same worker
 // endpoints; the CLI authenticates with the community instanceId it already has.
 
 function squadAuth() {
@@ -1332,7 +1332,7 @@ function squadAuth() {
   return { cfg, endpoint, instanceId, post, get };
 }
 
-function squadPageUrl(id) { return `https://claude-rpc.vercel.app/squad/${id}`; }
+function squadPageUrl(id) { return `https://claude-rpc.com/squad/${id}`; }
 
 function printSquadInvite(squad) {
   console.log('');
@@ -1431,11 +1431,11 @@ async function doSquadCmd(argv) {
 //                              one-time code, no browser needed
 //   claude-rpc link <code>     on the NEW machine → claims it, merging this
 //                              install into the same leaderboard identity
-// The browser fallback lives at claude-rpc.vercel.app/link (log in with
+// The browser fallback lives at claude-rpc.com/link (log in with
 // GitHub → same code) for when the other machine isn't handy. Claiming
 // verifies the profile (✓) and unlocks managing squads from the browser.
 
-const LINK_PAGE = 'https://claude-rpc.vercel.app/link';
+const LINK_PAGE = 'https://claude-rpc.com/link';
 
 // Mint side: this machine asks the worker for a code. The worker only obliges
 // when this install's canonical profile is verified — the ✓ a claim grants
@@ -1638,7 +1638,7 @@ function profileNextStep() {
   const p = loadConfig().profile || {};
   const next = profileSteps(p).find((s) => !s.done);
   if (!next) {
-    console.log(`     ${c.dim}→  all set — you're live at${c.reset} ${c.cyan}https://claude-rpc.vercel.app/u/${encodeURIComponent(p.handle)}${c.reset}`);
+    console.log(`     ${c.dim}→  all set — you're live at${c.reset} ${c.cyan}https://claude-rpc.com/u/${encodeURIComponent(p.handle)}${c.reset}`);
   } else if (next.key === 'verify') {
     console.log(`     ${c.dim}→  next: run${c.reset} ${c.cyan}claude-rpc link${c.reset} ${c.dim}on a machine that's already verified, then${c.reset} ${c.cyan}claude-rpc link <code>${c.reset} ${c.dim}here — first machine? ${LINK_PAGE}${c.reset}`);
   } else {
@@ -1649,7 +1649,7 @@ function profileNextStep() {
 function profileStatus() {
   const p = (loadConfig().profile) || {};
   const handleOk = lb.isValidHandle(p.handle);
-  const boardUrl = handleOk ? `https://claude-rpc.vercel.app/u/${encodeURIComponent(p.handle)}` : '';
+  const boardUrl = handleOk ? `https://claude-rpc.com/u/${encodeURIComponent(p.handle)}` : '';
 
   console.log('');
   console.log(`  ${c.bold}${c.magenta}◆ profile${c.reset}  ${c.dim}— public leaderboard identity${c.reset}`);
@@ -1776,7 +1776,7 @@ async function profilePublish() {
   console.log(`  ${c.dim}publishing @${cfg.profile.handle} to the board…${c.reset}`);
   const r = await flushProfile(cfg);
   if (r.ok) {
-    console.log(`  ${c.green}✓${c.reset}  published — see it at ${c.cyan}https://claude-rpc.vercel.app/u/${encodeURIComponent(cfg.profile.handle)}${c.reset}`);
+    console.log(`  ${c.green}✓${c.reset}  published — see it at ${c.cyan}https://claude-rpc.com/u/${encodeURIComponent(cfg.profile.handle)}${c.reset}`);
   } else if (r.reason === 'rate-limited') {
     console.log(`  ${c.yellow}!${c.reset}  rate-limited — already published in the last minute; the board has you`);
   } else {

package/src/daemon.js

@@ -117,6 +117,15 @@ let lastSentHash = '';
 let lastSentAt = 0;       // ms of the last write ATTEMPT (success or fail → back off either way)
 let pendingSend = null;   // { kind, activity, hash, logMsg } coalesced during the gap; latest wins
 let flushTimer = null;
+// Timestamps (ms) of recent write ATTEMPTS (set + clear both hit Discord), for
+// the sliding-window rate cap below. The per-write gap alone leaves the daemon
+// riding Discord's ~5-per-20s SET_ACTIVITY ceiling — many triggers fire and a
+// 4s gap still permits 6 writes in some 20s windows, which makes Discord EMPTY
+// the presence (card → app name + bare timer). This bounds the COUNT per window
+// regardless of how many triggers fire. Deliberately NOT cleared by
+// resetTransmit (a scan/session/config refresh forces a re-render but must not
+// reset the rate budget, or those refreshes could burst us past the limit).
+let recentSends = [];
 // Last status we acted on for outbound side-effects (webhook / desktop notify).
 // Tracked separately from the render hash so we fire once per transition.
 let lastNotifiedStatus = null;
@@ -407,12 +416,24 @@ function pushPresence() {
 }
 
 // Minimum gap between Discord writes, read live so a config reload takes effect.
-// Floored at 2s as a sanity minimum; the 4s default keeps us under Discord's
-// ~5-per-20s SET_ACTIVITY limit (see default-config.minActivityGapMs).
+// Floored at 2s as a sanity minimum. The gap spaces consecutive writes; the
+// sliding-window cap below is what actually bounds writes-per-window so we stay
+// under Discord's ~5-per-20s SET_ACTIVITY limit (see default-config).
 function activityGapMs() {
   return Math.max(2000, config.minActivityGapMs || 4000);
 }
 
+// Sliding-window rate cap parameters, read live like the gap. Defaults to 4
+// writes per 20s — one under Discord's ~5-per-20s SET_ACTIVITY ceiling, so we
+// stay clear of it even if Discord counts its window inclusively or our clock
+// drifts. Floored so a bad config can't disable the protection entirely.
+function activityWindowMs() {
+  return Math.max(5000, config.activityWindowMs || 20000);
+}
+function maxActivityWrites() {
+  return Math.max(2, config.maxActivityWrites || 4);
+}
+
 // Sentinel for a clear — can never collide with a real activity hash, since
 // JSON.stringify of an activity object always begins with '{'.
 const CLEAR_HASH = 'cleared';
@@ -425,6 +446,7 @@ function transmit(kind, activity, logMsg) {
   const d = throttleDecision({
     hash, lastSentHash, lastSentAt,
     now: Date.now(), gapMs: activityGapMs(), flushPending: !!flushTimer,
+    recentSends, windowMs: activityWindowMs(), maxPerWindow: maxActivityWrites(),
   });
   if (d.action === 'skip') { pendingSend = null; return; }
   if (d.action === 'send') { doSend({ kind, activity, hash, logMsg }); return; }
@@ -451,6 +473,12 @@ function flushPendingSend() {
 // by the next push rather than being recorded as success and stranded.
 async function doSend({ kind, activity, hash, logMsg }) {
   lastSentAt = Date.now();
+  // Record the attempt and drop anything older than the window — this is the
+  // ledger throttleDecision reads to enforce the per-window cap. Counts every
+  // attempt (set AND clear) since both are SET_ACTIVITY writes to Discord.
+  recentSends.push(lastSentAt);
+  const cutoff = lastSentAt - activityWindowMs();
+  if (recentSends[0] <= cutoff) recentSends = recentSends.filter((t) => t > cutoff);
   try {
     if (kind === 'clear') await client.user.clearActivity();
     else await client.user.setActivity(activity);

package/src/default-config.js

@@ -28,6 +28,17 @@ export const DEFAULT_CONFIG = {
   // collapse to the latest and flush when the gap expires. 4s stays safely
   // under the limit; lower values risk Discord throttling the card.
   minActivityGapMs: 4000,
+  // Hard sliding-window cap on Discord writes, on top of minActivityGapMs. The
+  // gap alone only spaces *consecutive* writes — with a 4s gap a 20s window can
+  // still catch 6 writes (floor(20000/4000)+1) once several triggers (the
+  // rotation tick, a scan, a live-session change, a config reload) coincide,
+  // and that 6th write is what makes Discord EMPTY the presence (the card
+  // collapses to just the app name + elapsed timer, no details or art). This
+  // bounds the COUNT per window: no more than maxActivityWrites writes per
+  // activityWindowMs, whatever fires. Default 4-per-20s leaves a write of
+  // headroom under Discord's ~5-per-20s ceiling.
+  maxActivityWrites: 4,
+  activityWindowMs: 20000,
   rescanIntervalSec: 300,
   idleThresholdSec: 60,
   // Time (minutes) of no hook activity AND no live transcripts on disk before
@@ -230,7 +241,7 @@ export const DEFAULT_CONFIG = {
       // ?ref=discord lets the landing page attribute installs that originate
       // from a presence card. (When the cwd is a github repo the daemon also
       // prepends a "View on GitHub →" button, so both can show.)
-      { label: "Get claude-rpc →", url: "https://claude-rpc.vercel.app/?ref=discord" },
+      { label: "Get claude-rpc →", url: "https://claude-rpc.com/?ref=discord" },
     ],
   },
   statusIcons: {

package/src/gist.js

@@ -27,9 +27,11 @@ function ghQuote(a) {
   return /[\s"]/.test(a) ? `"${String(a).replace(/"/g, '""')}"` : a;
 }
 function gh(args, opts = {}) {
+  // windowsHide so the gh.exe/cmd shim doesn't flash a console window on
+  // Windows (shell:true routes through cmd.exe; hide that too). No-op elsewhere.
   return WIN
-    ? spawnSync('gh', args.map(ghQuote), { ...opts, shell: true })
-    : spawnSync('gh', args, opts);
+    ? spawnSync('gh', args.map(ghQuote), { ...opts, shell: true, windowsHide: true })
+    : spawnSync('gh', args, { ...opts, windowsHide: true });
 }
 
 // Bare fetch has no total timeout; a stalled GitHub endpoint would hang the

package/src/install.js

@@ -447,15 +447,15 @@ export function installMcp({ exePath, scope = 'user' } = {}) {
   const { command, args } = mcpServerCommand(exePath);
   const winShell = process.platform === 'win32';
   // Replace any stale entry first so re-running is idempotent (ignore failure).
-  spawnSync('claude', ['mcp', 'remove', 'claude-rpc', '--scope', scope], { stdio: 'ignore', shell: winShell });
-  const r = spawnSync('claude', ['mcp', 'add', 'claude-rpc', '--scope', scope, '--', command, ...args], { stdio: 'inherit', shell: winShell });
+  spawnSync('claude', ['mcp', 'remove', 'claude-rpc', '--scope', scope], { stdio: 'ignore', shell: winShell, windowsHide: true });
+  const r = spawnSync('claude', ['mcp', 'add', 'claude-rpc', '--scope', scope, '--', command, ...args], { stdio: 'inherit', shell: winShell, windowsHide: true });
   if (r.error && r.error.code === 'ENOENT') return { ok: false, reason: 'no-claude', command, args };
   if (r.status !== 0) return { ok: false, reason: 'add-failed', code: r.status, command, args };
   return { ok: true, command, args, scope };
 }
 
 export function uninstallMcp({ scope = 'user' } = {}) {
-  const r = spawnSync('claude', ['mcp', 'remove', 'claude-rpc', '--scope', scope], { stdio: 'inherit', shell: process.platform === 'win32' });
+  const r = spawnSync('claude', ['mcp', 'remove', 'claude-rpc', '--scope', scope], { stdio: 'inherit', shell: process.platform === 'win32', windowsHide: true });
   if (r.error && r.error.code === 'ENOENT') return { ok: false, reason: 'no-claude' };
   return { ok: r.status === 0 };
 }
@@ -666,6 +666,7 @@ function promoteNpxToGlobal() {
   const r = spawnSync('npm', ['install', '-g', `claude-rpc@${VERSION}`], {
     encoding: 'utf8',
     shell: process.platform === 'win32',   // npm is npm.cmd on Windows
+    windowsHide: true,                      // don't flash a console window
   });
   if (r.error || r.status !== 0) {
     // The piped npm chatter only matters when it failed.
@@ -687,6 +688,7 @@ function warnIfStale() {
     const r = spawnSync('npm', ['view', 'claude-rpc', 'version'], {
       encoding: 'utf8', timeout: 4000,
       shell: process.platform === 'win32',   // npm is npm.cmd on Windows
+      windowsHide: true,                      // don't flash a console window
     });
     const latest = (r.stdout || '').trim();
     if (!latest || latest === VERSION) return;

package/src/presence.js

@@ -113,9 +113,35 @@ export function shouldShowGithubButton(p, state) {
 //   - 'defer' : inside the gap, or a flush is already queued — coalesce to the
 //               LATEST payload and let the caller flush it in `waitMs`, so the
 //               final state of every burst still lands, once, under the limit
-export function throttleDecision({ hash, lastSentHash, lastSentAt, now, gapMs, flushPending }) {
+//
+// The per-write `gapMs` only spaces *consecutive* writes; it does NOT bound
+// writes-per-window. With gapMs == windowMs/maxPerWindow (the 4s default sits
+// exactly on Discord's ~5-per-20s ceiling) a 20s window can still catch
+// floor(windowMs/gapMs)+1 == 6 gap-spaced writes — one over the limit — because
+// many independent triggers (the rotation tick re-rendering {toolElapsed}, a
+// background scan, a live-session change, a config reload) each want to write.
+// That extra write is exactly what makes Discord EMPTY the presence (the card
+// collapses to just the app name + elapsed timer). So when `recentSends` (the
+// timestamps of recent writes, set+clear) and `maxPerWindow` are supplied we
+// add a hard sliding-window cap on top of the gap: defer until the oldest write
+// in the window expires, guaranteeing no more than `maxPerWindow` writes in any
+// `windowMs` no matter how many triggers fire. Omitting them keeps the old
+// gap-only behavior (used by tests that predate the cap).
+export function throttleDecision({ hash, lastSentHash, lastSentAt, now, gapMs, flushPending, recentSends, windowMs, maxPerWindow }) {
   if (hash === lastSentHash) return { action: 'skip', waitMs: 0 };
-  const waitMs = Math.max(0, (lastSentAt || 0) + gapMs - now);
+  let waitMs = Math.max(0, (lastSentAt || 0) + gapMs - now);
+  if (maxPerWindow && windowMs && Array.isArray(recentSends)) {
+    // Strict window (age < windowMs) so a write exactly windowMs old has already
+    // fallen out — matches a "requests in the last 20s" limiter and keeps the
+    // boundary case from sneaking a write over the line.
+    const inWindow = recentSends.filter((t) => t > now - windowMs);
+    if (inWindow.length >= maxPerWindow) {
+      // The oldest write we must let expire before another may go out. Once it
+      // ages past windowMs the window drops below the cap and we can send.
+      const oldest = inWindow[inWindow.length - maxPerWindow];
+      waitMs = Math.max(waitMs, oldest + windowMs - now);
+    }
+  }
   if (waitMs === 0 && !flushPending) return { action: 'send', waitMs: 0 };
   return { action: 'defer', waitMs };
 }

package/src/privacy.js

@@ -197,7 +197,12 @@ function probeGithubPrivate(cwd) {
   execFile(
     'gh',
     ['repo', 'view', '--json', 'isPrivate', '-q', '.isPrivate'],
-    { cwd, timeout: 1500 },
+    // windowsHide: on Windows `gh` is a console app; without this the daemon —
+    // which runs with no console of its own — pops a visible terminal window for
+    // the life of the probe (~1s) every time this fires (a cwd cache-miss, i.e.
+    // entering a project, then once per 5-min TTL). That's the stray terminal
+    // flash users see "sometimes" while working. No-op off Windows.
+    { cwd, timeout: 1500, windowsHide: true },
     (err, stdout) => {
       ghProbeInFlight.delete(cwd);
       let value = null;

package/src/profile.js

@@ -135,7 +135,7 @@ export function renderProfileCard(aggregate, { handle = '', generatedAt = new Da
   <!-- footer -->
   <text x="40" y="${H - 18}"
         font-family="JetBrains Mono, ui-monospace, monospace"
-        font-size="11" fill="${PALETTE.inkFaint}">${escapeXml(`best streak ${t.longestStreak}d · ≈${fmtCost(t.cost)} · claude-rpc.vercel.app`)}</text>
+        font-size="11" fill="${PALETTE.inkFaint}">${escapeXml(`best streak ${t.longestStreak}d · ≈${fmtCost(t.cost)} · claude-rpc.com`)}</text>
 </svg>`;
 }
 

package/src/server/assets/wrapped.client.js

@@ -20,7 +20,7 @@
   // Landing-page CTA used by the finale share. The dashboard is served on
   // localhost, so sharing `location.href` hands the recipient a dead link —
   // the finale shares this public URL + a stats summary instead.
-  const LANDING = 'https://claude-rpc.vercel.app/?ref=wrapped';
+  const LANDING = 'https://claude-rpc.com/?ref=wrapped';
   let _shareText = '';   // built in the finale slide, consumed by wireFinale
 
   // ── build the story slides from the wrapped payload ──────────
@@ -131,7 +131,7 @@
             ${cell('Lines', (d.linesNet >= 0 ? '+' : '−') + fmtNum(Math.abs(d.linesNet)), 'grass')}
             ${cell('Hotspot', d.hotspot ? esc(d.hotspot.name) : '—')}
           </div>
-          <div class="foot">made with claude-rpc · claude-rpc.vercel.app</div>
+          <div class="foot">made with claude-rpc · claude-rpc.com</div>
         </div>
         <div class="actions">
           <button class="btn primary" id="w-replay">↺ replay</button>

package/src/server/index.js

@@ -133,7 +133,8 @@ server.listen(PORT, '127.0.0.1', () => {
     const opener = process.platform === 'win32' ? `start "" "${url}"`
       : process.platform === 'darwin' ? `open "${url}"`
       : `xdg-open "${url}"`;
-    exec(opener, () => {});
+    // windowsHide so the cmd.exe that runs `start` doesn't flash a console.
+    exec(opener, { windowsHide: true }, () => {});
   }
 });
 

package/src/session-card.js

@@ -60,7 +60,7 @@ export function renderSessionCard(vars = {}, { generatedAt = new Date() } = {})
   ${statCell(C[1], 184, 'Est. cost', String(cost), PALETTE.blurple)}
   ${statCell(C[2], 184, 'Reads', String(v.filesRead ?? 0))}
 
-  <text x="40" y="${H - 16}" font-family="JetBrains Mono, ui-monospace, monospace" font-size="10" fill="${PALETTE.inkFaint}">${escapeXml(`${v.currentFilePretty ? 'last: ' + v.currentFilePretty + ' · ' : ''}claude-rpc.vercel.app · v${VERSION}`)}</text>
+  <text x="40" y="${H - 16}" font-family="JetBrains Mono, ui-monospace, monospace" font-size="10" fill="${PALETTE.inkFaint}">${escapeXml(`${v.currentFilePretty ? 'last: ' + v.currentFilePretty + ' · ' : ''}claude-rpc.com · v${VERSION}`)}</text>
 </svg>`;
 }
 

package/src/version.js

@@ -11,7 +11,7 @@ import { readFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { ROOT } from './paths.js';
 
-const BAKED = '1.0.1';
+const BAKED = '1.0.3';
 
 function readPkgVersion() {
   try {