getculpa 1.0.9 → 1.0.10

package/README.md

@@ -5,7 +5,11 @@ money went, across models, features and users, on your own machine.
 
 **`npm i -g getculpa` provisions the full Culpa install — the same files,
 shortcuts, and registration the Windows installer lays down — and starts
-nothing.** `getculpa` is what wakes the stack up.
+nothing.** `getculpa` is what wakes the stack up. On npm 12 or newer, npm
+blocks install scripts by default: install with
+`npm i -g --allow-scripts=getculpa getculpa` (or run
+`npm config set allow-scripts=getculpa --location=user` once). If `getculpa`
+says Culpa was never provisioned, that is why.
 
 - `getculpa` / `getculpa start` — start (or resume) the Culpa stack
 - `getculpa stop` — stop the running stack (`docker compose stop`; recorded data is kept)
@@ -14,7 +18,7 @@ nothing.** `getculpa` is what wakes the stack up.
 - `getculpa doctor` — diagnose this install (version/platform, file integrity, Docker, container state, ports, health, license presence — never prints key material); exits 1 if a check fails
 - `getculpa repair` — re-stage any missing/corrupt install files (never touches an existing `docker-compose.yml` or recorded data); idempotent
 - `getculpa uninstall` — remove Culpa (recorded data is kept unless you confirm)
-- `getculpa scan` — zero-install local scan, no Docker, no network
+- `getculpa scan` — refresh the Culpa ledger scan (needs the running stack); `getculpa scan --preview` reads local logs offline: no Docker, no network
 - `getculpa connect` — print the topology-appropriate capture recipe (`--fly` also emits a ready-to-deploy Fly.io shape)
 - `getculpa update` — manage CLI launcher updates
 

package/assets/culpa-compose.yml

@@ -5,7 +5,7 @@
 # name is used when present, which is how these pins were verified before
 # publication.
 #
-# ── RELEASE STATE: v1.0.9 PUBLISHED AND SIGNED (2026-09-03) ─────────
+# ── RELEASE STATE: v1.0.10 PUBLISHED AND SIGNED (2026-09-05) ────────
 # The line above is REWRITTEN BY installers/publish.sh at real-publish time —
 # this file has shipped a hand-edited, wrong publication claim twice, so the
 # claim is now mechanical, never prose. While it reads NOT PUBLISHED, the pins
@@ -26,7 +26,7 @@
 #   cosign verify \
 #     --certificate-identity 'info@myaigi.ai' \
 #     --certificate-oidc-issuer 'https://github.com/login/oauth' \
-#     ghcr.io/myaigidev/culpa-server:v1.0.9
+#     ghcr.io/myaigidev/culpa-server:v1.0.6
 # Repeat for culpa-dashboard. Both must report VERIFIED.
 #
 # If a pull fails with an authentication or "denied" error rather than a
@@ -55,7 +55,7 @@ services:
     restart: unless-stopped
 
   server:
-    image: ghcr.io/myaigidev/culpa-server:v1.0.9
+    image: ghcr.io/myaigidev/culpa-server:v1.0.10
     container_name: culpa-server
     environment:
       DATABASE_URL: postgres://culpa:culpa@db:5432/culpa
@@ -129,7 +129,7 @@ services:
     # (D-072: never rebuild a tag that already exists). The example this note
     # used to give was CF14's v0.11.0/v0.11.1 pair, which no longer matches
     # either pin in this file.
-    image: ghcr.io/myaigidev/culpa-dashboard:v1.0.9
+    image: ghcr.io/myaigidev/culpa-dashboard:v1.0.10
     container_name: culpa-dashboard
     environment:
       CULPA_API_BASE: http://server:4545

package/bin/getculpa.js

@@ -25,9 +25,11 @@ Usage:
   getculpa doctor          Diagnose this install
   getculpa repair          Re-stage missing/corrupt install files (no data touched)
   getculpa uninstall       Remove Culpa (data is kept unless you confirm)
-  getculpa scan            Zero-install local scan (no Docker, no network)
+  getculpa scan            Refresh the Culpa ledger (needs the running stack);
+                           --preview reads local logs offline: no Docker, no network
   getculpa connect         Print the topology-appropriate capture recipe
   getculpa update          Manage CLI launcher updates
+  getculpa <verb> --help   scan / connect / update / config: the culpa CLI's own help, under this name
   getculpa --help          Show this help
   getculpa --version       Show the getculpa package version
 `;
@@ -37,7 +39,7 @@ function printVersion() {
   console.log(pkg.version);
 }
 
-function runLauncherPassthrough(args) {
+function runLauncherPassthrough(args, env) {
   const exe = process.platform === "win32" ? ".exe" : "";
   const launcher = path.join(__dirname, "..", "vendor", `culpa-launcher${exe}`);
   if (!fs.existsSync(launcher)) {
@@ -45,7 +47,9 @@ function runLauncherPassthrough(args) {
     console.error("getculpa: run `npm rebuild getculpa` (or reinstall) to fetch it.");
     process.exit(1);
   }
-  const result = spawnSync(launcher, args, { stdio: "inherit" });
+  // T-182.8 (ISS-MAC-11): the launcher and the CLI spell their usage in
+  // the invoked name — the environment carries it (lib/dispatch.mjs)
+  const result = spawnSync(launcher, args, { stdio: "inherit", env });
   process.exit(result.status === null ? 1 : result.status);
 }
 
@@ -130,7 +134,7 @@ async function main(argv) {
   // uninstall-consent decisions now happen here, BEFORE anything is imported
   // or spawned. Passthrough verbs fall through untouched (the launcher owns
   // their help).
-  const { decideDispatch, verbHelp } = await import("../lib/dispatch.mjs");
+  const { decideDispatch, verbHelp, passthroughEnv } = await import("../lib/dispatch.mjs");
   const decision = decideDispatch(argv, {
     isTTY: process.stdin.isTTY === true && process.stdout.isTTY === true,
   });
@@ -166,7 +170,7 @@ async function main(argv) {
   // `uninstall` never reaches here — every argv shape is decided above.
   // scan / connect / update / config / anything unrecognized: the launcher
   // owns USAGE and exit-code semantics for its own surface, same as culpa.js.
-  return runLauncherPassthrough(argv);
+  return runLauncherPassthrough(argv, passthroughEnv(process.env));
 }
 
 main(process.argv.slice(2)).catch((e) => {

package/lib/dispatch.mjs

@@ -29,6 +29,13 @@ const VERB_HELP = {
     "Stop and REMOVE Culpa's containers and network. Asks for confirmation first; pass --yes to consent from a script (a non-interactive run without --yes refuses). Recorded cost data is kept unless you separately confirm deleting it.",
 };
 
+/** T-182.8 (ISS-MAC-11): the environment for a passthrough spawn — the
+ *  vendored launcher and the culpa CLI spell their usage in the invoked name
+ *  when CULPA_ARGV0 says `getculpa` (an allowlist on their side). Pure. */
+export function passthroughEnv(base) {
+  return { ...base, CULPA_ARGV0: "getculpa" };
+}
+
 /** One verb's help block, prefixed with its usage line. */
 export function verbHelp(verb) {
   const text = VERB_HELP[verb] ?? "No help recorded for this verb.";