hacklab 0.7.5 → 0.9.0

package/dist/posthog.js

@@ -1,20 +1,224 @@
+import { randomUUID } from 'node:crypto';
+import { promises as fs } from 'node:fs';
+import { createRequire } from 'node:module';
+import { dirname, join } from 'node:path';
 import { PostHog } from 'posthog-node';
-export const posthog = new PostHog(process.env.POSTHOG_API_KEY ??
-    'phc_CT4u3J62yYaAHUcnYKjmnpAGXTrWqv7ZbmvYQcUTEACK', {
-    host: process.env.POSTHOG_HOST ?? 'https://eu.i.posthog.com',
-    flushAt: 1,
-    flushInterval: 0,
-    enableExceptionAutocapture: true,
-});
+import { envNameForUrl, getSessionPath, resolveAppUrl } from './session.js';
+import { dim } from './ui.js';
+// Single source of the published version (one level up from this module in both
+// `dist/` and `src/`), tagged onto every event so we can slice by CLI version.
+const require = createRequire(import.meta.url);
+const { version: CLI_VERSION } = require('../package.json');
+// The PostHog *project* API key for the CLI's own project (id 226792, separate
+// from the web app's project 226288). It's a publishable client key (phc_…,
+// write-only) that ships inside the published npm package regardless, so
+// committing it here is fine. `POSTHOG_API_KEY` overrides it for dev/testing.
+// The CLI never reads Vercel env (it runs on users' machines), so its key lives
+// here, not in Vercel.
+const PROJECT_API_KEY = process.env.POSTHOG_API_KEY ??
+    'phc_oCCCCjjTXkmknHh5gjEhsqJNuJ77BqsZUU96MRtAHoYQ';
+const HOST = process.env.POSTHOG_HOST ?? 'https://eu.i.posthog.com';
+// Telemetry state (anon id + one-time-notice flag) lives next to the session
+// file, so it honors HACKLAB_SESSION_PATH exactly like the update-check cache.
+function telemetryPath() {
+    return join(dirname(getSessionPath()), 'telemetry.json');
+}
+/**
+ * Telemetry is opt-OUT. It's off when the user sets `HACKLAB_NO_TELEMETRY`
+ * (mirrors `HACKLAB_NO_UPDATE_CHECK`) or the cross-tool `DO_NOT_TRACK` standard
+ * (https://consoledonottrack.com). Checked at every entry point, so a disabled
+ * CLI never constructs a client, phones home, or installs exception handlers.
+ */
+export function isTelemetryDisabled() {
+    if (process.env.HACKLAB_NO_TELEMETRY)
+        return true;
+    const dnt = process.env.DO_NOT_TRACK;
+    return dnt === '1' || dnt === 'true';
+}
+async function readState() {
+    try {
+        return JSON.parse(await fs.readFile(telemetryPath(), 'utf8'));
+    }
+    catch {
+        return {};
+    }
+}
+async function writeState(state) {
+    try {
+        await fs.mkdir(dirname(telemetryPath()), { recursive: true });
+        await fs.writeFile(telemetryPath(), `${JSON.stringify(state, null, 2)}\n`, 'utf8');
+    }
+    catch {
+        // Best-effort: a failed write just means a fresh anon id / re-shown notice.
+    }
+}
+/**
+ * A stable anonymous device id for events that fire before (or without) login.
+ * Generated once and persisted; on login we `alias` it to the real handle so
+ * PostHog stitches the anonymous history onto the identified user.
+ */
+async function getAnonymousId() {
+    const state = await readState();
+    if (state.anonymousId)
+        return state.anonymousId;
+    const anonymousId = `anon_${randomUUID()}`;
+    await writeState({ ...state, anonymousId });
+    return anonymousId;
+}
+let client = null;
+function getClient() {
+    if (!client) {
+        client = new PostHog(PROJECT_API_KEY, {
+            host: HOST,
+            // We flush explicitly after every capture (and on shutdown), so disable
+            // both of posthog-node's background-flush triggers: the count trigger
+            // (flushAt — set high enough that a single CLI run never hits it) and the
+            // timer (flushInterval: 0). This matters because a background flush routes
+            // its failure to a hardcoded console.error we can't intercept — it would
+            // dump a network stack trace into the user's terminal on a flaky
+            // connection. Our explicit flush rejects into our own try/catch instead,
+            // so a telemetry failure stays silent.
+            flushAt: 1000,
+            flushInterval: 0,
+            // Best-effort telemetry: don't retry a failed send. The default is 3
+            // retries with a 3s backoff, and that backoff timer is what keeps a
+            // one-shot CLI alive for ~10s after the command visibly finished when the
+            // network is down. No retries → fail fast → the process exits promptly.
+            fetchRetryCount: 0,
+            // Tighter than the 10s default so a black-holed connection gives up fast.
+            requestTimeout: 3000,
+            enableExceptionAutocapture: true,
+        });
+    }
+    return client;
+}
+/**
+ * Properties attached to every CLI event. CLI and web now live in separate
+ * PostHog projects, but we still tag `source: 'cli'` as a cheap, explicit
+ * discriminator — handy if the two datasets are ever combined, and it costs
+ * nothing to keep.
+ */
+function defaultProperties() {
+    return {
+        source: 'cli',
+        cli_version: CLI_VERSION,
+        os: process.platform,
+        arch: process.arch,
+        node_version: process.versions.node,
+        environment: envNameForUrl(resolveAppUrl()) ?? 'unknown',
+    };
+}
+// Never let a stuck network hold up the CLI: cap any send at a couple seconds
+// and move on. The timer is unref'd so it can't by itself keep the process
+// alive after the real work is done.
+async function withTimeout(p, ms = 2000) {
+    await Promise.race([
+        p.catch(() => undefined),
+        new Promise((resolve) => {
+            const t = setTimeout(resolve, ms);
+            t.unref?.();
+        }),
+    ]);
+}
 /**
- * Capture an event and immediately flush it to PostHog. Since the CLI is a
- * short-lived process, flushing after every capture ensures the event is sent
- * before the process exits. No-ops silently if distinctId is absent.
+ * Capture an event and flush it. Falls back to the anonymous device id when no
+ * handle is given, so pre-auth usage is still counted (and later stitched onto
+ * the user via `identifyUser`). Fire-and-forget: gated on opt-out, wrapped so it
+ * can never slow down or break the command that called it.
  */
 export async function captureEvent(distinctId, event, properties) {
-    if (!distinctId)
+    if (isTelemetryDisabled())
         return;
-    posthog.capture({ distinctId, event, properties });
-    await posthog.flush();
+    try {
+        const id = distinctId ?? (await getAnonymousId());
+        const ph = getClient();
+        ph.capture({
+            distinctId: id,
+            event,
+            properties: { ...defaultProperties(), ...properties },
+        });
+        await withTimeout(ph.flush());
+    }
+    catch {
+        // Telemetry must never break a command. Swallow everything.
+    }
+}
+/**
+ * Identify the logged-in user and merge any anonymous pre-login history onto
+ * them. `properties` is passed straight through (callers set `$set` /
+ * `$set_once`). Opt-out gated and fully wrapped.
+ */
+export async function identifyUser(handle, properties) {
+    if (isTelemetryDisabled())
+        return;
+    try {
+        const ph = getClient();
+        const { anonymousId } = await readState();
+        if (anonymousId && anonymousId !== handle) {
+            ph.alias({ distinctId: handle, alias: anonymousId });
+        }
+        ph.identify({ distinctId: handle, properties });
+        await withTimeout(ph.flush());
+    }
+    catch {
+        // Identification is best-effort — never break login/join over it.
+    }
+}
+/** Report an unhandled error to PostHog. Opt-out gated and wrapped. */
+export async function captureException(error, distinctId) {
+    if (isTelemetryDisabled())
+        return;
+    try {
+        const ph = getClient();
+        const id = distinctId ?? (await getAnonymousId());
+        ph.captureException(error, id, defaultProperties());
+        await withTimeout(ph.flush());
+    }
+    catch {
+        // Swallow — a telemetry failure must not mask the original error.
+    }
+}
+/**
+ * Final drain before the process exits. No-op if telemetry never initialized.
+ * Uses flush(), not shutdown(): shutdown() routes a failed flush to a hardcoded
+ * console.error (a network stack trace in the user's terminal), whereas flush()
+ * rejects into our own catch and stays silent. There are no background timers to
+ * clear (flushInterval is 0), so flush() is a complete drain here.
+ */
+export async function shutdownTelemetry() {
+    if (!client)
+        return;
+    try {
+        await withTimeout(client.flush());
+    }
+    catch {
+        // Best-effort final flush.
+    }
+}
+/**
+ * One-time, one-line notice that the CLI collects anonymous usage, with the
+ * opt-out. Interactive only (never in pipes / CI / the quiet daily run), shown
+ * once per machine (flagged in telemetry.json). Mirrors the update-check nudge:
+ * stderr, TTY-gated, and wrapped so it can never break or delay a command.
+ */
+export async function maybePrintTelemetryNotice() {
+    try {
+        if (isTelemetryDisabled())
+            return;
+        if (!process.stdout.isTTY)
+            return;
+        const state = await readState();
+        if (state.noticeShownAt)
+            return;
+        await writeState({
+            ...state,
+            anonymousId: state.anonymousId ?? `anon_${randomUUID()}`,
+            noticeShownAt: new Date().toISOString(),
+        });
+        process.stderr.write(`${dim('hacklab collects anonymous usage analytics to improve the CLI — opt out with HACKLAB_NO_TELEMETRY=1 (or DO_NOT_TRACK=1).')}\n`);
+    }
+    catch {
+        // A notice must never break or delay the actual command.
+    }
 }
 //# sourceMappingURL=posthog.js.map

package/dist/posthog.js.map

@@ -1 +1 @@
-{"version":3,"file":"posthog.js","sourceRoot":"","sources":["../src/posthog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAEtC,MAAM,CAAC,MAAM,OAAO,GAAG,IAAI,OAAO,CAChC,OAAO,CAAC,GAAG,CAAC,eAAe;IACzB,kDAAkD,EACpD;IACE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,0BAA0B;IAC5D,OAAO,EAAE,CAAC;IACV,aAAa,EAAE,CAAC;IAChB,0BAA0B,EAAE,IAAI;CACjC,CACF,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,UAA8B,EAC9B,KAAa,EACb,UAAoC;IAEpC,IAAI,CAAC,UAAU;QAAE,OAAM;IACvB,OAAO,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAA;IAClD,MAAM,OAAO,CAAC,KAAK,EAAE,CAAA;AACvB,CAAC"}
+{"version":3,"file":"posthog.js","sourceRoot":"","sources":["../src/posthog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAA;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAC3E,OAAO,EAAE,GAAG,EAAE,MAAM,SAAS,CAAA;AAE7B,gFAAgF;AAChF,+EAA+E;AAC/E,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AAC9C,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,iBAAiB,CAEzD,CAAA;AAED,+EAA+E;AAC/E,4EAA4E;AAC5E,yEAAyE;AACzE,8EAA8E;AAC9E,gFAAgF;AAChF,uBAAuB;AACvB,MAAM,eAAe,GACnB,OAAO,CAAC,GAAG,CAAC,eAAe;IAC3B,kDAAkD,CAAA;AACpD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,0BAA0B,CAAA;AAInE,6EAA6E;AAC7E,+EAA+E;AAC/E,SAAS,aAAa;IACpB,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,EAAE,gBAAgB,CAAC,CAAA;AAC1D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB;IACjC,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB;QAAE,OAAO,IAAI,CAAA;IACjD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAA;IACpC,OAAO,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,MAAM,CAAA;AACtC,CAAC;AAED,KAAK,UAAU,SAAS;IACtB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CACf,MAAM,EAAE,CAAC,QAAQ,CAAC,aAAa,EAAE,EAAE,MAAM,CAAC,CACzB,CAAA;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,KAAqB;IAC7C,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC7D,MAAM,EAAE,CAAC,SAAS,CAChB,aAAa,EAAE,EACf,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EACrC,MAAM,CACP,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,4EAA4E;IAC9E,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,cAAc;IAC3B,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAA;IAC/B,IAAI,KAAK,CAAC,WAAW;QAAE,OAAO,KAAK,CAAC,WAAW,CAAA;IAC/C,MAAM,WAAW,GAAG,QAAQ,UAAU,EAAE,EAAE,CAAA;IAC1C,MAAM,UAAU,CAAC,EAAE,GAAG,KAAK,EAAE,WAAW,EAAE,CAAC,CAAA;IAC3C,OAAO,WAAW,CAAA;AACpB,CAAC;AAED,IAAI,MAAM,GAAmB,IAAI,CAAA;AACjC,SAAS,SAAS;IAChB,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,GAAG,IAAI,OAAO,CAAC,eAAe,EAAE;YACpC,IAAI,EAAE,IAAI;YACV,wEAAwE;YACxE,sEAAsE;YACtE,0EAA0E;YAC1E,2EAA2E;YAC3E,yEAAyE;YACzE,iEAAiE;YACjE,yEAAyE;YACzE,uCAAuC;YACvC,OAAO,EAAE,IAAI;YACb,aAAa,EAAE,CAAC;YAChB,qEAAqE;YACrE,oEAAoE;YACpE,0EAA0E;YAC1E,wEAAwE;YACxE,eAAe,EAAE,CAAC;YAClB,0EAA0E;YAC1E,cAAc,EAAE,IAAI;YACpB,0BAA0B,EAAE,IAAI;SACjC,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB;IACxB,OAAO;QACL,MAAM,EAAE,KAAK;QACb,WAAW,EAAE,WAAW;QACxB,EAAE,EAAE,OAAO,CAAC,QAAQ;QACpB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI;QACnC,WAAW,EAAE,aAAa,CAAC,aAAa,EAAE,CAAC,IAAI,SAAS;KACzD,CAAA;AACH,CAAC;AAED,8EAA8E;AAC9E,2EAA2E;AAC3E,qCAAqC;AACrC,KAAK,UAAU,WAAW,CAAC,CAAmB,EAAE,EAAE,GAAG,IAAI;IACvD,MAAM,OAAO,CAAC,IAAI,CAAC;QACjB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;QACxB,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAC5B,MAAM,CAAC,GAAG,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;YACjC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAA;QACb,CAAC,CAAC;KACH,CAAC,CAAA;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,UAA8B,EAC9B,KAAa,EACb,UAAoC;IAEpC,IAAI,mBAAmB,EAAE;QAAE,OAAM;IACjC,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,UAAU,IAAI,CAAC,MAAM,cAAc,EAAE,CAAC,CAAA;QACjD,MAAM,EAAE,GAAG,SAAS,EAAE,CAAA;QACtB,EAAE,CAAC,OAAO,CAAC;YACT,UAAU,EAAE,EAAE;YACd,KAAK;YACL,UAAU,EAAE,EAAE,GAAG,iBAAiB,EAAE,EAAE,GAAG,UAAU,EAAE;SACtD,CAAC,CAAA;QACF,MAAM,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAA;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,4DAA4D;IAC9D,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAc,EACd,UAAmC;IAEnC,IAAI,mBAAmB,EAAE;QAAE,OAAM;IACjC,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,SAAS,EAAE,CAAA;QACtB,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,SAAS,EAAE,CAAA;QACzC,IAAI,WAAW,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;YAC1C,EAAE,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAA;QACtD,CAAC;QACD,EAAE,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAA;QAC/C,MAAM,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAA;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,kEAAkE;IACpE,CAAC;AACH,CAAC;AAED,uEAAuE;AACvE,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAc,EACd,UAAmB;IAEnB,IAAI,mBAAmB,EAAE;QAAE,OAAM;IACjC,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,SAAS,EAAE,CAAA;QACtB,MAAM,EAAE,GAAG,UAAU,IAAI,CAAC,MAAM,cAAc,EAAE,CAAC,CAAA;QACjD,EAAE,CAAC,gBAAgB,CAAC,KAAK,EAAE,EAAE,EAAE,iBAAiB,EAAE,CAAC,CAAA;QACnD,MAAM,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAA;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,kEAAkE;IACpE,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,IAAI,CAAC,MAAM;QAAE,OAAM;IACnB,IAAI,CAAC;QACH,MAAM,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAA;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,2BAA2B;IAC7B,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB;IAC7C,IAAI,CAAC;QACH,IAAI,mBAAmB,EAAE;YAAE,OAAM;QACjC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK;YAAE,OAAM;QACjC,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAA;QAC/B,IAAI,KAAK,CAAC,aAAa;YAAE,OAAM;QAC/B,MAAM,UAAU,CAAC;YACf,GAAG,KAAK;YACR,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,QAAQ,UAAU,EAAE,EAAE;YACxD,aAAa,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACxC,CAAC,CAAA;QACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,GAAG,CACJ,0HAA0H,CAC3H,IAAI,CACN,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,yDAAyD;IAC3D,CAAC;AACH,CAAC"}

package/dist/registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAmBA,MAAM,MAAM,WAAW,GAAG;IACxB,0CAA0C;IAC1C,IAAI,EAAE,MAAM,CAAA;IACZ,oFAAoF;IACpF,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,sDAAsD;IACtD,OAAO,EAAE,MAAM,CAAA;IACf,0FAA0F;IAC1F,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;CAC9C,CAAA;AAED,eAAO,MAAM,QAAQ,EAAE,WAAW,EAsFjC,CAAA;AAED,kFAAkF;AAClF,eAAO,MAAM,aAAa,UAA8B,CAAA;AAExD,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAEjE"}
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAsBA,MAAM,MAAM,WAAW,GAAG;IACxB,0CAA0C;IAC1C,IAAI,EAAE,MAAM,CAAA;IACZ,oFAAoF;IACpF,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,sDAAsD;IACtD,OAAO,EAAE,MAAM,CAAA;IACf,0FAA0F;IAC1F,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;CAC9C,CAAA;AAED,eAAO,MAAM,QAAQ,EAAE,WAAW,EAyGjC,CAAA;AAED,kFAAkF;AAClF,eAAO,MAAM,aAAa,UAA8B,CAAA;AAExD,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAEjE"}

package/dist/registry.js

@@ -1,14 +1,17 @@
+import { book, parseBookArgs } from './commands/book.js';
 import { chat } from './commands/chat.js';
 import { configCommand } from './commands/config.js';
 import { drop, parseDropArgs } from './commands/drop.js';
 import { essay } from './commands/essay.js';
 import { hacker } from './commands/hacker.js';
 import { join } from './commands/join.js';
+import { keys } from './commands/keys.js';
 import { login } from './commands/login.js';
 import { logout } from './commands/logout.js';
 import { org } from './commands/org.js';
 import { profile } from './commands/profile.js';
 import { project } from './commands/project.js';
+import { scout } from './commands/scout.js';
 import { sync } from './commands/sync.js';
 import { update } from './commands/update.js';
 import { whoami } from './commands/whoami.js';
@@ -62,10 +65,16 @@ export const COMMANDS = [
         summary: 'publish this repo as a project (--json for agents)',
         run: (args) => project(args),
     },
+    {
+        name: 'book',
+        args: '"Title" --author "Name"',
+        summary: 'shelve a book you have read (--takeaways "…")',
+        run: (args) => book(parseBookArgs(args)),
+    },
     {
         name: 'org',
-        args: '[claim|create]',
-        summary: 'claim, create, or edit your organization',
+        args: '[list|view|set|apply|claim|create]',
+        summary: 'claim, create, or edit your organization (--json for agents)',
         run: (args) => org(args),
     },
     {
@@ -82,16 +91,28 @@ export const COMMANDS = [
     },
     {
         name: 'hacker',
-        args: 'view <handle>',
-        summary: "view another hacker's profile (--json for agents)",
+        args: 'view [handle]',
+        summary: 'view a hacker profile — yours by default (--json for agents)',
         run: (args) => hacker(args),
     },
+    {
+        name: 'scout',
+        args: 'search|picks [flags]',
+        summary: 'talent scouting for partners: search the pool, or our curated picks (invite-only)',
+        run: (args) => scout(args),
+    },
     {
         name: 'profile',
         args: '[view|set|edit|apply]',
         summary: 'view and edit your own profile (--json for agents)',
         run: (args) => profile(args),
     },
+    {
+        name: 'keys',
+        args: '[create|list|revoke]',
+        summary: 'manage API keys for your agent profile endpoint',
+        run: (args) => keys(args),
+    },
     {
         name: 'update',
         summary: 'update the hacklab CLI to the latest version',

package/dist/registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"registry.js","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAA;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACpD,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAC7C,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAA;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAC7C,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAA;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAA;AAC/C,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAA;AAC/C,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAA;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAC7C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAiB7C,MAAM,CAAC,MAAM,QAAQ,GAAkB;IACrC;QACE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,iCAAiC;QAC1C,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;KAC7D;IACD;QACE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,qCAAqC;QAC9C,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;KAC1B;IACD;QACE,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,+BAA+B;QACxC,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE;KACpB;IACD;QACE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,0BAA0B;QACnC,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE;YACZ,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;YACzC,OAAO,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;QACxB,CAAC;KACF;IACD;QACE,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,aAAa;QACnB,OAAO,EACL,oEAAoE;QACtE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;KAC9D;IACD;QACE,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,0CAA0C;QACnD,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE;KACpB;IACD;QACE,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,2CAA2C;QACpD,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC;KACnC;IACD;QACE,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,oDAAoD;QAC7D,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;KAC7B;IACD;QACE,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,0CAA0C;QACnD,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;KACzB;IACD;QACE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,8DAA8D;QACvE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;KAC1B;IACD;QACE,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,uDAAuD;QAChE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;KAC3B;IACD;QACE,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,mDAAmD;QAC5D,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC;KAC5B;IACD;QACE,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE,oDAAoD;QAC7D,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;KAC7B;IACD;QACE,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,8CAA8C;QACvD,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE;KACpB;CACF,CAAA;AAED,kFAAkF;AAClF,MAAM,CAAC,MAAM,aAAa,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;AAExD,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAA;AAC9C,CAAC"}
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAA;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACpD,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAC7C,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAA;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAA;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAC7C,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAA;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAA;AAC/C,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAA;AAC/C,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAA;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAC7C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAiB7C,MAAM,CAAC,MAAM,QAAQ,GAAkB;IACrC;QACE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,iCAAiC;QAC1C,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;KAC7D;IACD;QACE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,qCAAqC;QAC9C,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;KAC1B;IACD;QACE,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,+BAA+B;QACxC,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE;KACpB;IACD;QACE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,0BAA0B;QACnC,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE;YACZ,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;YACzC,OAAO,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;QACxB,CAAC;KACF;IACD;QACE,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,aAAa;QACnB,OAAO,EACL,oEAAoE;QACtE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;KAC9D;IACD;QACE,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,0CAA0C;QACnD,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE;KACpB;IACD;QACE,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,2CAA2C;QACpD,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC;KACnC;IACD;QACE,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,oDAAoD;QAC7D,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;KAC7B;IACD;QACE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,yBAAyB;QAC/B,OAAO,EAAE,+CAA+C;QACxD,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;KACzC;IACD;QACE,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,oCAAoC;QAC1C,OAAO,EAAE,8DAA8D;QACvE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;KACzB;IACD;QACE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,8DAA8D;QACvE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;KAC1B;IACD;QACE,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,uDAAuD;QAChE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;KAC3B;IACD;QACE,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,8DAA8D;QACvE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC;KAC5B;IACD;QACE,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EACL,mFAAmF;QACrF,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;KAC3B;IACD;QACE,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE,oDAAoD;QAC7D,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;KAC7B;IACD;QACE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,iDAAiD;QAC1D,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;KAC1B;IACD;QACE,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,8CAA8C;QACvD,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE;KACpB;CACF,CAAA;AAED,kFAAkF;AAClF,MAAM,CAAC,MAAM,aAAa,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;AAExD,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAA;AAC9C,CAAC"}

package/dist/scanners/index.d.ts

@@ -1,6 +1,12 @@
 import { type CursorScanStatus, type CursorStats, type DailyToolEntry, type HourlyEntry, type ScanResult } from './util.js';
 export * from './util.js';
 export declare function scanClaudeCode(): Promise<ScanResult>;
+/**
+ * Extract the session date from a Codex session path laid out as
+ * `YYYY/MM/DD/file.jsonl`, or null if the path doesn't carry one. Splits on
+ * either separator so it works on Windows (backslashes) too.
+ */
+export declare function codexDateFromRelPath(relPath: string): string | null;
 export declare function scanCodex(): Promise<ScanResult>;
 export declare function scanHermes(): Promise<ScanResult>;
 export declare function scanOpenclaw(): Promise<ScanResult>;

package/dist/scanners/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/scanners/index.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAChB,KAAK,cAAc,EAGnB,KAAK,WAAW,EAChB,KAAK,UAAU,EAGhB,MAAM,WAAW,CAAA;AAElB,cAAc,WAAW,CAAA;AAKzB,wBAAsB,cAAc,IAAI,OAAO,CAAC,UAAU,CAAC,CAuD1D;AAED,wBAAsB,SAAS,IAAI,OAAO,CAAC,UAAU,CAAC,CAiDrD;AAED,wBAAsB,UAAU,IAAI,OAAO,CAAC,UAAU,CAAC,CAmDtD;AAED,wBAAsB,YAAY,IAAI,OAAO,CAAC,UAAU,CAAC,CAgFxD;AAED,wBAAsB,YAAY,IAAI,OAAO,CAAC,UAAU,CAAC,CA+FxD;AAsCD;;;;;;;;;GASG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,OAAO,CAAC,CAU1D;AAED,wBAAsB,eAAe,IAAI,OAAO,CAAC,UAAU,CAAC,CAkE3D;AAED,wBAAsB,aAAa,IAAI,OAAO,CAAC,UAAU,CAAC,CAkHzD;AAED,MAAM,MAAM,aAAa,GAAG;IAC1B,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAClC,WAAW,EAAE,cAAc,EAAE,CAAA;IAC7B,YAAY,EAAE,WAAW,EAAE,CAAA;IAC3B,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACnC,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,WAAW,GAAG,IAAI,CAAA;IAC/B,gBAAgB,EAAE,gBAAgB,CAAA;CACnC,CAAA;AAsBD,6EAA6E;AAC7E,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC,CAc9D;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,UAAU,EAAE,GACpB,OAAO,CAAC,UAAU,EAAE,CAAC,CAGvB;AAED,iEAAiE;AACjE,wBAAgB,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,aAAa,CA+BnE;AAED;;;GAGG;AACH,wBAAsB,YAAY,IAAI,OAAO,CAAC,aAAa,CAAC,CAE3D"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/scanners/index.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAChB,KAAK,cAAc,EAGnB,KAAK,WAAW,EAChB,KAAK,UAAU,EAGhB,MAAM,WAAW,CAAA;AAElB,cAAc,WAAW,CAAA;AAKzB,wBAAsB,cAAc,IAAI,OAAO,CAAC,UAAU,CAAC,CAuD1D;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAMnE;AAED,wBAAsB,SAAS,IAAI,OAAO,CAAC,UAAU,CAAC,CA4CrD;AAED,wBAAsB,UAAU,IAAI,OAAO,CAAC,UAAU,CAAC,CAkDtD;AAED,wBAAsB,YAAY,IAAI,OAAO,CAAC,UAAU,CAAC,CAgFxD;AAED,wBAAsB,YAAY,IAAI,OAAO,CAAC,UAAU,CAAC,CAyFxD;AAsCD;;;;;;;;;GASG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,OAAO,CAAC,CAU1D;AAED,wBAAsB,eAAe,IAAI,OAAO,CAAC,UAAU,CAAC,CA8D3D;AAED,wBAAsB,aAAa,IAAI,OAAO,CAAC,UAAU,CAAC,CAkHzD;AAED,MAAM,MAAM,aAAa,GAAG;IAC1B,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAClC,WAAW,EAAE,cAAc,EAAE,CAAA;IAC7B,YAAY,EAAE,WAAW,EAAE,CAAA;IAC3B,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACnC,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,WAAW,GAAG,IAAI,CAAA;IAC/B,gBAAgB,EAAE,gBAAgB,CAAA;CACnC,CAAA;AAsBD,6EAA6E;AAC7E,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC,CAc9D;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,UAAU,EAAE,GACpB,OAAO,CAAC,UAAU,EAAE,CAAC,CAGvB;AAED,iEAAiE;AACjE,wBAAgB,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,aAAa,CA+BnE;AAED;;;GAGG;AACH,wBAAsB,YAAY,IAAI,OAAO,CAAC,aAAa,CAAC,CAE3D"}

package/dist/scanners/index.js

@@ -2,6 +2,7 @@ import { readdir, readFile, stat } from 'node:fs/promises';
 import { homedir } from 'node:os';
 import { join } from 'node:path';
 import { resolveCursorAuth } from '../config.js';
+import { num, queryDb, str } from './sqlite.js';
 import { emptyResult, findFiles, TokenCollector, toDateStr, } from './util.js';
 export * from './util.js';
 // One self-contained scanner per tool. Each returns a uniform ScanResult and
@@ -62,6 +63,18 @@ export async function scanClaudeCode() {
     }
     return collector.result();
 }
+/**
+ * Extract the session date from a Codex session path laid out as
+ * `YYYY/MM/DD/file.jsonl`, or null if the path doesn't carry one. Splits on
+ * either separator so it works on Windows (backslashes) too.
+ */
+export function codexDateFromRelPath(relPath) {
+    const parts = relPath.split(/[\\/]/);
+    if (parts.length >= 3) {
+        return `${parts[0]}-${parts[1]?.padStart(2, '0')}-${parts[2]?.padStart(2, '0')}`;
+    }
+    return null;
+}
 export async function scanCodex() {
     const dir = join(homedir(), '.codex', 'sessions');
     try {
@@ -75,16 +88,9 @@ export async function scanCodex() {
     for (const filePath of files) {
         try {
             const content = await readFile(filePath, 'utf8');
-            // Date from path: .codex/sessions/YYYY/MM/DD/file.jsonl
+            // Date from path: .codex/sessions/YYYY/MM/DD/file.jsonl.
             const relPath = filePath.slice(dir.length + 1);
-            const parts = relPath.split('/');
-            let date;
-            if (parts.length >= 3) {
-                date = `${parts[0]}-${parts[1]?.padStart(2, '0')}-${parts[2]?.padStart(2, '0')}`;
-            }
-            else {
-                date = toDateStr((await stat(filePath)).mtime);
-            }
+            const date = codexDateFromRelPath(relPath) ?? toDateStr((await stat(filePath)).mtime);
             // Codex stores running totals; take the max per file.
             let maxTotal = 0;
             let fileModel = '';
@@ -123,28 +129,27 @@ export async function scanHermes() {
     catch {
         return emptyResult('hermes');
     }
-    const { execSync } = await import('node:child_process');
     const collector = new TokenCollector('hermes');
     try {
-        const raw = execSync(`sqlite3 -readonly "${dbPath}" "select s.id, coalesce(s.model,'') as model, s.started_at, s.input_tokens, s.output_tokens, s.cache_read_tokens, s.cache_write_tokens, s.reasoning_tokens, coalesce((select count(*) from messages m where m.session_id = s.id and m.role = 'assistant'), 0) as msg_count from sessions s"`, { encoding: 'utf8', timeout: 10000 }).trim();
-        if (!raw)
+        const rows = await queryDb(dbPath, `select s.id, coalesce(s.model,'') as model, s.started_at, s.input_tokens, s.output_tokens, s.cache_read_tokens, s.cache_write_tokens, s.reasoning_tokens, coalesce((select count(*) from messages m where m.session_id = s.id and m.role = 'assistant'), 0) as msg_count from sessions s`);
+        if (rows.length === 0)
             return emptyResult('hermes');
-        for (const row of raw.split('\n')) {
-            const [, model, startedAt, inputTokens, outputTokens, cacheRead, cacheWrite, reasoning, msgCount,] = row.split('|');
-            const tokens = (Number.parseInt(inputTokens ?? '0', 10) || 0) +
-                (Number.parseInt(outputTokens ?? '0', 10) || 0) +
-                (Number.parseInt(cacheRead ?? '0', 10) || 0) +
-                (Number.parseInt(cacheWrite ?? '0', 10) || 0) +
-                (Number.parseInt(reasoning ?? '0', 10) || 0);
+        for (const row of rows) {
+            const [, model, startedAt, inputTokens, outputTokens, cacheRead, cacheWrite, reasoning, msgCount,] = row;
+            const tokens = num(inputTokens) +
+                num(outputTokens) +
+                num(cacheRead) +
+                num(cacheWrite) +
+                num(reasoning);
             if (tokens <= 0)
                 continue;
-            const tsSec = Number.parseFloat(startedAt ?? '0');
+            const tsSec = num(startedAt);
             if (!Number.isFinite(tsSec) || tsSec <= 0)
                 continue;
             const d = new Date(Math.round(tsSec * 1000));
             const date = toDateStr(d);
-            const m = (model ?? '').trim();
-            const messages = Number.parseInt(msgCount ?? '0', 10) || 1;
+            const m = str(model).trim();
+            const messages = num(msgCount) || 1;
             collector.addDaily(date, m, tokens, messages);
             collector.addHourly(date, d.getHours(), m, tokens, messages);
         }
@@ -250,23 +255,18 @@ export async function scanOpenCode() {
     const dbPath = join(baseDir, 'opencode.db');
     try {
         await stat(dbPath);
-        const { execSync } = await import('node:child_process');
-        const raw = execSync(`sqlite3 -readonly "${dbPath}" "SELECT json_extract(data,'$.time.created'), coalesce(json_extract(data,'$.modelID'),''), coalesce(json_extract(data,'$.tokens.input'),0), coalesce(json_extract(data,'$.tokens.output'),0), coalesce(json_extract(data,'$.tokens.cache.read'),0), coalesce(json_extract(data,'$.tokens.cache.write'),0), coalesce(json_extract(data,'$.tokens.reasoning'),0) FROM message WHERE json_extract(data,'$.role')='assistant'"`, { encoding: 'utf8', timeout: 15000, stdio: 'pipe' }).trim();
-        if (raw) {
-            for (const row of raw.split('\n')) {
-                const [time, model, inp, out, cr, cw, reason] = row.split('|');
-                const tokens = (Number.parseInt(inp ?? '0', 10) || 0) +
-                    (Number.parseInt(out ?? '0', 10) || 0) +
-                    (Number.parseInt(cr ?? '0', 10) || 0) +
-                    (Number.parseInt(cw ?? '0', 10) || 0) +
-                    (Number.parseInt(reason ?? '0', 10) || 0);
+        const rows = await queryDb(dbPath, `SELECT json_extract(data,'$.time.created'), coalesce(json_extract(data,'$.modelID'),''), coalesce(json_extract(data,'$.tokens.input'),0), coalesce(json_extract(data,'$.tokens.output'),0), coalesce(json_extract(data,'$.tokens.cache.read'),0), coalesce(json_extract(data,'$.tokens.cache.write'),0), coalesce(json_extract(data,'$.tokens.reasoning'),0) FROM message WHERE json_extract(data,'$.role')='assistant'`);
+        if (rows.length > 0) {
+            for (const row of rows) {
+                const [time, model, inp, out, cr, cw, reason] = row;
+                const tokens = num(inp) + num(out) + num(cr) + num(cw) + num(reason);
                 if (tokens <= 0)
                     continue;
-                const tsMs = Number(time ?? '0');
+                const tsMs = num(time);
                 if (!Number.isFinite(tsMs) || tsMs <= 0)
                     continue;
                 const d = new Date(tsMs);
-                const m = (model ?? '').trim();
+                const m = str(model).trim();
                 collector.addDaily(toDateStr(d), m, tokens, 1);
                 collector.addHourly(toDateStr(d), d.getHours(), m, tokens, 1);
             }
@@ -395,35 +395,32 @@ export async function scanCursorLocal() {
     catch {
         return { ...emptyResult('cursor'), cursorStats: null };
     }
-    const { execSync } = await import('node:child_process');
     const collector = new TokenCollector('cursor');
     try {
-        const raw = execSync(`sqlite3 "${dbPath}" "select commitHash, linesAdded, linesDeleted, composerLinesAdded, composerLinesDeleted, humanLinesAdded, humanLinesDeleted, v2AiPercentage from scored_commits;"`, { encoding: 'utf8', timeout: 10000 }).trim();
-        if (!raw)
+        const rows = await queryDb(dbPath, `select commitHash, linesAdded, linesDeleted, composerLinesAdded, composerLinesDeleted, humanLinesAdded, humanLinesDeleted, v2AiPercentage from scored_commits;`);
+        if (rows.length === 0)
             return { ...emptyResult('cursor'), cursorStats: null };
-        const rows = raw.split('\n');
         let totalTokens = 0;
         let totalAiLines = 0;
         let totalHumanLines = 0;
         let aiPctSum = 0;
         for (const row of rows) {
-            const [, , , composerAdded, composerDeleted, humanAdded, , aiPct] = row.split('|');
-            const aiLines = (parseInt(composerAdded ?? '0', 10) || 0) +
-                (parseInt(composerDeleted ?? '0', 10) || 0);
-            totalAiLines += parseInt(composerAdded ?? '0', 10) || 0;
-            totalHumanLines += parseInt(humanAdded ?? '0', 10) || 0;
-            aiPctSum += parseFloat(aiPct ?? '0') || 0;
+            const composerAdded = num(row[3]);
+            const composerDeleted = num(row[4]);
+            const humanAdded = num(row[5]);
+            const aiLines = composerAdded + composerDeleted;
+            totalAiLines += composerAdded;
+            totalHumanLines += humanAdded;
+            aiPctSum += num(row[7]);
             totalTokens += aiLines * 30;
         }
         let models = [];
         try {
-            const modelRaw = execSync(`sqlite3 "${dbPath}" "select model, count(*) from ai_code_hashes where model is not null and model != '' group by model order by count(*) desc;"`, { encoding: 'utf8', timeout: 5000 }).trim();
-            if (modelRaw) {
-                models = modelRaw.split('\n').map((line) => {
-                    const [model, count] = line.split('|');
-                    return { model: model ?? '', uses: parseInt(count ?? '0', 10) || 0 };
-                });
-            }
+            const modelRows = await queryDb(dbPath, `select model, count(*) from ai_code_hashes where model is not null and model != '' group by model order by count(*) desc;`);
+            models = modelRows.map((row) => ({
+                model: str(row[0]),
+                uses: num(row[1]),
+            }));
         }
         catch {
             // optional