qodewk 0.2.0 → 0.2.2

package/README.md

@@ -114,10 +114,14 @@ Unlike single-vendor utilities (like Chit, which only support Claude Code CLI),
 | `npx qodewk --platform <platform>` | Filter telemetry to a specific platform (`antigravity`, `claude`, `cursor`, `all`) | Single-platform audit |
 | `npx qodewk --json` | Export machine-readable telemetry conforming to canonical `ReceiptV1` schema | Formatted JSON output |
 | `npx qodewk share` | Publish privacy-safe metadata to Qodewk Cloud and generate short link | `https://qodewk.dev/r/rec_...` |
+| `npx qodewk share --today` | Share today's harvested footprint window | Public URL + claim token |
 | `npx qodewk audit --base <branch>` | Calculate aggregate diff and telemetry across an entire PR branch range | Git revision delta receipt |
+| `npx qodewk hook install` / `hooks install` | Install non-blocking `post-commit` + `post-rewrite` hooks | Local auto-record |
+| `npx qodewk record` / `record-event` | Silent SQLite record (hook entrypoint) | exit 0 always |
 | `npx qodewk -f markdown -o receipt.md` | Export sticky Markdown receipt directly formatted for GitHub PR comments | File `receipt.md` |
 | `npx qodewk -p <provider> -m <model>` | Override detected provider & frontier model pricing rate card | Custom model cost estimate |
 | `npx qodewk --anon` | Redact sensitive repository and branch identifiers | Privacy-hardened receipt |
+| `npx qodewk --local` | Force local-only mode (no cloud sockets on share) | Local thermal receipt |
 
 ---
 

package/dist/index.cjs

@@ -1153,7 +1153,7 @@ var require_command = __commonJS({
     "use strict";
     var EventEmitter2 = require("events").EventEmitter;
     var childProcess = require("child_process");
-    var path7 = require("path");
+    var path8 = require("path");
     var fs7 = require("fs");
     var process2 = require("process");
     var { Argument: Argument2, humanReadableArgName } = require_argument();
@@ -2153,9 +2153,9 @@ Expecting one of '${allowedValues.join("', '")}'`);
         let launchWithNode = false;
         const sourceExt = [".js", ".ts", ".tsx", ".mjs", ".cjs"];
         function findFile(baseDir, baseName) {
-          const localBin = path7.resolve(baseDir, baseName);
+          const localBin = path8.resolve(baseDir, baseName);
           if (fs7.existsSync(localBin)) return localBin;
-          if (sourceExt.includes(path7.extname(baseName))) return void 0;
+          if (sourceExt.includes(path8.extname(baseName))) return void 0;
           const foundExt = sourceExt.find(
             (ext) => fs7.existsSync(`${localBin}${ext}`)
           );
@@ -2173,17 +2173,17 @@ Expecting one of '${allowedValues.join("', '")}'`);
           } catch {
             resolvedScriptPath = this._scriptPath;
           }
-          executableDir = path7.resolve(
-            path7.dirname(resolvedScriptPath),
+          executableDir = path8.resolve(
+            path8.dirname(resolvedScriptPath),
             executableDir
           );
         }
         if (executableDir) {
           let localFile = findFile(executableDir, executableFile);
           if (!localFile && !subcommand._executableFile && this._scriptPath) {
-            const legacyName = path7.basename(
+            const legacyName = path8.basename(
               this._scriptPath,
-              path7.extname(this._scriptPath)
+              path8.extname(this._scriptPath)
             );
             if (legacyName !== this._name) {
               localFile = findFile(
@@ -2194,7 +2194,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
           }
           executableFile = localFile || executableFile;
         }
-        launchWithNode = sourceExt.includes(path7.extname(executableFile));
+        launchWithNode = sourceExt.includes(path8.extname(executableFile));
         let proc;
         if (process2.platform !== "win32") {
           if (launchWithNode) {
@@ -3041,7 +3041,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
        * @return {Command}
        */
       nameFromFilename(filename) {
-        this._name = path7.basename(filename, path7.extname(filename));
+        this._name = path8.basename(filename, path8.extname(filename));
         return this;
       }
       /**
@@ -3055,9 +3055,9 @@ Expecting one of '${allowedValues.join("', '")}'`);
        * @param {string} [path]
        * @return {(string|null|Command)}
        */
-      executableDir(path8) {
-        if (path8 === void 0) return this._executableDir;
-        this._executableDir = path8;
+      executableDir(path9) {
+        if (path9 === void 0) return this._executableDir;
+        this._executableDir = path9;
         return this;
       }
       /**
@@ -4956,10 +4956,10 @@ var require_segments = __commonJS({
       const segs = getSegmentsFromString(data, Utils.isKanjiModeEnabled());
       const nodes = buildNodes(segs);
       const graph = buildGraph(nodes, version);
-      const path7 = dijkstra.find_path(graph.map, "start", "end");
+      const path8 = dijkstra.find_path(graph.map, "start", "end");
       const optimizedSegs = [];
-      for (let i2 = 1; i2 < path7.length - 1; i2++) {
-        optimizedSegs.push(graph.table[path7[i2]].node);
+      for (let i2 = 1; i2 < path8.length - 1; i2++) {
+        optimizedSegs.push(graph.table[path8[i2]].node);
       }
       return exports2.fromArray(mergeSegments(optimizedSegs));
     };
@@ -6001,10 +6001,10 @@ var require_src2 = __commonJS({
     var fs_1 = require("fs");
     var debug_1 = __importDefault(require_src());
     var log = debug_1.default("@kwsites/file-exists");
-    function check(path7, isFile, isDirectory) {
-      log(`checking %s`, path7);
+    function check(path8, isFile, isDirectory) {
+      log(`checking %s`, path8);
       try {
-        const stat = fs_1.statSync(path7);
+        const stat = fs_1.statSync(path8);
         if (stat.isFile() && isFile) {
           log(`[OK] path represents a file`);
           return true;
@@ -6024,8 +6024,8 @@ var require_src2 = __commonJS({
         throw e;
       }
     }
-    function exists2(path7, type = exports2.READABLE) {
-      return check(path7, (type & exports2.FILE) > 0, (type & exports2.FOLDER) > 0);
+    function exists2(path8, type = exports2.READABLE) {
+      return check(path8, (type & exports2.FILE) > 0, (type & exports2.FOLDER) > 0);
     }
     exports2.exists = exists2;
     exports2.FILE = 1;
@@ -6090,6 +6090,7 @@ var require_dist2 = __commonJS({
 
 // src/index.ts
 var fs6 = __toESM(require("fs"), 1);
+var path7 = __toESM(require("path"), 1);
 
 // ../../node_modules/.pnpm/commander@13.1.0/node_modules/commander/esm.mjs
 var import_index = __toESM(require_commander(), 1);
@@ -6605,8 +6606,8 @@ function getErrorMap() {
 
 // ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/helpers/parseUtil.js
 var makeIssue = (params) => {
-  const { data, path: path7, errorMaps, issueData } = params;
-  const fullPath = [...path7, ...issueData.path || []];
+  const { data, path: path8, errorMaps, issueData } = params;
+  const fullPath = [...path8, ...issueData.path || []];
   const fullIssue = {
     ...issueData,
     path: fullPath
@@ -6722,11 +6723,11 @@ var errorUtil;
 
 // ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/types.js
 var ParseInputLazyPath = class {
-  constructor(parent, value, path7, key) {
+  constructor(parent, value, path8, key) {
     this._cachedPath = [];
     this.parent = parent;
     this.data = value;
-    this._path = path7;
+    this._path = path8;
     this._key = key;
   }
   get path() {
@@ -10838,8 +10839,8 @@ function toLinesWithContent(input = "", trimmed2 = true, separator = "\n") {
 function forEachLineWithContent(input, callback) {
   return toLinesWithContent(input, true).map((line) => callback(line));
 }
-function folderExists(path7) {
-  return (0, import_file_exists.exists)(path7, import_file_exists.FOLDER);
+function folderExists(path8) {
+  return (0, import_file_exists.exists)(path8, import_file_exists.FOLDER);
 }
 function append(target, item) {
   if (Array.isArray(target)) {
@@ -11241,8 +11242,8 @@ function checkIsRepoRootTask() {
     commands,
     format: "utf-8",
     onError,
-    parser(path7) {
-      return /^\.(git)?$/.test(path7.trim());
+    parser(path8) {
+      return /^\.(git)?$/.test(path8.trim());
     }
   };
 }
@@ -11676,11 +11677,11 @@ function parseGrep(grep) {
   const paths = /* @__PURE__ */ new Set();
   const results = {};
   forEachLineWithContent(grep, (input) => {
-    const [path7, line, preview] = input.split(NULL);
-    paths.add(path7);
-    (results[path7] = results[path7] || []).push({
+    const [path8, line, preview] = input.split(NULL);
+    paths.add(path8);
+    (results[path8] = results[path8] || []).push({
       line: asNumber(line),
-      path: path7,
+      path: path8,
       preview
     });
   });
@@ -12444,14 +12445,14 @@ var init_hash_object = __esm({
     init_task();
   }
 });
-function parseInit(bare, path7, text) {
+function parseInit(bare, path8, text) {
   const response = String(text).trim();
   let result;
   if (result = initResponseRegex.exec(response)) {
-    return new InitSummary(bare, path7, false, result[1]);
+    return new InitSummary(bare, path8, false, result[1]);
   }
   if (result = reInitResponseRegex.exec(response)) {
-    return new InitSummary(bare, path7, true, result[1]);
+    return new InitSummary(bare, path8, true, result[1]);
   }
   let gitDir = "";
   const tokens = response.split(" ");
@@ -12462,7 +12463,7 @@ function parseInit(bare, path7, text) {
       break;
     }
   }
-  return new InitSummary(bare, path7, /^re/i.test(response), gitDir);
+  return new InitSummary(bare, path8, /^re/i.test(response), gitDir);
 }
 var InitSummary;
 var initResponseRegex;
@@ -12471,9 +12472,9 @@ var init_InitSummary = __esm({
   "src/lib/responses/InitSummary.ts"() {
     "use strict";
     InitSummary = class {
-      constructor(bare, path7, existing, gitDir) {
+      constructor(bare, path8, existing, gitDir) {
         this.bare = bare;
-        this.path = path7;
+        this.path = path8;
         this.existing = existing;
         this.gitDir = gitDir;
       }
@@ -12485,7 +12486,7 @@ var init_InitSummary = __esm({
 function hasBareCommand(command) {
   return command.includes(bareCommand);
 }
-function initTask(bare = false, path7, customArgs) {
+function initTask(bare = false, path8, customArgs) {
   const commands = ["init", ...customArgs];
   if (bare && !hasBareCommand(commands)) {
     commands.splice(1, 0, bareCommand);
@@ -12494,7 +12495,7 @@ function initTask(bare = false, path7, customArgs) {
     commands,
     format: "utf-8",
     parser(text) {
-      return parseInit(commands.includes("--bare"), path7, text);
+      return parseInit(commands.includes("--bare"), path8, text);
     }
   };
 }
@@ -13309,12 +13310,12 @@ var init_FileStatusSummary = __esm({
     "use strict";
     fromPathRegex = /^(.+)\0(.+)$/;
     FileStatusSummary = class {
-      constructor(path7, index, working_dir) {
-        this.path = path7;
+      constructor(path8, index, working_dir) {
+        this.path = path8;
         this.index = index;
         this.working_dir = working_dir;
         if (index === "R" || working_dir === "R") {
-          const detail = fromPathRegex.exec(path7) || [null, path7, path7];
+          const detail = fromPathRegex.exec(path8) || [null, path8, path8];
           this.from = detail[2] || "";
           this.path = detail[1] || "";
         }
@@ -13345,14 +13346,14 @@ function splitLine(result, lineStr) {
     default:
       return;
   }
-  function data(index, workingDir, path7) {
+  function data(index, workingDir, path8) {
     const raw = `${index}${workingDir}`;
     const handler = parsers6.get(raw);
     if (handler) {
-      handler(result, path7);
+      handler(result, path8);
     }
     if (raw !== "##" && raw !== "!!") {
-      result.files.push(new FileStatusSummary(path7, index, workingDir));
+      result.files.push(new FileStatusSummary(path8, index, workingDir));
     }
   }
 }
@@ -13703,9 +13704,9 @@ var init_simple_git_api = __esm({
           next
         );
       }
-      hashObject(path7, write) {
+      hashObject(path8, write) {
         return this._runTask(
-          hashObjectTask(path7, write === true),
+          hashObjectTask(path8, write === true),
           trailingFunctionArgument(arguments)
         );
       }
@@ -14059,8 +14060,8 @@ var init_branch = __esm({
   }
 });
 function toPath(input) {
-  const path7 = input.trim().replace(/^["']|["']$/g, "");
-  return path7 && (0, import_node_path.normalize)(path7);
+  const path8 = input.trim().replace(/^["']|["']$/g, "");
+  return path8 && (0, import_node_path.normalize)(path8);
 }
 var parseCheckIgnore;
 var init_CheckIgnore = __esm({
@@ -14345,8 +14346,8 @@ __export2(sub_module_exports, {
   subModuleTask: () => subModuleTask,
   updateSubModuleTask: () => updateSubModuleTask
 });
-function addSubModuleTask(repo, path7) {
-  return subModuleTask(["add", repo, path7]);
+function addSubModuleTask(repo, path8) {
+  return subModuleTask(["add", repo, path8]);
 }
 function initSubModuleTask(customArgs) {
   return subModuleTask(["init", ...customArgs]);
@@ -14660,8 +14661,8 @@ var require_git = __commonJS2({
       }
       return this._runTask(straightThroughStringTask2(command, this._trimmed), next);
     };
-    Git2.prototype.submoduleAdd = function(repo, path7, then) {
-      return this._runTask(addSubModuleTask2(repo, path7), trailingFunctionArgument2(arguments));
+    Git2.prototype.submoduleAdd = function(repo, path8, then) {
+      return this._runTask(addSubModuleTask2(repo, path8), trailingFunctionArgument2(arguments));
     };
     Git2.prototype.submoduleUpdate = function(args, then) {
       return this._runTask(
@@ -15331,9 +15332,15 @@ async function extractGitMetrics(optionsOrPath = process.cwd()) {
   let renames = 0;
   const extCounts = {};
   let totalTrackedFiles = 0;
+  const changedFiles = [];
   for (const f of diffSummary.files) {
     if (f.file.includes(" => ")) {
       renames++;
+      const dest = f.file.split(" => ").pop()?.trim();
+      if (dest)
+        changedFiles.push(dest.replace(/\\/g, "/"));
+    } else {
+      changedFiles.push(f.file.replace(/\\/g, "/"));
     }
     const ext = path.extname(f.file).replace(/^\./, "").toLowerCase();
     const lang = mapExtensionToLanguage(ext);
@@ -15357,6 +15364,7 @@ async function extractGitMetrics(optionsOrPath = process.cwd()) {
     netLines,
     renames,
     languages,
+    changedFiles,
     branch,
     headSha,
     baseSha,
@@ -15366,6 +15374,21 @@ async function extractGitMetrics(optionsOrPath = process.cwd()) {
     commitsCount
   };
 }
+function computeAiWrittenRatio(changedFiles, aiEditedFiles) {
+  if (changedFiles.length === 0 || aiEditedFiles.length === 0) {
+    return void 0;
+  }
+  const norm = (f) => f.replace(/\\/g, "/").replace(/^\.\//, "").toLowerCase();
+  const aiNorm = aiEditedFiles.map(norm);
+  let hit = 0;
+  for (const cf of changedFiles) {
+    const c3 = norm(cf);
+    const matched = aiNorm.some((a) => a === c3 || c3.endsWith("/" + a) || a.endsWith("/" + c3) || c3.endsWith(a) || a.endsWith(c3));
+    if (matched)
+      hit++;
+  }
+  return Math.round(hit / changedFiles.length * 100) / 100;
+}
 function mapExtensionToLanguage(ext) {
   const map = {
     ts: "TypeScript",
@@ -16295,9 +16318,12 @@ function formatMarkdownReceipt(receipt, publicUrl) {
   const costPrefix = receipt.ai.mode === "verified" ? "$" : "~$";
   const confidencePercent = `${Math.round(receipt.ai.confidence * 100)}%`;
   const confidenceTier = receipt.ai.confidence >= 0.8 ? "High" : receipt.ai.confidence >= 0.4 ? "Medium" : "Low";
+  const tokenProvenance = receipt.ai.mode === "verified" || receipt.ai.mode === "observed" ? "Observed" : "Estimated";
+  const costProvenance = receipt.ai.mode === "verified" ? "Verified" : receipt.ai.mode === "observed" ? "Observed" : "Estimated";
+  const tokenDisplay = receipt.ai.mode === "verified" || receipt.ai.mode === "observed" ? totalTokens : `~${totalTokens}`;
   const lines = [
     `<!-- QODEWK_RECEIPT_START:${receipt.receipt.id} -->`,
-    `### \u{1F9FE} Qodewk Telemetry Receipt`,
+    `### Qodewk Telemetry Receipt`,
     ``,
     `| Metric | Measurement | Provenance |`,
     `| :--- | :--- | :--- |`,
@@ -16306,19 +16332,42 @@ function formatMarkdownReceipt(receipt, publicUrl) {
     `| **Lines Deleted** | \`-${receipt.mutation.deletions}\` | Observed |`,
     `| **Net Delta** | \`${receipt.mutation.netLines >= 0 ? "+" : ""}${receipt.mutation.netLines}\` | Observed |`,
     `| **AI Model** | \`${receipt.ai.provider} \xB7 ${receipt.ai.model || "Unknown"}\` | ${receipt.ai.mode} |`,
-    `| **Tokens Consumed** | \`~${totalTokens}\` | Estimated |`,
-    `| **AI Spend** | \`${costPrefix}${receipt.ai.cost.toFixed(2)}\` | Estimated |`,
+    `| **Tokens Consumed** | \`${tokenDisplay}\` | ${tokenProvenance} |`,
+    `| **AI Spend** | \`${costPrefix}${receipt.ai.cost.toFixed(2)}\` | ${costProvenance} |`,
     `| **Confidence** | \`${confidencePercent}\` (${confidenceTier}) | Dual-Engine |`,
     ``,
-    `> \u{1F512} **Privacy Guarantee:** *Source code was never uploaded to Qodewk. Telemetry computed strictly from cryptographic Git metadata.*`,
+    `> **Privacy Guarantee:** *Source code was never uploaded to Qodewk. Telemetry computed strictly from cryptographic Git metadata.*`,
     ``,
-    `\u{1F517} [**View Full Digital Receipt \u2192**](${url})`,
+    `[**View Full Digital Receipt \u2192**](${url})`,
     `<!-- QODEWK_RECEIPT_END -->`
   ];
   return lines.join("\n");
 }
 
 // ../core/dist/index.js
+function sanitizeReceiptForShare(receipt) {
+  const sessions = receipt.ai.sessions?.map((s) => ({
+    provider: s.provider,
+    model: s.model,
+    task: s.task,
+    tokens: s.tokens,
+    cost: s.cost,
+    confidence: s.confidence,
+    mode: s.mode
+  }));
+  return {
+    ...receipt,
+    privacy: {
+      ...receipt.privacy,
+      sourceExcluded: true,
+      isPublic: true
+    },
+    ai: {
+      ...receipt.ai,
+      sessions
+    }
+  };
+}
 async function generateReceipt(options = {}) {
   const metrics = await extractGitMetrics({
     repoPath: options.repoPath || process.cwd(),
@@ -16334,7 +16383,7 @@ async function generateReceipt(options = {}) {
     platform: options.platform
   });
   const primaryFp = harvestResult.primaryFootprint;
-  let detected = detectProviderFromCommit(metrics.commitMessage);
+  const detected = detectProviderFromCommit(metrics.commitMessage);
   const provider = options.provider || primaryFp?.platform || detected?.provider || "unknown";
   const model = options.model || primaryFp?.model || detected?.model;
   const task = options.task || primaryFp?.taskTitle || (harvestResult.tasks.length > 0 ? harvestResult.tasks[0] : void 0);
@@ -16348,10 +16397,7 @@ async function generateReceipt(options = {}) {
     confidence: fp.confidence,
     mode: fp.mode
   }));
-  let aiWrittenRatio = void 0;
-  if (primaryFp) {
-    aiWrittenRatio = 0.88;
-  }
+  const aiWrittenRatio = computeAiWrittenRatio(metrics.changedFiles, harvestResult.filesEdited);
   const costResult = estimateCost({
     files: metrics.files,
     insertions: metrics.insertions,
@@ -16361,18 +16407,22 @@ async function generateReceipt(options = {}) {
     sessions: sessions.length > 0 ? sessions : void 0,
     confidence: primaryFp?.confidence || detected?.confidence
   });
-  const receiptId = `rec_${crypto2.randomBytes(12).toString("hex")}`;
   const now = (/* @__PURE__ */ new Date()).toISOString();
   const payloadToHash = {
     repoHash: metrics.repoHash,
     headSha: metrics.headSha,
+    baseSha: metrics.baseSha,
     files: metrics.files,
     insertions: metrics.insertions,
     deletions: metrics.deletions,
     cost: costResult.cost,
-    tokens: costResult.tokens
+    tokens: costResult.tokens,
+    mode: costResult.mode,
+    provider: costResult.provider,
+    model: costResult.model
   };
   const contentHash = crypto2.createHash("sha256").update(JSON.stringify(payloadToHash)).digest("hex");
+  const receiptId = `rec_${contentHash.slice(0, 24)}`;
   const receipt = {
     version: "1.0",
     receipt: {
@@ -16409,7 +16459,7 @@ async function generateReceipt(options = {}) {
     },
     privacy: {
       sourceExcluded: true,
-      isPublic: options.isPublic ?? true,
+      isPublic: options.isPublic ?? false,
       anonymizeBranch: options.anonymizeBranch ?? false
     }
   };
@@ -16417,80 +16467,279 @@ async function generateReceipt(options = {}) {
 }
 
 // src/index.ts
+var SHARE_PAYLOAD_MAX_BYTES = 5e4;
+function resolveCliVersion() {
+  try {
+    const argv1 = process.argv[1] ? path7.dirname(path7.resolve(process.argv[1])) : process.cwd();
+    const candidates = [
+      path7.join(argv1, "..", "package.json"),
+      path7.join(argv1, "package.json")
+    ];
+    for (const candidate of candidates) {
+      if (!fs6.existsSync(candidate)) continue;
+      const pkg = JSON.parse(fs6.readFileSync(candidate, "utf-8"));
+      if (pkg.name === "qodewk" && pkg.version) return pkg.version;
+    }
+  } catch {
+  }
+  return "0.2.1";
+}
+function resolveSince(options) {
+  return options.today ? "today" : options.since;
+}
+function persistReceipt(receipt, claimToken) {
+  try {
+    const db = new LocalStateDB();
+    db.saveReceipt(receipt, claimToken);
+    db.close();
+  } catch {
+  }
+}
+function resolveGitHooksDir(cwd = process.cwd()) {
+  const gitPath = path7.join(cwd, ".git");
+  if (!fs6.existsSync(gitPath)) return null;
+  let gitCommonDir;
+  const stat = fs6.statSync(gitPath);
+  if (stat.isDirectory()) {
+    gitCommonDir = gitPath;
+  } else {
+    const content = fs6.readFileSync(gitPath, "utf-8");
+    const match = content.match(/gitdir:\s*(.+)/i);
+    if (!match?.[1]) return null;
+    let gitDir = match[1].trim();
+    if (!path7.isAbsolute(gitDir)) {
+      gitDir = path7.resolve(cwd, gitDir);
+    }
+    const commonFile = path7.join(gitDir, "commondir");
+    if (fs6.existsSync(commonFile)) {
+      let common = fs6.readFileSync(commonFile, "utf-8").trim();
+      if (!path7.isAbsolute(common)) {
+        common = path7.resolve(gitDir, common);
+      }
+      gitCommonDir = common;
+    } else if (path7.basename(path7.dirname(gitDir)) === "worktrees") {
+      gitCommonDir = path7.dirname(path7.dirname(gitDir));
+    } else {
+      gitCommonDir = gitDir;
+    }
+  }
+  return path7.join(gitCommonDir, "hooks");
+}
+var HOOK_MARKER_BEGIN = "# --- BEGIN QODEWK HOOK ---";
+var HOOK_MARKER_END = "# --- END QODEWK HOOK ---";
+var HOOK_SNIPPET = `
+${HOOK_MARKER_BEGIN}
+# Non-blocking Qodewk background recorder (< 5ms)
+if command -v qodewk >/dev/null 2>&1 || command -v pnpm >/dev/null 2>&1 || [ -f "./node_modules/.bin/qodewk" ]; then
+  ( ( qodewk record || pnpm qodewk record || npx qodewk record ) >/dev/null 2>&1 & )
+fi
+${HOOK_MARKER_END}
+`;
+function installHookFile(hookFile) {
+  let content = "";
+  if (fs6.existsSync(hookFile)) {
+    content = fs6.readFileSync(hookFile, "utf-8");
+  } else {
+    content = "#!/bin/sh\n";
+  }
+  if (content.includes(HOOK_MARKER_BEGIN)) {
+    return "exists";
+  }
+  fs6.writeFileSync(hookFile, content + HOOK_SNIPPET, { mode: 493 });
+  return "installed";
+}
+function uninstallHookFile(hookFile) {
+  if (!fs6.existsSync(hookFile)) return "absent";
+  const content = fs6.readFileSync(hookFile, "utf-8");
+  if (!content.includes(HOOK_MARKER_BEGIN)) return "missing";
+  const regex = new RegExp(`\\n?${HOOK_MARKER_BEGIN}[\\s\\S]*?${HOOK_MARKER_END}\\n?`, "g");
+  const updated = content.replace(regex, "");
+  fs6.writeFileSync(hookFile, updated, { mode: 493 });
+  return "removed";
+}
 var program2 = new Command();
-program2.name("qodewk").description("Universal telemetry and digital receipt generator for the AI coding agent era").version("0.1.10").option("-j, --json", "Output receipt in machine-readable JSON format").option("-f, --format <format>", "Output format (terminal, json, markdown)", "terminal").option("-o, --out <path>", "Write receipt output to specified file path").option("-p, --provider <provider>", "Specify AI provider (antigravity, claude, cursor, etc.)").option("-m, --model <model>", "Specify AI model identifier").option("-s, --since <duration>", "Harvest agent footprints since duration (e.g. today, 24h, 7d)").option("--today", "Harvest agent footprints for today").option("--platform <platform>", "Filter agent platform (antigravity, claude, cursor, all)").option("--anon", "Anonymize branch name in output").option("--barcode", "Render 1D barcode simulation instead of scannable 2D QR code").action(async (options) => {
+program2.name("qodewk").description("Universal telemetry and digital receipt generator for the AI coding agent era").version(resolveCliVersion()).option("-j, --json", "Output receipt in machine-readable JSON format").option("-f, --format <format>", "Output format (terminal, json, markdown)", "terminal").option("-o, --out <path>", "Write receipt output to specified file path").option("-p, --provider <provider>", "Specify AI provider (antigravity, claude, cursor, etc.)").option("-m, --model <model>", "Specify AI model identifier").option("-s, --since <duration>", "Harvest agent footprints since duration (e.g. today, 24h, 7d)").option("--today", "Harvest agent footprints for today").option("--platform <platform>", "Filter agent platform (antigravity, claude, cursor, all)").option("--anon", "Anonymize branch name in output").option("--local", "Force local-only mode (never open network sockets)").option("--barcode", "Render 1D barcode simulation instead of scannable 2D QR code").action(async (options) => {
   try {
-    const since = options.today ? "today" : options.since;
     const receipt = await generateReceipt({
       provider: options.provider,
       model: options.model,
-      since,
+      since: resolveSince(options),
       platform: options.platform,
-      anonymizeBranch: options.anon
+      anonymizeBranch: options.anon,
+      isPublic: false
     });
-    try {
-      const db = new LocalStateDB();
-      db.saveReceipt(receipt);
-      db.close();
-    } catch {
-    }
+    persistReceipt(receipt);
     await outputReceipt(receipt, options);
   } catch (err) {
-    console.error(import_picocolors.default.red(`Error generating receipt: ${err.message}`));
+    const message = err instanceof Error ? err.message : String(err);
+    console.error(import_picocolors.default.red(`Error generating receipt: ${message}`));
     process.exit(1);
   }
 });
-program2.command("audit").description("Audit PR or branch diff against a target base commit").option("-b, --base <base>", "Base git ref or commit SHA (e.g. origin/main)").option("-h, --head <head>", "Head git ref or commit SHA").option("-f, --format <format>", "Output format (terminal, json, markdown)", "terminal").option("-o, --out <path>", "Write receipt output to specified file path").option("-p, --provider <provider>", "Specify AI provider").option("-m, --model <model>", "Specify AI model").option("--barcode", "Render 1D barcode simulation instead of scannable 2D QR code").action(async (options) => {
+program2.command("audit").description("Audit PR or branch diff against a target base commit").option("-b, --base <base>", "Base git ref or commit SHA (e.g. origin/main)").option("-h, --head <head>", "Head git ref or commit SHA").option("-f, --format <format>", "Output format (terminal, json, markdown)", "terminal").option("-o, --out <path>", "Write receipt output to specified file path").option("-p, --provider <provider>", "Specify AI provider").option("-m, --model <model>", "Specify AI model").option("-s, --since <duration>", "Harvest agent footprints since duration").option("--today", "Harvest agent footprints for today").option("--platform <platform>", "Filter agent platform").option("--anon", "Anonymize branch name in output").option("--barcode", "Render 1D barcode simulation instead of scannable 2D QR code").action(async (options) => {
   try {
     const receipt = await generateReceipt({
       baseSha: options.base,
       headSha: options.head,
       provider: options.provider,
-      model: options.model
+      model: options.model,
+      since: resolveSince(options),
+      platform: options.platform,
+      anonymizeBranch: options.anon,
+      isPublic: false
     });
+    persistReceipt(receipt);
     await outputReceipt(receipt, options);
   } catch (err) {
-    console.error(import_picocolors.default.red(`Error auditing git range: ${err.message}`));
+    const message = err instanceof Error ? err.message : String(err);
+    console.error(import_picocolors.default.red(`Error auditing git range: ${message}`));
     process.exit(1);
   }
 });
-program2.command("share").description("Publish privacy-safe receipt to Qodewk cloud and get a shareable URL").option("-p, --provider <provider>", "Specify AI provider").option("-m, --model <model>", "Specify AI model").option("--barcode", "Render 1D barcode simulation instead of scannable 2D QR code").action(async (options) => {
+program2.command("share").description("Publish privacy-safe receipt to Qodewk cloud and get a shareable URL").option("-p, --provider <provider>", "Specify AI provider").option("-m, --model <model>", "Specify AI model").option("-s, --since <duration>", "Harvest agent footprints since duration").option("--today", "Harvest agent footprints for today").option("--platform <platform>", "Filter agent platform").option("--anon", "Anonymize branch name in output").option("-f, --format <format>", "Local fallback output format", "terminal").option("-j, --json", "Also print JSON after share").option("--barcode", "Render 1D barcode simulation instead of scannable 2D QR code").action(async (options) => {
   try {
     const receipt = await generateReceipt({
       provider: options.provider,
-      model: options.model
+      model: options.model,
+      since: resolveSince(options),
+      platform: options.platform,
+      anonymizeBranch: options.anon,
+      isPublic: false
     });
-    if (process.env.QODEWK_TELEMETRY === "off") {
-      console.log(import_picocolors.default.yellow("\n\u26A0\uFE0F Cloud publishing is disabled because QODEWK_TELEMETRY=off."));
+    const localFlag = program2.opts().local === true;
+    if (process.env.QODEWK_TELEMETRY === "off" || localFlag) {
+      console.log(
+        import_picocolors.default.yellow(
+          `
+Cloud publishing is disabled (${localFlag ? "--local" : "QODEWK_TELEMETRY=off"}).`
+        )
+      );
       console.log(import_picocolors.default.dim("Telemetry remains strictly stored in local SQLite (~/.qodewk/state.db).\n"));
+      persistReceipt(receipt);
       await renderTerminalReceipt(receipt, void 0, options.barcode);
       return;
     }
-    const endpoint = process.env.QODEWK_API_URL || "https://qodewk.flinkeo.online/api/receipts";
-    console.log(import_picocolors.default.dim(`Publishing receipt ${receipt.receipt.id} to ${endpoint}...`));
+    const sanitized = sanitizeReceiptForShare(receipt);
+    let body = JSON.stringify(sanitized);
+    if (Buffer.byteLength(body, "utf-8") > SHARE_PAYLOAD_MAX_BYTES && sanitized.ai.sessions) {
+      const trimmed2 = {
+        ...sanitized,
+        ai: { ...sanitized.ai, sessions: void 0 }
+      };
+      body = JSON.stringify(trimmed2);
+    }
+    if (Buffer.byteLength(body, "utf-8") > SHARE_PAYLOAD_MAX_BYTES) {
+      console.error(import_picocolors.default.red("Sanitized receipt still exceeds the 50 KB cloud payload limit."));
+      process.exit(1);
+    }
+    const endpoint = process.env.QODEWK_API_URL || `${process.env.NEXT_PUBLIC_APP_URL || process.env.QODEWK_APP_URL || "https://qodewk.flinkeo.online"}/api/receipts`;
+    console.log(import_picocolors.default.dim(`Publishing receipt ${sanitized.receipt.id} to ${endpoint}...`));
     try {
       const response = await fetch(endpoint, {
         method: "POST",
         headers: {
-          "Content-Type": "application/json"
+          "Content-Type": "application/json",
+          "Content-Length": String(Buffer.byteLength(body, "utf-8"))
         },
-        body: JSON.stringify(receipt)
+        body
       });
       if (!response.ok) {
-        throw new Error(`API responded with status ${response.status}`);
+        const errText = await response.text().catch(() => "");
+        throw new Error(`API responded with status ${response.status}${errText ? `: ${errText.slice(0, 200)}` : ""}`);
       }
       const data = await response.json();
-      const db = new LocalStateDB();
-      db.saveReceipt(receipt, data.claimToken);
-      db.close();
-      await renderTerminalReceipt(receipt, data.url, options.barcode);
+      persistReceipt(sanitized, data.claimToken);
+      console.log("");
+      console.log(import_picocolors.default.green("  Published successfully."));
+      console.log(`  ${import_picocolors.default.dim("Public URL:")} ${import_picocolors.default.underline(import_picocolors.default.cyan(data.url))}`);
+      console.log(`  ${import_picocolors.default.bold(import_picocolors.default.yellow("  Claim token (store securely \u2014 shown once):"))}`);
+      console.log(`  ${import_picocolors.default.yellow(data.claimToken)}`);
+      console.log(import_picocolors.default.dim("  Saved to ~/.qodewk/state.db \u2014 required to prove authorship later."));
+      console.log("");
+      await renderTerminalReceipt(sanitized, data.url, options.barcode);
+      if (options.json) {
+        console.log(JSON.stringify({ url: data.url, claimToken: data.claimToken, receipt: sanitized }, null, 2));
+      }
     } catch (networkErr) {
+      const message = networkErr instanceof Error ? networkErr.message : String(networkErr);
       console.log(import_picocolors.default.yellow(`
-Could not reach cloud API (${networkErr.message}). Rendered locally:`));
+Could not reach cloud API (${message}). Rendered locally:`));
+      persistReceipt(receipt);
       await renderTerminalReceipt(receipt, void 0, options.barcode);
     }
   } catch (err) {
-    console.error(import_picocolors.default.red(`Error sharing receipt: ${err.message}`));
+    const message = err instanceof Error ? err.message : String(err);
+    console.error(import_picocolors.default.red(`Error sharing receipt: ${message}`));
+    process.exit(1);
+  }
+});
+program2.command("record").alias("record-event").description("Silently record local telemetry receipt into SQLite (used by git hooks)").action(async () => {
+  try {
+    const receipt = await generateReceipt({ isPublic: false });
+    persistReceipt(receipt);
+    process.exit(0);
+  } catch {
+    process.exit(0);
+  }
+});
+var hookCommand = program2.command("hook").aliases(["hooks"]).description("Manage non-blocking Git hooks for automatic telemetry recording");
+hookCommand.command("install").description("Install non-blocking post-commit and post-rewrite Git hooks").action(async () => {
+  try {
+    const hooksDir = resolveGitHooksDir();
+    if (!hooksDir) {
+      console.error(import_picocolors.default.red("Error: Current directory is not a Git repository (.git not found)."));
+      process.exit(1);
+    }
+    if (!fs6.existsSync(hooksDir)) {
+      fs6.mkdirSync(hooksDir, { recursive: true });
+    }
+    const targets = ["post-commit", "post-rewrite"];
+    let installed = 0;
+    let existing = 0;
+    for (const name of targets) {
+      const result = installHookFile(path7.join(hooksDir, name));
+      if (result === "installed") installed++;
+      else existing++;
+    }
+    if (installed === 0 && existing > 0) {
+      console.log(import_picocolors.default.yellow("Qodewk Git hooks are already installed (post-commit, post-rewrite)."));
+      return;
+    }
+    console.log(
+      import_picocolors.default.green(
+        `\u2713 Non-blocking Qodewk hooks installed in ${hooksDir} (post-commit${installed > 1 || existing > 0 ? ", post-rewrite" : installed === 1 && targets.length === 2 ? " + post-rewrite" : ""})`
+      )
+    );
+    if (existing > 0) {
+      console.log(import_picocolors.default.dim(`  (${existing} hook file(s) already contained the Qodewk marker)`));
+    }
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    console.error(import_picocolors.default.red(`Failed to install Git hook: ${message}`));
+    process.exit(1);
+  }
+});
+hookCommand.command("uninstall").description("Remove Qodewk post-commit and post-rewrite Git hooks").action(async () => {
+  try {
+    const hooksDir = resolveGitHooksDir();
+    if (!hooksDir) {
+      console.log(import_picocolors.default.yellow("No Git repository found."));
+      return;
+    }
+    const targets = ["post-commit", "post-rewrite"];
+    let removed = 0;
+    for (const name of targets) {
+      const result = uninstallHookFile(path7.join(hooksDir, name));
+      if (result === "removed") removed++;
+    }
+    if (removed === 0) {
+      console.log(import_picocolors.default.yellow("Qodewk hooks are not installed."));
+      return;
+    }
+    console.log(import_picocolors.default.green(`\u2713 Qodewk hook markers removed from ${removed} file(s).`));
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    console.error(import_picocolors.default.red(`Failed to uninstall hook: ${message}`));
     process.exit(1);
   }
 });
@@ -16501,64 +16750,48 @@ var ansiHex = (hexColor) => {
   const b2 = num & 255;
   return (text) => `\x1B[38;2;${r2};${g};${b2}m${text}\x1B[39m`;
 };
-async function outputReceipt(receipt, options, publicUrl) {
-  let content = "";
-  const format = options.json ? "json" : options.format || "terminal";
-  if (format === "json") {
-    content = JSON.stringify(receipt, null, 2);
-  } else if (format === "markdown") {
-    content = formatMarkdownReceipt(receipt, publicUrl);
-  }
-  if (options.out) {
-    fs6.writeFileSync(options.out, content || formatMarkdownReceipt(receipt, publicUrl), "utf-8");
-    console.log(import_picocolors.default.green(`\u2713 Receipt written to ${options.out}`));
-  }
-  if (format === "terminal" && !options.out) {
-    await renderTerminalReceipt(receipt, publicUrl, options.barcode);
-  } else if (format !== "terminal" && !options.out) {
-    console.log(content);
-  }
-}
 var stripAnsi = (str) => {
   return str.replace(/\x1B\[[0-9;]*[a-zA-Z]/g, "").replace(/\x1B\([B0]/g, "");
 };
 var visibleWidth = (str) => {
   return stripAnsi(str).length;
 };
-async function renderTerminalReceipt(receipt, publicUrl, useBarcode) {
+function buildTerminalReceipt(receipt, publicUrl, useBarcode) {
+  const lines = [];
   const coral = ansiHex("#cc785c");
   const green = ansiHex("#5db872");
   const red = ansiHex("#c64545");
   const teal = ansiHex("#5db8a6");
   const INNER_WIDTH = 52;
+  const push = (line) => lines.push(line);
   const printRow = (content, width = INNER_WIDTH) => {
     const visLen = visibleWidth(content);
     const pad = Math.max(0, width - visLen);
-    console.log(`  | ${content}${" ".repeat(pad)} |`);
+    push(`  | ${content}${" ".repeat(pad)} |`);
   };
   const printRowSplit = (left, right, width = INNER_WIDTH) => {
     const leftVis = visibleWidth(left);
     const rightVis = visibleWidth(right);
     const pad = Math.max(1, width - leftVis - rightVis);
-    console.log(`  | ${left}${" ".repeat(pad)}${right} |`);
+    push(`  | ${left}${" ".repeat(pad)}${right} |`);
   };
   const printCenteredRow = (content, width = INNER_WIDTH) => {
     const visLen = visibleWidth(content);
     const totalPad = Math.max(0, width - visLen);
     const leftPad = Math.floor(totalPad / 2);
     const rightPad = totalPad - leftPad;
-    console.log(`  | ${" ".repeat(leftPad)}${content}${" ".repeat(rightPad)} |`);
+    push(`  | ${" ".repeat(leftPad)}${content}${" ".repeat(rightPad)} |`);
   };
   const printDivider = (char = "=", width = INNER_WIDTH) => {
-    console.log(`  | ${char.repeat(width)} |`);
+    push(`  | ${char.repeat(width)} |`);
   };
   const totalTokens = (receipt.ai.tokens.input + receipt.ai.tokens.output).toLocaleString();
   const inputK = `${Math.round(receipt.ai.tokens.input / 1e3)}k`;
   const outputK = `${Math.round(receipt.ai.tokens.output / 1e3)}k`;
   const costPrefix = receipt.ai.mode === "verified" ? "$" : "~$";
   const confidencePercent = `${Math.round(receipt.ai.confidence * 100)}%`;
-  console.log("");
-  console.log("  " + import_picocolors.default.bold(coral("/\\".repeat(28))));
+  push("");
+  push("  " + import_picocolors.default.bold(coral("/\\".repeat(28))));
   printCenteredRow(import_picocolors.default.bold(import_picocolors.default.white("Q O D E W K")));
   printCenteredRow(coral("*** PROOF OF SHIPMENT ***"));
   printRow("");
@@ -16600,18 +16833,12 @@ async function renderTerminalReceipt(receipt, publicUrl, useBarcode) {
   printRowSplit("Total Tokens:", totalTokens);
   printDivider("=");
   const costLabel = receipt.ai.mode === "verified" ? "VERIFIED AI COST" : "ESTIMATED AI COST";
-  printRowSplit(
-    costLabel,
-    import_picocolors.default.bold(coral(costPrefix + receipt.ai.cost.toFixed(2)))
-  );
-  printRowSplit(
-    `CONFIDENCE: ${confidencePercent}`,
-    `[Mode: ${receipt.ai.mode}]`
-  );
+  printRowSplit(costLabel, import_picocolors.default.bold(coral(costPrefix + receipt.ai.cost.toFixed(2))));
+  printRowSplit(`CONFIDENCE: ${confidencePercent}`, `[Mode: ${receipt.ai.mode}]`);
   printDivider("=");
   printRow("");
   const baseUrl = process.env.NEXT_PUBLIC_APP_URL || process.env.QODEWK_APP_URL || "https://qodewk.flinkeo.online";
-  const urlToDisplay = publicUrl || `${baseUrl}/r/${receipt.receipt.id}`;
+  const isPublished = Boolean(publicUrl);
   const displayHost = baseUrl.replace(/^https?:\/\//, "");
   if (useBarcode) {
     const barChars = ["||| ", "| | ", "|||| ", "|| | ", "|| || "];
@@ -16622,10 +16849,10 @@ async function renderTerminalReceipt(receipt, publicUrl, useBarcode) {
     }
     barcodePattern += "|||";
     printCenteredRow(import_picocolors.default.bold(barcodePattern));
-  } else {
-    const qrRows = renderTerminalQr(urlToDisplay);
+  } else if (isPublished && publicUrl) {
+    const qrRows = renderTerminalQr(publicUrl);
     if (qrRows.length > 0) {
-      printCenteredRow(import_picocolors.default.dim("--- SCAN WITH PHONE ---"));
+      printCenteredRow(import_picocolors.default.dim("--- SCAN PUBLIC RECEIPT ---"));
       printRow("");
       for (const qrRow of qrRows) {
         printCenteredRow(qrRow);
@@ -16634,20 +16861,60 @@ async function renderTerminalReceipt(receipt, publicUrl, useBarcode) {
     } else {
       printCenteredRow(import_picocolors.default.bold("||| | ||||| ||| |||| |||||| |||| ||| ||||||| |||"));
     }
+  } else {
+    printCenteredRow(import_picocolors.default.dim("--- LOCAL PROOF (NOT PUBLISHED) ---"));
+    printCenteredRow(import_picocolors.default.dim(`id ${receipt.receipt.id.slice(0, 28)}`));
+  }
+  if (isPublished) {
+    printCenteredRow(import_picocolors.default.cyan(displayHost));
+    printCenteredRow(import_picocolors.default.underline(import_picocolors.default.cyan(`r/${receipt.receipt.id}`)));
+  } else {
+    printCenteredRow(import_picocolors.default.yellow("[ LOCAL RECORD \u2014 NOT PUBLISHED ]"));
   }
-  printCenteredRow(import_picocolors.default.cyan(displayHost));
-  printCenteredRow(import_picocolors.default.underline(import_picocolors.default.cyan(`r/${receipt.receipt.id}`)));
   printRow("");
   if (process.env.QODEWK_TELEMETRY === "off") {
     printRow(`  ${teal("[\u2713]")} QODEWK_TELEMETRY=off (Cloud sync disabled)`);
   }
   printRow(`  ${green("[\u2713]")} Source code was never uploaded to Qodewk`);
-  console.log("  " + import_picocolors.default.bold(coral("\\/".repeat(28))));
-  console.log("");
-  console.log(`  ${import_picocolors.default.dim("\u{1F517} Public Receipt:")} ${import_picocolors.default.underline(import_picocolors.default.cyan(urlToDisplay))}`);
+  push("  " + import_picocolors.default.bold(coral("\\/".repeat(28))));
+  push("");
+  if (isPublished && publicUrl) {
+    push(`  ${import_picocolors.default.dim("Public Receipt:")} ${import_picocolors.default.underline(import_picocolors.default.cyan(publicUrl))}`);
+  } else {
+    push(`  ${import_picocolors.default.dim("Saved to local DB:")} ${import_picocolors.default.dim("~/.qodewk/state.db")}`);
+    push(`  ${import_picocolors.default.dim("To publish & get shareable URL:")} ${import_picocolors.default.cyan("qodewk share")}`);
+  }
   if (!useBarcode) {
-    console.log(`  ${import_picocolors.default.dim("\u{1F4CA} View classic 1D barcode:")} ${import_picocolors.default.cyan("pnpm qodewk --barcode")}`);
+    push(`  ${import_picocolors.default.dim("View classic 1D barcode:")} ${import_picocolors.default.cyan("qodewk --barcode")}`);
+  }
+  push("");
+  return lines.join("\n");
+}
+async function renderTerminalReceipt(receipt, publicUrl, useBarcode) {
+  console.log(buildTerminalReceipt(receipt, publicUrl, useBarcode));
+}
+async function outputReceipt(receipt, options, publicUrl) {
+  const format = options.json ? "json" : options.format || "terminal";
+  let content;
+  if (format === "json") {
+    content = JSON.stringify(receipt, null, 2);
+  } else if (format === "markdown") {
+    content = formatMarkdownReceipt(receipt, publicUrl);
+  } else {
+    content = buildTerminalReceipt(receipt, publicUrl, options.barcode);
+  }
+  if (options.out) {
+    const fileContent = format === "terminal" ? stripAnsi(content) : content;
+    fs6.writeFileSync(options.out, fileContent.endsWith("\n") ? fileContent : fileContent + "\n", "utf-8");
+    console.log(import_picocolors.default.green(`\u2713 Receipt written to ${options.out}`));
+  }
+  if (!options.out) {
+    if (format === "terminal") {
+      console.log(content);
+    } else {
+      console.log(content);
+    }
+  } else if (format !== "terminal") {
   }
-  console.log("");
 }
 program2.parse(process.argv);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "qodewk",
-  "version": "0.2.0",
+  "version": "0.2.2",
   "description": "Universal telemetry and digital receipt generator for the AI coding agent era",
   "type": "module",
   "bin": {
@@ -14,6 +14,7 @@
   "scripts": {
     "build": "tsup",
     "typecheck": "tsc --noEmit",
+    "test": "node --test test/smoke.test.mjs",
     "prepublishOnly": "pnpm run build"
   },
   "publishConfig": {
@@ -43,8 +44,7 @@
   "dependencies": {
     "commander": "^13.1.0",
     "picocolors": "^1.1.1",
-    "qrcode": "^1.5.4",
-    "simple-git": "^3.27.0"
+    "qrcode": "^1.5.4"
   },
   "devDependencies": {
     "@qodewk/core": "workspace:*",