qodewk 0.2.1 → 0.2.2

package/README.md

@@ -114,10 +114,14 @@ Unlike single-vendor utilities (like Chit, which only support Claude Code CLI),
 | `npx qodewk --platform <platform>` | Filter telemetry to a specific platform (`antigravity`, `claude`, `cursor`, `all`) | Single-platform audit |
 | `npx qodewk --json` | Export machine-readable telemetry conforming to canonical `ReceiptV1` schema | Formatted JSON output |
 | `npx qodewk share` | Publish privacy-safe metadata to Qodewk Cloud and generate short link | `https://qodewk.dev/r/rec_...` |
+| `npx qodewk share --today` | Share today's harvested footprint window | Public URL + claim token |
 | `npx qodewk audit --base <branch>` | Calculate aggregate diff and telemetry across an entire PR branch range | Git revision delta receipt |
+| `npx qodewk hook install` / `hooks install` | Install non-blocking `post-commit` + `post-rewrite` hooks | Local auto-record |
+| `npx qodewk record` / `record-event` | Silent SQLite record (hook entrypoint) | exit 0 always |
 | `npx qodewk -f markdown -o receipt.md` | Export sticky Markdown receipt directly formatted for GitHub PR comments | File `receipt.md` |
 | `npx qodewk -p <provider> -m <model>` | Override detected provider & frontier model pricing rate card | Custom model cost estimate |
 | `npx qodewk --anon` | Redact sensitive repository and branch identifiers | Privacy-hardened receipt |
+| `npx qodewk --local` | Force local-only mode (no cloud sockets on share) | Local thermal receipt |
 
 ---
 

package/dist/index.cjs

@@ -15332,9 +15332,15 @@ async function extractGitMetrics(optionsOrPath = process.cwd()) {
   let renames = 0;
   const extCounts = {};
   let totalTrackedFiles = 0;
+  const changedFiles = [];
   for (const f of diffSummary.files) {
     if (f.file.includes(" => ")) {
       renames++;
+      const dest = f.file.split(" => ").pop()?.trim();
+      if (dest)
+        changedFiles.push(dest.replace(/\\/g, "/"));
+    } else {
+      changedFiles.push(f.file.replace(/\\/g, "/"));
     }
     const ext = path.extname(f.file).replace(/^\./, "").toLowerCase();
     const lang = mapExtensionToLanguage(ext);
@@ -15358,6 +15364,7 @@ async function extractGitMetrics(optionsOrPath = process.cwd()) {
     netLines,
     renames,
     languages,
+    changedFiles,
     branch,
     headSha,
     baseSha,
@@ -15367,6 +15374,21 @@ async function extractGitMetrics(optionsOrPath = process.cwd()) {
     commitsCount
   };
 }
+function computeAiWrittenRatio(changedFiles, aiEditedFiles) {
+  if (changedFiles.length === 0 || aiEditedFiles.length === 0) {
+    return void 0;
+  }
+  const norm = (f) => f.replace(/\\/g, "/").replace(/^\.\//, "").toLowerCase();
+  const aiNorm = aiEditedFiles.map(norm);
+  let hit = 0;
+  for (const cf of changedFiles) {
+    const c3 = norm(cf);
+    const matched = aiNorm.some((a) => a === c3 || c3.endsWith("/" + a) || a.endsWith("/" + c3) || c3.endsWith(a) || a.endsWith(c3));
+    if (matched)
+      hit++;
+  }
+  return Math.round(hit / changedFiles.length * 100) / 100;
+}
 function mapExtensionToLanguage(ext) {
   const map = {
     ts: "TypeScript",
@@ -16296,9 +16318,12 @@ function formatMarkdownReceipt(receipt, publicUrl) {
   const costPrefix = receipt.ai.mode === "verified" ? "$" : "~$";
   const confidencePercent = `${Math.round(receipt.ai.confidence * 100)}%`;
   const confidenceTier = receipt.ai.confidence >= 0.8 ? "High" : receipt.ai.confidence >= 0.4 ? "Medium" : "Low";
+  const tokenProvenance = receipt.ai.mode === "verified" || receipt.ai.mode === "observed" ? "Observed" : "Estimated";
+  const costProvenance = receipt.ai.mode === "verified" ? "Verified" : receipt.ai.mode === "observed" ? "Observed" : "Estimated";
+  const tokenDisplay = receipt.ai.mode === "verified" || receipt.ai.mode === "observed" ? totalTokens : `~${totalTokens}`;
   const lines = [
     `<!-- QODEWK_RECEIPT_START:${receipt.receipt.id} -->`,
-    `### \u{1F9FE} Qodewk Telemetry Receipt`,
+    `### Qodewk Telemetry Receipt`,
     ``,
     `| Metric | Measurement | Provenance |`,
     `| :--- | :--- | :--- |`,
@@ -16307,19 +16332,42 @@ function formatMarkdownReceipt(receipt, publicUrl) {
     `| **Lines Deleted** | \`-${receipt.mutation.deletions}\` | Observed |`,
     `| **Net Delta** | \`${receipt.mutation.netLines >= 0 ? "+" : ""}${receipt.mutation.netLines}\` | Observed |`,
     `| **AI Model** | \`${receipt.ai.provider} \xB7 ${receipt.ai.model || "Unknown"}\` | ${receipt.ai.mode} |`,
-    `| **Tokens Consumed** | \`~${totalTokens}\` | Estimated |`,
-    `| **AI Spend** | \`${costPrefix}${receipt.ai.cost.toFixed(2)}\` | Estimated |`,
+    `| **Tokens Consumed** | \`${tokenDisplay}\` | ${tokenProvenance} |`,
+    `| **AI Spend** | \`${costPrefix}${receipt.ai.cost.toFixed(2)}\` | ${costProvenance} |`,
     `| **Confidence** | \`${confidencePercent}\` (${confidenceTier}) | Dual-Engine |`,
     ``,
-    `> \u{1F512} **Privacy Guarantee:** *Source code was never uploaded to Qodewk. Telemetry computed strictly from cryptographic Git metadata.*`,
+    `> **Privacy Guarantee:** *Source code was never uploaded to Qodewk. Telemetry computed strictly from cryptographic Git metadata.*`,
     ``,
-    `\u{1F517} [**View Full Digital Receipt \u2192**](${url})`,
+    `[**View Full Digital Receipt \u2192**](${url})`,
     `<!-- QODEWK_RECEIPT_END -->`
   ];
   return lines.join("\n");
 }
 
 // ../core/dist/index.js
+function sanitizeReceiptForShare(receipt) {
+  const sessions = receipt.ai.sessions?.map((s) => ({
+    provider: s.provider,
+    model: s.model,
+    task: s.task,
+    tokens: s.tokens,
+    cost: s.cost,
+    confidence: s.confidence,
+    mode: s.mode
+  }));
+  return {
+    ...receipt,
+    privacy: {
+      ...receipt.privacy,
+      sourceExcluded: true,
+      isPublic: true
+    },
+    ai: {
+      ...receipt.ai,
+      sessions
+    }
+  };
+}
 async function generateReceipt(options = {}) {
   const metrics = await extractGitMetrics({
     repoPath: options.repoPath || process.cwd(),
@@ -16335,7 +16383,7 @@ async function generateReceipt(options = {}) {
     platform: options.platform
   });
   const primaryFp = harvestResult.primaryFootprint;
-  let detected = detectProviderFromCommit(metrics.commitMessage);
+  const detected = detectProviderFromCommit(metrics.commitMessage);
   const provider = options.provider || primaryFp?.platform || detected?.provider || "unknown";
   const model = options.model || primaryFp?.model || detected?.model;
   const task = options.task || primaryFp?.taskTitle || (harvestResult.tasks.length > 0 ? harvestResult.tasks[0] : void 0);
@@ -16349,10 +16397,7 @@ async function generateReceipt(options = {}) {
     confidence: fp.confidence,
     mode: fp.mode
   }));
-  let aiWrittenRatio = void 0;
-  if (primaryFp) {
-    aiWrittenRatio = 0.88;
-  }
+  const aiWrittenRatio = computeAiWrittenRatio(metrics.changedFiles, harvestResult.filesEdited);
   const costResult = estimateCost({
     files: metrics.files,
     insertions: metrics.insertions,
@@ -16362,18 +16407,22 @@ async function generateReceipt(options = {}) {
     sessions: sessions.length > 0 ? sessions : void 0,
     confidence: primaryFp?.confidence || detected?.confidence
   });
-  const receiptId = `rec_${crypto2.randomBytes(12).toString("hex")}`;
   const now = (/* @__PURE__ */ new Date()).toISOString();
   const payloadToHash = {
     repoHash: metrics.repoHash,
     headSha: metrics.headSha,
+    baseSha: metrics.baseSha,
     files: metrics.files,
     insertions: metrics.insertions,
     deletions: metrics.deletions,
     cost: costResult.cost,
-    tokens: costResult.tokens
+    tokens: costResult.tokens,
+    mode: costResult.mode,
+    provider: costResult.provider,
+    model: costResult.model
   };
   const contentHash = crypto2.createHash("sha256").update(JSON.stringify(payloadToHash)).digest("hex");
+  const receiptId = `rec_${contentHash.slice(0, 24)}`;
   const receipt = {
     version: "1.0",
     receipt: {
@@ -16410,7 +16459,7 @@ async function generateReceipt(options = {}) {
     },
     privacy: {
       sourceExcluded: true,
-      isPublic: options.isPublic ?? true,
+      isPublic: options.isPublic ?? false,
       anonymizeBranch: options.anonymizeBranch ?? false
     }
   };
@@ -16418,154 +16467,279 @@ async function generateReceipt(options = {}) {
 }
 
 // src/index.ts
+var SHARE_PAYLOAD_MAX_BYTES = 5e4;
+function resolveCliVersion() {
+  try {
+    const argv1 = process.argv[1] ? path7.dirname(path7.resolve(process.argv[1])) : process.cwd();
+    const candidates = [
+      path7.join(argv1, "..", "package.json"),
+      path7.join(argv1, "package.json")
+    ];
+    for (const candidate of candidates) {
+      if (!fs6.existsSync(candidate)) continue;
+      const pkg = JSON.parse(fs6.readFileSync(candidate, "utf-8"));
+      if (pkg.name === "qodewk" && pkg.version) return pkg.version;
+    }
+  } catch {
+  }
+  return "0.2.1";
+}
+function resolveSince(options) {
+  return options.today ? "today" : options.since;
+}
+function persistReceipt(receipt, claimToken) {
+  try {
+    const db = new LocalStateDB();
+    db.saveReceipt(receipt, claimToken);
+    db.close();
+  } catch {
+  }
+}
+function resolveGitHooksDir(cwd = process.cwd()) {
+  const gitPath = path7.join(cwd, ".git");
+  if (!fs6.existsSync(gitPath)) return null;
+  let gitCommonDir;
+  const stat = fs6.statSync(gitPath);
+  if (stat.isDirectory()) {
+    gitCommonDir = gitPath;
+  } else {
+    const content = fs6.readFileSync(gitPath, "utf-8");
+    const match = content.match(/gitdir:\s*(.+)/i);
+    if (!match?.[1]) return null;
+    let gitDir = match[1].trim();
+    if (!path7.isAbsolute(gitDir)) {
+      gitDir = path7.resolve(cwd, gitDir);
+    }
+    const commonFile = path7.join(gitDir, "commondir");
+    if (fs6.existsSync(commonFile)) {
+      let common = fs6.readFileSync(commonFile, "utf-8").trim();
+      if (!path7.isAbsolute(common)) {
+        common = path7.resolve(gitDir, common);
+      }
+      gitCommonDir = common;
+    } else if (path7.basename(path7.dirname(gitDir)) === "worktrees") {
+      gitCommonDir = path7.dirname(path7.dirname(gitDir));
+    } else {
+      gitCommonDir = gitDir;
+    }
+  }
+  return path7.join(gitCommonDir, "hooks");
+}
+var HOOK_MARKER_BEGIN = "# --- BEGIN QODEWK HOOK ---";
+var HOOK_MARKER_END = "# --- END QODEWK HOOK ---";
+var HOOK_SNIPPET = `
+${HOOK_MARKER_BEGIN}
+# Non-blocking Qodewk background recorder (< 5ms)
+if command -v qodewk >/dev/null 2>&1 || command -v pnpm >/dev/null 2>&1 || [ -f "./node_modules/.bin/qodewk" ]; then
+  ( ( qodewk record || pnpm qodewk record || npx qodewk record ) >/dev/null 2>&1 & )
+fi
+${HOOK_MARKER_END}
+`;
+function installHookFile(hookFile) {
+  let content = "";
+  if (fs6.existsSync(hookFile)) {
+    content = fs6.readFileSync(hookFile, "utf-8");
+  } else {
+    content = "#!/bin/sh\n";
+  }
+  if (content.includes(HOOK_MARKER_BEGIN)) {
+    return "exists";
+  }
+  fs6.writeFileSync(hookFile, content + HOOK_SNIPPET, { mode: 493 });
+  return "installed";
+}
+function uninstallHookFile(hookFile) {
+  if (!fs6.existsSync(hookFile)) return "absent";
+  const content = fs6.readFileSync(hookFile, "utf-8");
+  if (!content.includes(HOOK_MARKER_BEGIN)) return "missing";
+  const regex = new RegExp(`\\n?${HOOK_MARKER_BEGIN}[\\s\\S]*?${HOOK_MARKER_END}\\n?`, "g");
+  const updated = content.replace(regex, "");
+  fs6.writeFileSync(hookFile, updated, { mode: 493 });
+  return "removed";
+}
 var program2 = new Command();
-program2.name("qodewk").description("Universal telemetry and digital receipt generator for the AI coding agent era").version("0.2.1").option("-j, --json", "Output receipt in machine-readable JSON format").option("-f, --format <format>", "Output format (terminal, json, markdown)", "terminal").option("-o, --out <path>", "Write receipt output to specified file path").option("-p, --provider <provider>", "Specify AI provider (antigravity, claude, cursor, etc.)").option("-m, --model <model>", "Specify AI model identifier").option("-s, --since <duration>", "Harvest agent footprints since duration (e.g. today, 24h, 7d)").option("--today", "Harvest agent footprints for today").option("--platform <platform>", "Filter agent platform (antigravity, claude, cursor, all)").option("--anon", "Anonymize branch name in output").option("--barcode", "Render 1D barcode simulation instead of scannable 2D QR code").action(async (options) => {
+program2.name("qodewk").description("Universal telemetry and digital receipt generator for the AI coding agent era").version(resolveCliVersion()).option("-j, --json", "Output receipt in machine-readable JSON format").option("-f, --format <format>", "Output format (terminal, json, markdown)", "terminal").option("-o, --out <path>", "Write receipt output to specified file path").option("-p, --provider <provider>", "Specify AI provider (antigravity, claude, cursor, etc.)").option("-m, --model <model>", "Specify AI model identifier").option("-s, --since <duration>", "Harvest agent footprints since duration (e.g. today, 24h, 7d)").option("--today", "Harvest agent footprints for today").option("--platform <platform>", "Filter agent platform (antigravity, claude, cursor, all)").option("--anon", "Anonymize branch name in output").option("--local", "Force local-only mode (never open network sockets)").option("--barcode", "Render 1D barcode simulation instead of scannable 2D QR code").action(async (options) => {
   try {
-    const since = options.today ? "today" : options.since;
     const receipt = await generateReceipt({
       provider: options.provider,
       model: options.model,
-      since,
+      since: resolveSince(options),
       platform: options.platform,
-      anonymizeBranch: options.anon
+      anonymizeBranch: options.anon,
+      isPublic: false
     });
-    try {
-      const db = new LocalStateDB();
-      db.saveReceipt(receipt);
-      db.close();
-    } catch {
-    }
+    persistReceipt(receipt);
     await outputReceipt(receipt, options);
   } catch (err) {
-    console.error(import_picocolors.default.red(`Error generating receipt: ${err.message}`));
+    const message = err instanceof Error ? err.message : String(err);
+    console.error(import_picocolors.default.red(`Error generating receipt: ${message}`));
     process.exit(1);
   }
 });
-program2.command("audit").description("Audit PR or branch diff against a target base commit").option("-b, --base <base>", "Base git ref or commit SHA (e.g. origin/main)").option("-h, --head <head>", "Head git ref or commit SHA").option("-f, --format <format>", "Output format (terminal, json, markdown)", "terminal").option("-o, --out <path>", "Write receipt output to specified file path").option("-p, --provider <provider>", "Specify AI provider").option("-m, --model <model>", "Specify AI model").option("--barcode", "Render 1D barcode simulation instead of scannable 2D QR code").action(async (options) => {
+program2.command("audit").description("Audit PR or branch diff against a target base commit").option("-b, --base <base>", "Base git ref or commit SHA (e.g. origin/main)").option("-h, --head <head>", "Head git ref or commit SHA").option("-f, --format <format>", "Output format (terminal, json, markdown)", "terminal").option("-o, --out <path>", "Write receipt output to specified file path").option("-p, --provider <provider>", "Specify AI provider").option("-m, --model <model>", "Specify AI model").option("-s, --since <duration>", "Harvest agent footprints since duration").option("--today", "Harvest agent footprints for today").option("--platform <platform>", "Filter agent platform").option("--anon", "Anonymize branch name in output").option("--barcode", "Render 1D barcode simulation instead of scannable 2D QR code").action(async (options) => {
   try {
     const receipt = await generateReceipt({
       baseSha: options.base,
       headSha: options.head,
       provider: options.provider,
-      model: options.model
+      model: options.model,
+      since: resolveSince(options),
+      platform: options.platform,
+      anonymizeBranch: options.anon,
+      isPublic: false
     });
+    persistReceipt(receipt);
     await outputReceipt(receipt, options);
   } catch (err) {
-    console.error(import_picocolors.default.red(`Error auditing git range: ${err.message}`));
+    const message = err instanceof Error ? err.message : String(err);
+    console.error(import_picocolors.default.red(`Error auditing git range: ${message}`));
     process.exit(1);
   }
 });
-program2.command("share").description("Publish privacy-safe receipt to Qodewk cloud and get a shareable URL").option("-p, --provider <provider>", "Specify AI provider").option("-m, --model <model>", "Specify AI model").option("--barcode", "Render 1D barcode simulation instead of scannable 2D QR code").action(async (options) => {
+program2.command("share").description("Publish privacy-safe receipt to Qodewk cloud and get a shareable URL").option("-p, --provider <provider>", "Specify AI provider").option("-m, --model <model>", "Specify AI model").option("-s, --since <duration>", "Harvest agent footprints since duration").option("--today", "Harvest agent footprints for today").option("--platform <platform>", "Filter agent platform").option("--anon", "Anonymize branch name in output").option("-f, --format <format>", "Local fallback output format", "terminal").option("-j, --json", "Also print JSON after share").option("--barcode", "Render 1D barcode simulation instead of scannable 2D QR code").action(async (options) => {
   try {
     const receipt = await generateReceipt({
       provider: options.provider,
-      model: options.model
+      model: options.model,
+      since: resolveSince(options),
+      platform: options.platform,
+      anonymizeBranch: options.anon,
+      isPublic: false
     });
-    if (process.env.QODEWK_TELEMETRY === "off") {
-      console.log(import_picocolors.default.yellow("\n\u26A0\uFE0F Cloud publishing is disabled because QODEWK_TELEMETRY=off."));
+    const localFlag = program2.opts().local === true;
+    if (process.env.QODEWK_TELEMETRY === "off" || localFlag) {
+      console.log(
+        import_picocolors.default.yellow(
+          `
+Cloud publishing is disabled (${localFlag ? "--local" : "QODEWK_TELEMETRY=off"}).`
+        )
+      );
       console.log(import_picocolors.default.dim("Telemetry remains strictly stored in local SQLite (~/.qodewk/state.db).\n"));
+      persistReceipt(receipt);
       await renderTerminalReceipt(receipt, void 0, options.barcode);
       return;
     }
+    const sanitized = sanitizeReceiptForShare(receipt);
+    let body = JSON.stringify(sanitized);
+    if (Buffer.byteLength(body, "utf-8") > SHARE_PAYLOAD_MAX_BYTES && sanitized.ai.sessions) {
+      const trimmed2 = {
+        ...sanitized,
+        ai: { ...sanitized.ai, sessions: void 0 }
+      };
+      body = JSON.stringify(trimmed2);
+    }
+    if (Buffer.byteLength(body, "utf-8") > SHARE_PAYLOAD_MAX_BYTES) {
+      console.error(import_picocolors.default.red("Sanitized receipt still exceeds the 50 KB cloud payload limit."));
+      process.exit(1);
+    }
     const endpoint = process.env.QODEWK_API_URL || `${process.env.NEXT_PUBLIC_APP_URL || process.env.QODEWK_APP_URL || "https://qodewk.flinkeo.online"}/api/receipts`;
-    console.log(import_picocolors.default.dim(`Publishing receipt ${receipt.receipt.id} to ${endpoint}...`));
+    console.log(import_picocolors.default.dim(`Publishing receipt ${sanitized.receipt.id} to ${endpoint}...`));
     try {
       const response = await fetch(endpoint, {
         method: "POST",
         headers: {
-          "Content-Type": "application/json"
+          "Content-Type": "application/json",
+          "Content-Length": String(Buffer.byteLength(body, "utf-8"))
         },
-        body: JSON.stringify(receipt)
+        body
       });
       if (!response.ok) {
-        throw new Error(`API responded with status ${response.status}`);
+        const errText = await response.text().catch(() => "");
+        throw new Error(`API responded with status ${response.status}${errText ? `: ${errText.slice(0, 200)}` : ""}`);
       }
       const data = await response.json();
-      const db = new LocalStateDB();
-      db.saveReceipt(receipt, data.claimToken);
-      db.close();
-      await renderTerminalReceipt(receipt, data.url, options.barcode);
+      persistReceipt(sanitized, data.claimToken);
+      console.log("");
+      console.log(import_picocolors.default.green("  Published successfully."));
+      console.log(`  ${import_picocolors.default.dim("Public URL:")} ${import_picocolors.default.underline(import_picocolors.default.cyan(data.url))}`);
+      console.log(`  ${import_picocolors.default.bold(import_picocolors.default.yellow("  Claim token (store securely \u2014 shown once):"))}`);
+      console.log(`  ${import_picocolors.default.yellow(data.claimToken)}`);
+      console.log(import_picocolors.default.dim("  Saved to ~/.qodewk/state.db \u2014 required to prove authorship later."));
+      console.log("");
+      await renderTerminalReceipt(sanitized, data.url, options.barcode);
+      if (options.json) {
+        console.log(JSON.stringify({ url: data.url, claimToken: data.claimToken, receipt: sanitized }, null, 2));
+      }
     } catch (networkErr) {
+      const message = networkErr instanceof Error ? networkErr.message : String(networkErr);
       console.log(import_picocolors.default.yellow(`
-Could not reach cloud API (${networkErr.message}). Rendered locally:`));
+Could not reach cloud API (${message}). Rendered locally:`));
+      persistReceipt(receipt);
       await renderTerminalReceipt(receipt, void 0, options.barcode);
     }
   } catch (err) {
-    console.error(import_picocolors.default.red(`Error sharing receipt: ${err.message}`));
+    const message = err instanceof Error ? err.message : String(err);
+    console.error(import_picocolors.default.red(`Error sharing receipt: ${message}`));
     process.exit(1);
   }
 });
-program2.command("record").description("Silently record local telemetry receipt into SQLite (used by git hooks)").action(async () => {
+program2.command("record").alias("record-event").description("Silently record local telemetry receipt into SQLite (used by git hooks)").action(async () => {
   try {
-    const receipt = await generateReceipt();
-    const db = new LocalStateDB();
-    db.saveReceipt(receipt);
-    db.close();
+    const receipt = await generateReceipt({ isPublic: false });
+    persistReceipt(receipt);
     process.exit(0);
   } catch {
     process.exit(0);
   }
 });
-var hookCommand = program2.command("hook").description("Manage non-blocking Git hooks for automatic telemetry recording");
-hookCommand.command("install").description("Install non-blocking post-commit Git hook into current repository").action(async () => {
+var hookCommand = program2.command("hook").aliases(["hooks"]).description("Manage non-blocking Git hooks for automatic telemetry recording");
+hookCommand.command("install").description("Install non-blocking post-commit and post-rewrite Git hooks").action(async () => {
   try {
-    const gitDir = path7.join(process.cwd(), ".git");
-    if (!fs6.existsSync(gitDir)) {
-      console.error(import_picocolors.default.red("Error: Current directory is not a Git repository root (.git not found)."));
+    const hooksDir = resolveGitHooksDir();
+    if (!hooksDir) {
+      console.error(import_picocolors.default.red("Error: Current directory is not a Git repository (.git not found)."));
       process.exit(1);
     }
-    const hooksDir = path7.join(gitDir, "hooks");
     if (!fs6.existsSync(hooksDir)) {
       fs6.mkdirSync(hooksDir, { recursive: true });
     }
-    const hookFile = path7.join(hooksDir, "post-commit");
-    const hookMarkerBegin = "# --- BEGIN QODEWK HOOK ---";
-    const hookMarkerEnd = "# --- END QODEWK HOOK ---";
-    const hookSnippet = `
-${hookMarkerBegin}
-# Non-blocking Qodewk background recorder (< 5ms)
-if command -v qodewk >/dev/null 2>&1 || command -v pnpm >/dev/null 2>&1 || [ -f "./node_modules/.bin/qodewk" ]; then
-  ( ( qodewk record || pnpm qodewk record || npx qodewk record ) >/dev/null 2>&1 & )
-fi
-${hookMarkerEnd}
-`;
-    let content = "";
-    if (fs6.existsSync(hookFile)) {
-      content = fs6.readFileSync(hookFile, "utf-8");
-    } else {
-      content = "#!/bin/sh\n";
+    const targets = ["post-commit", "post-rewrite"];
+    let installed = 0;
+    let existing = 0;
+    for (const name of targets) {
+      const result = installHookFile(path7.join(hooksDir, name));
+      if (result === "installed") installed++;
+      else existing++;
     }
-    if (content.includes(hookMarkerBegin)) {
-      console.log(import_picocolors.default.yellow("Qodewk post-commit hook is already installed."));
+    if (installed === 0 && existing > 0) {
+      console.log(import_picocolors.default.yellow("Qodewk Git hooks are already installed (post-commit, post-rewrite)."));
       return;
     }
-    fs6.writeFileSync(hookFile, content + hookSnippet, { mode: 493 });
-    console.log(import_picocolors.default.green("\u2713 Non-blocking Qodewk post-commit hook successfully installed in .git/hooks/post-commit"));
+    console.log(
+      import_picocolors.default.green(
+        `\u2713 Non-blocking Qodewk hooks installed in ${hooksDir} (post-commit${installed > 1 || existing > 0 ? ", post-rewrite" : installed === 1 && targets.length === 2 ? " + post-rewrite" : ""})`
+      )
+    );
+    if (existing > 0) {
+      console.log(import_picocolors.default.dim(`  (${existing} hook file(s) already contained the Qodewk marker)`));
+    }
   } catch (err) {
-    console.error(import_picocolors.default.red(`Failed to install Git hook: ${err.message}`));
+    const message = err instanceof Error ? err.message : String(err);
+    console.error(import_picocolors.default.red(`Failed to install Git hook: ${message}`));
     process.exit(1);
   }
 });
-hookCommand.command("uninstall").description("Remove Qodewk post-commit Git hook").action(async () => {
+hookCommand.command("uninstall").description("Remove Qodewk post-commit and post-rewrite Git hooks").action(async () => {
   try {
-    const hookFile = path7.join(process.cwd(), ".git", "hooks", "post-commit");
-    if (!fs6.existsSync(hookFile)) {
-      console.log(import_picocolors.default.yellow("No post-commit hook found."));
+    const hooksDir = resolveGitHooksDir();
+    if (!hooksDir) {
+      console.log(import_picocolors.default.yellow("No Git repository found."));
       return;
     }
-    const content = fs6.readFileSync(hookFile, "utf-8");
-    const hookMarkerBegin = "# --- BEGIN QODEWK HOOK ---";
-    const hookMarkerEnd = "# --- END QODEWK HOOK ---";
-    if (!content.includes(hookMarkerBegin)) {
-      console.log(import_picocolors.default.yellow("Qodewk hook is not installed."));
+    const targets = ["post-commit", "post-rewrite"];
+    let removed = 0;
+    for (const name of targets) {
+      const result = uninstallHookFile(path7.join(hooksDir, name));
+      if (result === "removed") removed++;
+    }
+    if (removed === 0) {
+      console.log(import_picocolors.default.yellow("Qodewk hooks are not installed."));
       return;
     }
-    const regex = new RegExp(`\\n?${hookMarkerBegin}[\\s\\S]*?${hookMarkerEnd}\\n?`, "g");
-    const updated = content.replace(regex, "");
-    fs6.writeFileSync(hookFile, updated, { mode: 493 });
-    console.log(import_picocolors.default.green("\u2713 Qodewk post-commit hook removed."));
+    console.log(import_picocolors.default.green(`\u2713 Qodewk hook markers removed from ${removed} file(s).`));
   } catch (err) {
-    console.error(import_picocolors.default.red(`Failed to uninstall hook: ${err.message}`));
+    const message = err instanceof Error ? err.message : String(err);
+    console.error(import_picocolors.default.red(`Failed to uninstall hook: ${message}`));
     process.exit(1);
   }
 });
@@ -16576,64 +16750,48 @@ var ansiHex = (hexColor) => {
   const b2 = num & 255;
   return (text) => `\x1B[38;2;${r2};${g};${b2}m${text}\x1B[39m`;
 };
-async function outputReceipt(receipt, options, publicUrl) {
-  let content = "";
-  const format = options.json ? "json" : options.format || "terminal";
-  if (format === "json") {
-    content = JSON.stringify(receipt, null, 2);
-  } else if (format === "markdown") {
-    content = formatMarkdownReceipt(receipt, publicUrl);
-  }
-  if (options.out) {
-    fs6.writeFileSync(options.out, content || formatMarkdownReceipt(receipt, publicUrl), "utf-8");
-    console.log(import_picocolors.default.green(`\u2713 Receipt written to ${options.out}`));
-  }
-  if (format === "terminal" && !options.out) {
-    await renderTerminalReceipt(receipt, publicUrl, options.barcode);
-  } else if (format !== "terminal" && !options.out) {
-    console.log(content);
-  }
-}
 var stripAnsi = (str) => {
   return str.replace(/\x1B\[[0-9;]*[a-zA-Z]/g, "").replace(/\x1B\([B0]/g, "");
 };
 var visibleWidth = (str) => {
   return stripAnsi(str).length;
 };
-async function renderTerminalReceipt(receipt, publicUrl, useBarcode) {
+function buildTerminalReceipt(receipt, publicUrl, useBarcode) {
+  const lines = [];
   const coral = ansiHex("#cc785c");
   const green = ansiHex("#5db872");
   const red = ansiHex("#c64545");
   const teal = ansiHex("#5db8a6");
   const INNER_WIDTH = 52;
+  const push = (line) => lines.push(line);
   const printRow = (content, width = INNER_WIDTH) => {
     const visLen = visibleWidth(content);
     const pad = Math.max(0, width - visLen);
-    console.log(`  | ${content}${" ".repeat(pad)} |`);
+    push(`  | ${content}${" ".repeat(pad)} |`);
   };
   const printRowSplit = (left, right, width = INNER_WIDTH) => {
     const leftVis = visibleWidth(left);
     const rightVis = visibleWidth(right);
     const pad = Math.max(1, width - leftVis - rightVis);
-    console.log(`  | ${left}${" ".repeat(pad)}${right} |`);
+    push(`  | ${left}${" ".repeat(pad)}${right} |`);
   };
   const printCenteredRow = (content, width = INNER_WIDTH) => {
     const visLen = visibleWidth(content);
     const totalPad = Math.max(0, width - visLen);
     const leftPad = Math.floor(totalPad / 2);
     const rightPad = totalPad - leftPad;
-    console.log(`  | ${" ".repeat(leftPad)}${content}${" ".repeat(rightPad)} |`);
+    push(`  | ${" ".repeat(leftPad)}${content}${" ".repeat(rightPad)} |`);
   };
   const printDivider = (char = "=", width = INNER_WIDTH) => {
-    console.log(`  | ${char.repeat(width)} |`);
+    push(`  | ${char.repeat(width)} |`);
   };
   const totalTokens = (receipt.ai.tokens.input + receipt.ai.tokens.output).toLocaleString();
   const inputK = `${Math.round(receipt.ai.tokens.input / 1e3)}k`;
   const outputK = `${Math.round(receipt.ai.tokens.output / 1e3)}k`;
   const costPrefix = receipt.ai.mode === "verified" ? "$" : "~$";
   const confidencePercent = `${Math.round(receipt.ai.confidence * 100)}%`;
-  console.log("");
-  console.log("  " + import_picocolors.default.bold(coral("/\\".repeat(28))));
+  push("");
+  push("  " + import_picocolors.default.bold(coral("/\\".repeat(28))));
   printCenteredRow(import_picocolors.default.bold(import_picocolors.default.white("Q O D E W K")));
   printCenteredRow(coral("*** PROOF OF SHIPMENT ***"));
   printRow("");
@@ -16675,19 +16833,12 @@ async function renderTerminalReceipt(receipt, publicUrl, useBarcode) {
   printRowSplit("Total Tokens:", totalTokens);
   printDivider("=");
   const costLabel = receipt.ai.mode === "verified" ? "VERIFIED AI COST" : "ESTIMATED AI COST";
-  printRowSplit(
-    costLabel,
-    import_picocolors.default.bold(coral(costPrefix + receipt.ai.cost.toFixed(2)))
-  );
-  printRowSplit(
-    `CONFIDENCE: ${confidencePercent}`,
-    `[Mode: ${receipt.ai.mode}]`
-  );
+  printRowSplit(costLabel, import_picocolors.default.bold(coral(costPrefix + receipt.ai.cost.toFixed(2))));
+  printRowSplit(`CONFIDENCE: ${confidencePercent}`, `[Mode: ${receipt.ai.mode}]`);
   printDivider("=");
   printRow("");
   const baseUrl = process.env.NEXT_PUBLIC_APP_URL || process.env.QODEWK_APP_URL || "https://qodewk.flinkeo.online";
   const isPublished = Boolean(publicUrl);
-  const urlToDisplay = publicUrl || `${baseUrl}/r/${receipt.receipt.id}`;
   const displayHost = baseUrl.replace(/^https?:\/\//, "");
   if (useBarcode) {
     const barChars = ["||| ", "| | ", "|||| ", "|| | ", "|| || "];
@@ -16698,10 +16849,10 @@ async function renderTerminalReceipt(receipt, publicUrl, useBarcode) {
     }
     barcodePattern += "|||";
     printCenteredRow(import_picocolors.default.bold(barcodePattern));
-  } else {
-    const qrRows = renderTerminalQr(urlToDisplay);
+  } else if (isPublished && publicUrl) {
+    const qrRows = renderTerminalQr(publicUrl);
     if (qrRows.length > 0) {
-      printCenteredRow(import_picocolors.default.dim(isPublished ? "--- SCAN PUBLIC RECEIPT ---" : "--- LOCAL PROOF OF WORK ---"));
+      printCenteredRow(import_picocolors.default.dim("--- SCAN PUBLIC RECEIPT ---"));
       printRow("");
       for (const qrRow of qrRows) {
         printCenteredRow(qrRow);
@@ -16710,6 +16861,9 @@ async function renderTerminalReceipt(receipt, publicUrl, useBarcode) {
     } else {
       printCenteredRow(import_picocolors.default.bold("||| | ||||| ||| |||| |||||| |||| ||| ||||||| |||"));
     }
+  } else {
+    printCenteredRow(import_picocolors.default.dim("--- LOCAL PROOF (NOT PUBLISHED) ---"));
+    printCenteredRow(import_picocolors.default.dim(`id ${receipt.receipt.id.slice(0, 28)}`));
   }
   if (isPublished) {
     printCenteredRow(import_picocolors.default.cyan(displayHost));
@@ -16722,17 +16876,45 @@ async function renderTerminalReceipt(receipt, publicUrl, useBarcode) {
     printRow(`  ${teal("[\u2713]")} QODEWK_TELEMETRY=off (Cloud sync disabled)`);
   }
   printRow(`  ${green("[\u2713]")} Source code was never uploaded to Qodewk`);
-  console.log("  " + import_picocolors.default.bold(coral("\\/".repeat(28))));
-  console.log("");
-  if (isPublished) {
-    console.log(`  ${import_picocolors.default.dim("\u{1F517} Public Receipt:")} ${import_picocolors.default.underline(import_picocolors.default.cyan(urlToDisplay))}`);
+  push("  " + import_picocolors.default.bold(coral("\\/".repeat(28))));
+  push("");
+  if (isPublished && publicUrl) {
+    push(`  ${import_picocolors.default.dim("Public Receipt:")} ${import_picocolors.default.underline(import_picocolors.default.cyan(publicUrl))}`);
   } else {
-    console.log(`  ${import_picocolors.default.dim("\u{1F4BE} Saved to local DB:")} ${import_picocolors.default.dim("~/.qodewk/state.db")}`);
-    console.log(`  ${import_picocolors.default.dim("\u{1F4A1} To publish & get shareable URL:")} ${import_picocolors.default.cyan("qodewk share")}`);
+    push(`  ${import_picocolors.default.dim("Saved to local DB:")} ${import_picocolors.default.dim("~/.qodewk/state.db")}`);
+    push(`  ${import_picocolors.default.dim("To publish & get shareable URL:")} ${import_picocolors.default.cyan("qodewk share")}`);
   }
   if (!useBarcode) {
-    console.log(`  ${import_picocolors.default.dim("\u{1F4CA} View classic 1D barcode:")} ${import_picocolors.default.cyan("qodewk --barcode")}`);
+    push(`  ${import_picocolors.default.dim("View classic 1D barcode:")} ${import_picocolors.default.cyan("qodewk --barcode")}`);
+  }
+  push("");
+  return lines.join("\n");
+}
+async function renderTerminalReceipt(receipt, publicUrl, useBarcode) {
+  console.log(buildTerminalReceipt(receipt, publicUrl, useBarcode));
+}
+async function outputReceipt(receipt, options, publicUrl) {
+  const format = options.json ? "json" : options.format || "terminal";
+  let content;
+  if (format === "json") {
+    content = JSON.stringify(receipt, null, 2);
+  } else if (format === "markdown") {
+    content = formatMarkdownReceipt(receipt, publicUrl);
+  } else {
+    content = buildTerminalReceipt(receipt, publicUrl, options.barcode);
+  }
+  if (options.out) {
+    const fileContent = format === "terminal" ? stripAnsi(content) : content;
+    fs6.writeFileSync(options.out, fileContent.endsWith("\n") ? fileContent : fileContent + "\n", "utf-8");
+    console.log(import_picocolors.default.green(`\u2713 Receipt written to ${options.out}`));
+  }
+  if (!options.out) {
+    if (format === "terminal") {
+      console.log(content);
+    } else {
+      console.log(content);
+    }
+  } else if (format !== "terminal") {
   }
-  console.log("");
 }
 program2.parse(process.argv);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "qodewk",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "description": "Universal telemetry and digital receipt generator for the AI coding agent era",
   "type": "module",
   "bin": {
@@ -14,6 +14,7 @@
   "scripts": {
     "build": "tsup",
     "typecheck": "tsc --noEmit",
+    "test": "node --test test/smoke.test.mjs",
     "prepublishOnly": "pnpm run build"
   },
   "publishConfig": {
@@ -43,8 +44,7 @@
   "dependencies": {
     "commander": "^13.1.0",
     "picocolors": "^1.1.1",
-    "qrcode": "^1.5.4",
-    "simple-git": "^3.27.0"
+    "qrcode": "^1.5.4"
   },
   "devDependencies": {
     "@qodewk/core": "workspace:*",