syntropic 0.9.3 → 0.9.4

package/commands/audit.js

@@ -288,6 +288,66 @@ function run(args) {
 
   console.log(`\n  ${dim('Run `syntropic init` to install the methodology and prevent these automatically.')}`);
   console.log(`  ${dim('Learn more: https://www.syntropicworks.com')}\n`);
+
+  // Anonymous audit ping — fire-and-forget, respects telemetry opt-out
+  sendAuditPing(score);
+}
+
+function sendAuditPing(score) {
+  try {
+    const os = require('os');
+    const crypto = require('crypto');
+    const https = require('https');
+    const configPath = path.join(os.homedir(), '.syntropic', 'config.json');
+
+    let anonId;
+    if (fs.existsSync(configPath)) {
+      const config = JSON.parse(fs.readFileSync(configPath, 'utf8'));
+      if (config.telemetry === 'disabled' || config.telemetry === false) return;
+      const date = new Date().toISOString().slice(0, 10);
+      anonId = crypto.createHash('sha256').update(config.device_id + date).digest('hex');
+    } else {
+      // No config yet (haven't run init) — hash hostname+user for counting
+      anonId = crypto.createHash('sha256').update(os.hostname() + os.userInfo().username).digest('hex');
+    }
+
+    // Hash repo identity for per-project tracking
+    let repoId = null;
+    try {
+      const { execSync } = require('child_process');
+      let identity;
+      try {
+        identity = execSync('git remote get-url origin 2>/dev/null', { encoding: 'utf8' }).trim();
+      } catch {
+        identity = path.basename(process.cwd());
+      }
+      repoId = crypto.createHash('sha256').update(identity).digest('hex').slice(0, 16);
+    } catch {}
+
+    const payload = JSON.stringify({
+      type: 'audit',
+      schema_version: '1',
+      anon_id: anonId,
+      repo_hash: repoId,
+      score,
+      cli_version: require('../package.json').version,
+      os: process.platform,
+    });
+
+    const url = new URL('https://www.syntropicworks.com/api/v1/prism/report');
+    const req = https.request({
+      hostname: url.hostname,
+      port: 443,
+      path: url.pathname,
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(payload) },
+      timeout: 5000,
+    }, (res) => { res.resume(); });
+    req.on('error', () => {});
+    req.on('timeout', () => req.destroy());
+    req.write(payload);
+    req.end();
+  } catch {}
 }
 
 module.exports = run;

package/commands/config-utils.js

@@ -41,12 +41,12 @@ function saveConfig(config) {
 
 /**
  * Generate the client_hash for double-hash anonymization.
- * client_hash = SHA-256(device_id + YYYY-MM-DD)
- * This rotates daily — server re-hashes with its own salt.
+ * client_hash = SHA-256(device_id)
+ * Stable per install — server re-hashes with its own salt before storing.
+ * device_id is already a random UUID with no identifying information.
  */
 function clientHash(deviceId) {
-  const dailySalt = new Date().toISOString().slice(0, 10); // YYYY-MM-DD
-  return crypto.createHash('sha256').update(deviceId + dailySalt).digest('hex');
+  return crypto.createHash('sha256').update(deviceId).digest('hex');
 }
 
 /**

package/commands/init.js

@@ -298,6 +298,24 @@ async function run(args) {
   // Ensure ~/.syntropic/config.json exists (device_id, hmac_key, telemetry)
   ensureConfig();
 
+  // Install syntropic as a dev dependency so `syntropic report` works in every session
+  const pkgJsonPath = path.join(targetDir, 'package.json');
+  if (fs.existsSync(pkgJsonPath)) {
+    try {
+      const pkg = JSON.parse(fs.readFileSync(pkgJsonPath, 'utf8'));
+      const hasDep = pkg.dependencies?.syntropic || pkg.devDependencies?.syntropic;
+      if (!hasDep) {
+        const { execSync } = require('child_process');
+        console.log('  install  syntropic as dev dependency (enables `syntropic report` in every session)');
+        execSync('npm install --save-dev syntropic', { cwd: targetDir, stdio: 'pipe', timeout: 30000 });
+      } else {
+        console.log('  skip    syntropic already in package.json');
+      }
+    } catch {
+      console.log('  skip    could not install syntropic as dev dependency (install manually: npm i -D syntropic)');
+    }
+  }
+
   console.log(`
   Done! Your project is set up with the Syntropic pipeline.
 

package/commands/report.js

@@ -14,6 +14,21 @@ const { loadConfig, clientHash, hmacSign } = require('./config-utils');
 const REPORT_URL = 'https://www.syntropicworks.com/api/v1/prism/report';
 const SCHEMA_VERSION = '1.0';
 
+function repoHash() {
+  try {
+    const { execSync } = require('child_process');
+    let identity;
+    try {
+      identity = execSync('git remote get-url origin 2>/dev/null', { encoding: 'utf8' }).trim();
+    } catch {
+      identity = require('path').basename(process.cwd());
+    }
+    return crypto.createHash('sha256').update(identity).digest('hex').slice(0, 16);
+  } catch {
+    return null;
+  }
+}
+
 function parseFlags(args) {
   const flags = {};
   for (let i = 0; i < args.length; i++) {
@@ -241,6 +256,7 @@ async function run(args) {
     schema_version: SCHEMA_VERSION,
     cli_version: require('../package.json').version,
     idempotency_key: idempotencyKey,
+    repo_hash: repoHash(),
     cycle: {
       weight,
       phases_run: phases,
@@ -290,7 +306,13 @@ async function run(args) {
             const formatted = saved >= 1000 ? `~${Math.round(saved / 1000)}k` : `~${saved}`;
             parts.push(`${formatted} tokens saved`);
           }
-          console.log(`  ${parts.join(' | ')}`);
+          const line = parts.join(' | ');
+          const w = Math.max(55, line.length + 4);
+          console.log('');
+          console.log('  ' + '\u250C' + '\u2500'.repeat(w) + '\u2510');
+          console.log('  ' + '\u2502' + '  ' + line + ' '.repeat(w - line.length - 2) + '\u2502');
+          console.log('  ' + '\u2514' + '\u2500'.repeat(w) + '\u2518');
+          console.log('');
         } else {
           console.log(`  PRISM report: server returned ${res.statusCode} (non-blocking).`);
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "syntropic",
-  "version": "0.9.3",
+  "version": "0.9.4",
   "description": "Ship better software with a proven development methodology. Audit your git history, install disciplined rules, and track iterations — for Claude Code, Cursor, Windsurf, GitHub Copilot, and OpenAI Codex.",
   "bin": {
     "syntropic": "./bin/syntropic.js"