@blastin-dev/clocktopus-cli 0.1.3 → 0.2.0

package/dist/src/lib/config.d.ts

@@ -1,8 +1,25 @@
 export declare const ENVIRONMENTS: {
     readonly prod: "https://clocktopus.app";
+    readonly staging: "https://staging.clocktopus.app";
     readonly dev: "http://localhost:3000";
 };
 export type Environment = keyof typeof ENVIRONMENTS;
+/**
+ * Bookkeeping for the agent telemetry setup.
+ *
+ * Deliberately does **not** hold the ingest token. The token has to live in
+ * `~/.claude/settings.json` for Claude Code's exporter to read it, and a
+ * second copy here would be a second thing to leak and a second thing to
+ * fall out of date. What is kept is only what setup cannot recover later:
+ * the row id needed to revoke, and the prefix needed to display.
+ */
+type AgentConfig = {
+    tokenId?: string;
+    tokenPrefix?: string;
+    endpoint?: string;
+    /** ISO timestamp — `agent doctor` compares it against settings.json. */
+    configuredAt?: string;
+};
 export declare function setRuntimeEnvironment(env: Environment): void;
 export declare function getEnvironment(): Environment;
 export declare function getApiUrl(): string;
@@ -10,4 +27,10 @@ export declare function getToken(): string | undefined;
 export declare function setToken(token: string): void;
 export declare function clearToken(): void;
 export declare function isLoggedIn(): boolean;
+export declare function getAgentConfig(): AgentConfig;
+export declare function setAgentConfig(next: AgentConfig): void;
+export declare function clearAgentConfig(): void;
+/** Where the config lives, so `agent doctor` can point at a real file. */
+export declare function getConfigPath(): string;
+export {};
 //# sourceMappingURL=config.d.ts.map

package/dist/src/lib/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/lib/config.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,YAAY;;;CAGf,CAAC;AAEX,MAAM,MAAM,WAAW,GAAG,MAAM,OAAO,YAAY,CAAC;AAapD,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,WAAW,GAAG,IAAI,CAE5D;AAED,wBAAgB,cAAc,IAAI,WAAW,CAO5C;AAED,wBAAgB,SAAS,IAAI,MAAM,CASlC;AAED,wBAAgB,QAAQ,IAAI,MAAM,GAAG,SAAS,CAE7C;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAE5C;AAED,wBAAgB,UAAU,IAAI,IAAI,CAEjC;AAED,wBAAgB,UAAU,IAAI,OAAO,CAEpC"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/lib/config.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,YAAY;;;;CAIf,CAAC;AAEX,MAAM,MAAM,WAAW,GAAG,MAAM,OAAO,YAAY,CAAC;AAEpD;;;;;;;;GAQG;AACH,KAAK,WAAW,GAAG;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wEAAwE;IACxE,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAcF,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,WAAW,GAAG,IAAI,CAE5D;AAED,wBAAgB,cAAc,IAAI,WAAW,CAO5C;AAED,wBAAgB,SAAS,IAAI,MAAM,CASlC;AAED,wBAAgB,QAAQ,IAAI,MAAM,GAAG,SAAS,CAE7C;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAE5C;AAED,wBAAgB,UAAU,IAAI,IAAI,CAEjC;AAED,wBAAgB,UAAU,IAAI,OAAO,CAEpC;AAED,wBAAgB,cAAc,IAAI,WAAW,CAE5C;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI,CAEtD;AAED,wBAAgB,gBAAgB,IAAI,IAAI,CAEvC;AAED,0EAA0E;AAC1E,wBAAgB,aAAa,IAAI,MAAM,CAEtC"}

package/dist/src/lib/config.js

@@ -1,6 +1,7 @@
 import Conf from "conf";
 export const ENVIRONMENTS = {
     prod: "https://clocktopus.app",
+    staging: "https://staging.clocktopus.app",
     dev: "http://localhost:3000",
 };
 const config = new Conf({
@@ -40,3 +41,16 @@ export function clearToken() {
 export function isLoggedIn() {
     return !!getToken();
 }
+export function getAgentConfig() {
+    return config.get("agent") ?? {};
+}
+export function setAgentConfig(next) {
+    config.set("agent", { ...getAgentConfig(), ...next });
+}
+export function clearAgentConfig() {
+    config.delete("agent");
+}
+/** Where the config lives, so `agent doctor` can point at a real file. */
+export function getConfigPath() {
+    return config.path;
+}

package/dist/src/lib/format.d.ts

@@ -0,0 +1,6 @@
+/** "3 minutes ago" / "never". Null-safe because most of these fields are. */
+export declare function formatAgo(value: string | null | undefined): string;
+export declare function microUsdToDisplay(microUsd: number): string;
+/** Pads a label so the value column lines up in the status blocks. */
+export declare function labelled(label: string, value: string, width?: number): string;
+//# sourceMappingURL=format.d.ts.map

package/dist/src/lib/format.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.d.ts","sourceRoot":"","sources":["../../../src/lib/format.ts"],"names":[],"mappings":"AAEA,6EAA6E;AAC7E,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAOlE;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED,sEAAsE;AACtE,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,SAAK,GAAG,MAAM,CAEzE"}

package/dist/src/lib/format.js

@@ -0,0 +1,19 @@
+import { formatDistanceToNowStrict, parseISO } from "date-fns";
+/** "3 minutes ago" / "never". Null-safe because most of these fields are. */
+export function formatAgo(value) {
+    if (!value)
+        return "never";
+    try {
+        return formatDistanceToNowStrict(parseISO(value), { addSuffix: true });
+    }
+    catch {
+        return value;
+    }
+}
+export function microUsdToDisplay(microUsd) {
+    return `$${(microUsd / 1_000_000).toFixed(2)}`;
+}
+/** Pads a label so the value column lines up in the status blocks. */
+export function labelled(label, value, width = 14) {
+    return `  ${label.padEnd(width)}${value}`;
+}

package/dist/src/lib/git.d.ts

@@ -0,0 +1,3 @@
+export declare function getRepositoryRemote(cwd?: string): string | null;
+export declare function isGitRepository(cwd?: string): boolean;
+//# sourceMappingURL=git.d.ts.map

package/dist/src/lib/git.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.d.ts","sourceRoot":"","sources":["../../../src/lib/git.ts"],"names":[],"mappings":"AA0BA,wBAAgB,mBAAmB,CAAC,GAAG,SAAgB,GAAG,MAAM,GAAG,IAAI,CAEtE;AAED,wBAAgB,eAAe,CAAC,GAAG,SAAgB,GAAG,OAAO,CAE5D"}

package/dist/src/lib/git.js

@@ -0,0 +1,30 @@
+import { execFileSync } from "node:child_process";
+/**
+ * Just enough git to work out which repository the user is standing in.
+ *
+ * The CLI deliberately does not parse the remote — `apps/cli` is published
+ * standalone and cannot import `@repo/core`, so a parser here would be a
+ * second implementation destined to drift from the receiver's. The raw
+ * remote goes to the server, which owns the one definition of a supported
+ * remote.
+ */
+function git(cwd, args) {
+    try {
+        const output = execFileSync("git", args, {
+            cwd,
+            encoding: "utf8",
+            stdio: ["ignore", "pipe", "ignore"],
+            timeout: 2000,
+        }).trim();
+        return output || undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+export function getRepositoryRemote(cwd = process.cwd()) {
+    return git(cwd, ["remote", "get-url", "origin"]) ?? null;
+}
+export function isGitRepository(cwd = process.cwd()) {
+    return git(cwd, ["rev-parse", "--is-inside-work-tree"]) === "true";
+}

package/dist/src/lib/repo-guidance.d.ts

@@ -0,0 +1,40 @@
+import type { RepoStatusResponse } from "./validators.js";
+/**
+ * The half of the setup that is not on this machine.
+ *
+ * Configuring the exporter and the hook makes agent sessions *arrive*. It
+ * does not make them *mean* anything, and the two ways that fails are
+ * unrelated to each other and to everything `agent setup` writes locally:
+ *
+ * - The repository is not attached to a project, so spend lands in the
+ *   unattributed row. Purely a Clocktopus-side mapping; no webhook affects
+ *   it either way.
+ * - The push webhook is not delivering, so there are no human time entries
+ *   to compare the spend against. Note this does *not* stop agent→commit
+ *   links: the SessionEnd hook resolves the commit range locally and posts
+ *   it. What is missing is the other side of the comparison, and a cost
+ *   without the hours it bought is not a smaller answer — it is not one.
+ *
+ * Reported as two separate verdicts, because they send you to two
+ * different places, and a single "not set up" would send you to neither.
+ */
+export type RepoCheck = {
+    label: string;
+    ok: boolean | "warn";
+    detail: string;
+    fix?: string;
+};
+/**
+ * Fetches readiness for the repository the CLI is standing in.
+ *
+ * Returns null when there is nothing to ask about — outside a git tree, or
+ * when the server is unreachable. A failure here must never fail `setup`:
+ * the local configuration it just wrote is valid regardless.
+ */
+export declare function fetchRepoStatus(cwd?: string): Promise<RepoStatusResponse | null>;
+export declare function attributionCheck(status: RepoStatusResponse): RepoCheck;
+export declare function commitLaneCheck(status: RepoStatusResponse): RepoCheck;
+export declare function repoChecks(status: RepoStatusResponse): RepoCheck[];
+/** The block `agent setup` prints after writing the local configuration. */
+export declare function renderRepoBlock(status: RepoStatusResponse): string[];
+//# sourceMappingURL=repo-guidance.d.ts.map

package/dist/src/lib/repo-guidance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repo-guidance.d.ts","sourceRoot":"","sources":["../../../src/lib/repo-guidance.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAO1D;;;;;;;;;;;;;;;;;;GAkBG;AAEH,MAAM,MAAM,SAAS,GAAG;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,OAAO,GAAG,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC;AAEF;;;;;;GAMG;AACH,wBAAsB,eAAe,CACnC,GAAG,SAAgB,GAClB,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAapC;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,kBAAkB,GAAG,SAAS,CAqDtE;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,kBAAkB,GAAG,SAAS,CAqCrE;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,kBAAkB,GAAG,SAAS,EAAE,CAElE;AAED,4EAA4E;AAC5E,wBAAgB,eAAe,CAAC,MAAM,EAAE,kBAAkB,GAAG,MAAM,EAAE,CAepE"}

package/dist/src/lib/repo-guidance.js

@@ -0,0 +1,123 @@
+import { ApiError, get } from "./api.js";
+import { getApiUrl } from "./config.js";
+import { formatAgo } from "./format.js";
+import { getRepositoryRemote } from "./git.js";
+import { RepoStatusSchema } from "./validators.js";
+/**
+ * Fetches readiness for the repository the CLI is standing in.
+ *
+ * Returns null when there is nothing to ask about — outside a git tree, or
+ * when the server is unreachable. A failure here must never fail `setup`:
+ * the local configuration it just wrote is valid regardless.
+ */
+export async function fetchRepoStatus(cwd = process.cwd()) {
+    const remote = getRepositoryRemote(cwd);
+    if (!remote)
+        return null;
+    try {
+        const data = await get(`/api/agent/repo-status?repositoryUrl=${encodeURIComponent(remote)}`);
+        return RepoStatusSchema.parse(data);
+    }
+    catch (error) {
+        if (error instanceof ApiError)
+            return null;
+        return null;
+    }
+}
+export function attributionCheck(status) {
+    const { attribution, repository } = status;
+    const where = repository?.displayUrl ?? "this repository";
+    switch (attribution.reason) {
+        case "attributed":
+            return {
+                label: "Project",
+                ok: true,
+                detail: attribution.projectNames[0] ?? "attached",
+            };
+        case "no_matching_project":
+            return {
+                label: "Project",
+                ok: false,
+                detail: `${where} is not attached to any project`,
+                fix: "Attach it under Projects → (your project) → Repositories.\n" +
+                    "      Until then this repo's agent spend is recorded, but lands in\n" +
+                    "      the unattributed row instead of against a client.",
+            };
+        case "ambiguous_project":
+            return {
+                label: "Project",
+                ok: false,
+                // Refusing to guess is the designed behaviour, not a bug — billing
+                // one client for another's work is worse than billing nobody.
+                detail: `${where} is attached to ${attribution.projectNames.length} projects (${attribution.projectNames.join(", ")})`,
+                fix: "Clocktopus will not guess which client to bill, so these sessions\n" +
+                    "      stay unattributed. Remove the repository from all but one project.",
+            };
+        case "unsupported_remote":
+            return {
+                label: "Project",
+                ok: "warn",
+                detail: "remote is not GitHub or Bitbucket",
+                fix: "Spend from this repository is recorded but cannot be attributed —\n" +
+                    "      only GitHub and Bitbucket remotes resolve to a project.",
+            };
+        case "no_repository":
+            return {
+                label: "Project",
+                ok: "warn",
+                detail: "not a git repository",
+                fix: "Run 'clocktopus agent setup' inside a project checkout to check attribution.",
+            };
+    }
+}
+export function commitLaneCheck(status) {
+    const dashboard = getApiUrl().replace(/\/$/, "");
+    switch (status.commitLane.status) {
+        case "delivering":
+            return {
+                label: "Commit lane",
+                ok: true,
+                detail: `last commit received ${formatAgo(status.commitLane.lastCommitAt)}`,
+            };
+        case "no_secret":
+            return {
+                label: "Commit lane",
+                ok: false,
+                detail: "no webhook secret — no commits are reaching Clocktopus",
+                fix: `Create one at ${dashboard}/settings/webhooks, then add a push\n` +
+                    `      webhook to this repository. Guide:\n` +
+                    `      ${dashboard}/docs/guides/setup-github-webhook`,
+            };
+        case "no_delivery":
+            return {
+                label: "Commit lane",
+                ok: false,
+                detail: "no commit has ever arrived from this repository",
+                fix: "Agent spend will be recorded here, but with no human time beside it\n" +
+                    "      the true-cost comparison has only one side. Add a push webhook:\n" +
+                    `        URL     ${status.webhookUrl}\n` +
+                    "        Events  push\n" +
+                    `        Secret  ${dashboard}/settings/webhooks\n` +
+                    "      The URL is per person, not per repository — on a shared repo\n" +
+                    "      each teammate adds their own.",
+            };
+    }
+}
+export function repoChecks(status) {
+    return [attributionCheck(status), commitLaneCheck(status)];
+}
+/** The block `agent setup` prints after writing the local configuration. */
+export function renderRepoBlock(status) {
+    const lines = [];
+    const heading = status.repository?.displayUrl ?? "this directory";
+    lines.push("");
+    lines.push(`Repository  ${heading}`);
+    lines.push("");
+    for (const check of repoChecks(status)) {
+        const symbol = check.ok === true ? "✓" : check.ok === "warn" ? "⚠" : "✗";
+        lines.push(`  ${symbol} ${check.label.padEnd(12)}${check.detail}`);
+        if (check.ok !== true && check.fix)
+            lines.push(`      ${check.fix}`);
+    }
+    return lines;
+}

package/dist/src/lib/validators.d.ts

@@ -36,4 +36,73 @@ export declare const TokenErrorResponseSchema: z.ZodObject<{
 }, z.core.$strip>;
 export type TokenResponse = z.infer<typeof TokenResponseSchema>;
 export type TokenErrorResponse = z.infer<typeof TokenErrorResponseSchema>;
+export declare const IngestTokenSchema: z.ZodObject<{
+    tokenId: z.ZodString;
+    token: z.ZodString;
+    tokenPrefix: z.ZodString;
+    endpoint: z.ZodString;
+}, z.core.$strip>;
+export declare const AgentEndpointSchema: z.ZodObject<{
+    endpoint: z.ZodString;
+}, z.core.$strip>;
+export declare const AgentStatusSchema: z.ZodObject<{
+    endpoint: z.ZodString;
+    window: z.ZodObject<{
+        since: z.ZodString;
+        sessions: z.ZodNumber;
+        unattributedSessions: z.ZodNumber;
+        costMicroUsd: z.ZodNumber;
+    }, z.core.$strip>;
+    hookLane: z.ZodObject<{
+        lastSessionStartedAt: z.ZodNullable<z.ZodString>;
+        repositoryUrl: z.ZodNullable<z.ZodString>;
+        gitBranch: z.ZodNullable<z.ZodString>;
+        cwd: z.ZodNullable<z.ZodString>;
+        attributed: z.ZodNullable<z.ZodBoolean>;
+    }, z.core.$strip>;
+    metricsLane: z.ZodObject<{
+        lastExportReceivedAt: z.ZodNullable<z.ZodString>;
+        lastModel: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>;
+    tokens: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodNullable<z.ZodString>;
+        tokenPrefix: z.ZodString;
+        lastUsedAt: z.ZodNullable<z.ZodString>;
+        usageCount: z.ZodNumber;
+        createdAt: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const RepoStatusSchema: z.ZodObject<{
+    repository: z.ZodNullable<z.ZodObject<{
+        provider: z.ZodString;
+        ownerRepo: z.ZodString;
+        displayUrl: z.ZodString;
+    }, z.core.$strip>>;
+    attribution: z.ZodObject<{
+        reason: z.ZodEnum<{
+            attributed: "attributed";
+            no_repository: "no_repository";
+            unsupported_remote: "unsupported_remote";
+            no_matching_project: "no_matching_project";
+            ambiguous_project: "ambiguous_project";
+        }>;
+        projectId: z.ZodNullable<z.ZodString>;
+        projectNames: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>;
+    commitLane: z.ZodObject<{
+        status: z.ZodEnum<{
+            delivering: "delivering";
+            no_secret: "no_secret";
+            no_delivery: "no_delivery";
+        }>;
+        lastCommitAt: z.ZodNullable<z.ZodString>;
+        hasWebhookSecret: z.ZodBoolean;
+    }, z.core.$strip>;
+    ready: z.ZodBoolean;
+    webhookUrl: z.ZodString;
+}, z.core.$strip>;
+export type IngestTokenResponse = z.infer<typeof IngestTokenSchema>;
+export type AgentStatusResponse = z.infer<typeof AgentStatusSchema>;
+export type RepoStatusResponse = z.infer<typeof RepoStatusSchema>;
 //# sourceMappingURL=validators.d.ts.map

package/dist/src/lib/validators.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validators.d.ts","sourceRoot":"","sources":["../../../src/lib/validators.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,UAAU;;;;;;;;;iBASrB,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAEtD,eAAO,MAAM,wBAAwB;;;;;;;iBAOnC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,eAAO,MAAM,mBAAmB;;;;iBAI9B,CAAC;AAEH,eAAO,MAAM,wBAAwB;;;;;;;;;iBASnC,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAChE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC"}
+{"version":3,"file":"validators.d.ts","sourceRoot":"","sources":["../../../src/lib/validators.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,UAAU;;;;;;;;;iBASrB,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAEtD,eAAO,MAAM,wBAAwB;;;;;;;iBAOnC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,eAAO,MAAM,mBAAmB;;;;iBAI9B,CAAC;AAEH,eAAO,MAAM,wBAAwB;;;;;;;;;iBASnC,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAChE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAO1E,eAAO,MAAM,iBAAiB;;;;;iBAM5B,CAAC;AAEH,eAAO,MAAM,mBAAmB;;iBAE9B,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA6B5B,CAAC;AAEH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA0B3B,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AACpE,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AACpE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC"}

package/dist/src/lib/validators.js

@@ -32,3 +32,72 @@ export const TokenErrorResponseSchema = z.object({
     ]),
     error_description: z.string().optional(),
 });
+// Agent telemetry (`clocktopus agent …`). The endpoint is always supplied by
+// the server rather than known to the CLI: the receiver lives on its own
+// Router whose URL differs per stage, so a baked-in default would be wrong
+// everywhere but production.
+export const IngestTokenSchema = z.object({
+    tokenId: z.string(),
+    /** Plaintext, returned exactly once — the server stores only a hash. */
+    token: z.string(),
+    tokenPrefix: z.string(),
+    endpoint: z.string(),
+});
+export const AgentEndpointSchema = z.object({
+    endpoint: z.string(),
+});
+export const AgentStatusSchema = z.object({
+    endpoint: z.string(),
+    window: z.object({
+        since: z.string(),
+        sessions: z.number(),
+        unattributedSessions: z.number(),
+        costMicroUsd: z.number(),
+    }),
+    hookLane: z.object({
+        lastSessionStartedAt: z.string().nullable(),
+        repositoryUrl: z.string().nullable(),
+        gitBranch: z.string().nullable(),
+        cwd: z.string().nullable(),
+        attributed: z.boolean().nullable(),
+    }),
+    metricsLane: z.object({
+        lastExportReceivedAt: z.string().nullable(),
+        lastModel: z.string().nullable(),
+    }),
+    tokens: z.array(z.object({
+        id: z.string(),
+        name: z.string().nullable(),
+        tokenPrefix: z.string(),
+        lastUsedAt: z.string().nullable(),
+        usageCount: z.number(),
+        createdAt: z.string(),
+    })),
+});
+export const RepoStatusSchema = z.object({
+    repository: z
+        .object({
+        provider: z.string(),
+        ownerRepo: z.string(),
+        displayUrl: z.string(),
+    })
+        .nullable(),
+    attribution: z.object({
+        reason: z.enum([
+            "attributed",
+            "no_repository",
+            "unsupported_remote",
+            "no_matching_project",
+            "ambiguous_project",
+        ]),
+        projectId: z.string().nullable(),
+        projectNames: z.array(z.string()),
+    }),
+    commitLane: z.object({
+        status: z.enum(["delivering", "no_secret", "no_delivery"]),
+        lastCommitAt: z.string().nullable(),
+        hasWebhookSecret: z.boolean(),
+    }),
+    ready: z.boolean(),
+    webhookUrl: z.string(),
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blastin-dev/clocktopus-cli",
-  "version": "0.1.3",
+  "version": "0.2.0",
   "type": "module",
   "bin": {
     "clocktopus": "./dist/bin/clocktopus.js"
@@ -12,13 +12,14 @@
     "commander": "^13.0.0",
     "conf": "^13.0.0",
     "date-fns": "4.1.0",
-    "zod": "4.1.12"
+    "zod": "4.4.3"
   },
   "devDependencies": {
     "@types/node": "22.15.3",
-    "eslint": "^9.28.0",
+    "eslint": "9.37.0",
     "eslint-plugin-import-x": "^4.16.1",
     "typescript": "5.9.2",
+    "vitest": "^4.1.5",
     "@repo/eslint-config": "0.0.0",
     "@repo/prettier-config": "0.1.0",
     "@repo/typescript-config": "0.0.0"
@@ -28,8 +29,9 @@
     "build": "tsc",
     "dev": "tsc --watch",
     "check-types": "tsc --noEmit",
+    "test": "vitest run",
     "lint": "eslint",
-    "format": "prettier --check . --ignore-path ../../.gitignore",
-    "format:fix": "prettier --write . --ignore-path ../../.gitignore"
+    "format": "prettier --check . --ignore-path ../../.gitignore --ignore-path ../../.prettierignore",
+    "format:fix": "prettier --write . --ignore-path ../../.gitignore --ignore-path ../../.prettierignore"
   }
 }