@curatedmcp/tokenshield 0.2.0

package/dist/commands/doctor.js

@@ -0,0 +1,119 @@
+import { existsSync, statSync } from "node:fs";
+import { defaultConfig } from "@curatedmcp/tokenshield-core";
+import { classifyApiKey, probeUpstream, checkPort } from "../lib/preflight.js";
+import { readDaemon } from "../lib/daemon.js";
+import { c, sym, dim, emit, emitJson, isJson, say, heading } from "../lib/ui.js";
+function row(c0) {
+    const symbol = c0.status === "ok" ? sym.check : c0.status === "warn" ? sym.warn : sym.cross;
+    const name = c0.name.padEnd(24);
+    return `  ${symbol}  ${name}  ${c0.detail}`;
+}
+export async function runDoctor() {
+    const cfg = defaultConfig();
+    const checks = [];
+    // Node version
+    const major = Number(process.versions.node.split(".")[0]);
+    checks.push(major >= 22
+        ? { name: "Node version", status: "ok", detail: `${process.version} (>= 22)` }
+        : { name: "Node version", status: "fail", detail: `${process.version} — requires Node 22+`, hint: "Upgrade: https://nodejs.org/" });
+    // API key
+    const ks = classifyApiKey(process.env["ANTHROPIC_API_KEY"]);
+    if (ks.state === "ok") {
+        checks.push({ name: "ANTHROPIC_API_KEY", status: "ok", detail: `set, ends in …${(process.env["ANTHROPIC_API_KEY"] ?? "").slice(-4)}` });
+    }
+    else if (ks.state === "wrong_prefix") {
+        checks.push({ name: "ANTHROPIC_API_KEY", status: "warn", detail: "set but wrong prefix", hint: ks.hint });
+    }
+    else {
+        checks.push({ name: "ANTHROPIC_API_KEY", status: "warn", detail: "not set in this shell", hint: ks.hint });
+    }
+    // Base URL
+    const baseUrl = process.env["ANTHROPIC_BASE_URL"];
+    if (baseUrl) {
+        const local = baseUrl.includes("127.0.0.1") || baseUrl.includes("localhost");
+        checks.push(local
+            ? { name: "ANTHROPIC_BASE_URL", status: "ok", detail: `points at local proxy: ${baseUrl}` }
+            : { name: "ANTHROPIC_BASE_URL", status: "warn", detail: `set to ${baseUrl} (not local)` });
+    }
+    else {
+        checks.push({
+            name: "ANTHROPIC_BASE_URL",
+            status: "warn",
+            detail: "not set in this shell",
+            hint: `export ANTHROPIC_BASE_URL=http://${cfg.bind}:${cfg.port}`,
+        });
+    }
+    // Daemon
+    const daemon = readDaemon();
+    if (daemon !== null) {
+        checks.push({ name: "Daemon", status: "ok", detail: `running, pid ${daemon.pid}, port ${daemon.port}` });
+    }
+    else {
+        checks.push({ name: "Daemon", status: "warn", detail: "not running (foreground or unstarted)" });
+    }
+    // Ports
+    const proxyPort = await checkPort(cfg.port);
+    const dashPort = await checkPort(cfg.dashboardPort);
+    // If daemon is running, ports being "in use" is the EXPECTED state.
+    const expectInUse = daemon !== null;
+    if (expectInUse) {
+        checks.push({
+            name: `Port ${cfg.port}`,
+            status: !proxyPort.available ? "ok" : "warn",
+            detail: !proxyPort.available ? "in use by TokenShield (expected)" : "free but daemon claims to be running",
+        });
+        checks.push({
+            name: `Port ${cfg.dashboardPort}`,
+            status: !dashPort.available ? "ok" : "warn",
+            detail: !dashPort.available ? "in use by TokenShield (expected)" : "free but daemon claims to be running",
+        });
+    }
+    else {
+        checks.push({
+            name: `Port ${cfg.port}`,
+            status: proxyPort.available ? "ok" : "fail",
+            detail: proxyPort.available ? "free" : `in use (${proxyPort.detail ?? "unknown"})`,
+            hint: proxyPort.available ? undefined : "tokenshield up --port <other>",
+        });
+        checks.push({
+            name: `Port ${cfg.dashboardPort}`,
+            status: dashPort.available ? "ok" : "fail",
+            detail: dashPort.available ? "free" : `in use (${dashPort.detail ?? "unknown"})`,
+        });
+    }
+    // Ledger
+    if (existsSync(cfg.ledgerPath)) {
+        const s = statSync(cfg.ledgerPath);
+        checks.push({ name: "Ledger file", status: "ok", detail: `${cfg.ledgerPath} (${s.size} bytes)` });
+    }
+    else {
+        checks.push({ name: "Ledger file", status: "ok", detail: `will be created at ${cfg.ledgerPath}` });
+    }
+    // Upstream
+    const probe = await probeUpstream(cfg.upstreamBaseUrl);
+    checks.push(probe.reachable
+        ? { name: "Anthropic reachable", status: "ok", detail: `${cfg.upstreamBaseUrl} (${probe.latencyMs}ms, status ${probe.status})` }
+        : { name: "Anthropic reachable", status: "fail", detail: `${cfg.upstreamBaseUrl}: ${probe.detail ?? "unknown"}` });
+    if (isJson()) {
+        emitJson({ ok: checks.every((c) => c.status !== "fail"), checks });
+        process.exit(checks.some((c) => c.status === "fail") ? 1 : 0);
+    }
+    heading("TokenShield doctor");
+    emit("");
+    for (const ch of checks) {
+        emit(row(ch));
+        if (ch.hint)
+            emit(`     ${dim(ch.hint)}`);
+    }
+    emit("");
+    const anyFail = checks.some((ch) => ch.status === "fail");
+    if (anyFail) {
+        emit(`${sym.cross} ${c.bold("Some checks failed.")} Fix the items above, then re-run ${c.cyan("tokenshield doctor")}.`);
+    }
+    else {
+        emit(`${sym.check} ${c.bold("TokenShield looks healthy.")}`);
+    }
+    say("");
+    process.exit(anyFail ? 1 : 0);
+}
+//# sourceMappingURL=doctor.js.map

package/dist/commands/doctor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../../src/commands/doctor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAC/E,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AASjF,SAAS,GAAG,CAAC,EAAS;IACpB,MAAM,MAAM,GAAG,EAAE,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IAC5F,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAChC,OAAO,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC,MAAM,EAAE,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS;IAC7B,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAY,EAAE,CAAC;IAE3B,eAAe;IACf,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,MAAM,CAAC,IAAI,CACT,KAAK,IAAI,EAAE;QACT,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,UAAU,EAAE;QAC9E,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,sBAAsB,EAAE,IAAI,EAAE,8BAA8B,EAAE,CACrI,CAAC;IAEF,UAAU;IACV,MAAM,EAAE,GAAG,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAC5D,IAAI,EAAE,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC1I,CAAC;SAAM,IAAI,EAAE,CAAC,KAAK,KAAK,cAAc,EAAE,CAAC;QACvC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,sBAAsB,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5G,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,uBAAuB,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7G,CAAC;IAED,WAAW;IACX,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAClD,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC7E,MAAM,CAAC,IAAI,CACT,KAAK;YACH,CAAC,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,0BAA0B,OAAO,EAAE,EAAE;YAC3F,CAAC,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,OAAO,cAAc,EAAE,CAC5F,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,oBAAoB;YAC1B,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,uBAAuB;YAC/B,IAAI,EAAE,oCAAoC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE;SACjE,CAAC,CAAC;IACL,CAAC;IAED,SAAS;IACT,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,MAAM,CAAC,GAAG,UAAU,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC3G,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,uCAAuC,EAAE,CAAC,CAAC;IACnG,CAAC;IAED,QAAQ;IACR,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACpD,oEAAoE;IACpE,MAAM,WAAW,GAAG,MAAM,KAAK,IAAI,CAAC;IACpC,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,QAAQ,GAAG,CAAC,IAAI,EAAE;YACxB,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;YAC5C,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,sCAAsC;SAC3G,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,QAAQ,GAAG,CAAC,aAAa,EAAE;YACjC,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;YAC3C,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,sCAAsC;SAC1G,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,QAAQ,GAAG,CAAC,IAAI,EAAE;YACxB,MAAM,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;YAC3C,MAAM,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,SAAS,CAAC,MAAM,IAAI,SAAS,GAAG;YAClF,IAAI,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,+BAA+B;SACxE,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,QAAQ,GAAG,CAAC,aAAa,EAAE;YACjC,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;YAC1C,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,QAAQ,CAAC,MAAM,IAAI,SAAS,GAAG;SACjF,CAAC,CAAC;IACL,CAAC;IAED,SAAS;IACT,IAAI,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,UAAU,KAAK,CAAC,CAAC,IAAI,SAAS,EAAE,CAAC,CAAC;IACpG,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,sBAAsB,GAAG,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACrG,CAAC;IAED,WAAW;IACX,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACvD,MAAM,CAAC,IAAI,CACT,KAAK,CAAC,SAAS;QACb,CAAC,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,eAAe,KAAK,KAAK,CAAC,SAAS,cAAc,KAAK,CAAC,MAAM,GAAG,EAAE;QAChI,CAAC,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,eAAe,KAAK,KAAK,CAAC,MAAM,IAAI,SAAS,EAAE,EAAE,CACpH,CAAC;IAEF,IAAI,MAAM,EAAE,EAAE,CAAC;QACb,QAAQ,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACnE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC9B,IAAI,CAAC,EAAE,CAAC,CAAC;IACT,KAAK,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;QACxB,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QACd,IAAI,EAAE,CAAC,IAAI;YAAE,IAAI,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,CAAC,EAAE,CAAC,CAAC;IACT,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IAC1D,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,CAAC,GAAG,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,qCAAqC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC1H,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,GAAG,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAChC,CAAC"}

package/dist/commands/estimate.d.ts

@@ -0,0 +1,3 @@
+export declare function runEstimate(opts: {
+    hours: number;
+}): Promise<void>;

package/dist/commands/estimate.js

@@ -0,0 +1,90 @@
+import { Ledger, defaultConfig } from "@curatedmcp/tokenshield-core";
+import { c, sym, dim, emit, emitJson, isJson, heading } from "../lib/ui.js";
+function dollars(n) {
+    return "$" + n.toFixed(n < 1 ? 4 : 2);
+}
+function fmt(n) {
+    return n.toLocaleString();
+}
+export async function runEstimate(opts) {
+    const hours = opts.hours;
+    const cfg = defaultConfig();
+    const ledger = new Ledger(cfg.ledgerPath);
+    try {
+        const since = Date.now() - hours * 60 * 60 * 1000;
+        const summary = ledger.summary(since);
+        if (summary.requestCount === 0) {
+            if (isJson()) {
+                emitJson({ ok: true, requestCount: 0, message: "no traffic in window" });
+                return;
+            }
+            emit("");
+            emit(`${sym.info} No traffic recorded in the last ${hours}h.`);
+            emit(dim("  Run Claude Code through the proxy first:"));
+            emit(`    ${c.cyan("tokenshield up")}`);
+            emit(`    ${c.cyan(`export ANTHROPIC_BASE_URL=http://${cfg.bind}:${cfg.port}`)}`);
+            emit("");
+            return;
+        }
+        const windowMs = Math.max(1, summary.windowEnd - summary.windowStart);
+        const weekly = (summary.dollarsRaw / windowMs) * 7 * 24 * 60 * 60 * 1000;
+        const monthly = (summary.dollarsRaw / windowMs) * 30 * 24 * 60 * 60 * 1000;
+        const targets = [
+            { name: "Conversation dedup", pct: 0.30 },
+            { name: "Result cache", pct: 0.07 },
+            { name: "Diff-based file reads", pct: 0.12 },
+            { name: "Streaming early-stop", pct: 0.18 },
+            { name: "Context auto-summarize", pct: 0.20 },
+        ];
+        let surviving = 1;
+        const breakdown = [];
+        for (const t of targets) {
+            const saves = surviving * t.pct;
+            breakdown.push({ name: t.name, saves });
+            surviving -= saves;
+        }
+        const totalSavingsPct = 1 - surviving;
+        const projectedMonthlySavings = monthly * totalSavingsPct;
+        if (isJson()) {
+            emitJson({
+                ok: true,
+                windowHours: hours,
+                requests: summary.requestCount,
+                measuredDollars: summary.dollarsRaw,
+                projectedWeeklyDollars: weekly,
+                projectedMonthlyDollars: monthly,
+                projectedMonthlySavingsDollars: projectedMonthlySavings,
+                projectedSavingsPercent: totalSavingsPct,
+                byModel: summary.byModel,
+            });
+            return;
+        }
+        heading(`Estimate (last ${hours}h)`);
+        emit("");
+        emit(`  ${sym.bullet} Requests:        ${fmt(summary.requestCount)}`);
+        emit(`  ${sym.bullet} Measured spend:  ${dollars(summary.dollarsRaw)}`);
+        emit(`  ${sym.bullet} Input tokens:    ${fmt(summary.totalInputTokensRaw)}`);
+        emit(`  ${sym.bullet} Output tokens:   ${fmt(summary.totalOutputTokensRaw)}`);
+        emit("");
+        emit(`  ${sym.bullet} Projected weekly:  ${dollars(weekly)}`);
+        emit(`  ${sym.bullet} Projected monthly: ${dollars(monthly)}`);
+        emit("");
+        emit(c.bold("  Forward-looking savings at TokenShield v1.0:"));
+        for (const b of breakdown) {
+            emit(`    ${sym.bullet} ${b.name.padEnd(30)} ${c.green("saves " + dollars(monthly * b.saves) + "/mo")}`);
+        }
+        emit("");
+        emit(`  ${c.bold("Total projected savings:")}  ${c.green(dollars(projectedMonthlySavings) + "/mo")} ${dim(`(${(totalSavingsPct * 100).toFixed(1)}%)`)}`);
+        emit(`  ${dim("TokenShield Individual at $19/mo:")}  ROI = ${c.green((projectedMonthlySavings / 19).toFixed(1) + "×")}`);
+        emit("");
+        emit(c.bold("  Spend by model:"));
+        for (const m of summary.byModel) {
+            emit(`    ${m.model.padEnd(28)} ${String(m.requests).padStart(6)} req  ${dollars(m.dollars).padStart(8)}`);
+        }
+        emit("");
+    }
+    finally {
+        ledger.close();
+    }
+}
+//# sourceMappingURL=estimate.js.map

package/dist/commands/estimate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"estimate.js","sourceRoot":"","sources":["../../src/commands/estimate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAE5E,SAAS,OAAO,CAAC,CAAS;IACxB,OAAO,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACxC,CAAC;AACD,SAAS,GAAG,CAAC,CAAS;IACpB,OAAO,CAAC,CAAC,cAAc,EAAE,CAAC;AAC5B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAuB;IACvD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACzB,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QAClD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,OAAO,CAAC,YAAY,KAAK,CAAC,EAAE,CAAC;YAC/B,IAAI,MAAM,EAAE,EAAE,CAAC;gBACb,QAAQ,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;gBACzE,OAAO;YACT,CAAC;YACD,IAAI,CAAC,EAAE,CAAC,CAAC;YACT,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,oCAAoC,KAAK,IAAI,CAAC,CAAC;YAC/D,IAAI,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC,CAAC;YACxD,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;YACxC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,oCAAoC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;YAClF,IAAI,CAAC,EAAE,CAAC,CAAC;YACT,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QACzE,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,UAAU,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QAE3E,MAAM,OAAO,GAAG;YACd,EAAE,IAAI,EAAE,oBAAoB,EAAE,GAAG,EAAE,IAAI,EAAE;YACzC,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,IAAI,EAAE;YACnC,EAAE,IAAI,EAAE,uBAAuB,EAAE,GAAG,EAAE,IAAI,EAAE;YAC5C,EAAE,IAAI,EAAE,sBAAsB,EAAE,GAAG,EAAE,IAAI,EAAE;YAC3C,EAAE,IAAI,EAAE,wBAAwB,EAAE,GAAG,EAAE,IAAI,EAAE;SAC9C,CAAC;QACF,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,MAAM,SAAS,GAA2C,EAAE,CAAC;QAC7D,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC;YAChC,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACxC,SAAS,IAAI,KAAK,CAAC;QACrB,CAAC;QACD,MAAM,eAAe,GAAG,CAAC,GAAG,SAAS,CAAC;QACtC,MAAM,uBAAuB,GAAG,OAAO,GAAG,eAAe,CAAC;QAE1D,IAAI,MAAM,EAAE,EAAE,CAAC;YACb,QAAQ,CAAC;gBACP,EAAE,EAAE,IAAI;gBACR,WAAW,EAAE,KAAK;gBAClB,QAAQ,EAAE,OAAO,CAAC,YAAY;gBAC9B,eAAe,EAAE,OAAO,CAAC,UAAU;gBACnC,sBAAsB,EAAE,MAAM;gBAC9B,uBAAuB,EAAE,OAAO;gBAChC,8BAA8B,EAAE,uBAAuB;gBACvD,uBAAuB,EAAE,eAAe;gBACxC,OAAO,EAAE,OAAO,CAAC,OAAO;aACzB,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,OAAO,CAAC,kBAAkB,KAAK,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,EAAE,CAAC,CAAC;QACT,IAAI,CAAC,KAAK,GAAG,CAAC,MAAM,qBAAqB,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QACtE,IAAI,CAAC,KAAK,GAAG,CAAC,MAAM,qBAAqB,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACxE,IAAI,CAAC,KAAK,GAAG,CAAC,MAAM,qBAAqB,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;QAC7E,IAAI,CAAC,KAAK,GAAG,CAAC,MAAM,qBAAqB,GAAG,CAAC,OAAO,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC;QAC9E,IAAI,CAAC,EAAE,CAAC,CAAC;QACT,IAAI,CAAC,KAAK,GAAG,CAAC,MAAM,uBAAuB,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC9D,IAAI,CAAC,KAAK,GAAG,CAAC,MAAM,uBAAuB,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC/D,IAAI,CAAC,EAAE,CAAC,CAAC;QACT,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC,CAAC;QAC/D,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YAC1B,IAAI,CAAC,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,QAAQ,GAAG,OAAO,CAAC,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3G,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,CAAC;QACT,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,uBAAuB,CAAC,GAAG,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,eAAe,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzJ,IAAI,CAAC,KAAK,GAAG,CAAC,mCAAmC,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC;QACzH,IAAI,CAAC,EAAE,CAAC,CAAC;QACT,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC;QAClC,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YAChC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7G,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,CAAC;IACX,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,KAAK,EAAE,CAAC;IACjB,CAAC;AACH,CAAC"}

package/dist/commands/integrations.d.ts

@@ -0,0 +1,14 @@
+import { type IntegrationId } from "../lib/integrations.js";
+export interface IntegrationsListOptions {
+    baseUrl: string;
+}
+export declare function runIntegrationsList(opts: IntegrationsListOptions): void;
+export interface IntegrationsEnableOptions {
+    id: IntegrationId;
+    baseUrl: string;
+}
+export declare function runIntegrationsEnable(opts: IntegrationsEnableOptions): void;
+export declare function runIntegrationsShow(opts: {
+    baseUrl: string;
+}): void;
+export declare function runIntegrationsDisable(target: "shell" | IntegrationId): void;

package/dist/commands/integrations.js

@@ -0,0 +1,138 @@
+import { detectAll, manualSnippet, writeShellRc, removeShellRc, } from "../lib/integrations.js";
+import { c, sym, dim, emit, emitJson, isJson, table, heading, box } from "../lib/ui.js";
+import { TokenShieldError } from "../lib/errors.js";
+const KNOWN_IDS = ["claude-code", "cursor", "windsurf", "zed", "aider"];
+function statusLabel(s) {
+    if (s === "detected")
+        return c.green("detected");
+    if (s === "not-found")
+        return c.gray("not found");
+    return c.yellow("unknown");
+}
+export function runIntegrationsList(opts) {
+    const all = detectAll();
+    if (isJson()) {
+        emitJson({ ok: true, baseUrl: opts.baseUrl, integrations: all });
+        return;
+    }
+    heading("AI tools we can route through TokenShield");
+    emit("");
+    emit(table(all.map((i) => [
+        "  " + c.bold(i.name),
+        statusLabel(i.status),
+        i.configureMethod === "shell-rc" ? c.cyan("env via shell rc") : c.cyan("paste snippet"),
+        dim(i.detail),
+    ]), { header: ["  Tool", "Status", "Setup", "Detail"] }));
+    emit("");
+    emit(dim(`  Configure one:    tokenshield integrations enable <tool>`));
+    emit(dim(`  Show all manual:  tokenshield integrations show`));
+    emit(dim(`  Remove env:       tokenshield integrations disable shell`));
+    emit("");
+}
+export function runIntegrationsEnable(opts) {
+    if (!KNOWN_IDS.includes(opts.id)) {
+        throw new TokenShieldError({
+            code: "INVALID_ARGUMENT",
+            message: `Unknown integration: ${opts.id}`,
+            hint: `Pick one of: ${KNOWN_IDS.join(", ")}`,
+            nextSteps: ["tokenshield integrations list"],
+        });
+    }
+    const all = detectAll();
+    const target = all.find((i) => i.id === opts.id);
+    if (target === undefined) {
+        throw new TokenShieldError({ code: "INTERNAL", message: "integration definition not found" });
+    }
+    if (target.configureMethod === "shell-rc") {
+        let result;
+        try {
+            result = writeShellRc({ baseUrl: opts.baseUrl });
+        }
+        catch (err) {
+            throw new TokenShieldError({
+                code: "PERMISSION_DENIED",
+                message: `Failed to write to your shell rc: ${err.message}`,
+                nextSteps: [`echo 'export ANTHROPIC_BASE_URL=${opts.baseUrl}' >> ~/.zshrc`],
+            });
+        }
+        if (isJson()) {
+            emitJson({ ok: true, integration: target.id, result });
+            return;
+        }
+        emit("");
+        emit(`${sym.check} ${c.bold(target.name)} configured.`);
+        emit("");
+        emit(dim(`  Wrote managed block to:  ${result.rcPath}`));
+        emit(dim(`  Shell detected:          ${result.shell}`));
+        emit(dim(`  Action:                  ${result.action}`));
+        emit("");
+        emit(`${sym.warn} Reload your shell so the variable is picked up:`);
+        emit(`  ${c.cyan(`source ${result.rcPath}`)}`);
+        emit(dim("  …or just open a new terminal."));
+        emit("");
+        return;
+    }
+    // manual-snippet path
+    const snippet = manualSnippet(opts.id, opts.baseUrl);
+    if (isJson()) {
+        emitJson({ ok: true, integration: target.id, method: "manual-snippet", snippet });
+        return;
+    }
+    emit("");
+    emit(`${sym.info} ${c.bold(target.name)} — manual config required`);
+    emit("");
+    emit(dim("  " + target.instructions));
+    emit("");
+    emit(box(snippet, { title: `${target.name} config`, color: c.gray, padding: 1 }));
+    emit("");
+}
+export function runIntegrationsShow(opts) {
+    const all = detectAll();
+    if (isJson()) {
+        emitJson({
+            ok: true,
+            baseUrl: opts.baseUrl,
+            snippets: all.map((i) => ({
+                id: i.id,
+                method: i.configureMethod,
+                instructions: i.instructions,
+                snippet: i.configureMethod === "shell-rc"
+                    ? `export ANTHROPIC_BASE_URL=${opts.baseUrl}`
+                    : manualSnippet(i.id, opts.baseUrl),
+            })),
+        });
+        return;
+    }
+    for (const i of all) {
+        emit("");
+        emit(c.bold(`■ ${i.name}`) + "   " + statusLabel(i.status));
+        emit(dim("  " + i.instructions));
+        emit("");
+        const snippet = i.configureMethod === "shell-rc"
+            ? `export ANTHROPIC_BASE_URL=${opts.baseUrl}`
+            : manualSnippet(i.id, opts.baseUrl);
+        emit(box(snippet, { color: c.gray, padding: 1 }));
+    }
+    emit("");
+}
+export function runIntegrationsDisable(target) {
+    if (target !== "shell") {
+        throw new TokenShieldError({
+            code: "INVALID_ARGUMENT",
+            message: `Only 'shell' can be disabled automatically (manual-snippet tools can't be auto-reverted).`,
+            hint: "For Cursor / Windsurf, remove the base URL in their settings UI.",
+        });
+    }
+    const result = removeShellRc();
+    if (isJson()) {
+        emitJson({ ok: true, result });
+        return;
+    }
+    if (!result.removed) {
+        emit(`${sym.info} No managed TokenShield block found in ${result.rcPath ?? "your shell rc"}.`);
+        return;
+    }
+    emit(`${sym.check} Removed managed block from ${dim(result.rcPath ?? "")}.`);
+    emit(dim("  Reload your shell or open a new terminal."));
+}
+//# sourceMappingURL=integrations.js.map

package/dist/commands/integrations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrations.js","sourceRoot":"","sources":["../../src/commands/integrations.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,aAAa,EACb,YAAY,EACZ,aAAa,GAGd,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACxF,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEpD,MAAM,SAAS,GAAoB,CAAC,aAAa,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;AAEzF,SAAS,WAAW,CAAC,CAAwB;IAC3C,IAAI,CAAC,KAAK,UAAU;QAAE,OAAO,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACjD,IAAI,CAAC,KAAK,WAAW;QAAE,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAClD,OAAO,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AAC7B,CAAC;AAKD,MAAM,UAAU,mBAAmB,CAAC,IAA6B;IAC/D,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,IAAI,MAAM,EAAE,EAAE,CAAC;QACb,QAAQ,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC;QACjE,OAAO;IACT,CAAC;IACD,OAAO,CAAC,2CAA2C,CAAC,CAAC;IACrD,IAAI,CAAC,EAAE,CAAC,CAAC;IACT,IAAI,CAAC,KAAK,CACR,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACb,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QACrB,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC;QACrB,CAAC,CAAC,eAAe,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC;QACvF,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;KACd,CAAC,EACF,EAAE,MAAM,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,CACpD,CAAC,CAAC;IACH,IAAI,CAAC,EAAE,CAAC,CAAC;IACT,IAAI,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC,CAAC;IACxE,IAAI,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC,CAAC;IAC/D,IAAI,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC,CAAC;IACxE,IAAI,CAAC,EAAE,CAAC,CAAC;AACX,CAAC;AAOD,MAAM,UAAU,qBAAqB,CAAC,IAA+B;IACnE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,gBAAgB,CAAC;YACzB,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,wBAAwB,IAAI,CAAC,EAAE,EAAE;YAC1C,IAAI,EAAE,gBAAgB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YAC5C,SAAS,EAAE,CAAC,+BAA+B,CAAC;SAC7C,CAAC,CAAC;IACL,CAAC;IACD,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC;IACjD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,gBAAgB,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC,CAAC;IAChG,CAAC;IACD,IAAI,MAAM,CAAC,eAAe,KAAK,UAAU,EAAE,CAAC;QAC1C,IAAI,MAAM,CAAC;QACX,IAAI,CAAC;YACH,MAAM,GAAG,YAAY,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,gBAAgB,CAAC;gBACzB,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,qCAAsC,GAAa,CAAC,OAAO,EAAE;gBACtE,SAAS,EAAE,CAAC,mCAAmC,IAAI,CAAC,OAAO,eAAe,CAAC;aAC5E,CAAC,CAAC;QACL,CAAC;QACD,IAAI,MAAM,EAAE,EAAE,CAAC;YACb,QAAQ,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YACvD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,CAAC;QACT,IAAI,CAAC,GAAG,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACxD,IAAI,CAAC,EAAE,CAAC,CAAC;QACT,IAAI,CAAC,GAAG,CAAC,8BAA8B,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACzD,IAAI,CAAC,GAAG,CAAC,8BAA8B,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACxD,IAAI,CAAC,GAAG,CAAC,8BAA8B,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACzD,IAAI,CAAC,EAAE,CAAC,CAAC;QACT,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,kDAAkD,CAAC,CAAC;QACpE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,UAAU,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QAC/C,IAAI,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC,CAAC;QAC7C,IAAI,CAAC,EAAE,CAAC,CAAC;QACT,OAAO;IACT,CAAC;IACD,sBAAsB;IACtB,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACrD,IAAI,MAAM,EAAE,EAAE,CAAC;QACb,QAAQ,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,CAAC;QAClF,OAAO;IACT,CAAC;IACD,IAAI,CAAC,EAAE,CAAC,CAAC;IACT,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACpE,IAAI,CAAC,EAAE,CAAC,CAAC;IACT,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;IACtC,IAAI,CAAC,EAAE,CAAC,CAAC;IACT,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,IAAI,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAClF,IAAI,CAAC,EAAE,CAAC,CAAC;AACX,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAyB;IAC3D,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,IAAI,MAAM,EAAE,EAAE,CAAC;QACb,QAAQ,CAAC;YACP,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,QAAQ,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACxB,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,MAAM,EAAE,CAAC,CAAC,eAAe;gBACzB,YAAY,EAAE,CAAC,CAAC,YAAY;gBAC5B,OAAO,EACL,CAAC,CAAC,eAAe,KAAK,UAAU;oBAC9B,CAAC,CAAC,6BAA6B,IAAI,CAAC,OAAO,EAAE;oBAC7C,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC;aACxC,CAAC,CAAC;SACJ,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;QACpB,IAAI,CAAC,EAAE,CAAC,CAAC;QACT,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;QACjC,IAAI,CAAC,EAAE,CAAC,CAAC;QACT,MAAM,OAAO,GACX,CAAC,CAAC,eAAe,KAAK,UAAU;YAC9B,CAAC,CAAC,6BAA6B,IAAI,CAAC,OAAO,EAAE;YAC7C,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,CAAC,EAAE,CAAC,CAAC;AACX,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAA+B;IACpE,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,MAAM,IAAI,gBAAgB,CAAC;YACzB,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,2FAA2F;YACpG,IAAI,EAAE,kEAAkE;SACzE,CAAC,CAAC;IACL,CAAC;IACD,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,IAAI,MAAM,EAAE,EAAE,CAAC;QACb,QAAQ,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/B,OAAO;IACT,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,0CAA0C,MAAM,CAAC,MAAM,IAAI,eAAe,GAAG,CAAC,CAAC;QAC/F,OAAO;IACT,CAAC;IACD,IAAI,CAAC,GAAG,GAAG,CAAC,KAAK,+BAA+B,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC;IAC7E,IAAI,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC,CAAC;AAC3D,CAAC"}

package/dist/commands/logs.d.ts

@@ -0,0 +1,6 @@
+export interface LogsOptions {
+    limit: number;
+    modelFilter?: string;
+    errorsOnly: boolean;
+}
+export declare function runLogs(opts: LogsOptions): Promise<void>;

package/dist/commands/logs.js

@@ -0,0 +1,66 @@
+import { Ledger, defaultConfig } from "@curatedmcp/tokenshield-core";
+import { c, sym, dim, emit, emitJson, isJson, table } from "../lib/ui.js";
+function fmtTime(ms) {
+    return new Date(ms).toLocaleTimeString();
+}
+function fmtMs(ms) {
+    return ms < 1000 ? `${ms}ms` : `${(ms / 1000).toFixed(1)}s`;
+}
+function fmtDollars(n) {
+    if (n === 0)
+        return "$0.00";
+    return "$" + n.toFixed(n < 0.01 ? 5 : n < 1 ? 4 : 2);
+}
+function fmtN(n) {
+    return n.toLocaleString();
+}
+export async function runLogs(opts) {
+    const cfg = defaultConfig();
+    const ledger = new Ledger(cfg.ledgerPath);
+    try {
+        const recent = ledger.recent(Math.min(Math.max(opts.limit, 1), 500));
+        let filtered = recent;
+        if (opts.modelFilter) {
+            const needle = opts.modelFilter.toLowerCase();
+            filtered = filtered.filter((r) => r.model.toLowerCase().includes(needle));
+        }
+        if (opts.errorsOnly) {
+            filtered = filtered.filter((r) => r.upstreamStatus < 200 || r.upstreamStatus >= 300 || r.upstreamError !== null);
+        }
+        if (isJson()) {
+            emitJson({ ok: true, count: filtered.length, records: filtered });
+            return;
+        }
+        if (filtered.length === 0) {
+            emit(dim("  No requests match. Run Claude Code through the proxy to populate the ledger."));
+            return;
+        }
+        emit("");
+        emit(table(filtered.map((r) => {
+            const okStatus = r.upstreamStatus >= 200 && r.upstreamStatus < 300;
+            const statusStr = r.upstreamError
+                ? c.red("ERR")
+                : okStatus
+                    ? c.green(String(r.upstreamStatus))
+                    : c.yellow(String(r.upstreamStatus));
+            return [
+                dim(fmtTime(r.timestamp)),
+                r.model,
+                dim(r.endpoint),
+                fmtN(r.usageRaw.inputTokens),
+                fmtN(r.usageRaw.outputTokens),
+                dim(fmtMs(r.durationMs)),
+                fmtDollars(r.dollarsRaw),
+                statusStr,
+            ];
+        }), { header: ["Time", "Model", "Endpoint", "Input", "Output", "Dur", "$", "Status"] }));
+        emit("");
+        emit(dim(`  Showing ${filtered.length} of ${recent.length} recent requests.`));
+        // suppress unused warning
+        void sym;
+    }
+    finally {
+        ledger.close();
+    }
+}
+//# sourceMappingURL=logs.js.map

package/dist/commands/logs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logs.js","sourceRoot":"","sources":["../../src/commands/logs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAE1E,SAAS,OAAO,CAAC,EAAU;IACzB,OAAO,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,kBAAkB,EAAE,CAAC;AAC3C,CAAC;AACD,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;AAC9D,CAAC;AACD,SAAS,UAAU,CAAC,CAAS;IAC3B,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IAC5B,OAAO,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACvD,CAAC;AACD,SAAS,IAAI,CAAC,CAAS;IACrB,OAAO,CAAC,CAAC,cAAc,EAAE,CAAC;AAC5B,CAAC;AAQD,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAiB;IAC7C,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACrE,IAAI,QAAQ,GAAG,MAAM,CAAC;QACtB,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC;YAC9C,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,GAAG,GAAG,IAAI,CAAC,CAAC,cAAc,IAAI,GAAG,IAAI,CAAC,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC;QACnH,CAAC;QAED,IAAI,MAAM,EAAE,EAAE,CAAC;YACb,QAAQ,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;YAClE,OAAO;QACT,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC,GAAG,CAAC,gFAAgF,CAAC,CAAC,CAAC;YAC5F,OAAO;QACT,CAAC;QAED,IAAI,CAAC,EAAE,CAAC,CAAC;QACT,IAAI,CAAC,KAAK,CACR,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACjB,MAAM,QAAQ,GAAG,CAAC,CAAC,cAAc,IAAI,GAAG,IAAI,CAAC,CAAC,cAAc,GAAG,GAAG,CAAC;YACnE,MAAM,SAAS,GAAG,CAAC,CAAC,aAAa;gBAC/B,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;gBACd,CAAC,CAAC,QAAQ;oBACV,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;oBACnC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;YACvC,OAAO;gBACL,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBACzB,CAAC,CAAC,KAAK;gBACP,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;gBACf,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;gBAC5B,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC;gBAC7B,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;gBACxB,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;gBACxB,SAAS;aACV,CAAC;QACJ,CAAC,CAAC,EACF,EAAE,MAAM,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,CAAC,EAAE,CACnF,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,CAAC;QACT,IAAI,CAAC,GAAG,CAAC,aAAa,QAAQ,CAAC,MAAM,OAAO,MAAM,CAAC,MAAM,mBAAmB,CAAC,CAAC,CAAC;QAC/E,0BAA0B;QAC1B,KAAK,GAAG,CAAC;IACX,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,KAAK,EAAE,CAAC;IACjB,CAAC;AACH,CAAC"}

package/dist/commands/setup.d.ts

@@ -0,0 +1,9 @@
+export interface SetupOptions {
+    port: number;
+    dashboardPort: number;
+    bind: string;
+    upstream: string;
+    retentionDays: number;
+    yes: boolean;
+}
+export declare function runSetup(opts: SetupOptions): Promise<void>;

package/dist/commands/setup.js

@@ -0,0 +1,159 @@
+import { createInterface } from "node:readline/promises";
+import { stdin as input, stdout as output } from "node:process";
+import { detectAll, writeShellRc, manualSnippet } from "../lib/integrations.js";
+import { spawnDaemon, readDaemon } from "../lib/daemon.js";
+import { requirePortFree, classifyApiKey, probeUpstream } from "../lib/preflight.js";
+import { defaultConfig } from "@curatedmcp/tokenshield-core";
+import { c, sym, dim, emit, say, heading, spinner, box } from "../lib/ui.js";
+async function ask(rl, prompt, def) {
+    const hint = def === "y" ? "(Y/n)" : "(y/N)";
+    const ans = (await rl.question(`${prompt} ${dim(hint)} `)).trim().toLowerCase();
+    if (ans === "")
+        return def === "y";
+    return ans === "y" || ans === "yes";
+}
+function recommendedTool(all) {
+    // Prefer Claude Code if it's installed; otherwise the first detected tool
+    const cc = all.find((i) => i.id === "claude-code" && i.status === "detected");
+    if (cc)
+        return cc;
+    return all.find((i) => i.status === "detected") ?? null;
+}
+export async function runSetup(opts) {
+    const rl = createInterface({ input, output });
+    const baseUrl = `http://${opts.bind}:${opts.port}`;
+    try {
+        say("");
+        say(c.bold("TokenShield setup") + dim("  — about 60 seconds, no signup, no telemetry"));
+        say("");
+        // Step 1: detect tools
+        heading("1) Looking for AI tools to route through TokenShield");
+        const all = detectAll();
+        for (const i of all) {
+            const status = i.status === "detected" ? c.green("found") : c.gray("not found");
+            emit(`  ${i.status === "detected" ? sym.check : sym.bullet} ${i.name.padEnd(14)} ${status}  ${dim(i.detail)}`);
+        }
+        const target = recommendedTool(all);
+        say("");
+        if (target === null) {
+            emit(`${sym.warn} We didn't find a known AI client on this machine.`);
+            emit(dim("  Setup will continue, but you'll need to configure your tool manually."));
+        }
+        else {
+            emit(`${sym.check} Recommended target: ${c.bold(target.name)}`);
+        }
+        // Step 2: preflight
+        say("");
+        heading("2) Checking the network");
+        const portSpin = spinner(`Checking ports ${opts.port} and ${opts.dashboardPort}…`);
+        try {
+            await requirePortFree(opts.port, "proxy");
+            await requirePortFree(opts.dashboardPort, "dashboard");
+            portSpin.succeed(`Ports ${opts.port} and ${opts.dashboardPort} are free.`);
+        }
+        catch (err) {
+            portSpin.fail("Port conflict.");
+            throw err;
+        }
+        const upSpin = spinner(`Reaching ${opts.upstream}…`);
+        const probe = await probeUpstream(opts.upstream);
+        if (probe.reachable) {
+            upSpin.succeed(`Anthropic reachable ${dim(`(${probe.latencyMs}ms, status ${probe.status})`)}`);
+        }
+        else {
+            upSpin.fail(`Anthropic unreachable: ${probe.detail ?? "unknown"}`);
+            emit(dim("  Setup will continue. You can re-run after fixing your network."));
+        }
+        // Step 3: API key sanity
+        const keyState = classifyApiKey(process.env["ANTHROPIC_API_KEY"]);
+        say("");
+        heading("3) Checking your Anthropic API key");
+        if (keyState.state === "ok") {
+            emit(`${sym.check} ANTHROPIC_API_KEY is set in this shell. ${dim("(That's fine; you may also set it in the shell that runs Claude Code.)")}`);
+        }
+        else if (keyState.state === "wrong_prefix") {
+            emit(`${sym.warn} ${keyState.hint}`);
+        }
+        else {
+            emit(`${sym.info} ANTHROPIC_API_KEY isn't set in this shell.`);
+            emit(dim("  That's expected — set it in the shell where you run Claude Code, not here."));
+        }
+        // Step 4: configure tool
+        say("");
+        heading("4) Configure your AI tool");
+        let configuredVia = null;
+        if (target !== null && target.configureMethod === "shell-rc") {
+            const ok = opts.yes ? true : await ask(rl, `Add ANTHROPIC_BASE_URL=${baseUrl} to your shell rc so ${target.name} uses TokenShield?`, "y");
+            if (ok) {
+                try {
+                    const result = writeShellRc({ baseUrl });
+                    emit(`${sym.check} ${target.name} configured via ${result.rcPath} ${dim(`(${result.action})`)}`);
+                    emit(dim(`  Reload: source ${result.rcPath}    (or open a new terminal)`));
+                    configuredVia = "shell-rc";
+                }
+                catch (err) {
+                    emit(`${sym.warn} Couldn't write shell rc: ${err.message}`);
+                    emit(dim(`  Add manually: export ANTHROPIC_BASE_URL=${baseUrl}`));
+                }
+            }
+        }
+        else if (target !== null && target.configureMethod === "manual-snippet") {
+            emit(dim("  " + target.instructions));
+            emit("");
+            emit(box(manualSnippet(target.id, baseUrl), { title: `${target.name} config`, color: c.gray, padding: 1 }));
+            configuredVia = "manual-snippet";
+        }
+        else {
+            emit(dim(`  Set ANTHROPIC_BASE_URL=${baseUrl} in your AI tool's settings or shell.`));
+        }
+        // Step 5: start the proxy as a daemon
+        say("");
+        heading("5) Starting the proxy");
+        const existing = readDaemon();
+        if (existing !== null) {
+            emit(`${sym.info} TokenShield is already running ${dim(`(pid ${existing.pid})`)}.`);
+        }
+        else {
+            const proceed = opts.yes ? true : await ask(rl, "Start the proxy in the background now?", "y");
+            if (proceed) {
+                const spin = spinner("Starting daemon…");
+                try {
+                    const cfg = defaultConfig();
+                    const info = await spawnDaemon({
+                        port: opts.port,
+                        dashboardPort: opts.dashboardPort,
+                        bind: opts.bind,
+                        upstream: opts.upstream,
+                        ledger: cfg.ledgerPath,
+                        retentionDays: opts.retentionDays,
+                    });
+                    spin.succeed(`Proxy live on http://${info.bind}:${info.port}`);
+                }
+                catch (err) {
+                    spin.fail(err.message);
+                }
+            }
+        }
+        // Done
+        say("");
+        say(c.bold(`${sym.check} Setup complete.`));
+        say("");
+        say("  Dashboard:");
+        say(`    ${c.cyan(`http://${opts.bind}:${opts.dashboardPort}`)}`);
+        say("");
+        say("  Useful commands:");
+        say("    tokenshield status        # live spend + uptime");
+        say("    tokenshield logs --limit 20");
+        say("    tokenshield integrations list");
+        say("    tokenshield stop          # stop the daemon");
+        if (configuredVia === "shell-rc") {
+            say("");
+            say(dim("  Don't forget: open a new terminal (or `source` your rc) so ANTHROPIC_BASE_URL takes effect."));
+        }
+        say("");
+    }
+    finally {
+        rl.close();
+    }
+}
+//# sourceMappingURL=setup.js.map