@curatedmcp/tokenshield 0.2.0

package/dist/lib/daemon.js

@@ -0,0 +1,164 @@
+import { spawn } from "node:child_process";
+import { existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync, openSync } from "node:fs";
+import { dirname } from "node:path";
+import { pidFile, logFile, tokenshieldHome } from "./paths.js";
+import { TokenShieldError } from "./errors.js";
+function isAliveSync(pid) {
+    if (!Number.isFinite(pid) || pid <= 0)
+        return false;
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (err) {
+        const e = err;
+        if (e.code === "EPERM")
+            return true; // exists but no permission to signal
+        return false;
+    }
+}
+export function readDaemon() {
+    const path = pidFile();
+    if (!existsSync(path))
+        return null;
+    try {
+        const raw = readFileSync(path, "utf8");
+        const data = JSON.parse(raw);
+        if (!isAliveSync(data.pid)) {
+            // stale pid file
+            try {
+                unlinkSync(path);
+            }
+            catch { /* ignore */ }
+            return null;
+        }
+        return data;
+    }
+    catch {
+        try {
+            unlinkSync(path);
+        }
+        catch { /* ignore */ }
+        return null;
+    }
+}
+export function writeDaemon(info) {
+    mkdirSync(dirname(pidFile()), { recursive: true });
+    writeFileSync(pidFile(), JSON.stringify(info, null, 2));
+}
+export function clearDaemon() {
+    try {
+        unlinkSync(pidFile());
+    }
+    catch { /* ignore */ }
+}
+/** Spawn the proxy as a detached background process and return its DaemonInfo. */
+export async function spawnDaemon(opts) {
+    if (process.platform === "win32") {
+        throw new TokenShieldError({
+            code: "INVALID_ARGUMENT",
+            message: "Daemon mode is not yet supported on Windows",
+            hint: "Run `tokenshield up` in a dedicated terminal (use Windows Terminal tabs)",
+        });
+    }
+    const existing = readDaemon();
+    if (existing !== null) {
+        throw new TokenShieldError({
+            code: "DAEMON_ALREADY_RUNNING",
+            message: `TokenShield is already running (pid ${existing.pid}, port ${existing.port})`,
+            hint: "Stop it first or attach to the existing dashboard.",
+            nextSteps: ["tokenshield stop", `open http://${existing.bind}:${existing.dashboardPort}`],
+        });
+    }
+    mkdirSync(tokenshieldHome(), { recursive: true });
+    const logFd = openSync(logFile(), "a");
+    const args = [
+        process.argv[1],
+        "__supervise",
+        "--port", String(opts.port),
+        "--dashboard-port", String(opts.dashboardPort),
+        "--bind", opts.bind,
+        "--upstream", opts.upstream,
+        "--ledger", opts.ledger,
+        "--retention-days", String(opts.retentionDays),
+    ];
+    const child = spawn(process.execPath, args, {
+        detached: true,
+        stdio: ["ignore", logFd, logFd],
+        env: { ...process.env, TOKENSHIELD_DAEMON: "1" },
+    });
+    if (typeof child.pid !== "number") {
+        throw new TokenShieldError({ code: "INTERNAL", message: "Failed to start daemon process" });
+    }
+    child.unref();
+    const info = {
+        pid: child.pid,
+        startedAt: Date.now(),
+        port: opts.port,
+        dashboardPort: opts.dashboardPort,
+        bind: opts.bind,
+    };
+    writeDaemon(info);
+    // Wait briefly for the proxy to be reachable so the user gets a real ready signal
+    const ok = await waitFor(() => isProxyReady(info), 4000);
+    if (!ok) {
+        // Daemon spawned but isn't responding — keep the pid file so `stop` works
+        throw new TokenShieldError({
+            code: "INTERNAL",
+            message: `Daemon started (pid ${info.pid}) but proxy isn't responding on port ${info.port}`,
+            hint: `Check the log at ${logFile()}`,
+            nextSteps: [`tail -n 100 ${logFile()}`, "tokenshield stop"],
+        });
+    }
+    return info;
+}
+export async function stopDaemon(timeoutMs = 8000) {
+    const info = readDaemon();
+    if (info === null)
+        return null;
+    try {
+        process.kill(info.pid, "SIGTERM");
+    }
+    catch {
+        clearDaemon();
+        return info;
+    }
+    const stopped = await waitFor(() => !isAliveSync(info.pid), timeoutMs);
+    if (!stopped) {
+        try {
+            process.kill(info.pid, "SIGKILL");
+        }
+        catch { /* ignore */ }
+    }
+    clearDaemon();
+    return info;
+}
+import { request as httpRequest } from "node:http";
+function isProxyReady(info) {
+    return new Promise((resolve) => {
+        const req = httpRequest({
+            host: info.bind,
+            port: info.port,
+            path: "/__tokenshield/health",
+            method: "GET",
+            timeout: 1000,
+        }, (res) => {
+            res.resume();
+            resolve((res.statusCode ?? 0) === 200);
+        });
+        req.on("error", () => resolve(false));
+        req.on("timeout", () => { req.destroy(); resolve(false); });
+        req.end();
+    });
+}
+async function waitFor(check, timeoutMs) {
+    const deadline = Date.now() + timeoutMs;
+    while (Date.now() < deadline) {
+        if (await check())
+            return true;
+        await new Promise((r) => setTimeout(r, 150));
+    }
+    return false;
+}
+export { isAliveSync };
+//# sourceMappingURL=daemon.js.map

package/dist/lib/daemon.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon.js","sourceRoot":"","sources":["../../src/lib/daemon.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnG,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAU/C,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACpD,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,GAAG,GAA4B,CAAC;QACvC,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC,CAAC,qCAAqC;QAC1E,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAe,CAAC;QAC3C,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,iBAAiB;YACjB,IAAI,CAAC;gBAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YAChD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC;YAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAgB;IAC1C,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,aAAa,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,IAAI,CAAC;QAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;AACvD,CAAC;AAWD,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAkB;IAClD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,IAAI,gBAAgB,CAAC;YACzB,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,6CAA6C;YACtD,IAAI,EAAE,0EAA0E;SACjF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAAG,UAAU,EAAE,CAAC;IAC9B,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,MAAM,IAAI,gBAAgB,CAAC;YACzB,IAAI,EAAE,wBAAwB;YAC9B,OAAO,EAAE,uCAAuC,QAAQ,CAAC,GAAG,UAAU,QAAQ,CAAC,IAAI,GAAG;YACtF,IAAI,EAAE,oDAAoD;YAC1D,SAAS,EAAE,CAAC,kBAAkB,EAAE,eAAe,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;SAC1F,CAAC,CAAC;IACL,CAAC;IAED,SAAS,CAAC,eAAe,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;IAEvC,MAAM,IAAI,GAAa;QACrB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAE;QAChB,aAAa;QACb,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QAC3B,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC;QAC9C,QAAQ,EAAE,IAAI,CAAC,IAAI;QACnB,YAAY,EAAE,IAAI,CAAC,QAAQ;QAC3B,UAAU,EAAE,IAAI,CAAC,MAAM;QACvB,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC;KAC/C,CAAC;IACF,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE;QAC1C,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC;QAC/B,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,kBAAkB,EAAE,GAAG,EAAE;KACjD,CAAC,CAAC;IACH,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QAClC,MAAM,IAAI,gBAAgB,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,KAAK,CAAC,KAAK,EAAE,CAAC;IACd,MAAM,IAAI,GAAe;QACvB,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,IAAI,EAAE,IAAI,CAAC,IAAI;KAChB,CAAC;IACF,WAAW,CAAC,IAAI,CAAC,CAAC;IAElB,kFAAkF;IAClF,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IACzD,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,0EAA0E;QAC1E,MAAM,IAAI,gBAAgB,CAAC;YACzB,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,uBAAuB,IAAI,CAAC,GAAG,wCAAwC,IAAI,CAAC,IAAI,EAAE;YAC3F,IAAI,EAAE,oBAAoB,OAAO,EAAE,EAAE;YACrC,SAAS,EAAE,CAAC,eAAe,OAAO,EAAE,EAAE,EAAE,kBAAkB,CAAC;SAC5D,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,SAAS,GAAG,IAAI;IAC/C,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,WAAW,EAAE,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,SAAS,CAAC,CAAC;IACvE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,IAAI,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IACnE,CAAC;IACD,WAAW,EAAE,CAAC;IACd,OAAO,IAAI,CAAC;AACd,CAAC;AAED,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AACnD,SAAS,YAAY,CAAC,IAAgB;IACpC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,GAAG,GAAG,WAAW,CACrB;YACE,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,uBAAuB;YAC7B,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,IAAI;SACd,EACD,CAAC,GAAG,EAAE,EAAE;YACN,GAAG,CAAC,MAAM,EAAE,CAAC;YACb,OAAO,CAAC,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;QACzC,CAAC,CACF,CAAC;QACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QACtC,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,KAAuC,EAAE,SAAiB;IAC/E,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,IAAI,MAAM,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC;QAC/B,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,OAAO,EAAE,WAAW,EAAE,CAAC"}

package/dist/lib/errors.d.ts

@@ -0,0 +1,23 @@
+export type ErrorCode = "PORT_IN_USE" | "DAEMON_NOT_RUNNING" | "DAEMON_ALREADY_RUNNING" | "MISSING_API_KEY" | "BAD_API_KEY" | "UPSTREAM_UNREACHABLE" | "BAD_CONFIG" | "INVALID_ARGUMENT" | "PERMISSION_DENIED" | "NOT_FOUND" | "INTERRUPTED" | "INTERNAL";
+export declare class TokenShieldError extends Error {
+    readonly code: ErrorCode;
+    readonly hint: string | undefined;
+    readonly nextSteps: string[];
+    readonly cause?: unknown;
+    constructor(opts: {
+        code: ErrorCode;
+        message: string;
+        hint?: string;
+        nextSteps?: string[];
+        cause?: unknown;
+    });
+}
+export declare function exitCodeFor(err: unknown): number;
+export declare function reportAndExit(err: unknown): never;
+/**
+ * Wrap an async command body so any thrown error is reported uniformly.
+ * Always exits with the correct code; never returns.
+ */
+export declare function runCommand<T>(fn: () => Promise<T> | T): Promise<void>;
+export declare function ensureNumber(name: string, raw: unknown, min?: number, max?: number): number;
+export declare function installProcessHandlers(): void;

package/dist/lib/errors.js

@@ -0,0 +1,131 @@
+import { c, errorLine, isDebug, isJson, emitJson, say } from "./ui.js";
+const EXIT_CODES = {
+    PORT_IN_USE: 10,
+    DAEMON_NOT_RUNNING: 11,
+    DAEMON_ALREADY_RUNNING: 12,
+    MISSING_API_KEY: 20,
+    BAD_API_KEY: 21,
+    UPSTREAM_UNREACHABLE: 30,
+    BAD_CONFIG: 40,
+    INVALID_ARGUMENT: 41,
+    PERMISSION_DENIED: 50,
+    NOT_FOUND: 51,
+    INTERRUPTED: 130,
+    INTERNAL: 1,
+};
+export class TokenShieldError extends Error {
+    code;
+    hint;
+    nextSteps;
+    cause;
+    constructor(opts) {
+        super(opts.message);
+        this.name = "TokenShieldError";
+        this.code = opts.code;
+        this.hint = opts.hint;
+        this.nextSteps = opts.nextSteps ?? [];
+        if (opts.cause !== undefined)
+            this.cause = opts.cause;
+    }
+}
+export function exitCodeFor(err) {
+    if (err instanceof TokenShieldError)
+        return EXIT_CODES[err.code] ?? 1;
+    return 1;
+}
+export function reportAndExit(err) {
+    if (isJson()) {
+        if (err instanceof TokenShieldError) {
+            emitJson({
+                ok: false,
+                error: {
+                    code: err.code,
+                    message: err.message,
+                    hint: err.hint,
+                    nextSteps: err.nextSteps,
+                },
+            });
+        }
+        else if (err instanceof Error) {
+            emitJson({
+                ok: false,
+                error: { code: "INTERNAL", message: err.message },
+            });
+        }
+        else {
+            emitJson({ ok: false, error: { code: "INTERNAL", message: String(err) } });
+        }
+        process.exit(exitCodeFor(err));
+    }
+    if (err instanceof TokenShieldError) {
+        errorLine(err.message);
+        if (err.hint) {
+            process.stderr.write(`  ${c.gray("→")} ${c.gray(err.hint)}\n`);
+        }
+        if (err.nextSteps.length > 0) {
+            process.stderr.write("\n  " + c.bold("Try:") + "\n");
+            for (const step of err.nextSteps) {
+                process.stderr.write(`    ${c.gray("$")} ${c.cyan(step)}\n`);
+            }
+            process.stderr.write("\n");
+        }
+        if (isDebug() && err.cause) {
+            process.stderr.write(c.gray("[debug] cause:\n"));
+            process.stderr.write(c.gray(String(err.cause)) + "\n");
+        }
+    }
+    else if (err instanceof Error) {
+        errorLine(err.message);
+        if (isDebug() && err.stack) {
+            process.stderr.write(c.gray(err.stack) + "\n");
+        }
+        else {
+            process.stderr.write(c.gray("  → run with --debug for stack trace\n"));
+        }
+    }
+    else {
+        errorLine(String(err));
+    }
+    process.exit(exitCodeFor(err));
+}
+/**
+ * Wrap an async command body so any thrown error is reported uniformly.
+ * Always exits with the correct code; never returns.
+ */
+export async function runCommand(fn) {
+    try {
+        await fn();
+    }
+    catch (err) {
+        reportAndExit(err);
+    }
+}
+export function ensureNumber(name, raw, min = 1, max = 65535) {
+    const n = typeof raw === "string" ? parseInt(raw, 10) : raw;
+    if (!Number.isFinite(n) || Number.isNaN(n) || n < min || n > max) {
+        throw new TokenShieldError({
+            code: "INVALID_ARGUMENT",
+            message: `Invalid value for ${name}: expected an integer between ${min} and ${max}, got ${String(raw)}`,
+            hint: `Pass --${name} <number>`,
+        });
+    }
+    return n;
+}
+// Install handlers for unhandled rejections / uncaught exceptions
+let installed = false;
+export function installProcessHandlers() {
+    if (installed)
+        return;
+    installed = true;
+    process.on("uncaughtException", (err) => {
+        reportAndExit(err);
+    });
+    process.on("unhandledRejection", (err) => {
+        reportAndExit(err);
+    });
+    process.on("SIGINT", () => {
+        say("");
+        process.exit(EXIT_CODES.INTERRUPTED);
+    });
+}
+//# sourceMappingURL=errors.js.map

package/dist/lib/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/lib/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,SAAS,CAAC;AAgBvE,MAAM,UAAU,GAA8B;IAC5C,WAAW,EAAE,EAAE;IACf,kBAAkB,EAAE,EAAE;IACtB,sBAAsB,EAAE,EAAE;IAC1B,eAAe,EAAE,EAAE;IACnB,WAAW,EAAE,EAAE;IACf,oBAAoB,EAAE,EAAE;IACxB,UAAU,EAAE,EAAE;IACd,gBAAgB,EAAE,EAAE;IACpB,iBAAiB,EAAE,EAAE;IACrB,SAAS,EAAE,EAAE;IACb,WAAW,EAAE,GAAG;IAChB,QAAQ,EAAE,CAAC;CACZ,CAAC;AAEF,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAChC,IAAI,CAAY;IAChB,IAAI,CAAqB;IACzB,SAAS,CAAW;IACpB,KAAK,CAAW;IACzB,YAAY,IAMX;QACC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpB,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC;QACtC,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACxD,CAAC;CACF;AAED,MAAM,UAAU,WAAW,CAAC,GAAY;IACtC,IAAI,GAAG,YAAY,gBAAgB;QAAE,OAAO,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtE,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAY;IACxC,IAAI,MAAM,EAAE,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,gBAAgB,EAAE,CAAC;YACpC,QAAQ,CAAC;gBACP,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE;oBACL,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,SAAS,EAAE,GAAG,CAAC,SAAS;iBACzB;aACF,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;YAChC,QAAQ,CAAC;gBACP,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE;aAClD,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,CAAC;IAED,IAAI,GAAG,YAAY,gBAAgB,EAAE,CAAC;QACpC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACvB,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;YACrD,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;gBACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/D,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,OAAO,EAAE,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;YAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC;YACjD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;SAAM,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;QAChC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACvB,IAAI,OAAO,EAAE,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;YAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;QACjD,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;SAAM,CAAC;QACN,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;AACjC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAI,EAAwB;IAC1D,IAAI,CAAC;QACH,MAAM,EAAE,EAAE,CAAC;IACb,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,aAAa,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,GAAY,EAAE,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,KAAK;IAC3E,MAAM,CAAC,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAE,GAAc,CAAC;IACxE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;QACjE,MAAM,IAAI,gBAAgB,CAAC;YACzB,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,qBAAqB,IAAI,iCAAiC,GAAG,QAAQ,GAAG,SAAS,MAAM,CAAC,GAAG,CAAC,EAAE;YACvG,IAAI,EAAE,UAAU,IAAI,WAAW;SAChC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,kEAAkE;AAClE,IAAI,SAAS,GAAG,KAAK,CAAC;AACtB,MAAM,UAAU,sBAAsB;IACpC,IAAI,SAAS;QAAE,OAAO;IACtB,SAAS,GAAG,IAAI,CAAC;IACjB,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,GAAG,EAAE,EAAE;QACtC,aAAa,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,GAAG,EAAE,EAAE;QACvC,aAAa,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;QACxB,GAAG,CAAC,EAAE,CAAC,CAAC;QACR,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/lib/integrations.d.ts

@@ -0,0 +1,47 @@
+export type IntegrationId = "claude-code" | "cursor" | "windsurf" | "zed" | "aider";
+export type IntegrationStatus = "detected" | "not-found" | "unknown";
+export type ConfigureMethod = "shell-rc" | "manual-snippet";
+export interface Integration {
+    id: IntegrationId;
+    name: string;
+    status: IntegrationStatus;
+    detail: string;
+    /**
+     * How TokenShield can configure this tool:
+     *  - "shell-rc": write to the user's shell rc file (Claude Code, Aider, etc.)
+     *  - "manual-snippet": print a config snippet for the user to paste (Cursor, Windsurf, Zed)
+     */
+    configureMethod: ConfigureMethod;
+    /** A short instruction body shown when configuring this tool. */
+    instructions: string;
+}
+export declare function detectAll(): Integration[];
+export declare function detectClaudeCode(): Integration;
+export declare function detectCursor(): Integration;
+export declare function detectWindsurf(): Integration;
+export declare function detectZed(): Integration;
+export declare function detectAider(): Integration;
+export interface ShellInfo {
+    shell: "bash" | "zsh" | "fish" | "unknown";
+    rcPath: string | null;
+    exportLine: (key: string, value: string) => string;
+}
+export declare function detectShell(): ShellInfo;
+export interface ConfigureParams {
+    baseUrl: string;
+}
+export interface ShellRcResult {
+    rcPath: string;
+    shell: ShellInfo["shell"];
+    action: "added" | "updated" | "unchanged";
+    block: string;
+}
+/** Idempotently writes a managed marker block to the user's shell rc. */
+export declare function writeShellRc(params: ConfigureParams): ShellRcResult;
+export interface ShellRcRemoveResult {
+    rcPath: string | null;
+    removed: boolean;
+}
+export declare function removeShellRc(): ShellRcRemoveResult;
+/** Snippet body for tools we don't auto-configure. */
+export declare function manualSnippet(id: IntegrationId, baseUrl: string): string;

package/dist/lib/integrations.js

@@ -0,0 +1,210 @@
+import { existsSync, readFileSync, writeFileSync, mkdirSync } from "node:fs";
+import { homedir as osHomedir, platform } from "node:os";
+function homedir() {
+    // Prefer $HOME so tests can override; matches POSIX shell behavior anyway
+    return process.env["HOME"] ?? process.env["USERPROFILE"] ?? osHomedir();
+}
+import { join, dirname } from "node:path";
+import { execSync } from "node:child_process";
+const MARKER_BEGIN = "# >>> tokenshield setup (managed) >>>";
+const MARKER_END = "# <<< tokenshield setup (managed) <<<";
+function exists(path) {
+    try {
+        return existsSync(path);
+    }
+    catch {
+        return false;
+    }
+}
+function commandExists(cmd) {
+    try {
+        execSync(process.platform === "win32" ? `where ${cmd}` : `command -v ${cmd}`, {
+            stdio: "ignore",
+        });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function appSupport() {
+    const home = homedir();
+    if (platform() === "darwin")
+        return join(home, "Library", "Application Support");
+    if (platform() === "linux")
+        return join(home, ".config");
+    if (platform() === "win32")
+        return process.env["APPDATA"] ?? null;
+    return null;
+}
+export function detectAll() {
+    return [
+        detectClaudeCode(),
+        detectCursor(),
+        detectWindsurf(),
+        detectZed(),
+        detectAider(),
+    ];
+}
+export function detectClaudeCode() {
+    const onPath = commandExists("claude");
+    const dotDir = exists(join(homedir(), ".claude"));
+    const status = onPath || dotDir ? "detected" : "not-found";
+    return {
+        id: "claude-code",
+        name: "Claude Code",
+        status,
+        detail: onPath
+            ? "claude found on PATH"
+            : dotDir
+                ? `config dir at ${join(homedir(), ".claude")}`
+                : "not found (install: npm i -g @anthropic-ai/claude-code)",
+        configureMethod: "shell-rc",
+        instructions: "Adds ANTHROPIC_BASE_URL to your shell rc so Claude Code routes through TokenShield. Reload your shell after.",
+    };
+}
+export function detectCursor() {
+    const support = appSupport();
+    const cursorDir = support !== null ? join(support, "Cursor") : null;
+    const detected = cursorDir !== null && (exists(cursorDir) || exists(join(cursorDir, "User", "settings.json")));
+    return {
+        id: "cursor",
+        name: "Cursor",
+        status: detected ? "detected" : "not-found",
+        detail: detected ? `config at ${cursorDir}` : "not found",
+        configureMethod: "manual-snippet",
+        instructions: "Open Cursor → Settings → Models. Under 'Anthropic API Base URL' (or 'Override OpenAI Base URL' for GPT), paste the snippet below and click Verify.",
+    };
+}
+export function detectWindsurf() {
+    const support = appSupport();
+    const dir = support !== null ? join(support, "Windsurf") : null;
+    const detected = dir !== null && exists(dir);
+    return {
+        id: "windsurf",
+        name: "Windsurf",
+        status: detected ? "detected" : "not-found",
+        detail: detected ? `config at ${dir}` : "not found",
+        configureMethod: "manual-snippet",
+        instructions: "Open Windsurf → Settings → Models. Set the custom Anthropic endpoint to the snippet below.",
+    };
+}
+export function detectZed() {
+    const support = appSupport();
+    const dir = support !== null ? join(support, "Zed") : null;
+    const detected = dir !== null && exists(dir);
+    return {
+        id: "zed",
+        name: "Zed",
+        status: detected ? "detected" : "not-found",
+        detail: detected ? `config at ${dir}` : "not found",
+        configureMethod: "manual-snippet",
+        instructions: "Edit ~/.config/zed/settings.json and add the assistant.anthropic_api_url key.",
+    };
+}
+export function detectAider() {
+    const onPath = commandExists("aider");
+    return {
+        id: "aider",
+        name: "Aider",
+        status: onPath ? "detected" : "not-found",
+        detail: onPath ? "aider found on PATH" : "not found",
+        configureMethod: "shell-rc",
+        instructions: "Adds ANTHROPIC_BASE_URL to your shell rc. Aider's Anthropic mode will route through TokenShield automatically.",
+    };
+}
+export function detectShell() {
+    const shellEnv = process.env["SHELL"] ?? "";
+    const base = shellEnv.split("/").pop() ?? "";
+    const home = homedir();
+    if (base === "zsh") {
+        return {
+            shell: "zsh",
+            rcPath: join(home, ".zshrc"),
+            exportLine: (k, v) => `export ${k}=${v}`,
+        };
+    }
+    if (base === "bash") {
+        // macOS terminals usually read .bash_profile for login shells; linux reads .bashrc
+        const rc = platform() === "darwin" ? join(home, ".bash_profile") : join(home, ".bashrc");
+        return {
+            shell: "bash",
+            rcPath: rc,
+            exportLine: (k, v) => `export ${k}=${v}`,
+        };
+    }
+    if (base === "fish") {
+        return {
+            shell: "fish",
+            rcPath: join(home, ".config", "fish", "config.fish"),
+            exportLine: (k, v) => `set -gx ${k} ${v}`,
+        };
+    }
+    return { shell: "unknown", rcPath: null, exportLine: (k, v) => `export ${k}=${v}` };
+}
+/** Idempotently writes a managed marker block to the user's shell rc. */
+export function writeShellRc(params) {
+    const shell = detectShell();
+    if (shell.rcPath === null) {
+        throw new Error("Unknown shell — set ANTHROPIC_BASE_URL manually in your shell's startup file.");
+    }
+    const exportLine = shell.exportLine("ANTHROPIC_BASE_URL", params.baseUrl);
+    const block = `${MARKER_BEGIN}\n${exportLine}\n${MARKER_END}`;
+    if (!exists(shell.rcPath)) {
+        mkdirSync(dirname(shell.rcPath), { recursive: true });
+        writeFileSync(shell.rcPath, block + "\n", { mode: 0o600 });
+        return { rcPath: shell.rcPath, shell: shell.shell, action: "added", block };
+    }
+    const current = readFileSync(shell.rcPath, "utf8");
+    const beginIdx = current.indexOf(MARKER_BEGIN);
+    if (beginIdx === -1) {
+        const sep = current.endsWith("\n") ? "" : "\n";
+        writeFileSync(shell.rcPath, current + sep + "\n" + block + "\n");
+        return { rcPath: shell.rcPath, shell: shell.shell, action: "added", block };
+    }
+    const endIdx = current.indexOf(MARKER_END, beginIdx);
+    if (endIdx === -1) {
+        throw new Error(`${shell.rcPath} contains an unclosed tokenshield marker. Edit manually and remove it.`);
+    }
+    const before = current.slice(0, beginIdx);
+    const after = current.slice(endIdx + MARKER_END.length);
+    // Detect no-op rewrite
+    const oldBlock = current.slice(beginIdx, endIdx + MARKER_END.length);
+    if (oldBlock === block) {
+        return { rcPath: shell.rcPath, shell: shell.shell, action: "unchanged", block };
+    }
+    writeFileSync(shell.rcPath, before + block + after);
+    return { rcPath: shell.rcPath, shell: shell.shell, action: "updated", block };
+}
+export function removeShellRc() {
+    const shell = detectShell();
+    if (shell.rcPath === null || !exists(shell.rcPath)) {
+        return { rcPath: shell.rcPath, removed: false };
+    }
+    const current = readFileSync(shell.rcPath, "utf8");
+    const beginIdx = current.indexOf(MARKER_BEGIN);
+    if (beginIdx === -1)
+        return { rcPath: shell.rcPath, removed: false };
+    const endIdx = current.indexOf(MARKER_END, beginIdx);
+    if (endIdx === -1)
+        return { rcPath: shell.rcPath, removed: false };
+    // Also strip the leading newline if present
+    let cleaned = current.slice(0, beginIdx) + current.slice(endIdx + MARKER_END.length);
+    cleaned = cleaned.replace(/\n{3,}/g, "\n\n");
+    writeFileSync(shell.rcPath, cleaned);
+    return { rcPath: shell.rcPath, removed: true };
+}
+/** Snippet body for tools we don't auto-configure. */
+export function manualSnippet(id, baseUrl) {
+    switch (id) {
+        case "cursor":
+            return `Anthropic API Base URL: ${baseUrl}\n(Settings → Models → expand Anthropic provider → Override base URL)`;
+        case "windsurf":
+            return `Anthropic endpoint: ${baseUrl}\n(Settings → Models → Anthropic → Custom endpoint)`;
+        case "zed":
+            return `Edit ~/.config/zed/settings.json:\n{\n  "assistant": {\n    "provider": "anthropic",\n    "anthropic_api_url": "${baseUrl}"\n  }\n}`;
+        default:
+            return `Set ANTHROPIC_BASE_URL=${baseUrl} in this app's settings or shell.`;
+    }
+}
+//# sourceMappingURL=integrations.js.map

package/dist/lib/integrations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrations.js","sourceRoot":"","sources":["../../src/lib/integrations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAEzD,SAAS,OAAO;IACd,0EAA0E;IAC1E,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,SAAS,EAAE,CAAC;AAC1E,CAAC;AACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AA4B9C,MAAM,YAAY,GAAG,uCAAuC,CAAC;AAC7D,MAAM,UAAU,GAAG,uCAAuC,CAAC;AAE3D,SAAS,MAAM,CAAC,IAAY;IAC1B,IAAI,CAAC;QAAC,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AAC1D,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,IAAI,CAAC;QACH,QAAQ,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,GAAG,EAAE,CAAC,CAAC,CAAC,cAAc,GAAG,EAAE,EAAE;YAC5E,KAAK,EAAE,QAAQ;SAChB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,UAAU;IACjB,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,IAAI,QAAQ,EAAE,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,qBAAqB,CAAC,CAAC;IACjF,IAAI,QAAQ,EAAE,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACzD,IAAI,QAAQ,EAAE,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC;IAClE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,OAAO;QACL,gBAAgB,EAAE;QAClB,YAAY,EAAE;QACd,cAAc,EAAE;QAChB,SAAS,EAAE;QACX,WAAW,EAAE;KACd,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;IAClD,MAAM,MAAM,GAAsB,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC;IAC9E,OAAO;QACL,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,aAAa;QACnB,MAAM;QACN,MAAM,EAAE,MAAM;YACZ,CAAC,CAAC,sBAAsB;YACxB,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,iBAAiB,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,EAAE;gBAC/C,CAAC,CAAC,yDAAyD;QAC7D,eAAe,EAAE,UAAU;QAC3B,YAAY,EACV,8GAA8G;KACjH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,SAAS,GAAG,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACpE,MAAM,QAAQ,GACZ,SAAS,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC;IAChG,OAAO;QACL,EAAE,EAAE,QAAQ;QACZ,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW;QAC3C,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,aAAa,SAAS,EAAE,CAAC,CAAC,CAAC,WAAW;QACzD,eAAe,EAAE,gBAAgB;QACjC,YAAY,EACV,oJAAoJ;KACvJ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChE,MAAM,QAAQ,GAAG,GAAG,KAAK,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7C,OAAO;QACL,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW;QAC3C,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,aAAa,GAAG,EAAE,CAAC,CAAC,CAAC,WAAW;QACnD,eAAe,EAAE,gBAAgB;QACjC,YAAY,EACV,4FAA4F;KAC/F,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3D,MAAM,QAAQ,GAAG,GAAG,KAAK,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7C,OAAO;QACL,EAAE,EAAE,KAAK;QACT,IAAI,EAAE,KAAK;QACX,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW;QAC3C,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,aAAa,GAAG,EAAE,CAAC,CAAC,CAAC,WAAW;QACnD,eAAe,EAAE,gBAAgB;QACjC,YAAY,EACV,+EAA+E;KAClF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACtC,OAAO;QACL,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW;QACzC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,WAAW;QACpD,eAAe,EAAE,UAAU;QAC3B,YAAY,EACV,gHAAgH;KACnH,CAAC;AACJ,CAAC;AAQD,MAAM,UAAU,WAAW;IACzB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IAC5C,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;IAC7C,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACnB,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;YAC5B,UAAU,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE;SACzC,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,mFAAmF;QACnF,MAAM,EAAE,GAAG,QAAQ,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACzF,OAAO;YACL,KAAK,EAAE,MAAM;YACb,MAAM,EAAE,EAAE;YACV,UAAU,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE;SACzC,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,OAAO;YACL,KAAK,EAAE,MAAM;YACb,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,CAAC;YACpD,UAAU,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE;SAC1C,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;AACtF,CAAC;AAaD,yEAAyE;AACzE,MAAM,UAAU,YAAY,CAAC,MAAuB;IAClD,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC;IAC5B,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,+EAA+E,CAChF,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,oBAAoB,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAG,GAAG,YAAY,KAAK,UAAU,KAAK,UAAU,EAAE,CAAC;IAE9D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3D,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC9E,CAAC;IAED,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC/C,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;QACpB,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/C,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,GAAG,GAAG,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,CAAC,CAAC;QACjE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC9E,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACrD,IAAI,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,CAAC,MAAM,wEAAwE,CACxF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IACxD,uBAAuB;IACvB,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IACrE,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;QACvB,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IAClF,CAAC;IACD,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,GAAG,KAAK,CAAC,CAAC;IACpD,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AAChF,CAAC;AAOD,MAAM,UAAU,aAAa;IAC3B,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC;IAC5B,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACnD,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAClD,CAAC;IACD,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC/C,IAAI,QAAQ,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACrE,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACrD,IAAI,MAAM,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACnE,4CAA4C;IAC5C,IAAI,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IACrF,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC7C,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACjD,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,aAAa,CAAC,EAAiB,EAAE,OAAe;IAC9D,QAAQ,EAAE,EAAE,CAAC;QACX,KAAK,QAAQ;YACX,OAAO,2BAA2B,OAAO,uEAAuE,CAAC;QACnH,KAAK,UAAU;YACb,OAAO,uBAAuB,OAAO,qDAAqD,CAAC;QAC7F,KAAK,KAAK;YACR,OAAO,mHAAmH,OAAO,WAAW,CAAC;QAC/I;YACE,OAAO,0BAA0B,OAAO,mCAAmC,CAAC;IAChF,CAAC;AACH,CAAC"}

package/dist/lib/paths.d.ts

@@ -0,0 +1,5 @@
+export declare function tokenshieldHome(): string;
+export declare function pidFile(): string;
+export declare function logFile(): string;
+export declare function ledgerPath(): string;
+export declare function configFile(): string;

package/dist/lib/paths.js

@@ -0,0 +1,18 @@
+import { homedir } from "node:os";
+import { join } from "node:path";
+export function tokenshieldHome() {
+    return process.env["TOKENSHIELD_HOME"] ?? join(homedir(), ".tokenshield");
+}
+export function pidFile() {
+    return join(tokenshieldHome(), "proxy.pid");
+}
+export function logFile() {
+    return join(tokenshieldHome(), "proxy.log");
+}
+export function ledgerPath() {
+    return join(tokenshieldHome(), "ledger.db");
+}
+export function configFile() {
+    return join(tokenshieldHome(), "config.json");
+}
+//# sourceMappingURL=paths.js.map

package/dist/lib/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/lib/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,UAAU,eAAe;IAC7B,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,CAAC;AAC5E,CAAC;AACD,MAAM,UAAU,OAAO;IACrB,OAAO,IAAI,CAAC,eAAe,EAAE,EAAE,WAAW,CAAC,CAAC;AAC9C,CAAC;AACD,MAAM,UAAU,OAAO;IACrB,OAAO,IAAI,CAAC,eAAe,EAAE,EAAE,WAAW,CAAC,CAAC;AAC9C,CAAC;AACD,MAAM,UAAU,UAAU;IACxB,OAAO,IAAI,CAAC,eAAe,EAAE,EAAE,WAAW,CAAC,CAAC;AAC9C,CAAC;AACD,MAAM,UAAU,UAAU;IACxB,OAAO,IAAI,CAAC,eAAe,EAAE,EAAE,aAAa,CAAC,CAAC;AAChD,CAAC"}

package/dist/lib/preflight.d.ts

@@ -0,0 +1,20 @@
+export interface PortStatus {
+    port: number;
+    available: boolean;
+    detail?: string;
+}
+export declare function checkPort(port: number, host?: string): Promise<PortStatus>;
+export interface UpstreamProbe {
+    url: string;
+    reachable: boolean;
+    latencyMs?: number;
+    status?: number;
+    detail?: string;
+}
+export declare function probeUpstream(baseUrl: string, timeoutMs?: number): Promise<UpstreamProbe>;
+export declare function classifyApiKey(value: string | undefined): {
+    state: "missing" | "wrong_prefix" | "ok";
+    hint?: string;
+};
+/** Throws a structured error if the port is in use. */
+export declare function requirePortFree(port: number, label: string): Promise<void>;