@mnemom/mnemom 0.17.38-next.0 → 0.17.38-next.2

package/dist/lib/scan/share.js

@@ -1,32 +1,49 @@
 /**
- * Share level: what, if anything, may leave the machine. Asked before any output is built for sharing.
- * Full is the preselected choice (MNE-9619): pressing Enter at the prompt picks it. "none" yields no
- * payload at all, and is what a cancelled, empty-piped or non-interactive prompt resolves to (fail closed).
+ * "What may Mnemom keep on file?" (MNE-9634). This is a retention choice only; it never changes what is emailed. It is asked at
+ * the start, before any scan work. The scan itself is always complete: the full report, with the counts
+ * for each repo, is emailed to the runner, every Org Admin and anyone the runner adds, at every level.
+ *
+ *   full       Mnemom keeps the totals and the counts for each repo, by name, on file (the default).
+ *   analytics  Mnemom keeps the team totals only, with no repo names. `summary` is the old name for this
+ *              and is accepted as an alias; it is never upgraded to full.
+ *   none       Mnemom keeps nothing on file. The report is still emailed.
+ *
+ * "none" is what a cancelled, empty-piped or non-interactive prompt resolves to (fail closed).
+ * Storing the shared payload on Mnemom's side is not built yet; the CLI only prints it.
  */
 import { askSelect } from "../prompt.js";
 /** The level preselected at the prompt (Enter picks it). */
 export const DEFAULT_SHARE_LEVEL = "full";
 export const SHARE_OPTIONS = [
-    { level: "summary", label: "Summary metrics only (counts and one estimate line)" },
-    { level: "full", label: "Full report (summary plus per-repo counts; default)" },
-    { level: "none", label: "Nothing (keep results on this machine)" },
+    {
+        level: "full",
+        label: "Full report (default): Mnemom keeps the totals and the counts for each repo, by name, on file",
+    },
+    {
+        level: "analytics",
+        label: "Analytics: Mnemom keeps the team totals only on file, with no repo names",
+    },
+    { level: "none", label: "Nothing: Mnemom keeps nothing on file" },
 ];
-/** Shown just above the share prompt, so pressing Enter is an informed choice. */
+/** Shown just above the prompt. The full report, repo names included, is emailed whatever is chosen here. */
 export const SHARE_DISCLOSURE = [
-    "Pressing Enter shares the Full report: the whole report, including your repo names and per-repo counts.",
-    "It is emailed to the report recipients. To share less, choose 1 (Summary: counts only, no repo names) or 3 (Nothing).",
+    "Whatever you choose, the full report, including repo names, is emailed to you, your org's admins and any addresses you added.",
+    "The next question is only about what Mnemom keeps on file. Pressing Enter chooses the Full report.",
 ].join("\n");
 /** Asks the user, with Full preselected. Anything but a recognised answer (cancel, EOF, noise) is "none": fail closed. */
 export async function promptShareLevel() {
     // eslint-disable-next-line no-console -- consent text must show on stdout directly above the prompt (askSelect also prints with console.log)
     console.log(SHARE_DISCLOSURE);
-    const answer = await askSelect("What may leave this machine?", SHARE_OPTIONS.map((o) => o.label), SHARE_OPTIONS.findIndex((o) => o.level === DEFAULT_SHARE_LEVEL));
+    const answer = await askSelect("What may Mnemom keep on file?", SHARE_OPTIONS.map((o) => o.label), SHARE_OPTIONS.findIndex((o) => o.level === DEFAULT_SHARE_LEVEL));
     if (answer === null)
         return "none";
     return SHARE_OPTIONS.find((o) => o.label === answer)?.level ?? "none";
 }
+/** `summary` is the old name for `analytics`; the meaning is unchanged. */
 export function parseShareLevel(v) {
-    return v === "summary" || v === "full" || v === "none" ? v : null;
+    if (v === "summary")
+        return "analytics";
+    return v === "analytics" || v === "full" || v === "none" ? v : null;
 }
 export function buildSharePayload(level, r, recipients, 
 /** undefined: the legacy line; null: no spend line; string: that line. */

package/dist/lib/scan/spend/ai-tool-detect.d.ts

@@ -1,6 +1 @@
-import type { AiTool } from "./prices.js";
-/** Upper bound on text scanned per PR, so one huge body cannot dominate a scan. The TAIL is kept: trailers and "generated with" footers sit at the end. */
-export declare const MAX_MARK_TEXT = 20000;
-export declare const AI_TOOLS: AiTool[];
-/** Tools whose mark appears in the text, in a fixed order. Non-string input yields none. */
-export declare function detectAiTools(markText: unknown): AiTool[];
+export * from "../../../vendor/shared/org-scan-core/spend/ai-tool-detect.js";

package/dist/lib/scan/spend/ai-tool-detect.js

@@ -1,18 +1,2 @@
-/** Upper bound on text scanned per PR, so one huge body cannot dominate a scan. The TAIL is kept: trailers and "generated with" footers sit at the end. */
-export const MAX_MARK_TEXT = 20_000;
-const TRAILER = String.raw `^[ \t>*-]*co-authored-by:[^\n]*?`;
-const GEN = String.raw `generated (?:with|by|using)[^\n]{0,24}?`;
-const MARKS = {
-    claude_code: new RegExp(`${TRAILER}(?:\\bclaude\\b|noreply@anthropic\\.com)|${GEN}\\bclaude code\\b`, "im"),
-    codex: new RegExp(`${TRAILER}\\bcodex\\b|${GEN}\\bcodex\\b`, "im"),
-    copilot: new RegExp(`${TRAILER}\\bcopilot\\b|${GEN}\\bgithub copilot\\b`, "im"),
-    gemini: new RegExp(`${TRAILER}\\bgemini\\b|${GEN}\\bgemini(?: cli)?\\b`, "im"),
-};
-export const AI_TOOLS = Object.keys(MARKS);
-/** Tools whose mark appears in the text, in a fixed order. Non-string input yields none. */
-export function detectAiTools(markText) {
-    if (typeof markText !== "string" || markText.length === 0)
-        return [];
-    const text = markText.length > MAX_MARK_TEXT ? markText.slice(-MAX_MARK_TEXT) : markText;
-    return AI_TOOLS.filter((t) => MARKS[t].test(text));
-}
+// Moved to shared/org-scan-core (MNE-9752); vendored at cli/src/vendor/shared/org-scan-core. Re-exported so CLI imports stay put.
+export * from "../../../vendor/shared/org-scan-core/spend/ai-tool-detect.js";

package/dist/lib/scan/spend/anthropic-usage.d.ts

@@ -1,76 +1 @@
-export declare const ANTHROPIC_ADMIN_ORIGIN = "https://api.anthropic.com";
-export declare const ADMIN_KEY_ENV = "ANTHROPIC_ADMIN_KEY";
-/** The only paths a usage credential is ever sent to (design T18: fenced to report endpoints). */
-export declare const REPORT_PATHS: readonly string[];
-/** The fence, as one exported check so it is directly testable. Throws AnthropicUsageError for any other path. */
-export declare function assertReportPath(path: string): void;
-/** The exact auth header to send; same shape as mnemom-api src/org-scan/usage/credential-source.ts. */
-export type AnthropicAuthHeader = {
-    header: "x-api-key";
-    value: string;
-} | {
-    header: "authorization";
-    value: string;
-};
-export declare const DEFAULT_MAX_PAGES = 20;
-/** One shared deadline for a request including its retries (not N x timeout). */
-export declare const DEFAULT_TIMEOUT_MS = 15000;
-export declare const DEFAULT_MAX_RETRIES = 2;
-/** Shape check only; the key is never echoed, even on a mismatch. */
-export declare const isAdminKeyShape: (k: unknown) => k is string;
-export type UsageFailure = "key_invalid" | "key_refused" | "token_refused" | "rate_limited" | "timeout" | "network" | "upstream" | "malformed" | "too_large";
-/** Fixed sentence for a failure reason. */
-export declare const usageFailureText: (r: UsageFailure) => string;
-/** Carries only a reason tag. Its message is the fixed sentence: nothing upstream can reach it. */
-export declare class AnthropicUsageError extends Error {
-    readonly reason: UsageFailure;
-    constructor(reason: UsageFailure);
-}
-export type ContextWindow = "0-200k" | "200k-1M";
-export interface UsageRow {
-    tokens: number;
-    contextWindow: ContextWindow | null;
-}
-export interface Page<R> {
-    rows: R[];
-    truncated: boolean;
-    pages: number;
-}
-export interface CostRow {
-    /** Cents, as Anthropic returns it (a decimal string). */
-    cents: number;
-    currency: string;
-}
-export interface AnthropicUsageDeps {
-    fetchImpl?: typeof fetch;
-    sleep?: (ms: number) => Promise<void>;
-    maxPages?: number;
-    timeoutMs?: number;
-    maxRetries?: number;
-}
-export declare function parseUsageRow(raw: unknown): UsageRow;
-export declare function parseCostRow(raw: unknown): CostRow;
-/** Buckets are UTC-aligned: floor so a mid-day start reads the whole bucket it falls in. */
-export declare function alignStartingAt(startingAt: string): string;
-export interface MeasuredUsage {
-    /** Whole-org cost over the period, in USD. */
-    usd: number;
-    /** Fraction in [0, 1] of tokens from requests in the 200k-1M context window; null with no tokens. */
-    over200kShare: number | null;
-}
-/**
- * The same two reads mnemom-api made: usage grouped by context_window (the exact >200k share) and cost
- * (total spend). The key is shape-checked before any call so a regular API key never leaves the machine.
- * Throws AnthropicUsageError only. A walk stopped by the page cap is an error, never a short total.
- */
-export declare function fetchMeasuredUsage(key: string | undefined, period: {
-    start: string;
-    end: string;
-}, deps?: AnthropicUsageDeps): Promise<MeasuredUsage>;
-/** A WIF access token as the bearer for the two report reads. Printable ASCII only, else key_invalid. */
-export declare function bearerAuth(token: string): AnthropicAuthHeader;
-/** The two reads with an already-resolved credential (pasted key or WIF bearer). Throws AnthropicUsageError only. */
-export declare function fetchMeasuredUsageWithAuth(auth: AnthropicAuthHeader, period: {
-    start: string;
-    end: string;
-}, deps?: AnthropicUsageDeps): Promise<MeasuredUsage>;
+export * from "../../../vendor/shared/org-scan-core/spend/anthropic-usage.js";

package/dist/lib/scan/spend/anthropic-usage.js

@@ -1,269 +1,2 @@
-// MNE-9298 Tier 1: the CTO's own Anthropic Admin key, used LOCALLY, to read measured usage. Port of
-// mnemom-api src/org-scan/usage/usage-client.ts (two read-only GETs: usage_report/messages grouped by
-// context_window, and cost_report) with the server-only parts (egress allowlist) dropped.
-//
-// MNE-9706: the reads take either credential, as the server's credential-source.ts does: the pasted Admin
-// key (x-api-key) or a short-lived WIF access token (Authorization: Bearer, see anthropic-wif.ts). Either
-// one is sent ONLY to the two report paths below; walk() refuses any other path (the fence, design T18:
-// Anthropic's WIF scope for these reports is org:admin, so the fence has to live here).
-//
-// The key is held in memory for the length of the two reads. It is never stored, logged, written to disk,
-// echoed, put in argv, a URL or an error message, and is sent only to api.anthropic.com (a constant, not
-// configurable) in the x-api-key header. Every failure surfaces as a fixed sentence: the thrown value, the
-// response body and the key never reach the terminal.
-export const ANTHROPIC_ADMIN_ORIGIN = "https://api.anthropic.com";
-export const ADMIN_KEY_ENV = "ANTHROPIC_ADMIN_KEY";
-const ANTHROPIC_VERSION = "2023-06-01";
-const USAGE_PATH = "/v1/organizations/usage_report/messages";
-const COST_PATH = "/v1/organizations/cost_report";
-/** The only paths a usage credential is ever sent to (design T18: fenced to report endpoints). */
-export const REPORT_PATHS = [USAGE_PATH, COST_PATH];
-/** The fence, as one exported check so it is directly testable. Throws AnthropicUsageError for any other path. */
-export function assertReportPath(path) {
-    if (!REPORT_PATHS.includes(path))
-        throw new AnthropicUsageError("malformed");
-}
-export const DEFAULT_MAX_PAGES = 20;
-/** One shared deadline for a request including its retries (not N x timeout). */
-export const DEFAULT_TIMEOUT_MS = 15_000;
-export const DEFAULT_MAX_RETRIES = 2;
-const MAX_RETRY_WAIT_MS = 5_000;
-const ADMIN_KEY_RE = /^sk-ant-admin[A-Za-z0-9_-]{8,}$/;
-/** Shape check only; the key is never echoed, even on a mismatch. */
-export const isAdminKeyShape = (k) => typeof k === "string" && ADMIN_KEY_RE.test(k.trim());
-const FAILURE_TEXT = {
-    key_invalid: "The Anthropic admin key is not an Admin API key (it should start with sk-ant-admin).",
-    key_refused: "Anthropic refused the admin key (401/403).",
-    token_refused: "Anthropic refused the workload identity token for the usage reports (401/403). The federation rule needs scope org:admin.",
-    rate_limited: "Anthropic rate limit reached.",
-    timeout: "Anthropic did not answer in time.",
-    network: "Anthropic was unreachable.",
-    upstream: "Anthropic usage could not be read.",
-    malformed: "Anthropic returned usage in a shape this CLI does not recognise.",
-    too_large: "Anthropic usage for this period is too large to read completely.",
-};
-/** Fixed sentence for a failure reason. */
-export const usageFailureText = (r) => FAILURE_TEXT[r];
-/** Carries only a reason tag. Its message is the fixed sentence: nothing upstream can reach it. */
-export class AnthropicUsageError extends Error {
-    reason;
-    constructor(reason) {
-        super(FAILURE_TEXT[reason]);
-        this.reason = reason;
-        this.name = "AnthropicUsageError";
-    }
-}
-const bad = () => {
-    throw new AnthropicUsageError("malformed");
-};
-const rec = (v) => v && typeof v === "object" && !Array.isArray(v) ? v : bad();
-function reqNum(r, k) {
-    const v = r[k];
-    return typeof v === "number" && Number.isFinite(v) && v >= 0 ? v : bad();
-}
-/** Optional counter inside an optional object: absent is 0, present-but-wrong is an error. */
-function optNum(o, k) {
-    if (o === undefined || o === null)
-        return 0;
-    if (typeof o !== "object")
-        return bad();
-    const v = o[k];
-    if (v === undefined || v === null)
-        return 0;
-    return typeof v === "number" && Number.isFinite(v) && v >= 0 ? v : bad();
-}
-export function parseUsageRow(raw) {
-    const r = rec(raw);
-    const cw = r.context_window;
-    if (cw !== null && cw !== undefined && cw !== "0-200k" && cw !== "200k-1M")
-        bad();
-    return {
-        tokens: reqNum(r, "uncached_input_tokens") +
-            reqNum(r, "cache_read_input_tokens") +
-            reqNum(r, "output_tokens") +
-            optNum(r.cache_creation, "ephemeral_1h_input_tokens") +
-            optNum(r.cache_creation, "ephemeral_5m_input_tokens"),
-        contextWindow: (cw ?? null),
-    };
-}
-const CENT = /^-?\d+(\.\d+)?$/;
-export function parseCostRow(raw) {
-    const r = rec(raw);
-    if (typeof r.amount !== "string" || !CENT.test(r.amount))
-        bad();
-    if (typeof r.currency !== "string" || r.currency === "")
-        bad();
-    return { cents: Number(r.amount), currency: r.currency };
-}
-const DAY_MS = 86_400_000;
-/** Buckets are UTC-aligned: floor so a mid-day start reads the whole bucket it falls in. */
-export function alignStartingAt(startingAt) {
-    const t = Date.parse(startingAt);
-    if (!Number.isFinite(t))
-        return startingAt;
-    return new Date(Math.floor(t / DAY_MS) * DAY_MS).toISOString().replace(".000Z", "Z");
-}
-const backoff = (attempt) => Math.min(250 * 2 ** (attempt - 1), MAX_RETRY_WAIT_MS);
-function retryWait(res, attempt) {
-    const ra = Number(res.headers.get("retry-after"));
-    return Number.isFinite(ra) && ra > 0 ? ra * 1000 : backoff(attempt);
-}
-class Reader {
-    auth;
-    fetchImpl;
-    sleep;
-    maxPages;
-    timeoutMs;
-    maxRetries;
-    constructor(auth, deps) {
-        this.auth = auth;
-        this.fetchImpl = deps.fetchImpl ?? ((...a) => fetch(...a));
-        this.sleep = deps.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
-        this.maxPages = deps.maxPages ?? DEFAULT_MAX_PAGES;
-        this.timeoutMs = deps.timeoutMs ?? DEFAULT_TIMEOUT_MS;
-        this.maxRetries = deps.maxRetries ?? DEFAULT_MAX_RETRIES;
-    }
-    async walk(path, base, parse, callMaxPages) {
-        // The fence: the credential goes to the two report paths and nowhere else.
-        assertReportPath(path);
-        const ceiling = typeof callMaxPages === "number" && Number.isFinite(callMaxPages) && callMaxPages >= 1
-            ? Math.min(this.maxPages, Math.floor(callMaxPages))
-            : this.maxPages;
-        const rows = [];
-        let page = null;
-        let pages = 0;
-        for (;;) {
-            const params = new URLSearchParams(base);
-            if (page)
-                params.set("page", page);
-            const body = await this.request(`${ANTHROPIC_ADMIN_ORIGIN}${path}?${params.toString()}`);
-            pages += 1;
-            if (!Array.isArray(body.data))
-                bad();
-            for (const raw of body.data) {
-                const b = rec(raw);
-                if (typeof b.starting_at !== "string" || typeof b.ending_at !== "string")
-                    bad();
-                if (!Array.isArray(b.results))
-                    bad();
-                for (const r of b.results)
-                    rows.push(parse(r));
-            }
-            const more = body.has_more;
-            if (more !== undefined && more !== null && typeof more !== "boolean")
-                bad();
-            if (more !== true)
-                return { rows, truncated: false, pages };
-            if (typeof body.next_page !== "string" || body.next_page === "")
-                bad();
-            if (pages >= ceiling)
-                return { rows, truncated: true, pages };
-            page = body.next_page;
-        }
-    }
-    async request(url) {
-        const deadline = AbortSignal.timeout(this.timeoutMs);
-        for (let attempt = 0;;) {
-            let res;
-            try {
-                res = await this.fetchImpl(url, {
-                    method: "GET",
-                    headers: {
-                        [this.auth.header]: this.auth.value,
-                        "anthropic-version": ANTHROPIC_VERSION,
-                        accept: "application/json",
-                    },
-                    // A redirect would carry the x-api-key header to wherever it points: refuse to follow one.
-                    redirect: "error",
-                    signal: deadline,
-                });
-            }
-            catch {
-                // Never surface the thrown value: it can carry the request.
-                if (deadline.aborted)
-                    throw new AnthropicUsageError("timeout");
-                if (attempt++ < this.maxRetries) {
-                    await this.sleep(backoff(attempt));
-                    continue;
-                }
-                throw new AnthropicUsageError("network");
-            }
-            if (res.ok) {
-                let json;
-                try {
-                    json = await res.json();
-                }
-                catch {
-                    throw new AnthropicUsageError("upstream");
-                }
-                return rec(json);
-            }
-            await res.body?.cancel().catch(() => { });
-            if (res.status === 401 || res.status === 403)
-                throw new AnthropicUsageError(this.auth.header === "x-api-key" ? "key_refused" : "token_refused");
-            const retryable = res.status === 429 || res.status >= 500;
-            const wait = retryable ? retryWait(res, attempt + 1) : 0;
-            if (retryable &&
-                !deadline.aborted &&
-                wait <= MAX_RETRY_WAIT_MS &&
-                attempt++ < this.maxRetries) {
-                await this.sleep(wait);
-                continue;
-            }
-            throw new AnthropicUsageError(res.status === 429 ? "rate_limited" : "upstream");
-        }
-    }
-}
-const validDay = (d) => /^\d{4}-\d{2}-\d{2}$/.test(d) && Number.isFinite(Date.parse(`${d}T00:00:00Z`));
-/**
- * The same two reads mnemom-api made: usage grouped by context_window (the exact >200k share) and cost
- * (total spend). The key is shape-checked before any call so a regular API key never leaves the machine.
- * Throws AnthropicUsageError only. A walk stopped by the page cap is an error, never a short total.
- */
-export async function fetchMeasuredUsage(key, period, deps = {}) {
-    const k = key?.trim();
-    if (!k || !isAdminKeyShape(k))
-        throw new AnthropicUsageError("key_invalid");
-    return fetchMeasuredUsageWithAuth({ header: "x-api-key", value: k }, period, deps);
-}
-/** A WIF access token as the bearer for the two report reads. Printable ASCII only, else key_invalid. */
-export function bearerAuth(token) {
-    if (!/^[\x21-\x7e]{8,4096}$/.test(token))
-        throw new AnthropicUsageError("key_invalid");
-    return { header: "authorization", value: `Bearer ${token}` };
-}
-/** The two reads with an already-resolved credential (pasted key or WIF bearer). Throws AnthropicUsageError only. */
-export async function fetchMeasuredUsageWithAuth(auth, period, deps = {}) {
-    if (!validDay(period.start) || !validDay(period.end))
-        throw new AnthropicUsageError("malformed");
-    const startingAt = alignStartingAt(`${period.start}T00:00:00Z`);
-    const endingAt = new Date(Date.parse(`${period.end}T00:00:00Z`) + DAY_MS).toISOString();
-    const reader = new Reader(auth, deps);
-    const up = new URLSearchParams({
-        starting_at: startingAt,
-        ending_at: endingAt,
-        bucket_width: "1d",
-    });
-    up.append("group_by[]", "context_window");
-    const usage = await reader.walk(USAGE_PATH, up, parseUsageRow);
-    if (usage.truncated)
-        throw new AnthropicUsageError("too_large");
-    const cp = new URLSearchParams({ starting_at: startingAt, ending_at: endingAt });
-    const cost = await reader.walk(COST_PATH, cp, parseCostRow);
-    if (cost.truncated)
-        throw new AnthropicUsageError("too_large");
-    let total = 0;
-    let over = 0;
-    for (const r of usage.rows) {
-        total += r.tokens;
-        if (r.contextWindow === "200k-1M")
-            over += r.tokens;
-    }
-    let cents = 0;
-    for (const r of cost.rows) {
-        if (r.currency !== "USD")
-            throw new AnthropicUsageError("malformed");
-        cents += r.cents;
-    }
-    return { usd: Math.round(cents) / 100, over200kShare: total > 0 ? over / total : null };
-}
+// Moved to shared/org-scan-core (MNE-9752); vendored at cli/src/vendor/shared/org-scan-core. Re-exported so CLI imports stay put.
+export * from "../../../vendor/shared/org-scan-core/spend/anthropic-usage.js";

package/dist/lib/scan/spend/prices.d.ts

@@ -1,33 +1 @@
-export type AiTool = "claude_code" | "codex" | "copilot" | "gemini";
-export interface TokenPrice {
-    /** USD per 1M input tokens. */
-    inputPerMTok: number;
-    /** USD per 1M output tokens. */
-    outputPerMTok: number;
-    model: string;
-}
-export interface PriceBand {
-    low: TokenPrice;
-    high: TokenPrice;
-    /** Page the prices were read from. */
-    source: string;
-}
-export declare const PRICES_AS_OF = "2026-10-28";
-export declare const TOOL_PRICES: Record<Exclude<AiTool, "copilot">, PriceBand>;
-/**
- * GitHub Copilot bills per premium request, not per token
- * (https://docs.github.com/en/copilot/concepts/billing/copilot-requests),
- * so it has no token price of its own. Its agent routes to the other vendors' models, so its band is
- * the union of the other three: cheapest low to dearest high. An assumption, stated here once.
- */
-export declare function copilotBand(): PriceBand;
-/**
- * Share of billed tokens that are input (the rest output). Agent loops re-read large context and
- * write little, so input dominates. An ASSUMPTION used both to turn our known run cost into
- * tokens-per-line and to price those tokens for each tool; it cancels to first order when the
- * tool's input/output price ratio matches ours, and is the main source of the range's width.
- */
-export declare const INPUT_SHARE = 0.9;
-export declare function bandFor(tool: AiTool): PriceBand;
-/** USD per token at the assumed input/output mix. */
-export declare function blendedUsdPerToken(p: TokenPrice): number;
+export * from "../../../vendor/shared/org-scan-core/spend/prices.js";

package/dist/lib/scan/spend/prices.js

@@ -1,57 +1,2 @@
-// MNE-9268: public list prices for the AI coding tools the Tier-3 spend estimator can name.
-// Constants, not magic numbers: every row carries its source page and the date it was read.
-// USD per million tokens (input / output), standard (non-batch) list price. A band is the cheapest
-// and the dearest model a tool's coding agent plausibly runs on, so the estimate is a RANGE.
-// Re-read the pages and bump PRICES_AS_OF when they move; a stale price widens nothing silently,
-// it just shifts the range, which is why the date ships with the estimate's method text.
-export const PRICES_AS_OF = "2026-10-28";
-export const TOOL_PRICES = {
-    claude_code: {
-        source: "https://platform.claude.com/docs/en/about-claude/pricing",
-        low: { model: "Claude Sonnet 5.5", inputPerMTok: 2, outputPerMTok: 10 },
-        high: { model: "Claude Opus 5", inputPerMTok: 5, outputPerMTok: 25 },
-    },
-    codex: {
-        source: "https://developers.openai.com/api/docs/pricing",
-        low: { model: "gpt-5.3-codex (standard)", inputPerMTok: 1.75, outputPerMTok: 14 },
-        high: { model: "gpt-5.3-codex (fast)", inputPerMTok: 3.5, outputPerMTok: 28 },
-    },
-    gemini: {
-        source: "https://ai.google.dev/gemini-api/docs/pricing",
-        // Gemini 3.8 Flash is $0.75/$3.75 through 2026-12-31 and $1.50/$7.50 from 2027-01-01; the
-        // post-promotion price is used so the lower bound does not expire in two months.
-        low: { model: "Gemini 3.8 Flash (from 2027-01-01)", inputPerMTok: 1.5, outputPerMTok: 7.5 },
-        high: { model: "Gemini 3.1 Pro (prompts up to 200k)", inputPerMTok: 2, outputPerMTok: 12 },
-    },
-};
-/**
- * GitHub Copilot bills per premium request, not per token
- * (https://docs.github.com/en/copilot/concepts/billing/copilot-requests),
- * so it has no token price of its own. Its agent routes to the other vendors' models, so its band is
- * the union of the other three: cheapest low to dearest high. An assumption, stated here once.
- */
-export function copilotBand() {
-    const bands = Object.values(TOOL_PRICES);
-    const blend = (p) => p.inputPerMTok * INPUT_SHARE + p.outputPerMTok * (1 - INPUT_SHARE);
-    const low = bands.map((b) => b.low).sort((a, b) => blend(a) - blend(b))[0];
-    const high = bands.map((b) => b.high).sort((a, b) => blend(b) - blend(a))[0];
-    return {
-        low,
-        high,
-        source: "union of the claude_code, codex and gemini bands (per-request billing)",
-    };
-}
-/**
- * Share of billed tokens that are input (the rest output). Agent loops re-read large context and
- * write little, so input dominates. An ASSUMPTION used both to turn our known run cost into
- * tokens-per-line and to price those tokens for each tool; it cancels to first order when the
- * tool's input/output price ratio matches ours, and is the main source of the range's width.
- */
-export const INPUT_SHARE = 0.9;
-export function bandFor(tool) {
-    return tool === "copilot" ? copilotBand() : TOOL_PRICES[tool];
-}
-/** USD per token at the assumed input/output mix. */
-export function blendedUsdPerToken(p) {
-    return (p.inputPerMTok * INPUT_SHARE + p.outputPerMTok * (1 - INPUT_SHARE)) / 1_000_000;
-}
+// Moved to shared/org-scan-core (MNE-9752); vendored at cli/src/vendor/shared/org-scan-core. Re-exported so CLI imports stay put.
+export * from "../../../vendor/shared/org-scan-core/spend/prices.js";

package/dist/lib/scan/spend/spend-estimate.d.ts

@@ -1,30 +1 @@
-import { type AiTool } from "./prices.js";
-import { type TokenRate } from "./token-rate.js";
-/** AI-assisted PRs needed before a range is worth printing. */
-export declare const MIN_AI_PRS = 10;
-/** Per-PR input. `markText` is commit messages / PR body, read for tool marks and dropped. */
-export interface SpendPrInput {
-    additions: number;
-    deletions: number;
-    markText: string;
-    /** Tools already detected inside the PR source (so the body never leaves it). Wins over markText. */
-    tools?: AiTool[];
-}
-export type NoSpendReason = "too_few_ai_prs" | "no_rate" | "invalid_input";
-export type SpendEstimate = {
-    kind: "range";
-    lowUsd: number;
-    highUsd: number;
-    aiPrs: number;
-    scannedPrs: number;
-    byTool: Partial<Record<AiTool, number>>;
-    /** One line, labelled estimate, passes claim-lint. */
-    line: string;
-} | {
-    kind: "none";
-    reason: NoSpendReason;
-    aiPrs: number;
-    scannedPrs: number;
-    line: string;
-};
-export declare function estimateSpend(prs: unknown, rate?: TokenRate | null): SpendEstimate;
+export * from "../../../vendor/shared/org-scan-core/spend/spend-estimate.js";

package/dist/lib/scan/spend/spend-estimate.js

@@ -1,70 +1,2 @@
-// MNE-9268: Tier-3 spend RANGE estimator. Pure and in-memory: takes per-PR counts and mark text, returns
-// one labelled estimate line or an explicit "no estimate". Nothing is stored, fetched or logged.
-//
-// No line is produced when there are too few AI-assisted PRs to price (MIN_AI_PRS). That is a
-// data-sufficiency threshold on the evidence behind the range, nothing to do with how large a
-// reporting cohort is. Default-OFF behind ORG_SCAN_MODE via estimateSpendIfEnabled.
-import { AI_TOOLS, detectAiTools } from "./ai-tool-detect.js";
-import { PRICES_AS_OF, bandFor, blendedUsdPerToken } from "./prices.js";
-import { DERIVED_TOKEN_RATE } from "./token-rate.js";
-/** AI-assisted PRs needed before a range is worth printing. */
-export const MIN_AI_PRS = 10;
-/** Fixed strings only: a failure never carries input or an error message into the output. */
-const NONE_LINES = {
-    too_few_ai_prs: "No spend estimate: too few AI-assisted PRs in this scan to price a range.",
-    no_rate: "No spend estimate: the cost reference data is not sufficient to price a range.",
-    invalid_input: "No spend estimate: the PR counts could not be read.",
-};
-const isCount = (n) => typeof n === "number" && Number.isFinite(n) && n >= 0;
-function none(reason, aiPrs, scannedPrs) {
-    return { kind: "none", reason, aiPrs, scannedPrs, line: NONE_LINES[reason] };
-}
-function validPr(p) {
-    if (typeof p !== "object" || p === null)
-        return false;
-    const o = p;
-    return (isCount(o.additions) &&
-        isCount(o.deletions) &&
-        typeof o.markText === "string" &&
-        (o.tools === undefined ||
-            (Array.isArray(o.tools) && o.tools.every((t) => AI_TOOLS.includes(t)))));
-}
-/** Two significant figures so the range does not claim precision it lacks ($2.4, not $2; 0 stays $0). */
-function usd(n) {
-    return `$${n.toLocaleString("en-US", { maximumSignificantDigits: 2 })}`;
-}
-export function estimateSpend(prs, rate = DERIVED_TOKEN_RATE) {
-    if (!Array.isArray(prs))
-        return none("invalid_input", 0, 0);
-    const scanned = prs.length;
-    if (!prs.every(validPr))
-        return none("invalid_input", 0, scanned);
-    let aiPrs = 0;
-    let low = 0;
-    let high = 0;
-    const byTool = {};
-    for (const p of prs) {
-        const tools = p.tools ?? detectAiTools(p.markText);
-        if (tools.length === 0)
-            continue;
-        aiPrs += 1;
-        for (const t of tools)
-            byTool[t] = (byTool[t] ?? 0) + 1;
-        if (!rate)
-            continue;
-        const lines = p.additions + p.deletions;
-        // A PR carrying several marks is priced once, across the widest band of the tools named.
-        const bands = tools.map(bandFor);
-        const lo = Math.min(...bands.map((b) => blendedUsdPerToken(b.low)));
-        const hi = Math.max(...bands.map((b) => blendedUsdPerToken(b.high)));
-        low += lines * rate.low * lo;
-        high += lines * rate.high * hi;
-    }
-    if (aiPrs < MIN_AI_PRS)
-        return none("too_few_ai_prs", aiPrs, scanned);
-    if (!rate)
-        return none("no_rate", aiPrs, scanned);
-    const line = `Estimate, AI tool spend: ${usd(low)} to ${usd(high)} across ${aiPrs} AI-assisted PRs ` +
-        `(public list prices as of ${PRICES_AS_OF} times a tokens-per-line rate from our own agents' PRs; not billing data).`;
-    return { kind: "range", lowUsd: low, highUsd: high, aiPrs, scannedPrs: scanned, byTool, line };
-}
+// Moved to shared/org-scan-core (MNE-9752); vendored at cli/src/vendor/shared/org-scan-core. Re-exported so CLI imports stay put.
+export * from "../../../vendor/shared/org-scan-core/spend/spend-estimate.js";